Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Thoughts on this BSOD


  • Please log in to reply
4 replies to this topic

#1 dfxg^57vcbCVBFGHCGN

dfxg^57vcbCVBFGHCGN

  • Members
  • 3 posts
  • OFFLINE
  •  
  • Local time:07:51 PM

Posted 28 July 2011 - 09:15 PM

Hey support. Below is output from the windows debugger. THe obvious thing is memory so I've ran a dual pass of Memtest86 which came back with no errors. It is a Toshiba Laptop that was recently rebuilt, Windows update is showing no available updates or drivers. I notice iexplore.exe was the process, but why memory corruption is the ie process? Any ideas. Thanks in advance

Microsoft ® Windows Debugger Version 6.12.0002.633 X86
Copyright © Microsoft Corporation. All rights reserved.


Loading Dump File [C:\Users\Alf\Desktop\BSOD.DMP]
Kernel Summary Dump File: Only kernel address space is available

Symbol search path is: SRV*c:\symbols*http://msdl.microsoft.com/download/symbols
Executable search path is:
Windows Server 2008/Windows Vista Kernel Version 6002 (Service Pack 2) MP (2 procs) Free x86 compatible
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 6002.18327.x86fre.vistasp2_gdr.101014-0432
Machine Name:
Kernel base = 0x81c44000 PsLoadedModuleList = 0x81d5bc70
Debug session time: Tue Jul 26 14:18:30.893 2011 (UTC + 10:00)
System Uptime: 0 days 6:54:10.676
Loading Kernel Symbols
...............................................................
................................................................
...............................
Loading User Symbols
PEB is paged out (Peb.Ldr = 7ffdc00c). Type ".hh dbgerr001" for details
Loading unloaded module list
.....
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck 1A, {41284, 2a3d0001, 4150000, c0802000}

Probably caused by : memory_corruption ( nt!MiLocateWsle+c6 )

Followup: MachineOwner
---------

0: kd> !analyze -v
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

MEMORY_MANAGEMENT (1a)
# Any other values for parameter 1 must be individually examined.
Arguments:
Arg1: 00041284, A PTE or the working set list is corrupt.
Arg2: 2a3d0001
Arg3: 04150000
Arg4: c0802000

Debugging Details:
------------------


BUGCHECK_STR: 0x1a_41284

DEFAULT_BUCKET_ID: VISTA_DRIVER_FAULT

PROCESS_NAME: iexplore.exe

CURRENT_IRQL: 0

LAST_CONTROL_TRANSFER: from 81ca7746 to 81d11b3f

STACK_TEXT:
ad6c9adc 81ca7746 0000001a 00041284 2a3d0001 nt!KeBugCheckEx+0x1e
ad6c9b04 81ca7994 04150000 c0151e80 846ce000 nt!MiLocateWsle+0xc6
ad6c9b1c 81cfa24c 2a3d0000 849a31f0 04150000 nt!MiTerminateWsle+0x1b
ad6c9c48 81cd73e6 2a3d0000 2a6effff 00000000 nt!MiDeleteVirtualAddresses+0x24e
ad6c9c78 81e5caba 436eec6a 9031d300 00000000 nt!MmCleanProcessAddressSpace+0x3b4
ad6c9cdc 81e393e7 00000000 85721030 85721001 nt!PspExitThread+0x65d
ad6c9cf4 81cf7fba 9031d300 ad6c9d20 ad6c9d2c nt!PsExitSpecialApc+0x22
ad6c9d4c 81c8ed26 00000001 00000000 ad6c9d64 nt!KiDeliverApc+0x1dc
ad6c9d4c 77675ca4 00000001 00000000 ad6c9d64 nt!KiServiceExit+0x56
WARNING: Frame IP not in any known module. Following frames may be wrong.
03bb7f84 00000000 00000000 00000000 00000000 0x77675ca4


STACK_COMMAND: kb

FOLLOWUP_IP:
nt!MiLocateWsle+c6
81ca7746 cc int 3

SYMBOL_STACK_INDEX: 1

SYMBOL_NAME: nt!MiLocateWsle+c6

FOLLOWUP_NAME: MachineOwner

MODULE_NAME: nt

DEBUG_FLR_IMAGE_TIMESTAMP: 4cb710d6

IMAGE_NAME: memory_corruption

FAILURE_BUCKET_ID: 0x1a_41284_nt!MiLocateWsle+c6

BUCKET_ID: 0x1a_41284_nt!MiLocateWsle+c6

Followup: MachineOwner

BC AdBot (Login to Remove)

 


#2 cryptodan

cryptodan

    Bleepin Madman


  • Members
  • 21,868 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Catonsville, Md
  • Local time:09:51 AM

Posted 28 July 2011 - 10:03 PM

We need to know more about your BSODs...

Download BlueScreenView (in Zip file)

No installation required.

Unzip downloaded file and double click on BlueScreenView.exe file to run the program and When scanning is done, go to Edit > Select All.

Then go to File > Save Selected Items, and save the report as BSOD.txt.

Open BSOD.txt in Notepad, copy all content, and paste it into your next reply.

Compliments of Broni

#3 dfxg^57vcbCVBFGHCGN

dfxg^57vcbCVBFGHCGN
  • Topic Starter

  • Members
  • 3 posts
  • OFFLINE
  •  
  • Local time:07:51 PM

Posted 28 July 2011 - 10:20 PM

Done but that looks like less info than originally supplied. Did I not select all info? Thanks for your help

==================================================
Dump File : Mini072611-01.dmp
Crash Time : 26/07/2011 2:36:38 PM
Bug Check String : MEMORY_MANAGEMENT
Bug Check Code : 0x0000001a
Parameter 1 : 0x00041284
Parameter 2 : 0x2a3d0001
Parameter 3 : 0x04150000
Parameter 4 : 0xc0802000
Caused By Driver : ntoskrnl.exe
Caused By Address : ntoskrnl.exe+cdb3f
File Description : NT Kernel & System
Product Name : Microsoft® Windows® Operating System
Company : Microsoft Corporation
File Version : 6.0.6002.18327 (vistasp2_gdr.101014-0432)
Processor : 32-bit
Computer Name :
Full Path : C:\Windows\Minidump\Mini072611-01.dmp
Processors Count : 2
Major Version : 15
Minor Version : 6002
Dump File Size : 138,488
==================================================

#4 cryptodan

cryptodan

    Bleepin Madman


  • Members
  • 21,868 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Catonsville, Md
  • Local time:09:51 AM

Posted 28 July 2011 - 10:37 PM

Is this the first BSOD you ever had?

#5 dfxg^57vcbCVBFGHCGN

dfxg^57vcbCVBFGHCGN
  • Topic Starter

  • Members
  • 3 posts
  • OFFLINE
  •  
  • Local time:07:51 PM

Posted 28 July 2011 - 10:46 PM

not 100% sure. It's a clients PC and they had a friend just run the Toshiba restore. This is the first BSOD since the rebuild, hence only one visible. Am not sure if there were BSOD before it was rebuilt/reinstalled.




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users