blablabla95
New member
Hallo
Ich habe ein Problem mit meinem Pc, und zwar stürzt der in unregelmäßigen abständen einfach ab. ( Bluescreen)
Das komplizierte an der Sache ist, dass weder irgendein Programm noch irgendeine Hardware als Verursacher in Frage kommt.
Auch ein Virus kann es nicht sein, hab den Rechner Mehrmals mit Avira Antivirus Premium Durchgechekt.
WinDBG ( Windows-Debug) erzählt mir immer, dass irgendwelche Systemdateien die Verursacher seien und auch nich immer die selbe sonder jede erdenkliche, mal ksecdd.sys, mal ecache.sys, mal Ntfs.sys, halt immer unterschiedliche.
Habe das ganze vor einiger Zeit schonmal gepostet, da hat aber niemand eine Lösung gewusst.
Ich brauche eure Hilfe Wirklich, dass ist nähmlich ganzschön schei*e wenn der Pc dauernd und ohne erkeetlichen Grund Abstürzt
Lg
blabla95
P.S. Hier mal ein Beispiel Protokoll aus Windbg.:
Ich habe ein Problem mit meinem Pc, und zwar stürzt der in unregelmäßigen abständen einfach ab. ( Bluescreen)
Das komplizierte an der Sache ist, dass weder irgendein Programm noch irgendeine Hardware als Verursacher in Frage kommt.
Auch ein Virus kann es nicht sein, hab den Rechner Mehrmals mit Avira Antivirus Premium Durchgechekt.
WinDBG ( Windows-Debug) erzählt mir immer, dass irgendwelche Systemdateien die Verursacher seien und auch nich immer die selbe sonder jede erdenkliche, mal ksecdd.sys, mal ecache.sys, mal Ntfs.sys, halt immer unterschiedliche.
Habe das ganze vor einiger Zeit schonmal gepostet, da hat aber niemand eine Lösung gewusst.
Ich brauche eure Hilfe Wirklich, dass ist nähmlich ganzschön schei*e wenn der Pc dauernd und ohne erkeetlichen Grund Abstürzt
Lg
blabla95
P.S. Hier mal ein Beispiel Protokoll aus Windbg.:
Spoiler:
Copyright (c) Microsoft Corporation. All rights reserved.
Loading Dump File [C:\Windows\MEMORY.DMP]
Kernel Summary Dump File: Only kernel address space is available
Symbol search path is: SRV*c:\symbols*
Executable search path is: c:\windows\System32; c:\windows\system\System32;
Windows 7 Kernel Version 6002 (Service Pack 2) MP (2 procs) Free x86 compatible
Product: WinNt, suite: TerminalServer SingleUserTS Personal
Built by: 6002.18267.x86fre.vistasp2_gdr.100608-0458
Machine Name:
Kernel base = 0x81e17000 PsLoadedModuleList = 0x81f2ec70
Debug session time: Sat Feb 19 17:19:52.993 2011 (GMT+1)
System Uptime: 0 days 0:32:28.829
Loading Kernel Symbols
...............................................................
................................................................
..............
Loading User Symbols
Loading unloaded module list
....
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
Use !analyze -v to get detailed debugging information.
BugCheck C2, {42, 82001000, 0, 0}
Probably caused by : Ntfs.sys ( Ntfs!NtfsDeleteMdlAndBuffer+31 )
Followup: MachineOwner
---------
1: kd> !analyze -v
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
BAD_POOL_CALLER (c2)
The current thread is making a bad pool request. Typically this is at a bad IRQL level or double freeing the same allocation, etc.
Arguments:
Arg1: 00000042, Attempt to free a virtual address which was never in any pool
Arg2: 82001000, Address being freed.
Arg3: 00000000, 0
Arg4: 00000000, 0
Debugging Details:
------------------
FAULTING_IP:
Ntfs!NtfsDeleteMdlAndBuffer+31
87c1c324 5d pop ebp
BUGCHECK_STR: 0xc2_42
DEFAULT_BUCKET_ID: VISTA_DRIVER_FAULT
PROCESS_NAME: System
CURRENT_IRQL: 0
LAST_CONTROL_TRANSFER: from 81f06ba4 to 81ea7928
STACK_TEXT:
8a2350d4 81f06ba4 82001000 00000000 00001000 nt!MiFreePagedPoolPages+0xc9
8a2351b4 81f04414 82001000 844e7228 8a235260 nt!MiFreePoolPages+0x432
8a23521c 87c1c324 82001000 00000000 8a235248 nt!ExFreePoolWithTag+0x40e
