2020-01-21

使用 BlueScreenView 分析找出導致 BSoD 的相關軟件或 driver

下載 Nirsoft BlueScreenView (portable)

If your system doesn't create MiniDump files on a blue screen crash, try to configure it according to the following article: How to configure Windows to create MiniDump files on BSOD or Is Your Computer Crashing? Find Out Why in 5 min.

BlueScreenView is a small and portable tool developed by NirSoft that is capable of quickly showing you which file caused the blue screen. All you need to do is download the program, run it and it will automatically analyze the minidump files that are created during the blue screen. The top pane shows the dump files while the lower pane shows the offending files that caused the crash. If the blue screen is caused by a third party program, the driver file should be listed in the lower pane.



The drivers that are found in crash stack will be highlighted and those are the files that you should pay attention to. Double clicking on the driver file listed at the lower pane will show every detail about the file such as the stack addresses, size, time stamp and etc. We can see that it was a system file driver belonged to “Resplendence WhoCrashed Crash Dump Test” that caused the blue screen.


設定 minidump 目錄時, 可能會出現以下畫面:


此時必須將 "虛擬記憶體" 交由系統 "自動管理所有磁碟分頁檔大小" 才行.




Windows 10 電腦每晚自動從睡眠中喚醒

I put my computer to sleep before going to bed, but the signon screen is brightly lit every morning. Furthermore, when I launch Windows Update, it never seems to finish searching for new updates. In searching for a cause of the waking, I have come across the following potentially useful information. Any assistance will be greatly appreciated.

>powercfg -lastwake
Wake History Count - 1
Wake History [0]
  Wake Source Count - 1
  Wake Source [0]
    Type: Wake Timer
    Owner: [SERVICE] \Device\HarddiskVolume3\Windows\System32\svchost.exe (SystemEventsBroker)
    Owner Supplied Reason: Windows will execute 'NT TASK\Microsoft\Windows\UpdateOrchestrator\Universal Orchestrator Start' scheduled task that requested waking the computer.

Best Answer by BrianMinjaeKim :

I think i found a fix that doesn't require downloading anything or complicated steps.

It's worked for me so far.

1.  Go to: Control Panel\Hardware and Sound\Power Options\Edit Plan Settings (it may also be called Change plan settings)

     (you can alternatively just search for "Edit power plan" in the windows search bar)

2. Click "change advanced power settings"

3. Go to "Sleep->Allow wake timers" and change the setting to Disable.



If this doesn't work, then using psexec like RichStevens2 suggested might be the way to go.

The directions i found on another forum was helpful:

"1. First go here to download PsTools. Extract it to a folder on your desktop.

2. Open Start and type cmd. Right-click the program and choose to run as administrator.
3. Navigate to the folder where you extracted the tools by typing "cd C:\Users\Username\Desktop\Pstools", replace Username with your username and Pstools with the folder where you extracted the tools.

4. When you have navigated to the correct folder, copy the following command without the quotes: "psexec.exe -i -s %windir%\system32\mmc.exe /s taskschd.msc".

5. Open the command window and right click, choose paste. Press enter.

6. Navigate to Task Scheduler Library -> Microsoft -> Windows -> UpdateOrchestrator.

7. Right click the task called Reboot and click on Disable.

8. The task should now be disabled"

Hopefully one of these two options works for ya'll

2019-11-28

關於export DISPLAY=:0.0

DISPLAY環境變量格式如下host:NumA.NumB,host指Xserver所在的主機主機名或者ip地址,圖形將顯示在這一機器上,可以是啟動了圖形界面的Linux/Unix機器,也可以是安裝了Exceed 、X-Deep/32等Windows平台運行的Xserver的Windows機器。

如果Host為空白,則表示Xserver運行於本機,並且圖形程序(Xclient)使用unix socket方式連接到Xserver,而不是TCP方式。使用unix socket方式連接時則表示連接的unix socket的路徑,如果為0,則表示連接到/tmp/.X11-unix/X0

