Ezheal

Uzman
Katılım
4 Ekim 2024
Mesajlar
24
Beğeniler
6
1 saat önce "KERNEL_SECURITY_CHECK_FAILURE" mavi ekranı aldım, az önce de oyun oynarken ekran karardı, reset attım düzeldi. Sabah M.2 SSD taktım ondan olabilir mi? Bu saate kadar hiçbir problem çıkarmadı, şimdi yapıyor.
Minidump dosyası:
 
Son düzenleme:
İki minidump dosyası da bellekleri gösteriyor. Özellikle ikinci minidump MODULE_NAME: hardware IMAGE_NAME: memory_corruption
diyor. Memtest86 ile bellekleri kontrol etmeniz gerekecek.




Kod:
3: kd> !analyze -v
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

KERNEL_SECURITY_CHECK_FAILURE (139)
A kernel component has corrupted a critical data structure.  The corruption
could potentially allow a malicious user to gain control of this machine.
Arguments:
Arg1: 0000000000000004, The thread's stack pointer was outside the legal stack
    extents for the thread.
Arg2: ffffda017ece0010, Address of the trap frame for the exception that caused the BugCheck
Arg3: ffffda017ecdff68, Address of the exception record for the exception that caused the BugCheck
Arg4: 0000000000000000, Reserved