8a23522c 87c1bfe4 860052f0 82001000 8a235260 Ntfs!NtfsDeleteMdlAndBuffer+0x31
8a235248 87c1b7e6 844e7228 8a235260 00000000 Ntfs!NtfsDeallocateCompressionBuffer+0x2d
8a235258 87c1b6bb 82001000 00001000 85535218 Ntfs!NtfsNonCachedIo+0x785
8a235378 87c14786 8a235520 844e7228 858b1008 Ntfs!NtfsNonCachedIo+0x664
8a2353e0 87c1e3d4 8a235520 844e7228 858b1008 Ntfs!NtfsNonCachedUsaWrite+0x145
8a235510 87c1c701 8a235520 844e7228 0118070a Ntfs!NtfsCommonWrite+0x1c15
8a2356ac 81e5b9c6 855353e0 844e7228 844e7228 Ntfs!NtfsFsdWrite+0x2dc
8a2356c4 807c7ba7 85574c18 844e7228 00000000 nt!IofCallDriver+0x63
8a2356e8 807c7d64 8a235708 85574c18 00000000 fltmgr!FltpLegacyProcessingAfterPreCallbacksCompleted+0x251
8a235720 81e5b9c6 85574c18 844e7228 00002000 fltmgr!FltpDispatch+0xc2
8a235738 81e4e904 9c15a046 8850db30 9dc28da0 nt!IofCallDriver+0x63
8a23574c 87c14d20 85727020 85574c18 8a2357fc nt!IoSynchronousPageWrite+0x10b
8a235824 87c8ac6e 8850db30 9c15a047 00000009 Ntfs!LfsFlushLfcb+0x54e
8a23587c 87c8b294 0150db30 9c15a047 00000009 Ntfs!LfsFlushToLsnPriv+0x1ad
8a2358c4 87c8b3ef 8850db30 00000001 0de733a6 Ntfs!LfsWriteLfsRestart+0x15a
8a235908 87c9253e 88518190 00000070 8a23596c Ntfs!LfsWriteRestartArea+0x118
8a235b2c 87c93203 8a235c28 85535498 00000000 Ntfs!NtfsCheckpointVolume+0x132c
8a235b80 87c92f34 8a235c28 85535498 8a235d43 Ntfs!NtfsCheckpointAllVolumesWorker+0x3b
8a235be0 87c9310e 8a235c28 00000000 87c931c4 Ntfs!NtfsForEachVcb+0xe6
8a235d44 81ebce22 00000000 00000000 85727020 Ntfs!NtfsCheckpointAllVolumes+0xab
8a235d7c 81fecc42 00000000 44443fc2 00000000 nt!ExpWorkerThread+0xfd
8a235dc0 81e55f4e 81ebcd25 80000000 00000000 nt!PspSystemThreadStartup+0x9d
00000000 00000000 00000000 00000000 00000000 nt!KiThreadStartup+0x16
STACK_COMMAND: kb
FOLLOWUP_IP:
Ntfs!NtfsDeleteMdlAndBuffer+31
87c1c324 5d pop ebp
SYMBOL_STACK_INDEX: 3
SYMBOL_NAME: Ntfs!NtfsDeleteMdlAndBuffer+31
FOLLOWUP_NAME: MachineOwner
MODULE_NAME: Ntfs
IMAGE_NAME: Ntfs.sys
DEBUG_FLR_IMAGE_TIMESTAMP: 49e0192a
FAILURE_BUCKET_ID: 0xc2_42_Ntfs!NtfsDeleteMdlAndBuffer+31
BUCKET_ID: 0xc2_42_Ntfs!NtfsDeleteMdlAndBuffer+31
Followup: MachineOwner
---------
1: kd> !analyze -v
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
BAD_POOL_CALLER (c2)
The current thread is making a bad pool request. Typically this is at a bad IRQL level or double freeing the same allocation, etc.
Arguments:
Arg1: 00000042, Attempt to free a virtual address which was never in any pool
Arg2: 82001000, Address being freed.
Arg3: 00000000, 0
Arg4: 00000000, 0
Debugging Details:
------------------
FAULTING_IP:
Ntfs!NtfsDeleteMdlAndBuffer+31
87c1c324 5d pop ebp
BUGCHECK_STR: 0xc2_42
DEFAULT_BUCKET_ID: VISTA_DRIVER_FAULT
PROCESS_NAME: System
CURRENT_IRQL: 0
LAST_CONTROL_TRANSFER: from 81f06ba4 to 81ea7928
STACK_TEXT:
8a2350d4 81f06ba4 82001000 00000000 00001000 nt!MiFreePagedPoolPages+0xc9
8a2351b4 81f04414 82001000 844e7228 8a235260 nt!MiFreePoolPages+0x432
8a23521c 87c1c324 82001000 00000000 8a235248 nt!ExFreePoolWithTag+0x40e
8a23522c 87c1bfe4 860052f0 82001000 8a235260 Ntfs!NtfsDeleteMdlAndBuffer+0x31
8a235248 87c1b7e6 844e7228 8a235260 00000000 Ntfs!NtfsDeallocateCompressionBuffer+0x2d
8a235258 87c1b6bb 82001000 00001000 85535218 Ntfs!NtfsNonCachedIo+0x785
8a235378 87c14786 8a235520 844e7228 858b1008 Ntfs!NtfsNonCachedIo+0x664
8a2353e0 87c1e3d4 8a235520 844e7228 858b1008 Ntfs!NtfsNonCachedUsaWrite+0x145
8a235510 87c1c701 8a235520 844e7228 0118070a Ntfs!NtfsCommonWrite+0x1c15
8a2356ac 81e5b9c6 855353e0 844e7228 844e7228 Ntfs!NtfsFsdWrite+0x2dc
8a2356c4 807c7ba7 85574c18 844e7228 00000000 nt!IofCallDriver+0x63
8a2356e8 807c7d64 8a235708 85574c18 00000000 fltmgr!FltpLegacyProcessingAfterPreCallbacksCompleted+0x251
