安装卡巴MR2后电脑蓝屏了一次，请大家帮忙分析一下原因

mtfly91

为了用卡巴MR2把系统从WIN8.1换成了WIN7，今天上午莫名其妙蓝屏了一次，我不会分析蓝屏文件，请大家帮我看看是什么原因引起的，谢谢了！

zjccsg

Probably caused by : win32k.sys ( win32k!memmove+1e5 )

*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

PFN_LIST_CORRUPT (4e)
Typically caused by drivers passing bad memory descriptor lists (ie: calling
MmUnlockPages twice with the same list, etc).  If a kernel debugger is
available get the stack trace.
Arguments:
Arg1: 0000000000000002, A list entry was corrupt
Arg2: 00000000000a84b6, entry in list being removed
Arg3: 000000000011f7ff, highest physical page number
Arg4: 0000000000000001, reference count of entry being removed

Debugging Details:
------------------

BUGCHECK_STR:  0x4E_2
CUSTOMER_CRASH_COUNT:  1
DEFAULT_BUCKET_ID:  WIN7_DRIVER_FAULT
PROCESS_NAME:  360se.exe
CURRENT_IRQL:  2
TRAP_FRAME:  fffff8800b8c4e20 -- (.trap 0xfffff8800b8c4e20)
NOTE: The trap frame does not contain all registers.
Some register values may be zeroed or incorrect.
rax=0000000000001558 rbx=0000000000000000 rcx=000000001bb63d70
rdx=fffffffff8e04578 rsi=0000000000000000 rdi=0000000000000000
rip=fffff960001060b5 rsp=fffff8800b8c4fb8 rbp=fffff8800b8c5090
r8=0000000000000e8c  r9=0000000000000000 r10=ffffdd79ffffdd79
r11=000000001bb62ee8 r12=0000000000000000 r13=0000000000000000
r14=0000000000000000 r15=0000000000000000
iopl=0         nv up ei pl nz na pe nc
win32k!memmove+0x1e5:
fffff960`001060b5 8b040a          mov     eax,dword ptr [rdx+rcx] ds:00000000`149682e8=????????
Resetting default scope
LAST_CONTROL_TRANSFER:  from fffff800042df2ed to fffff800042cebc0
STACK_TEXT:  
fffff880`0b8c4fb8 fffff960`000cd6d5 : fffffa80`08c13200 fffff800`04449e80 fffffa80`08c132c0 00000000`00000000 : win32k!memmove+0x1e5
fffff880`0b8c4fc0 fffff960`000c7794 : 00000000`00000001 fffff900`c2e40cc0 00000000`00000000 fffff880`0b8c5410 : win32k!vSrcCopyS32D32Identity+0x71
fffff880`0b8c4ff0 fffff960`000c1e56 : fffff900`c2081cd8 fffff900`c2e40cd8 fffff880`0b8c5560 fffff900`c2067420 : win32k!EngCopyBits+0x938
fffff880`0b8c5300 fffff960`000dedb8 : 00000000`2a01158f fffff900`c071fab0 fffffa80`00febe00 fffffa80`000003a3 : win32k!GreSetDIBitsToDeviceInternal+0x1122
fffff880`0b8c5640 fffff960`000e34fa : 00000000`00000001 fffff880`0b8c5b60 00000000`14960000 fffffa80`000003a3 : win32k!GreStretchDIBitsInternal+0x348
fffff880`0b8c5990 fffff800`042cde53 : 00000000`2a01158f 00000000`00000096 fffffa80`000000ae fffff800`000003a3 : win32k!NtGdiStretchDIBitsInternal+0x1fa
fffff880`0b8c5a70 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSystemServiceCopyEnd+0x13
STACK_COMMAND:  .trap 0xfffff8800b8c4e20 ; kb
FOLLOWUP_IP:
win32k!memmove+1e5
fffff960`001060b5 8b040a          mov     eax,dword ptr [rdx+rcx]
SYMBOL_STACK_INDEX:  0
SYMBOL_NAME:  win32k!memmove+1e5
FOLLOWUP_NAME:  MachineOwner
MODULE_NAME: win32k
IMAGE_NAME:  win32k.sys
DEBUG_FLR_IMAGE_TIMESTAMP:  54372ef1
FAILURE_BUCKET_ID:  X64_0x4E_2_win32k!memmove+1e5
BUCKET_ID:  X64_0x4E_2_win32k!memmove+1e5
Followup: MachineOwner
---------

由于win32k.sys驱动造成的，所属进程为360安全浏览器。内存错误导致蓝屏，如果不是频发，应该不用太在意。

嵩弦离合

卡巴蓝屏钙不是之前就有了吗

mtfly91

zjccsg 发表于 2015-2-13 11:48
Probably caused by : win32k.sys ( win32k!memmove+1e5 )

****************************************** ...

谢谢你的分析了！！赞！

mtfly91

嵩弦离合 发表于 2015-2-13 14:29
卡巴蓝屏钙不是之前就有了吗

卡巴真心伤不起了

网者追风

刚刚蓝屏的记录。。。。醉了。。

kvm

就一次不用大惊小怪

kfpeace100

朋友，为了一个应用软件换系统，不值得啊。

苦瓜之苦

用卡巴就是容易出问题哈。

ultrafan

win7 32位 卡巴用到现在没蓝屏过，之前还和数字卫士一起开着，是我运气好么？