☰

Windows 7 蓝屏 0x000000f7

tag-icon • tag-icon windows-7 firefox drivers bsod malware
Windows 7 蓝屏 0x000000f7

今天傍晚，我在浏览网页时电脑崩溃了。我打开了三个 Firefox 选项卡，分别是 YouTube、Soundcloud 和 PCGamer。在浏览 PCGamer 时，屏幕冻结，声音反复播放一小段，然后电脑崩溃，出现蓝屏，并出现以下错误：

0x000000f7 (0xfffff8800ae22ae8, 0x0000f960002e992f, 0xffff069fffd166d0, 0x0000000000000000)。

根据我的研究，这是“驱动程序已超出基于堆栈的缓冲区。此溢出可能会允许恶意用户获得访问权限并控制此机器。”

这种情况只发生过一次，这可能没什么意义，但这仍然让我担心，因为我不相信我感染了任何恶意软件或病毒。Malwarebytes Anti-Malware 扫描没有发现任何异常，Spybot 扫描目前正在运行。我还运行 AVG 2015 作为我的主要防御措施。Spybot 的结果出来后，我将在今晚晚些时候执行安全模式扫描，但我想问问超级用户，以防这是一个更严重的问题，我应该担心。

我有一个 DMP 文件，但它的大小超过 900MB。如果需要/要求，我可以将其压缩并上传到 Dropbox。

我感谢对这个问题的任何帮助/见解。

答案1

新的转储还显示了硬件问题。这里指令指针未对准。

*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

DRIVER_OVERRAN_STACK_BUFFER (f7)
A driver has overrun a stack-based buffer.  This overrun could potentially
allow a malicious user to gain control of this machine.
DESCRIPTION
A driver overran a stack-based buffer (or local variable) in a way that would
have overwritten the function's return address and jumped back to an arbitrary
address when the function returned.  This is the classic "buffer overrun"
hacking attack and the system has been brought down to prevent a malicious user
from gaining complete control of it.
Do a kb to get a stack backtrace -- the last routine on the stack before the
buffer overrun handlers and bugcheck call is the one that overran its local
variable(s).
Arguments:
Arg1: 000000000e728077, Actual security check cookie from the stack
Arg2: 0000f960003387ed, Expected security check cookie
Arg3: ffff069fffcc7812, Complement of the expected security check cookie
Arg4: 0000000000000000, zero

Debugging Details:
------------------


BIOS_DATE:  02/24/2009

BASEBOARD_PRODUCT:  EP45T-UD3LR

BASEBOARD_VERSION:  x.x

BUGCHECK_P1: e728077

BUGCHECK_P2: f960003387ed

BUGCHECK_P3: ffff069fffcc7812

BUGCHECK_P4: 0

SECURITY_COOKIE:  Expected 0000f960003387ed found 000000000e728077

CPU_COUNT: 4

CPU_MHZ: 91d

CPU_VENDOR:  GenuineIntel

CPU_FAMILY: 6

CPU_MODEL: 17

CPU_STEPPING: a

DEFAULT_BUCKET_ID:  WIN7_DRIVER_FAULT

BUGCHECK_STR:  0xF7

PROCESS_NAME:  Audiosurf2.exe

CURRENT_IRQL:  0

ANALYSIS_VERSION: 10.0.10069.9 amd64fre

EXCEPTION_RECORD:  fffff8800b5a6198 -- (.exr 0xfffff8800b5a6198)
ExceptionAddress: fffff96000113c70 (win32k!SfnINLPCREATESTRUCT+0x0000000000000678)
   ExceptionCode: c0000005 (Access violation)
  ExceptionFlags: 00000000


STACK_TEXT:  
00 nt!KeBugCheckEx
01 win32k!_report_gsfailure
02 win32k!_GSHandlerCheck_SEH
03 nt!RtlpExecuteHandlerForException
04 nt!RtlDispatchException
05 nt!KiDispatchException
06 nt!KiExceptionDispatch
07 nt!KiPageFault
08 win32k!SfnINLPCREATESTRUCT
09 0x0
0a 0x0
0b 0x0
0c 0x0
0d 0x0
0e 0x0
0f 0x0
10 dxgkrnl!DxgkPresent
11 win32k!NtGdiDdDDIPresent
12 nt!KiSystemServiceCopyEnd


SYMBOL_NAME:  dxgkrnl!DxgkPresent+543

MODULE_NAME: hardware

BUCKET_ID:  X64_IP_MISALIGNED

PRIMARY_PROBLEM_CLASS:  X64_IP_MISALIGNED

因此，使用以下方法测试 RAM 是否存在错误memtest86+并使用以下方法对 CPU 进行压力/折磨测试Prime95。

还尝试将 BIOS 更新为版本 F12E。您仍然使用 BIOS F5。

相关内容