{"id":1269,"date":"2010-02-27T14:13:20","date_gmt":"2010-02-27T10:13:20","guid":{"rendered":"http:\/\/msbro.ru\/?p=1269"},"modified":"2010-07-04T13:33:58","modified_gmt":"2010-07-04T09:33:58","slug":"c000021a","status":"publish","type":"post","link":"https:\/\/msbro.ru\/index.php\/archives\/1269","title":{"rendered":"C000021a"},"content":{"rendered":"<p>c000021a &#8211; \u0441\u0438\u043d\u0438\u0439 \u044d\u043a\u0440\u0430\u043d \u0441\u043c\u0435\u0440\u0442\u0438. \u041e\u0441\u043e\u0431\u0435\u043d\u043d\u043e\u0441\u0442\u044c\u044e \u044d\u0442\u043e\u0433\u043e BSOD \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u043c\u0430\u043b\u043e\u0435 \u043a\u043e\u043b\u0438\u0447\u0435\u0441\u0442\u0432\u043e \u0442\u0435\u043a\u0441\u0442\u0430 \u0438 \u043a\u0440\u0430\u043a\u043e\u0437\u044f\u0431\u0440\u044b.<\/p>\n<p>\u041f\u0440\u0438\u0447\u0438\u043d\u044b \u0432\u043e\u0437\u043d\u0438\u043a\u043d\u043e\u0432\u0435\u043d\u0438\u044f<\/p>\n<p>c000021a \u043f\u043e\u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u043f\u0440\u0438 \u0437\u0430\u0432\u0435\u0440\u0448\u0435\u043d\u0438\u0438 Winlogon.exe \u0438\u043b\u0438 Csrss.exe. Windows \u043d\u0435 \u043c\u043e\u0436\u0435\u0442 \u0440\u0430\u0431\u043e\u0442\u0430\u0442\u044c \u0431\u0435\u0437 \u044d\u0442\u0438\u0445 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0432. \u0422\u0430\u043a\u0436\u0435 c000021a \u043f\u043e\u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u043f\u0440\u0438 \u043d\u0435\u0443\u0434\u0430\u0447\u043d\u043e\u043c \u0437\u0430\u043f\u0443\u0441\u043a\u0435 smss.exe.<br \/>\n<!--more--><br \/>\n\u0423\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0435<\/p>\n<p>\u041f\u043e\u0434\u0440\u043e\u0431\u043d\u0435\u0435 \u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0438 \u044d\u0442\u043e\u0439 \u043e\u0448\u0438\u0431\u043a\u0438 \u043c\u043e\u0436\u043d\u043e \u0443\u0437\u043d\u0430\u0442\u044c \u0437\u0434\u0435\u0441\u044c <a href=\"http:\/\/support.microsoft.com\/kb\/156669\/ru\" target=\"_blank\">\u0423\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0435 \u043d\u0435\u043f\u043e\u043b\u0430\u0434\u043e\u043a \u043f\u0440\u0438 \u043f\u043e\u044f\u0432\u043b\u0435\u043d\u0438\u0438 \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u044f \u043e\u0431 \u043e\u0448\u0438\u0431\u043a\u0435 \u00abSTOP 0xC000021A\u00bb<\/a><\/p>\n<p>\u041f\u043e\u0448\u0430\u0433\u043e\u0432\u0430\u044f \u0438\u043d\u0441\u0442\u0440\u0443\u043a\u0446\u0438\u044f<\/p>\n<p>* \u0415\u0441\u043b\u0438 \u0432 \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u0438 \u043f\u0440\u0438\u0441\u0443\u0442\u0441\u0442\u0432\u0443\u0435\u0442 Windows Logon Process<\/p>\n<p>1. \u0417\u0430\u0433\u0440\u0443\u0436\u0430\u0435\u043c\u0441\u044f \u0441 \u0434\u0438\u0441\u043a\u0430 Windows PE \u0438\u043b\u0438 \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0430\u0435\u043c HDD \u043a \u0434\u0440\u0443\u0433\u043e\u043c\u0443 \u041f\u041a<br \/>\n2. \u0421\u0442\u0430\u0440\u0442\u0443\u0435\u043c regedit.exe<br \/>\n3. \u0429\u0435\u043b\u043a\u0430\u0435\u043c HKEY_LOCAL_MACHINE, \u0432\u044b\u0431\u0438\u0440\u0430\u0435\u043c \u0417\u0430\u0433\u0440\u0443\u0437\u0438\u0442\u044c \u043a\u0443\u0441\u0442<br \/>\n4. \u041d\u0430 \u0434\u0438\u0441\u043a\u0435 \u0441 \u043d\u0435\u0440\u0430\u0431\u043e\u0447\u0435\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u043e\u0439 \u043d\u0430\u0445\u043e\u0434\u0438\u043c \u0444\u0430\u0439\u043b WINDOWS\\system32\\config\\SOFTWARE.