藍屏後產生了minidump檔案

Alex Chou 0 信譽點數
2026-02-02T00:07:13.3+00:00

使用驅動程式驗證器後發生了藍屏，並且出現minidump檔案如下

0: kd> !analyze -v
Loading Kernel Symbols
..

Press ctrl-c (cdb, kd, ntsd) or ctrl-break (windbg) to abort symbol loads that take too long.
Run !sym noisy before .reload to track down problems loading symbols.

.............................................................
.........
Loading User Symbols

Loading unloaded module list
..
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

SYSTEM_THREAD_EXCEPTION_NOT_HANDLED (7e)
This is a very common BugCheck.  Usually the exception address pinpoints
the driver/function that caused the problem.  Always note this address
as well as the link date of the driver/image that contains this address.
Arguments:
Arg1: ffffffff80000003, The exception code that was not handled
Arg2: fffff8030e843658, The address that the exception occurred at
Arg3: ffff808899e06d98, Exception Record Address
Arg4: ffff808899e065b0, Context Record Address

Debugging Details:
------------------


KEY_VALUES_STRING: 1

    Key  : Analysis.CPU.mSec
    Value: 468

    Key  : Analysis.Elapsed.mSec
    Value: 12986

    Key  : Analysis.IO.Other.Mb
    Value: 0

    Key  : Analysis.IO.Read.Mb
    Value: 1

    Key  : Analysis.IO.Write.Mb
    Value: 12

    Key  : Analysis.Init.CPU.mSec
    Value: 187

    Key  : Analysis.Init.Elapsed.mSec
    Value: 17685

    Key  : Analysis.Memory.CommitPeak.Mb
    Value: 140

    Key  : Analysis.Version.DbgEng
    Value: 10.0.29507.1001

    Key  : Analysis.Version.Description
    Value: 10.2511.5.1 amd64fre

    Key  : Analysis.Version.Ext
    Value: 1.2511.5.1

    Key  : Bugcheck.Code.LegacyAPI
    Value: 0x1000007e

    Key  : Bugcheck.Code.TargetModel
    Value: 0x1000007e

    Key  : Dump.Attributes.AsUlong
    Value: 0x1008

    Key  : Dump.Attributes.DiagDataWrittenToHeader
    Value: 1

    Key  : Dump.Attributes.ErrorCode
    Value: 0x0

    Key  : Dump.Attributes.KernelGeneratedTriageDump
    Value: 1

    Key  : Dump.Attributes.LastLine
    Value: Dump completed successfully.

    Key  : Dump.Attributes.ProgressPercentage
    Value: 0

    Key  : Failure.Bucket
    Value: 0x7E_80000003_VRFK_filecrypt!DriverEntry

    Key  : Failure.Exception.Code
    Value: 0x80000003

    Key  : Failure.Exception.IP.Address
    Value: 0xfffff8030e843658

    Key  : Failure.Exception.IP.Module
    Value: nt

    Key  : Failure.Exception.IP.Offset
    Value: 0x428658

    Key  : Failure.Exception.Record
    Value: 0xffff808899e06d98

    Key  : Failure.Hash
    Value: {06da048e-c25c-e887-fc78-d99765a10e38}

    Key  : Faulting.IP.Type
    Value: Paged


BUGCHECK_CODE:  7e

BUGCHECK_P1: ffffffff80000003

BUGCHECK_P2: fffff8030e843658

BUGCHECK_P3: ffff808899e06d98

BUGCHECK_P4: ffff808899e065b0

FILE_IN_CAB:  020226-5046-01.dmp

DUMP_FILE_ATTRIBUTES: 0x1008
  Kernel Generated Triage Dump

FAULTING_THREAD:  ffff8381cbff0300

EXCEPTION_RECORD:  ffff808899e06d98 -- (.exr 0xffff808899e06d98)
ExceptionAddress: fffff8030e843658 (nt!DebugPromptAfterInt3)
   ExceptionCode: 80000003 (Break instruction exception)
  ExceptionFlags: 00000000
NumberParameters: 1
   Parameter[0]: 0000000000000002

