BleepingComputer.com: blue screen crash 0x0000000A

I desperately need help. My hard drive crashed hard and was not recoverable. I had to purchase a new drive to replace it. At the same time I decided to install Vista Business OS. I worked with the mfg who took control of my machine and updated the Intel chipset drivers to Vista, the video card drivers and all other necessary drivers to Vista.

Now my problem, I continue to crash with error 0x0000000A (0xBABffffC, 0x00000002, 0x00000000, 0x81E814C) Can anybody help me. Microsoft evidently knows of this but I could not find anything on their help and support nor thru the reporting/solutions. It tells me to check back later.

My husband is beginning to think I don't know how to run a computer and I'm beginning to wonder myself! I have only been running this new hard drive and Vista for a few days, and now this stuff is happening.

My thanks in advance to anyone that can help me out.
Donna

Here is what the event report says:

Log Name: Application
Source: Microsoft-Windows-WMI
Date: 3/22/2009 10:14:54 AM
Event ID: 10
Task Category: None
Level: Error
Keywords: Classic
User: N/A
Computer: DDBPC1
Description:
Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-WMI" Guid="{1edeee53-0afe-4609-b846-d8c0b2075b1f}" EventSourceName="WinMgmt" />
<EventID Qualifiers="49152">10</EventID>
<Version>0</Version>
<Level>2</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2009-03-22T14:14:54.000Z" />
<EventRecordID>1332</EventRecordID>
<Correlation />
<Execution ProcessID="0" ThreadID="0" />
<Channel>Application</Channel>
<Computer>DDBPC1</Computer>
<Security />
</System>
<EventData>
<Data>//./root/CIMV2</Data>
<Data>SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage &gt; 99</Data>
<Data>0x80041003</Data>
</EventData>
</Event>

Details

Log Name: Application
Source: Microsoft-Windows-WMI
Date: 3/22/2009 10:14:54 AM
Event ID: 10
Task Category: None
Level: Error
Keywords: Classic
User: N/A
Computer: DDBPC1
Description:
Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-WMI" Guid="{1edeee53-0afe-4609-b846-d8c0b2075b1f}" EventSourceName="WinMgmt" />
<EventID Qualifiers="49152">10</EventID>
<Version>0</Version>
<Level>2</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2009-03-22T14:14:54.000Z" />
<EventRecordID>1332</EventRecordID>
<Correlation />
<Execution ProcessID="0" ThreadID="0" />
<Channel>Application</Channel>
<Computer>DDBPC1</Computer>
<Security />
</System>
<EventData>
<Data>//./root/CIMV2</Data>
<Data>SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage &gt; 99</Data>
<Data>0x80041003</Data>
</EventData>
</Event>

The error report should be in the System log file (the errors that you posted are from the Application log file).

For more info on BSOD messages, see this link: http://www.bleepingcomputer.com/forums/top...tml#entry409491
For assistance in diagnosing the crashes, see this link: http://www.bleepingcomputer.com/forums/topic176011.html

I am reposting http://www.bleepingcomputer.com/forums/topic213064.html with the minidump to follow.


OKAY HERE GOES..............

Ran Panda Active Scan and system is clean. Also am using Panda Internet Security 2009

I have a custom built Nexlink system. My original machine was loaded with XP Pro, after several crashes it finally killed the hard drive and my DSL Modem. I purchased a new hard drive and this time upgraded to Vista Business, as well as. have a brand new modem.

My system is:

OS Name Microsoft® Windows Vista™ Business
Version 6.0.6001 Service Pack 1 Build 6001
Other OS Description Not Available
OS Manufacturer Microsoft Corporation
System Name DDBPC1
System Manufacturer Seneca
System Model pro15523
System Type X86-based PC
Processor Intel® Core™2 Duo CPU E6850 @ 3.00GHz, 2997 Mhz, 2 Core(s), 2 Logical Processor(s)
BIOS Version/Date Intel Corp. DPP3510J.86A.0262.2007.0723.1620, 7/23/2007
SMBIOS Version 2.4
Windows Directory C:\Windows
System Directory C:\Windows\system32
Boot Device \Device\HarddiskVolume1
Locale United States
Hardware Abstraction Layer Version = "6.0.6001.18000"
User Name DDBPC1\Donna
Time Zone Eastern Daylight Time
Installed Physical Memory (RAM) 4.00 GB
Total Physical Memory 3.24 GB
Available Physical Memory 1.82 GB
Total Virtual Memory 6.72 GB
Available Virtual Memory 5.37 GB
Page File Space 3.54 GB
Page File C:\pagefile.sys



Here is the minidump. I'm getting the same error with memory corrupt that I did with the hard drive that died. I am using a NVidia 8500GT video card with driver updated March 2009.



Microsoft ® Windows Debugger Version 6.11.0001.404 X86
Copyright © Microsoft Corporation. All rights reserved.