8a235720 81e5b9c6 85574c18 844e7228 00002000 fltmgr!FltpDispatch+0xc2
8a235738 81e4e904 9c15a046 8850db30 9dc28da0 nt!IofCallDriver+0x63
8a23574c 87c14d20 85727020 85574c18 8a2357fc nt!IoSynchronousPageWrite+0x10b
8a235824 87c8ac6e 8850db30 9c15a047 00000009 Ntfs!LfsFlushLfcb+0x54e
8a23587c 87c8b294 0150db30 9c15a047 00000009 Ntfs!LfsFlushToLsnPriv+0x1ad
8a2358c4 87c8b3ef 8850db30 00000001 0de733a6 Ntfs!LfsWriteLfsRestart+0x15a
8a235908 87c9253e 88518190 00000070 8a23596c Ntfs!LfsWriteRestartArea+0x118
8a235b2c 87c93203 8a235c28 85535498 00000000 Ntfs!NtfsCheckpointVolume+0x132c
8a235b80 87c92f34 8a235c28 85535498 8a235d43 Ntfs!NtfsCheckpointAllVolumesWorker+0x3b
8a235be0 87c9310e 8a235c28 00000000 87c931c4 Ntfs!NtfsForEachVcb+0xe6
8a235d44 81ebce22 00000000 00000000 85727020 Ntfs!NtfsCheckpointAllVolumes+0xab
8a235d7c 81fecc42 00000000 44443fc2 00000000 nt!ExpWorkerThread+0xfd
8a235dc0 81e55f4e 81ebcd25 80000000 00000000 nt!PspSystemThreadStartup+0x9d
00000000 00000000 00000000 00000000 00000000 nt!KiThreadStartup+0x16
STACK_COMMAND: kb
FOLLOWUP_IP:
Ntfs!NtfsDeleteMdlAndBuffer+31
87c1c324 5d pop ebp
SYMBOL_STACK_INDEX: 3
SYMBOL_NAME: Ntfs!NtfsDeleteMdlAndBuffer+31
FOLLOWUP_NAME: MachineOwner
MODULE_NAME: Ntfs
IMAGE_NAME: Ntfs.sys
DEBUG_FLR_IMAGE_TIMESTAMP: 49e0192a
FAILURE_BUCKET_ID: 0xc2_42_Ntfs!NtfsDeleteMdlAndBuffer+31
BUCKET_ID: 0xc2_42_Ntfs!NtfsDeleteMdlAndBuffer+31
Followup: MachineOwner
---------
1: kd> !analyze -v
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
BAD_POOL_CALLER (c2)
The current thread is making a bad pool request. Typically this is at a bad IRQL level or double freeing the same allocation, etc.
Arguments:
Arg1: 00000042, Attempt to free a virtual address which was never in any pool
Arg2: 82001000, Address being freed.
Arg3: 00000000, 0
Arg4: 00000000, 0
Debugging Details:
------------------
FAULTING_IP:
Ntfs!NtfsDeleteMdlAndBuffer+31
87c1c324 5d pop ebp
BUGCHECK_STR: 0xc2_42
DEFAULT_BUCKET_ID: VISTA_DRIVER_FAULT
PROCESS_NAME: System
CURRENT_IRQL: 0
LAST_CONTROL_TRANSFER: from 81f06ba4 to 81ea7928
STACK_TEXT:
8a2350d4 81f06ba4 82001000 00000000 00001000 nt!MiFreePagedPoolPages+0xc9
8a2351b4 81f04414 82001000 844e7228 8a235260 nt!MiFreePoolPages+0x432
8a23521c 87c1c324 82001000 00000000 8a235248 nt!ExFreePoolWithTag+0x40e
8a23522c 87c1bfe4 860052f0 82001000 8a235260 Ntfs!NtfsDeleteMdlAndBuffer+0x31
8a235248 87c1b7e6 844e7228 8a235260 00000000 Ntfs!NtfsDeallocateCompressionBuffer+0x2d
8a235258 87c1b6bb 82001000 00001000 85535218 Ntfs!NtfsNonCachedIo+0x785
8a235378 87c14786 8a235520 844e7228 858b1008 Ntfs!NtfsNonCachedIo+0x664
8a2353e0 87c1e3d4 8a235520 844e7228 858b1008 Ntfs!NtfsNonCachedUsaWrite+0x145
8a235510 87c1c701 8a235520 844e7228 0118070a Ntfs!NtfsCommonWrite+0x1c15
8a2356ac 81e5b9c6 855353e0 844e7228 844e7228 Ntfs!NtfsFsdWrite+0x2dc
8a2356c4 807c7ba7 85574c18 844e7228 00000000 nt!IofCallDriver+0x63
8a2356e8 807c7d64 8a235708 85574c18 00000000 fltmgr!FltpLegacyProcessingAfterPreCallbacksCompleted+0x251
8a235720 81e5b9c6 85574c18 844e7228 00002000 fltmgr!FltpDispatch+0xc2
8a235738 81e4e904 9c15a046 8850db30 9dc28da0 nt!IofCallDriver+0x63
8a23574c 87c14d20 85727020 85574c18 8a2357fc nt!IoSynchronousPageWrite+0x10b
8a235824 87c8ac6e 8850db30 9c15a047 00000009 Ntfs!LfsFlushLfcb+0x54e
8a23587c 87c8b294 0150db30 9c15a047 00000009 Ntfs!LfsFlushToLsnPriv+0x1ad
8a2358c4 87c8b3ef 8850db30 00000001 0de733a6 Ntfs!LfsWriteLfsRestart+0x15a
8a235908 87c9253e 88518190 00000070 8a23596c Ntfs!LfsWriteRestartArea+0x118
8a235b2c 87c93203 8a235c28 85535498 00000000 Ntfs!NtfsCheckpointVolume+0x132c
8a235b80 87c92f34 8a235c28 85535498 8a235d43 Ntfs!NtfsCheckpointAllVolumesWorker+0x3b
8a235be0 87c9310e 8a235c28 00000000 87c931c4 Ntfs!NtfsForEachVcb+0xe6
8a235d44 81ebce22 00000000 00000000 85727020 Ntfs!NtfsCheckpointAllVolumes+0xab
8a235d7c 81fecc42 00000000 44443fc2 00000000 nt!ExpWorkerThread+0xfd
8a235dc0 81e55f4e 81ebcd25 80000000 00000000 nt!PspSystemThreadStartup+0x9d
00000000 00000000 00000000 00000000 00000000 nt!KiThreadStartup+0x16
STACK_COMMAND: kb
FOLLOWUP_IP:
Ntfs!NtfsDeleteMdlAndBuffer+31
87c1c324 5d pop ebp
SYMBOL_STACK_INDEX: 3
SYMBOL_NAME: Ntfs!NtfsDeleteMdlAndBuffer+31
FOLLOWUP_NAME: MachineOwner
MODULE_NAME: Ntfs
IMAGE_NAME: Ntfs.sys
DEBUG_FLR_IMAGE_TIMESTAMP: 49e0192a
FAILURE_BUCKET_ID: 0xc2_42_Ntfs!NtfsDeleteMdlAndBuffer+31
BUCKET_ID: 0xc2_42_Ntfs!NtfsDeleteMdlAndBuffer+31
Followup: MachineOwner
---------
1: kd> !analyze -v
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
BAD_POOL_CALLER (c2)
The current thread is making a bad pool request. Typically this is at a bad IRQL level or double freeing the same allocation, etc.
Arguments:
Arg1: 00000042, Attempt to free a virtual address which was never in any pool
Arg2: 82001000, Address being freed.
Arg3: 00000000, 0
Arg4: 00000000, 0
Debugging Details:
------------------
FAULTING_IP:
Ntfs!NtfsDeleteMdlAndBuffer+31
87c1c324 5d pop ebp
BUGCHECK_STR: 0xc2_42
DEFAULT_BUCKET_ID: VISTA_DRIVER_FAULT
PROCESS_NAME: System
CURRENT_IRQL: 0
LAST_CONTROL_TRANSFER: from 81f06ba4 to 81ea7928
STACK_TEXT:
8a2350d4 81f06ba4 82001000 00000000 00001000 nt!MiFreePagedPoolPages+0xc9
8a2351b4 81f04414 82001000 844e7228 8a235260 nt!MiFreePoolPages+0x432
8a23521c 87c1c324 82001000 00000000 8a235248 nt!ExFreePoolWithTag+0x40e
8a23522c 87c1bfe4 860052f0 82001000 8a235260 Ntfs!NtfsDeleteMdlAndBuffer+0x31
8a235248 87c1b7e6 844e7228 8a235260 00000000 Ntfs!NtfsDeallocateCompressionBuffer+0x2d
8a235258 87c1b6bb 82001000 00001000 85535218 Ntfs!NtfsNonCachedIo+0x785
8a235378 87c14786 8a235520 844e7228 858b1008 Ntfs!NtfsNonCachedIo+0x664
8a2353e0 87c1e3d4 8a235520 844e7228 858b1008 Ntfs!NtfsNonCachedUsaWrite+0x145
8a235510 87c1c701 8a235520 844e7228 0118070a Ntfs!NtfsCommonWrite+0x1c15
8a2356ac 81e5b9c6 855353e0 844e7228 844e7228 Ntfs!NtfsFsdWrite+0x2dc
8a2356c4 807c7ba7 85574c18 844e7228 00000000 nt!IofCallDriver+0x63
8a2356e8 807c7d64 8a235708 85574c18 00000000 fltmgr!FltpLegacyProcessingAfterPreCallbacksCompleted+0x251
8a235720 81e5b9c6 85574c18 844e7228 00002000 fltmgr!FltpDispatch+0xc2
8a235738 81e4e904 9c15a046 8850db30 9dc28da0 nt!IofCallDriver+0x63
8a23574c 87c14d20 85727020 85574c18 8a2357fc nt!IoSynchronousPageWrite+0x10b
8a235824 87c8ac6e 8850db30 9c15a047 00000009 Ntfs!LfsFlushLfcb+0x54e
8a23587c 87c8b294 0150db30 9c15a047 00000009 Ntfs!LfsFlushToLsnPriv+0x1ad
8a2358c4 87c8b3ef 8850db30 00000001 0de733a6 Ntfs!LfsWriteLfsRestart+0x15a
8a235908 87c9253e 88518190 00000070 8a23596c Ntfs!LfsWriteRestartArea+0x118
8a235b2c 87c93203 8a235c28 85535498 00000000 Ntfs!NtfsCheckpointVolume+0x132c
8a235b80 87c92f34 8a235c28 85535498 8a235d43 Ntfs!NtfsCheckpointAllVolumesWorker+0x3b
8a235be0 87c9310e 8a235c28 00000000 87c931c4 Ntfs!NtfsForEachVcb+0xe6
8a235d44 81ebce22 00000000 00000000 85727020 Ntfs!NtfsCheckpointAllVolumes+0xab
8a235d7c 81fecc42 00000000 44443fc2 00000000 nt!ExpWorkerThread+0xfd
8a235dc0 81e55f4e 81ebcd25 80000000 00000000 nt!PspSystemThreadStartup+0x9d
00000000 00000000 00000000 00000000 00000000 nt!KiThreadStartup+0x16
STACK_COMMAND: kb
FOLLOWUP_IP:
Ntfs!NtfsDeleteMdlAndBuffer+31
87c1c324 5d pop ebp
SYMBOL_STACK_INDEX: 3
SYMBOL_NAME: Ntfs!NtfsDeleteMdlAndBuffer+31
FOLLOWUP_NAME: MachineOwner
MODULE_NAME: Ntfs
IMAGE_NAME: Ntfs.sys
DEBUG_FLR_IMAGE_TIMESTAMP: 49e0192a
FAILURE_BUCKET_ID: 0xc2_42_Ntfs!NtfsDeleteMdlAndBuffer+31
BUCKET_ID: 0xc2_42_Ntfs!NtfsDeleteMdlAndBuffer+31
Followup: MachineOwner
---------
