woow het werkt. Bij het meest recente krijg ik dit:
Microsoft (R) Windows Debugger Version 6.11.0001.402 X86
Copyright (c) Microsoft Corporation. All rights reserved.
Loading Dump File [C:\user.dmp]
User Mini Dump File: Only registers, stack and portions of memory are available
Comment: 'Dr. Watson generated MiniDump'
Symbol search path is: *** Invalid ***
****************************************************************************
* Symbol loading may be unreliable without a symbol search path. *
* Use .symfix to have the debugger choose a symbol path. *
* After setting your symbol path, use .reload to refresh symbol locations. *
****************************************************************************
Executable search path is:
Windows XP Version 2600 (Service Pack 2) MP (2 procs) Free x86 compatible
Product: WinNt, suite: SingleUserTS
Machine Name:
Debug session time: Mon Mar 23 20:42:49.000 2009 (GMT+2)
System Uptime: not available
Process Uptime: 0 days 0:00:09.000
................................................................
...............
This dump file has an exception of interest stored in it.
The stored exception information can be accessed via .ecxr.
(1460.12cc): Access violation - code c0000005 (first/second chance not available)
eax=00000003 ebx=00000000 ecx=00128d3e edx=0000002a esi=7ffdf000 edi=00000000
eip=03019610 esp=0006f278 ebp=0006f290 iopl=0 nv up ei pl nz na pe nc
cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000 efl=00000206
03019610 ?? ???
0:000> !analyze -v
*******************************************************************************
* *
* Exception Analysis *
* *
*******************************************************************************
*** WARNING: Unable to verify timestamp for winmm.dll
*** ERROR: Module load completed but symbols could not be loaded for winmm.dll
*** WARNING: Unable to verify timestamp for msnmsgr.exe
*** ERROR: Module load completed but symbols could not be loaded for msnmsgr.exe
*** WARNING: Unable to verify timestamp for kernel32.dll
*** ERROR: Module load completed but symbols could not be loaded for kernel32.dll
***** OS symbols are WRONG. Please fix symbols to do analysis.
*********************************************************************
* Symbols can not be loaded because symbol path is not initialized. *
* *
* The Symbol Path can be set by: *
* using the _NT_SYMBOL_PATH environment variable. *
* using the -y <symbol_path> argument when starting the debugger. *
* using .sympath and .sympath+ *
*********************************************************************
Unable to load image C:\WINDOWS\system32\advapi32.dll, Win32 error 0n2
*** WARNING: Unable to verify timestamp for advapi32.dll
*** ERROR: Module load completed but symbols could not be loaded for advapi32.dll
*********************************************************************
* Symbols can not be loaded because symbol path is not initialized. *
* *
* The Symbol Path can be set by: *
* using the _NT_SYMBOL_PATH environment variable. *
* using the -y <symbol_path> argument when starting the debugger. *
* using .sympath and .sympath+ *
*********************************************************************
*** WARNING: Unable to verify timestamp for GdiPlus.dll
*** ERROR: Module load completed but symbols could not be loaded for GdiPlus.dll
*********************************************************************
* Symbols can not be loaded because symbol path is not initialized. *
* *
* The Symbol Path can be set by: *
* using the _NT_SYMBOL_PATH environment variable. *
* using the -y <symbol_path> argument when starting the debugger. *
* using .sympath and .sympath+ *
*********************************************************************
*** WARNING: Unable to verify timestamp for MsgPlusLive1.dll
*** ERROR: Module load completed but symbols could not be loaded for MsgPlusLive1.dll
*********************************************************************
* Symbols can not be loaded because symbol path is not initialized. *
* *
* The Symbol Path can be set by: *
* using the _NT_SYMBOL_PATH environment variable. *
* using the -y <symbol_path> argument when starting the debugger. *
* using .sympath and .sympath+ *
*********************************************************************
*********************************************************************
* Symbols can not be loaded because symbol path is not initialized. *