Debugging Details:
------------------


KEY_VALUES_STRING: 1

    Key  : Analysis.CPU.mSec
    Value: 3781

    Key  : Analysis.Elapsed.mSec
    Value: 9743

    Key  : Analysis.IO.Other.Mb
    Value: 0

    Key  : Analysis.IO.Read.Mb
    Value: 0

    Key  : Analysis.IO.Write.Mb
    Value: 0

    Key  : Analysis.Init.CPU.mSec
    Value: 734

    Key  : Analysis.Init.Elapsed.mSec
    Value: 4462

    Key  : Analysis.Memory.CommitPeak.Mb
    Value: 94

    Key  : Analysis.Version.DbgEng
    Value: 10.0.27704.1001

    Key  : Analysis.Version.Description
    Value: 10.2408.27.01 amd64fre

    Key  : Analysis.Version.Ext
    Value: 1.2408.27.1

    Key  : Bugcheck.Code.LegacyAPI
    Value: 0x139

    Key  : Bugcheck.Code.TargetModel
    Value: 0x139

    Key  : FailFast.Name
    Value: INCORRECT_STACK

    Key  : FailFast.Type
    Value: 4

    Key  : Failure.Bucket
    Value: 0x139_MISSING_GSFRAME_nt!KiFastFailDispatch

    Key  : Failure.Hash
    Value: {1971a9b0-b7ec-89bf-0a51-10ac52818da5}

    Key  : Hypervisor.Enlightenments.Value
    Value: 77057948

    Key  : Hypervisor.Enlightenments.ValueHex
    Value: 497cf9c

    Key  : Hypervisor.Flags.AnyHypervisorPresent
    Value: 1

    Key  : Hypervisor.Flags.ApicEnlightened
    Value: 1

    Key  : Hypervisor.Flags.ApicVirtualizationAvailable
    Value: 0

    Key  : Hypervisor.Flags.AsyncMemoryHint
    Value: 0

    Key  : Hypervisor.Flags.CoreSchedulerRequested
    Value: 0

    Key  : Hypervisor.Flags.CpuManager
    Value: 1

    Key  : Hypervisor.Flags.DeprecateAutoEoi
    Value: 0

    Key  : Hypervisor.Flags.DynamicCpuDisabled
    Value: 1

    Key  : Hypervisor.Flags.Epf
    Value: 0

    Key  : Hypervisor.Flags.ExtendedProcessorMasks
    Value: 1

    Key  : Hypervisor.Flags.HardwareMbecAvailable
    Value: 1

    Key  : Hypervisor.Flags.MaxBankNumber
    Value: 0

    Key  : Hypervisor.Flags.MemoryZeroingControl
    Value: 0

    Key  : Hypervisor.Flags.NoExtendedRangeFlush
    Value: 0

    Key  : Hypervisor.Flags.NoNonArchCoreSharing
    Value: 1

    Key  : Hypervisor.Flags.Phase0InitDone
    Value: 1

    Key  : Hypervisor.Flags.PowerSchedulerQos
    Value: 0

    Key  : Hypervisor.Flags.RootScheduler
    Value: 0

    Key  : Hypervisor.Flags.SynicAvailable
    Value: 1

    Key  : Hypervisor.Flags.UseQpcBias
    Value: 0

    Key  : Hypervisor.Flags.Value
    Value: 4853999

    Key  : Hypervisor.Flags.ValueHex
    Value: 4a10ef

    Key  : Hypervisor.Flags.VpAssistPage
    Value: 1

    Key  : Hypervisor.Flags.VsmAvailable
    Value: 1

    Key  : Hypervisor.RootFlags.AccessStats
    Value: 1

    Key  : Hypervisor.RootFlags.CrashdumpEnlightened
    Value: 1

    Key  : Hypervisor.RootFlags.CreateVirtualProcessor
    Value: 1

    Key  : Hypervisor.RootFlags.DisableHyperthreading
    Value: 0

    Key  : Hypervisor.RootFlags.HostTimelineSync
    Value: 1

    Key  : Hypervisor.RootFlags.HypervisorDebuggingEnabled
    Value: 0

    Key  : Hypervisor.RootFlags.IsHyperV
    Value: 1

    Key  : Hypervisor.RootFlags.LivedumpEnlightened
    Value: 1

    Key  : Hypervisor.RootFlags.MapDeviceInterrupt
    Value: 1

    Key  : Hypervisor.RootFlags.MceEnlightened
    Value: 1

    Key  : Hypervisor.RootFlags.Nested
    Value: 0

    Key  : Hypervisor.RootFlags.StartLogicalProcessor
    Value: 1

    Key  : Hypervisor.RootFlags.Value
    Value: 1015

    Key  : Hypervisor.RootFlags.ValueHex
    Value: 3f7

    Key  : Stack.Pointer
    Value: PRCBException

    Key  : WER.OS.Branch
    Value: vb_release

    Key  : WER.OS.Version
    Value: 10.0.19041.1


BUGCHECK_CODE:  139

BUGCHECK_P1: 4

BUGCHECK_P2: ffffda017ece0010

BUGCHECK_P3: ffffda017ecdff68

BUGCHECK_P4: 0

FILE_IN_CAB:  1.dmp

FAULTING_THREAD:  ffff9a853d6b7080

TRAP_FRAME:  ffffda017ece0010 -- (.trap 0xffffda017ece0010)
NOTE: The trap frame does not contain all registers.
Some register values may be zeroed or incorrect.
rax=ffff988b75099000 rbx=0000000000000000 rcx=0000000000000004
rdx=ffff988b750a0000 rsi=0000000000000000 rdi=0000000000000000
rip=fffff80351865865 rsp=ffffda017ece01a0 rbp=ffffda017ece0710
 r8=ffff988b750a0000  r9=ffffda017ece0728 r10=ffff988b7509f480
r11=0000000000000000 r12=0000000000000000 r13=0000000000000000
r14=0000000000000000 r15=0000000000000000
iopl=0         nv up ei pl zr na po nc
nt!RtlpGetStackLimitsEx+0x178015:
fffff803`51865865 cd29            int     29h
Resetting default scope

EXCEPTION_RECORD:  ffffda017ecdff68 -- (.exr 0xffffda017ecdff68)
ExceptionAddress: fffff80351865865 (nt!RtlpGetStackLimitsEx+0x0000000000178015)
   ExceptionCode: c0000409 (Security check failure or stack buffer overrun)
  ExceptionFlags: 00000001
NumberParameters: 1
   Parameter[0]: 0000000000000004
Subcode: 0x4 FAST_FAIL_INCORRECT_STACK

PROCESS_NAME:  AnimazeDesktop.exe

ERROR_CODE: (NTSTATUS) 0xc0000409 - Sistem, bu uygulamada y   n tabanl  bir arabelle in ta t   n  alg lad . Bu ta ma, k t  niyetli bir kullan c n n bu uygulaman n denetimini ele ge irmesine olanak verebilir.

