Šta je novo?

BSOD Win7 neka od aplikacija, KOJA?! Upomoc :)

corabre

Slavan
Učlanjen(a)
18.01.2009
Poruke
115
Poena
319
Pozdrav ljudi,
imam problem sa mojim racunarom u firmi (gde sam inace Administrator)
Tuzno mi je i sramotno sto kao admin ne mogu da sredim ni svoj racunar, al razumite da mi je jos ovaj korak ostao..
naime, citava kompanija prelazi sa XP na windows 7.
5 administratora su dobili test verziju Windowsa 7 iz Majamija iz sedista kompanije, samo radi testa i rada u realnom okruzenju.
Windows 7 je obradjen i podesen od glavnih admina, ovakvu verziju trebamo da damo korisnicima i da u zavisnosti od pozicije i instaliramo odredjene pakete softvera.
Za instalaciju i remote koristimo DSM explorer.
Vec 3x posle 2 radna dana masina pukne bez iole normalnog razloga.
Posle prvog BSOD sam preinstalirao sve ponovo.
Posle drugog odem lepo i uzmem novu masinu, novu graficku (posto imamo 2x 24inca monitore) instaliram sve od ponovo, kao ajde da sam siguran - opet isto.
BSOD je 00000050
evo vam minidump uploadovan ko moze da izvuce nesto informacija iz toga.
P.S. Radim za Royal Caribbean Cruise kao administrator, NE MOGU da "cesljam" system raznim alatkama ko sto sam mogao ranije. Ne smem da stavim CD sa nelegalnim softverom u masinu a ne da pokrenem neki od njih...
Sve sto radim moram iz logova da vadim i minidump-ova.
Ajd molim vas ako neko ima ideju sta ovo moze da znaci:
 

Prilozi

  • minidump.7z
    54.7 KB · Pregleda: 19
  • minidump2.7z
    570.9 KB · Pregleda: 10
software je ispod, a HW je u attachmentu


Adobe Flash Player ActiveX 10.1.53.64
Item Value
Version 10.1.53.64
Manufacturer Adobe Systems Incorporated
Location C:\Windows\System32\Macromed\Flash\Flash10h.ocx
Applied Patches

ATI Catalyst Control Center Core Implementation 2009
Item Value
Version 2009
Manufacturer ATI Technologies
Location
Applied Patches

ATI Catalyst Control Center Graphics Full Existing 2009
Item Value
Version 2009
Manufacturer ATI Technologies
Location
Applied Patches

ATI Catalyst Control Center Graphics Full New 2009
Item Value
Version 2009
Manufacturer ATI Technologies
Location
Applied Patches

ATI Catalyst Control Center Graphics Light 2009
Item Value
Version 2009
Manufacturer ATI Technologies
Location
Applied Patches

ATI Catalyst Control Center Graphics Previews Common 2009
Item Value
Version 2009
Manufacturer ATI Technologies
Location
Applied Patches

ATI Catalyst Control Center HydraVision Full 2009
Item Value
Version 2009
Manufacturer ATI Technologies
Location
Applied Patches

ATI Catalyst Control Center Localization All 2009
Item Value
Version 2009
Manufacturer ATI Technologies
Location
Applied Patches

ATI CCC Help 2009 EN
Item Value
Version 2009
Manufacturer ATI Technologies
Location
Applied Patches

ATI ccc-core-static 2009
Item Value
Version 2009
Manufacturer ATI Technologies
Location
Applied Patches

ATI ccc-utility 2009
Item Value
Version 2009
Manufacturer ATI Technologies
Location
Applied Patches

ATI Skins 2009
Item Value
Version 2009
Manufacturer ATI Technologies
Location
Applied Patches

CA DSM Agent + Asset Management Plug-in r12.5 [Windows] x86 32
Item Value
Version r12.5
Manufacturer CA
Location
Applied Patches

CA DSM Agent + Basic Inventory Plug-in r12.5 [Windows] x86 32
Item Value
Version r12.5
Manufacturer CA
Location
Applied Patches

