Re: 机器蓝屏，抓下了minidump 怎么来分析呢？

WinDbg

机器蓝屏，抓下了minidump 怎么来分析呢？

lzh 2007-03-29, 14:28 下午

*************************************************************************
***                                                                   ***
***                                                                   ***
***    Your debugger is not using the correct symbols                 ***
***                                                                   ***
***    In order for this command to work properly, your symbol path   ***
***    must point to .pdb files that have full type information.      ***
***                                                                   ***
***    Certain .pdb files (such as the public OS symbols) do not      ***
***    contain the required information. Contact the group that      ***
***    provided you with these symbols if you need this command to    ***
***    work.                                                          ***
***                                                                   ***
***    Type referenced: nt!_KPRCB                                     ***
***                                                                   ***
*************************************************************************
*** WARNING: Unable to verify timestamp for afd.sys
*** ERROR: Module load completed but symbols could not be loaded for afd.sys
Probably caused by : afd.sys ( afd+5d6d )

Followup: MachineOwner

ChildEBP RetAddr Args to Child
WARNING: Frame IP not in any known module. Following frames may be wrong.
f75d66b0 89dec5bd f75d66e4 0000009d 89ef7018 0x89dec4cf
f75d66e8 89de9e54 89ef7018 00000968 00000000 0x89dec5bd
f75d6734 89de7ea6 f75d674c 8088e180 89d2cae0 0x89de9e54
f75d675c 89de9251 89aa6910 893016e8 8930177c 0x89de7ea6
f75d677c 89de90d8 89aa6910 893016e8 8930177c 0x89de9251
f75d67c0 8081df65 89aa6858 00000000 893016e8 0x89de90d8
f75d67d4 808f8f71 f75d697c 89aaa958 00000000 nt+0x1df65
f75d68bc 80937942 89aaa970 00000000 89f10938 nt+0xf8f71
f75d693c 80933a76 00000000 f75d697c 00000240 nt+0x137942
f75d6990 808eae25 00000000 00000000 5d6a4800 nt+0x133a76
f75d6a0c 808ec0bf 894c208c 02000000 f75d6bb8 nt+0xeae25
f75d6a68 b9e3dd6d 894c208c 02000000 f75d6bb8 nt+0xec0bf
f75d6c2c b9e47097 8930d928 89a14950 f75d6c50 afd+0x5d6d
f75d6c3c 8081df65 89a13930 8930d928 894863f8 afd+0xf097
f75d6c50 808f5437 8930da04 89534400 8930d928 nt+0x1df65
f75d6c64 808f61bf 89a13930 8930d928 89534400 nt+0xf5437
f75d6d00 808eed08 00000150 00000148 00000000 nt+0xf61bf
f75d6d34 8088978c 00000150 00000148 00000000 nt+0xeed08
f75d6d64 7c8285ec badb0d00 002efb04 00000000 nt+0x8978c
f75d6d68 badb0d00 002efb04 00000000 00000000 0x7c8285ec

我在windbg中设置的符号路径是

srv*d:\symcache*http://msdl.microsoft.com/download/symbols
k命令怎么显示的是这样呢

Re: 机器蓝屏，抓下了minidump 怎么来分析呢？

格蠹老雷 2007-03-29, 21:49 下午
先要保证符号正确。输入.reload命令让WinDbg自动下载符号，然后再用!analyze -v命令看报告。