Blue Screen - analiza minidump


(Adi284) #1

Podczas kiedy komp normalnie działał włączyłem Mozilla Firefox 3.5 a następnie kiedy chciałem włączyć Mozilla Firefox 2.0.0.20

resetło kompa i pokazał się blue screen.

Tu mam log z Debugging Tools for Windows:

Microsoft (R) Windows Debugger Version 6.11.0001.404 X86

Copyright (c) Microsoft Corporation. All rights reserved.



Loading Dump File [C]

Mini Kernel Dump File: Only registers and stack trace are available


Symbol search path is: SRV*c:\symbols*http://msdl.microsoft.com/download/symbols

Executable search path is: 

Windows XP Kernel Version 2600 (Service Pack 3) UP Free x86 compatible

Product: WinNt, suite: TerminalServer SingleUserTS

Built by: 2600.xpsp.080413-2111

Machine Name:

Kernel base = 0x804d7000 PsLoadedModuleList = 0x8055b1c0

Debug session time: Wed Jul 1 07:31:20.265 2009 (GMT+2)

System Uptime: 0 days 0:06:17.860

Loading Kernel Symbols

...............................................................

....................................................

Loading User Symbols

Loading unloaded module list

..........

*******************************************************************************

* *

* Bugcheck Analysis *

* *

*******************************************************************************


Use !analyze -v to get detailed debugging information.


BugCheck 1000000A, {c, ff, 0, 804e35e9}


Probably caused by : ntoskrnl.exe ( nt!ExAcquireResourceExclusiveLite+36 )


Followup: MachineOwner

---------


kd> !analyze -v

*******************************************************************************

* *

* Bugcheck Analysis *

* *

*******************************************************************************


IRQL_NOT_LESS_OR_EQUAL (a)

An attempt was made to access a pageable (or completely invalid) address at an

interrupt request level (IRQL) that is too high. This is usually

caused by drivers using improper addresses.

If a kernel debugger is available get the stack backtrace.

Arguments:

Arg1: 0000000c, memory referenced

Arg2: 000000ff, IRQL

Arg3: 00000000, bitfield :

	bit 0 : value 0 = read operation, 1 = write operation

	bit 3 : value 0 = not an execute operation, 1 = execute operation (only on chips which support this level of status)

Arg4: 804e35e9, address which referenced memory


Debugging Details:

------------------



READ_ADDRESS: 0000000c 


CURRENT_IRQL: ff


FAULTING_IP: 

nt!ExAcquireResourceExclusiveLite+36

804e35e9 66837e0c00 cmp word ptr [esi+0Ch],0


CUSTOMER_CRASH_COUNT: 1


DEFAULT_BUCKET_ID: DRIVER_FAULT


BUGCHECK_STR: 0xA


PROCESS_NAME: System


LAST_CONTROL_TRANSFER: from f7408849 to 804e35e9


STACK_TEXT:  

f79dab54 f7408849 00000000 86d2fb01 f79dab88 nt!ExAcquireResourceExclusiveLite+0x36

f79dab64 f74287b1 86d2fb90 86acf540 86d2fb01 Ntfs!NtfsAcquireResourceExclusive+0x20

f79dab88 f740e6d2 86d2fb01 86acf540 e29c9518 Ntfs!NtfsAcquireExclusiveFcb+0x42

f79dabd8 f742fe7c 86d2fb90 86ac5100 e3426638 Ntfs!NtfsTeardownFromLcb+0xba

f79dac30 f740a7a4 86d2fb90 e3426700 00000000 Ntfs!NtfsTeardownStructures+0x125

f79dac5c f742d6b5 86d2fb90 01426700 00000000 Ntfs!NtfsDecrementCloseCounts+0x9e

f79dace0 f74325e3 86d2fb90 e3426700 e3426638 Ntfs!NtfsCommonClose+0x398

f79dad74 804e426b 00000000 00000000 86fc5da8 Ntfs!NtfsFspClose+0xe3

f79dadac 8057aeff 00000000 00000000 00000000 nt!ExpWorkerThread+0x100

f79daddc 804f88ea 804e4196 00000000 00000000 nt!PspSystemThreadStartup+0x34

00000000 00000000 00000000 00000000 00000000 nt!KiThreadStartup+0x16



STACK_COMMAND: kb


FOLLOWUP_IP: 

nt!ExAcquireResourceExclusiveLite+36

804e35e9 66837e0c00 cmp word ptr [esi+0Ch],0


SYMBOL_STACK_INDEX: 0


SYMBOL_NAME: nt!ExAcquireResourceExclusiveLite+36


FOLLOWUP_NAME: MachineOwner


MODULE_NAME: nt


IMAGE_NAME: ntoskrnl.exe


DEBUG_FLR_IMAGE_TIMESTAMP: 48025eab


FAILURE_BUCKET_ID: 0xA_nt!ExAcquireResourceExclusiveLite+36


BUCKET_ID: 0xA_nt!ExAcquireResourceExclusiveLite+36


Followup: MachineOwner

---------

(ol3k) #2

Patrząc na analizę błędu i opis na innym forum wynika, że to chyba problem z pamięcią RAM


(Adi284) #3

Ktoś jeszcze ma coś do dodania ?