so nach langen hin und her hab ich einiges rausgefunden
wie man aus einem bluescreen mehr informationen rausholt

das wird mir aus einer mindump datei über windbg angezeigt

nur so recht schalu werd ich leider noch nicht drauß







Microsoft (R) Windows Debugger Version 6.11.0001.404 AMD64
Copyright (c) Microsoft Corporation. All rights reserved.


Loading Dump File [C:\Windows\Minidump\041710-22635-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available

WARNING: Whitespace at start of path element
WARNING: Whitespace at start of path element
WARNING: Whitespace at end of path element
Symbol search path is: SRV*c:\symbols*http://msdl.microsoft.com/download/symbols
Executable search path is: c:\windows\System32; c:\windows\system\System32; http://www.alexander.com/SymServe

Windows 7 Kernel Version 7600 MP (4 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS Personal
Built by: 7600.16539.amd64fre.win7_gdr.100226-1909
Machine Name:
Kernel base = 0xfffff800`03205000 PsLoadedModuleList = 0xfffff800`03442e50
Debug session time: Sat Apr 17 15:20:21.114 2010 (GMT+2)
System Uptime: 0 days 0:00:08.566
Loading Kernel Symbols
................................................
Loading User Symbols
Mini Kernel Dump does not contain unloaded driver list
************************************************** *****************************
* *
* Bugcheck Analysis *
* *
************************************************** *****************************

Use !analyze -v to get detailed debugging information.

BugCheck 124, {0, fffffa8007f98038, 0, 0}

Probably caused by : hardware

Followup: MachineOwner
---------

1: kd> !analyze -v
************************************************** *****************************
* *
* Bugcheck Analysis *
* *
************************************************** *****************************

WHEA_UNCORRECTABLE_ERROR (124)
A fatal hardware error has occurred. Parameter 1 identifies the type of error
source that reported the error. Parameter 2 holds the address of the
WHEA_ERROR_RECORD structure that describes the error conditon.
Arguments:
Arg1: 0000000000000000, Machine Check Exception
Arg2: fffffa8007f98038, Address of the WHEA_ERROR_RECORD structure.
Arg3: 0000000000000000, High order 32-bits of the MCi_STATUS value.
Arg4: 0000000000000000, Low order 32-bits of the MCi_STATUS value.

Debugging Details:
------------------


BUGCHECK_STR: 0x124_GenuineIntel

CUSTOMER_CRASH_COUNT: 1

DEFAULT_BUCKET_ID: VISTA_DRIVER_FAULT

PROCESS_NAME: System

CURRENT_IRQL: 0

STACK_TEXT:
fffff880`031af6f0 fffff800`034bfa79 : fffffa80`07f98010 fffffa80`06a33040 00000000`00000014 00000000`00000001 : nt!WheapCreateLiveTriageDump+0x6c
fffff880`031afc10 fffff800`033a15a7 : fffffa80`07f98010 fffff800`0341a5f8 fffffa80`06a33040 00000002`00000005 : nt!WheapCreateTriageDumpFromPreviousSession+0x49
fffff880`031afc40 fffff800`03309b85 : fffff800`0347c360 fffffa80`07f199b8 fffffa80`07f199b0 fffffa80`06a33040 : nt!WheapProcessWorkQueueItem+0x57
fffff880`031afc80 fffff800`03282861 : fffff880`010d4e00 fffff800`03309b60 fffffa80`06a33040 ffffffff`ffffffff : nt!WheapWorkQueueWorkerRoutine+0x25
fffff880`031afcb0 fffff800`0351aa86 : 00000000`00000000 fffffa80`06a33040 00000000`00000080 fffffa80`069a5890 : nt!ExpWorkerThread+0x111
fffff880`031afd40 fffff800`03253b06 : fffff880`02f64180 fffffa80`06a33040 fffff880`02f6efc0 ffffffff`ffffffff : nt!PspSystemThreadStartup+0x5a
fffff880`031afd80 00000000`00000000 : fffff880`031b0000 fffff880`031aa000 fffff880`037bf540 00000000`00000000 : nt!KxStartSystemThread+0x16


STACK_COMMAND: kb

FOLLOWUP_NAME: MachineOwner

MODULE_NAME: hardware

IMAGE_NAME: hardware

DEBUG_FLR_IMAGE_TIMESTAMP: 0

FAILURE_BUCKET_ID: X64_0x124_GenuineIntel_PROCESSOR_BUS_PRV

BUCKET_ID: X64_0x124_GenuineIntel_PROCESSOR_BUS_PRV

Followup: MachineOwner
---------

1: kd> lmvm hardware
start end module name
Mini Kernel Dump does not contain unloaded driver list