Windows 7 Forum: konfiguracja, optymalizacja, porady, gadżety •
Problem z plikiem ntoskrnl.exe i blue screen - Wersja do druku

+- Windows 7 Forum: konfiguracja, optymalizacja, porady, gadżety • (https://windows7forum.pl)
+-- Dział: Pomoc i wsparcie, Windows 7 (/pomoc-i-wsparcie-windows-7-26-f)
+--- Dział: Bezpieczeństwo Windows 7 (/bezpieczenstwo-windows-7-15-f)
+--- Wątek: Problem z plikiem ntoskrnl.exe i blue screen (/problem-z-plikiem-ntoskrnl-exe-i-blue-screen-14655-t)

Strony: 1 2


Problem z plikiem ntoskrnl.exe i blue screen - biedrona01 - 13.03.2011 10:54

Otóż mam problem rano wyskoczył mi blue screen więc zbadałem przyczynę tego programem Debugger Windows .
Ten program wskazał plik który jest powodem tego całego zamieszania . ( ntoskrnl.exe )
Mój system to Win 7 professional 64 bit
Bardzo proszę o udzielenie jakieś pomocy Cwaniak

Oto cały raport :

Kod:
Microsoft (R) Windows Debugger Version 6.12.0002.633 AMD64
Copyright (c) Microsoft Corporation. All rights reserved.


Loading Dump File [C: \Windows\Minidump\031311-17394-01.dmp]
Mini Kernel Dump File:  Only registers and stack trace are available

Symbol search path is:  *** Invalid ***
****************************************************************************
* Symbol loading may be unreliable without a symbol search path.           *
* Use .symfix to have the debugger choose a symbol path.                   *
* After setting your symbol path, use .reload to refresh symbol locations. *
****************************************************************************
Executable search path is:  
*********************************************************************
* Symbols can not be loaded because symbol path is not initialized. *
*                                                                   *
* The Symbol Path can be set by:                                     *
*   using the _NT_SYMBOL_PATH environment variable.                 *
*   using the -y <symbol_path> argument when starting the debugger. *
*   using .sympath and .sympath+                                    *
*********************************************************************
Unable to load image \SystemRoot\system32\ntoskrnl.exe, Win32 error 0n2
*** WARNING:  Unable to verify timestamp for ntoskrnl.exe
*** ERROR:  Module load completed but symbols could not be loaded for ntoskrnl.exe
Windows 7 Kernel Version 7601 (Service Pack 1) MP (4 procs) Free x64
Product:  WinNt, suite:  TerminalServer SingleUserTS
Built by:  7601.17514.amd64fre.win7sp1_rtm.101119-1850
Machine Name:
Kernel base = 0xfffff800`0300d000 PsLoadedModuleList = 0xfffff800`03252e90
Debug session time:  Sun Mar 13 07: 54: 35.169 2011 (UTC + 1: 00)
System Uptime:  0 days 1: 43: 54.580
*********************************************************************
* Symbols can not be loaded because symbol path is not initialized. *
*                                                                   *
* The Symbol Path can be set by:                                     *
*   using the _NT_SYMBOL_PATH environment variable.                 *
*   using the -y <symbol_path> argument when starting the debugger. *
*   using .sympath and .sympath+                                    *
*********************************************************************
Unable to load image \SystemRoot\system32\ntoskrnl.exe, Win32 error 0n2
*** WARNING:  Unable to verify timestamp for ntoskrnl.exe
*** ERROR:  Module load completed but symbols could not be loaded for ntoskrnl.exe
Loading Kernel Symbols
...............................................................
................................................................
.............................
Loading User Symbols
Loading unloaded module list
....
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck 50, {ffffea8004933e10, 0, fffff800031b8dd3, 7}

***** Kernel symbols are WRONG. Please fix symbols to do analysis.

*************************************************************************
***                                                                   ***
***                                                                   ***
***    Your debugger is not using the correct symbols                 ***
***                                                                   ***

