不知道原因,电脑反复出现蓝屏的情况。下面是windbg的分析KERNEL_SECURITY_CHECK_FAILURE (139) A kernel component has corrupted a critical data structure. The corruption could potentially allow a malicious user to gain control of this machine. Arguments: Arg1: 000000000000001d, An RTL_BALANCED_NODE RBTree entry has been corrupted. Arg2: ffffee80e705f530, Address of the trap frame for the exception that caused the BugCheck Arg3: ffffee80e705f488, Address of the exception record for the exception that caused the BugCheck Arg4: 0000000000000000, Reserved Debugging Details: ------------------ KEY_VALUES_STRING: 1 Key : Analysis.CPU.mSec Value: 2905 Key : Analysis.DebugAnalysisManager Value: Create Key : Analysis.Elapsed.mSec Value: 16822 Key : Analysis.Init.CPU.mSec Value: 859 Key : Analysis.Init.Elapsed.mSec Value: 45564 Key : Analysis.Memory.CommitPeak.Mb Value: 94 Key : Dump.Attributes.AsUlong Value: 8 Key : Dump.Attributes.KernelGeneratedTriageDump Value: 1 Key : FailFast.Name Value: INVALID_BALANCED_TREE Key : FailFast.Type Value: 29 FILE_IN_CAB: 061522-12281-01.dmp DUMP_FILE_ATTRIBUTES: 0x8 Kernel Generated Triage Dump BUGCHECK_CODE: 139 BUGCHECK_P1: 1d BUGCHECK_P2: ffffee80e705f530 BUGCHECK_P3: ffffee80e705f488 BUGCHECK_P4: 0 TRAP_FRAME: ffffee80e705f530 -- (.trap 0xffffee80e705f530) NOTE: The trap frame does not contain all registers. Some register values may be zeroed or incorrect. rax=0000000000000000 rbx=0000000000000000 rcx=000000000000001d rdx=fffff802842316c0 rsi=0000000000000000 rdi=0000000000000000 rip=fffff80283a2d70f rsp=ffffee80e705f6c0 rbp=0000000000000000 r8=fffff80284212568 r9=fffff80284212568 r10=fffff802842ec040 r11=0000000000000000 r12=0000000000000000 r13=0000000000000000 r14=0000000000000000 r15=0000000000000000 iopl=0 nv up ei pl nz na pe cy nt!RtlRbInsertNodeEx 0x1e2d3f: fffff802`83a2d70f cd29 int 29h Resetting default scope EXCEPTION_RECORD: ffffee80e705f488 -- (.exr 0xffffee80e705f488) ExceptionAddress: fffff80283a2d70f (nt!RtlRbInsertNodeEx 0x00000000001e2d3f) ExceptionCode: c0000409 (Security check failure or stack buffer overrun) ExceptionFlags: 00000001 NumberParameters: 1 Parameter[0]: 000000000000001d Subcode: 0x1d FAST_FAIL_INVALID_BALANCED_TREE BLACKBOXBSD: 1 (!blackboxbsd) BLACKBOXNTFS: 1 (!blackboxntfs) BLACKBOXPNP: 1 (!blackboxpnp) BLACKBOXWINLOGON: 1 CUSTOMER_CRASH_COUNT: 1 PROCESS_NAME: System ERROR_CODE: (NTSTATUS) 0xc0000409 - EXCEPTION_CODE_STR: c0000409 EXCEPTION_PARAMETER1: 000000000000001d EXCEPTION_STR: 0xc0000409 STACK_TEXT: ffffee80`e705f208 fffff802`83a09c69 : 00000000`00000139 00000000`0000001d ffffee80`e705f530 ffffee80`e705f488 : nt!KeBugCheckEx ffffee80`e705f210 fffff802`83a0a090 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiBugCheckDispatch 0x69 ffffee80`e705f350 fffff802`83a08423 : ffffcb81`cdae6180 00000000`00000000 00000000`00000000 ffffcb81`cdaee1c8 : nt!KiFastFailDispatch 0xd0 ffffee80`e705f530 fffff802`83a2d70f : fffff802`84231ec0 fffff802`83941ccf fffff802`84212568 00000000`00000000 : nt!KiRaiseSecurityCheckFailure 0x323 ffffee80`e705f6c0 fffff802`83941ccf : fffff802`84212568 00000000`00000000 fffff802`842ec040 00000000`00002710 : nt!RtlRbInsertNodeEx 0x1e2d3f ffffee80`e705f6d0 fffff802`83b1bada : 00000000`00000002 00000000`0000000f ffffee80`e705fa20 00000000`00000000 : nt!KiSetClockInterval 0xa3 ffffee80`e705f700 fffff802`83b1bb64 : ffffcb81`cdae9240 ffffee80`e705f860 00000000`00000000 00000000`00000000 : nt!KiSetVirtualHeteroClockIntervalRequest 0xc6 ffffee80`e705f730 fffff802`838a181e : 00000000`00000000 00000000`00000000 00000000`00000004 ffffcb81`cdae6180 : nt!KiSetVirtualHeteroClockIntervalRequestDpcRoutine 0x14 ffffee80`e705f760 fffff802`838a0b04 : 00000000`00000000 00000000`00000000 00000000`00140001 00000000`00000000 : nt!KiExecuteAllDpcs 0x30e ffffee80`e705f8d0 fffff802`839fb8ce : ffffffff`00000000 ffffcb81`cdae6180 ffffcb81`cdaf1240 ffffba0b`3a663080 : nt!KiRetireDpcList 0x1f4 ffffee80`e705fb60 00000000`00000000 : ffffee80`e7060000 ffffee80`e7059000 00000000`00000000 00000000`00000000 : nt!KiIdleLoop 0x9e SYMBOL_NAME: nt!KiFastFailDispatch d0 MODULE_NAME: nt IMAGE_NAME: ntkrnlmp.exe IMAGE_VERSION: 10.0.19041.1706 STACK_COMMAND: .cxr; .ecxr ; kb BUCKET_ID_FUNC_OFFSET: d0 FAILURE_BUCKET_ID: 0x139_1d_INVALID_BALANCED_TREE_nt!KiFastFailDispatch OSPLATFORM_TYPE: x64 OSNAME: Windows 10 FAILURE_ID_HASH: {67ec97ad-ad0b-071e-ab87-6dc661e22d1b} Followup: MachineOwner ---------