CONTEXT:  ffff808899e065b0 -- (.cxr 0xffff808899e065b0)
rax=0000000000000002 rbx=00000000000000a0 rcx=fffff8030f7f6500
rdx=ffff808899e0001f rsi=fffff8030f7fe010 rdi=000000000000002f
rip=fffff8030e843657 rsp=ffff808899e06fd8 rbp=ffff808899e07130
 r8=ffff808899e07060  r9=0000000000000002 r10=0000000000000007
r11=0000000000000000 r12=ffff8381f10a0754 r13=0000000000000000
r14=ffff808899e07370 r15=ffff8381f3d5ab80
iopl=0         nv up ei pl zr na po nc
cs=0010  ss=0018  ds=002b  es=002b  fs=0053  gs=002b             efl=00040246
nt!DebugPrompt+0x17:
fffff803`0e843657 cc              int     3
Resetting default scope

BLACKBOXNTFS: 1 (!blackboxntfs)


CUSTOMER_CRASH_COUNT:  1

PROCESS_NAME:  System

ERROR_CODE: (NTSTATUS) 0x80000003 - {   ~}     _ I   w   F   _ I C

EXCEPTION_CODE_STR:  80000003

EXCEPTION_PARAMETER1:  0000000000000002

EXCEPTION_STR:  0x80000003

IP_IN_PAGED_CODE: 
nt!DebugPromptAfterInt3+0
fffff803`0e843658 c3              ret

STACK_TEXT:  
ffff8088`99e06fd8 fffff803`0e9c2644     : 00000000`000000a0 fffff803`0f7fe010 00000000`0000002f fffff803`0f7eda42 : nt!DebugPrompt+0x17
ffff8088`99e06fe0 fffff803`0f830a43     : 00000000`000000a0 fffff803`0f7fe010 fffff803`0f7f64fc 00000000`00000007 : nt!DbgPrompt+0x44
ffff8088`99e07030 fffff803`0f7ed905     : 00000000`00000050 ffff8381`f3e14cd0 ffff8381`f3d5cff0 00000000`0000000d : FLTMGR!FltpvPrintErrors+0x167
ffff8088`99e072b0 fffff803`0f8373a8     : 00000000`0000000d fffff803`0e6541fc 00000000`00000000 ffff8381`f3e14d98 : FLTMGR!FltpvValidateVerifierState+0x85
ffff8088`99e072e0 fffff803`0f815a6c     : ffff8381`f1a5cd30 00000000`00000000 00000000`00000000 00000000`00000001 : FLTMGR!FltvInstanceSetup+0x38
ffff8088`99e07340 fffff803`0f814ed8     : 00000000`00000000 ffff8381`f1a5cd30 ffff8381`f10a2a80 ffff8381`f10a0720 : FLTMGR!FltpDoInstanceSetupNotification+0x7c
ffff8088`99e073b0 fffff803`0f8156c0     : 00000000`00000000 00000000`00000000 ffff8088`00000001 ffff8088`99e074b0 : FLTMGR!FltpInitInstance+0x504
