Analisando ainda outro minidump do Windows 7

Question

Analisando ainda outro minidump do Windows 7

#1 resposta do (4 votos)

1

Estou tentando consertar um PC WIn7 de 64B com problemas de BOSD usando o acesso remoto. Então eu não posso usar o verificador dirver.

Até agora eu usei windbg no minidump recebendo isso:

2: kd> !analyze -v
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

IRQL_NOT_LESS_OR_EQUAL (a)
An attempt was made to access a pageable (or completely invalid) address at an
interrupt request level (IRQL) that is too high.  This is usually
caused by drivers using improper addresses.
If a kernel debugger is available get the stack backtrace.
Arguments:
Arg1: 0000000000000000, memory referenced
Arg2: 0000000000000002, IRQL
Arg3: 0000000000000001, bitfield :
    bit 0 : value 0 = read operation, 1 = write operation
    bit 3 : value 0 = not an execute operation, 1 = execute operation (only on chips which support this level of status)
Arg4: fffff800028e1c3f, address which referenced memory

Debugging Details:
------------------

*** WARNING: Unable to verify timestamp for fwwfp764.sys
*** ERROR: Module load completed but symbols could not be loaded for fwwfp764.sys

WRITE_ADDRESS:  0000000000000000 Nonpaged pool

CURRENT_IRQL:  2

FAULTING_IP: 
nt!KeAcquireInStackQueuedSpinLockAtDpcLevel+4f
fffff800'028e1c3f 488713          xchg    rdx,qword ptr [rbx]

CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  WIN7_DRIVER_FAULT

BUGCHECK_STR:  0xA

PROCESS_NAME:  System

ANALYSIS_VERSION: 6.3.9600.17237 (debuggers(dbg).140716-0327) amd64fre

TRAP_FRAME:  fffff880027674f0 -- (.trap 0xfffff880027674f0)
NOTE: The trap frame does not contain all registers.
Some register values may be zeroed or incorrect.
rax=fffffa8004c73510 rbx=0000000000000000 rcx=0000000000000000
rdx=fffff880027676f0 rsi=0000000000000000 rdi=0000000000000000
rip=fffff800028e1c3f rsp=fffff88002767680 rbp=0000000000000004
 r8=fffff880027676f0  r9=fffff8800178acb0 r10=0000000000000000
r11=0000000000000040 r12=0000000000000000 r13=0000000000000000
r14=0000000000000000 r15=0000000000000000
iopl=0         nv up ei pl nz na po nc
nt!KeAcquireInStackQueuedSpinLockAtDpcLevel+0x4f:
fffff800'028e1c3f 488713          xchg    rdx,qword ptr [rbx] ds:00000000'00000000=????????????????
Resetting default scope

LAST_CONTROL_TRANSFER:  from fffff800028d8169 to fffff800028d8bc0

STACK_TEXT:  
fffff880'027673a8 fffff800'028d8169 : 00000000'0000000a 00000000'00000000 00000000'00000002 00000000'00000001 : nt!KeBugCheckEx
fffff880'027673b0 fffff800'028d6de0 : 00000000'00000010 fffff880'027676e0 fffff880'00000003 00000000'00000000 : nt!KiBugCheckDispatch+0x69
fffff880'027674f0 fffff800'028e1c3f : 00000000'00000003 00000000'00000002 00000000'00000003 00000000'00000002 : nt!KiPageFault+0x260
fffff880'02767680 fffff880'0152c9c7 : 00000000'00000004 fffff880'02767960 00000000'00008900 fffffa80'0467d7c8 : nt!KeAcquireInStackQueuedSpinLockAtDpcLevel+0x4f
fffff880'027676d0 fffff880'016e608d : fffffa80'06a4ce10 fffffa80'04ee6320 fffff880'02767960 00000000'00008900 : NETIO!WfpExpireEntryLru+0x17
fffff880'02767720 fffff880'016ad7b7 : 00000000'00000004 00000000'00000030 00000000'00000000 00000000'00000001 : tcpip!WfpAleCloseRemoteEndpointConnection+0x2d
fffff880'02767750 fffff880'01725e5b : fffffa80'06a4ce10 fffffa80'03b27baa fffff880'02767b40 fffffa80'06a4ce10 : tcpip! ?? ::FNODOBFM::'string'+0x20f72
fffff880'027678a0 fffff880'017261e2 : 00000000'00000000 fffffa80'03b27ae0 00000000'00000001 fffff880'02767b40 : tcpip!WfpAleHandleSendCompletion+0xeb
fffff880'027679c0 fffff880'017306b2 : fffffa80'040b7ec0 00000000'00000000 00000000'00000002 00000000'00000000 : tcpip!WfpAlepAuthorizeSendCompletion+0x32
fffff880'02767a10 fffff880'01592af2 : fffffa80'0458b820 00000000'00000000 fffffa80'03b27ae0 fffff880'02767b40 : tcpip!WfpAleCompleteOperation+0x162
fffff880'02767ab0 fffff880'02aa41cb : fffffa80'03b27ae0 fffff880'02767b40 00000000'00000000 00000000'00000000 : fwpkclnt!FwpsCompleteOperation0+0x1e
fffff880'02767ae0 fffffa80'03b27ae0 : fffff880'02767b40 00000000'00000000 00000000'00000000 fffffa80'04b99700 : fwwfp764+0x61cb
fffff880'02767ae8 fffff880'02767b40 : 00000000'00000000 00000000'00000000 fffffa80'04b99700 fffff880'02aa1392 : 0xfffffa80'03b27ae0
fffff880'02767af0 00000000'00000000 : 00000000'00000000 fffffa80'04b99700 fffff880'02aa1392 fffffa80'04c79b48 : 0xfffff880'02767b40


