Hallo zusammen ,
obwohl diese vorhanden und installiert habe , scheine diese falsch zu sein !
Weis jemand was ich falsch mache ?
Loading Dump File [C:\WINDOWS\Minidump\MEMORY.DMP]
Kernel Summary Dump File: Only kernel address space is available
Symbol search path is: D:\System\Windows\Debugging Tools(x86)\Symbols
Executable search path is:
*** ERROR: Symbol file could not be found. Defaulted to export symbols for ntkrpamp.exe -
Windows XP Kernel Version 2600 (Service Pack 3) MP (2 procs) Free x86 compatible
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 2600.xpsp_sp3_gdr.120504-1619
Machine Name:
Kernel base = 0x804d7000 PsLoadedModuleList = 0x8055d720
Debug session time: Thu Dec 4 20:03:15.812 2014 (GMT+1)
System Uptime: 0 days 0:00:07.531
WARNING: Process directory table base 0ACC0060 doesn't match CR3 003B5000
WARNING: Process directory table base 0ACC0060 doesn't match CR3 003B5000
*** ERROR: Symbol file could not be found. Defaulted to export symbols for ntkrpamp.exe -
Loading Kernel Symbols
...............................................................
.......................................................
Loading User Symbols
PEB is paged out (Peb.Ldr = 7ffd700c). Type ".hh dbgerr001" for details
Loading unloaded module list
Use !analyze -v to get detailed debugging information.
BugCheck 7F, {8, 80042000, 0, 0}
***** Kernel symbols are WRONG. Please fix symbols to do analysis.
*** Type referenced: nt!_KPRCB ***
PEB is paged out (Peb.Ldr = 7ffd700c). Type ".hh dbgerr001" for details
PEB is paged out (Peb.Ldr = 7ffd700c). Type ".hh dbgerr001" for details
Probably caused by : ntkrpamp.exe ( nt!Kei386EoiHelper+16a5 )
Followup: MachineOwner
---------
0: kd> !analyze -v
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
UNEXPECTED_KERNEL_MODE_TRAP (7f)
This means a trap occurred in kernel mode, and it's a trap of a kind
that the kernel isn't allowed to have/catch (bound trap) or that
is always instant death (double fault). The first number in the
bugcheck params is the number of the trap (8 = double fault, etc)
Consult an
Intel x86 family manual to learn more about what these
traps are. Here is a *portion* of those codes:
If kv shows a taskGate
use .tss on the part before the colon, then kv.
Else if kv shows a trapframe
use .trap on that value
Else
.trap on the appropriate frame will show where the trap was taken
(on x86, this will be the ebp that goes with the procedure KiTrap)
Endif
kb will then show the corrected stack.
Arguments:
Arg1: 00000008, EXCEPTION_DOUBLE_FAULT
Arg2: 80042000
Arg3: 00000000
Arg4: 00000000
Debugging Details:
------------------
***** Kernel symbols are WRONG. Please fix symbols to do analysis.
*** Type referenced: nt!_KPRCB ***
*** ***
*************************************************************************
PEB is paged out (Peb.Ldr = 7ffd700c). Type ".hh dbgerr001" for details
PEB is paged out (Peb.Ldr = 7ffd700c). Type ".hh dbgerr001" for details
MODULE_NAME: nt
FAULTING_MODULE: 804d7000 nt
DEBUG_FLR_IMAGE_TIMESTAMP: 4fa3cc43
BUGCHECK_STR: 0x7f_8
DEFAULT_BUCKET_ID: WRONG_SYMBOLS
LAST_CONTROL_TRANSFER: from 00000000 to 805435c1
STACK_TEXT:
00000000 00000000 00000000 00000000 00000000 nt!Kei386EoiHelper+0x16a5
STACK_COMMAND: kb
FOLLOWUP_IP:
nt!Kei386EoiHelper+16a5
805435c1 ebee jmp nt!Kei386EoiHelper+0x1695 (805435b1)
SYMBOL_STACK_INDEX: 0
SYMBOL_NAME: nt!Kei386EoiHelper+16a5
FOLLOWUP_NAME: MachineOwner
IMAGE_NAME: ntkrpamp.exe
BUCKET_ID: WRONG_SYMBOLS
Followup: MachineOwner
---------
0: kd> lmvm nt
start end module name
804d7000 806e6000 nt (export symbols) ntkrpamp.exe
Loaded symbol image file: ntkrpamp.exe
Image path: ntkrpamp.exe
Image name: ntkrpamp.exe
Timestamp: Fri May 04 14:32:03 2012 (4FA3CC43)
CheckSum: 001EFBFA
ImageSize: 0020F000
File version: 5.1.2600.6223
Product version: 5.1.2600.6223
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 1.0 App
File date: 00000000.00000000
Translations: 0407.04b0
CompanyName: Microsoft Corporation
ProductName: Betriebssystem Microsoft® Windows®
InternalName: ntkrpamp.exe
OriginalFilename: ntkrpamp.exe
ProductVersion: 5.1.2600.6223
FileVersion: 5.1.2600.6223 (xpsp_sp3_gdr.120504-1619)
FileDescription: NT-Kernel und -System
LegalCopyright: © Microsoft Corporation. Alle Rechte vorbehalten.