none
win10经常蓝屏,能帮忙看下dump文件分析下原因吗? RRS feed

  • 问题

  • Microsoft (R) Windows Debugger Version 10.0.18362.1 AMD64
    Copyright (c) Microsoft Corporation. All rights reserved.


    Loading Dump File [C:\Windows\Minidump\100819-13640-01.dmp]
    Mini Kernel Dump File: Only registers and stack trace are available


    ************* Path validation summary **************
    Response                         Time (ms)     Location
    Deferred                                       SRV*C:\Symbols*http://msdl.microsoft.com/download/symbols
    Symbol search path is: SRV*C:\Symbols*http://msdl.microsoft.com/download/symbols
    Executable search path is: 
    Map \SystemRoot\system32\ntoskrnl.exe:
      Image region 800:34f000 does not fit in mapping
    *** WARNING: Unable to verify timestamp for ntoskrnl.exe
    *************************************************************************
    ***                                                                   ***
    ***                                                                   ***
    ***    Either you specified an unqualified symbol, or your debugger   ***
    ***    doesn't have full symbol information.  Unqualified symbol      ***
    ***    resolution is turned off by default. Please either specify a   ***
    ***    fully qualified symbol module!symbolname, or enable resolution ***
    ***    of unqualified symbols by typing ".symopt- 100". Note that     ***
    ***    enabling unqualified symbol resolution with network symbol     ***
    ***    server shares in the symbol path may cause the debugger to     ***
    ***    appear to hang for long periods of time when an incorrect      ***
    ***    symbol name is typed or the network symbol server is down.     ***
    ***                                                                   ***
    ***    For some commands to work properly, your symbol path           ***
    ***    must point to .pdb files that have full type information.      ***
    ***                                                                   ***
    ***    Certain .pdb files (such as the public OS symbols) do not      ***
    ***    contain the required information.  Contact the group that      ***
    ***    provided you with these symbols if you need this command to    ***
    ***    work.                                                          ***
    ***                                                                   ***
    ***    Type referenced: nt!_MMPTE_TRANSITION                          ***
    ***                                                                   ***
    *************************************************************************
    Windows 10 Kernel Version 18362 MP (8 procs) Free x64
    Product: WinNt, suite: TerminalServer SingleUserTS Personal
    Built by: 18362.1.amd64fre.19h1_release.190318-1202
    Machine Name:
    Kernel base = 0xfffff806`28200000 PsLoadedModuleList = 0xfffff806`286475b0
    Debug session time: Tue Oct  8 09:33:20.265 2019 (UTC + 8:00)
    System Uptime: 0 days 12:38:17.344
    Map \SystemRoot\system32\ntoskrnl.exe:
      Image region 800:34f000 does not fit in mapping
    *** WARNING: Unable to verify timestamp for ntoskrnl.exe
    *************************************************************************
    ***                                                                   ***
    ***                                                                   ***
    ***    Either you specified an unqualified symbol, or your debugger   ***
    ***    doesn't have full symbol information.  Unqualified symbol      ***
    ***    resolution is turned off by default. Please either specify a   ***
    ***    fully qualified symbol module!symbolname, or enable resolution ***
    ***    of unqualified symbols by typing ".symopt- 100". Note that     ***
    ***    enabling unqualified symbol resolution with network symbol     ***
    ***    server shares in the symbol path may cause the debugger to     ***
    ***    appear to hang for long periods of time when an incorrect      ***
    ***    symbol name is typed or the network symbol server is down.     ***
    ***                                                                   ***
    ***    For some commands to work properly, your symbol path           ***
    ***    must point to .pdb files that have full type information.      ***
    ***                                                                   ***
    ***    Certain .pdb files (such as the public OS symbols) do not      ***
    ***    contain the required information.  Contact the group that      ***
    ***    provided you with these symbols if you need this command to    ***
    ***    work.                                                          ***
    ***                                                                   ***
    ***    Type referenced: nt!_MMPTE_TRANSITION                          ***
    ***                                                                   ***
    *************************************************************************
    Loading Kernel Symbols
    .

    Press ctrl-c (cdb, kd, ntsd) or ctrl-break (windbg) to abort symbol loads that take too long.
    Run !sym noisy before .reload to track down problems loading symbols.

    ..............................................................
    ................................................................
    ................................................................
    ....................
    Loading User Symbols
    Loading unloaded module list
    ........................................

    ************* Symbol Loading Error Summary **************
    Module name            Error
    ntoskrnl               The system cannot find the file specified

    You can troubleshoot most symbol related issues by turning on symbol loading diagnostics (!sym noisy) and repeating the command that caused symbols to be loaded.
    You should also verify that your symbol search path (.sympath) is correct.
    For analysis of this file, run !analyze -v
    2019年10月8日 1:49

全部回复

  • 你好,

    你现在提供的信息不包括dump文件的信息,里面没有包括具体的一些蓝屏错误相关的文件信息。

    请将Mini dump文件或者memory dump上传到One drive或者类似百度云盘这样的云共享上。

    在回复中附上下载链接,方便下载后进行分析。

    希望对您有帮助,如果回答是有帮助的, 请将其标记为答案, 可以帮助其他有相同问题的社区成员, 并快速找到有用的答复。


    Please remember to mark the replies as answers if they help.
    If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com.

    2019年10月8日 2:54
  • 百度网盘

    链接: https://pan.baidu.com/s/1TcmsWEw4vs5s78bPnxIMFw 提取码: cvwn

    麻烦帮我看下呢?经常一开机就蓝屏,终止代码:KERNEL_SECURITY_CHECK_FAILURE,多谢!

    2019年10月9日 2:56
  • 你好,

    感谢您的回复和dump上传。

    但是这个dump可能已经损坏。其中显示KERNEL_SECURITY_CHECK_FAILURE (139),是一个内核的错误,但是没有用debug分析出具体的信息,显示了错误,您提到经常蓝屏,是否有其他的mini dump文件,麻烦多传几个上来。

    因为内核出现问题可能比较多的原因,例如驱动或者一些三方的软件。

    希望对您有帮助,如果回答是有帮助的, 请将其标记为答案, 可以帮助其他有相同问题的社区成员, 并快速找到有用的答复。


    Please remember to mark the replies as answers if they help.
    If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com.

    2019年10月9日 10:20