FAULTY_HARDWARE_CORRUPTED_PAGE Mavi Ekran Hatası

Ludius28

Hectopat
Katılım
14 Temmuz 2017
Mesajlar
122
Daha fazla  
Cinsiyet
Erkek
Bilgisayarımı topladığım günden bu yana ne kadar 0 kurulum yapsam da ardı arkası kesilmeyen mavi ekran sorunlarım bir türlü çözüme kavuşmadı. Bilgisayarı iş yerimizde kullandığımız için çok sıkıntılı zamanlarda mavi ekran verip bütün konsantrasyonumu bozabiliyor. Sizden ricam mindump dosyalarımı inceler misiniz? Bu konuda yardımcı olabilecek birisini etiketler misiniz?

Herkese şimdiden teşekkür ediyorum.

Mindump dosyaları
 
Son düzenleyen: Moderatör:
Bilgili arkadaşlar yardımcı olacaklardır. @Recep Baltaş'ın da bakmasında fayda var.

Sen de öğrenebilirsin. Bu programı kullanıyoruz:


İnen dosyayı açıyoruz ve buna tıklıyoruz:

Kod:
For analysis of this file, run !analyze -v

Sonra önümüze Matrix gibi veriler dökülüyor, en eğlenceli kısmı:

Kod:
SYSTEM_THREAD_EXCEPTION_NOT_HANDLED_M (1000007e)
This is a very common bugcheck.  Usually the exception address pinpoints
the driver/function that caused the problem.  Always note this address
as well as the link date of the driver/image that contains this address.
Some common problems are exception code 0x80000003.  This means a hard
coded breakpoint or assertion was hit, but this system was booted
/NODEBUG.  This is not supposed to happen as developers should never have
hardcoded breakpoints in retail code, but ...
If this happens, make sure a debugger gets connected, and the
system is booted /DEBUG.  This will let us see why this breakpoint is
happening.
Arguments:
Arg1: ffffffffc0000005, The exception code that was not handled
Arg2: fffff803ea448820, The address that the exception occurred at
Arg3: ffff830ad92a99c8, Exception Record Address
Arg4: ffff830ad92a9210, Context Record Address

Debugging Details:
------------------


KEY_VALUES_STRING: 1

    Key  : AV.Fault
    Value: Read

    Key  : Analysis.CPU.Sec
    Value: 4

    Key  : Analysis.Elapsed.Sec
    Value: 10

    Key  : Analysis.Memory.CommitPeak.Mb
    Value: 68


PROCESSES_ANALYSIS: 1

SERVICE_ANALYSIS: 1

STACKHASH_ANALYSIS: 1

TIMELINE_ANALYSIS: 1


DUMP_CLASS: 1

DUMP_QUALIFIER: 400

BUILD_VERSION_STRING:  17134.1.amd64fre.rs4_release.180410-1804

SYSTEM_MANUFACTURER:  MSI

SYSTEM_PRODUCT_NAME:  MS-7A74

SYSTEM_SKU:  Default string

SYSTEM_VERSION:  1.0

BIOS_VENDOR:  American Megatrends Inc.

BIOS_VERSION:  1.40

BIOS_DATE:  04/06/2017

BASEBOARD_MANUFACTURER:  MSI

BASEBOARD_PRODUCT:  B250M PRO-VD (MS-7A74)

BASEBOARD_VERSION:  1.0

DUMP_TYPE:  2

BUGCHECK_P1: ffffffffc0000005

BUGCHECK_P2: fffff803ea448820

BUGCHECK_P3: ffff830ad92a99c8

BUGCHECK_P4: ffff830ad92a9210

EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - 0x%p adresindeki y nerge 0x%p adresindeki belle e ba vurdu. Bellek  u olamaz %s.

FAULTING_IP:
nt!MiDemoteCombinedPte+40
fffff803`ea448820 498378f001      cmp     qword ptr [r8-10h],1

EXCEPTION_RECORD:  ffff830ad92a99c8 -- (.exr 0xffff830ad92a99c8)
ExceptionAddress: fffff803ea448820 (nt!MiDemoteCombinedPte+0x0000000000000040)
   ExceptionCode: c0000005 (Access violation)
  ExceptionFlags: 00000000
NumberParameters: 2
   Parameter[0]: 0000000000000000
   Parameter[1]: ffffffffffffffff
Attempt to read from address ffffffffffffffff

CONTEXT:  ffff830ad92a9210 -- (.cxr 0xffff830ad92a9210)
rax=ffffb85c2e170000 rbx=83000200774f0805 rcx=ffffa605c1646580
rdx=ffffb800002a2100 rsi=ffffb800002a2100 rdi=fffff2860165ed00
rip=fffff803ea448820 rsp=ffff830ad92a9c00 rbp=ffffa605c1646580
 r8=8000000000000000  r9=0000000000000000 r10=ffffb85c2e170000
r11=ffffb80000000000 r12=ffffa605c15c0ba0 r13=ffff830ad92aa360
r14=8000000000000000 r15=ffffa605c1646580
iopl=0         nv up ei ng nz na po cy
cs=0010  ss=0018  ds=002b  es=002b  fs=0053  gs=002b             efl=00010287
nt!MiDemoteCombinedPte+0x40:
fffff803`ea448820 498378f001      cmp     qword ptr [r8-10h],1 ds:002b:7fffffff`fffffff0=????????????????
Resetting default scope

CPU_COUNT: 4

CPU_MHZ: d50

CPU_VENDOR:  GenuineIntel

CPU_FAMILY: 6

CPU_MODEL: 9e

CPU_STEPPING: 9

CPU_MICROCODE: 6,9e,9,0 (F,M,S,R)  SIG: 8E'00000000 (cache) 8E'00000000 (init)

BLACKBOXBSD: 1 (!blackboxbsd)


BLACKBOXPNP: 1 (!blackboxpnp)


CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  WIN8_DRIVER_FAULT

PROCESS_NAME:  LeagueClientUxRender.exe

CURRENT_IRQL:  2

FOLLOWUP_IP:
nt!MiDemoteCombinedPte+40
fffff803`ea448820 498378f001      cmp     qword ptr [r8-10h],1

BUGCHECK_STR:  AV

READ_ADDRESS: fffff803ea85b388: Unable to get MiVisibleState
Unable to get NonPagedPoolStart
Unable to get NonPagedPoolEnd
Unable to get PagedPoolStart
Unable to get PagedPoolEnd
 ffffffffffffffff

ERROR_CODE: (NTSTATUS) 0xc0000005 - 0x%p adresindeki y nerge 0x%p adresindeki belle e ba vurdu. Bellek  u olamaz %s.

EXCEPTION_CODE_STR:  c0000005

EXCEPTION_PARAMETER1:  0000000000000000

EXCEPTION_PARAMETER2:  ffffffffffffffff

ANALYSIS_SESSION_HOST:  DESKTOP-HH6FM2D

ANALYSIS_SESSION_TIME:  06-27-2019 15:51:32.0986

ANALYSIS_VERSION: 10.0.18914.1001 amd64fre

LAST_CONTROL_TRANSFER:  from fffff803ea4e89da to fffff803ea448820

STACK_TEXT: 
ffff830a`d92a9c00 fffff803`ea4e89da : 00000000`00000000 fffff803`ea4e46ca 00000000`00000000 00000000`00000000 : nt!MiDemoteCombinedPte+0x40
ffff830a`d92a9cd0 fffff803`ea4e54b9 : ffff830a`d92a9dd9 00000000`00000000 ffffb800`002a2000 ffff830a`00000000 : nt!MiAgePte+0x37a
ffff830a`d92a9d60 fffff803`ea4e58c2 : ffff830a`d92aa360 ffffb800`002a2100 ffffb85c`00000000 ffff830a`00000000 : nt!MiWalkPageTablesRecursively+0x299
ffff830a`d92a9e40 fffff803`ea4e58c2 : ffff830a`d92aa360 ffffb85c`00001510 ffffb85c`00000001 ffff830a`00000000 : nt!MiWalkPageTablesRecursively+0x6a2
ffff830a`d92a9f20 fffff803`ea4e58c2 : ffff830a`d92aa360 ffffb85c`2e000008 ffffb85c`00000002 ffff830a`00000000 : nt!MiWalkPageTablesRecursively+0x6a2
ffff830a`d92aa000 fffff803`ea4e35c7 : ffff830a`d92aa360 ffffb85c`2e170000 ffffa605`00000003 ffff830a`00000000 : nt!MiWalkPageTablesRecursively+0x6a2
ffff830a`d92aa0e0 fffff803`ea4e18d4 : ffff830a`d92aa360 00000000`00000002 00000000`00000000 fffff803`00000000 : nt!MiWalkPageTables+0x1e7
ffff830a`d92aa1d0 fffff803`ea4e10fc : ffffa605`c141da80 ffffa605`c18a4b40 ffffa605`c18a4580 ffffa605`c18a4b40 : nt!MiAgeWorkingSet+0x384
ffff830a`d92aa6e0 fffff803`ea4e03c3 : fffff803`ea7dcf00 ffff830a`d92aa980 ffffa605`b4e905a0 fffff803`00000000 : nt!MiTrimOrAgeWorkingSet+0x35c
ffff830a`d92aa7b0 fffff803`ea41b6e7 : fffff803`ea7dcf00 fffff803`ea7dcf00 00000000`000000b8 00000000`00000000 : nt!MiProcessWorkingSets+0x233
ffff830a`d92aa960 fffff803`ea5867f7 : 00000000`00000005 00000000`00000005 00000000`ffffffff 00000000`00000001 : nt!MiWorkingSetManager+0x9f
ffff830a`d92aaa20 fffff803`ea433e27 : ffffa605`b4f81040 00000000`00000080 fffff803`ea5866a0 48367cdd`3bfffde8 : nt!KeBalanceSetManager+0x157
ffff830a`d92aab10 fffff803`ea5c0f26 : ffff9080`575e0180 ffffa605`b4f81040 fffff803`ea433de0 cccccccc`cccccccc : nt!PspSystemThreadStartup+0x47
ffff830a`d92aab60 00000000`00000000 : ffff830a`d92ab000 ffff830a`d92a4000 00000000`00000000 00000000`00000000 : nt!KiStartSystemThread+0x16


