REGISTRY_FILTER_DRIVER_EXCEPTION Mavi Ekran Hatası

Skreynn · 5 Nisan 2019

Son birkaç gündür sürekli mavi ekran alıyorum. Ya PAGE FAULT hatası ya da Critical Process hatası alıyorum. WinDBG ile açtığımda genelde memory corruptıon yazıyor fakat memtest ile 2 saate yakın test yaptım bir sıkıntı çıkmadı.

minidump.rar

MF · 5 Nisan 2019

sfc /scannow çalıştırıp sonucu paylaşın. Sorun devam ederse de RAM testi yapın:

https://www.technopat.net/sosyal/konu/memtest86-usbden-calisan-ram-test-programi.201/

Kod:

REGISTRY_FILTER_DRIVER_EXCEPTION (135)
This bugcheck is caused by an unhandled exception in a registry filtering driver.
This bugcheck indicates that a registry filtering driver didn't handle exception inside
its notification routine. One can identify the driver by the 3rd parameter.
Arguments:
Arg1: ffffffffc0000005, ExceptionCode
Arg2: ffff870c83f5d830, Address of the context record for the exception that caused the bugcheck
Arg3: fffff8053a22d890, The driver's callback routine address
Arg4: ffffbc0d78a14ee0, Internal

Debugging Details:
------------------

*** WARNING: Unable to verify timestamp for win32k.sys

KEY_VALUES_STRING: 1


PROCESSES_ANALYSIS: 1

SERVICE_ANALYSIS: 1

STACKHASH_ANALYSIS: 1

TIMELINE_ANALYSIS: 1


DUMP_CLASS: 1

DUMP_QUALIFIER: 400

BUILD_VERSION_STRING:  17763.1.amd64fre.rs5_release.180914-1434

SYSTEM_MANUFACTURER:  LENOVO

SYSTEM_PRODUCT_NAME:  81AX

SYSTEM_SKU:  LENOVO_MT_81AX_BU_idea_FM_V330-15IKB

SYSTEM_VERSION:  Lenovo V330-15IKB

BIOS_VENDOR:  LENOVO

BIOS_VERSION:  6SCN40WW

BIOS_DATE:  11/01/2018

BASEBOARD_MANUFACTURER:  LENOVO

BASEBOARD_PRODUCT:  LNVNB161216

BASEBOARD_VERSION:  NO DPK

DUMP_TYPE:  2

BUGCHECK_P1: ffffffffc0000005

BUGCHECK_P2: ffff870c83f5d830

BUGCHECK_P3: fffff8053a22d890

BUGCHECK_P4: ffffbc0d78a14ee0

CPU_COUNT: 8

CPU_MHZ: 708

CPU_VENDOR:  GenuineIntel

CPU_FAMILY: 6

CPU_MODEL: 8e

CPU_STEPPING: a

CPU_MICROCODE: 6,8e,a,0 (F,M,S,R)  SIG: 96'00000000 (cache) 96'00000000 (init)

BLACKBOXBSD: 1 (!blackboxbsd)


BLACKBOXPNP: 1 (!blackboxpnp)


CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  WIN8_DRIVER_FAULT

BUGCHECK_STR:  0x135

PROCESS_NAME:  Registry

CURRENT_IRQL:  0

ANALYSIS_SESSION_HOST:  DESKTOP-K01TCKK

ANALYSIS_SESSION_TIME:  04-05-2019 17:43:58.0268

ANALYSIS_VERSION: 10.0.18317.1001 amd64fre

EXCEPTION_RECORD:  0000000000001000 -- (.exr 0x1000)
Cannot read Exception record @ 0000000000001000

TRAP_FRAME:  ffff800000000000 -- (.trap 0xffff800000000000)
Unable to read trap frame at ffff8000`00000000