<br \/>\n5. \u041f\u0438\u0448\u0435\u043c \u0438\u043c\u044f \u0440\u0430\u0437\u0434\u0435\u043b\u0430 TEST<br \/>\n6. \u041d\u0430\u0445\u043e\u0434\u0438\u043c \u0440\u0430\u0437\u0434\u0435\u043b HKEY_LOCAL_MACHINE\\TEST\\Microsoft\\Windows NT\\Winlogon<br \/>\n7. \u0414\u0435\u043b\u0430\u0435\u043c \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440 GinaDll \u0440\u0430\u0432\u043d\u044b\u043c msgina.dll. \u0415\u0441\u043b\u0438 \u0442\u0430\u043a\u043e\u0433\u043e \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u0430 \u043d\u0435\u0442, \u0441\u043e\u0437\u0434\u0430\u0432\u0430\u0442\u044c \u0435\u0433\u043e \u043d\u0435 \u043d\u0430\u0434\u043e.<br \/>\n8. \u041d\u0430\u0445\u043e\u0434\u0438\u043c \u0440\u0430\u0437\u0434\u0435\u043b HKEY_LOCAL_MACHINE\\TEST\\Microsoft\\Windows NT\\Winlogon\\Notify<br \/>\n9. \u0421\u043c\u043e\u0442\u0440\u0438\u043c, \u043d\u0435\u0442 \u043b\u0438 \u043f\u043e\u0434\u043e\u0437\u0440\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0445 Winlogon notification package.<br \/>\n\u0412\u044b\u0433\u0440\u0443\u0436\u0430\u0435\u043c \u043a\u0443\u0441\u0442<br \/>\n\u041f\u0435\u0440\u0435\u0437\u0430\u0433\u0440\u0443\u0436\u0430\u0435\u043c\u0441\u044f<\/p>\n<p>* \u0415\u0441\u043b\u0438 \u0432 \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u0438 \u043f\u0440\u0438\u0441\u0443\u0442\u0441\u0442\u0432\u0443\u0435\u0442 Session manager initialization \u0438\u043b\u0438 \u0437\u0430\u043f\u0443\u0441\u043a\u0430 \u0434\u0438\u0441\u043f\u0435\u0442\u0447\u0435\u0440\u0430 \u0441\u0435\u0430\u043d\u0441\u0430<\/p>\n<p>1. \u0417\u0430\u0433\u0440\u0443\u0436\u0430\u0435\u043c\u0441\u044f \u0441 \u0434\u0438\u0441\u043a\u0430 Windows PE \u0438\u043b\u0438 \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0430\u0435\u043c HDD \u043a \u0434\u0440\u0443\u0433\u043e\u043c\u0443 \u041f\u041a 2. \u0421\u0442\u0430\u0440\u0442\u0443\u0435\u043c regedit.exe 3. \u0429\u0435\u043b\u043a\u0430\u0435\u043c HKEY_LOCAL_MACHINE, \u0432\u044b\u0431\u0438\u0440\u0430\u0435\u043c \u0417\u0430\u0433\u0440\u0443\u0437\u0438\u0442\u044c \u043a\u0443\u0441\u0442 4. \u041d\u0430 \u0434\u0438\u0441\u043a\u0435 \u0441 \u043d\u0435\u0440\u0430\u0431\u043e\u0447\u0435\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u043e\u0439 \u043d\u0430\u0445\u043e\u0434\u0438\u043c \u0444\u0430\u0439\u043b WINDOWS\\system32\\config\\SYSTEM. 5. \u041f\u0438\u0448\u0435\u043c \u0438\u043c\u044f \u0440\u0430\u0437\u0434\u0435\u043b\u0430 TEST 6. \u041d\u0430\u0445\u043e\u0434\u0438\u043c \u0440\u0430\u0437\u0434\u0435\u043b HKEY_LOCAL_MACHINE\\TEST\\nnnn\\Control\\Session Manager, \u0433\u0434\u0435 nnnn \u043f\u0440\u0438\u043d\u0438\u043c\u0430\u0435\u0442 \u0437\u043d\u0430\u0447\u0435\u043d\u0438\u044f CurrentControlSet, ControlSet001, ControlSet002 \u0438 \u0442.\u0434.<br \/>\n7. \u0414\u0435\u043b\u0430\u0435\u043c \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440 BootExecute \u0440\u0430\u0432\u043d\u044b\u043c<\/p>\n<p>autocheck autochk *<\/p>\n<p>\u041f\u043e\u0441\u043b\u0435 \u044d\u0442\u043e\u0439 \u0441\u0442\u0440\u043e\u043a\u0438 \u0434\u043e\u043b\u0436\u0435\u043d \u0431\u044b\u0442\u044c ENTER. \u0422\u0438\u043f \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u0430 REG_MULTI_SZ. \u0423\u0434\u0430\u043b\u044f\u0435\u043c \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440 PendingFileRenameOperations.