***    In order for this command to work properly, your symbol path   ***
***    must point to .pdb files that have full type information.      ***
***                                                                   ***
***    Certain .pdb files (such as the public OS symbols) do not      ***
***    contain the required information.  Contact the group that      ***
***    provided you with these symbols if you need this command to    ***
***    work.                                                          ***
***                                                                   ***
***    Type referenced:  nt!_KPRCB                                     ***
***                                                                   ***
*************************************************************************
*************************************************************************
***                                                                   ***
***                                                                   ***
***    Your debugger is not using the correct symbols                 ***
***                                                                   ***
***    In order for this command to work properly, your symbol path   ***
***    must point to .pdb files that have full type information.      ***
***                                                                   ***
***    Certain .pdb files (such as the public OS symbols) do not      ***
***    contain the required information.  Contact the group that      ***
***    provided you with these symbols if you need this command to    ***
***    work.                                                          ***
***                                                                   ***
***    Type referenced:  nt!_KPRCB                                     ***
***                                                                   ***
*************************************************************************
*************************************************************************
***                                                                   ***
***                                                                   ***
***    Your debugger is not using the correct symbols                 ***
***                                                                   ***
***    In order for this command to work properly, your symbol path   ***
***    must point to .pdb files that have full type information.      ***
***                                                                   ***
***    Certain .pdb files (such as the public OS symbols) do not      ***
***    contain the required information.  Contact the group that      ***
***    provided you with these symbols if you need this command to    ***
***    work.                                                          ***
***                                                                   ***
***    Type referenced:  nt!_KPRCB                                     ***
***                                                                   ***
*************************************************************************
Probably caused by :  ntoskrnl.exe ( nt+1abdd3 )

Followup:  MachineOwner
---------



RE: Problem z plikiem ntoskrnl.exe i blue screen - Nasa - 13.03.2011 10:56

Spróbuj przywracania systemu. ntoskrnl.exe to ważny plik systemowy, odpowiadający za jądro systemu....


RE: Problem z plikiem ntoskrnl.exe i blue screen - biedrona01 - 13.03.2011 12:14

Zrobiłem przywracanie teraz jedynie pozostaje czekać , czy znowu wyskoczy blue screen
Cwaniak


RE: Problem z plikiem ntoskrnl.exe i blue screen - Nasa - 13.03.2011 13:34

czekam na efekty Cwaniak


RE: Problem z plikiem ntoskrnl.exe i blue screen - biedrona01 - 17.03.2011 15:51

Niestety problem powrócił


RE: Problem z plikiem ntoskrnl.exe i blue screen - bodziulla - 17.03.2011 16:33

Hej.
Czy możesz wysłać plik dmp?.


RE: Problem z plikiem ntoskrnl.exe i blue screen - biedrona01 - 17.03.2011 18:46

Chyba tak


RE: Problem z plikiem ntoskrnl.exe i blue screen - bodziulla - 17.03.2011 19:47

Hej.
Praktycznie moje pytanie było retoryczne i chodziło o dostarczenie pliku. Plik masz źle zdebugowany i nie można za bardzo z niego wyczytać informacji Cwaniak
Pzdr


RE: Problem z plikiem ntoskrnl.exe i blue screen - biedrona01 - 17.03.2011 20:35

I co mam tera zrobić ?


RE: Problem z plikiem ntoskrnl.exe i blue screen - bodziulla - 17.03.2011 21:35

Jeju. Wyślij plik na jakiś serwer przeklej.pl, sendspace lub inny Cwaniak


RE: Problem z plikiem ntoskrnl.exe i blue screen - biedrona01 - 18.03.2011 05:54

http://hostuje.net/file.php?id=b437000852e9b2fe361fa8f82603eeab


RE: Problem z plikiem ntoskrnl.exe i blue screen - biedrona01 - 19.03.2011 11:35

Jakieś postępy ?


RE: Problem z plikiem ntoskrnl.exe i blue screen - biedrona01 - 09.04.2011 15:52

Czy ktoś może mi tu pomóc ?

Zrobiłem aktual. wszystkich sterów i test memtestem ( nic nie wykazał )

Za wszelką pomoc dziękuje


RE: Problem z plikiem ntoskrnl.exe i blue screen - bodziulla - 09.04.2011 17:04

Hej.
Twój problem dotyczy aplikacji chrome. Przeinstaluj przeglądarkę i zobacz czy wszystko będzie gutCwaniak
Pzdr


RE: Problem z plikiem ntoskrnl.exe i blue screen - biedrona01 - 10.04.2011 06:22

Zrobiłem jak poradziłeś tera trzeba czekać czy wszystko okaże się ''gut''
xD


RE: Problem z plikiem ntoskrnl.exe i blue screen - biedrona01 - 13.04.2011 17:45

Narazie żadych problemów nie było więc ta rada jednak pomogła
Wielkie dzięki
Jakby co dam znać Cwaniak


RE: Problem z plikiem ntoskrnl.exe i blue screen - biedrona01 - 18.04.2011 05:33

Ehh problem powrócił oto cały raport
Cytat:Microsoft ® Windows Debugger Version 6.12.0002.633 AMD64
Copyright © Microsoft Corporation. All rights reserved.


