abe auch täglich bluescreens und wollte diese Diagnose laut Anleitung durchführen.
Leider kommt bei reload symbol files path folgende Meldung:
was mach ich denn verkehrt???
Habe dann trotzdem analyze v gedrückt und das folgende erhalten:
IRQL_NOT_LESS_OR_EQUAL (a)
An attempt was made to access a pageable (or completely invalid) address at an
interrupt request level (IRQL) that is too high. This is usually
caused by drivers using improper addresses.
If a kernel debugger is available get the stack backtrace.
Arguments:
Arg1: 0000ffe0, memory referenced
Arg2: 00000002, IRQL
Arg3: 00000000, bitfield :
bit 0 : value 0 = read operation, 1 = write operation
bit 3 : value 0 = not an execute operation, 1 = execute operation (only on chips which support this level of status)
Arg4: 81c81934, address which referenced memory
Debugging Details:
------------------
Page 82367c too large to be in the dump file.
GetContextState failed, 0x80004002
Unable to read selector for PCR for processor 1
Page 82367c too large to be in the dump file.
GetContextState failed, 0x80004002
Unable to read selector for PCR for processor 1
Page 0 not present in the dump file. Type ".hh dbgerr004" for details
Page d09ade too large to be in the dump file.
Page 400350 too large to be in the dump file.
Missing image name, possible paged-out or corrupt data.
Unable to read KLDR_DATA_TABLE_ENTRY at 00410039 - NTSTATUS 0xC0000147
WARNING: .reload failed, module list may be incomplete
Page 0 not present in the dump file. Type ".hh dbgerr004" for details
Page d09ade too large to be in the dump file.
Page 400350 too large to be in the dump file.
Missing image name, possible paged-out or corrupt data.
Unable to read KLDR_DATA_TABLE_ENTRY at 00410039 - NTSTATUS 0xC0000147
WARNING: .reload failed, module list may be incomplete
READ_ADDRESS: 0000ffe0
CURRENT_IRQL: 2
FAULTING_IP:
nt!ExpScanGeneralLookasideList+22
81c81934 8b51e0 mov edx,dword ptr [ecx-20h]
DEFAULT_BUCKET_ID: VISTA_DRIVER_FAULT
BUGCHECK_STR: 0xA
PROCESS_NAME: System
TRAP_FRAME: 86b8fc4c -- (.trap 0xffffffff86b8fc4c)
ErrCode = 00000000
eax=00000000 ebx=00006f73 ecx=00010000 edx=00000000 esi=f5f12219 edi=00006551
eip=81c81934 esp=86b8fcc0 ebp=86b8fcd0 iopl=0 nv up ei pl nz ac po cy
cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00010213
nt!ExpScanGeneralLookasideList+0x22:
81c81934 8b51e0 mov edx,dword ptr [ecx-20h] ds:0023:0000ffe0=????????
Resetting default scope
LAST_CONTROL_TRANSFER: from 81c81934 to 81c8dd84
STACK_TEXT:
86b8fc4c 81c81934 badb0d00 00000000 00000001 nt!KiTrap0E+0x2ac
86b8fcd0 81c6e5f8 81d35208 81d35200 00000000 nt!ExpScanGeneralLookasideList+0x22
86b8fd7c 81e08b18 00000000 86497688 00000000 nt!KeBalanceSetManager+0x110
86b8fdc0 81c61a3e 81c6e4e8 00000000 00000000 nt!PspSystemThreadStartup+0x9d
00000000 00000000 00000000 00000000 00000000 nt!KiThreadStartup+0x16
STACK_COMMAND: kb
FOLLOWUP_IP:
nt!ExpScanGeneralLookasideList+22
81c81934 8b51e0 mov edx,dword ptr [ecx-20h]
SYMBOL_STACK_INDEX: 1
SYMBOL_NAME: nt!ExpScanGeneralLookasideList+22
FOLLOWUP_NAME: MachineOwner
MODULE_NAME: nt
IMAGE_NAME: ntkrpamp.exe
DEBUG_FLR_IMAGE_TIMESTAMP: 4812bd71
FAILURE_BUCKET_ID: 0xA_nt!ExpScanGeneralLookasideList+22
BUCKET_ID: 0xA_nt!ExpScanGeneralLookasideList+22
Followup: MachineOwner
---------
was sagt mir das????? also mir nix aber euch vielleicht? Bitte Hilfe
Leider kommt bei reload symbol files path folgende Meldung:
Microsoft (R) Windows Debugger Version 6.9.0003.113 X86
Copyright (c) Microsoft Corporation. All rights reserved.