EXCEPTION_CODE_STR:  c0000409

EXCEPTION_PARAMETER1:  0000000000000004

EXCEPTION_STR:  0xc0000409

STACK_TEXT:
ffffda01`7ecdfce8 fffff803`51812da9     : 00000000`00000139 00000000`00000004 ffffda01`7ece0010 ffffda01`7ecdff68 : nt!KeBugCheckEx
ffffda01`7ecdfcf0 fffff803`51813350     : 00000000`00000000 00000000`00000000 00000001`ffffffff fffffff6`00000020 : nt!KiBugCheckDispatch+0x69
ffffda01`7ecdfe30 fffff803`518111f2     : ffffda01`7ece07c0 00000000`00000000 ffffda01`7ecdfa60 00000000`00000000 : nt!KiFastFailDispatch+0xd0
ffffda01`7ece0010 fffff803`51865865     : 000000a4`badfe860 00007ffd`69c502df ffffda01`7ece0710 00000000`00000000 : nt!KiRaiseSecurityCheckFailure+0x332
ffffda01`7ece01a0 fffff803`51865f21     : ffffda01`7ece0710 00000000`00000000 ffff988b`7509f480 fffff803`00000003 : nt!RtlpGetStackLimitsEx+0x178015
ffffda01`7ece01d0 fffff803`51739536     : ffff988b`7509eac8 ffffda01`7ece0e20 ffff988b`7509eac8 00000000`00000000 : nt!RtlDispatchException+0x177821
ffffda01`7ece08f0 fffff803`517ff6e2     : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiDispatchException+0x186
ffffda01`7ece0fb0 fffff803`517ff6b0     : fffff803`51812ee5 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KxExceptionDispatchOnExceptionStack+0x12
ffff988b`7509e988 fffff803`51812ee5     : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiExceptionDispatchOnExceptionStackContinue
ffff988b`7509e990 00000000`00000000     : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiExceptionDispatch+0x125


SYMBOL_NAME:  nt!KiFastFailDispatch+d0

MODULE_NAME: nt

IMAGE_NAME:  ntkrnlmp.exe

IMAGE_VERSION:  10.0.19041.5129

STACK_COMMAND:  .process /r /p 0xffff9a8538d94340; .thread 0xffff9a853d6b7080 ; kb

BUCKET_ID_FUNC_OFFSET:  d0

FAILURE_BUCKET_ID:  0x139_MISSING_GSFRAME_nt!KiFastFailDispatch

OS_VERSION:  10.0.19041.1

BUILDLAB_STR:  vb_release

OSPLATFORM_TYPE:  x64

OSNAME:  Windows 10

FAILURE_ID_HASH:  {1971a9b0-b7ec-89bf-0a51-10ac52818da5}

Followup:     MachineOwner
---------

Kod:
4: kd> !analyze -v
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

MEMORY_MANAGEMENT (1a)
    # Any other values for parameter 1 must be individually examined.
Arguments:
Arg1: 0000000000041792, A corrupt PTE has been detected. Parameter 2 contains the address of
    the PTE. Parameters 3/4 contain the low/high parts of the PTE.
Arg2: ffff858133522940
Arg3: 0000000000000010
Arg4: 0000000000000000