Loading Dump File [C:\Windows\Minidump\041811-107890-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available

Symbol search path is: *** Invalid ***
****************************************************************************
* Symbol loading may be unreliable without a symbol search path. *
* Use .symfix to have the debugger choose a symbol path. *
* After setting your symbol path, use .reload to refresh symbol locations. *
****************************************************************************
Executable search path is:
*********************************************************************
* Symbols can not be loaded because symbol path is not initialized. *
* *
* The Symbol Path can be set by: *
* using the _NT_SYMBOL_PATH environment variable. *
* using the -y <symbol_path> argument when starting the debugger. *
* using .sympath and .sympath+ *
*********************************************************************
Unable to load image \SystemRoot\system32\ntoskrnl.exe, Win32 error 0n2
*** ERROR: Module load completed but symbols could not be loaded for ntoskrnl.exe
Windows 7 Kernel Version 7601 (Service Pack 1) MP (4 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 7601.17514.amd64fre.win7sp1_rtm.101119-1850
Machine Name:
Kernel base = 0xfffff800`0324c000 PsLoadedModuleList = 0xfffff800`03491e90
Debug session time: Mon Apr 18 06:22:01.393 2011 (UTC + 2:00)
System Uptime: 0 days 0:10:23.970
*********************************************************************
* Symbols can not be loaded because symbol path is not initialized. *
* *
* The Symbol Path can be set by: *
* using the _NT_SYMBOL_PATH environment variable. *
* using the -y <symbol_path> argument when starting the debugger. *
* using .sympath and .sympath+ *
*********************************************************************
Unable to load image \SystemRoot\system32\ntoskrnl.exe, Win32 error 0n2
*** ERROR: Module load completed but symbols could not be loaded for ntoskrnl.exe
Loading Kernel Symbols
...............................................................
................................................................
..............................
Loading User Symbols
Loading unloaded module list
..........
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck 3B, {c0000005, fffff9600016321f, fffff880021900c0, 0}

Unable to load image \SystemRoot\System32\win32k.sys, Win32 error 0n2
*** WARNING: Unable to verify timestamp for win32k.sys
*** ERROR: Module load completed but symbols could not be loaded for win32k.sys
***** Kernel symbols are WRONG. Please fix symbols to do analysis.

*************************************************************************
*** ***
*** ***
*** Your debugger is not using the correct symbols ***
*** ***
*** In order for this command to work properly, your symbol path ***
*** must point to .pdb files that have full type information. ***
*** ***
*** Certain .pdb files (such as the public OS symbols) do not ***
*** contain the required information. Contact the group that ***
*** provided you with these symbols if you need this command to ***
*** work. ***
*** ***
*** Type referenced: nt!_KPRCB ***
*** ***
*************************************************************************
*************************************************************************
*** ***
*** ***
*** Your debugger is not using the correct symbols ***
*** ***
*** In order for this command to work properly, your symbol path ***
*** must point to .pdb files that have full type information. ***
*** ***
*** Certain .pdb files (such as the public OS symbols) do not ***
*** contain the required information. Contact the group that ***
*** provided you with these symbols if you need this command to ***
*** work. ***
*** ***
*** Type referenced: nt!_KPRCB ***
*** ***
*************************************************************************
*************************************************************************
*** ***
*** ***
*** Your debugger is not using the correct symbols ***
*** ***
*** In order for this command to work properly, your symbol path ***
*** must point to .pdb files that have full type information. ***
*** ***
*** Certain .pdb files (such as the public OS symbols) do not ***
*** contain the required information. Contact the group that ***
*** provided you with these symbols if you need this command to ***
*** work. ***
*** ***
*** Type referenced: nt!_KPRCB ***
*** ***
*************************************************************************
Probably caused by : win32k.sys ( win32k+c321f )

Followup: MachineOwner
---------



Jak widać winny jest teraz plik win32k.sys dodam że mam zainstalowane najnowsze stery do grafy


RE: Problem z plikiem ntoskrnl.exe i blue screen - bodziulla - 18.04.2011 16:05

Hej.
Wiem, że problem od tak sobie nie zniknie (za dużo miałeś bluscreenów, aby za pierwszym razem wywalczyć). Najlepiej jak możesz wyślij mi plik dmp oki Cwaniak
Pzdr


RE: Problem z plikiem ntoskrnl.exe i blue screen - biedrona01 - 18.04.2011 17:42

http://www.wrzuc.to/wSolWK7nZa.wt


RE: Problem z plikiem ntoskrnl.exe i blue screen - bodziulla - 18.04.2011 21:06

Hej.
Twój dylemat powinien dotyczyć usługi Posłaniec. Czyli tak uruchom/ polecenie services.msc i wyłącz usługę Posłaniec Cwaniak
To pierwsza opcja pytanie jakiej używasz ochrony?.
Pzdr