J'ai fait quelque recherche pour utiliser win dbg et j'ai pu ouvrir le fichier dmp,
j'ai pas les notion pour comprendre ou dechiffrer les ligne de texte qu'il m'a afficher peut etre tu peut y voir plus claire que moi.
Merci d'avance.
Microsoft (R) Windows Debugger Version 6.9.0003.113 X86
Copyright (c) Microsoft Corporation. All rights reserved.
Loading Dump File [C:\Users\Ammouri family\AppData\Local\Temp\WER9781.tmp\Mini083008-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available
Symbol search path is: "srv*c:\cache*http://msdl.microsoft.com/download/symbols;"
Executable search path is:
Unable to load image \SystemRoot\system32\ntkrnlpa.exe, Win32 error 0n2
*** WARNING: Unable to verify timestamp for ntkrnlpa.exe
*** ERROR: Module load completed but symbols could not be loaded for ntkrnlpa.exe
Windows Server 2008 Kernel Version 6001 (Service Pack 1) MP (4 procs) Free x86 compatible
Product: WinNt, suite: TerminalServer SingleUserTS
Kernel base = 0x81c3d000 PsLoadedModuleList = 0x81d54c70
Debug session time: Sat Aug 30 06:41:41.940 2008 (GMT+2)
System Uptime: 0 days 11:58:31.306
Unable to load image \SystemRoot\system32\ntkrnlpa.exe, Win32 error 0n2
*** WARNING: Unable to verify timestamp for ntkrnlpa.exe
*** ERROR: Module load completed but symbols could not be loaded for ntkrnlpa.exe
Loading Kernel Symbols
................................................................................................................................................
Loading User Symbols
Loading unloaded module list
.........
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
Use !analyze -v to get detailed debugging information.
BugCheck 50, {a298e314, 1, 8a77753b, 0}
*** WARNING: Unable to verify timestamp for dxgkrnl.sys
*** ERROR: Module load completed but symbols could not be loaded for dxgkrnl.sys
***** Kernel symbols are WRONG. Please fix symbols to do analysis.
*************************************************************************
*** ***
*** ***
*** Your debugger is not using the correct symbols ***
*** ***
*** In order for this command to work properly, your symbol path ***
*** must point to .pdb files that have full type information. ***
*** ***
*** Certain .pdb files (such as the public OS symbols) do not ***
*** contain the required information. Contact the group that ***
*** provided you with these symbols if you need this command to ***
*** work. ***
*** ***
*** Type referenced: nt!_KPRCB ***
*** ***
*************************************************************************
*************************************************************************
*** ***
*** ***
*** Your debugger is not using the correct symbols ***
*** ***
*** In order for this command to work properly, your symbol path ***
*** must point to .pdb files that have full type information. ***
*** ***
*** Certain .pdb files (such as the public OS symbols) do not ***
*** contain the required information. Contact the group that ***
*** provided you with these symbols if you need this command to ***
*** work. ***
*** ***
*** Type referenced: nt!KPRCB ***
*** ***
*************************************************************************
*************************************************************************
*** ***
*** ***
*** Your debugger is not using the correct symbols ***
*** ***
*** In order for this command to work properly, your symbol path ***
*** must point to .pdb files that have full type information. ***
*** ***
*** Certain .pdb files (such as the public OS symbols) do not ***
*** contain the required information. Contact the group that ***
*** provided you with these symbols if you need this command to ***
*** work. ***
*** ***
*** Type referenced: nt!_KPRCB ***
*** ***
*************************************************************************
*************************************************************************
*** ***
*** ***
*** Your debugger is not using the correct symbols ***
*** ***
*** In order for this command to work properly, your symbol path ***
*** must point to .pdb files that have full type information. ***
*** ***
*** Certain .pdb files (such as the public OS symbols) do not ***
*** contain the required information. Contact the group that ***
*** provided you with these symbols if you need this command to ***
*** work. ***
*** ***
*** Type referenced: nt!KPRCB ***
*** ***
*************************************************************************
*************************************************************************
*** ***
*** ***
*** Your debugger is not using the correct symbols ***
*** ***
*** In order for this command to work properly, your symbol path ***
*** must point to .pdb files that have full type information. ***
*** ***
*** Certain .pdb files (such as the public OS symbols) do not ***
*** contain the required information. Contact the group that ***
*** provided you with these symbols if you need this command to ***
*** work. ***
*** ***
*** Type referenced: nt!_KPRCB ***
*** ***
*************************************************************************
*************************************************************************
*** ***
*** ***
*** Your debugger is not using the correct symbols ***
*** ***
*** In order for this command to work properly, your symbol path ***
*** must point to .pdb files that have full type information. ***
*** ***
*** Certain .pdb files (such as the public OS symbols) do not ***
*** contain the required information. Contact the group that ***
*** provided you with these symbols if you need this command to ***
*** work. ***
*** ***
*** Type referenced: nt!_KPRCB ***
*** ***
*************************************************************************
*************************************************************************
*** ***
*** ***
*** Your debugger is not using the correct symbols ***
*** ***
*** In order for this command to work properly, your symbol path ***
*** must point to .pdb files that have full type information. ***
*** ***
*** Certain .pdb files (such as the public OS symbols) do not ***
*** contain the required information. Contact the group that ***
*** provided you with these symbols if you need this command to ***
*** work. ***
*** ***
*** Type referenced: nt!_KPRCB ***
*** ***
*************************************************************************
*************************************************************************
*** ***
*** ***
*** Your debugger is not using the correct symbols ***
*** ***
*** In order for this command to work properly, your symbol path ***
*** must point to .pdb files that have full type information. ***
*** ***
*** Certain .pdb files (such as the public OS symbols) do not ***
*** contain the required information. Contact the group that ***
*** provided you with these symbols if you need this command to ***
*** work. ***
*** ***
*** Type referenced: nt!_KPRCB ***
*** ***
*************************************************************************
Probably caused by : dxgkrnl.sys ( dxgkrnl+2c53b )
