谁会看WIN7蓝屏的DMP文件啊？

显示全部楼层 · 发表于 2010-6-8 11:02:46

帮我看下是什么问题，我把DMP和XML的错误记录文档都传上……THX

显示全部楼层 · 发表于 2010-6-8 12:22:53

回复 1# ciosddr 的帖子

http://www.nirsoft.net/utils/blue_screen_view.html
蓝屏检测工具

显示全部楼层 · 发表于 2010-6-8 13:29:58

3: kd> .trap 0xfffff8800478e3a0
NOTE: The trap frame does not contain all registers.
Some register values may be zeroed or incorrect.
rax=0000000000000000 rbx=0000000000000000 rcx=fffff8a0005f8ad8
rdx=000007ffffff0000 rsi=0000000000000000 rdi=0000000000000000
rip=fffff80004944f4a rsp=fffff8800478e530 rbp=ffffffff80000114
r8=0000000000000000  r9=0000000000000000 r10=0000000000000000
r11=0000000000000000 r12=0000000000000000 r13=0000000000000000
r14=0000000000000000 r15=0000000000000000
iopl=0       nv up ei pl zr na po nc
nt!SeCaptureSecurityDescriptor+0x705:
fffff800`04944f4a 440fb76e02    movzx r13d,word ptr [rsi+2] ds:00000000`00000002=????
3: kd> kb
  *** Stack trace for last set context - .thread/.cxr resets it
RetAddr          : Args to Child                                                          : Call Site
fffff800`04a1b8c8 : 00000000`00000000 00000000`00000000 00000000`00000001 00000000`00000100 : nt!SeCaptureSecurityDescriptor+0x705
fffff800`04a52371 : fffff880`0478e708 fffff880`00000002 fffffa80`00000001 fffff8a0`005f8ab0 : nt!PipGetRegistrySecurityWithFallback+0xd8
fffff800`04a5c533 : fffffa80`02cc7e20 fffffa80`02cc7e20 fffff8a0`005be200 fffffa80`025aa900 : nt!PipChangeDeviceObjectFromRegistryProperties+0x161
fffff800`04a5d9f2 : fffffa80`025747f0 fffffa80`025aa900 00000000`00000002 fffffa80`025ba680 : nt!PipCallDriverAddDevice+0x733
fffff800`04a5de8c : fffffa80`02ad71d0 00000000`00000000 00000000`00000000 00000000`00000000 : nt!PipProcessDevNodeTree+0x2b2
fffff800`047722d2 : 00000001`00000003 00000000`00000000 00000000`32706e50 00000000`00000084 : nt!PiProcessStartSystemDevices+0x7c
fffff800`0467d861 : fffff800`04771fd0 fffff800`04ac8501 fffffa80`017fb600 00000000`00000000 : nt!PnpDeviceActionWorker+0x302
fffff800`04915a86 : 00000000`00000000 fffffa80`017fb680 00000000`00000080 fffffa80`017dd740 : nt!ExpWorkerThread+0x111
fffff800`0464eb06 : fffff880`045d3180 fffffa80`017fb680 fffff880`045ddfc0 00000000`00000000 : nt!PspSystemThreadStartup+0x5a
00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KxStartSystemThread+0x16
SeCaptureSecurityDescriptor懒得去看下

显示全部楼层 · 发表于 2010-6-8 15:00:06

呵呵！我看不明白

显示全部楼层 · 发表于 2010-6-8 15:21:56

看不明白帮你顶一下

显示全部楼层 · 发表于 2010-6-8 16:56:14

你自己去慢慢对照吧

显示全部楼层 · 发表于 2010-6-9 01:18:11

挺实用的，谢谢分享！

显示全部楼层 · 发表于 2010-6-9 14:03:01

*********************************************************************
Probably caused by : ntoskrnl.exe ( nt+344f4a )

Followup: MachineOwner
---------

显示全部楼层 · 发表于 2010-6-9 17:39:09

蓝屏问题太多了很难查找
软件的冲突或者硬件（很少出现）
还是看看软件吧

显示全部楼层 · 发表于 2010-6-9 20:22:03

回复 3# dl123100 的帖子
　　看了这么多，真的是内核的问题？

[求助] 谁会看WIN7蓝屏的DMP文件啊？