Jump to content

Син екран на Windows7 64 bit


skeptik

Препоръчан пост

Здравейте , два пъти в рамките сигурно на месец -месец и половина компютъра ми изкарва син екран . Просто забива дава син екран и се рестартира . В папка "minidump" има един файл и го прикачвам към този линк .

Link to comment
Сподели другаде

  • Отговори 58
  • Създадена
  • Последен отговор

ТОП потребители в тази тема

ТОП потребители в тази тема

Публикувани изображения

Здравейте , два пъти в рамките сигурно на месец -месец и половина компютъра ми изкарва син екран . Просто забива дава син екран и се рестартира . В папка "minidump" има един файл и го прикачвам към този линк .

Проблема ти е във Daemon Tools-а.

Дееинсталирай го и поработи така, за да се види дали ще продължи със син екран.

Можеш да пробваш със негова алтернатива.

Link to comment
Сподели другаде

Здравейте,

 

Не искам да отварям нова тема за това пиша тук. Проблема с моя е че го включвам и си стои на Windows 7 екран и това е. Не продължава на никъде. System repair не се получава нищо, safe mode не иска да се стартира. Направих следните тестове и това са снимките от резултатите. Грешка която ми дава е i/o device error. Благодаря предварително!

 

post-22258-0-94044700-1418884433_thumb.jpg post-22258-0-91447800-1418884457_thumb.jpg post-22258-0-58301500-1418884478_thumb.jpg post-22258-0-54517300-1418884493_thumb.jpg

post-22258-0-92956400-1418884504_thumb.jpg post-22258-0-37691700-1418884539_thumb.jpg post-22258-0-19176000-1418884550_thumb.jpg post-22258-0-86578400-1418884580_thumb.jpg

Link to comment
Сподели другаде

Здравейте,

 

Не искам да отварям нова тема за това пиша тук. Проблема с моя е че го включвам и си стои на Windows 7 екран и това е. Не продължава на никъде. System repair не се получава нищо, safe mode не иска да се стартира. Направих следните тестове и това са снимките от резултатите. Грешка която ми дава е i/o device error. Благодаря предварително!

 

http://forums.softvisia.com/public/style_images/master/attachicon.gifIMAG0115.jpg http://forums.softvisia.com/public/style_images/master/attachicon.gifIMAG0117.jpg http://forums.softvisia.com/public/style_images/master/attachicon.gifIMAG0129.jpg http://forums.softvisia.com/public/style_images/master/attachicon.gifIMAG0130.jpg

http://forums.softvisia.com/public/style_images/master/attachicon.gifIMAG0131.jpg http://forums.softvisia.com/public/style_images/master/attachicon.gifIMAG0132.jpg http://forums.softvisia.com/public/style_images/master/attachicon.gifIMAG0133.jpg http://forums.softvisia.com/public/style_images/master/attachicon.gifIMAG0134.jpg

От това което виждам имаш 4кв повредени сектори на хард диска в дял C.Явно на възлови файлове на системата което не позволява стартирането на Windows ,по никакъв начин.

Backup за които пишеш,че си правил в предишната ти тема(там не се разбираше нищо)няма да ти помогне защото е направен с грешките,и ако го въстановиш,на диска,грешките ще се повторят,даже да не се повторят лошите сектори,ще останат празни места,липсващи фаилове и т.н. Та на него не разчитай.

Първото което трябва да направиш е да си преместиш всички важни файлове които имаш на дял С (снимки документи клипове и т.н.) в дял D,виждам,че съществува.Просто копваш -пейсваш

под mini Windows XP който използваш.

След като свършиш тази работа,ще опитаме най простия начин да поправиме хард диска. В mini Windows кликаш на My computer,в отворилият се екран избираш диск C: който обикновено е под

дял В с име RamDrive.Клик с десния бутон върху C: от отворилото се меню избираш Properties (най-долу в списъка) после избираш Tools (горе в менюто с опции) и след това Check now.В новото прозорче слагаш отметки и на двете опции после Start. Изчакай да свърши процедурата(може да почакаш много) ако приключи без съобщение за грешки.Опитай да стартираш Windows нормално. Сподели за резултата.Не е още никак сигурно,но свиквай с мисълта,че може да ти се наложи да си вземеш нов хард диск.При положение,че диска ти е механично повреден,а не е софтуерна грешка!Но за това ще мислиме после.Зависи от резултата!

 

п.п. Имай на предвид,че като копваш -пейсваш,някой файл Windows може да не може да го копира ако е записан точно в повредената част на диска,и ще излезе съобщения за грешка.За това по добре ще бъде да ги копираш един по един(по възможност) така ще разбереш кой точно файл е повреден,и ще го прескочиш!

 

Между другото не трябваше да пишеш тук ,а в твойта си тема! :) Там нямаш отговор защото просто нищо не се разбираше! :)

Link to comment
Сподели другаде

Да пробвам с друга версия на daemon tools или с друга подобна програма ? Сега съм я махнал и мисля да не качвам скоро да поработи малко така. 

Link to comment
Сподели другаде

Проблема ти е във Daemon Tools-а.

Дееинсталирай го и поработи така, за да се види дали ще продължи със син екран.

Можеш да пробваш със негова алтернатива.

Не знам как установи, че точно DAEMON Tools е проблемът. Не че не е възможно, но няма улики, които да сочат към нея в минидъмп файла. Може да се тества разбира се, като се деинсталира, но на този етап може само да се гадае от какво е. По-добре е да се изчака друг забив и друг минидъмп файл. Или още по-добре — да се конфигурира системата да създава kernel dump файлове.