您好,


然后是kb命令的结果kb#RetAddr:ArgstoChild:CallSite00fffff802`83a09c69:00000000`0000013900000000`0000001dffffee80`e705f530ffffee80`e705f488:nt!KeBugCheckEx01fffff802`83a0a090:00000000`0000000000000000`0000000000000000`0000000000000000`00000000:nt!KiBugCheckDispatch 0x6902fffff802`83a08423:ffffcb81`cdae618000000000`0000000000000000`00000000ffffcb81`cdaee1c8:nt!KiFastFailDispatch 0xd003fffff802`83a2d70f:fffff802`84231ec0fffff802`83941ccffffff802`8421256800000000`00000000:nt!KiRaiseSecurityCheckFailure 0x32304fffff802`83941ccf:fffff802`8421256800000000`00000000fffff802`842ec04000000000`00002710:nt!RtlRbInsertNodeEx 0x1e2d3f05fffff802`83b1bada:00000000`0000000200000000`0000000fffffee80`e705fa2000000000`00000000:nt!KiSetClockInterval 0xa306fffff802`83b1bb64:ffffcb81`cdae9240ffffee80`e705f86000000000`0000000000000000`00000000:nt!KiSetVirtualHeteroClockIntervalRequest 0xc607fffff802`838a181e:00000000`0000000000000000`0000000000000000`00000004ffffcb81`cdae6180:nt!KiSetVirtualHeteroClockIntervalRequestDpcRoutine 0x1408fffff802`838a0b04:00000000`0000000000000000`0000000000000000`0014000100000000`00000000:nt!KiExecuteAllDpcs 0x30e09fffff802`839fb8ce:ffffffff`00000000ffffcb81`cdae6180ffffcb81`cdaf1240ffffba0b`3a663080:nt!KiRetireDpcList 0x1f40a00000000`00000000:ffffee80`e7060000ffffee80`e705900000000000`0000000000000000`00000000:nt!KiIdleLoop 0x9e此是否有帮助?是否抱歉,这没有帮助。太棒了!感谢你的反馈。你对此的满意度如何?感谢你的反馈,它能帮助改进网站。你对此的满意度如何?感谢你的反馈。


您好,


有没有办法定位到具体时间哪个驱动出现了问题呢?我把dmp文件设置成了完全内存储存。https://drive.google.com/drive/folders/1qR3Ug6lJ3N-tc4cWW0ITgJzon39gqVze?usp=sharing此是否有帮助?是否抱歉,这没有帮助。太棒了!感谢你的反馈。你对此的满意度如何?感谢你的反馈,它能帮助改进网站。你对此的满意度如何?感谢你的反馈。


点赞(85) 打赏

微信小程序

微信扫一扫体验

立即
投稿

微信公众账号

微信扫一扫加关注

发表
评论
返回
顶部