I recently build my first pc and am getting memory management BSOD randomly. It mainly happens when im trying to record gameplay and gaming at the same time. But will sometimes randomly do it when i start windows up. I went to osr online and read the minidump files and they give me different codes i will post them under.
first one:
Crash Dump Analysis provided by OSR Open Systems Resources, Inc. (http://www.osr.com) Online Crash Dump Analysis Service See http://ift.tt/1iM0ypn for more information Windows 8 Kernel Version 15063 MP (12 procs) Free x64 Product: WinNt, suite: TerminalServer SingleUserTS Built by: 15063.0.amd64fre.rs2_release.170317-1834 Machine Name: Kernel base = 0xfffff800a901e000 PsLoadedModuleList = 0xfffff800a936a5c0 Debug session time: Fri Oct 6 22:45:35.414 2017 (UTC - 4:00) System Uptime: 0 days 23:06:59.069
- *
- Bugcheck Analysis *
- * *******************************************************************************
MEMORY_MANAGEMENT (1a) # Any other values for parameter 1 must be individually examined. Arguments: Arg1: 0000000000003470, The subtype of the bugcheck. Arg2: ffffb6015fe34000 Arg3: 458f8ff3d7004b8d Arg4: 451f8ff3d7004b8d
Debugging Details:
TRIAGER: Could not open triage file : e:\dump_analysis\program\triage\modclass.ini, error 2
BUGCHECK_STR: 0x1a_3470
DEFAULT_BUCKET_ID: CODE_CORRUPTION
PROCESS_NAME: backgroundTask
CURRENT_IRQL: 2
LAST_CONTROL_TRANSFER: from fffff800a91a0ba1 to fffff800a918a580
STACK_TEXT:
ffffb60161b4c908 fffff800a91a0ba1 : 000000000000001a 0000000000003470 ffffb6015fe34000 458f8ff3d7004b8d : nt!KeBugCheckEx ffffb60161b4c910 fffff800a941e4ec : ffffb60100000008 ffffb60161b4cca0 0000000000000001 fffff80000000006 : nt!MmCreateKernelStack+0x16c341 ffffb60161b4c9a0 fffff800a9457232 : ffff8f8e88a4a7c0 ffffb60161b4cf20 ffff8f8e88a4a7c0 ffff8f8e88a4a7c0 : nt!KeInitThread+0x1d4 ffffb60161b4ca10 fffff800a945922b : ffff8f8e897ee280 0000000000000002 ffff8f8e878b1300 0000000000000000 : nt!PspAllocateThread+0x492 ffffb60161b4cba0 fffff800a94595a6 : 0000000000000000 0000000000000000 0000000000000001 ffff8f8e92c36080 : nt!PspCreateThread+0x1db ffffb60161b4ce50 fffff800a9195413 : 0000000000000000 ffff8f8e92c36080 0000000000000000 0000000000000000 : nt!NtCreateThreadEx+0x1f6 ffffb60161b4d610 fffff800a918d760 : fffff800a953e79e ffff8f8e945e3070 0000000000000010 0000000000000000 : nt!KiSystemServiceCopyEnd+0x13 ffffb60161b4d818 fffff800a953e79e : ffff8f8e945e3070 0000000000000010 0000000000000000 ffff8f8e945e3060 : nt!KiServiceLinkage ffffb60161b4d820 fffff800a9109c44 : 0000000000000000 ffff8f8e92c36080 ffff8f8e945e3060 fffff800a918f987 : nt!RtlpCreateUserThreadEx+0x122 ffffb60161b4d960 fffff800a90cc014 : ffff8f8e945e3060 ffffb60161b4da20 0000000000000000 ffff8f8e93fcda48 : nt!ExpWorkerFactoryCreateThread+0xcc ffffb60161b4da00 