STACK_COMMAND:  kb

FOLLOWUP_IP: 
NETIO!WfpExpireEntryLru+17
fffff880'0152c9c7 488b4310        mov     rax,qword ptr [rbx+10h]

SYMBOL_STACK_INDEX:  4

SYMBOL_NAME:  NETIO!WfpExpireEntryLru+17

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: NETIO

IMAGE_NAME:  NETIO.SYS

DEBUG_FLR_IMAGE_TIMESTAMP:  5294760d

IMAGE_VERSION:  6.1.7601.18327

FAILURE_BUCKET_ID:  X64_0xA_NETIO!WfpExpireEntryLru+17

BUCKET_ID:  X64_0xA_NETIO!WfpExpireEntryLru+17

ANALYSIS_SOURCE:  KM

FAILURE_ID_HASH_STRING:  km:x64_0xa_netio!wfpexpireentrylru+17

FAILURE_ID_HASH:  {fcdee258-ad7b-b100-5f3a-ac9544c5fd1f}

Followup: MachineOwner
---------

e eu usei bluescreenview que marcou apenas ntoskrnl.exe em vermelho:

'ntoskrnl.exe   ntoskrnl.exe+f20d4  fffff800'02863000   fffff800'02e48000   0x005e5000  0x531590fb  04.03.2014 09:38:19 Microsoft® Windows® Operating System    NT Kernel & System  6.1.7601.18409 (win7sp1_gdr.140303-2144)    Microsoft Corporation   C:\Windows\system32\ntoskrnl.exe    
hal.dll     fffff800'0281a000   fffff800'02863000   0x00049000  0x4ce7c669  20.11.2010 14:00:25 Microsoft® Windows® Operating System    Hardware Abstraction Layer DLL  6.1.7601.17514 (win7sp1_rtm.101119-1850)    Microsoft Corporation   C:\Windows\system32\hal.dll 
kdcom.dll       fffff800'03017000   fffff800'03021000   0x0000a000  0x4d4d8061  05.02.2011 17:52:49 Microsoft® Windows® Operating System    Serial Kernel Debugger  6.1.7601.17556 (win7sp1_gdr.110204-2120)    Microsoft Corporation   C:\Windows\system32\kdcom.dll   
mcupdate_GenuineIntel.dll       fffff880'00cbd000   fffff880'00d0c000   0x0004f000  0x4ce7c737  20.11.2010 14:03:51 Microsoft® Windows® Operating System    Intel Microcode Update Library  6.1.7601.17514 (win7sp1_rtm.101119-1850)    Microsoft Corporation   C:\Windows\system32\mcupdate_GenuineIntel.dll   
PSHED.dll       fffff880'00d0c000   fffff880'00d20000   0x00014000  0x4a5be027  14.07.2009 02:32:23 Betriebssystem Microsoft® Windows®  Plattformspezifischer Hardwarefehlertreiber 6.1.7600.16385 (win7_rtm.090713-1255)   Microsoft Corporation   C:\Windows\system32\PSHED.dll   
CLFS.SYS        fffff880'00d20000   fffff880'00d7e000   0x0005e000  0x4a5bc11d  14.07.2009 00:19:57 Microsoft® Windows® Operating System    Common Log File System Driver   6.1.7600.16385 (win7_rtm.090713-1255)   Microsoft Corporation   C:\Windows\system32\CLFS.SYS    
CI.dll      fffff880'00e30000   fffff880'00ef0000   0x000c0000  0x4ce7c944  20.11.2010 14:12:36 Betriebssystem Microsoft® Windows®  Codeintegritätsmodul    6.1.7600.16385 (win7_rtm.090713-1255)   Microsoft Corporation   C:\Windows\system32\CI.dll  
Wdf01000.sys        fffff880'00ef0000   fffff880'00fb2000   0x000c2000  0x51c51641  22.06.2013 04:13:05 Betriebssystem Microsoft® Windows®  Kernelmodustreiber-Frameworklaufzeit    1.11.9200.16384 (win8_rtm.120725-1247)  Microsoft Corporation   C:\Windows\system32\drivers\Wdf01000.sys    
WDFLDR.SYS      fffff880'00fb2000   fffff880'00fc2000   0x00010000  0x5010ab70  26.07.2012 03:29:04 Microsoft® Windows® Operating System    Kernel Mode Driver Framework Loader 1.11.9200.16384 (win8_rtm.120725-1247)  Microsoft Corporation   C:\Windows\system32\drivers\WDFLDR.SYS  
ACPI.sys        fffff880'00d7e000   fffff880'00dd5000   0x00057000  0x4ce79294  20.11.2010 10:19:16 Betriebssystem Microsoft® Windows®  ACPI-Treiber für NT 6.1.7600.16385 (win7_rtm.090713-1255)   Microsoft Corporation   C:\Windows\system32\drivers\ACPI.sys    
WMILIB.SYS      fffff880'00fc2000   fffff880'00fcb000   0x00009000  0x4a5bc117  14.07.2009 00:19:51 Microsoft® Windows® Operating System    WMILIB WMI support library Dll  6.1.7600.16385 (win7_rtm.090713-1255)   Microsoft Corporation   C:\Windows\system32\drivers\WMILIB.SYS  
msisadrv.sys        fffff880'00fcb000   fffff880'00fd5000   0x0000a000  0x4a5bc0fe  14.07.2009 00:19:26 Microsoft® Windows® Operating System    ISA Driver  6.1.7600.16385 (win7_rtm.090713-1255)   Microsoft Corporation   C:\Windows\system32\drivers\msisadrv.sys    
