阅读998 返回首页    go 微软 go windows

Windows10 频繁蓝屏。贴出MEMORY.dmp的信息

*********************************************************************
*** ERROR: Symbol file could not be found.  Defaulted to export symbols for ntkrnlmp.exe - 
Windows 8 Kernel Version 14393 MP (8 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 14393.0.amd64fre.rs1_release.160715-1616
Machine Name:
Kernel base = 0xfffff803`a7e8b000 PsLoadedModuleList = 0xfffff803`a8190060
Debug session time: Tue Aug 29 15:59:15.197 2017 (UTC + 8:00)
System Uptime: 1 days 1:57:56.974
*********************************************************************
* Symbols can not be loaded because symbol path is not initialized. *
*                                                                   *
* The Symbol Path can be set by:                                    *
*   using the _NT_SYMBOL_PATH environment variable.                 *
*   using the -y <symbol_path> argument when starting the debugger. *
*   using .sympath and .sympath+                                    *
*********************************************************************
*** ERROR: Symbol file could not be found.  Defaulted to export symbols for ntkrnlmp.exe - 
Loading Kernel Symbols
...............................................................
................................................................
................................................................
.....................
Loading User Symbols

Loading unloaded module list
.........................

************* Symbol Loading Error Summary **************
Module name            Error
ntkrnlmp               The system cannot find the file specified

You can troubleshoot most symbol related issues by turning on symbol loading diagnostics (!sym noisy) and repeating the command that caused symbols to be loaded.
You should also verify that your symbol search path (.sympath) is correct.
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck D1, {ffffd48c96400000, 2, 0, fffff80b9bd80bf4}

*** ERROR: Module load completed but symbols could not be loaded for SynTP.sys
*** ERROR: Module load completed but symbols could not be loaded for i8042prt.sys
***** Kernel symbols are WRONG. Please fix symbols to do analysis.

*************************************************************************
*************************************************************************
*************************************************************************
Probably caused by : SynTP.sys ( SynTP+90bf4 )

Followup: MachineOwner
---------

0: kd> !analyze -v
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

DRIVER_IRQL_NOT_LESS_OR_EQUAL (d1)
An attempt was made to access a pageable (or completely invalid) address at an
interrupt request level (IRQL) that is too high.  This is usually
caused by drivers using improper addresses.
If kernel debugger is available get stack backtrace.
Arguments:
Arg1: ffffd48c96400000, memory referenced
Arg2: 0000000000000002, IRQL
Arg3: 0000000000000000, value 0 = read operation, 1 = write operation
Arg4: fffff80b9bd80bf4, address which referenced memory

Debugging Details:
------------------

***** Kernel symbols are WRONG. Please fix symbols to do analysis.

*************************************************************************
*************************************************************************

ADDITIONAL_DEBUG_TEXT:  
You can run '.symfix; .reload' to try to fix the symbol path and load symbols.

MODULE_NAME: SynTP

FAULTING_MODULE: fffff803a7e8b000 nt

DEBUG_FLR_IMAGE_TIMESTAMP:  57b4d411

READ_ADDRESS: unable to get nt!MmSpecialPoolStart
unable to get nt!MmSpecialPoolEnd
unable to get nt!MmPagedPoolEnd
unable to get nt!MmNonPagedPoolStart
unable to get nt!MmSizeOfNonPagedPoolInBytes
 ffffd48c96400000 

CURRENT_IRQL:  0

FAULTING_IP: 
SynTP+90bf4
fffff80b`9bd80bf4 0fb75502        movzx   edx,word ptr [rbp+2]

DEFAULT_BUCKET_ID:  WIN8_DRIVER_FAULT

BUGCHECK_STR:  AV

ANALYSIS_VERSION: 6.3.9600.17336 (debuggers(dbg).150226-1500) amd64fre

LAST_CONTROL_TRANSFER:  from fffff803a7fe0129 to fffff803a7fd4f90

STACK_TEXT:  
fffff803`aa33e738 fffff803`a7fe0129 : 00000000`0000000a ffffd48c`96400000 00000000`00000002 00000000`00000000 : nt!KeBugCheckEx
fffff803`aa33e740 fffff803`a7fde707 : 00000000`00000000 fffff803`a7e18c40 fffff803`a7e8b000 00000000`000002fd : nt!setjmpex+0x3f69
fffff803`aa33e880 fffff80b`9bd80bf4 : ffffd48c`91e0dca8 ffffd48c`963ffff2 fffff80b`05925c6f fffff80b`9bd8183a : nt!setjmpex+0x2547
fffff803`aa33ea10 fffff80b`9bd810be : ffffd48c`91eba4bc fffff803`aa33eb60 00000000`003e95b4 ffffd48c`91e03048 : SynTP+0x90bf4
fffff803`aa33ea60 fffff80b`9d925b05 : ffffd48c`91d1b190 ffffd48c`91d14b30 fffff803`aa33f7a8 fffff803`a7eb1314 : SynTP+0x910be
fffff803`aa33f730 fffff803`a7ec3001 : fffff803`a81cd180 0000a13b`9659c500 00000000`00000000 fffff803`a81cd180 : i8042prt+0x5b05
fffff803`aa33f810 fffff803`a7ec23ff : ffffd48c`00000000 ffffd48c`9031e340 00000000`00140001 00000000`00000000 : nt!KeSetEvent+0x3191
fffff803`aa33f960 fffff803`a7fd801a : 00000000`00000000 fffff803`a81cd180 fffff803`a8248940 ffffd48c`996f3080 : nt!KeSetEvent+0x258f
fffff803`aa33fbe0 00000000`00000000 : fffff803`aa340000 fffff803`aa339000 00000000`00000000 00000000`00000000 : nt!KeSynchronizeExecution+0x219a


STACK_COMMAND:  kb

FOLLOWUP_IP: 
SynTP+90bf4
fffff80b`9bd80bf4 0fb75502        movzx   edx,word ptr [rbp+2]

SYMBOL_STACK_INDEX:  3

SYMBOL_NAME:  SynTP+90bf4

FOLLOWUP_NAME:  MachineOwner

IMAGE_NAME:  SynTP.sys

IMAGE_VERSION:  19.3.4.31

BUCKET_ID:  WRONG_SYMBOLS

FAILURE_BUCKET_ID:  WRONG_SYMBOLS

ANALYSIS_SOURCE:  KM

FAILURE_ID_HASH_STRING:  km:wrong_symbols

FAILURE_ID_HASH:  {70b057e8-2462-896f-28e7-ac72d4d365f8}

Followup: MachineOwner
---------

最后更新：2017-08-29 18:02:29

  上一篇：go win10锁屏的问题
  下一篇：go windows7 安装kb4015546 补丁报0x80240037错误