电脑蓝屏，请协助分析，谢谢。

sunjushi

dmp文件内容如下：

1. 
   
2. Microsoft (R) Windows Debugger Version 6.12.0002.633 X86
   
3. Copyright (c) Microsoft Corporation. All rights reserved.
   
4. 
   
5. 
   
6. Loading Dump File [D:\Tencent Files\531959836\FileRecv\012914-14445-01.dmp]
   
7. Mini Kernel Dump File: Only registers and stack trace are available
   
8. 
   
9. Symbol search path is: SRV*C:\Symbols*http://msdl.microsoft.com/download/symbols
   
10. Executable search path is:
    
11. Windows 7 Kernel Version 7601 (Service Pack 1) MP (4 procs) Free x86 compatible
    
12. Product: WinNt, suite: TerminalServer SingleUserTS
    
13. Built by: 7601.18113.x86fre.win7sp1_gdr.130318-1533
    
14. Machine Name:
    
15. Kernel base = 0x83e45000 PsLoadedModuleList = 0x83f8e4d0
    
16. Debug session time: Wed Jan 29 11:09:57.716 2014 (UTC + 8:00)
    
17. System Uptime: 0 days 3:56:35.074
    
18. Loading Kernel Symbols
    
19. ...............................................................
    
20. ................................................................
    
21. ...........................................
    
22. Loading User Symbols
    
23. Loading unloaded module list
    
24. .......
    
25. 2: kd> !analyze -v
    
26. *******************************************************************************
    
27. *                                                                             *
    
28. *                        Bugcheck Analysis                                    *
    
29. *                                                                             *
    
30. *******************************************************************************
    
31. 
    
32. MEMORY_MANAGEMENT (1a)
    
33.     # Any other values for parameter 1 must be individually examined.
    
34. Arguments:
    
35. Arg1: 00041790, The subtype of the bugcheck.
    
36. Arg2: c0802164
    
37. Arg3: 0000ffff
    
38. Arg4: 00000000
    
39. 
    
40. Debugging Details:
    
41. ------------------
    
42. 
    
43. *** WARNING: Unable to verify timestamp for Hookport.sys
    
44. *** ERROR: Module load completed but symbols could not be loaded for Hookport.sys
    
45. 
    
46. BUGCHECK_STR:  0x1a_41790
    
47. 
    
48. CUSTOMER_CRASH_COUNT:  1
    
49. 
    
50. DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT
    
51. 
    
52. PROCESS_NAME:  360SE.exe
    
53. 
    
54. CURRENT_IRQL:  0
    
55. 
    
56. LAST_CONTROL_TRANSFER:  from 83ee4626 to 83ee4054
    
57. 
    
58. STACK_TEXT:  
    
59. acf6c9f8 83ee4626 11d00002 12c9afff 94377c70 nt!MiDeleteVirtualAddresses+0x41a
    
60. acf6cac8 83ee42db 94377c70 b16a3238 863e2370 nt!MiRemoveMappedView+0x325
    
61. acf6caf0 8408c4f6 863e2370 00000000 c0000503 nt!MiRemoveVadAndView+0xe5
    
62. acf6cb50 840aa9ff 94377c70 11d00000 00000000 nt!MiUnmapViewOfSection+0x265
    
63. acf6cb70 89ba9566 ffffffff 11d00000 ffffffff nt!NtUnmapViewOfSection+0x55
    
64. WARNING: Stack unwind information not available. Following frames may be wrong.
    
65. acf6cc24 83e828ba ffffffff 11d00000 0918f340 Hookport+0x5566
    
66. acf6cc24 76f37094 ffffffff 11d00000 0918f340 nt!KiFastCallEntry+0x12a
    
67. 0918f340 00000000 00000000 00000000 00000000 0x76f37094
    
68. 
    
69. 
    
70. STACK_COMMAND:  kb
    
71. 
    
72. FOLLOWUP_IP:
    
73. Hookport+5566
    
74. 89ba9566 ??              ???
    
75. 
    
76. SYMBOL_STACK_INDEX:  5
    
77. 
    
78. SYMBOL_NAME:  Hookport+5566
    
79. 
    
80. FOLLOWUP_NAME:  MachineOwner
    
81. 
    
82. MODULE_NAME: Hookport
    
83. 
    
84. IMAGE_NAME:  Hookport.sys
    
85. 
    
86. DEBUG_FLR_IMAGE_TIMESTAMP:  528b666b
    
87. 
    
88. FAILURE_BUCKET_ID:  0x1a_41790_Hookport+5566
    
89. 
    
90. BUCKET_ID:  0x1a_41790_Hookport+5566
    
91. 
    
