Please advise what should I do. I had BSOD today and WhoCrashed analyzed it as follows:
On Sat 12/13/2014 GMT your computer crashed crash dump file: C:\Windows\memory.dmp This was probably caused by the following module: avgrkx64.sys (avgrkx64+0x2C21) Bugcheck code: 0xC4 (0x83, 0xB14733C0, 0x8, 0x2B1473) Error: DRIVER_VERIFIER_DETECTED_VIOLATION file path: C:\Windows\system32\drivers\avgrkx64.sys product: AVG Internet Security company: AVG Technologies CZ, s.r.o. description: AVG Anti-Rootkit Driver Bug check description: This is the general bug check code for fatal errors found by Driver Verifier. The driver called MmMapIoSpace without having locked down the MDL pages. The physical pages represented by the physical address range being mapped must have been locked down prior to making this call. This appears to be a typical software driver bug and is not likely to be caused by a hardware problem. A third party driver was identified as the probable root cause of this system error. It is suggested you look for an update for the following driver: avgrkx64.sys (AVG Anti-Rootkit Driver, AVG Technologies CZ, s.r.o.). Google query: AVG Technologies CZ, s.r.o. DRIVER_VERIFIER_DETECTED_VIOLATION
One of the solutions might be to turn off Driver Verifier, but this would not address potential problems with your driver.
I can send the full dmp file if you tell me to whom and by what method do you want to accept it. Thank,
Yaron Lidor quote "I can send the full dmp file if you tell me to whom and by what method do you want to accept it".... Yaron, If you upload to the AVG FTP server (http://kb.avg.com/articles/en_US/How_to/How-to-upload-a-file-to-our-FTP-server/) and provide AVG with the name of file here that should sufficient. AVG Guru
Alan, thanks for your reply. I used the AVG uploader to upload 2 files: dory@flash.net_14120852.7z (mailto:dory@flash.net_14120852.7z) and dory@flash.net_14120915.7z (mailto:dory@flash.net_14120915.7z). The first one contains the memory.dmp from the c/windows folder and the second contains the file 121214-39765-01.dmp from my c/windows/minidump. They both occured at the same time. The first one involves the driver avgrkx64.sys and the second ntoskrnl.exe. I'm confident that the second file was successfuly uploaded, but AVG Upload perhaps did not complete the upload of the first file (it became not responsive during the upload). Yet when I tried to upload the first file via the manual method the operation failed with a message that I do not have privilage to overwrite dory@flash.net_14120852.7z (mailto:dory@flash.net_14120852.7z). So hopefully this file was also uploaded in its entirity. Please let me know if I need to upload again the first file. Thanks, Ron
Hi Yaron, I would like to let you know that the data has been passed to our developers(AV-6386). Please note that this thread will be updated when further information is required from our team. Thanks
Hi Yaron, Unfortunatelly only solution is to turn off Driver Verifier for Anti-Rootkit driver (avgrkx64.sys). Because we use this API to map a computer memory which doesn't belong to us (which Driver Verifier correctly caches) as we need to read that memory to do an Anti-Rootkit scan. Thanks
Yaron, If you upload to the AVG FTP server (http://kb.avg.com/articles/en_US/How_to/How-to-upload-a-file-to-our-FTP-server/) and provide AVG with the name of file here that should sufficient.
AVG Guru
I used the AVG uploader to upload 2 files: dory@flash.net_14120852.7z (mailto:dory@flash.net_14120852.7z) and dory@flash.net_14120915.7z (mailto:dory@flash.net_14120915.7z). The first one contains the memory.dmp from the c/windows folder and the second contains the file 121214-39765-01.dmp from my c/windows/minidump. They both occured at the same time. The first one involves the driver avgrkx64.sys and the second ntoskrnl.exe. I'm confident that the second file was successfuly uploaded, but AVG Upload perhaps did not complete the upload of the first file (it became not responsive during the upload). Yet when I tried to upload the first file via the manual method the operation failed with a message that I do not have privilage to overwrite dory@flash.net_14120852.7z (mailto:dory@flash.net_14120852.7z). So hopefully this file was also uploaded in its entirity. Please let me know if I need to upload again the first file. Thanks, Ron
I would like to let you know that the data has been passed to our developers(AV-6386). Please note that this thread will be updated when further information is required from our team.
Thanks
Unfortunatelly only solution is to turn off Driver Verifier for Anti-Rootkit driver (avgrkx64.sys). Because we use this API to map a computer memory which doesn't belong to us (which Driver Verifier correctly caches) as we need to read that memory to do an Anti-Rootkit scan.
Thanks
My File:link:https://onedrive.live.com/?cid=7952d29c74625081
Please provide us with more information (detailed description, screenshot) so we can better understand what issue you are dealing with.
Thanks
Analyze provided dumps shows "Probably caused by : igdkmd64.sys".
Thanks