阅读645 返回首页    go 阿里云 go 技术社区[云栖]


WIN10蓝屏问题(dmp日志及错误代码列出)

(1)错误代码:0x000000f7 (0x0000f64646b26474, 0x0000f64e46b26474, 0xffff09b1b94d9b8b, 0x0000000000000000)

(2)背景:两天前在Lenovo维修站更换过主板,加的8G内存条亦是联想原装新内存条,应该不会是兼容性问题

(3)日志文件:

Microsoft (R) Windows Debugger Version 6.12.0002.633 X86
Copyright (c) Microsoft Corporation. All rights reserved.


Loading Dump File [C:\Windows\Minidump\082917-11593-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available

DbsSplayTreeRangeMap::Add: ignoring zero-sized range at ?ffffac56`2b15a050?
Symbol search path is: *** Invalid ***
****************************************************************************
* Symbol loading may be unreliable without a symbol search path.           *
* Use .symfix to have the debugger choose a symbol path.                   *
* After setting your symbol path, use .reload to refresh symbol locations. *
****************************************************************************
Executable search path is: 
*********************************************************************
* Symbols can not be loaded because symbol path is not initialized. *
*                                                                   *
* The Symbol Path can be set by:                                    *
*   using the _NT_SYMBOL_PATH environment variable.                 *
*   using the -y <symbol_path> argument when starting the debugger. *
*   using .sympath and .sympath+                                    *
*********************************************************************
Unable to load image ntoskrnl.exe, Win32 error 0n2
*** WARNING: Unable to verify timestamp for ntoskrnl.exe
*** ERROR: Module load completed but symbols could not be loaded for ntoskrnl.exe
Debugger can not determine kernel base address
Windows 7 Kernel Version 15063 MP (4 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS
Machine Name:
Kernel base = 0xfffff800`31884000 PsLoadedModuleList = 0xfffff800`31bd05c0
Debug session time: Tue Aug 29 17:27:16.109 2017 (UTC + 8:00)
System Uptime: 1 days 13:44:59.907
*********************************************************************
* Symbols can not be loaded because symbol path is not initialized. *
*                                                                   *
* The Symbol Path can be set by:                                    *
*   using the _NT_SYMBOL_PATH environment variable.                 *
*   using the -y <symbol_path> argument when starting the debugger. *
*   using .sympath and .sympath+                                    *
*********************************************************************
Unable to load image ntoskrnl.exe, Win32 error 0n2
*** WARNING: Unable to verify timestamp for ntoskrnl.exe
*** ERROR: Module load completed but symbols could not be loaded for ntoskrnl.exe
Debugger can not determine kernel base address
Loading Kernel Symbols
...............................................................
................................................................
................................................................
......................
Loading User Symbols
Loading unloaded module list
..................................................
Cannot read PEB32 from WOW64 TEB32 00009d69 - Win32 error 0n30
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck A, {ffffad0aca145491, 2, 0, fffff800318f575d}

*** WARNING: Unable to verify timestamp for mssmbios.sys
*** ERROR: Module load completed but symbols could not be loaded for mssmbios.sys
***** Kernel symbols are WRONG. Please fix symbols to do analysis.

*************************************************************************
***                                                                   ***
***                                                                   ***
***    Your debugger is not using the correct symbols                 ***
***                                                                   ***
***    In order for this command to work properly, your symbol path   ***
***    must point to .pdb files that have full type information.      ***
***                                                                   ***
***    Certain .pdb files (such as the public OS symbols) do not      ***
***    contain the required information.  Contact the group that      ***
***    provided you with these symbols if you need this command to    ***
***    work.                                                          ***
***                                                                   ***
***    Type referenced: nt!_KPRCB                                     ***
***                                                                   ***
*************************************************************************
*************************************************************************
***                                                                   ***
***                                                                   ***
***    Your debugger is not using the correct symbols                 ***
***                                                                   ***
***    In order for this command to work properly, your symbol path   ***
***    must point to .pdb files that have full type information.      ***
***                                                                   ***
***    Certain .pdb files (such as the public OS symbols) do not      ***
***    contain the required information.  Contact the group that      ***
***    provided you with these symbols if you need this command to    ***
***    work.                                                          ***
***                                                                   ***
***    Type referenced: nt!_KPRCB                                     ***
***                                                                   ***
*************************************************************************
*************************************************************************
***                                                                   ***
***                                                                   ***
***    Your debugger is not using the correct symbols                 ***
***                                                                   ***
***    In order for this command to work properly, your symbol path   ***
***    must point to .pdb files that have full type information.      ***
***                                                                   ***
***    Certain .pdb files (such as the public OS symbols) do not      ***
***    contain the required information.  Contact the group that      ***
***    provided you with these symbols if you need this command to    ***
***    work.                                                          ***
***                                                                   ***
***    Type referenced: nt!_KPRCB                                     ***
***                                                                   ***
*************************************************************************
Probably caused by : hardware_ram ( PAGE_NOT_ZERO )

Followup: MachineOwner
---------

 *** Memory manager detected 40297 instance(s) of page corruption, target is likely to have memory corruption.

(4)显示可能是内存问题

进一步输入!analyze -v 显示分析:


ADDITIONAL_DEBUG_TEXT:  
Use '!findthebuild' command to search for the target build information.
If the build information is available, run '!findthebuild -s ; .reload' to set symbol path and load symbols.

FAULTING_MODULE: fffff80031884000 nt

DEBUG_FLR_IMAGE_TIMESTAMP:  0

READ_ADDRESS: unable to get nt!MmSpecialPoolStart
unable to get nt!MmSpecialPoolEnd
unable to get nt!MmPoolCodeStart
unable to get nt!MmPoolCodeEnd
 ffffad0aca145491 

CURRENT_IRQL:  0

FAULTING_IP: 
nt+7175d
fffff800`318f575d 0fb64311        movzx   eax,byte ptr [rbx+11h]

CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT

BUGCHECK_STR:  0xA

BAD_PAGES_DETECTED: 9d69

LAST_CONTROL_TRANSFER:  from fffff800319fb8a9 to fffff800319f0560

STACK_TEXT:  
ffffc200`ec67c698 fffff800`319fb8a9 : 00000008`0000000a ffffad0a`ca145491 00000000`00000002 00000000`00000000 : nt+0x16c560
ffffc200`ec67c6a0 00000008`0000000a : ffffad0a`ca145491 00000000`00000002 00000000`00000000 fffff800`318f575d : nt+0x1778a9
ffffc200`ec67c6a8 ffffad0a`ca145491 : 00000000`00000002 00000000`00000000 fffff800`318f575d 00000000`0000000f : 0x8`0000000a
ffffc200`ec67c6b0 00000000`00000002 : 00000000`00000000 fffff800`318f575d 00000000`0000000f 00000000`00000000 : 0xffffad0a`ca145491
ffffc200`ec67c6b8 00000000`00000000 : fffff800`318f575d 00000000`0000000f 00000000`00000000 00000000`00000000 : 0x2


STACK_COMMAND:  kb

SYMBOL_NAME:  PAGE_NOT_ZERO

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: hardware

IMAGE_NAME:  hardware_ram

BUCKET_ID:  WRONG_SYMBOLS

Followup: MachineOwner
---------




最后更新:2017-08-29 21:02:51

  上一篇:go windows10 1607 14393 会出现睡死现象
  下一篇:go win10突然黑屏主机仍在运行