pci.sys     fffff880'00c00000   fffff880'00c33000   0x00033000  0x4ce7928f  20.11.2010 10:19:11 Betriebssystem Microsoft® Windows®  NT-Plug & Play PCI-Enumerator   6.1.7600.16385 (win7_rtm.090713-1255)   Microsoft Corporation   C:\Windows\system32\drivers\pci.sys 
vdrvroot.sys        fffff880'00fd5000   fffff880'00fe2000   0x0000d000  0x4a5bcadb  14.07.2009 01:01:31 Betriebssystem Microsoft® Windows®  Stammenumerator für virtuelles Laufwerk 6.1.7601.17514 (win7sp1_rtm.101119-1850)    Microsoft Corporation   C:\Windows\system32\drivers\vdrvroot.sys    
iusb3hcs.sys        fffff880'00fe2000   fffff880'00feb000   0x00009000  0x4f227053  27.01.2012 10:37:23 USB 3.0 Host Controller Switch Driver   Intel(R) USB 3.0 Host Controller Switch Driver  1.0.3.214 built by: WinDDK  Intel Corporation   C:\Windows\system32\drivers\iusb3hcs.sys    
partmgr.sys     fffff880'00feb000   fffff880'01000000   0x00015000  0x4f641bc1  17.03.2012 06:06:09 Microsoft® Windows® Operating System    Partition Management Driver 6.1.7600.16385 (win7_rtm.090713-1255)   Microsoft Corporation   C:\Windows\system32\drivers\partmgr.sys 
volmgr.sys      fffff880'00e00000   fffff880'00e15000   0x00015000  0x4ce792a0  20.11.2010 10:19:28 Microsoft® Windows® Operating System    Volume Manager Driver   6.1.7601.17514 (win7sp1_rtm.101119-1850)    Microsoft Corporation   C:\Windows\system32\drivers\volmgr.sys  
volmgrx.sys     fffff880'00c33000   fffff880'00c8f000   0x0005c000  0x00000000      Betriebssystem Microsoft® Windows®  Treiber für Erweiterung des Volume-Managers 6.1.7600.16385 (win7_rtm.090713-1255)   Microsoft Corporation   C:\Windows\system32\drivers\volmgrx.sys 
mountmgr.sys        fffff880'00e15000   fffff880'00e2f000   0x0001a000  0x4ce79299  20.11.2010 10:19:21 Betriebssystem Microsoft® Windows®  Bereitstellungspunkt-Manager    6.1.7600.16385 (win7_rtm.090713-1255)   Microsoft Corporation   C:\Windows\system32\drivers\mountmgr.sys    
atapi.sys       fffff880'00c8f000   fffff880'00c98000   0x00009000  0x4a5bc113  14.07.2009 00:19:47 Microsoft® Windows® Operating System    ATAPI IDE Miniport Driver   6.1.7600.16385 (win7_rtm.090713-1255)   Microsoft Corporation   C:\Windows\system32\drivers\atapi.sys   
ataport.SYS     fffff880'00dd5000   fffff880'00dff000   0x0002a000  0x51fef9b5  05.08.2013 02:02:45 Microsoft® Windows® Operating System    ATAPI Driver Extension  6.1.7600.16385 (win7_rtm.090713-1255)   Microsoft Corporation   C:\Windows\system32\drivers\ataport.SYS 
msahci.sys      fffff880'00c98000   fffff880'00ca3000   0x0000b000  0x4ce7a416  20.11.2010 11:33:58 Microsoft® Windows® Operating System    MS AHCI 1.0 Standard Driver 6.1.7601.17514 (win7sp1_rtm.101119-1850)    Microsoft Corporation   C:\Windows\system32\drivers\msahci.sys  
PCIIDEX.SYS     fffff880'00ca3000   fffff880'00cb3000   0x00010000  0x4a5bc114  14.07.2009 00:19:48 Microsoft® Windows® Operating System    PCI IDE Bus Driver Extension    6.1.7600.16385 (win7_rtm.090713-1255)   Microsoft Corporation   C:\Windows\system32\drivers\PCIIDEX.SYS 
amdxata.sys     fffff880'01096000   fffff880'010a1000   0x0000b000  0x4ba3a3ca  19.03.2010 17:18:18 Storage Filter Driver   Storage Filter Driver   1.1.2.5 (NT.091202-1659)    Advanced Micro Devices  C:\Windows\system32\drivers\amdxata.sys 
fltmgr.sys      fffff880'010a1000   fffff880'010ed000   0x0004c000  0x4ce7929c  20.11.2010 10:19:24 Betriebssystem Microsoft® Windows®  Microsoft Dateisystem-Filter-Manager    6.1.7600.16385 (win7_rtm.090713-1255)   Microsoft Corporation   C:\Windows\system32\drivers\fltmgr.sys  
fileinfo.sys        fffff880'010ed000   fffff880'01101000   0x00014000  0x4a5bc481  14.07.2009 00:34:25 Microsoft® Windows® Operating System    FileInfo Filter Driver  6.1.7600.16385 (win7_rtm.090713-1255)   Microsoft Corporation   C:\Windows\system32\drivers\fileinfo.sys    
