page fault in nonpaged area

Question

Здравствуйте, у меня синий экран с ошибкой PAGE FAULT IN NONPAGED AREA. Возникает рандомно. Читал уже подобные темы тут, ничего не помогает. (ссылку с дампами прикрепляю) https://dropmefiles.com/SBjEE

Answer 1

возможно, LightStudi относится к программе моего ноутбука OMEN LigthStudio(подсвечивание клавиатуры), ОС стоковая при покупки предоставлялась, если ничего не путаю

Answer 2

По самим программам вроде всё нормально. Вот только процесс "LightStudi" в дампах не вполне понятно к какой программе относится. И название странное....

По самой ОС есть ешё уточняющие вопросы. Напишите, как была получена лицензия на эту 10-ку и откуда взят ключ "...-3V66T"?

Answer 3

скриншоты прикрепляю: 1ая и 2ая страница программ и компонентов и окно slmgr.vbs /dlv

Answer 4

[071324-9796-01.dmp]

SYSTEM_SERVICE_EXCEPTION (3b)

An exception happened while executing a system service routine.

Arguments:

Arg1: 00000000c0000005, Exception code that caused the BugCheck

Arg2: fffff8035e42ee82, Address of the instruction which caused the BugCheck

Arg3: ffff8003f26b4960, Address of the context record for the exception that caused the BugCheck

Arg4: 0000000000000000, zero.

PROCESS_NAME: LightStudi

MODULE_NAME: nt

IMAGE_NAME: ntkrnlmp.exe

FAILURE_BUCKET_ID: AV_nt!RtlpHpLfhSlotAllocate

[071324-8671-01.dmp]

SYSTEM_SERVICE_EXCEPTION (3b)

An exception happened while executing a system service routine.

Arguments:

Arg1: 00000000c0000005, Exception code that caused the BugCheck

Arg2: fffff8023a2116e3, Address of the instruction which caused the BugCheck

Arg3: ffffd201834f8ae0, Address of the context record for the exception that caused the BugCheck

Arg4: 0000000000000000, zero.

PROCESS_NAME: dwm.exe

MODULE_NAME: dxgmms2

IMAGE_NAME: dxgmms2.sys

FAILURE_BUCKET_ID: AV_dxgmms2!VIDMM_DEVICE::EnsureSchedulable

PnpProblemCode : 24

DeviceId           : SWD\MMDEVAPI\{0.0.0.00000000}.{9c7ffaf4-44c4-47d7-8416-e45a505aeb56}

[071324-8312-01.dmp]

PAGE_FAULT_IN_NONPAGED_AREA (50)

Invalid system memory was referenced. This cannot be protected by try-except.

Typically the address is just plain bad or it is pointing at freed memory.

Arguments:

Arg1: ffffb10400000000, memory referenced.

Arg2: 0000000000000000, X64: bit 0 set if the fault was due to a not-present PTE.

bit 1 is set if the fault was due to a write, clear if a read.

bit 3 is set if the processor decided the fault was due to a corrupted PTE.

bit 4 is set if the fault was due to attempted execute of a no-execute PTE.

- ARM64: bit 1 is set if the fault was due to a write, clear if a read.

bit 3 is set if the fault was due to attempted execute of a no-execute PTE.

Arg3: fffff8051e047238, If non-zero, the instruction address which referenced the bad memory

address.

Arg4: 0000000000000002, (reserved)

PROCESS_NAME: conhost.exe

MODULE_NAME: nt

IMAGE_NAME: ntkrnlmp.exe

FAILURE_BUCKET_ID: AV_R_(null)_nt!EtwpEventWriteFull

[071324-8218-01.dmp]

PAGE_FAULT_IN_NONPAGED_AREA (50)

Invalid system memory was referenced. This cannot be protected by try-except.

Typically the address is just plain bad or it is pointing at freed memory.

Arguments:

Arg1: fffffd97d0804000, memory referenced.

