成事不足败事有余的企业QQ

早上三台电脑同时蓝屏.在进桌面后立马蓝屏,蓝屏代码0x0000000a, 安全模式可进.断定应该硬件问题的可能性不大,检查补丁和新装软件.补丁无.新装软件就企业QQ附带的安全管助手.

根据蓝屏文件用winbg分析

Bugcheck code 0000000A
Arguments 00000000 00000002 00000001 84893f4f

ChildEBP RetAddr  Args to Child              
WARNING: Stack unwind information not available. Following frames may be wrong.
b52eb94c 84893f4f badb0d00 00000000 89decb8c nt+0x40ccf
b52eba20 8484d879 93da8410 00000022 00000000 nt+0x76f4f
b52eba48 848b14dc 87e7b480 00000000 93d9d004 nt+0x30879
*** WARNING: Unable to verify timestamp for KisSaasUrlRedirectknl.sys
*** ERROR: Module load completed but symbols could not be loaded for KisSaasUrlRedirectknl.sys
b52eba6c 93d957a0 000000d0 87e729a8 00000000 nt+0x944dc
b52ebaac 93d9498f 898eecd0 00120164 00000000 KisSaasUrlRedirectknl+0x37a0
b52ebaf8 93d9463c 898eecd0 00000000 00000000 KisSaasUrlRedirectknl+0x298f
b52ebb14 84853d92 87e7b480 898eecd0 898eecd0 KisSaasUrlRedirectknl+0x263c
b52ebb2c 84a4b3e4 00000000 898eecd0 898eed40 nt+0x36d92
b52ebb4c 84a4e733 87e7b480 89473c50 00000000 nt+0x22e3e4
b52ebc08 84a959bd 00000114 898eecd0 00000000 nt+0x231733
b52ebc3c 878e2799 00000114 00000000 00000000 nt+0x2789bd
b52ebd04 8485aa16 00000114 00000000 00000000 0x878e2799
b52ebd34 774e70d4 badb0d00 0012fe10 00000000 nt+0x3da16
b52ebd38 badb0d00 0012fe10 00000000 00000000 0x774e70d4
b52ebd3c 0012fe10 00000000 00000000 00000000 0xbadb0d00
b52ebd40 00000000 00000000 00000000 00000000 0x12fe10

发现是KisSaasUrlRedirectknl 这个文件导致的. google 发现是金山的安全组件.PE中删.C:\Program Files\kingsoft\Enterprise Security