XP non lo sto più usando, è ancora vivo solo perchè in quel HD ci son ancora dei file che devo salvare, poi formatto.
Comunque su xp non mi ha mai dato il BSOD. E avevo gli stessi driver.
Ho provato a fare il debug del file minidump ma non ci son riuscito. Mi da sto errore:
codice:
Microsoft (R) Windows Debugger Version 6.9.0003.113 X86
Copyright (c) Microsoft Corporation. All rights reserved.
Loading Dump File [E:\Windows\Minidump\Mini110608-03.dmp]
Mini Kernel Dump File: Only registers and stack trace are available
Symbol search path is: SRV*c:\symbols*Symbol information
Executable search path is:
Windows Server 2008 Kernel Version 6001 (Service Pack 1) MP (2 procs) Free x86 compatible
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 6001.18145.x86fre.vistasp1_gdr.080917-1612
Kernel base = 0x82037000 PsLoadedModuleList = 0x8214ec70
Debug session time: Thu Nov 6 19:20:26.778 2008 (GMT+1)
System Uptime: 0 days 1:35:35.946
Loading Kernel Symbols
.........................................................................................................................................................
Loading User Symbols
Loading unloaded module list
........
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
Use !analyze -v to get detailed debugging information.
BugCheck D1, {8, 2, 1, 82e3185f}
Unable to load image \SystemRoot\system32\DRIVERS\Rtlh86.sys, Win32 error 0n2
*** WARNING: Unable to verify timestamp for Rtlh86.sys
*** ERROR: Module load completed but symbols could not be loaded for Rtlh86.sys
Probably caused by : pacer.sys ( pacer!PcFilterSendNetBufferListsComplete+ba )
Followup: MachineOwner
---------
Penso sia dovuto a un errato indirizzo del symbol file path. Ho messo questo: SRV*c:\symbols*Symbol information
Edit:
Dal visualizzatore eventi, ho trovato vari errori nello stesso orario dei crash li riporto qua:
Origine : HttpEvent
OD: 15016
Data: 6/11/2008 19.28.53
Impossibile inizializzare il pacchetto di protezione Kerberos per l'autenticazione sul lato server. Il numero di errore è indicato nel campo dati.
codice:
+ System
- Provider
[ Name] Microsoft-Windows-HttpEvent
[ Guid] {7b6bc78c-898b-4170-bbf8-1a469ea43fc5}
[ EventSourceName] HTTP
- EventID 15016
[ Qualifiers] 49152
Version 0
Level 2
Task 0
Opcode 0
Keywords 0x80000000000000
- TimeCreated
[ SystemTime] 2008-11-06T18:28:53.211Z
EventRecordID 17743
Correlation
- Execution
[ ProcessID] 4
[ ThreadID] 68
Channel System
Computer PC-Marco
Security
- EventData
DeviceObject \Device\Http\ReqQueue
SecurityPackage Kerberos
000004000200300000000000A83A00C00000000000000000000000000000000000000000000000000E030980
--------------------------------------------------------------------------------
Dati binari:
In word
0000: 00040000 00300002 00000000 C0003AA8
0008: 00000000 00000000 00000000 00000000
0010: 00000000 00000000 8009030E
In byte
0000: 00 00 04 00 02 00 30 00 ......0.
0008: 00 00 00 00 A8 3A 00 C0 ....¨:.À
0010: 00 00 00 00 00 00 00 00 ........
0018: 00 00 00 00 00 00 00 00 ........
0020: 00 00 00 00 00 00 00 00 ........
0028: 0E 03 09 80 ...€
Origine: EventLog
ID: 6008
Data:6/11/2008 19.28.51
Precedente arresto del sistema inatteso a 19.20.10 su 06/11/2008.
codice:
+ System
- Provider
[ Name] EventLog
- EventID 6008
[ Qualifiers] 32768
Level 2
Task 0
Keywords 0x80000000000000
- TimeCreated
[ SystemTime] 2008-11-06T18:28:51.000Z
EventRecordID 17732
Channel System
Computer PC-Marco
Security
- EventData
19.20.10
06/11/2008
5719
D8070B0004000600130014000A007D01D8070B0004000600120014000A007D01600900003C000000010000006009000000000000B00400000100000000000000
--------------------------------------------------------------------------------
Dati binari:
In word
0000: 000B07D8 00060004 00140013 017D000A
0008: 000B07D8 00060004 00140012 017D000A
0010: 00000960 0000003C 00000001 00000960
0018: 00000000 000004B0 00000001 00000000
In byte
0000: D8 07 0B 00 04 00 06 00 Ø.......
0008: 13 00 14 00 0A 00 7D 01 ......}.
0010: D8 07 0B 00 04 00 06 00 Ø.......
0018: 12 00 14 00 0A 00 7D 01 ......}.
0020: 60 09 00 00 3C 00 00 00 `...<...
0028: 01 00 00 00 60 09 00 00 ....`...
0030: 00 00 00 00 B0 04 00 00 ....°...
0038: 01 00 00 00 00 00 00 00 ........
Segue uno con gli stessi valori del primo errore ma 6/11/2008 17.45 e anche qui è avvenuto il crash e segue il seguente eventlog 2 secondi prima, e così sempre, per tutti i crash (almeno per quelli che riesco a vedere , visto che non ho piu' tutti i minidump)