Whissi
September 29th, 2006, 09:47 AM
Hello,
sometimes when I start my computer and login, XP crashes.
I run WinDbg and analyzed the MEMORY.DMP:
{QUOTE->
Loading User Symbols
PEB is paged out (Peb.Ldr = 7ffd500c). Type ".hh dbgerr001" for details
Loading unloaded module list
......
0: kd> !analyze -v
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
DRIVER_IRQL_NOT_LESS_OR_EQUAL (d1)
An attempt was made to access a pageable (or completely invalid) address at an
interrupt request level (IRQL) that is too high. This is usually
caused by drivers using improper addresses.
If kernel debugger is available get stack backtrace.
Arguments:
Arg1: 00000081, memory referenced
Arg2: 00000002, IRQL
Arg3: 00000000, value 0 = read operation, 1 = write operation
Arg4: 89dbbec0, address which referenced memory
Debugging Details:
------------------
OVERLAPPED_MODULE: Address regions for 'amon' and 'Parport.SYS' overlap
READ_ADDRESS: 00000081
CURRENT_IRQL: 2
FAULTING_IP:
+ffffffff89dbbec0
89dbbec0 0000 add byte ptr [eax],al
DEFAULT_BUCKET_ID: DRIVER_FAULT
BUGCHECK_STR: 0xD1
PROCESS_NAME: explorer.exe
TRAP_FRAME: bacc7f58 -- (.trap ffffffffbacc7f58)
ErrCode = 00000000
eax=00000081 ebx=ffdff000 ecx=89dbbeb4 edx=89dcee48 esi=ffdff9c0 edi=49492872
eip=89dbbec0 esp=bacc7fcc ebp=bacc7fcc iopl=0 nv up ei pl nz na pe nc
cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00010206
89dbbec0 0000 add byte ptr [eax],al ds:0023:00000081=??
Resetting default scope
LAST_CONTROL_TRANSFER: from 89dbbec0 to 805436d0
STACK_TEXT:
bacc7f58 89dbbec0 badb0d00 89dcee48 89d2c918 nt!KiTrap0E+0x238
WARNING: Frame IP not in any known module. Following frames may be wrong.
bacc7fcc 80544e5f 89dcee48 89dbc000 00000000 0x89dbbec0
bacc7ff4 805449cb b565dd44 00000000 00000000 nt!KiRetireDpcList+0x61
bacc7ff8 b565dd44 00000000 00000000 00000000 nt!KiDispatchInterrupt+0x2b
805449cb 00000000 00000009 0081850f bb830000 0xb565dd44
STACK_COMMAND: kb
FOLLOWUP_IP:
nt!KiTrap0E+238
805436d0 f7457000000200 test dword ptr [ebp+70h],20000h
SYMBOL_STACK_INDEX: 0
SYMBOL_NAME: nt!KiTrap0E+238
FOLLOWUP_NAME: MachineOwner
MODULE_NAME: nt
IMAGE_NAME: ntkrpamp.exe
DEBUG_FLR_IMAGE_TIMESTAMP: 42250a1e
FAILURE_BUCKET_ID: 0xD1_nt!KiTrap0E+238
BUCKET_ID: 0xD1_nt!KiTrap0E+238
Followup: MachineOwner
<-QUOTE}
I thought may be Eset wants my Crash-Dump?
sometimes when I start my computer and login, XP crashes.
I run WinDbg and analyzed the MEMORY.DMP:
{QUOTE->
Loading User Symbols
PEB is paged out (Peb.Ldr = 7ffd500c). Type ".hh dbgerr001" for details
Loading unloaded module list
......
0: kd> !analyze -v
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
DRIVER_IRQL_NOT_LESS_OR_EQUAL (d1)
An attempt was made to access a pageable (or completely invalid) address at an
interrupt request level (IRQL) that is too high. This is usually
caused by drivers using improper addresses.
If kernel debugger is available get stack backtrace.
Arguments:
Arg1: 00000081, memory referenced
Arg2: 00000002, IRQL
Arg3: 00000000, value 0 = read operation, 1 = write operation
Arg4: 89dbbec0, address which referenced memory
Debugging Details:
------------------
OVERLAPPED_MODULE: Address regions for 'amon' and 'Parport.SYS' overlap
READ_ADDRESS: 00000081
CURRENT_IRQL: 2
FAULTING_IP:
+ffffffff89dbbec0
89dbbec0 0000 add byte ptr [eax],al
DEFAULT_BUCKET_ID: DRIVER_FAULT
BUGCHECK_STR: 0xD1
PROCESS_NAME: explorer.exe
TRAP_FRAME: bacc7f58 -- (.trap ffffffffbacc7f58)
ErrCode = 00000000
eax=00000081 ebx=ffdff000 ecx=89dbbeb4 edx=89dcee48 esi=ffdff9c0 edi=49492872
eip=89dbbec0 esp=bacc7fcc ebp=bacc7fcc iopl=0 nv up ei pl nz na pe nc
cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00010206
89dbbec0 0000 add byte ptr [eax],al ds:0023:00000081=??
Resetting default scope
LAST_CONTROL_TRANSFER: from 89dbbec0 to 805436d0
STACK_TEXT:
bacc7f58 89dbbec0 badb0d00 89dcee48 89d2c918 nt!KiTrap0E+0x238
WARNING: Frame IP not in any known module. Following frames may be wrong.
bacc7fcc 80544e5f 89dcee48 89dbc000 00000000 0x89dbbec0
bacc7ff4 805449cb b565dd44 00000000 00000000 nt!KiRetireDpcList+0x61
bacc7ff8 b565dd44 00000000 00000000 00000000 nt!KiDispatchInterrupt+0x2b
805449cb 00000000 00000009 0081850f bb830000 0xb565dd44
STACK_COMMAND: kb
FOLLOWUP_IP:
nt!KiTrap0E+238
805436d0 f7457000000200 test dword ptr [ebp+70h],20000h
SYMBOL_STACK_INDEX: 0
SYMBOL_NAME: nt!KiTrap0E+238
FOLLOWUP_NAME: MachineOwner
MODULE_NAME: nt
IMAGE_NAME: ntkrpamp.exe
DEBUG_FLR_IMAGE_TIMESTAMP: 42250a1e
FAILURE_BUCKET_ID: 0xD1_nt!KiTrap0E+238
BUCKET_ID: 0xD1_nt!KiTrap0E+238
Followup: MachineOwner
<-QUOTE}
I thought may be Eset wants my Crash-Dump?