Microsoft ® Windows Debugger Version 6.11.0001.404 AMD64
Copyright © Microsoft Corporation. All rights reserved.
Loading Dump File [C:\Windows\MEMORY.DMP]
Kernel Summary Dump File: Only kernel address space is available
Symbol search path is: SRV*c:\symbols*http://msdl.microsoft.com/download/symbols
Executable search path is:
Windows Server 2008/Windows Vista Kernel Version 6002 (Service Pack 2) MP (2 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS Personal
Built by: 6002.18082.amd64fre.vistasp2_gdr.090803-2339
Machine Name:
Kernel base = 0xfffff800`01e4c000 PsLoadedModuleList = 0xfffff800`02010dd0
Debug session time: Wed Jan 20 10:48:46.412 2010 (GMT-5)
System Uptime: 0 days 1:28:58.233
Loading Kernel Symbols
...............................................................
................................................................
................
Loading User Symbols
PEB is paged out (Peb.Ldr = 00000000`7efdf018). Type ".hh dbgerr001" for details
Loading unloaded module list
...
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
Use !analyze -v to get detailed debugging information.
BugCheck A, {fffffa866173bfa8, 2, 1, fffff80001eb2f58}
Page b1680 not present in the dump file. Type ".hh dbgerr004" for details
PEB is paged out (Peb.Ldr = 00000000`7efdf018). Type ".hh dbgerr001" for details
PEB is paged out (Peb.Ldr = 00000000`7efdf018). Type ".hh dbgerr001" for details
Probably caused by : memory_corruption ( nt!MiRemoveAnyPage+178 )
Followup: MachineOwner
---------
1: kd> !analyze -v
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
IRQL_NOT_LESS_OR_EQUAL (a)
An attempt was made to access a pageable (or completely invalid) address at an
interrupt request level (IRQL) that is too high. This is usually
caused by drivers using improper addresses.
If a kernel debugger is available get the stack backtrace.
Arguments:
Arg1: fffffa866173bfa8, memory referenced
Arg2: 0000000000000002, IRQL
Arg3: 0000000000000001, bitfield :
bit 0 : value 0 = read operation, 1 = write operation
bit 3 : value 0 = not an execute operation, 1 = execute operation (only on chips which support this level of status)
Arg4: fffff80001eb2f58, address which referenced memory
Debugging Details:
------------------
Page b1680 not present in the dump file. Type ".hh dbgerr004" for details
PEB is paged out (Peb.Ldr = 00000000`7efdf018). Type ".hh dbgerr001" for details
PEB is paged out (Peb.Ldr = 00000000`7efdf018). Type ".hh dbgerr001" for details
WRITE_ADDRESS: fffffa866173bfa8
CURRENT_IRQL: 2
FAULTING_IP:
nt!MiRemoveAnyPage+178
fffff800`01eb2f58 4c094828 or qword ptr [rax+28h],r9
DEFAULT_BUCKET_ID: VISTA_DRIVER_FAULT
BUGCHECK_STR: 0xA
PROCESS_NAME: chrome.exe
TRAP_FRAME: fffffa60057b46e0 -- (.trap 0xfffffa60057b46e0)
NOTE: The trap frame does not contain all registers.
Some register values may be zeroed or incorrect.
rax=fffffa866173bf80 rbx=0000000000000000 rcx=0000000000000078
rdx=fffffa8003c00000 rsi=0000000000000000 rdi=0000000000000000
rip=fffff80001eb2f58 rsp=fffffa60057b4870 rbp=0000000000000000
r8=0000058000000000 r9=000fffffffffffff r10=0000000000000000
r11=0000000000000028 r12=0000000000000000 r13=0000000000000000
r14=0000000000000000 r15=0000000000000000
iopl=0 nv up ei ng nz na pe cy
nt!MiRemoveAnyPage+0x178:
fffff800`01eb2f58 4c094828 or qword ptr [rax+28h],r9 ds:4720:bfa8=????????????????
Resetting default scope
LAST_CONTROL_TRANSFER: from fffff80001ea61ee to fffff80001ea6450
STACK_TEXT:
fffffa60`057b4598 fffff800`01ea61ee : 00000000`0000000a fffffa86`6173bfa8 00000000`00000002 00000000`00000001 : nt!KeBugCheckEx
fffffa60`057b45a0 fffff800`01ea50cb : 00000000`00000001 00000000`00000000 00000000`00001000 fffffa80`02052780 : nt!KiBugCheckDispatch+0x6e
fffffa60`057b46e0 fffff800`01eb2f58 : 00000000`00000020 00000000`00000000 00000000`00000080 fffff700`01080000 : nt!KiPageFault+0x20b
fffffa60`057b4870 fffff800`01ebdefb : 00000000`40000028 fffffa80`06173330 fffffa80`06173040 fffffa80`0344e350 : nt!MiRemoveAnyPage+0x178
fffffa60`057b48d0 fffff800`01ec05b2 : 00000000`00000001 00000000`027b4000 00000000`00000080 00000000`00000060 : nt!MiResolveDemandZeroFault+0x17b
fffffa60`057b4960 fffff800`01ebefd0 : fffff680`00013da0 00000000`00000020 fffff680`00013da0 fffffa80`06173330 : nt!MiResolveProtoPteFault+0x402
fffffa60`057b49e0 fffff800`01ebc9dd : 00000000`00000000 00000000`027b4000 fffffa80`06070060 fffffa80`00000000 : nt!MiDispatchFault+0x190
fffffa60`057b4b40 fffff800`01ea4fd9 : 00000000`00000001 fffffa60`057b4ca0 fffffa80`06173001 00000000`05ae750c : nt!MmAccessFault+0x32d
fffffa60`057b4c20 00000000`70e1ae40 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiPageFault+0x119
00000000`0339f84c 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x70e1ae40
STACK_COMMAND: kb
FOLLOWUP_IP:
nt!MiRemoveAnyPage+178
fffff800`01eb2f58 4c094828 or qword ptr [rax+28h],r9
SYMBOL_STACK_INDEX: 3
SYMBOL_NAME: nt!MiRemoveAnyPage+178
FOLLOWUP_NAME: MachineOwner
MODULE_NAME: nt
DEBUG_FLR_IMAGE_TIMESTAMP: 4a7801eb
IMAGE_NAME: memory_corruption
FAILURE_BUCKET_ID: X64_0xA_nt!MiRemoveAnyPage+178
BUCKET_ID: X64_0xA_nt!MiRemoveAnyPage+178
Followup: MachineOwner
---------
Thanks.

Help
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Back to top



















