Hola, no suelo escribir mucho por aquí pero si que sigo muchos de los consejos y problemas que se solucionan aquí.
Bueno, tengo un problema con un ordenador y es que se queda congelado no se mueve ni raton, ni el teclado funciona. Pensé que era debido al sobre-calientamiento del procesador y aun no lo descarto.
Aquí fui donde encontré el volcado manual del DUMP, pero no tengo ni idea de como analizarlo. Y eso que los datos que me da el debbugger me dice cual es el problema, pero no tengo ni idea de que hacer con ese problema. Aquí os dejo el DUMP analizado con WinDBG a ver si podéis ayudarme y solucionar el problema:
Microsoft (R) Windows Debugger Version 6.2.9200.20512 AMD64
Copyright (c) Microsoft Corporation. All rights reserved.
Loading Dump File [E:\MEMORY.DMP]
Kernel Summary Dump File: Only kernel address space is available
Symbol search path is: SRV*c:\websymbols*http://msdl.microsoft.com/download/symbols
Executable search path is:
Windows 7 Kernel Version 7600 MP (4 procs) Free x86 compatible
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 7600.16385.x86fre.win7_rtm.090713-1255
Machine Name:
Kernel base = 0x8283d000 PsLoadedModuleList = 0x82985810
Debug session time: Sun Apr 14 19:32:49.758 2013 (UTC + 2:00)
System Uptime: 0 days 0:39:53.380
Loading Kernel Symbols
...............................................................
................................................................
...........
Loading User Symbols
PEB is paged out (Peb.Ldr = 7ffdf00c). Type ".hh dbgerr001" for details
Loading unloaded module list
.........
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
Use !analyze -v to get detailed debugging information.
BugCheck E2, {0, 0, 0, 0}
Probably caused by : i8042prt.sys ( i8042prt!I8xProcessCrashDump+251 )
Followup: MachineOwner
---------
0: kd> !analyze -v
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
MANUALLY_INITIATED_CRASH (e2)
The user manually initiated this crash dump.
Arguments:
Arg1: 00000000
Arg2: 00000000
Arg3: 00000000
Arg4: 00000000
Debugging Details:
------------------
BUGCHECK_STR: MANUALLY_INITIATED_CRASH
DEFAULT_BUCKET_ID: WIN7_DRIVER_FAULT
PROCESS_NAME: svchost.exe
CURRENT_IRQL: 6
TAG_NOT_DEFINED_c000000f: FFFFFFFF8078B000
EXCEPTION_RECORD: 85ceb780 -- (.exr 0xffffffff85ceb780)
ExceptionAddress: 8e7d949a (i8042prt!I8042KeyboardInterruptService)
ExceptionCode: 02780016
ExceptionFlags: 85ceb784
NumberParameters: 0
TRAP_FRAME: 8078ae54 -- (.trap 0xffffffff8078ae54)
ErrCode = 00000000
eax=8a8ec000 ebx=00000000 ecx=85ba4bd0 edx=00000005 esi=85cb0000 edi=828097a0
eip=8de10447 esp=8078aec8 ebp=8078aed4 iopl=0 nv up ei pl zr na pe nc
cs=0008 ss=0010 ds=b1c0 es=0007 fs=0000 gs=0000 efl=00000246
Rtnicxp!RTFast_RcvDpc+0x1d:
8de10447 895dfc mov dword ptr [ebp-4],ebx ss:0010:8078aed0=d04bba85
Resetting default scope
LAST_CONTROL_TRANSFER: from 8e7d9160 to 82919d10
STACK_TEXT:
8078adac 8e7d9160 000000e2 00000000 00000000 nt!KeBugCheckEx+0x1e
8078addc 8e7d9768 00b85bb0 78ae54c6 00000000 i8042prt!I8xProcessCrashDump+0x251
8078ae28 8287c7ad 85ceb780 85b85af8 8078ae54 i8042prt!I8042KeyboardInterruptService+0x2ce
8078ae28 8de10447 85ceb780 85b85af8 8078ae54 nt!KiInterruptDispatch+0x6d
8078aed4 8de10547 85cb0000 85cb0778 85ba40e0 Rtnicxp!RTFast_RcvDpc+0x1d
8078aef8 8de0e4fd 00cb0000 8078af28 88a70ce7 Rtnicxp!RTFast_HandleInterrupt+0x3f
8078af04 88a70ce7 85cb0000 85cb0778 85ba40e0 Rtnicxp!MPHandleInterrupt+0x13
8078af28 88a41545 85cb078c 00cb0778 00000000 ndis!ndisMDpcX+0x89
8078af48 828a53b5 85cb078c 85cb0778 00000000 ndis!ndis5InterruptDpc+0x92
8078afa4 828a5218 82966d20 864b13b8 00000000 nt!KiExecuteAllDpcs+0xf9
8078aff4 828a49dc 9ac89c14 00000000 00000000 nt!KiRetireDpcList+0xd5
8078aff8 9ac89c14 00000000 00000000 00000000 nt!KiDispatchInterrupt+0x2c
WARNING: Frame IP not in any known module. Following frames may be wrong.
