an other system blue screen when i copy big file...
it's not happening always when i copy big file just some times...
generally when i copy file i'am using other softs at same time (firefox or winamp or windows live mail desktop .... or else)
This time the error come from win32k.sys (about paging system)
this time again i could not be sure at 100% that fc is responsible... but it look like lol
Code: Select all
ADDITIONAL_DEBUG_TEXT:
Use '!findthebuild' command to search for the target build information.
If the build information is available, run '!findthebuild -s ; .reload' to set symbol path and load symbols.
MODULE_NAME: win32k
FAULTING_MODULE: 83241000 nt
DEBUG_FLR_IMAGE_TIMESTAMP: 4d6f0e12
EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - L
FAULTING_IP:
nt+120067
83361067 897004 mov dword ptr [eax+4],esi
TRAP_FRAME: d083f2e4 -- (.trap 0xffffffffd083f2e4)
ErrCode = 00000002
eax=00000000 ebx=d5070e00 ecx=fbc6be30 edx=fb5f1e30 esi=d5071050 edi=d5070e04
eip=83361067 esp=d083f358 ebp=d083f3a4 iopl=0 nv up ei pl zr na pe nc
cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00010246
nt+0x120067:
83361067 897004 mov dword ptr [eax+4],esi ds:0023:00000004=????????
Resetting default scope
CUSTOMER_CRASH_COUNT: 1
DEFAULT_BUCKET_ID: VISTA_DRIVER_FAULT
BUGCHECK_STR: 0x8E
CURRENT_IRQL: 0
LAST_CONTROL_TRANSFER: from a8dfa4de to 83361067
STACK_TEXT:
WARNING: Stack unwind information not available. Following frames may be wrong.
d083f3a4 a8dfa4de 00000021 00000110 37326847 nt+0x120067
d083f3b8 a8ddc7a8 00000110 37326847 00000000 win32k+0xca4de
d083f3cc a8df1d34 00000110 37326847 d083fa0c win32k+0xac7a8
d083f3e8 a8e02b48 00000110 00000007 00000001 win32k+0xc1d34
d083f40c a8dd96ab 00000110 00000007 00000002 win32k+0xd2b48
d083f46c a8e6ae50 d083fa6c d083faa8 d083fa0c win32k+0xa96ab
d083f8a0 a8e73182 d083fa6c d083faa8 d083fa0c win32k+0x13ae50
d083fafc a8e703b2 210140c2 ba044cd4 da101ddf win32k+0x143182
d083fb40 a8e71297 fe2e9f50 210140c2 00000000 win32k+0x1403b2
d083fbb8 a8e710f5 00000000 210140c2 fe288e58 win32k+0x141297
d083fbf0 a8e74715 fe2e9f50 fe288e58 fe2e9f50 win32k+0x1410f5
d083fc24 a8db9b5f fe2e9f50 fe200618 a8f51560 win32k+0x144715
d083fc4c a8dce3db a8f51560 00000000 fe2e9f50 win32k+0x89b5f
d083fca4 a8dce63e 00000000 00000000 d083fcf4 win32k+0x9e3db
d083fcc4 a8dbf29b fe2e9f50 ffffffff 00000000 win32k+0x9e63e
d083fd10 8328444a fe2e9f50 ffffffff 00000000 win32k+0x8f29b
d083fd34 77a770b4 badb0d00 0017e100 00000000 nt+0x4344a
d083fd38 badb0d00 0017e100 00000000 00000000 0x77a770b4
d083fd3c 0017e100 00000000 00000000 00000000 0xbadb0d00
d083fd40 00000000 00000000 00000000 00000000 0x17e100
STACK_COMMAND: kb
FOLLOWUP_IP:
win32k+ca4de
a8dfa4de ?? ???
SYMBOL_STACK_INDEX: 1
SYMBOL_NAME: win32k+ca4de
FOLLOWUP_NAME: MachineOwner
IMAGE_NAME: win32k.sys
BUCKET_ID: WRONG_SYMBOLS
Followup: MachineOwner
---------
Kernel also stop working...
Code: Select all
Microsoft (R) Windows Debugger Version 6.12.0002.633 X86
Copyright (c) Microsoft Corporation. All rights reserved.
Loading Dump File [C:\Windows\Minidump\062411-63149-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available
Symbol search path is: *** Invalid ***
****************************************************************************
* Symbol loading may be unreliable without a symbol search path. *
* Use .symfix to have the debugger choose a symbol path. *
* After setting your symbol path, use .reload to refresh symbol locations. *
****************************************************************************
Executable search path is:
*********************************************************************
* Symbols can not be loaded because symbol path is not initialized. *
* *
* The Symbol Path can be set by: *
* using the _NT_SYMBOL_PATH environment variable. *
* using the -y <symbol_path> argument when starting the debugger. *
* using .sympath and .sympath+ *
*********************************************************************
Unable to load image \SystemRoot\system32\ntkrnlpa.exe, Win32 error 0n2
*** WARNING: Unable to verify timestamp for ntkrnlpa.exe
*** ERROR: Module load completed but symbols could not be loaded for ntkrnlpa.exe
Windows 7 Kernel Version 7600 (Service Pack 1) MP (2 procs) Free x86 compatible
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 7600.16617.x86fre.win7_gdr.100618-1621
Machine Name:
Kernel base = 0x83241000 PsLoadedModuleList = 0x83389810
Debug session time: Fri Jun 24 05:33:08.139 2011 (UTC + 2:00)
System Uptime: 2 days 3:02:55.887
*********************************************************************
* Symbols can not be loaded because symbol path is not initialized. *
* *
* The Symbol Path can be set by: *
* using the _NT_SYMBOL_PATH environment variable. *
* using the -y <symbol_path> argument when starting the debugger. *
* using .sympath and .sympath+ *
*********************************************************************
Unable to load image \SystemRoot\system32\ntkrnlpa.exe, Win32 error 0n2
*** WARNING: Unable to verify timestamp for ntkrnlpa.exe
*** ERROR: Module load completed but symbols could not be loaded for ntkrnlpa.exe
Loading Kernel Symbols
...............................................................
................................................................
................................................................
...........................
Loading User Symbols
Loading unloaded module list
..................................................
Unable to load image \SystemRoot\System32\win32k.sys, Win32 error 0n2
*** WARNING: Unable to verify timestamp for win32k.sys
*** ERROR: Module load completed but symbols could not be loaded for win32k.sys
!