פורסם 2012 בנובמבר 1913 שנים לחברי הפורום היקרים שלום!לאחרונה (לפני שלושה ימים) נתקלתי בבעייה מרגיזה , החלו להופיע לי מסכים כחולים באופן רנדומלי (לפחות כך אני חושב) ,ביצעתי סריקת וירוסים מקיפה במחשב (NOD32) , וניסיתי מספר אפשרויות בדיקה שונות שהמליצו עליהם בכל הפורומים (הישראלים ולא הישראלים) שדובר בהם על הנושא להלן הפעולות שניסיתי:-צריבת הביוס (כיוון שהבנתי שרוב המסכים הכחולים הללו נגרמים עקב בעיות אי תאימות זיכרון, לאחרונה החלפתי לוח אם [ASUS P5G41T-M LX] הלוח תומך זיכרונות עד תדר של 1333 MH/s לוחות הזיכרון שלי הם 1666 MH/s ושיארתי שצריבת הביוס תביא לפתרון הבעייה- כידוע התבדתי.- קראתי בפורום מסויים בחול שהבעייה עלולה להיווצר בגלל דרייברים דפוקים הרצתי בדיקה ב Everest המחשב נמצא תקין.-בדקתי את קבצי הMiniDump לפי המדריך בפורום hwzone , הבעייה שזוהתה היא : Probably caused by : ntkrnlpa.exe ( nt+dee98 )Followup: MachineOwnerיש לציין שקבלתי במפרט הקריאה את ההודעה Kernel symbols are WRONG. Please fix symbols to do analysis. גם לאחר שניתבתי (כלומר symbole file path) את הsymbols חתקייה C: symbols אני משער לעצמי שהבאתי כאן שאלה סבוכה מחד , ואתגר מעניין מאידך. אשמח לקבל אפשרויות לפתרון , תודה לעוזרים.נ.ב קודם הבחנתי שקיימת סמיכות של הצג המסכים הכחולים לעדכון האנטי וירוס (NOD32) עידכון: הרצתי בדיקת של ה sectors לדיסק הקשיח לא נמצאו קבצים פגומים או תקלות מצורף קובץ הMiniDump האחרון .Microsoft ® Windows Debugger Version 6.2.9200.20512 X86Copyright © Microsoft Corporation. All rights reserved.Loading Dump File [C:\Windows\Minidump\111912-23914-01.dmp]Mini Kernel Dump File: Only registers and stack trace are availableSymbol search path is: C:\SymbolsExecutable search path is: Unable to load image \SystemRoot\system32\ntkrnlpa.exe, Win32 error 0n2*** WARNING: Unable to verify timestamp for ntkrnlpa.exe*** ERROR: Module load completed but symbols could not be loaded for ntkrnlpa.exeWindows 7 Kernel Version 7601 (Service Pack 1) MP (4 procs) Free x86 compatibleProduct: WinNt, suite: TerminalServer SingleUserTSBuilt by: 7601.17944.x86fre.win7sp1_gdr.120830-0333Machine Name:Kernel base = 0x82a49000 PsLoadedModuleList = 0x82b934d0Debug session time: Mon Nov 19 17:24:03.084 2012 (UTC + 2:00)System Uptime: 0 days 2:54:09.816Unable to load image \SystemRoot\system32\ntkrnlpa.exe, Win32 error 0n2*** WARNING: Unable to verify timestamp for ntkrnlpa.exe*** ERROR: Module load completed but symbols could not be loaded for ntkrnlpa.exeLoading Kernel Symbols..............................................................................................................................................Loading User SymbolsLoading unloaded module list.....******************************************************************************** ** Bugcheck Analysis ** ********************************************************************************Use !analyze -v to get detailed debugging information.BugCheck 1A, {41284, e1445001, 14f5b, 8c200000}***** Kernel symbols are WRONG. Please fix symbols to do analysis.**************************************************************************** ****** ****** Either you specified an unqualified symbol, or your debugger ****** doesn't have full symbol information. Unqualified symbol ****** resolution is turned off by default. Please either specify a ****** fully qualified symbol module!symbolname, or enable resolution ****** of unqualified symbols by typing ".symopt- 100". Note that ****** enabling unqualified symbol resolution with network symbol ****** server shares in the symbol path may cause the debugger to ****** appear to hang for long periods of time when an incorrect ****** symbol name is typed or the network symbol server is down. ****** ****** For some commands to work properly, your symbol path ****** must point to .pdb files that have full type information. ****** ****** Certain .pdb files (such as the public OS symbols) do not ****** contain the required information. Contact the group that ****** provided you with these symbols if you need this command to ****** work. ****** ****** Type referenced: nt!_KPRCB ****** ******************************************************************************************************************************************************** ****** ****** Either you specified an unqualified symbol, or your debugger ****** doesn't have full symbol information. Unqualified symbol ****** resolution is turned off by default. Please either specify a ****** fully qualified symbol module!symbolname, or enable resolution ****** of unqualified symbols by typing ".symopt- 100". Note that ****** enabling unqualified symbol resolution with network symbol ****** server shares in the symbol path may cause the debugger to ****** appear to hang for long periods of time when an incorrect ****** symbol name is typed or the network symbol server is down. ****** ****** For some commands to work properly, your symbol path ****** must point to .pdb files that have full type information. ****** ****** Certain .pdb files (such as the public OS symbols) do not ****** contain the required information. Contact the group that ****** provided you with these symbols if you need this command to ****** work. ****** ****** Type referenced: nt!KPRCB ****** ******************************************************************************************************************************************************** ****** ****** Either you specified an unqualified symbol, or your debugger ****** doesn't have full symbol information. Unqualified symbol ****** resolution is turned off by default. Please either specify a ****** fully qualified symbol module!symbolname, or enable resolution ****** of unqualified symbols by typing ".symopt- 100". Note that ****** enabling unqualified symbol resolution with network symbol ****** server shares in the symbol path may cause the debugger to ****** appear to hang for long periods of time when an incorrect ****** symbol name is typed or the network symbol server is down. ****** ****** For some commands to work properly, your symbol path ****** must point to .pdb files that have full type information. ****** ****** Certain .pdb files (such as the public OS symbols) do not ****** contain the required information. Contact the group that ****** provided you with these symbols if you need this command to ****** work. ****** ****** Type referenced: nt!