bei windbg kommt folgendes raus:
        kd> !analyze -v
        *******************************************************************************
        * *
        * Bugcheck Analysis *
        * *
        *******************************************************************************
        
        KERNEL_MODE_EXCEPTION_NOT_HANDLED (8e)
        This is a very common bugcheck. Usually the exception address pinpoints
        the driver/function that caused the problem. Always note this address
        as well as the link date of the driver/image that contains this address.
        Some common problems are exception code 0x80000003. This means a hard
        coded breakpoint or assertion was hit, but this system was booted
        /NODEBUG. This is not supposed to happen as developers should never have
        hardcoded breakpoints in retail code, but ...
        If this happens, make sure a debugger gets connected, and the
        system is booted /DEBUG. This will let us see why this breakpoint is
        happening.
        Arguments:
        Arg1: c0000005, The exception code that was not handled
        Arg2: 00000020, The address that the exception occurred at
        Arg3: ba991a98, Trap Frame
        Arg4: 00000000
        
        Debugging Details:
        ------------------
        
        ***** Kernel symbols are WRONG. Please fix symbols to do analysis.
        
        
        MODULE_NAME: nt
        
        FAULTING_MODULE: 804d0000 nt
        
        DEBUG_FLR_IMAGE_TIMESTAMP: 3b7de38f
        
        EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - Die Anweisung in "0x%08lx" verweist auf Speicher in "0x%08lx". Der Vorgang "%s" konnte nicht auf dem Speicher durchgef hrt werden.
        
        FAULTING_IP:
        +20
        00000020 ?? ???
        
        TRAP_FRAME: ba991a98 -- (.trap ffffffffba991a98)
        ErrCode = 00000000
        eax=00000000 ebx=e138efb8 ecx=00000000 edx=f88861a0 esi=e138efb8 edi=ba991c24
        eip=00000020 esp=ba991b0c ebp=00000000 iopl=0 nv up ei pl zr na po nc
        cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00010246
        00000020 ?? ???
        Resetting default scope
        
        DEFAULT_BUCKET_ID: DRIVER_FAULT
        
        BUGCHECK_STR: 0x8E
        
        LAST_CONTROL_TRANSFER: from ba991b5c to 00000020
        
        STACK_TEXT:
        WARNING: Frame IP not in any known module. Following frames may be wrong.
        ba991b08 ba991b5c ba991c00 ba991b5c ba991b2c 0x20
        00010246 81c60146 f8888b1a 93818d01 8bf8888b 0xba991b5c
        8905e883 00000000 00000000 00000000 00000000 0x81c60146
        
        
        STACK_COMMAND: .bugcheck ; kb
        
        FOLLOWUP_NAME: MachineOwner
        
        BUCKET_ID: WRONG_SYMBOLS
        
        Followup: MachineOwner
        ---------
      
Archiv Windows XP 25.916 Themen, 128.567 Beiträge
          kd> .bugcheck ; kb
          Bugcheck code 0000008E
          Arguments c0000005 00000030 ba8a4a98 00000000
          ChildEBP RetAddr Args to Child
          WARNING: Stack unwind information not available. Following frames may be wrong.
          ba8a466c 80514d65 0000008e c0000005 00000030 nt!KeBugCheckEx+0x19
          ba8a4a28 804d5897 ba8a4a44 00000000 ba8a4a98 nt!ExRaiseStatus+0x4b38
          ba8a4a98 002c0033 006f0050 00690073 00690074 nt!Kei386EoiHelper+0x1dd
          006d006f 00000000 00000000 00000000 00000000 0x2c0033
        
