https://download.csdn.net/download/sitelist/89752187
Windows server 2003 Build 3790 (Checked)版下载
kd> .reload
Connected to Windows Server 2003 3790 x86 compatible target at (Sat Sep 14 11:25:12.535 2024 (UTC + 8:00)), ptr64 FALSE
Loading Kernel Symbols
...........................
Loading User Symbols
Loading unloaded module list
Unable to enumerate kernel-mode unloaded modules, HRESULT 0x80004005
kd> g
18:25:26.765+899a2278:0000+RDPDYN_Dispatch +0680+Unhandled PnP IRP with minor 00000018
'xMP.SYS: 'EHCI Generic Controller Detected
Checking file system on C:
The volume is clean.
Windows has finished checking the disk.
'HidParse.SYS: 'Top Level Collection 1 found
'HidParse.SYS: 'Top Level Collection 1 found
GDI: VerifierInitialization: failed to get info from ntoskrnl
(s: 0 0x184.188 smss.exe) USRK-[Wrn] *** win32k: DBCS:[0] IME:[0] MiddleEast:[0] CTFIME:[0]
Installed
Installed
GDI: DriverCapableOverride on \\.\DISPLAY1 is 0
GDI: DriverAccelerationLevel on \\.\DISPLAY1 is 5
GDI: DrvBuildDevmodeList: display driver not present
GDI: DrvBuildDevmodeList: display driver not present
Vga risc: Failed bInitializeModeFields
Vga risc: DrvEnablePDEV - Failed bInitializeModeFields
Vga risc: Failed DrvEnablePDEV
GDI: PDEVOBJ::PDEVOBJ: Device failed DrvEnablePDEV
FRAMEBUF: DrvEnablePDEV failed bInitPointer
GDI DDML: Device 0, position 0, 0, 1024, 768, rotation 0
(s: 0 0x1cc.1d0 winlogon.exe) USRK-[Wrn] Waiting for grpdeskRitInput to be set ...
(s: 0 0x1cc.1d0 winlogon.exe) USRK-[Wrn] RemoteDisconnect was issued during CreateDesktop("Winlogon"...
USERENV(1cc.1d0) 11:25:32:812 CUserProfile::CleanupUserProfile: Ref Count is not 0
USERENV(1cc.1d0) 11:25:32:843 CUserProfile::CleanupUserProfile: Ref Count is not 0
USERENV(1cc.1d0) 11:25:32:859 CUserProfile::CleanupUserProfile: Ref Count is not 0
[SC] 1fc: ScReadErrorControl: ScRegQueryValueExW of ErrorControl failed 2, BytesRequired 4
[SC] 1fc: Ignored dac2w2k. No ErrorControl
[SC] 1fc: ScReadStartType: ScRegQueryValueExW of Start failed 2, BytesRequired 4
[SC] 1fc: Ignored sacdrv. No StartType
[NETLOGON] Cannot write to log file - file not open
516.520> SPM-Error: EfsServerInit - EFS Init Recovery Policy failed 0x2
rpcss is running.
[SC] 1fc: PNP_SetActiveService failed 0x25 for service Eventlog
TERMSRV : Not Personal Workstation
[ELF] 310: SetUpModules: Module Application exists in two log files.
[ELF] 310: SetUpModules: Module Security exists in two log files.
[ELF] 310: SetUpModules: Module System exists in two log files.
[SC] 1fc: PNP_SetActiveService failed 0x25 for service PlugPlay
[MSV1_0.dll] [CRITICAL] SpAcceptCredentials: Collision from NlpFindActiveLogon for 0:0x3e4
Fail to read system\currentcontrolset\services\Lmhosts\Parameters\EnableDebug, error=2
GetWinStationUserToken: Error 1008 getting UserToken LogonId 0
AudioSrv: pid=972
WIARPC:Exception 0x6ba calling WIA RPC server
460.1144> AUTOENRL: RegisterAutoEnrollmentProcessing exiting with error: (0x80004004)
00000:Ageint(1):Couldn't turn CSC ON!!!!!!!!!
WINMM(p460:t464): ClientUpdatePnpInfo: warning: called in winlogon before logged on
WINMM(p460:t476): ClientUpdatePnpInfo: warning: called in winlogon before logged on
WINMM(p460:t464): ClientUpdatePnpInfo: warning: called in winlogon before logged on
WINMM(p460:t464): ClientUpdatePnpInfo: warning: called in winlogon before logged on
WINMM(p460:t476): ClientUpdatePnpInfo: warning: called in winlogon before logged on
WINMM(p460:t464): ClientUpdatePnpInfo: warning: called in winlogon before logged on
WINMM(p460:t476): ClientUpdatePnpInfo: warning: called in winlogon before logged on
WINMM(p460:t464): ClientUpdatePnpInfo: warning: called in winlogon before logged on
WINMM(p460:t476): ClientUpdatePnpInfo: warning: called in winlogon before logged on
00000:Ageint(1):Couldn't turn CSC ON!!!!!!!!!
WINMM(p460:t464): ClientUpdatePnpInfo: warning: called in winlogon before logged on
WINMM(p460:t476): ClientUpdatePnpInfo: warning: called in winlogon before logged on
[MSV1_0.dll] [CRITICAL] SpAcceptCredentials: Collision from NlpFindActiveLogon for 0:0x3e4
WINMM(p460:t464): ClientUpdatePnpInfo: warning: called in winlogon before logged on
WINMM(p460:t476): ClientUpdatePnpInfo: warning: called in winlogon before logged on
WINMM(p460:t464): ClientUpdatePnpInfo: warning: called in winlogon before logged on
WINMM(p460:t476): ClientUpdatePnpInfo: warning: called in winlogon before logged on
[SENS] RegQueryValueEx(SENS_DEBUG_LEVEL) failed with 0x2
WINMM(p460:t464): ClientUpdatePnpInfo: warning: called in winlogon before logged on
WINMM(p460:t476): ClientUpdatePnpInfo: warning: called in winlogon before logged on
[SENS] [-3557734] Started successfully.
638: WORK_QUEUE: worker thread started...now 1 threads in pool
63c: WORK_QUEUE: worker thread started...now 2 threads in pool
AutoAdminLogon = 0, IgnoreAutoAdminLogon = 0, bAutoLogon = 0
516.628> Kerb-Error: LogonUser returned c000005e, 0
(s: 0 0x1cc.1d0 winlogon.exe) USER-[Wrn=1400] HMValidateHandle: Invalid:00000000 Type:0x1
RegSAMUserConfig: SamQueryInformationUser returned NTSTATUS = 0x0
RegSAMUserConfig: UserParmInfo 0
UsrPropQueryUserConfig: UsrPropGetValue returned NTSTATUS = 0xc0000034
RegSAMUserConfig: RegGetUserConfigFromUserParameters returned NTSTATUS = 0xc0000034
RegSAMUserConfig: SamQueryInformationUser returned NTSTATUS = 0x0
RegSAMUserConfig: UserParmInfo 0
UsrPropQueryUserConfig: UsrPropGetValue returned NTSTATUS = 0xc0000034
RegSAMUserConfig: RegGetUserConfigFromUserParameters returned NTSTATUS = 0xc0000034
W32WinStationDoConnect - Display resolution information for session 0 :
ProtocolType : 0000
HRes : 0000
VRes : 0000
ColorDepth : 0000
KeyboardType : 412
KeyboardSubType : 128
KeyboardFunctionKey : 6225420
TermSrv : HelpAssistant protocol type not RDP
TermSrv : HelpAssistant protocol type not RDP
AudioSrv: CUser::Initialize : error: WTSQueryUserToken returned error=1245
460.1636> AUTOENRL: RegisterAutoEnrollmentProcessing exiting with error: (0x80004004)
[Wlballoon] - Info: Logoff event name = Local\WlballoonLogoffNotification.
AudioSrv: note: new console user SID S-1-5-21-627781131-2180906709-4154875691-500
WINMM(p460:t1684): Session state changed: CONSOLE
(s: 0 0x6d8.6e8 Explorer.EXE) USER-[Wrn=1400] HMValidateHandle: Invalid:00000000 Type:0x1
(s: 0 0x6d8.6e8 Explorer.EXE) USER-[Wrn=1400] HMValidateHandle: Invalid:00000000 Type:0x1
(s: 0 0x6d8.6e8 Explorer.EXE) USER-[Wrn=1400] HMValidateHandle: Invalid:00000000 Type:0x1
(s: 0 0x6d8.6e8 Explorer.EXE) USER-[Wrn=1400] HMValidateHandle: Invalid:00000000 Type:0x1
(s: 0 0x6d8.6e8 Explorer.EXE) USER-[Wrn=1400] HMValidateHandle: Invalid:00000000 Type:0x1
(s: 0 0x6d8.6e8 explorer.exe) USRK-[Wrn] ZOrderByOwner: Topmost change while using SWP_NOOWNERZORDER. pwndRoot:BC674CBC pwndOriginal:BC674CBC
(s: 0 0x6d8.6e8 Explorer.EXE) USER-[Wrn=1400] HMValidateHandle: Invalid:00000000 Type:0x1
(s: 0 0x6d8.6e8 Explorer.EXE) USER-[Wrn=1400] HMValidateHandle: Invalid:00000000 Type:0x1
MSXML !Trace: IMAGEHLP.DLL version mismatch (9 vs 6-8 (Header version: 9).
MSHTML: Processing system change 26
MSHTML: Processing system change 26
688.1540p> Cairole: StartService ImapiService failed, error = 0x422
NETCFG *ERROR*: Error sending IPNATHLP_CONTROL_UPDATE_POLICY to SharedAccess service [The service has not been started.] Win32=1062,0x00000426 hr=0x80070426 File:d:\srv03rtm\net
\config\netman\conman\gpnla.cpp,1198
(s: 0 0x730.734 mshta.exe) USER-[Wrn=1400] HMValidateHandle: Invalid:00000000 Type:0x1
(s: 0 0x730.734 mshta.exe) USER-[Wrn=1400] HMValidateHandle: Invalid:00000000 Type:0x1
(s: 0 0x730.734 mshta.exe) USER-[Wrn=1400] HMValidateHandle: Invalid:00000000 Type:0x1
(s: 0 0x730.734 mshta.exe) USER-[Wrn=1400] HMValidateHandle: Invalid:00000000 Type:0x1
(s: 0 0x730.734 mshta.exe) USER-[Wrn=1400] HMValidateHandle: Invalid:00000000 Type:0x1
(s: 0 0x730.734 mshta.exe) USER-[Wrn=1400] HMValidateHandle: Invalid:00000000 Type:0x1
(s: 0 0x730.734 mshta.exe) USRK-[Wrn=1402] HMValidateHandle: Invalid:00000000 Type:0x3
(s: 0 0x730.734 mshta.exe) MSIMTF Assert mem.cpp, line 176: (0)
MSXML !Memory: objects left after pointer cache 0
MSXML !Memory: # of objects: 0
MSXML !Memory: added: 575 removed 575
MSXML !Debug: 0+0 leaks (plus 0+0 expected), total size 0, peak size 432380
Direct3D8: (ERROR) :Memory still allocated! Alloc count = 1
Direct3D8: (ERROR) :Current Process (pid) = 00000730
Direct3D8: (ERROR) :Memory Address: 019e0d44 lAllocID=18 dwSize=00000024, ReturnAddr=7270759d (pid=00000730)
Direct3D8: (ERROR) :Total Memory Unfreed From Current Process = 36 bytes
(s: 0 0x728.72c MSConfig.exe) USER-[Wrn=1400] HMValidateHandle: Invalid:00000000 Type:0x1
(s: 0 0x728.72c msconfig.exe) USRK-[Wrn=1400] ValidateHwnd: Invalid hwnd (00000000)
err comctlv6 Cannot combine TVS_HASLINES and TVS_FULLROWSELECT
err comctlv6 Cannot combine TVS_HASLINES and TVS_FULLROWSELECT
NLSAPI: Could NOT Open HKEY_CURRENT_USER - c00000a5.
NLSAPI: Could NOT Open HKEY_CURRENT_USER - c00000a5.