Followup: MachineOwner
---------
3: kd> !analyze -v
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
PAGE_FAULT_IN_NONPAGED_AREA (50)
Invalid system memory was referenced. This cannot be protected by try-except,
it must be protected by a Probe. Typically the address is just plain bad or it
is pointing at freed memory.
Arguments:
Arg1: a298e314, memory referenced.
Arg2: 00000001, value 0 = read operation, 1 = write operation.
Arg3: 8a77753b, If non-zero, the instruction address which referenced the bad memory
address.
Arg4: 00000000, (reserved)
Debugging Details:
------------------
***** Kernel symbols are WRONG. Please fix symbols to do analysis.
*************************************************************************
*** ***
*** ***
*** Your debugger is not using the correct symbols ***
*** ***
*** In order for this command to work properly, your symbol path ***
*** must point to .pdb files that have full type information. ***
*** ***
*** Certain .pdb files (such as the public OS symbols) do not ***
*** contain the required information. Contact the group that ***
*** provided you with these symbols if you need this command to ***
*** work. ***
*** ***
*** Type referenced: nt!_KPRCB ***
*** ***
*************************************************************************
*************************************************************************
*** ***
*** ***
*** Your debugger is not using the correct symbols ***
*** ***
*** In order for this command to work properly, your symbol path ***
*** must point to .pdb files that have full type information. ***
*** ***
*** Certain .pdb files (such as the public OS symbols) do not ***
*** contain the required information. Contact the group that ***
*** provided you with these symbols if you need this command to ***
*** work. ***
*** ***
*** Type referenced: nt!KPRCB ***
*** ***
*************************************************************************
*************************************************************************
*** ***
*** ***
*** Your debugger is not using the correct symbols ***
*** ***
*** In order for this command to work properly, your symbol path ***
*** must point to .pdb files that have full type information. ***
*** ***
*** Certain .pdb files (such as the public OS symbols) do not ***
*** contain the required information. Contact the group that ***
*** provided you with these symbols if you need this command to ***
*** work. ***
*** ***
*** Type referenced: nt!_KPRCB ***
*** ***
*************************************************************************
*************************************************************************
*** ***
*** ***
*** Your debugger is not using the correct symbols ***
*** ***
*** In order for this command to work properly, your symbol path ***
*** must point to .pdb files that have full type information. ***
*** ***
*** Certain .pdb files (such as the public OS symbols) do not ***
*** contain the required information. Contact the group that ***
*** provided you with these symbols if you need this command to ***
*** work. ***
*** ***
*** Type referenced: nt!KPRCB ***
*** ***
*************************************************************************
*************************************************************************
*** ***
*** ***
*** Your debugger is not using the correct symbols ***
*** ***
*** In order for this command to work properly, your symbol path ***
*** must point to .pdb files that have full type information. ***
*** ***
*** Certain .pdb files (such as the public OS symbols) do not ***
*** contain the required information. Contact the group that ***
*** provided you with these symbols if you need this command to ***
*** work. ***
*** ***
*** Type referenced: nt!_KPRCB ***
*** ***
*************************************************************************
*************************************************************************
*** ***
*** ***
*** Your debugger is not using the correct symbols ***
*** ***
*** In order for this command to work properly, your symbol path ***
*** must point to .pdb files that have full type information. ***
*** ***
*** Certain .pdb files (such as the public OS symbols) do not ***
*** contain the required information. Contact the group that ***
*** provided you with these symbols if you need this command to ***
*** work. ***
*** ***
*** Type referenced: nt!_KPRCB ***
*** ***
*************************************************************************
*************************************************************************
*** ***
*** ***
*** Your debugger is not using the correct symbols ***
*** ***
*** In order for this command to work properly, your symbol path ***
*** must point to .pdb files that have full type information. ***
*** ***
*** Certain .pdb files (such as the public OS symbols) do not ***
*** contain the required information. Contact the group that ***
*** provided you with these symbols if you need this command to ***
*** work. ***
*** ***
*** Type referenced: nt!_KPRCB ***
*** ***
*************************************************************************
*************************************************************************
*** ***
*** ***
*** Your debugger is not using the correct symbols ***
*** ***
*** In order for this command to work properly, your symbol path ***
*** must point to .pdb files that have full type information. ***
*** ***
*** Certain .pdb files (such as the public OS symbols) do not ***
*** contain the required information. Contact the group that ***
*** provided you with these symbols if you need this command to ***
*** work. ***
*** ***
*** Type referenced: nt!_KPRCB ***
*** ***
*************************************************************************
AUTOBUG_OS_SKU: 1
MODULE_NAME: dxgkrnl
FAULTING_MODULE: 81c3d000 nt
DEBUG_FLR_IMAGE_TIMESTAMP: 47918c64
WRITE_ADDRESS: unable to get nt!MmSpecialPoolStart
unable to get nt!MmSpecialPoolEnd
unable to get nt!MmPoolCodeStart
unable to get nt!MmPoolCodeEnd
a298e314
FAULTING_IP:
dxgkrnl+2c53b
8a77753b ?? ???