CA DSM Agent + Remote Control Plug-in r12.5 [Windows] x86 32
Item Value
Version r12.5
Manufacturer CA
Location
Applied Patches

CA DSM Agent + Remote Control Replayer r12.5 [Windows] x86 32
Item Value
Version r12.5
Manufacturer CA
Location
Applied Patches

CA DSM Agent + Remote Control Viewer r12.5 [Windows] x86 32
Item Value
Version r12.5
Manufacturer CA
Location
Applied Patches

CA DSM Agent + Software Delivery Catalog r12.5 [Windows] x86 32
Item Value
Version r12.5
Manufacturer CA
Location
Applied Patches

CA DSM Agent + Software Delivery Plug-in r12.5 [Windows] x86 32
Item Value
Version r12.5
Manufacturer CA
Location
Applied Patches

CA DSM Explorer - Asset Management r12.5 [Windows]
Item Value
Version r12.5
Manufacturer CA
Location
Applied Patches

CA DSM Explorer - Remote Control r12.5 [Windows] x86 32
Item Value
Version r12.5
Manufacturer CA
Location
Applied Patches

CA DSM Explorer - Software Delivery r12.5 [Windows] x86 32
Item Value
Version r12.5
Manufacturer CA
Location
Applied Patches

CA Secure Socket Adapter 2.2
Item Value
Version 2.2
Manufacturer CA
Location
Applied Patches

DirectX 9.0c
Item Value
Version 9.0c
Manufacturer Microsoft Corporation
Location
Applied Patches

IBM Lotus Notes Client 8.5.3
Item Value
Version 8.5.3
Manufacturer IBM Corporation
Location C:\Program Files\Lotus\Notes\notes.exe
Applied Patches

J2SE Runtime Environment 6.0 Update 15 (1.6.0_15-b03)
Item Value
Version 6.0 Update 15 (1.6.0_15-b03)
Manufacturer Sun Microsystems, Inc.
Location C:\Program Files\Java\jre6\bin\java.exe
Applied Patches

Jet Database Engine 4.04.0
Item Value
Version 4.04.0
Manufacturer Microsoft Corporation
Location C:\Windows\system32\msjet40.dll
Applied Patches

Microsoft .NET Framework 2.0 SP2
Item Value
Version 2.0 SP2
Manufacturer Microsoft Corporation
Location
Applied Patches NDP20SP2-KB983583-x86
Windows6.1-KB2604115-x86
Windows6.1-KB2656411-x86

Microsoft .NET Framework 3.5.1
Item Value
Version 3.5.1
Manufacturer Microsoft Corporation
Location C:\Windows\Microsoft.Net\Framework\v3.5\DataSvcUtil.exe.config
Applied Patches

Microsoft Active Directory Service Interface 5.0
Item Value
Version 5.0
Manufacturer Microsoft Corporation
Location
Applied Patches

Microsoft Data Access Components (MDAC) 6.1
Item Value
Version 6.1
Manufacturer Microsoft Corporation
Location
Applied Patches

Microsoft Fax Services 6.1
Item Value
Version 6.1
Manufacturer Microsoft Corporation
Location C:\Windows\System32\FXSSVC.exe
Applied Patches Windows6.1-kb2491683-x86
Windows6.1-kb2506212-x86

Microsoft Internet Explorer 8 x86 32
Item Value
Version 8
Manufacturer Microsoft Corporation
Location C:\Program Files\Internet Explorer\IEXPLORE.EXE
Applied Patches Windows6.1-KB2510531-x86

Microsoft Office 2010 Standard Edition SP1 x86 32 EN
Item Value
Version 2010 Standard Edition SP1
Manufacturer Microsoft Corporation
Location C:\Program Files\Common Files\microsoft shared\OFFICE14\MSO.DLL
Applied Patches ace2010-kb2553447-fullfile-x86-glb
graph2010-kb2553371-fullfile-x86-glb
msptls2010-kb2589320-fullfile-x86-glb
office2010-kb2553091-fullfile-x86-glb
office2010-kb2553096-fullfile-x86-glb
powerpoint2010-kb2553185-fullfile-x86-glb
vbe72010-kb2598243-fullfile-x86-glb

