疑似360安全卫士造成系统蓝屏（附dump文件）

heroboy0923

系统环境：

操作系统：正版 windows 7 企业版 sp1 (32位)
杀毒软件：Symantec Endpoint Protection 11.0.6200.754

dump文件部分内容如下：

Loading User Symbols
Loading unloaded module list
..............................
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
Use !analyze -v to get detailed debugging information.
BugCheck A, {dbaca0e4, 2, 0, 82b0c7a6}
*** WARNING: Unable to verify timestamp for 360netmon.sys
*** ERROR: Module load completed but symbols could not be loaded for 360netmon.sys
*** WARNING: Unable to verify timestamp for afd.sys
*** ERROR: Module load completed but symbols could not be loaded for afd.sys
*** WARNING: Unable to verify timestamp for 360AntiHacker.sys
*** ERROR: Module load completed but symbols could not be loaded for 360AntiHacker.sys
*** WARNING: Unable to verify timestamp for Hookport.sys
*** ERROR: Module load completed but symbols could not be loaded for Hookport.sys
***** Kernel symbols are WRONG. Please fix symbols to do analysis.
*********************************************************************
* Symbols can not be loaded because symbol path is not initialized. *
* *
* The Symbol Path can be set by: *
* using the _NT_SYMBOL_PATH environment variable. *
* using the -y <symbol_path> argument when starting the debugger. *
* using .sympath and .sympath+ *
*********************************************************************
Probably caused by : 360netmon.sys ( 360netmon+3591 )
Followup: MachineOwner

只求1种安稳

帮你联系下官人 看可以来不

heroboy0923

只求1种安稳 发表于 2012-7-24 12:34
帮你联系下官人 看可以来不

谢谢

公司的电脑不敢乱动，希望能早点解决

只求1种安稳

heroboy0923 发表于 2012-7-24 12:39
谢谢

公司的电脑不敢乱动，希望能早点解决

http://bbs.360.cn/3229787/254533885.html  已经有回复了
原来你早就在360论坛发帖了

heroboy0923

只求1种安稳 发表于 2012-7-24 12:40
http://bbs.360.cn/3229787.html
建议你去360论坛发帖 官人不一定会来

官网那边我也发了同样的帖子，呵呵

只求1种安稳

heroboy0923 发表于 2012-7-24 12:42
官网那边我也发了同样的帖子，呵呵

我也看到了

一个笨鸟

貌似网络驱动360netmon.sys的bug

1. 
   
2. IRQL_NOT_LESS_OR_EQUAL (a)
   
3. An attempt was made to access a pageable (or completely invalid) address at an
   
4. interrupt request level (IRQL) that is too high.  This is usually
   
5. caused by drivers using improper addresses.
   
6. If a kernel debugger is available get the stack backtrace.
   
7. Arguments:
   
8. Arg1: dbaca0e4, memory referenced
   
9. Arg2: 00000002, IRQL
   
10. Arg3: 00000000, bitfield :
    
11.         bit 0 : value 0 = read operation, 1 = write operation
    
12.         bit 3 : value 0 = not an execute operation, 1 = execute operation (only on chips which support this level of status)
    
13. Arg4: 82b0c7a6, address which referenced memory
    
14. 
    
15. Debugging Details:
    
16. ------------------
    
17. 
    
18. READ_ADDRESS:  dbaca0e4
    
19. 
    
20. CURRENT_IRQL:  2
    
21. 
    
22. FAULTING_IP:
    
23. nt!PsGetProcessId+8
    
24. 82b0c7a6 8b80b4000000    mov     eax,dword ptr [eax+0B4h]
    
25. 
    
26. CUSTOMER_CRASH_COUNT:  1
    
27. 
    
28. DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT
    
29. 
    
30. BUGCHECK_STR:  0xA
    
31. 
    
32. PROCESS_NAME:  chrome.exe
    
33. 
    
34. TRAP_FRAME:  cd9378c4 -- (.trap 0xffffffffcd9378c4)
    
35. ErrCode = 00000000
    
36. eax=dbaca030 ebx=8ff32d80 ecx=00000000 edx=00000000 esi=855d8098 edi=8ff1fa28
    
37. eip=82b0c7a6 esp=cd937938 ebp=cd937938 iopl=0         nv up ei pl zr na pe nc
    
38. cs=0008  ss=0010  ds=0023  es=0023  fs=0030  gs=0000             efl=00010246
    
39. nt!PsGetProcessId+0x8:
    
40. 82b0c7a6 8b80b4000000    mov     eax,dword ptr [eax+0B4h] ds:0023:dbaca0e4=????????
    
41. Resetting default scope
    
42. 
    
43. LAST_CONTROL_TRANSFER:  from 82b0c7a6 to 82a9765b
    
44. 
    
45. STACK_TEXT:  
    
46. cd9378c4 82b0c7a6 badb0d00 00000000 8ff32d80 nt!KiTrap0E+0x2cf
    
47. cd937938 8ff19591 dbaca030 42628543 85a11884 nt!PsGetProcessId+0x8
    
48. WARNING: Stack unwind information not available. Following frames may be wrong.
    
49. cd937974 8ff182ed dbaca030 4262858b 858c7eb8 360netmon+0x3591
    
50. cd9379bc 82a8d5be 86c59990 85a117a8 ed711438 360netmon+0x22ed
    
51. cd9379d4 8ffc5815 4269875e 00012007 8ffc4ea4 nt!IofCallDriver+0x63
    
52. cd937aac 8ffbf2bc 866e9e20 863c4a90 cd937ad4 afd!AfdConnect+0x971
    
53. cd937abc 82a8d5be 863c4a90 85a117a8 85a117a8 afd!AfdDispatchDeviceControl+0x3b
    
54. cd937ad4 9ed271db 86559a38 866e9d68 00000000 nt!IofCallDriver+0x63
    
55. cd937af4 9ed26c02 00000000 85a117a8 866e9d68 360AntiHacker+0x21db
    
56. cd937b08 82a8d5be 866e9d68 85a117a8 85a117a8 360AntiHacker+0x1c02
    
57. cd937b20 82c80b09 86559a38 85a117a8 85a118a8 nt!IofCallDriver+0x63
    
58. cd937b40 82c83cdb 866e9d68 86559a38 00000000 nt!IopSynchronousServiceTail+0x1f8
    
59. cd937bdc 82cca61b 866e9d68 85a117a8 00000000 nt!IopXxxControlFile+0x6aa
    
60. cd937c10 83720f4f 00000628 00000000 00000000 nt!NtDeviceIoControlFile+0x2a
    
61. cd937d04 82a9427a 00000628 00000000 00000000 Hookport+0x4f4f
    
62. cd937d04 76e47094 00000628 00000000 00000000 nt!KiFastCallEntry+0x12a
    
63. 03b2e760 00000000 00000000 00000000 00000000 0x76e47094
    

复制代码

849941754

蓝屏天天都有 楼主来卡饭问这问题  还不去官方论坛问  来这问也是转交官方 你去官方论坛难道不更简便？  

heroboy0923

849941754 发表于 2012-7-24 14:00
蓝屏天天都有 楼主来卡饭问这问题  还不去官方论坛问  来这问也是转交官方 你去官方论坛难道不更简便 ...

官网我也发了，发在这里主要是想看看有没有网友遇到同样的问题，或者是个提醒

360主动防御

heroboy0923 发表于 2012-7-24 14:06
官网我也发了，发在这里主要是想看看有没有网友遇到同样的问题，或者是个提醒

确实是个问题 此问题在最新的beta版本中已经解决. 谢谢您的反馈.
http://down.360safe.com/instbeta.exe