问题
2016年7月28日星期四 下午5:33
从win7升级到win10后，资源管理器一直在不间断重启，这个事件查看器日志.
错误应用程序名称: explorer.exe，版本: 10.0.10586.494，时间戳: 0x5775e575
错误模块名称: KERNELBASE.dll，版本: 10.0.10586.494，时间戳: 0x5775e4c5
异常代码: 0xc06d007e
错误偏移量: 0x0000000000071f28
错误进程 ID: 0x1c7c
错误应用程序启动时间: 0x01d1e8eb45cf1e1a
错误应用程序路径: C:\WINDOWS\explorer.exe
错误模块路径: C:\WINDOWS\system32\KERNELBASE.dll
报告 ID: 9121411b-7f3b-4213-965c-9edfc18b82c6
错误程序包全名:
附上dmp文件信息
Microsoft (R) Windows Debugger Version 6.11.0001.404 X86
Copyright (c) Microsoft Corporation. All rights reserved.
Loading Dump File [C:\CrashDumps\explorer.exe.8376.dmp]
User Mini Dump File: Only registers, stack and portions of memory are available
WARNING: Minidump contains unknown stream type 0x15
WARNING: Minidump contains unknown stream type 0x16
Symbol search path is: *** Invalid ***
****************************************************************************
* Symbol loading may be unreliable without a symbol search path. *
* Use .symfix to have the debugger choose a symbol path. *
* After setting your symbol path, use .reload to refresh symbol locations. *
****************************************************************************
Executable search path is:
Windows 7 Version 10586 MP (4 procs) Free x64
Product: WinNt, suite: SingleUserTS
Machine Name:
Debug session time: Fri Jul 29 02:30:00.000 2016 (GMT;9)
System Uptime: not available
Process Uptime: 0 days 0:01:01.000
................................................................
................................................................
................................................................
..........
Loading unloaded module list
.......
This dump file has an exception of interest stored in it.
The stored exception information can be accessed via .ecxr.
(20b8.204c): Unknown exception - code c06d007e (first/second chance not available)
Unable to load image C:\Windows\System32\ntdll.dll, Win32 error 0n2
*** WARNING: Unable to verify timestamp for ntdll.dll
*** ERROR: Module load completed but symbols could not be loaded for ntdll.dll
ntdll;0xa5c34:
00007ffc`39745c34 c3 ret
全部回复 (3)
2016年8月1日星期一 上午8:28 ✅已答复 | 1 票
你好：
根据分析结果，这个问题由 “iproset.cpl” 引起的。它和Intel的软件 “Intel PROSet/Wireless Control Panel Applet”（ C:\Program Files\Intel\WiFi\bin\iproset.cpl） 有关.
请卸载相关软件.
*******************************************************************************
* *
* Exception Analysis *
* *
*******************************************************************************
*** WARNING: Unable to verify timestamp for iproset.cpl
*** ERROR: Module load completed but symbols could not be loaded for iproset.cpl
*** WARNING: Unable to verify timestamp for QQPinyin.ime
*** ERROR: Module load completed but symbols could not be loaded for QQPinyin.ime
*** ERROR: Symbol file could not be found. Defaulted to export symbols for sppc.dll -
DUMP_CLASS: 2
