Izingxabano zomshayeli ku-Windows: izimbangela, ukuxilongwa, kanye nezixazululo ezithuthukisiwe

Informatec Digital » Izinsiza » Izingxabano zomshayeli ku-Windows: izimbangela, ukuxilongwa, kanye nezixazululo ezithuthukisiwe

Uma ulapha, kungenxa yokuthi ubhekene nezingxabano zabashayeli ku-Windows futhi awuqiniseki ukuthi uzoqala kuphi . Awuwedwa: abashayeli abahlulekayo ngemva kokubuyekezwa, amadivayisi ayeke ukusebenza ngokuzumayo, noma izikrini eziluhlaza okwesibhakabhaka ezibonakala zingenakuchazeka zivame kakhulu kumakhompyutha amaningi e-Windows 10 kanye ne-Windows 11… ngisho naku-Windows Server.

Izindaba ezinhle ukuthi uhlelo lunikeza amathuluzi amaningi, kusukela "okujwayelekile" kakhulu njenge-Device Manager noma i-troubleshooter , kuya kumasevisi athuthukile njenge -Driver Verifier , aklanyelwe abathuthukisi kanye nochwepheshe kodwa awusizo kakhulu ekutholeni abashayeli abaphikisanayo lapho ikhompyutha iba engazinzile.

Iyini ngempela i-driver ku-Windows futhi kungani ingadala inkinga engaka?

Ku-Windows, umshayeli "ungumhumushi" ovumela uhlelo lokusebenza ukuthi luxhumane nehadiwe noma izinsizakalo ezithile . Ngaphandle kwalo mshayeli, noma uma ephukile, ephelelwe yisikhathi, noma engahlelwanga kahle, izinkinga ziyaqala: kusukela kumakrofoni noma ikhamera engatholakali, kuya ekushayweni, ukuqala kabusha okungahleliwe, noma amaphutha esikrini esiluhlaza okwesibhakabhaka.

Ukuze uqonde ukuthi kungani ukungqubuzana komshayeli kungaphahlaza uhlelo lonke, kuyasiza ukuhlukanisa phakathi kwabashayeli be-kernel-mode kanye nabashayeli be-user-mode . Akubona bonke ababeka izinga elifanayo lengozi lapho izinto zihamba kabi.

Izinhlobo zabashayeli ku-Windows: i-kernel vs umsebenzisi

Abashayeli be-Kernel-mode basebenza ezingeni eliphansi kakhulu lesistimu. Banokufinyelela okuqondile kuhadiwe kanye nezinsizakusebenza ezibalulekile zesistimu yokusebenza: inkumbulo, izinqubo, ukuphepha, okokufaka/okukhiphayo, njll. Ungakucabanga ngokuthi "i-hard core" exhumana nekhadi lehluzo, ikhadi lomsindo, inethiwekhi, amadiski, njalo njalo.

Laba bashayeli bavame ukuhlelwa ngezendlalelo noma amazinga :

• I-Nivel iphezulu: ithola idatha evela kuzinhlelo zokusebenza, iyihlunge noma iyiguqule, bese iyidlulisela kumlawuli ophansi owazi idivayisi ebonakalayo.
• Izinga eliphakathi: abashayeli bekilasi (isb., amadiski abonakalayo) athembele kubashayeli bezinga eliphansi ukuxhumana nehadiwe.
• I-Nivel ephansi: umshayeli olawula ngqo idivayisi ebonakalayo, ngaphandle kokuthembela kwabanye.

Uma umshayeli wemodi ye-kernel engasebenzi kahle, umphumela ungaba ukuphahlazeka okuphelele, isikrini esiluhlaza okwesibhakabhaka, noma ukonakala kwedatha . Yingakho iMicrosoft ifaka amathuluzi athile okuqapha ukuziphatha kwabo, njenge-Driver Checker.

Ngakolunye uhlangothi, kukhona abashayeli bemodi yomsebenzisi . Laba basebenza esikhaleni somsebenzisi futhi bavame ukusebenza njengebhuloho phakathi kwezinhlelo zokusebenza ze-Win32, izinsizakalo zesistimu, kanye nabashayeli be-kernel. Uma enye yalezi yehluleka, uhlelo oluyisebenzisayo luvame ukuvala noma uzolahlekelwa ukusebenza, kodwa ngokomthetho, akufanele iphazamise lonke uhlelo. Kungenzeka kakhulu ukuthi babangele izinkinga ezifana nokuthi "iphrinta ayiphenduli" noma "igundane alinazo imisebenzi ethuthukisiwe" kunesikrini esiluhlaza okwesibhakabhaka sokufa.