92. Followup: MachineOwner
    
93. ---------
    

复制代码

意思是360的那个“Hookport.sys”出问题了？

附件：





顺祝各位新年快乐。

nazisoft

NTFS.SYS引发的蓝屏，代码是0x0000001a（内存管理错误），先排除内存故障和硬盘故障

sunjushi

nazisoft 发表于 2014-1-29 13:19
NTFS.SYS引发的蓝屏，代码是0x0000001a（内存管理错误），先排除内存故障和硬盘故障

这是怎么看出来的呢？求指教

guihua7923

楼主，你贴上去的错误和下载的貌似不一样，我看了你打包下载的错误文件，初步怀疑是ntkrnlpa.exe这个文件导致的错误，加载的时候出错了。最近是否使用过什么优化软件？出现这个问题的win7有很多，具体也说不好是哪个方面的问题，但是一般是新驱动的bug和软件与系统的冲突所致，一般建议将新升级的驱动降级到未出问题前的版本，或者卸载最近安装的新软件或更新的软件。希望能帮到楼主。

sunjushi

guihua7923 发表于 2014-1-29 14:04
楼主，你贴上去的错误和下载的貌似不一样，我看了你打包下载的错误文件，初步怀疑是ntkrnlpa.exe这个文件导 ...

你看到的是不是这个结果：

1. 
   
2. Microsoft (R) Windows Debugger Version 6.12.0002.633 X86
   
3. Copyright (c) Microsoft Corporation. All rights reserved.
   
4. 
   
5. 
   
6. Loading Dump File [C:\Users\sunjs\Desktop\012914-14445-01.dmp]
   
7. Mini Kernel Dump File: Only registers and stack trace are available
   
8. 
   
9. Symbol search path is: *** Invalid ***
   
10. ****************************************************************************
    
11. * Symbol loading may be unreliable without a symbol search path.           *
    
12. * Use .symfix to have the debugger choose a symbol path.                   *
    
13. * After setting your symbol path, use .reload to refresh symbol locations. *
    
14. ****************************************************************************
    
15. Executable search path is:
    
16. *********************************************************************
    
17. * Symbols can not be loaded because symbol path is not initialized. *
    
18. *                                                                   *
    
19. * The Symbol Path can be set by:                                    *
    
20. *   using the _NT_SYMBOL_PATH environment variable.                 *
    
21. *   using the -y <symbol_path> argument when starting the debugger. *
    
22. *   using .sympath and .sympath+                                    *
    
23. *********************************************************************
    
24. Unable to load image \SystemRoot\system32\ntkrnlpa.exe, Win32 error 0n2
    
25. *** WARNING: Unable to verify timestamp for ntkrnlpa.exe
    
26. *** ERROR: Module load completed but symbols could not be loaded for ntkrnlpa.exe
    
27. Windows 7 Kernel Version 7601 (Service Pack 1) MP (4 procs) Free x86 compatible
    
28. Product: WinNt, suite: TerminalServer SingleUserTS
    
29. Built by: 7601.18113.x86fre.win7sp1_gdr.130318-1533
    
30. Machine Name:
    
31. Kernel base = 0x83e45000 PsLoadedModuleList = 0x83f8e4d0
    
32. Debug session time: Wed Jan 29 11:09:57.716 2014 (UTC + 8:00)
    
33. System Uptime: 0 days 3:56:35.074
    
34. *********************************************************************
    
35. * Symbols can not be loaded because symbol path is not initialized. *
    
36. *                                                                   *
    
37. * The Symbol Path can be set by:                                    *
    
38. *   using the _NT_SYMBOL_PATH environment variable.                 *
    
39. *   using the -y <symbol_path> argument when starting the debugger. *
    
40. *   using .sympath and .sympath+                                    *
    
41. *********************************************************************
    
42. Unable to load image \SystemRoot\system32\ntkrnlpa.exe, Win32 error 0n2
    
43. *** WARNING: Unable to verify timestamp for ntkrnlpa.exe
    
44. *** ERROR: Module load completed but symbols could not be loaded for ntkrnlpa.exe
    
45. Loading Kernel Symbols
    
46. ...............................................................
    
47. ................................................................
    
48. ...........................................
    
49. Loading User Symbols
    
50. Loading unloaded module list
    
51. .......
    

复制代码

伊川书院

建议：问问360看看     
它这个文件很烦人的

nazisoft

sunjushi 发表于 2014-1-29 13:24
这是怎么看出来的呢？求指教

用BlueScreenView这个小工具查看

guihua7923

sunjushi 发表于 2014-1-29 14:15
你看到的是不是这个结果：

确实如此，你可以从我说的这几个方面来尝试解决一下。