Ntfs.sys        fffff880'0123f000   fffff880'013e8000   0x001a9000  0x52e1be8a  24.01.2014 02:14:50 Betriebssystem Microsoft® Windows®  NT-Dateisystemtreiber   6.1.7600.16385 (win7_rtm.090713-1255)   Microsoft Corporation   C:\Windows\system32\drivers\Ntfs.sys    
msrpc.sys       fffff880'01101000   fffff880'0115f000   0x0005e000  0x4ce79334  20.11.2010 10:21:56 Microsoft® Windows® Operating System    Kernel Remote Procedure Call Provider   6.1.7601.17514 (win7sp1_rtm.101119-1850)    Microsoft Corporation   C:\Windows\system32\drivers\msrpc.sys   
ksecdd.sys      fffff880'01200000   fffff880'0121b000   0x0001b000  0x5348920e  12.04.2014 02:08:30 Microsoft® Windows® Operating System    Kernel Security Support Provider Interface  6.1.7601.18443 (win7sp1_gdr.140411-1533)    Microsoft Corporation   C:\Windows\system32\drivers\ksecdd.sys  
cng.sys     fffff880'0115f000   fffff880'011d1000   0x00072000  0x50194fb7  01.08.2012 16:48:07 Microsoft® Windows® Operating System    Kernel Cryptography, Next Generation    6.1.7601.17919 (win7sp1_gdr.120801-0333)    Microsoft Corporation   C:\Windows\system32\drivers\cng.sys 
pcw.sys     fffff880'0121b000   fffff880'0122c000   0x00011000  0x4a5bc0ff  14.07.2009 00:19:27 Microsoft® Windows® Operating System    Performance Counters for Windows Driver 6.1.7600.16385 (win7_rtm.090713-1255)   Microsoft Corporation   C:\Windows\system32\drivers\pcw.sys 
Fs_Rec.sys      fffff880'0122c000   fffff880'01236000   0x0000a000  0x4f4eefd2  01.03.2012 04:41:06 Microsoft® Windows® Operating System    File System Recognizer Driver   6.1.7601.17787 (win7sp1_gdr.120229-1502)    Microsoft Corporation   C:\Windows\system32\drivers\Fs_Rec.sys  
ndis.sys        fffff880'0140f000   fffff880'01501000   0x000f2000  0x5034f6b2  22.08.2012 16:11:46 Betriebssystem Microsoft® Windows®  NDIS 6.20-Treiber   6.1.7600.16385 (win7_rtm.090713-1255)   Microsoft Corporation   C:\Windows\system32\drivers\ndis.sys    
NETIO.SYS       fffff880'01501000   fffff880'01561000   0x00060000  0x5294760d  26.11.2013 11:21:01 Microsoft® Windows® Operating System    Network I/O Subsystem   6.1.7601.18327 (win7sp1_gdr.131125-2337)    Microsoft Corporation   C:\Windows\system32\drivers\NETIO.SYS   
ksecpkg.sys     fffff880'01561000   fffff880'0158d000   0x0002c000  0x543c7790  14.10.2014 02:08:32 Microsoft® Windows® Operating System    Kernel Security Support Provider Interface Packages 6.1.7601.18637 (win7sp1_gdr.141013-1517)    Microsoft Corporation   C:\Windows\system32\drivers\ksecpkg.sys 
tcpip.sys       fffff880'01601000   fffff880'01800000   0x001ff000  0x533f5bd4  05.04.2014 02:26:44 Betriebssystem Microsoft® Windows®  TCP/IP-Treiber  6.1.7600.16385 (win7_rtm.090713-1255)   Microsoft Corporation   C:\Windows\system32\drivers\tcpip.sys   
fwpkclnt.sys        fffff880'0158d000   fffff880'015d6000   0x00049000  0x533f5b09  05.04.2014 02:23:21 Microsoft® Windows® Operating System    FWP/IPsec Kernel-Mode API   6.1.7601.18438 (win7sp1_gdr.140404-1535)    Microsoft Corporation   C:\Windows\system32\drivers\fwpkclnt.sys    
vmstorfl.sys        fffff880'015d6000   fffff880'015e6000   0x00010000  0x4ce79b8a  20.11.2010 10:57:30 Microsoft® Windows® Operating System    Virtual Storage Filter Driver   6.1.7601.17514 (win7sp1_rtm.101119-1850)    Microsoft Corporation   C:\Windows\system32\drivers\vmstorfl.sys    
volsnap.sys     fffff880'01000000   fffff880'0104c000   0x0004c000  0x4ce792c8  20.11.2010 10:20:08 Betriebssystem Microsoft® Windows®  Volumeschattenkopie-Treiber 6.1.7600.16385 (win7_rtm.090713-1255)   Microsoft Corporation   C:\Windows\system32\drivers\volsnap.sys 
spldr.sys       fffff880'015e6000   fffff880'015ee000   0x00008000  0x4a0858bb  11.05.2009 17:56:27 Microsoft® Windows® Operating System    loader for security processor   6.1.7127.0 (fbl_security_bugfix(sepbld-s).090511-0943)  Microsoft Corporation   C:\Windows\system32\drivers\spldr.sys   
rdyboost.sys        fffff880'0104c000   fffff880'01086000   0x0003a000  0x4ce7982e  20.11.2010 10:43:10 Microsoft® Windows® Operating System    ReadyBoost Driver   6.1.7601.17514 (win7sp1_rtm.101119-1850)    Microsoft Corporation   C:\Windows\system32\drivers\rdyboost.sys    