Izinkinga ezijwayelekile zomshayeli ku-Windows nokuthi ungazibona kanjani

Ukungqubuzana kwabashayeli akubonakali ngaso sonke isikhathi. Ngezinye izikhathi uzobona isithonjana esivamile sonxantathu ophuzi ku-Device Manager , kodwa kwezinye izimo eziningi izimpawu zicashile kakhulu: umsindo ophambene, ukwehla kokusebenza, ukuphahlazeka okungahleliwe, ukuvela nokunyamalala kwamadivayisi, noma izinkinga ngama-hub e-USB.

Ezinye izimo ezivame kakhulu ezihlobene nabashayeli abadala noma abangahambisani yilezi:

• Abashayeli abangakabuyekezwa ngenguqulo yamanje ye-Windows, kodwa ozama ukuyifaka noma kunjalo.
• Abashayeli abangahambisani nohlelo olusanda kufakwa bese begcina bonakalisiwe noma beshintshiwe.
• Isofthiwe yokuphepha (i-antivirus, i-firewall) enquma ukuthi umshayeli uyasolisa futhi ayivimbe ngaphandle kwesixwayiso esiningi.
• Izibuyekezo ze-Windows ezizenzakalelayo ezithatha indawo yomshayeli osebenzayo nge-"general" enezici ezimbalwa noma izinkinga eziningi. Yihlole. Ukwehluleka kokuvuselelwa kweWindows.

Kukhona futhi amacala okutheleleka nge-malware ngqo , lapho ikhodi enonya ishintsha amafayela omshayeli noma ifaka abashayeli bayo ukuze bantshontshe uhlelo. Uma umshayeli onakele ngale ndlela, izimpawu zingase ziphazanyiswe nokwehluleka kwehadiwe.

I-Driver Verifier: ithuluzi elithuthukisiwe lokuzingela abashayeli abanenkinga

Uma usuvele uzame izixazululo ezijwayelekile futhi usathola amaphutha angajwayelekile, ukuphahlazeka, noma izikrini eziluhlaza okwesibhakabhaka ezibonakala zingahleliwe , yilapho i-Windows Driver Verifier iqala khona ukusebenza.

I-Driver Verifier iyithuluzi elifakiwe kuzo zonke izinguqulo zesimanje ze-Windows (kusukela ku-Windows 2000) futhi lisekelwa ku -Windows Server 2016, 2019, 2022, kanye no-2025. Inhloso yalo ukufaka iqembu labashayeli ezimweni ezimbi kakhulu ukuze bathole ukuziphatha okungalungile okungavamile ukungabonakali.

Isebenza nge -Verifier.exe , efakwe ku-%WinDir%\System32. Ungayisebenzisa nge-graphical interface (Driver Verifier Manager) noma ngomugqa womyalo. Kodwa-ke, udinga amalungelo omlawuli ukuze uyilungiselele, futhi uma isivuliwe, kufanele uqale kabusha ikhompyutha yakho ukuze iqale ukuhlola abashayeli abakhethiwe.

Yini ngempela ehlolwa yi-Driver Verifier?

Amandla e-Driver Verifier asemandleni ayo okuqapha izici eziningi zokuziphatha komshayeli . Amandla ayo ahlukaniswe "ngezinketho" noma "amafulegi" ongawasebenzisa kuye ngokuthi ufuna ukuhlolwa kube nolaka kangakanani.

Kukhona isethi ye izinketho ezijwayelekile Lena imithetho eyisisekelo okungafanele yephulwe umshayeli. Iyasebenza uma ukhetha ukucushwa okujwayelekile kusuka ku-GUI noma usebenzisa ipharamitha. /standard kulayini womyalo.

Ngaphezu kwalokho, kunezinhlobo eziningi zokuhlola okuzenzakalelayo ezihlala zisebenza kubalawuli abaqinisekiswayo, noma ngabe awukhethi lutho olunye. Lokhu kufaka phakathi:

• Ukuhlola kwe-IRQL: kuqinisekisa ukuthi umshayeli akashayi izingcingo emazingeni afanele okubalulekile.
• Ukulawula i-Spinlock: kuthola ukuthi i-spinlock ikhishwe kabili noma ukuthi i-lock itholakale/ikhishwe ku-IRQL engalungile.
• Ukuphathwa kwememori: kuqinisekiswa ukuthi ukwabiwa nokukhishwa kwememori enekhasi noma engekho enekhasi kwenziwa ku-IRQL efanele nokuthi izikhombisi ezingaqalwanga azisetshenziswa.
• Ukulanda umshayeli: Kuhlolwa ukuthi umshayeli akalandiwe ngenkathi esenemisebenzi elindile, njenge-DPC noma izintambo zomsebenzi.
• Ezinye izindlela zokuziphatha eziyingozi: njengokushintsha kwe-thread stack okungalungile, imisebenzi yokubiza ukulinda ku-IRQL >= DISPATCH_LEVEL, noma ukususa ukubhekisela ezintweni ngenani eliyi-zero reference.

