Knowledge Point Analysis:
Windows cannot continue to function properly because of a serious error caused by various types of failures, such as system setup failures, software failures, hardware failures, driver failures, network failures, and windows that prevent users from losing data and damaging computers. will automatically stop running and display the "Blue screen" error message.
Through debugging Tools for Windows (WDK and WINDBG downloads)
(https://msdn.microsoft.com/en-us/windows/hardware/hh852365) Analysis of memory dump files (Crash dump file) that Windows automatically saves when a "blue screen" failure causes "blue screen "The general reason, determine the direction of the fault, and then for the specific fault part of the detailed investigation and resolution.
Operation Steps:
One, the boot blue screen
1. Before entering the system on the blue screen, or a system splash screen in the process of the blue screen, you can use the "blue screen" error message provided by the fault code (technical information) to troubleshoot, you can copy the blue screen code to the Knowledge base to retrieve relevant information. The blue screen code (that is, the downtime code) is a string of 16 numbers, such as 0x000000ed, immediately following the stop, excluding the four sets of digits enclosed in parentheses.
2. Does the notebook have any external hardware or hardware upgrades? Please shut down the machine and unplug the external device, turn it on again to see if it is normal;
3. Specific blue screen code information, need to boot click F1 into the BIOS to see if the settings are correct, for example: 0x000007b, need to check the BIOS in the hard drive mode settings are correct;
4. Try to start the computer in Safe mode to see if it can start, if you can enter the system, you can roll back the software debugging operations, or disable startup items, and scan the virus;
5. If the safe mode can not be entered, it is recommended to disconnect the device after the shutdown, the reset operation again boot attempt;
6. It is recommended to click F10 in the START process to enter the detection interface, using random tools to detect the existence of memory or hard disk anomalies, to assist in troubleshooting;
Second, the system uses the blue screen
1, the blue screen before the presence of hardware side
Upgrade changes, or system software to optimize, update and other operations? You can provide minidump blue screen files to facilitate the analysis of service network engineers, we can through the Debugging Tools analysis "blue screen" memory dump file troubleshooting;
Note: If you do not have a blue screen file in the system, you can open the System property in Control Panel. Switch to the Advanced tab, open startup and Recovery on the Advanced tab, and in the Startup and recovery options, locate the "Write Debugging Information" Drop-down menu, and then change the "none" revision in the dropdown menu Small memory Dump (64KB), core memory dump, or full memory dump to automatically save a memory dump file when a "blue screen" failure occurs.
2, through the analysis of blue screen files, to find a blue screen resulting in error file information to determine whether the driver file, or software related files, or system kernel files to further processing, such as the driver, please download the latest version of the driver, uninstall the old version of the driver reinstall ; system updates can be updated again by uninstalling the update file or by using Windows Update;
3, the hardware if the changes appear after the blue screen, it is recommended to consider compatibility issues or hardware failure, the proposed shutdown to remove the upgraded hardware, the boot attempt again;
4, if the software changes, it is recommended to roll back the software to the previous state, or uninstall update the latest version of the attempt;
In the case where the above operation is invalid, if there is a system backup or restore point, you can try to restore to the previous state;
If System Restore is not valid, consider backing up the data to reinstall the system or replace the system test;
If the System Restore process or system installation process still appear blue screen phenomenon, please consider hardware failure;
Attached: blue screen dump file analysis method
The dump file analysis is more formal than the blue screen code to view the cause of the blue screen failure. The dump file, which is expanded by diagnostic tools, can obtain more blue screen fault information including blue screen code, which is more helpful to diagnose and locate the fault of blue screen. When a blue screen failure occurs, the dump file is in the "System Letter: Windows\minidump" folder, directly copied out. How exactly does the dump file get started and analyzed? You need to follow these steps:
First, open the desktop WinDbg icon, in the pop-up window click the "File/open Crash Dump" menu option, or the WinDbg program opened, the blue screen files directly dragged to the software.
For example, we expand a blue-screen dump file called "Mini032908-01.dmp", and then get some information after it is expanded.
The above method expands, obtains the related blue screen information, among them, the penultimate line has "Probably caused by:RtkHDAud.sys ... "Such a description. We know that Rtkhdaud.sys is a file name in the driver of the system sound card, which can be used to determine that this blue screen error may be related to the sound card driver.
If some programs, processes do not know what to use, such as the "Rtkhdaud.sys" in the above, we can enter "Rtkhdaud.sys" in the blue Screen failure machine system "search" to find out which drivers, programs or files related. In addition, the keyword input to the blue screen analysis site to find a solution, or "Baidu search" and other web search engines to find.
Note: the "!analyze-v" information in the picture above is entered into the bottom "dashed box" and "enter", will get as shown in the more detailed blue screen information, 6.11 version of the software only need to enter the "!analyze-v" connection can ~