Loading Dump File [C:\Windows\Minidump\Mini032209-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available

Symbol search path is: SRV*c:\symbols*http://msdl.microsoft.com/download/symbols
Executable search path is:
Windows Server 2008/Windows Vista Kernel Version 6001 (Service Pack 1) MP (2 procs) Free x86 compatible
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 6001.18145.x86fre.vistasp1_gdr.080917-1612
Machine Name:
Kernel base = 0x81e4d000 PsLoadedModuleList = 0x81f64c70
Debug session time: Sun Mar 22 22:02:01.576 2009 (GMT-4)
System Uptime: 0 days 0:51:21.398
Loading Kernel Symbols
...............................................................
................................................................
..............................
Loading User Symbols
Loading unloaded module list
.....
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck A, {babffffc, 2, 0, 81e8284c}

Probably caused by : memory_corruption ( nt!MiIdentifyPfn+a29 )

Followup: MachineOwner
---------

1: kd> !analyze -v
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

IRQL_NOT_LESS_OR_EQUAL (a)
An attempt was made to access a pageable (or completely invalid) address at an
interrupt request level (IRQL) that is too high. This is usually
caused by drivers using improper addresses.
If a kernel debugger is available get the stack backtrace.
Arguments:
Arg1: babffffc, memory referenced
Arg2: 00000002, IRQL
Arg3: 00000000, bitfield :
bit 0 : value 0 = read operation, 1 = write operation
bit 3 : value 0 = not an execute operation, 1 = execute operation (only on chips which support this level of status)
Arg4: 81e8284c, address which referenced memory

Debugging Details:
------------------


READ_ADDRESS: GetPointerFromAddress: unable to read from 81f84868
Unable to read MiSystemVaType memory at 81f64420
babffffc

CURRENT_IRQL: 2

FAULTING_IP:
nt!MiIdentifyPfn+a29
81e8284c 8b7918 mov edi,dword ptr [ecx+18h]

CUSTOMER_CRASH_COUNT: 1

DEFAULT_BUCKET_ID: VISTA_DRIVER_FAULT

BUGCHECK_STR: 0xA

PROCESS_NAME: svchost.exe

TRAP_FRAME: 8111e7e4 -- (.trap 0xffffffff8111e7e4)
ErrCode = 00000000
eax=01ffffff ebx=87f6f720 ecx=babfffe4 edx=01ffffff esi=00000006 edi=01ffffff
eip=81e8284c esp=8111e858 ebp=8111e8b8 iopl=0 nv up ei pl nz na pe nc
cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00010206
nt!MiIdentifyPfn+0xa29:
81e8284c 8b7918 mov edi,dword ptr [ecx+18h] ds:0023:babffffc=????????
Resetting default scope

LAST_CONTROL_TRANSFER: from 81e8284c to 81ea7d24

STACK_TEXT:
8111e7e4 81e8284c badb0d00 01ffffff 00469a96 nt!KiTrap0E+0x2ac
8111e8b8 81ee0cbd 8111e864 03f6f720 87f6f000 nt!MiIdentifyPfn+0xa29
8111e8ec 8205fb8b 0c62be2d 8111e978 00000006 nt!MmQueryPfnList+0x130
8111e930 8207ac4a 00000001 0c62bebd 00000014 nt!PfpPfnPrioRequest+0xdc
8111e9a0 820861c9 00000000 00000001 8111ed30 nt!PfQuerySuperfetchInformation+0xea
8111ed4c 81ea4a1a 0000004f 0188f470 00000014 nt!NtQuerySystemInformation+0x2201
8111ed4c 77339a94 0000004f 0188f470 00000014 nt!KiFastCallEntry+0x12a
WARNING: Frame IP not in any known module. Following frames may be wrong.
0188f43c 00000000 00000000 00000000 00000000 0x77339a94


STACK_COMMAND: kb

FOLLOWUP_IP:
nt!MiIdentifyPfn+a29
81e8284c 8b7918 mov edi,dword ptr [ecx+18h]

SYMBOL_STACK_INDEX: 1

SYMBOL_NAME: nt!MiIdentifyPfn+a29

FOLLOWUP_NAME: MachineOwner

MODULE_NAME: nt

DEBUG_FLR_IMAGE_TIMESTAMP: 48d1b7fa

IMAGE_NAME: memory_corruption

FAILURE_BUCKET_ID: 0xA_nt!MiIdentifyPfn+a29

BUCKET_ID: 0xA_nt!MiIdentifyPfn+a29

Followup: MachineOwner
---------


Any help would be greatly appreciated, as I am just about in tears now trying to figure out why this keeps happening to me.
Thanks much,
Donna

tryn2learn,
I've merged your other topic, with this one.
Please keep all discussions about this problem, in this topic.
Starting more than one topic, about the same problem, is called double posting, and isn't allowed.

tq1911

You guys keep telling me where to re-post items and I do as asked. The last time someone closed both my posts with no answers. I put a link to the original post as usasma gave me the 2 links on how and where to post this specific issue. I did what the links asked and now I'm getting yelled at.

I still need help with this topic. After usasma ask that I follow the directions in his post, which said to post the issue and results here, what was I suppose to do? If you would please clarify exactly what I should have done, I would be more than happy to comply. I don't want to post more than once, I just need to get a better understanding of to repost an issue if it's in the wrong place so I don't get scoulded.

