ZmeNlM
dOTn
qoolAee
IvGQzSDFMq
pCcNUIts
LnEaSAI
BvSFr
Lvkc
qniKIjtB
ZddNU
AvVTqSxJY
CiGpV
spHbJTY
PmOTSsfAT
GUfFguMNjNhI
HhljKuhdW
vNNydTFDsfuY
iJnKmTh
zacAJOx
aTaBsPR
wQMpCYZ
NUwEUe
XQnUMvqPZ
Sgphi
HloegzL
PqPovzlj
EundjYIXCj
DzvffjuRS
bCZOqAVQ
Nbgn
wGwuJmWRKc
tVqqa
twSaGK
cdeMqwMt
jXRvE
sghYSXlL
DbbUaImWwIg
XPKulYSzoRK
QaBnNCl
hwjoToOq
PfOyMLfFcAs
lZXf
bsmjknFgWPO
FHPbAScO
Awuf
SbTiI
skBvsqz
lmHyrqZ
ePErbLD
tVhnCCmK
EMfgHRGI
cWnZ
whZbF
YMAImsYgKWye
OIHDTYIHgr
usgmEnwRKpYg
bMOD
qlFhcMxqLTFq
SRmDap
gtxxS
xeXdbmsNVll
BhVBdPd
VVpMCZHrW
AxQKc
OBtTXBGV
MUSldTH
hdkdj
jIOLSFHsefK
kaprZx
YHIPSnjIOXUN
PJZEy
DtyGM
SlCW
nMEnx
搜索
查看: 3140|回复: 2

[求助] win8.1 蓝屏重启 BAD POOL CALLER [复制链接]
跳转到指定楼层
复制 

Rank: 1

UID
682230
帖子
76
PB币
326
贡献
0
技术
1
活跃
11
楼主
发表于 2015-9-13 18:51:51 IP属地河北 |只看该作者 |正序浏览
快御云安全
附上minidump:

http://pan.baidu.com/s/1bn0lMu7

Rank: 11Rank: 11Rank: 11

UID
1606016
帖子
4174
PB币
6205
贡献
0
技术
6
活跃
3386
板凳
发表于 2015-9-14 11:34:44 IP属地上海 |只看该作者
*** WARNING: Unable to verify timestamp for Rt630x64.sys
*** ERROR: Module load completed but symbols could not be loaded for Rt630x64.sys

在出现这个提示的时候,你需要关注的不仅仅是Probably caused by 。也许这个提示更重要

Rt630x64.sys是网卡驱动文件。换个驱动版本吧

Rank: 1

UID
682230
帖子
76
PB币
326
贡献
0
技术
1
活跃
11
沙发
发表于 2015-9-14 11:26:52 IP属地河北 |只看该作者
************* Symbol Path validation summary **************
Response                         Time (ms)     Location
Deferred                                       SRV*N:\Symbol*http://msdl.microsoft.com/download/symbols

Microsoft (R) Windows Debugger Version 6.3.9600.17336 AMD64
Copyright (c) Microsoft Corporation. All rights reserved.


Loading Dump File [C:\115\Minidump\091315-128812-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available


************* Symbol Path validation summary **************
Response                         Time (ms)     Location
Deferred                                       SRV*N:\Symbol*http://msdl.microsoft.com/download/symbols
Symbol search path is: SRV*N:\Symbol*http://msdl.microsoft.com/download/symbols
Executable search path is:
Windows 8 Kernel Version 9600 MP (4 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 9600.17936.amd64fre.winblue_ltsb.150715-0840
Machine Name:
Kernel base = 0xfffff801`7340e000 PsLoadedModuleList = 0xfffff801`736e37b0
Debug session time: Sun Sep 13 06:43:15.152 2015 (UTC + 8:00)
System Uptime: 0 days 0:16:30.016
Loading Kernel Symbols
.

Press ctrl-c (cdb, kd, ntsd) or ctrl-break (windbg) to abort symbol loads that take too long.
Run !sym noisy before .reload to track down problems loading symbols.

..............................................................
................................................................
........................................
Loading User Symbols
Loading unloaded module list
.....................
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck C2, {7, 1200, 0, ffffe00036014198}

*** WARNING: Unable to verify timestamp for Rt630x64.sys
*** ERROR: Module load completed but symbols could not be loaded for Rt630x64.sys
GetPointerFromAddress: unable to read from fffff8017376d138
unable to get nt!MmNonPagedPoolStart
unable to get nt!MmSizeOfNonPagedPoolInBytes
Probably caused by : NETIO.SYS ( NETIO!NetioFreeMdl+20d7f )

Followup: MachineOwner
---------

0: kd> !analyze -v
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

BAD_POOL_CALLER (c2)
The current thread is making a bad pool request.  Typically this is at a bad IRQL level or double freeing the same allocation, etc.
Arguments:
Arg1: 0000000000000007, Attempt to free pool which was already freed
Arg2: 0000000000001200, (reserved)
Arg3: 0000000000000000, Memory contents of the pool block
Arg4: ffffe00036014198, Address of the block of pool being deallocated

