i keep getting the blue Screen Error at sarting my windows sometimes.
the Error says
Beginning dump of physical memory.
Physical memory dump complete.........etc.
i tried to analye the last dump file and got this result:
--------------------------------------------------------------------------------------
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
KERNEL_MODE_EXCEPTION_NOT_HANDLED_M (1000008e)
This is a very common bugcheck. Usually the exception address pinpoints
the driver/function that caused the problem. Always note this address
as well as the link date of the driver/image that contains this address.
Some common problems are exception code 0x80000003. This means a hard
coded breakpoint or assertion was hit, but this system was booted
/NODEBUG. This is not supposed to happen as developers should never have
hardcoded breakpoints in retail code, but ...
If this happens, make sure a debugger gets connected, and the
system is booted /DEBUG. This will let us see why this breakpoint is
happening.
Arguments:
Arg1: c0000005, The exception code that was not handled
Arg2: 806373fd, The address that the exception occurred at
Arg3: b5b4e9cc, Trap Frame
Arg4: 00000000
Debugging Details:
------------------
EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at "0x%08lx" referenced memory at "0x%08lx". The memory could not be "%s".
FAULTING_IP:
nt!RtlReserveChunkLZNT1+94
806373fd 8b4304 mov eax,dword ptr [ebx+4]
TRAP_FRAME: b5b4e9cc -- (.trap 0xffffffffb5b4e9cc)
ErrCode = 00000000
eax=00000000 ebx=00000000 ecx=8aaf4198 edx=00000300 esi=e1037008 edi=00000c00
eip=806373fd esp=b5b4ea40 ebp=b5b4ea88 iopl=0 nv up ei pl zr na pe nc
cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00010246
nt!RtlReserveChunkLZNT1+0x94:
806373fd 8b4304 mov eax,dword ptr [ebx+4] ds:0023:00000004=????????
Resetting default scope
CUSTOMER_CRASH_COUNT: 1
DEFAULT_BUCKET_ID: DRIVER_FAULT
BUGCHECK_STR: 0x8E
PROCESS_NAME: services.exe
LAST_CONTROL_TRANSFER: from 80638990 to 806373fd
STACK_TEXT:
b5b4ea88 80638990 e1037008 60000c00 e1037008 nt!RtlReserveChunkLZNT1+0x94
b5b4eaa4 806392a3 e1037008 60000c00 e1037008 nt!SeAuditSystemTimeChange+0x168
b5b4eaec 80639840 e1037008 0027bba8 003e7bd0 nt!SepAdtDeleteObjectAuditAlarm+0xf8
b5b4eb2c 8063994d e1364000 00000400 00000002 nt!SeAuditProcessCreation+0x5d
b5b4eb5c 8062604e e1037008 000001b8 e1037008 nt!SeAuditProcessCreation+0x16a
b5b4eccc 80621946 00010002 b5b4ed64 b5b4ece8 nt!NtMapUserPhysicalPages+0x259
b5b4ecdc 8054162c 00000004 b5b4ed64 8050047d nt!PpBiosResourcesToNtResources+0x7d
b5b4ece8 8050047d badb0d00 b5b4ed60 00000000 nt!RtlIpv4StringToAddressExW+0xad
b5b4ed64 7c90e4f4 badb0d00 00f1f874 b5b4ed98 nt!IopfCompleteRequest+0x71
WARNING: Frame IP not in any known module. Following frames may be wrong.
b5b4ed68 badb0d00 00f1f874 b5b4ed98 b5b4edcc 0x7c90e4f4
b5b4ed6c 00f1f874 b5b4ed98 b5b4edcc 00000000 0xbadb0d00
b5b4ed70 b5b4ed98 b5b4edcc 00000000 00000000 0xf1f874
b5b4ed74 b5b4edcc 00000000 00000000 00000000 0xb5b4ed98
b5b4ed98 00000000 ffffff01 000b3980 77b72408 0xb5b4edcc
STACK_COMMAND: kb
FOLLOWUP_IP:
nt!RtlReserveChunkLZNT1+94
806373fd 8b4304 mov eax,dword ptr [ebx+4]
SYMBOL_STACK_INDEX: 0
SYMBOL_NAME: nt!RtlReserveChunkLZNT1+94
FOLLOWUP_NAME: MachineOwner
MODULE_NAME: nt
IMAGE_NAME: ntoskrnl.exe
DEBUG_FLR_IMAGE_TIMESTAMP: 48a3fbd9
FAILURE_BUCKET_ID: 0x8E_nt!RtlReserveChunkLZNT1+94
BUCKET_ID: 0x8E_nt!RtlReserveChunkLZNT1+94
Followup: MachineOwner
---------------------------------------------------------------------------------------------------------
can anybody help me to understand this output and to diagnose the Problem?
the Error says
Beginning dump of physical memory.