MM_INTERNAL_CODE: 0
CUSTOMER_CRASH_COUNT: 1
DEFAULT_BUCKET_ID: WRONG_SYMBOLS
BUGCHECK_STR: 0x50
LAST_CONTROL_TRANSFER: from 81c97bb4 to 81ce2155
STACK_TEXT:
WARNING: Stack unwind information not available. Following frames may be wrong.
d833c93c 81c97bb4 00000001 a298e314 00000000 nt+0xa5155
d833c954 8a77753b badb0d00 9fa08434 84ed21c0 nt+0x5abb4
d833c9d4 8a77815b a8c56560 00000000 86259da0 dxgkrnl+0x2c53b
d833c9f0 8a7778eb 86259da0 00000000 893006a0 dxgkrnl+0x2d15b
d833ca58 8a7760ea d833cb88 d833cb28 d833cb54 dxgkrnl+0x2c8eb
d833ca70 8a77613d d833cb4c 893006a0 893006a0 dxgkrnl+0x2b0ea
d833ca8c 8a76c94a 89304be0 86b658b8 d833cacc dxgkrnl+0x2b13d
d833ca9c 8a74e9a1 893006a0 893006a0 86b76a18 dxgkrnl+0x2194a
d833cacc 8a76c876 86b84000 d833caf0 86b658b8 dxgkrnl+0x39a1
d833caf4 8a777e74 013006a0 86c5e000 86c5e000 dxgkrnl+0x21876
d833cb0c 8a777d97 86b658b8 8a7760ca d833cb4c dxgkrnl+0x2ce74
d833cb38 8a77802e d833cb4c a8c56560 86259da0 dxgkrnl+0x2cd97
d833cb70 8a777c6f d833cb88 00000000 a29131a8 dxgkrnl+0x2d02e
d833cbac 8a7783bd 00000000 00000000 a388d5b8 dxgkrnl+0x2cc6f
d833cbcc 8a779154 a29131a8 00000000 00000000 dxgkrnl+0x2d3bd
d833cc38 8a779955 00000000 00000000 a6bf0890 dxgkrnl+0x2e154
d833cc94 8a779eb2 d833ccf0 00000001 52455f69 dxgkrnl+0x2e955
d833cd58 81c94a7a 0fa4fe68 0fa4fe78 76e19a94 dxgkrnl+0x2eeb2
d833cd64 76e19a94 badb0d00 0fa4fe58 00000000 nt+0x57a7a
d833cd68 badb0d00 0fa4fe58 00000000 00000000 0x76e19a94
d833cd6c 0fa4fe58 00000000 00000000 00000000 0xbadb0d00
d833cd70 00000000 00000000 00000000 00000000 0xfa4fe58
STACK_COMMAND: kb
FOLLOWUP_IP:
dxgkrnl+2c53b
8a77753b ?? ???
SYMBOL_STACK_INDEX: 2
SYMBOL_NAME: dxgkrnl+2c53b
FOLLOWUP_NAME: MachineOwner
IMAGE_NAME: dxgkrnl.sys
BUCKET_ID: WRONG_SYMBOLS
Followup: MachineOwner
---------
3: kd> !analyze -v
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
PAGE_FAULT_IN_NONPAGED_AREA (50)
Invalid system memory was referenced. This cannot be protected by try-except,
it must be protected by a Probe. Typically the address is just plain bad or it
is pointing at freed memory.
Arguments:
Arg1: a298e314, memory referenced.
