none
Win 10 / Explorer.exe大约一分钟不间断重启 / kernelbase.dll冲突 RRS feed

  • 问题

  • 从win7升级到win10后,资源管理器一直在不间断重启,这个事件查看器日志.

    错误应用程序名称: explorer.exe,版本: 10.0.10586.494,时间戳: 0x5775e575
    错误模块名称: KERNELBASE.dll,版本: 10.0.10586.494,时间戳: 0x5775e4c5
    异常代码: 0xc06d007e
    错误偏移量: 0x0000000000071f28
    错误进程 ID: 0x1c7c
    错误应用程序启动时间: 0x01d1e8eb45cf1e1a
    错误应用程序路径: C:\WINDOWS\explorer.exe
    错误模块路径: C:\WINDOWS\system32\KERNELBASE.dll
    报告 ID: 9121411b-7f3b-4213-965c-9edfc18b82c6
    错误程序包全名: 

    附上dmp文件信息

    Microsoft (R) Windows Debugger Version 6.11.0001.404 X86
    Copyright (c) Microsoft Corporation. All rights reserved.


    Loading Dump File [C:\CrashDumps\explorer.exe.8376.dmp]
    User Mini Dump File: Only registers, stack and portions of memory are available

    WARNING: Minidump contains unknown stream type 0x15
    WARNING: Minidump contains unknown stream type 0x16
    Symbol search path is: *** Invalid ***
    ****************************************************************************
    * Symbol loading may be unreliable without a symbol search path.           *
    * Use .symfix to have the debugger choose a symbol path.                   *
    * After setting your symbol path, use .reload to refresh symbol locations. *
    ****************************************************************************
    Executable search path is: 
    Windows 7 Version 10586 MP (4 procs) Free x64
    Product: WinNt, suite: SingleUserTS
    Machine Name:
    Debug session time: Fri Jul 29 02:30:00.000 2016 (GMT+9)
    System Uptime: not available
    Process Uptime: 0 days 0:01:01.000
    ................................................................
    ................................................................
    ................................................................
    ..........
    Loading unloaded module list
    .......
    This dump file has an exception of interest stored in it.
    The stored exception information can be accessed via .ecxr.
    (20b8.204c): Unknown exception - code c06d007e (first/second chance not available)
    Unable to load image C:\Windows\System32\ntdll.dll, Win32 error 0n2
    *** WARNING: Unable to verify timestamp for ntdll.dll
    *** ERROR: Module load completed but symbols could not be loaded for ntdll.dll
    ntdll+0xa5c34:
    00007ffc`39745c34 c3              ret
    2016年7月28日 17:33

答案

  • 你好:
    根据分析结果,这个问题由 “iproset.cpl” 引起的。它和Intel的软件 “Intel PROSet/Wireless Control Panel Applet”( C:\Program Files\Intel\WiFi\bin\iproset.cpl) 有关.
    请卸载相关软件.
    *******************************************************************************
    *                                                                             *
    *                        Exception Analysis                                   *
    *                                                                             *
    *******************************************************************************

    *** WARNING: Unable to verify timestamp for iproset.cpl
    *** ERROR: Module load completed but symbols could not be loaded for iproset.cpl
    *** WARNING: Unable to verify timestamp for QQPinyin.ime
    *** ERROR: Module load completed but symbols could not be loaded for QQPinyin.ime
    *** ERROR: Symbol file could not be found.  Defaulted to export symbols for sppc.dll -

    DUMP_CLASS: 2

    DUMP_QUALIFIER: 400

    CONTEXT:  (.ecxr)
    rax=00007ffc39715d04 rbx=0000000000000000 rcx=00000000062ed750
    rdx=00000000035ccb90 rsi=00007ffc04e02ad8 rdi=0000000000000000
    rip=00007ffc36521f28 rsp=00000000035cd020 rbp=00000000035cd178
     r8=00000000064b49c0  r9=0000000000000000 r10=0000000001060000
    r11=0000000000000000 r12=0000000000000001 r13=00007ffc04e0f398
    r14=00007ffc04e0f1b0 r15=00007ffc04e02c68
    iopl=0         nv up ei pl nz na po nc
    cs=0033  ss=002b  ds=002b  es=002b  fs=0053  gs=002b             efl=00000206
    KERNELBASE!RaiseException+0x68:
    00007ffc`36521f28 488b8c24c0000000 mov     rcx,qword ptr [rsp+0C0h] ss:00000000`035cd0e0=00006f431605e829
    Resetting default scope

