WIN7 2次蓝屏，求分析

leisong

2次都是开着XP MODE的时候发生的蓝屏，求分析

安仔

XP MODE .. 好DT啊

zst470396853

怎么在这里 就助?

是和360什么软件有冲突?  还是和什么功能有冲突   麻烦你说清白点  不是一蓝屏就找360吧?

QQ1014530747

貌似关数字毛事啊？

sevenday

xp mode是什么意思？虚拟机运行的XP？

leisong

sevenday 发表于 2012-2-14 22:21
xp mode是什么意思？虚拟机运行的XP？

微软发布的虚拟机

lh920215

leisong 发表于 2012-2-14 22:28
怪了，我有说关360的事了，貌似现在卡饭除了360区还残存了点技术讨论氛围，偶尔还来几个大牛，其它区都在忙 ...

你这话说的
呵呵~

jm3800072

论坛不是有求助区吗?

360主动防御

你的笔记本是mac? AppleMNT.sys是Apple出的装win的 BootCamp的驱动.


PAGE_FAULT_IN_NONPAGED_AREA (50)
Invalid system memory was referenced.  This cannot be protected by try-except,
it must be protected by a Probe.  Typically the address is just plain bad or it
is pointing at freed memory.
Arguments:
Arg1: f5fa570c, memory referenced.
Arg2: 00000000, value 0 = read operation, 1 = write operation.
Arg3: 84bf47ef, If non-zero, the instruction address which referenced the bad memory
        address.
Arg4: 00000002, (reserved)

Debugging Details:
------------------


Could not read faulting driver name
Failed calling InternetOpenUrl, GLE=12007

READ_ADDRESS: GetPointerFromAddress: unable to read from 83fb5848
Unable to read MiSystemVaType memory at 83f94e40
f5fa570c

FAULTING_IP:
AppleMNT+7ef
84bf47ef 8b01            mov     eax,dword ptr [ecx]

MM_INTERNAL_CODE:  2

CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  WIN7_DRIVER_FAULT

BUGCHECK_STR:  0x50

PROCESS_NAME:  explorer.exe

CURRENT_IRQL:  0

TRAP_FRAME:  99a7b960 -- (.trap 0xffffffff99a7b960)
ErrCode = 00000000
eax=e951570c ebx=0ca90000 ecx=f5fa570c edx=f60241a3 esi=0ca900e8 edi=83e5d717
eip=84bf47ef esp=99a7b9d4 ebp=99a7ba04 iopl=0         nv up ei ng nz na pe cy
cs=0008  ss=0010  ds=0023  es=0023  fs=0030  gs=0000             efl=00010287
AppleMNT+0x7ef:
84bf47ef 8b01            mov     eax,dword ptr [ecx]  ds:0023:f5fa570c=????????
Resetting default scope

LAST_CONTROL_TRANSFER:  from 83e8d3e8 to 83eda3db

STACK_TEXT:  
99a7b948 83e8d3e8 00000000 f5fa570c 00000000 nt!MmAccessFault+0x106
99a7b948 84bf47ef 00000000 f5fa570c 00000000 nt!KiTrap0E+0xdc
WARNING: Stack unwind information not available. Following frames may be wrong.
99a7ba04 84bf48c6 99a7ba34 840ba444 866237d0 AppleMNT+0x7ef
99a7ba0c 840ba444 866237d0 00000668 99a7ba5c AppleMNT+0x8c6
99a7ba34 840a2325 866237d0 00000668 83f8d848 nt!PsCallImageNotifyRoutines+0x62
99a7bae8 84092df0 87c31c58 8827ad40 99a7bbe4 nt!MiMapViewOfImageSection+0x670
99a7bb58 84092ee0 8827ad40 99a7bbe4 00000000 nt!MiMapViewOfSection+0x22e
99a7bb88 8409363f a031a808 8827ad40 99a7bbe4 nt!MmMapViewOfSection+0x2a
99a7bc04 83e8a1fa 00001200 ffffffff 079ed394 nt!NtMapViewOfSection+0x204
99a7bc04 777b7094 00001200 ffffffff 079ed394 nt!KiFastCallEntry+0x12a
079ed4a0 00000000 00000000 00000000 00000000 0x777b7094


STACK_COMMAND:  kb

FOLLOWUP_IP:
AppleMNT+7ef
84bf47ef 8b01            mov     eax,dword ptr [ecx]

SYMBOL_STACK_INDEX:  2

SYMBOL_NAME:  AppleMNT+7ef

FOLLOWUP_NAME:  wintriag

MODULE_NAME: AppleMNT

IMAGE_NAME:  AppleMNT.sys

DEBUG_FLR_IMAGE_TIMESTAMP:  4d76d76f

FAILURE_BUCKET_ID:  0x50_AppleMNT+7ef

BUCKET_ID:  0x50_AppleMNT+7ef

Followup: wintriag
---------

3: kd> lmvm AppleMNT
start    end        module name
84bf4000 84bf5a80   AppleMNT   (no symbols)           
    Loaded symbol image file: AppleMNT.sys
    Image path: \SystemRoot\System32\Drivers\AppleMNT.sys
    Image name: AppleMNT.sys
    Timestamp:        Wed Mar 09 09:27:11 2011 (4D76D76F)
    CheckSum:         0000AABC
    ImageSize:        00001A80
    Translations:     0000.04b0 0000.04e4 0409.04b0 0409.04e4