Loading Dump File [C:\Windows\MEMORY.DMP]
Kernel Summary Dump File: Only kernel address space is available
Symbol search path is: SRV*C:\symbols*Symbol information
Executable search path is:
Windows Server 2008 Kernel Version 6001 (Service Pack 1) MP (2 procs) Free x86 compatible
Product: WinNt, suite: TerminalServer SingleUserTS Personal
Built by: 6001.18063.x86fre.vistasp1_gdr.080425-1930
Kernel base = 0x81c33000 PsLoadedModuleList = 0x81d4ac70
Debug session time: Sun Aug 10 18:59:43.297 2008 (GMT+2)
System Uptime: 0 days 12:12:46.775
Loading Kernel Symbols
...Page 0 not present in the dump file. Type ".hh dbgerr004" for details
.Page d09ade too large to be in the dump file.
...Page 400350 too large to be in the dump file.
...................................Missing image name, possible paged-out or corrupt data.
.Unable to read KLDR_DATA_TABLE_ENTRY at 00410039 - NTSTATUS 0xC0000147
Loading unloaded module list
.....
WARNING: .reload failed, module list may be incomplete
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
Use !analyze -v to get detailed debugging information.
BugCheck A, {ffe0, 2, 0, 81c81934}
Page 82367c too large to be in the dump file.
GetContextState failed, 0x80004002
Unable to read selector for PCR for processor 1
Page 82367c too large to be in the dump file.
GetContextState failed, 0x80004002
Unable to read selector for PCR for processor 1
Page 0 not present in the dump file. Type ".hh dbgerr004" for details
Page d09ade too large to be in the dump file.
Page 400350 too large to be in the dump file.
Missing image name, possible paged-out or corrupt data.
Unable to read KLDR_DATA_TABLE_ENTRY at 00410039 - NTSTATUS 0xC0000147
WARNING: .reload failed, module list may be incomplete
Page 0 not present in the dump file. Type ".hh dbgerr004" for details
Page d09ade too large to be in the dump file.
Page 400350 too large to be in the dump file.
Missing image name, possible paged-out or corrupt data.
Unable to read KLDR_DATA_TABLE_ENTRY at 00410039 - NTSTATUS 0xC0000147
WARNING: .reload failed, module list may be incomplete
Probably caused by : ntkrpamp.exe ( nt!ExpScanGeneralLookasideList+22 )
Followup: MachineOwner
---------
0: kd> .reload
Loading Kernel Symbols
...Page 0 not present in the dump file. Type ".hh dbgerr004" for details
.Page d09ade too large to be in the dump file.
...Page 400350 too large to be in the dump file.
...................................Missing image name, possible paged-out or corrupt data.
.Unable to read KLDR_DATA_TABLE_ENTRY at 00410039 - NTSTATUS 0xC0000147
Loading unloaded module list
.....
WARNING: .reload failed, module list may be incomplete
0: kd> .reload
Loading Kernel Symbols
...Page 0 not present in the dump file. Type ".hh dbgerr004" for details
.Page d09ade too large to be in the dump file.
...Page 400350 too large to be in the dump file.
...................................Missing image name, possible paged-out or corrupt data.
.Unable to read KLDR_DATA_TABLE_ENTRY at 00410039 - NTSTATUS 0xC0000147
Loading unloaded module list
.....
WARNING: .reload failed, module list may be incomplete
0: kd> .reload
Loading Kernel Symbols
...Page 0 not present in the dump file. Type ".hh dbgerr004" for details
.Page d09ade too large to be in the dump file.
...Page 400350 too large to be in the dump file.
...................................Missing image name, possible paged-out or corrupt data.
.Unable to read KLDR_DATA_TABLE_ENTRY at 00410039 - NTSTATUS 0xC0000147
Loading unloaded module list
.....
WARNING: .reload failed, module list may be incomplete
Copyright (c) Microsoft Corporation. All rights reserved.
Loading Dump File [C:\Windows\MEMORY.DMP]
Kernel Summary Dump File: Only kernel address space is available
Symbol search path is: SRV*C:\symbols*Symbol information
Executable search path is:
Windows Server 2008 Kernel Version 6001 (Service Pack 1) MP (2 procs) Free x86 compatible
Product: WinNt, suite: TerminalServer SingleUserTS Personal
Built by: 6001.18063.x86fre.vistasp1_gdr.080425-1930
Kernel base = 0x81c33000 PsLoadedModuleList = 0x81d4ac70
Debug session time: Sun Aug 10 18:59:43.297 2008 (GMT+2)
System Uptime: 0 days 12:12:46.775
Loading Kernel Symbols
...Page 0 not present in the dump file. Type ".hh dbgerr004" for details
.Page d09ade too large to be in the dump file.
...Page 400350 too large to be in the dump file.
...................................Missing image name, possible paged-out or corrupt data.
.Unable to read KLDR_DATA_TABLE_ENTRY at 00410039 - NTSTATUS 0xC0000147
Loading unloaded module list
.....
WARNING: .reload failed, module list may be incomplete
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
Use !analyze -v to get detailed debugging information.
BugCheck A, {ffe0, 2, 0, 81c81934}
Page 82367c too large to be in the dump file.
GetContextState failed, 0x80004002
Unable to read selector for PCR for processor 1
Page 82367c too large to be in the dump file.
GetContextState failed, 0x80004002
Unable to read selector for PCR for processor 1
Page 0 not present in the dump file. Type ".hh dbgerr004" for details
Page d09ade too large to be in the dump file.
Page 400350 too large to be in the dump file.
Missing image name, possible paged-out or corrupt data.
Unable to read KLDR_DATA_TABLE_ENTRY at 00410039 - NTSTATUS 0xC0000147
WARNING: .reload failed, module list may be incomplete
Page 0 not present in the dump file. Type ".hh dbgerr004" for details
Page d09ade too large to be in the dump file.
Page 400350 too large to be in the dump file.
Missing image name, possible paged-out or corrupt data.
Unable to read KLDR_DATA_TABLE_ENTRY at 00410039 - NTSTATUS 0xC0000147
WARNING: .reload failed, module list may be incomplete
Probably caused by : ntkrpamp.exe ( nt!ExpScanGeneralLookasideList+22 )
Followup: MachineOwner
---------
0: kd> .reload
Loading Kernel Symbols
...Page 0 not present in the dump file. Type ".hh dbgerr004" for details
.Page d09ade too large to be in the dump file.
...Page 400350 too large to be in the dump file.
...................................Missing image name, possible paged-out or corrupt data.
.Unable to read KLDR_DATA_TABLE_ENTRY at 00410039 - NTSTATUS 0xC0000147
Loading unloaded module list
.....
WARNING: .reload failed, module list may be incomplete
0: kd> .reload
Loading Kernel Symbols
...Page 0 not present in the dump file. Type ".hh dbgerr004" for details
.Page d09ade too large to be in the dump file.
...Page 400350 too large to be in the dump file.
...................................Missing image name, possible paged-out or corrupt data.
.Unable to read KLDR_DATA_TABLE_ENTRY at 00410039 - NTSTATUS 0xC0000147
Loading unloaded module list
.....
WARNING: .reload failed, module list may be incomplete
0: kd> .reload
Loading Kernel Symbols
...Page 0 not present in the dump file. Type ".hh dbgerr004" for details
.Page d09ade too large to be in the dump file.
...Page 400350 too large to be in the dump file.
...................................Missing image name, possible paged-out or corrupt data.
.Unable to read KLDR_DATA_TABLE_ENTRY at 00410039 - NTSTATUS 0xC0000147
Loading unloaded module list
.....
WARNING: .reload failed, module list may be incomplete
was mach ich denn verkehrt???