I'm truly sorry, but an explanation would be greatly appreciated on how to cancel a misposted topic and reopen the same in another subject area.

My thanks
Tryn2learn

Please rerun the dump file analysis.
At the bottom of the debugger is a place where you can type.
Type "lm" (without the quotes) and press Enter.
Post the results of that command back here.

I'm looking to see what's loaded at 0x77339a94
While waiting for a response, follow the instructions here to test your memory: http://www.bleepingcomputer.com/tutorials/using-vista-windows-memory-diagnostics-tool/

I tried it and it keeps giving me a syntax error.

I typed it in as Im and pressed enter. Am I doing it wrong?

Thanks

Sorry, was being stupid. It was lower case L

Here it is and then I'm running memory test.


Microsoft ® Windows Debugger Version 6.11.0001.404 X86
Copyright © Microsoft Corporation. All rights reserved.


Loading Dump File [C:\Windows\Minidump\Mini032209-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available

Symbol search path is: SRV*c:\symbols*http://msdl.microsoft.com/download/symbols
Executable search path is:
Windows Server 2008/Windows Vista Kernel Version 6001 (Service Pack 1) MP (2 procs) Free x86 compatible
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 6001.18145.x86fre.vistasp1_gdr.080917-1612
Machine Name:
Kernel base = 0x81e4d000 PsLoadedModuleList = 0x81f64c70
Debug session time: Sun Mar 22 22:02:01.576 2009 (GMT-4)
System Uptime: 0 days 0:51:21.398
Loading Kernel Symbols
...............................................................
................................................................
..............................
Loading User Symbols
Loading unloaded module list
.....
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck A, {babffffc, 2, 0, 81e8284c}

Probably caused by : memory_corruption ( nt!MiIdentifyPfn+a29 )

