Всем доброго времени суток!
Случилась такая проблема с компом сотрудника:
Неттоп на базе Атома: Asus EE BOX PC EB1502
Windows XP SP3
Пришли на работу, при включении выбрасывает BSOD: BAD_POOL_CALLER
STOP: 0x000000C2
и перегружается по кругу..
Анализ дампа:
Microsoft Windows XP [Версия 5.1.2600]
(С) Корпорация Майкрософт, 1985-2001.
C:\Documents and Settings\Admin>C:\BSOD\kdfe.cmd C:\000\Mini031212-99.dmp
Analyzing "C:\000\Mini031212-99.dmp", please wait... Done.
Crash date: Mon Mar 12 17:15:11.031 2012 (GMT+2)
Stop error code: 0xc2_43
Process name: logonui.exe
Probably caused by: ntkrpamp.exe ( ntCmpFree+17 )
Детальный:
C:\Documents and Settings\Admin>C:\BSOD\kdfe.cmd C:\000\Mini031212-99.dmp -v
Microsoft ® Windows Debugger Version 6.11.0001.404 X86
Copyright © Microsoft Corporation. All rights reserved.
Loading Dump File [C:\000\Mini031212-99.dmp]
Mini Kernel Dump File: Only registers and stack trace are available
Symbol search path is: srv*C:\symbols*http://msdl.microsoft.com/download/symbols
Executable search path is: srv*C:\symbols*http://msdl.microsoft.com/download/sym
bols
Windows XP Kernel Version 2600 (Service Pack 3) MP (2 procs) Free x86 compatible
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 2600.xpsp_sp3_gdr.100427-1636
Machine Name:
Kernel base = 0x804d7000 PsLoadedModuleList = 0x8055d720
Debug session time: Mon Mar 12 17:15:11.031 2012 (GMT+2)
System Uptime: 0 days 0:00:19.765
Loading Kernel Symbols
...............................................................
....................................
Loading User Symbols
Loading unloaded module list
......
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
Use !analyze -v to get detailed debugging information.
BugCheck C2, {43, d6200000, 0, 0}
Probably caused by : ntkrpamp.exe ( nt!CmpFree+17 )
Followup: MachineOwner
---------
0: kd> kd: Reading initial command '!analyze -v; q'
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
BAD_POOL_CALLER (c2)
The current thread is making a bad pool request. Typically this is at a bad IRQ
L level or double freeing the same allocation, etc.
Arguments:
Arg1: 00000043, Attempt to free a virtual address which was never in any pool
Arg2: d6200000, Address being freed.
Arg3: 00000000, 0
Arg4: 00000000, 0
Debugging Details:
------------------
FAULTING_IP:
nt!CmpFree+17
8063c129 5d pop ebp
BUGCHECK_STR: 0xc2_43
CUSTOMER_CRASH_COUNT: 99
DEFAULT_BUCKET_ID: COMMON_SYSTEM_FAULT
PROCESS_NAME: logonui.exe
LAST_CONTROL_TRANSFER: from 80548c2d to 804f9f43
STACK_TEXT:
f40ae9bc 80548c2d 000000c2 00000043 d6200000 nt!KeBugCheckEx+0x1b
f40ae9fc 8054b49a d6200000 e20b6c10 e20ff000 nt!MiFreePoolPages+0x8b
f40aea3c 8063c129 d6200000 00000000 f40aeaa8 nt!ExFreePoolWithTag+0x1ba
f40aea4c 8063ed42 d6200000 00002000 00000000 nt!CmpFree+0x17
f40aeaa8 8063f127 e20c3008 00000000 00000000 nt!HvpRecoverData+0x3ec
f40aeaf4 80630a64 e20c3008 00000000 00000001 nt!HvMapHive+0x133
f40aeb0c 806385b9 e20c3101 00000005 00000000 nt!HvInitializeHive+0x416
f40aeb78 80625c39 f40aebb4 00000005 00000000 nt!CmpInitializeHive+0x273
f40aebd0 8062addd f40aed04 00000000 f40aec64 nt!CmpInitHiveFromFile+0xa3
f40aebf8 80632128 f40aeccc f40aec6c f40aec5c nt!CmpCmdHiveOpen+0x21
f40aecac 806257f4 f40aece4 f40aeccc 00000000 nt!CmLoadKey+0xae
f40aed40 806259fe 0006f5ec 0006f5d4 00000000 nt!NtLoadKey2+0x1fc
f40aed54 8054164c 0006f5ec 0006f5d4 0006f618 nt!NtLoadKey+0x12
f40aed54 7c90e514 0006f5ec 0006f5d4 0006f618 nt!KiFastCallEntry+0xfc
WARNING: Frame IP not in any known module. Following frames may be wrong.
0006f618 00000000 00000000 00000000 00000000 0x7c90e514
STACK_COMMAND: kb
FOLLOWUP_IP:
nt!CmpFree+17
8063c129 5d pop ebp
SYMBOL_STACK_INDEX: 3
SYMBOL_NAME: nt!CmpFree+17
FOLLOWUP_NAME: MachineOwner
MODULE_NAME: nt
IMAGE_NAME: ntkrpamp.exe
DEBUG_FLR_IMAGE_TIMESTAMP: 4bd6e0e8
FAILURE_BUCKET_ID: 0xc2_43_nt!CmpFree+17
BUCKET_ID: 0xc2_43_nt!CmpFree+17
Followup: MachineOwner
---------
quit:
Для продолжения нажмите любую клавишу . . .
Облазил все в гугле... ничего не могу понять,...подскажите где копать
Заранее благодарю
) с этого винта. Затем качай с нета программу для полного и безвозвратного удаления всей инфы с диска.