TRAP_FRAME: ffffab8c1d9413a0 -- (.trap 0xffffab8c1d9413a0)
NOTE: The trap frame does not contain all registers.
Some register values may be zeroed or incorrect.
rax=00000000fffffffe rbx=0000000000000000 rcx=0000000000000000
rdx=0000000070536f49 rsi=0000000000000000 rdi=0000000000000000
rip=fffff8027443d7a6 rsp=ffffab8c1d941530 rbp=ffff9b0772357480
r8=0000000000000000 r9=0000000000000010 r10=00000000ffffffff
r11=000000000000006b r12=0000000000000000 r13=0000000000000000
r14=0000000000000000 r15=0000000000000000
iopl=0 nv up ei pl zr na po nc
nt!ObfDereferenceObjectWithTag+0x26:
fffff802`7443d7a6 f0480fc15ed0 lock xadd qword ptr [rsi-30h],rbx ds:ffffffff`ffffffd0=????????????????
Resetting default scope
encyclopedia.kaspersky.com
1: kd> lmvmnvlddmkm
Browse full module list
start end module name
fffff802`907d0000 fffff802`94226000 nvlddmkm T (no symbols)
Loaded symbol image file: nvlddmkm.sys
Image path: \SystemRoot\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_618b150331c5f4ad\nvlddmkm.sys
Image name: nvlddmkm.sys
Browse all global symbols functions data
Timestamp: Fri Mar 1 20:55:35 2024 (65E21697)
CheckSum: 0393217E
ImageSize: 03A56000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
techolay.net
Rehber: Google Drive'da Herkese Açık Dosya Nasıl Paylaşılır?
Google Drive'da dosya paylaşım ayarlarını yapmadığınız takdirde paylaştığınız dosyalar erişim izni isteyecektir. Misal: https://drive.google.com/file/d/1YNgAatolnhlNCPATogsjaCk7AfsbMNIq/view?usp=drive_link Bu durumla karşılaşmamak için dosyaya sağ tıklayıp "Paylaş" seçeneğini seçtikten sonra...
drive.google.com
TRAP_FRAME: ffffab8c1d9413a0 -- (.trap 0xffffab8c1d9413a0)
NOTE: The trap frame does not contain all registers.
Some register values may be zeroed or incorrect.
rax=00000000fffffffe rbx=0000000000000000 rcx=0000000000000000
rdx=0000000070536f49 rsi=0000000000000000 rdi=0000000000000000
rip=fffff8027443d7a6 rsp=ffffab8c1d941530 rbp=ffff9b0772357480
r8=0000000000000000 r9=0000000000000010 r10=00000000ffffffff
r11=000000000000006b r12=0000000000000000 r13=0000000000000000
r14=0000000000000000 r15=0000000000000000
iopl=0 nv up ei pl zr na po nc
nt!ObfDereferenceObjectWithTag+0x26:
fffff802`7443d7a6 f0480fc15ed0 lock xadd qword ptr [rsi-30h],rbx ds:ffffffff`ffffffd0=????????????????
Resetting default scope1: kd> lmvmnvlddmkm
Browse full module list
start end module name
fffff802`907d0000 fffff802`94226000 nvlddmkm T (no symbols)
Loaded symbol image file: nvlddmkm.sys
Image path: \SystemRoot\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_618b150331c5f4ad\nvlddmkm.sys
Image name: nvlddmkm.sys
Browse all global symbols functions data
Timestamp: Fri Mar 1 20:55:35 2024 (65E21697)
CheckSum: 0393217E
ImageSize: 03A56000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:Kod:TRAP_FRAME: ffffab8c1d9413a0 -- (.trap 0xffffab8c1d9413a0) NOTE: The trap frame does not contain all registers. Some register values may be zeroed or incorrect. rax=00000000fffffffe rbx=0000000000000000 rcx=0000000000000000 rdx=0000000070536f49 rsi=0000000000000000 rdi=0000000000000000 rip=fffff8027443d7a6 rsp=ffffab8c1d941530 rbp=ffff9b0772357480 r8=0000000000000000 r9=0000000000000010 r10=00000000ffffffff r11=000000000000006b r12=0000000000000000 r13=0000000000000000 r14=0000000000000000 r15=0000000000000000 iopl=0 nv up ei pl zr na po nc nt!ObfDereferenceObjectWithTag+0x26: fffff802`7443d7a6 f0480fc15ed0 lock xadd qword ptr [rsi-30h],rbx ds:ffffffff`ffffffd0=???????????????? Resetting default scope
Basitçe anlatıyorum, bir nesnenin referansını kaldırırken mevzu patlıyor, zaten kullanılmış olan bir belleğe erişiyor ve sistemde güvenlik açığı yaratıyor. Bu da sistemin çökmesine yol açıyor. Suçlu Kaspersky ve bununla alakalı bir açıklamaları da var:
What is Use-After-Free?
Definition: UAF refers to incorrect use of dynamic memory during program operation.
Kaldır bu uygulamayı. Ekran kartı sürücünü de güncelle.
Kod:1: kd> lmvmnvlddmkm Browse full module list start end module name fffff802`907d0000 fffff802`94226000 nvlddmkm T (no symbols) Loaded symbol image file: nvlddmkm.sys Image path: \SystemRoot\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_618b150331c5f4ad\nvlddmkm.sys Image name: nvlddmkm.sys Browse all global symbols functions data Timestamp: Fri Mar 1 20:55:35 2024 (65E21697) CheckSum: 0393217E ImageSize: 03A56000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 Information from resource tables:
Kod:TRAP_FRAME: ffffab8c1d9413a0 -- (.trap 0xffffab8c1d9413a0) NOTE: The trap frame does not contain all registers. Some register values may be zeroed or incorrect. rax=00000000fffffffe rbx=0000000000000000 rcx=0000000000000000 rdx=0000000070536f49 rsi=0000000000000000 rdi=0000000000000000 rip=fffff8027443d7a6 rsp=ffffab8c1d941530 rbp=ffff9b0772357480 r8=0000000000000000 r9=0000000000000010 r10=00000000ffffffff r11=000000000000006b r12=0000000000000000 r13=0000000000000000 r14=0000000000000000 r15=0000000000000000 iopl=0 nv up ei pl zr na po nc nt!ObfDereferenceObjectWithTag+0x26: fffff802`7443d7a6 f0480fc15ed0 lock xadd qword ptr [rsi-30h],rbx ds:ffffffff`ffffffd0=???????????????? Resetting default scope
Basitçe anlatıyorum, bir nesnenin referansını kaldırırken mevzu patlıyor, zaten kullanılmış olan bir belleğe erişiyor ve sistemde güvenlik açığı yaratıyor. Bu da sistemin çökmesine yol açıyor. Suçlu Kaspersky tabii burada. Ayrıca bununla alakalı bir güzel anlatıları da var:
What is Use-After-Free?
Definition: UAF refers to incorrect use of dynamic memory during program operation.
Kaldır bu uygulamayı. Ekran kartı sürücünü de güncelle.
Kod:1: kd> lmvmnvlddmkm Browse full module list start end module name fffff802`907d0000 fffff802`94226000 nvlddmkm T (no symbols) Loaded symbol image file: nvlddmkm.sys Image path: \SystemRoot\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_618b150331c5f4ad\nvlddmkm.sys Image name: nvlddmkm.sys Browse all global symbols functions data Timestamp: Fri Mar 1 20:55:35 2024 (65E21697) CheckSum: 0393217E ImageSize: 03A56000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 Information from resource tables:
?Bu yabancı makaleye bir bakın derim
www.howtogeek.com