THREAD_SHA1_HASH_MOD_FUNC:  e3a8964b8ac9f4183e9b225b40d450ed3989dd86

THREAD_SHA1_HASH_MOD_FUNC_OFFSET:  e8770c7d354da3293fb4ec77695ac1c0a2593b08

THREAD_SHA1_HASH_MOD:  7f608ac2fbce9034a3386b1d51652e4911d30234

FAULT_INSTR_CODE:  f0788349

SYMBOL_STACK_INDEX:  0

SYMBOL_NAME:  nt!MiDemoteCombinedPte+40

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: nt

DEBUG_FLR_IMAGE_TIMESTAMP:  5cde47db

IMAGE_VERSION:  10.0.17134.799

STACK_COMMAND:  .cxr 0xffff830ad92a9210 ; kb

IMAGE_NAME:  memory_corruption

BUCKET_ID_FUNC_OFFSET:  40

FAILURE_BUCKET_ID:  AV_nt!MiDemoteCombinedPte

BUCKET_ID:  AV_nt!MiDemoteCombinedPte

PRIMARY_PROBLEM_CLASS:  AV_nt!MiDemoteCombinedPte

TARGET_TIME:  2019-06-03T14:32:19.000Z

OSBUILD:  17134

OSSERVICEPACK:  799

SERVICEPACK_NUMBER: 0

OS_REVISION: 0

SUITE_MASK:  272

PRODUCT_TYPE:  1

OSPLATFORM_TYPE:  x64

OSNAME:  Windows 10

OSEDITION:  Windows 10 WinNt TerminalServer SingleUserTS

OS_LOCALE: 

USER_LCID:  0

OSBUILD_TIMESTAMP:  2019-05-17 08:34:19

BUILDDATESTAMP_STR:  180410-1804

BUILDLAB_STR:  rs4_release

BUILDOSVER_STR:  10.0.17134.1.amd64fre.rs4_release.180410-1804

ANALYSIS_SESSION_ELAPSED_TIME:  2924

ANALYSIS_SOURCE:  KM

FAILURE_ID_HASH_STRING:  km:av_nt!midemotecombinedpte

FAILURE_ID_HASH:  {c577c73b-79a7-0c44-6c62-58e1d697b6d8}

Followup:     MachineOwner
---------

Biraz dikkatli bakarsan içeride bir kısım var:

IMAGE_NAME: memory_corruption

  • Memory? Bellek
  • Corruption? Bozulma
Bu durumda kullanıcıya hemen RAM'lerin bozuk, değiştir diyebiliriz. Ama onun yerine önce bir tetkik yapalım. Doktor hemen ameliyat diyor mu? Demiyor.

Bellek testi için rehberimize yönlendiriyoruz:


Bitmedi! BIOS güncel mi bakıyoruz.

Anakartı neymiş?

B250M PRO-VD (MS-7A74)

BIOS sürümü? 1.40

Demek ki BIOS güncellememiş. Son sürüme güncellemesini söylüyoruz ve link veriyoruz:


Yeter mi? Yetmez. Windows'u da güncel değil:

17134.1.amd64fre.rs4_release.180410-1804

RS4 kullanıyor. RS6'ya geçmesini istiyoruz:


Tabi diğer Dump dosyalarına da bakıyoruz:

Kod:
K
EY_VALUES_STRING: 1

Key : Analysis.CPU.Sec
Value: 0

Key : Analysis.Elapsed.Sec
Value: 39

Key : Analysis.Memory.CommitPeak.Mb
Value: 49


PROCESSES_ANALYSIS: 1

SERVICE_ANALYSIS: 1

STACKHASH_ANALYSIS: 1

TIMELINE_ANALYSIS: 1


DUMP_CLASS: 1

DUMP_QUALIFIER: 400

BUILD_VERSION_STRING: 17134.1.amd64fre.rs4_release.180410-1804

SYSTEM_MANUFACTURER: MSI

SYSTEM_PRODUCT_NAME: MS-7A74

SYSTEM_SKU: Default string

SYSTEM_VERSION: 1.0

BIOS_VENDOR: American Megatrends Inc.

BIOS_VERSION: 1.40

BIOS_DATE: 04/06/2017

BASEBOARD_MANUFACTURER: MSI

BASEBOARD_PRODUCT: B250M PRO-VD (MS-7A74)

BASEBOARD_VERSION: 1.0

ADDITIONAL_DEBUG_TEXT:
You can run '.symfix; .reload' to try to fix the symbol path and load symbols.

WRONG_SYMBOLS_TIMESTAMP: 5cf9f460

WRONG_SYMBOLS_SIZE: 954000

FAULTING_MODULE: fffff8033ae9d000 nt

DEBUG_FLR_IMAGE_TIMESTAMP:  5cf9f460

DUMP_TYPE: 2

BUGCHECK_P1: 61941

BUGCHECK_P2: ffffaa011aad1330

BUGCHECK_P3: b

BUGCHECK_P4: ffffbf07e68a42c0

BUGCHECK_STR: 5CF9F460

CPU_COUNT: 4

CPU_MHZ: d50

CPU_VENDOR: GenuineIntel

CPU_FAMILY: 6

CPU_MODEL: 9e

CPU_STEPPING: 9

CPU_MICROCODE: 0,0,0,0 (F,M,S,R) SIG: 8E'00000000 (cache) 0'00000000 (init)

BLACKBOXBSD: 1 (!blackboxbsd)


BLACKBOXPNP: 1 (!blackboxpnp)


CUSTOMER_CRASH_COUNT: 1

CURRENT_IRQL: 0

ANALYSIS_SESSION_HOST: DESKTOP-HH6FM2D

ANALYSIS_SESSION_TIME: 06-27-2019 15:51:37.0856

ANALYSIS_VERSION: 10.0.18914.1001 amd64fre

LAST_CONTROL_TRANSFER: from fffff8033b0a58c8 to fffff8033b047ab0

STACK_TEXT:
ffffbf07`e68a4148 fffff803`3b0a58c8 : 00000000`0000001a 00000000`00061941 ffffaa01`1aad1330 00000000`0000000b : nt+0x1aaab0
ffffbf07`e68a4150 00000000`0000001a : 00000000`00061941 ffffaa01`1aad1330 00000000`0000000b ffffbf07`e68a42c0 : nt+0x2088c8
ffffbf07`e68a4158 00000000`00061941 : ffffaa01`1aad1330 00000000`0000000b ffffbf07`e68a42c0 ffffbf07`e68a4654 : 0x1a
ffffbf07`e68a4160 ffffaa01`1aad1330 : 00000000`0000000b ffffbf07`e68a42c0 ffffbf07`e68a4654 ffffaa01`0eaa94a0 : 0x61941
ffffbf07`e68a4168 00000000`0000000b : ffffbf07`e68a42c0 ffffbf07`e68a4654 ffffaa01`0eaa94a0 ffffbf07`e68a42c0 : 0xffffaa01`1aad1330
ffffbf07`e68a4170 ffffbf07`e68a42c0 : ffffbf07`e68a4654 ffffaa01`0eaa94a0 ffffbf07`e68a42c0 00000000`00000000 : 0xb
ffffbf07`e68a4178 ffffbf07`e68a4654 : ffffaa01`0eaa94a0 ffffbf07`e68a42c0 00000000`00000000 fffff803`3af29f97 : 0xffffbf07`e68a42c0
ffffbf07`e68a4180 ffffaa01`0eaa94a0 : ffffbf07`e68a42c0 00000000`00000000 fffff803`3af29f97 ffffd58f`23c35080 : 0xffffbf07`e68a4654
ffffbf07`e68a4188 ffffbf07`e68a42c0 : 00000000`00000000 fffff803`3af29f97 ffffd58f`23c35080 ffffd58f`2877ff38 : 0xffffaa01`0eaa94a0
ffffbf07`e68a4190 00000000`00000000 : fffff803`3af29f97 ffffd58f`23c35080 ffffd58f`2877ff38 ffff85c2`e170baa0 : 0xffffbf07`e68a42c0


THREAD_SHA1_HASH_MOD_FUNC: 6997106dce080e0f247cffc7d244723501c73d61

THREAD_SHA1_HASH_MOD_FUNC_OFFSET: 2d8a271f870bcb4f672325b569874a97520580a7

THREAD_SHA1_HASH_MOD: 6997106dce080e0f247cffc7d244723501c73d61

FOLLOWUP_IP:
nt+1aaab0
fffff803`3b047ab0 48894c2408 mov qword ptr [rsp+8],rcx

FAULT_INSTR_CODE: 244c8948

SYMBOL_STACK_INDEX: 0

FOLLOWUP_NAME: MachineOwner

STACK_COMMAND: .thread ; .cxr ; kb

EXCEPTION_CODE: (NTSTATUS) 0x5cf9f460 - <Unable to get error code text>

EXCEPTION_CODE_STR: 5CF9F460

EXCEPTION_STR: WRONG_SYMBOLS

PROCESS_NAME: ntoskrnl.wrong.symbols.exe

IMAGE_NAME: ntoskrnl.wrong.symbols.exe

MODULE_NAME: nt_wrong_symbols

SYMBOL_NAME:  nt_wrong_symbols!5CF9F460954000

BUCKET_ID: WRONG_SYMBOLS_X64_17134.1.amd64fre.rs4_release.180410-1804_TIMESTAMP_190607-052136

DEFAULT_BUCKET_ID: WRONG_SYMBOLS_X64_17134.1.amd64fre.rs4_release.180410-1804_TIMESTAMP_190607-052136

PRIMARY_PROBLEM_CLASS: WRONG_SYMBOLS

FAILURE_BUCKET_ID: WRONG_SYMBOLS_X64_17134.1.amd64fre.rs4_release.180410-1804_TIMESTAMP_190607-052136_5CF9F460_nt_wrong_symbols!5CF9F460954000

TARGET_TIME: 2019-06-24T07:31:07.000Z

OSBUILD: 17134

OSSERVICEPACK: 0

SERVICEPACK_NUMBER: 0

OS_REVISION: 0

SUITE_MASK: 272

PRODUCT_TYPE: 1

OSPLATFORM_TYPE: x64

OSNAME: Windows 10

OSEDITION: Windows 10 WinNt TerminalServer SingleUserTS

OS_LOCALE:

USER_LCID: 0

OSBUILD_TIMESTAMP: 2019-06-07 08:21:36

BUILDDATESTAMP_STR: 180410-1804

BUILDLAB_STR: rs4_release

BUILDOSVER_STR: 10.0.17134.1.amd64fre.rs4_release.180410-1804

ANALYSIS_SESSION_ELAPSED_TIME: 9a07

ANALYSIS_SOURCE: KM

FAILURE_ID_HASH_STRING: km:wrong_symbols_x64_17134.1.amd64fre.rs4_release.180410-1804_timestamp_190607-052136_5cf9f460_nt_wrong_symbols!5cf9f460954000

FAILURE_ID_HASH: {6384463c-d53d-58fe-39c1-29ac3a718430}

Followup: MachineOwner
---------

KEY_VALUES_STRING: 1

Key : Analysis.CPU.Sec
Value: 0

Key : Analysis.Elapsed.Sec
Value: 56

Key : Analysis.Memory.CommitPeak.Mb
Value: 49


PROCESSES_ANALYSIS: 1

SERVICE_ANALYSIS: 1

STACKHASH_ANALYSIS: 1

TIMELINE_ANALYSIS: 1


DUMP_CLASS: 1

DUMP_QUALIFIER: 400

BUILD_VERSION_STRING: 17134.1.amd64fre.rs4_release.180410-1804

SYSTEM_MANUFACTURER: MSI

SYSTEM_PRODUCT_NAME: MS-7A74

SYSTEM_SKU: Default string

SYSTEM_VERSION: 1.0

BIOS_VENDOR: American Megatrends Inc.