fffff800a90cbd33 : ffff8f8e93fcda40 ffffb60161b4da99 0000000000000000 ffff8f8e92c36080 : nt!ExpWorkerFactoryCheckCreate+0x174 ffffb60161b4da50 fffff800a9195413 : ffff8f8e92c36080 ffff8f8e00000000 0000000000000000 ffff8f8e8d1a1870 : nt!NtReleaseWorkerFactoryWorker+0x353 ffffb60161b4db00 00007fff41107fd4 : 0000000000000000 0000000000000000 0000000000000000 0000000000000000 : nt!KiSystemServiceCopyEnd+0x13 000000f61fc7f9b8 0000000000000000 : 0000000000000000 0000000000000000 0000000000000000 0000000000000000 : 0x7fff`41107fd4
STACK_COMMAND: kb
MODULE_NAME: memory_corruption
IMAGE_NAME: memory_corruption
FOLLOWUP_NAME: memory_corruption
DEBUG_FLR_IMAGE_TIMESTAMP: 0
MEMORY_CORRUPTOR: LARGE
FAILURE_BUCKET_ID: X64_MEMORY_CORRUPTION_LARGE
BUCKET_ID: X64_MEMORY_CORRUPTION_LARGE
Followup: memory_corruption
This free analysis is provided by OSR Open Systems Resources, Inc. Want a deeper understanding of crash dump analysis? Check out our Windows Kernel Debugging and Crash Dump Analysis Seminar (opens in new tab/window)
Second one:
Instant Online Crash Analysis, brought to you by OSR Open Systems Resources, Inc.
Show DivPrimary Analysis
Crash Dump Analysis provided by OSR Open Systems Resources, Inc. (http://www.osr.com) Online Crash Dump Analysis Service See http://ift.tt/1iM0ypn for more information Windows 8 Kernel Version 15063 MP (12 procs) Free x64 Product: WinNt, suite: TerminalServer SingleUserTS Built by: 15063.0.amd64fre.rs2_release.170317-1834 Machine Name: Kernel base = 0xfffff802dd006000 PsLoadedModuleList = 0xfffff802dd3525c0 Debug session time: Sun Oct 8 01:32:04.990 2017 (UTC - 4:00) System Uptime: 0 days 13:14:53.646
- *
- Bugcheck Analysis *
- * *******************************************************************************
MEMORY_MANAGEMENT (1a) # Any other values for parameter 1 must be individually examined. Arguments: Arg1: 0000000000041793, The subtype of the bugcheck. Arg2: ffffd7011253a840 Arg3: 0000000000000109 Arg4: 0000000000000108
Debugging Details:
TRIAGER: Could not open triage file : e:\dump_analysis\program\triage\modclass.ini, error 2
BUGCHECK_STR: 0x1a_41793
DEFAULT_BUCKET_ID: WIN8_DRIVER_FAULT
PROCESS_NAME: TslGame.exe
CURRENT_IRQL: 2
LAST_CONTROL_TRANSFER: from fffff802dd1a5e66 to fffff802dd172580
STACK_TEXT:
ffff9880bdfd82b8 fffff802dd1a5e66 : 000000000000001a 0000000000041793 ffffd7011253a840 0000000000000109 : nt!KeBugCheckEx ffff9880bdfd82c0 fffff802dd085a6d : ffffd9878ef6a648 ffffd987859cd7c0 ffffd9878ef6a648 ffffd9878ef6a080 : nt!MiDeleteVirtualAddresses+0x11b666 ffff9880bdfd8570 fffff802dd49168e : 0000000000000000 ffffd98784fe8fc0 ffffd98790c6f860 ffffd987859cd7c0 : nt!MiDeleteVad+0x3ad ffff9880bdfd86f0 fffff802dd4cf4ff : 0000000000040000 0000000000000000 ffffd9878ef6a080 ffffd98700000000 : nt!MmCleanProcessAddressSpace+0x13e ffff9880bdfd8770 fffff802dd440641 : ffffd9878ef6a080 ffffc38f213818a0 ffff9880bdfd8980 0000000000000000 : nt!PspRundownSingleProcess+0x11f ffff9880bdfd87f0 fffff802dd5402a3 : 0000000000000003 0000000000000001 0000003b10b83000 fffff802dc1a7180 : nt!PspExitThread+0x57d ffff9880bdfd88f0 fffff802dd03ba83 : 0000000000000000 0000000000000000 ffff9880bdfd89d0 fffff802dd074029 : nt!KiSchedulerApcTerminate+0x33 ffff9880bdfd8930 fffff802dd175c20 : 0000000000000b7c fffff80200000000 0000000000000000 ffffd98700000000 : nt!KiDeliverApc+0x313 ffff9880bdfd89c0 fffff802dd17d4ba : ffffd987859cd7c0 00000000ffffffff 0000000000000000 ffffd987853e2ea0 : nt!KiInitiateUserApc+0x70 ffff9880bdfd8b00 00007ff868535424 : 0000000000000000 0000000000000000 0000000000000000 0000000000000000 : nt!KiSystemServiceExit+0x9f 0000003b1e2ffb98 0000000000000000 : 0000000000000000 0000000000000000 0000000000000000 0000000000000000 : 0x7ff8`68535424
STACK_COMMAND: kb
FOLLOWUP_IP: nt!MiDeleteVirtualAddresses+11b666 fffff802`dd1a5e66 cc int 3
SYMBOL_STACK_INDEX: 1
SYMBOL_NAME: nt!MiDeleteVirtualAddresses+11b666
FOLLOWUP_NAME: MachineOwner
MODULE_NAME: nt
DEBUG_FLR_IMAGE_TIMESTAMP: 59ae237e
IMAGE_NAME: memory_corruption
FAILURE_BUCKET_ID: X64_0x1a_41793_nt!MiDeleteVirtualAddresses+11b666
BUCKET_ID: X64_0x1a_41793_nt!MiDeleteVirtualAddresses+11b666
Followup: MachineOwner
Third one:
Crash Dump Analysis provided by OSR Open Systems Resources, Inc. (http://www.osr.com) Online Crash Dump Analysis Service See http://ift.tt/1iM0ypn for more information Windows 8 Kernel Version 15063 MP (12 procs) Free x64 Product: WinNt, suite: TerminalServer SingleUserTS Built by: 15063.0.amd64fre.rs2_release.170317-1834 Machine Name: Kernel base = 0xfffff8004f813000 PsLoadedModuleList = 0xfffff8004fb5f5c0 Debug session time: Sat Oct 7 10:55:55.466 2017 (UTC - 4:00) System Uptime: 0 days 6:16:16.121
- *
- Bugcheck Analysis *
- * *******************************************************************************
MEMORY_MANAGEMENT (1a) # Any other values for parameter 1 must be individually examined. Arguments: Arg1: 0000000000041793, The subtype of the bugcheck. Arg2: ffffd7bfff97ddc0 Arg3: 0000000000000002 Arg4: 0000000000000001
Debugging Details:
TRIAGER: Could not open triage file : e:\dump_analysis\program\triage\modclass.ini, error 2
BUGCHECK_STR: 0x1a_41793
DEFAULT_BUCKET_ID: CODE_CORRUPTION
PROCESS_NAME: svchost.exe
CURRENT_IRQL: 2
LAST_CONTROL_TRANSFER: from fffff8004f9b2e66 to fffff8004f97f580
STACK_TEXT:
ffff9a814e00f0a8 fffff8004f9b2e66 : 000000000000001a 0000000000041793 ffffd7bfff97ddc0 0000000000000002 : nt!KeBugCheckEx ffff9a814e00f0b0 fffff8004f892a6d : ffff80007206fd88 ffff8000720717c0 ffff80007206fd88 ffff80007206f7c0 : nt!MiDeleteVirtualAddresses+0x11b666 ffff9a814e00f360 fffff8004fc9e1a7 : ffff8000720717c0 ffff800071d94ae0 ffff800071d94ae0 ffff8000720717c0 : nt!MiDeleteVad+0x3ad ffff9a814e00f4e0 fffff8004fc9e68e : 0000000000000000 ffff800071d96010 ffff800071d94ae0 ffff80007206f7c0 : nt!MiCleanVad+0x27 ffff9a814e00f510 fffff8004fcdc4ff : 0000000000040000 0000000000000000 ffff80007206f7c0 fffff8004fce3786 : nt!MmCleanProcessAddressSpace+0x13e ffff9a814e00f590 fffff8004fc4d641 : ffff80007206f7c0 ffffb0879875c060 ffff9a814e00f7a0 0000000000000000 : nt!PspRundownSingleProcess+0x11f ffff9a814e00f610 fffff8004fd4d2a3 : 00000000c0000005 0000000000000001 000000436aa70000 0000000000000000 : nt!PspExitThread+0x57d ffff9a814e00f710 fffff8004f848a83 : 0000000000000000 0000000000000000 0000000000000000 0000000000000000 : nt!KiSchedulerApcTerminate+0x33 ffff9a814e00f750 fffff8004f982c20 : 000000436a8910c0 000000436a890770 000000436a890280 0000004300000000 : nt!KiDeliverApc+0x313 ffff9a814e00f7e0 fffff8004f98aa15 : ffff9a814e00fa70 00007fff00000000 ffff80007206f700 0000000000000001 : nt!KiInitiateUserApc+0x70 ffff9a814e00f920 fffff8004f988e57 : ffff8000720717c0 0000000000000010 0000000000000000 ffff80007204a860 : nt!KiExceptionDispatch+0x155 ffff9a814e00fb00 00007fff32ac992e : 0000000000000000 0000000000000000 0000000000000000 0000000000000000 : nt!KiPageFault+0x217 000000436a8909b0 0000000000000000 : 0000000000000000 0000000000000000 0000000000000000 0000000000000000 : 0x7fff`32ac992e
STACK_COMMAND: kb
MODULE_NAME: memory_corruption
IMAGE_NAME: memory_corruption
FOLLOWUP_NAME: memory_corruption
DEBUG_FLR_IMAGE_TIMESTAMP: 0
MEMORY_CORRUPTOR: LARGE
FAILURE_BUCKET_ID: X64_MEMORY_CORRUPTION_LARGE
BUCKET_ID: X64_MEMORY_CORRUPTION_LARGE
Followup: memory_corruption
fourth one:
Crash Dump Analysis provided by OSR Open Systems Resources, Inc. (http://www.osr.com) Online Crash Dump Analysis Service See http://ift.tt/1iM0ypn for more information Windows 8 Kernel Version 15063 MP (12 procs) Free x64 Product: WinNt, suite: TerminalServer SingleUserTS Built by: 15063.0.amd64fre.rs2_release.170317-1834 Machine Name: Kernel base = 0xfffff8034ca84000 PsLoadedModuleList = 0xfffff8034cdd05c0 Debug session time: Sun Oct 8 08:06:28.182 2017 (UTC - 4:00) System Uptime: 0 days 0:53:33.837
- *
- Bugcheck Analysis *
- * *******************************************************************************
MEMORY_MANAGEMENT (1a) # Any other values for parameter 1 must be individually examined. Arguments: Arg1: 0000000000041792, The subtype of the bugcheck. Arg2: fffffd0118b55040 Arg3: 0001000000000000 Arg4: 0000000000000000
Debugging Details:
TRIAGER: Could not open triage file : e:\dump_analysis\program\triage\modclass.ini, error 2
BUGCHECK_STR: 0x1a_41792
DEFAULT_BUCKET_ID: CODE_CORRUPTION
PROCESS_NAME: BEService.exe
CURRENT_IRQL: 2
LAST_CONTROL_TRANSFER: from fffff8034cc23e46 to fffff8034cbf0580
STACK_TEXT:
ffffc180d9fa75a8 fffff8034cc23e46 : 000000000000001a 0000000000041792 fffffd0118b55040 0001000000000000 : nt!KeBugCheckEx ffffc180d9fa75b0 fffff8034cb03a6d : ffffa08148f99d88 ffffa08148a3d080 ffffa08148f99d88 ffffa08148f997c0 : nt!MiDeleteVirtualAddresses+0x11b646 ffffc180d9fa7860 fffff8034cf3783c : 000002316a620000 ffffa08151001810 0000000000000002 0000000000000000 : nt!MiDeleteVad+0x3ad ffffc180d9fa79e0 fffff8034cfb0c66 : ffffa08148f997c0 0000000000000008 ffffa081470b1390 000002316a620000 : nt!MiUnmapViewOfSection+0xec ffffc180d9fa7ab0 fffff8034cbfb413 : ffffa08148a3d080 0000000000000000 0000000000000000 ffffa08148f997c0 : nt!NtUnmapViewOfSectionEx+0x86 ffffc180d9fa7b00 00007ffd30d858e4 : 0000000000000000 0000000000000000 0000000000000000 0000000000000000 : nt!KiSystemServiceCopyEnd+0x13 000000da4bff6468 0000000000000000 : 0000000000000000 0000000000000000 0000000000000000 0000000000000000 : 0x7ffd`30d858e4
STACK_COMMAND: kb
MODULE_NAME: memory_corruption
IMAGE_NAME: memory_corruption
FOLLOWUP_NAME: memory_corruption
DEBUG_FLR_IMAGE_TIMESTAMP: 0
MEMORY_CORRUPTOR: LARGE
FAILURE_BUCKET_ID: X64_MEMORY_CORRUPTION_LARGE
BUCKET_ID: X64_MEMORY_CORRUPTION_LARGE
Followup: memory_corruption
fifth one:
Crash Dump Analysis provided by OSR Open Systems Resources, Inc. (http://www.osr.com) Online Crash Dump Analysis Service See http://ift.tt/1iM0ypn for more information Windows 8 Kernel Version 15063 MP (12 procs) Free x64 Product: WinNt, suite: TerminalServer SingleUserTS Built by: 15063.0.amd64fre.rs2_release.170317-1834 Machine Name: Kernel base = 0xfffff8015387c000 PsLoadedModuleList = 0xfffff80153bc85c0 Debug session time: Mon Oct 9 21:26:49.298 2017 (UTC - 4:00) System Uptime: 0 days 0:20:52.948
- *
- Bugcheck Analysis *
- * *******************************************************************************
MEMORY_MANAGEMENT (1a) # Any other values for parameter 1 must be individually examined. Arguments: Arg1: 0000000000041792, The subtype of the bugcheck. Arg2: fffffc013683e540 Arg3: 0005000000000000 Arg4: 0000000000000000
Debugging Details:
TRIAGER: Could not open triage file : e:\dump_analysis\program\triage\modclass.ini, error 2
BUGCHECK_STR: 0x1a_41792
DEFAULT_BUCKET_ID: WIN8_DRIVER_FAULT
PROCESS_NAME: RainbowSix.exe
CURRENT_IRQL: 2
LAST_CONTROL_TRANSFER: from fffff80153a1be46 to fffff801539e8580
STACK_TEXT:
ffffb500880545a8 fffff80153a1be46 : 000000000000001a 0000000000041792 fffffc013683e540 0005000000000000 : nt!KeBugCheckEx ffffb500880545b0 fffff801538fba6d : ffff858652835d88 ffff85865141e7c0 ffff858652835d88 ffff8586528357c0 : nt!MiDeleteVirtualAddresses+0x11b646 ffffb50088054860 fffff80153d2f83c : 0000026d07900000 ffff8586510fd450 0000007dc786f398 0000000000000000 : nt!MiDeleteVad+0x3ad ffffb500880549e0 fffff80153da8c66 : ffff8586528357c0 fffff80100000008 ffff8586468b1390 0000026d07900000 : nt!MiUnmapViewOfSection+0xec ffffb50088054ab0 fffff801539f3413 : ffff85865141e7c0 ffffb50088054b80 0000000000000000 ffff8586528357c0 : nt!NtUnmapViewOfSectionEx+0x86 ffffb50088054b00 00007ffaa75358e4 : 0000000000000000 0000000000000000 0000000000000000 0000000000000000 : nt!KiSystemServiceCopyEnd+0x13 0000007dc786f248 0000000000000000 : 0000000000000000 0000000000000000 0000000000000000 0000000000000000 : 0x7ffa`a75358e4
STACK_COMMAND: kb
FOLLOWUP_IP: nt!MiDeleteVirtualAddresses+11b646 fffff801`53a1be46 cc int 3
SYMBOL_STACK_INDEX: 1
SYMBOL_NAME: nt!MiDeleteVirtualAddresses+11b646
FOLLOWUP_NAME: MachineOwner
MODULE_NAME: nt
DEBUG_FLR_IMAGE_TIMESTAMP: 59ae237e
IMAGE_NAME: memory_corruption
FAILURE_BUCKET_ID: X64_0x1a_41792_nt!MiDeleteVirtualAddresses+11b646
BUCKET_ID: X64_0x1a_41792_nt!MiDeleteVirtualAddresses+11b646
Followup: MachineOwner
Sixth one:
Crash Dump Analysis provided by OSR Open Systems Resources, Inc. (http://www.osr.com) Online Crash Dump Analysis Service See http://ift.tt/1iM0ypn for more information Windows 8 Kernel Version 15063 MP (12 procs) Free x64 Product: WinNt, suite: TerminalServer SingleUserTS Built by: 15063.0.amd64fre.rs2_release.170317-1834 Machine Name: Kernel base = 0xfffff8008860a000 PsLoadedModuleList = 0xfffff800889565c0 Debug session time: Mon Oct 9 21:05:10.180 2017 (UTC - 4:00) System Uptime: 0 days 0:14:19.831
- *
- Bugcheck Analysis *
- * *******************************************************************************
MEMORY_MANAGEMENT (1a) # Any other values for parameter 1 must be individually examined. Arguments: Arg1: 0000000000041792, The subtype of the bugcheck. Arg2: ffffd58117377d40 Arg3: 0001000000000000 Arg4: 0000000000000000
Debugging Details:
TRIAGER: Could not open triage file : e:\dump_analysis\program\triage\modclass.ini, error 2
BUGCHECK_STR: 0x1a_41792
DEFAULT_BUCKET_ID: WIN8_DRIVER_FAULT
PROCESS_NAME: RainbowSix.exe
CURRENT_IRQL: 2
LAST_CONTROL_TRANSFER: from fffff800887a9e46 to fffff80088776580
STACK_TEXT:
ffffdc811c5c52b8 fffff800887a9e46 : 000000000000001a 0000000000041792 ffffd58117377d40 0001000000000000 : nt!KeBugCheckEx ffffdc811c5c52c0 fffff80088689a6d : ffff9f01f2090d88 ffff9f01e92df080 ffff9f01f2090d88 ffff9f01f20907c0 : nt!MiDeleteVirtualAddresses+0x11b646 ffffdc811c5c5570 fffff80088a9568e : 0000000000000000 ffff9f01f2d36d70 ffff9f01e96872d0 ffff9f01e92df080 : nt!MiDeleteVad+0x3ad ffffdc811c5c56f0 fffff80088ad34ff : 0000000000040000 0000000000000000 ffff9f01f20907c0 ffff9f0100000000 : nt!MmCleanProcessAddressSpace+0x13e ffffdc811c5c5770 fffff80088a44641 : ffff9f01f20907c0 ffffc5838139d060 ffffdc811c5c5980 0000000000000000 : nt!PspRundownSingleProcess+0x11f ffffdc811c5c57f0 fffff80088b442a3 : 0000000000000003 0000000000000001 000000b17c5c9000 ffffdc811bb40180 : nt!PspExitThread+0x57d ffffdc811c5c58f0 fffff8008863fa83 : 0000000000000000 0000000000000001 ffff9f01e92df001 ffff9f01e92df618 : nt!KiSchedulerApcTerminate+0x33 ffffdc811c5c5930 fffff80088779c20 : 0000000000001064 fffff80000000000 0000000000000000 ffff9f0100000000 : nt!KiDeliverApc+0x313 ffffdc811c5c59c0 fffff800887814ba : ffff9f01e92df080 00000000ffffffff 0000000000000000 ffff9f01e87e8060 : nt!KiInitiateUserApc+0x70 ffffdc811c5c5b00 00007ffe2c925424 : 0000000000000000 0000000000000000 0000000000000000 0000000000000000 : nt!KiSystemServiceExit+0x9f 000000b17f73f7a8 0000000000000000 : 0000000000000000 0000000000000000 0000000000000000 0000000000000000 : 0x7ffe`2c925424
STACK_COMMAND: kb
FOLLOWUP_IP: nt!MiDeleteVirtualAddresses+11b646 fffff800`887a9e46 cc int 3
SYMBOL_STACK_INDEX: 1
SYMBOL_NAME: nt!MiDeleteVirtualAddresses+11b646
FOLLOWUP_NAME: MachineOwner
MODULE_NAME: nt
DEBUG_FLR_IMAGE_TIMESTAMP: 59ae237e
IMAGE_NAME: memory_corruption
FAILURE_BUCKET_ID: X64_0x1a_41792_nt!MiDeleteVirtualAddresses+11b646
BUCKET_ID: X64_0x1a_41792_nt!MiDeleteVirtualAddresses+11b646
Followup: MachineOwner
Seventh one:
Crash Dump Analysis provided by OSR Open Systems Resources, Inc. (http://www.osr.com) Online Crash Dump Analysis Service See http://ift.tt/1iM0ypn for more information Windows 8 Kernel Version 15063 MP (12 procs) Free x64 Product: WinNt, suite: TerminalServer SingleUserTS Built by: 15063.0.amd64fre.rs2_release.170317-1834 Machine Name: Kernel base = 0xfffff801df817000 PsLoadedModuleList = 0xfffff801dfb635c0 Debug session time: Mon Oct 9 20:50:04.734 2017 (UTC - 4:00) System Uptime: 0 days 19:10:34.385
- *
- Bugcheck Analysis *
- * *******************************************************************************
SYSTEM_THREAD_EXCEPTION_NOT_HANDLED_M (1000007e) This is a very common bugcheck. Usually the exception address pinpoints the driver/function that caused the problem. Always note this address as well as the link date of the driver/image that contains this address. Some common problems are exception code 0x80000003. This means a hard coded breakpoint or assertion was hit, but this system was booted /NODEBUG. This is not supposed to happen as developers should never have hardcoded breakpoints in retail code, but ... If this happens, make sure a debugger gets connected, and the system is booted /DEBUG. This will let us see why this breakpoint is happening. Arguments: Arg1: ffffffffc0000005, The exception code that was not handled Arg2: fffff80517424889, The address that the exception occurred at Arg3: ffffbe81303b6738, Exception Record Address Arg4: ffffbe81303b5f80, Context Record Address
Debugging Details:
TRIAGER: Could not open triage file : e:\dump_analysis\program\triage\modclass.ini, error 2
EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at "0x%08lx" referenced memory at "0x%08lx". The memory could not be "%s".