* *
* The Symbol Path can be set by: *
* using the _NT_SYMBOL_PATH environment variable. *
* using the -y <symbol_path> argument when starting the debugger. *
* using .sympath and .sympath+ *
*********************************************************************
*********************************************************************
* Symbols can not be loaded because symbol path is not initialized. *
* *
* The Symbol Path can be set by: *
* using the _NT_SYMBOL_PATH environment variable. *
* using the -y <symbol_path> argument when starting the debugger. *
* using .sympath and .sympath+ *
*********************************************************************
*********************************************************************
* Symbols can not be loaded because symbol path is not initialized. *
* *
* The Symbol Path can be set by: *
* using the _NT_SYMBOL_PATH environment variable. *
* using the -y <symbol_path> argument when starting the debugger. *
* using .sympath and .sympath+ *
*********************************************************************
*********************************************************************
* Symbols can not be loaded because symbol path is not initialized. *
* *
* The Symbol Path can be set by: *
* using the _NT_SYMBOL_PATH environment variable. *
* using the -y <symbol_path> argument when starting the debugger. *
* using .sympath and .sympath+ *
*********************************************************************
*********************************************************************
* Symbols can not be loaded because symbol path is not initialized. *
* *
* The Symbol Path can be set by: *
* using the _NT_SYMBOL_PATH environment variable. *
* using the -y <symbol_path> argument when starting the debugger. *
* using .sympath and .sympath+ *
*********************************************************************
*** WARNING: Unable to verify timestamp for PresenceIM.dll
*** ERROR: Module load completed but symbols could not be loaded for PresenceIM.dll
*** WARNING: Unable to verify timestamp for msvcr80.dll
*** ERROR: Module load completed but symbols could not be loaded for msvcr80.dll
*********************************************************************
* Symbols can not be loaded because symbol path is not initialized. *
* *
* The Symbol Path can be set by: *
* using the _NT_SYMBOL_PATH environment variable. *
* using the -y <symbol_path> argument when starting the debugger. *
* using .sympath and .sympath+ *
*********************************************************************
*************************************************************************
*** ***
*** ***
*** Your debugger is not using the correct symbols ***
*** ***
*** In order for this command to work properly, your symbol path ***
*** must point to .pdb files that have full type information. ***
*** ***
*** Certain .pdb files (such as the public OS symbols) do not ***
*** contain the required information. Contact the group that ***
*** provided you with these symbols if you need this command to ***
*** work. ***
*** ***
*** Type referenced: kernel32!pNlsUserInfo ***
*** ***
*************************************************************************
*************************************************************************
*** ***
*** ***
*** Your debugger is not using the correct symbols ***
*** ***
*** In order for this command to work properly, your symbol path ***
*** must point to .pdb files that have full type information. ***
*** ***
*** Certain .pdb files (such as the public OS symbols) do not ***
*** contain the required information. Contact the group that ***
*** provided you with these symbols if you need this command to ***
*** work. ***
*** ***
*** Type referenced: kernel32!pNlsUserInfo ***
*** ***
*************************************************************************
FAULTING_IP:
+1379
03019610 ?? ???
EXCEPTION_RECORD: ffffffff -- (.exr 0xffffffffffffffff)
ExceptionAddress: 03019610
ExceptionCode: c0000005 (Access violation)
ExceptionFlags: 00000000
NumberParameters: 2
Parameter[0]: 00000000
Parameter[1]: 03019610
Attempt to read from address 03019610
PROCESS_NAME: msnmsgr.exe
ADDITIONAL_DEBUG_TEXT:
Use '!findthebuild' command to search for the target build information.
If the build information is available, run '!findthebuild -s ; .reload' to set symbol path and load symbols.
