Jump to content


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.

Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.


BSOD Again

  • Please log in to reply
1 reply to this topic

#1 tryn2learn


  • Members
  • 220 posts
  • Gender:Female
  • Location:Upstate NY
  • Local time:11:30 PM

Posted 22 May 2009 - 08:10 PM

Two days ago I had a bsod and I posted the event ID, I didn't hear from anyone so I went ahead and changed the +COM to 'started' instead of manual which is what it was on. Tonight I crashed again. This is the minidump with the 'lm' run after the analys_z

I hope someone can help me. Everything was working so splendidly. My only change was to download Microsoft Visual Web Developer 2008 Express. If you think that is the problem I will remove it immediately. Here is the dump.

Microsoft ® Windows Debugger Version 6.11.0001.404 X86
Copyright © Microsoft Corporation. All rights reserved.

Loading Dump File [C:\Windows\Minidump\Mini052209-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available

Symbol search path is: SRV*c:\symbols*http://msdl.microsoft.com/download/symbols
Executable search path is:
Windows Server 2008/Windows Vista Kernel Version 6001 (Service Pack 1) MP (2 procs) Free x86 compatible
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 6001.18226.x86fre.vistasp1_gdr.090302-1506
Machine Name:
Kernel base = 0x82017000 PsLoadedModuleList = 0x8212ec70
Debug session time: Fri May 22 20:05:11.335 2009 (GMT-4)
System Uptime: 2 days 22:34:53.654
Loading Kernel Symbols
Loading User Symbols
Loading unloaded module list
* *
* Bugcheck Analysis *
* *

Use !analyze -v to get detailed debugging information.

BugCheck A, {bafffffc, 2, 0, 8204c84c}

Probably caused by : memory_corruption ( nt!MiIdentifyPfn+a29 )

Followup: MachineOwner

1: kd> !analyze -v
* *
* Bugcheck Analysis *
* *

An attempt was made to access a pageable (or completely invalid) address at an
interrupt request level (IRQL) that is too high. This is usually
caused by drivers using improper addresses.
If a kernel debugger is available get the stack backtrace.
Arg1: bafffffc, memory referenced
Arg2: 00000002, IRQL
Arg3: 00000000, bitfield :
bit 0 : value 0 = read operation, 1 = write operation
bit 3 : value 0 = not an execute operation, 1 = execute operation (only on chips which support this level of status)
Arg4: 8204c84c, address which referenced memory

Debugging Details:

READ_ADDRESS: GetPointerFromAddress: unable to read from 8214e868
Unable to read MiSystemVaType memory at 8212e420


8204c84c 8b7918 mov edi,dword ptr [ecx+18h]




PROCESS_NAME: svchost.exe

TRAP_FRAME: 8f0c57e4 -- (.trap 0xffffffff8f0c57e4)
ErrCode = 00000000
eax=01ffffff ebx=b01ec4c0 ecx=baffffe4 edx=01ffffff esi=00000003 edi=01ffffff
eip=8204c84c esp=8f0c5858 ebp=8f0c58b8 iopl=0 nv up ei pl nz na pe nc
cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00010206
8204c84c 8b7918 mov edi,dword ptr [ecx+18h] ds:0023:bafffffc=????????
Resetting default scope

LAST_CONTROL_TRANSFER: from 8204c84c to 82071d24

8f0c57e4 8204c84c badb0d00 01ffffff 00df0092 nt!KiTrap0E+0x2ac
8f0c58b8 820aacbd 8f0c5864 031ec4c0 b01ec000 nt!MiIdentifyPfn+0xa29
8f0c58ec 82229b79 228758b4 8f0c5978 00000006 nt!MmQueryPfnList+0x130
8f0c5930 82244c1a 803d1101 22875824 00000014 nt!PfpPfnPrioRequest+0xdc
8f0c59a0 82250199 00000000 803d1101 8f0c5d30 nt!PfQuerySuperfetchInformation+0xea
8f0c5d4c 8206ea1a 0000004f 01c9f328 00000014 nt!NtQuerySystemInformation+0x2201
8f0c5d4c 77279a94 0000004f 01c9f328 00000014 nt!KiFastCallEntry+0x12a
WARNING: Frame IP not in any known module. Following frames may be wrong.
01c9f2f4 00000000 00000000 00000000 00000000 0x77279a94


8204c84c 8b7918 mov edi,dword ptr [ecx+18h]


SYMBOL_NAME: nt!MiIdentifyPfn+a29




IMAGE_NAME: memory_corruption

FAILURE_BUCKET_ID: 0xA_nt!MiIdentifyPfn+a29

BUCKET_ID: 0xA_nt!MiIdentifyPfn+a29

Followup: MachineOwner

1: kd> lm
start end module name
80406000 8040e000 kdcom (deferred)
8040e000 8046e000 mcupdate_GenuineIntel (deferred)
8046e000 8047f000 PSHED (deferred)
8047f000 80487000 BOOTVID (deferred)
80487000 804c8000 CLFS (deferred)
804c8000 805a8000 CI (deferred)
805a8000 805da000 fltmgr (deferred)
805da000 805f0980 av5flt (deferred)
8060f000 8068b000 Wdf01000 (deferred)
8068b000 80698000 WDFLDR (deferred)
80698000 806de000 acpi (deferred)
806de000 806e7000 WMILIB (deferred)
806e7000 806ef000 msisadrv (deferred)
806ef000 80716000 pci (deferred)
80716000 80725000 partmgr (deferred)
80725000 80734000 volmgr (deferred)
80734000 8077e000 volmgrx (deferred)
8077e000 80785000 pciide (deferred)
80785000 80793000 PCIIDEX (deferred)
80793000 807a3000 mountmgr (deferred)
807a3000 807a8580 pavboot (deferred)
807a9000 807b1000 atapi (deferred)
807b1000 807cf000 ataport (deferred)
807cf000 807df000 fileinfo (deferred)
807df000 807e7b80 PxHelp20 (deferred)
807e8000 807fc580 WUDFRd (deferred)
80e09000 80e42000 mrxsmb10 (deferred)
80e42000 80e5a000 mrxsmb20 (deferred)
80e5a000 80e81000 srv2 (deferred)
80e81000 80ecd000 srv (deferred)
80ecd000 80ed6000 asyncmac (deferred)
80ed6000 80ede000 PavSRK (deferred)
80ede000 80ee5000 COMFiltr (deferred)
80ee5000 80f0f380 PavProc (deferred)
80f10000 80fee000 peauth (deferred)
80fee000 80ff8000 secdrv (deferred)
80ff8000 80ffca00 LVPr2Mon (deferred)
82017000 823d0000 nt (pdb symbols) c:\symbols\ntkrpamp.pdb\B3AD261F09694EC7A5695B6130DDAC4D2\ntkrpamp.pdb
823d0000 82403000 hal (deferred)
82601000 82672000 ksecdd (deferred)
82672000 8277d000 ndis (deferred)
8277d000 827a8000 msrpc (deferred)
827a8000 827e2000 NETIO (deferred)
827e2000 827fa000 cdrom (deferred)
8aa03000 8aaea000 tcpip (deferred)
8aaea000 8ab05000 fwpkclnt (deferred)
8ab05000 8ab14000 intelppm (deferred)
8ab14000 8abb3000 dxgkrnl (deferred)
8abb3000 8abf1000 USBPORT (deferred)
8ac00000 8ad0f000 Ntfs (deferred)
8ad0f000 8ad48000 volsnap (deferred)
8ad48000 8ad50000 spldr (deferred)
8ad50000 8ad5f000 mup (deferred)
8ad5f000 8ad86000 ecache (deferred)
8ad86000 8ad97000 disk (deferred)
8ad97000 8adb8000 CLASSPNP (deferred)
8adb8000 8adc1000 crcdisk (deferred)
8adc1000 8ade0000 mrxsmb (deferred)
8ade1000 8adec000 tunnel (deferred)
8adec000 8adf5000 tunmp (deferred)
8f200000 8f289000 rdpdr (deferred)
8f289000 8f299000 termdd (deferred)
8f299000 8f29a380 swenum (deferred)
8f29b000 8f2a5000 mssmbios (deferred)
8f2a5000 8f2b2000 umbus (deferred)
8f2b2000 8f2e6000 usbhub (deferred)
8f2e6000 8f2f0000 flpydisk (deferred)
8f2f0000 8f301000 NDProxy (deferred)
8f30c000 8f322000 pacer (deferred)
8f322000 8f32c000 usbprint (deferred)
8f32c000 8f33a000 netbios (deferred)
8f33a000 8f34c000 USBSTOR (deferred)
8f34c000 8f355c80 WNMFLT (deferred)
8f356000 8f369000 wanarp (deferred)
8f369000 8f371680 ShlDrv51 (deferred)
8f372000 8f3ae000 rdbss (deferred)
8f3ae000 8f3b8000 nsiproxy (deferred)
8f3b8000 8f3e5b00 IDSFLT (deferred)
8f3e6000 8f3e9600 elrawdsk (deferred)
8f3ea000 8f3f5500 DSAFLT (deferred)
8f60e000 8fd6f5c0 nvlddmkm (deferred)
8fd70000 8fd71040 nvBridge (deferred)
8fd72000 8fd7f000 watchdog (deferred)
8fd7f000 8fd8a000 HECI (deferred)
8fd8a000 8fdc2000 e1e6032 (deferred)
8fdc2000 8fdcd000 usbuhci (deferred)
8fdcd000 8fddc000 usbehci (deferred)
8fddc000 8fdee000 HDAudBus (deferred)
8fe0b000 8fe53000 VSTBS23 (deferred)
8fe53000 8fe7d000 ks (deferred)
8fe7d000 8ff81000 VSTDPV3 (deferred)
8ff81000 8ffa4000 ndiswan (deferred)
8ffa4000 8ffb8000 raspptp (deferred)
8ffb8000 8ffcd000 rassstp (deferred)
8ffcd000 8fffbb00 neti1634 (deferred)
9000c000 900bf000 VSTCNXT3 (deferred)
900bf000 900cc000 modem (deferred)
900cc000 900db200 ohci1394 (deferred)
900dc000 900e9080 1394BUS (deferred)
900ea000 900f5000 fdc (deferred)
900f5000 90108000 i8042prt (deferred)
90108000 90113000 mouclass (deferred)
90113000 9011e000 kbdclass (deferred)
9011e000 90138000 serial (deferred)
90138000 90142000 serenum (deferred)
90142000 90170000 msiscsi (deferred)
90170000 901b1000 storport (deferred)
901b1000 901bc000 TDI (deferred)
901bc000 901d3000 rasl2tp (deferred)
901d3000 901de000 ndistapi (deferred)
901de000 901ed000 raspppoe (deferred)
901ed000 901ff000 WUDFPf (deferred)
90600000 90603c00 fnetmon (deferred)
90607000 9083c340 RTKVHDA (deferred)
9083d000 9086a000 portcls (deferred)
9086a000 9088f000 drmk (deferred)
9088f000 90898000 Fs_Rec (deferred)
90898000 9089f000 Null (deferred)
9089f000 908a6000 Beep (deferred)
908a6000 908b2000 vga (deferred)
908b2000 908d3000 VIDEOPRT (deferred)
908d3000 908db000 RDPCDD (deferred)
908db000 908e3000 rdpencdd (deferred)
908e3000 908ee000 Msfs (deferred)
908ee000 908fc000 Npfs (deferred)
908fc000 90905000 rasacd (deferred)
90905000 9091b000 tdx (deferred)
9091b000 9092f000 smb (deferred)
9092f000 90954280 NETFLTDI (deferred)
90955000 9096c000 usbccgp (deferred)
9096c000 9096d700 USBD (deferred)
9096e000 909b6000 afd (deferred)
909b6000 909be900 LVUSBSta (deferred)
909bf000 909f1000 netbt (deferred)
909f1000 909fe000 usbscan (deferred)
90e02000 90e5c000 csc (deferred)
90e5c000 90e73000 dfsc (deferred)
90e73000 90e83600 APPFLT (deferred)
90e84000 90f33000 spsys (deferred)
90f33000 90f9e000 HTTP (deferred)
90f9e000 90fbb000 srvnet (deferred)
90fbb000 90fd0000 mpsdrv (deferred)
90fd0000 90ff0000 mrxdav (deferred)
90ff0000 90ffc000 tcpipreg (deferred)
91c03000 92072b00 lvuvc (deferred)
92073000 92084d80 usbaudio (deferred)
92085000 9211ce00 lvrs (deferred)
9211d000 9212a000 crashdmp (deferred)
9212a000 92135000 dump_dumpata (deferred)
92135000 9213d000 dump_atapi (deferred)
9213d000 92147000 Dxapi (deferred)
92147000 92156000 monitor (deferred)
92156000 92171000 luafv (deferred)
92171000 92181000 amm8660 (deferred)
92181000 9218d000 PavTPK (deferred)
9218d000 9219d000 lltdio (deferred)
9219d000 921c7000 nwifi (deferred)
921c7000 921d1000 ndisuio (deferred)
921d1000 921e4000 rspndr (deferred)
921e4000 921fd000 bowser (deferred)
9e290000 9e492000 win32k (deferred)
9e4b0000 9e4b9000 TSDDD (deferred)
9e4d0000 9e51c000 ATMFD (deferred)
9e520000 9e52e000 cdd (deferred)
a4406000 a441c000 cdfs (deferred)
a441c000 a4457000 udfs (deferred)

Unloaded modules:
a445a000 a445d000 RkPavproc1.s
a4457000 a445a000 RkPavproc1.s
8adc1000 8adce000 crashdmp.sys
8adce000 8add9000 dump_ataport
8add9000 8ade1000 dump_atapi.s
8f30a000 8f30c000 USBD.SYS
8f301000 8f30a000 LVUSBSta.sys

If anyone understands this and can help, I'd be most appreciative. usamsa was so very helpful last time, hopefully you can help this time. I'm starting to get gunshy again.


BC AdBot (Login to Remove)


#2 tryn2learn

  • Topic Starter

  • Members
  • 220 posts
  • Gender:Female
  • Location:Upstate NY
  • Local time:11:30 PM

Posted 05 June 2009 - 08:38 AM

Please close this topic.

Resolved issue by removing Visual Web Developer Express.

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users