如果Host非為空白, 使用TCP方式連接時,NumA為連接的端口減去6000的值,如果NumA為0,則表示連接到6000端口;
       NumA + 6000 = tcp port #

NumB則幾乎總是0。

---------------------------- 進階 ------------------------------------------------------------------------
如果使用su username或者su - username切換到別的用戶,並且使用命令
    export DISPLAY=:0.0
    設置DISPLAY環境變量,運行圖形程序(如xclock)時會收到如下錯誤:
    Xlib: connection to ":0.0"refused by server
    Xlib: No protocol specified
    Error: Can't open display: :0.0
    這是因為Xserver默認情況下不允許別的用戶的圖形程序的圖形顯示在當前屏幕上.如果需要別的用戶的圖形顯示在當前屏幕上,則應以當前登陸的用戶,也就是切換身份前的用戶執行如下命令
    xhost +
    這個命令將允許別的用戶啟動的圖形程序將圖形顯示在當前屏幕上.
 
    在2台Linux機器之間,如果設置服務器端配置文件/etc/ssh/sshd_config中包含:
    X11Forwarding no
    客戶端配置文件/etc/ssh/ssh_config包含:
    ForwardX11 yes
    則從客戶端ssh到服務器端后會自動設置DISPLAY環境變量,允許在服務器端執行的圖形程序將圖形顯示在客戶端上.在服務器上查看環境變量顯示如下(這個結果不同的時候並不相同)
    DISPLAY=localhost:10.0
    在客戶機上用netstat -lnp可以看到有程序監聽了6010端口
    tcp 0 0 127.0.0.1:6010 0.0.0.0:* LISTEN 4827/1
    如果希望允許遠程機器上的圖形程序將圖形顯示在本地機器的Xserver上,除了要設置遠端機器的DISPLAY環境變量以外,還需要設置本地機器的Xserver監聽相應的TCP端口.而現在的Linux系統出於安全的考慮,默認情況下不再監聽TCP端口.可通過修改/etc/X11/xinit/xserverrc文件,將
    exec /usr/bin/X11/X -dpi 100 -nolistentcp
    修改為
    exec /usr/bin/ X11/X -dpi 100
    允許在直接使用startx啟動圖形時啟動對TCP端口的監聽.
    修改/etc/kde3/kdm/kdmrc,將
    ServerArgsLocal=-nolisten tcp
    修改為
    ServerArgsLocal=
    允許kdm作為顯示管理器時,啟動會話時監聽相應的TCP端口.
    修改/etc/gdm/gdm.conf,在[Security]一節增加
    DisallowTCP=false
    或者在登陸窗口選擇"Options" -> "Configure Login Manager..."的Security頁面,取消"DenyTCP connections to Xserver",允許gdm作為顯示管理器時,啟動會話時監聽相應的TCP端口.
--------------------------------------------------------------------------------------------------------
xhost

 xhost是用來控制X server訪問權限的。
  
    通常當你從hostA登陸到hostB上運行hostB上的應用程序時,
  
    做為應用程序來說,hostA是client,但是作為圖形來說,
  
    是在hostA上顯示的,需要使用hostA的Xserver,所以hostA是
  
    server.因此在登陸到hostB前,需要在hostA上運行xhost +
  
    來使其它用戶能夠訪問hostA的Xserver.
  
    xhost +是使所有用戶都能訪問Xserver.
  
    xhost + ip使ip上的用戶能夠訪問Xserver.
  
    xhost + nis:user@domain使domain上的nis用戶user能夠訪問
  
    xhost + inet:user@domain使domain上的inet用戶能夠訪

youtube 教學 : Open GUI apps on Windows Subsystem for Linux (and on Raspberry Pi)

2019-11-27

Debian Buster --- net-tools will be deprecated in favor of iproute2

Here is a summary of the net-tools commands, together with their iproute2 equivalent:
legacy net-tools commandsiproute2 replacement commands
arpip n (ip neighbor)
ifconfigip a (ip addr), ip link, ip -s (ip -stats)
iptunnelip tunnel
nameifip link
netstatss, ip route (for netstat -r), ip -s link (for netstat -i), ip maddr (for netstat -g)
routeip r (ip route)
from debian stretch (9 release note)

