[dabronko]

Hallo Zusammen,

ich bekomme zur Zeit bei jedem Windows Start einen Bluescreen mit dem Hinweis auf srv.sys.
Nach einigen Systemwiederherstllungen und Neustarts geht es dann bis zum nächsten Start wieder.

ich habe mal den Memomy.dmp ausgelesen, kann aber damit nicht viel Anfangen, Kennst sich jemand damit aus und kann mir helfen?

Vielen Dank schon jetzt.


Microsoft ® Windows Debugger Version 6.2.9200.20512 AMD64
Copyright © Microsoft Corporation. All rights reserved.


Loading Dump File [C:\Windows\MEMORY.DMP]
Kernel Bitmap Dump File: Only kernel address space is available

Symbol search path is: SRV*c:\SymCache*http://msdl.microsoft.com/download/symbols
Executable search path is:
Windows 8 Kernel Version 9431 MP (8 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 9431.0.amd64fre.winmain_bluemp.130615-1214
Machine Name:
Kernel base = 0xfffff802`fa880000 PsLoadedModuleList = 0xfffff802`fab4a990
Debug session time: Sun Oct 13 23:27:05.962 2013 (UTC + 2:00)
System Uptime: 0 days 0:01:39.718
Loading Kernel Symbols
...............................................................
................................................................
..........................................
Loading User Symbols

Loading unloaded module list
.....
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck 7E, {ffffffffc0000005, fffff80003fae762, ffffd00037379938, ffffd00037379140}

Probably caused by : srv.sys ( srv!WorkerThread+d2 )

Followup: MachineOwner
---------

6: kd> !analyze -v
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

SYSTEM_THREAD_EXCEPTION_NOT_HANDLED (7e)
This is a very common bugcheck. Usually the exception address pinpoints
the driver/function that caused the problem. Always note this address
as well as the link date of the driver/image that contains this address.
Arguments:
Arg1: ffffffffc0000005, The exception code that was not handled
Arg2: fffff80003fae762, The address that the exception occurred at
Arg3: ffffd00037379938, Exception Record Address
Arg4: ffffd00037379140, Context Record Address

Debugging Details:
------------------


EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - Die Anweisung in 0x%08lx verweist auf Speicher 0x%08lx. Der Vorgang %s konnte nicht im Speicher durchgef hrt werden.

FAULTING_IP:
srv!WorkerThread+d2
fffff800`03fae762 488b4728 mov rax,qword ptr [rdi+28h]

EXCEPTION_RECORD: ffffd00037379938 -- (.exr 0xffffd00037379938)
ExceptionAddress: fffff80003fae762 (srv!WorkerThread+0x00000000000000d2)
ExceptionCode: c0000005 (Access violation)
ExceptionFlags: 00000000
NumberParameters: 2
Parameter[0]: 0000000000000000
Parameter[1]: 0000000000000098
Attempt to read from address 0000000000000098

CONTEXT: ffffd00037379140 -- (.cxr 0xffffd00037379140)
rax=0000000000000000 rbx=ffffe00004b71020 rcx=fffff80003f850e0
rdx=0000000000000000 rsi=0000000000000001 rdi=0000000000000070
rip=fffff80003fae762 rsp=ffffd00037379b70 rbp=0000000000000001
r8=00000000ffffffff r9=0000000000000000 r10=7ffffffffffffffc
r11=ffffe00004bb68c0 r12=0000000000000000 r13=fffff802fa880000
r14=fffff78000000320 r15=fffff802fad6a700
iopl=0 nv up ei pl nz na pe nc
cs=0010 ss=0000 ds=002b es=002b fs=0053 gs=002b efl=00010202
srv!WorkerThread+0xd2:
fffff800`03fae762 488b4728 mov rax,qword ptr [rdi+28h] ds:002b:00000000`00000098=??
Resetting default scope

PROCESS_NAME: System

CURRENT_IRQL: 0

ERROR_CODE: (NTSTATUS) 0xc0000005 - Die Anweisung in 0x%08lx verweist auf Speicher 0x%08lx. Der Vorgang %s konnte nicht im Speicher durchgef hrt werden.

EXCEPTION_PARAMETER1: 0000000000000000

EXCEPTION_PARAMETER2: 0000000000000098

READ_ADDRESS: fffff802fab38340: Unable to get special pool info
fffff802fab38340: Unable to get special pool info
0000000000000098

FOLLOWUP_IP:
srv!WorkerThread+d2
fffff800`03fae762 488b4728 mov rax,qword ptr [rdi+28h]

BUGCHECK_STR: AV

DEFAULT_BUCKET_ID: NULL_CLASS_PTR_DEREFERENCE

LAST_CONTROL_TRANSFER: from fffff802fad6a74a to fffff80003fae762

STACK_TEXT:
ffffd000`37379b70 fffff802`fad6a74a : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`20206f49 : srv!WorkerThread+0xd2
ffffd000`37379bd0 fffff802`fa961968 : ffffe000`04bb68c0 ffffe000`04bb68c0 00000000`00000000 00000000`00000000 : nt!IopThreadStart+0x26
ffffd000`37379c00 fffff802`fa9d73c6 : ffffd000`201d3180 ffffe000`04bb68c0 ffffd000`201df200 00000000`00000000 : nt!PspSystemThreadStartup+0x58
ffffd000`37379c60 00000000`00000000 : ffffd000`3737a000 ffffd000`37374000 00000000`00000000 00000000`00000000 : nt!KiStartSystemThread+0x16


SYMBOL_STACK_INDEX: 0

SYMBOL_NAME: srv!WorkerThread+d2

FOLLOWUP_NAME: MachineOwner

MODULE_NAME: srv

IMAGE_NAME: srv.sys

DEBUG_FLR_IMAGE_TIMESTAMP: 51bd07e1

STACK_COMMAND: .cxr 0xffffd00037379140 ; kb

BUCKET_ID_FUNC_OFFSET: d2

FAILURE_BUCKET_ID: AV_srv!WorkerThread

BUCKET_ID: AV_srv!WorkerThread

Followup: MachineOwner
---------