=====================================================================================================
ϥWindowsާ@tΪHɷ|Jo˪~HGu0X????????OޥΪ0x00000000OA
ӰO餣writtenvAMε{QC
pGhбФ@ǡuvAo쪺^OuWindowsNOoˤíwvqMhCAoӿ~ä
@wOWindowsíwyCN²Roؿ~@]C

@Bε{SˬdOt
{ǻݭn@OΥHxsƮɡANݭnϥξާ@tδѪu\ơvӥӽСApGOt\A
ƴN|Nҷs}POϦ}^ε{Aε{NiHqLoӦ}ϥγoOCoNOuʺA
OtvAO}]NOs{uСvCO餣OûۤYӡBΤɪAɭ԰O
t]|ѡCtѮɨtΨƷ|^@0ȡAoɪ^ȡu0vwܷsҥΪСAӬOtΦVε{
oX@ӳqAiX{F~C@ε{AbC@ӽаO᳣ˬd^ȬO_0ApGOA
hNۥX{FG١AӱĨ@ǱIϡAoNWjF{ǪuʡvCYε{Sˬdoӿ~A
N|ӡuDʡv{oӭȬOtiδСA~b᪺椤ϥγoOCu0}O
xsOqtΤ̭nu_yzŪvA藍\ε{ϥΡCbSO@ާ@tΤU(p
DOS)AgƨoӦ}|ɭPߧYAӦbާ@tΤApWindowsA
oӾާ@|WQtΪO@A䵲GNOѾާ@tαjXε{AH~XjCo
ɭԡAN|X{WzugOv~AëXQޥΪO}u0x00000000vCOtѬG٪
]ܦhAO餣BtΨƪǰti঳vTC]AoؤtѦhާ@tΨϥΫܪ
AwˤFhε{(]ALNuwˡvfr{)AFjqtΰѼƩMtɮפC

GBε{ѩۨBUGޥΤF`O
bϥΰʺAtε{Aɷ|o˪pX{G{ǸլŪg@uӥiΡvOA
AoӹwƤiΪФwgĤFCiOuѰOFvVާ@tέnDtA]iO{ǦۤvbYӮɭ
wgPFoOӡuSdNvCPFOQtΦ^AXvwgݩε{A]
Ūgާ@]P˷|ĲotΪO@AϡuHkv{ǰߤ@UNOQާ@פA^귽Cq
@ɪk٬OnHĩMYFohڡIo˪pݩ{ǦۨBUGAAibSwާ@ǤU
{~CLĴФ@w`O0A]~ܤO}]@wu0x00000000vAӬOLHƦrC
pGtθg`Ҵ쪺~ܡAUĳi| G


1.˵tΤO_차ίfrCo{ǬFtΩtdaקtΡAqӾɭPާ@tβ`C`
[jHwNѡAӷi{ǵn_C
2.sާ@tΡAާ@tΪw˵{ǭsTtɮסBץtΰѼơCɭԾާ@tΥ]|
BUGAn`Nw˩xo檺@ŵ{ǡC
3.եηsε{C

Mode:NOM
:ثeO֩wA]NOpbUNѨӮɥSAo͡ANNoOD]l[:
pGA Ghost _ OS ĳ RWINDOWS@PREFETCHؿUҦ*.PF,]windowss{
z}ε{~: "0x7cd64998" OѦҪ "0x14c96730" OCӰO餣ର "read"׬O
]
:
Win XPuwŪv޳N
oس̨ΤƧ޳N]QΨFγnWAtιC@γn骺eXҰʱpiRAMsW@ӴyzM
λݨDuOMvAçoǫHxsWINDOWS\PREFETCHƧC@إߤFMAγn骺ˤJ
tפjjCXPwŪxsF̪8tαҰʩγnҰʪHC
:ثekOWB(Xۤvw惡DdF\[)A]O`DA쥻XGCѺΫenɤ@
ǵ{|o...read...
{bNSoͤF

=====================================================================================================
[rb]էAarn馳S{uu@

Цbε{}@ӷsuOƥvANU@奻ih 

X5O!P%@AP[4\PZX54(P^)7CC)7}$EICAR-STANDARD-ANTIVIRUS-TEST-FILE!$H+H*

`NnƻsŮ

OsAOsbnOnA̦nsbAwƧ
ܡuҦvAWuEICAR.COMv

\AͪӦ6970Ӧr`C
{bAiHΧArnӬdoӤA
pGio{fr]ڤWoӤuOեΪAOfr^A
hܧAϯfrnwg\aw˨AqWA
åBwgĦa@ۧApC

jաGoӤ󤣬OfrI
b˴бzRoӤAHKHᵹzy~ѡC  
=====================================================================================================

NT֤ߪާ@tαĥΪOhc(hS٬Ҧ), DnϥΪ̼h(User Mode)M֤߼h(Kernel Mode), 
̥iHqLUoӧζHӲzWindowsWdM"ũզre"_].
zwwwwwwwwwwwwwwwwwwwwwwwwwwww{
x ~syut: ӹq(]tާ@tΡBwMn)       x
x t  : ֤߼h                                       x
x   p : ϥΪ̼h(nBXʵ{)                  x
x  Z : Dr.Watson                                    x
x O  : KeDugCheck                                   x
|wwwwwwwwwwwwwwwwwwwwwwwwwwww} 
ɲ~sytoǦӰ, C Ͳpե[Z[IsyUإγ~~, uțӷY檺Ww, 
NOޭnΤ˰ts, gLҦs󪺼t(㦳S\ŧO, iHXݩҼڵw
MO), ~ܮws, ӥͲpեutdͲ(u֦Cv, ઽXݵw
MaQΰO).
@, AͲpըSgLtɧ, ]ܮw̭Q@Ӹ˰ts, WQ~~QiȯZ
Dr.Watsono{F, ODr.Watsonzѳqt, oӥͲpժu@WQ, ӥB٦btŶWK
X@ӧi:XXXͲpեX{F~, tɨMwWNBy, ÷|ͰOb, H[.
AͲpժ~GSް_ja`N, @, DͲpթ~MJܮwm˰ts, Fs귽
, ͧYV, tɥߧYMwӤutu@, éROOìҦͪpնiˬd, O
bˬdᬰtɴF@Ŧȼgi, oӳiDnT:GٸTBĳާ@BվݤfT. 

