BSOD, ako moze tumacenje

[okmijun]

Ako nekog ne mrzi, nek pogleda, ja ovo nemam pojma sta znaci

 

[Creative_X]

Skini programcic Blue Screen viewer

 

[okmijun]

A sta ovo znaci?

Uploaded with ImageShack.us

 

[okmijun]

http://windows7themes.net/how-to-open-dmp-files-in-windows-7.html


e ovo sad vec nemam pojma




Microsoft (R) Windows Debugger Version 6.12.0002.633 AMD64
Copyright (c) Microsoft Corporation. All rights reserved.


Loading Dump File [C:\Users\Peroly Berisha\Desktop\052113-59093-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available

Symbol search path is: SRV*C:\Symbols*http://msdl.microsoft.com/download/symbols
Executable search path is:
Windows 7 Kernel Version 7601 (Service Pack 1) MP (12 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 7601.18044.amd64fre.win7sp1_gdr.130104-1431
Machine Name:
Kernel base = 0xfffff800`03614000 PsLoadedModuleList = 0xfffff800`03858670
Debug session time: Tue May 21 00:03:01.680 2013 (UTC + 2:00)
System Uptime: 0 days 8:33:34.943
Loading Kernel Symbols
...............................................................
................................................................
.................................................
Loading User Symbols
Loading unloaded module list
............
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck 7F, {8, 80050033, 406f8, fffff960000fa99c}

Probably caused by : win32k.sys ( win32k!vDIBSolidBlt+2c )

Followup: MachineOwner
---------

3: kd> !analyze -v
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

UNEXPECTED_KERNEL_MODE_TRAP (7f)
This means a trap occurred in kernel mode, and it's a trap of a kind
that the kernel isn't allowed to have/catch (bound trap) or that
is always instant death (double fault). The first number in the
bugcheck params is the number of the trap (8 = double fault, etc)
Consult an Intel x86 family manual to learn more about what these
traps are. Here is a *portion* of those codes:
If kv shows a taskGate
use .tss on the part before the colon, then kv.
Else if kv shows a trapframe
use .trap on that value
Else
.trap on the appropriate frame will show where the trap was taken
(on x86, this will be the ebp that goes with the procedure KiTrap)
Endif
kb will then show the corrected stack.
Arguments:
Arg1: 0000000000000008, EXCEPTION_DOUBLE_FAULT
Arg2: 0000000080050033
Arg3: 00000000000406f8
Arg4: fffff960000fa99c

Debugging Details:
------------------


BUGCHECK_STR: 0x7f_8

CUSTOMER_CRASH_COUNT: 1

DEFAULT_BUCKET_ID: VISTA_DRIVER_FAULT

PROCESS_NAME: csrss.exe

CURRENT_IRQL: 0

LAST_CONTROL_TRANSFER: from fffff800036891e9 to fffff80003689c40

STACK_TEXT:
fffff880`035ddee8 fffff800`036891e9 : 00000000`0000007f 00000000`00000008 00000000`80050033 00000000`000406f8 : nt!KeBugCheckEx
fffff880`035ddef0 fffff800`036876b2 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiBugCheckDispatch+0x69
fffff880`035de030 fffff960`000fa99c : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiDoubleFaultAbort+0xb2
fffff880`083bff00 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : win32k!vDIBSolidBlt+0x2c


STACK_COMMAND: kb

FOLLOWUP_IP:
win32k!vDIBSolidBlt+2c
fffff960`000fa99c 89442430 mov dword ptr [rsp+30h],eax

SYMBOL_STACK_INDEX: 3

SYMBOL_NAME: win32k!vDIBSolidBlt+2c

FOLLOWUP_NAME: MachineOwner

MODULE_NAME: win32k

IMAGE_NAME: win32k.sys

DEBUG_FLR_IMAGE_TIMESTAMP: 50e64bda

FAILURE_BUCKET_ID: X64_0x7f_8_win32k!vDIBSolidBlt+2c

BUCKET_ID: X64_0x7f_8_win32k!vDIBSolidBlt+2c

Followup: MachineOwner
---------

 

[okmijun]

Jel ima ovo smisla sa ovim gore?

I recently had the same problem. It seems to be that this may be the remnants of a virus that was removed. If you look in your registry for the following key:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon

There is a value named "Shell" -- This should be set to "Explorer.exe" but on my system, it was set to "Explorer.exe C:\WINDOWS\Config\csrss.exe"

I changed it to be just "Explorer.exe" and that seems to have solved it.