Followup: MachineOwner
---------

1: kd> lm
start end module name
8040e000 80416000 kdcom (deferred)
80416000 80476000 mcupdate_GenuineIntel (deferred)
80476000 80487000 PSHED (deferred)
80487000 8048f000 BOOTVID (deferred)
8048f000 804d0000 CLFS (deferred)
804d0000 805b0000 CI (deferred)
805b0000 805c0000 fileinfo (deferred)
805c0000 805ea000 ks (deferred)
805ea000 805fa000 amm8660 (deferred)
80600000 80608b80 PxHelp20 (deferred)
80609000 80685000 Wdf01000 (deferred)
80685000 80692000 WDFLDR (deferred)
80692000 806d8000 acpi (deferred)
806d8000 806e1000 WMILIB (deferred)
806e1000 806e9000 msisadrv (deferred)
806e9000 80710000 pci (deferred)
80710000 8071f000 partmgr (deferred)
8071f000 8072e000 volmgr (deferred)
8072e000 80778000 volmgrx (deferred)
80778000 8077f000 pciide (deferred)
8077f000 8078d000 PCIIDEX (deferred)
8078d000 8079d000 mountmgr (deferred)
8079d000 807a2580 pavboot (deferred)
807a3000 807ab000 atapi (deferred)
807ab000 807c9000 ataport (deferred)
807c9000 807fb000 fltmgr (deferred)
80c0c000 80c45000 mrxsmb10 (deferred)
80c45000 80c5d000 mrxsmb20 (deferred)
80c5d000 80c84000 srv2 (deferred)
80c84000 80cd0000 srv (deferred)
80cd0000 80cd8000 PavSRK (deferred)
80cd8000 80cdf000 COMFiltr (deferred)
80cdf000 80d09380 PavProc (deferred)
80d0a000 80de8000 peauth (deferred)
80de8000 80df2000 secdrv (deferred)
80df2000 80dfe000 tcpipreg (deferred)
81e1a000 81e4d000 hal (deferred)
81e4d000 82206000 nt (pdb symbols) c:\symbols\ntkrpamp.pdb\E3AF30C94A334570818A670674C7F9602\ntkrpamp.pdb
8a600000 8a60c000 PavTPK (deferred)
8a60c000 8a67d000 ksecdd (deferred)
8a67d000 8a788000 ndis (deferred)
8a788000 8a7b3000 msrpc (deferred)
8a7b3000 8a7ed000 NETIO (deferred)
8a7ed000 8a7fa000 umbus (deferred)
8a805000 8a8ec000 tcpip (deferred)
8a8ec000 8a907000 fwpkclnt (deferred)
8a907000 8a916000 intelppm (deferred)
8a916000 8a94e000 e1e6032 (deferred)
8a94e000 8a98c000 USBPORT (deferred)
8a98c000 8a9a4000 cdrom (deferred)
8a9a4000 8a9ec000 VSTBS23 (deferred)
8a9ec000 8a9ff000 i8042prt (deferred)
8aa07000 8ab16000 Ntfs (deferred)
8ab16000 8ab4f000 volsnap (deferred)
8ab4f000 8ab57000 spldr (deferred)
8ab57000 8ab66000 mup (deferred)
8ab66000 8ab8d000 ecache (deferred)
8ab8d000 8ab9e000 disk (deferred)
8ab9e000 8abbf000 CLASSPNP (deferred)
8abbf000 8abc8000 crcdisk (deferred)
8abc8000 8abe3000 luafv (deferred)
8abe8000 8abf3000 tunnel (deferred)
8abf3000 8abfc000 tunmp (deferred)
8e609000 8e623000 serial (deferred)
8e623000 8e62d000 serenum (deferred)
8e62d000 8e65b000 msiscsi (deferred)
8e65b000 8e69c000 storport (deferred)
8e69c000 8e6a7000 TDI (deferred)
8e6a7000 8e6be000 rasl2tp (deferred)
8e6be000 8e6c9000 ndistapi (deferred)
8e6c9000 8e6ec000 ndiswan (deferred)
8e6ec000 8e6fb000 raspppoe (deferred)
8e6fb000 8e70f000 raspptp (deferred)
8e70f000 8e724000 rassstp (deferred)
8e724000 8e752b00 neti1634 (deferred)
8e753000 8e7dc000 rdpdr (deferred)
8e7dc000 8e7ec000 termdd (deferred)
8e7ec000 8e7ed380 swenum (deferred)
8e7ee000 8e7f8000 mssmbios (deferred)
8ec00000 8ec0b000 mouclass (deferred)
8ec0b000 8ed0f000 VSTDPV3 (deferred)
8ed0f000 8edc2000 VSTCNXT3 (deferred)
8edc2000 8edcf000 modem (deferred)
8edcf000 8edde200 ohci1394 (deferred)
8eddf000 8edec080 1394BUS (deferred)
8eded000 8edf8000 fdc (deferred)
8f200000 8f20b000 kbdclass (deferred)
8f917000 8f9b6000 dxgkrnl (deferred)
8f9b6000 8f9c3000 watchdog (deferred)
8f9c3000 8f9ce000 HECI (deferred)
8f9ce000 8f9d9000 usbuhci (deferred)
8f9d9000 8f9e8000 usbehci (deferred)
8f9e8000 8f9fa000 HDAudBus (deferred)
8fa0a000 8fa3e000 usbhub (deferred)
8fa3e000 8fa48000 flpydisk (deferred)
8fa48000 8fa59000 NDProxy (deferred)
8fa59000 8fa67000 netbios (deferred)
8fa67000 8fa70c80 WNMFLT (deferred)
8fa71000 8fa7e000 usbscan (deferred)
8fa7e000 8fa91000 wanarp (deferred)
8fa91000 8fa9b000 usbprint (deferred)
8fa9b000 8faa3680 ShlDrv51 (deferred)
8faa4000 8fae0000 rdbss (deferred)
8fae0000 8faea000 nsiproxy (deferred)
8faea000 8fb17b00 IDSFLT (deferred)
8fb18000 8fb2a000 USBSTOR (deferred)
8fb2a000 8fb2d600 elrawdsk (deferred)
8fb2e000 8fb39500 DSAFLT (deferred)
8fb3a000 8fb94000 csc (deferred)
8fb94000 8fbab000 dfsc (deferred)
8fbab000 8fbbb600 APPFLT (deferred)
8fbbc000 8fbc9000 crashdmp (deferred)
8fbc9000 8fbd4000 dump_dumpata (deferred)
8fbd4000 8fbdc000 dump_atapi (deferred)
8fbdc000 8fbe6000 Dxapi (deferred)
91002000 91237340 RTKVHDA (deferred)
91238000 91265000 portcls (deferred)
91265000 9128a000 drmk (deferred)
9128a000 91293000 Fs_Rec (deferred)
91293000 9129a000 Null (deferred)
9129a000 912a1000 Beep (deferred)
912a1000 912ad000 vga (deferred)
912ad000 912ce000 VIDEOPRT (deferred)
912ce000 912d6000 RDPCDD (deferred)
912d6000 912de000 rdpencdd (deferred)
912de000 912e9000 Msfs (deferred)
912e9000 912f7000 Npfs (deferred)
912f7000 91300000 rasacd (deferred)
91300000 91316000 tdx (deferred)
91316000 9132a000 smb (deferred)
9132a000 9134f280 NETFLTDI (deferred)
91350000 91398000 afd (deferred)
91398000 913ca000 netbt (deferred)
913ca000 913e0000 pacer (deferred)
913e0000 913f7000 usbccgp (deferred)
913f7000 913f8700 USBD (deferred)
913f9000 913fcc00 fnetmon (deferred)
9a450000 9a652000 win32k (deferred)
9a670000 9a679000 TSDDD (deferred)
9a690000 9a6dc000 ATMFD (deferred)
9a780000 9a78e000 cdd (deferred)
9ac05000 9b36ce00 nvlddmkm (deferred)
9b36d000 9b36e040 nvBridge (deferred)
9b36f000 9b37e000 monitor (deferred)
9ee0d000 9eebc000 spsys (deferred)
9eebc000 9eecc000 lltdio (deferred)
9eecc000 9eedf000 rspndr (deferred)
9eedf000 9ef4a000 HTTP (deferred)
9ef4a000 9ef67000 srvnet (deferred)
9ef67000 9ef80000 bowser (deferred)
9ef80000 9ef95000 mpsdrv (deferred)
9ef95000 9efb5000 mrxdav (deferred)
9efb5000 9efd4000 mrxsmb (deferred)
9efd4000 9efe8580 WUDFRd (deferred)
9efe9000 9effb000 WUDFPf (deferred)
a1800000 a1816980 av5flt (deferred)
a1817000 a182d000 cdfs (deferred)
a182d000 a1836000 asyncmac (deferred)