@Bũզretq 

1.GˬdT
***STOP 0x0000001E(0xC0000005,0xFDE38AF9,0x0000001,0x7E8B0EB4)
KMODE_EXCEPTION_NOT_HANDLED ***
䤤~Ĥ@OX(Stop Code)]NOSTOP 0x0000001E, ΩѧOwoͿ~, ~ĤGO
QAA_Ӫ|ӼƦr, H}oHwqѼ(oӰѼƹ󴶳qϥΪ̮ڥLkz, uXʵ{
sg̩Ϊ̷Lnާ@tΪ}oH~). ĤTO~W. TĤ@q`ΨѧOͲ~Xʵ{
̳]. oظThƫ², XiH@jMbLnѮwML޳NƤϥ. 

2.ĳާ@
"ũզre"ĤGOĳϥΪ̶i檺ާ@T. , ĳާ@ȶȬO@ʪĳ(p: PӺ
dBIOSs); , ]NOܤ@PeD. @ӻ, @ĳNOsҰ. 

3.վݤfiDϥΪ̰OxMO_gϺаӤF, ϥΰOxMiHTwoͰDʽ, ٷ|i
DϥΪ̽վTO_QǨt@xq, HΨϥΤFݤfoqT. L, o̪T󴶳qϥ
̨ӻ, SNq. 

ɫOìiHQdOӥͲpժD, |bĤ@TiOɮץǪ, ``]ud
Ӥjd, ӵLkTDҦb. ѩutQ, usy}u, , ӥͲpշ|N
~ , A. ɤM|չϫms, OtɤoưuMw(Ұʨ"ũզre
"T, ΦbiۦPާ@ɦAX{"ũզre"). 


GBũզreѨM

X{"ũզre"᪺EӤ@ѨM

Windows 2K/XP"ũզre"TD`h, Lkb@g峹, L̲ͪ]bۮe
wMXʵ{BDnBfr, ]jaѤF@Ǥ@몺ѨM, bJ"ũզre"
~, ӳoǤ׶iư

1.sҰ
ɥuOYӵ{Xʵ{@ɥǿ, sҰʫL̷|L۷s.(`N:ɰѨ7.d߰X) 

2.sw
, ˬdswO_c, oӳQ\hHD|޵o\hW䧮G. pGT{SD,
 NޤU, MᴫӴѸո, æw˳̷sXʵ{. PӷLnwۮeOˬd@UwO
_Pާ@tάۮe. pGAwSb, NowtӺid, Ϊ̼L̪t߹q.

̷s Windows XP wۮeʲM:
http://support.microsoft.com/default.aspx?scid=kb;zh-tw;314062
̷s Windows 2000/Windows NT wۮeM:
http://support.microsoft.com/default.aspx?scid=kb;zh-tw;131303

3.sXʩMsA
pGw˧Yӵw骺sX, ΦwˤFYӳn, ӥSbtΪAȤsWF(p:rnBCPU
ųnBn鵥), bsҰʩΨϥΤX{F"ũզre"G, ШwҦӤϦw˩θTΥ. 

4.ˬdfr
piMifrɷ|ɭPWindows"ũզre", ]dfri. Pɤ@Ǥ차
n]|޵o"ũզre", ҥH̦nAάui汽ˬd. 

5.ˬdBIOSMwۮe
s˪qg`X{"ũզre"D, ˬdäɯBIOS̷s, P䤤O, 
p:CACHEMMg. t~, ӹӷLnwۮeCˬdۤvw. ٦NO, pGDOBIOSLk
jeqwL]|ɭP"ũզre", ݭniɯ.
zwwwwwwwwwwwwwwwwwwwwwwwwwwww{
xp:                                                 x
x BIOSCACHEMMg                                    x
x Video BIOS Shadowing (VGA CARD BIOSMg)               x
x Shadowing address ranges(Mga}C)                   x
x System BIOS Cacheable(tBIOSw)                    x
x Video BIOS Cacheable(WBIOSw)                     x
x Video RAM Cacheable(WOw)                    x
|wwwwwwwwwwwwwwwwwwwwwwwwwwww} 

6.ˬdtΤx
b}l-->椤J:EventVwr.msc, "ENTER"X{"ƥdݾ", `Nˬd䤤"tΤx"M"ε{x"
"~". 

7.d߰X (STOP CODE)
"ũզre"KK³ªrOU, ۨLqW, 
iJLnUP : http://support.microsoft.com/ , bW"jMr"JX, pGjM
GSAXT, iH"^媾Ѯw"bjM@M. @뱡pU, |bo̧즳ΪѨMר. t~, 
bbaiduBGooglejMϥ"ũզre"XΪ̫᭱rjM, ]|H~
ì. 


8.̫@T]w
@뱡pU, "ũզre"X{sFwXʩηs[wæw˨Xʫ, 
oWindows 2K/XPѪ"̫@T]w"NOѨM"ũզre"ֱ覡. sҰʨt, bX{Ұ
ɫUF8N|X{űҰʿﶵ, ۿ"̫@T]w". 

9.w˳̷stΧsMService Pack
"ũզre"OWindowssbʳy, iqLw˳̷stΧsMService PackӸѨM.

=====================================================================================================