閱讀289 返回首頁    go 人物

win 10藍屏

新安裝Win 10出現多次藍屏，dump內容如下 ，還請有過類似經驗的朋友幫忙，謝謝：

Use !analyze -v to get detailed debugging information.

BugCheck F7, {ffffb9807827d920, 3afb83729c1f, ffffc5047c8d63e0, 0}

Probably caused by : Unknown_Image ( PAGE_NOT_ZERO )

Followup: MachineOwner
---------

 *** Memory manager detected 51221 instance(s) of page corruption, target is likely to have memory corruption.

1: kd>  !analyze -v 
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

DRIVER_OVERRAN_STACK_BUFFER (f7)
A driver has overrun a stack-based buffer.  This overrun could potentially
allow a malicious user to gain control of this machine.
DESCRIPTION
A driver overran a stack-based buffer (or local variable) in a way that would
have overwritten the function's return address and jumped back to an arbitrary
address when the function returned.  This is the classic "buffer overrun"
hacking attack and the system has been brought down to prevent a malicious user
from gaining complete control of it.
Do a kb to get a stack backtrace -- the last routine on the stack before the
buffer overrun handlers and bugcheck call is the one that overran its local
variable(s).
Arguments:
Arg1: ffffb9807827d920, Actual security check cookie from the stack
Arg2: 00003afb83729c1f, Expected security check cookie
Arg3: ffffc5047c8d63e0, Complement of the expected security check cookie
Arg4: 0000000000000000, zero

Debugging Details:
------------------


DEFAULT_BUCKET_ID:  GS_FALSE_POSITIVE_MISSING_GSFRAME

SECURITY_COOKIE:  Expected 00003afb83729c1f found ffffb9807827d920

BUGCHECK_STR:  0xF7

PROCESS_NAME:  System

CURRENT_IRQL:  2

BAD_PAGES_DETECTED: c815

LAST_CONTROL_TRANSFER:  from fffff80228be5935 to fffff80228b77310

STACK_TEXT:  
ffffb980`7827d8d8 fffff802`28be5935 : 00000000`000000f7 ffffb980`7827d920 00003afb`83729c1f ffffc504`7c8d63e0 : nt!KeBugCheckEx
ffffb980`7827d8e0 fffff802`28a5f11b : 00000000`00000000 00000000`00000002 ffffb980`7827d918 fffff802`00000002 : nt!_report_gsfailure+0x25
ffffb980`7827d920 fffff802`28a5e997 : ffffb980`78280180 00000000`002f9823 00000000`00000000 00000000`00669840 : nt!KiExecuteAllDpcs+0x26b
ffffb980`7827da60 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiRetireDpcList+0xd7


STACK_COMMAND:  kb

SYMBOL_NAME:  PAGE_NOT_ZERO

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: Unknown_Module

IMAGE_NAME:  Unknown_Image

DEBUG_FLR_IMAGE_TIMESTAMP:  0

BUCKET_ID:  PAGE_NOT_ZERO

Followup: MachineOwner
---------

 *** Memory manager detected 51221 instance(s) of page corruption, target is likely to have memory corruption.

最後更新：2017-06-20 23:16:22

  上一篇：go Microsoft Edge重置兩種方法均失敗
  下一篇：go 幫我看看這是怎麼回事兒