 

Здравейте,

 

Не искам да отварям нова тема за това пиша тук. Проблема с моя е че го включвам и си стои на Windows 7 екран и това е. Не продължава на никъде. System repair не се получава нищо, safe mode не иска да се стартира. Направих следните тестове и това са снимките от резултатите. Грешка която ми дава е i/o device error. Благодаря предварително!

Обезпокоителното е, че Data LifeGuard for Windows е открила лоши сектори. Най-доброто, което можеш да направиш в случая, е да пуснеш Data LifeGuard for DOS, която евентуално ще може да ги поправи. Неудобното в случая е, че тя няма версия за автоматично зареждане, т.е. bootable носител. Ще трябва да си направиш сам такъв или да използваш Hiren's BootCD, в който я има въпросната DOS версия на програмата за диагностика. Не мога да ти дам връзка към въпросния стартиращ спасителен диск, защото е нелегален.

 

Няма обаче никакви гаранции, че програмата ще може да отстрани проблемите, а дори да ги отстрани, това може да не е за дълго.

Може всичко да се оправи и твърдият диск да издържи още години. Може да се оправят секторите, но пак да се появят след време (т.е. поправката да е била временна). В тези два случая имай готовност и нагласа, че твърдият диск може да се наложи да бъде сменен изведнъж.

Може поправката поправката да е неуспешна. В този случай твърдият диск трябва да бъде сменен.

 

Независимо какво точно се случи, е много силно препоръчително да си копираш важните данни на друг носител.

 

И занапред, моля, не отвличай теми на други потребители. Просто си пусни своя.

Link to comment
Сподели другаде

Попрегледах тази тема ,за да мога при евентуален следващ срив да бъда малко по-полезен . Настройх компютъра да не се рестартира и в съсщата секция видях ,че е зададено да се прави "kernel dump" файл . 

Link to comment
Сподели другаде

От това което виждам имаш 4кв повредени сектори на хард диска в дял C.Явно на възлови файлове на системата което не позволява стартирането на Windows ,по никакъв начин.

Backup за които пишеш,че си правил в предишната ти тема(там не се разбираше нищо)няма да ти помогне защото е направен с грешките,и ако го въстановиш,на диска,грешките ще се повторят,даже да не се повторят лошите сектори,ще останат празни места,липсващи фаилове и т.н. Та на него не разчитай.

Първото което трябва да направиш е да си преместиш всички важни файлове които имаш на дял С (снимки документи клипове и т.н.) в дял D,виждам,че съществува.Просто копваш -пейсваш

под mini Windows XP който използваш.

След като свършиш тази работа,ще опитаме най простия начин да поправиме хард диска. В mini Windows кликаш на My computer,в отворилият се екран избираш диск C: който обикновено е под

дял В с име RamDrive.Клик с десния бутон върху C: от отворилото се меню избираш Properties (най-долу в списъка) после избираш Tools (горе в менюто с опции) и след това Check now.В новото прозорче слагаш отметки и на двете опции после Start. Изчакай да свърши процедурата(може да почакаш много) ако приключи без съобщение за грешки.Опитай да стартираш Windows нормално. Сподели за резултата.Не е още никак сигурно,но свиквай с мисълта,че може да ти се наложи да си вземеш нов хард диск.При положение,че диска ти е механично повреден,а не е софтуерна грешка!Но за това ще мислиме после.Зависи от резултата!

 

п.п. Имай на предвид,че като копваш -пейсваш,някой файл Windows може да не може да го копира ако е записан точно в повредената част на диска,и ще излезе съобщения за грешка.За това по добре ще бъде да ги копираш един по един(по възможност) така ще разбереш кой точно файл е повреден,и ще го прескочиш!

 

Между другото не трябваше да пишеш тук ,а в твойта си тема! :) Там нямаш отговор защото просто нищо не се разбираше! :)

 

Благодаря за отговора. Опитах да направя disck check na B: и съобщението което получих беше "windows was unable to perfrom the check". Сега го пуснах да се проверява дяла на който е операционната система а именно D: чакам да видя какви ще са резултатите.

Що се отнася до темата - извинявам се. Ще знам за напред.

 

Не знам как установи, че точно DAEMON Tools е проблемът. Не че не е възможно, но няма улики, които да сочат към нея в минидъмп файла. Може да се тества разбира се, като се деинсталира, но на този етап може само да се гадае от какво е. По-добре е да се изчака друг забив и друг минидъмп файл. Или още по-добре — да се конфигурира системата да създава kernel dump файлове.

 

Обезпокоителното е, че Data LifeGuard for Windows е открила лоши сектори. Най-доброто, което можеш да направиш в случая, е да пуснеш Data LifeGuard for DOS, която евентуално ще може да ги поправи. Неудобното в случая е, че тя няма версия за автоматично зареждане, т.е. bootable носител. Ще трябва да си направиш сам такъв или да използваш Hiren's BootCD, в който я има въпросната DOS версия на програмата за диагностика. Не мога да ти дам връзка към въпросния стартиращ спасителен диск, защото е нелегален.

 

Няма обаче никакви гаранции, че програмата ще може да отстрани проблемите, а дори да ги отстрани, това може да не е за дълго.

Може всичко да се оправи и твърдият диск да издържи още години. Може да се оправят секторите, но пак да се появят след време (т.е. поправката да е била временна). В тези два случая имай готовност и нагласа, че твърдият диск може да се наложи да бъде сменен изведнъж.

Може поправката поправката да е неуспешна. В този случай твърдият диск трябва да бъде сменен.

