最近win7老是蓝屏,重装无数次,总也找不到原因,实在忍无可忍,结果就找到方法了

Windows 7存在蓝屏故障的核心转储文件(Kernal Memory Dump)或是小内存转储文件(Minidump)。如果是核心转储文件,默认保存的文件是C:\Windows\Memory.dmp,如果是小内存转储文件,相应文件是C:\Windows\MiniDump目录下的按照日期命名的文件。我的系统两个都有,分析这两个文件的结果基本都一样的,就直接分析 Memory.dmp了。

先去下载一个WinDbg http://tech.sina.com.cn/download/down_contents/1156608000/29175.shtml

然后安装配置:

安装只要一步一步点下去就好了。打开windbg,在Windbg窗口单击“File→Symbol Search Path”命令,在打开的窗口输入"SRV*c:\sytemp*http://msdl.microsoft.com/download/symbols",单击“OK”按钮。

分析:

我们可以用Windbg来分析蓝屏的内存转储文件了。我们只需单击“File→Open Crash Dump”命令,接着找到刚才的核心内存转储文件或者小内存转储文件打开。

 

Microsoft (R) Windows Debugger  Version 6.6.0007.5
Copyright (c) Microsoft Corporation. All rights reserved.


Loading Dump File [H:\Windows\MEMORY.DMP]
Kernel Summary Dump File: Only kernel address space is available

Symbol search path is: SRV*c:\sytemp*http://msdl.microsoft.com/download/symbols
Executable search path is:
Windows Vista Kernel Version 7601 (Service Pack 1) MP (4 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 7601.17835.amd64fre.win7sp1_gdr.120503-2030
Kernel base = 0xfffff800`0440b000 PsLoadedModuleList = 0xfffff800`0464f670
Debug session time: Thu Nov 22 09:29:26.427 2012 (GMT+8)
System Uptime: 0 days 0:02:42.972
Loading Kernel Symbols
....................................................................................................................................................................
Loading User Symbols

Loading unloaded module list
....
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck C5, {3c21, 2, 0, fffff800045b5dd3}

*** ERROR: Symbol file could not be found.  Defaulted to export symbols for VBoxNetFlt.sys -
*** ERROR: Module load completed but symbols could not be loaded for rtl8192se.sys
Probably caused by : VBoxNetFlt.sys ( VBoxNetFlt+307e )

Followup: MachineOwner
---------

分析结果如上( Memory.dmp),问题看出来了,是virtualbox惹得祸么,o(∩_∩)o...哈哈

 

 

 

参考文章:

http://it.people.com.cn/GB/42892/42925/115739/13420016.html

http://cache.baidu.com/c?m=9f65cb4a8c8507ed4fece763104c8c711923d030678197027fa3c215cc790506163fa8ac20564859899961375ff21c41b1b6612d2a0174e6cf9c824adde8c67f2b8c2463264a8210418419fec85125b67ad605b7bb5cbafaa63dd6f58ec4de2456dd537478caf289580216c83ee71541e4&p=882a9643d18559fc57ee94685f0ec433&newp=9066c64ad5c35db109bd9b7d0b11bb755c5bc4387ebad01578c88d19&user=baidu&fm=sc&query=win7+0x000000c5&qid=a4b5cca20202fe21&p1=3

 

posted on 2012-11-22 10:50  ventry  阅读(1103)  评论(0编辑  收藏  举报