none
各位好,我出现了蓝屏问题,求助。 RRS feed

  • 问题

  • 如下是我的windbg分析

    Microsoft (R) Windows Debugger Version 6.11.0001.404 AMD64
    Copyright (c) Microsoft Corporation. All rights reserved.


    Loading Dump File [C:\Windows\Minidump\Mini083009-01.dmp]
    Mini Kernel Dump File: Only registers and stack trace are available

    Symbol search path is: SRV*c:\temp*http://msdl.microsoft.com/download/symbols
    Executable search path is:
    Windows Server 2008/Windows Vista Kernel Version 6001 (Service Pack 1) MP (2 procs) Free x64
    Product: WinNt, suite: TerminalServer SingleUserTS Personal
    Built by: 6001.22477.amd64fre.vistasp1_ldr.090722-0700
    Machine Name:
    Kernel base = 0xfffff800`02418000 PsLoadedModuleList = 0xfffff800`025dadb0
    Debug session time: Sun Aug 30 01:41:01.619 2009 (GMT+8)
    System Uptime: 0 days 4:27:49.303
    Loading Kernel Symbols
    ...............................................................
    ................................................................
    .....................................
    Loading User Symbols
    Loading unloaded module list
    ....
    *******************************************************************************
    *                                                                             *
    *                        Bugcheck Analysis                                    *
    *                                                                             *
    *******************************************************************************

    Use !analyze -v to get detailed debugging information.

    BugCheck 1000007E, {ffffffffc0000005, fffff800027deb81, fffffa60019e7798, fffffa60019e7170}

    Probably caused by : ntkrnlmp.exe ( nt!IopFreeRelationList+21 )

    Followup: MachineOwner
    ---------

    0: kd> !analyze -v
    *******************************************************************************
    *                                                                             *
    *                        Bugcheck Analysis                                    *
    *                                                                             *
    *******************************************************************************

    SYSTEM_THREAD_EXCEPTION_NOT_HANDLED_M (1000007e)
    This is a very common bugcheck.  Usually the exception address pinpoints
    the driver/function that caused the problem.  Always note this address
    as well as the link date of the driver/image that contains this address.
    Some common problems are exception code 0x80000003.  This means a hard
    coded breakpoint or assertion was hit, but this system was booted
    /NODEBUG.  This is not supposed to happen as developers should never have
    hardcoded breakpoints in retail code, but ...
    If this happens, make sure a debugger gets connected, and the
    system is booted /DEBUG.  This will let us see why this breakpoint is
    happening.
    Arguments:
    Arg1: ffffffffc0000005, The exception code that was not handled
    Arg2: fffff800027deb81, The address that the exception occurred at
    Arg3: fffffa60019e7798, Exception Record Address
    Arg4: fffffa60019e7170, Context Record Address

    Debugging Details:
    ------------------


    EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - 0x%08lx

    FAULTING_IP:
    nt!IopFreeRelationList+21
    fffff800`027deb81 488b3e          mov     rdi,qword ptr [rsi]

    EXCEPTION_RECORD:  fffffa60019e7798 -- (.exr 0xfffffa60019e7798)
    ExceptionAddress: fffff800027deb81 (nt!IopFreeRelationList+0x0000000000000021)
       ExceptionCode: c0000005 (Access violation)
      ExceptionFlags: 00000000
    NumberParameters: 2
       Parameter[0]: 0000000000000000
       Parameter[1]: 0000000000000010
    Attempt to read from address 0000000000000010

    CONTEXT:  fffffa60019e7170 -- (.cxr 0xfffffa60019e7170)
    rax=fffffa8003cc2701 rbx=0000000000000000 rcx=0000000000000000
    rdx=fffffa8003cc2701 rsi=0000000000000010 rdi=0000000000000000
    rip=fffff800027deb81 rsp=fffffa60019e79d0 rbp=0000000000000000
     r8=fffffa8004778810  r9=5001b5e0f6000000 r10=0000000000000000
    r11=00000000000007ff r12=fffff80002610b20 r13=fffffa8009928840
    r14=0000000000000000 r15=0000000000000002
    iopl=0         nv up ei pl zr na po nc
    cs=0010  ss=0018  ds=002b  es=002b  fs=0053  gs=002b             efl=00010246
    nt!IopFreeRelationList+0x21:
    fffff800`027deb81 488b3e          mov     rdi,qword ptr [rsi] ds:002b:00000000`00000010=????????????????
    Resetting default scope