 

Независимо какво точно се случи, е много силно препоръчително да си копираш важните данни на друг носител.

 

И занапред, моля, не отвличай теми на други потребители. Просто си пусни своя.

 

Благодаря за отговора. Ще опитам и този вариант и да видим какво ще се случи. Имам Hiren's Boot CD 15.2. Благодарение на него успявам да направя всичките тестове.

За темата - не съм искал така да се получава че отвличам на някой друг. Ако имам други въпроси, просто да си направя тема, така ли?

 

Благодаря още веднъж!

Link to comment
Сподели другаде

Благодаря за отговора. Опитах да направя disck check na B: и съобщението което получих беше "windows was unable to perfrom the check". Сега го пуснах да се проверява дяла на който е операционната система а именно D: чакам да видя какви ще са резултатите.

Дял B: Няма нищо общо със Оперативната система на хард диска.Трябва ти проверка на дял С: .Но послушай съвета на Night_Raven програмата Data LifeGuard for DOS е много по добра от вградения disck check на Windows

Link to comment
Сподели другаде

Не знам как установи, че точно DAEMON Tools е проблемът. Не че не е възможно, но няма улики, които да сочат към нея в минидъмп файла. Може да се тества разбира се, като се деинсталира, но на този етап може само да се гадае от какво е. По-добре е да се изчака друг забив и друг минидъмп файл. Или още по-добре — да се конфигурира системата да създава kernel dump файлове.

И занапред, моля, не отвличай теми на други потребители. Просто си пусни своя.

Ха сега:

Тази сутрин имах под ръка 32bt система.

Отворих дъмп файла със WinDbg.

И ето резултата:

 

 

Microsoft ® Windows Debugger Version 6.11.0001.404 X86

Copyright © Microsoft Corporation. All rights reserved.

 

 

Loading Dump File [C:\Users\ZORO\Downloads\121714-14055-01.dmp]

Mini Kernel Dump File: Only registers and stack trace are available

 

WARNING: Whitespace at start of path element

Symbol search path is:  SRV*c:\symbols*http://msdl.microsoft.com/download/symbols

Executable search path is:

Windows 7 Kernel Version 7601 (Service Pack 1) MP (8 procs) Free x64

Product: WinNt, suite: TerminalServer SingleUserTS

Built by: 7601.18409.amd64fre.win7sp1_gdr.140303-2144

Machine Name:

Kernel base = 0xfffff800`03000000 PsLoadedModuleList = 0xfffff800`03243890

Debug session time: Wed Dec 17 14:01:36.258 2014 (GMT+2)

System Uptime: 0 days 2:19:42.070

Loading Kernel Symbols

...............................................................

................................................................

.........................

Loading User Symbols

Loading unloaded module list

............

*******************************************************************************

*                                                                             *

*                        Bugcheck Analysis                                    *

*                                                                             *

*******************************************************************************

 

Use !analyze -v to get detailed debugging information.

 

BugCheck FE, {6, fffffa800eceea00, 50456068, 0}

 

Unable to load image \SystemRoot\System32\Drivers\sptd.sys, Win32 error 0n2

*** WARNING: Unable to verify timestamp for sptd.sys

*** ERROR: Module load completed but symbols could not be loaded for sptd.sys

Probably caused by : sptd.sys ( sptd+1dc10 )

 

Followup: MachineOwner

---------

 

0: kd> !analyze -v

*******************************************************************************

*                                                                             *

*                        Bugcheck Analysis                                    *

*                                                                             *

*******************************************************************************

 

BUGCODE_USB_DRIVER (fe)

USB Driver bugcheck, first parameter is USB bugcheck code.

Arguments:

Arg1: 0000000000000006, USBBUGCODE_BAD_SIGNATURE An Internal data structure (object)

    has been corrupted.

Arg2: fffffa800eceea00, Object address

Arg3: 0000000050456068, Signature that was expected

Arg4: 0000000000000000

 

Debugging Details:

------------------

 

 

CUSTOMER_CRASH_COUNT:  1

 

DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT

 

BUGCHECK_STR:  0xFE

 

PROCESS_NAME:  System

 

CURRENT_IRQL:  2

 

LAST_CONTROL_TRANSFER:  from fffff880075d72f1 to fffff80003075bc0

 

STACK_TEXT:  

fffff800`038079a8 fffff880`075d72f1 : 00000000`000000fe 00000000`00000006 fffffa80`0eceea00 00000000`50456068 : nt!KeBugCheckEx

fffff800`038079b0 fffff880`075abe1b : 00000000`00000002 fffffa80`0df9c1a0 00000000`00000000 00000000`00000020 : USBPORT!USBPORT_AssertSig+0x25

fffff800`038079f0 fffff880`075b09dd : 00000000`00000050 00000000`00000004 fffffa80`0eceea00 fffff880`075d74a0 : USBPORT!MPf_PollEndpoint+0x2b

fffff800`03807a20 fffff880`075bc077 : fffffa80`0df9c1a0 00000000`00000050 fffffa80`0000000e 00000000`00000000 : USBPORT!USBPORT_iSetGlobalEndpointStateTx+0x7c1

fffff800`03807a80 fffff880`075acf89 : fffffa80`0df9c050 00000000`00000000 fffffa80`0df9ca02 fffffa80`0df9ca18 : USBPORT!USBPORT_Core_UsbHcIntDpc_Worker+0x1c3

fffff800`03807ae0 fffff880`010a3c10 : fffffa80`0df3c000 fffff880`075acdb0 fffffa80`0df9ca00 fffff800`03807b88 : USBPORT!USBPORT_Xdpc_Worker+0x1d9

fffff800`03807b10 fffffa80`0df3c000 : fffff880`075acdb0 fffffa80`0df9ca00 fffff800`03807b88 00000000`00000000 : sptd+0x1dc10

fffff800`03807b18 fffff880`075acdaf : fffffa80`0df9ca00 fffff800`03807b88 00000000`00000000 00000000`00000000 : 0xfffffa80`0df3c000

fffff800`03807b20 fffffa80`0df9ca00 : fffff800`03807b88 00000000`00000000 00000000`00000000 00000000`00000000 : USBPORT!USBPORT_Xdpc_End+0x26f

fffff800`03807b28 fffff800`03807b88 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0xfffffa80`0df9ca00

fffff800`03807b30 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0xfffff800`03807b88

 

 

STACK_COMMAND:  kb

 

FOLLOWUP_IP:

sptd+1dc10

fffff880`010a3c10 ??              ???

 

SYMBOL_STACK_INDEX:  6

 

SYMBOL_NAME:  sptd+1dc10

 

FOLLOWUP_NAME:  MachineOwner

 

MODULE_NAME: sptd

 

IMAGE_NAME:  sptd.sys

 

DEBUG_FLR_IMAGE_TIMESTAMP:  522f8816

 

FAILURE_BUCKET_ID:  X64_0xFE_sptd+1dc10

 

BUCKET_ID:  X64_0xFE_sptd+1dc10

 

Followup: MachineOwner

---------

 

0: kd> lmvm sptd

start             end                 module name

fffff880`01086000 fffff880`011a1000   sptd     T (no symbols)           

    Loaded symbol image file: sptd.sys

    Image path: \SystemRoot\System32\Drivers\sptd.sys

    Image name: sptd.sys

    Timestamp:        Tue Sep 10 23:59:02 2013 (522F8816)

    CheckSum:         0006AD52

    ImageSize:        0011B000

    Translations:     0000.04b0 0000.04e4 0409.04b0 0409.04e4

 

 

И сега след като го постави под въпрос, пробвах със друга машина но 64bt ОС.

Отново със WinDbg.

Следва този резултат:

 

 

Microsoft ® Windows Debugger Version 6.3.9600.16384 AMD64

Copyright © Microsoft Corporation. All rights reserved.

 

 

Loading Dump File [C:\Users\Zoro\Downloads\121714-14055-01.dmp]

Mini Kernel Dump File: Only registers and stack trace are available

 

Symbol search path is: *** Invalid ***

****************************************************************************

* Symbol loading may be unreliable without a symbol search path.           *

* Use .symfix to have the debugger choose a symbol path.                   *

* After setting your symbol path, use .reload to refresh symbol locations. *

****************************************************************************

Executable search path is:

*********************************************************************

* Symbols can not be loaded because symbol path is not initialized. *

*                                                                   *

* The Symbol Path can be set by:                                    *

*   using the _NT_SYMBOL_PATH environment variable.                 *

*   using the -y <symbol_path> argument when starting the debugger. *

*   using .sympath and .sympath+                                    *

*********************************************************************

Unable to load image \SystemRoot\system32\ntoskrnl.exe, Win32 error 0n2

*** WARNING: Unable to verify timestamp for ntoskrnl.exe

*** ERROR: Module load completed but symbols could not be loaded for ntoskrnl.exe

Windows 7 Kernel Version 7601 (Service Pack 1) MP (8 procs) Free x64

Product: WinNt, suite: TerminalServer SingleUserTS

Built by: 7601.18409.amd64fre.win7sp1_gdr.140303-2144

Machine Name:

Kernel base = 0xfffff800`03000000 PsLoadedModuleList = 0xfffff800`03243890

Debug session time: Wed Dec 17 14:01:36.258 2014 (UTC + 2:00)

System Uptime: 0 days 2:19:42.070

*********************************************************************

* Symbols can not be loaded because symbol path is not initialized. *

*                                                                   *

* The Symbol Path can be set by:                                    *

*   using the _NT_SYMBOL_PATH environment variable.                 *

*   using the -y <symbol_path> argument when starting the debugger. *

*   using .sympath and .sympath+                                    *

*********************************************************************

Unable to load image \SystemRoot\system32\ntoskrnl.exe, Win32 error 0n2

*** WARNING: Unable to verify timestamp for ntoskrnl.exe

*** ERROR: Module load completed but symbols could not be loaded for ntoskrnl.exe

Loading Kernel Symbols

...............................................................

................................................................

.........................

Loading User Symbols

Loading unloaded module list

............

 

************* Symbol Loading Error Summary **************

Module name            Error

ntoskrnl               The system cannot find the file specified

 

You can troubleshoot most symbol related issues by turning on symbol loading diagnostics (!sym noisy) and repeating the command that caused symbols to be loaded.

You should also verify that your symbol search path (.sympath) is correct.

*** WARNING: Unable to verify timestamp for USBPORT.SYS

*** ERROR: Module load completed but symbols could not be loaded for USBPORT.SYS

*******************************************************************************

*                                                                             *

*                        Bugcheck Analysis                                    *

*                                                                             *

*******************************************************************************

 

Use !analyze -v to get detailed debugging information.