DUMP_QUALIFIER: 400
CONTEXT: (.ecxr)
rax=00007ffc39715d04 rbx=0000000000000000 rcx=00000000062ed750
rdx=00000000035ccb90 rsi=00007ffc04e02ad8 rdi=0000000000000000
rip=00007ffc36521f28 rsp=00000000035cd020 rbp=00000000035cd178
r8=00000000064b49c0 r9=0000000000000000 r10=0000000001060000
r11=0000000000000000 r12=0000000000000001 r13=00007ffc04e0f398
r14=00007ffc04e0f1b0 r15=00007ffc04e02c68
iopl=0 nv up ei pl nz na po nc
cs=0033 ss=002b ds=002b es=002b fs=0053 gs=002b efl=00000206
KERNELBASE!RaiseException;0x68:
00007ffc`36521f28 488b8c24c0000000 mov rcx,qword ptr [rsp;0C0h] ss:00000000`035cd0e0=00006f431605e829
Resetting default scope
FAULTING_IP:
KERNELBASE!RaiseException;68
00007ffc`36521f28 488b8c24c0000000 mov rcx,qword ptr [rsp;0C0h]
EXCEPTION_RECORD: (.exr -1)
ExceptionAddress: 00007ffc36521f28 (KERNELBASE!RaiseException;0x0000000000000068)
ExceptionCode: c06d007e
ExceptionFlags: 00000000
NumberParameters: 1
Parameter[0]: 00000000035cd120
DEFAULT_BUCKET_ID: APPLICATION_FAULT
PROCESS_NAME: explorer.exe
ERROR_CODE: (NTSTATUS) 0xc06d007e - <Unable to get error code text>
EXCEPTION_CODE: (NTSTATUS) 0xc06d007e - <Unable to get error code text>
EXCEPTION_CODE_STR: c06d007e
EXCEPTION_PARAMETER1: 00000000035cd120
WATSON_BKT_PROCSTAMP: 5775e575
WATSON_BKT_PROCVER: 10.0.10586.494
PROCESS_VER_PRODUCT: Microsoft® Windows® Operating System
WATSON_BKT_MODULE: KERNELBASE.dll
WATSON_BKT_MODSTAMP: 5775e4c5
WATSON_BKT_MODOFFSET: 71f28
WATSON_BKT_MODVER: 10.0.10586.494
MODULE_VER_PRODUCT: Microsoft® Windows® Operating System
BUILD_VERSION_STRING: 10.0.10586.0 (th4_release.151029-1700)
MODLIST_WITH_TSCHKSUM_HASH: b898e892a4b8da35fd5dad147eacdf229f7fa421
MODLIST_SHA1_HASH: d1a5376d4b3fe89662aae938b5d6e3b8562406aa
NTGLOBALFLAG: 0
APPLICATION_VERIFIER_FLAGS: 0
DUMP_FLAGS: 94
DUMP_TYPE: 1
APP: explorer.exe
ANALYSIS_SESSION_HOST: VDI-V-MEIPXU
ANALYSIS_SESSION_TIME: 08-01-2016 16:26:25.0022
ANALYSIS_VERSION: 10.0.10586.567 amd64fre
THREAD_ATTRIBUTES:
OS_LOCALE: CHS
BUGCHECK_STR: APPLICATION_FAULT
LAST_CONTROL_TRANSFER: from 00007ffc04bf9bdb to 00007ffc36521f28
STACK_TEXT:
00000000`035cd020 00007ffc`04bf9bdb : 00000000`00000000 00007ffc`04e02ad8 00000000`035cd1d4 00000000`00000000 : KERNELBASE!RaiseException;0x68
00000000`035cd100 00000000`00000000 : 00007ffc`04e02ad8 00000000`035cd1d4 00000000`00000000 00000000`00000048 : iproset;0x9bdb
THREAD_SHA1_HASH_MOD_FUNC: 17c28ddd97dc42372399a3382c48de498fe4bef6
THREAD_SHA1_HASH_MOD_FUNC_OFFSET: bb5e4a3898365a220e946401cc0f5db172b18263
THREAD_SHA1_HASH_MOD: 3b5c50aac75c9a54c09993f496689f419142fce9
FOLLOWUP_IP:
iproset;9bdb
00007ffc`04bf9bdb ?? ???