Arg2: 00000001, value 0 = read operation, 1 = write operation.
Arg3: 8a77753b, If non-zero, the instruction address which referenced the bad memory
address.
Arg4: 00000000, (reserved)
Debugging Details:
------------------
***** Kernel symbols are WRONG. Please fix symbols to do analysis.
*************************************************************************
*** ***
*** ***
*** Your debugger is not using the correct symbols ***
*** ***
*** In order for this command to work properly, your symbol path ***
*** must point to .pdb files that have full type information. ***
*** ***
*** Certain .pdb files (such as the public OS symbols) do not ***
*** contain the required information. Contact the group that ***
*** provided you with these symbols if you need this command to ***
*** work. ***
*** ***
*** Type referenced: nt!_KPRCB ***
*** ***
*************************************************************************
*************************************************************************
*** ***
*** ***
*** Your debugger is not using the correct symbols ***
*** ***
*** In order for this command to work properly, your symbol path ***
*** must point to .pdb files that have full type information. ***
*** ***
*** Certain .pdb files (such as the public OS symbols) do not ***
*** contain the required information. Contact the group that ***
*** provided you with these symbols if you need this command to ***
*** work. ***
*** ***
*** Type referenced: nt!KPRCB ***
*** ***
*************************************************************************
*************************************************************************
*** ***
*** ***
*** Your debugger is not using the correct symbols ***
*** ***
*** In order for this command to work properly, your symbol path ***
*** must point to .pdb files that have full type information. ***
*** ***
*** Certain .pdb files (such as the public OS symbols) do not ***
*** contain the required information. Contact the group that ***
*** provided you with these symbols if you need this command to ***
*** work. ***
*** ***
*** Type referenced: nt!_KPRCB ***
*** ***
*************************************************************************
*************************************************************************
*** ***
*** ***
*** Your debugger is not using the correct symbols ***
*** ***
*** In order for this command to work properly, your symbol path ***
*** must point to .pdb files that have full type information. ***
*** ***
*** Certain .pdb files (such as the public OS symbols) do not ***
*** contain the required information. Contact the group that ***
*** provided you with these symbols if you need this command to ***
*** work. ***
*** ***
*** Type referenced: nt!KPRCB ***
*** ***
*************************************************************************
*************************************************************************
*** ***
*** ***
*** Your debugger is not using the correct symbols ***
*** ***
*** In order for this command to work properly, your symbol path ***
*** must point to .pdb files that have full type information. ***
*** ***
*** Certain .pdb files (such as the public OS symbols) do not ***
*** contain the required information. Contact the group that ***
*** provided you with these symbols if you need this command to ***
*** work. ***
*** ***
*** Type referenced: nt!_KPRCB ***
*** ***
*************************************************************************
*************************************************************************
*** ***
*** ***
*** Your debugger is not using the correct symbols ***
*** ***
*** In order for this command to work properly, your symbol path ***
*** must point to .pdb files that have full type information. ***
*** ***
*** Certain .pdb files (such as the public OS symbols) do not ***
*** contain the required information. Contact the group that ***
*** provided you with these symbols if you need this command to ***
*** work. ***
*** ***
*** Type referenced: nt!_KPRCB ***
*** ***
*************************************************************************
*************************************************************************
*** ***
*** ***
*** Your debugger is not using the correct symbols ***
*** ***
*** In order for this command to work properly, your symbol path ***
*** must point to .pdb files that have full type information. ***
*** ***
*** Certain .pdb files (such as the public OS symbols) do not ***
*** contain the required information. Contact the group that ***
*** provided you with these symbols if you need this command to ***
*** work. ***
*** ***
*** Type referenced: nt!_KPRCB ***
*** ***
*************************************************************************
*************************************************************************
*** ***
*** ***
*** Your debugger is not using the correct symbols ***
*** ***
*** In order for this command to work properly, your symbol path ***
*** must point to .pdb files that have full type information. ***
*** ***
*** Certain .pdb files (such as the public OS symbols) do not ***
*** contain the required information. Contact the group that ***
*** provided you with these symbols if you need this command to ***
*** work. ***
*** ***
*** Type referenced: nt!_KPRCB ***
*** ***
*************************************************************************
AUTOBUG_OS_SKU: 1
MODULE_NAME: dxgkrnl
FAULTING_MODULE: 81c3d000 nt
DEBUG_FLR_IMAGE_TIMESTAMP: 47918c64
WRITE_ADDRESS: a298e314
FAULTING_IP:
dxgkrnl+2c53b
8a77753b ?? ???