    FAULTING_IP:
    KERNELBASE!RaiseException+68
    00007ffc`36521f28 488b8c24c0000000 mov     rcx,qword ptr [rsp+0C0h]

    EXCEPTION_RECORD:  (.exr -1)
    ExceptionAddress: 00007ffc36521f28 (KERNELBASE!RaiseException+0x0000000000000068)
       ExceptionCode: c06d007e
      ExceptionFlags: 00000000
    NumberParameters: 1
       Parameter[0]: 00000000035cd120

    DEFAULT_BUCKET_ID:  APPLICATION_FAULT

    PROCESS_NAME:  explorer.exe

    ERROR_CODE: (NTSTATUS) 0xc06d007e - <Unable to get error code text>

    EXCEPTION_CODE: (NTSTATUS) 0xc06d007e - <Unable to get error code text>

    EXCEPTION_CODE_STR:  c06d007e

    EXCEPTION_PARAMETER1:  00000000035cd120

    WATSON_BKT_PROCSTAMP:  5775e575

    WATSON_BKT_PROCVER:  10.0.10586.494

    PROCESS_VER_PRODUCT:  Microsoft® Windows® Operating System

    WATSON_BKT_MODULE:  KERNELBASE.dll

    WATSON_BKT_MODSTAMP:  5775e4c5

    WATSON_BKT_MODOFFSET:  71f28

    WATSON_BKT_MODVER:  10.0.10586.494

    MODULE_VER_PRODUCT:  Microsoft® Windows® Operating System

    BUILD_VERSION_STRING:  10.0.10586.0 (th2_release.151029-1700)

    MODLIST_WITH_TSCHKSUM_HASH:  b898e892a4b8da35fd5dad147eacdf229f7fa421

    MODLIST_SHA1_HASH:  d1a5376d4b3fe89662aae938b5d6e3b8562406aa

    NTGLOBALFLAG:  0

    APPLICATION_VERIFIER_FLAGS:  0

    DUMP_FLAGS:  94

    DUMP_TYPE:  1

    APP:  explorer.exe

    ANALYSIS_SESSION_HOST:  VDI-V-MEIPXU

    ANALYSIS_SESSION_TIME:  08-01-2016 16:26:25.0022

    ANALYSIS_VERSION: 10.0.10586.567 amd64fre

    THREAD_ATTRIBUTES:
    OS_LOCALE:  CHS

    BUGCHECK_STR:  APPLICATION_FAULT

    LAST_CONTROL_TRANSFER:  from 00007ffc04bf9bdb to 00007ffc36521f28

    STACK_TEXT: 
    00000000`035cd020 00007ffc`04bf9bdb : 00000000`00000000 00007ffc`04e02ad8 00000000`035cd1d4 00000000`00000000 : KERNELBASE!RaiseException+0x68
    00000000`035cd100 00000000`00000000 : 00007ffc`04e02ad8 00000000`035cd1d4 00000000`00000000 00000000`00000048 : iproset+0x9bdb


    THREAD_SHA1_HASH_MOD_FUNC:  17c28ddd97dc42372399a3382c48de498fe4bef6

    THREAD_SHA1_HASH_MOD_FUNC_OFFSET:  bb5e4a3898365a220e946401cc0f5db172b18263

    THREAD_SHA1_HASH_MOD:  3b5c50aac75c9a54c09993f496689f419142fce9

    FOLLOWUP_IP:
    iproset+9bdb
    00007ffc`04bf9bdb ??              ???

