wie oben Beschrieben habe ich hier einen PC (HP Compaq DC7900).
Das System:
- Windows 7 64Bit
- 4GB RAM
- Prozessor Intel Core2 Duo E8400 3GHz
- Grafik: Intel onBoard Q45/Q43
- Festplatte: WD 250GB ATA
Auf dem System gibt es in unregelmäßigen Abständen BSODs mit unterschiedlichen Fehlermeldungen. Der erste bereits nach der Installation von Windows 7 beim Aktualisieren des OS. Danach während des Surfens, beim Download von Dateien, beim Virenscan etc.
Was habe ich getan:
- Festplatte mit chkdsk gecheckt - keine Fehler
- Arbeitsspeicher mit memtest86+ 24h gecheckt - keine Fehler
- Dump-File-Auswertung mit Bluescreenview und WinDbg
Das Ergebnis von WinDbg:
Microsoft ® Windows Debugger Version 6.12.0002.633 AMD64 Copyright © Microsoft Corporation. All rights reserved. Loading Dump File [C:\Windows\MEMORY.DMP] Kernel Summary Dump File: Only kernel address space is available Symbol search path is: SRV*C:\symbols*http://msdl.microsoft.com/dowload/symbols Executable search path is: Windows 7 Kernel Version 7601 (Service Pack 1) MP (2 procs) Free x64 Product: WinNt, suite: TerminalServer SingleUserTS Personal Built by: 7601.18798.amd64fre.win7sp1_gdr.150316-1654 Machine Name: Kernel base = 0xfffff800`02a11000 PsLoadedModuleList = 0xfffff800`02c56890 Debug session time: Sun Apr 19 12:42:22.941 2015 (UTC + 2:00) System Uptime: 0 days 0:16:06.001 Loading Kernel Symbols ............................................................... ................................................................ ........................ Loading User Symbols Loading unloaded module list ..... ******************************************************************************* * * * Bugcheck Analysis * * * ******************************************************************************* Use !analyze -v to get detailed debugging information. BugCheck 7A, {fffff6fc40009888, ffffffffc000000e, 9b0f9860, fffff88001311dc4} Probably caused by : hardware ( nt! ?? ::FNODOBFM::`string'+3593a ) Followup: MachineOwner --------- 1: kd> !analyze -v ******************************************************************************* * * * Bugcheck Analysis * * * ******************************************************************************* KERNEL_DATA_INPAGE_ERROR (7a) The requested page of kernel data could not be read in. Typically caused by a bad block in the paging file or disk controller error. Also see KERNEL_STACK_INPAGE_ERROR. If the error status is 0xC000000E, 0xC000009C, 0xC000009D or 0xC0000185, it means the disk subsystem has experienced a failure. If the error status is 0xC000009A, then it means the request failed because a filesystem failed to make forward progress. Arguments: Arg1: fffff6fc40009888, lock type that was held (value 1,2,3, or PTE address) Arg2: ffffffffc000000e, error status (normally i/o status code) Arg3: 000000009b0f9860, current process (virtual address for lock type 3, or PTE) Arg4: fffff88001311dc4, virtual address that could not be in-paged (or PTE contents if arg1 is a PTE address) Debugging Details: ------------------ ERROR_CODE: (NTSTATUS) 0xc000000e - Ein nicht vorhandenes Ger t wurde angegeben. DISK_HARDWARE_ERROR: There was error with disk hardware BUGCHECK_STR: 0x7a_c000000e DEFAULT_BUCKET_ID: VISTA_DRIVER_FAULT PROCESS_NAME: System CURRENT_IRQL: 0 TRAP_FRAME: fffff88008ef4060 -- (.trap 0xfffff88008ef4060) NOTE: The trap frame does not contain all registers. Some register values may be zeroed or incorrect. rax=fffff88001311dc4 rbx=0000000000000000 rcx=fffff88008ef4230 rdx=fffff88008ef5b10 rsi=0000000000000000 rdi=0000000000000000 rip=fffff88001311dc4 rsp=fffff88008ef41f8 rbp=fffff88008ef4360 r8=fffff88008ef4a70 r9=fffff88008ef4360 