MEMORY.DMP 的相关信息如下:
Microsoft (R) Windows Debugger Version 6.8.0004.0 X86
Copyright (c) Microsoft Corporation. All rights reserved.
Loading Dump File [C:\Users\lx\Desktop\052512-25084-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available
Symbol search path is: C:\Symbols
Executable search path is:
Unable to load image \SystemRoot\system32\ntoskrnl.exe, Win32 error 0n2
*** WARNING: Unable to verify timestamp for ntoskrnl.exe
*** ERROR: Module load completed but symbols could not be loaded for ntoskrnl.exe
Windows Kernel Version 7601 (Service Pack 1) MP (2 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 7601.17803.amd64fre.win7sp1_gdr.120330-1504
Kernel base = 0xfffff800`04615000 PsLoadedModuleList = 0xfffff800`04859670
Debug session time: Fri May 25 13:39:15.222 2012 (GMT+8)
System Uptime: 0 days 1:18:07.095
Unable to load image \SystemRoot\system32\ntoskrnl.exe, Win32 error 0n2
*** WARNING: Unable to verify timestamp for ntoskrnl.exe
*** ERROR: Module load completed but symbols could not be loaded for ntoskrnl.exe
Loading Kernel Symbols
......................................................................................................................................................................
Loading User Symbols
Loading unloaded module list
.....
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
Use !analyze -v to get detailed debugging information.
BugCheck A, {0, 2, 0, fffff80004bff477}
*** WARNING: Unable to verify timestamp for hal.dll
*** ERROR: Module load completed but symbols could not be loaded for hal.dll
Unable to load image \SystemRoot\system32\DRIVERS\netw5v64.sys, Win32 error 0n2
*** WARNING: Unable to verify timestamp for netw5v64.sys
*** ERROR: Module load completed but symbols could not be loaded for netw5v64.sys
***** Kernel symbols are WRONG. Please fix symbols to do analysis.
*************************************************************************
*** ***
*** ***
*** Your debugger is not using the correct symbols ***
*** ***
*** In order for this command to work properly, your symbol path ***
*** must point to .pdb files that have full type information. ***
*** ***
*** Certain .pdb files (such as the public OS symbols) do not ***
*** contain the required information. Contact the group that ***
*** provided you with these symbols if you need this command to ***
*** work. ***
*** ***
*** Type referenced: nt!_KPRCB ***
*** ***
*************************************************************************
*************************************************************************
*** ***
*** ***
*** Your debugger is not using the correct symbols ***
*** ***
*** In order for this command to work properly, your symbol path ***
*** must point to .pdb files that have full type information. ***
*** ***
*** Certain .pdb files (such as the public OS symbols) do not ***
*** contain the required information. Contact the group that ***
*** provided you with these symbols if you need this command to ***
*** work. ***
*** ***
*** Type referenced: nt!KPRCB ***
*** ***
*************************************************************************
*************************************************************************
*** ***
*** ***
*** Your debugger is not using the correct symbols ***
*** ***
*** In order for this command to work properly, your symbol path ***
*** must point to .pdb files that have full type information. ***
*** ***
*** Certain .pdb files (such as the public OS symbols) do not ***
*** contain the required information. Contact the group that ***
*** provided you with these symbols if you need this command to ***
*** work. ***
*** ***
*** Type referenced: nt!_KPRCB ***
*** ***
*************************************************************************
*************************************************************************
*** ***
*** ***
*** Your debugger is not using the correct symbols ***
*** ***
*** In order for this command to work properly, your symbol path ***
*** must point to .pdb files that have full type information. ***
*** ***
*** Certain .pdb files (such as the public OS symbols) do not ***
*** contain the required information. Contact the group that ***
*** provided you with these symbols if you need this command to ***
*** work. ***
*** ***
*** Type referenced: nt!KPRCB ***
*** ***
*************************************************************************
*************************************************************************
*** ***
*** ***
*** Your debugger is not using the correct symbols ***
*** ***
*** In order for this command to work properly, your symbol path ***
*** must point to .pdb files that have full type information. ***
*** ***
*** Certain .pdb files (such as the public OS symbols) do not ***
*** contain the required information. Contact the group that ***
*** provided you with these symbols if you need this command to ***
*** work. ***
*** ***
*** Type referenced: nt!