Bir şey, yürütülemeyen bir sayfanın içinde bazı kodları yürütmeye çalıştığı için sistem çöküyor.
[CODE highlight="7"]ATTEMPTED_EXECUTE_OF_NOEXECUTE_MEMORY (fc)
An attempt was made to execute non-executable memory. The guilty driver
is on the stack trace (and is typically the current instruction pointer).
When possible, the guilty driver's name is printed on
the BugCheck screen and saved in KiBugCheckDriver.
Arguments:
Arg1: ffff8c0cb3f27010, Virtual address for the attempted execute.
Arg2: 8a00000140c009e3, PTE contents. <------
Arg3: ffffac03ce62f9a0, (reserved)
Arg4: 0000000000000003, (reserved)
[/CODE]
Büyük sayfaların kendileriyle ilişkili tablo girdileri yoktur, bu nedenle bunun yerine dizin girdilerini kontrol etmemiz gerekiyor. Çalıştırılabilir bitinin nasıl temiz olduğuna dikkat ettin mi? Bu nedenle PageFault ortaya çıkıyor ve ardından NX hata kontrolü yapılıyor ve sistem çöküyor..
Kod:
1: kd> !pte ffff8c0cb3f27010
VA ffff8c0cb3f27010
PXE at FFFFF8FC7E3F18C0 PPE at FFFFF8FC7E318190 PDE at FFFFF8FC63032CF8 PTE at FFFFF8C60659F938
contains 0A0000000558A863 contains 0A00000004F8D863 contains 8A00000140C009E3 contains 0000000000000000
pfn 558a ---DA--KWEV pfn 4f8d ---DA--KWEV pfn 140c00 -GLDA--KW-V LARGE PAGE pfn 140d27
Bahsettiğin sürücü Vanguard değil de -RzCommon.sys & RzDev_0084.sys- büyük olasılıkla Razer fare sürücüleri olacaktır.
[CODE title="Dizin" highlight="8,13"]0xffffac03ce62f998 : 0xfffff80251a0dc6d : nt!KiPageFault+0x36d
0xffffac03ce62f7f8 : 0xfffff8025181c35f : nt!MmAccessFault+0x4ef
0xffffac03ce62f8d0 : 0xffffac03ce62f9a0 : 0xfffff8024f48129b : WppRecorder!WppAutoLogTrace+0x16b
0xffffac03ce62f980 : 0xfffff80260fd2285 : ucx01000!RootHub_Pdo_EvtInternalDeviceControlIrpPreprocessCallback+0xb5
0xffffac03ce62f998 : 0xfffff80251a0dc6d : nt!KiPageFault+0x36db
0xffffac03ce62f9b8 : 0xfffff80251a05c13 : nt!KiIpiInterrupt+0x323
Unable to load image RzDev_0084.sys, Win32 error 0n2
*** WARNING: Unable to verify timestamp for RzDev_0084.sys
[...]
0xffffac03ce62fa90 : 0xfffff802617d5073 : mouclass!MouseClassServiceCallback+0x493
0xffffac03ce62fb48 : 0xfffff80260fd2285 : ucx01000!RootHub_Pdo_EvtInternalDeviceControlIrpPreprocessCallback+0xb5
Unable to load image RzCommon.sys, Win32 error 0n2
*** WARNING: Unable to verify timestamp for RzCommon.sys
0xffffac03ce62ff88 : 0xfffff8027da8c008 : usbccgp!WPP_RECORDER_INITIALIZED
[...]
0xffffac03ce630348 : 0xfffff802617b3aa7 : mouhid!MouHid_ReadComplete+0x757
[...]
0xffffac03ce630898 : 0xfffff80260f3c1ec : USBXHCI!Bulk_Transfer_CompleteCancelable+0xc8
0xffffac03ce6308f8 : 0xfffff80260f3c0b1 : USBXHCI!Bulk_ProcessTransferEventWithED1+0x1fd
0xffffac03ce6309a8 : 0xfffff80260f3bea0 : USBXHCI!Bulk_EP_TransferEventHandler+0x10
0xffffac03ce6309d0 : 0xfffff80260f3be90 : USBXHCI!Bulk_EP_TransferEventHandler
0xffffac03ce6309d8 : 0xfffff80260f36910 : USBXHCI!Endpoint_TransferEventHandler+0xb0
0xffffac03ce630a38 : 0xfffff80260f36445 : USBXHCI!Interrupter_DeferredWorkProcessor+0x315
[...]
0xffffac03ce630fa8 : 0xfffff80251a063a5 : nt!KxRetireDpcList+0x5
[/CODE]
Bu hata, bu dosya için geçerli.
drive.google.com