Unloaded modules:
8f20d000 8f917000 nvlddmkm.sys
8fbe6000 8fbf5000 monitor.sys
8abc8000 8abd5000 crashdmp.sys
8abd5000 8abe0000 dump_ataport
8abe0000 8abe8000 dump_atapi.s


Thanks very much,
Donna

Here's the full with !analyze -v


Microsoft ® Windows Debugger Version 6.11.0001.404 X86
Copyright © Microsoft Corporation. All rights reserved.


Loading Dump File [C:\Windows\Minidump\Mini032209-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available

Symbol search path is: SRV*c:\symbols*http://msdl.microsoft.com/download/symbols
Executable search path is:
Windows Server 2008/Windows Vista Kernel Version 6001 (Service Pack 1) MP (2 procs) Free x86 compatible
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 6001.18145.x86fre.vistasp1_gdr.080917-1612
Machine Name:
Kernel base = 0x81e4d000 PsLoadedModuleList = 0x81f64c70
Debug session time: Sun Mar 22 22:02:01.576 2009 (GMT-4)
System Uptime: 0 days 0:51:21.398
Loading Kernel Symbols
...............................................................
................................................................
..............................
Loading User Symbols
Loading unloaded module list
.....
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck A, {babffffc, 2, 0, 81e8284c}

Probably caused by : memory_corruption ( nt!MiIdentifyPfn+a29 )

Followup: MachineOwner
---------

1: kd> !analyze -v
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

IRQL_NOT_LESS_OR_EQUAL (a)
An attempt was made to access a pageable (or completely invalid) address at an
interrupt request level (IRQL) that is too high. This is usually
caused by drivers using improper addresses.
If a kernel debugger is available get the stack backtrace.
Arguments:
Arg1: babffffc, memory referenced
Arg2: 00000002, IRQL
Arg3: 00000000, bitfield :
bit 0 : value 0 = read operation, 1 = write operation
bit 3 : value 0 = not an execute operation, 1 = execute operation (only on chips which support this level of status)
Arg4: 81e8284c, address which referenced memory

Debugging Details:
------------------


READ_ADDRESS: GetPointerFromAddress: unable to read from 81f84868
Unable to read MiSystemVaType memory at 81f64420
babffffc

CURRENT_IRQL: 2

FAULTING_IP:
nt!MiIdentifyPfn+a29
81e8284c 8b7918 mov edi,dword ptr [ecx+18h]

CUSTOMER_CRASH_COUNT: 1

DEFAULT_BUCKET_ID: VISTA_DRIVER_FAULT

BUGCHECK_STR: 0xA

PROCESS_NAME: svchost.exe

TRAP_FRAME: 8111e7e4 -- (.trap 0xffffffff8111e7e4)
ErrCode = 00000000
eax=01ffffff ebx=87f6f720 ecx=babfffe4 edx=01ffffff esi=00000006 edi=01ffffff
eip=81e8284c esp=8111e858 ebp=8111e8b8 iopl=0 nv up ei pl nz na pe nc
cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00010206
nt!MiIdentifyPfn+0xa29:
81e8284c 8b7918 mov edi,dword ptr [ecx+18h] ds:0023:babffffc=????????
Resetting default scope

LAST_CONTROL_TRANSFER: from 81e8284c to 81ea7d24

STACK_TEXT:
8111e7e4 81e8284c badb0d00 01ffffff 00469a96 nt!KiTrap0E+0x2ac
8111e8b8 81ee0cbd 8111e864 03f6f720 87f6f000 nt!MiIdentifyPfn+0xa29
8111e8ec 8205fb8b 0c62be2d 8111e978 00000006 nt!MmQueryPfnList+0x130
8111e930 8207ac4a 00000001 0c62bebd 00000014 nt!PfpPfnPrioRequest+0xdc
8111e9a0 820861c9 00000000 00000001 8111ed30 nt!PfQuerySuperfetchInformation+0xea
8111ed4c 81ea4a1a 0000004f 0188f470 00000014 nt!NtQuerySystemInformation+0x2201
8111ed4c 77339a94 0000004f 0188f470 00000014 nt!KiFastCallEntry+0x12a
WARNING: Frame IP not in any known module. Following frames may be wrong.
0188f43c 00000000 00000000 00000000 00000000 0x77339a94


STACK_COMMAND: kb

FOLLOWUP_IP:
nt!MiIdentifyPfn+a29
81e8284c 8b7918 mov edi,dword ptr [ecx+18h]

