不知道原因,电脑反复出现蓝屏的情况。下面是windbg的分析KERNEL_SECURITY_CHECK_FAILURE (139)
A kernel component has corrupted a critical data structure. The corruption
could potentially allow a malicious user to gain control of this machine.
Arguments:
Arg1: 000000000000001d, An RTL_BALANCED_NODE RBTree entry has been corrupted.
Arg2: ffffee80e705f530, Address of the trap frame for the exception that caused the BugCheck
Arg3: ffffee80e705f488, Address of the exception record for the exception that caused the BugCheck
Arg4: 0000000000000000, Reserved
Debugging Details:
------------------
KEY_VALUES_STRING: 1
Key : Analysis.CPU.mSec
Value: 2905
Key : Analysis.DebugAnalysisManager
Value: Create
Key : Analysis.Elapsed.mSec
Value: 16822
Key : Analysis.Init.CPU.mSec
Value: 859
Key : Analysis.Init.Elapsed.mSec
Value: 45564
Key : Analysis.Memory.CommitPeak.Mb
Value: 94
Key : Dump.Attributes.AsUlong
Value: 8
Key : Dump.Attributes.KernelGeneratedTriageDump
Value: 1
Key : FailFast.Name
Value: INVALID_BALANCED_TREE
Key : FailFast.Type
Value: 29
FILE_IN_CAB: 061522-12281-01.dmp
DUMP_FILE_ATTRIBUTES: 0x8
Kernel Generated Triage Dump
BUGCHECK_CODE: 139
BUGCHECK_P1: 1d
BUGCHECK_P2: ffffee80e705f530
BUGCHECK_P3: ffffee80e705f488
BUGCHECK_P4: 0
TRAP_FRAME: ffffee80e705f530 -- (.trap 0xffffee80e705f530)
NOTE: The trap frame does not contain all registers.
Some register values may be zeroed or incorrect.
rax=0000000000000000 rbx=0000000000000000 rcx=000000000000001d
rdx=fffff802842316c0 rsi=0000000000000000 rdi=0000000000000000
rip=fffff80283a2d70f rsp=ffffee80e705f6c0 rbp=0000000000000000
r8=fffff80284212568 r9=fffff80284212568 r10=fffff802842ec040
r11=0000000000000000 r12=0000000000000000 r13=0000000000000000
r14=0000000000000000 r15=0000000000000000
iopl=0 nv up ei pl nz na pe cy
nt!RtlRbInsertNodeEx 0x1e2d3f:
fffff802`83a2d70f cd29 int 29h
Resetting default scope
EXCEPTION_RECORD: ffffee80e705f488 -- (.exr 0xffffee80e705f488)
ExceptionAddress: fffff80283a2d70f (nt!RtlRbInsertNodeEx 0x00000000001e2d3f)
ExceptionCode: c0000409 (Security check failure or stack buffer overrun)
ExceptionFlags: 00000001
NumberParameters: 1
Parameter[0]: 000000000000001d
Subcode: 0x1d FAST_FAIL_INVALID_BALANCED_TREE
BLACKBOXBSD: 1 (!blackboxbsd)
BLACKBOXNTFS: 1 (!blackboxntfs)
BLACKBOXPNP: 1 (!blackboxpnp)
BLACKBOXWINLOGON: 1
CUSTOMER_CRASH_COUNT: 1
PROCESS_NAME: System
ERROR_CODE: (NTSTATUS) 0xc0000409 -
您好,
然后是kb命令的结果kb#RetAddr:ArgstoChild:CallSite00fffff802`83a09c69:00000000`0000013900000000`0000001dffffee80`e705f530ffffee80`e705f488:nt!KeBugCheckEx01fffff802`83a0a090:00000000`0000000000000000`0000000000000000`0000000000000000`00000000:nt!KiBugCheckDispatch 0x6902fffff802`83a08423:ffffcb81`cdae618000000000`0000000000000000`00000000ffffcb81`cdaee1c8:nt!KiFastFailDispatch 0xd003fffff802`83a2d70f:fffff802`84231ec0fffff802`83941ccffffff802`8421256800000000`00000000:nt!KiRaiseSecurityCheckFailure 0x32304fffff802`83941ccf:fffff802`8421256800000000`00000000fffff802`842ec04000000000`00002710:nt!RtlRbInsertNodeEx 0x1e2d3f05fffff802`83b1bada:00000000`0000000200000000`0000000fffffee80`e705fa2000000000`00000000:nt!KiSetClockInterval 0xa306fffff802`83b1bb64:ffffcb81`cdae9240ffffee80`e705f86000000000`0000000000000000`00000000:nt!KiSetVirtualHeteroClockIntervalRequest 0xc607fffff802`838a181e:00000000`0000000000000000`0000000000000000`00000004ffffcb81`cdae6180:nt!KiSetVirtualHeteroClockIntervalRequestDpcRoutine 0x1408fffff802`838a0b04:00000000`0000000000000000`0000000000000000`0014000100000000`00000000:nt!KiExecuteAllDpcs 0x30e09fffff802`839fb8ce:ffffffff`00000000ffffcb81`cdae6180ffffcb81`cdaf1240ffffba0b`3a663080:nt!KiRetireDpcList 0x1f40a00000000`00000000:ffffee80`e7060000ffffee80`e705900000000000`0000000000000000`00000000:nt!KiIdleLoop 0x9e此是否有帮助?是否抱歉,这没有帮助。太棒了!感谢你的反馈。你对此的满意度如何?感谢你的反馈,它能帮助改进网站。你对此的满意度如何?感谢你的反馈。
您好,
有没有办法定位到具体时间哪个驱动出现了问题呢?我把dmp文件设置成了完全内存储存。https://drive.google.com/drive/folders/1qR3Ug6lJ3N-tc4cWW0ITgJzon39gqVze?usp=sharing此是否有帮助?是否抱歉,这没有帮助。太棒了!感谢你的反馈。你对此的满意度如何?感谢你的反馈,它能帮助改进网站。你对此的满意度如何?感谢你的反馈。