你在蓝屏前有没有做什么操作,或者自动启动了哪些程序。蓝屏是否有规律性,比如开机24分钟左右100%蓝屏。
dmp记录是开机后24分钟0.979秒蓝屏的
windbg分析问题是system进程执行msrpc代码报错蓝屏,蓝屏原因是内存损坏。看你的bios日期是2019年1月的,应该是新电脑。
建议检查内存。比如用新纸币的白边擦拭内存条金手指再插回去,或者更换内存检查会不会蓝屏。
以下是dmp的windbg分析内容:
- *******************************************************************************
- * *
- * Bugcheck Analysis *
- * *
- *******************************************************************************
- CRITICAL_STRUCTURE_CORRUPTION (109)
- This bugcheck is generated when the kernel detects that critical kernel code or
- data have been corrupted. There are generally three causes for a corruption:
- 1) A driver has inadvertently or deliberately modified critical kernel code
- or data. See http://www.microsoft.com/whdc/driver/kernel/64bitPatching.mspx
- 2) A developer attempted to set a normal kernel breakpoint using a kernel
- debugger that was not attached when the system was booted. Normal breakpoints,
- "bp", can only be set if the debugger is attached at boot time. Hardware
- breakpoints, "ba", can be set at any time.
- 3) A hardware corruption occurred, e.g. failing RAM holding kernel code or data.
- Arguments:
- Arg1: a3a00fdb05503506, Reserved
- Arg2: b3b71c6157d08c6c, Reserved
- Arg3: fffff80155d997a0, Failure type dependent information
- Arg4: 0000000000000001, Type of corrupted region, can be
- 0 : A generic data region
- 1 : Modification of a function or .pdata
- 2 : A processor IDT
- 3 : A processor GDT
- 4 : Type 1 process list corruption
- 5 : Type 2 process list corruption
- 6 : Debug routine modification
- 7 : Critical MSR modification
- 8 : Object type
- 9 : A processor IVT
- a : Modification of a system service function
- b : A generic session data region
- c : Modification of a session function or .pdata
- d : Modification of an import table
- e : Modification of a session import table
- f : Ps Win32 callout modification
- 10 : Debug switch routine modification
- 11 : IRP allocator modification
- 12 : Driver call dispatcher modification
- 13 : IRP completion dispatcher modification
- 14 : IRP deallocator modification
- 15 : A processor control register
- 16 : Critical floating point control register modification
- 17 : Local APIC modification
- 18 : Kernel notification callout modification
- 19 : Loaded module list modification
- 1a : Type 3 process list corruption
- 1b : Type 4 process list corruption
- 1c : Driver object corruption
- 1d : Executive callback object modification
- 1e : Modification of module padding
- 1f : Modification of a protected process
- 20 : A generic data region
- 21 : A page hash mismatch
- 22 : A session page hash mismatch
- 23 : Load config directory modification
- 24 : Inverted function table modification
- 25 : Session configuration modification
- 26 : An extended processor control register
- 27 : Type 1 pool corruption
- 28 : Type 2 pool corruption
- 29 : Type 3 pool corruption
- 2a : Type 4 pool corruption
- 2b : Modification of a function or .pdata
- 2c : Image integrity corruption
- 2d : Processor misconfiguration
- 2e : Type 5 process list corruption
- 2f : Process shadow corruption
- 30 : Retpoline code page corruption
- 101 : General pool corruption
- 102 : Modification of win32k.sys
- Debugging Details:
- ------------------
- KEY_VALUES_STRING: 1
- PROCESSES_ANALYSIS: 1
- SERVICE_ANALYSIS: 1
- STACKHASH_ANALYSIS: 1
- TIMELINE_ANALYSIS: 1
- DUMP_CLASS: 1
- DUMP_QUALIFIER: 400
- BUILD_VERSION_STRING: 10.0.17763.379 (WinBuild.160101.0800)
- SYSTEM_MANUFACTURER: Gigabyte Technology Co., Ltd.