BIOS_VERSION: 1.40

BIOS_DATE: 04/06/2017

BASEBOARD_MANUFACTURER: MSI

BASEBOARD_PRODUCT: B250M PRO-VD (MS-7A74)

BASEBOARD_VERSION: 1.0

ADDITIONAL_DEBUG_TEXT:
You can run '.symfix; .reload' to try to fix the symbol path and load symbols.

WRONG_SYMBOLS_TIMESTAMP: 5cf9f460

WRONG_SYMBOLS_SIZE: 954000

FAULTING_MODULE: fffff803a36b1000 nt

DEBUG_FLR_IMAGE_TIMESTAMP:  5cf9f460

DUMP_TYPE: 2

BUGCHECK_P1: 3

BUGCHECK_P2: fffff18eb7da7bd0

BUGCHECK_P3: fffff18eb7da7b28

BUGCHECK_P4: 0

TRAP_FRAME:  fffff18eb7da7bd0 -- (.trap 0xfffff18eb7da7bd0)
NOTE: The trap frame does not contain all registers.
Some register values may be zeroed or incorrect.
rax=ffffb0865074f430 rbx=0000000000000000 rcx=0000000000000003
rdx=ffffb0864716d940 rsi=0000000000000000 rdi=0000000000000000
rip=fffff803a399d483 rsp=fffff18eb7da7d60 rbp=000000000000000d
r8=ffffb0864f5b5010 r9=000000000000006d r10=000000000000056d
r11=0000000000000000 r12=0000000000000000 r13=0000000000000000
r14=0000000000000000 r15=0000000000000000
iopl=0 nv up ei ng nz na po cy
nt+0x2ec483:
fffff803`a399d483 cd29 int 29h
Resetting default scope

EXCEPTION_RECORD:  fffff18eb7da7b28 -- (.exr 0xfffff18eb7da7b28)
ExceptionAddress: fffff803a399d483 (nt+0x00000000002ec483)
   ExceptionCode: c0000409 (Security check failure or stack buffer overrun)
ExceptionFlags: 00000001
NumberParameters: 1
Parameter[0]: 0000000000000003
Subcode: 0x3 FAST_FAIL_CORRUPT_LIST_ENTRY

CPU_COUNT: 4

CPU_MHZ: d50

CPU_VENDOR: GenuineIntel

CPU_FAMILY: 6

CPU_MODEL: 9e

CPU_STEPPING: 9

CPU_MICROCODE: 0,0,0,0 (F,M,S,R) SIG: 8E'00000000 (cache) 0'00000000 (init)

BLACKBOXBSD: 1 (!blackboxbsd)


BLACKBOXPNP: 1 (!blackboxpnp)


CUSTOMER_CRASH_COUNT: 1

CURRENT_IRQL: 0

ANALYSIS_SESSION_HOST: DESKTOP-HH6FM2D

ANALYSIS_SESSION_TIME: 06-27-2019 15:51:40.0589

ANALYSIS_VERSION: 10.0.18914.1001 amd64fre

LAST_CONTROL_TRANSFER: from fffff803a386c669 to fffff803a385bab0

STACK_TEXT:
fffff18e`b7da78a8 fffff803`a386c669 : 00000000`00000139 00000000`00000003 fffff18e`b7da7bd0 fffff18e`b7da7b28 : nt+0x1aaab0
fffff18e`b7da78b0 00000000`00000139 : 00000000`00000003 fffff18e`b7da7bd0 fffff18e`b7da7b28 00000000`00000000 : nt+0x1bb669
fffff18e`b7da78b8 00000000`00000003 : fffff18e`b7da7bd0 fffff18e`b7da7b28 00000000`00000000 ffffb086`00000000 : 0x139
fffff18e`b7da78c0 fffff18e`b7da7bd0 : fffff18e`b7da7b28 00000000`00000000 ffffb086`00000000 00000000`00000000 : 0x3
fffff18e`b7da78c8 fffff18e`b7da7b28 : 00000000`00000000 ffffb086`00000000 00000000`00000000 00000000`00000000 : 0xfffff18e`b7da7bd0
fffff18e`b7da78d0 00000000`00000000 : ffffb086`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0xfffff18e`b7da7b28


THREAD_SHA1_HASH_MOD_FUNC: 6997106dce080e0f247cffc7d244723501c73d61

THREAD_SHA1_HASH_MOD_FUNC_OFFSET: 2d8a271f870bcb4f672325b569874a97520580a7

THREAD_SHA1_HASH_MOD: 6997106dce080e0f247cffc7d244723501c73d61

FOLLOWUP_IP:
nt+1aaab0
fffff803`a385bab0 48894c2408 mov qword ptr [rsp+8],rcx

FAULT_INSTR_CODE: 244c8948

SYMBOL_STACK_INDEX: 0

FOLLOWUP_NAME: MachineOwner

STACK_COMMAND: .thread ; .cxr ; kb

BUGCHECK_STR: 5CF9F460

EXCEPTION_CODE: (NTSTATUS) 0x5cf9f460 - <Unable to get error code text>

EXCEPTION_CODE_STR: 5CF9F460

EXCEPTION_STR: WRONG_SYMBOLS

PROCESS_NAME: ntoskrnl.wrong.symbols.exe

IMAGE_NAME: ntoskrnl.wrong.symbols.exe

MODULE_NAME: nt_wrong_symbols

SYMBOL_NAME:  nt_wrong_symbols!5CF9F460954000

BUCKET_ID: WRONG_SYMBOLS_X64_17134.1.amd64fre.rs4_release.180410-1804_TIMESTAMP_190607-052136

DEFAULT_BUCKET_ID: WRONG_SYMBOLS_X64_17134.1.amd64fre.rs4_release.180410-1804_TIMESTAMP_190607-052136

PRIMARY_PROBLEM_CLASS: WRONG_SYMBOLS

FAILURE_BUCKET_ID: WRONG_SYMBOLS_X64_17134.1.amd64fre.rs4_release.180410-1804_TIMESTAMP_190607-052136_5CF9F460_nt_wrong_symbols!5CF9F460954000

TARGET_TIME: 2019-06-24T06:57:46.000Z

OSBUILD: 17134

OSSERVICEPACK: 0

SERVICEPACK_NUMBER: 0

OS_REVISION: 0

SUITE_MASK: 272

PRODUCT_TYPE: 1

OSPLATFORM_TYPE: x64

OSNAME: Windows 10

OSEDITION: Windows 10 WinNt TerminalServer SingleUserTS

OS_LOCALE:

USER_LCID: 0

OSBUILD_TIMESTAMP: 2019-06-07 08:21:36

BUILDDATESTAMP_STR: 180410-1804

BUILDLAB_STR: rs4_release

BUILDOSVER_STR: 10.0.17134.1.amd64fre.rs4_release.180410-1804

ANALYSIS_SESSION_ELAPSED_TIME: dd29

ANALYSIS_SOURCE: KM

FAILURE_ID_HASH_STRING: km:wrong_symbols_x64_17134.1.amd64fre.rs4_release.180410-1804_timestamp_190607-052136_5cf9f460_nt_wrong_symbols!5cf9f460954000

FAILURE_ID_HASH: {6384463c-d53d-58fe-39c1-29ac3a718430}

Followup: MachineOwner
---------

KERNEL_SECURITY_CHECK_FAILURE (139)
A kernel component has corrupted a critical data structure.  The corruption
could potentially allow a malicious user to gain control of this machine.
Arguments:
Arg1: 0000000000000003, A LIST_ENTRY has been corrupted (i.e. double remove).
Arg2: ffffeb885e143610, Address of the trap frame for the exception that caused the bugcheck
Arg3: ffffeb885e143568, Address of the exception record for the exception that caused the bugcheck
Arg4: 0000000000000000, Reserved

Debugging Details:
------------------

*** WARNING: Unable to verify timestamp for win32k.sys

KEY_VALUES_STRING: 1

Key : Analysis.CPU.Sec
Value: 6

Key : Analysis.Elapsed.Sec
Value: 21

Key : Analysis.Memory.CommitPeak.Mb
Value: 69


PROCESSES_ANALYSIS: 1

SERVICE_ANALYSIS: 1

STACKHASH_ANALYSIS: 1

TIMELINE_ANALYSIS: 1


DUMP_CLASS: 1

DUMP_QUALIFIER: 400

BUILD_VERSION_STRING: 17134.1.amd64fre.rs4_release.180410-1804

SYSTEM_MANUFACTURER: MSI

SYSTEM_PRODUCT_NAME: MS-7A74

SYSTEM_SKU: Default string

SYSTEM_VERSION: 1.0

BIOS_VENDOR: American Megatrends Inc.