Microsoft Office Access 2003 Runtime
Item Value
Version
Manufacturer Microsoft Corporation
Location
Applied Patches

Microsoft Office Excel 2010 SP1 x86 32 EN
Item Value
Version Excel 2010 SP1
Manufacturer Microsoft Corporation
Location C:\Program Files\Microsoft Office\Office14\excel.EXE
Applied Patches graph2010-kb2553371-fullfile-x86-glb
msptls2010-kb2589320-fullfile-x86-glb

Microsoft Office OneNote 2010 SP1 x86 32 EN
Item Value
Version OneNote 2010 SP1
Manufacturer Microsoft Corporation
Location C:\Program Files\Microsoft Office\Office14\onenote.exe
Applied Patches msptls2010-kb2589320-fullfile-x86-glb

Microsoft Office PowerPoint 2010 SP1 x86 32 EN
Item Value
Version PowerPoint 2010 SP1
Manufacturer Microsoft Corporation
Location C:\Program Files\Microsoft Office\Office14\powerpnt.EXE
Applied Patches graph2010-kb2553371-fullfile-x86-glb
msptls2010-kb2589320-fullfile-x86-glb
powerpoint2010-kb2553185-fullfile-x86-glb

Microsoft Office Publisher 2010 SP1 x86 32 EN
Item Value
Version Publisher 2010 SP1
Manufacturer Microsoft Corporation
Location C:\Program Files\Microsoft Office\Office14\mspub.exe
Applied Patches msptls2010-kb2589320-fullfile-x86-glb

Microsoft Office Web Components 10.0 x86 32 EN
Item Value
Version 10.0
Manufacturer Microsoft Corporation
Location C:\Program Files\Common Files\microsoft shared\Web Components\10\owc10.dll
Applied Patches

Microsoft Office Word 2010 SP1 x86 32 EN
Item Value
Version Word 2010 SP1
Manufacturer Microsoft Corporation
Location C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Applied Patches graph2010-kb2553371-fullfile-x86-glb
msptls2010-kb2589320-fullfile-x86-glb

Microsoft Remote Desktop Connection 5.1.2600.2180
Item Value
Version 5.1.2600.2180
Manufacturer Microsoft Corporation
Location C:\Users\184\Desktop\bckp\icaffe\Install Files\Drive Vaccine PC Restore Plus RMC\program files\rmc\mstsc.exe
Applied Patches

Microsoft Visual C++ 2005 Redistributable
Item Value
Version 2005
Manufacturer Microsoft Corporation
Location
Applied Patches

Microsoft Visual C++ 2008 SP1 Redistributable x86 32
Item Value
Version 2008 SP1
Manufacturer Microsoft Corporation
Location
Applied Patches

Microsoft Visual J# 2.0 Redistributable Package - SE x86 32
Item Value
Version
Manufacturer Microsoft Corporation
Location
Applied Patches

Microsoft Windows 7 Professional SP1 x86 32
Item Value
Version Professional SP1
Manufacturer Microsoft Corporation
Location C:\Windows\system32\ntoskrnl.exe
Applied Patches Windows6.1-KB2479943-x86
Windows6.1-KB2503665-x86
Windows6.1-KB2532531-x86
Windows6.1-KB2533552-x86
Windows6.1-KB2536275-x86
Windows6.1-KB2536276-v2-x86
Windows6.1-KB2544893-x86
Windows6.1-KB2560656-x86
Windows6.1-KB2564958-x86
Windows6.1-KB2570947-x86
Windows6.1-KB2579686-x86
Windows6.1-KB2584146-x86
Windows6.1-KB2618451-x86
Windows6.1-KB2619339-x86
Windows6.1-KB2620704-x86
Windows6.1-KB2620712-x86
Windows6.1-KB2621440-x86
Windows6.1-KB2631813-x86
Windows6.1-KB2633952-x86_TimeZone_Update2011
Windows6.1-KB2644615-x86
Windows6.1-KB2653956-x86
Windows6.1-KB2654428-x86
Windows6.1-KB2655992-x86
Windows6.1-KB2656356-x86
Windows6.1-KB2658846-x86
Windows6.1-KB2659262-x86
Windows6.1-KB2660649-x86
Windows6.1-KB2667402-v2-x86
Windows6.1-KB2676562-x86
Windows6.1-KB2685939-x86
Windows6.1-KB2688338-x86
Windows6.1-KB2690533-x86
Windows6.1-KB2691442-x86
Windows6.1-KB2698365-x86
Windows6.1-KB2718704-x86
Windows6.1-KB2719985-x86

