Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Blue screen


  • Please log in to reply
No replies to this topic

#1 rs232

rs232

  • Members
  • 1 posts
  • OFFLINE
  •  
  • Local time:05:23 PM

Posted 11 June 2009 - 10:11 AM

Hello everybody. i need some help. Since yesterday I've been experiencing lot of problems with my vista 64.
I'm tpretty sure these blue screens are not HW related as vista in safe mode AND linux run from a live cd don;t give me any problem or what so ever.

You can find below the analysis or my smalldump, please advise:

Symbol search path is: SRV*c:\symbols*http://msdl.microsoft.com/download/symbols
Executable search path is: 
Windows Server 2008/Windows Vista Kernel Version 6002 (Service Pack 2) MP (2 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 6002.18005.amd64fre.lh_sp2rtm.090410-1830
Machine Name:
Kernel base = 0xfffff800`01c07000 PsLoadedModuleList = 0xfffff800`01dcbdd0
Debug session time: Thu Jun 11 16:18:28.501 2009 (GMT+1)
System Uptime: 0 days 0:01:34.360
Loading Kernel Symbols
...............................................................
................................................................
....................................
Loading User Symbols
Loading unloaded module list
....
*******************************************************************************
*																			 *
*						Bugcheck Analysis									*
*																			 *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck 3B, {c0000005, fffff80001e6c1b4, fffffa600ca123b0, 0}

Probably caused by : memory_corruption

Followup: memory_corruption
---------

0: kd> !analyze -v
*******************************************************************************
*																			 *
*						Bugcheck Analysis									*
*																			 *
*******************************************************************************

SYSTEM_SERVICE_EXCEPTION (3b)
An exception happened while executing a system service routine.
Arguments:
Arg1: 00000000c0000005, Exception code that caused the bugcheck
Arg2: fffff80001e6c1b4, Address of the exception record for the exception that caused the bugcheck
Arg3: fffffa600ca123b0, Address of the context record for the exception that caused the bugcheck
Arg4: 0000000000000000, zero.

Debugging Details:
------------------


EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced memory at 0x%08lx. The memory could not be %s.

FAULTING_IP: 
nt!NtCreateTimer+0
fffff800`01e6c1b4 004849		  add	 byte ptr [rax+49h],cl

CONTEXT:  fffffa600ca123b0 -- (.cxr 0xfffffa600ca123b0)
rax=0000000000000000 rbx=fffffa8009c7dbb0 rcx=000000000030b0d0
rdx=00000000001f0003 rsi=00000000001cd018 rdi=0000000000000000
rip=fffff80001e6c1b4 rsp=fffffa600ca12c18 rbp=fffffa600ca12ca0
 r8=0000000000000000  r9=0000000000000001 r10=fffff80001e6c1b4
r11=000000000020a1b4 r12=00000000772827f8 r13=0000000000000000
r14=0000000000000000 r15=000000000031b930
iopl=0		 nv up ei pl zr na po nc
cs=0010  ss=0018  ds=002b  es=002b  fs=0053  gs=002b			 efl=00010246
nt!NtCreateTimer:
fffff800`01e6c1b4 004849		  add	 byte ptr [rax+49h],cl ds:002b:00000000`00000049=??
Resetting default scope

CUSTOMER_CRASH_COUNT:  4

DEFAULT_BUCKET_ID:  CODE_CORRUPTION

BUGCHECK_STR:  0x3B

PROCESS_NAME:  drvinst.exe

CURRENT_IRQL:  0

LAST_CONTROL_TRANSFER:  from fffff80001c60ef3 to fffff80001e6c1b4

STACK_TEXT:  
fffffa60`0ca12c18 fffff800`01c60ef3 : fffffa80`09c7dbb0 00000000`00000001 00000000`00000000 00000000`00000000 : nt!NtCreateTimer
fffffa60`0ca12c20 00000000`771b77aa : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSystemServiceCopyEnd+0x13
00000000`001ccef8 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x771b77aa


CHKIMG_EXTENSION: !chkimg -lo 50 -d !nt
	fffff80001e6c000-fffff80001e6c037  56 bytes - nt!EtwpGetSidExtendedHeaderItem+8c
	[ 45 74 77 50 44 0f b6 60:00 8d ee 51 00 2e e7 51 ]
	fffff80001e6c039-fffff80001e6c063  43 bytes - nt!EtwpGetSidExtendedHeaderItem+c5 (+0x39)
	[ 66 83 60 04 00 48 8d 53:91 d8 51 00 6e e4 51 00 ]
	fffff80001e6c065-fffff80001e6c078  20 bytes - nt!EtwpGetSidExtendedHeaderItem+f1 (+0x2c)
	[ 49 89 3e 48 85 db 74 0a:00 80 51 00 11 bd 51 00 ]
	fffff80001e6c07a-fffff80001e6c0a3  42 bytes - nt!EtwpGetSidExtendedHeaderItem+106 (+0x15)
	[ 83 c4 20 41 5e 41 5d 41:2e 51 00 1f 6f 51 00 7c ]
	fffff80001e6c0a5-fffff80001e6c0b3  15 bytes - nt!PsCreateSystemThread+15 (+0x2b)
	[ 00 00 4d 85 c9 8b f2 48:cd 4c 51 00 3e 18 51 00 ]
	fffff80001e6c0b5-fffff80001e6c0bf  11 bytes - nt!PsCreateSystemThread+25 (+0x10)
	[ 49 8b d9 33 ff 4d 85 c0:71 fd 51 00 a6 03 51 00 ]
	fffff80001e6c0c1-fffff80001e6c0c7  7 bytes - nt!PsCreateSystemThread+31 (+0x0c)
	[ 00 00 4c 21 84 24 88:32 80 51 00 59 81 51 ]
	fffff80001e6c0ca-fffff80001e6c0cf  6 bytes - nt!PsCreateSystemThread+3a (+0x09)
	[ 00 4c 21 84 24 90:a5 51 00 00 80 51 ]
	fffff80001e6c0d1-fffff80001e6c0d7  7 bytes - nt!PsCreateSystemThread+41 (+0x07)
	[ 00 00 4c 21 84 24 a0:cb d6 51 00 f3 3a 51 ]
	fffff80001e6c0d9-fffff80001e6c0df  7 bytes - nt!PsCreateSystemThread+49 (+0x08)
	[ 00 00 4c 21 84 24 a8:9b 5e 51 00 e7 16 51 ]
	fffff80001e6c0e1-fffff80001e6c0e7  7 bytes - nt!PsCreateSystemThread+51 (+0x08)
	[ 00 00 c7 84 24 80 00:3a e9 51 00 dc 4a 51 ]
	fffff80001e6c0e9-fffff80001e6c0eb  3 bytes - nt!PsCreateSystemThread+59 (+0x08)
	[ 00 30 00:dd ed 51 ]
	fffff80001e6c0ed-fffff80001e6c0f3  7 bytes - nt!PsCreateSystemThread+5d (+0x04)
	[ 00 c7 84 24 98 00 00:e4 9d 51 00 43 2f 51 ]
	fffff80001e6c0f5-fffff80001e6c0f7  3 bytes - nt!PsCreateSystemThread+65 (+0x08)
	[ 00 02 00:93 e0 51 ]
	fffff80001e6c0f9-fffff80001e6c103  11 bytes - nt!PsCreateSystemThread+69 (+0x04)
	[ 48 83 64 24 70 00 48 83:7e fe 51 00 42 73 51 00 ]
	fffff80001e6c105-fffff80001e6c10d  9 bytes - nt!PsCreateSystemThread+75 (+0x0c)
	[ 48 83 64 24 60 00 48 8b:e6 4d 51 00 44 20 51 00 ]
	fffff80001e6c10f - nt!PsCreateSystemThread+7f (+0x0a)
	[ f0:51 ]
	fffff80001e6c111-fffff80001e6c117  7 bytes - nt!PsCreateSystemThread+81 (+0x02)
	[ 00 00 4c 8d 84 24 80:c6 05 51 00 ae a0 51 ]