2019-11-20

LENOVO T410 with Debian Buster and XFCE

1. modify /etc/apt/sources.list : add contrib and non-free
2. install intel wifi driver : firmware-iwlwifi
3. Install nvidia driver : install/run nvidia-detect, install nvidia-legacy-340xx-driver
4. Whenever I lock my screen, it goes full black and does not respond either to moving the cursor or pressing keys from the keyboard.
After searching for a while, I found the solution in the Arch Wiki.
The solution is pretty simple. Just create a text file named 20-intel.conf in the /etc/X11/xorg.conf.d/ directory path (you may have to create directory xorg.conf.d if it does not exist) and paste the following in it:
Section "Device"
        Identifier "Nvidia Card"
        Driver "nvidia"
        VendorName "NVIDIA Corporation"
        BoardName "NVS 3100M"
EndSection
Now save the file and reboot your Debian Xfce system.
Screen black problem after locking the screen in Xfce should be solved by now.
5. How to enable my keyboard's volume keys in XFCE?

  1. Right click a panel -> Panel submenu -> Add New Items...
  2. Add an instance of PulseAudio Plugin
  3. Right click the icon that just appeared in your panel and click "Properties". Make sure "Enable keyboard shortcuts for volume control" is enabled.

You may have to install the PulseAudio Plugin first. In Debian and Debian-based distributions, the package is called xfce4-pulseaudio-plugin.

2019-10-31

LENOVO T410

After installing my Lenovo T410 to Windows 10, Windows 10 can not find the driver for the PCI Serial Port.
VEN_8086&DEV_3B67&SUBSYS_216217AA&REV_06\3&b1bfb68&0&B3

It need "Intel Management Engine Interface 6.2 and Serial Over LAN (SOL) Driver".

2019-10-07

如何啟動 "Acronis TrueImage PE and ISO" in UEFI mode with grub2

source from : [分享] Acronis TrueImage 2019, 2018, 2017, 2016 PE and ISO; Acronis Backup 11.7 PE

I was make new version Acronis True Image 2018, 2017, 2016 PE and ISO
You can boot in UEFI mode with grub2. Use this code in menu

menuentry "Acronis True Image Home 2018 ISO" {
set quiet=1
set gfxpayload=1024x768x32,1024x768
set mbrcrcs=on
set isofile="/iso/ati18cn.iso"
search --set -f $isofile
loopback loop $isofile
linux (loop,msdos1)/dat10.dat lang=zh_CN quiet force_modules=usbhid
initrd (loop,msdos1)/dat11.dat (loop,msdos1)/dat12.dat
boot
}
menuentry "Acronis True Image Home 2018 ISO ElTorito" {
set quiet=1
set gfxpayload=1024x768x32,1024x768
set mbrcrcs=on
set isofile="/iso/ati18cn.iso"
search --set -f $isofile
loopback loop $isofile
echo mount the El Torito floppy image
loopback ElTorito (loop)232+224000
#ls (ElTorito)/
linux (ElTorito)/dat10.dat lang=zh_CN quiet force_modules=usbhid
initrd (ElTorito)/dat11.dat (ElTorito)/dat12.dat
boot
}

menuentry "Acronis True Image Home 2017 ISO" {
set quiet=1
set gfxpayload=1024x768x32,1024x768
set mbrcrcs=on
set isofile="/iso/ati17cn.iso"
search --set -f $isofile
loopback loop $isofile
linux (loop,msdos1)/dat10.dat lang=zh_CN quiet force_modules=usbhid
initrd (loop,msdos1)/dat11.dat (loop,msdos1)/dat12.dat
boot
}
menuentry "Acronis True Image Home 2017 ISO ElTorito" {
set quiet=1
set gfxpayload=1024x768x32,1024x768
set mbrcrcs=on
set isofile="/iso/ati17cn.iso"
search --set -f $isofile
loopback loop $isofile
echo mount the El Torito floppy image
loopback ElTorito (loop)232+208000
#ls (ElTorito)/
linux (ElTorito)/dat10.dat lang=zh_CN quiet force_modules=usbhid
initrd (ElTorito)/dat11.dat (ElTorito)/dat12.dat
boot
}