 

BugCheck FE, {6, fffffa800eceea00, 50456068, 0}

 

***** Kernel symbols are WRONG. Please fix symbols to do analysis.

 

*************************************************************************

***                                                                   ***

***                                                                   ***

***    Either you specified an unqualified symbol, or your debugger   ***

***    doesn't have full symbol information.  Unqualified symbol      ***

***    resolution is turned off by default. Please either specify a   ***

***    fully qualified symbol module!symbolname, or enable resolution ***

***    of unqualified symbols by typing ".symopt- 100". Note that   ***

***    enabling unqualified symbol resolution with network symbol     ***

***    server shares in the symbol path may cause the debugger to     ***

***    appear to hang for long periods of time when an incorrect      ***

***    symbol name is typed or the network symbol server is down.     ***

***                                                                   ***

***    For some commands to work properly, your symbol path           ***

***    must point to .pdb files that have full type information.      ***

***                                                                   ***

***    Certain .pdb files (such as the public OS symbols) do not      ***

***    contain the required information.  Contact the group that      ***

***    provided you with these symbols if you need this command to    ***

***    work.                                                          ***

***                                                                   ***

***    Type referenced: nt!_KPRCB                                     ***

***                                                                   ***

*************************************************************************

*************************************************************************

***                                                                   ***

***                                                                   ***

***    Either you specified an unqualified symbol, or your debugger   ***

***    doesn't have full symbol information.  Unqualified symbol      ***

***    resolution is turned off by default. Please either specify a   ***

***    fully qualified symbol module!symbolname, or enable resolution ***

***    of unqualified symbols by typing ".symopt- 100". Note that   ***

***    enabling unqualified symbol resolution with network symbol     ***

***    server shares in the symbol path may cause the debugger to     ***

***    appear to hang for long periods of time when an incorrect      ***

***    symbol name is typed or the network symbol server is down.     ***

***                                                                   ***

***    For some commands to work properly, your symbol path           ***

***    must point to .pdb files that have full type information.      ***

***                                                                   ***

***    Certain .pdb files (such as the public OS symbols) do not      ***

***    contain the required information.  Contact the group that      ***

***    provided you with these symbols if you need this command to    ***

***    work.                                                          ***

***                                                                   ***

***    Type referenced: nt!KPRCB                                      ***

***                                                                   ***

*************************************************************************

*************************************************************************

***                                                                   ***

***                                                                   ***

***    Either you specified an unqualified symbol, or your debugger   ***

***    doesn't have full symbol information.  Unqualified symbol      ***

***    resolution is turned off by default. Please either specify a   ***

***    fully qualified symbol module!symbolname, or enable resolution ***

***    of unqualified symbols by typing ".symopt- 100". Note that   ***

***    enabling unqualified symbol resolution with network symbol     ***

***    server shares in the symbol path may cause the debugger to     ***

***    appear to hang for long periods of time when an incorrect      ***

***    symbol name is typed or the network symbol server is down.     ***

***                                                                   ***

***    For some commands to work properly, your symbol path           ***

***    must point to .pdb files that have full type information.      ***

***                                                                   ***

***    Certain .pdb files (such as the public OS symbols) do not      ***

***    contain the required information.  Contact the group that      ***

***    provided you with these symbols if you need this command to    ***

***    work.                                                          ***

***                                                                   ***

***    Type referenced: nt!_KPRCB                                     ***

***                                                                   ***

*************************************************************************

*************************************************************************

***                                                                   ***

***                                                                   ***

***    Either you specified an unqualified symbol, or your debugger   ***

***    doesn't have full symbol information.  Unqualified symbol      ***

***    resolution is turned off by default. Please either specify a   ***

***    fully qualified symbol module!symbolname, or enable resolution ***

***    of unqualified symbols by typing ".symopt- 100". Note that   ***

***    enabling unqualified symbol resolution with network symbol     ***

***    server shares in the symbol path may cause the debugger to     ***

***    appear to hang for long periods of time when an incorrect      ***

***    symbol name is typed or the network symbol server is down.     ***

***                                                                   ***

***    For some commands to work properly, your symbol path           ***

***    must point to .pdb files that have full type information.      ***

***                                                                   ***

***    Certain .pdb files (such as the public OS symbols) do not      ***

***    contain the required information.  Contact the group that      ***

***    provided you with these symbols if you need this command to    ***

***    work.                                                          ***

***                                                                   ***

***    Type referenced: nt!KPRCB                                      ***

***                                                                   ***

*************************************************************************

*************************************************************************

***                                                                   ***

***                                                                   ***

***    Either you specified an unqualified symbol, or your debugger   ***

***    doesn't have full symbol information.  