ffff8088`99e07450 fffff803`0f81591b     : 00000000`00000000 ffff8381`f10a0720 ffff8088`99e07580 00000000`0000001a : FLTMGR!FltpCreateInstanceFromName+0x1e0
ffff8088`99e07530 fffff803`0f82012d     : ffff8381`00000034 ffff8381`f10a0730 ffff8088`99e075b0 ffffffff`80000224 : FLTMGR!FltpEnumerateRegistryInstances+0xe3
ffff8088`99e075c0 fffff803`0f82000b     : 00000000`00000000 ffff8381`f3d20e60 00000000`00000001 00000000`00050246 : FLTMGR!FltpDoVolumeNotificationForNewFilter+0xa5
ffff8088`99e07600 fffff807`928d2274     : 00000000`00000000 ffff8381`00000004 00000000`00000000 ffff8381`f1a6ef00 : FLTMGR!FltStartFiltering+0x2b
ffff8088`99e07640 fffff807`928d2030     : ffff8381`f34ee000 00000000`00000005 ffff8381`f34ee000 00000000`00000000 : filecrypt!DriverEntry+0x1f4
ffff8088`99e077e0 fffff803`0ebfd11c     : ffff8381`f34ee000 00000000`00000000 ffff8381`f3d20e60 fffff803`0e624f94 : filecrypt!GsDriverEntry+0x20
ffff8088`99e07810 fffff803`0ebaffab     : ffff8381`f34ee000 00000000`00000000 00000000`00000000 ffffb685`84bc8fd0 : nt!PnpCallDriverEntry+0x54
ffff8088`99e07860 fffff803`0ef5b2d7     : ffff8381`f3f06ef8 ffff8381`f3f06ef8 ffff8088`99e07a90 00000000`00000000 : nt!IopLoadDriver+0x523
ffff8088`99e07a20 fffff803`0ef7b72b     : fffff803`00000000 ffffb685`84bc8fb0 00000000`00000000 fffff803`0c499750 : nt!IopInitializeSystemDrivers+0x157
ffff8088`99e07ac0 fffff803`0ec3dc1b     : fffff803`0ec3dbe0 fffff803`0f079054 fffff803`0ec3dbe0 fffff803`0c499750 : nt!IoInitSystem+0x4b
ffff8088`99e07af0 fffff803`0e726bf7     : ffff8381`cbff0300 fffff803`0ec3dbe0 fffff803`0c499750 01010101`01010101 : nt!Phase1Initialization+0x3b
ffff8088`99e07b30 fffff803`0e83e3a4     : fffff803`0c804180 ffff8381`cbff0300 fffff803`0e726ba0 01010101`01010101 : nt!PspSystemThreadStartup+0x57
ffff8088`99e07b80 00000000`00000000     : ffff8088`99e08000 ffff8088`99e01000 00000000`00000000 00000000`00000000 : nt!KiStartSystemThread+0x34