LAST_CONTROL_TRANSFER:  from fffff80716800d44 to fffff807161c85e0

STACK_TEXT:
ffff870c`83f5cf98 fffff807`16800d44 : 00000000`00000135 ffffffff`c0000005 ffff870c`83f5d830 fffff805`3a22d890 : nt!KeBugCheckEx
ffff870c`83f5cfa0 fffff807`16770bc9 : ffff870c`83f5e228 ffff870c`83f5d830 ffff870c`83f59000 ffff870c`83f60000 : nt!CmpCallbackFatalFilter+0x24
ffff870c`83f5cfe0 fffff807`161a341f : ffff870c`00000003 ffff870c`83f5f100 ffff870c`83f59000 ffff870c`83f60000 : nt!CmpCallCallBacksEx$filt$0+0x19
ffff870c`83f5d010 fffff807`161d10cf : ffff870c`83f5f100 ffff870c`83f5d5f0 ffff870c`83f5d6d0 00000000`00000000 : nt!_C_specific_handler+0x9f
ffff870c`83f5d080 fffff807`1603bb20 : ffff870c`83f5d6d0 00000000`00000000 ffff870c`83f5d5f0 fffff805`3a20f134 : nt!RtlpExecuteHandlerForException+0xf
ffff870c`83f5d0b0 fffff807`16080e74 : ffff870c`83f5dfe8 ffff870c`83f5dd30 ffff870c`83f5dfe8 ffffbc0d`80b3f000 : nt!RtlDispatchException+0x430
ffff870c`83f5d800 fffff807`161d9e42 : 00000000`00001000 ffff870c`83f5e090 ffff8000`00000000 00000265`22961cc0 : nt!KiDispatchException+0x144
ffff870c`83f5deb0 fffff807`161d6168 : 00000000`00000030 00000000`00000030 ffffbc0d`818f4858 00000000`000001a0 : nt!KiExceptionDispatch+0xc2
ffff870c`83f5e090 fffff807`16632cd2 : fffff807`1660ac72 00000000`f46c6149 00000000`fcce5346 ffff870c`83f5ebd8 : nt!KiPageFault+0x428
ffff870c`83f5e228 fffff807`1660ac72 : 00000000`f46c6149 00000000`fcce5346 ffff870c`83f5ebd8 ffffbc0d`00000000 : nt!HvpGetCellPaged+0xa2
ffff870c`83f5e230 fffff807`1668dd6e : ffffbc0d`818f4858 ffff870c`83f5e470 ffff870c`83f5e430 ffff870c`83f5e490 : nt!CmpWalkOneLevel+0x272
ffff870c`83f5e350 fffff807`1668d26a : 0008b613`0000001c ffff870c`83f5e670 ffff870c`83f5e640 00000000`00000000 : nt!CmpDoParseKey+0x4ce
ffff870c`83f5e5c0 fffff807`166af1b9 : fffff807`1668d000 ffffbc0d`00000000 ffffce88`776f75e0 fffff807`00000000 : nt!CmpParseKey+0x26a
ffff870c`83f5e750 fffff807`166ad7bf : ffffce88`776f7500 ffff870c`83f5e9b8 ffff870c`00000240 ffffce88`774fa7a0 : nt!ObpLookupObjectName+0x719
ffff870c`83f5e920 fffff807`166abe48 : ffffce88`00000001 ffffce88`774fa7a0 00000000`00000000 00000000`00000000 : nt!ObOpenObjectByNameEx+0x1df
ffff870c`83f5ea60 fffff807`166ab392 : 00000000`0118aa5c 00000001`00000000 00020019`00000000 00000000`00020019 : nt!CmOpenKey+0x298
ffff870c`83f5ecb0 fffff807`161d9785 : 00000000`00000000 ffff870c`83f5ed50 00000000`00000000 00000000`00000000 : nt!NtOpenKey+0x12
ffff870c`83f5ecf0 fffff807`161cc2e0 : fffff805`3a22e3a1 00000000`00000000 00000000`00000000 00000000`00000001 : nt!KiSystemServiceCopyEnd+0x25
ffff870c`83f5ee88 fffff805`3a22e3a1 : 00000000`00000000 00000000`00000000 00000000`00000001 ffffce88`8884e700 : nt!KiServiceLinkage
ffff870c`83f5ee90 fffff805`3a22e695 : 00000000`00000000 ffffffff`8000470c 00000000`00000000 00000000`00000000 : WdFilter!MpRegpCheckExistingKey+0x155
ffff870c`83f5ef70 fffff805`3a22e0b3 : 00000000`00000000 00000000`003fed15 ffff870c`83f5f038 ffff870c`83f5f108 : WdFilter!MpRegPreCreateKeyEx+0x91
ffff870c`83f5f000 fffff807`166b08bb : ffff870c`83f5f2c0 ffffbc0d`86e02900 00000000`00000000 00000000`00000001 : WdFilter!MpRegCallback+0x823
ffff870c`83f5f100 fffff807`1668d218 : 00000000`0000001a ffff870c`83f5f2c0 ffff870c`83f5f290 fffff807`c0000001 : nt!CmpCallCallBacksEx+0x21b
ffff870c`83f5f210 fffff807`166af1b9 : fffff807`1668d000 ffffbc0d`00000000 ffffce88`8884e6e0 ffffbc0d`00020001 : nt!CmpParseKey+0x218
ffff870c`83f5f3a0 fffff807`166ad7bf : ffffce88`8884e600 ffff870c`83f5f608 00000000`00000040 ffffce88`774fa7a0 : nt!ObpLookupObjectName+0x719
ffff870c`83f5f570 fffff807`165a7141 : 00000000`00000001 ffffce88`774fa7a0 00000000`00000000 00000000`00000001 : nt!ObOpenObjectByNameEx+0x1df
ffff870c`83f5f6b0 fffff807`165a6cce : ffff2ad3`2ad1c8fd 00000000`00000000 00000000`00000000 0000004e`870fdf98 : nt!CmCreateKey+0x461
ffff870c`83f5f940 fffff807`161d9785 : 00000000`00000000 00007ffe`0fdf0000 00000000`00000000 0000004e`870fe3a8 : nt!NtCreateKey+0x2e
ffff870c`83f5f990 00007ffe`1322fa14 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSystemServiceCopyEnd+0x25
0000004e`870fdf38 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x00007ffe`1322fa14