MM_INTERNAL_CODE: 0
CUSTOMER_CRASH_COUNT: 1
DEFAULT_BUCKET_ID: WRONG_SYMBOLS
BUGCHECK_STR: 0x50
LAST_CONTROL_TRANSFER: from 81c97bb4 to 81ce2155
STACK_TEXT:
WARNING: Stack unwind information not available. Following frames may be wrong.
d833c93c 81c97bb4 00000001 a298e314 00000000 nt+0xa5155
d833c954 8a77753b badb0d00 9fa08434 84ed21c0 nt+0x5abb4
d833c9d4 8a77815b a8c56560 00000000 86259da0 dxgkrnl+0x2c53b
d833c9f0 8a7778eb 86259da0 00000000 893006a0 dxgkrnl+0x2d15b
d833ca58 8a7760ea d833cb88 d833cb28 d833cb54 dxgkrnl+0x2c8eb
d833ca70 8a77613d d833cb4c 893006a0 893006a0 dxgkrnl+0x2b0ea
d833ca8c 8a76c94a 89304be0 86b658b8 d833cacc dxgkrnl+0x2b13d
d833ca9c 8a74e9a1 893006a0 893006a0 86b76a18 dxgkrnl+0x2194a
d833cacc 8a76c876 86b84000 d833caf0 86b658b8 dxgkrnl+0x39a1
d833caf4 8a777e74 013006a0 86c5e000 86c5e000 dxgkrnl+0x21876
d833cb0c 8a777d97 86b658b8 8a7760ca d833cb4c dxgkrnl+0x2ce74
d833cb38 8a77802e d833cb4c a8c56560 86259da0 dxgkrnl+0x2cd97
d833cb70 8a777c6f d833cb88 00000000 a29131a8 dxgkrnl+0x2d02e
d833cbac 8a7783bd 00000000 00000000 a388d5b8 dxgkrnl+0x2cc6f
d833cbcc 8a779154 a29131a8 00000000 00000000 dxgkrnl+0x2d3bd
d833cc38 8a779955 00000000 00000000 a6bf0890 dxgkrnl+0x2e154
d833cc94 8a779eb2 d833ccf0 00000001 52455f69 dxgkrnl+0x2e955
d833cd58 81c94a7a 0fa4fe68 0fa4fe78 76e19a94 dxgkrnl+0x2eeb2
d833cd64 76e19a94 badb0d00 0fa4fe58 00000000 nt+0x57a7a
d833cd68 badb0d00 0fa4fe58 00000000 00000000 0x76e19a94
d833cd6c 0fa4fe58 00000000 00000000 00000000 0xbadb0d00
d833cd70 00000000 00000000 00000000 00000000 0xfa4fe58
STACK_COMMAND: kb
FOLLOWUP_IP:
dxgkrnl+2c53b
8a77753b ?? ???
SYMBOL_STACK_INDEX: 2
SYMBOL_NAME: dxgkrnl+2c53b
FOLLOWUP_NAME: MachineOwner
IMAGE_NAME: dxgkrnl.sys
BUCKET_ID: WRONG_SYMBOLS
Followup: MachineOwner
---------
3: kd> !analyze -v
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
PAGE_FAULT_IN_NONPAGED_AREA (50)
Invalid system memory was referenced. This cannot be protected by try-except,
it must be protected by a Probe. Typically the address is just plain bad or it
is pointing at freed memory.
Arguments:
Arg1: a298e314, memory referenced.
Arg2: 00000001, value 0 = read operation, 1 = write operation.
Arg3: 8a77753b, If non-zero, the instruction address which referenced the bad memory
address.
Arg4: 00000000, (reserved)
Debugging Details:
