阅读479 返回首页    go 微软 go windows

win7 64位蓝屏,看不懂dump文件，请问这是什么原因引起的

Windows 7 Kernel Version 7601 (Service Pack 1) MP (4 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 7601.23807.amd64fre.win7sp1_ldr.170512-0600
Machine Name:
Kernel base = 0xfffff800`04212000 PsLoadedModuleList = 0xfffff800`04454750
Debug session time: Mon Aug 28 18:52:43.120 2017 (UTC + 8:00)
System Uptime: 2 days 5:37:05.625
Loading Kernel Symbols
...............................................................
................................................................
................................................
Loading User Symbols
Loading unloaded module list
..........................
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck 3B, {c0000005, fffff800042b68c1, fffff8800b62efa0, 0}

Probably caused by : memory_corruption ( nt!MiGetNextNode+15 )

Followup: MachineOwner
---------

0: kd> !analyze -v
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

SYSTEM_SERVICE_EXCEPTION (3b)
An exception happened while executing a system service routine.
Arguments:
Arg1: 00000000c0000005, Exception code that caused the bugcheck
Arg2: fffff800042b68c1, Address of the instruction which caused the bugcheck
Arg3: fffff8800b62efa0, Address of the context record for the exception that caused the bugcheck
Arg4: 0000000000000000, zero.

Debugging Details:
------------------


EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - 0x%08lx

FAULTING_IP: 
nt!MiGetNextNode+15
fffff800`042b68c1 48394808        cmp     qword ptr [rax+8],rcx

CONTEXT:  fffff8800b62efa0 -- (.cxr 0xfffff8800b62efa0)
rax=0000000000000000 rbx=fffffa800b44e670 rcx=fffffa800d7094b0
rdx=0000000006b38000 rsi=fffffa800bacb760 rdi=0000000000006b38
rip=fffff800042b68c1 rsp=fffff8800b62f978 rbp=fffff8800b62fb60
 r8=00000000fffdffff  r9=0000000000000011 r10=0000000000000001
r11=0000000000000000 r12=0000000005faeae0 r13=fffffa800bf2cb58
r14=000000000000128c r15=0000000000000000
iopl=0         nv up ei pl nz na po cy
cs=0010  ss=0018  ds=002b  es=002b  fs=0053  gs=002b             efl=00010207
nt!MiGetNextNode+0x15:
fffff800`042b68c1 48394808        cmp     qword ptr [rax+8],rcx ds:002b:00000000`00000008=????????????????
Resetting default scope

CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT

BUGCHECK_STR:  0x3B

PROCESS_NAME:  devenv.exe

CURRENT_IRQL:  0

LAST_CONTROL_TRANSFER:  from 0000000000000000 to fffff800042b68c1

STACK_TEXT:  
fffff880`0b62f978 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!MiGetNextNode+0x15


FOLLOWUP_IP: 
nt!MiGetNextNode+15
fffff800`042b68c1 48394808        cmp     qword ptr [rax+8],rcx

SYMBOL_STACK_INDEX:  0

SYMBOL_NAME:  nt!MiGetNextNode+15

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: nt

DEBUG_FLR_IMAGE_TIMESTAMP:  5915f59a

STACK_COMMAND:  .cxr 0xfffff8800b62efa0 ; kb

IMAGE_NAME:  memory_corruption

FAILURE_BUCKET_ID:  X64_0x3B_nt!MiGetNextNode+15

BUCKET_ID:  X64_0x3B_nt!MiGetNextNode+15

Followup: MachineOwner
---------

0: kd> !process
GetPointerFromAddress: unable to read from fffff800044be000
PROCESS fffffa800bf2c940
    SessionId: none  Cid: 0a34    Peb: fffdf000  ParentCid: 0f00
    DirBase: 15a877000  ObjectTable: fffff8a0061f34e0  HandleCount: <Data Not Accessible>
    Image: devenv.exe
    VadRoot fffffa800b709b10 Vads 1656 Clone 0 Private 118728. Modified 999444. Locked 11984.
    DeviceMap fffff8a0020311f0
    Token                             fffff8a0061e2060
    ReadMemory error: Cannot get nt!KeMaximumIncrement value.
fffff78000000000: Unable to get shared data
    ElapsedTime                       00:00:00.000
    UserTime                          00:00:00.000
    KernelTime                        00:00:00.000
    QuotaPoolUsage[PagedPool]         0
    QuotaPoolUsage[NonPagedPool]      0
    Working Set Sizes (now,min,max)  (174988, 50, 345) (699952KB, 200KB, 1380KB)
    PeakWorkingSetSize                177536
    VirtualSize                       1311 Mb
    PeakVirtualSize                   1377 Mb
    PageFaultCount                    5575831
    MemoryPriority                    BACKGROUND
    BasePriority                      8
    CommitCharge                      135371

        *** Error in reading nt!_ETHREAD @ fffffa800bf52b50

最后更新：2017-08-30 14:02:28

  上一篇：go 开始菜单有bug
  下一篇：go win10 家庭版和专业版对冲突