Arg2: 0000000000000000, X64: bit 0 set if the fault was due to a not-present PTE.

bit 1 is set if the fault was due to a write, clear if a read.

bit 3 is set if the processor decided the fault was due to a corrupted PTE.

bit 4 is set if the fault was due to attempted execute of a no-execute PTE.

- ARM64: bit 1 is set if the fault was due to a write, clear if a read.

bit 3 is set if the fault was due to attempted execute of a no-execute PTE.

Arg3: fffff8008121536f, If non-zero, the instruction address which referenced the bad memory

address.

Arg4: 0000000000000002, (reserved)

PROCESS_NAME: LightStudi

MODULE_NAME: nt

IMAGE_NAME: ntkrnlmp.exe

FAILURE_BUCKET_ID: AV_R_(null)_nt!MiCommitPageTablesForVad

[071324-8203-01.dmp]

PAGE_FAULT_IN_NONPAGED_AREA (50)

Invalid system memory was referenced. This cannot be protected by try-except.

Typically the address is just plain bad or it is pointing at freed memory.

Arguments:

Arg1: fffff71a90804000, memory referenced.

Arg2: 0000000000000000, X64: bit 0 set if the fault was due to a not-present PTE.

bit 1 is set if the fault was due to a write, clear if a read.

bit 3 is set if the processor decided the fault was due to a corrupted PTE.

bit 4 is set if the fault was due to attempted execute of a no-execute PTE.

- ARM64: bit 1 is set if the fault was due to a write, clear if a read.

bit 3 is set if the fault was due to attempted execute of a no-execute PTE.

Arg3: fffff80473a1536f, If non-zero, the instruction address which referenced the bad memory

address.

Arg4: 0000000000000002, (reserved)

*** WARNING: Check Image - Checksum mismatch - AgileVpn.sys

PROCESS_NAME: LightStudi

MODULE_NAME: nt

IMAGE_NAME: ntkrnlmp.exe

FAILURE_BUCKET_ID: AV_R_(null)_nt!MiCommitPageTablesForVad

__________________________________

[HARDWARE]

Vendor AMI

BIOS Version F.16

BIOS Release Date 04/07/2022

Manufacturer HP

Product Name OMEN Laptop 15-en0xxx

Chassis Type Notebook

Socket Designation FP6

Processor Version AMD Ryzen 7 4800H with Radeon Graphics

Processor Voltage 8ch - 1.2V

External Clock 100MHz

Max Speed 4300MHz

Current Speed 2900MHz

Memory:

Size 8192MB

Form Factor 0dh - SODIMM

Device Set [None]

Device Locator Bottom - Slot 1 (left)

Bank Locator P0 CHANNEL A

Memory Type 1ah - DDR4

Type Detail 4080h - Synchronous Unbuffered (Unregistered)

Speed 3200MHz

Manufacturer Samsung

Part Number M471A1K43DB1-CWE

Configured Memory Speed 3200

Minimum Voltage 1200

Maximum Voltage 1200

Configured Voltage 1200

Size 8192MB

Form Factor 0dh - SODIMM

Device Set [None]

Device Locator Bottom - Slot 2 (right)

Bank Locator P0 CHANNEL B

Memory Type 1ah - DDR4

Type Detail 4080h - Synchronous Unbuffered (Unregistered)

Speed 3200MHz

Manufacturer Samsung

Part Number M471A1K43DB1-CWE

Configured Memory Speed 3200

Minimum Voltage 1200

Maximum Voltage 1200

Configured Voltage 1200

.............................................................................

Ошибки памяти в работе ядра и системных компонентов. Вероятно вызвано влиянием стороннего или вредоносного ПО, модифицирующие компоненты ОС (на это указывает наличие "IMAGE_NAME: ntkrnlmp.exe" в дампах.

Выложите здесь скриншоты:

1. Окна Панель управления-Программы и компоненты со списком всех установленных программ.
2. Окна команды slmgr.vbs /dlv

Answer 5

Здравствуйте.

Дампы загрузил. Как будут результаты-напишу.