Debugging Details:
------------------


KEY_VALUES_STRING: 1

    Key  : Analysis.CPU.mSec
    Value: 3546

    Key  : Analysis.Elapsed.mSec
    Value: 3548

    Key  : Analysis.IO.Other.Mb
    Value: 0

    Key  : Analysis.IO.Read.Mb
    Value: 0

    Key  : Analysis.IO.Write.Mb
    Value: 0

    Key  : Analysis.Init.CPU.mSec
    Value: 640

    Key  : Analysis.Init.Elapsed.mSec
    Value: 2273

    Key  : Analysis.Memory.CommitPeak.Mb
    Value: 84

    Key  : Analysis.Version.DbgEng
    Value: 10.0.27704.1001

    Key  : Analysis.Version.Description
    Value: 10.2408.27.01 amd64fre

    Key  : Analysis.Version.Ext
    Value: 1.2408.27.1

    Key  : Bugcheck.Code.LegacyAPI
    Value: 0x1a

    Key  : Bugcheck.Code.TargetModel
    Value: 0x1a

    Key  : Failure.Bucket
    Value: MEMORY_CORRUPTION_ONE_BIT

    Key  : Failure.Hash
    Value: {e3faf315-c3d0-81db-819a-6c43d23c63a7}

    Key  : Hypervisor.Enlightenments.Value
    Value: 77057948

    Key  : Hypervisor.Enlightenments.ValueHex
    Value: 497cf9c

    Key  : Hypervisor.Flags.AnyHypervisorPresent
    Value: 1

    Key  : Hypervisor.Flags.ApicEnlightened
    Value: 1

    Key  : Hypervisor.Flags.ApicVirtualizationAvailable
    Value: 0

    Key  : Hypervisor.Flags.AsyncMemoryHint
    Value: 0

    Key  : Hypervisor.Flags.CoreSchedulerRequested
    Value: 0

    Key  : Hypervisor.Flags.CpuManager
    Value: 1

    Key  : Hypervisor.Flags.DeprecateAutoEoi
    Value: 0

    Key  : Hypervisor.Flags.DynamicCpuDisabled
    Value: 1

    Key  : Hypervisor.Flags.Epf
    Value: 0

    Key  : Hypervisor.Flags.ExtendedProcessorMasks
    Value: 1

    Key  : Hypervisor.Flags.HardwareMbecAvailable
    Value: 1

    Key  : Hypervisor.Flags.MaxBankNumber
    Value: 0

    Key  : Hypervisor.Flags.MemoryZeroingControl
    Value: 0

    Key  : Hypervisor.Flags.NoExtendedRangeFlush
    Value: 0

    Key  : Hypervisor.Flags.NoNonArchCoreSharing
    Value: 1

    Key  : Hypervisor.Flags.Phase0InitDone
    Value: 1

    Key  : Hypervisor.Flags.PowerSchedulerQos
    Value: 0

    Key  : Hypervisor.Flags.RootScheduler
    Value: 0

    Key  : Hypervisor.Flags.SynicAvailable
    Value: 1

    Key  : Hypervisor.Flags.UseQpcBias
    Value: 0

    Key  : Hypervisor.Flags.Value
    Value: 4853999

    Key  : Hypervisor.Flags.ValueHex
    Value: 4a10ef

    Key  : Hypervisor.Flags.VpAssistPage
    Value: 1

    Key  : Hypervisor.Flags.VsmAvailable
    Value: 1

    Key  : Hypervisor.RootFlags.AccessStats
    Value: 1

    Key  : Hypervisor.RootFlags.CrashdumpEnlightened
    Value: 1

    Key  : Hypervisor.RootFlags.CreateVirtualProcessor
    Value: 1

    Key  : Hypervisor.RootFlags.DisableHyperthreading
    Value: 0

    Key  : Hypervisor.RootFlags.HostTimelineSync
    Value: 1

    Key  : Hypervisor.RootFlags.HypervisorDebuggingEnabled
    Value: 0

    Key  : Hypervisor.RootFlags.IsHyperV
    Value: 1

    Key  : Hypervisor.RootFlags.LivedumpEnlightened
    Value: 1

    Key  : Hypervisor.RootFlags.MapDeviceInterrupt
    Value: 1

    Key  : Hypervisor.RootFlags.MceEnlightened
    Value: 1

    Key  : Hypervisor.RootFlags.Nested
    Value: 0

    Key  : Hypervisor.RootFlags.StartLogicalProcessor
    Value: 1

    Key  : Hypervisor.RootFlags.Value
    Value: 1015

    Key  : Hypervisor.RootFlags.ValueHex
    Value: 3f7

    Key  : MemoryManagement.PFN
    Value: 0

