最近win7老是蓝屏,重装无数次,总也找不到原因,实在忍无可忍,结果就找到方法了
Windows 7存在蓝屏故障的核心转储文件(Kernal Memory Dump)或是小内存转储文件(Minidump)。如果是核心转储文件,默认保存的文件是C:\Windows\Memory.dmp,如果是小内存转储文件,相应文件是C:\Windows\MiniDump目录下的按照日期命名的文件。我的系统两个都有,分析这两个文件的结果基本都一样的,就直接分析 Memory.dmp了。
然后安装配置:
安装只要一步一步点下去就好了。打开windbg,在Windbg窗口单击“File→Symbol Search Path”命令,在打开的窗口输入"SRV*c:\sytemp*http://msdl.microsoft.com/download/symbols",单击“OK”按钮。
分析:
我们可以用Windbg来分析蓝屏的内存转储文件了。我们只需单击“File→Open Crash Dump”命令,接着找到刚才的核心内存转储文件或者小内存转储文件打开。
Microsoft (R) Windows Debugger Version 6.6.0007.5
Copyright (c) Microsoft Corporation. All rights reserved.
Loading Dump File [H:\Windows\MEMORY.DMP]
Kernel Summary Dump File: Only kernel address space is available
Symbol search path is: SRV*c:\sytemp*http://msdl.microsoft.com/download/symbols
Executable search path is:
Windows Vista Kernel Version 7601 (Service Pack 1) MP (4 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 7601.17835.amd64fre.win7sp1_gdr.120503-2030
Kernel base = 0xfffff800`0440b000 PsLoadedModuleList = 0xfffff800`0464f670
Debug session time: Thu Nov 22 09:29:26.427 2012 (GMT+8)
System Uptime: 0 days 0:02:42.972
Loading Kernel Symbols
....................................................................................................................................................................
Loading User Symbols
Loading unloaded module list
....
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
Use !analyze -v to get detailed debugging information.
BugCheck C5, {3c21, 2, 0, fffff800045b5dd3}
*** ERROR: Symbol file could not be found. Defaulted to export symbols for VBoxNetFlt.sys -
*** ERROR: Module load completed but symbols could not be loaded for rtl8192se.sys
Probably caused by : VBoxNetFlt.sys ( VBoxNetFlt+307e )
Followup: MachineOwner
---------
分析结果如上( Memory.dmp),问题看出来了,是virtualbox惹得祸么,o(∩_∩)o...哈哈
参考文章: