Re: Blue screen with Event 1076
- From: "jolteroli" <jolt1976@xxxxxxx>
- Date: Mon, 19 Jan 2009 18:51:14 +0100
a windows xp computer will do fine, as long as you have set the
_NT_SYMBOL_PATH properly. then, windbg will download the proper symbol files
and images of the foreign system from the ms symbol server. just analyze the
dump /wo and then /w symbols configured. youll see a "difference"...
btw: each and everything is explained very very well in the help file of
windbg, it's awesome! there is a section "Analyzing a Kernel-Mode Dump File
with WinDgb". just give it a try and start diggin' there! if you want, post
back the output. may be we can help you, im not a kernel guru though...
all the best
-jolt
"HDI" <hdinf@xxxxxxxxxxx> schrieb im Newsbeitrag
news:cc92a55e-f17a-47b2-aec8-6ff00c6b1f54@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
On 18 jan, 17:37, "jolteroli" <jolt1...@xxxxxxx> wrote:
most likely, that win32k.sys got called by wrong parameters (invalid
pointer) and hence faulted by accessing non-mapped memory in the non-paged
memory area. since the page can't be loaded from disk...
so, the culprit is the caller not the callee win32k.sys (the gofer). try
getting the memory dump, load it in windbg and do a "!analyze -v". the
call
stack can tell you who's involved. here's the Microsoft-way, if you
like...
http://support.microsoft.com/kb/315263/en-us/
when do you get BSOD'ed? on startup? after a while? on printing? when
opening IE? any correlation?
also, you should consider corrupted images (files). just get a tool to
read
and calculate the checksum within an PE file.
http://www.codeproject.com/KB/cpp/PEChecksum.aspx
then check win32k.sys and any involved file seen in the call stack from
the
"analyze -v".
gd'luck
-jolt
"HDI" <hd...@xxxxxxxxxxx> schrieb im
Newsbeitragnews:899f7476-e02b-4613-b0d7-f4af7fd39a3c@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
On 16 jan, 21:58, "Vera Noest [MVP]" <vera.no...@remove-
this.hem.utfors.se> wrote:
And here's troubleshooting info for Bug Check 0x00000050
:http://msdn.microsoft.com/en-us/library/ms793437.aspx
_________________________________________________________
Vera Noest
MCSE, CCEA, Microsoft MVP - Terminal Server
TS troubleshooting:http://ts.veranoest.net
___ please respond in newsgroup, NOT by private email ___
HDI <hd...@xxxxxxxxxxx> wrote on 16 jan 2009 in
microsoft.public.windows.terminal_services:
Hi,
A few days ago I got a blue screen on our terminal server 2003 and
pointed tot the file win32k.sys.
In the event log I found event id 1076 with the discription:
system failure: stop error
reason code 0x805000f
bugcheck string: 0x00000050
(0xbc245000,0x00000000,0xbf886358,0x00000000)
Any ideas?
It's Windows 2003 SP2 with all patches, I installed the last 6 à 7
updates the morning of the error.
There isn't new hardware added in the last week.
If it was a driver can I see which one caused the error?- Tekst uit
oorspronkelijk bericht niet weergeven -
- Tekst uit oorspronkelijk bericht weergeven -
It occured only 1 time while the server was running.
Thanks for the information.
I experimented already with windbg.exe but like I said I'm
experimenting.
So can I run windbg.exe en examine the dump file (copy it to a local
pc) of a windows 2003 terminal server on a windows xp or should I run
it on that server who caused the error?
.
- Follow-Ups:
- Re: Blue screen with Event 1076
- From: HDI
- Re: Blue screen with Event 1076
- From: HDI
- Re: Blue screen with Event 1076
- References:
- Blue screen with Event 1076
- From: HDI
- Re: Blue screen with Event 1076
- From: Vera Noest [MVP]
- Re: Blue screen with Event 1076
- From: HDI
- Re: Blue screen with Event 1076
- From: jolteroli
- Re: Blue screen with Event 1076
- From: HDI
- Blue screen with Event 1076
- Prev by Date: Re: TSUserPermissions
- Next by Date: Re: TSUserPermissions
- Previous by thread: Re: Blue screen with Event 1076
- Next by thread: Re: Blue screen with Event 1076
- Index(es):
Relevant Pages
|