Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Memory Dump BSOD


  • Please log in to reply
3 replies to this topic

#1 mean_dm

mean_dm

  • Members
  • 3 posts
  • OFFLINE
  •  
  • Local time:03:47 AM

Posted 21 May 2011 - 01:58 AM

Friend is having trouble with his comp. Randomly while playing games (at least it appears random [playing games]), he will crash to BSOD and a Physical Memory Dump will ensue.

He's using Windows 7 x64 Ultimate.

Here's the debug info:


Microsoft ® Windows Debugger Version 6.12.0002.633 AMD64
Copyright © Microsoft Corporation. All rights reserved.


Loading Dump File [C:\Users\Zombie Slayer\Desktop\MEMORY.DMP]
Kernel Summary Dump File: Only kernel address space is available

Symbol search path is: SRV*c:\symbols*http://msdl.microsoft.com/download/symbols
Executable search path is:
Windows 7 Kernel Version 7600 MP (2 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 7600.16792.amd64fre.win7_gdr.110408-1633
Machine Name:
Kernel base = 0xfffff800`03253000 PsLoadedModuleList = 0xfffff800`03490e50
Debug session time: Sat May 21 00:23:38.313 2011 (UTC - 5:00)
System Uptime: 0 days 0:10:36.952
Loading Kernel Symbols
...............................................................
................................................................
............................................
Loading User Symbols
PEB is paged out (Peb.Ldr = 000007ff`fffd6018). Type ".hh dbgerr001" for details
Loading unloaded module list
.....
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck 3B, {c0000005, fffff96000272e95, fffff8800ba5fa20, 0}

Page d4fe6 not present in the dump file. Type ".hh dbgerr004" for details
Probably caused by : win32k.sys ( win32k!ESTROBJ::vCharPos_H1+18d )

Followup: MachineOwner
---------

1: kd> !analyze -v
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

SYSTEM_SERVICE_EXCEPTION (3b)
An exception happened while executing a system service routine.
Arguments:
Arg1: 00000000c0000005, Exception code that caused the bugcheck
Arg2: fffff96000272e95, Address of the instruction which caused the bugcheck
Arg3: fffff8800ba5fa20, Address of the context record for the exception that caused the bugcheck
Arg4: 0000000000000000, zero.

Debugging Details:
------------------


EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced memory at 0x%08lx. The memory could not be %s.

FAULTING_IP:
win32k!ESTROBJ::vCharPos_H1+18d
fffff960`00272e95 8b4210 mov eax,dword ptr [rdx+10h]

CONTEXT: fffff8800ba5fa20 -- (.cxr 0xfffff8800ba5fa20)
rax=fffff900c2d59ca0 rbx=fffff8800ba60790 rcx=fffff900c29fafb8
rdx=0000000000000001 rsi=fffff8800ba609a4 rdi=fffff8800ba605b0
rip=fffff96000272e95 rsp=fffff8800ba603f0 rbp=0000000000000000
r8=0000000000000000 r9=0000000000000000 r10=fffff8800ba60aa0
r11=0000000000000001 r12=0000000000000001 r13=0000000000000000
r14=0000000000000007 r15=0000000000000000
iopl=0 nv up ei pl zr na po nc
cs=0010 ss=0018 ds=002b es=002b fs=0053 gs=002b efl=00010246
win32k!ESTROBJ::vCharPos_H1+0x18d:
fffff960`00272e95 8b4210 mov eax,dword ptr [rdx+10h] ds:002b:00000000`00000011=????????
Resetting default scope

DEFAULT_BUCKET_ID: VISTA_DRIVER_FAULT

BUGCHECK_STR: 0x3B

PROCESS_NAME: LCDRSS.exe

CURRENT_IRQL: 0

LAST_CONTROL_TRANSFER: from fffff960000db0ab to fffff96000272e95

STACK_TEXT:
fffff880`0ba603f0 fffff960`000db0ab : 00000000`00000001 fffff880`0ba60990 00000000`00000001 fffff900`c00bf010 : win32k!ESTROBJ::vCharPos_H1+0x18d
fffff880`0ba60480 fffff960`000b27f2 : fffff900`41800000 00000000`00000000 fffff900`00000001 fffff880`0ba60990 : win32k!ESTROBJ::vInit+0x27f
fffff880`0ba60510 fffff960`000b1c6f : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : win32k!GreExtTextOutWLocked+0xb12
fffff880`0ba60930 fffff960`0027b609 : fffff880`0ba60a90 fffff880`0ba60ca0 fffff880`0ba60ac8 fffff960`00132c75 : win32k!GreExtTextOutWInternal+0x10f
fffff880`0ba609e0 fffff800`032c2953 : 00000000`00000000 fffff880`0ba60ca0 00000000`00000001 fffff880`0ba60c00 : win32k!NtGdiExtTextOutW+0x341
fffff880`0ba60bb0 000007fe`fd15373a : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSystemServiceCopyEnd+0x13
00000000`0012ec88 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x7fe`fd15373a


FOLLOWUP_IP:
win32k!ESTROBJ::vCharPos_H1+18d
fffff960`00272e95 8b4210 mov eax,dword ptr [rdx+10h]

SYMBOL_STACK_INDEX: 0

SYMBOL_NAME: win32k!ESTROBJ::vCharPos_H1+18d

FOLLOWUP_NAME: MachineOwner

MODULE_NAME: win32k

IMAGE_NAME: win32k.sys

DEBUG_FLR_IMAGE_TIMESTAMP: 4d6f11c9

STACK_COMMAND: .cxr 0xfffff8800ba5fa20 ; kb

FAILURE_BUCKET_ID: X64_0x3B_win32k!ESTROBJ::vCharPos_H1+18d

BUCKET_ID: X64_0x3B_win32k!ESTROBJ::vCharPos_H1+18d

Followup: MachineOwner
---------

BC AdBot (Login to Remove)

 


#2 mean_dm

mean_dm
  • Topic Starter

  • Members
  • 3 posts
  • OFFLINE
  •  
  • Local time:03:47 AM

Posted 21 May 2011 - 02:10 AM

PSU: Raidmax Volcano 630W
MOBO: GA-EX38-DS4
GPU: 450 GTS
RAM: 2x 2G Corsair XMS2 DDR2

#3 hamluis

hamluis

    Moderator


  • Moderator
  • 55,883 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Killeen, TX
  • Local time:04:47 AM

Posted 22 May 2011 - 09:48 AM

See info at http://www.exedb.com/LCDRSS.html re "PROCESS_NAME: LCDRSS.exe".

At the least, I would uninstall/reinstall that software.

Louis

#4 mean_dm

mean_dm
  • Topic Starter

  • Members
  • 3 posts
  • OFFLINE
  •  
  • Local time:03:47 AM

Posted 27 May 2011 - 09:38 PM

Ugh, sorry, we will give that a try, we haven't had internet for the past few days from the storms, haha.

Thanks for the suggestion!




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users