Падение системы - Bsod
-
<p><strong>Шаги воспроизведения:</strong></p>
<p><span></span>После удаления Ksec установил обновление Windows. После чего получил Bsod в дампах заметил драйвер klif.sys</p>
<p><strong>Актуальный результат:</strong></p>
<p><span></span>Упала система во время загрузки.</p>
<p><strong>Ожидаемый результат:</strong></p>
<p>Работа без сбоя.</p>
<p><code># 0 TID:0001 kb kbn kbnL kn knL kpn kPn *** Stack trace for last set context - .thread/.cxr resets it # Child-SP RetAddr Call Site00 ffffaf85b0d3f0d0 fffff8014588bde2 nt!ExpCheckForWorker+0x13e01 ffffaf85b0d3f130 fffff80145dbe149 nt!ExFreeHeapPool+0x16efd202 ffffaf85b0d3f210 fffff80145af3647 nt!ExFreePool+0x903 ffffaf85b0d3f240 fffff8014572853e nt!RtlpNewSecurityObject+0x8d704 ffffaf85b0d3f590 fffff80145af222c nt!SeAssignSecurityEx2+0x6e05 ffffaf85b0d3f5f0 fffff80145a9e853 nt!ObInsertObjectEx+0x2dc06 ffffaf85b0d3f880 fffff80145afa377 nt!SeCopyClientToken+0x9b07 ffffaf85b0d3f910 fffff80145af9f6d nt!SepCreateClientSecurityEx+0x13708 ffffaf85b0d3f980 fffff80145b01b70 nt!SeCreateClientSecurity+0x11d09 ffffaf85b0d3fa20 fffff80145a9b871 nt!AlpcpCreateSecurityContext+0x900a ffffaf85b0d3fa80 fffff801458135b5 nt!NtAlpcCreateSecurityContext+0x1410b ffffaf85b0d3fb00 00007ffa55caddf4 nt!KiSystemServiceCopyEnd+0x250c 000000a964cfd9b8 00007ffa55022a8e 0x00007ffa55caddf40d 000000a964cfd9c0 0000025d50811270 0x00007ffa55022a8e0e 000000a964cfd9c8 00007ffa55c607b0 0x0000025d508112700f 000000a964cfd9d0 0000000000000000 0x00007ffa55c607b0*** WARNING: Unable to verify timestamp for klif.sys</code></p>
<p><code>1 TID:0002 kb kbn kbnL kn knL kpn kPn # Child-SP RetAddr Call Site00 ffffaf85ae976890 fffff801456455b8 nt!KeFlushMultipleRangeTb+0x16001 ffffaf85ae976930 fffff80145746c49 nt!MiFlushTbList+0x8802 ffffaf85ae976960 fffff8014570256d nt!MiFreeWsleList+0x11903 ffffaf85ae976b30 fffff8014573278d nt!MiEmptyWorkingSetTail+0x2d04 ffffaf85ae976b60 fffff801457323ab nt!MiWalkPageTablesRecursively+0xc6d05 ffffaf85ae976c00 fffff801457323ab nt!MiWalkPageTablesRecursively+0x88b06 ffffaf85ae976ca0 fffff801457323ab nt!MiWalkPageTablesRecursively+0x88b07 ffffaf85ae976d40 fffff8014560ff4b nt!MiWalkPageTablesRecursively+0x88b08 ffffaf85ae976de0 fffff801456bcbe7 nt!MiWalkPageTables+0x36b09 ffffaf85ae976ee0 fffff80145941099 nt!MiEmptyWorkingSetInitiate+0x1070a ffffaf85ae9770b0 fffff80145941e9e nt!MiEmptyTargetedWorkingSet+0xf10b ffffaf85ae977100 fffff80145dcfc66 nt!MiTrimAllSystemPagableMemory+0xde0c ffffaf85ae977150 fffff80145de62e3 nt!MmVerifierTrimMemory+0x720d ffffaf85ae977180 fffff80145de4682 nt!ViKeRaiseIrqlSanityChecks+0xc70e ffffaf85ae9771c0 fffff80145de44b6 nt!VerifierKeAcquireInStackQueuedSpinLockCommon+0x620f ffffaf85ae9771f0 fffff807a8007c35 nt!VerifierKeAcquireInStackQueuedSpinLock+0x1610 ffffaf85ae977230 0000000000000000 klif+0x37c35</code></p>
<p><code>Threads: 2 of 2Command: knL</code></p> -
<p>Вот сссылка на полный дамп: https://cloud.qainfo.ru/s/Yy3jlWPH3BH1mTK</p>
Hello! It looks like you're interested in this conversation, but you don't have an account yet.
Getting fed up of having to scroll through the same posts each visit? When you register for an account, you'll always come back to exactly where you were before, and choose to be notified of new replies (either via email, or push notification). You'll also be able to save bookmarks and upvote posts to show your appreciation to other community members.
With your input, this post could be even better 💗
Register Login© 2026 АО «Лаборатория Касперского»