Microsoft Windows PowerShell 2.0
Item Value
Version 2.0
Manufacturer Microsoft Corporation
Location C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
Applied Patches

Microsoft Windows Scripting Host 5.8
Item Value
Version
Manufacturer Microsoft Corporation
Location C:\Windows\system32\Jscript.dll
Applied Patches

PuTTY 0.60
Item Value
Version 0.60
Manufacturer Simon Tatham
Location C:\Users\184\Desktop\putty.exe
Applied Patches

Realtek High Definition Audio Driver 6.0
Item Value
Version 6.0
Manufacturer Realtek Semiconductor Corp.
Location
Applied Patches

Symantec Endpoint Protection 11.0.7000.975
Item Value
Version 11.0.7000.975
Manufacturer Symantec Corporation
Location
Applied Patches

Symantec LiveUpdate 3.3 x86 32 EN
Item Value
Version 3.3
Manufacturer Symantec Corporation
Location
Applied Patches

TimeZone Service
Item Value
Version 2.0
Manufacturer
Location

VMware vSphere Client 5.0.0 Build 16964 x86 32
Item Value
Version 5.0.0 Build 16964
Manufacturer VMware, Inc.
Location
Applied Patches

Windows Mail 6.1
Item Value
Version 6.1
Manufacturer Microsoft Corporation
Location C:\Program Files\Windows Mail\WinMail.exe
Applied Patches

Windows Media Player 12
Item Value
Version 12
Manufacturer Microsoft Corporation
Location C:\Program Files\Windows Media Player\wmplayer.exe
Applied Patches

XML Core Services 3.0 SP11
Item Value
Version 3.0 SP11
Manufacturer Microsoft Corporation
Location C:\Windows\system32\msxml3.dll
Applied Patches

XML Core Services 5.0 on Microsoft Office 2003 SP3
Item Value
Version on Microsoft Office 2003 SP3
Manufacturer Microsoft Corporation
Location C:\Program Files\Common Files\microsoft shared\OFFICE11\MSO.DLL
Applied Patches

XML Core Services 5.0 SP1
Item Value
Version SP1
Manufacturer Microsoft Corporation
Location C:\Program Files\Common Files\microsoft shared\OFFICE11\msxml5.dll
Applied Patches office2003-KB924424-x86
 

Prilozi

  • HW.JPG
    HW.JPG
    56.1 KB · Pregleda: 51
Probaj da testiras memoriju, skini neki linux, narezi sve je legalno, digni masinu u live modu sa CD i testiraj memoriju.
To je prvo sto navode kao moguci uzrok za taj BSOD
 
Nakon što proveriš hardver (isključio si mogućnost loše ili nekompatibilne memorije, problem sa hardom i slično), probaj sa drugim antivirusom (npr. MS Essentials) i firewall-om, ako ga ima, a drajvere za grafičku kompletno obriši i instaliraj najnoviju verziju.
 
Dampove uvek možeš pogledati WinDebuggerom, koji dolazi uz Windows SDK, koji je free. Ne znam kakva je politika firme prema tome, ali skoro sam siguran da imaš problem sa drajverima. Mislim da nije grafika, ona u sedmici i u novijim Windowsima ide u user space i ne bi trebala da dovodi do BSODova.
Uglavnom,
PAGE_FAULT_IN_NONPAGED_AREA (50)
Invalid system memory was referenced. This cannot be protected by try-except,
it must be protected by a Probe. Typically the address is just plain bad or it
is pointing at freed memory.

