听说大神都不稀罕来win8区了 我弄点技术含量的 求大神分析win8蓝屏转储文件

sogou2004

其实win8用着挺稳定的

但是不知道为什么昨天一天之内蓝屏2次

蓝屏1：

---

A problem has been detected and Windows has been shut down to prevent damage
to your computer.
The problem seems to be caused by the following file: fwpkclnt.sys
KMODE_EXCEPTION_NOT_HANDLED
If this is the first time you've seen this stop error screen,
restart your computer. If this screen appears again, follow
these steps:
Check to make sure any new hardware or software is properly installed.
If this is a new installation, ask your hardware or software manufacturer
for any Windows updates you might need.
If problems continue, disable or remove any newly installed hardware
or software. Disable BIOS memory options such as caching or shadowing.
If you need to use safe mode to remove or disable components, restart
your computer, press F8 to select Advanced Startup Options, and then
select Safe Mode.
Technical Information:
*** STOP: 0x0000001e (0xffffffffc0000005, 0xfffff880022c6057, 0x0000000000000000,
0xffffffffffffffff)

*** fwpkclnt.sys - Address 0xfffff880022c6057 base at 0xfffff880022c5000 DateStamp
0x505ab276

---

蓝屏2：

A problem has been detected and Windows has been shut down to prevent damage
to your computer.
The problem seems to be caused by the following file: mcupdate_GenuineIntel.dll
DRIVER_IRQL_NOT_LESS_OR_EQUAL
If this is the first time you've seen this stop error screen,
restart your computer. If this screen appears again, follow
these steps:
Check to make sure any new hardware or software is properly installed.
If this is a new installation, ask your hardware or software manufacturer
for any Windows updates you might need.
If problems continue, disable or remove any newly installed hardware
or software. Disable BIOS memory options such as caching or shadowing.
If you need to use safe mode to remove or disable components, restart
your computer, press F8 to select Advanced Startup Options, and then
select Safe Mode.
Technical Information:
*** STOP: 0x000000d1 (0x0000000000000040, 0x0000000000000002, 0x0000000000000000,
0xfffff88002521057)
*** mcupdate_GenuineIntel.dll - Address 0xfffff88002521057 base at 0xfffff88000ce8000 DateStamp
0x5010abb4

---

如果有需要的话，我可以上传minidump文件

祝大家新年快乐@！

dump.rar (58.77 KB, 下载次数: 4)

2013-1-1 20:16 上传

下载次数: 4
下载积分: PB币 -1
请勿使用多线程下载工具下载论坛附件！

hefengyang

完全不懂

sea-monsters

把minidump文件也传上来吧~这样看的更直接~

putputput

fwpkclnt.sys --〉poolmon.exe --〉内存池监视器相关驱动
mcupdate_GenuineIntel.dll --〉 A microcode reliability update that improves the reliability of systems that use Intel processors --〉cpu相关驱动
http://msdn.microsoft.com/en-us/library/windows/hardware/ff557408(v=vs.85).aspx
http://msdn.microsoft.com/en-us/library/windows/hardware/ff560244(v=vs.85).aspx
两篇文档都指出和硬件的关系很大，建议排查最近添加的硬件驱动，当然，不排除内存出现问题这种更可能的情况（memtest一下吧）

sogou2004

sea-monsters 发表于 2013-1-1 20:11
把minidump文件也传上来吧~这样看的更直接~

好的 已经上传 你给分析分析吧

sogou2004

putputput 发表于 2013-1-1 20:14
fwpkclnt.sys --〉poolmon.exe --〉内存池监视器相关驱动
mcupdate_GenuineIntel.dll --〉 A microcode re ...

嗯 已经排查了 没有新安装的驱动 现在在排查哪些软件
谢谢

516870

感谢楼主的热心分享！

wftmac

fwpkclnt.sys文件受损，去别人win8同版本电脑上copy一个这个文件pe里替换掉重启即可

sea-monsters

楼主dump里面有两次蓝屏的记录呢，两次的错误代码都不一样的说~

sea-monsters

两次dump的详细情况，还是坐等大神出现吧，这个我也搞不大清楚