BIOS_VERSION: 1.40

BIOS_DATE: 04/06/2017

BASEBOARD_MANUFACTURER: MSI

BASEBOARD_PRODUCT: B250M PRO-VD (MS-7A74)

BASEBOARD_VERSION: 1.0

DUMP_TYPE: 2

BUGCHECK_P1: 3

BUGCHECK_P2: ffffeb885e143610

BUGCHECK_P3: ffffeb885e143568

BUGCHECK_P4: 0

TRAP_FRAME:  ffffeb885e143610 -- (.trap 0xffffeb885e143610)
NOTE: The trap frame does not contain all registers.
Some register values may be zeroed or incorrect.
rax=ffffb98e7c9a55c8 rbx=0000000000000000 rcx=0000000000000003
rdx=ffffb98e7c11f938 rsi=0000000000000000 rdi=0000000000000000
rip=fffff8011a8800bb rsp=ffffeb885e1437a0 rbp=0000000000000000
r8=fffff8011abddf00 r9=000000003fffffff r10=ffff9401f212a180
r11=b98e7c9a564004d0 r12=0000000000000000 r13=0000000000000000
r14=0000000000000000 r15=0000000000000000
iopl=0 nv up ei pl nz na po nc
nt!MiUnlinkUnusedControlArea+0x97:
fffff801`1a8800bb cd29 int 29h
Resetting default scope

EXCEPTION_RECORD:  ffffeb885e143568 -- (.exr 0xffffeb885e143568)
ExceptionAddress: fffff8011a8800bb (nt!MiUnlinkUnusedControlArea+0x0000000000000097)
   ExceptionCode: c0000409 (Security check failure or stack buffer overrun)
ExceptionFlags: 00000001
NumberParameters: 1
Parameter[0]: 0000000000000003
Subcode: 0x3 FAST_FAIL_CORRUPT_LIST_ENTRY

CPU_COUNT: 4

CPU_MHZ: d50

CPU_VENDOR: GenuineIntel

CPU_FAMILY: 6

CPU_MODEL: 9e

CPU_STEPPING: 9

CPU_MICROCODE: 6,9e,9,0 (F,M,S,R) SIG: 8E'00000000 (cache) 8E'00000000 (init)

BLACKBOXBSD: 1 (!blackboxbsd)


BLACKBOXPNP: 1 (!blackboxpnp)


CUSTOMER_CRASH_COUNT: 1

BUGCHECK_STR: 0x139

PROCESS_NAME: System

CURRENT_IRQL: 2

DEFAULT_BUCKET_ID: FAIL_FAST_CORRUPT_LIST_ENTRY

ERROR_CODE: (NTSTATUS) 0xc0000409 - Sistem, bu uygulamada y n tabanl bir arabelle in ta t n alg lad . Bu ta ma, k t niyetli bir kullan c n n bu uygulaman n denetimini ele ge irmesine olanak verebilir.

EXCEPTION_CODE: (NTSTATUS) 0xc0000409 - Sistem, bu uygulamada y n tabanl bir arabelle in ta t n alg lad . Bu ta ma, k t niyetli bir kullan c n n bu uygulaman n denetimini ele ge irmesine olanak verebilir.

EXCEPTION_CODE_STR: c0000409

EXCEPTION_PARAMETER1: 0000000000000003

ANALYSIS_SESSION_HOST: DESKTOP-HH6FM2D

ANALYSIS_SESSION_TIME: 06-27-2019 15:51:42.0947

ANALYSIS_VERSION: 10.0.18914.1001 amd64fre

LAST_CONTROL_TRANSFER: from fffff8011a9cb669 to fffff8011a9baab0

STACK_TEXT:
ffffeb88`5e1432e8 fffff801`1a9cb669 : 00000000`00000139 00000000`00000003 ffffeb88`5e143610 ffffeb88`5e143568 : nt!KeBugCheckEx
ffffeb88`5e1432f0 fffff801`1a9cba10 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiBugCheckDispatch+0x69
ffffeb88`5e143430 fffff801`1a9ca01f : 00000000`00000000 00000000`00000002 00000000`00000003 00000000`00000000 : nt!KiFastFailDispatch+0xd0
ffffeb88`5e143610 fffff801`1a8800bb : ffff9401`f212cf80 ffff9401`f212a180 00000000`00000246 fffff801`1a90fdd3 : nt!KiRaiseSecurityCheckFailure+0x2df
ffffeb88`5e1437a0 fffff801`1a88000e : fffff801`1abddf00 ffffb98e`7c9a5640 fffff801`1abde408 fffff801`1abde4b0 : nt!MiUnlinkUnusedControlArea+0x97
ffffeb88`5e1437d0 fffff801`1a820849 : ffffb98e`7c9a55c0 fffff801`00000000 ffffe200`00000000 ffffe200`00000000 : nt!MiRemoveUnusedSegment+0x4a
ffffeb88`5e143800 fffff801`1a82075d : ffffb98e`7c9a55c0 00000000`00000000 ffffb98e`7c9a5640 ffffb98e`7c9a5608 : nt!MiCheckForControlAreaDeletion+0x85
ffffeb88`5e143840 fffff801`1a92ab78 : ffff89c8`0ad09bf8 ffffe200`06b61570 00000000`00000000 b98e7c9a`00000000 : nt!MiDereferenceControlAreaPfnList+0x12d
ffffeb88`5e1438a0 fffff801`1a95fcab : ffffe200`0455e3b0 00000000`00000000 00000000`00000000 00000000`00000001 : nt!MiRestoreTransitionPte+0x388
ffffeb88`5e143910 fffff801`1aa75cb8 : fffff801`1abde980 00000000`00000000 ffffb98e`00000000 fffff801`0000006a : nt!MiRemoveLowestPriorityStandbyPage+0x3cb
ffffeb88`5e1439a0 fffff801`1aa75e85 : 00000000`00000000 00000000`00000000 fffff801`00000000 00000000`00000223 : nt!MiPruneStandbyPages+0x228
ffffeb88`5e143a30 fffff801`1a8c2155 : ffffb98e`6bcaf040 fffff801`1aa75e00 ffffb98e`6aee4570 fffff801`1abdf7a0 : nt!MiRebalanceZeroFreeLists+0x85
ffffeb88`5e143a80 fffff801`1a834e27 : ffffb98e`6bcaf040 00000000`00000080 ffffb98e`6aeff440 ffffb98e`6bcaf040 : nt!ExpWorkerThread+0xf5
ffffeb88`5e143b10 fffff801`1a9c1f26 : fffff801`1a6cd180 ffffb98e`6bcaf040 fffff801`1a834de0 ffffffff`ffffffff : nt!PspSystemThreadStartup+0x47
ffffeb88`5e143b60 00000000`00000000 : ffffeb88`5e144000 ffffeb88`5e13d000 00000000`00000000 00000000`00000000 : nt!KiStartSystemThread+0x16


THREAD_SHA1_HASH_MOD_FUNC: 826dd9a50309a6282dde6be7fb5792e1683ee0ed

THREAD_SHA1_HASH_MOD_FUNC_OFFSET: e7d605f17199541bc2ebe168536df838cfc2c8dc

THREAD_SHA1_HASH_MOD: 38bc5fec3f0409c265cf5c87da6f8f8859d0711c

FOLLOWUP_IP:
nt!KiFastFailDispatch+d0
fffff801`1a9cba10 c644242000 mov byte ptr [rsp+20h],0

FAULT_INSTR_CODE: 202444c6

SYMBOL_STACK_INDEX: 2

SYMBOL_NAME: nt!KiFastFailDispatch+d0

FOLLOWUP_NAME: MachineOwner

MODULE_NAME: nt

IMAGE_NAME:  ntkrnlmp.exe

DEBUG_FLR_IMAGE_TIMESTAMP: 5d01e95d

IMAGE_VERSION: 10.0.17134.858

STACK_COMMAND: .thread ; .cxr ; kb

BUCKET_ID_FUNC_OFFSET: d0

FAILURE_BUCKET_ID: 0x139_3_CORRUPT_LIST_ENTRY_nt!KiFastFailDispatch

BUCKET_ID: 0x139_3_CORRUPT_LIST_ENTRY_nt!KiFastFailDispatch

PRIMARY_PROBLEM_CLASS: 0x139_3_CORRUPT_LIST_ENTRY_nt!KiFastFailDispatch

TARGET_TIME: 2019-06-27T12:12:00.000Z

OSBUILD: 17134

OSSERVICEPACK: 858

SERVICEPACK_NUMBER: 0

OS_REVISION: 0

SUITE_MASK: 272

PRODUCT_TYPE: 1

OSPLATFORM_TYPE: x64

OSNAME: Windows 10

OSEDITION: Windows 10 WinNt TerminalServer SingleUserTS

OS_LOCALE:

USER_LCID: 0

OSBUILD_TIMESTAMP: 2019-06-13 09:12:45

BUILDDATESTAMP_STR: 180410-1804

BUILDLAB_STR: rs4_release

BUILDOSVER_STR: 10.0.17134.1.amd64fre.rs4_release.180410-1804

ANALYSIS_SESSION_ELAPSED_TIME: 52f6

ANALYSIS_SOURCE: KM

FAILURE_ID_HASH_STRING: km:0x139_3_corrupt_list_entry_nt!kifastfaildispatch

FAILURE_ID_HASH: {3aede96a-54dd-40d6-d4cb-2a161a843851}

Followup: MachineOwner
---------

Bunlar da genel olarak bellek sorunu diyor. Bu durumda özetle yapılacaklar:
  • BIOS güncellenecek. Yeni sürümde bellek desteği iyileştirilmiş.
  • RAM testi yapılacak ve hata çıkarsa RAM değişimi yapılacak.
 
Sen de öğrenebilirsin. Bu programı kullanıyoruz:


İnen dosyayı açıyoruz ve buna tıklıyoruz:

Kod:
For analysis of this file, run !analyze -v

Sonra önümüze Matrix gibi veriler dökülüyor, en eğlenceli kısmı:

Kod:
SYSTEM_THREAD_EXCEPTION_NOT_HANDLED_M (1000007e)
This is a very common bugcheck.  Usually the exception address pinpoints
the driver/function that caused the problem.  Always note this address
as well as the link date of the driver/image that contains this address.
Some common problems are exception code 0x80000003.  This means a hard
coded breakpoint or assertion was hit, but this system was booted
/NODEBUG.  This is not supposed to happen as developers should never have
hardcoded breakpoints in retail code, but ...
If this happens, make sure a debugger gets connected, and the
system is booted /DEBUG.  This will let us see why this breakpoint is
happening.
Arguments:
Arg1: ffffffffc0000005, The exception code that was not handled
Arg2: fffff803ea448820, The address that the exception occurred at
Arg3: ffff830ad92a99c8, Exception Record Address
Arg4: ffff830ad92a9210, Context Record Address

Debugging Details:
------------------


KEY_VALUES_STRING: 1

    Key  : AV.Fault
    Value: Read

    Key  : Analysis.CPU.Sec
    Value: 4

    Key  : Analysis.Elapsed.Sec
    Value: 10

    Key  : Analysis.Memory.CommitPeak.Mb
    Value: 68


PROCESSES_ANALYSIS: 1

SERVICE_ANALYSIS: 1

STACKHASH_ANALYSIS: 1

TIMELINE_ANALYSIS: 1


DUMP_CLASS: 1

DUMP_QUALIFIER: 400

BUILD_VERSION_STRING:  17134.1.amd64fre.rs4_release.180410-1804

SYSTEM_MANUFACTURER:  MSI

SYSTEM_PRODUCT_NAME:  MS-7A74

SYSTEM_SKU:  Default string

SYSTEM_VERSION:  1.0

BIOS_VENDOR:  American Megatrends Inc.