mup.sys     fffff880'015ee000   fffff880'01600000   0x00012000  0x4a5bc201  14.07.2009 00:23:45 Microsoft® Windows® Operating System    Multiple UNC Provider Driver    6.1.7600.16385 (win7_rtm.090713-1255)   Microsoft Corporation   C:\Windows\system32\drivers\mup.sys 
hwpolicy.sys        fffff880'01400000   fffff880'01409000   0x00009000  0x4ce7927e  20.11.2010 10:18:54 Microsoft® Windows® Operating System    Hardware Policy Driver  6.1.7601.17514 (win7sp1_rtm.101119-1850)    Microsoft Corporation   C:\Windows\system32\drivers\hwpolicy.sys    
fvevol.sys      fffff880'018ff000   fffff880'01939000   0x0003a000  0x5100a65c  24.01.2013 04:11:24 Microsoft® Windows® Operating System    BitLocker Drive Encryption Driver   6.1.7600.16385 (win7_rtm.090713-1255)   Microsoft Corporation   C:\Windows\system32\drivers\fvevol.sys  
disk.sys        fffff880'01939000   fffff880'0194f000   0x00016000  0x4a5bc11d  14.07.2009 00:19:57 Microsoft® Windows® Operating System    PnP Disk Driver 6.1.7601.17514 (win7sp1_rtm.101119-1850)    Microsoft Corporation   C:\Windows\system32\drivers\disk.sys    
CLASSPNP.SYS        fffff880'0194f000   fffff880'0197f000   0x00030000  0x4ce7929b  20.11.2010 10:19:23 Microsoft® Windows® Operating System    SCSI Class System Dll   6.1.7601.17514 (win7sp1_rtm.101119-1850)    Microsoft Corporation   C:\Windows\system32\drivers\CLASSPNP.SYS    
cdrom.sys       fffff880'019b7000   fffff880'019e1000   0x0002a000  0x4ce79298  20.11.2010 10:19:20 Microsoft® Windows® Operating System    SCSI CD-ROM Driver  6.1.7600.16385 (win7_rtm.090713-1255)   Microsoft Corporation   C:\Windows\system32\drivers\cdrom.sys   
a2dix64.sys     fffff880'019e1000   fffff880'019f0000   0x0000f000  0x5221c6af  31.08.2013 11:34:23                     
Null.SYS        fffff880'019f0000   fffff880'019f9000   0x00009000  0x4a5bc109  14.07.2009 00:19:37 Microsoft® Windows® Operating System    NULL Driver 6.1.7600.16385 (win7_rtm.090713-1255)   Microsoft Corporation   C:\Windows\system32\drivers\Null.SYS    
Beep.SYS        fffff880'019f9000   fffff880'01a00000   0x00007000  0x4a5bca8d  14.07.2009 01:00:13 Microsoft® Windows® Operating System    BEEP Driver 6.1.7600.16385 (win7_rtm.090713-1255)   Microsoft Corporation   C:\Windows\system32\drivers\Beep.SYS    
vga.sys     fffff880'01800000   fffff880'0180e000   0x0000e000  0x4a5bc587  14.07.2009 00:38:47 Microsoft® Windows® Operating System    VGA/Super VGA Video Driver  6.1.7600.16385 (win7_rtm.090713-1255)   Microsoft Corporation   C:\Windows\system32\drivers\vga.sys 
VIDEOPRT.SYS        fffff880'0180e000   fffff880'01833000   0x00025000  0x4a5bc58b  14.07.2009 00:38:51 Microsoft® Windows® Operating System    Video Port Driver   6.1.7600.16385 (win7_rtm.090713-1255)   Microsoft Corporation   C:\Windows\system32\drivers\VIDEOPRT.SYS    
watchdog.sys        fffff880'01833000   fffff880'01843000   0x00010000  0x4a5bc53f  14.07.2009 00:37:35 Microsoft® Windows® Operating System    Watchdog Driver 6.1.7600.16385 (win7_rtm.090713-1255)   Microsoft Corporation   C:\Windows\system32\drivers\watchdog.sys    
RDPCDD.sys      fffff880'01843000   fffff880'0184c000   0x00009000  0x4a5bce62  14.07.2009 01:16:34 Microsoft® Windows® Operating System    RDP Miniport    6.1.7600.16385 (win7_rtm.090713-1255)   Microsoft Corporation   C:\Windows\system32\drivers\RDPCDD.sys  
rdpencdd.sys        fffff880'0184c000   fffff880'01855000   0x00009000  0x4a5bce62  14.07.2009 01:16:34 Microsoft® Windows® Operating System    RDP Encoder Miniport    6.1.7600.16385 (win7_rtm.090713-1255)   Microsoft Corporation   C:\Windows\system32\drivers\rdpencdd.sys    
rdprefmp.sys        fffff880'01855000   fffff880'0185e000   0x00009000  0x4a5bce63  14.07.2009 01:16:35 Microsoft® Windows® Operating System    RDP Reflector Driver Miniport   6.1.7600.16385 (win7_rtm.090713-1255)   Microsoft Corporation   C:\Windows\system32\drivers\rdprefmp.sys    
