Liebe/-r Experte/-in,
ich habe einen älteren Rechner mit Win XP SP3 mit sporadischen Bluescreens.
Im Eventlog finde ich nix verdächtiges.
Die Dump Datei habe ich mal mit Windbg analysiert. Ich konnte mit dem Ergebnis nicht viel anfangen.
Kannst du mir einen Tip geben, wo der Hase im Pfeffer liegt?
Inhalt der Analyse:
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
KERNEL_MODE_EXCEPTION_NOT_HANDLED_M (1000008e)
This is a very common bugcheck. Usually the exception address pinpoints
the driver/function that caused the problem. Always note this address
as well as the link date of the driver/image that contains this address.
Some common problems are exception code 0x80000003. This means a hard
coded breakpoint or assertion was hit, but this system was booted
/NODEBUG. This is not supposed to happen as developers should never have
hardcoded breakpoints in retail code, but …
If this happens, make sure a debugger gets connected, and the
system is booted /DEBUG. This will let us see why this breakpoint is
happening.
Arguments:
Arg1: c0000005, The exception code that was not handled
Arg2: bf80129d, The address that the exception occurred at
Arg3: b8207a48, Trap Frame
Arg4: 00000000
Debugging Details:
EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced memory at 0x%08lx. The memory could not be %s.
FAULTING_IP:
win32k!TimersProc+de
bf80129d ff4070 inc dword ptr [eax+0x70]
TRAP_FRAME: b8207a48 – (.trap ffffffffb8207a48)
ErrCode = 00000002
eax=6000b34b ebx=00000000 ecx=1c000000 edx=00000145 esi=cdcdcdcd edi=0000001f
eip=bf80129d esp=b8207abc ebp=b8207ad4 iopl=0 nv up ei pl nz na pe nc
cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00010202
win32k!TimersProc+0xde:
bf80129d ff4070 inc dword ptr [eax+0x70] ds:0023:6000b3bb=???
Resetting default scope
CUSTOMER_CRASH_COUNT: 3
DEFAULT_BUCKET_ID: DRIVER_FAULT
BUGCHECK_STR: 0x8E
LAST_CONTROL_TRANSFER: from bf883163 to bf80129d
STACK_TEXT:
b8207ad4 bf883163 00000022 0070fff4 bf8010ef win32k!TimersProc+0xde
b8207d30 bf8b8f3f b81f7490 00000002 b8207d54 win32k!RawInputThread+0x634
b8207d40 bf801112 b81f7490 b8207d64 0070fff4 win32k!xxxCreateSystemThreads+0x60
b8207d54 8054167c 00000000 00000022 00000000 win32k!NtUserCallOneParam+0x23
b8207d54 7c91e514 00000000 00000022 00000000 nt!KiFastCallEntry+0xfc
WARNING: Frame IP not in any known module. Following frames may be wrong.
0070ffe0 00000000 00000000 00000000 00000000 0x7c91e514
FOLLOWUP_IP:
win32k!TimersProc+de
bf80129d ff4070 inc dword ptr [eax+0x70]
SYMBOL_STACK_INDEX: 0
FOLLOWUP_NAME: MachineOwner
SYMBOL_NAME: win32k!TimersProc+de
MODULE_NAME: win32k
IMAGE_NAME: win32k.sys
DEBUG_FLR_IMAGE_TIMESTAMP: 4de797d3
STACK_COMMAND: .trap ffffffffb8207a48 ; kb
FAILURE_BUCKET_ID: 0x8E_win32k!TimersProc+de
BUCKET_ID: 0x8E_win32k!TimersProc+de
Followup: MachineOwner
Danke
Gruß
Roman