SYMBOL_STACK_INDEX: 1

SYMBOL_NAME: nt!MiIdentifyPfn+a29

FOLLOWUP_NAME: MachineOwner

MODULE_NAME: nt

DEBUG_FLR_IMAGE_TIMESTAMP: 48d1b7fa

IMAGE_NAME: memory_corruption

FAILURE_BUCKET_ID: 0xA_nt!MiIdentifyPfn+a29

BUCKET_ID: 0xA_nt!MiIdentifyPfn+a29

Followup: MachineOwner
---------

1: kd> lm
start end module name
8040e000 80416000 kdcom (deferred)
80416000 80476000 mcupdate_GenuineIntel (deferred)
80476000 80487000 PSHED (deferred)
80487000 8048f000 BOOTVID (deferred)
8048f000 804d0000 CLFS (deferred)
804d0000 805b0000 CI (deferred)
805b0000 805c0000 fileinfo (deferred)
805c0000 805ea000 ks (deferred)
805ea000 805fa000 amm8660 (deferred)
80600000 80608b80 PxHelp20 (deferred)
80609000 80685000 Wdf01000 (deferred)
80685000 80692000 WDFLDR (deferred)
80692000 806d8000 acpi (deferred)
806d8000 806e1000 WMILIB (deferred)
806e1000 806e9000 msisadrv (deferred)
806e9000 80710000 pci (deferred)
80710000 8071f000 partmgr (deferred)
8071f000 8072e000 volmgr (deferred)
8072e000 80778000 volmgrx (deferred)
80778000 8077f000 pciide (deferred)
8077f000 8078d000 PCIIDEX (deferred)
8078d000 8079d000 mountmgr (deferred)
8079d000 807a2580 pavboot (deferred)
807a3000 807ab000 atapi (deferred)
807ab000 807c9000 ataport (deferred)
807c9000 807fb000 fltmgr (deferred)
80c0c000 80c45000 mrxsmb10 (deferred)
80c45000 80c5d000 mrxsmb20 (deferred)
80c5d000 80c84000 srv2 (deferred)
80c84000 80cd0000 srv (deferred)
80cd0000 80cd8000 PavSRK (deferred)
80cd8000 80cdf000 COMFiltr (deferred)
80cdf000 80d09380 PavProc (deferred)
80d0a000 80de8000 peauth (deferred)
80de8000 80df2000 secdrv (deferred)
80df2000 80dfe000 tcpipreg (deferred)
81e1a000 81e4d000 hal (deferred)
81e4d000 82206000 nt (pdb symbols) c:\symbols\ntkrpamp.pdb\E3AF30C94A334570818A670674C7F9602\ntkrpamp.pdb
8a600000 8a60c000 PavTPK (deferred)
8a60c000 8a67d000 ksecdd (deferred)
8a67d000 8a788000 ndis (deferred)
8a788000 8a7b3000 msrpc (deferred)
8a7b3000 8a7ed000 NETIO (deferred)
8a7ed000 8a7fa000 umbus (deferred)
8a805000 8a8ec000 tcpip (deferred)
8a8ec000 8a907000 fwpkclnt (deferred)
8a907000 8a916000 intelppm (deferred)
8a916000 8a94e000 e1e6032 (deferred)
8a94e000 8a98c000 USBPORT (deferred)
8a98c000 8a9a4000 cdrom (deferred)
8a9a4000 8a9ec000 VSTBS23 (deferred)
8a9ec000 8a9ff000 i8042prt (deferred)
8aa07000 8ab16000 Ntfs (deferred)
8ab16000 8ab4f000 volsnap (deferred)
8ab4f000 8ab57000 spldr (deferred)
8ab57000 8ab66000 mup (deferred)
8ab66000 8ab8d000 ecache (deferred)
8ab8d000 8ab9e000 disk (deferred)
8ab9e000 8abbf000 CLASSPNP (deferred)
8abbf000 8abc8000 crcdisk (deferred)
8abc8000 8abe3000 luafv (deferred)
8abe8000 8abf3000 tunnel (deferred)
8abf3000 8abfc000 tunmp (deferred)
8e609000 8e623000 serial (deferred)
8e623000 8e62d000 serenum (deferred)
8e62d000 8e65b000 msiscsi (deferred)
8e65b000 8e69c000 storport (deferred)
8e69c000 8e6a7000 TDI (deferred)
8e6a7000 8e6be000 rasl2tp (deferred)
8e6be000 8e6c9000 ndistapi (deferred)
8e6c9000 8e6ec000 ndiswan (deferred)
8e6ec000 8e6fb000 raspppoe (deferred)
8e6fb000 8e70f000 raspptp (deferred)
8e70f000 8e724000 rassstp (deferred)
