积极答复者
求助 关于ntoskrnl.exe(nt+75bc0)引起的蓝屏

问题
-
以下是dmp文件内容:
Microsoft (R) Windows Debugger Version 6.8.0004.0 X86
Copyright (c) Microsoft Corporation. All rights reserved.
Loading Dump File [C:\Windows\Minidump\100614-4243-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available
Symbol search path is: *** Invalid ***
****************************************************************************
* Symbol loading may be unreliable without a symbol search path. *
* Use .symfix to have the debugger choose a symbol path. *
* After setting your symbol path, use .reload to refresh symbol locations. *
****************************************************************************
Executable search path is:
*********************************************************************
* Symbols can not be loaded because symbol path is not initialized. *
* *
* The Symbol Path can be set by: *
* using the _NT_SYMBOL_PATH environment variable. *
* using the -y <symbol_path> argument when starting the debugger. *
* using .sympath and .sympath+ *
*********************************************************************
Unable to load image \SystemRoot\system32\ntoskrnl.exe, Win32 error 0n2
*** WARNING: Unable to verify timestamp for ntoskrnl.exe
*** ERROR: Module load completed but symbols could not be loaded for ntoskrnl.exe
Windows Kernel Version 7601 (Service Pack 1) MP (4 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 7601.18352.amd64fre.win7sp1_gdr.131225-1433
Kernel base = 0xfffff800`04209000 PsLoadedModuleList = 0xfffff800`0444c6d0
Debug session time: Mon Oct 6 21:07:44.759 2014 (GMT+8)
System Uptime: 0 days 1:53:16.961
*********************************************************************
* Symbols can not be loaded because symbol path is not initialized. *
* *
* The Symbol Path can be set by: *
* using the _NT_SYMBOL_PATH environment variable. *
* using the -y <symbol_path> argument when starting the debugger. *
* using .sympath and .sympath+ *
*********************************************************************
Unable to load image \SystemRoot\system32\ntoskrnl.exe, Win32 error 0n2
*** WARNING: Unable to verify timestamp for ntoskrnl.exe
*** ERROR: Module load completed but symbols could not be loaded for ntoskrnl.exe
Loading Kernel Symbols
..........................................................................................................................................................................
Loading User Symbols
Loading unloaded module list
....
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
Use !analyze -v to get detailed debugging information.
BugCheck 4E, {99, 3746d, 0, 209fed}
Unable to load image \SystemRoot\System32\drivers\dxgkrnl.sys, Win32 error 0n2
*** WARNING: Unable to verify timestamp for dxgkrnl.sys
*** ERROR: Module load completed but symbols could not be loaded for dxgkrnl.sys
Unable to load image \SystemRoot\System32\drivers\dxgmms1.sys, Win32 error 0n2
*** WARNING: Unable to verify timestamp for dxgmms1.sys
*** ERROR: Module load completed but symbols could not be loaded for dxgmms1.sys
***** Kernel symbols are WRONG. Please fix symbols to do analysis.
*************************************************************************
*** ***
*** ***
*** Your debugger is not using the correct symbols ***
*** ***
*** In order for this command to work properly, your symbol path ***
*** must point to .pdb files that have full type information. ***
*** ***
*** Certain .pdb files (such as the public OS symbols) do not ***
*** contain the required information. Contact the group that ***
*** provided you with these symbols if you need this command to ***
*** work. ***
*** ***
*** Type referenced: nt!