今天连续蓝屏两次了，大家帮忙分析下。

joopworm

今天连续蓝屏两次了，大家帮忙分析下。

joopworm

今天都上班了吗。。。

笙儿

抱歉，我现在手里没工具，回头工具拿到手分析看看。

joopworm

笙儿 发表于 2015-1-16 13:15
抱歉，我现在手里没工具，回头工具拿到手分析看看。

好的，十分感谢，自己不会分析。

812534593

用bluescrenn看是athrx.sys、ntoskrnl.exe和ndis.sys.
用windbg其中一个信息如下,自己排除一下吧！

1. 
   
2. BugCheck D1, {fffffaeb05d3f308, 2, 0, fffff8800152d396}
   
3. 
   
4. Unable to load image TAOKernel64.sys, Win32 error 0n2
   
5. *** WARNING: Unable to verify timestamp for TAOKernel64.sys
   
6. *** ERROR: Module load completed but symbols could not be loaded for TAOKernel64.sys
   
7. Probably caused by : nwifi.sys ( nwifi!Dot11TXCompletion+1be )
   
8. 
   
9. Followup: MachineOwner
   
10. ---------
    
11. 
    
12. 0: kd> !analyze -v
    
13. *******************************************************************************
    
14. *                                                                             *
    
15. *                        Bugcheck Analysis                                    *
    
16. *                                                                             *
    
17. *******************************************************************************
    
18. 
    
19. DRIVER_IRQL_NOT_LESS_OR_EQUAL (d1)
    
20. An attempt was made to access a pageable (or completely invalid) address at an
    
21. interrupt request level (IRQL) that is too high.  This is usually
    
22. caused by drivers using improper addresses.
    
23. If kernel debugger is available get stack backtrace.
    
24. Arguments:
    
25. Arg1: fffffaeb05d3f308, memory referenced
    
26. Arg2: 0000000000000002, IRQL
    
27. Arg3: 0000000000000000, value 0 = read operation, 1 = write operation
    
28. Arg4: fffff8800152d396, address which referenced memory
    
29. 
    
30. Debugging Details:
    
31. ------------------
    
32. 
    
33. 
    
34. READ_ADDRESS: GetPointerFromAddress: unable to read from fffff800042b8100
    
35. fffffaeb05d3f308
    
36. 
    
37. CURRENT_IRQL:  2
    
38. 
    
39. FAULTING_IP:
    
40. ndis! ?? ::FNODOBFM::`string'+cda9
    
41. fffff880`0152d396 488b8928010000  mov     rcx,qword ptr [rcx+128h]
    
42. 
    
43. CUSTOMER_CRASH_COUNT:  1
    
44. 
    
45. DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT
    
46. 
    
47. BUGCHECK_STR:  0xD1
    
48. 
    
49. PROCESS_NAME:  AliWorkbench.e
    
50. 
    
51. TRAP_FRAME:  fffff8800a32e190 -- (.trap 0xfffff8800a32e190)
    
52. NOTE: The trap frame does not contain all registers.
    
53. Some register values may be zeroed or incorrect.
    
54. rax=0000000000000000 rbx=0000000000000000 rcx=fffffaeb05d3f1e0
    
55. rdx=fffffa800788d030 rsi=0000000000000000 rdi=0000000000000000
    
56. rip=fffff8800152d396 rsp=fffff8800a32e320 rbp=fffffa800788d030
    
57. r8=0000000000000000  r9=0000000000000000 r10=0000000000000000
    
58. r11=fffff8800a32e3d8 r12=0000000000000000 r13=0000000000000000
    
59. r14=0000000000000000 r15=0000000000000000
    
60. iopl=0         nv up ei ng nz na po nc
    
61. ndis! ?? ::FNODOBFM::`string'+0xcda9:
    
62. fffff880`0152d396 488b8928010000  mov     rcx,qword ptr [rcx+128h] ds:fffffaeb`05d3f308=????????????????
    
63. Resetting default scope
    
64. 
    
65. LAST_CONTROL_TRANSFER:  from fffff80004081429 to fffff80004081e80
    
66. 
    
