阅读332 返回首页    go iPhone_iPad_Mac_apple

【蓝屏求助】windows7系统调用IIS的进程w3wp.exe时出现蓝屏，用windbg查看&#

<p>搜索不到有关于RTDwddsm.SYS的信息，请问这是个什么驱动？下面是分析结果

BugCheck 50, {fffffa8026a0e000, 0, fffff8800602163a, 0}

Unable to load image RTDwddsm.SYS, Win32 error 0n2
*** WARNING: Unable to verify timestamp for RTDwddsm.SYS
*** ERROR: Module load completed but symbols could not be loaded for RTDwddsm.SYS

Could not read faulting driver name


Probably caused by : RTDwddsm.SYS ( RTDwddsm+163a )

Followup: MachineOwner
---------

0: kd> !analyze -v
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

PAGE_FAULT_IN_NONPAGED_AREA (50)
Invalid system memory was referenced.  This cannot be protected by try-except,
it must be protected by a Probe.  Typically the address is just plain bad or it
is pointing at freed memory.
Arguments:
Arg1: fffffa8026a0e000, memory referenced.
Arg2: 0000000000000000, value 0 = read operation, 1 = write operation.
Arg3: fffff8800602163a, If non-zero, the instruction address which referenced the bad memory
address.
Arg4: 0000000000000000, (reserved)

Debugging Details:
------------------


Could not read faulting driver name



READ_ADDRESS: GetPointerFromAddress: unable to read from fffff800046c1100
 fffffa8026a0e000 

FAULTING_IP: 
RTDwddsm+163a
fffff880`0602163a 478a0c23        mov     r9b,byte ptr [r11+r12]

MM_INTERNAL_CODE:  0

CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT

BUGCHECK_STR:  0x50

PROCESS_NAME:  w3wp.exe

CURRENT_IRQL:  0

TRAP_FRAME:  fffff88014c86be0 -- (.trap 0xfffff88014c86be0)
NOTE: The trap frame does not contain all registers.
Some register values may be zeroed or incorrect.
rax=00000000ffffffee rbx=0000000000000001 rcx=000000000000002f
rdx=0000000000000001 rsi=fffff8a000001701 rdi=fffff88014c86d58
rip=fffff8800602163a rsp=fffff88014c86d70 rbp=0000000000005628
 r8=fffffa8013d2dc20  r9=ffffffffffffff00 r10=0000000000000001
r11=0000000000005628 r12=0000000000000000 r13=0000000000000000
r14=0000000000000000 r15=0000000000000000
iopl=0         nv up ei ng nz na pe nc
RTDwddsm+0x163a:
fffff880`0602163a 478a0c23        mov     r9b,byte ptr [r11+r12] ds:00000000`00005628=??
Resetting default scope

LAST_CONTROL_TRANSFER:  from fffff8000450246e to fffff80004484440

STACK_TEXT:  
fffff880`14c86a78 fffff800`0450246e : 00000000`00000050 fffffa80`26a0e000 00000000`00000000 fffff880`14c86be0 : nt!KeBugCheckEx
fffff880`14c86a80 fffff800`0448256e : 00000000`00000000 fffffa80`26a0e000 00000000`00000000 00000000`0000001c : nt! ?? ::FNODOBFM::`string'+0x3bc5f
fffff880`14c86be0 fffff880`0602163a : 00000000`00006f0c fffff880`00000002 fffffa80`26a089d8 00000000`00006f0c : nt!KiPageFault+0x16e
fffff880`14c86d70 00000000`00006f0c : fffff880`00000002 fffffa80`26a089d8 00000000`00006f0c 00000000`ffffffff : RTDwddsm+0x163a
fffff880`14c86d78 fffff880`00000002 : fffffa80`26a089d8 00000000`00006f0c 00000000`ffffffff fffffa80`26a089d8 : 0x6f0c
fffff880`14c86d80 fffffa80`26a089d8 : 00000000`00006f0c 00000000`ffffffff fffffa80`26a089d8 fffffa80`13d2dc10 : 0xfffff880`00000002
fffff880`14c86d88 00000000`00006f0c : 00000000`ffffffff fffffa80`26a089d8 fffffa80`13d2dc10 fffffa80`10c4ba50 : 0xfffffa80`26a089d8
fffff880`14c86d90 00000000`ffffffff : fffffa80`26a089d8 fffffa80`13d2dc10 fffffa80`10c4ba50 00000000`00000000 : 0x6f0c
fffff880`14c86d98 fffffa80`26a089d8 : fffffa80`13d2dc10 fffffa80`10c4ba50 00000000`00000000 fffff880`06025ffa : 0xffffffff
fffff880`14c86da0 fffffa80`13d2dc10 : fffffa80`10c4ba50 00000000`00000000 fffff880`06025ffa fffff880`00000001 : 0xfffffa80`26a089d8
fffff880`14c86da8 fffffa80`10c4ba50 : 00000000`00000000 fffff880`06025ffa fffff880`00000001 00000000`00000000 : 0xfffffa80`13d2dc10
fffff880`14c86db0 00000000`00000000 : fffff880`06025ffa fffff880`00000001 00000000`00000000 fffff8a0`058355c0 : 0xfffffa80`10c4ba50
fffff880`14c86db8 fffff880`06025ffa : fffff880`00000001 00000000`00000000 fffff8a0`058355c0 00000000`0000364f : 0x0
fffff880`14c86dc0 fffff880`00000001 : 00000000`00000000 fffff8a0`058355c0 00000000`0000364f fffff8a0`05835800 : RTDwddsm+0x5ffa
fffff880`14c86dc8 00000000`00000000 : fffff8a0`058355c0 00000000`0000364f fffff8a0`05835800 00000000`00000801 : 0xfffff880`00000001
fffff880`14c86dd0 fffff8a0`058355c0 : 00000000`0000364f fffff8a0`05835800 00000000`00000801 fffff880`14c86fc0 : 0x0
fffff880`14c86dd8 00000000`0000364f : fffff8a0`05835800 00000000`00000801 fffff880`14c86fc0 4d784b5f`14c86fc0 : 0xfffff8a0`058355c0
fffff880`14c86de0 fffff8a0`05835800 : 00000000`00000801 fffff880`14c86fc0 4d784b5f`14c86fc0 fffffa80`26a089d8 : 0x364f
fffff880`14c86de8 00000000`00000801 : fffff880`14c86fc0 4d784b5f`14c86fc0 fffffa80`26a089d8 fffffa80`15e416e8 : 0xfffff8a0`05835800
fffff880`14c86df0 fffff880`14c86fc0 : 4d784b5f`14c86fc0 fffffa80`26a089d8 fffffa80`15e416e8 fffffa80`12926840 : 0x801
fffff880`14c86df8 4d784b5f`14c86fc0 : fffffa80`26a089d8 fffffa80`15e416e8 fffffa80`12926840 fffff880`06521e40 : 0xfffff880`14c86fc0
fffff880`14c86e00 fffffa80`26a089d8 : fffffa80`15e416e8 fffffa80`12926840 fffff880`06521e40 00000000`00000000 : 0x4d784b5f`14c86fc0
fffff880`14c86e08 fffffa80`15e416e8 : fffffa80`12926840 fffff880`06521e40 00000000`00000000 fffffa80`15e41580 : 0xfffffa80`26a089d8
fffff880`14c86e10 fffffa80`12926840 : fffff880`06521e40 00000000`00000000 fffffa80`15e41580 00000000`00000000 : 0xfffffa80`15e416e8
fffff880`14c86e18 fffff880`06521e40 : 00000000`00000000 fffffa80`15e41580 00000000`00000000 fffff880`060295a3 : 0xfffffa80`12926840
fffff880`14c86e20 00000000`00000000 : fffffa80`15e41580 00000000`00000000 fffff880`060295a3 fffffa80`10c4ba50 : RTDwddsm+0x501e40
fffff880`14c86e28 fffffa80`15e41580 : 00000000`00000000 fffff880`060295a3 fffffa80`10c4ba50 fffffa80`10c4ba50 : 0x0
fffff880`14c86e30 00000000`00000000 : fffff880`060295a3 fffffa80`10c4ba50 fffffa80`10c4ba50 fffff880`06c01ca0 : 0xfffffa80`15e41580
fffff880`14c86e38 fffff880`060295a3 : fffffa80`10c4ba50 fffffa80`10c4ba50 fffff880`06c01ca0 fffff880`14c86e80 : 0x0
fffff880`14c86e40 fffffa80`10c4ba50 : fffffa80`10c4ba50 fffff880`06c01ca0 fffff880`14c86e80 00000000`00000009 : RTDwddsm+0x95a3
fffff880`14c86e48 fffffa80`10c4ba50 : fffff880`06c01ca0 fffff880`14c86e80 00000000`00000009 fffffa80`15e41580 : 0xfffffa80`10c4ba50
fffff880`14c86e50 fffff880`06c01c9f : fffff880`14c86e80 00000000`00000009 fffffa80`15e41580 fffffa80`13801120 : 0xfffffa80`10c4ba50
fffff880`14c86e58 00000000`00000000 : fffff880`06521f08 00000000`00000000 fffff880`06028d7a fffffa80`26a01010 : HTTP!UxTpCleanupTransmitQueue+0x10f


STACK_COMMAND:  kb

FOLLOWUP_IP: 
RTDwddsm+163a
fffff880`0602163a 478a0c23        mov     r9b,byte ptr [r11+r12]

SYMBOL_STACK_INDEX:  3

SYMBOL_NAME:  RTDwddsm+163a

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: RTDwddsm

IMAGE_NAME:  RTDwddsm.SYS

DEBUG_FLR_IMAGE_TIMESTAMP:  58ec9484

FAILURE_BUCKET_ID:  X64_0x50_RTDwddsm+163a

BUCKET_ID:  X64_0x50_RTDwddsm+163a

Followup: MachineOwner
---------

0: kd> lmvm RTDwddsm
start             end                 module name
fffff880`06020000 fffff880`067f1000   RTDwddsm T (no symbols)           
    Loaded symbol image file: RTDwddsm.SYS
    Image path: RTDwddsm.SYS
    Image name: RTDwddsm.SYS
    Timestamp:        Tue Apr 11 16:32:04 2017 (58EC9484)
    CheckSum:         001CA0FD
    ImageSize:        007D1000
    Translations:     0000.04b0 0000.04e0 0409.04b0 0409.04e0

最后更新：2017-05-18 10:41:15

  上一篇：go 关闭139，445端口
  下一篇：go surface pro在使用时“输入个性化服务器”进程CPU占用率过高