828a49dc 00000000 0000001a 00d6850f bb830000 0x9ac89c14
STACK_COMMAND: kb
FOLLOWUP_IP:
i8042prt!I8xProcessCrashDump+251
8e7d9160 83fe01 cmp esi,1
SYMBOL_STACK_INDEX: 1
SYMBOL_NAME: i8042prt!I8xProcessCrashDump+251
FOLLOWUP_NAME: MachineOwner
MODULE_NAME: i8042prt
IMAGE_NAME: i8042prt.sys
DEBUG_FLR_IMAGE_TIMESTAMP: 4a5bbf1b
FAILURE_BUCKET_ID: MANUALLY_INITIATED_CRASH_i8042prt!I8xProcessCrashDump+251
BUCKET_ID: MANUALLY_INITIATED_CRASH_i8042prt!I8xProcessCrashDump+251
Followup: MachineOwner
---------
Espero que me ayudéis, mas que nada a entenderlo, porque supongo que buscando un poco puedo dar con la solución.
De antemano, muchas gracias.
Bueno, tengo un problema con un ordenador y es que se queda congelado no se mueve ni raton, ni el teclado funciona. Pensé que era debido al sobre-calientamiento del procesador y aun no lo descarto.
Aquí fui donde encontré el volcado manual del DUMP, pero no tengo ni idea de como analizarlo. Y eso que los datos que me da el debbugger me dice cual es el problema, pero no tengo ni idea de que hacer con ese problema. Aquí os dejo el DUMP analizado con WinDBG a ver si podéis ayudarme y solucionar el problema:
Microsoft (R) Windows Debugger Version 6.2.9200.20512 AMD64
Copyright (c) Microsoft Corporation. All rights reserved.
Loading Dump File [E:\MEMORY.DMP]
Kernel Summary Dump File: Only kernel address space is available
Symbol search path is: SRV*c:\websymbols*http://msdl.microsoft.com/download/symbols
Executable search path is:
Windows 7 Kernel Version 7600 MP (4 procs) Free x86 compatible
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 7600.16385.x86fre.win7_rtm.090713-1255
Machine Name:
Kernel base = 0x8283d000 PsLoadedModuleList = 0x82985810
Debug session time: Sun Apr 14 19:32:49.758 2013 (UTC + 2:00)
System Uptime: 0 days 0:39:53.380
Loading Kernel Symbols
...............................................................
................................................................
...........
Loading User Symbols
PEB is paged out (Peb.Ldr = 7ffdf00c). Type ".hh dbgerr001" for details
Loading unloaded module list
.........
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
Use !analyze -v to get detailed debugging information.
BugCheck E2, {0, 0, 0, 0}
Probably caused by : i8042prt.sys ( i8042prt!I8xProcessCrashDump+251 )
Followup: MachineOwner
---------
0: kd> !analyze -v
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
MANUALLY_INITIATED_CRASH (e2)
The user manually initiated this crash dump.