    Key  : WER.OS.Branch
    Value: vb_release

    Key  : WER.OS.Version
    Value: 10.0.19041.1


BUGCHECK_CODE:  1a

BUGCHECK_P1: 41792

BUGCHECK_P2: ffff858133522940

BUGCHECK_P3: 10

BUGCHECK_P4: 0

FILE_IN_CAB:  2.dmp

FAULTING_THREAD:  ffff8c854ac31640

MEMORY_CORRUPTOR:  ONE_BIT

PROCESS_NAME:  steamwebhelper.exe

STACK_TEXT:
ffffef80`ff42e738 fffff801`0a89fa0a     : 00000000`0000001a 00000000`00041792 ffff8581`33522940 00000000`00000010 : nt!KeBugCheckEx
ffffef80`ff42e740 fffff801`0a837d56     : 00000000`00000000 ffff8c85`3f3d49c0 00000000`0000000c ffff8581`33522940 : nt!MiDeleteVa+0x153a
ffffef80`ff42e840 fffff801`0a837e6b     : ffff85c2`c099a910 ffff8c85`3f3d49c0 ffffef80`00000000 ffffef80`ff42ecb0 : nt!MiWalkPageTablesRecursively+0x776
ffffef80`ff42e8e0 fffff801`0a837e6b     : ffff85c2`e1604cd0 ffff8c85`3f3d49c0 ffffef80`00000001 ffffef80`ff42ecc0 : nt!MiWalkPageTablesRecursively+0x88b
ffffef80`ff42e980 fffff801`0a837e6b     : ffff85c2`e1604000 ffff8c85`3f3d49c0 ffffef80`00000002 ffffef80`ff42ecd0 : nt!MiWalkPageTablesRecursively+0x88b
ffffef80`ff42ea20 fffff801`0a834e6b     : 00000000`00000000 ffff8c85`3f3d49c0 00000000`00000003 ffffef80`ff42ece0 : nt!MiWalkPageTablesRecursively+0x88b
ffffef80`ff42eac0 fffff801`0a89e2a1     : ffffef80`ff42ec60 ffff8c85`00000000 ffff8581`00000002 00000000`00000000 : nt!MiWalkPageTables+0x36b
ffffef80`ff42ebc0 fffff801`0a847fa8     : 00000000`00000001 ffff8c85`00000000 ffff8c85`3f3d4810 ffff8c85`4ac31640 : nt!MiDeletePagablePteRange+0x4f1
ffffef80`ff42eed0 fffff801`0ac54779     : 00000000`00000000 00000000`00000000 00000000`00000000 ffff8c85`3f3d4340 : nt!MiDeleteVad+0x378
ffffef80`ff42efd0 fffff801`0ac53358     : ffff8c85`4cb09380 ffff8c85`36727a20 ffff8c85`4ac31640 00000000`00000000 : nt!MiUnmapVad+0x49
ffffef80`ff42f000 fffff801`0ac46b83     : ffff8c85`4cb09240 ffff8c85`4cb09240 ffff8c85`4cb09380 ffff8c85`3f3d4340 : nt!MiCleanVad+0x30
ffffef80`ff42f030 fffff801`0accfa50     : ffffffff`00000000 ffffffff`ffffffff 00000000`00000001 ffff8c85`3f3d4340 : nt!MmCleanProcessAddressSpace+0x137
ffffef80`ff42f0b0 fffff801`0ac4ec12     : ffff8c85`3f3d4340 ffffdb8a`38a93060 ffffef80`ff42f2d9 00000000`00000000 : nt!PspRundownSingleProcess+0x20c
ffffef80`ff42f140 fffff801`0ac4d698     : ffff8c85`00000000 fffff801`0a854d01 00004001`00000004 000000db`cf0e2000 : nt!PspExitThread+0x5f6
ffffef80`ff42f240 fffff801`0a81b25d     : ffff8c85`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSchedulerApcTerminate+0x38
ffffef80`ff42f280 fffff801`0aa03c20     : 00000000`00000000 ffffef80`ff42f340 ffffef80`ff42f480 7fffffff`ffffffff : nt!KiDeliverApc+0x60d
ffffef80`ff42f340 fffff801`0aa125af     : 00000ba8`00401060 ffffef80`ff42f500 00000000`00000000 00000000`00000000 : nt!KiInitiateUserApc+0x70
ffffef80`ff42f480 00007ffe`1beed574     : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSystemServiceExit+0x9f
000000db`cf7ff9c8 00000000`00000000     : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x00007ffe`1beed574


MODULE_NAME: hardware

IMAGE_NAME:  memory_corruption

STACK_COMMAND:  .process /r /p 0xffff8c853f3d4340; .thread 0xffff8c854ac31640 ; kb

FAILURE_BUCKET_ID:  MEMORY_CORRUPTION_ONE_BIT

OS_VERSION:  10.0.19041.1

BUILDLAB_STR:  vb_release

OSPLATFORM_TYPE:  x64

OSNAME:  Windows 10

FAILURE_ID_HASH:  {e3faf315-c3d0-81db-819a-6c43d23c63a7}

Followup:     MachineOwner
 
Son düzenleme: