Loading Dump File [C:\Users\11518\Desktop\070621-15796-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available
Symbol search path is: *** Invalid ***
- Symbol loading may be unreliable without a symbol search path. *
- Use .symfix to have the debugger choose a symbol path. *
- After setting your symbol path, use .reload to refresh symbol locations. *
Executable search path is:
- Symbols can not be loaded because symbol path is not initialized. *
*- The Symbol Path can be set by: *
- using the _NT_SYMBOL_PATH environment variable. *
- using the -y argument when starting the debugger. *
- using .sympath and .sympath+ *
Unable to load image ntoskrnl.exe, Win32 error 0n2
*** WARNING: Unable to verify timestamp for ntoskrnl.exe
*** ERROR: Module load completed but symbols could not be loaded for ntoskrnl.exe
Windows 7 Kernel Version 19041 MP (12 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS Personal
Machine Name:
Kernel base = 0xfffff8000bc00000 PsLoadedModuleList = 0xfffff8000c82a230
Debug session time: Mon Jul 5 22:46:51.944 2021 (GMT+8)
System Uptime: 0 days 4:04:44.893
- Symbols can not be loaded because symbol path is not initialized. *
*- The Symbol Path can be set by: *
- using the _NT_SYMBOL_PATH environment variable. *
- using the -y argument when starting the debugger. *
- using .sympath and .sympath+ *
Unable to load image ntoskrnl.exe, Win32 error 0n2
*** WARNING: Unable to verify timestamp for ntoskrnl.exe
*** ERROR: Module load completed but symbols could not be loaded for ntoskrnl.exe
Loading Kernel Symbols
...............................................................
................................................................
................................................................
...........................
Loading User Symbols
Loading unloaded module list
..............................
Cannot read PEB32 from WOW64 TEB32 000197f6 - Win32 error 0n30
*Bugcheck Analysis **
Use !analyze -v to get detailed debugging information.
BugCheck D1, {31, 2, 1, fffff80010bd15a0}
*** WARNING: Unable to verify timestamp for mssmbios.sys
*** ERROR: Module load completed but symbols could not be loaded for mssmbios.sys
Unable to load image tcpip.sys, Win32 error 0n2
*** WARNING: Unable to verify timestamp for tcpip.sys
*** ERROR: Module load completed but symbols could not be loaded for tcpip.sys
Unable to load image ndis.sys, Win32 error 0n2
*** WARNING: Unable to verify timestamp for ndis.sys
*** ERROR: Module load completed but symbols could not be loaded for ndis.sys
Unable to load image WppRecorder.sys, Win32 error 0n2
*** WARNING: Unable to verify timestamp for WppRecorder.sys
*** ERROR: Module load completed but symbols could not be loaded for WppRecorder.sys
***** Kernel symbols are WRONG. Please fix symbols to do analysis.
*** Your debugger is not using the correct symbols ***
*** In order for this command to work properly, your symbol path ***
*** must point to .pdb files that have full type information. ***
*** Certain .pdb files (such as the public OS symbols) do not ***
*** contain the required information. Contact the group that ***
*** provided you with these symbols if you need this command to ***
*** work. ***
*** Type referenced: nt!_KPRCB ***
*** Your debugger is not using the correct symbols ***
*** In order for this command to work properly, your symbol path ***
*** must point to .pdb files that have full type information. ***
*** Certain .pdb files (such as the public OS symbols) do not ***
*** contain the required information. Contact the group that ***
*** provided you with these symbols if you need this command to ***
*** work. ***
*** Type referenced: nt!_KPRCB ***
*** Your debugger is not using the correct symbols ***
*** In order for this command to work properly, your symbol path ***
*** must point to .pdb files that have full type information. ***
*** Certain .pdb files (such as the public OS symbols) do not ***
*** contain the required information. Contact the group that ***
*** provided you with these symbols if you need this command to ***
*** work. ***
*** Type referenced: nt!_KPRCB ***
- Symbols can not be loaded because symbol path is not initialized. *
*- The Symbol Path can be set by: *
- using the _NT_SYMBOL_PATH environment variable. *
- using the -y argument when starting the debugger. *
- using .sympath and .sympath+ *
- Symbols can not be loaded because symbol path is not initialized. *
*- The Symbol Path can be set by: *
- using the _NT_SYMBOL_PATH environment variable. *
- using the -y argument when starting the debugger. *
- using .sympath and .sympath+ *
Probably caused by : hardware_ram ( PAGE_NOT_ZERO_VISTA )
Followup: MachineOwner
*** Memory manager detected 104438 instance(s) of page corruption, target is likely to have memory corruption.
百度翻译的：
正在加载转储文件[C:\Users\11518\Desktop\070621-15796-01.dmp]
迷你内核转储文件：只有寄存器和堆栈跟踪可用
符号搜索路径为：无效
没有符号搜索路径，符号加载可能不可靠
使用.symfix让调试器选择符号路径
设置符号路径后，请使用.reload刷新符号位置
可执行搜索路径为：
无法加载符号，因为符号路径未初始化
- *
符号路径可通过以下方式设置：
使用\u NT \u SYMBOL \u PATH环境变量
启动调试器时使用-y<symbol\u path>参数
使用.sympath和.sympath+
无法加载映像ntoskrnl.exe，Win32错误0n2
***警告：无法验证ntoskrnl.exe的时间戳
***错误：模块加载已完成，但无法为ntoskrnl.exe加载符号
Windows 7内核版本19041 MP（12进程）免费x64
产品：WinNt，套件：TerminalServer SingleUserTS Personal
计算机名称：
内核基=0xfffff8000bc00000psLoadedModuleList=0xfffff8000c82a230
调试会话时间：周一至7月5日22:46:51.944 2021（GMT+8）
系统正常运行时间：0天4:04:44.893
无法加载符号，因为符号路径未初始化
- *
符号路径可通过以下方式设置：
使用\u NT \u SYMBOL \u PATH环境变量
启动调试器时使用-y<symbol\u path>参数
使用.sympath和.sympath+
无法加载映像ntoskrnl.exe，Win32错误0n2
***警告：无法验证ntoskrnl.exe的时间戳
***错误：模块加载已完成，但无法为ntoskrnl.exe加载符号
加载内核符号
...............................................................
................................................................
................................................................
...........................
加载用户符号
加载卸载模块列表
..............................
无法从WOW64 TEB32 000197f6读取PEB32-Win32错误0n30
- *
错误检查分析
- *
使用！分析-v以获得详细的调试信息。
错误检查D1，{31，2，1，fffff 80010bd15a0}
***警告：无法验证mssmbios.sys的时间戳
***错误：模块加载已完成，但无法为mssmbios.sys加载符号
无法加载映像tcpip.sys，Win32错误0n2
***警告：无法验证tcpip.sys的时间戳
***错误：模块加载已完成，但无法为tcpip.sys加载符号
无法加载映像ndis.sys，Win32错误0n2
***警告：无法验证ndis.sys的时间戳
***错误：模块加载已完成，但无法为ndis.sys加载符号
无法加载映像wprecorder.sys，Win32错误0n2
***警告：无法验证wprecorder.sys的时间戳
***错误：模块加载已完成，但无法为wprecorder.sys加载符号
*****内核符号错误。请固定符号进行分析。
调试器未使用正确的符号
为了使此命令正常工作，您的符号路径
必须指向具有完整类型信息的.pdb文件
某些.pdb文件（如公共操作系统符号）不支持
包含所需信息。请联系
如果您需要此命令
工作