- SYSTEM_PRODUCT_NAME: B450 I AORUS PRO WIFI
- SYSTEM_SKU: Default string
- SYSTEM_VERSION: Default string
- BIOS_VENDOR: American Megatrends Inc.
- BIOS_VERSION: F5
- BIOS_DATE: 01/25/2019
- BASEBOARD_MANUFACTURER: Gigabyte Technology Co., Ltd.
- BASEBOARD_PRODUCT: B450 I AORUS PRO WIFI-CF
- BASEBOARD_VERSION: x.x
- DUMP_FILE_ATTRIBUTES: 0x8
- Kernel Generated Triage Dump
- DUMP_TYPE: 2
- BUGCHECK_P1: a3a00fdb05503506
- BUGCHECK_P2: b3b71c6157d08c6c
- BUGCHECK_P3: fffff80155d997a0
- BUGCHECK_P4: 1
- PG_MISMATCH: 1000000
- MEMORY_CORRUPTOR: ONE_BIT
- FAULTING_IP:
- msrpc!NdrpConformantVaryingArrayUnmarshall+0
- fffff801`55d997a0 48895c2408 mov qword ptr [rsp+8],rbx
- CPU_COUNT: 8
- CPU_MHZ: e09
- CPU_VENDOR: AuthenticAMD
- CPU_FAMILY: 17
- CPU_MODEL: 11
- CPU_STEPPING: 0
- BLACKBOXBSD: 1 (!blackboxbsd)
- CUSTOMER_CRASH_COUNT: 1
- DEFAULT_BUCKET_ID: CODE_CORRUPTION
- BUGCHECK_STR: 0x109
- PROCESS_NAME: System
- CURRENT_IRQL: 2
- ANALYSIS_SESSION_HOST: DESKTOP-2390R25
- ANALYSIS_SESSION_TIME: 04-25-2019 23:49:12.0429
- ANALYSIS_VERSION: 10.0.18317.1001 amd64fre
- STACK_TEXT:
- ffffe401`f0b559e8 00000000`00000000 : 00000000`00000109 a3a00fdb`05503506 b3b71c61`57d08c6c fffff801`55d997a0 : nt!KeBugCheckEx
- CHKIMG_EXTENSION: !chkimg -lo 50 -d !msrpc
- fffff80155d998f6 - msrpc!NdrpConformantVaryingArrayUnmarshall+156
- [ 74:54 ]
- 1 error : !msrpc (fffff80155d998f6)
- MODULE_NAME: memory_corruption
- IMAGE_NAME: memory_corruption
- FOLLOWUP_NAME: memory_corruption
- DEBUG_FLR_IMAGE_TIMESTAMP: 0
- STACK_COMMAND: .thread ; .cxr ; kb
- FAILURE_BUCKET_ID: MEMORY_CORRUPTION_ONE_BIT
- BUCKET_ID: MEMORY_CORRUPTION_ONE_BIT
- PRIMARY_PROBLEM_CLASS: MEMORY_CORRUPTION_ONE_BIT
- TARGET_TIME: 2019-04-16T13:39:11.000Z
- OSBUILD: 17763
- OSSERVICEPACK: 379
- SERVICEPACK_NUMBER: 0
- OS_REVISION: 0
- SUITE_MASK: 272
- PRODUCT_TYPE: 1
- OSPLATFORM_TYPE: x64
- OSNAME: Windows 10
- OSEDITION: Windows 10 WinNt TerminalServer SingleUserTS
- OS_LOCALE:
- USER_LCID: 0
- OSBUILD_TIMESTAMP: unknown_date
- BUILDDATESTAMP_STR: 160101.0800
- BUILDLAB_STR: WinBuild
- BUILDOSVER_STR: 10.0.17763.379
- ANALYSIS_SESSION_ELAPSED_TIME: 1a692
- ANALYSIS_SOURCE: KM
- FAILURE_ID_HASH_STRING: km:memory_corruption_one_bit
- FAILURE_ID_HASH: {e3faf315-c3d0-81db-819a-6c43d23c63a7}
- Followup: memory_corruption
- ---------
复制代码 |