Aniden kitleniyor bilgisayar, daha önceleri mavi ekran sıkıntım vs vardı, en son Driver Verifier calıştırdım bir zaman sonra bir mavi ekran hatası aldım ve, WinDbg programı ile !Analyz ettim, ve o zaman hata veren bir kaynak bulmuştum, şimdi hatırlayınca tekrar baktım ve doküman şöyle, son mavi ekran dosyasının;
Önemli olduğunu düşündüğüm satırları kırmızıya boyadım.
Buradaki asıl sıkıntı gerçekten de "amdkmdag" isimli yazılım mı, yoksa tamamen yanlış bir yolda mıyım?
Yardımcı olacaklara şimdiden teşekkürler.
Önemli olduğunu düşündüğüm satırları kırmızıya boyadım.
Loading dump file [C:\Users\bytglc\OneDrive\Masaüstü\091922-9843-01.dmp]
Mini kernel dump file: Only registers and stack trace are available.
************* Path validation summary **************
Response time (ms) location.
Deferred srv*
Symbol Search path is: Srv*
Executable Search path is:
Windows 10 kernel version 22000 MP (12 procs) Free X64.
Product: Winnt, Suite: Terminalserver singleuserts personal.
Edition Build lab: 22000.1.AMD64fre. Co_release. 210604-1628
Machine name:
Kernel base = 0xfffff804`75404000 psloadedmodulelist = 0xfffff804`7602d7b0
Debug session time: Mon sep 19 12:11:55.684 2022 (utc + 3:00)
System uptime: 2 days 3:21:41.523
Loading kernel symbols.
Loading user symbols.
Loading unloaded module list.
For analysis of this file, run! Analyze -v
NT! Kebugcheckex:
Fffff804'7581ECF0 48894C2408 mov qword ptr [rsp+8],rcx SS:0018:ffff8583'F1667510 = 0000000000000050.
1: Kd>!analyze -v
*******************************************************************************
* *
* Bugcheck analysis *
* *
*******************************************************************************
PAGE_FAULT_IN_NONPAGED_AREA (50)
Invalid System Memory was referenced. This cannot be protected by try-except.
Typically the address is just plain bad or it is pointing at freed Memory.
Arguments:
Arg1: FffFE78CC08ecfcd, Memory referenced.
Arg2: 0000000000000002, X64: Bit 0 set if the fault was due to a not-present pte.
Bit 1 is set if the fault was due to a write, clear if a read.
Bit 3 is set if the Processor decided the fault was due to a corrupted pte.
Bit 4 is set if the fault was due to attempted execute of a no-execute pte.
- ARM64: Bit 1 is set if the fault was due to a write, clear if a read.
Bit 3 is set if the fault was due to attempted execute of a no-execute pte.
Arg3: FffFF802BD9D44A5, ıf non-Zero, the instruction address which referenced the bad Memory.
Address.
Arg4: 0000000000000002, (reserved)
Debugging details:
------------------
*** warnıng: Unable to verify timestamp for amdkmdag.sys
*** Warnıng: Unable to verify checksum for win32k.sys
Key_values_strıng: 1
Key: Av. Type.
Value: Write.
Key: Analysis. CPU. Msec.
Value: 2811.
Key: Analysis. Debuganalysismanager.
Value: Create.
Key: Analysis. Elapsed. Msec.
Value: 105064.
Key: Analysis. Init. CPU. Msec.
Value: 390.
Key: Analysis. Init. Elapsed. Msec.
Value: 3444.
Key: Analysis. Memory.commitpeak. MB.
Value: 96.
Key: Bugcheck. Code. Dumpheader.
Value: 0x50.
Key: Bugcheck. Code. Register.
Value: 0x50.
Key: Wer. OS. Branch.
Value: Co_release.
Key: Wer. OS. Timestamp.
Value: 2021-06-04t16:28:00Z
Key: Wer. OS. Version.
Value: 10.0.22000.1
Fıle_ın_cab: 091922-9843-01.dmp
Bugcheck_code: 50.
Bugcheck_p1: FffFE78CC08ecfcd.
Bugcheck_p2: 2
Bugcheck_p3: FffFF802BD9D44A5.
Bugcheck_p4: 2
Read_address: FffFF80476109450: Unable to get mivisiblestate.
Unable to get nonpagedpoolstart.
Unable to get nonpagedpoolend.
Unable to get pagedpoolstart.
Unable to get pagedpoolend.
Unable to get NT! Mmspecialpagesınuse.
FffFE78CC08ecfcd.
Mm_ınternal_code: 2
Blackboxbsd: 1 (!blackboxbsd)
Blackboxntfs: 1 (!blackboxntfs)
Blackboxpnp: 1 (!blackboxpnp)
Blackboxwınlogon: 1
Customer_crash_count: 1
Process_name: System.
Trap_frame: FfFF8583F16677b0 -- (.trap 0xffff8583f16677b0)
Note: The trap frame does not contain all registers.
Some register values may be zeroed or incorrect.
Rax = 0000000000000000 rbx = 0000000000000000 rcx = 0000000000000000.
Rdx = ffFF8583F1667b90 rsi = 0000000000000000 rdi = 0000000000000000.
Rip = fffFF802BD9D44A5 rsp = ffFF8583F1667940 rbp = 0000000000000032.
R8 = fffFE78CA801C020 R9 = 0000000000000000 R10 = 0000000000000001.
R11 = fffFE78CA801C000 R12 = 0000000000000000 R13 = 0000000000000000.
R14 = 0000000000000000 R15 = 0000000000000000.
İopl = 0 nv up ei ng nzna pe nc.
Amdkmdag+0x1944A5:
Fffff802'BD9D44A5 C6868D04000000 mov byte ptr [rsi+48Dh],0 DS: 00000000'0000048D=?
Resetting default scope.
Stack_text:
Ffff8583'F1667508 fffff804'758B17D9: 00000000'00000050 ffffe78C'C08ecfcd 00000000'00000002 ffff8583'F16677B0: NT! Kebugcheckex.
Ffff8583'F1667510 fffff804'756b2096: 00000000'00000000 00000000'00000002 ffff8583'F1667710 00000000'00000000: NT! Misystemfault+0x1C8C09
Ffff8583'F1667610 fffff804'7582D9F5: Ffffe78C'A747C000 00000080'12D70000 ffff8583'F1667C40 fffff802'BD99FF4A: NT! Mmaccessfault+0x2A6
Ffff8583'F16677B0 fffff802'BD9D44A5: 00000000'00000000 ffff8583'F1667B90 00000000'00000000 00000000'00000000: NT! Kipagefault+0x335
Ffff8583'F1667940 00000000'00000000: Ffff8583'F1667B90 00000000'00000000 00000000'00000000 ffff8583'F16679A8: Amdkmdag+0x1944A5
symbol_name: Amdkmdag+1944A5
Module_name: Amdkmdag.
ımage_name: amdkmdag.sys
Stack_command: Cxr. Ecxr; KB.
Bucket_ıd_func_offset: 1944A5.
Faılure_bucket_ıd: Av_vrf_w_(null)_amdkmdag! Unknown_function.
Os_versıon: 10.0.22000.1
Buıldlab_str: Co_release.
Osplatform_type: X64.
Osname: Windows 10.
Faılure_ıd_hash: {416F87D7-AEB9-7782-AB22-4C6bdc1A6190}
Followup: Machineowner.
---------
Buradaki asıl sıkıntı gerçekten de "amdkmdag" isimli yazılım mı, yoksa tamamen yanlış bir yolda mıyım?
Yardımcı olacaklara şimdiden teşekkürler.