Loading Dump File [C:\Windows\MEMORY.DMP]
Kernel Summary Dump File: Only kernel address space is available
Symbol search path is: SRV*c:\symbols*
Du hast keine Berechtigung, den Link zu sehen, bitte Anmelden oder Registrieren
Executable search path is: c:\windows\System32; c:\windows\system\System32;
Du hast keine Berechtigung, den Link zu sehen, bitte Anmelden oder Registrieren
Windows 7 Kernel Version 6002 (Service Pack 2) MP (2 procs) Free x86 compatible
Product: WinNt, suite: TerminalServer SingleUserTS Personal
Built by: 6002.18267.x86fre.vistasp2_gdr.100608-0458
Machine Name:
Kernel base = 0x81e17000 PsLoadedModuleList = 0x81f2ec70
Debug session time: Sat Feb 19 17:19:52.993 2011 (GMT+1)
System Uptime: 0 days 0:32:28.829
Loading Kernel Symbols
...............................................................
................................................................
..............
Loading User Symbols
Loading unloaded module list
....
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
Use !analyze -v to get detailed debugging information.
BugCheck C2, {42, 82001000, 0, 0}
Probably caused by : Ntfs.sys ( Ntfs!NtfsDeleteMdlAndBuffer+31 )
Followup: MachineOwner
---------
1: kd> !analyze -v
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
BAD_POOL_CALLER (c2)
The current thread is making a bad pool request. Typically this is at a bad IRQL level or double freeing the same allocation, etc.
Arguments:
Arg1: 00000042, Attempt to free a virtual address which was never in any pool
Arg2: 82001000, Address being freed.
Arg3: 00000000, 0
Arg4: 00000000, 0
Debugging Details:
------------------
FAULTING_IP:
Ntfs!NtfsDeleteMdlAndBuffer+31
87c1c324 5d pop ebp
BUGCHECK_STR: 0xc2_42
DEFAULT_BUCKET_ID: VISTA_DRIVER_FAULT
PROCESS_NAME: System
CURRENT_IRQL: 0
LAST_CONTROL_TRANSFER: from 81f06ba4 to 81ea7928
STACK_TEXT:
8a2350d4 81f06ba4 82001000 00000000 00001000 nt!MiFreePagedPoolPages+0xc9
8a2351b4 81f04414 82001000 844e7228 8a235260 nt!MiFreePoolPages+0x432
8a23521c 87c1c324 82001000 00000000 8a235248 nt!ExFreePoolWithTag+0x40e
8a23522c 87c1bfe4 860052f0 82001000 8a235260 Ntfs!NtfsDeleteMdlAndBuffer+0x31
8a235248 87c1b7e6 844e7228 8a235260 00000000 Ntfs!NtfsDeallocateCompressionBuffer+0x2d
8a235258 87c1b6bb 82001000 00001000 85535218 Ntfs!NtfsNonCachedIo+0x785
8a235378 87c14786 8a235520 844e7228 858b1008 Ntfs!NtfsNonCachedIo+0x664
8a2353e0 87c1e3d4 8a235520 844e7228 858b1008 Ntfs!NtfsNonCachedUsaWrite+0x145
8a235510 87c1c701 8a235520 844e7228 0118070a Ntfs!NtfsCommonWrite+0x1c15
8a2356ac 81e5b9c6 855353e0 844e7228 844e7228 Ntfs!NtfsFsdWrite+0x2dc
8a2356c4 807c7ba7 85574c18 844e7228 00000000 nt!IofCallDriver+0x63
8a2356e8 807c7d64 8a235708 85574c18 00000000 fltmgr!FltpLegacyProcessingAfterPreCallbacksCompleted+0x251
8a235720 81e5b9c6 85574c18 844e7228 00002000 fltmgr!FltpDispatch+0xc2
8a235738 81e4e904 9c15a046 8850db30 9dc28da0 nt!IofCallDriver+0x63
8a23574c 87c14d20 85727020 85574c18 8a2357fc nt!IoSynchronousPageWrite+0x10b
8a235824 87c8ac6e 8850db30 9c15a047 00000009 Ntfs!LfsFlushLfcb+0x54e
8a23587c 87c8b294 0150db30 9c15a047 00000009 Ntfs!LfsFlushToLsnPriv+0x1ad
8a2358c4 87c8b3ef 8850db30 00000001 0de733a6 Ntfs!LfsWriteLfsRestart+0x15a
8a235908 87c9253e 88518190 00000070 8a23596c Ntfs!LfsWriteRestartArea+0x118
8a235b2c 87c93203 8a235c28 85535498 00000000 Ntfs!NtfsCheckpointVolume+0x132c
8a235b80 87c92f34 8a235c28 85535498 8a235d43 Ntfs!NtfsCheckpointAllVolumesWorker+0x3b
8a235be0 87c9310e 8a235c28 00000000 87c931c4 Ntfs!NtfsForEachVcb+0xe6
8a235d44 81ebce22 00000000 00000000 85727020 Ntfs!NtfsCheckpointAllVolumes+0xab
8a235d7c 81fecc42 00000000 44443fc2 00000000 nt!ExpWorkerThread+0xfd
8a235dc0 81e55f4e 81ebcd25 80000000 00000000 nt!PspSystemThreadStartup+0x9d