Ngaphandle kwalokhu kuhlola okuyisisekelo, ungasebenzisa ezinye izinketho ezithile:

I-Special Pool : Izicelo eziningi zememori ezivela kumshayeli zigcwaliswa kusukela "echibini elikhethekile" eliqashwe kahle. Leli chibi lisetshenziselwa ukuthola ukugcwala, ukugeleza kwamanzi, kanye nokufinyelela kwememori ngemva kokuba imemori isikhululiwe.

Phoqelela ukuhlola kwe-IRQL : Lokhu kubeka ingcindezi enkulu kumshayeli ngokuvala ikhodi engasetshenziswa ekhasini. Uma izama ukufinyelela imemori ngaphakathi kwe-IRQL engafanele noma igcine izingidi, i-Driver Verifier izoyithola ngokushesha.

Ukulandelela I-Pool : Lokhu kuhlola ukuthi umshayeli uyayikhipha yini yonke imemori ayigcinayo lapho ekhipha i-oda. Kuyindlela eyinhloko yokuthola ukuvuza kwememori.

Ukuqinisekiswa kwe-I/O : Lo msebenzi unikeza ama-IRP omshayeli eqenjini elikhethekile futhi uqapha ukugeleza kwe-I/O, ukuthola ukusetshenziswa okungekho emthethweni noma okungahambisani kwemizila ye-I/O. Uma kutholakala ukwephulwa komthetho, ikhodi yephutha i-DRIVER_VERIFIER_IOMANAGER_VIOLATION (0xC9) ivame ukuboniswa.

Ukutholwa Kokunqamuka Komsebenzi : kuqapha ukusetshenziswa komshayeli kwezikhiye, ama-mutexe, kanye nama-mutexe asheshayo ukuze kubonwe ukuthi ikhodi yayo ingabangela yini ukunqamuka komsebenzi.

Ukuqinisekiswa Okuthuthukisiwe kwe-I/O : Kwengeza ukuhlolwa kokucindezeleka kuma-Plug and Play, Power, kanye nama-WMI IRP, kuqapha izingcingo ezahlukahlukene kuMphathi we-I/O.

Ukuhlolwa kwe-DMA : Kuqapha ukusetshenziswa kwezindlela zokufinyelela imemori ngqo (i-DMA), kuthola amaphutha ekusetshenzisweni kwama-buffer, ama-adapter, kanye namarejista emephu.

Ukuhlolwa kokuphepha : Bheka amaphutha avamile avula ubuthakathaka, njengezinkomba zamakheli emodi yomsebenzisi avela kukhodi yemodi ye-kernel.

Okunye ukuhlola : ukuhlola amaqembu ukuthola izimbangela ezivamile zezingozi zomshayeli, isibonelo, ukuphathwa kabi kwememori ekhishwe.

Ukuhlolwa kokuhambisana kwe-DDI : kusebenzisa isethi yemithetho yokuthi umshayeli kufanele asebenzisane kanjani nezixhumi ze-kernel. Ukwephulwa kwemithetho kutholwa ngelabhulali ye-VerifierExt.sys, ekugcineni edala ukuhlolwa kwephutha lapho omunye wale mithetho wephulwa.

Izinketho ezengeziwe kanye nezidingo ze-Driver Verifier

Ngaphezu kwezinketho ezijwayelekile, i-Driver Verifier ifaka phakathi amafulegi amaningi athuthukile ezimweni ezithile zokuhlola , njengokulingisa okungahleliwe kokuntuleka kwezinsizakusebenza, ukuphoqa ama-IRP alindile, noma ukwengeza ukubambezeleka okwenziwayo kuma-DDI athile ukuze kulingiswe izindawo zokucindezeleka okukhulu.

Ngokuphathelene nezidingo, okudingayo nje ukufakwa kwe-Windows (i-Windows Server 2012 noma kamuva ezindaweni zeseva) . Ingasetshenziswa kokubili ezinguqulweni zokuthengisa kanye nokwakhiwa kokuhlola. Kodwa-ke, kunesixwayiso esisodwa esiqondile: uma une-Norton Antivirus efakiwe, ukuvumela ukutholwa kwe -Driver Verifier's deadlock akukhuthazwa , njengoba lokhu kokubili kungaphazamisana.