 

[alfaunits]

7F/DOUBLE_FAULT je obicno, u stvari skoro uvek, znak da se previse kernel stack-a koristi. To ti konkretno nista ne znaci, jer to samo pisci drivera mogu resiti.
Ovaj dump nema dovoljno informacija da se razazna koji driver je u pitanju. Kad se ovo desava?

 

[okmijun]

Evo veceras 1. put, mozda je display driver, jer je bilo treperenje ekrana, ne celog vec samo prozora za 3D program.
....
Moze da bude i od Creativa? Instalirao sam za XFI Music, i nistam resetovo komp, jer reko ajd posle cu, i tako je bio ceo dan, "neresetovan"
nisam ti puno pomogo...

 

[Vuk40]

pojavom Ntoskrnl.exe obicno si zezno boot.ini fajl ili ga obrisao.
mozes da odradis system repair sa istalacionim diskom vratice ga.

 

[okmijun]

^^^^
moguce, al restartuje se normalno?
....
vazi, probacu i to.

 

[alfaunits]

pojavom Ntoskrnl.exe obicno si zezno boot.ini fajl ili ga obrisao.
mozes da odradis system repair sa istalacionim diskom vratice ga.

Nemoj da pricas ovakve nebulize bez potpore. Sta vise ovo je cista budalastina, ntoskrnl.exe se pojavljuje u skoro svakom BSOD-u i nema veze sa boot.ini-em.


Ako je Intel integrusa, moze biti - dobijao sam mali milion dumpova u kojima je bas Intelov driver vidno kriv jer urnise 95% kernel stack-a (koji je svega 8, 12 ili 16KB! i danas) i bio happy sto mogu za 10 sekundi da kazem "dalje"
Creative vec ne verujem, ako je trazio restart - jer onda verovatno jos uvek nije loaded.
I naravno moze biti virus.


Ako ti se samo jednom desilo, sacekaj ako ih dodje jos, ali podesi onda barem da se cuva ceo crash dump (otprilike koliko ima memorije je veliki) pa da se moze vise videti (neces ga nikome uploadovati, ali onaj text output gore ce imati mnogo vise informacija).

 

[Vuk40]

Ok nebuloze,izvini za pokusaj.
Evo ti to resi sa potporom,kako god.

 

[Vuk40]

Da ne koristis slucajno Zone Alarm ili McAfee?

 

[okmijun]

desio se jos jedan, posle evo skoro 10 dana, u trenutku ukljucivanja externog HDDa, priljucen je na USB 3.0, ako to ima ikakve veze?
sad mi tek nista nije jasno....

 

[Deleted member 46590]

To je verovatno potpuno drgu problem.

 

[okmijun]

Pa vrlo moguce, evo nisam sam, ako je za utehu
....
https://www.google.rs/#biw=1920&bih...qf.&bvm=bv.47244034,d.bGE&fp=438cc41034d01d6e
...
izgleda da se to jednostavno nekad desava sa win7+autoplay/run
nemam pojma...

SFC/ SCANNOW nije nasao nista, na memoriju ne sumnjam jer je mesec dana u 100% CPU loadu, i nista nikad nije bilo.

 

[Vuk40]

desio se jos jedan, posle evo skoro 10 dana, u trenutku ukljucivanja externog HDDa, priljucen je na USB 3.0, ako to ima ikakve veze?
sad mi tek nista nije jasno....

Struja, usb 2 zahteva min 5v 500-700ma, usb 3 preko 900ma,proveri kako ti je vezan taj usb3
Moguce da ti je grana 5v slaba pogledaj u everestu ili biosu vrednosti.
Napon na ploci je isto 5v ako izade iz tih vrednosti bam.

 

[okmijun]

Kako mslis kako je vezan?
Pa normalan na zadnjem panelu od ploce?
...
Dal ima veze sto ovaj externi USB HDD uopste i nije 3.0, vec 2.0?
A moguce da je, i nevezano za sam HDD, struja povukla kao za USB 3.0
Napajanje je na granici realno, 550W, cooler master, green.
....
A da, memory dumpa nije ni bilo...

hvala

 

[Vuk40]

Pusti ga u prime 95 i prati voltaze sa everestom, ako ti 5v mnogo pada to je

 

[okmijun]

ok....