360極速瀏覽器X64位卸載失敗的解決辦法
近期收到用戶反饋:
360極速瀏覽器X64位無法卸載,現(xiàn)象是卸載程序運(yùn)行中,然后消失了
經(jīng)過工程師排查:iaStorAfsServiceApi.dll模塊hook了64位的函數(shù)導(dǎo)致
卸載程序調(diào)用ShellExecuteEx(&sei),iaStorAfsServiceApi.dll會被加載,該模塊引入.net庫,.net庫加載clr.dll,clr.dll運(yùn)行異常導(dǎo)致卸載程序崩潰。
iaStorAfsServiceApi.dll模塊沒有hook了32位函數(shù)shellExecuteExA,所以32位的卸載程序沒有崩潰,不會出現(xiàn)此問題
C:\windows\System32\DriverStore\FileRepository\iastorpinningcomponent.inf_amd64_3ac2bcdab4798f10\iaStorAfsServiceApi.dll
該模塊的加載序列:
ModLoad: 00007ffe`3c380000 00007ffe`3c3e5000? ?C:\windows\SYSTEM32\mscoree.dll
ModLoad: 00007ffe`3bda0000 00007ffe`3be4a000? ?C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscoreei.dll
ModLoad: 00007ffe`57180000 00007ffe`57222000? ?C:\windows\SYSTEM32\sxs.dll
ModLoad: 00007ffe`3b0e0000 00007ffe`3bc15000? ?C:\Windows\Microsoft.NET\Framework64\v4.0.30319\clr.dll
ModLoad: 00007ffe`3aeb0000 00007ffe`3aec6000? ?C:\windows\SYSTEM32\VCRUNTIME140_CLR0400.dll
ModLoad: 00007ffe`3a610000 00007ffe`3a6cd000? ?C:\windows\SYSTEM32\ucrtbase_clr0400.dll
ModLoad: 00007ffe`38480000 00007ffe`385cf000? ?C:\Windows\Microsoft.NET\Framework64\v4.0.30319\clrjit.dll
ModLoad: 00007ffe`56c80000 00007ffe`56c98000? ?C:\windows\SYSTEM32\CRYPTSP.dll
ModLoad: 00007ffe`563a0000 00007ffe`563d4000? ?C:\windows\system32\rsaenh.dll
ModLoad: 00007ffe`1f250000 00007ffe`1f275000? ?C:\windows\System32\DriverStore\FileRepository\iastorpinningcomponent.inf_amd64_3ac2bcdab4798f10\iaStorAfsServiceApi.dll
解決辦法:
1、打開“設(shè)備管理器”(按Windows鍵+x)。
2、展開“軟件組件 ” 字段。右鍵單擊“Intel (R) Pinnning Shell Extensions ”,然后選擇“??卸載設(shè)備”。


https://bbs.#/thread-16082250-1-1.html