Msfs.SYS        fffff880'0185e000   fffff880'01869000   0x0000b000  0x4a5bc113  14.07.2009 00:19:47 Microsoft® Windows® Operating System    Mailslot driver 6.1.7600.16385 (win7_rtm.090713-1255)   Microsoft Corporation   C:\Windows\system32\drivers\Msfs.SYS    
Npfs.SYS        fffff880'01869000   fffff880'0187a000   0x00011000  0x4a5bc114  14.07.2009 00:19:48 Microsoft® Windows® Operating System    NPFS Driver 6.1.7600.16385 (win7_rtm.090713-1255)   Microsoft Corporation   C:\Windows\system32\drivers\Npfs.SYS    
tdx.sys     fffff880'0187a000   fffff880'0189c000   0x00022000  0x54616a72  11.11.2014 02:46:26 Microsoft® Windows® Operating System    TDI Translation Driver  6.1.7601.18658 (win7sp1_gdr.141110-1511)    Microsoft Corporation   C:\Windows\system32\drivers\tdx.sys 
TDI.SYS     fffff880'0189c000   fffff880'018a9000   0x0000d000  0x4ce7933e  20.11.2010 10:22:06 Microsoft® Windows® Operating System    TDI Wrapper 6.1.7601.17514 (win7sp1_rtm.101119-1850)    Microsoft Corporation   C:\Windows\system32\drivers\TDI.SYS 
fwtdi64.sys     fffff880'028f0000   fffff880'0299d000   0x000ad000  0x54a5a2a8  01.01.2015 20:40:24                     
afd.sys     fffff880'02800000   fffff880'02889000   0x00089000  0x5388291c  30.05.2014 07:45:48 Betriebssystem Microsoft® Windows®  Ancillary Function Driver for WinSock   6.1.7600.16385 (win7_rtm.090713-1255)   Microsoft Corporation   C:\Windows\system32\drivers\afd.sys 
netbt.sys       fffff880'02889000   fffff880'028ce000   0x00045000  0x4ce79386  20.11.2010 10:23:18 Microsoft® Windows® Operating System    MBT Transport driver    6.1.7601.17514 (win7sp1_rtm.101119-1850)    Microsoft Corporation   C:\Windows\system32\drivers\netbt.sys   
wfplwf.sys      fffff880'028ce000   fffff880'028d7000   0x00009000  0x4a5bccb6  14.07.2009 01:09:26 Microsoft® Windows® Operating System    WFP NDIS 6.20 Lightweight Filter Driver 6.1.7600.16385 (win7_rtm.090713-1255)   Microsoft Corporation   C:\Windows\system32\drivers\wfplwf.sys  
pacer.sys       fffff880'0299d000   fffff880'029c3000   0x00026000  0x4ce7a862  20.11.2010 11:52:18 Betriebssystem Microsoft® Windows®  QoS-Paketplaner 6.1.7600.16385 (win7_rtm.090713-1255)   Microsoft Corporation   C:\Windows\system32\drivers\pacer.sys   
netbios.sys     fffff880'029c3000   fffff880'029d2000   0x0000f000  0x4a5bccb6  14.07.2009 01:09:26 Microsoft® Windows® Operating System    NetBIOS interface driver    6.1.7600.16385 (win7_rtm.090713-1255)   Microsoft Corporation   C:\Windows\system32\drivers\netbios.sys 
serial.sys      fffff880'029d2000   fffff880'029ef000   0x0001d000  0x4a5bcaa8  14.07.2009 01:00:40 Betriebssystem Microsoft® Windows®  Serieller Gerätetreiber 6.1.7600.16385 (win7_rtm.090713-1255)   Microsoft Corporation   C:\Windows\system32\drivers\serial.sys  
wanarp.sys      fffff880'018a9000   fffff880'018c4000   0x0001b000  0x4ce7a874  20.11.2010 11:52:36 Microsoft® Windows® Operating System    MS Remote Access and Routing ARP Driver 6.1.7601.17514 (win7sp1_rtm.101119-1850)    Microsoft Corporation   C:\Windows\system32\drivers\wanarp.sys  
termdd.sys      fffff880'028d7000   fffff880'028eb000   0x00014000  0x4ce7ab0c  20.11.2010 12:03:40 Microsoft® Windows® Operating System    Remote Desktop Server Driver    6.1.7601.17514 (win7sp1_rtm.101119-1850)    Microsoft Corporation   C:\Windows\system32\drivers\termdd.sys  
rdbss.sys       fffff880'02a36000   fffff880'02a87000   0x00051000  0x4ce79497  20.11.2010 10:27:51 Betriebssystem Microsoft® Windows®  Subsystemtreiber für Pufferung des umgeleiteten Laufwerks   6.1.7600.16385 (win7_rtm.090713-1255)   Microsoft Corporation   C:\Windows\system32\drivers\rdbss.sys   
nsiproxy.sys        fffff880'02a87000   fffff880'02a93000   0x0000c000  0x4a5bc15e  14.07.2009 00:21:02 Microsoft® Windows® Operating System    NSI Proxy   6.1.7600.16385 (win7_rtm.090713-1255)   Microsoft Corporation   C:\Windows\system32\drivers\nsiproxy.sys    