BIOS_VERSION:  1.40

BIOS_DATE:  04/06/2017

BASEBOARD_MANUFACTURER:  MSI

BASEBOARD_PRODUCT:  B250M PRO-VD (MS-7A74)

BASEBOARD_VERSION:  1.0

DUMP_TYPE:  2

BUGCHECK_P1: ffffffffc0000005

BUGCHECK_P2: fffff803ea448820

BUGCHECK_P3: ffff830ad92a99c8

BUGCHECK_P4: ffff830ad92a9210

EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - 0x%p adresindeki y nerge 0x%p adresindeki belle e ba vurdu. Bellek  u olamaz %s.

FAULTING_IP:
nt!MiDemoteCombinedPte+40
fffff803`ea448820 498378f001      cmp     qword ptr [r8-10h],1

EXCEPTION_RECORD:  ffff830ad92a99c8 -- (.exr 0xffff830ad92a99c8)
ExceptionAddress: fffff803ea448820 (nt!MiDemoteCombinedPte+0x0000000000000040)
   ExceptionCode: c0000005 (Access violation)
  ExceptionFlags: 00000000
NumberParameters: 2
   Parameter[0]: 0000000000000000
   Parameter[1]: ffffffffffffffff
Attempt to read from address ffffffffffffffff

CONTEXT:  ffff830ad92a9210 -- (.cxr 0xffff830ad92a9210)
rax=ffffb85c2e170000 rbx=83000200774f0805 rcx=ffffa605c1646580
rdx=ffffb800002a2100 rsi=ffffb800002a2100 rdi=fffff2860165ed00
rip=fffff803ea448820 rsp=ffff830ad92a9c00 rbp=ffffa605c1646580
r8=8000000000000000  r9=0000000000000000 r10=ffffb85c2e170000
r11=ffffb80000000000 r12=ffffa605c15c0ba0 r13=ffff830ad92aa360
r14=8000000000000000 r15=ffffa605c1646580
iopl=0         nv up ei ng nz na po cy
cs=0010  ss=0018  ds=002b  es=002b  fs=0053  gs=002b             efl=00010287
nt!MiDemoteCombinedPte+0x40:
fffff803`ea448820 498378f001      cmp     qword ptr [r8-10h],1 ds:002b:7fffffff`fffffff0=????????????????
Resetting default scope

CPU_COUNT: 4

CPU_MHZ: d50

CPU_VENDOR:  GenuineIntel

CPU_FAMILY: 6

CPU_MODEL: 9e

CPU_STEPPING: 9

CPU_MICROCODE: 6,9e,9,0 (F,M,S,R)  SIG: 8E'00000000 (cache) 8E'00000000 (init)

BLACKBOXBSD: 1 (!blackboxbsd)


BLACKBOXPNP: 1 (!blackboxpnp)


CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  WIN8_DRIVER_FAULT

PROCESS_NAME:  LeagueClientUxRender.exe

CURRENT_IRQL:  2

FOLLOWUP_IP:
nt!MiDemoteCombinedPte+40
fffff803`ea448820 498378f001      cmp     qword ptr [r8-10h],1

BUGCHECK_STR:  AV

READ_ADDRESS: fffff803ea85b388: Unable to get MiVisibleState
Unable to get NonPagedPoolStart
Unable to get NonPagedPoolEnd
Unable to get PagedPoolStart
Unable to get PagedPoolEnd
ffffffffffffffff

ERROR_CODE: (NTSTATUS) 0xc0000005 - 0x%p adresindeki y nerge 0x%p adresindeki belle e ba vurdu. Bellek  u olamaz %s.

EXCEPTION_CODE_STR:  c0000005

EXCEPTION_PARAMETER1:  0000000000000000

EXCEPTION_PARAMETER2:  ffffffffffffffff

ANALYSIS_SESSION_HOST:  DESKTOP-HH6FM2D

ANALYSIS_SESSION_TIME:  06-27-2019 15:51:32.0986

ANALYSIS_VERSION: 10.0.18914.1001 amd64fre

LAST_CONTROL_TRANSFER:  from fffff803ea4e89da to fffff803ea448820

STACK_TEXT:
ffff830a`d92a9c00 fffff803`ea4e89da : 00000000`00000000 fffff803`ea4e46ca 00000000`00000000 00000000`00000000 : nt!MiDemoteCombinedPte+0x40
ffff830a`d92a9cd0 fffff803`ea4e54b9 : ffff830a`d92a9dd9 00000000`00000000 ffffb800`002a2000 ffff830a`00000000 : nt!MiAgePte+0x37a
ffff830a`d92a9d60 fffff803`ea4e58c2 : ffff830a`d92aa360 ffffb800`002a2100 ffffb85c`00000000 ffff830a`00000000 : nt!MiWalkPageTablesRecursively+0x299
ffff830a`d92a9e40 fffff803`ea4e58c2 : ffff830a`d92aa360 ffffb85c`00001510 ffffb85c`00000001 ffff830a`00000000 : nt!MiWalkPageTablesRecursively+0x6a2
ffff830a`d92a9f20 fffff803`ea4e58c2 : ffff830a`d92aa360 ffffb85c`2e000008 ffffb85c`00000002 ffff830a`00000000 : nt!MiWalkPageTablesRecursively+0x6a2
ffff830a`d92aa000 fffff803`ea4e35c7 : ffff830a`d92aa360 ffffb85c`2e170000 ffffa605`00000003 ffff830a`00000000 : nt!MiWalkPageTablesRecursively+0x6a2
ffff830a`d92aa0e0 fffff803`ea4e18d4 : ffff830a`d92aa360 00000000`00000002 00000000`00000000 fffff803`00000000 : nt!MiWalkPageTables+0x1e7
ffff830a`d92aa1d0 fffff803`ea4e10fc : ffffa605`c141da80 ffffa605`c18a4b40 ffffa605`c18a4580 ffffa605`c18a4b40 : nt!MiAgeWorkingSet+0x384
ffff830a`d92aa6e0 fffff803`ea4e03c3 : fffff803`ea7dcf00 ffff830a`d92aa980 ffffa605`b4e905a0 fffff803`00000000 : nt!MiTrimOrAgeWorkingSet+0x35c
ffff830a`d92aa7b0 fffff803`ea41b6e7 : fffff803`ea7dcf00 fffff803`ea7dcf00 00000000`000000b8 00000000`00000000 : nt!MiProcessWorkingSets+0x233
ffff830a`d92aa960 fffff803`ea5867f7 : 00000000`00000005 00000000`00000005 00000000`ffffffff 00000000`00000001 : nt!MiWorkingSetManager+0x9f
ffff830a`d92aaa20 fffff803`ea433e27 : ffffa605`b4f81040 00000000`00000080 fffff803`ea5866a0 48367cdd`3bfffde8 : nt!KeBalanceSetManager+0x157
ffff830a`d92aab10 fffff803`ea5c0f26 : ffff9080`575e0180 ffffa605`b4f81040 fffff803`ea433de0 cccccccc`cccccccc : nt!PspSystemThreadStartup+0x47
ffff830a`d92aab60 00000000`00000000 : ffff830a`d92ab000 ffff830a`d92a4000 00000000`00000000 00000000`00000000 : nt!KiStartSystemThread+0x16


THREAD_SHA1_HASH_MOD_FUNC:  e3a8964b8ac9f4183e9b225b40d450ed3989dd86

THREAD_SHA1_HASH_MOD_FUNC_OFFSET:  e8770c7d354da3293fb4ec77695ac1c0a2593b08

THREAD_SHA1_HASH_MOD:  7f608ac2fbce9034a3386b1d51652e4911d30234

FAULT_INSTR_CODE:  f0788349

SYMBOL_STACK_INDEX:  0

SYMBOL_NAME:  nt!MiDemoteCombinedPte+40

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: nt

DEBUG_FLR_IMAGE_TIMESTAMP:  5cde47db

IMAGE_VERSION:  10.0.17134.799

STACK_COMMAND:  .cxr 0xffff830ad92a9210 ; kb

IMAGE_NAME:  memory_corruption

BUCKET_ID_FUNC_OFFSET:  40

FAILURE_BUCKET_ID:  AV_nt!MiDemoteCombinedPte

BUCKET_ID:  AV_nt!MiDemoteCombinedPte

PRIMARY_PROBLEM_CLASS:  AV_nt!MiDemoteCombinedPte

TARGET_TIME:  2019-06-03T14:32:19.000Z

OSBUILD:  17134

OSSERVICEPACK:  799

SERVICEPACK_NUMBER: 0

OS_REVISION: 0

SUITE_MASK:  272

PRODUCT_TYPE:  1

OSPLATFORM_TYPE:  x64

OSNAME:  Windows 10

OSEDITION:  Windows 10 WinNt TerminalServer SingleUserTS

OS_LOCALE:

USER_LCID:  0

OSBUILD_TIMESTAMP:  2019-05-17 08:34:19

BUILDDATESTAMP_STR:  180410-1804

BUILDLAB_STR:  rs4_release

BUILDOSVER_STR:  10.0.17134.1.amd64fre.rs4_release.180410-1804

ANALYSIS_SESSION_ELAPSED_TIME:  2924

ANALYSIS_SOURCE:  KM

FAILURE_ID_HASH_STRING:  km:av_nt!midemotecombinedpte

FAILURE_ID_HASH:  {c577c73b-79a7-0c44-6c62-58e1d697b6d8}

Followup:     MachineOwner
---------

Biraz dikkatli bakarsan içeride bir kısım var:

IMAGE_NAME: memory_corruption

  • Memory? Bellek
  • Corruption? Bozulma
Bu durumda kullanıcıya hemen RAM'lerin bozuk, değiştir diyebiliriz. Ama onun yerine önce bir tetkik yapalım. Doktor hemen ameliyat diyor mu? Demiyor.

Bellek testi için rehberimize yönlendiriyoruz:


Bitmedi! BIOS güncel mi bakıyoruz.

Anakartı neymiş?