Could not read faulting driver name - nažalost.
Dakle, proveri drajvere - onesposobi uređaje jedan po jedan, prvo ono što je verovatnije - drajver koji nije došao sa Windowsom ili kroz Windows update, itd...

!analyze -v
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

PAGE_FAULT_IN_NONPAGED_AREA (50)
Invalid system memory was referenced. This cannot be protected by try-except,
it must be protected by a Probe. Typically the address is just plain bad or it
is pointing at freed memory.
Arguments:
Arg1: fe546000, memory referenced.
Arg2: 00000001, value 0 = read operation, 1 = write operation.
Arg3: 9c1a7f27, If non-zero, the instruction address which referenced the bad memory
address.
Arg4: 00000000, (reserved)

Debugging Details:
------------------


Could not read faulting driver name

WRITE_ADDRESS: GetPointerFromAddress: unable to read from 829b9848
Unable to read MiSystemVaType memory at 82998e20
fe546000

FAULTING_IP:
win32k!sfac_GetLongGlyphIDs+5a
9c1a7f27 8906 mov dword ptr [esi],eax

MM_INTERNAL_CODE: 0

CUSTOMER_CRASH_COUNT: 1

DEFAULT_BUCKET_ID: WIN7_DRIVER_FAULT

BUGCHECK_STR: 0x50

PROCESS_NAME: csrss.exe

CURRENT_IRQL: 0

TRAP_FRAME: a2d3f220 -- (.trap 0xffffffffa2d3f220)
ErrCode = 00000002
eax=00000000 ebx=06460554 ecx=0000023e edx=00001e80 esi=fe546000 edi=00000b62
eip=9c1a7f27 esp=a2d3f294 ebp=a2d3f2a8 iopl=0 nv up ei pl zr na pe nc
cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00010246
win32k!sfac_GetLongGlyphIDs+0x5a:
9c1a7f27 8906 mov dword ptr [esi],eax ds:0023:fe546000=????????
Resetting default scope

LAST_CONTROL_TRANSFER: from 8288fae8 to 828dcb3f

STACK_TEXT:
a2d3f208 8288fae8 00000001 fe546000 00000000 nt!MmAccessFault+0x106
a2d3f208 9c1a7f27 00000001 fe546000 00000000 nt!KiTrap0E+0xdc
a2d3f2a8 9c1a8abd a2d3f39c 0000023e 00000b9a win32k!sfac_GetLongGlyphIDs+0x5a
a2d3f2d8 9c1a8ccd 00000b9a 0000051c 00000000 win32k!sfac_GetWinNTGlyphIDs+0x90
a2d3f2f8 9c1a61f5 a2d3f890 00000b9a 0000051c win32k!fs_WinNTGetGlyphIDs+0x44
a2d3f350 9c1a1030 01443f8a a2d3f890 fe5446e8 win32k!cjComputeGLYPHSET_MSFT_UNICODE+0x1f5
a2d3f370 9c1a94be ff553370 01443f8a a2d3f890 win32k!bLoadGlyphSet+0xab
a2d3f930 9c1a3aaf ff553370 00000001 3ee539e2 win32k!bReloadGlyphSet+0x1fd
a2d3f974 9c1a6801 00000000 ff553370 00000001 win32k!ttfdQueryFontTree+0x4e
a2d3f998 9c1a8f76 00000000 ff553640 00000001 win32k!ttfdSemQueryFontTree+0x33
a2d3f9d8 9c1bd6d6 00000000 ff553640 00000001 win32k!PDEVOBJ::QueryFontTree+0x36
a2d3fa14 9c1bafbe a2d3fbc4 86d58000 a2d3fa34 win32k!PFEOBJ::pfdg+0x7a
a2d3fac4 9c23735a a2d3fbc4 a2d3fb68 fbc7be98 win32k!RFONTOBJ::bRealizeFont+0x1c
a2d3fb70 9c237595 fbc7bd80 00000000 00000002 win32k!RFONTOBJ::bInit+0x2e3
a2d3fb88 9c1d2fa7 a2d3fbc4 00000000 00000002 win32k!RFONTOBJ::vInit+0x16
a2d3fba4 9c1d2f87 00000000 656d616e 00000000 win32k!ulGetFontData2+0x17
a2d3fbd0 9c1d3044 0301022b 656d616e 00000000 win32k!ulGetFontData+0x48
a2d3fc18 8288c8fa 0301022b 656d616e 00000000 win32k!NtGdiGetFontData+0x2d
a2d3fc18 77297094 0301022b 656d616e 00000000 nt!KiFastCallEntry+0x12a
WARNING: Frame IP not in any known module. Following frames may be wrong.
0018af30 00000000 00000000 00000000 00000000 0x77297094