_KPRCB ***
*** ***
*************************************************************************
*************************************************************************
*** ***
*** ***
*** Your debugger is not using the correct symbols ***
*** ***
*** In order for this command to work properly, your symbol path ***
*** must point to .pdb files that have full type information. ***
*** ***
*** Certain .pdb files (such as the public OS symbols) do not ***
*** contain the required information. Contact the group that ***
*** provided you with these symbols if you need this command to ***
*** work. ***
*** ***
*** Type referenced: nt!_KPRCB ***
*** ***
*************************************************************************
*************************************************************************
*** ***
*** ***
*** Your debugger is not using the correct symbols ***
*** ***
*** In order for this command to work properly, your symbol path ***
*** must point to .pdb files that have full type information. ***
*** ***
*** Certain .pdb files (such as the public OS symbols) do not ***
*** contain the required information. Contact the group that ***
*** provided you with these symbols if you need this command to ***
*** work. ***
*** ***
*** Type referenced: nt!_KPRCB ***
*** ***
*************************************************************************
*************************************************************************
*** ***
*** ***
*** Your debugger is not using the correct symbols ***
*** ***
*** In order for this command to work properly, your symbol path ***
*** must point to .pdb files that have full type information. ***
*** ***
*** Certain .pdb files (such as the public OS symbols) do not ***
*** contain the required information. Contact the group that ***
*** provided you with these symbols if you need this command to ***
*** work. ***
*** ***
*** Type referenced: nt!_KPRCB ***
*** ***
*************************************************************************
Probably caused by : ntoskrnl.exe ( nt+7f1c0 )
Followup: MachineOwner
---------
0: kd> !analyze -v
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
IRQL_NOT_LESS_OR_EQUAL (a)
An attempt was made to access a pageable (or completely invalid) address at an
interrupt request level (IRQL) that is too high. This is usually
caused by drivers using improper addresses.
If a kernel debugger is available get the stack backtrace.
Arguments:
Arg1: 0000000000000000, memory referenced
Arg2: 0000000000000002, IRQL
Arg3: 0000000000000000, bitfield :
bit 0 : value 0 = read operation, 1 = write operation
bit 3 : value 0 = not an execute operation, 1 = execute operation (only on chips which support this level of status)
Arg4: fffff80004bff477, address which referenced memory
Debugging Details:
------------------
***** Kernel symbols are WRONG. Please fix symbols to do analysis.
*************************************************************************
*** ***
*** ***
*** Your debugger is not using the correct symbols ***
*** ***
*** In order for this command to work properly, your symbol path ***
*** must point to .pdb files that have full type information. ***
*** ***
*** Certain .pdb files (such as the public OS symbols) do not ***
*** contain the required information. Contact the group that ***
*** provided you with these symbols if you need this command to ***
*** work. ***
*** ***
*** Type referenced: nt!