menuentry "Acronis True Image Home 2016 ISO ElTorito" {
set quiet=1
set gfxpayload=1024x768x32,1024x768
set mbrcrcs=on
set isofile="/iso/ati16.iso"
search --set -f $isofile
loopback loop $isofile
echo mount the El Torito floppy image
loopback ElTorito (loop)232+184000
#ls (ElTorito)/
linux (ElTorito)/dat10.dat lang=13 quiet force_modules=usbhid
initrd (ElTorito)/dat11.dat (ElTorito)/dat12.dat
boot
}

menuentry "Acronis True Image Home 2016 ISO" {
set quiet=1
set gfxpayload=1024x768x32,1024x768
set mbrcrcs=on
set isofile="/iso/ati16.iso"
search --set -f $isofile
loopback loop $isofile
linux (loop,msdos1)/dat10.dat lang=13 quiet force_modules=usbhid
initrd (loop,msdos1)/dat11.dat (loop,msdos1)/dat12.dat
boot
}

menuentry "Acronis True Image Home 2016 - Extract ISO" {
linux /acronis/dat10.dat lang=13 vga=791 mbrcrcs=on quiet force_modules=usbhid
initrd /acronis/dat11.dat /acronis/dat12.dat
boot
}

menuentry "Acronis Disk Director Home 12 ISO ElTorito" {
set quiet=1
set gfxpayload=1024x768x32,1024x768
set mbrcrcs=on
set isofile="/iso/add12.iso"
search --set -f $isofile
loopback loop $isofile
echo mount the El Torito floppy image
loopback ElTorito (loop)220+161792
#ls (ElTorito)/
linux (ElTorito)/dat5.dat quiet
initrd (ElTorito)/dat4.dat
boot
}

menuentry "Acronis Backup Advanced 11.7" {
set quiet=1
set gfxpayload=1024x768x32,1024x768
set mbrcrcs=on
set isofile="/iso/abr11cn.iso"
search --set -f $isofile
loopback loop $isofile
loopback ElTorito (loop)228+368000
#ls (ElTorito)/
linux (ElTorito)/abr64ker.dat product=bootagent media_for_windows quiet
initrd (ElTorito)/abr64ram.dat (ElTorito)/dat8.dat
boot
}

menuentry "Acronis Snap Deploy 5 Standalone Utility" {
set quiet=1
set gfxpayload=1024x768x32,1024x768
set mbrcrcs=on
set isofile="/iso/asd5s.iso"
search --set -f $isofile
loopback loop $isofile
echo mount the El Torito floppy image
loopback ElTorito (loop)208+154000
#ls (ElTorito)/
linux (ElTorito)/dat4.dat quiet
initrd (ElTorito)/dat5.dat
boot
}

menuentry "Acronis Snap Deploy 5 Master Image Creator" {
set quiet=1
set gfxpayload=1024x768x32,1024x768
set mbrcrcs=on
set isofile="/iso/asd5m.iso"
search --set -f $isofile
loopback loop $isofile
echo mount the El Torito floppy image
loopback ElTorito (loop)208+146000
#ls (ElTorito)/
linux (ElTorito)/dat8.dat quiet
initrd (ElTorito)/dat9.dat
boot
}

menuentry "Acronis Snap Deploy 5 Agent" {
set quiet=1
set gfxpayload=1024x768x32,1024x768
set mbrcrcs=on
set isofile="/iso/asd5a.iso"
search --set -f $isofile
loopback loop $isofile
echo mount the El Torito floppy image
loopback ElTorito (loop)208+148000
#ls (ElTorito)/
linux (ElTorito)/dat16.dat quiet
initrd (ElTorito)/dat17.dat
boot
}

=======================================================================
Multi Language code (for version 2017)
- PE : Change value language=en to region code (zh_CN only need zh...)

