wusoldier, результат:
Код:
PAGE_FAULT_IN_NONPAGED_AREA (50)
Invalid system memory was referenced. This cannot be protected by try-except,
it must be protected by a Probe. Typically the address is just plain bad or it
is pointing at freed memory.
Arguments:
Arg1: c3c02000, memory referenced.
Arg2: 00000001, value 0 = read operation, 1 = write operation.
Arg3: 82e57e85, If non-zero, the instruction address which referenced the bad memory
address.
Arg4: 00000000, (reserved)
Debugging Details:
------------------
*** WARNING: Unable to verify timestamp for dwprot.sys
*** ERROR: Module load completed but symbols could not be loaded for dwprot.sys
*** WARNING: Unable to verify timestamp for 3pOqevtO.sys
*** ERROR: Module load completed but symbols could not be loaded for 3pOqevtO.sys
WRITE_ADDRESS: GetPointerFromAddress: unable to read from 82f81718
Unable to read MiSystemVaType memory at 82f61160
c3c02000
FAULTING_IP:
nt!memset+45
82e57e85 f3ab rep stos dword ptr es:[edi]
MM_INTERNAL_CODE: 0
CUSTOMER_CRASH_COUNT: 1
DEFAULT_BUCKET_ID: VISTA_DRIVER_FAULT
BUGCHECK_STR: 0x50
PROCESS_NAME: 3d075_xp.exe
CURRENT_IRQL: 0
TRAP_FRAME: 9c8f34dc -- (.trap 0xffffffff9c8f34dc)
ErrCode = 00000002
eax=00000000 ebx=00000000 ecx=00000800 edx=00000000 esi=c3c00000 edi=c3c02000
eip=82e57e85 esp=9c8f3550 ebp=9c8f3740 iopl=0 nv up ei pl nz ac pe nc
cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00010216
nt!memset+0x45:
82e57e85 f3ab rep stos dword ptr es:[edi]
Resetting default scope
LAST_CONTROL_TRANSFER: from 82e5f5f8 to 82e9e8e3
STACK_TEXT:
9c8f34c4 82e5f5f8 00000001 c3c02000 00000000 nt!MmAccessFault+0x106
9c8f34c4 82e57e85 00000001 c3c02000 00000000 nt!KiTrap0E+0xdc
9c8f3550 891284b5 c3c00000 00000000 00004000 nt!memset+0x45
9c8f3740 8915443e 9c8f3824 ac99e4b8 c3c00000 Ntfs!NtfsQueryStreamsInfo+0x46
9c8f37ac 89159a4d 9c8f3824 badef218 158092d3 Ntfs!NtfsCommonQueryInformation+0x5a2
9c8f3810 89167d53 9c8f3824 badef218 00000001 Ntfs!NtfsFsdDispatchSwitch+0x17b
9c8f3944 82e554bc 85d45020 badef218 badef218 Ntfs!NtfsFsdDispatchWait+0x1c
9c8f395c 8907d20c 85d44738 badef218 00000000 nt!IofCallDriver+0x63
9c8f3980 8907d3cb 9c8f39a0 85d44738 00000000 fltmgr!FltpLegacyProcessingAfterPreCallbacksCompleted+0x2aa
9c8f39b8 82e554bc 85d44738 badef218 86c0ce98 fltmgr!FltpDispatch+0xc5
9c8f39d0 9bdd8bc9 9c8f39e8 9bdd8f88 86c0ce98 nt!IofCallDriver+0x63
WARNING: Stack unwind information not available. Following frames may be wrong.
9c8f39d8 9bdd8f88 86c0ce98 badef218 9c8f39fc dwprot+0xbc9
9c8f39e8 9bdd8c4d 86c0ce98 badef218 86c0ce98 dwprot+0xf88
9c8f3a2c 82e80777 807c7120 00000000 00000001 dwprot+0xc4d
9c8f3ad0 82e5c42a 01ddf2da 09a2f630 00728f28 nt!KeSetEvent+0xb2
9c8f3ad0 82e5abb1 01ddf2da 09a2f630 00728f28 nt!KiFastCallEntry+0x12a
9c8f3b5c a6997106 00000104 09a2f630 08728f28 nt!ZwQueryInformationFile+0x11
9c8f3be8 a69938a8 86af4288 87367b00 00000000 3pOqevtO+0xc106
9c8f3bfc bf43c4bc 87367b00 be1f8c48 be1f8c48 3pOqevtO+0x88a8
9c8f3d04 82e5c42a 000002e4 00000000 00000000 0xbf43c4bc
9c8f3d04 bf645701 000002e4 00000000 00000000 nt!KiFastCallEntry+0x12a
bf468ed0 00000000 00000000 00000000 00000000 0xbf645701
STACK_COMMAND: kb
FOLLOWUP_IP:
dwprot+bc9
9bdd8bc9 ?? ???
SYMBOL_STACK_INDEX: b
SYMBOL_NAME: dwprot+bc9
FOLLOWUP_NAME: MachineOwner
MODULE_NAME: dwprot
IMAGE_NAME: dwprot.sys
DEBUG_FLR_IMAGE_TIMESTAMP: 4cef6120
FAILURE_BUCKET_ID: 0x50_dwprot+bc9
BUCKET_ID: 0x50_dwprot+bc9
dwprot.sys - драйвер самозащиты Dr.Web.
3d075_xp.exe и 3pOqevtO.sys - неизвестные рандомные имена (довольно подозрительные).
Помимо Dr.Web у вас еще ESET стоит? Термоядерный коктейль.
Цитата wusoldier:
|
может ли быть, что из-за ошибок UltraDMA CRC Errors выдается синий экран?
|
Может, только не 0x00000050 (а 0x00000077, 0x0000007A, 0x000000F4).
