蓝蓝更健康

vm001

这些天一直测试金山了...还弄了个优卡

今天呢还是准备继续以前测试360
结果安装360正式版，然后打开xuetr
360开始拦截驱动加载，点击允许-----刷......蓝屏了

貌似有360驱动和xuetr驱动的东西...
到底是谁的原因呢，大侠们给分析下

蓝屏dump

xjxjxj

不是数字。。。。。

Flameocean

楼主还在用XT的老版本？？
看蓝屏貌似是XT驱动导致的

xxm2011

1. 0: kd> !analyze -v
   
2. *******************************************************************************
   
3. *                                                                             *
   
4. *                        Bugcheck Analysis                                    *
   
5. *                                                                             *
   
6. *******************************************************************************
   
7. 
   
8. NO_MORE_IRP_STACK_LOCATIONS (35)
   
9. A higher level driver has attempted to call a lower level driver through
   
10. the IoCallDriver() interface, but there are no more stack locations in the
    
11. packet, hence, the lower level driver would not be able to access its
    
12. parameters, as there are no parameters for it.  This is a disasterous
    
13. situation, since the higher level driver "thinks" it has filled in the
    
14. parameters for the lower level driver (something it MUST do before it calls
    
15. it), but since there is no stack location for the latter driver, the former
    
16. has written off of the end of the packet.  This means that some other memory
    
17. has probably been trashed at this point.
    
18. Arguments:
    
19. Arg1: 88c20928, Address of the IRP
    
20. Arg2: 00000000
    
21. Arg3: 00000000
    
22. Arg4: 00000000
    
23. 
    
24. Debugging Details:
    
25. ------------------
    
26. 
    
27. 
    
28. CUSTOMER_CRASH_COUNT:  1
    
29. 
    
30. DEFAULT_BUCKET_ID:  DRIVER_FAULT
    
31. 
    
32. BUGCHECK_STR:  0x35
    
33. 
    
34. PROCESS_NAME:  XueTr.exe
    
35. 
    
36. LAST_CONTROL_TRANSFER:  from 804f01d0 to 804faf9f
    
37. 
    
38. STACK_TEXT:  
    
39. b5c71640 804f01d0 00000035 88c20928 00000000 nt!KeBugCheckEx+0x1b
    
40. b5c71658 804f4f6b 805149ac 00000000 e184aad0 nt!IopfCallDriver+0x18
    
41. b5c718a8 b4e99ddd e1ac3f30 b5c718c4 80514901 nt!IoVolumeDeviceToDosName+0x89
    
42. WARNING: Stack unwind information not available. Following frames may be wrong.
    
43. b5c718ec b4e9a07c e184aad0 b5c71988 00000000 XueTr+0x32ddd
    
44. b5c71910 b4e9a3c0 e1ac3ef8 b5c71988 00000000 XueTr+0x3307c
    
45. b5c71940 b4e9a5f5 8977fda0 00000310 b5c71988 XueTr+0x333c0
    
46. b5c71970 b4e9ae1b 00000018 01970020 00200000 XueTr+0x335f5
    
47. b5c71a28 b4e9b02f 01970020 00200000 00200000 XueTr+0x33e1b
    
48. b5c71a44 b4e9b097 01970020 00200000 012da7c2 XueTr+0x3402f
    
49. b5c71a80 b4ed0314 00000000 00000000 01970020 XueTr+0x34097
    
50. b5c71b4c 804f01e9 88c22248 89d82298 806e8410 XueTr+0x69314
    
51. b5c71b5c 805809a0 89d82308 88b46320 89d82298 nt!IopfCallDriver+0x31
    
52. b5c71b70 8058182f 88c22248 89d82298 88b46320 nt!IopSynchronousServiceTail+0x70
    
53. b5c71c0c 8057a292 0000014c 00000000 00000000 nt!IopXxxControlFile+0x5c5
    
54. b5c71c40 b9f59f81 0000014c 00000000 00000000 nt!NtDeviceIoControlFile+0x2a
    
55. b5c71d34 805426cc 0000014c 00000000 00000000 Hookport+0x4f81
    
56. b5c71d34 7c92e4f4 0000014c 00000000 00000000 nt!KiFastCallEntry+0xfc
    
57. 0012a5ec 00000000 00000000 00000000 00000000 0x7c92e4f4
    
58. 
    
59. 
    
60. STACK_COMMAND:  kb
    
61. 
    
62. FOLLOWUP_IP:
    
63. XueTr+32ddd
    
64. b4e99ddd ??              ???
    
65. 
    
66. SYMBOL_STACK_INDEX:  3
    
67. 
    
68. SYMBOL_NAME:  XueTr+32ddd
    
69. 
    
70. FOLLOWUP_NAME:  MachineOwner
    
71. 
    
72. MODULE_NAME: XueTr
    
73. 
    
74. IMAGE_NAME:  XueTr.sys
    
75. 
    
76. DEBUG_FLR_IMAGE_TIMESTAMP:  4ed9eb19
    
77. 
    
78. FAILURE_BUCKET_ID:  0x35_XueTr+32ddd
    
79. 
    
80. BUCKET_ID:  0x35_XueTr+32ddd
    
81. 
    
82. Followup: MachineOwner
    
83. ---------

复制代码

不怎么会用windbg

jefffire

xuetr的问题 dl已经转给linxer

vm001

jefffire 发表于 2013-3-30 19:41
xuetr的问题 dl已经转给linxer

哦，谢谢