------------------
***** Kernel symbols are WRONG. Please fix symbols to do analysis.
*************************************************************************
*** ***
*** ***
*** Your debugger is not using the correct symbols ***
*** ***
*** In order for this command to work properly, your symbol path ***
*** must point to .pdb files that have full type information. ***
*** ***
*** Certain .pdb files (such as the public OS symbols) do not ***
*** contain the required information. Contact the group that ***
*** provided you with these symbols if you need this command to ***
*** work. ***
*** ***
*** Type referenced: nt!_KPRCB ***
*** ***
*************************************************************************
*************************************************************************
*** ***
*** ***
*** Your debugger is not using the correct symbols ***
*** ***
*** In order for this command to work properly, your symbol path ***
*** must point to .pdb files that have full type information. ***
*** ***
*** Certain .pdb files (such as the public OS symbols) do not ***
*** contain the required information. Contact the group that ***
*** provided you with these symbols if you need this command to ***
*** work. ***
*** ***
*** Type referenced: nt!KPRCB ***
*** ***
*************************************************************************
*************************************************************************
*** ***
*** ***
*** Your debugger is not using the correct symbols ***
*** ***
*** In order for this command to work properly, your symbol path ***
*** must point to .pdb files that have full type information. ***
*** ***
*** Certain .pdb files (such as the public OS symbols) do not ***
*** contain the required information. Contact the group that ***
*** provided you with these symbols if you need this command to ***
*** work. ***
*** ***
*** Type referenced: nt!_KPRCB ***
*** ***
*************************************************************************
*************************************************************************
*** ***
*** ***
*** Your debugger is not using the correct symbols ***
*** ***
*** In order for this command to work properly, your symbol path ***
*** must point to .pdb files that have full type information. ***
*** ***
*** Certain .pdb files (such as the public OS symbols) do not ***
*** contain the required information. Contact the group that ***
*** provided you with these symbols if you need this command to ***
*** work. ***
*** ***
*** Type referenced: nt!KPRCB ***
*** ***
*************************************************************************
*************************************************************************
*** ***
*** ***
*** Your debugger is not using the correct symbols ***
*** ***
*** In order for this command to work properly, your symbol path ***
*** must point to .pdb files that have full type information. ***
*** ***
*** Certain .pdb files (such as the public OS symbols) do not ***
*** contain the required information. Contact the group that ***
*** provided you with these symbols if you need this command to ***
*** work. ***
*** ***
*** Type referenced: nt!_KPRCB ***
*** ***
*************************************************************************
*************************************************************************
*** ***
*** ***
*** Your debugger is not using the correct symbols ***
*** ***
*** In order for this command to work properly, your symbol path ***
*** must point to .pdb files that have full type information. ***
*** ***
*** Certain .pdb files (such as the public OS symbols) do not ***
*** contain the required information. Contact the group that ***
*** provided you with these symbols if you need this command to ***
*** work. ***
*** ***
*** Type referenced: nt!_KPRCB ***
*** ***
*************************************************************************
*************************************************************************
*** ***
*** ***
*** Your debugger is not using the correct symbols ***
*** ***
*** In order for this command to work properly, your symbol path ***
*** must point to .pdb files that have full type information. ***
*** ***
*** Certain .pdb files (such as the public OS symbols) do not ***
*** contain the required information. Contact the group that ***
*** provided you with these symbols if you need this command to ***
*** work. ***
*** ***
*** Type referenced: nt!_KPRCB ***
*** ***
*************************************************************************
*************************************************************************
*** ***
*** ***
*** Your debugger is not using the correct symbols ***
*** ***
*** In order for this command to work properly, your symbol path ***
*** must point to .pdb files that have full type information. ***
*** ***
*** Certain .pdb files (such as the public OS symbols) do not ***
*** contain the required information. Contact the group that ***
*** provided you with these symbols if you need this command to ***
*** work. ***
*** ***
*** Type referenced: nt!_KPRCB ***
*** ***
*************************************************************************
AUTOBUG_OS_SKU: 1
MODULE_NAME: dxgkrnl
FAULTING_MODULE: 81c3d000 nt
DEBUG_FLR_IMAGE_TIMESTAMP: 47918c64
WRITE_ADDRESS: a298e314
FAULTING_IP:
dxgkrnl+2c53b
8a77753b ?? ???
MM_INTERNAL_CODE: 0
CUSTOMER_CRASH_COUNT: 1
DEFAULT_BUCKET_ID: WRONG_SYMBOLS
BUGCHECK_STR: 0x50
LAST_CONTROL_TRANSFER: from 81c97bb4 to 81ce2155
STACK_TEXT:
WARNING: Stack unwind information not available. Following frames may be wrong.
d833c93c 81c97bb4 00000001 a298e314 00000000 nt+0xa5155
d833c954 8a77753b badb0d00 9fa08434 84ed21c0 nt+0x5abb4
d833c9d4 8a77815b a8c56560 00000000 86259da0 dxgkrnl+0x2c53b
d833c9f0 8a7778eb 86259da0 00000000 893006a0 dxgkrnl+0x2d15b
d833ca58 8a7760ea d833cb88 d833cb28 d833cb54 dxgkrnl+0x2c8eb
d833ca70 8a77613d d833cb4c 893006a0 893006a0 dxgkrnl+0x2b0ea
d833ca8c 8a76c94a 89304be0 86b658b8 d833cacc dxgkrnl+0x2b13d
d833ca9c 8a74e9a1 893006a0 893006a0 86b76a18 dxgkrnl+0x2194a
d833cacc 8a76c876 86b84000 d833caf0 86b658b8 dxgkrnl+0x39a1
d833caf4 8a777e74 013006a0 86c5e000 86c5e000 dxgkrnl+0x21876
d833cb0c 8a777d97 86b658b8 8a7760ca d833cb4c dxgkrnl+0x2ce74
d833cb38 8a77802e d833cb4c a8c56560 86259da0 dxgkrnl+0x2cd97
d833cb70 8a777c6f d833cb88 00000000 a29131a8 dxgkrnl+0x2d02e
d833cbac 8a7783bd 00000000 00000000 a388d5b8 dxgkrnl+0x2cc6f
d833cbcc 8a779154 a29131a8 00000000 00000000 dxgkrnl+0x2d3bd
d833cc38 8a779955 00000000 00000000 a6bf0890 dxgkrnl+0x2e154
d833cc94 8a779eb2 d833ccf0 00000001 52455f69 dxgkrnl+0x2e955
d833cd58 81c94a7a 0fa4fe68 0fa4fe78 76e19a94 dxgkrnl+0x2eeb2
d833cd64 76e19a94 badb0d00 0fa4fe58 00000000 nt+0x57a7a
d833cd68 badb0d00 0fa4fe58 00000000 00000000 0x76e19a94
d833cd6c 0fa4fe58 00000000 00000000 00000000 0xbadb0d00
d833cd70 00000000 00000000 00000000 00000000 0xfa4fe58
STACK_COMMAND: kb
FOLLOWUP_IP:
dxgkrnl+2c53b
8a77753b ?? ???