    CUSTOMER_CRASH_COUNT:  1

    PROCESS_NAME:  System

    CURRENT_IRQL:  0

    ERROR_CODE: (NTSTATUS) 0xc0000005 - 0x%08lx

    EXCEPTION_PARAMETER1:  0000000000000000

    EXCEPTION_PARAMETER2:  0000000000000010

    READ_ADDRESS: GetPointerFromAddress: unable to read from fffff8000263d080
     0000000000000010

    FOLLOWUP_IP:
    nt!IopFreeRelationList+21
    fffff800`027deb81 488b3e          mov     rdi,qword ptr [rsi]

    BUGCHECK_STR:  0x7E

    DEFAULT_BUCKET_ID:  NULL_CLASS_PTR_DEREFERENCE

    LAST_CONTROL_TRANSFER:  from fffff80002848417 to fffff800027deb81

    STACK_TEXT: 
    fffffa60`019e79d0 fffff800`02848417 : fffffa80`04778810 00000000`00000001 fffffa80`109b54a0 fffff800`0267c38c : nt!IopFreeRelationList+0x21
    fffffa60`019e7a10 fffff800`02848555 : fffffa80`04778810 fffffa80`09928848 fffffa80`09928840 00000000`00000001 : nt!PnpDelayedRemoveWorker+0x97
    fffffa60`019e7a60 fffff800`02543c69 : 00000000`00000001 00000000`00000001 00000000`00000000 fffffa80`07debde0 : nt!PnpChainDereferenceComplete+0x115
    fffffa60`019e7aa0 fffff800`0284cd79 : 00000000`00000000 fffffa80`109b5400 fffffa80`107ca010 00000000`00000001 : nt!PnpIsChainDereferenced+0xc9
    fffffa60`019e7b20 fffff800`0284cffc : fffffa60`019e7cf8 fffffa80`06b9b600 fffffa80`03cc2700 fffffa80`00000000 : nt!PnpProcessQueryRemoveAndEject+0xf99
    fffffa60`019e7c70 fffff800`0274d6c7 : 00000000`00000001 fffffa80`06b9b630 fffff880`0f8ca010 00000000`00000000 : nt!PnpProcessTargetDeviceEvent+0x4c
    fffffa60`019e7ca0 fffff800`02471e4a : fffff800`02679494 fffff880`0fb07250 fffff800`025a78f8 fffffa80`03cc2720 : nt! ?? ::NNGAKEGL::`string'+0x4a314
    fffffa60`019e7cf0 fffff800`02689573 : fffffa80`06b9b630 01c6fe47`efc43dc5 fffffa80`03cc2720 00000000`00000080 : nt!ExpWorkerThread+0x11a
    fffffa60`019e7d50 fffff800`024a0ff6 : fffffa60`005ec180 fffffa80`03cc2720 fffffa60`005f5d40 00000000`00000001 : nt!PspSystemThreadStartup+0x57
    fffffa60`019e7d80 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiStartSystemThread+0x16


    SYMBOL_STACK_INDEX:  0

    SYMBOL_NAME:  nt!IopFreeRelationList+21

    FOLLOWUP_NAME:  MachineOwner

    MODULE_NAME: nt

    IMAGE_NAME:  ntkrnlmp.exe

    DEBUG_FLR_IMAGE_TIMESTAMP:  4a67e1a0

    STACK_COMMAND:  .cxr 0xfffffa60019e7170 ; kb

    FAILURE_BUCKET_ID:  X64_0x7E_nt!IopFreeRelationList+21

    BUCKET_ID:  X64_0x7E_nt!IopFreeRelationList+21

    Followup: MachineOwner
    ---------

     蓝屏一般会出现在三种情况
    1. 移除ipod touch的时候
    2. 用nod32进行全盘扫描的时候
    3. 对硬盘尝试扫描坏轨的时候
    4. 使用迅雷的时候
    谢谢各位了!
    2009年8月29日 17:54

答案

全部回复