NLSAPI: Could NOT Open HKEY_CURRENT_USER - c00000a5.
NLSAPI: Could NOT Open HKEY_CURRENT_USER - c00000a5.
(s: 0 0x6d8.1e8 Explorer.EXE) USER-[Wrn=1400] HMValidateHandle: Invalid:0X000200F6 Type:0x1
(s: 0 0x6d8.6e8 explorer.exe) USRK-[Wrn] ZOrderByOwner: Topmost change while using SWP_NOOWNERZORDER. pwndRoot:BC677624 pwndOriginal:BC677624
(s: 0 0x6d8.6e8 explorer.exe) USRK-[Wrn] ZOrderByOwner: Topmost change while using SWP_NOOWNERZORDER. pwndRoot:BC674CBC pwndOriginal:BC674CBC
(s: 0 0x6d8.6e8 explorer.exe) USRK-[Wrn] ZOrderByOwner: Topmost change while using SWP_NOOWNERZORDER. pwndRoot:BC674CBC pwndOriginal:BC674CBC
(s: 0 0x6d8.6e8 explorer.exe) USRK-[Wrn] ZOrderByOwner: Topmost change while using SWP_NOOWNERZORDER. pwndRoot:BC674CBC pwndOriginal:BC674CBC
(s: 0 0x6d8.6e8 explorer.exe) USRK-[Wrn] ZOrderByOwner: Topmost change while using SWP_NOOWNERZORDER. pwndRoot:BC674CBC pwndOriginal:BC674CBC
63c: WORK_QUEUE: no work for 180000 ms: committing suicide...
63c: WORK_QUEUE: worker thread exiting
(s: 0 0x6d8.6e8 explorer.exe) USRK-[Wrn] ZOrderByOwner: Topmost change while using SWP_NOOWNERZORDER. pwndRoot:BC674CBC pwndOriginal:BC674CBC
(s: 0 0x6d8.700 explorer.exe) USRK-[Wrn] ValidateWindowPos: pwndInsertAfter->spwndNext is SWPTopMost. pwnd:0XBC676504. pwndInsertAfter:0XBC671584
(s: 0 0x6d8.ec explorer.exe) USRK-[Wrn] ValidateWindowPos: pwndInsertAfter->spwndNext is SWPTopMost. pwnd:0XBC6833A4. pwndInsertAfter:0XBC671584
(s: 0 0x6d8.6dc Explorer.EXE) USER-[Wrn=1400] HMValidateHandle: Invalid:0X0001006E Type:0x1
(s: 0 0x6d8.6e8 Explorer.EXE) USER-[Wrn=1400] HMValidateHandle: Invalid:0X00010062 Type:0x1
(s: 0 0x6d8.6e8 explorer.exe) USRK-[Wrn=1400] ValidateHwnd: Invalid hwnd (0X00010062)
(s: 0 0x6d8.6e8 explorer.exe) USRK-[Wrn=1413] SetWindowLongPtr: Index 0 too big for cbWndExtra 0 on pwnd 0XBC678E34
(s: 0 0x6d8.6e8 explorer.exe) USRK-[Wrn=1400] ValidateHwnd: Invalid hwnd (0X00030042)
(s: 0 0x6d8.6e8 Explorer.EXE) USER-[Wrn=1400] HMValidateHandle: Invalid:0X00030040 Type:0x1
(s: 0 0x6d8.6e8 Explorer.EXE) USER-[Wrn=1400] HMValidateHandle: Invalid:00000000 Type:0x1
(s: 0 0x6d8.6e8 Explorer.EXE) USER-[Wrn=1400] HMValidateHandle: Invalid:00000000 Type:0x1
NETCFG *ERROR*: HrCreateInstanceBase [An outgoing call cannot be made since the application is dispatching an input-synchronous call.] hr=0x8001010D File:d:\srv03rtm\net\config\common
\ncbase\ncbase.cpp,762
NETCFG *ERROR*: HrCreateInstance(CLSID_ConnectionManager) for IConnectionPointContainer [An outgoing call cannot be made since the application is dispatching an input-synchronous call.]
hr=0x8001010D File:d:\srv03rtm\net\config\shell\folder\notify.cpp,760:
NETCFG *ERROR*: HrGetNotifyConPoint [An outgoing call cannot be made since the application is dispatching an input-synchronous call.] hr=0x8001010D File:d:\srv03rtm\net\config\shell\folder
\notify.cpp,785:
NETCFG *ERROR*: EnsureConPointNotifyRemoved [An outgoing call cannot be made since the application is dispatching an input-synchronous call.] hr=0x8001010D File:d:\srv03rtm\net\config
\shell\folder\connlist.cpp,1293:
1752.236p> Cairole: Object [SERVER] at 0x000F6758 still has [3] connections
1752.236p> Cairole: Interfaces left on object (0xf67f4) are:
1752.236p> Cairole: IUnknown ipid:{0000EC06-06D8-00EC-AED7-C58B207801F3}, cStrongRefs:5, cWeakRefs:0
1752.236p> Cairole: INetConnectionNotifySink ipid:{0000E007-06D8-00EC-A9F6-E02C22EA9BF0}, cStrongRefs:5, cWeakRefs:0
1752.236p> Cairole: The above object also has outstanding references on it
Probable cause: Not revoking it from GIP Table
(s: 0 0x6d8.6e8 explorer.exe) USRK-[Wrn=1400] ValidateHwnd: Invalid hwnd (0X0003003E)
(s: 0 0x6d8.6e8 explorer.exe) USRK-[Wrn=1400] ValidateHwnd: Invalid hwnd (0X0003003C)
t comctlv6 warning: orphan subclass: fn 7746D939, id 0043484E, dw 000C9F10
(s: 0 0x6d8.6e8 explorer.exe) USRK-[Wrn] ValidateAliveHandle: Object phe 0XBC510460 is destroyed. Handle: 0X00020046
[SENSLOGN] RegOpenKeyEx(AUTOSYNC) failed with 0x2
NETCFG *ERROR*: pSink call failed: [The remote procedure call failed and did not execute.] Win32=1727,0x000006BF hr=0x800706BF File:d:\srv03rtm\net\config\netman\conman\conman.cpp,661
NETCFG *ERROR*: Dead client detected. Removing notify advise for: NTDEV-QQTQSNLDX\Administrator
TERMSRV: WinStationNotifyLogoff, LogonId=0
TERMSRV: WinStationNotifyLogoff, Setting ConsoleLogoffEvent
00000:Waiting 1 second for agent to shutdown
(s: 0 0x1cc.484 winlogon.exe) USRK-[Wrn=1411] UnregisterClass: Class does not exist; atom=0
TERMSRV: AuditEvent: AuthziInitializeAuditEventType failed with 87
LPC[ 3cc.3e8 ]: Refusing connection from 3cc.3d0
LPC[ 4b8.4dc ]: Refusing connection from 4b8.4c4
REMINDER: The heap at 0x6f84dd8c is a 'DEBUG_HEAP'.
REMINDER: All allocations are inflated by 40 bytes.
[SC] 284: Service process 1180 (C:\WINDOWS\system32\spoolsv.exe) died
[SC] 284: Dead process contained Spooler service in state 0x3
65c: WORK_QUEUE: worker thread started...now 2 threads in pool
LSA AU: DeRregisterLogonProcess Failed 0xc00002fe
LSA AU: DeRregisterLogonProcess Failed 0xc00002fe
Waiting for all contexts to be flushed
RDBSS -- Close after StopRDBSS: Irp(896e5100) MJ 18 MN 0 FileObject(894ba8f8) FCB(ba9e1700)
RDBSS -- Close after StopRDBSS: Irp(896e5100) MJ 2 MN 0 FileObject(894ba8f8) FCB(ba9e1700)
LSA AU: DeRregisterLogonProcess Failed 0xc00002fe
TERMSRV: Start reset of last WinStation
TERMSRV: Last WinStation reset
Shutdown occurred at (Sat Sep 14 11:29:57.705 2024 (UTC + 8:00))...unloading all symbol tables.
Waiting to reconnect...
