SJERGIEJ
(Aminokwasy)
19 Czerwiec 2007 20:42
#1
Witam ostatnio czasem mi sie komp restuje system niedawno stawialem od nowa bo myslalem ze to pomoże a jednak dziś znowu to wykoszczylo ponizej zamieszczam minidumpa
icrosoft ® Windows Debugger Version 6.7.0005.0 Copyright © Microsoft Corporation. All rights reserved. Loading Dump File [C] Mini Kernel Dump File: Only registers and stack trace are available Symbol search path is: *** Invalid *** **************************************************************************** * Symbol loading may be unreliable without a symbol search path. * * Use .symfix to have the debugger choose a symbol path. * * After setting your symbol path, use .reload to refresh symbol locations. * **************************************************************************** Executable search path is: ********************************************************************* * Symbols can not be loaded because symbol path is not initialized. * * * * The Symbol Path can be set by: * * using the _NT_SYMBOL_PATH environment variable. * * using the -y argument when starting the debugger. * * using .sympath and .sympath+ * ********************************************************************* Unable to load image ntoskrnl.exe, Win32 error 0n2 *** WARNING: Unable to verify timestamp for ntoskrnl.exe *** ERROR: Module load completed but symbols could not be loaded for ntoskrnl.exe Windows XP Kernel Version 2600 (Service Pack 2) UP Free x86 compatible Product: WinNt, suite: TerminalServer SingleUserTS Kernel base = 0x804d7000 PsLoadedModuleList = 0x8055ab20 Debug session time: Tue Jun 19 22:00:01.281 2007 (GMT+2) System Uptime: 0 days 2:40:52.847 ********************************************************************* * Symbols can not be loaded because symbol path is not initialized. * * * * The Symbol Path can be set by: * * using the _NT_SYMBOL_PATH environment variable. * * using the -y argument when starting the debugger. * * using .sympath and .sympath+ * ********************************************************************* Unable to load image ntoskrnl.exe, Win32 error 0n2 *** WARNING: Unable to verify timestamp for ntoskrnl.exe *** ERROR: Module load completed but symbols could not be loaded for ntoskrnl.exe Loading Kernel Symbols … Loading User Symbols Loading unloaded module list … ******************************************************************************* * * * Bugcheck Analysis * * * ******************************************************************************* Use !analyze -v to get detailed debugging information. BugCheck C2, {40, 40000, 80000000, 0} ANALYSIS: Kernel with unknown size. Will force reload symbols with known size. ANALYSIS: Force reload command: .reload /f ntoskrnl.exe=FFFFFFFF804D7000,214600,41108004 ***** Kernel symbols are WRONG. Please fix symbols to do analysis. Probably caused by : ntoskrnl.exe ( nt+5c9ae ) Followup: MachineOwner ---------
Zwalony kernel.
Włącz konsolę odzyskiwania, wpisz komendę
expand X:\I386\NTOSKRNL.EX_ C:\Windows\system32\NTOSKRNL.EXE
Gdzie X to litera twojego napędu. Jak nie pomoże, to wchodzisz z poziomu konsoli do katalogu system32 i wpisujesz
reload /f ntoskrnl.exe=FFFFFFFF804D7000,214600,41108004
Powinno już pójść.
Pozdrawiam.