    SYMBOL_STACK_INDEX:  1

    SYMBOL_NAME:  iproset+9bdb

    FOLLOWUP_NAME:  MachineOwner

    MODULE_NAME: iproset

    IMAGE_NAME:  iproset.cpl

    DEBUG_FLR_IMAGE_TIMESTAMP:  4f746ea5

    STACK_COMMAND:  .ecxr ; kb

    BUCKET_ID:  APPLICATION_FAULT_iproset+9bdb

    PRIMARY_PROBLEM_CLASS:  APPLICATION_FAULT_iproset+9bdb

    BUCKET_ID_OFFSET:  9bdb

    BUCKET_ID_MODULE_STR:  iproset

    BUCKET_ID_MODTIMEDATESTAMP:  4f746ea5

    BUCKET_ID_MODCHECKSUM:  25e089

    BUCKET_ID_MODVER_STR:  15.1.1.0

    BUCKET_ID_PREFIX_STR:  APPLICATION_FAULT_

    FAILURE_PROBLEM_CLASS:  APPLICATION_FAULT

    FAILURE_EXCEPTION_CODE:  c06d007e

    FAILURE_IMAGE_NAME:  iproset.cpl

    FAILURE_FUNCTION_NAME:  Unknown

    BUCKET_ID_FUNCTION_STR:  Unknown

    FAILURE_SYMBOL_NAME:  iproset.cpl!Unknown

    FAILURE_BUCKET_ID:  APPLICATION_FAULT_c06d007e_iproset.cpl!Unknown

    WATSON_STAGEONE_URL:  http://watson.microsoft.com/StageOne/explorer.exe/10.0.10586.494/5775e575/KERNELBASE.dll/10.0.10586.494/5775e4c5/c06d007e/00071f28.htm?Retriage=1

    TARGET_TIME:  2016-07-28T17:24:55.000Z

    OSBUILD:  10586

    OSSERVICEPACK:  0

    SERVICEPACK_NUMBER: 0

    OS_REVISION: 0

    SUITE_MASK:  256

    PRODUCT_TYPE:  1

    OSPLATFORM_TYPE:  x64

    OSNAME:  Windows 10

    OSEDITION:  Windows 10 WinNt SingleUserTS

    USER_LCID:  0

    OSBUILD_TIMESTAMP:  2015-10-30 10:27:54

    BUILDDATESTAMP_STR:  151029-1700

    BUILDLAB_STR:  th2_release

    BUILDOSVER_STR:  10.0.10586.0

    ANALYSIS_SESSION_ELAPSED_TIME: 4499

    ANALYSIS_SOURCE:  UM

    FAILURE_ID_HASH_STRING:  um:application_fault_c06d007e_iproset.cpl!unknown

    FAILURE_ID_HASH:  {7d266867-855c-0f0f-139c-e425181496d7}

    Followup:     MachineOwner
    ---------

    0:006> lmvm iproset
    Browse full module list
    start             end                 module name
    00007ffc`04bf0000 00007ffc`04e59000   iproset  T (no symbols)          
        Loaded symbol image file: iproset.cpl
        Image path: C:\Program Files\Intel\WiFi\bin\iproset.cpl
        Image name: iproset.cpl
        Browse all global symbols  functions  data
        Timestamp:        Thu Mar 29 22:16:05 2012 (4F746EA5)
        CheckSum:         0025E089
        ImageSize:        00269000
        File version:     15.1.1.0
        Product version:  15.1.1.0
        File flags:       0 (Mask 3F)
        File OS:          4 Unknown Win32
        File type:        2.0 Dll
        File date:        00000000.00000000
        Translations:     0000.04b0 0000.04e4 0409.04b0 0409.04e4


    Please remember to mark the replies as an answers if they help and unmark them if they provide no help.
    If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com

    2016年8月1日 8:28
    版主

全部回复

  • 你好 zermabyuki:

    请尝试干净启动,看一下是否这个问题是由于三方软件的冲突导致的。

    如何在 Windows 中执行干净启动
    https://support.microsoft.com/zh-cn/kb/929135
    打开管理员命令行运行“dism /online /cleanup-image /restorehealth”检查一下系统完整性.

    为了更好的分析这个问题,请把dump 文件传到OneDrive,把链接贴在这里,我们会进一步的分析.


    Please mark the reply as an answer if you find it is helpful.

    If you have feedback for TechNet Support, contact tnmff@microsoft.com

    2016年7月29日 5:51
    版主
  • 感谢您的回复 

    禁用服务 启动文件后依然不起作用

    在安全模式下依然存在这个问题 并且还会出现  

    “无法使用内置管理员账户打开 入门”的对话框,每次Explore重启后都会出现

    已经上传dump文件

    https://1drv.ms/u/s!AuRtUzj3rrpCcj7AD_C5NLXd5e8

    希望您能找出问题出在哪里



    • 已编辑 zermabyuki 2016年7月30日 2:06 增加描述
    2016年7月29日 11:17
  • 你好:
    根据分析结果,这个问题由 “iproset.cpl” 引起的。它和Intel的软件 “Intel PROSet/Wireless Control Panel Applet”( C:\Program Files\Intel\WiFi\bin\iproset.cpl) 有关.
    请卸载相关软件.
    *******************************************************************************
    *                                                                             *
    *                        Exception Analysis                                   *
    *                                                                             *
    *******************************************************************************

    *** WARNING: Unable to verify timestamp for iproset.cpl
    *** ERROR: Module load completed but symbols could not be loaded for iproset.cpl
    *** WARNING: Unable to verify timestamp for QQPinyin.ime
    *** ERROR: Module load completed but symbols could not be loaded for QQPinyin.ime
    *** ERROR: Symbol file could not be found.  Defaulted to export symbols for sppc.dll -

    DUMP_CLASS: 2

    DUMP_QUALIFIER: 400

    CONTEXT:  (.ecxr)
    rax=00007ffc39715d04 rbx=0000000000000000 rcx=00000000062ed750
    rdx=00000000035ccb90 rsi=00007ffc04e02ad8 rdi=0000000000000000
    rip=00007ffc36521f28 rsp=00000000035cd020 rbp=00000000035cd178
     r8=00000000064b49c0  r9=0000000000000000 r10=0000000001060000
    r11=0000000000000000 r12=0000000000000001 r13=00007ffc04e0f398
    r14=00007ffc04e0f1b0 r15=00007ffc04e02c68
    iopl=0         nv up ei pl nz na po nc
    cs=0033  ss=002b  ds=002b  es=002b  fs=0053  gs=002b             efl=00000206
    KERNELBASE!RaiseException+0x68:
    00007ffc`36521f28 488b8c24c0000000 mov     rcx,qword ptr [rsp+0C0h] ss:00000000`035cd0e0=00006f431605e829
    Resetting default scope

    FAULTING_IP:
    KERNELBASE!RaiseException+68
    00007ffc`36521f28 488b8c24c0000000 mov     rcx,qword ptr [rsp+0C0h]

    EXCEPTION_RECORD:  (.exr -1)
    ExceptionAddress: 00007ffc36521f28 (KERNELBASE!RaiseException+0x0000000000000068)
       ExceptionCode: c06d007e
      ExceptionFlags: 00000000
    NumberParameters: 1
       Parameter[0]: 00000000035cd120

    DEFAULT_BUCKET_ID:  APPLICATION_FAULT

    PROCESS_NAME:  explorer.exe

    ERROR_CODE: (NTSTATUS) 0xc06d007e - <Unable to get error code text>

    EXCEPTION_CODE: (NTSTATUS) 0xc06d007e - <Unable to get error code text>

    EXCEPTION_CODE_STR:  c06d007e

    EXCEPTION_PARAMETER1:  00000000035cd120

    WATSON_BKT_PROCSTAMP:  5775e575

    WATSON_BKT_PROCVER:  10.0.10586.494

    PROCESS_VER_PRODUCT:  Microsoft® Windows® Operating System

    WATSON_BKT_MODULE:  KERNELBASE.dll

    WATSON_BKT_MODSTAMP:  5775e4c5

    WATSON_BKT_MODOFFSET:  71f28

    WATSON_BKT_MODVER:  10.0.10586.494

    MODULE_VER_PRODUCT:  Microsoft® Windows® Operating System

    BUILD_VERSION_STRING:  10.0.10586.0 (th2_release.151029-1700)

    MODLIST_WITH_TSCHKSUM_HASH:  b898e892a4b8da35fd5dad147eacdf229f7fa421

    MODLIST_SHA1_HASH:  d1a5376d4b3fe89662aae938b5d6e3b8562406aa

    NTGLOBALFLAG:  0

    APPLICATION_VERIFIER_FLAGS:  0

    DUMP_FLAGS:  94

    DUMP_TYPE:  1

    APP:  explorer.exe

    ANALYSIS_SESSION_HOST:  VDI-V-MEIPXU

    ANALYSIS_SESSION_TIME:  08-01-2016 16:26:25.0022

    ANALYSIS_VERSION: 10.0.10586.567 amd64fre

    THREAD_ATTRIBUTES:
    OS_LOCALE:  CHS

    BUGCHECK_STR:  APPLICATION_FAULT

    LAST_CONTROL_TRANSFER:  from 00007ffc04bf9bdb to 00007ffc36521f28

    STACK_TEXT: 
    00000000`035cd020 00007ffc`04bf9bdb : 00000000`00000000 00007ffc`04e02ad8 00000000`035cd1d4 00000000`00000000 : KERNELBASE!RaiseException+0x68
    00000000`035cd100 00000000`00000000 : 00007ffc`04e02ad8 00000000`035cd1d4 00000000`00000000 00000000`00000048 : iproset+0x9bdb


    THREAD_SHA1_HASH_MOD_FUNC:  17c28ddd97dc42372399a3382c48de498fe4bef6

    THREAD_SHA1_HASH_MOD_FUNC_OFFSET:  bb5e4a3898365a220e946401cc0f5db172b18263

    THREAD_SHA1_HASH_MOD:  3b5c50aac75c9a54c09993f496689f419142fce9

    FOLLOWUP_IP:
    iproset+9bdb
    00007ffc`04bf9bdb ??              ???