SYMBOL_NAME:  filecrypt!DriverEntry+1f4

MODULE_NAME: filecrypt

IMAGE_NAME:  filecrypt.sys

IMAGE_VERSION:  10.0.22621.1774

STACK_COMMAND: .cxr 0xffff808899e065b0 ; kb

BUCKET_ID_FUNC_OFFSET:  1f4

FAILURE_BUCKET_ID:  0x7E_80000003_VRFK_filecrypt!DriverEntry

OSPLATFORM_TYPE:  x64

OSNAME:  Windows 10

FAILURE_ID_HASH:  {06da048e-c25c-e887-fc78-d99765a10e38}

Followup:     MachineOwner
---------

0: kd> .cxr 0xffff808899e065b0 ; kb
rax=0000000000000002 rbx=00000000000000a0 rcx=fffff8030f7f6500
rdx=ffff808899e0001f rsi=fffff8030f7fe010 rdi=000000000000002f
rip=fffff8030e843657 rsp=ffff808899e06fd8 rbp=ffff808899e07130
 r8=ffff808899e07060  r9=0000000000000002 r10=0000000000000007
r11=0000000000000000 r12=ffff8381f10a0754 r13=0000000000000000
r14=ffff808899e07370 r15=ffff8381f3d5ab80
iopl=0         nv up ei pl zr na po nc
cs=0010  ss=0018  ds=002b  es=002b  fs=0053  gs=002b             efl=00040246
nt!DebugPrompt+0x17:
fffff803`0e843657 cc              int     3
  *** Stack trace for last set context - .thread/.cxr resets it
 # RetAddr               : Args to Child                                                           : Call Site
00 fffff803`0e9c2644     : 00000000`000000a0 fffff803`0f7fe010 00000000`0000002f fffff803`0f7eda42 : nt!DebugPrompt+0x17
01 fffff803`0f830a43     : 00000000`000000a0 fffff803`0f7fe010 fffff803`0f7f64fc 00000000`00000007 : nt!DbgPrompt+0x44
02 fffff803`0f7ed905     : 00000000`00000050 ffff8381`f3e14cd0 ffff8381`f3d5cff0 00000000`0000000d : FLTMGR!FltpvPrintErrors+0x167
03 fffff803`0f8373a8     : 00000000`0000000d fffff803`0e6541fc 00000000`00000000 ffff8381`f3e14d98 : FLTMGR!FltpvValidateVerifierState+0x85
04 fffff803`0f815a6c     : ffff8381`f1a5cd30 00000000`00000000 00000000`00000000 00000000`00000001 : FLTMGR!FltvInstanceSetup+0x38
05 fffff803`0f814ed8     : 00000000`00000000 ffff8381`f1a5cd30 ffff8381`f10a2a80 ffff8381`f10a0720 : FLTMGR!FltpDoInstanceSetupNotification+0x7c
06 fffff803`0f8156c0     : 00000000`00000000 00000000`00000000 ffff8088`00000001 ffff8088`99e074b0 : FLTMGR!FltpInitInstance+0x504
07 fffff803`0f81591b     : 00000000`00000000 ffff8381`f10a0720 ffff8088`99e07580 00000000`0000001a : FLTMGR!FltpCreateInstanceFromName+0x1e0
08 fffff803`0f82012d     : ffff8381`00000034 ffff8381`f10a0730 ffff8088`99e075b0 ffffffff`80000224 : FLTMGR!FltpEnumerateRegistryInstances+0xe3
09 fffff803`0f82000b     : 00000000`00000000 ffff8381`f3d20e60 00000000`00000001 00000000`00050246 : FLTMGR!FltpDoVolumeNotificationForNewFilter+0xa5
0a fffff807`928d2274     : 00000000`00000000 ffff8381`00000004 00000000`00000000 ffff8381`f1a6ef00 : FLTMGR!FltStartFiltering+0x2b
0b fffff807`928d2030     : ffff8381`f34ee000 00000000`00000005 ffff8381`f34ee000 00000000`00000000 : filecrypt!DriverEntry+0x1f4
0c fffff803`0ebfd11c     : ffff8381`f34ee000 00000000`00000000 ffff8381`f3d20e60 fffff803`0e624f94 : filecrypt!GsDriverEntry+0x20
0d fffff803`0ebaffab     : ffff8381`f34ee000 00000000`00000000 00000000`00000000 ffffb685`84bc8fd0 : nt!PnpCallDriverEntry+0x54
0e fffff803`0ef5b2d7     : ffff8381`f3f06ef8 ffff8381`f3f06ef8 ffff8088`99e07a90 00000000`00000000 : nt!IopLoadDriver+0x523
0f fffff803`0ef7b72b     : fffff803`00000000 ffffb685`84bc8fb0 00000000`00000000 fffff803`0c499750 : nt!IopInitializeSystemDrivers+0x157
10 fffff803`0ec3dc1b     : fffff803`0ec3dbe0 fffff803`0f079054 fffff803`0ec3dbe0 fffff803`0c499750 : nt!IoInitSystem+0x4b
11 fffff803`0e726bf7     : ffff8381`cbff0300 fffff803`0ec3dbe0 fffff803`0c499750 01010101`01010101 : nt!Phase1Initialization+0x3b
12 fffff803`0e83e3a4     : fffff803`0c804180 ffff8381`cbff0300 fffff803`0e726ba0 01010101`01010101 : nt!PspSystemThreadStartup+0x57
13 00000000`00000000     : ffff8088`99e08000 ffff8088`99e01000 00000000`00000000 00000000`00000000 : nt!KiStartSystemThread+0x34
Windows for home | Windows 11 | 效能與系統故障
0 則留言

您的回答

答案可由問題作者標示為「已接受」，而由仲裁者標示為「推薦」，這可協助使用者知道答案解決了作者的問題。