Physical memory dump complete.........etc.
i tried to analye the last dump file and got this result:
--------------------------------------------------------------------------------------
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
KERNEL_MODE_EXCEPTION_NOT_HANDLED_M (1000008e)
This is a very common bugcheck. Usually the exception address pinpoints
the driver/function that caused the problem. Always note this address
as well as the link date of the driver/image that contains this address.
Some common problems are exception code 0x80000003. This means a hard
coded breakpoint or assertion was hit, but this system was booted
/NODEBUG. This is not supposed to happen as developers should never have
hardcoded breakpoints in retail code, but ...
If this happens, make sure a debugger gets connected, and the
system is booted /DEBUG. This will let us see why this breakpoint is
happening.
Arguments:
Arg1: c0000005, The exception code that was not handled
Arg2: 806373fd, The address that the exception occurred at
Arg3: b5b4e9cc, Trap Frame
Arg4: 00000000
Debugging Details:
------------------
EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at "0x%08lx" referenced memory at "0x%08lx". The memory could not be "%s".
FAULTING_IP:
nt!RtlReserveChunkLZNT1+94
806373fd 8b4304 mov eax,dword ptr [ebx+4]
TRAP_FRAME: b5b4e9cc -- (.trap 0xffffffffb5b4e9cc)
ErrCode = 00000000
eax=00000000 ebx=00000000 ecx=8aaf4198 edx=00000300 esi=e1037008 edi=00000c00
eip=806373fd esp=b5b4ea40 ebp=b5b4ea88 iopl=0 nv up ei pl zr na pe nc
cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00010246
nt!RtlReserveChunkLZNT1+0x94:
806373fd 8b4304 mov eax,dword ptr [ebx+4] ds:0023:00000004=????????
Resetting default scope
CUSTOMER_CRASH_COUNT: 1
DEFAULT_BUCKET_ID: DRIVER_FAULT
BUGCHECK_STR: 0x8E
PROCESS_NAME: services.exe
LAST_CONTROL_TRANSFER: from 80638990 to 806373fd
STACK_TEXT:
b5b4ea88 80638990 e1037008 60000c00 e1037008 nt!RtlReserveChunkLZNT1+0x94
b5b4eaa4 806392a3 e1037008 60000c00 e1037008 nt!SeAuditSystemTimeChange+0x168
b5b4eaec 80639840 e1037008 0027bba8 003e7bd0 nt!SepAdtDeleteObjectAuditAlarm+0xf8
b5b4eb2c 8063994d e1364000 00000400 00000002 nt!SeAuditProcessCreation+0x5d
b5b4eb5c 8062604e e1037008 000001b8 e1037008 nt!SeAuditProcessCreation+0x16a
b5b4eccc 80621946 00010002 b5b4ed64 b5b4ece8 nt!NtMapUserPhysicalPages+0x259
b5b4ecdc 8054162c 00000004 b5b4ed64 8050047d nt!PpBiosResourcesToNtResources+0x7d
b5b4ece8 8050047d badb0d00 b5b4ed60 00000000 nt!RtlIpv4StringToAddressExW+0xad
b5b4ed64 7c90e4f4 badb0d00 00f1f874 b5b4ed98 nt!IopfCompleteRequest+0x71
WARNING: Frame IP not in any known module. Following frames may be wrong.
b5b4ed68 badb0d00 00f1f874 b5b4ed98 b5b4edcc 0x7c90e4f4
b5b4ed6c 00f1f874 b5b4ed98 b5b4edcc 00000000 0xbadb0d00
b5b4ed70 b5b4ed98 b5b4edcc 00000000 00000000 0xf1f874
b5b4ed74 b5b4edcc 00000000 00000000 00000000 0xb5b4ed98
b5b4ed98 00000000 ffffff01 000b3980 77b72408 0xb5b4edcc
STACK_COMMAND: kb
FOLLOWUP_IP:
nt!RtlReserveChunkLZNT1+94
806373fd 8b4304 mov eax,dword ptr [ebx+4]
SYMBOL_STACK_INDEX: 0
SYMBOL_NAME: nt!RtlReserveChunkLZNT1+94
FOLLOWUP_NAME: MachineOwner
MODULE_NAME: nt
IMAGE_NAME: ntoskrnl.exe
DEBUG_FLR_IMAGE_TIMESTAMP: 48a3fbd9
FAILURE_BUCKET_ID: 0x8E_nt!RtlReserveChunkLZNT1+94
BUCKET_ID: 0x8E_nt!RtlReserveChunkLZNT1+94
Followup: MachineOwner
---------------------------------------------------------------------------------------------------------
can anybody help me to understand this output and to diagnose the Problem?