STACK_COMMAND: kb

FOLLOWUP_IP:
win32k!sfac_GetLongGlyphIDs+5a
9c1a7f27 8906 mov dword ptr [esi],eax

SYMBOL_STACK_INDEX: 2

SYMBOL_NAME: win32k!sfac_GetLongGlyphIDs+5a

FOLLOWUP_NAME: MachineOwner

MODULE_NAME: win32k

IMAGE_NAME: win32k.sys

DEBUG_FLR_IMAGE_TIMESTAMP: 50aee5c0

FAILURE_BUCKET_ID: 0x50_win32k!sfac_GetLongGlyphIDs+5a

BUCKET_ID: 0x50_win32k!sfac_GetLongGlyphIDs+5a

Followup: MachineOwner
 
Dobio sam jos 20 BSOD u medjuvremenu.
Fora je da sam uzeo TRECI! racunar, lako je kad imas pun magacin, nije pitanje uopste. Stari nisam formatirao, pokusavam i dalje da ukapiram sta pravi problem.
Pocinjemo sa implementacijom, mozda nesto nije kompatibilno i zato mi je jako bitno da ukapiram sta. Naravno, to bi mi to bio oooogroman plus ako uhvatim bug pre instalacije na 12 brodova i preko 1000 racunara.

Sto se tice softvera, politika je prosta.
Imas listu, sto je na listi smes da koristis.
Npr, nemas sertifikovan IE9... I ne moze da dodje kroz update, zato sto neke web aplikacije pravljene pre 10 godina nisu doradjene dovoljno dobro (sigurnost pre svega)
Cim stavis neki softver, dobijes automatski mail da nije sertifikovan i da se mole admini da provere ko je to i zasto je to uradio...

Firewall je po defaultu ugasen i zakljucan, ne mozes da ga ukljucis. Zato sto milion aplikacija radi kroz mrezu.
Inace, planirao sam da podelim par slika sa vama cisto za ljubitelje velikih sistema. A jos kad novac nije pitanje, kad IT moze da kupi sebi miseve od 200 dolara, tastature od 150 i niko nas ne pita nista :)
Al o tome u drugoj temi.
za sad na novom racunaru ne dobijam BSOD. Svaki dan dodam po jednu app, i cekam...
 
Poz ako posle trece masine koja je nova imas BSOD
odgovor se sam namece nesto sa sofware nije u redu.
Pored novog kompa imam i jedan stari agp Abit NF7amd xp 2800+,2 GB rama, 3850 agp
200 GB HDD na njemu je nagurano sve i svasta 7 32 bit sljaka nenormalno dobro bez i jednog BSOD
 
Neka od aplikacija koje instaliraš instalira svoje drajvere i u njima je problem. Vidi se iz dumpa. Problem je u programiranju - ili je pointer loš ili je memorija ispražnjena.
Invalid system memory was referenced. This cannot be protected by try-except,
it must be protected by a Probe. Typically the address is just plain bad or it
is pointing at freed memory.
 
Ako si instalirao Windows 7 32 bita,a koliko vidim ti imas 16 gb memorije
onda to nece ici,prepoznaje samo do 4 gb.
Ostavi samo jedan slot pa probaj.
 
Poslednja izmena:
Nazad
Vrh Dno