Hola Destroyer, gracias por la bienvenida, y por los links !
El primer link, es el que use para intentar analizar el archivo, segui los pasos como hace ahí con el Windgb y demas, pero el resultado no lo entiendo, por que entre otras muchas cosas me pone…
Probably caused by : svchost.exe ( INVALID_CONTEXT )
y …tampoco se si al poner eso, es valido el analisis o no.
Lo copio por si alguien puede decirme algo ( se lo agradeceria, porque voy de craneo )
Microsoft (R) Windows Debugger Version 6.6.0007.5
Copyright (c) Microsoft Corporation. All rights reserved.
Loading Dump File [C:\WINDOWS\Minidump\Mini041207-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available
Symbol search path is: SRV*c:\websymbols*http://msdl.microsoft.com/download/symbols
Executable search path is:
Windows XP Kernel Version 2600 (Service Pack 2) MP (2 procs) Free x86 compatible
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 2600.xpsp_sp2_rtm.040803-2158
Kernel base = 0x804d7000 PsLoadedModuleList = 0x805644a0
Debug session time: Thu Apr 12 21:57:35.781 2007 (GMT+2)
System Uptime: 0 days 2:19:39.494
Loading Kernel Symbols
...
Loading User Symbols
Loading unloaded module list
...
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
Use !analyze -v to get detailed debugging information.
BugCheck 100000D1, {719ddf52, 2, 0, 719ddf52}
Probably caused by : svchost.exe ( INVALID_CONTEXT )
Followup: MachineOwner
---------
0: kd> !analyze -v
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
DRIVER_IRQL_NOT_LESS_OR_EQUAL (d1)
An attempt was made to access a pageable (or completely invalid) address at an
interrupt request level (IRQL) that is too high. This is usually
caused by drivers using improper addresses.
If kernel debugger is available get stack backtrace.
Arguments:
Arg1: 719ddf52, memory referenced
Arg2: 00000002, IRQL
Arg3: 00000000, value 0 = read operation, 1 = write operation
Arg4: 719ddf52, address which referenced memory
Debugging Details:
------------------
READ_ADDRESS: 719ddf52
CURRENT_IRQL: 2
FAULTING_IP:
+719ddf52
719ddf52 ?? ???
PROCESS_NAME: svchost.exe
BUGCHECK_STR: RAISED_IRQL_FAULT
CUSTOMER_CRASH_COUNT: 1
DEFAULT_BUCKET_ID: DRIVER_FAULT
FAILED_INSTRUCTION_ADDRESS:
+719ddf52
719ddf52 ?? ???
SYMBOL_NAME: INVALID_CONTEXT
FOLLOWUP_NAME: MachineOwner
MODULE_NAME: svchost.exe
IMAGE_NAME: svchost.exe
DEBUG_FLR_IMAGE_TIMESTAMP: 0
STACK_COMMAND: kb
FAILURE_BUCKET_ID: RAISED_IRQL_FAULT_svchost.exe_CODE_AV_BAD_IP_INVALID_CONTEXT
BUCKET_ID: RAISED_IRQL_FAULT_svchost.exe_CODE_AV_BAD_IP_INVALID_CONTEXT
Followup: MachineOwner
******
Perdon por la extensión del post ..ufff
Muchas gracias a todos
Saludos