Unqualified symbol      ***

***    resolution is turned off by default. Please either specify a   ***

***    fully qualified symbol module!symbolname, or enable resolution ***

***    of unqualified symbols by typing ".symopt- 100". Note that   ***

***    enabling unqualified symbol resolution with network symbol     ***

***    server shares in the symbol path may cause the debugger to     ***

***    appear to hang for long periods of time when an incorrect      ***

***    symbol name is typed or the network symbol server is down.     ***

***                                                                   ***

***    For some commands to work properly, your symbol path           ***

***    must point to .pdb files that have full type information.      ***

***                                                                   ***

***    Certain .pdb files (such as the public OS symbols) do not      ***

***    contain the required information.  Contact the group that      ***

***    provided you with these symbols if you need this command to    ***

***    work.                                                          ***

***                                                                   ***

***    Type referenced: nt!_KPRCB                                     ***

***                                                                   ***

*************************************************************************

*************************************************************************

***                                                                   ***

***                                                                   ***

***    Either you specified an unqualified symbol, or your debugger   ***

***    doesn't have full symbol information.  Unqualified symbol      ***

***    resolution is turned off by default. Please either specify a   ***

***    fully qualified symbol module!symbolname, or enable resolution ***

***    of unqualified symbols by typing ".symopt- 100". Note that   ***

***    enabling unqualified symbol resolution with network symbol     ***

***    server shares in the symbol path may cause the debugger to     ***

***    appear to hang for long periods of time when an incorrect      ***

***    symbol name is typed or the network symbol server is down.     ***

***                                                                   ***

***    For some commands to work properly, your symbol path           ***

***    must point to .pdb files that have full type information.      ***

***                                                                   ***

***    Certain .pdb files (such as the public OS symbols) do not      ***

***    contain the required information.  Contact the group that      ***

***    provided you with these symbols if you need this command to    ***

***    work.                                                          ***

***                                                                   ***

***    Type referenced: nt!_KPRCB                                     ***

***                                                                   ***

*************************************************************************

*************************************************************************

***                                                                   ***

***                                                                   ***

***    Either you specified an unqualified symbol, or your debugger   ***

***    doesn't have full symbol information.  Unqualified symbol      ***

***    resolution is turned off by default. Please either specify a   ***

***    fully qualified symbol module!symbolname, or enable resolution ***

***    of unqualified symbols by typing ".symopt- 100". Note that   ***

***    enabling unqualified symbol resolution with network symbol     ***

***    server shares in the symbol path may cause the debugger to     ***

***    appear to hang for long periods of time when an incorrect      ***

***    symbol name is typed or the network symbol server is down.     ***

***                                                                   ***

***    For some commands to work properly, your symbol path           ***

***    must point to .pdb files that have full type information.      ***

***                                                                   ***

***    Certain .pdb files (such as the public OS symbols) do not      ***

***    contain the required information.  Contact the group that      ***

***    provided you with these symbols if you need this command to    ***

***    work.                                                          ***

***                                                                   ***

***    Type referenced: nt!_KPRCB                                     ***

***                                                                   ***

*************************************************************************

*************************************************************************

***                                                                   ***

***                                                                   ***

***    Either you specified an unqualified symbol, or your debugger   ***

***    doesn't have full symbol information.  Unqualified symbol      ***

***    resolution is turned off by default. Please either specify a   ***

***    fully qualified symbol module!symbolname, or enable resolution ***

***    of unqualified symbols by typing ".symopt- 100". Note that   ***

***    enabling unqualified symbol resolution with network symbol     ***

***    server shares in the symbol path may cause the debugger to     ***

***    appear to hang for long periods of time when an incorrect      ***

***    symbol name is typed or the network symbol server is down.     ***

***                                                                   ***

***    For some commands to work properly, your symbol path           ***

***    must point to .pdb files that have full type information.      ***

***                                                                   ***

***    Certain .pdb files (such as the public OS symbols) do not      ***

***    contain the required information.  Contact the group that      ***

***    provided you with these symbols if you need this command to    ***

***    work.                                                          ***

***                                                                   ***

***    Type referenced: nt!_KPRCB                                     ***

***                                                                   ***

*************************************************************************

Probably caused by : USBPORT.SYS ( USBPORT+2d2f1 )

 

Followup: MachineOwner

---------

 

0: kd> !analyze -v

*******************************************************************************

*                                                                             *

*                        Bugcheck Analysis                                    *

*                                                                             *

*******************************************************************************

 

BUGCODE_USB_DRIVER (fe)

USB Driver bugcheck, first parameter is USB bugcheck code.

Arguments:

Arg1: 0000000000000006, USBBUGCODE_BAD_SIGNATURE An Internal data structure (object)

    has been corrupted.

Arg2: fffffa800eceea00, Object address

Arg3: 0000000050456068, Signature that was expected

Arg4: 0000000000000000

 

Debugging Details:

------------------

 

***** Kernel symbols are WRONG. Please fix symbols to do analysis.

 

