以下是這位網友的 DMP 診斷訊息:
Loading Dump File [D:\root\dmp\Mini040310-11.dmp]
Mini Kernel Dump File: Only registers and stack trace are available
Symbol search path is: SRV*C:\Symbols*http://msdl.microsoft.com/download/symbols
Executable search path is:
Windows Server 2008/Windows Vista Kernel Version 6001 (Service Pack 1) MP (2 procs) Free x86 compatible
Product: WinNt, suite: TerminalServer SingleUserTS Personal
Built by: 6001.22269.x86fre.vistasp1_ldr.080917-1612
Machine Name:
Kernel base = 0x81e46000 PsLoadedModuleList = 0x81f5dc70
Debug session time: Sat Apr 3 19:08:19.179 2010 (UTC + 8:00)
System Uptime: 0 days 0:00:42.990
Loading Kernel Symbols
...............................................................
................................................................
................................................................
...................
Loading User Symbols
Loading unloaded module list
...
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
Use !analyze -v to get detailed debugging information.
BugCheck 1A, {41790, c0802784, ffff, 0}
Probably caused by : memory_corruption ( nt!MiDeleteVirtualAddresses+7ce )
Followup: MachineOwner
---------
1: kd> !analyze -v
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
MEMORY_MANAGEMENT (1a)
# Any other values for parameter 1 must be individually examined.
Arguments:
Arg1: 00041790, The subtype of the bugcheck.
Arg2: c0802784
Arg3: 0000ffff
Arg4: 00000000
Debugging Details:
------------------
BUGCHECK_STR: 0x1a_41790
CUSTOMER_CRASH_COUNT: 11
DEFAULT_BUCKET_ID: COMMON_SYSTEM_FAULT
PROCESS_NAME: svchost.exe
CURRENT_IRQL: 0
LAST_CONTROL_TRANSFER: from 81ed77ac to 81e844ad
STACK_TEXT:
8b343bd8 81ed77ac 72d40002 72d4efff a00d4280 nt!MiDeleteVirtualAddresses+0x7ce
8b343ca8 81ed6d47 a00d4280 a015a240 a010b648 nt!MiRemoveMappedView+0x4aa
8b343cd0 8206ae29 a010b648 00000000 ffffffff nt!MiRemoveVadAndView+0xe3
8b343d34 8206af7a a00d4280 72d40000 00000000 nt!MiUnmapViewOfSection+0x265
8b343d54 81e9da0a ffffffff 72d40000 007af2d0 nt!NtUnmapViewOfSection+0x55
8b343d54 778e9a94 ffffffff 72d40000 007af2d0 nt!KiFastCallEntry+0x12a
WARNING: Frame IP not in any known module. Following frames may be wrong.
007af2d0 00000000 00000000 00000000 00000000 0x778e9a94
STACK_COMMAND: kb
FOLLOWUP_IP:
nt!MiDeleteVirtualAddresses+7ce
81e844ad 8bc3 mov eax,ebx
SYMBOL_STACK_INDEX: 0
SYMBOL_NAME: nt!MiDeleteVirtualAddresses+7ce
FOLLOWUP_NAME: MachineOwner
MODULE_NAME: nt
DEBUG_FLR_IMAGE_TIMESTAMP: 48d1b61b
IMAGE_NAME: memory_corruption
FAILURE_BUCKET_ID: 0x1a_41790_nt!MiDeleteVirtualAddresses+7ce
BUCKET_ID: 0x1a_41790_nt!MiDeleteVirtualAddresses+7ce
Followup: MachineOwner
---------
通過再次檢視診斷信息, 我注意到一個字串 "PROCESS_NAME: svchost.exe", 這個字串應該表明藍屏是發生在系統初始的最後階段, 即在 winlogon -> services -> svchost 這個階段, 并同某個系統服務有關, 不過并不能表明那個未知的服務即使"罪魁禍首", 同時你有提到雖然安排了 "排程掃瞄磁碟", 但系統并不進行掃描, 以及 "系統還原" 不能使用. 從這三點來看, 我感覺藍屏與程式沖突或會存在相容性問題有關. 另外也請你補充一下 "系統還原" 不能使用的錯誤訊息, 你可以在系統日志中檢視一下.
這些都是我的一些想法, 還請大家也幫忙找找原因.
另外也建議 ksgchung 將你的問題描述以及這個藍屏診斷訊息, 貼到 Windows Vista 論壇(繁體中文), 進一步需求網友的幫助.
連接:
http://social.technet.microsoft.com/Forums/zh-CN/windowsvistazhcht/threads
Folding@Home
