driver pervac.sys

14/12/2005 - 23:43 por Orlando84 | Informe spam
Hola
mi pc se reinicia y sale una pantalla azul donde indica
PAGE_FAULT_IN_NONPAGED_AREA y hace una mención a PERVAC.SYS
les agradeceria que me digan como solucionar este inconveniente.
He hecho un analisis con el windbg.exe del Debugging Tools for Windows y me
dice
ahi les mando los resultados del analisis del archivo Mini121305-03.dmp que
se crea luego de que se reinicia mi pc.
Gracias y que tenga buen dia.



Microsoft (R) Windows Debugger Version 6.5.0003.7
Copyright (c) Microsoft Corporation. All rights reserved.


Loading Dump File [C:\WINDOWS\Minidump\Mini121305-03.dmp]
Mini Kernel Dump File: Only registers and stack trace are available

Symbol search path is: *** Invalid ***
****************************************************************************
* Symbol loading may be unreliable without a symbol search path. *
* Use .symfix to have the debugger choose a symbol path. *
* After setting your symbol path, use .reload to refresh symbol locations. *
****************************************************************************
Executable search path is:
*********************************************************************
* Symbols can not be loaded because symbol path is not initialized. *
* *
* The Symbol Path can be set by: *
* using the _NT_SYMBOL_PATH environment variable. *
* using the -y <symbol_path> argument when starting the debugger. *
* using .sympath and .sympath+ *
*********************************************************************
Unable to load image \WINDOWS\system32\KERNEL1.EXE, Win32 error 2
*** WARNING: Unable to verify timestamp for KERNEL1.EXE
*** ERROR: Module load completed but symbols could not be loaded for
KERNEL1.EXE
Windows XP Kernel Version 2600 (Service Pack 1) UP Free x86 compatible
Product: WinNt
Kernel base = 0x804de000 PsLoadedModuleList = 0x80555e30
Debug session time: Tue Dec 13 21:35:09.109 2005 (GMT-5)
System Uptime: 0 days 0:12:14.685
*********************************************************************
* Symbols can not be loaded because symbol path is not initialized. *
* *
* The Symbol Path can be set by: *
* using the _NT_SYMBOL_PATH environment variable. *
* using the -y <symbol_path> argument when starting the debugger. *
* using .sympath and .sympath+ *
*********************************************************************
Unable to load image \WINDOWS\system32\KERNEL1.EXE, Win32 error 2
*** WARNING: Unable to verify timestamp for KERNEL1.EXE
*** ERROR: Module load completed but symbols could not be loaded for
KERNEL1.EXE
Loading Kernel Symbols
.
Loading unloaded module list
...
Loading User Symbols
*******************************************************************************
*
*
* Bugcheck Analysis
*
*
*
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck 50, {f9df2000, 0, f9de8061, 0}

***** Kernel symbols are WRONG. Please fix symbols to do analysis.

Unable to load image PERVAC.SYS, Win32 error 2
*** WARNING: Unable to verify timestamp for PERVAC.SYS
*** ERROR: Module load completed but symbols could not be loaded for
PERVAC.SYS
Probably caused by : PERVAC.SYS ( PERVAC+5061 )

Followup: MachineOwner


kd> !analyze -v
*******************************************************************************
*
*
* Bugcheck Analysis
*
*
*
*******************************************************************************

PAGE_FAULT_IN_NONPAGED_AREA (50)
Invalid system memory was referenced. This cannot be protected by try-except,
it must be protected by a Probe. Typically the address is just plain bad or
it
is pointing at freed memory.
Arguments:
Arg1: f9df2000, memory referenced.
Arg2: 00000000, value 0 = read operation, 1 = write operation.
Arg3: f9de8061, If non-zero, the instruction address which referenced the
bad memory
address.
Arg4: 00000000, (reserved)

Debugging Details:


***** Kernel symbols are WRONG. Please fix symbols to do analysis.


MODULE_NAME: PERVAC

FAULTING_MODULE: 804de000 nt

DEBUG_FLR_IMAGE_TIMESTAMP: 40450cf2

READ_ADDRESS: unable to get nt!MmSpecialPoolStart
unable to get nt!MmSpecialPoolEnd
unable to get nt!MmPoolCodeStart
unable to get nt!MmPoolCodeEnd
f9df2000

FAULTING_IP:
PERVAC+5061
f9de8061 ?? ???

MM_INTERNAL_CODE: 0

CUSTOMER_CRASH_COUNT: 3

DEFAULT_BUCKET_ID: DRIVER_FAULT

BUGCHECK_STR: 0x50

LAST_CONTROL_TRANSFER: from 00000000 to 805306db

STACK_TEXT:
f59c17e8 00000000 f9df2000 00000000 f59c1868 nt+0x526db


STACK_COMMAND: .bugcheck ; kb

FOLLOWUP_IP:
PERVAC+5061
f9de8061 ?? ???

FOLLOWUP_NAME: MachineOwner

SYMBOL_NAME: PERVAC+5061

IMAGE_NAME: PERVAC.SYS

BUCKET_ID: WRONG_SYMBOLS

Followup: MachineOwner
 

Leer las respuestas

#1 fermu [MVP Windows]
14/12/2005 - 23:54 | Informe spam
Hash: SHA1

no es un driver de windows... tienes per antivirus instalado?
Saludos
MS MVP Windows - Shell/User
Fermu's Website - http://www.fermu.com
Fermu's Forum - http://fermu.notlong.com/

Preguntas similares