8e724000 8e752b00 neti1634 (deferred)
8e753000 8e7dc000 rdpdr (deferred)
8e7dc000 8e7ec000 termdd (deferred)
8e7ec000 8e7ed380 swenum (deferred)
8e7ee000 8e7f8000 mssmbios (deferred)
8ec00000 8ec0b000 mouclass (deferred)
8ec0b000 8ed0f000 VSTDPV3 (deferred)
8ed0f000 8edc2000 VSTCNXT3 (deferred)
8edc2000 8edcf000 modem (deferred)
8edcf000 8edde200 ohci1394 (deferred)
8eddf000 8edec080 1394BUS (deferred)
8eded000 8edf8000 fdc (deferred)
8f200000 8f20b000 kbdclass (deferred)
8f917000 8f9b6000 dxgkrnl (deferred)
8f9b6000 8f9c3000 watchdog (deferred)
8f9c3000 8f9ce000 HECI (deferred)
8f9ce000 8f9d9000 usbuhci (deferred)
8f9d9000 8f9e8000 usbehci (deferred)
8f9e8000 8f9fa000 HDAudBus (deferred)
8fa0a000 8fa3e000 usbhub (deferred)
8fa3e000 8fa48000 flpydisk (deferred)
8fa48000 8fa59000 NDProxy (deferred)
8fa59000 8fa67000 netbios (deferred)
8fa67000 8fa70c80 WNMFLT (deferred)
8fa71000 8fa7e000 usbscan (deferred)
8fa7e000 8fa91000 wanarp (deferred)
8fa91000 8fa9b000 usbprint (deferred)
8fa9b000 8faa3680 ShlDrv51 (deferred)
8faa4000 8fae0000 rdbss (deferred)
8fae0000 8faea000 nsiproxy (deferred)
8faea000 8fb17b00 IDSFLT (deferred)
8fb18000 8fb2a000 USBSTOR (deferred)
8fb2a000 8fb2d600 elrawdsk (deferred)
8fb2e000 8fb39500 DSAFLT (deferred)
8fb3a000 8fb94000 csc (deferred)
8fb94000 8fbab000 dfsc (deferred)
8fbab000 8fbbb600 APPFLT (deferred)
8fbbc000 8fbc9000 crashdmp (deferred)
8fbc9000 8fbd4000 dump_dumpata (deferred)
8fbd4000 8fbdc000 dump_atapi (deferred)
8fbdc000 8fbe6000 Dxapi (deferred)
91002000 91237340 RTKVHDA (deferred)
91238000 91265000 portcls (deferred)
91265000 9128a000 drmk (deferred)
9128a000 91293000 Fs_Rec (deferred)
91293000 9129a000 Null (deferred)
9129a000 912a1000 Beep (deferred)
912a1000 912ad000 vga (deferred)
912ad000 912ce000 VIDEOPRT (deferred)
912ce000 912d6000 RDPCDD (deferred)
912d6000 912de000 rdpencdd (deferred)
912de000 912e9000 Msfs (deferred)
912e9000 912f7000 Npfs (deferred)
912f7000 91300000 rasacd (deferred)
91300000 91316000 tdx (deferred)
91316000 9132a000 smb (deferred)
9132a000 9134f280 NETFLTDI (deferred)
91350000 91398000 afd (deferred)
91398000 913ca000 netbt (deferred)
913ca000 913e0000 pacer (deferred)
913e0000 913f7000 usbccgp (deferred)
913f7000 913f8700 USBD (deferred)
913f9000 913fcc00 fnetmon (deferred)
9a450000 9a652000 win32k (deferred)
9a670000 9a679000 TSDDD (deferred)
9a690000 9a6dc000 ATMFD (deferred)
9a780000 9a78e000 cdd (deferred)
9ac05000 9b36ce00 nvlddmkm (deferred)
9b36d000 9b36e040 nvBridge (deferred)
9b36f000 9b37e000 monitor (deferred)
9ee0d000 9eebc000 spsys (deferred)
9eebc000 9eecc000 lltdio (deferred)
9eecc000 9eedf000 rspndr (deferred)
9eedf000 9ef4a000 HTTP (deferred)
9ef4a000 9ef67000 srvnet (deferred)
9ef67000 9ef80000 bowser (deferred)
9ef80000 9ef95000 mpsdrv (deferred)
9ef95000 9efb5000 mrxdav (deferred)
9efb5000 9efd4000 mrxsmb (deferred)
9efd4000 9efe8580 WUDFRd (deferred)
9efe9000 9effb000 WUDFPf (deferred)
a1800000 a1816980 av5flt (deferred)
a1817000 a182d000 cdfs (deferred)
a182d000 a1836000 asyncmac (deferred)