    SYMBOL_STACK_INDEX:  1

    SYMBOL_NAME:  iproset+9bdb

    FOLLOWUP_NAME:  MachineOwner

    MODULE_NAME: iproset

    IMAGE_NAME:  iproset.cpl

    DEBUG_FLR_IMAGE_TIMESTAMP:  4f746ea5

    STACK_COMMAND:  .ecxr ; kb

    BUCKET_ID:  APPLICATION_FAULT_iproset+9bdb

    PRIMARY_PROBLEM_CLASS:  APPLICATION_FAULT_iproset+9bdb

    BUCKET_ID_OFFSET:  9bdb

    BUCKET_ID_MODULE_STR:  iproset

    BUCKET_ID_MODTIMEDATESTAMP:  4f746ea5

    BUCKET_ID_MODCHECKSUM:  25e089

    BUCKET_ID_MODVER_STR:  15.1.1.0

    BUCKET_ID_PREFIX_STR:  APPLICATION_FAULT_

    FAILURE_PROBLEM_CLASS:  APPLICATION_FAULT

    FAILURE_EXCEPTION_CODE:  c06d007e

    FAILURE_IMAGE_NAME:  iproset.cpl

    FAILURE_FUNCTION_NAME:  Unknown

    BUCKET_ID_FUNCTION_STR:  Unknown

    FAILURE_SYMBOL_NAME:  iproset.cpl!Unknown

    FAILURE_BUCKET_ID:  APPLICATION_FAULT_c06d007e_iproset.cpl!Unknown

    WATSON_STAGEONE_URL:  http://watson.microsoft.com/StageOne/explorer.exe/10.0.10586.494/5775e575/KERNELBASE.dll/10.0.10586.494/5775e4c5/c06d007e/00071f28.htm?Retriage=1

    TARGET_TIME:  2016-07-28T17:24:55.000Z

    OSBUILD:  10586

    OSSERVICEPACK:  0

    SERVICEPACK_NUMBER: 0

    OS_REVISION: 0

    SUITE_MASK:  256

    PRODUCT_TYPE:  1

    OSPLATFORM_TYPE:  x64

    OSNAME:  Windows 10

    OSEDITION:  Windows 10 WinNt SingleUserTS

    USER_LCID:  0

    OSBUILD_TIMESTAMP:  2015-10-30 10:27:54

    BUILDDATESTAMP_STR:  151029-1700

    BUILDLAB_STR:  th2_release

    BUILDOSVER_STR:  10.0.10586.0

    ANALYSIS_SESSION_ELAPSED_TIME: 4499

    ANALYSIS_SOURCE:  UM

    FAILURE_ID_HASH_STRING:  um:application_fault_c06d007e_iproset.cpl!unknown

    FAILURE_ID_HASH:  {7d266867-855c-0f0f-139c-e425181496d7}

    Followup:     MachineOwner
    ---------

    0:006> lmvm iproset
    Browse full module list
    start             end                 module name
    00007ffc`04bf0000 00007ffc`04e59000   iproset  T (no symbols)          
        Loaded symbol image file: iproset.cpl
        Image path: C:\Program Files\Intel\WiFi\bin\iproset.cpl
        Image name: iproset.cpl
        Browse all global symbols  functions  data
        Timestamp:        Thu Mar 29 22:16:05 2012 (4F746EA5)
        CheckSum:         0025E089
        ImageSize:        00269000
        File version:     15.1.1.0
        Product version:  15.1.1.0
        File flags:       0 (Mask 3F)
        File OS:          4 Unknown Win32
        File type:        2.0 Dll
        File date:        00000000.00000000
        Translations:     0000.04b0 0000.04e4 0409.04b0 0409.04e4


    Please remember to mark the replies as an answers if they help and unmark them if they provide no help.
    If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com

    2016年8月1日 8:28
    版主