- ISO: Use region code (can found when change region from acronis website)
Edit file BOOTIA32.XML, BOOTX64.XML;
Arguments=" lang=zh_CN; quiet"

BOOTWIZ.CFG
KERNEL dat10.dat lang=zh_CN force_modules=usbhid quiet

=======================================================================
Multi Language code (for version 2016) (thanks waterchu for ideas)
- PE
REG.exe Add HKLM\Software\Acronis /f /v "language" /T REG_DWORD /D "13"
...............DWORD.............
1-ENGLISH; 11-BRAZIL; 13-CHINESE; 14-CHINESET; 8-CZECH; 6-DUTCH; 27-ESPANA; 2-GERMAN; 25-INDIAN; 15-ITALIAN; 9-JAPAN; 3-KOREAN; 5-POLISH; 19-PORTUGUESE; 0-RUSSIAN; 12-SPANISH; 17-FRENCH

- ISO: Edit file BOOTIA32.XML, BOOTX64.XML;
Arguments=" lang=13; quiet"

BOOTWIZ.CFG
KERNEL dat10.dat lang=13 force_modules=usbhid quiet

If Extract ISO and boot with Grub4dos

title Acronis True Image 2016
find --set-root --ignore-floppies --ignore-cd /acronis/dat10.dat
kernel /acronis/dat10.dat lang=13 vga=791 mbrcrcs=on force_modules=usbhid quiet
initrd /acronis/dat11.dat /acronis/dat12.dat

If try with Recovery Manager (F11), only need extract folder Recovery Manager from original ISO
..........Grub2 (Boot with grub2 can use Recovery Manager)
menuentry "Acronis True Image Home 2016 - F11" {
linux /Recovery\ Manager/kernel64.dat lang=13 vga=791 mbrcrcs=on force_modules=usbhid quiet
initrd /Recovery\ Manager/ramdisk_merged64.dat /Recovery\ Manager/DAT12.DAT
boot
}
....................Grub4dos............
title Acronis True Image Home 2016 - F11
find --set-root --ignore-floppies --ignore-cd /Recovery\ Manager/kernel.dat
kernel /Recovery\ Manager/kernel64.dat lang=13 vga=791 mbrcrcs=on force_modules=usbhid quiet
initrd /Recovery\ Manager/ramdisk_merged64.dat /Recovery\ Manager/DAT12.DAT

========================== ?????????????????????? ==========================
For old acronis version, need replace new driver (Snapapi64.dll only for Acronis True Image 2015, Disk Director 2012x64 - delete old snapapi.dll, copy and rename snapapi64.dll to snapapi.dll)
http://pan.baidu.com/s/1kTD8Jnp

If you try use on real system, try to uninstall driver first. If 64bit, use Fltsrv64. Right Click on snapman_uninstall.inf, fltsrv_uninstall.inf and select Install. Also you can update snapman & Flisrv driver.
http://pan.baidu.com/s/1i3m80rN

First, Right Click on \Uninstall\fltsrv64\fltsrv_update.inf, update snapman & Flisrv driver.
Then, run CMD as administrator, run \ATIH2016_x64\acronis.cmd to install.

Finally, run \ATIH2016_x64\TrueImage.exe successfully.

感覺, 將 Acronis TrueImage 安裝在 Real System 會拖累系統效能, 而且麻煩. 似乎沒有破解的必要
我比較懶, 直接下載 Bootable iso 放到USB 救援工具, 再以 grub2/grub4dos 啟動
至於 bootable iso/PE 檔案產生的方法 : 使用網路上已經安裝並破解成功之後的 Acronis TrueImage, 執行 acronis->TrueImageHome->MediaBuilder.exe 便可取得