Benutzer mit den meisten Antworten
Bluescreen (minidump) auswerten (welches Tool)

Frage
-
Hallo,
ein Windows 7 PC stürzt seit ein paar Tagen immer wieder ab und endet mit Bluescreen und reboot.
Im Google werden viele Tools zum Auswerten genanntWelches Tool sollte man verwenden?
Ist der untenstehende Link von Microsoft noch aktuell?
Führen Sie eine Fehlerbehebung für "Bluescreen"- oder Abbruchfehler-Probleme durch, bevor Sie den Microsoft Support kontaktierenViele Grüße
Roland
Donnerstag, 27. April 2017 09:58
Antworten
-
Hallo Roland,
Ja, der Link ist aktuell.
Egal welches Tool du nimmst, die generelle Idee ist einen Hinweis der möglichen Ursache vom Problem (BSOD) zu erhalten.
Mehr zum Thema hier, ein guter Artikel: https://social.technet.microsoft.com/wiki/contents/articles/6302.windows-bugcheck-analysis.aspx
Grüße,
Yavor- Als Antwort markiert Roland_Schmid Donnerstag, 27. April 2017 10:39
Donnerstag, 27. April 2017 10:20
Alle Antworten
-
Hallo Roland,
Ja, der Link ist aktuell.
Egal welches Tool du nimmst, die generelle Idee ist einen Hinweis der möglichen Ursache vom Problem (BSOD) zu erhalten.
Mehr zum Thema hier, ein guter Artikel: https://social.technet.microsoft.com/wiki/contents/articles/6302.windows-bugcheck-analysis.aspx
Grüße,
Yavor- Als Antwort markiert Roland_Schmid Donnerstag, 27. April 2017 10:39
Donnerstag, 27. April 2017 10:20 -
Hallo,
ich habe Windows SDK für Windows 7 Debbing Tool installiert.
Versuchsweise habe ich die %systemdrive%\MEMORY.DMP im Debugger geöffnet.Bekomme bei öffnen des Crash Dump einige Symbol Fehler gemeldet.
Warum findet der Debugger die Symbole nicht?Viele Grüße
RolandMicrosoft (R) Windows Debugger Version 6.11.0001.404 AMD64 Copyright (c) Microsoft Corporation. All rights reserved. Loading Dump File [C:\Windows\MEMORY.DMP] Kernel Summary Dump File: Only kernel address space is available Symbol search path is: D:\Symbols Executable search path is: *** ERROR: Symbol file could not be found. Defaulted to export symbols for ntkrnlmp.exe - Windows 7 Kernel Version 7601 (Service Pack 1) MP (8 procs) Free x64 Product: WinNt, suite: TerminalServer SingleUserTS Built by: 7601.19160.amd64fre.win7sp1_gdr.160211-0600 Machine Name: Kernel base = 0xfffff800`03851000 PsLoadedModuleList = 0xfffff800`03a98730 Debug session time: Thu Mar 17 14:42:57.481 2016 (GMT+2) System Uptime: 0 days 4:55:56.936 *** ERROR: Symbol file could not be found. Defaulted to export symbols for ntkrnlmp.exe - Loading Kernel Symbols ............................................................... ................................................................ ............................................................... Loading User Symbols Loading unloaded module list ......... ******************************************************************************* * * * Bugcheck Analysis * * * ******************************************************************************* Use !analyze -v to get detailed debugging information. BugCheck D1, {91, 7, 0, fffff880014f1176} *** ERROR: Module load completed but symbols could not be loaded for mv91xx.sys ***** Kernel symbols are WRONG. Please fix symbols to do analysis. ************************************************************************* *** *** *** *** *** Your debugger is not using the correct symbols *** *** *** *** In order for this command to work properly, your symbol path *** *** must point to .pdb files that have full type information. *** *** *** *** Certain .pdb files (such as the public OS symbols) do not *** *** contain the required information. Contact the group that *** *** provided you with these symbols if you need this command to *** *** work. *** *** *** *** Type referenced: nt!_KPRCB *** *** *** ************************************************************************* ************************************************************************* *** *** *** *** *** Your debugger is not using the correct symbols *** *** *** *** In order for this command to work properly, your symbol path *** *** must point to .pdb files that have full type information. *** *** *** *** Certain .pdb files (such as the public OS symbols) do not *** *** contain the required information. Contact the group that *** *** provided you with these symbols if you need this command to *** *** work. *** *** *** *** Type referenced: nt!KPRCB *** *** *** ************************************************************************* ************************************************************************* *** *** *** *** *** Your debugger is not using the correct symbols *** *** *** *** In order for this command to work properly, your symbol path *** *** must point to .pdb files that have full type information. *** *** *** *** Certain .pdb files (such as the public OS symbols) do not *** *** contain the required information. Contact the group that *** *** provided you with these symbols if you need this command to *** *** work. *** *** *** *** Type referenced: nt!_KPRCB *** *** *** ************************************************************************* ************************************************************************* *** *** *** *** *** Your debugger is not using the correct symbols *** *** *** *** In order for this command to work properly, your symbol path *** *** must point to .pdb files that have full type information. *** *** *** *** Certain .pdb files (such as the public OS symbols) do not *** *** contain the required information. Contact the group that *** *** provided you with these symbols if you need this command to *** *** work. *** *** *** *** Type referenced: nt!KPRCB *** *** *** ************************************************************************* ************************************************************************* *** *** *** *** *** Your debugger is not using the correct symbols *** *** *** *** In order for this command to work properly, your symbol path *** *** must point to .pdb files that have full type information. *** *** *** *** Certain .pdb files (such as the public OS symbols) do not *** *** contain the required information. Contact the group that *** *** provided you with these symbols if you need this command to *** *** work. *** *** *** *** Type referenced: nt!_KPRCB *** *** *** ************************************************************************* ************************************************************************* *** *** *** *** *** Your debugger is not using the correct symbols *** *** *** *** In order for this command to work properly, your symbol path *** *** must point to .pdb files that have full type information. *** *** *** *** Certain .pdb files (such as the public OS symbols) do not *** *** contain the required information. Contact the group that *** *** provided you with these symbols if you need this command to *** *** work. *** *** *** *** Type referenced: nt!_KPRCB *** *** *** ************************************************************************* ************************************************************************* *** *** *** *** *** Your debugger is not using the correct symbols *** *** *** *** In order for this command to work properly, your symbol path *** *** must point to .pdb files that have full type information. *** *** *** *** Certain .pdb files (such as the public OS symbols) do not *** *** contain the required information. Contact the group that *** *** provided you with these symbols if you need this command to *** *** work. *** *** *** *** Type referenced: nt!_KPRCB *** *** *** ************************************************************************* ************************************************************************* *** *** *** *** *** Your debugger is not using the correct symbols *** *** *** *** In order for this command to work properly, your symbol path *** *** must point to .pdb files that have full type information. *** *** *** *** Certain .pdb files (such as the public OS symbols) do not *** *** contain the required information. Contact the group that *** *** provided you with these symbols if you need this command to *** *** work. *** *** *** *** Type referenced: nt!_KPRCB *** *** *** ************************************************************************* Probably caused by : mv91xx.sys ( mv91xx+2b176 ) Followup: MachineOwner ---------
Donnerstag, 27. April 2017 12:20 -
Hallo Roland,
es fehlt zunächst ein Verzeichnis mit ausreichend Platz.
Im folgenden Beispiel ist dies c:\symbols . Es kann auch auf einer anderen Partition sein.
Dort werden die Symbole von http://msdl.microsoft.com/download/symbols heruntergeladen.
Lesen der kleinen Speicherabbilddatei, die von Windows bei einem Absturz erstellt wird
Beispielbefehle
Sie können die folgenden Beispielbefehle verwenden, um die Abbilddatei zu öffnen. Bei diesen Befehlen wird Folgendes vorausgesetzt:
- Der Inhalt des Ordners „I386“ auf der Windows-CD-ROM wird in den Ordner „C:\Windows\I386“ kopiert.
- Ihre Abbilddatei hat den Namen „C:\Windows\Minidump\Minidump.dmp“.
Beispiel 1:
kd -y srv*c:\symbols*http://msdl.microsoft.com/download/symbols -i c:\windows\i386 -z c:\windows\minidump\minidump.dmp
Beispiel 2:Wenn Sie statt der Befehlszeilenversion, die grafische Version des Debuggers bevorzugen, geben Sie folgenden Befehl ein:
windbg -y srv*c:\symbols*http://msdl.microsoft.com/download/symbols -i c:\windows\i386 -z c:\windows\minidump\minidump.dmp
Mit freundlichen Gruessen/Best regards
- Bearbeitet blueice_haller Sonntag, 21. Oktober 2018 13:51
Sonntag, 21. Oktober 2018 13:47