*************************************************************************

***                                                                   ***

***                                                                   ***

***    Either you specified an unqualified symbol, or your debugger   ***

***    doesn't have full symbol information.  Unqualified symbol      ***

***    resolution is turned off by default. Please either specify a   ***

***    fully qualified symbol module!symbolname, or enable resolution ***

***    of unqualified symbols by typing ".symopt- 100". Note that   ***

***    enabling unqualified symbol resolution with network symbol     ***

***    server shares in the symbol path may cause the debugger to     ***

***    appear to hang for long periods of time when an incorrect      ***

***    symbol name is typed or the network symbol server is down.     ***

***                                                                   ***

***    For some commands to work properly, your symbol path           ***

***    must point to .pdb files that have full type information.      ***

***                                                                   ***

***    Certain .pdb files (such as the public OS symbols) do not      ***

***    contain the required information.  Contact the group that      ***

***    provided you with these symbols if you need this command to    ***

***    work.                                                          ***

***                                                                   ***

***    Type referenced: nt!_KPRCB                                     ***

***                                                                   ***

*************************************************************************

*************************************************************************

***                                                                   ***

***                                                                   ***

***    Either you specified an unqualified symbol, or your debugger   ***

***    doesn't have full symbol information.  Unqualified symbol      ***

***    resolution is turned off by default. Please either specify a   ***

***    fully qualified symbol module!symbolname, or enable resolution ***

***    of unqualified symbols by typing ".symopt- 100". Note that   ***

***    enabling unqualified symbol resolution with network symbol     ***

***    server shares in the symbol path may cause the debugger to     ***

***    appear to hang for long periods of time when an incorrect      ***

***    symbol name is typed or the network symbol server is down.     ***

***                                                                   ***

***    For some commands to work properly, your symbol path           ***

***    must point to .pdb files that have full type information.      ***

***                                                                   ***

***    Certain .pdb files (such as the public OS symbols) do not      ***

***    contain the required information.  Contact the group that      ***

***    provided you with these symbols if you need this command to    ***

***    work.                                                          ***

***                                                                   ***

***    Type referenced: nt!KPRCB                                      ***

***                                                                   ***

*************************************************************************

*************************************************************************

***                                                                   ***

***                                                                   ***

***    Either you specified an unqualified symbol, or your debugger   ***

***    doesn't have full symbol information.  Unqualified symbol      ***

***    resolution is turned off by default. Please either specify a   ***

***    fully qualified symbol module!symbolname, or enable resolution ***

***    of unqualified symbols by typing ".symopt- 100". Note that   ***

***    enabling unqualified symbol resolution with network symbol     ***

***    server shares in the symbol path may cause the debugger to     ***

***    appear to hang for long periods of time when an incorrect      ***

***    symbol name is typed or the network symbol server is down.     ***

***                                                                   ***

***    For some commands to work properly, your symbol path           ***

***    must point to .pdb files that have full type information.      ***

***                                                                   ***

***    Certain .pdb files (such as the public OS symbols) do not      ***

***    contain the required information.  Contact the group that      ***

***    provided you with these symbols if you need this command to    ***

***    work.                                                          ***

***                                                                   ***

***    Type referenced: nt!_KPRCB                                     ***

***                                                                   ***

*************************************************************************

*************************************************************************

***                                                                   ***

***                                                                   ***

***    Either you specified an unqualified symbol, or your debugger   ***

***    doesn't have full symbol information.  Unqualified symbol      ***

***    resolution is turned off by default. Please either specify a   ***

***    fully qualified symbol module!symbolname, or enable resolution ***

***    of unqualified symbols by typing ".symopt- 100". Note that   ***

***    enabling unqualified symbol resolution with network symbol     ***

***    server shares in the symbol path may cause the debugger to     ***

***    appear to hang for long periods of time when an incorrect      ***

***    symbol name is typed or the network symbol server is down.     ***

***                                                                   ***

***    For some commands to work properly, your symbol path           ***

***    must point to .pdb files that have full type information.      ***

***                                                                   ***

***    Certain .pdb files (such as the public OS symbols) do not      ***

***    contain the required information.  Contact the group that      ***

***    provided you with these symbols if you need this command to    ***

***    work.                                                          ***

***                                                                   ***

***    Type referenced: nt!KPRCB                                      ***

***                                                                   ***

*************************************************************************

*************************************************************************

***                                                                   ***

***                                                                   ***

***    Either you specified an unqualified symbol, or your debugger   ***

***    doesn't have full symbol information.  Unqualified symbol      ***

***    resolution is turned off by default. Please either specify a   ***

***    fully qualified symbol module!symbolname, or enable resolution ***

***    of unqualified symbols by typing ".symopt- 100". Note that   ***

***    enabling unqualified symbol resolution with network symbol     ***

***    server shares in the symbol path may cause the debugger to     ***

***    appear to hang for long periods of time when an incorrect      ***

***    symbol name is typed or the network symbol server is down.     ***

***                                                                   ***

***    For some commands to work properly, your symbol path           ***

***    must point to .pdb files that have full type information.      ***

***                                                                   ***

***    Certain .pdb files (such as the public OS symbols) do not      ***

***    contain the required information.  Contact the group that      ***

***    provided you with these symbols if you need this command to    ***

***    work.                                                          ***

***                                                                   ***

***    Type referenced: nt!