請求幫忙,最近電腦經常藍屏

匿名
2022-12-19T14:35:21+00:00

Microsoft (R) Windows Debugger Version 10.0.25200.1003 AMD64 Copyright (c) Microsoft Corporation. All rights reserved.

Loading Dump File [C:\Windows\Minidump\121922-8953-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available

************* Path validation summary **************
Response                         Time (ms)     Location
Deferred                                       srv*
Symbol search path is: srv*
Executable search path is: 
Windows 10 Kernel Version 22621 MP (12 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS Personal
Machine Name:
Kernel base = 0xfffff806`51e00000 PsLoadedModuleList = 0xfffff806`52a12fc0
Debug session time: Mon Dec 19 02:20:17.371 2022 (UTC + 8:00)
System Uptime: 0 days 2:47:53.247
Loading Kernel Symbols
...............................................................
................................................................
................................................................
.........
Loading User Symbols
Loading unloaded module list
..........
For analysis of this file, run !analyze -v
nt!KeBugCheckEx:
fffff806`52228700 48894c2408      mov     qword ptr [rsp+8],rcx ss:0018:fffffe83`feaf39d0=00000000000000f7
8: kd> !analyze -v
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

DRIVER_OVERRAN_STACK_BUFFER (f7)
A driver has overrun a stack-based buffer.  This overrun could potentially
allow a malicious user to gain control of this machine.
DESCRIPTION
A driver overran a stack-based buffer (or local variable) in a way that would
have overwritten the function's return address and jumped back to an arbitrary
address when the function returned.  This is the classic "buffer overrun"
hacking attack and the system has been brought down to prevent a malicious user
from gaining complete control of it.
Do a kb to get a stack backtrace -- the last routine on the stack before the
buffer overrun handlers and BugCheck call is the one that overran its local
variable(s).
Arguments:
Arg1: fffffe83feaf3a10, Actual security check cookie from the stack
Arg2: 0000eac0dfd08245, Expected security check cookie
Arg3: ffff153f202f7dba, Complement of the expected security check cookie
Arg4: 0000000000000000, zero

Debugging Details:
------------------

KEY_VALUES_STRING: 1

    Key  : Analysis.CPU.mSec
    Value: 1405

    Key  : Analysis.DebugAnalysisManager
    Value: Create

    Key  : Analysis.Elapsed.mSec
    Value: 6044

    Key  : Analysis.IO.Other.Mb
    Value: 0

    Key  : Analysis.IO.Read.Mb
    Value: 0

    Key  : Analysis.IO.Write.Mb
    Value: 1

    Key  : Analysis.Init.CPU.mSec
    Value: 312

    Key  : Analysis.Init.Elapsed.mSec
    Value: 355691

    Key  : Analysis.Memory.CommitPeak.Mb
    Value: 110

    Key  : Bugcheck.Code.DumpHeader
    Value: 0xf7

    Key  : Bugcheck.Code.Register
    Value: 0xf7

    Key  : Dump.Attributes.AsUlong
    Value: 1808

    Key  : Dump.Attributes.DiagDataWrittenToHeader
    Value: 1

    Key  : Dump.Attributes.ErrorCode
    Value: 0

    Key  : Dump.Attributes.KernelGeneratedTriageDump
    Value: 1

    Key  : Dump.Attributes.LastLine
    Value: Dump completed successfully.

    Key  : Dump.Attributes.ProgressPercentage
    Value: 0

FILE_IN_CAB:  121922-8953-01.dmp

TAG_NOT_DEFINED_202b:  *** Unknown TAG in analysis list 202b

DUMP_FILE_ATTRIBUTES: 0x1808
  Kernel Generated Triage Dump

BUGCHECK_CODE:  f7

BUGCHECK_P1: fffffe83feaf3a10

BUGCHECK_P2: eac0dfd08245

BUGCHECK_P3: ffff153f202f7dba

BUGCHECK_P4: 0

SECURITY_COOKIE:  Expected 0000eac0dfd08245 found fffffe83feaf3a10

BLACKBOXBSD: 1 (!blackboxbsd)

BLACKBOXNTFS: 1 (!blackboxntfs)

BLACKBOXPNP: 1 (!blackboxpnp)

BLACKBOXWINLOGON: 1

CUSTOMER_CRASH_COUNT:  1

PROCESS_NAME:  LeagueClientUx

STACK_TEXT:  
fffffe83`feaf39c8 fffff806`522f0c65     : 00000000`000000f7 fffffe83`feaf3a10 0000eac0`dfd08245 ffff153f`202f7dba : nt!KeBugCheckEx
fffffe83`feaf39d0 fffff806`520caa98     : 00000000`00000000 00000000`00000001 00000000`0000001a 00000017`746bed74 : nt!_report_gsfailure+0x25
fffffe83`feaf3a10 fffff806`521594ff     : 00000013`00000002 ffffd388`50a2e390 ffffd388`50a2e3f0 00000000`00000000 : nt!KeWaitForSingleObject+0x318
fffffe83`feaf3db0 fffff806`520c63ef     : ffffd388`50a2e390 fffffe83`feaf3e78 00000000`00010224 fffff806`5217f320 : nt!ExpWaitForResource+0x6b
fffffe83`feaf3e40 fffff806`5214910f     : 00000000`00000001 ffffd388`56613130 00000000`00000001 00000000`00000000 : nt!ExpAcquireResourceExclusiveLite+0x54f
fffffe83`feaf3ee0 ffffc1d4`1b865c6e     : 00000000`00000001 00000000`00000000 ffff9a0f`d46f0310 00000000`00000000 : nt!ExEnterCriticalRegionAndAcquireResourceExclusive+0x2f
fffffe83`feaf3f20 ffffc1d4`1bc58757     : 00000000`00000000 00000000`00000001 00000000`00000000 00000000`00000000 : win32kbase!EnterCrit+0xbe
fffffe83`feaf4020 ffffc1d4`1bc0ee84     : 00000000`00000000 ffff9a0f`d46f0310 00000000`0000029b 00000000`00001cff : win32kfull!xxxMsgWaitForMultipleObjectsEx+0xfb
fffffe83`feaf40d0 ffffc1d4`1bfb7513     : fffffe83`feaf4a88 00000000`00000000 00000000`0000029b 00000000`00001cff : win32kfull!NtUserMsgWaitForMultipleObjectsEx+0x424
fffffe83`feaf4a30 fffff806`5223d4e8     : 00000000`00000000 ffffc1d4`1bc1d0d9 00000000`00000040 00007ffd`28d975a0 : win32k!NtUserMsgWaitForMultipleObjectsEx+0x1f
fffffe83`feaf4a70 00007ffd`28dab984     : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSystemServiceCopyEnd+0x28
00000000`007fe118 00000000`00000000     : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x00007ffd`28dab984

SYMBOL_NAME:  win32kbase!EnterCrit+be

MODULE_NAME: win32kbase

IMAGE_NAME:  win32kbase.sys

IMAGE_VERSION:  10.0.22621.963

STACK_COMMAND:  .cxr; .ecxr ; kb

BUCKET_ID_FUNC_OFFSET:  be

FAILURE_BUCKET_ID:  0xF7_MISSING_GSFRAME_win32kbase!EnterCrit

OSPLATFORM_TYPE:  x64

OSNAME:  Windows 10

FAILURE_ID_HASH:  {20e86026-4b14-3ed6-0f34-f9e392a094fb}

Followup:     MachineOwner
---------
Windows for home | 其他 | 應用程式

鎖定的問題。 此問題已從 Microsoft 支援服務社群移轉。 您可以對其是否有幫助進行投票,但無法對問題新增註解或回覆,或進行追蹤。

0 則留言 沒有留言

1 個回答

排序依據: 最新
  1. 匿名
    2022-12-19T15:09:18+00:00

    可能是系统损坏,建议执行一下系统修复。以管理员身份打开PowerShell输入以下命令:

    sfc /scannow
    Dism /Online /Cleanup-Image /ScanHealth
    Dism /Online /Cleanup-Image /CheckHealth
    Dism /Online /Cleanup-image /RestoreHealth
    

    此回答有幫助嗎?

    0 則留言 沒有留言