locked
看不懂WinDbg 所分析的DMP檔案 RRS feed

  • 一般討論

  • 我有一台windows XP pro SP3電腦,不知何故經常發生重開機的問題

    後來用了WinDbg工具來分析MEMORY.DMP檔

    但不太清楚分析後看不懂問題是出在哪裡???

    ------------------------------------------------------


    Microsoft (R) Windows Debugger Version 6.12.0002.633 X86
    Copyright (c) Microsoft Corporation. All rights reserved.


    Loading Dump File [C:\Documents and Settings\Administrator\Desktop\MEMORY.DMP]
    Kernel Complete Dump File: Full address space is available

    Symbol search path is: SRV*c:\websymbols*http://msdl.microsoft.com/download/symbols
    Executable search path is:
    Windows XP Kernel Version 2600 (Service Pack 3.3300) UP Free x86 compatible
    Product: WinNt, suite: TerminalServer SingleUserTS
    Built by: 2600.xpsp.080125-2028
    Machine Name:
    Kernel base = 0x804d7000 PsLoadedModuleList = 0x80553fc0
    Debug session time: Mon Jan 17 17:13:01.625 2011 (UTC + 8:00)
    System Uptime: 0 days 0:34:33.212
    Loading Kernel Symbols
    ...............................................................
    ..........................................
    Loading User Symbols
    .WARNING: Loader 00251ec0 timestamp 479a8c61 != header timestamp 479aa0ed
    .WARNING: Loader 00251f18 timestamp 479a8c61 != header timestamp 479abd84
    .....................................WARNING: Loader 00253ba0 timestamp 479a8c4a != header timestamp 479a8e82
    .........................
    ................................................................
    .................WARNING: Loader 00259758 timestamp 479a8c20 != header timestamp 3b7dfe39
    ...............................................
    ....
    Loading unloaded module list
    .............*** ERROR: Symbol file could not be found.  Defaulted to export symbols for ntdll.dll -

    *******************************************************************************
    *                                                                             *
    *                        Bugcheck Analysis                                    *
    *                                                                             *
    *******************************************************************************

    Use !analyze -v to get detailed debugging information.

    BugCheck D1, {0, 2, 8, 0}

    *************************************************************************
    ***                                                                   ***
    ***                                                                   ***
    ***    Your debugger is not using the correct symbols                 ***
    ***                                                                   ***
    ***    In order for this command to work properly, your symbol path   ***
    ***    must point to .pdb files that have full type information.      ***
    ***                                                                   ***
    ***    Certain .pdb files (such as the public OS symbols) do not      ***
    ***    contain the required information.  Contact the group that      ***
    ***    provided you with these symbols if you need this command to    ***
    ***    work.                                                          ***
    ***                                                                   ***
    ***    Type referenced: nt!_KPRCB                                     ***
    ***                                                                   ***
    *************************************************************************
    *************************************************************************
    ***                                                                   ***
    ***                                                                   ***
    ***    Your debugger is not using the correct symbols                 ***
    ***                                                                   ***
    ***    In order for this command to work properly, your symbol path   ***
    ***    must point to .pdb files that have full type information.      ***
    ***                                                                   ***
    ***    Certain .pdb files (such as the public OS symbols) do not      ***
    ***    contain the required information.  Contact the group that      ***
    ***    provided you with these symbols if you need this command to    ***
    ***    work.                                                          ***
    ***                                                                   ***
    ***    Type referenced: nt!KPRCB                                      ***
    ***                                                                   ***
    *************************************************************************
    *************************************************************************
    ***                                                                   ***
    ***                                                                   ***
    ***    Your debugger is not using the correct symbols                 ***
    ***                                                                   ***
    ***    In order for this command to work properly, your symbol path   ***
    ***    must point to .pdb files that have full type information.      ***
    ***                                                                   ***
    ***    Certain .pdb files (such as the public OS symbols) do not      ***
    ***    contain the required information.  Contact the group that      ***
    ***    provided you with these symbols if you need this command to    ***
    ***    work.                                                          ***
    ***                                                                   ***
    ***    Type referenced: nt!_KPRCB                                     ***
    ***                                                                   ***
    *************************************************************************
    *************************************************************************
    ***                                                                   ***
    ***                                                                   ***
    ***    Your debugger is not using the correct symbols                 ***
    ***                                                                   ***
    ***    In order for this command to work properly, your symbol path   ***
    ***    must point to .pdb files that have full type information.      ***
    ***                                                                   ***
    ***    Certain .pdb files (such as the public OS symbols) do not      ***
    ***    contain the required information.  Contact the group that      ***
    ***    provided you with these symbols if you need this command to    ***
    ***    work.                                                          ***
    ***                                                                   ***
    ***    Type referenced: nt!KPRCB                                      ***
    ***                                                                   ***
    *************************************************************************
    *************************************************************************
    ***                                                                   ***
    ***                                                                   ***
    ***    Your debugger is not using the correct symbols                 ***
    ***                                                                   ***
    ***    In order for this command to work properly, your symbol path   ***
    ***    must point to .pdb files that have full type information.      ***
    ***                                                                   ***
    ***    Certain .pdb files (such as the public OS symbols) do not      ***
    ***    contain the required information.  Contact the group that      ***
    ***    provided you with these symbols if you need this command to    ***
    ***    work.                                                          ***
    ***                                                                   ***
    ***    Type referenced: nt!_KPRCB                                     ***
    ***                                                                   ***
    *************************************************************************
    *** ERROR: Symbol file could not be found.  Defaulted to export symbols for cbi.dll -
    *************************************************************************
    ***                                                                   ***
    ***                                                                   ***
    ***    Your debugger is not using the correct symbols                 ***
    ***                                                                   ***
    ***    In order for this command to work properly, your symbol path   ***
    ***    must point to .pdb files that have full type information.      ***
    ***                                                                   ***
    ***    Certain .pdb files (such as the public OS symbols) do not      ***
    ***    contain the required information.  Contact the group that      ***
    ***    provided you with these symbols if you need this command to    ***
    ***    work.                                                          ***
    ***                                                                   ***
    ***    Type referenced: nt!_KPRCB                                     ***
    ***                                                                   ***
    *************************************************************************
    *************************************************************************
    ***                                                                   ***
    ***                                                                   ***
    ***    Your debugger is not using the correct symbols                 ***
    ***                                                                   ***
    ***    In order for this command to work properly, your symbol path   ***
    ***    must point to .pdb files that have full type information.      ***
    ***                                                                   ***
    ***    Certain .pdb files (such as the public OS symbols) do not      ***
    ***    contain the required information.  Contact the group that      ***
    ***    provided you with these symbols if you need this command to    ***
    ***    work.                                                          ***
    ***                                                                   ***
    ***    Type referenced: nt!_KPRCB                                     ***
    ***                                                                   ***
    *************************************************************************
    WARNING: Loader 00251ec0 timestamp 479a8c61 != header timestamp 479aa0ed
    WARNING: Loader 00251f18 timestamp 479a8c61 != header timestamp 479abd84
    *** ERROR: Symbol file could not be found.  Defaulted to export symbols for kernel32.dll -
    Probably caused by : ntkrnlpa.exe ( nt!KiTrap0E+233 )

    Followup: MachineOwner
    ---------

     

    2011年1月20日 下午 05:20

所有回覆

  • 建議你可以看一下這一篇文章後再試試看

    易寶典:Windows常見藍屏故障分析(MVP 撰稿)

    不知道你發生問題之前有操作過哪一些動作

    可以補充一下嗎


    學生們一定要試試,不是學生的也大家告訴大家,一起為台灣加油!

    2011年1月21日 上午 08:39
  • 你的windbg沒有設定正確(Symbol) , 所以沒辦法看到正確訊息

    參考下面文章作設定
    http://support.microsoft.com/kb/311503

    如果看不懂看你要不要把dump檔案上傳到網路上給大家看

    Thanks


    年度軟體技術盛會微軟Tech.Days 2010 9月28日登場, 您還在等什麼? 快報名就對了.


    2011年1月26日 上午 03:11