	fffff80001e6c119-fffff80001e6c127  15 bytes - nt!PsCreateSystemThread+89 (+0x08)
	[ 00 00 4c 8b cb 48 89 44:53 a3 51 00 b4 18 51 00 ]
	fffff80001e6c129-fffff80001e6c13b  19 bytes - nt!PsCreateSystemThread+99 (+0x10)
	[ 00 00 8b d6 48 89 44 24:6b d9 51 00 7d 23 51 00 ]
	fffff80001e6c13d-fffff80001e6c147  11 bytes - nt!PsCreateSystemThread+ad (+0x14)
	[ 48 83 64 24 38 00 48 8b:77 91 51 00 9c 0c 51 00 ]
	fffff80001e6c149-fffff80001e6c157  15 bytes - nt!PsCreateSystemThread+b9 (+0x0c)
	[ 00 00 48 8b cd 48 89 44:9a f2 51 00 01 c7 51 00 ]
	fffff80001e6c159-fffff80001e6c167  15 bytes - nt!PsCreateSystemThread+c9 (+0x10)
	[ 48 89 7c 24 20 e8 9d 29:3e e3 51 00 f9 28 51 00 ]
	fffff80001e6c169-fffff80001e6c193  43 bytes - nt!PsCreateSystemThread+d9 (+0x10)
	[ 00 00 49 8b 5b 10 49 8b:81 26 51 00 cb 1f 51 00 ]
	fffff80001e6c195-fffff80001e6c197  3 bytes - nt!PsCreateSystemThread+105 (+0x2c)
	[ 41 b8 30:47 9d 51 ]
	fffff80001e6c199-fffff80001e6c1df  71 bytes - nt!PsCreateSystemThread+109 (+0x04)
	[ 00 00 e8 40 cb de ff 0f:ff 7f 51 00 fb df 51 00 ]
	fffff80001e6c1e1-fffff80001e6c1e7  7 bytes - nt!NtCreateTimer+2d (+0x48)
	[ 65 48 8b 04 25 88 01:00 80 51 00 01 af 51 ]
	fffff80001e6c1e9-fffff80001e6c1ef  7 bytes - nt!NtCreateTimer+35 (+0x08)
	[ 00 40 8a b8 53 01 00:bc bd 51 00 7b e2 51 ]
	fffff80001e6c1f1-fffff80001e6c20f  31 bytes - nt!NtCreateTimer+3d (+0x08)
	[ 40 84 ff 74 1b 48 8b 05:7b 37 51 00 07 cf 51 00 ]
	fffff80001e6c211-fffff80001e6c223  19 bytes - nt!NtCreateTimer+5d (+0x20)
	[ 48 8d 44 24 58 48 89 44:e1 e7 51 00 00 80 51 00 ]
	fffff80001e6c225-fffff80001e6c22b  7 bytes - nt!NtCreateTimer+71 (+0x14)
	[ c7 44 24 28 08 01 00:8d 26 51 00 92 d5 51 ]
	fffff80001e6c22d-fffff80001e6c243  23 bytes - nt!NtCreateTimer+79 (+0x08)
	[ 48 83 64 24 20 00 44 8a:27 09 51 00 ef 70 51 00 ]
	fffff80001e6c245-fffff80001e6c249  5 bytes - nt!NtCreateTimer+91 (+0x18)
	[ 44 8b d8 48 8b:ff 7f 51 00 a4 ]
	fffff80001e6c24b-fffff80001e6c257  13 bytes - nt!NtCreateTimer+97 (+0x06)
	[ 24 58 48 89 4c 24 60 85:51 00 2c 75 51 00 77 65 ]
	fffff80001e6c259-fffff80001e6c263  11 bytes - nt!NtCreateTimer+a5 (+0x0e)
	[ 00 c6 81 98 00 00 00 13:1b d9 51 00 80 ea 51 00 ]
	fffff80001e6c266-fffff80001e6c26b  6 bytes - nt!NtCreateTimer+b2 (+0x0d)
	[ 00 01 66 c7 81 9a:80 51 00 41 e2 51 ]
	fffff80001e6c26d-fffff80001e6c26f  3 bytes - nt!NtCreateTimer+b9 (+0x07)
	[ 00 00 00:d0 05 51 ]
	fffff80001e6c271-fffff80001e6c273  3 bytes - nt!NtCreateTimer+bd (+0x04)
	[ 48 8d 05:15 19 51 ]
	fffff80001e6c275-fffff80001e6c27b  7 bytes - nt!NtCreateTimer+c1 (+0x04)
	[ 12 e4 ff 48 89 81 b0:e4 19 51 00 96 9a 51 ]
	fffff80001e6c27d-fffff80001e6c283  7 bytes - nt!NtCreateTimer+c9 (+0x08)
	[ 00 00 48 89 89 b8 00:80 e8 51 00 70 b7 51 ]
	fffff80001e6c285-fffff80001e6c28b  7 bytes - nt!NtCreateTimer+d1 (+0x08)
	[ 00 48 83 a1 d0 00 00:dc ce 51 00 a4 b5 51 ]
	fffff80001e6c28d-fffff80001e6c29b  15 bytes - nt!NtCreateTimer+d9 (+0x08)
	[ 00 8b d6 e8 c3 aa db ff:1b c0 51 00 59 91 51 00 ]
	fffff80001e6c29d-fffff80001e6c29f  3 bytes - nt!NtCreateTimer+e9 (+0x10)
	[ c6 81 f4:20 d1 51 ]
	fffff80001e6c2a1-fffff80001e6c2a7  7 bytes - nt!NtCreateTimer+ed (+0x04)
	[ 00 00 00 c6 81 f5 00:12 f4 51 00 37 ed 51 ]
	fffff80001e6c2a9-fffff80001e6c2af  7 bytes - nt!NtCreateTimer+f5 (+0x08)
	[ 00 00 48 83 a1 f8 00:df 2b 51 00 87 dd 51 ]
	fffff80001e6c2b1-fffff80001e6c2c0  16 bytes - nt!NtCreateTimer+fd (+0x08)
	[ 00 00 48 8d 44 24 50 48:12 fa 51 00 c9 91 51 00 ]
	fffff80001e6c2c2-fffff80001e6c2d7  22 bytes - nt!NtCreateTimer+10e (+0x11)
	[ 00 45 33 c9 45 8b c4 33:17 51 00 ff 7f 51 00 ab ]
	fffff80001e6c2d9-fffff80001e6c2f7  31 bytes - nt!NtCreateTimer+125 (+0x17)
	[ 00 85 c0 78 1b 40 84 ff:16 4c 51 00 e6 ad 51 00 ]
	fffff80001e6c2f9-fffff80001e6c32b  51 bytes - nt!NtCreateTimer+145 (+0x20)
	[ 41 8b c3 4c 8d 5c 24 70:5d f3 51 00 9a 3b 51 00 ]
	fffff80001e6c32d-fffff80001e6c353  39 bytes - nt!NtQueryFullAttributesFile+11 (+0x34)
	[ 00 48 8b 05 fb df f0 ff:97 cc 51 00 68 8b 51 00 ]
WARNING: !chkimg output was truncated to 50 lines. Invoke !chkimg without '-lo [num_lines]' to view  entire output.
1962 errors : !nt (fffff80001e6c000-fffff80001e6c7ff)

MODULE_NAME: memory_corruption

IMAGE_NAME:  memory_corruption

FOLLOWUP_NAME:  memory_corruption

DEBUG_FLR_IMAGE_TIMESTAMP:  0

MEMORY_CORRUPTOR:  LARGE

STACK_COMMAND:  .cxr 0xfffffa600ca123b0; kb

FAILURE_BUCKET_ID:  X64_MEMORY_CORRUPTION_LARGE

BUCKET_ID:  X64_MEMORY_CORRUPTION_LARGE

Followup: memory_corruption
---------


BC AdBot (Login to Remove)

 


m



0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users