mssmbios.sys        fffff880'02a93000   fffff880'02a9e000   0x0000b000  0x4a5bc3be  14.07.2009 00:31:10 Microsoft® Windows® Operating System    System Management BIOS Driver   6.1.7600.16385 (win7_rtm.090713-1255)   Microsoft Corporation   C:\Windows\system32\drivers\mssmbios.sys    
fwwfp764.sys        fffff880'02a9e000   fffff880'02b06000   0x00068000  0x54a5a2d6  01.01.2015 20:41:10                     
discache.sys        fffff880'02b06000   fffff880'02b15000   0x0000f000  0x4a5bc52e  14.07.2009 00:37:18 Microsoft® Windows® Operating System    System Indexer/Cache Driver 6.1.7600.16385 (win7_rtm.090713-1255)   Microsoft Corporation   C:\Windows\system32\drivers\discache.sys    
dfsc.sys        fffff880'02b15000   fffff880'02b33000   0x0001e000  0x4ce79447  20.11.2010 10:26:31 Microsoft® Windows® Operating System    DFS Namespace Client Driver 6.1.7601.17514 (win7sp1_rtm.101119-1850)    Microsoft Corporation   C:\Windows\system32\drivers\dfsc.sys    
ctxusbm.sys     fffff880'02b33000   fffff880'02b47280   0x00014280  0x4dcc9fdc  13.05.2011 04:05:00 Citrix ICA Client   Citrix USB Filter Driver    12.1.10.6   Citrix Systems, Inc.    C:\Windows\system32\drivers\ctxusbm.sys 
csc.sys     fffff880'02b48000   fffff880'02bcb000   0x00083000  0x4ce79470  20.11.2010 10:27:12 Microsoft® Windows® Operating System    Windows Client Side Caching Driver  6.1.7601.17514 (win7sp1_rtm.101119-1850)    Microsoft Corporation   C:\Windows\system32\drivers\csc.sys 
blbdrive.sys        fffff880'02bcb000   fffff880'02bdc000   0x00011000  0x4a5bc4df  14.07.2009 00:35:59 Microsoft® Windows® Operating System    BLB Drive Driver    6.1.7600.16385 (win7_rtm.090713-1255)   Microsoft Corporation   C:\Windows\system32\drivers\blbdrive.sys    
a2util64.sys        fffff880'02bdc000   fffff880'02be6000   0x0000a000  0x537059be  12.05.2014 06:18:54                     
a2ddax64.sys        fffff880'02be6000   fffff880'02bf0000   0x0000a000  0x51396c04  08.03.2013 05:41:40                     
tunnel.sys      fffff880'02a00000   fffff880'02a26000   0x00026000  0x4ce7a846  20.11.2010 11:51:50 Betriebssystem Microsoft® Windows®  Microsoft-Tunnelschnittstellentreiber   6.1.7600.16385 (win7_rtm.090713-1255)   Microsoft Corporation   C:\Windows\system32\drivers\tunnel.sys  
iusb3xhc.sys        fffff880'0305d000   fffff880'03121000   0x000c4000  0x4f226fe0  27.01.2012 10:35:28 USB 3.0 Device Driver   Intel(R) USB 3.0 eXtensible Host Controller Driver  1.0.3.214 (iusb3drv.20120127-0133)  Intel Corporation   C:\Windows\system32\drivers\iusb3xhc.sys    
USBD.SYS        fffff880'03121000   fffff880'03122e80   0x00001e80  0x52954daf  27.11.2013 02:41:03 Microsoft® Windows® Operating System    Universal Serial Bus Driver 6.1.7601.18328 (win7sp1_gdr.131126-1436)    Microsoft Corporation   C:\Windows\system32\drivers\USBD.SYS    
HECIx64.sys     fffff880'03123000   fffff880'03136000   0x00013000  0x4ff21d62  02.07.2012 23:14:58 Intel(R) Management Engine Interface    Intel(R) Management Engine Interface    8.1.0.1263 built by: WinDDK Intel Corporation   C:\Windows\system32\drivers\HECIx64.sys 
serenum.sys     fffff880'03136000   fffff880'03142000   0x0000c000  0x4a5bcaa1  14.07.2009 01:00:33 Microsoft® Windows® Operating System    Serial Port Enumerator  6.1.7600.16385 (win7_rtm.090713-1255)   Microsoft Corporation   C:\Windows\system32\drivers\serenum.sys 
e1c62x64.sys        fffff880'03142000   fffff880'031bb000   0x00079000  0x50258ebf  10.08.2012 23:44:15 Intel(R) Gigabit Adapter    Intel(R) Gigabit Adapter NDIS 6.x driver    12.2.45.0 built by: WinDDK  Intel Corporation   C:\Windows\system32\drivers\e1c62x64.sys    
usbehci.sys     fffff880'031bb000   fffff880'031cd000   0x00012000  0x52954db7  27.11.2013 02:41:11 Microsoft® Windows® Operating System    EHCI eUSB Miniport Driver   6.1.7601.18328 (win7sp1_gdr.131126-1436)    Microsoft Corporation   C:\Windows\system32\drivers\usbehci.sys