00000000 00000000 00000000 00000000 00000000 nt!KiThreadStartup+0x16
STACK_COMMAND: kb
FOLLOWUP_IP:
Ntfs!NtfsDeleteMdlAndBuffer+31
87c1c324 5d pop ebp
SYMBOL_STACK_INDEX: 3
SYMBOL_NAME: Ntfs!NtfsDeleteMdlAndBuffer+31
FOLLOWUP_NAME: MachineOwner
MODULE_NAME: Ntfs
IMAGE_NAME: Ntfs.sys
DEBUG_FLR_IMAGE_TIMESTAMP: 49e0192a
FAILURE_BUCKET_ID: 0xc2_42_Ntfs!NtfsDeleteMdlAndBuffer+31
BUCKET_ID: 0xc2_42_Ntfs!NtfsDeleteMdlAndBuffer+31
Followup: MachineOwner
---------
1: kd> !analyze -v
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
BAD_POOL_CALLER (c2)
The current thread is making a bad pool request. Typically this is at a bad IRQL level or double freeing the same allocation, etc.
Arguments:
Arg1: 00000042, Attempt to free a virtual address which was never in any pool
Arg2: 82001000, Address being freed.
Arg3: 00000000, 0
Arg4: 00000000, 0
Debugging Details:
------------------
FAULTING_IP:
Ntfs!NtfsDeleteMdlAndBuffer+31
87c1c324 5d pop ebp
BUGCHECK_STR: 0xc2_42
DEFAULT_BUCKET_ID: VISTA_DRIVER_FAULT
PROCESS_NAME: System
CURRENT_IRQL: 0
LAST_CONTROL_TRANSFER: from 81f06ba4 to 81ea7928
STACK_TEXT:
8a2350d4 81f06ba4 82001000 00000000 00001000 nt!MiFreePagedPoolPages+0xc9
8a2351b4 81f04414 82001000 844e7228 8a235260 nt!MiFreePoolPages+0x432
8a23521c 87c1c324 82001000 00000000 8a235248 nt!ExFreePoolWithTag+0x40e
8a23522c 87c1bfe4 860052f0 82001000 8a235260 Ntfs!NtfsDeleteMdlAndBuffer+0x31
8a235248 87c1b7e6 844e7228 8a235260 00000000 Ntfs!NtfsDeallocateCompressionBuffer+0x2d
8a235258 87c1b6bb 82001000 00001000 85535218 Ntfs!NtfsNonCachedIo+0x785
8a235378 87c14786 8a235520 844e7228 858b1008 Ntfs!NtfsNonCachedIo+0x664
8a2353e0 87c1e3d4 8a235520 844e7228 858b1008 Ntfs!NtfsNonCachedUsaWrite+0x145
8a235510 87c1c701 8a235520 844e7228 0118070a Ntfs!NtfsCommonWrite+0x1c15
8a2356ac 81e5b9c6 855353e0 844e7228 844e7228 Ntfs!NtfsFsdWrite+0x2dc
8a2356c4 807c7ba7 85574c18 844e7228 00000000 nt!IofCallDriver+0x63
8a2356e8 807c7d64 8a235708 85574c18 00000000 fltmgr!FltpLegacyProcessingAfterPreCallbacksCompleted+0x251
8a235720 81e5b9c6 85574c18 844e7228 00002000 fltmgr!FltpDispatch+0xc2
8a235738 81e4e904 9c15a046 8850db30 9dc28da0 nt!IofCallDriver+0x63
8a23574c 87c14d20 85727020 85574c18 8a2357fc nt!IoSynchronousPageWrite+0x10b
8a235824 87c8ac6e 8850db30 9c15a047 00000009 Ntfs!LfsFlushLfcb+0x54e
8a23587c 87c8b294 0150db30 9c15a047 00000009 Ntfs!LfsFlushToLsnPriv+0x1ad
8a2358c4 87c8b3ef 8850db30 00000001 0de733a6 Ntfs!LfsWriteLfsRestart+0x15a
8a235908 87c9253e 88518190 00000070 8a23596c Ntfs!LfsWriteRestartArea+0x118
8a235b2c 87c93203 8a235c28 85535498 00000000 Ntfs!NtfsCheckpointVolume+0x132c
8a235b80 87c92f34 8a235c28 85535498 8a235d43 Ntfs!NtfsCheckpointAllVolumesWorker+0x3b
8a235be0 87c9310e 8a235c28 00000000 87c931c4 Ntfs!NtfsForEachVcb+0xe6
8a235d44 81ebce22 00000000 00000000 85727020 Ntfs!NtfsCheckpointAllVolumes+0xab
8a235d7c 81fecc42 00000000 44443fc2 00000000 nt!ExpWorkerThread+0xfd
8a235dc0 81e55f4e 81ebcd25 80000000 00000000 nt!PspSystemThreadStartup+0x9d
00000000 00000000 00000000 00000000 00000000 nt!KiThreadStartup+0x16
STACK_COMMAND: kb
FOLLOWUP_IP:
Ntfs!NtfsDeleteMdlAndBuffer+31
87c1c324 5d pop ebp
SYMBOL_STACK_INDEX: 3
SYMBOL_NAME: Ntfs!NtfsDeleteMdlAndBuffer+31
FOLLOWUP_NAME: MachineOwner
MODULE_NAME: Ntfs
IMAGE_NAME: Ntfs.sys
DEBUG_FLR_IMAGE_TIMESTAMP: 49e0192a
FAILURE_BUCKET_ID: 0xc2_42_Ntfs!NtfsDeleteMdlAndBuffer+31
BUCKET_ID: 0xc2_42_Ntfs!NtfsDeleteMdlAndBuffer+31
Followup: MachineOwner
---------
1: kd> !analyze -v
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
BAD_POOL_CALLER (c2)
The current thread is making a bad pool request. Typically this is at a bad IRQL level or double freeing the same allocation, etc.
Arguments:
Arg1: 00000042, Attempt to free a virtual address which was never in any pool
Arg2: 82001000, Address being freed.
Arg3: 00000000, 0
Arg4: 00000000, 0
Debugging Details:
------------------
FAULTING_IP:
Ntfs!NtfsDeleteMdlAndBuffer+31
87c1c324 5d pop ebp
BUGCHECK_STR: 0xc2_42
DEFAULT_BUCKET_ID: VISTA_DRIVER_FAULT
PROCESS_NAME: System
CURRENT_IRQL: 0
LAST_CONTROL_TRANSFER: from 81f06ba4 to 81ea7928
STACK_TEXT:
8a2350d4 81f06ba4 82001000 00000000 00001000 nt!MiFreePagedPoolPages+0xc9
8a2351b4 81f04414 82001000 844e7228 8a235260 nt!MiFreePoolPages+0x432
8a23521c 87c1c324 82001000 00000000 8a235248 nt!ExFreePoolWithTag+0x40e
8a23522c 87c1bfe4 860052f0 82001000 8a235260 Ntfs!NtfsDeleteMdlAndBuffer+0x31
8a235248 87c1b7e6 844e7228 8a235260 00000000 Ntfs!NtfsDeallocateCompressionBuffer+0x2d
8a235258 87c1b6bb 82001000 00001000 85535218 Ntfs!NtfsNonCachedIo+0x785
8a235378 87c14786 8a235520 844e7228 858b1008 Ntfs!NtfsNonCachedIo+0x664
8a2353e0 87c1e3d4 8a235520 844e7228 858b1008 Ntfs!NtfsNonCachedUsaWrite+0x145
8a235510 87c1c701 8a235520 844e7228 0118070a Ntfs!NtfsCommonWrite+0x1c15
8a2356ac 81e5b9c6 855353e0 844e7228 844e7228 Ntfs!NtfsFsdWrite+0x2dc
8a2356c4 807c7ba7 85574c18 844e7228 00000000 nt!IofCallDriver+0x63
8a2356e8 807c7d64 8a235708 85574c18 00000000 fltmgr!FltpLegacyProcessingAfterPreCallbacksCompleted+0x251
8a235720 81e5b9c6 85574c18 844e7228 00002000 fltmgr!FltpDispatch+0xc2
8a235738 81e4e904 9c15a046 8850db30 9dc28da0 nt!IofCallDriver+0x63
8a23574c 87c14d20 85727020 85574c18 8a2357fc nt!IoSynchronousPageWrite+0x10b
8a235824 87c8ac6e 8850db30 9c15a047 00000009 Ntfs!LfsFlushLfcb+0x54e
8a23587c 87c8b294 0150db30 9c15a047 00000009 Ntfs!LfsFlushToLsnPriv+0x1ad
8a2358c4 87c8b3ef 8850db30 00000001 0de733a6 Ntfs!LfsWriteLfsRestart+0x15a
8a235908 87c9253e 88518190 00000070 8a23596c Ntfs!LfsWriteRestartArea+0x118
8a235b2c 87c93203 8a235c28 85535498 00000000 Ntfs!NtfsCheckpointVolume+0x132c
8a235b80 87c92f34 8a235c28 85535498 8a235d43 Ntfs!NtfsCheckpointAllVolumesWorker+0x3b
8a235be0 87c9310e 8a235c28 00000000 87c931c4 Ntfs!NtfsForEachVcb+0xe6
8a235d44 81ebce22 00000000 00000000 85727020 Ntfs!NtfsCheckpointAllVolumes+0xab
8a235d7c 81fecc42 00000000 44443fc2 00000000 nt!ExpWorkerThread+0xfd
8a235dc0 81e55f4e 81ebcd25 80000000 00000000 nt!PspSystemThreadStartup+0x9d
00000000 00000000 00000000 00000000 00000000 nt!KiThreadStartup+0x16
STACK_COMMAND: kb
FOLLOWUP_IP:
Ntfs!NtfsDeleteMdlAndBuffer+31
87c1c324 5d pop ebp
SYMBOL_STACK_INDEX: 3
SYMBOL_NAME: Ntfs!NtfsDeleteMdlAndBuffer+31
FOLLOWUP_NAME: MachineOwner
MODULE_NAME: Ntfs
IMAGE_NAME: Ntfs.sys
DEBUG_FLR_IMAGE_TIMESTAMP: 49e0192a
FAILURE_BUCKET_ID: 0xc2_42_Ntfs!NtfsDeleteMdlAndBuffer+31
BUCKET_ID: 0xc2_42_Ntfs!NtfsDeleteMdlAndBuffer+31
Followup: MachineOwner
---------
1: kd> !analyze -v
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
BAD_POOL_CALLER (c2)
The current thread is making a bad pool request. Typically this is at a bad IRQL level or double freeing the same allocation, etc.
Arguments:
Arg1: 00000042, Attempt to free a virtual address which was never in any pool
Arg2: 82001000, Address being freed.
Arg3: 00000000, 0
Arg4: 00000000, 0
Debugging Details:
------------------
FAULTING_IP:
Ntfs!NtfsDeleteMdlAndBuffer+31
87c1c324 5d pop ebp
BUGCHECK_STR: 0xc2_42
DEFAULT_BUCKET_ID: VISTA_DRIVER_FAULT
PROCESS_NAME: System
CURRENT_IRQL: 0
LAST_CONTROL_TRANSFER: from 81f06ba4 to 81ea7928
STACK_TEXT:
8a2350d4 81f06ba4 82001000 00000000 00001000 nt!MiFreePagedPoolPages+0xc9
8a2351b4 81f04414 82001000 844e7228 8a235260 nt!MiFreePoolPages+0x432
8a23521c 87c1c324 82001000 00000000 8a235248 nt!ExFreePoolWithTag+0x40e
8a23522c 87c1bfe4 860052f0 82001000 8a235260 Ntfs!NtfsDeleteMdlAndBuffer+0x31
8a235248 87c1b7e6 844e7228 8a235260 00000000 Ntfs!NtfsDeallocateCompressionBuffer+0x2d
8a235258 87c1b6bb 82001000 00001000 85535218 Ntfs!NtfsNonCachedIo+0x785
8a235378 87c14786 8a235520 844e7228 858b1008 Ntfs!NtfsNonCachedIo+0x664
8a2353e0 87c1e3d4 8a235520 844e7228 858b1008 Ntfs!NtfsNonCachedUsaWrite+0x145
8a235510 87c1c701 8a235520 844e7228 0118070a Ntfs!NtfsCommonWrite+0x1c15
8a2356ac 81e5b9c6 855353e0 844e7228 844e7228 Ntfs!NtfsFsdWrite+0x2dc
8a2356c4 807c7ba7 85574c18 844e7228 00000000 nt!IofCallDriver+0x63
8a2356e8 807c7d64 8a235708 85574c18 00000000 fltmgr!FltpLegacyProcessingAfterPreCallbacksCompleted+0x251
8a235720 81e5b9c6 85574c18 844e7228 00002000 fltmgr!FltpDispatch+0xc2
8a235738 81e4e904 9c15a046 8850db30 9dc28da0 nt!IofCallDriver+0x63
8a23574c 87c14d20 85727020 85574c18 8a2357fc nt!IoSynchronousPageWrite+0x10b
8a235824 87c8ac6e 8850db30 9c15a047 00000009 Ntfs!LfsFlushLfcb+0x54e
8a23587c 87c8b294 0150db30 9c15a047 00000009 Ntfs!LfsFlushToLsnPriv+0x1ad
8a2358c4 87c8b3ef 8850db30 00000001 0de733a6 Ntfs!LfsWriteLfsRestart+0x15a
8a235908 87c9253e 88518190 00000070 8a23596c Ntfs!LfsWriteRestartArea+0x118
8a235b2c 87c93203 8a235c28 85535498 00000000 Ntfs!NtfsCheckpointVolume+0x132c
8a235b80 87c92f34 8a235c28 85535498 8a235d43 Ntfs!NtfsCheckpointAllVolumesWorker+0x3b
8a235be0 87c9310e 8a235c28 00000000 87c931c4 Ntfs!NtfsForEachVcb+0xe6
8a235d44 81ebce22 00000000 00000000 85727020 Ntfs!NtfsCheckpointAllVolumes+0xab
8a235d7c 81fecc42 00000000 44443fc2 00000000 nt!ExpWorkerThread+0xfd
8a235dc0 81e55f4e 81ebcd25 80000000 00000000 nt!PspSystemThreadStartup+0x9d
00000000 00000000 00000000 00000000 00000000 nt!KiThreadStartup+0x16
STACK_COMMAND: kb
FOLLOWUP_IP:
Ntfs!NtfsDeleteMdlAndBuffer+31
87c1c324 5d pop ebp
SYMBOL_STACK_INDEX: 3
SYMBOL_NAME: Ntfs!NtfsDeleteMdlAndBuffer+31
FOLLOWUP_NAME: MachineOwner
MODULE_NAME: Ntfs
IMAGE_NAME: Ntfs.sys
DEBUG_FLR_IMAGE_TIMESTAMP: 49e0192a
FAILURE_BUCKET_ID: 0xc2_42_Ntfs!NtfsDeleteMdlAndBuffer+31
BUCKET_ID: 0xc2_42_Ntfs!NtfsDeleteMdlAndBuffer+31
Followup: MachineOwner
---------
Zuletzt bearbeitet von einem Moderator: