evo ovako, prvo mi je javio ovo:
Code:
Use !analyze -v to get detailed debugging information.
BugCheck 3B, {c0000005, fffff80002cd66ac, fffff8800276af20, 0}
***** Kernel symbols are WRONG. Please fix symbols to do analysis.
onda sam napravio !analyze -v pa sam dobio ovo:
Code:
Your debugger is not using the correct symbols
In order for this command to work properly, your symbol path
must point to .pdb files that have full type information.
Certain .pdb files (such as the public OS symbols) do not
contain the required information. Contact the group that
provided you with these symbols if you need this command to
work.
Type referenced: nt!_KPRCB
no ipak je izbacio ovo:
Code:
Probably caused by : ntoskrnl.exe ( nt+7f6ac )
i na kraju ovo:
Code:
SYSTEM_SERVICE_EXCEPTION (3b)
An exception happened while executing a system service routine.
Arguments:
Arg1: 00000000c0000005, Exception code that caused the bugcheck
Arg2: fffff80002cd66ac, Address of the exception record for the exception that caused the bugcheck
Arg3: fffff8800276af20, Address of the context record for the exception that caused the bugcheck
Arg4: 0000000000000000, zero.
i ovo:
Code:
ADDITIONAL_DEBUG_TEXT:
Use '!findthebuild' command to search for the target build information.
If the build information is available, run '!findthebuild -s ; .reload' to set symbol path and load symbols.
MODULE_NAME: nt
FAULTING_MODULE: fffff80002c57000 nt
DEBUG_FLR_IMAGE_TIMESTAMP: 49b15297
EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced memory at 0x%08lx. The memory could not be %s.
FAULTING_IP:
nt+7f6ac
fffff800`02cd66ac f0480fc11f lock xadd qword ptr [rdi],rbx
CONTEXT: fffff8800276af20 -- (.cxr 0xfffff8800276af20)
rax=0000000000000002 rbx=ffffffffffffffff rcx=0000002000000000
rdx=fffff8a0019b0910 rsi=0000002000000000 rdi=0000001fffffffd0
rip=fffff80002cd66ac rsp=fffff8800276b900 rbp=0000000000000001
r8=0000000000000020 r9=00000000020ef500 r10=fffffa8002eda950
r11=000000000286bea8 r12=0000000000000000 r13=fffffa8002eda950
r14=000000000286be80 r15=00000000020ef4c8
iopl=0 nv up ei ng nz na po nc
cs=0010 ss=0018 ds=002b es=002b fs=0053 gs=002b efl=00010286
nt+0x7f6ac:
fffff800`02cd66ac f0480fc11f lock xadd qword ptr [rdi],rbx ds:002b:0000001f`ffffffd0=????????????????
Resetting default scope
CUSTOMER_CRASH_COUNT: 1
DEFAULT_BUCKET_ID: VISTA_DRIVER_FAULT
BUGCHECK_STR: 0x3B
CURRENT_IRQL: 0
LAST_CONTROL_TRANSFER: from 0000000000000000 to fffff80002cd66ac
STACK_TEXT:
fffff880`0276b900 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt+0x7f6ac
FOLLOWUP_IP:
nt+7f6ac
fffff800`02cd66ac f0480fc11f lock xadd qword ptr [rdi],rbx
SYMBOL_STACK_INDEX: 0
SYMBOL_NAME: nt+7f6ac
FOLLOWUP_NAME: MachineOwner
IMAGE_NAME: ntoskrnl.exe
STACK_COMMAND: .cxr 0xfffff8800276af20 ; kb
BUCKET_ID: WRONG_SYMBOLS
Followup: MachineOwner
po mojoj interpretaciji sve upucuje na ram, ali probat cu potrazit tocnu adresu za simbole pa onda napravit debug
edit:idem probat skinut simbole za w7
odavdje jer mi niti jedan path koji sam naso na netu nije radio pa mozda s ovim proradi
edit2:***** Kernel symbols are WRONG. Please fix symbols to do analysis. -- ne mogu nikako to sredit, skinuo sam 290mb paket simbola i instaliro na c:\symbols, taj path sam stavio u debugger, ali opet isto
mozda path treba nekako drugacije izgledat?