SYMBOL_STACK_INDEX: 2
SYMBOL_NAME: dxgkrnl+2c53b
FOLLOWUP_NAME: MachineOwner
IMAGE_NAME: dxgkrnl.sys
BUCKET_ID: WRONG_SYMBOLS
Followup: MachineOwner
---------
3: kd> !analyze -v
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
PAGE_FAULT_IN_NONPAGED_AREA (50)
Invalid system memory was referenced. This cannot be protected by try-except,
it must be protected by a Probe. Typically the address is just plain bad or it
is pointing at freed memory.
Arguments:
Arg1: a298e314, memory referenced.
Arg2: 00000001, value 0 = read operation, 1 = write operation.
Arg3: 8a77753b, If non-zero, the instruction address which referenced the bad memory
address.
Arg4: 00000000, (reserved)
Debugging Details:
------------------
***** Kernel symbols are WRONG. Please fix symbols to do analysis.
*************************************************************************
*** ***
*** ***
*** Your debugger is not using the correct symbols ***
*** ***
*** In order for this command to work properly, your symbol path ***
*** must point to .pdb files that have full type information. ***
*** ***
*** Certain .pdb files (such as the public OS symbols) do not ***
*** contain the required information. Contact the group that ***
*** provided you with these symbols if you need this command to ***
*** work. ***
*** ***
*** Type referenced: nt!_KPRCB ***
*** ***
*************************************************************************
*************************************************************************
*** ***
*** ***
*** Your debugger is not using the correct symbols ***
*** ***
*** In order for this command to work properly, your symbol path ***
*** must point to .pdb files that have full type information. ***
*** ***
*** Certain .pdb files (such as the public OS symbols) do not ***
*** contain the required information. Contact the group that ***
*** provided you with these symbols if you need this command to ***
*** work. ***
*** ***
*** Type referenced: nt!KPRCB ***
*** ***
*************************************************************************
*************************************************************************
*** ***
*** ***
*** Your debugger is not using the correct symbols ***
*** ***
*** In order for this command to work properly, your symbol path ***
*** must point to .pdb files that have full type information. ***
*** ***
*** Certain .pdb files (such as the public OS symbols) do not ***
*** contain the required information. Contact the group that ***
*** provided you with these symbols if you need this command to ***
*** work. ***
*** ***
*** Type referenced: nt!_KPRCB ***
*** ***
*************************************************************************
*************************************************************************
*** ***
*** ***
*** Your debugger is not using the correct symbols ***
*** ***
*** In order for this command to work properly, your symbol path ***
*** must point to .pdb files that have full type information. ***
*** ***
*** Certain .pdb files (such as the public OS symbols) do not ***
*** contain the required information. Contact the group that ***
*** provided you with these symbols if you need this command to ***
*** work. ***
*** ***
*** Type referenced: nt!KPRCB ***
*** ***
*************************************************************************
*************************************************************************
*** ***
*** ***
*** Your debugger is not using the correct symbols ***
*** ***
*** In order for this command to work properly, your symbol path ***
*** must point to .pdb files that have full type information. ***
*** ***
*** Certain .pdb files (such as the public OS symbols) do not ***
*** contain the required information. Contact the group that ***
*** provided you with these symbols if you need this command to ***
*** work. ***
*** ***
*** Type referenced: nt!_KPRCB ***
*** ***
*************************************************************************
*************************************************************************
*** ***
*** ***
*** Your debugger is not using the correct symbols ***
*** ***
*** In order for this command to work properly, your symbol path ***
*** must point to .pdb files that have full type information. ***
*** ***
*** Certain .pdb files (such as the public OS symbols) do not ***
*** contain the required information. Contact the group that ***
*** provided you with these symbols if you need this command to ***
*** work. ***
*** ***
*** Type referenced: nt!_KPRCB ***
*** ***
*************************************************************************
*************************************************************************
*** ***
*** ***
*** Your debugger is not using the correct symbols ***
*** ***
*** In order for this command to work properly, your symbol path ***
*** must point to .pdb files that have full type information. ***
*** ***
*** Certain .pdb files (such as the public OS symbols) do not ***
*** contain the required information. Contact the group that ***
*** provided you with these symbols if you need this command to ***
*** work. ***
*** ***
*** Type referenced: nt!_KPRCB ***
*** ***
*************************************************************************
*************************************************************************
*** ***
*** ***
*** Your debugger is not using the correct symbols ***
*** ***
*** In order for this command to work properly, your symbol path ***
*** must point to .pdb files that have full type information. ***
*** ***
*** Certain .pdb files (such as the public OS symbols) do not ***
*** contain the required information. Contact the group that ***
*** provided you with these symbols if you need this command to ***
*** work. ***
*** ***
*** Type referenced: nt!_KPRCB ***
*** ***
*************************************************************************
AUTOBUG_OS_SKU: 1
MODULE_NAME: dxgkrnl
FAULTING_MODULE: 81c3d000 nt
DEBUG_FLR_IMAGE_TIMESTAMP: 47918c64
WRITE_ADDRESS: a298e314
FAULTING_IP:
dxgkrnl+2c53b
8a77753b ?? ???
