ok, miré el volcado y la función chkimg muestra algunos errores. Los archivos descargados del servidor de símbolos no coinciden con las DLL que forman parte del volcado en partes pequeñas.
0:119> !chkimg -lo 50 -d !ntdll -v
Searching for module with expression: !ntdll
Will apply relocation fixups to file used for comparison
Will ignore NOP/LOCK errors
Will ignore patched instructions
Image specific ignores will be applied
Comparison image path: D:\sym\dl\nt\ntdll.dll\56540C3B1c1000\ntdll.dll
No range specified
Scanning section: .text
Size: 1024297
Range to scan: 7fff32851000-7fff3294b129
Total bytes compared: 1024297(100%)
Number of errors: 0
Scanning section: PAGE
Size: 224
Range to scan: 7fff3294c000-7fff3294c0e0
Total bytes compared: 224(100%)
Number of errors: 0
Scanning section: RT
Size: 485
Range to scan: 7fff3294d000-7fff3294d1e5
Total bytes compared: 485(100%)
Number of errors: 0
Scanning section: .rdata
Size: 264200
Range to scan: 7fff3294e000-7fff3298e808
7fff3294e001-7fff3294e002 2 bytes - ntdll!_guard_dispatch_icall_fptr+1
[ 85 8f:51 8e ]
Total bytes compared: 264200(100%)
Number of errors: 2
Scanning section: .pdata
Size: 51168
Range to scan: 7fff32998000-7fff329a47e0
Total bytes compared: 51168(100%)
Number of errors: 0
Scanning section: .rsrc
Size: 418328
Range to scan: 7fff329a9000-7fff32a0f218
Total bytes compared: 418328(100%)
Number of errors: 0
2 errors : !ntdll (7fff3294e001-7fff3294e002)
0:119> !chkimg -lo 50 -d !kernel32 -v
Searching for module with expression: !kernel32
Will apply relocation fixups to file used for comparison
Will ignore NOP/LOCK errors
Will ignore patched instructions
Image specific ignores will be applied
Comparison image path: D:\sym\dl\ke\kernel32.dll\5632D5AAad000\kernel32.dll
No range specified
Scanning section: .text
Size: 473881
Range to scan: 7fff31b11000-7fff31b84b19
Total bytes compared: 473881(100%)
Number of errors: 0
Scanning section: .rdata
Size: 189366
Range to scan: 7fff31b85000-7fff31bb33b6
7fff31b87770-7fff31b87773 4 bytes - kernel32!_guard_check_icall_fptr
[ a0 d0 b3 31:00 51 8e 32 ]
7fff31b87778-7fff31b8777b 4 bytes - kernel32!_guard_dispatch_icall_fptr (+0x08)
[ e0 e7 b3 31:50 51 8e 32 ]
Total bytes compared: 189366(100%)
Number of errors: 8
Scanning section: .pdata
Size: 22236
Range to scan: 7fff31bb5000-7fff31bba6dc
Total bytes compared: 22236(100%)
Number of errors: 0
Scanning section: .rsrc
Size: 1320
Range to scan: 7fff31bbb000-7fff31bbb528
Total bytes compared: 1320(100%)
Number of errors: 0
8 errors : !kernel32 (7fff31b87770-7fff31b8777b)
0:119> !chkimg -lo 50 -d !user32 -v
Searching for module with expression: !user32
Will apply relocation fixups to file used for comparison
Will ignore NOP/LOCK errors
Will ignore patched instructions
Image specific ignores will be applied
Comparison image path: D:\sym\dl\us\user32.dll\565423D2156000\user32.dll
No range specified
Scanning section: .text
Size: 584738
Range to scan: 7fff30451000-7fff304dfc22
Total bytes compared: 584738(100%)
Number of errors: 0
Scanning section: .rdata
Size: 99980
Range to scan: 7fff304e0000-7fff304f868c
7fff304e0d30-7fff304e0d33 4 bytes - user32!_guard_check_icall_fptr
[ 70 14 48 30:00 51 8e 32 ]
7fff304e0d38-7fff304e0d3b 4 bytes - user32!_guard_dispatch_icall_fptr (+0x08)
[ 30 ac 48 30:50 51 8e 32 ]
Total bytes compared: 99980(100%)
Number of errors: 8
Scanning section: .pdata
Size: 38928
Range to scan: 7fff304fb000-7fff30504810
Total bytes compared: 38928(100%)
Number of errors: 0
Scanning section: .rsrc
Size: 648128
Range to scan: 7fff30506000-7fff305a43c0
Total bytes compared: 648128(100%)
Number of errors: 0
8 errors : !user32 (7fff304e0d30-7fff304e0d3b)
Pruebe su RAM primero para detectar errores (memtest86 +) tal vez la RAM esté dañada y voltee algunos bits. Luego verifique su HDD ( chkdsk /f
), tal vez esto corrompe las DLL al leerlas y, si ambas no muestran problemas, ejecute sfc /scannow
y Dism /Online /Cleanup-Image /RestoreHealth
detecte si los archivos ya están dañados en el HDD por alguna razón.