ich weiß nicht, ob es wirklich was mit dem totalcmd zu tun hat, aber ff. ist mir schon zweimal passiert:
Ich habe auf Windows XP SP3 (32bit) einen Bluescreen (IRQL_NOT_LESS_OR_EQUAL) gekriegt nachdem ich auf einer Netzfreigabe einer Netzwerkfestplatte (NAS) zwei Verzeichnisse löschen wollte (mit einem Punkt anfangend, vielleicht ist das aber unwichtig).
Die Untersuchung des Minidump führte mich dann zum totalcmd:
Code: Select all
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
IRQL_NOT_LESS_OR_EQUAL (a)
An attempt was made to access a pageable (or completely invalid) address at an
interrupt request level (IRQL) that is too high. This is usually
caused by drivers using improper addresses.
If a kernel debugger is available get the stack backtrace.
Arguments:
Arg1: 00000004, memory referenced
Arg2: 00000002, IRQL
Arg3: 00000001, bitfield :
bit 0 : value 0 = read operation, 1 = write operation
bit 3 : value 0 = not an execute operation, 1 = execute operation (only on chips which support this level of status)
Arg4: 804f7ea0, address which referenced memory
Debugging Details:
------------------
WRITE_ADDRESS: 00000004
CURRENT_IRQL: 2
FAULTING_IP:
nt!KeQuerySystemTime+e
804f7ea0 894804 mov dword ptr [eax+4],ecx
CUSTOMER_CRASH_COUNT: 1
DEFAULT_BUCKET_ID: DRIVER_FAULT
BUGCHECK_STR: 0xA
PROCESS_NAME: TOTALCMD.EXE
LAST_CONTROL_TRANSFER: from aeabe49e to 804f7ea0
STACK_TEXT:
8bcb2afc aeabe49e 00000000 881e0503 e84e1538 nt!KeQuerySystemTime+0xe
8bcb2b24 aeacc2bd 89d30820 8719d300 8719d320 Fastfat!FatSetDirtyBcb+0x117
8bcb2bb0 aeacb47d 89d30820 88fec468 e8221868 Fastfat!FatSetBasicInfo+0x475
8bcb2c00 aeacb8ff 89d30820 88fec468 00000000 Fastfat!FatCommonSetInformation+0x233
8bcb2c44 804ef19f 8719d020 88fec468 88fec468 Fastfat!FatFsdSetInformation+0x3e
8bcb2c54 b9d99e9b 88dea020 88fec468 87814a08 nt!IopfCallDriver+0x31
8bcb2c78 b9d9a06b 8bcb2c98 88dea020 00000000 fltmgr!FltpLegacyProcessingAfterPreCallbacksCompleted+0x20b
8bcb2cb0 804ef19f 88dea020 88fec468 88fec478 fltmgr!FltpDispatch+0x11f
8bcb2cc0 8057b543 8bcb2d64 06e8a704 8057b010 nt!IopfCallDriver+0x31
8bcb2d48 8054164c 000006fc 06e8a75c 06e8a710 nt!NtSetInformationFile+0x533
8bcb2d48 7c91e514 000006fc 06e8a75c 06e8a710 nt!KiFastCallEntry+0xfc
WARNING: Frame IP not in any known module. Following frames may be wrong.
06e8a774 00000000 00000000 00000000 00000000 0x7c91e514
STACK_COMMAND: kb
FOLLOWUP_IP:
nt!KeQuerySystemTime+e
804f7ea0 894804 mov dword ptr [eax+4],ecx
SYMBOL_STACK_INDEX: 0
SYMBOL_NAME: nt!KeQuerySystemTime+e
FOLLOWUP_NAME: MachineOwner
MODULE_NAME: nt
IMAGE_NAME: ntkrpamp.exe
DEBUG_FLR_IMAGE_TIMESTAMP: 4bd6e0e8
FAILURE_BUCKET_ID: 0xA_nt!KeQuerySystemTime+e
BUCKET_ID: 0xA_nt!KeQuerySystemTime+e
Followup: MachineOwner
---------
Gruß, franc