67. STACK_TEXT:  
    
68. fffff880`0a32e048 fffff800`04081429 : 00000000`0000000a fffffaeb`05d3f308 00000000`00000002 00000000`00000000 : nt!KeBugCheckEx
    
69. fffff880`0a32e050 fffff800`040800a0 : fffffa80`05390c10 fffff880`06f5481e 00000000`0000002c fffffaeb`05d3f1e0 : nt!KiBugCheckDispatch+0x69
    
70. fffff880`0a32e190 fffff880`0152d396 : 00000000`00000000 fffff880`06f53021 00000000`00000000 fffffa80`0788d030 : nt!KiPageFault+0x260
    
71. fffff880`0a32e320 fffff880`06f52dc2 : fffff880`0a32e488 00000000`00000000 00000000`00000007 fffffa80`05d63000 : ndis! ?? ::FNODOBFM::`string'+0xcda9
    
72. fffff880`0a32e360 fffff880`06f53149 : fffffa80`05000000 00000000`00000000 00000000`00000000 00000000`00000000 : nwifi!Dot11TXCompletion+0x1be
    
73. fffff880`0a32e3e0 fffff880`06f585e7 : 00000000`00000000 00000000`00000000 00000000`00000000 fffffa80`0788d030 : nwifi!Dot11FlushIntermediateSendQueue+0xb1
    
74. fffff880`0a32e430 fffff880`06f5df67 : 00000000`0000ff02 00000000`00000000 fffffa80`0788d030 fffffa80`0788d030 : nwifi!MP6SendNBLInternal+0x133
    
75. fffff880`0a32e480 fffff880`0150c624 : fffffa80`05667010 fffffa80`06fae6e0 00000000`00000000 fffff880`00000000 : nwifi!FilterSendNetBufferLists+0x7f
    
76. fffff880`0a32e4b0 fffff880`05756199 : fffffa80`06fae6e0 fffffa80`052291a0 00000000`00000000 fffff880`0a32e51c : ndis!NdisFSendNetBufferLists+0x64
    
77. fffff880`0a32e4f0 fffff880`0150c569 : 00000000`00000000 fffffa80`04b6bc38 fffffa80`04837f50 fffff880`0172091d : pacer!PcFilterSendNetBufferLists+0x29
    
78. fffff880`0a32e5f0 fffff880`015c95d5 : 00000000`00000014 00000000`00000000 fffffa80`052291a0 fffffa80`06fae6e0 : ndis!ndisSendNBLToFilter+0x69
    
79. fffff880`0a32e650 fffff880`017431de : 00000000`00000000 00000000`0000000e fffffa80`05d45010 fffff800`0408de00 : ndis!NdisSendNetBufferLists+0x85
    
80. fffff880`0a32e6b0 fffff880`017403b7 : fffff880`018539a0 00000000`00000000 fffff880`00fe0000 fffff880`01850800 : tcpip!IppFragmentPackets+0x39e
    
81. fffff880`0a32e7d0 fffff880`01742805 : 00001368`74a632a4 00000000`00000000 00000000`00000000 fffff880`01407be8 : tcpip!IppDispatchSendPacketHelper+0x87
    
82. fffff880`0a32e890 fffff880`01740f43 : fffffa80`046d1006 00000000`00008000 fffffa80`00000014 00000000`00000000 : tcpip!IppPacketizeDatagrams+0x2d5
    
83. fffff880`0a32e9b0 fffff880`017443ae : 00000000`00000020 00000000`00004007 fffff880`018539a0 fffffa80`046d1010 : tcpip!IppSendDatagramsCommon+0x753
    
84. fffff880`0a32ec80 fffff880`0174cffd : 00000000`40640088 00000000`00000000 00000000`00000001 00000000`00000000 : tcpip!IpNlpSendDatagrams+0x3e
    
85. fffff880`0a32ecc0 fffff880`0175db0f : 00000000`710d74ea fffffa80`0534b108 00000000`00000008 fffffa80`b526f88b : tcpip!TcpTcbSend+0x6ad
    
86. fffff880`0a32ef40 fffff880`0175d177 : fffffa80`05335080 00000000`00000000 00000000`00000000 00000000`00000002 : tcpip!TcpCreateAndConnectTcbRateLimitComplete+0x39f
    
87. fffff880`0a32f090 fffff880`0175d0c3 : 00000000`00000001 00000000`00000030 00000000`00005cd9 fffffa80`08eed270 : tcpip!TcpCreateAndConnectTcbInspectConnectComplete+0x47
    
