новый шаг - 0x0000000A: IRQL_NOT_LESS_OR_EQUAL!
сделал полный дамп. Воспользовался "kdfe дамп -v". И получил результат...
Что значит вся эта абра-кадабра и что делать - яснее не стало.
Покажите чтоли стену, об которую убиться...
Цитата:
<куча матюгов на недостаток символов>
PEB is paged out (Peb.Ldr = 7ffd600c). Type ".hh dbgerr001" for details
PEB is paged out (Peb.Ldr = 7ffd600c). Type ".hh dbgerr001" for details
READ_ADDRESS: f8b9e4bc Nonpaged pool expansion
CURRENT_IRQL: 1
FAULTING_IP:
nt!MiLocateAndReserveWsle+51
80505f07 8b0c81 mov ecx,dword ptr [ecx+eax*4]
DEFAULT_BUCKET_ID: DRIVER_FAULT
BUGCHECK_STR: 0xA
TRAP_FRAME: b50fe700 -- (.trap 0xffffffffb50fe700)
ErrCode = 00000000
eax=0000000f ebx=0000000e ecx=df9d3000 edx=00000000 esi=8a4ab150 edi=00000000
eip=8056a209 esp=b50fe774 ebp=b50fe7c0 iopl=0 nv up ei ng nz ac po cy
cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00010293
nt!CcMapData+0xef:
Page 2e591 not present in the dump file. Type ".hh dbgerr004" for details
8056a209 8a0c0a mov cl,byte ptr [edx+ecx] ds:0023:df9d3000=??
Resetting default scope
LAST_CONTROL_TRANSFER: from 80505f07 to 805446e0
STACK_TEXT:
b50fe534 80505f07 badb0d00 00000001 80551908 nt!KiTrap0E+0x238
b50fe5b4 80513abe c0e0003c df9d3000 81e97bdc nt!MiLocateAndReserveWsle+0x51
b50fe5cc 805152b9 df9d3000 c06fce98 81e97bdc nt!MiAddValidPageToWorkingSet+0x84
b50fe604 80516a54 80000000 df9d3000 c06fce98 nt!MiCompleteProtoPteFault+0x1cb
b50fe67c 80520239 e1cf2498 df9d3000 c06fce98 nt!MiDispatchFault+0x636
b50fe6e8 80544578 00000000 df9d3000 00000000 nt!MmAccessFault+0x877
b50fe6e8 8056a209 00000000 df9d3000 00000000 nt!KiTrap0E+0xd0
b50fe7c0 ba52da6e 8adcfca0 b50fe7f0 00000400 nt!CcMapData+0xef
b50fe7e0 ba52dc89 b50feb74 8aab3008 02a93000 Ntfs!NtfsMapStream+0x46
b50fe854 ba544420 b50feb74 8aa91850 e21aa100 Ntfs!NtfsReadMftRecord+0x86
b50fe904 ba5309b9 b50feb74 e3e9b268 e3e9b0d0 Ntfs!NtfsRetrieveOtherFileName+0xcf
b50feb24 ba52f2e8 b50feb74 89fbba90 8aa91850 Ntfs!NtfsQueryDirectory+0x8ed
b50feb58 ba52f253 b50feb74 e3e9b0d0 8a4cd4c0 Ntfs!NtfsCommonDirectoryControl+0xb
c
b50fecd0 804ef18f 8aa91770 89fbba90 8aed7e40 Ntfs!NtfsFsdDirectoryControl+0xad
b50fece0 ba5ab459 b50fed0c 804ef18f 8ad01d68 nt!IopfCallDriver+0x31
b50fece8 804ef18f 8ad01d68 89fbba90 806e6410 sr!SrPassThrough+0x31
b50fecf8 8057f982 b50fed64 0c88f030 80579e64 nt!IopfCallDriver+0x31
b50fed0c 80579ec1 8ad01d68 89fbba90 8a4cd4c0 nt!IopSynchronousServiceTail+0x70
b50fed30 8054161c 00000d48 00000000 00000000 nt!NtQueryDirectoryFile+0x5d
b50fed30 7c90e4f4 00000d48 00000000 00000000 nt!KiFastCallEntry+0xfc
WARNING: Frame IP not in any known module. Following frames may be wrong.
0c88f078 00000000 00000000 00000000 00000000 0x7c90e4f4
STACK_COMMAND: kb
FOLLOWUP_IP:
nt!MiLocateAndReserveWsle+51
80505f07 8b0c81 mov ecx,dword ptr [ecx+eax*4]
SYMBOL_STACK_INDEX: 1
SYMBOL_NAME: nt!MiLocateAndReserveWsle+51
FOLLOWUP_NAME: MachineOwner
MODULE_NAME: nt
DEBUG_FLR_IMAGE_TIMESTAMP: 4802516a
IMAGE_NAME: memory_corruption
FAILURE_BUCKET_ID: 0xA_nt!MiLocateAndReserveWsle+51
BUCKET_ID: 0xA_nt!MiLocateAndReserveWsle+51
Followup: MachineOwner
---------
|
10 минут позже - новый краш
Crash date: Thu May 1 02:37:37.589 2008 (GMT+4)
Stop error code: 0x4E_99
Probably caused by: memory_corruption ( ntMiDeleteValidAddress+156 )