Arguments:
Arg1: 00000000
Arg2: 00000000
Arg3: 00000000
Arg4: 00000000
Debugging Details:
------------------
BUGCHECK_STR: MANUALLY_INITIATED_CRASH
DEFAULT_BUCKET_ID: WIN7_DRIVER_FAULT
PROCESS_NAME: svchost.exe
CURRENT_IRQL: 6
TAG_NOT_DEFINED_c000000f: FFFFFFFF8078B000
EXCEPTION_RECORD: 85ceb780 -- (.exr 0xffffffff85ceb780)
ExceptionAddress: 8e7d949a (i8042prt!I8042KeyboardInterruptService)
ExceptionCode: 02780016
ExceptionFlags: 85ceb784
NumberParameters: 0
TRAP_FRAME: 8078ae54 -- (.trap 0xffffffff8078ae54)
ErrCode = 00000000
eax=8a8ec000 ebx=00000000 ecx=85ba4bd0 edx=00000005 esi=85cb0000 edi=828097a0
eip=8de10447 esp=8078aec8 ebp=8078aed4 iopl=0 nv up ei pl zr na pe nc
cs=0008 ss=0010 ds=b1c0 es=0007 fs=0000 gs=0000 efl=00000246
Rtnicxp!RTFast_RcvDpc+0x1d:
8de10447 895dfc mov dword ptr [ebp-4],ebx ss:0010:8078aed0=d04bba85
Resetting default scope
LAST_CONTROL_TRANSFER: from 8e7d9160 to 82919d10
STACK_TEXT:
8078adac 8e7d9160 000000e2 00000000 00000000 nt!KeBugCheckEx+0x1e
8078addc 8e7d9768 00b85bb0 78ae54c6 00000000 i8042prt!I8xProcessCrashDump+0x251
8078ae28 8287c7ad 85ceb780 85b85af8 8078ae54 i8042prt!I8042KeyboardInterruptService+0x2ce
8078ae28 8de10447 85ceb780 85b85af8 8078ae54 nt!KiInterruptDispatch+0x6d
8078aed4 8de10547 85cb0000 85cb0778 85ba40e0 Rtnicxp!RTFast_RcvDpc+0x1d
8078aef8 8de0e4fd 00cb0000 8078af28 88a70ce7 Rtnicxp!RTFast_HandleInterrupt+0x3f
8078af04 88a70ce7 85cb0000 85cb0778 85ba40e0 Rtnicxp!MPHandleInterrupt+0x13
8078af28 88a41545 85cb078c 00cb0778 00000000 ndis!ndisMDpcX+0x89
8078af48 828a53b5 85cb078c 85cb0778 00000000 ndis!ndis5InterruptDpc+0x92
8078afa4 828a5218 82966d20 864b13b8 00000000 nt!KiExecuteAllDpcs+0xf9
8078aff4 828a49dc 9ac89c14 00000000 00000000 nt!KiRetireDpcList+0xd5
8078aff8 9ac89c14 00000000 00000000 00000000 nt!KiDispatchInterrupt+0x2c
WARNING: Frame IP not in any known module. Following frames may be wrong.
828a49dc 00000000 0000001a 00d6850f bb830000 0x9ac89c14
STACK_COMMAND: kb
FOLLOWUP_IP:
i8042prt!I8xProcessCrashDump+251
8e7d9160 83fe01 cmp esi,1
SYMBOL_STACK_INDEX: 1
SYMBOL_NAME: i8042prt!I8xProcessCrashDump+251
FOLLOWUP_NAME: MachineOwner
MODULE_NAME: i8042prt
IMAGE_NAME: i8042prt.sys
DEBUG_FLR_IMAGE_TIMESTAMP: 4a5bbf1b
FAILURE_BUCKET_ID: MANUALLY_INITIATED_CRASH_i8042prt!I8xProcessCrashDump+251
BUCKET_ID: MANUALLY_INITIATED_CRASH_i8042prt!I8xProcessCrashDump+251
Followup: MachineOwner
---------
Espero que me ayudéis, mas que nada a entenderlo, porque supongo que buscando un poco puedo dar con la solución.
De antemano, muchas gracias.