Jump to content
Sign in to follow this  
Serino

Bluescreen Win2k3

Recommended Posts

Hallo zusammen,

 

immer wieder bekomme ich auf einem win2003 Server (Standard, PDC) Bluescreens, meist zur Sicherungszeit..

 

aus dem Dump werde ich nicht recht schlau :confused: , kann mir da bitte jemand helfen: Danke.. mfg. Reinhard

 

KERNEL_MODE_EXCEPTION_NOT_HANDLED (8e)

This is a very common bugcheck. Usually the exception address pinpoints

the driver/function that caused the problem. Always note this address

as well as the link date of the driver/image that contains this address.

Some common problems are exception code 0x80000003. This means a hardcoded breakpoint or assertion was hit, but this system was booted/NODEBUG. This is notsupposed to happen as developers should never have

hardcoded breakpoints in retail code, but ...

If this happens, make sure a debugger gets connected, and the

system is booted /DEBUG. This will let us see why this breakpoint is

happening.

 

Arguments:

 

Arg1: c0000005, The exception code that was not handled

Arg2: 8092cfe9, The address that the exception occurred at

Arg3: f59b2a94, Trap Frame

Arg4: 00000000

 

Debugging Details:

 

------------------

 

*** ERROR: Symbol file could not be found. Defaulted to export symbols for

bedsnt5.dll -

 

*** ERROR: Module load completed but symbols could not be loaded for

bengine.exe

 

EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - Die Anweisung in "0x%08lx" verweist

auf Speicher in "0x%08lx". Der Vorgang "%s" konnte nicht auf dem Speicher

durchgeführt werden.

 

FAULTING_IP:

 

nt!HvpGetCellMapped+97

8092cfe9 8b4604 mov eax,[esi+0x4]

TRAP_FRAME: f59b2a94 -- (.trap fffffffff59b2a94)

ErrCode = 00000000

eax=e19cd7cc ebx=e19cd630 ecx=000003ff edx=85c7b020 esi=00001ff0

edi=0000013c

eip=8092cfe9 esp=f59b2b08 ebp=f59b2b7c iopl=0 nv up ei pl nz na po nc

cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00010206

nt!HvpGetCellMapped+0x97:

8092cfe9 8b4604 mov eax,[esi+0x4] ds:0023:00001ff4=????????

Resetting default scope

DEFAULT_BUCKET_ID: DRIVER_FAULT

BUGCHECK_STR: 0x8E

CURRENT_IRQL: 0

LAST_CONTROL_TRANSFER: from 808d2e0c to 8092cfe9

STACK_TEXT:

f59b2b7c 808d2e0c e19cd630 ffffffd0 e1c647ac nt!HvpGetCellMapped+0x97

f59b2ba4 808d3936 e19cd630 ffffffd0 e156e008 nt!CmpCopyValue+0x18

f59b2bf0 808d39f1 e19cd630 000874d8 e156e008 nt!CmpCopyKeyPartial+0x229

f59b2c30 808d3450 e1671000 00000400 00000006 nt!CmpCopySyncTree2+0x267

f59b2c60 80972a78 e19cd630 00000020 e156e008 nt!CmpCopySyncTree+0x4f

f59b2c98 8096d0d3 e156e008 000004a8 e19cd928 nt!CmSaveKey+0x261

f59b2cbc 8082337b e1224270 000004a8 f59b2d54 nt!NtSaveKey+0x78

f59b2cbc 80822231 e1224270 000004a8 f59b2d54 nt!KiFastCallEntry+0xf8

f59b2d3c 8096d0a0 00000444 000004a8 8096d05b nt!ZwSaveKey+0x11

f59b2d54 8082337b 00000444 000004a8 02a0ea38 nt!NtSaveKey+0x45

f59b2d54 7c94ed54 00000444 000004a8 02a0ea38 nt!KiFastCallEntry+0xf8

02a0e9e0 7c941d04 77f97aac 00000444 000004a8 ntdll!KiFastSystemCallRet

02a0e9e4 77f97aac 00000444 000004a8 0234e1a8 ntdll!NtSaveKey+0xc

02a0ea38 77f902e9 00000444 000004a8 0019b0a8

ADVAPI32!LocalBaseRegSaveKey+0x173

02a0ea78 0129da43 00000444 0234a148 00000000 ADVAPI32!RegSaveKeyW+0x93

 

WARNING: Stack unwind information not available. Following frames may be

wrong.

 

02a0eaf4 00470045 00530049 00520054 005c0059 bedsnt5!GetTable+0x6613

02a0eb6c 7c94fb23 00310000 0234b890 00140178 bengine+0x70045

02a0edac 012a2496 004731e4 0234e1a8 023316fc ntdll!RtlAllocateHeap+0xee7

02a0ede8 012a8a49 00000000 00000000 00000000 bedsnt5!GetTable+0xb066

02a0edec 00000000 00000000 00000000 00000000 bedsnt5!GetTable+0x11619

 

FOLLOWUP_IP:

 

nt!HvpGetCellMapped+97

8092cfe9 8b4604 mov eax,[esi+0x4]

SYMBOL_STACK_INDEX: 0

FOLLOWUP_NAME: MachineOwner

SYMBOL_NAME: nt!HvpGetCellMapped+97

MODULE_NAME: nt

IMAGE_NAME: ntoskrnl.exe

DEBUG_FLR_IMAGE_TIMESTAMP: 42435e33

STACK_COMMAND: .trap fffffffff59b2a94 ; kb

FAILURE_BUCKET_ID: 0x8E_nt!HvpGetCellMapped+97

BUCKET_ID: 0x8E_nt!HvpGetCellMapped+97

Followup: MachineOwner

Share this post


Link to post
Share on other sites

In einem Kerneltreiber ist eine Ausnahme aufgetreten, für die sich niemand zuständig fühlt. Das darf nicht passieren und das OS stürzt vorsichtshalber ab.

 

Was kannst Du tun: Treiber prüfen ( anscheinend war eine bedsnt5.dll und eine bengine.exe beteiligt) , Hardware prüfen.

 

-Zahni

Share this post


Link to post
Share on other sites
Der letzte Beitrag zu diesem Thema ist mehr als 180 Tage alt. Bitte überlege Dir, ob es nicht sinnvoller ist ein neues Thema zu erstellen.

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Guest
Reply to this topic...

×   Pasted as rich text.   Restore formatting

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.

Sign in to follow this  

Werbepartner:



×
×
  • Create New...