MM_INTERNAL_CODE: 0
CUSTOMER_CRASH_COUNT: 1
DEFAULT_BUCKET_ID: WRONG_SYMBOLS
BUGCHECK_STR: 0x50
LAST_CONTROL_TRANSFER: from 81c97bb4 to 81ce2155
STACK_TEXT:
WARNING: Stack unwind information not available. Following frames may be wrong.
d833c93c 81c97bb4 00000001 a298e314 00000000 nt+0xa5155
d833c954 8a77753b badb0d00 9fa08434 84ed21c0 nt+0x5abb4
d833c9d4 8a77815b a8c56560 00000000 86259da0 dxgkrnl+0x2c53b
d833c9f0 8a7778eb 86259da0 00000000 893006a0 dxgkrnl+0x2d15b
d833ca58 8a7760ea d833cb88 d833cb28 d833cb54 dxgkrnl+0x2c8eb
d833ca70 8a77613d d833cb4c 893006a0 893006a0 dxgkrnl+0x2b0ea
d833ca8c 8a76c94a 89304be0 86b658b8 d833cacc dxgkrnl+0x2b13d
d833ca9c 8a74e9a1 893006a0 893006a0 86b76a18 dxgkrnl+0x2194a
d833cacc 8a76c876 86b84000 d833caf0 86b658b8 dxgkrnl+0x39a1
d833caf4 8a777e74 013006a0 86c5e000 86c5e000 dxgkrnl+0x21876
d833cb0c 8a777d97 86b658b8 8a7760ca d833cb4c dxgkrnl+0x2ce74
d833cb38 8a77802e d833cb4c a8c56560 86259da0 dxgkrnl+0x2cd97
d833cb70 8a777c6f d833cb88 00000000 a29131a8 dxgkrnl+0x2d02e
d833cbac 8a7783bd 00000000 00000000 a388d5b8 dxgkrnl+0x2cc6f
d833cbcc 8a779154 a29131a8 00000000 00000000 dxgkrnl+0x2d3bd
d833cc38 8a779955 00000000 00000000 a6bf0890 dxgkrnl+0x2e154
d833cc94 8a779eb2 d833ccf0 00000001 52455f69 dxgkrnl+0x2e955
d833cd58 81c94a7a 0fa4fe68 0fa4fe78 76e19a94 dxgkrnl+0x2eeb2
d833cd64 76e19a94 badb0d00 0fa4fe58 00000000 nt+0x57a7a
d833cd68 badb0d00 0fa4fe58 00000000 00000000 0x76e19a94
d833cd6c 0fa4fe58 00000000 00000000 00000000 0xbadb0d00
d833cd70 00000000 00000000 00000000 00000000 0xfa4fe58
STACK_COMMAND: kb
FOLLOWUP_IP:
dxgkrnl+2c53b
8a77753b ?? ???
SYMBOL_STACK_INDEX: 2
SYMBOL_NAME: dxgkrnl+2c53b
FOLLOWUP_NAME: MachineOwner
IMAGE_NAME: dxgkrnl.sys
BUCKET_ID: WRONG_SYMBOLS
Followup: MachineOwner
---------
3: kd> g
^ No runnable debuggees error in 'g'
3: kd> lmvm dxgkrnl
start end module name
8a74b000 8a7ea000 dxgkrnl T (no symbols)
Loaded symbol image file: dxgkrnl.sys
Image path: \SystemRoot\System32\drivers\dxgkrnl.sys
Image name: dxgkrnl.sys
Timestamp: Sat Jan 19 06:36:36 2008 (47918C64)
CheckSum: 0009A1A8
ImageSize: 0009F000
Translations: 0000.04b0 0000.04e0 0409.04b0 0409.04e0