_KPRCB ***
*** ***
*************************************************************************
*************************************************************************
*** ***
*** ***
*** Your debugger is not using the correct symbols ***
*** ***
*** In order for this command to work properly, your symbol path ***
*** must point to .pdb files that have full type information. ***
*** ***
*** Certain .pdb files (such as the public OS symbols) do not ***
*** contain the required information. Contact the group that ***
*** provided you with these symbols if you need this command to ***
*** work. ***
*** ***
*** Type referenced: nt!KPRCB ***
*** ***
*************************************************************************
*************************************************************************
*** ***
*** ***
*** Your debugger is not using the correct symbols ***
*** ***
*** In order for this command to work properly, your symbol path ***
*** must point to .pdb files that have full type information. ***
*** ***
*** Certain .pdb files (such as the public OS symbols) do not ***
*** contain the required information. Contact the group that ***
*** provided you with these symbols if you need this command to ***
*** work. ***
*** ***
*** Type referenced: nt!_KPRCB ***
*** ***
*************************************************************************
*************************************************************************
*** ***
*** ***
*** Your debugger is not using the correct symbols ***
*** ***
*** In order for this command to work properly, your symbol path ***
*** must point to .pdb files that have full type information. ***
*** ***
*** Certain .pdb files (such as the public OS symbols) do not ***
*** contain the required information. Contact the group that ***
*** provided you with these symbols if you need this command to ***
*** work. ***
*** ***
*** Type referenced: nt!KPRCB ***
*** ***
*************************************************************************
*************************************************************************
*** ***
*** ***
*** Your debugger is not using the correct symbols ***
*** ***
*** In order for this command to work properly, your symbol path ***
*** must point to .pdb files that have full type information. ***
*** ***
*** Certain .pdb files (such as the public OS symbols) do not ***
*** contain the required information. Contact the group that ***
*** provided you with these symbols if you need this command to ***
*** work. ***
*** ***
*** Type referenced: nt!_KPRCB ***
*** ***
*************************************************************************
*************************************************************************
*** ***
*** ***
*** Your debugger is not using the correct symbols ***
*** ***
*** In order for this command to work properly, your symbol path ***
*** must point to .pdb files that have full type information. ***
*** ***
*** Certain .pdb files (such as the public OS symbols) do not ***
*** contain the required information. Contact the group that ***
*** provided you with these symbols if you need this command to ***
*** work. ***
*** ***
*** Type referenced: nt!_KPRCB ***
*** ***
*************************************************************************
*************************************************************************
*** ***
*** ***
*** Your debugger is not using the correct symbols ***
*** ***
*** In order for this command to work properly, your symbol path ***
*** must point to .pdb files that have full type information. ***
*** ***
*** Certain .pdb files (such as the public OS symbols) do not ***
*** contain the required information. Contact the group that ***
*** provided you with these symbols if you need this command to ***
*** work. ***
*** ***
*** Type referenced: nt!_KPRCB ***
*** ***
*************************************************************************
*************************************************************************
*** ***
*** ***
*** Your debugger is not using the correct symbols ***
*** ***
*** In order for this command to work properly, your symbol path ***
*** must point to .pdb files that have full type information. ***
*** ***
*** Certain .pdb files (such as the public OS symbols) do not ***
*** contain the required information. Contact the group that ***
*** provided you with these symbols if you need this command to ***
*** work. ***
*** ***
*** Type referenced: nt!_KPRCB ***
*** ***
*************************************************************************
MODULE_NAME: nt
FAULTING_MODULE: fffff80004615000 nt
DEBUG_FLR_IMAGE_TIMESTAMP: 4f76721c
READ_ADDRESS: unable to get nt!MmSpecialPoolStart