o resto da lista estará em comentário, já que excede o limite de um único post.

Alguma ideia de quem é o culpado aqui?

Obrigado pelo seu tempo!

windows-7 bsod windbg

por Akil 13.01.2015 / 16:18

1 resposta

Tags windows-7 bsod windbg

Stylish: Como fazer backup de estilos no Chrome Como acessar um computador remotamente?

score 4 · Accepted Answer

A verificação do bug DRIVER_IRQL_NOT_LESS_OR_EQUAL é causada por um driver do modo kernel que tenta acessar a memória paginável em um processo IRQL que era muito alto. Em outras palavras, o Windows carregou um driver (especificamente no modo kernel) que não se comportou, causando a queda do kernel do Windows.

Por padrão, está causando falha no NETIO.sys, que é o Subsistema de Rede de E / S. Esta não é a causa verdadeira e está sendo criticada por outra coisa. Geralmente, na maioria dos casos, isso ocorre com frequência no Windows 7 > 8 ou 8 > 8.1 atualizações por dois motivos:

Os próprios drivers de rede precisam ser atualizados.
antivírus de terceiros, software de firewall ou outro software está causando conflitos e / ou corrupção.

O WinDBG forneceu todas as informações necessárias para descobrir isso.

Debugging Details:

WARNING: Unable to verify timestamp for fwwfp764.sys
ERROR: Module load completed but symbols could not be loaded for fwwfp764.sys

fwwfp764.sys pertence ao software lançado pela Emsisoft. Então, desinstale seu software Emsisoft e as falhas desaparecerão.

Thread de suporte do Emsisoft