KERNEL_SECURITY_CHECK_FAILURE (139)
A kernel component has corrupted a critical data structure. The corruption.
could potentially allow a malicious user to gain control of this machine.
Arguments:
Arg1: 0000000000000003, A LIST_ENTRY has been corrupted (i.e. double remove).
Arg2: fffff504ed302350, Address of the trap frame for the exception that caused the bugcheck.
Arg3: fffff504ed3022a8, Address of the exception record for the exception that caused the bugcheck.
Arg4: 0000000000000000, Reserved.
Debugging Details:
------------------
*** WARNING: Unable to verify timestamp for athurx.sys.
*** WARNING: Unable to verify timestamp for win32k.sys.
KEY_VALUES_STRING: 1.
Key : Analysis.CPU.Sec.
Value: 3.
Key : Analysis.DebugAnalysisProvider.CPP.
Value: Create: 8007007e on DESKTOP-VFOM7MS.
Key : Analysis.DebugData.
Value: CreateObject.
Key : Analysis.DebugModel.
Value: CreateObject.
Key : Analysis.Elapsed.Sec.
Value: 67.
Key : Analysis.Memory.CommitPeak.Mb.
Value: 69.
Key : Analysis.System.
Value: CreateObject.
ADDITIONAL_XML: 1.
BUGCHECK_CODE: 139.
BUGCHECK_P1: 3.
BUGCHECK_P2: fffff504ed302350.
BUGCHECK_P3: fffff504ed3022a8.
BUGCHECK_P4: 0.
TRAP_FRAME: fffff504ed302350 -- (.trap 0xfffff504ed302350)
NOTE: The trap frame does not contain all registers.
Some register values may be zeroed or incorrect.
rax=ffffb0094bc6c5c8 rbx=0000000000000000 rcx=0000000000000003.
rdx=ffffb0094bc8cc48 rsi=0000000000000000 rdi=0000000000000000.
rip=fffff80240e466bb rsp=fffff504ed3024e0 rbp=0000000000000001.
r8=0000000000000010 r9=0000000000000000 r10=0000000000000001.
r11=fffff780000003b0 r12=0000000000000000 r13=0000000000000000.
r14=0000000000000000 r15=0000000000000000.
iopl=0 nv up di pl nz na pe nc.
nt!ExInterlockedRemoveHeadList+0x8b:
fffff802`40e466bb cd29 int 29h.
Resetting default scope.
EXCEPTION_RECORD: fffff504ed3022a8 -- (.exr 0xfffff504ed3022a8)
ExceptionAddress: fffff80240e466bb (nt!ExInterlockedRemoveHeadList+0x000000000000008b)
ExceptionCode: c0000409 (Security check failure or stack buffer overrun)
ExceptionFlags: 00000001.
NumberParameters: 1.
Parameter[0]: 0000000000000003.
Subcode: 0x3 FAST_FAIL_CORRUPT_LIST_ENTRY.
BLACKBOXBSD: 1 (!blackboxbsd)
BLACKBOXNTFS: 1 (!blackboxntfs)
BLACKBOXPNP: 1 (!blackboxpnp)
BLACKBOXWINLOGON: 1.
CUSTOMER_CRASH_COUNT: 1.
PROCESS_NAME: System.
ERROR_CODE: (NTSTATUS) 0xc0000409 - Sistem, bu uygulamada y n tabanl bir arabelle in ta t n alg lad . Bu ta ma, k t niyetli bir kullan c n n bu uygulaman n denetimini ele ge irmesine olanak verebilir.
EXCEPTION_CODE_STR: c0000409.
EXCEPTION_PARAMETER1: 0000000000000003.
EXCEPTION_STR: 0xc0000409.
STACK_TEXT:
fffff504`ed302028 fffff802`40fd41e9 : 00000000`00000139 00000000`00000003 fffff504`ed302350 fffff504`ed3022a8 : nt!KeBugCheckEx.
fffff504`ed302030 fffff802`40fd4610 : 00000000`40030008 00000000`00000002 fffff504`ed302901 fffff504`ed3022d8 : nt!KiBugCheckDispatch+0x69.
fffff504`ed302170 fffff802`40fd29a3 : 00000033`59c12948 00000000`00000000 ffffb009`4b1a2ee0 fffff802`4d31bab8 : nt!KiFastFailDispatch+0xd0.
fffff504`ed302350 fffff802`40e466bb : 00000000`00000000 00000000`00000000 ffffb009`4bc8cc58 ffffb009`4bc8cc48 : nt!KiRaiseSecurityCheckFailure+0x323.
fffff504`ed3024e0 fffff802`4eca54c0 : ffffb009`58de3380 00000000`00000080 fffff802`4eca6eb0 fffff504`ed302678 : nt!ExInterlockedRemoveHeadList+0x8b.
fffff504`ed302510 ffffb009`58de3380 : 00000000`00000080 fffff802`4eca6eb0 fffff504`ed302678 00000000`00000000 : athurx+0x54c0.
fffff504`ed302518 00000000`00000080 : fffff802`4eca6eb0 fffff504`ed302678 00000000`00000000 fffff802`445d7941 : 0xffffb009`58de3380.
fffff504`ed302520 fffff802`4eca6eb0 : fffff504`ed302678 00000000`00000000 fffff802`445d7941 fffff802`4468c6a8 : 0x80.
fffff504`ed302528 fffff504`ed302678 : 00000000`00000000 fffff802`445d7941 fffff802`4468c6a8 fffff802`4eccabf4 : athurx+0x6eb0.
fffff504`ed302530 00000000`00000000 : fffff802`445d7941 fffff802`4468c6a8 fffff802`4eccabf4 ffffb009`4bc7a030 : 0xfffff504`ed302678.
SYMBOL_NAME: athurx+54c0.
MODULE_NAME: athurx.
IMAGE_NAME: athurx.sys.
STACK_COMMAND: .thread ; .cxr ; kb.
BUCKET_ID_FUNC_OFFSET: 54c0.
FAILURE_BUCKET_ID: 0x139_3_CORRUPT_LIST_ENTRY_athurx!unknown_function.
OS_VERSION: 10.0.18362.1.
BUILDLAB_STR: 19h1_release.
OSPLATFORM_TYPE: x64.
OSNAME: Windows 10.
FAILURE_ID_HASH: {cf0b00cb-8b52-be47-e20d-865e290d55f0}
Followup: MachineOwner.
---------
drive.google.com