88. fffff880`0a32f130 fffff880`0175f37c : 00000000`00000000 00000000`00000000 fffffa80`04f976a0 fffffa80`04f976a0 : tcpip!TcpContinueCreateAndConnect+0x373
    
89. fffff880`0a32f230 fffff880`0175ed53 : fffffa80`08eed180 fffffa80`04f976a0 00000000`00000002 fffffa80`04f978f8 : tcpip!TcpCreateAndConnectTcbInspectConnectRequestComplete+0x5c
    
90. fffff880`0a32f260 fffff880`0175f296 : 00000000`00000890 00000000`00000890 fffffa80`04f87ad0 00000000`00000000 : tcpip!TcpCreateAndConnectTcbWorkQueueRoutine+0x273
    
91. fffff880`0a32f330 fffff880`00fce42d : fffffa80`08b7b010 fffff880`0a32f488 00000000`00000080 00000000`00000060 : tcpip!TcpCreateAndConnectTcb+0x4c6
    
92. fffff880`0a32f420 fffff880`00fccc0d : 00000000`00000000 fffffa80`80000001 fffffa80`077ad2c0 fffffa80`04f87b50 : tdx!TdxConnectConnection+0x4dd
    
93. fffff880`0a32f540 fffff880`09d0d6ca : fffffa80`077ad160 00000000`00000000 fffffa80`042cfa30 fffffa80`064834f0 : tdx!TdxTdiDispatchInternalDeviceControl+0x39d
    
94. fffff880`0a32f5c0 fffffa80`077ad160 : 00000000`00000000 fffffa80`042cfa30 fffffa80`064834f0 fffffa80`070a1f70 : TAOKernel64+0x16ca
    
95. fffff880`0a32f5c8 00000000`00000000 : fffffa80`042cfa30 fffffa80`064834f0 fffffa80`070a1f70 fffffa80`085cc3b0 : 0xfffffa80`077ad160
    
96. 
    
97. 
    
98. STACK_COMMAND:  kb
    
99. 
    
100. FOLLOWUP_IP:
     
101. nwifi!Dot11TXCompletion+1be
     
102. fffff880`06f52dc2 488b9c2488000000 mov     rbx,qword ptr [rsp+88h]
     
103. 
     
104. SYMBOL_STACK_INDEX:  4
     
105. 
     
106. SYMBOL_NAME:  nwifi!Dot11TXCompletion+1be
     
107. 
     
108. FOLLOWUP_NAME:  MachineOwner
     
109. 
     
110. MODULE_NAME: nwifi
     
111. 
     
112. IMAGE_NAME:  nwifi.sys
     
113. 
     
114. DEBUG_FLR_IMAGE_TIMESTAMP:  4a5bcc3b
     
115. 
     
116. FAILURE_BUCKET_ID:  X64_0xD1_nwifi!Dot11TXCompletion+1be
     
117. 
     
118. BUCKET_ID:  X64_0xD1_nwifi!Dot11TXCompletion+1be
     
119. 
     
120. Followup: MachineOwner
     
121. ---------
     

复制代码

100lj

楼上信息显示Probably caused by : nwifi.sys
nwifi.sys --- 磊科无线网卡NW360的驱动文件。
athrx.sys也是无线网卡的驱动。
建议重装或更新无线网卡驱动试试。

伊川书院

Unable to load image TAOKernel64.sys, Win32 error 0n2
*** WARNING: Unable to verify timestamp for TAOKernel64.sys
*** ERROR: Module load completed but symbols could not be loaded for TAOKernel64.sys
Probably caused by : nwifi.sys ( nwifi!Dot11TXCompletion+1be )


先排查：TAOKernel64.sys

再看看是否通，不行再看无线驱动

joopworm

伊川书院 发表于 2015-1-16 20:39
Unable to load image TAOKernel64.sys, Win32 error 0n2
*** WARNING: Unable to verify timestamp for T ...

谢谢，我看看。，

joopworm

100lj 发表于 2015-1-16 20:36
楼上信息显示Probably caused by : nwifi.sys
nwifi.sys --- 磊科无线网卡NW360的驱动文件。
athrx.sys也 ...

重新安装了网卡驱动，再试试看。

tys0324

不行就彻底清理下，更新下，再或者重装系统