_KPRCB                                     ***

***                                                                   ***

*************************************************************************

*************************************************************************

***                                                                   ***

***                                                                   ***

***    Either you specified an unqualified symbol, or your debugger   ***

***    doesn't have full symbol information.  Unqualified symbol      ***

***    resolution is turned off by default. Please either specify a   ***

***    fully qualified symbol module!symbolname, or enable resolution ***

***    of unqualified symbols by typing ".symopt- 100". Note that   ***

***    enabling unqualified symbol resolution with network symbol     ***

***    server shares in the symbol path may cause the debugger to     ***

***    appear to hang for long periods of time when an incorrect      ***

***    symbol name is typed or the network symbol server is down.     ***

***                                                                   ***

***    For some commands to work properly, your symbol path           ***

***    must point to .pdb files that have full type information.      ***

***                                                                   ***

***    Certain .pdb files (such as the public OS symbols) do not      ***

***    contain the required information.  Contact the group that      ***

***    provided you with these symbols if you need this command to    ***

***    work.                                                          ***

***                                                                   ***

***    Type referenced: nt!_KPRCB                                     ***

***                                                                   ***

*************************************************************************

*************************************************************************

***                                                                   ***

***                                                                   ***

***    Either you specified an unqualified symbol, or your debugger   ***

***    doesn't have full symbol information.  Unqualified symbol      ***

***    resolution is turned off by default. Please either specify a   ***

***    fully qualified symbol module!symbolname, or enable resolution ***

***    of unqualified symbols by typing ".symopt- 100". Note that   ***

***    enabling unqualified symbol resolution with network symbol     ***

***    server shares in the symbol path may cause the debugger to     ***

***    appear to hang for long periods of time when an incorrect      ***

***    symbol name is typed or the network symbol server is down.     ***

***                                                                   ***

***    For some commands to work properly, your symbol path           ***

***    must point to .pdb files that have full type information.      ***

***                                                                   ***

***    Certain .pdb files (such as the public OS symbols) do not      ***

***    contain the required information.  Contact the group that      ***

***    provided you with these symbols if you need this command to    ***

***    work.                                                          ***

***                                                                   ***

***    Type referenced: nt!_KPRCB                                     ***

***                                                                   ***

*************************************************************************

*************************************************************************

***                                                                   ***

***                                                                   ***

***    Either you specified an unqualified symbol, or your debugger   ***

***    doesn't have full symbol information.  Unqualified symbol      ***

***    resolution is turned off by default. Please either specify a   ***

***    fully qualified symbol module!symbolname, or enable resolution ***

***    of unqualified symbols by typing ".symopt- 100". Note that   ***

***    enabling unqualified symbol resolution with network symbol     ***

***    server shares in the symbol path may cause the debugger to     ***

***    appear to hang for long periods of time when an incorrect      ***

***    symbol name is typed or the network symbol server is down.     ***

***                                                                   ***

***    For some commands to work properly, your symbol path           ***

***    must point to .pdb files that have full type information.      ***

***                                                                   ***

***    Certain .pdb files (such as the public OS symbols) do not      ***

***    contain the required information.  Contact the group that      ***

***    provided you with these symbols if you need this command to    ***

***    work.                                                          ***

***                                                                   ***

***    Type referenced: nt!_KPRCB                                     ***

***                                                                   ***

*************************************************************************

 

ADDITIONAL_DEBUG_TEXT:  

You can run '.symfix; .reload' to try to fix the symbol path and load symbols.

 

MODULE_NAME: USBPORT

 

FAULTING_MODULE: fffff80003000000 nt

 

DEBUG_FLR_IMAGE_TIMESTAMP:  52954db7

 

CUSTOMER_CRASH_COUNT:  1

 

DEFAULT_BUCKET_ID:  WIN7_DRIVER_FAULT

 

BUGCHECK_STR:  0xFE

 

CURRENT_IRQL:  0

 

ANALYSIS_VERSION: 6.3.9600.16384 (debuggers(dbg).130821-1623) amd64fre

 

LAST_CONTROL_TRANSFER:  from fffff880075d72f1 to fffff80003075bc0

 

STACK_TEXT:  

fffff800`038079a8 fffff880`075d72f1 : 00000000`000000fe 00000000`00000006 fffffa80`0eceea00 00000000`50456068 : nt+0x75bc0

fffff800`038079b0 00000000`000000fe : 00000000`00000006 fffffa80`0eceea00 00000000`50456068 00000000`00000000 : USBPORT+0x2d2f1

fffff800`038079b8 00000000`00000006 : fffffa80`0eceea00 00000000`50456068 00000000`00000000 00000000`ffffff02 : 0xfe

fffff800`038079c0 fffffa80`0eceea00 : 00000000`50456068 00000000`00000000 00000000`ffffff02 00000000`00000002 : 0x6

fffff800`038079c8 00000000`50456068 : 00000000`00000000 00000000`ffffff02 00000000`00000002 fffff880`075abe1b : 0xfffffa80`0eceea00

fffff800`038079d0 00000000`00000000 : 00000000`ffffff02 00000000`00000002 fffff880`075abe1b 00000000`00000002 : 0x50456068

 

 

STACK_COMMAND:  kb

 

FOLLOWUP_IP:

USBPORT+2d2f1

fffff880`075d72f1 ??              ???

 

SYMBOL_STACK_INDEX:  1

 

SYMBOL_NAME:  USBPORT+2d2f1

 

FOLLOWUP_NAME:  MachineOwner

 

IMAGE_NAME:  USBPORT.SYS

 

BUCKET_ID:  WRONG_SYMBOLS

 

FAILURE_BUCKET_ID:  WRONG_SYMBOLS

 

ANALYSIS_SOURCE:  KM

 

FAILURE_ID_HASH_STRING:  km:wrong_symbols

 

FAILURE_ID_HASH:  {70b057e8-2462-896f-28e7-ac72d4d365f8}

 

Followup: MachineOwner

---------

 

0: kd> lmvm USBPORT

start             end                 module name

fffff880`075aa000 fffff880`07600000   USBPORT  T (no symbols)           

    Loaded symbol image file: USBPORT.SYS

    Image path: \SystemRoot\system32\DRIVERS\USBPORT.SYS

    Image name: USBPORT.SYS

    Timestamp:        Wed Nov 27 03:41:11 2013 (52954DB7)

    CheckSum:         0005402A

    ImageSize:        00056000

    Translations:     0000.04b0 0000.04e4 0409.04b0 0409.04e4

 

 

Е кое е правилното???

 

 

 

Link to comment
Сподели другаде

По принцип WinDbg е далеч по-добрата програма за анализ на dump файлове. Проблемът в случая е, че се работи с minidump файлове, които съдържат много малко информация, за да може да се стигне до някакво по-категорично заключение.
Link to comment
Сподели другаде

п.п. Имай на предвид,че като копваш -пейсваш,някой файл Windows може да не може да го копира ако е записан точно в повредената част на диска,и ще излезе съобщения за грешка.

За това има една малка програма на Roadkill - Unstopable Copier. Копира всичко наред, може да прескача автоматично повредени файлове или да се опита да извлича информация - функции, които ги няма в Windows. Ползвам го основно за да прескача повредени файлове, когато прехвърлям информация от повредени носители.
Link to comment
Сподели другаде

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Гост
Отговори на тази тема

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   Не можете да качите директно снимка. Качете или добавете изображението от линк (URL)

Loading...

×
×
  • Създай ново...