_KPRCB ****** ******************************************************************************************************************************************************** ****** ****** Either you specified an unqualified symbol, or your debugger ****** doesn't have full symbol information. Unqualified symbol ****** resolution is turned off by default. Please either specify a ****** fully qualified symbol module!symbolname, or enable resolution ****** of unqualified symbols by typing ".symopt- 100". Note that ****** enabling unqualified symbol resolution with network symbol ****** server shares in the symbol path may cause the debugger to ****** appear to hang for long periods of time when an incorrect ****** symbol name is typed or the network symbol server is down. ****** ****** For some commands to work properly, your symbol path ****** must point to .pdb files that have full type information. ****** ****** Certain .pdb files (such as the public OS symbols) do not ****** contain the required information. Contact the group that ****** provided you with these symbols if you need this command to ****** work. ****** ****** Type referenced: nt!KPRCB ****** ******************************************************************************************************************************************************** ****** ****** Either you specified an unqualified symbol, or your debugger ****** doesn't have full symbol information. Unqualified symbol ****** resolution is turned off by default. Please either specify a ****** fully qualified symbol module!symbolname, or enable resolution ****** of unqualified symbols by typing ".symopt- 100". Note that ****** enabling unqualified symbol resolution with network symbol ****** server shares in the symbol path may cause the debugger to ****** appear to hang for long periods of time when an incorrect ****** symbol name is typed or the network symbol server is down. ****** ****** For some commands to work properly, your symbol path ****** must point to .pdb files that have full type information. ****** ****** Certain .pdb files (such as the public OS symbols) do not ****** contain the required information. Contact the group that ****** provided you with these symbols if you need this command to ****** work. ****** ****** Type referenced: nt!_KPRCB ****** ******************************************************************************************************************************************************** ****** ****** Either you specified an unqualified symbol, or your debugger ****** doesn't have full symbol information. Unqualified symbol ****** resolution is turned off by default. Please either specify a ****** fully qualified symbol module!symbolname, or enable resolution ****** of unqualified symbols by typing ".symopt- 100". Note that ****** enabling unqualified symbol resolution with network symbol ****** server shares in the symbol path may cause the debugger to ****** appear to hang for long periods of time when an incorrect ****** symbol name is typed or the network symbol server is down. ****** ****** For some commands to work properly, your symbol path ****** must point to .pdb files that have full type information. ****** ****** Certain .pdb files (such as the public OS symbols) do not ****** contain the required information. Contact the group that ****** provided you with these symbols if you need this command to ****** work. ****** ****** Type referenced: nt!_KPRCB ****** ******************************************************************************************************************************************************** ****** ****** Either you specified an unqualified symbol, or your debugger ****** doesn't have full symbol information. Unqualified symbol ****** resolution is turned off by default. Please either specify a ****** fully qualified symbol module!symbolname, or enable resolution ****** of unqualified symbols by typing ".symopt- 100". Note that ****** enabling unqualified symbol resolution with network symbol ****** server shares in the symbol path may cause the debugger to ****** appear to hang for long periods of time when an incorrect ****** symbol name is typed or the network symbol server is down. ****** ****** For some commands to work properly, your symbol path ****** must point to .pdb files that have full type information. ****** ****** Certain .pdb files (such as the public OS symbols) do not ****** contain the required information. Contact the group that ****** provided you with these symbols if you need this command to ****** work. ****** ****** Type referenced: nt!_KPRCB ****** ******************************************************************************************************************************************************** ****** ****** Either you specified an unqualified symbol, or your debugger ****** doesn't have full symbol information. Unqualified symbol ****** resolution is turned off by default. Please either specify a ****** fully qualified symbol module!symbolname, or enable resolution ****** of unqualified symbols by typing ".symopt- 100". Note that ****** enabling unqualified symbol resolution with network symbol ****** server shares in the symbol path may cause the debugger to ****** appear to hang for long periods of time when an incorrect ****** symbol name is typed or the network symbol server is down. ****** ****** For some commands to work properly, your symbol path ****** must point to .pdb files that have full type information. ****** ****** Certain .pdb files (such as the public OS symbols) do not ****** contain the required information. Contact the group that ****** provided you with these symbols if you need this command to ****** work. ****** ****** Type referenced: nt!_KPRCB ****** ****************************************************************************Probably caused by : ntkrnlpa.exe ( nt+dee98 )Followup: MachineOwner---------
ארכיון
דיון זה הועבר לארכיון ולא ניתן להוסיף בו תגובות חדשות.