Indlela yokuvula nokuphatha i-Driver Verifier (i-GUI ne-CMD)

Indlela enconywayo yokusebenza ne-Driver Verifier ukusebenzisa i-Driver Verifier Manager (verifier.exe ngaphandle kwamapharamitha) , ekhombisa i-GUI elula ye:

• Khetha ukuthi yimaphi abalawuli ofuna baqinisekiswe.
• Khetha ukuthi yiziphi izinhlobo zokuhlola okufanele zisetshenziswe.
• Buka izibalo zomhlaba wonke kanye nezibalo ngesilawuli.
• Lungisa izilungiselelo eziqhubekayo kanye nezilungiselelo eziguquguqukayo.

Kuthebhu ethi Isimo Somshayeli ungabona ukuthi yibaphi abashayeli abahlolwayo nokuthi isimo sabo siyini:

• Kulayishiwe: Umshayeli ulayishiwe okwamanje futhi ungaphansi kokuqinisekiswa.
• Okulandiwe: Akukalayishwa manje, kodwa sekulayishiwe kusukela ekuqalisweni kabusha kokugcina.
• Akukaze kulayishwe: akukalayishwa; kungase kubonise ifayela elikhohlakele, elingekho noma elibhekiselwe ngokungalungile.

Iphinde ikhombise ukuthi yiziphi izinhlobo zokuhlola ezisebenzayo futhi ibuyekeza ulwazi ngokuzenzakalelayo (ungashintshela kuzibuyekezo ezenziwe ngesandla noma ulungise isikhathi). Uma usebenzisa i-Special Pool futhi ngaphansi kuka-95% wezabelo ziphelela echibini elikhethekile, iphaneli ngokwayo ibonisa isexwayiso sokunciphisa inani labashayeli abaqinisekisiwe noma ukwandisa i-RAM ebonakalayo ukuze kube nokumbozwa okungcono.

Esigabeni se -Global Counters , uzobona amanani afingqa umsebenzi womhloli. I-counter engu-zero ivame ukukhombisa ukuthi ifulegi elihambisanayo alikasebenzi. Isibonelo, i-Other/Faults ku-0 isho ukuthi ukulingisa kwezinsiza eziphansi kukhutshaziwe.

Ikhasi Lokulandelela Iqembu linikeza izibalo ezijulile ezihlobene nalolo hlobo lomshayeli ngamunye: ukwabiwa kwamanje, amabhayithi agodliwe, ukuvuza okungenzeka, njll. Ukhetha umshayeli ohlwini, bese kuboniswa ama-counter akhe athile.

Kuthebhu ethi Izilungiselelo , unquma ukuthi yibaphi abashayeli abahlolwa nokuthi yimaphi amabhrendi. Umshayeli ngamunye angalungiselelwa kanje:

• Ukuhlola kuvuliwe.
• Isheke likhutshaziwe.
• Ukuhlola kuvuliwe (ukuqala kabusha kuyadingeka).
• Ukuhlola kukhutshaziwe (ukuqala kabusha kuyadingeka).

Ukusuka lapho ungavumela noma ukhubaze ukuqinisekiswa komshayeli oyedwa noma ngaphezulu , engeza amagama amasha efayela lomshayeli angakalayishwa (isibonelo, uma uzofaka idivayisi entsha) noma ukhethe inketho ethi "Hlola bonke abashayeli" ukuze uhambe ngendlela eluhlaza, yize lokhu kunconywa kuphela ezindaweni zokuhlola.

Kulelo windi elifanayo, ukhetha amabhokisi okuhlola ezinhlobo zokuqinisekisa (Ileveli 1 noma iLeveli 2 I/O, i-DMA, ama-deadlock, njll.). Kunezinkinobho ezimbili eziwusizo kakhulu:

• Ukucushwa okuthandwayo, okusebenzisa isethi yezinketho ezivamile zokuhlola okuvamile.
• Setha kabusha konke, esula noma yikuphi ukucushwa kwangaphambilini kwesiqinisekisi ukuze kushiye kukhutshaziwe.

Izinguquko kule thebhu zigcinwa ku- Windows Registry futhi zisebenza kuphela ngemva kokuqala kabusha.

Isigaba Sokucushwa Okuguquguqukayo sikuvumela ukuthi ushintshe amanye amafulegi asebenzayo ngokushesha, ngaphandle kokuqala kabusha, yize ungeke ukwazi ukushintsha uhlu lwabashayeli abangaphansi kokuqinisekiswa. Lokhu kuwusizo uma ufuna, isibonelo, ukwandisa noma ukunciphisa izinga lokucindezela kusilawuli ngesikhathi esithile.

Uma ukhetha umugqa womyalo, ungagijima verifier.exe /? Ukuze ubone zonke izinketho, kodwa nansi eminye yemisebenzi evamile:

• Lungiselela amafulegi:
  verifier.exe /flags 0xVALOR

Uphawu ngalunye lunenani le-hexadecimal. Phakathi kwezinto ezisetshenziswa kakhulu yilezi:

• 0x00000000: ukuhlola okuzenzakalelayo.
• 0x00000001: iqembu elikhethekile.
• 0x00000002: phoqa ukuhlola kwe-IRQL.
• 0x00000008: ukulandelela iqembu.
• 0x00000010: Ukuhlolwa kwe-I/O.
• 0x00000020: Ukutholwa kwe-Interlock.
• 0x00000080: Ukuhlolwa kwe-DMA.
• 0x00000100: ukuhlolwa kokuphepha.
• 0x00000800: "okunye" ukuhlola.
• 0x00020000: Ukuhlolwa kokuhambisana ne-DDI.

Kanye nezinye ezithuthukisiwe, njenge-0x00000004 (ukulingiswa kwemithombo ephansi), i-0x00000040 (ukuqinisekiswa kwe-I/O okuthuthukisiwe), i-0x00000200 (ama-IRP alindile ngamandla), i-0x00000400 (ukubhaliswa kwe-IRP), i-0x00002000 kanye ne-0x00004000 (ukuhlolwa kwe-MDL okungaguquki), noma ukubambezeleka okuhlobene ne-Power Framework.

Isibonelo, uma ufuna ukusebenzisa iqembu elikhethekile kuphela, ukuqinisekiswa kwe-I/O, kanye nokuhlolwa okuhlukahlukene, ungasebenzisa into elingana ne- 0x811 kumafulegi. Ukuze uthole ukucushwa okujwayelekile okuphelele, ungasebenzisa:

• verifier.exe /standard
• noma okunye verifier.exe /flags 0x209BB

Ukuze ucacise ukuthi yibaphi abashayeli okufanele ubahlole:

• verifier.exe /driver driver1.sys driver2.sys
• verifier.exe /all kubo bonke abashayeli besistimu.

Ukuze ushintshe amabhrendi ngokushesha bese wengeza isilawuli ohlwini ngaphandle kokuqala kabusha, ungasebenzisa imodi eguquguqukayo:

verifier.exe /volatile /flags 0xVALOR /adddriver MiDriver.sys

Futhi ukuhlola isimo samanje:

• verifier /query Ibonisa izibali kanye nesimo sesikhathi sangempela.
• verifier /querysettings Ifundisa ukuhleleka okuqhubekayo.
• verifier.exe /reset Susa zonke izilungiselelo bese ukhubaza i-checker.

Isiqinisekisi Somshayeli, Izikrini Eziluhlaza okwesibhakabhaka, kanye Nokulungisa Amaphutha

Ukuziphatha okulindelekile kwe-Driver Verifier lapho ithola ukwephulwa kwemithetho kuwukuthi ihlole amaphutha noma isikrini esiluhlaza okwesibhakabhaka ukuze ithwebule ulwazi oluningi ngangokunokwenzeka lokulungisa amaphutha. Uma ikhompyutha yakho ixhunywe ku-kernel debugger, izoma khona lapho yehluleka khona.

Phakathi kwamakhodi amaphutha avame kakhulu ozowabona ebangelwa yi-verifier yile:

• 0xC1: OKUKHETHEKILE_KWOKUDLA_KWAMAMEMORY_OKUKHOHLAKALA
• 0xC4: Ukwephulwa_komthetho_womshayeli_we-VERIFIER_DETECTED
• 0xC6: IDRIVER_CAUGHT_MODIFYING_FREE_POOL
• 0xC9: UKWELASHWA_KWE-DRIVER_VERIFIER_IOMANAGER
• 0xD6: Umshayeli_Ikhasi_Lephutha_Ngale_Konke_END_OF_ALLOCATION
• 0xE6: UKWELASHWA_KWE-DRIVER_VERIFIER_DMA

Isincomo lapho uvula iseshini yokulungisa amaphutha nge-WinDbg ukuqala ngokuthi !analyze -v, enikeza ukuhlaziywa okuningiliziwe kokwehluleka kanye nemizamo yokuhlonza umshayeli onecala.

I-Driver Verifier nayo inezandiso ezithile ze-debugger :

• !verifier: ilahla izibalo zamanje zomqinisekisi bese iyamukela !verifier -? ukuze ubhale izinketho.
• !deadlock: ibonisa ulwazi mayelana nokuvalwa okutholiwe (nge !deadlock -? usizo).
• !iovirp : ikhombisa imininingwane ye-IRP eqashwe ngokuqinisekiswa kwe-I/O.
• !ruleinfo : inikeza ulwazi mayelana nomthetho othize we-DDI ophuliwe (i-RuleID iyipharamitha yokuqala ye-bugcheck, ngefomethi engu-0x200nn).

Futhi kuthiwani ngabashayeli bezithombe?

Ama-driver ehluzo ze-kernel-mode ye-Windows (njenge-print noma i-display driver DLLs) anesici esisodwa esibalulekile: awabizi ngokuqondile imisebenzi yokwabiwa kwememori ye-kernel . Esikhundleni salokho, asebenzisa ama-callback e-DDI avela ku-Win32k.sys, njenge-EngAllocMem ukuthola imemori echibini, noma i-EngCreateBitmap, i-EngCreatePalette, njll., ephinde ibuyisele imemori yesistimu.

Ukuze kugcinwe ukuqinisekiswa okuzenzakalelayo kufana nokwabanye abashayeli, eminye imisebenzi ye-Driver Verifier ihlanganiswe ku- Win32k.sys . Kodwa-ke, njengoba abashayeli bezithombe belinganiselwe kakhulu, abadingi izinketho ezithile njengokuqinisekiswa kwe-IRQL noma ukuqinisekiswa kwe-I/O ngendlela efanayo. Okusebenzayo ukusetshenziswa kwe- pool ekhethekile, amaphutha angahleliwe ekwabiweni, kanye nokulandelela i-pool eziningi zalezi zingcingo ze-DDI.

Phakathi kwemisebenzi lapho amaphutha angahleliwe noma ukuhlolwa okwengeziwe kungaphoqeleka khona yile:

• I-EngAllocMem kanye ne-EngAllocUserMem.
• I-EngCreateBitmap, i-EngCreateDeviceSurface, i-EngCreateDeviceBitmap.
• I-EngCreatePalette, i-EngCreateClip, i-EngCreatePath, i-EngCreateWnd, i-EngCreateDriverObj.
• I-BRUSHOBJ_pvAllocRbrush, i-CLIPOBJ_ppoGetPath.

Ukusetshenziswa kwamachibi akhethekile kanye nokulandelela ichibi kusekelwa kakhulu ku-EngAllocMem. Ukusebenza kwe-Driver Verifier kubashayeli bezithombe Kwenziwa ngendlela efanayo naleyo eyenziwa yinoma yimuphi omunye umshayeli (ngokukhetha ifayela le-.sys elihambisanayo), futhi noma yimaphi amafulegi angasebenzi ayanakwa. Kusuka ku-debugger, ungahlola isimo se-graphics verifier ngomyalo. !gdikdx.verifier.

Nika amandla i-Driver Verifier kusuka ku-Registry (imodi ethuthukisiwe)

Ezimweni ezithile kakhulu, njengezindawo zokuhlola ezenzakalelayo noma ukuthuthukiswa komshayeli, kungenzeka ukuthi uvule i-Driver Verifier ngqo nge- Windows Registry . Lena akuyona indlela enconywayo kubasebenzisi abavamile, kodwa kufanelekile ukuyazi.

Inqubo eyisisekelo izoba:

1. Vula i-Registry Editor (Regedt32 noma regedit).
2. Zulazulela ku- HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\Memory Management\VerifyDrivers.
3. Hlela inani lohlobo lwe-REG_SZ ngamagama (angenandaba nobukhulu) abashayeli ofuna ukubaqinisekisa.

Ungabhala abashayeli abaningi abahlukaniswe ngezikhala, kodwa kuvamile ukusebenza nomshayeli oyedwa ukuze ugweme ukukhathala kwezinsizakusebenza . Uma ichibi lakho elitholakalayo linganele, ezinye izivivinyo zingase zingasetshenziswa, yize kungafanele ubhekane nezinkinga ezengeziwe zokuzinza.

Izibonelo zamanani avumelekile e-VerifyDrivers zizoba:

• Ntfs.sys
• Win32k.sys ftdisk.sys
• *.sys (kubo bonke abashayeli, yize lokhu kuyingozi kakhulu).

Izinga lokuqinisekisa lilawulwa kusukela kukhiye:

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\Memory Management\VerifyDriverLevel

okuyinani le-DWORD elinomphumela wokuhlanganisa amafulegi okuqinisekisa ofuna ukuwasebenzisa, njengasemugqeni womyalo.

Izinkinga zansuku zonke zomshayeli kanye nezixazululo ezisebenzayo ku-Windows

Ngaphandle kwamathuluzi athuthukile njenge-Driver Verifier, nsuku zonke uzosebenzisa kakhulu i-Device Manager, i-Windows Update, kanye namawebhusayithi omkhiqizi . Noma kunjalo, kuyasiza ukuba nemephu emfushane yengqondo yezinkinga ezivame kakhulu kanye nezixazululo zazo.

Amanye amaphutha avamile kakhulu lapho kufakwa noma kubuyekezwa abashayeli ku-Windows 10 kanye ne-Windows 11 yile:

• Umshayeli akaqedi ukufaka noma ukubonisa imiyalezo yamaphutha.
• Ngemva kokufaka umshayeli, idivayisi ayisasebenzi noma ayisebenzi ngamaphutha.
• I-Windows isebenzisa umshayeli ojwayelekile okhawulela imisebenzi ethuthukisiwe.
• Abashayeli ababili abahlukene bazama ukulawula idivayisi efanayo futhi baxabane.
• Umenzi akakayibuyekezi idrayivu yenguqulo yamanje ye-Windows.
• Isibuyekezo se-Windows sisusa umshayeli owulungisile kahle.

Ukulandelana okunengqondo kwezenzo eziningi zalezi zimo kuhilela:

• Buka isimo sedivayisi ku- Umlawuli wedivayisi (chofoza kwesokudla ku-Qala > Umphathi Wedivayisi).
• Zama kuqala nge “Buyekeza umshayeli > Sesha ngokuzenzakalelayo abashayeli”.
• Uma lokho kungasebenzi, landa umshayeli othize kusuka ku- iwebhusayithi esemthethweni yomenzi (imishini noma ingxenye) bese uyifaka ngesandla.
• Uma inkinga ivele ngemuva nje kokubuyekeza umshayeli, sebenzisa inketho "Reverse isilawuli" kuthebhu yoMlawuli yeZici Zedivayisi, noma nini lapho itholakala.

Uma izinto ziba nzima, kunezinsiza ezengeziwe eziningana:

Isixazululi sokuxazulula izinkinga zokuhambisana : Uma kukhona umshayeli omdala kuphela (isibonelo, we-Windows 7 noma 8) futhi uwudinga ku-Windows 10/11, ungazama ukuyifaka kwimodi yokuhambisana. Mayelana nesifaki somshayeli:

• Chofoza ngakwesokudla > “Ukuhambisana kokuxazulula izinkinga”.
• Khetha "Uhlelo lokuxazulula izinkinga".
• Khetha izinketho ezinjengokuthi “Uhlelo lusebenze ezinguqulweni zangaphambilini zeWindows kodwa manje ngeke lufake noma lusebenze” noma “Ngidinga izimvume ezengeziwe”.
• Khetha inguqulo endala ye-Windows owaziyo ukuthi iyasebenza, hlola uhlelo, bese ulondoloza izilungiselelo.

I-firewall kanye ne-antivirus : Uma usola ukuthi inkinga ivela ohlelweni lwakho lokuphepha, zikhubaze okwesikhashana (ngasinye ngesikhathi) ukuze uhlole ukuthi umshayeli ufaka noma usebenza kahle yini. Uma uthola ukuthi yizona ezibangela lokhu, hlola izibuyekezo kusofthiwe yakho ye-antivirus, engeza okukhishwe, noma, uma kudingeka, cabanga ngokushintshela kwesinye isisombululo sokuphepha.

Izinhlelo ezingahambisani zakamuva : Ngezinye izikhathi, isofthiwe esanda kufakwa ishintsha noma yonakalise umshayeli. Ungakwazi:

• Khipha lolo hlelo bese ubona ukuthi ingxabano iyanyamalala yini.
• Faka kabusha inguqulo yakamuva kusuka kuwebhusayithi esemthethweni.
• Faka kabusha abashayeli abathintekile kuwebhusayithi yomkhiqizi wedivayisi.

Hlanza i-Windows boot : Uma usola ukuphazamiseka okuvela kumasevisi noma izinhlelo zezinkampani zangaphandle, ungenza i -boot ehlanzekile (msconfig.msc, ufihle izinsizakalo zeMicrosoft, ukhubaze zonke ezinye izinsizakalo, bese uvala izinto zokuqala ku-Task Manager) bese uzama ukufaka noma ukulungisa ama-driver kule ndawo "encane", noma uqalise ku-Safe Mode ukuze uhlolwe kabanzi. Uma inkinga ixazululeka, uzokwazi ukuthi ingxenye yezinkampani zangaphandle ibangela inkinga.

Amadivayisi nabashayeli abafihliwe : Ku-Device Manager, vumela inketho ethi "Bonisa amadivayisi afihliwe" kumenyu ethi Buka ukuze uthole amadivayisi angavamile ukubonakala futhi abashayeli bawo abangase bonakale. Iningi lalawa lidinga ukulandwa ngesandla kusuka kuwebhusayithi yomkhiqizi.

I-Malware kanye nabashayeli abonakele : Ngaphambi kokuthi ucabange ukuthi "i-Windows iyaphambana," sebenzisa ukuskena okugcwele nge-Windows Defender noma uhlelo lwe-antivirus oludumile. Ngezinye izikhathi umshayeli onakele umane nje uyisiqalo seqhwa lokutheleleka okukhulu . Uma uhlelo lwakho seluhlanzekile, faka kabusha abashayeli abadingekayo.

Izibuyekezo zomshayeli kanye nokuphathwa: nini ukusebenzisa amathuluzi angaphandle

Ngaphezu kwe-Windows Update kanye nezinsiza ezisemthethweni (njenge-Intel Driver & Support Assistant, i-AMD Adrenalin, noma i-GeForce Experience), kunezinhlelo zezinkampani zangaphandle ezenzelwe ukuthola nokubuyekeza abashayeli ngobuningi . Aziyona ikhambi lazo zonke izinkinga, kodwa zingaba usizo ezimweni ezithile.

Isibonelo, i-Snappy Driver Installer inikeza inguqulo ye-Lite yamahhala, ephathekayo ongayisebenzisa kudrayivu ye-USB. Iskena ikhompyutha yakho, ithole abashayeli abaphelelwe yisikhathi, futhi ikuvumela ukuthi ulande futhi ufake izinguqulo ezintsha. Iwusizo kakhulu ekufometheni, kumakhompyutha angaxhunyiwe, noma lapho udinga ukubuyekeza imishini eminingi.

Amanye amathuluzi, njenge- Drive Talent , engeza isipele somshayeli futhi abuyisele izici , yize izinguqulo zawo ezigcwele zivame ukukhokhelwa. Amaphrojekthi afana ne -Driver Store Explorer athatha indlela ehlukile: akusiza ukuthi ubuke, uhlaziye, futhi uhlanze i-Windows Driver Store , ususe izinguqulo ezindala, abashayeli abayizintandane, noma amakhophi aphindaphindayo angasasetshenziswa.

Kuzo zonke izimo, kuyalulekwa ukuthatha izinyathelo ezimbalwa zokuqapha: sebenzisa njalo amawebhusayithi asemthethweni noma izindawo zokugcina ezithembekile (ikakhulukazi kumathuluzi omthombo ovulekile njenge-Driver Store Explorer ku-GitHub) futhi ugweme abafaki be-"magic driver" abagcwele i-adware noma i-malware ethembisa ukulungisa konke ngokuchofoza okukodwa.

Ngaphezu kwalokho, kuhlale kungumqondo omuhle ukugcina i-Microsoft Windows Update isebenza futhi ihlelwe kahle , uhlole ukuthi yimaphi abashayeli ongakhetha ukuwasebenzisa futhi uqinisekise ukuthi abashayeli ababalulekile owaziyo ukuthi basebenza kahle abashintshwa ngengozi.

Okokugcina, uma kukhulunywa ngemishini edumile (i-Lenovo, i-HP, ama-laptop e-Dell, njll.), ukusebenzisa amathuluzi omenzi kanye nokusekelwa kobuchwepheshe ngokuvamile kuyindlela engcono kakhulu uma usuqedile izixazululo ze-DIY. Ngezinye izikhathi kunezinguqulo zama-patch noma ze-beta zabashayeli abangahlinzeka ngabo kuphela.

Ngamafuphi, izingxabano zabashayeli ku-Windows ziyinkinga enzima, kodwa ngokuhlanganisa amathuluzi abasebenzisi (i-Device Manager, ama-troubleshooter, i-Windows Update), izinsiza zomkhiqizi , izinhlelo zangaphandle ezingathi sína, kanye, uma kudingeka, i-Driver Verifier ukuze ubeke abashayeli abasolisayo endaweni efanele , ungalungisa cishe noma iyiphi inkinga ngaphandle kokusebenzisa ukufometha okungenathemba.