unable to get nt!MmSpecialPoolEnd
unable to get nt!MmPoolCodeStart
unable to get nt!MmPoolCodeEnd
0000000000000000
CURRENT_IRQL: 2
FAULTING_IP:
hal+2477
fffff800`04bff477 448b08 mov r9d,dword ptr [rax]
CUSTOMER_CRASH_COUNT: 1
DEFAULT_BUCKET_ID: WRONG_SYMBOLS
BUGCHECK_STR: 0xA
LAST_CONTROL_TRANSFER: from fffff80004693769 to fffff800046941c0
STACK_TEXT:
fffff880`0d90d958 fffff800`04693769 : 00000000`0000000a 00000000`00000000 00000000`00000002 00000000`00000000 : nt+0x7f1c0
fffff880`0d90d960 00000000`0000000a : 00000000`00000000 00000000`00000002 00000000`00000000 fffff800`04bff477 : nt+0x7e769
fffff880`0d90d968 00000000`00000000 : 00000000`00000002 00000000`00000000 fffff800`04bff477 ffffffff`fffffffd : 0xa
fffff880`0d90d970 00000000`00000002 : 00000000`00000000 fffff800`04bff477 ffffffff`fffffffd b834ef17`255c0c8f : 0x0
fffff880`0d90d978 00000000`00000000 : fffff800`04bff477 ffffffff`fffffffd b834ef17`255c0c8f c44aa525`6a7c4496 : 0x2
fffff880`0d90d980 fffff800`04bff477 : ffffffff`fffffffd b834ef17`255c0c8f c44aa525`6a7c4496 d4ed5910`bc97cb98 : 0x0
fffff880`0d90d988 ffffffff`fffffffd : b834ef17`255c0c8f c44aa525`6a7c4496 d4ed5910`bc97cb98 ab1e162c`195fd231 : hal+0x2477
fffff880`0d90d990 b834ef17`255c0c8f : c44aa525`6a7c4496 d4ed5910`bc97cb98 ab1e162c`195fd231 00000000`00000000 : 0xffffffff`fffffffd
fffff880`0d90d998 c44aa525`6a7c4496 : d4ed5910`bc97cb98 ab1e162c`195fd231 00000000`00000000 00000000`00000000 : 0xb834ef17`255c0c8f
fffff880`0d90d9a0 d4ed5910`bc97cb98 : ab1e162c`195fd231 00000000`00000000 00000000`00000000 00000000`00000000 : 0xc44aa525`6a7c4496
fffff880`0d90d9a8 ab1e162c`195fd231 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0xd4ed5910`bc97cb98
fffff880`0d90d9b0 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0xab1e162c`195fd231
fffff880`0d90d9b8 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x0
fffff880`0d90d9c0 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x0
fffff880`0d90d9c8 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x0
fffff880`0d90d9d0 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x0
fffff880`0d90d9d8 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x0
fffff880`0d90d9e0 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x0
fffff880`0d90d9e8 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x0
fffff880`0d90d9f0 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x0
fffff880`0d90d9f8 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x0
fffff880`0d90da00 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x0
fffff880`0d90da08 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x0
fffff880`0d90da10 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 fffff800`04690740 : 0x0
fffff880`0d90da18 00000000`00000000 : 00000000`00000000 00000000`00000000 fffff800`04690740 00000000`00000011 : 0x0
fffff880`0d90da20 00000000`00000000 : 00000000`00000000 fffff800`04690740 00000000`00000011 fffff880`07315540 : 0x0
fffff880`0d90da28 00000000`00000000 : fffff800`04690740 00000000`00000011 fffff880`07315540 00000980`00000000 : 0x0
fffff880`0d90da30 fffff800`04690740 : 00000000`00000011 fffff880`07315540 00000980`00000000 0000007f`fffffff8 : 0x0
fffff880`0d90da38 00000000`00000011 : fffff880`07315540 00000980`00000000 0000007f`fffffff8 fffff880`06fbd397 : nt+0x7b740
fffff880`0d90da40 fffff880`07315540 : 00000980`00000000 0000007f`fffffff8 fffff880`06fbd397 fffffa80`074ebed0 : 0x11
fffff880`0d90da48 00000980`00000000 : 0000007f`fffffff8 fffff880`06fbd397 fffffa80`074ebed0 00000000`00000001 : netw5v64+0x50b540
fffff880`0d90da50 0000007f`fffffff8 : fffff880`06fbd397 fffffa80`074ebed0 00000000`00000001 fffffa80`0b818640 : 0x980`00000000
fffff880`0d90da58 fffff880`06fbd397 : fffffa80`074ebed0 00000000`00000001 fffffa80`0b818640 fffffa80`07a24500 : 0x7f`fffffff8
fffff880`0d90da60 fffffa80`074ebed0 : 00000000`00000001 fffffa80`0b818640 fffffa80`07a24500 00000000`00001000 : netw5v64+0x1b3397
fffff880`0d90da68 00000000`00000001 : fffffa80`0b818640 fffffa80`07a24500 00000000`00001000 00000000`00000034 : 0xfffffa80`074ebed0
fffff880`0d90da70 fffffa80`0b818640 : fffffa80`07a24500 00000000`00001000 00000000`00000034 fffffa80`074ebed0 : 0x1
fffff880`0d90da78 fffffa80`07a24500 : 00000000`00001000 00000000`00000034 fffffa80`074ebed0 fffff800`046923e0 : 0xfffffa80`0b818640
fffff880`0d90da80 00000000`00001000 : 00000000`00000034 fffffa80`074ebed0 fffff800`046923e0 00000000`00000002 : 0xfffffa80`07a24500
fffff880`0d90da88 00000000`00000034 : fffffa80`074ebed0 fffff800`046923e0 00000000`00000002 fffff880`06e184d3 : 0x1000
fffff880`0d90da90 fffffa80`074ebed0 : fffff800`046923e0 00000000`00000002 fffff880`06e184d3 00000000`00000000 : 0x34
fffff880`0d90da98 fffff800`046923e0 : 00000000`00000002 fffff880`06e184d3 00000000`00000000 fffffa80`074ebed0 : 0xfffffa80`074ebed0
fffff880`0d90daa0 00000000`00000002 : fffff880`06e184d3 00000000`00000000 fffffa80`074ebed0 00000000`00000000 : nt+0x7d3e0
fffff880`0d90daa8 fffff880`06e184d3 : 00000000`00000000 fffffa80`074ebed0 00000000`00000000 00001f80`01000000 : 0x2
fffff880`0d90dab0 00000000`00000000 : fffffa80`074ebed0 00000000`00000000 00001f80`01000000 00000000`00000000 : netw5v64+0xe4d3
fffff880`0d90dab8 fffffa80`074ebed0 : 00000000`00000000 00001f80`01000000 00000000`00000000 00000000`000005fc : 0x0
fffff880`0d90dac0 00000000`00000000 : 00001f80`01000000 00000000`00000000 00000000`000005fc 00000000`000005fc : 0xfffffa80`074ebed0
fffff880`0d90dac8 00001f80`01000000 : 00000000`00000000 00000000`000005fc 00000000`000005fc 00000000`00000034 : 0x0
fffff880`0d90dad0 00000000`00000000 : 00000000`000005fc 00000000`000005fc 00000000`00000034 00000000`00000000 : 0x1f80`01000000
fffff880`0d90dad8 00000000`000005fc : 00000000`000005fc 00000000`00000034 00000000`00000000 00000000`000fffff : 0x0
fffff880`0d90dae0 00000000`000005fc : 00000000`00000034 00000000`00000000 00000000`000fffff fffffa80`096a05b0 : 0x5fc
fffff880`0d90dae8 00000000`00000034 : 00000000`00000000 00000000`000fffff fffffa80`096a05b0 00000000`00000000 : 0x5fc
fffff880`0d90daf0 00000000`00000000 : 00000000`000fffff fffffa80`096a05b0 00000000`00000000 00000000`00000000 : 0x34
fffff880`0d90daf8 00000000`000fffff : fffffa80`096a05b0 00000000`00000000 00000000`00000000 00000000`00000000 : 0x0
fffff880`0d90db00 fffffa80`096a05b0 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0xfffff
fffff880`0d90db08 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0xfffffa80`096a05b0
fffff880`0d90db10 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x0
fffff880`0d90db18 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x0
fffff880`0d90db20 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x0
fffff880`0d90db28 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x0
fffff880`0d90db30 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x0
fffff880`0d90db38 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x0
fffff880`0d90db40 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x0
fffff880`0d90db48 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x0
fffff880`0d90db50 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x0
fffff880`0d90db58 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 fffff880`06e16515 : 0x0
fffff880`0d90db60 00000000`00000000 : 00000000`00000000 00000000`00000000 fffff880`06e16515 fffffa80`0b68ef00 : 0x0
fffff880`0d90db68 00000000`00000000 : 00000000`00000000 fffff880`06e16515 fffffa80`0b68ef00 00000000`00000001 : 0x0
fffff880`0d90db70 00000000`00000000 : fffff880`06e16515 fffffa80`0b68ef00 00000000`00000001 00000000`00000002 : 0x0
fffff880`0d90db78 fffff880`06e16515 : fffffa80`0b68ef00 00000000`00000001 00000000`00000002 fffff800`04bffe08 : 0x0
fffff880`0d90db80 fffffa80`0b68ef00 : 00000000`00000001 00000000`00000002 fffff800`04bffe08 fffffa80`0b68ef00 : netw5v64+0xc515
fffff880`0d90db88 00000000`00000001 : 00000000`00000002 fffff800`04bffe08 fffffa80`0b68ef00 00000000`00000002 : 0xfffffa80`0b68ef00
fffff880`0d90db90 00000000`00000002 : fffff800`04bffe08 fffffa80`0b68ef00 00000000`00000002 fffffa80`07ad3d70 : 0x1
fffff880`0d90db98 fffff800`04bffe08 : fffffa80`0b68ef00 00000000`00000002 fffffa80`07ad3d70 00000000`00000246 : 0x2
fffff880`0d90dba0 fffffa80`0b68ef00 : 00000000`00000002 fffffa80`07ad3d70 00000000`00000246 fffff880`0d90dbd0 : hal+0x2e08
fffff880`0d90dba8 00000000`00000002 : fffffa80`07ad3d70 00000000`00000246 fffff880`0d90dbd0 00000000`00000018 : 0xfffffa80`0b68ef00
STACK_COMMAND: kb
FOLLOWUP_IP:
nt+7f1c0
fffff800`046941c0 48894c2408 mov qword ptr [rsp+8],rcx
SYMBOL_STACK_INDEX: 0
SYMBOL_NAME: nt+7f1c0
FOLLOWUP_NAME: MachineOwner
IMAGE_NAME: ntoskrnl.exe
BUCKET_ID: WRONG_SYMBOLS
Followup: MachineOwner
---------
|