r10=0000000000000000 r11=fffff88008ef4268 r12=0000000000000000 r13=0000000000000000 r14=0000000000000000 r15=0000000000000000 iopl=0 nv up ei ng nz na pe nc Ntfs! ?? ::NNGAKEGL::`string'+0x7800: fffff880`01311dc4 0300 add eax,dword ptr [rax] ds:1bbd:1dc4=?? Resetting default scope MISALIGNED_IP: Ntfs! ?? ::NNGAKEGL::`string'+7800 fffff880`01311dc4 0300 add eax,dword ptr [rax] LAST_CONTROL_TRANSFER: from fffff80002af6032 to fffff80002a83a40 STACK_TEXT: fffff880`08ef3d88 fffff800`02af6032 : 00000000`0000007a fffff6fc`40009888 ffffffff`c000000e 00000000`9b0f9860 : nt!KeBugCheckEx fffff880`08ef3d90 fffff800`02aab48b : fffffa80`047eb5b0 fffff880`08ef3ec0 fffff800`02cc3540 00000000`000001c0 : nt! ?? ::FNODOBFM::`string'+0x3593a fffff880`08ef3e70 fffff800`02a91d19 : 00000000`00000000 00000000`00000008 ffffffff`ffffffff fffff800`02bbb8b7 : nt!MiIssueHardFault+0x28b fffff880`08ef3f00 fffff800`02a81b6e : 00000000`00000008 fffff880`01311dc4 fffff8a0`01ab4800 fffff880`0126e4dc : nt!MmAccessFault+0x1399 fffff880`08ef4060 fffff880`01311dc4 : fffff800`02aaf89c fffff6fb`7ea00108 ffff0000`09c8d19f 00000000`00000000 : nt!KiPageFault+0x16e fffff880`08ef41f8 fffff800`02aaf89c : fffff6fb`7ea00108 ffff0000`09c8d19f 00000000`00000000 00000000`00000000 : Ntfs! ?? ::NNGAKEGL::`string'+0x7800 fffff880`08ef4200 fffff880`01237125 : fffff880`0126e614 fffff880`08ef5b10 fffff880`08ef49d0 fffff880`08ef5b10 : nt!_C_specific_handler+0x8c fffff880`08ef4270 fffff800`02aaf31d : fffff880`0126e470 00000000`00000000 fffff880`0121d000 00000000`00000000 : Ntfs!_GSHandlerCheck_SEH+0x75 fffff880`08ef42a0 fffff800`02aae0f5 : fffff880`0126e470 fffff880`08ef4318 fffff880`08ef49d0 fffff880`0121d000 : nt!RtlpExecuteHandlerForException+0xd fffff880`08ef42d0 fffff800`02ab13e6 : fffff880`08ef49d0 fffff880`08ef4a70 fffffa80`00000001 fffff880`0122de20 : nt!RtlDispatchException+0x415 fffff880`08ef49b0 fffff880`0123721c : 00000000`00100409 00000000`00001000 fffff880`02ffc501 00000000`00001000 : nt!RtlRaiseStatus+0x4e fffff880`08ef4f50 fffff880`0122aaa1 : fffff880`02ffc530 fffffa80`03f472a0 fffff880`02ffc530 fffff880`02ffc530 : Ntfs!NtfsRaiseStatusInternal+0x5c fffff880`08ef4f90 fffff880`012b6a39 : fffff880`02ffc530 fffffa80`045da180 fffff8a0`0037abc0 00000000`00003000 : Ntfs!NtfsWriteBytes+0x429 fffff880`08ef5060 fffff880`012d840f : fffff880`08ef5320 00000006`00000000 00000000`00000028 00000000`00000000 : Ntfs!NtfsExtendDataStream+0x79 fffff880`08ef5170 fffff880`012b63f9 : fffff880`02ffc530 fffff8a0`0037ad88 fffff880`08ef5320 fffff980`08dec10f : Ntfs!NtfsAllocateRecord+0x86c fffff880`08ef52b0 fffff880`012af51b : fffff880`02ffc530 fffff8a0`0037abc0 fffff880`08ef57c8 fffff8a0`0037abc0 : Ntfs!GetIndexBuffer+0x135 fffff880`08ef53a0 fffff880`012daa2d : fffff8a0`0037abc0 fffff880`08ef5798 fffffa80`043e9010 fffff880`08ef5730 : Ntfs!PushIndexRoot+0x26b fffff880`08ef5580 fffff880`0129b649 : fffff880`02ffc530 fffff8a0`0037abc0 fffffa80`039fdbc0 fffff880`08ef57c8 : Ntfs!AddToIndex+0x17d fffff880`08ef5610 fffff880`0129ba9a : fffff8a0`0037abc0 00000000`00000000 00000000`00000000 fffff880`08ef5798 : Ntfs!DeleteFromIndex+0x2b6 fffff880`08ef56c0 fffff880`0129cd2d : fffff880`02ffc530 fffff880`08ef5e30 00000000`00000003 00000000`00000001 : Ntfs!NtfsDeleteIndexEntry+0x10a fffff880`08ef58a0 fffff880`012bc18d : fffff880`02ffc530 fffff8a0`00096b40 fffff8a0`0037abc0 fffff880`08ef5b98 : Ntfs!NtfsDeleteFile+0x3bd fffff880`08ef5b10 fffff880`0122c639 : fffffa80`036a8520 fffffa80`03548550 fffff880`02ffc490 fffffa80`033dbb50 : Ntfs!NtfsCommonCleanup+0x166d fffff880`08ef5f30 fffff800`02a7b537 : fffff880`02ffc490 00000000`00000000 00000000`00000000 00000000`00000000 : Ntfs!NtfsCommonCleanupCallout+0x19 fffff880`08ef5f60 fffff800`02a7b4f8 : 00000000`00000000 00000000`00000000 fffff880`08ef6000 fffff800`02a905a2 : nt!KxSwitchKernelStackCallout+0x27 fffff880`02ffc360 fffff800`02a905a2 : fffff880`009e8180 00000000`00000002 00000000`00000044 fffffa80`04621540 : nt!KiSwitchKernelStackContinue fffff880`02ffc380 fffff880`0122c6b2 : fffff880`0122c620 00000000`00000001 fffff880`02ffc700 00000000`00000000 : nt!KeExpandKernelStackAndCalloutEx+0x2a2 fffff880`02ffc460 fffff880`012c9ba4 : fffff880`02ffc530 fffff880`02ffc530 fffff880`02ffc530 00000000`000007ff : Ntfs!NtfsCommonCleanupOnNewStack+0x42 fffff880`02ffc4d0 fffff880`010a2bcf : fffff880`02ffc530 fffffa80`043558c0 fffffa80`04355c18 fffffa80`03a33b50 : Ntfs!NtfsFsdCleanup+0x144 fffff880`02ffc740 fffff880`010a16df : fffffa80`043568d0 00000000`00000000 fffffa80`041ff100 fffffa80`043558c0 : fltmgr!FltpLegacyProcessingAfterPreCallbacksCompleted+0x24f fffff880`02ffc7d0 fffff800`02d8baff : fffffa80`043558c0 fffffa80`033ca890 00000000`00000000 fffffa80`04621540 : fltmgr!FltpDispatch+0xcf fffff880`02ffc830 fffff800`02d7a01e : 00000000`00000000 fffffa80`04621510 00000000`00000000 fffff800`02a8dd3c : nt!IopCloseFile+0x11f fffff880`02ffc8c0 fffff800`02d79c8f : fffffa80`04621510 fffffa80`00000001 fffff8a0`000017c0 00000000`00000000 : nt!ObpDecrementHandleCount+0x8e fffff880`02ffc940 fffff800`02d7a3b4 : 00000000`00000090 fffffa80`033ca890 fffff8a0`000017c0 00000000`00000090 : nt!ObpCloseHandleTableEntry+0xaf fffff880`02ffc9d0 fffff800`02a82cd3 : fffffa80`033dbb50 fffff880`02ffcaa0 fffffa80`04389160 fffff800`02bbbd1e : nt!ObpCloseHandle+0x94 fffff880`02ffca20 fffff800`02a7f290 : fffff880`011b8629 fffffa80`043544f8 00000000`00000001 00000000`66536f56 : nt!KiSystemServiceCopyEnd+0x13 fffff880`02ffcbb8 fffff880`011b8629 : fffffa80`043544f8 00000000`00000001 00000000`66536f56 fffff800`02c2e200 : nt!KiServiceLinkage fffff880`02ffcbc0 fffff880`011caf01 : 00000000`00000000 00000000`00000001 fffff800`02c2e200 fffffa80`043543d8 : volsnap!VspCloseDiffAreaFiles+0x69 fffff880`02ffcc10 fffff800`02a8d6a5 : fffff880`011cae30 fffff800`02c2e2d8 fffffa80`033dbb50 00000000`00000000 : volsnap!VspDestroyAllSnapshotsWorker+0xd1 fffff880`02ffcc70 fffff800`02d1daba : 00000000`00000000 fffffa80`033dbb50 00000000`00000080 fffffa80`033ca890 : nt!ExpWorkerThread+0x111 fffff880`02ffcd00 fffff800`02a75426 : fffff880`009e8180 fffffa80`033dbb50 fffff880`009f2f40 00000000`00000000 : nt!PspSystemThreadStartup+0x5a fffff880`02ffcd40 00000000`00000000 : fffff880`02ffd000 fffff880`02ff7000 fffff880`02ffc360 00000000`00000000 : nt!KxStartSystemThread+0x16 STACK_COMMAND: kb FOLLOWUP_IP: nt! ?? ::FNODOBFM::`string'+3593a fffff800`02af6032 cc int 3 SYMBOL_STACK_INDEX: 1 SYMBOL_NAME: nt! ?? ::FNODOBFM::`string'+3593a FOLLOWUP_NAME: MachineOwner IMAGE_NAME: hardware DEBUG_FLR_IMAGE_TIMESTAMP: 0 MODULE_NAME: hardware FAILURE_BUCKET_ID: X64_IP_MISALIGNED BUCKET_ID: X64_IP_MISALIGNED Followup: MachineOwner ---------
Leider habe ich jetzt nicht so viel Ahnung, dass ich daraus den oder die Elemente herauslesen könnte, welche für die BSODs verantwortlich sind.
Ich möchte noch erwähnen, dass ich den Rechner auch beim Computerladen meines Vertrauens, von welchem ich Ihn erstanden hatte, zwecks dieser Geschichte checken lassen habe. Auch die wussten sich keinen Rat und haben das System neu aufgesetzt. Als ich ihn wieder bei mir hatte trat bereist nach dem ersten Start ein Bluescreen auf. Ich habe außer einem Virenscanner (AVG Ultimate) keine weitere Software installiert und auch keine Geräte außer Monitor, Tastatur und Maus angeschlossen.
Kann mir jemand bei der Auswertung des LOG-Files helfen?
Vielen Dank
Jörg