B250M PRO-VD (MS-7A74)

BIOS sürümü? 1.40

Demek ki BIOS güncellememiş. Son sürüme güncellemesini söylüyoruz ve link veriyoruz:


Yeter mi? Yetmez. Windows'u da güncel değil:

17134.1.amd64fre.rs4_release.180410-1804

RS4 kullanıyor. RS6'ya geçmesini istiyoruz:


Tabi diğer Dump dosyalarına da bakıyoruz:

Kod:
K
EY_VALUES_STRING: 1

Key : Analysis.CPU.Sec
Value: 0

Key : Analysis.Elapsed.Sec
Value: 39

Key : Analysis.Memory.CommitPeak.Mb
Value: 49


PROCESSES_ANALYSIS: 1

SERVICE_ANALYSIS: 1

STACKHASH_ANALYSIS: 1

TIMELINE_ANALYSIS: 1


DUMP_CLASS: 1

DUMP_QUALIFIER: 400

BUILD_VERSION_STRING: 17134.1.amd64fre.rs4_release.180410-1804

SYSTEM_MANUFACTURER: MSI

SYSTEM_PRODUCT_NAME: MS-7A74

SYSTEM_SKU: Default string

SYSTEM_VERSION: 1.0

BIOS_VENDOR: American Megatrends Inc.

BIOS_VERSION: 1.40

BIOS_DATE: 04/06/2017

BASEBOARD_MANUFACTURER: MSI

BASEBOARD_PRODUCT: B250M PRO-VD (MS-7A74)

BASEBOARD_VERSION: 1.0

ADDITIONAL_DEBUG_TEXT:
You can run '.symfix; .reload' to try to fix the symbol path and load symbols.

WRONG_SYMBOLS_TIMESTAMP: 5cf9f460

WRONG_SYMBOLS_SIZE: 954000

FAULTING_MODULE: fffff8033ae9d000 nt

DEBUG_FLR_IMAGE_TIMESTAMP:  5cf9f460

DUMP_TYPE: 2

BUGCHECK_P1: 61941

BUGCHECK_P2: ffffaa011aad1330

BUGCHECK_P3: b

BUGCHECK_P4: ffffbf07e68a42c0

BUGCHECK_STR: 5CF9F460

CPU_COUNT: 4

CPU_MHZ: d50

CPU_VENDOR: GenuineIntel

CPU_FAMILY: 6

CPU_MODEL: 9e

CPU_STEPPING: 9

CPU_MICROCODE: 0,0,0,0 (F,M,S,R) SIG: 8E'00000000 (cache) 0'00000000 (init)

BLACKBOXBSD: 1 (!blackboxbsd)


BLACKBOXPNP: 1 (!blackboxpnp)


CUSTOMER_CRASH_COUNT: 1

CURRENT_IRQL: 0

ANALYSIS_SESSION_HOST: DESKTOP-HH6FM2D

ANALYSIS_SESSION_TIME: 06-27-2019 15:51:37.0856

ANALYSIS_VERSION: 10.0.18914.1001 amd64fre

LAST_CONTROL_TRANSFER: from fffff8033b0a58c8 to fffff8033b047ab0

STACK_TEXT:
ffffbf07`e68a4148 fffff803`3b0a58c8 : 00000000`0000001a 00000000`00061941 ffffaa01`1aad1330 00000000`0000000b : nt+0x1aaab0
ffffbf07`e68a4150 00000000`0000001a : 00000000`00061941 ffffaa01`1aad1330 00000000`0000000b ffffbf07`e68a42c0 : nt+0x2088c8
ffffbf07`e68a4158 00000000`00061941 : ffffaa01`1aad1330 00000000`0000000b ffffbf07`e68a42c0 ffffbf07`e68a4654 : 0x1a
ffffbf07`e68a4160 ffffaa01`1aad1330 : 00000000`0000000b ffffbf07`e68a42c0 ffffbf07`e68a4654 ffffaa01`0eaa94a0 : 0x61941
ffffbf07`e68a4168 00000000`0000000b : ffffbf07`e68a42c0 ffffbf07`e68a4654 ffffaa01`0eaa94a0 ffffbf07`e68a42c0 : 0xffffaa01`1aad1330
ffffbf07`e68a4170 ffffbf07`e68a42c0 : ffffbf07`e68a4654 ffffaa01`0eaa94a0 ffffbf07`e68a42c0 00000000`00000000 : 0xb
ffffbf07`e68a4178 ffffbf07`e68a4654 : ffffaa01`0eaa94a0 ffffbf07`e68a42c0 00000000`00000000 fffff803`3af29f97 : 0xffffbf07`e68a42c0
ffffbf07`e68a4180 ffffaa01`0eaa94a0 : ffffbf07`e68a42c0 00000000`00000000 fffff803`3af29f97 ffffd58f`23c35080 : 0xffffbf07`e68a4654
ffffbf07`e68a4188 ffffbf07`e68a42c0 : 00000000`00000000 fffff803`3af29f97 ffffd58f`23c35080 ffffd58f`2877ff38 : 0xffffaa01`0eaa94a0
ffffbf07`e68a4190 00000000`00000000 : fffff803`3af29f97 ffffd58f`23c35080 ffffd58f`2877ff38 ffff85c2`e170baa0 : 0xffffbf07`e68a42c0


THREAD_SHA1_HASH_MOD_FUNC: 6997106dce080e0f247cffc7d244723501c73d61

THREAD_SHA1_HASH_MOD_FUNC_OFFSET: 2d8a271f870bcb4f672325b569874a97520580a7

THREAD_SHA1_HASH_MOD: 6997106dce080e0f247cffc7d244723501c73d61

FOLLOWUP_IP:
nt+1aaab0
fffff803`3b047ab0 48894c2408 mov qword ptr [rsp+8],rcx

FAULT_INSTR_CODE: 244c8948

SYMBOL_STACK_INDEX: 0

FOLLOWUP_NAME: MachineOwner

STACK_COMMAND: .thread ; .cxr ; kb

EXCEPTION_CODE: (NTSTATUS) 0x5cf9f460 - <Unable to get error code text>

EXCEPTION_CODE_STR: 5CF9F460

EXCEPTION_STR: WRONG_SYMBOLS

PROCESS_NAME: ntoskrnl.wrong.symbols.exe

IMAGE_NAME: ntoskrnl.wrong.symbols.exe

MODULE_NAME: nt_wrong_symbols

SYMBOL_NAME:  nt_wrong_symbols!5CF9F460954000

BUCKET_ID: WRONG_SYMBOLS_X64_17134.1.amd64fre.rs4_release.180410-1804_TIMESTAMP_190607-052136

DEFAULT_BUCKET_ID: WRONG_SYMBOLS_X64_17134.1.amd64fre.rs4_release.180410-1804_TIMESTAMP_190607-052136

PRIMARY_PROBLEM_CLASS: WRONG_SYMBOLS

FAILURE_BUCKET_ID: WRONG_SYMBOLS_X64_17134.1.amd64fre.rs4_release.180410-1804_TIMESTAMP_190607-052136_5CF9F460_nt_wrong_symbols!5CF9F460954000

TARGET_TIME: 2019-06-24T07:31:07.000Z

OSBUILD: 17134

OSSERVICEPACK: 0

SERVICEPACK_NUMBER: 0

OS_REVISION: 0

SUITE_MASK: 272

PRODUCT_TYPE: 1

OSPLATFORM_TYPE: x64

OSNAME: Windows 10

OSEDITION: Windows 10 WinNt TerminalServer SingleUserTS

OS_LOCALE:

USER_LCID: 0

OSBUILD_TIMESTAMP: 2019-06-07 08:21:36

BUILDDATESTAMP_STR: 180410-1804

BUILDLAB_STR: rs4_release

BUILDOSVER_STR: 10.0.17134.1.amd64fre.rs4_release.180410-1804

ANALYSIS_SESSION_ELAPSED_TIME: 9a07

ANALYSIS_SOURCE: KM

FAILURE_ID_HASH_STRING: km:wrong_symbols_x64_17134.1.amd64fre.rs4_release.180410-1804_timestamp_190607-052136_5cf9f460_nt_wrong_symbols!5cf9f460954000

FAILURE_ID_HASH: {6384463c-d53d-58fe-39c1-29ac3a718430}

Followup: MachineOwner
---------

KEY_VALUES_STRING: 1

Key : Analysis.CPU.Sec
Value: 0

Key : Analysis.Elapsed.Sec
Value: 56

Key : Analysis.Memory.CommitPeak.Mb
Value: 49


PROCESSES_ANALYSIS: 1

SERVICE_ANALYSIS: 1

STACKHASH_ANALYSIS: 1

TIMELINE_ANALYSIS: 1


DUMP_CLASS: 1

DUMP_QUALIFIER: 400

BUILD_VERSION_STRING: 17134.1.amd64fre.rs4_release.180410-1804

SYSTEM_MANUFACTURER: MSI

SYSTEM_PRODUCT_NAME: MS-7A74

SYSTEM_SKU: Default string

SYSTEM_VERSION: 1.0

BIOS_VENDOR: American Megatrends Inc.

BIOS_VERSION: 1.40

BIOS_DATE: 04/06/2017

BASEBOARD_MANUFACTURER: MSI

BASEBOARD_PRODUCT: B250M PRO-VD (MS-7A74)

BASEBOARD_VERSION: 1.0

ADDITIONAL_DEBUG_TEXT:
You can run '.symfix; .reload' to try to fix the symbol path and load symbols.

WRONG_SYMBOLS_TIMESTAMP: 5cf9f460

WRONG_SYMBOLS_SIZE: 954000

FAULTING_MODULE: fffff803a36b1000 nt

DEBUG_FLR_IMAGE_TIMESTAMP:  5cf9f460

DUMP_TYPE: 2

BUGCHECK_P1: 3

BUGCHECK_P2: fffff18eb7da7bd0

BUGCHECK_P3: fffff18eb7da7b28

BUGCHECK_P4: 0

TRAP_FRAME:  fffff18eb7da7bd0 -- (.trap 0xfffff18eb7da7bd0)
NOTE: The trap frame does not contain all registers.
Some register values may be zeroed or incorrect.
rax=ffffb0865074f430 rbx=0000000000000000 rcx=0000000000000003
rdx=ffffb0864716d940 rsi=0000000000000000 rdi=0000000000000000
rip=fffff803a399d483 rsp=fffff18eb7da7d60 rbp=000000000000000d
r8=ffffb0864f5b5010 r9=000000000000006d r10=000000000000056d
r11=0000000000000000 r12=0000000000000000 r13=0000000000000000
r14=0000000000000000 r15=0000000000000000
iopl=0 nv up ei ng nz na po cy
nt+0x2ec483:
fffff803`a399d483 cd29 int 29h
Resetting default scope

EXCEPTION_RECORD:  fffff18eb7da7b28 -- (.exr 0xfffff18eb7da7b28)
ExceptionAddress: fffff803a399d483 (nt+0x00000000002ec483)
   ExceptionCode: c0000409 (Security check failure or stack buffer overrun)
ExceptionFlags: 00000001
NumberParameters: 1
Parameter[0]: 0000000000000003
Subcode: 0x3 FAST_FAIL_CORRUPT_LIST_ENTRY