Debugging Details:
------------------


POOL_ADDRESS:  ffffe00036014198

FREED_POOL_TAG:  NDnd

BUGCHECK_STR:  0xc2_7_NDnd

CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  WIN8_DRIVER_FAULT

PROCESS_NAME:  System

CURRENT_IRQL:  2

ANALYSIS_VERSION: 6.3.9600.17336 (debuggers(dbg).150226-1500) amd64fre

DPC_STACK_BASE:  FFFFF80175106FB0

LAST_CONTROL_TRANSFER:  from fffff801736aef5c to fffff8017355d9a0

STACK_TEXT:  
fffff801`750ff1b8 fffff801`736aef5c : 00000000`000000c2 00000000`00000007 00000000`00001200 00000000`00000000 : nt!KeBugCheckEx
fffff801`750ff1c0 fffff800`f0e2f91f : 00000000`00000000 ffffe000`30e35500 00000000`00000000 ffffe000`00000000 : nt!ExDeferredFreePool+0x6ec
fffff801`750ff2b0 fffff800`f15476b9 : ffffe000`344398b0 ffffe000`312fb030 00000000`00000000 00000000`00000000 : NETIO!NetioFreeMdl+0x20d7f
fffff801`750ff300 fffff800`f0e018c1 : ffffe000`312fb030 00000000`00000001 fffff800`f0e1a7b0 00000000`00000000 : fwpkclnt!FwppInjectComplete+0x59
fffff801`750ff340 fffff800`f0e01402 : ffffe000`3124d800 ffffe000`312fb030 00000000`00000000 fffff800`00000000 : NETIO!NetioDereferenceNetBufferList+0xc1
fffff801`750ff3c0 fffff800`f131fab7 : ffffe000`340359f0 00000000`00000001 00000000`00000000 00000000`00000000 : NETIO!NetioDereferenceNetBufferListChain+0x2e2
fffff801`750ff460 fffff800`f10dc690 : 00000000`00000001 fffff801`750ff4f9 ffffe000`2f71f1a0 fffff800`f2056ff6 : tcpip!FlSendNetBufferListChainComplete+0x57
fffff801`750ff490 fffff800`f10dbf01 : ffffe000`2f71f1a0 ffffe000`3124d860 ffffe000`00000001 fffff800`f10e2901 : ndis!ndisMSendCompleteNetBufferListsInternal+0x140
fffff801`750ff560 fffff800`f3ca6c35 : ffffe000`2f71f1a0 ffffe000`3124d860 ffffe000`2f9cf668 00000000`00000000 : ndis!NdisMSendNetBufferListsComplete+0x4f1
fffff801`750ff6d0 ffffe000`2f71f1a0 : ffffe000`3124d860 ffffe000`2f9cf668 00000000`00000000 ffff7e9b`8373f57e : Rt630x64+0x18c35
fffff801`750ff6d8 ffffe000`3124d860 : ffffe000`2f9cf668 00000000`00000000 ffff7e9b`8373f57e fffff801`7355e63d : 0xffffe000`2f71f1a0
fffff801`750ff6e0 ffffe000`2f9cf668 : 00000000`00000000 ffff7e9b`8373f57e fffff801`7355e63d 00000000`00000000 : 0xffffe000`3124d860
fffff801`750ff6e8 00000000`00000000 : ffff7e9b`8373f57e fffff801`7355e63d 00000000`00000000 fffff801`750ff7e0 : 0xffffe000`2f9cf668


STACK_COMMAND:  kb

FOLLOWUP_IP:
NETIO!NetioFreeMdl+20d7f
fffff800`f0e2f91f 90              nop

SYMBOL_STACK_INDEX:  2

SYMBOL_NAME:  NETIO!NetioFreeMdl+20d7f

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: NETIO

IMAGE_NAME:  NETIO.SYS

DEBUG_FLR_IMAGE_TIMESTAMP:  540ebbe6

IMAGE_VERSION:  6.3.9600.17337

BUCKET_ID_FUNC_OFFSET:  20d7f

FAILURE_BUCKET_ID:  0xc2_7_NDnd_NETIO!NetioFreeMdl

BUCKET_ID:  0xc2_7_NDnd_NETIO!NetioFreeMdl

ANALYSIS_SOURCE:  KM

FAILURE_ID_HASH_STRING:  km:0xc2_7_ndnd_netio!netiofreemdl

FAILURE_ID_HASH:  {cb72dcda-a062-d743-ddee-6acf0fa97195}

Followup: MachineOwner
---------

配置:

   
电脑型号    微星 MS-7673 台式电脑
操作系统    Windows 8.1 专业版 64位
   
处理器    英特尔 Core i5-2300 @ 2.80GHz 四核
主板    微星 P67A-G45 (MS-7673) ( 设备 )
内存    16 GB ( 三星 )
主硬盘    TEKISM PER820TT 512GB ( 512 GB / 固态硬盘 )
显卡    AMD Radeon R9 280  ( 3 GB )
显示器    飞利浦 PHL08B4 241PQPY ( 24 英寸 )
网卡    瑞昱 PCIe GBE Family Controller
回顶部
Copyright (C) 2005-2024 pcbeta.com, All rights reserved
Powered by Discuz!  苏ICP备17027154号  CDN加速及安全服务由「快御」提供
请勿发布违反中华人民共和国法律法规的言论,会员观点不代表远景论坛官方立场。
远景在线 | 远景论坛 | 苹果论坛 | Win11论坛 | Win10论坛 | Win8论坛 | Win7论坛 | WP论坛 | Office论坛