Habe dann trotzdem analyze v gedrückt und das folgende erhalten:
IRQL_NOT_LESS_OR_EQUAL (a)
An attempt was made to access a pageable (or completely invalid) address at an
interrupt request level (IRQL) that is too high. This is usually
caused by drivers using improper addresses.
If a kernel debugger is available get the stack backtrace.
Arguments:
Arg1: 0000ffe0, memory referenced
Arg2: 00000002, IRQL
Arg3: 00000000, bitfield :
bit 0 : value 0 = read operation, 1 = write operation
bit 3 : value 0 = not an execute operation, 1 = execute operation (only on chips which support this level of status)
Arg4: 81c81934, address which referenced memory
Debugging Details:
------------------
Page 82367c too large to be in the dump file.
GetContextState failed, 0x80004002
Unable to read selector for PCR for processor 1
Page 82367c too large to be in the dump file.
GetContextState failed, 0x80004002
Unable to read selector for PCR for processor 1
Page 0 not present in the dump file. Type ".hh dbgerr004" for details
Page d09ade too large to be in the dump file.
Page 400350 too large to be in the dump file.
Missing image name, possible paged-out or corrupt data.
Unable to read KLDR_DATA_TABLE_ENTRY at 00410039 - NTSTATUS 0xC0000147
WARNING: .reload failed, module list may be incomplete
Page 0 not present in the dump file. Type ".hh dbgerr004" for details
Page d09ade too large to be in the dump file.
Page 400350 too large to be in the dump file.
Missing image name, possible paged-out or corrupt data.
Unable to read KLDR_DATA_TABLE_ENTRY at 00410039 - NTSTATUS 0xC0000147
WARNING: .reload failed, module list may be incomplete
READ_ADDRESS: 0000ffe0
CURRENT_IRQL: 2
FAULTING_IP:
nt!ExpScanGeneralLookasideList+22
81c81934 8b51e0 mov edx,dword ptr [ecx-20h]
DEFAULT_BUCKET_ID: VISTA_DRIVER_FAULT
BUGCHECK_STR: 0xA
PROCESS_NAME: System
TRAP_FRAME: 86b8fc4c -- (.trap 0xffffffff86b8fc4c)
ErrCode = 00000000
eax=00000000 ebx=00006f73 ecx=00010000 edx=00000000 esi=f5f12219 edi=00006551
eip=81c81934 esp=86b8fcc0 ebp=86b8fcd0 iopl=0 nv up ei pl nz ac po cy
cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00010213
nt!ExpScanGeneralLookasideList+0x22:
81c81934 8b51e0 mov edx,dword ptr [ecx-20h] ds:0023:0000ffe0=????????
Resetting default scope
LAST_CONTROL_TRANSFER: from 81c81934 to 81c8dd84
STACK_TEXT:
86b8fc4c 81c81934 badb0d00 00000000 00000001 nt!KiTrap0E+0x2ac
86b8fcd0 81c6e5f8 81d35208 81d35200 00000000 nt!ExpScanGeneralLookasideList+0x22
86b8fd7c 81e08b18 00000000 86497688 00000000 nt!KeBalanceSetManager+0x110
86b8fdc0 81c61a3e 81c6e4e8 00000000 00000000 nt!PspSystemThreadStartup+0x9d
00000000 00000000 00000000 00000000 00000000 nt!KiThreadStartup+0x16
STACK_COMMAND: kb
FOLLOWUP_IP:
nt!ExpScanGeneralLookasideList+22
81c81934 8b51e0 mov edx,dword ptr [ecx-20h]
SYMBOL_STACK_INDEX: 1
SYMBOL_NAME: nt!ExpScanGeneralLookasideList+22
FOLLOWUP_NAME: MachineOwner
MODULE_NAME: nt
IMAGE_NAME: ntkrpamp.exe
DEBUG_FLR_IMAGE_TIMESTAMP: 4812bd71
FAILURE_BUCKET_ID: 0xA_nt!ExpScanGeneralLookasideList+22
BUCKET_ID: 0xA_nt!ExpScanGeneralLookasideList+22
Followup: MachineOwner
---------
was sagt mir das????? also mir nix aber euch vielleicht? Bitte Hilfe
Zuletzt bearbeitet von einem Moderator: