Bedankt, Ik zal kijken of ik de dump bestand kan analyseren. Ik heb al gegoogled naar de fout, toen kreeg ik resultaten met virtual memory maar dat leverde uiteindelijk niks op.
Is het programma BlueScreenView nog handig om te gebruiken voor dit probleem?
EDIT: Ik kom er niet helemaal uit, missschen dat iemand me er mee kan helpen.
Hierbij de link naar het dump bestand.
http://www.mediafire.com/?k8129j75810818o
Edit2: Heb nu de dump geanalyseerd. winint.exe lijkt de veroorzaker te zijn.
code:
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
| Microsoft (R) Windows Debugger Version 6.12.0002.633 AMD64
Copyright (c) Microsoft Corporation. All rights reserved.
Loading Dump File [C:\Users\Emrullah Çiçek\Desktop\030411-23259-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available
Symbol search path is: SRV*c:\symbols*http://msdl.microsoft.com/download/symbols
Executable search path is:
Windows 7 Kernel Version 7601 (Service Pack 1) MP (2 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 7601.17514.amd64fre.win7sp1_rtm.101119-1850
Machine Name:
Kernel base = 0xfffff800`0284f000 PsLoadedModuleList = 0xfffff800`02a94e90
Debug session time: Fri Mar 4 21:37:12.068 2011 (UTC + 1:00)
System Uptime: 0 days 0:46:01.629
Loading Kernel Symbols
...............................................................
................................................................
................
Loading User Symbols
Loading unloaded module list
........
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
Use !analyze -v to get detailed debugging information.
BugCheck F4, {3, fffffa8006c88060, fffffa8006c88340, fffff80002bd2db0}
Probably caused by : wininit.exe
Followup: MachineOwner
---------
1: kd> !analyze -v
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
CRITICAL_OBJECT_TERMINATION (f4)
A process or thread crucial to system operation has unexpectedly exited or been
terminated.
Several processes and threads are necessary for the operation of the
system; when they are terminated (for any reason), the system can no
longer function.
Arguments:
Arg1: 0000000000000003, Process
Arg2: fffffa8006c88060, Terminating object
Arg3: fffffa8006c88340, Process image file name
Arg4: fffff80002bd2db0, Explanatory message (ascii)
Debugging Details:
------------------
PROCESS_OBJECT: fffffa8006c88060
IMAGE_NAME: wininit.exe
DEBUG_FLR_IMAGE_TIMESTAMP: 0
MODULE_NAME: wininit
FAULTING_MODULE: 0000000000000000
PROCESS_NAME: wininit.exe
EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - De instructie op 0x%08lx verwijst naar geheugen op 0x%08lx. Een lees- of schrijfbewerking op het geheugen is mislukt: %s.
BUGCHECK_STR: 0xF4_C0000005
CUSTOMER_CRASH_COUNT: 1
DEFAULT_BUCKET_ID: VISTA_DRIVER_FAULT
CURRENT_IRQL: 0
STACK_TEXT:
fffff880`0793f0a8 fffff800`02c57982 : 00000000`000000f4 00000000`00000003 fffffa80`06c88060 fffffa80`06c88340 : nt!KeBugCheckEx
fffff880`0793f0b0 fffff800`02c050ab : ffffffff`ffffffff fffffa80`075ca660 fffffa80`06c88060 fffffa80`06c88060 : nt!PspCatchCriticalBreak+0x92
fffff880`0793f0f0 fffff800`02b88698 : ffffffff`ffffffff 00000000`00000001 fffffa80`06c88060 00000000`00000008 : nt! ?? ::NNGAKEGL::`string'+0x17ad6
fffff880`0793f140 fffff800`028ce8d3 : fffffa80`06c88060 fffff800`c0000005 fffffa80`075ca660 00000000`02aa0470 : nt!NtTerminateProcess+0xf4
fffff880`0793f1c0 fffff800`028cae70 : fffff800`0291b11f fffff880`0793fb38 fffff880`0793f890 fffff880`0793fbe0 : nt!KiSystemServiceCopyEnd+0x13
fffff880`0793f358 fffff800`0291b11f : fffff880`0793fb38 fffff880`0793f890 fffff880`0793fbe0 00000000`02aa1cb0 : nt!KiServiceLinkage
fffff880`0793f360 fffff800`028cecc2 : fffff880`0793fb38 00000000`00050a34 fffff880`0793fbe0 00000000`02aa1788 : nt! ?? ::FNODOBFM::`string'+0x49974
fffff880`0793fa00 fffff800`028cd83a : 00000000`00000001 00000000`02aa0a28 00000000`77b16501 00000000`00050a34 : nt!KiExceptionDispatch+0xc2
fffff880`0793fbe0 00000000`779e8e3d : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiPageFault+0x23a
00000000`02aa0a30 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x779e8e3d
STACK_COMMAND: kb
FOLLOWUP_NAME: MachineOwner
FAILURE_BUCKET_ID: X64_0xF4_C0000005_IMAGE_wininit.exe
BUCKET_ID: X64_0xF4_C0000005_IMAGE_wininit.exe
Followup: MachineOwner
---------
1: kd> !analyze -v
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
CRITICAL_OBJECT_TERMINATION (f4)
A process or thread crucial to system operation has unexpectedly exited or been
terminated.
Several processes and threads are necessary for the operation of the
system; when they are terminated (for any reason), the system can no
longer function.
Arguments:
Arg1: 0000000000000003, Process
Arg2: fffffa8006c88060, Terminating object
Arg3: fffffa8006c88340, Process image file name
Arg4: fffff80002bd2db0, Explanatory message (ascii)
Debugging Details:
------------------
PROCESS_OBJECT: fffffa8006c88060
IMAGE_NAME: wininit.exe
DEBUG_FLR_IMAGE_TIMESTAMP: 0
MODULE_NAME: wininit
FAULTING_MODULE: 0000000000000000
PROCESS_NAME: wininit.exe
EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - De instructie op 0x%08lx verwijst naar geheugen op 0x%08lx. Een lees- of schrijfbewerking op het geheugen is mislukt: %s.
BUGCHECK_STR: 0xF4_C0000005
CUSTOMER_CRASH_COUNT: 1
DEFAULT_BUCKET_ID: VISTA_DRIVER_FAULT
CURRENT_IRQL: 0
STACK_TEXT:
fffff880`0793f0a8 fffff800`02c57982 : 00000000`000000f4 00000000`00000003 fffffa80`06c88060 fffffa80`06c88340 : nt!KeBugCheckEx
fffff880`0793f0b0 fffff800`02c050ab : ffffffff`ffffffff fffffa80`075ca660 fffffa80`06c88060 fffffa80`06c88060 : nt!PspCatchCriticalBreak+0x92
fffff880`0793f0f0 fffff800`02b88698 : ffffffff`ffffffff 00000000`00000001 fffffa80`06c88060 00000000`00000008 : nt! ?? ::NNGAKEGL::`string'+0x17ad6
fffff880`0793f140 fffff800`028ce8d3 : fffffa80`06c88060 fffff800`c0000005 fffffa80`075ca660 00000000`02aa0470 : nt!NtTerminateProcess+0xf4
fffff880`0793f1c0 fffff800`028cae70 : fffff800`0291b11f fffff880`0793fb38 fffff880`0793f890 fffff880`0793fbe0 : nt!KiSystemServiceCopyEnd+0x13
fffff880`0793f358 fffff800`0291b11f : fffff880`0793fb38 fffff880`0793f890 fffff880`0793fbe0 00000000`02aa1cb0 : nt!KiServiceLinkage
fffff880`0793f360 fffff800`028cecc2 : fffff880`0793fb38 00000000`00050a34 fffff880`0793fbe0 00000000`02aa1788 : nt! ?? ::FNODOBFM::`string'+0x49974
fffff880`0793fa00 fffff800`028cd83a : 00000000`00000001 00000000`02aa0a28 00000000`77b16501 00000000`00050a34 : nt!KiExceptionDispatch+0xc2
fffff880`0793fbe0 00000000`779e8e3d : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiPageFault+0x23a
00000000`02aa0a30 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x779e8e3d
STACK_COMMAND: kb
FOLLOWUP_NAME: MachineOwner
FAILURE_BUCKET_ID: X64_0xF4_C0000005_IMAGE_wininit.exe
BUCKET_ID: X64_0xF4_C0000005_IMAGE_wininit.exe
Followup: MachineOwner
---------
1: kd> !analyze -v
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
CRITICAL_OBJECT_TERMINATION (f4)
A process or thread crucial to system operation has unexpectedly exited or been
terminated.
Several processes and threads are necessary for the operation of the
system; when they are terminated (for any reason), the system can no
longer function.
Arguments:
Arg1: 0000000000000003, Process
Arg2: fffffa8006c88060, Terminating object
Arg3: fffffa8006c88340, Process image file name
Arg4: fffff80002bd2db0, Explanatory message (ascii)
Debugging Details:
------------------
PROCESS_OBJECT: fffffa8006c88060
IMAGE_NAME: wininit.exe
DEBUG_FLR_IMAGE_TIMESTAMP: 0
MODULE_NAME: wininit
FAULTING_MODULE: 0000000000000000
PROCESS_NAME: wininit.exe
EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - De instructie op 0x%08lx verwijst naar geheugen op 0x%08lx. Een lees- of schrijfbewerking op het geheugen is mislukt: %s.
BUGCHECK_STR: 0xF4_C0000005
CUSTOMER_CRASH_COUNT: 1
DEFAULT_BUCKET_ID: VISTA_DRIVER_FAULT
CURRENT_IRQL: 0
STACK_TEXT:
fffff880`0793f0a8 fffff800`02c57982 : 00000000`000000f4 00000000`00000003 fffffa80`06c88060 fffffa80`06c88340 : nt!KeBugCheckEx
fffff880`0793f0b0 fffff800`02c050ab : ffffffff`ffffffff fffffa80`075ca660 fffffa80`06c88060 fffffa80`06c88060 : nt!PspCatchCriticalBreak+0x92
fffff880`0793f0f0 fffff800`02b88698 : ffffffff`ffffffff 00000000`00000001 fffffa80`06c88060 00000000`00000008 : nt! ?? ::NNGAKEGL::`string'+0x17ad6
fffff880`0793f140 fffff800`028ce8d3 : fffffa80`06c88060 fffff800`c0000005 fffffa80`075ca660 00000000`02aa0470 : nt!NtTerminateProcess+0xf4
fffff880`0793f1c0 fffff800`028cae70 : fffff800`0291b11f fffff880`0793fb38 fffff880`0793f890 fffff880`0793fbe0 : nt!KiSystemServiceCopyEnd+0x13
fffff880`0793f358 fffff800`0291b11f : fffff880`0793fb38 fffff880`0793f890 fffff880`0793fbe0 00000000`02aa1cb0 : nt!KiServiceLinkage
fffff880`0793f360 fffff800`028cecc2 : fffff880`0793fb38 00000000`00050a34 fffff880`0793fbe0 00000000`02aa1788 : nt! ?? ::FNODOBFM::`string'+0x49974
fffff880`0793fa00 fffff800`028cd83a : 00000000`00000001 00000000`02aa0a28 00000000`77b16501 00000000`00050a34 : nt!KiExceptionDispatch+0xc2
fffff880`0793fbe0 00000000`779e8e3d : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiPageFault+0x23a
00000000`02aa0a30 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x779e8e3d
STACK_COMMAND: kb
FOLLOWUP_NAME: MachineOwner
FAILURE_BUCKET_ID: X64_0xF4_C0000005_IMAGE_wininit.exe
BUCKET_ID: X64_0xF4_C0000005_IMAGE_wininit.exe
Followup: MachineOwner
--------- |
[
Voor 120% gewijzigd door
Emrulez op 04-03-2011 23:33
]