SYMBOL_STACK_INDEX: 1
SYMBOL_NAME: iproset;9bdb
FOLLOWUP_NAME: MachineOwner
MODULE_NAME: iproset
IMAGE_NAME: iproset.cpl
DEBUG_FLR_IMAGE_TIMESTAMP: 4f746ea5
STACK_COMMAND: .ecxr ; kb
BUCKET_ID: APPLICATION_FAULT_iproset;9bdb
PRIMARY_PROBLEM_CLASS: APPLICATION_FAULT_iproset;9bdb
BUCKET_ID_OFFSET: 9bdb
BUCKET_ID_MODULE_STR: iproset
BUCKET_ID_MODTIMEDATESTAMP: 4f746ea5
BUCKET_ID_MODCHECKSUM: 25e089
BUCKET_ID_MODVER_STR: 15.1.1.0
BUCKET_ID_PREFIX_STR: APPLICATION_FAULT_
FAILURE_PROBLEM_CLASS: APPLICATION_FAULT
FAILURE_EXCEPTION_CODE: c06d007e
FAILURE_IMAGE_NAME: iproset.cpl
FAILURE_FUNCTION_NAME: Unknown
BUCKET_ID_FUNCTION_STR: Unknown
FAILURE_SYMBOL_NAME: iproset.cpl!Unknown
FAILURE_BUCKET_ID: APPLICATION_FAULT_c06d007e_iproset.cpl!Unknown
WATSON_STAGEONE_URL: http://watson.microsoft.com/StageOne/explorer.exe/10.0.10586.494/5775e575/KERNELBASE.dll/10.0.10586.494/5775e4c5/c06d007e/00071f28.htm?Retriage=1
TARGET_TIME: 2016-07-28T17:24:55.000Z
OSBUILD: 10586
OSSERVICEPACK: 0
SERVICEPACK_NUMBER: 0
OS_REVISION: 0
SUITE_MASK: 256
PRODUCT_TYPE: 1
OSPLATFORM_TYPE: x64
OSNAME: Windows 10
OSEDITION: Windows 10 WinNt SingleUserTS
USER_LCID: 0
OSBUILD_TIMESTAMP: 2015-10-30 10:27:54
BUILDDATESTAMP_STR: 151029-1700
BUILDLAB_STR: th4_release
BUILDOSVER_STR: 10.0.10586.0
ANALYSIS_SESSION_ELAPSED_TIME: 4499
ANALYSIS_SOURCE: UM
FAILURE_ID_HASH_STRING: um:application_fault_c06d007e_iproset.cpl!unknown
FAILURE_ID_HASH: {7d266867-855c-0f0f-139c-e425181496d7}
Followup: MachineOwner
0:006> lmvm iproset
Browse full module list
start end module name
00007ffc`04bf0000 00007ffc`04e59000 iproset T (no symbols)
Loaded symbol image file: iproset.cpl
Image path: C:\Program Files\Intel\WiFi\bin\iproset.cpl
Image name: iproset.cpl
Browse all global symbols functions data
Timestamp: Thu Mar 29 22:16:05 2012 (4F746EA5)
CheckSum: 0025E089
ImageSize: 00269000
File version: 15.1.1.0
Product version: 15.1.1.0
File flags: 0 (Mask 3F)
File OS: 4 Unknown Win32
File type: 2.0 Dll
File date: 00000000.00000000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Please remember to mark the replies as an answers if they help and unmark them if they provide no help.
If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com
2016年7月29日星期五 上午5:51
你好 zermabyuki：
请尝试干净启动，看一下是否这个问题是由于三方软件的冲突导致的。
如何在 Windows 中执行干净启动
https://support.microsoft.com/zh-cn/kb/929135
打开管理员命令行运行“dism /online /cleanup-image /restorehealth”检查一下系统完整性.
为了更好的分析这个问题，请把dump 文件传到OneDrive，把链接贴在这里，我们会进一步的分析.
Please mark the reply as an answer if you find it is helpful.
If you have feedback for TechNet Support, contact tnmff@microsoft.com
2016年7月29日星期五 上午11:17
感谢您的回复
禁用服务 启动文件后依然不起作用
在安全模式下依然存在这个问题 并且还会出现
“无法使用内置管理员账户打开 入门”的对话框，每次Explore重启后都会出现
已经上传dump文件
https://1drv.ms/u/s!AuRtUzj3rrpCcj7AD_C5NLXd5e8
希望您能找出问题出在哪里