Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Memory Dump


  • Please log in to reply
15 replies to this topic

#1 melbb

melbb

  • Members
  • 194 posts
  • OFFLINE
  •  
  • Gender:Female
  • Local time:11:56 AM

Posted 04 May 2007 - 10:59 AM

This has happened a number of times over the last several months. I usually leave my computer on all the time. Sometimes when I want to use it in the morning, I move the mouse and nothing happens, I just have a black screen. So I have to turn it off and back on and everything is fine.

But yesterday the same thing happened and I got a message about the system recovering from a serious error. I sent the error report and a microsoft web window appeared to try to help me solve the problem. It asked me to find memory.dmp, usually in %systemroot%. I could not find the folder or file by searching, so I didn't pursue it further. This morning, I had the black screen again, but this time no message to send an error report and no microsoft window. So I got online and searched for info on memory dumps. I found something about minidump.dmp files. So I searched my computer for that file and found one from yesterday and one from today. There were also several files over the last 4 months, typically about 3/month. Before Jan of this year, this happened rarely. The only thing I know that is different is that there is an external hard drive that was connected to the computer in December. At the moment, it isn't formatted and we haven't used it. I would like to find out what is causing the problem, but I don't know how to open these files and wouldn't know what they meant anyway.

I have Windows XP Home Edition. No applications were open when this happened.

I would appreciate any help that could be provided on this issue. Thanks.

Edited by melbb, 04 May 2007 - 11:04 AM.


BC AdBot (Login to Remove)

 


#2 garmanma

garmanma

    Computer Masochist


  • Members
  • 27,809 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Cleveland, Ohio
  • Local time:11:56 AM

Posted 04 May 2007 - 05:06 PM

Download this to CD and give it a shot
Memtest
Mark
Mark
Posted Image
why won't my laptop work?

Having grandkids is God's way of giving you a 2nd chance because you were too busy working your butt off the 1st time around
Do not send me PMs with problems that should be posted in the forums. Keep it in the forums, so everyone benefits
Become a BleepingComputer fan: Facebook and Twitter

#3 usasma

usasma

    Still visually handicapped (avatar is memory developed by my Dad


  • BSOD Kernel Dump Expert
  • 25,091 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Southeastern CT, USA
  • Local time:11:56 AM

Posted 05 May 2007 - 12:44 AM

You can use this link to download a tool to analyze the dump files. Then copy and paste the results here so we can see if we can locate the culprit.

http://forums.majorgeeks.com/showthread.php?t=35246
My browser caused a flood of traffic, sio my IP address was banned. Hope to fix it soon. Will get back to posting as soon as Im able.

- John  (my website: http://www.carrona.org/ )**If you need a more detailed explanation, please ask for it. I have the Knack. **  If I haven't replied in 48 hours, please send me a message. My eye problems have recently increased and I'm having difficult reading posts. (23 Nov 2017)FYI - I am completely blind in the right eye and ~30% blind in the left eye.<p>If the eye problems get worse suddenly, I may not be able to respond.If that's the case and help is needed, please PM a staff member for assistance.

#4 melbb

melbb
  • Topic Starter

  • Members
  • 194 posts
  • OFFLINE
  •  
  • Gender:Female
  • Local time:11:56 AM

Posted 05 May 2007 - 09:02 PM

I haven't tried the memtest yet. Here is what I got from the debugging tools. This is from the most recent dump:


Microsoft Windows Debugger Version 6.7.0005.0
Copyright Microsoft Corporation. All rights reserved.


Loading Dump File [C:\WINDOWS\Minidump\Mini050407-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available

Symbol search path is: SRV*c:\symbols*http://msdl.microsoft.com/download/symbols
Executable search path is:
Windows XP Kernel Version 2600 (Service Pack 2) UP Free x86 compatible
Product: WinNt, suite: TerminalServer SingleUserTS Personal
Built by: 2600.xpsp_sp2_gdr.070227-2254
Kernel base = 0x804d7000 PsLoadedModuleList = 0x805624a0
Debug session time: Fri May 4 07:16:49.234 2007 (GMT-4)
System Uptime: 0 days 23:55:01.824
Loading Kernel Symbols
..................................................................................................................................................................
Loading User Symbols
Loading unloaded module list
..................................................
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck 1000000A, {0, 1c, 1, 804e1bf8}

Probably caused by : ntkrnlmp.exe ( nt!KeWaitForSingleObject+186 )

Followup: MachineOwner
---------


kd> !analyze -v
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

IRQL_NOT_LESS_OR_EQUAL (a)
An attempt was made to access a pageable (or completely invalid) address at an
interrupt request level (IRQL) that is too high. This is usually
caused by drivers using improper addresses.
If a kernel debugger is available get the stack backtrace.
Arguments:
Arg1: 00000000, memory referenced
Arg2: 0000001c, IRQL
Arg3: 00000001, value 0 = read operation, 1 = write operation
Arg4: 804e1bf8, address which referenced memory

Debugging Details:
------------------


WRITE_ADDRESS: 00000000

CURRENT_IRQL: 1c

FAULTING_IP:
nt!KeWaitForSingleObject+186
804e1bf8 8939 mov dword ptr [ecx],edi

CUSTOMER_CRASH_COUNT: 1

DEFAULT_BUCKET_ID: DRIVER_FAULT

BUGCHECK_STR: 0xA

PROCESS_NAME: System

LAST_CONTROL_TRANSFER: from 806ff96b to 804e1bf8

STACK_TEXT:
f7c6bcd4 806ff96b 00000000 00000000 00000000 nt!KeWaitForSingleObject+0x186
f7c6bcf4 805090e9 85438660 85517454 85438658 hal!ExAcquireFastMutex+0x2b
f7c6bd08 f7711808 e4063338 855171f8 e4063338 nt!FsRtlRemovePerStreamContext+0x1e
f7c6bd34 f7712d56 855171f8 86c77358 852b9538 fltmgr!FltpDeleteAllStreamListCtrls+0x62
f7c6bd50 f77055f7 8551727c 00000008 86c77358 fltmgr!FltpFreeVolume+0xa4
f7c6bd68 f770934e 852b9538 00000008 805694fc fltmgr!FltpCleanupDeviceObject+0x61
f7c6bd7c 804e23b5 86c77358 00000000 873c28b8 fltmgr!FltpFastIoDetachDeviceWorker+0x14
f7c6bdac 80574128 86c77358 00000000 00000000 nt!ExpWorkerThread+0xef
f7c6bddc 804ec781 804e22f1 00000001 00000000 nt!PspSystemThreadStartup+0x34
00000000 00000000 00000000 00000000 00000000 nt!KiThreadStartup+0x16


STACK_COMMAND: kb

FOLLOWUP_IP:
nt!KeWaitForSingleObject+186
804e1bf8 8939 mov dword ptr [ecx],edi

SYMBOL_STACK_INDEX: 0

SYMBOL_NAME: nt!KeWaitForSingleObject+186

FOLLOWUP_NAME: MachineOwner

MODULE_NAME: nt

IMAGE_NAME: ntkrnlmp.exe

DEBUG_FLR_IMAGE_TIMESTAMP: 45e54690

FAILURE_BUCKET_ID: 0xA_W_nt!KeWaitForSingleObject+186

BUCKET_ID: 0xA_W_nt!KeWaitForSingleObject+186

Followup: MachineOwner
---------


I checked some additional dump files from this year, and most are suggesting the same file as above as causing the problem.

Edited by melbb, 05 May 2007 - 09:20 PM.


#5 melbb

melbb
  • Topic Starter

  • Members
  • 194 posts
  • OFFLINE
  •  
  • Gender:Female
  • Local time:11:56 AM

Posted 05 May 2007 - 09:28 PM

I find the memtest site confusing. Which 1.7 version should I download? And I don't really see any instructions on how to use it. Is it intuitive?

#6 melbb

melbb
  • Topic Starter

  • Members
  • 194 posts
  • OFFLINE
  •  
  • Gender:Female
  • Local time:11:56 AM

Posted 06 May 2007 - 07:25 AM

Okay, I figured out memtest on the memtest forum site. I ran it overnight. It had time fro 29 passes and didn't find any errors.

#7 usasma

usasma

    Still visually handicapped (avatar is memory developed by my Dad


  • BSOD Kernel Dump Expert
  • 25,091 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Southeastern CT, USA
  • Local time:11:56 AM

Posted 06 May 2007 - 09:56 AM

OK, so it's not your memory. Here's a bit of a talk about memory dumps:

Memory dumps list the programs in memory around the time of the dump - a complete dump lists the entire contents of memory and are generally the size of your RAM (if you've got 1 gB of RAM, you'll have a 1 gB memory dump).

A minidump only contains part of the contents of the memory - so it may not contain the stuff we need. In this case, the memory dump refers to a file from the Operating System (Windows) so you might want to assume that Windows is broken.

That's not necessarily the case tho! Since the error appears to point to a driver and the file mentioned isn't a driver (per se), then it's likely that the error occurred in a Windows file because of a problem with a driver.

The point of all this is that it's not time to reinstall Windows just yet - but the dump file doesn't give us enough information to figure out what's wrong. But it does give us some hints (such as the Driver error message and the HAL entry in the Stack_Text).

So, the first question is...have you recently added some hardware to your system? If so, what is it? If not, have you recently updated/added/changed some system drivers? If so, what?

After that it becomes a matter of replacing suspect drivers until we stumble upon the correct ones. For that we'll need the exact make and model of your system. If it's a custom built system, we'll need the exact make and model of your motherboard.
My browser caused a flood of traffic, sio my IP address was banned. Hope to fix it soon. Will get back to posting as soon as Im able.

- John  (my website: http://www.carrona.org/ )**If you need a more detailed explanation, please ask for it. I have the Knack. **  If I haven't replied in 48 hours, please send me a message. My eye problems have recently increased and I'm having difficult reading posts. (23 Nov 2017)FYI - I am completely blind in the right eye and ~30% blind in the left eye.<p>If the eye problems get worse suddenly, I may not be able to respond.If that's the case and help is needed, please PM a staff member for assistance.

#8 melbb

melbb
  • Topic Starter

  • Members
  • 194 posts
  • OFFLINE
  •  
  • Gender:Female
  • Local time:11:56 AM

Posted 06 May 2007 - 11:38 AM

I have a Dell Dimension 8400. It is just over 2.5 years old. For the first 26 months, I only had 4 dumps. For the last 4 months, I have had 13. I am thinking it is an external hard drive we added late December/early Jan. I don't know how old it is. It was my husband's and he used it at his old job. We have never used it and it isn't even formated for PC yet. I never tried updating the drivers. It is an Iomega. THis is what the device manager says: Iomega HDD USB 2.0/1394A IEEE 1394 SBP2 Device.

#9 usasma

usasma

    Still visually handicapped (avatar is memory developed by my Dad


  • BSOD Kernel Dump Expert
  • 25,091 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Southeastern CT, USA
  • Local time:11:56 AM

Posted 06 May 2007 - 05:12 PM

I would go to the Iomega website and see if you can download drivers for it. Also, disconnect it and see if you get the memory dumps without it connected.
My browser caused a flood of traffic, sio my IP address was banned. Hope to fix it soon. Will get back to posting as soon as Im able.

- John  (my website: http://www.carrona.org/ )**If you need a more detailed explanation, please ask for it. I have the Knack. **  If I haven't replied in 48 hours, please send me a message. My eye problems have recently increased and I'm having difficult reading posts. (23 Nov 2017)FYI - I am completely blind in the right eye and ~30% blind in the left eye.<p>If the eye problems get worse suddenly, I may not be able to respond.If that's the case and help is needed, please PM a staff member for assistance.

#10 melbb

melbb
  • Topic Starter

  • Members
  • 194 posts
  • OFFLINE
  •  
  • Gender:Female
  • Local time:11:56 AM

Posted 07 May 2007 - 09:49 AM

The Iomega website doesn't have drivers. It says that they are part of the windows operating system. I tried updating the driver through the device manager, but there was no update available. This doesn't help me if I actually want to use the hard drive at some point. I guess I will have to disconnect it and see what happens. Thanks.

Edited by melbb, 07 May 2007 - 09:49 AM.


#11 garmanma

garmanma

    Computer Masochist


  • Members
  • 27,809 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Cleveland, Ohio
  • Local time:11:56 AM

Posted 07 May 2007 - 11:50 AM

Iomega recommended updating the USB drivers. Did you try that?
Mark
Mark
Posted Image
why won't my laptop work?

Having grandkids is God's way of giving you a 2nd chance because you were too busy working your butt off the 1st time around
Do not send me PMs with problems that should be posted in the forums. Keep it in the forums, so everyone benefits
Become a BleepingComputer fan: Facebook and Twitter

#12 oldf@rt

oldf@rt

  • Members
  • 2,609 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Avondale, Arizona USA
  • Local time:08:56 AM

Posted 07 May 2007 - 11:59 AM

I found this on Dells web site listed as Urgent.

http://support.dell.com/support/downloads/...p;fileid=119730

My recommendation would be to look up your exact computer by service tag and verify that this update is needed for your computer.

Edited by oldf@rt, 07 May 2007 - 11:59 AM.

The name says it all -- 59 and holding permanently

**WARNING** Links I provide might cause brain damage

#13 melbb

melbb
  • Topic Starter

  • Members
  • 194 posts
  • OFFLINE
  •  
  • Gender:Female
  • Local time:11:56 AM

Posted 07 May 2007 - 03:47 PM

Iomega recommended updating the USB drivers. Did you try that?
Mark


I didn't because the website says to do this if Windows doesn't recognize the drive or assign a drive letter to it. I don't have this problem. SHould I do it anyway?

#14 melbb

melbb
  • Topic Starter

  • Members
  • 194 posts
  • OFFLINE
  •  
  • Gender:Female
  • Local time:11:56 AM

Posted 07 May 2007 - 03:52 PM

I found this on Dells web site listed as Urgent.

http://support.dell.com/support/downloads/...p;fileid=119730

My recommendation would be to look up your exact computer by service tag and verify that this update is needed for your computer.


I entered my service tag number and do need this update. I am doing this now. THanks.

#15 oldf@rt

oldf@rt

  • Members
  • 2,609 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Avondale, Arizona USA
  • Local time:08:56 AM

Posted 07 May 2007 - 03:58 PM

Thank You. Let us know the results of the update.

OF
The name says it all -- 59 and holding permanently

**WARNING** Links I provide might cause brain damage




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users