THREAD_SHA1_HASH_MOD_FUNC:  5e60f92a7c48208787ec051b818cae73493c55f6

THREAD_SHA1_HASH_MOD_FUNC_OFFSET:  9776c71900119be219a348677f7721089efa9cbe

THREAD_SHA1_HASH_MOD:  3e200c12b73d4d34a66d34ca198f867350f3c0d2

FOLLOWUP_IP:
WdFilter!MpRegpCheckExistingKey+155
fffff805`3a22e3a1 0f1f440000      nop     dword ptr [rax+rax]

FAULT_INSTR_CODE:  441f0f

SYMBOL_STACK_INDEX:  13

SYMBOL_NAME:  WdFilter!MpRegpCheckExistingKey+155

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: WdFilter

IMAGE_NAME:  WdFilter.sys

DEBUG_FLR_IMAGE_TIMESTAMP:  6270d93a

IMAGE_VERSION:  4.18.1902.2

STACK_COMMAND:  .thread ; .cxr ; kb

BUCKET_ID_FUNC_OFFSET:  155

FAILURE_BUCKET_ID:  0x135_WdFilter!MpRegpCheckExistingKey

BUCKET_ID:  0x135_WdFilter!MpRegpCheckExistingKey

PRIMARY_PROBLEM_CLASS:  0x135_WdFilter!MpRegpCheckExistingKey

TARGET_TIME:  2019-04-01T10:32:32.000Z

OSBUILD:  17763

OSSERVICEPACK:  379

SERVICEPACK_NUMBER: 0

OS_REVISION: 0

SUITE_MASK:  272

PRODUCT_TYPE:  1

OSPLATFORM_TYPE:  x64

OSNAME:  Windows 10

OSEDITION:  Windows 10 WinNt TerminalServer SingleUserTS

OS_LOCALE:

USER_LCID:  0

OSBUILD_TIMESTAMP:  unknown_date

BUILDDATESTAMP_STR:  180914-1434

BUILDLAB_STR:  rs5_release

BUILDOSVER_STR:  10.0.17763.1.amd64fre.rs5_release.180914-1434

ANALYSIS_SESSION_ELAPSED_TIME:  2b31

ANALYSIS_SOURCE:  KM

FAILURE_ID_HASH_STRING:  km:0x135_wdfilter!mpregpcheckexistingkey

FAILURE_ID_HASH:  {e47a4972-b2d6-3eb2-5b55-cea37377c64f}

Followup:     MachineOwner
---------

Kod:

CRITICAL_PROCESS_DIED (ef)
        A critical system process died
Arguments:
Arg1: ffff9c03d152e080, Process object or thread object
Arg2: 0000000000000000, If this is 0, a process died. If this is 1, a thread died.
Arg3: 0000000000000000
Arg4: 0000000000000000

Debugging Details:
------------------


KEY_VALUES_STRING: 1


PROCESSES_ANALYSIS: 1

SERVICE_ANALYSIS: 1

STACKHASH_ANALYSIS: 1

TIMELINE_ANALYSIS: 1


DUMP_CLASS: 1

DUMP_QUALIFIER: 400

BUILD_VERSION_STRING:  17763.1.amd64fre.rs5_release.180914-1434

SYSTEM_MANUFACTURER:  LENOVO

SYSTEM_PRODUCT_NAME:  81AX

SYSTEM_SKU:  LENOVO_MT_81AX_BU_idea_FM_V330-15IKB

SYSTEM_VERSION:  Lenovo V330-15IKB

BIOS_VENDOR:  LENOVO

BIOS_VERSION:  6SCN41WW

BIOS_DATE:  12/19/2018

BASEBOARD_MANUFACTURER:  LENOVO

BASEBOARD_PRODUCT:  LNVNB161216

BASEBOARD_VERSION:  NO DPK

DUMP_TYPE:  2

BUGCHECK_P1: ffff9c03d152e080

BUGCHECK_P2: 0

BUGCHECK_P3: 0

BUGCHECK_P4: 0

PROCESS_NAME:  svchost.exe

CRITICAL_PROCESS:  svchost.exe

EXCEPTION_CODE: (NTSTATUS) 0xd42d1080 - <Unable to get error code text>

ERROR_CODE: (NTSTATUS) 0xd42d1080 - <Unable to get error code text>

CRITICAL_PROCESS_REPORTGUID:  {5b038417-d33f-44cd-a666-1437a75a7448}

IMAGE_NAME:  ntdll.dll

DEBUG_FLR_IMAGE_TIMESTAMP:  0

MODULE_NAME: ntdll

FAULTING_MODULE: 0000000000000000

CPU_COUNT: 8

CPU_MHZ: 708

CPU_VENDOR:  GenuineIntel

CPU_FAMILY: 6

CPU_MODEL: 8e

CPU_STEPPING: a

CPU_MICROCODE: 6,8e,a,0 (F,M,S,R)  SIG: 9A'00000000 (cache) 9A'00000000 (init)

BLACKBOXBSD: 1 (!blackboxbsd)


BLACKBOXPNP: 1 (!blackboxpnp)


CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  WIN8_DRIVER_FAULT

BUGCHECK_STR:  0xEF

CURRENT_IRQL:  0

ANALYSIS_SESSION_HOST:  DESKTOP-K01TCKK

ANALYSIS_SESSION_TIME:  04-05-2019 17:43:46.0432

ANALYSIS_VERSION: 10.0.18317.1001 amd64fre

LAST_CONTROL_TRANSFER:  from fffff8022d142c7d to fffff8022ca6a5e0

STACK_TEXT: 
ffffed8f`57bc7838 fffff802`2d142c7d : 00000000`000000ef ffff9c03`d152e080 00000000`00000000 00000000`00000000 : nt!KeBugCheckEx
ffffed8f`57bc7840 fffff802`2d03c56b : 00000000`00000000 fffff802`2c8f5c65 ffff9c03`d152e080 fffff802`2c8f5b64 : nt!PspCatchCriticalBreak+0xfd
ffffed8f`57bc78e0 fffff802`2ce9979c : ffff9c03`00000000 00000000`00000000 ffff9c03`d152e080 ffff9c03`d152e358 : nt!PspTerminateAllThreads+0x1a3f47
ffffed8f`57bc7950 fffff802`2ce9b2d9 : ffffffff`ffffffff ffffed8f`57bc7a80 ffff9c03`d152e080 fffff802`2ce61e01 : nt!PspTerminateProcess+0xe0
ffffed8f`57bc7990 fffff802`2ca7b785 : ffff9c03`00000398 ffff9c03`d42d1080 ffff9c03`d152e080 00000000`00000014 : nt!NtTerminateProcess+0xa9
ffffed8f`57bc7a00 00007ffc`02d9fbf4 : 00007ffc`02e10dac 00000000`00000000 00000091`f09ff75c 00000000`00000000 : nt!KiSystemServiceCopyEnd+0x25
00000091`f09fe648 00007ffc`02e10dac : 00000000`00000000 00000091`f09ff75c 00000000`00000000 00000000`00000000 : 0x00007ffc`02d9fbf4
00000091`f09fe650 00000000`00000000 : 00000091`f09ff75c 00000000`00000000 00000000`00000000 00000000`0000000a : 0x00007ffc`02e10dac


THREAD_SHA1_HASH_MOD_FUNC:  042a2b51772309c39e12d732cc93cacf0af3064e

THREAD_SHA1_HASH_MOD_FUNC_OFFSET:  0a80c693c56ff42e4239c7dba22b49f2de3d8f74

THREAD_SHA1_HASH_MOD:  ee8fcf1fb60cb6e3e2f60ddbed2ec02b5748a693

FOLLOWUP_NAME:  MachineOwner

STACK_COMMAND:  .thread ; .cxr ; kb

FAILURE_BUCKET_ID:  0xEF_svchost.exe_BUGCHECK_CRITICAL_PROCESS_d42d1080_ntdll.dll!TppWorkerFindTask_IMAGE_ntdll.dll

BUCKET_ID:  0xEF_svchost.exe_BUGCHECK_CRITICAL_PROCESS_d42d1080_ntdll.dll!TppWorkerFindTask_IMAGE_ntdll.dll

PRIMARY_PROBLEM_CLASS:  0xEF_svchost.exe_BUGCHECK_CRITICAL_PROCESS_d42d1080_ntdll.dll!TppWorkerFindTask_IMAGE_ntdll.dll

TARGET_TIME:  2019-04-05T12:13:19.000Z

OSBUILD:  17763

OSSERVICEPACK:  379

SERVICEPACK_NUMBER: 0

OS_REVISION: 0

SUITE_MASK:  272

PRODUCT_TYPE:  1

OSPLATFORM_TYPE:  x64

OSNAME:  Windows 10

OSEDITION:  Windows 10 WinNt TerminalServer SingleUserTS

OS_LOCALE: 

USER_LCID:  0

OSBUILD_TIMESTAMP:  unknown_date

BUILDDATESTAMP_STR:  180914-1434

BUILDLAB_STR:  rs5_release

BUILDOSVER_STR:  10.0.17763.1.amd64fre.rs5_release.180914-1434

ANALYSIS_SESSION_ELAPSED_TIME:  6eaf

ANALYSIS_SOURCE:  KM

FAILURE_ID_HASH_STRING:  km:0xef_svchost.exe_bugcheck_critical_process_d42d1080_ntdll.dll!tppworkerfindtask_image_ntdll.dll

FAILURE_ID_HASH:  {9777b82b-400c-a6b3-26c4-03e17c766da5}

Followup:     MachineOwner
---------

Skreynn · 6 Nisan 2019

4 GB dahili 4 GB harici olmak üzere 8 GB RAM bulunuyor. CPUZ programı üzerinden RAM'in mhz baktığımda 2400mhz(1200) yazıyor. Çok saçma geliyor bana 2400'ün yarısını kullanması. Laptoplarda normal midir bu durum?

REGISTRY_FILTER_DRIVER_EXCEPTION Mavi Ekran Hatası

Ayrıntılı düzenleme

Skreynn

Kilopat

MF

Technopat

Skreynn

Kilopat

Benzer konular

Yeni konular

Yeni mesajlar

Gizliliğinize önem veriyoruz