Microsoft (R) Windows Debugger Version 6.6.0007.5
Copyright (c) Microsoft Corporation. All rights reserved.
Loading Dump File [D:\MEMORY.DMP]
Kernel Summary Dump File: Only kernel address space is available
Symbol search path is: SRV*c:\temp*http://msdl.microsoft.com/download/symbols
Executable search path is:
Windows Vista Kernel Version 7601 (Service Pack 1) MP (8 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 7601.17835.amd64fre.win7sp1_gdr.120503-2030
Kernel base = 0xfffff800`04208000 PsLoadedModuleList = 0xfffff800`0444c670
Debug session time: Mon Aug 27 14:17:08.508 2012 (GMT+8)
System Uptime: 0 days 0:09:06.240
Loading Kernel Symbols
.....................................................................................................................................................
Loading User Symbols
Loading unloaded module list
..........
The context is partially valid. Only x86 user-mode context is available.
Need to load wow64exts.dll to retrieve context!
*******************************************************************************
*
*
* Bugcheck Analysis
*
*
*
*******************************************************************************
Use !analyze -v to get detailed debugging information.
BugCheck A, {8, 2, 0, fffff80004264c08}
Probably caused by : Unknown_Image ( nt!AlpcpQueueIoCompletionPort+48 )
Followup: MachineOwner
---------
16.0: kd:x86> !analyze -v
*******************************************************************************
*
*
* Bugcheck Analysis
*
*
*
*******************************************************************************
IRQL_NOT_LESS_OR_EQUAL (a)
An attempt was made to access a pageable (or completely invalid) address at an
interrupt request level (IRQL) that is too high. This is usually
caused by drivers using improper addresses.
If a kernel debugger is available get the stack backtrace.
Arguments:
Arg1: 0000000000000008, memory referenced
Arg2: 0000000000000002, IRQL
Arg3: 0000000000000000, value 0 = read operation, 1 = write operation
Arg4: fffff80004264c08, address which referenced memory
Debugging Details:
------------------
READ_ADDRESS: unable to get nt!MmNonPagedPoolExpansionStart
0000000000000008
CURRENT_IRQL: 2
FAULTING_IP:
nt!AlpcpQueueIoCompletionPort+48
fffff800`04264c08 49 dec ecx
DEFAULT_BUCKET_ID: VISTA_RC
BUGCHECK_STR: 0xA
LAST_CONTROL_TRANSFER: from 0000000000000000 to 0000000000000000
STACK_TEXT:
00000000 00000000 00000000 00000000 00000000 0x0
STACK_COMMAND: .bugcheck ; kb
FOLLOWUP_IP:
nt!AlpcpQueueIoCompletionPort+48
fffff800`04264c08 49 dec ecx
FOLLOWUP_NAME: MachineOwner
IMAGE_NAME: Unknown_Image
DEBUG_FLR_IMAGE_TIMESTAMP: 0
SYMBOL_NAME: nt!AlpcpQueueIoCompletionPort+48
BUCKET_ID: INVALID_KERNEL_CONTEXT
MODULE_NAME: Unknown_Module
Followup: MachineOwner
---------
win7频繁蓝屏，下面是windbg分析的