Unloaded modules:
8f20d000 8f917000 nvlddmkm.sys
8fbe6000 8fbf5000 monitor.sys
8abc8000 8abd5000 crashdmp.sys
8abd5000 8abe0000 dump_ataport
8abe0000 8abe8000 dump_atapi.s

usasma,

I ran the memory diagnostics tool and it did not find any errors. When it rebooted for me to sign back in though, I did not get the pop up window in the lower right of the screen saying "No memory errors were detected."

It only said it on the blue screen continually until it reached 100% and then rebooted.

Donna

The 77339xxx number wasn't listed in the lm output - as such I'd suspect it was a driver doing this.
Have you installed anything new or updated anything recently?

usasma,

I've only had the new hard drive and system for a week and 1/2 at most. The mfg shipped it and I installed it. They had me download the drivers from their website. Problem was, they were drivers for the XP Pro OS. I then called them and they took over and loaded all the correct Vista OS drivers.

The last driver installed was for my Acer LCD and that was a recommendation through Windows Update. I did install that March 16, 2009. It's an analog driver for the display. The hard drive was initially set up corectly on March 16th as well. Other than loading my data and application software and the printer drivers, also loaded the 16th, I have not loaded any other drivers or hardware.

What bothers me is this problem started last July and continued (I posted in the past with minidumps but they were closed because of not being posted in the correct spot, and confusion on what was being replied to by whom). The minidumps from the XP Pro OS and old hard drive also were memory corrupt errors. If I remember correctly when it started you had me test heat build up as part of the problem and I wound up sending the computer back to the mfg for testing and they said that it was okay.

Could this be an issue with a bad video card? I ask because I am doing a lot of video editing and have had driver problems in the past and Adobe worked with Nvidia to get updates to the Open GL as it was not functioning properly with Adobe Soundbooth.

Yesterday, it crashed and I couldn't open Outlook, the 3rd restart the computer then asked if I wanted it to look for the fix to Outlook and it worked. Then Firefox crashed for no apparent reason and a report was sent to them. Firefox did then reopen and seems to be functioning okay now.

I don't understand why this would be happening all over again with a new hard drive and new OS. Frustrating to say the least. That's why I asked if the video card needs to be replaced if something could have happened to it.

Thanks
TryN (Donna)

There's no sure indication of what's causing this. Is this a new system, or is it the old system with a new hard drive? I'd have to wonder if this is an issue with some of the software that you've installed.

It's possible for a video card to go bad - but the test is to buy a new video card and see if it does the same thing.
If this is a laptop, that's not possible - but you can do that with a desktop.

I'd have to suggest running a special test, but first would have to make sure of a couple of things (as it may stop you from getting into Windows).
- Do you have the recovery disks for your system?
- Do you have your important stuff backed up?
- Do you have access to another computer to communicate with (in case the other one can't connect)?

Once you're ready, post back and I'll have a bunch of instructions for you.

I have the original media disk of Vista, and I have done the Vista Complete PC backup and also let Vista automatically do 2 file back ups on an external drive, which I now have unplugged as I'm afraid of losing everything. I also have a CD with the Vista chipset driver, and other component drivers which the mfg loaded via remotely to my machine.


Software that I have is:
Windows Office 2007
Adobe Dreamweaver
Adobe Photoshop CS3
Adobe Premiere Elements 6
Adobe Photoshope Elements 4
Adobe Soundbooth CS4
Adobe Bridge CS3

System Mechanic
RegCure
HijackThis
Family Tree 2008
Advanced Batch Converter
Nuance PDF Converter Pro 5
Panda Internet Security 2009
Canon Printer (I did use the driver CD that came with it when I purchased in May 2008 which said it was Vista compatible)

I use both Internet Explorer 7 and Firefox 3.0.7
I am connected to the internet via DSL through Frontiernet. When the other hard drive died, so did my modem. Yet when Frontier came out they could not figure out why it died and just gave me a new one. It's plug and play.

Then just the stuff that comes with Vista and Office and Adobe.


This is a custom built Nexlink purchased in Nov 2007. The hard drive died 21/2 weeks ago and I just installed a new hard drive from the mfg of the machine. The hard drive is a Western Digital brand 500GB. I have 4 GB RAM.



I DO NOT have access to another computer unless I go to a library or someplace like that.

Let me know what you think.
Thanks so very much.
TryN

The test that I'm referring to is called Driver Verifier. It's purpose is to cause a Blue Screen Of Death as soon as the offending driver is run. So, if the driver loads early on in the boot process, the system may crash before you can log in to Windows. And if you can't load into Windows, you can't do anything!

Since you don't have easy access to another computer to work on, I'd suggest trying a few more things before we use Driver Verifier
First, I'd get rid of RegCure. Repeated usage of registry cleaning applications can hose your registry and can cause problems such as this. I haven't used it myself, but haven't heard anything good about it. In this post Platypus points to reviews of it: http://www.bleepingcomputer.com/forums/ind...t&p=1187645

Next is the Adobe stuff. There have been numerous issues of Adobe problems with Vista. I'd suggest updating all of the Adobe programs with the latest versions available at their website. If possible, try killing (End process) all Adobe processes in Task Manager...Processes tab when not using them. Be sure to click on the button to "Show processes from all users"

You may want to purchase a video card that you know is returnable to test your old card. That way, if it's not the card, you can return the new card and get your money back.

Finally, you can still use the Driver Verifier if you're prepared to reinstall Windows if you can't get back into it. If you're unable to get into normal mode, you can sometimes get into Safe Mode to disable the Driver Verifier settings.

Here's the how-to (paragraphs 4 & 5 discuss turning off Driver Verifier):

Quote