MODULE_NAME: winmm
FAULTING_MODULE: 7c900000 ntdll
DEBUG_FLR_IMAGE_TIMESTAMP: 467edaff
ERROR_CODE: (NTSTATUS) 0xc0000005 - De instructie op 0x%08lx verwijst naar geheugen op 0x%08lx. Een lees- of schrijfbewerking op het geheugen is mislukt: %s.
EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - De instructie op 0x%08lx verwijst naar geheugen op 0x%08lx. Een lees- of schrijfbewerking op het geheugen is mislukt: %s.
EXCEPTION_PARAMETER1: 00000000
EXCEPTION_PARAMETER2: 03019610
READ_ADDRESS: 03019610
FOLLOWUP_IP:
winmm+1379
10001379 ?? ???
FAILED_INSTRUCTION_ADDRESS:
+693d952f02d6dea8
03019610 ?? ???
DETOURED_IMAGE: 1
IP_ON_HEAP: 03019610
FAULTING_THREAD: 000012cc
BUGCHECK_STR: APPLICATION_FAULT_BAD_INSTRUCTION_PTR_INVALID_POINTER_READ_WRONG_SYMBOLS
PRIMARY_PROBLEM_CLASS: BAD_INSTRUCTION_PTR
DEFAULT_BUCKET_ID: BAD_INSTRUCTION_PTR
LAST_CONTROL_TRANSFER: from 7e41f84a to 03019610
STACK_TEXT:
WARNING: Frame IP not in any known module. Following frames may be wrong.
0006f274 7e41f84a 00000003 001004f2 0006f2bc 0x3019610
0006f290 7e44f68e 00050003 001004f2 0006f2bc user32+0xf84a
0006f2c4 7c90eae3 0006f2d4 00000060 00000060 user32+0x3f68e
0006f7d4 7e4242e9 00010101 00008002 0006f838 ntdll+0xeae3
0006f8ac 7e42592c 7e410000 00008002 00000000 user32+0x142e9
0006f8e0 7e43a91e 7e410000 00128d28 00000000 user32+0x1592c
0006fba0 7e43a284 0006fcfc 00000000 ffffffff user32+0x2a91e
0006fcf0 7e4661d3 0006fcfc 00000028 00000000 user32+0x2a284
0006fd48 7e466278 00000000 00131c88 0012f250 user32+0x561d3
0006fd7c 7e450617 00000000 10008f98 10008e30 user32+0x56278
0006fd9c 7e4505cf 00000000 10008f98 10008e30 user32+0x40617
0006fdb8 10001379 00000000 10008f98 10008e30 user32+0x405cf
0006fe94 00498454 00000000 00000001 00000000 winmm+0x1379
0006fec0 0049e95e 00bf8620 0006fee0 00523595 msnmsgr+0x98454
0006fee4 0049e309 0040dbe4 00000000 0006ff24 msnmsgr+0x9e95e
0006fef4 0049e533 00000000 00498373 00709df0 msnmsgr+0x9e309
0006ff24 004989cc 000a2346 0006ffc0 006b2111 msnmsgr+0x9e533
0006ff30 006b2111 00400000 00000000 000a2346 msnmsgr+0x989cc
0006ffc0 7c816fd7 00320037 00380032 7ffd8000 msnmsgr+0x2b2111
0006fff0 00000000 006b229c 00000000 00000000 kernel32+0x16fd7
STACK_COMMAND: ~0s; .ecxr ; kb
SYMBOL_STACK_INDEX: c
SYMBOL_NAME: winmm+1379
FOLLOWUP_NAME: MachineOwner
IMAGE_NAME: winmm.dll
BUCKET_ID: WRONG_SYMBOLS
FAILURE_BUCKET_ID: BAD_INSTRUCTION_PTR_c0000005_winmm.dll!Unknown
WATSON_STAGEONE_URL:
http://watson.microsoft.com/StageOn...0_0/bbbbbbb4/c0000005/03019610.htm?Retriage=1
Followup: MachineOwner
---------
Moet ik de rest ook doen?