Microsoft (R) Windows Debugger Version 6.10.0003.233 X86 Copyright (c) Microsoft Corporation. All rights reserved. Loading Dump File [G:\AV nowe\Dumpy\MEMORY.DMP] Kernel Summary Dump File: Only kernel address space is available Symbol search path is: SRV*C:\symbole*http://msdl.microsoft.com/download/symbols Executable search path is: Windows XP Kernel Version 2600 (Service Pack 2) UP Free x86 compatible Product: WinNt, suite: TerminalServer SingleUserTS Built by: 2600.xpsp_sp2_gdr.100216-1441 Machine Name: Kernel base = 0x804d7000 PsLoadedModuleList = 0x8055a6a0 Debug session time: Fri Oct 8 20:22:16.640 2010 (GMT+2) System Uptime: 0 days 0:02:00.249 Loading Kernel Symbols ............................................................... ................................................... Loading User Symbols PEB is paged out (Peb.Ldr = 7ffdf00c). Type ".hh dbgerr001" for details Loading unloaded module list ......... ******************************************************************************* * * * Bugcheck Analysis * * * ******************************************************************************* Use !analyze -v to get detailed debugging information. BugCheck 8E, {c0000005, bf01f606, b5a3b55c, 0} *** ERROR: Symbol file could not be found. Defaulted to export symbols for ati2cqag.dll - *** ERROR: Module load completed but symbols could not be loaded for ati2dvag.dll PEB is paged out (Peb.Ldr = 7ffdf00c). Type ".hh dbgerr001" for details PEB is paged out (Peb.Ldr = 7ffdf00c). Type ".hh dbgerr001" for details Probably caused by : ati2dvag.dll ( ati2dvag+d606 ) Followup: MachineOwner --------- kd> !analyze -v ******************************************************************************* * * * Bugcheck Analysis * * * ******************************************************************************* KERNEL_MODE_EXCEPTION_NOT_HANDLED (8e) This is a very common bugcheck. Usually the exception address pinpoints the driver/function that caused the problem. Always note this address as well as the link date of the driver/image that contains this address. Some common problems are exception code 0x80000003. This means a hard coded breakpoint or assertion was hit, but this system was booted /NODEBUG. This is not supposed to happen as developers should never have hardcoded breakpoints in retail code, but ... If this happens, make sure a debugger gets connected, and the system is booted /DEBUG. This will let us see why this breakpoint is happening. Arguments: Arg1: c0000005, The exception code that was not handled Arg2: bf01f606, The address that the exception occurred at Arg3: b5a3b55c, Trap Frame Arg4: 00000000 Debugging Details: ------------------ PEB is paged out (Peb.Ldr = 7ffdf00c). Type ".hh dbgerr001" for details PEB is paged out (Peb.Ldr = 7ffdf00c). Type ".hh dbgerr001" for details EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - Instrukcja spod "0x%08lx" odwo FAULTING_IP: ati2dvag+d606 bf01f606 8b06 mov eax,dword ptr [esi] TRAP_FRAME: b5a3b55c -- (.trap 0xffffffffb5a3b55c) ErrCode = 00000000 eax=110bd8a0 ebx=98db1370 ecx=252e23e2 edx=4a5c47c4 esi=5207a21c edi=b734b2f0 eip=bf01f606 esp=b5a3b5d0 ebp=b5a3b644 iopl=0 nv up ei pl nz ac pe nc cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00010216 ati2dvag+0xd606: bf01f606 8b06 mov eax,dword ptr [esi] ds:0023:5207a21c=???????? Resetting default scope DEFAULT_BUCKET_ID: DRIVER_FAULT BUGCHECK_STR: 0x8E PROCESS_NAME: BreakQuest.dat LAST_CONTROL_TRANSFER: from 8051d707 to 8053358e STACK_TEXT: b5a3b124 8051d707 0000008e c0000005 bf01f606 nt!KeBugCheckEx+0x1b b5a3b4ec 804df235 b5a3b508 00000000 b5a3b55c nt!KiDispatchException+0x3b1 b5a3b554 804df1e6 b5a3b644 bf01f606 badb0d00 nt!CommonDispatchException+0x4d b5a3b570 bf056882 e2488ef0 00000000 00300020 nt!Kei386EoiHelper+0x18a WARNING: Stack unwind information not available. Following frames may be wrong. b5a3b644 bf0241cf 98db1370 110bd8a0 e1a66080 ati2cqag+0xc882 b5a3b66c 4a5c47c4 e1a66080 0000000a 00000000 ati2dvag+0x121cf 00000000 00000000 00000000 00000000 00000000 0x4a5c47c4 STACK_COMMAND: kb FOLLOWUP_IP: ati2dvag+d606 bf01f606 8b06 mov eax,dword ptr [esi] SYMBOL_STACK_INDEX: 0 SYMBOL_NAME: ati2dvag+d606 FOLLOWUP_NAME: MachineOwner MODULE_NAME: ati2dvag IMAGE_NAME: ati2dvag.dll DEBUG_FLR_IMAGE_TIMESTAMP: 411c2427 FAILURE_BUCKET_ID: 0x8E_ati2dvag+d606 BUCKET_ID: 0x8E_ati2dvag+d606 Followup: MachineOwner ---------