<br \/>\n\u0412\u044b\u0433\u0440\u0443\u0436\u0430\u0435\u043c \u043a\u0443\u0441\u0442<br \/>\n\u041f\u0435\u0440\u0435\u0437\u0430\u0433\u0440\u0443\u0436\u0430\u0435\u043c\u0441\u044f<\/p>\n<p>\u0421\u0442\u0430\u0442\u044c\u0438 \u0431\u0430\u0437\u044b \u0437\u043d\u0430\u043d\u0438\u0439 Microsoft<\/p>\n<p><a href=\"http:\/\/support.microsoft.com\/default.aspx?kbid=330303\" target=\"_blank\">* \u041e\u0448\u0438\u0431\u043a\u0430 \u00abSTOP: c000021a (\u041d\u0435\u0443\u0441\u0442\u0440\u0430\u043d\u0438\u043c\u0430\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u0430\u044f \u043e\u0448\u0438\u0431\u043a\u0430)\u00bb<\/a><br \/>\n<a href=\"http:\/\/support.microsoft.com\/kb\/316503\/ru\" target=\"_blank\">* \u041f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u0430 GoBack \u0432\u044b\u0437\u044b\u0432\u0430\u0435\u0442 \u043e\u0448\u0438\u0431\u043a\u0443 STOP C000021a<\/a><br \/>\n<a href=\"http:\/\/support.microsoft.com\/kb\/156669\/ru\" target=\"_blank\">* \u0423\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0435 \u043d\u0435\u043f\u043e\u043b\u0430\u0434\u043e\u043a \u043f\u0440\u0438 \u043f\u043e\u044f\u0432\u043b\u0435\u043d\u0438\u0438 \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u044f \u043e\u0431 \u043e\u0448\u0438\u0431\u043a\u0435 \u00abSTOP 0xC000021A\u00bb <\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>c000021a &#8211; \u0441\u0438\u043d\u0438\u0439 \u044d\u043a\u0440\u0430\u043d \u0441\u043c\u0435\u0440\u0442\u0438. \u041e\u0441\u043e\u0431\u0435\u043d\u043d\u043e\u0441\u0442\u044c\u044e \u044d\u0442\u043e\u0433\u043e BSOD \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u043c\u0430\u043b\u043e\u0435 \u043a\u043e\u043b\u0438\u0447\u0435\u0441\u0442\u0432\u043e \u0442\u0435\u043a\u0441\u0442\u0430 \u0438 \u043a\u0440\u0430\u043a\u043e\u0437\u044f\u0431\u0440\u044b. \u041f\u0440\u0438\u0447\u0438\u043d\u044b \u0432\u043e\u0437\u043d\u0438\u043a\u043d\u043e\u0432\u0435\u043d\u0438\u044f c000021a \u043f\u043e\u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u043f\u0440\u0438 \u0437\u0430\u0432\u0435\u0440\u0448\u0435\u043d\u0438\u0438 Winlogon.exe \u0438\u043b\u0438 Csrss.exe. Windows \u043d\u0435 \u043c\u043e\u0436\u0435\u0442 \u0440\u0430\u0431\u043e\u0442\u0430\u0442\u044c \u0431\u0435\u0437 \u044d\u0442\u0438\u0445 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0432. \u0422\u0430\u043a\u0436\u0435 c000021a \u043f\u043e\u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u043f\u0440\u0438 \u043d\u0435\u0443\u0434\u0430\u0447\u043d\u043e\u043c \u0437\u0430\u043f\u0443\u0441\u043a\u0435 smss.exe.<\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[3],"tags":[99],"class_list":["post-1269","post","type-post","status-publish","format-standard","hentry","category-windows","tag-bsod"],"_links":{"self":[{"href":"https:\/\/msbro.ru\/index.php\/wp-json\/wp\/v2\/posts\/1269"}],"collection":[{"href":"https:\/\/msbro.ru\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/msbro.ru\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/msbro.ru\/index.php\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/msbro.ru\/index.php\/wp-json\/wp\/v2\/comments?post=1269"}],"version-history":[{"count":0,"href":"https:\/\/msbro.ru\/index.php\/wp-json\/wp\/v2\/posts\/1269\/revisions"}],"wp:attachment":[{"href":"https:\/\/msbro.ru\/index.php\/wp-json\/wp\/v2\/media?parent=1269"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/msbro.ru\/index.php\/wp-json\/wp\/v2\/categories?post=1269"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/msbro.ru\/index.php\/wp-json\/wp\/v2\/tags?post=1269"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}<!-- WP Super Cache is installed but broken. The constant WPCACHEHOME must be set in the file wp-config.php and point at the WP Super Cache plugin directory. -->