CPU_COUNT: 4

CPU_MHZ: d50

CPU_VENDOR: GenuineIntel

CPU_FAMILY: 6

CPU_MODEL: 9e

CPU_STEPPING: 9

CPU_MICROCODE: 0,0,0,0 (F,M,S,R) SIG: 8E'00000000 (cache) 0'00000000 (init)

BLACKBOXBSD: 1 (!blackboxbsd)


BLACKBOXPNP: 1 (!blackboxpnp)


CUSTOMER_CRASH_COUNT: 1

CURRENT_IRQL: 0

ANALYSIS_SESSION_HOST: DESKTOP-HH6FM2D

ANALYSIS_SESSION_TIME: 06-27-2019 15:51:40.0589

ANALYSIS_VERSION: 10.0.18914.1001 amd64fre

LAST_CONTROL_TRANSFER: from fffff803a386c669 to fffff803a385bab0

STACK_TEXT:
fffff18e`b7da78a8 fffff803`a386c669 : 00000000`00000139 00000000`00000003 fffff18e`b7da7bd0 fffff18e`b7da7b28 : nt+0x1aaab0
fffff18e`b7da78b0 00000000`00000139 : 00000000`00000003 fffff18e`b7da7bd0 fffff18e`b7da7b28 00000000`00000000 : nt+0x1bb669
fffff18e`b7da78b8 00000000`00000003 : fffff18e`b7da7bd0 fffff18e`b7da7b28 00000000`00000000 ffffb086`00000000 : 0x139
fffff18e`b7da78c0 fffff18e`b7da7bd0 : fffff18e`b7da7b28 00000000`00000000 ffffb086`00000000 00000000`00000000 : 0x3
fffff18e`b7da78c8 fffff18e`b7da7b28 : 00000000`00000000 ffffb086`00000000 00000000`00000000 00000000`00000000 : 0xfffff18e`b7da7bd0
fffff18e`b7da78d0 00000000`00000000 : ffffb086`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0xfffff18e`b7da7b28


THREAD_SHA1_HASH_MOD_FUNC: 6997106dce080e0f247cffc7d244723501c73d61

THREAD_SHA1_HASH_MOD_FUNC_OFFSET: 2d8a271f870bcb4f672325b569874a97520580a7

THREAD_SHA1_HASH_MOD: 6997106dce080e0f247cffc7d244723501c73d61

FOLLOWUP_IP:
nt+1aaab0
fffff803`a385bab0 48894c2408 mov qword ptr [rsp+8],rcx

FAULT_INSTR_CODE: 244c8948

SYMBOL_STACK_INDEX: 0

FOLLOWUP_NAME: MachineOwner

STACK_COMMAND: .thread ; .cxr ; kb

BUGCHECK_STR: 5CF9F460

EXCEPTION_CODE: (NTSTATUS) 0x5cf9f460 - <Unable to get error code text>

EXCEPTION_CODE_STR: 5CF9F460

EXCEPTION_STR: WRONG_SYMBOLS

PROCESS_NAME: ntoskrnl.wrong.symbols.exe

IMAGE_NAME: ntoskrnl.wrong.symbols.exe

MODULE_NAME: nt_wrong_symbols

SYMBOL_NAME:  nt_wrong_symbols!5CF9F460954000

BUCKET_ID: WRONG_SYMBOLS_X64_17134.1.amd64fre.rs4_release.180410-1804_TIMESTAMP_190607-052136

DEFAULT_BUCKET_ID: WRONG_SYMBOLS_X64_17134.1.amd64fre.rs4_release.180410-1804_TIMESTAMP_190607-052136

PRIMARY_PROBLEM_CLASS: WRONG_SYMBOLS

FAILURE_BUCKET_ID: WRONG_SYMBOLS_X64_17134.1.amd64fre.rs4_release.180410-1804_TIMESTAMP_190607-052136_5CF9F460_nt_wrong_symbols!5CF9F460954000

TARGET_TIME: 2019-06-24T06:57:46.000Z

OSBUILD: 17134

OSSERVICEPACK: 0

SERVICEPACK_NUMBER: 0

OS_REVISION: 0

SUITE_MASK: 272

PRODUCT_TYPE: 1

OSPLATFORM_TYPE: x64

OSNAME: Windows 10

OSEDITION: Windows 10 WinNt TerminalServer SingleUserTS

OS_LOCALE:

USER_LCID: 0

OSBUILD_TIMESTAMP: 2019-06-07 08:21:36

BUILDDATESTAMP_STR: 180410-1804

BUILDLAB_STR: rs4_release

BUILDOSVER_STR: 10.0.17134.1.amd64fre.rs4_release.180410-1804

ANALYSIS_SESSION_ELAPSED_TIME: dd29

ANALYSIS_SOURCE: KM

FAILURE_ID_HASH_STRING: km:wrong_symbols_x64_17134.1.amd64fre.rs4_release.180410-1804_timestamp_190607-052136_5cf9f460_nt_wrong_symbols!5cf9f460954000

FAILURE_ID_HASH: {6384463c-d53d-58fe-39c1-29ac3a718430}

Followup: MachineOwner
---------

KERNEL_SECURITY_CHECK_FAILURE (139)
A kernel component has corrupted a critical data structure.  The corruption
could potentially allow a malicious user to gain control of this machine.
Arguments:
Arg1: 0000000000000003, A LIST_ENTRY has been corrupted (i.e. double remove).
Arg2: ffffeb885e143610, Address of the trap frame for the exception that caused the bugcheck
Arg3: ffffeb885e143568, Address of the exception record for the exception that caused the bugcheck
Arg4: 0000000000000000, Reserved

Debugging Details:
------------------

*** WARNING: Unable to verify timestamp for win32k.sys

KEY_VALUES_STRING: 1

Key : Analysis.CPU.Sec
Value: 6

Key : Analysis.Elapsed.Sec
Value: 21

Key : Analysis.Memory.CommitPeak.Mb
Value: 69


PROCESSES_ANALYSIS: 1

SERVICE_ANALYSIS: 1

STACKHASH_ANALYSIS: 1

TIMELINE_ANALYSIS: 1


DUMP_CLASS: 1

DUMP_QUALIFIER: 400

BUILD_VERSION_STRING: 17134.1.amd64fre.rs4_release.180410-1804

SYSTEM_MANUFACTURER: MSI

SYSTEM_PRODUCT_NAME: MS-7A74

SYSTEM_SKU: Default string

SYSTEM_VERSION: 1.0

BIOS_VENDOR: American Megatrends Inc.

BIOS_VERSION: 1.40

BIOS_DATE: 04/06/2017

BASEBOARD_MANUFACTURER: MSI

BASEBOARD_PRODUCT: B250M PRO-VD (MS-7A74)

BASEBOARD_VERSION: 1.0

DUMP_TYPE: 2

BUGCHECK_P1: 3

BUGCHECK_P2: ffffeb885e143610

BUGCHECK_P3: ffffeb885e143568

BUGCHECK_P4: 0

TRAP_FRAME:  ffffeb885e143610 -- (.trap 0xffffeb885e143610)
NOTE: The trap frame does not contain all registers.
Some register values may be zeroed or incorrect.
rax=ffffb98e7c9a55c8 rbx=0000000000000000 rcx=0000000000000003
rdx=ffffb98e7c11f938 rsi=0000000000000000 rdi=0000000000000000
rip=fffff8011a8800bb rsp=ffffeb885e1437a0 rbp=0000000000000000
r8=fffff8011abddf00 r9=000000003fffffff r10=ffff9401f212a180
r11=b98e7c9a564004d0 r12=0000000000000000 r13=0000000000000000
r14=0000000000000000 r15=0000000000000000
iopl=0 nv up ei pl nz na po nc
nt!MiUnlinkUnusedControlArea+0x97:
fffff801`1a8800bb cd29 int 29h
Resetting default scope

EXCEPTION_RECORD:  ffffeb885e143568 -- (.exr 0xffffeb885e143568)
ExceptionAddress: fffff8011a8800bb (nt!MiUnlinkUnusedControlArea+0x0000000000000097)
   ExceptionCode: c0000409 (Security check failure or stack buffer overrun)
ExceptionFlags: 00000001
NumberParameters: 1
Parameter[0]: 0000000000000003
Subcode: 0x3 FAST_FAIL_CORRUPT_LIST_ENTRY

CPU_COUNT: 4

CPU_MHZ: d50

CPU_VENDOR: GenuineIntel

CPU_FAMILY: 6

CPU_MODEL: 9e

CPU_STEPPING: 9

CPU_MICROCODE: 6,9e,9,0 (F,M,S,R) SIG: 8E'00000000 (cache) 8E'00000000 (init)

BLACKBOXBSD: 1 (!blackboxbsd)


BLACKBOXPNP: 1 (!blackboxpnp)


CUSTOMER_CRASH_COUNT: 1

BUGCHECK_STR: 0x139

PROCESS_NAME: System

CURRENT_IRQL: 2

DEFAULT_BUCKET_ID: FAIL_FAST_CORRUPT_LIST_ENTRY

ERROR_CODE: (NTSTATUS) 0xc0000409 - Sistem, bu uygulamada y n tabanl bir arabelle in ta t n alg lad . Bu ta ma, k t niyetli bir kullan c n n bu uygulaman n denetimini ele ge irmesine olanak verebilir.

EXCEPTION_CODE: (NTSTATUS) 0xc0000409 - Sistem, bu uygulamada y n tabanl bir arabelle in ta t n alg lad . Bu ta ma, k t niyetli bir kullan c n n bu uygulaman n denetimini ele ge irmesine olanak verebilir.

EXCEPTION_CODE_STR: c0000409

EXCEPTION_PARAMETER1: 0000000000000003

ANALYSIS_SESSION_HOST: DESKTOP-HH6FM2D

ANALYSIS_SESSION_TIME: 06-27-2019 15:51:42.0947

ANALYSIS_VERSION: 10.0.18914.1001 amd64fre

LAST_CONTROL_TRANSFER: from fffff8011a9cb669 to fffff8011a9baab0

STACK_TEXT:
ffffeb88`5e1432e8 fffff801`1a9cb669 : 00000000`00000139 00000000`00000003 ffffeb88`5e143610 ffffeb88`5e143568 : nt!KeBugCheckEx
ffffeb88`5e1432f0 fffff801`1a9cba10 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiBugCheckDispatch+0x69
ffffeb88`5e143430 fffff801`1a9ca01f : 00000000`00000000 00000000`00000002 00000000`00000003 00000000`00000000 : nt!KiFastFailDispatch+0xd0
ffffeb88`5e143610 fffff801`1a8800bb : ffff9401`f212cf80 ffff9401`f212a180 00000000`00000246 fffff801`1a90fdd3 : nt!KiRaiseSecurityCheckFailure+0x2df
ffffeb88`5e1437a0 fffff801`1a88000e : fffff801`1abddf00 ffffb98e`7c9a5640 fffff801`1abde408 fffff801`1abde4b0 : nt!MiUnlinkUnusedControlArea+0x97
ffffeb88`5e1437d0 fffff801`1a820849 : ffffb98e`7c9a55c0 fffff801`00000000 ffffe200`00000000 ffffe200`00000000 : nt!MiRemoveUnusedSegment+0x4a
ffffeb88`5e143800 fffff801`1a82075d : ffffb98e`7c9a55c0 00000000`00000000 ffffb98e`7c9a5640 ffffb98e`7c9a5608 : nt!MiCheckForControlAreaDeletion+0x85
ffffeb88`5e143840 fffff801`1a92ab78 : ffff89c8`0ad09bf8 ffffe200`06b61570 00000000`00000000 b98e7c9a`00000000 : nt!MiDereferenceControlAreaPfnList+0x12d
ffffeb88`5e1438a0 fffff801`1a95fcab : ffffe200`0455e3b0 00000000`00000000 00000000`00000000 00000000`00000001 : nt!MiRestoreTransitionPte+0x388
ffffeb88`5e143910 fffff801`1aa75cb8 : fffff801`1abde980 00000000`00000000 ffffb98e`00000000 fffff801`0000006a : nt!MiRemoveLowestPriorityStandbyPage+0x3cb
ffffeb88`5e1439a0 fffff801`1aa75e85 : 00000000`00000000 00000000`00000000 fffff801`00000000 00000000`00000223 : nt!MiPruneStandbyPages+0x228
ffffeb88`5e143a30 fffff801`1a8c2155 : ffffb98e`6bcaf040 fffff801`1aa75e00 ffffb98e`6aee4570 fffff801`1abdf7a0 : nt!MiRebalanceZeroFreeLists+0x85
ffffeb88`5e143a80 fffff801`1a834e27 : ffffb98e`6bcaf040 00000000`00000080 ffffb98e`6aeff440 ffffb98e`6bcaf040 : nt!ExpWorkerThread+0xf5
ffffeb88`5e143b10 fffff801`1a9c1f26 : fffff801`1a6cd180 ffffb98e`6bcaf040 fffff801`1a834de0 ffffffff`ffffffff : nt!PspSystemThreadStartup+0x47
ffffeb88`5e143b60 00000000`00000000 : ffffeb88`5e144000 ffffeb88`5e13d000 00000000`00000000 00000000`00000000 : nt!KiStartSystemThread+0x16


THREAD_SHA1_HASH_MOD_FUNC: 826dd9a50309a6282dde6be7fb5792e1683ee0ed

THREAD_SHA1_HASH_MOD_FUNC_OFFSET: e7d605f17199541bc2ebe168536df838cfc2c8dc

THREAD_SHA1_HASH_MOD: 38bc5fec3f0409c265cf5c87da6f8f8859d0711c

FOLLOWUP_IP:
nt!KiFastFailDispatch+d0
fffff801`1a9cba10 c644242000 mov byte ptr [rsp+20h],0

FAULT_INSTR_CODE: 202444c6

SYMBOL_STACK_INDEX: 2

SYMBOL_NAME: nt!KiFastFailDispatch+d0

FOLLOWUP_NAME: MachineOwner

MODULE_NAME: nt

IMAGE_NAME:  ntkrnlmp.exe

DEBUG_FLR_IMAGE_TIMESTAMP: 5d01e95d

IMAGE_VERSION: 10.0.17134.858

STACK_COMMAND: .thread ; .cxr ; kb

BUCKET_ID_FUNC_OFFSET: d0

FAILURE_BUCKET_ID: 0x139_3_CORRUPT_LIST_ENTRY_nt!KiFastFailDispatch

BUCKET_ID: 0x139_3_CORRUPT_LIST_ENTRY_nt!KiFastFailDispatch

PRIMARY_PROBLEM_CLASS: 0x139_3_CORRUPT_LIST_ENTRY_nt!KiFastFailDispatch

TARGET_TIME: 2019-06-27T12:12:00.000Z

OSBUILD: 17134

OSSERVICEPACK: 858

SERVICEPACK_NUMBER: 0

OS_REVISION: 0

SUITE_MASK: 272

PRODUCT_TYPE: 1

OSPLATFORM_TYPE: x64

OSNAME: Windows 10

OSEDITION: Windows 10 WinNt TerminalServer SingleUserTS

OS_LOCALE:

USER_LCID: 0

OSBUILD_TIMESTAMP: 2019-06-13 09:12:45

BUILDDATESTAMP_STR: 180410-1804

BUILDLAB_STR: rs4_release

BUILDOSVER_STR: 10.0.17134.1.amd64fre.rs4_release.180410-1804

ANALYSIS_SESSION_ELAPSED_TIME: 52f6

ANALYSIS_SOURCE: KM

FAILURE_ID_HASH_STRING: km:0x139_3_corrupt_list_entry_nt!kifastfaildispatch

FAILURE_ID_HASH: {3aede96a-54dd-40d6-d4cb-2a161a843851}

Followup: MachineOwner
---------

Bunlar da genel olarak bellek sorunu diyor. Bu durumda özetle yapılacaklar:
  • BIOS güncellenecek. Yeni sürümde bellek desteği iyileştirilmiş.
  • RAM testi yapılacak ve hata çıkarsa RAM değişimi yapılacak.
Arıza tespiti yaparken kullandığınız programın işlemleri tamamlaması ne kadar sürüyor?
 
Recep bey öncelikle güzel anlatımınız için ve engin bilgileriniz ile bizi aydınlattığınız için teşekkür ederim. Diğer yandan çocukluğumdan bu yana sizin kanalınızda sizin makalelerinizle kendimi geliştirmeye çalıştım ve her zaman yol göstericilerimden birisi oldunuz. Bunları yüzyüze gelip söyleyemeyeceğim için buradan söyleyeyim. Bu zamana kadar bana olan bütün katkılarınız için size ve technopat ekibine sonsuz teşekkürlerimi sunuyorum :)

Recep bey bir de BIOS güncelleme konusunu paylaşır mısınız kusuruma bakmayın bulamadım.

Windowsu ISO olarak kurduğumuzda güncelliyor mu yoksa yükseltiyor mu ?
 
Son düzenleyen: Moderatör:
Arıza tespiti yaparken kullandığınız programın işlemleri tamamlaması ne kadar sürüyor?

İnternet hızına bağlı ama genelde 30 saniye.
Recep bey öncelikle güzel anlatımınız için ve engin bilgileriniz ile bizi aydınlattığınız için teşekkür ederim. Diğer yandan çocukluğumdan bu yana sizin kanalınızda sizin makalelerinizle kendimi geliştirmeye çalıştım ve her zaman yol göstericilerimden birisi oldunuz. Bunları yüzyüze gelip söyleyemeyeceğim için buradan söyleyeyim.

Teşekkürler :)


Recep bey bir de BIOS güncelleme konusunu paylaşır mısınız kusuruma bakmayın bulamadım.

Tabii ki:

Bu içeriği görüntülemek için üçüncü taraf çerezlerini yerleştirmek için izninize ihtiyacımız olacak.
Daha detaylı bilgi için, çerezler sayfamıza bakınız.

Windowsu ISO olarak kurduğumuzda güncelliyor mu yoksa yükseltiyor mu ?

Makalede bu sorunuzun cevabı mevcut :) Güncelleme ve yükseltme arasında çok fark yok. Yükseltiyor. Ama isterseniz sıfır kurulum da yapabilirsiniz.
 
Teşekkür
İnternet hızına bağlı ama genelde 30 saniye.


Teşekkürler :)




Tabii ki:

Bu içeriği görüntülemek için üçüncü taraf çerezlerini yerleştirmek için izninize ihtiyacımız olacak.
Daha detaylı bilgi için, çerezler sayfamıza bakınız.



Makalede bu sorunuzun cevabı mevcut :) Güncelleme ve yükseltme arasında çok fark yok. Yükseltiyor. Ama isterseniz sıfır kurulum da yapabilirsiniz.
Teşekkür ediyorum tekrardan :) İş bilgisayarı olduğu için temiz kurulum bir günümü alacak gibi gözüküyor o yüzden dediklerinizi yaptıktan sonra RAM'leri test edeceğim gerekli yükseltmeleri yaptığım zaman.
 
Son düzenleyen: Moderatör:
Ek olarak sistemde güvenlik yazılımı var sanırım ? Var ise geçici olarak kaldır.
Evet avast var, bir de dün akşam bellek taramasını yaptım Windowsun kendi araçlarından bir sorun olmadığını söyledi bugün Windowsumu güncelledikten sonra da sizin önerdiğiniz program ile test edeceğim.
Bir sorundan daha söz etmem gerekirse ne kadar konu ile alakalı bilmiyorum ama lol oynarken oyun kilitleniyor ve critical error veriyor sanırım oda bununla alakalı. Sizcede öylemidir ? Günaydınlar bu arada.
İnternet hızına bağlı ama genelde 30 saniye.


Teşekkürler :)




Tabii ki:

Bu içeriği görüntülemek için üçüncü taraf çerezlerini yerleştirmek için izninize ihtiyacımız olacak.
Daha detaylı bilgi için, çerezler sayfamıza bakınız.



Makalede bu sorunuzun cevabı mevcut :) Güncelleme ve yükseltme arasında çok fark yok. Yükseltiyor. Ama isterseniz sıfır kurulum da yapabilirsiniz.
Recep bey konuyu tekrardan okuduğumda anladım yükselttiğim zaman şuan çalışan programlarımı kullanamayacak mıyım acaba yada bağlı olan yazıcı ve makineleri?
 
Son düzenleyen: Moderatör:
Recep bey konuyu tekrardan okuduğumda anladım yükselttiğim zaman şuan çalışan programlarımı kullanamayacak mıyım acaba yada bağlı olan yazıcı ve makineleri?

Yükseltmenin amacı zaten her şeyi korumak. Kaldı ki sistem size söylüyor neyi kullanıp neyi kullanmayacağınızı.
 
Uyarı! Bu konu 5 yıl önce açıldı.
Muhtemelen daha fazla tartışma gerekli değildir ki bu durumda yeni bir konu başlatmayı öneririz. Eğer yine de cevabınızın gerekli olduğunu düşünüyorsanız buna rağmen cevap verebilirsiniz.

Geri
Yukarı