_KPRCB ***
*** ***
*************************************************************************
*************************************************************************
*** ***
*** ***
*** Your debugger is not using the correct symbols ***
*** ***
*** In order for this command to work properly, your symbol path ***
*** must point to .pdb files that have full type information. ***
*** ***
*** Certain .pdb files (such as the public OS symbols) do not ***
*** contain the required information. Contact the group that ***
*** provided you with these symbols if you need this command to ***
*** work. ***
*** ***
*** Type referenced: nt!KPRCB ***
*** ***
*************************************************************************
*************************************************************************
*** ***
*** ***
*** Your debugger is not using the correct symbols ***
*** ***
*** In order for this command to work properly, your symbol path ***
*** must point to .pdb files that have full type information. ***
*** ***
*** Certain .pdb files (such as the public OS symbols) do not ***
*** contain the required information. Contact the group that ***
*** provided you with these symbols if you need this command to ***
*** work. ***
*** ***
*** Type referenced: nt!_KPRCB ***
*** ***
*************************************************************************
*************************************************************************
*** ***
*** ***
*** Your debugger is not using the correct symbols ***
*** ***
*** In order for this command to work properly, your symbol path ***
*** must point to .pdb files that have full type information. ***
*** ***
*** Certain .pdb files (such as the public OS symbols) do not ***
*** contain the required information. Contact the group that ***
*** provided you with these symbols if you need this command to ***
*** work. ***
*** ***
*** Type referenced: nt!KPRCB ***
*** ***
*************************************************************************
*************************************************************************
*** ***
*** ***
*** Your debugger is not using the correct symbols ***
*** ***
*** In order for this command to work properly, your symbol path ***
*** must point to .pdb files that have full type information. ***
*** ***
*** Certain .pdb files (such as the public OS symbols) do not ***
*** contain the required information. Contact the group that ***
*** provided you with these symbols if you need this command to ***
*** work. ***
*** ***
*** Type referenced: nt!_KPRCB ***
*** ***
*************************************************************************
*************************************************************************
*** ***
*** ***
*** Your debugger is not using the correct symbols ***
*** ***
*** In order for this command to work properly, your symbol path ***
*** must point to .pdb files that have full type information. ***
*** ***
*** Certain .pdb files (such as the public OS symbols) do not ***
*** contain the required information. Contact the group that ***
*** provided you with these symbols if you need this command to ***
*** work. ***
*** ***
*** Type referenced: nt!_KPRCB ***
*** ***
*************************************************************************
*************************************************************************
*** ***
*** ***
*** Your debugger is not using the correct symbols ***
*** ***
*** In order for this command to work properly, your symbol path ***
*** must point to .pdb files that have full type information. ***
*** ***
*** Certain .pdb files (such as the public OS symbols) do not ***
*** contain the required information. Contact the group that ***
*** provided you with these symbols if you need this command to ***
*** work. ***
*** ***
*** Type referenced: nt!_KPRCB ***
*** ***
*************************************************************************
*************************************************************************
*** ***
*** ***
*** Your debugger is not using the correct symbols ***
*** ***
*** In order for this command to work properly, your symbol path ***
*** must point to .pdb files that have full type information. ***
*** ***
*** Certain .pdb files (such as the public OS symbols) do not ***
*** contain the required information. Contact the group that ***
*** provided you with these symbols if you need this command to ***
*** work. ***
*** ***
*** Type referenced: nt!_KPRCB ***
*** ***
*************************************************************************
*********************************************************************
* Symbols can not be loaded because symbol path is not initialized. *
* *
* The Symbol Path can be set by: *
* using the _NT_SYMBOL_PATH environment variable. *
* using the -y <symbol_path> argument when starting the debugger. *
* using .sympath and .sympath+ *
*********************************************************************
*********************************************************************
* Symbols can not be loaded because symbol path is not initialized. *
* *
* The Symbol Path can be set by: *
* using the _NT_SYMBOL_PATH environment variable. *
* using the -y <symbol_path> argument when starting the debugger. *
* using .sympath and .sympath+ *
*********************************************************************
Probably caused by : ntoskrnl.exe ( nt+75bc0 )
Followup: MachineOwner
---------
平时没事,玩游戏的时候你,玩一段时间就会游戏停止运行,或者出现蓝屏
装的win7 64位旗舰版
尝试过重新插拔内存条,硬盘,显卡,都没用。驱动也重新下过一些,没用。
求助这到底是怎么回事
答案
-
不是说 NTOSKrnl.EXE 本身引起蓝屏,而是因为蓝屏导致 Windows Kernel 主进程 NTOSKrnl.EXE 运行失败。
你的 WinDBG 没有正确设置 Symbol 因此没有得到准确的分析结果,只能看出大致是显示驱动加载错误导致 Windows Kernel 运行失败。这可能是你使用的显示驱动并不完全匹配、显示驱动与其它驱动有冲突、你运行的游戏与系统或其它后台程序有冲突、运行游戏一段时间后会令系统负荷过重或温度上升过高等多种不同原因引起。
你可以将 C:\Windows\Minidump\100614-4243-01.DMP 文件上传至 OneDrive 并提供公开下载以便重新分析一下。
Alexis Zhang
http://mvp.support.microsoft.com/profile/jie
http://blogs.itecn.net/blogs/alexis推荐以 NNTP Bridge 桥接新闻组方式访问论坛。
本帖是回复帖,原帖作者是楼上的 "白日梦灬"
| 平时没事,玩游戏的时候你玩一段时间就会游戏停止运行,或者出现蓝屏
| 尝试过重新插拔内存条,硬盘,显卡,都没用。驱动也重新下过一些,没用。- 已标记为答案 Karen HuModerator 2014年10月21日 6:01
-
你好,
同意Alexis Zhang的看法。
你的dump分析中显示symbol项没有正确设置,无法正确分析蓝屏原因。
请根据下面的链接重新进行symbol file设置:
使用 Microsoft Symbol Server 获取调试符号文件
若要从 WinDbg 中使用 Symbol Server Web 站点,请按照下列步骤操作:
- 启动 Windows 调试器 (WinDbg.exe)。
- 在文件菜单上,单击符号文件路径。
- 在符号路径框中,键入以下命令:
SRV*<var>your local folder for symbols</var>*http://msdl.microsoft.com/download/symbols
,其中 <var>your local folder for symbols</var> 是您复制本地符号缓存的文件夹。调试符号将下载到此位置。
注意:您可以指向计算机能达到的任意本地路径或共享位置;此位置不必是计算机硬盘上的位置。更多信息请参考:
如何读取小存储器转储文件所创建的 Windows 中,如果发生了崩溃
另外,针对BugCheck 4E,这里有一篇英文文档可供参考:
Bug Check 0x4E: PFN_LIST_CORRUPT
希望这有帮助
Michael Shao
TechNet Community Support- 已标记为答案 Karen HuModerator 2014年10月21日 6:02
全部回复
-
不是说 NTOSKrnl.EXE 本身引起蓝屏,而是因为蓝屏导致 Windows Kernel 主进程 NTOSKrnl.EXE 运行失败。
你的 WinDBG 没有正确设置 Symbol 因此没有得到准确的分析结果,只能看出大致是显示驱动加载错误导致 Windows Kernel 运行失败。这可能是你使用的显示驱动并不完全匹配、显示驱动与其它驱动有冲突、你运行的游戏与系统或其它后台程序有冲突、运行游戏一段时间后会令系统负荷过重或温度上升过高等多种不同原因引起。
你可以将 C:\Windows\Minidump\100614-4243-01.DMP 文件上传至 OneDrive 并提供公开下载以便重新分析一下。
Alexis Zhang
http://mvp.support.microsoft.com/profile/jie
http://blogs.itecn.net/blogs/alexis推荐以 NNTP Bridge 桥接新闻组方式访问论坛。
本帖是回复帖,原帖作者是楼上的 "白日梦灬"
| 平时没事,玩游戏的时候你玩一段时间就会游戏停止运行,或者出现蓝屏
| 尝试过重新插拔内存条,硬盘,显卡,都没用。驱动也重新下过一些,没用。- 已标记为答案 Karen HuModerator 2014年10月21日 6:01
-
你好,
同意Alexis Zhang的看法。
你的dump分析中显示symbol项没有正确设置,无法正确分析蓝屏原因。
请根据下面的链接重新进行symbol file设置:
使用 Microsoft Symbol Server 获取调试符号文件
若要从 WinDbg 中使用 Symbol Server Web 站点,请按照下列步骤操作:
- 启动 Windows 调试器 (WinDbg.exe)。
- 在文件菜单上,单击符号文件路径。
- 在符号路径框中,键入以下命令:
SRV*<var>your local folder for symbols</var>*http://msdl.microsoft.com/download/symbols
,其中 <var>your local folder for symbols</var> 是您复制本地符号缓存的文件夹。调试符号将下载到此位置。
注意:您可以指向计算机能达到的任意本地路径或共享位置;此位置不必是计算机硬盘上的位置。更多信息请参考:
如何读取小存储器转储文件所创建的 Windows 中,如果发生了崩溃
另外,针对BugCheck 4E,这里有一篇英文文档可供参考:
Bug Check 0x4E: PFN_LIST_CORRUPT
希望这有帮助
Michael Shao
TechNet Community Support- 已标记为答案 Karen HuModerator 2014年10月21日 6:02
-
不客气。如果想进一步分析请提供 .DMP 文件。
Alexis Zhang
http://mvp.support.microsoft.com/profile/jie
http://blogs.itecn.net/blogs/alexis推荐以 NNTP Bridge 桥接新闻组方式访问论坛。
本帖是回复帖,原帖作者是楼上的 "白日梦灬"
| 好的,谢谢
|