What about Windows blue screen?

Source: Internet
Author: User
Tags webp lenovo

When it comes to blue screen, many friends will be hated, a lot of criticism, and even crooked poetry, "patches and loopholes Fei Qi, the crash of blue screen" ...


In fact, this is a misunderstanding, the blue screen is actually windows "dimensional stability" means, when a serious failure, it is necessary to break wrist, departs Chop Ma su. And not shattered glass, stop petitioning. Here is the blue screen that the basin used to see in the elevator. Well, speaking of elevators, Hua Cheng four Li Hua teacher once and basin said, his ideal is: Take the elevator downstairs, take the subway to work. Now it is perfectly possible to ask: Is it apropos to succeed?


650) this.width=650; "Width=" "height=" 515 "src=" http://mmbiz.qpic.cn/mmbiz/ 7wizliacmoyyiatejiakfbywjh1awtvfbgz0ivqialzjmibw04061dawdpiceuwk4tdxezguhm2jquiuw4qpv6mzsnaa/640?tp=webp& Wxfrom=5 "style=" margin:0px;padding:0px;height:auto;width:321px; "alt=" 640?tp=webp&wxfrom=5 "/>


Here is a more famous Windows blue screen scene, you know ...

650) this.width=650; "Width=" 456 "height=" 254 "src=" http://mmbiz.qpic.cn/mmbiz/ 7wizliacmoyyiatejiakfbywjh1awtvfbgzcibujnoijkbyxaqnp4jzsbiae5dw9ykxwbdjcwv2pbmpnsx76vmozkicg/640?tp=webp& Wxfrom=5 "style=" MARGIN:0PX;PADDING:0PX;HEIGHT:AUTO;WIDTH:326PX; "alt=" 640?tp=webp&wxfrom=5 "/>


A mention of the blue screen, the deepest impression is 2007 years, that year's TechEd basin is demonstrating a demo, is proud of the time, hand shake, ThinkPad blue screen, can be the basin of a big red face.


blue screen Analysis


Why does the hand shake, ThinkPad will be blue screen? What the hell is this?


At the end of the course, "sacrifice" WinDbg the dump file for the blue screen is analyzed. By the way, although the debug itself requires a certain degree of expertise, but many times, almost no need for debug background knowledge can easily find the root cause.


*** warning:unable to verify timestamp for apsx86.sys
*** error:module load Complet Ed but symbols could is loaded for apsx86.sys
*** warning:unable to verify Timesta MP for SNAPMAN.SYS
*** error:module load completed if symbols could not being loaded for SNAPMAN.SYS
Probably caused by: Iastor.sys (iastor+a44f)


Soon found the reason, the driver iastor.sys is the culprit, this is the Intel SATA disk drive driver.

Look closely at its detailed information:


start    end        module name
824c0000 8257e000 & nbsp Iastor   T (no symbols)          
   loaded S Ymbol image file:iastor.sys
   image path:iastor.sys
   image NAME:IASTOR.SYS
   timestamp:       & nbsp Tue Feb 04:46:47 (45d0d237)
   checksum:       &NBSP ; 0004966D
   imagesize:        000BE000
   translations:     0000.04b0 0000.04e0 0409.04b0 0409.04e0


As you can see, the timestamp information is February 13, 2007, and the other machine is the same model, why not blue screen? A look, the original Iastor.sys version of the faulty machine is too old, updated the latest driver can solve the problem.


I know that.


The problem here, it seems that the case should be closed. But this moment the idol "Mark Russinovich" soul possessed, want to know why gently shaking the machine will be blue screen, and normal time but it seems to normally?


Then look at the debug stack information, saying that the dump file is a good thing, equivalent to the Windows system "black box", you can find a lot of useful information inside.


warning:stack unwind information not available. Following frames may wrong.
a0ac68c0 81c27ecf 85a070e8 858f4350 ffcd3ff4 iastor+0xa44f
A0ac68d8 80669330 ffcd3ff4 A0ac68f8 8066FCC8 nt! IOFCALLDRIVER+0X63
a0ac68e4 8066fcc8 85a0f020 858f4350 858f4408 acpi! ACPIDISPATCHFORWARDIRP+0X2A

a0ac6a0c 828a8051 87f1d4c0 878b6640 87f1d290 APSX86+0X1DC3
a0ac6a48 828a7210 01f1d4c0 878b6640 a0ac6a70 apsx86+0x2051
a0ac6a58 81c27ecf 87f1d4c0 878b6640 878b6810 apsx86+0x1210
a0ac6a70 81cb06f7 8260511a 00000000 00000000 nt! IOFCALLDRIVER+0X63


The Apsx86 shown in bold is the Lenovo disk shock function (APS) driver (Apsx86.sys), because Microsoft cannot have a third-party vendor-driven symbol, so the calling function and parameters (including Iastor.sys) cannot be displayed.


So can only guess, when the machine shakes, the disk shockproof function of the drive Apsx86.sys will receive the sensor issued instructions, understand the vibration state of the machine, hurriedly report to the system ... The Windows kernel will eventually notify the disk controller (IASTOR.SYS) and stop the disk rotation, which is the approximate principle of Lenovo's APS feature guessing, which is a great feature.


But may be the old version of the Iastor.sys driver has a bug, or apsx86.sys this driver to Iastor.sys passed the wrong parameters, so iastor.sys can not process, forced to call the nt! Kebugcheck, while making Windows system blue screen.


Note the above method is only the basin of personal speculation, does not necessarily reflect the facts, we believe that the people.

If you think wah four well, scan the QR code below for attention. You can also add the public number directly: Sysinternal .

650) this.width=650; "src=" Http://s3.51cto.com/wyfs02/M02/5B/FC/wKiom1UYp7Kw58ZCAABoxNKWhig097.jpg "title=" Hua come four-small. png "alt=" wkiom1uyp7kw58zcaaboxnkwhig097.jpg "style=" Padding:0px;margin:0px;vertical-align:top;border:none ; "/>

This article is from the "MVP Basin" blog, please be sure to keep this source http://markwin.blog.51cto.com/148406/1629877

What about Windows blue screen?

Related Article

Contact Us

The content source of this page is from Internet, which doesn't represent Alibaba Cloud's opinion; products and services mentioned on that page don't have any relationship with Alibaba Cloud. If the content of the page makes you feel confusing, please write us an email, we will handle the problem within 5 days after receiving your email.

If you find any instances of plagiarism from the community, please send an email to: info-contact@alibabacloud.com and provide relevant evidence. A staff member will contact you within 5 working days.

A Free Trial That Lets You Build Big!

Start building with 50+ products and up to 12 months usage for Elastic Compute Service

  • Sales Support

    1 on 1 presale consultation

  • After-Sales Support

    24/7 Technical Support 6 Free Tickets per Quarter Faster Response

  • Alibaba Cloud offers highly flexible support services tailored to meet your exact needs.