FAULTING_IP: NTFS!NtfsCommonClose+639 fffff805`17424889 81b8f000000080000000 cmp dword ptr [rax+0F0h],80h
EXCEPTION_RECORD: ffffbe81303b6738 -- (.exr 0xffffbe81303b6738) ExceptionAddress: fffff80517424889 (NTFS!NtfsCommonClose+0x0000000000000639) ExceptionCode: c0000005 (Access violation) ExceptionFlags: 00000000 NumberParameters: 2 Parameter[0]: 0000000000000000 Parameter[1]: ffffffffffffffff Attempt to read from address ffffffffffffffff
CONTEXT: ffffbe81303b5f80 -- (.cxr 0xffffbe81303b5f80) rax=fff7d180feb23150 rbx=0000000000000009 rcx=ffffd180feb23010 rdx=fff7d180feb231e8 rsi=ffffd180feb23010 rdi=ffff820a12bb0dc8 rip=fffff80517424889 rsp=ffffbe81303b6970 rbp=fffff8051746d1d0 r8=ffffd180feb23048 r9=0000000000000001 r10=7ffffffffffffffc r11=ffffbe81303b6940 r12=0000000000000000 r13=ffff820a08e56180 r14=ffff820a08e56100 r15=fff7d180feb23150 iopl=0 nv up ei ng nz na po nc cs=0010 ss=0018 ds=002b es=002b fs=0053 gs=002b efl=00010286 NTFS!NtfsCommonClose+0x639: fffff80517424889 81b8f000000080000000 cmp dword ptr [rax+0F0h],80h ds:002b:fff7d180feb23240=???????? Resetting default scope
DEFAULT_BUCKET_ID: CODE_CORRUPTION
PROCESS_NAME: System
CURRENT_IRQL: 0
ERROR_CODE: (NTSTATUS) 0xc0000005 - The instruction at "0x%08lx" referenced memory at "0x%08lx". The memory could not be "%s".
EXCEPTION_PARAMETER1: 0000000000000000
EXCEPTION_PARAMETER2: ffffffffffffffff
READ_ADDRESS: unable to get nt!MmSpecialPoolStart unable to get nt!MmSpecialPoolEnd unable to get nt!MmPagedPoolEnd unable to get nt!MmNonPagedPoolStart unable to get nt!MmSizeOfNonPagedPoolInBytes ffffffffffffffff
FOLLOWUP_IP: NTFS!NtfsCommonClose+639 fffff805`17424889 81b8f000000080000000 cmp dword ptr [rax+0F0h],80h
BUGCHECK_STR: AV
EXCEPTION_STR: 0x0
LAST_CONTROL_TRANSFER: from fffff8051746d3ad to fffff80517424889
STACK_TEXT:
ffffbe81303b6970 fffff8051746d3ad : ffff820a12bb0dc8 ffffd180feb23150 ffffd180feb23010 ffff820a08e56180 : NTFS!NtfsCommonClose+0x639 ffffbe81303b6a40 fffff801df855158 : 0000000000000200 ffff820a178e07c0 fffff801dfb5f900 ffff820a13634920 : NTFS!NtfsFspCloseInternal+0x1c9 ffffbe81303b6b80 fffff801df8f3f77 : 0000000000000002 0000000000000080 ffff820a08ea8040 ffff820a178e07c0 : nt!ExpWorkerThread+0xd8 ffffbe81303b6c10 fffff801df988a06 : ffffbe812fe40180 ffff820a178e07c0 fffff801df8f3f30 0000000000000001 : nt!PspSystemThreadStartup+0x47 ffffbe81303b6c60 0000000000000000 : ffffbe81303b7000 ffffbe81303b1000 0000000000000000 0000000000000000 : nt!KiStartSystemThread+0x16
MODULE_NAME: memory_corruption
IMAGE_NAME: memory_corruption
FOLLOWUP_NAME: memory_corruption
DEBUG_FLR_IMAGE_TIMESTAMP: 0
MEMORY_CORRUPTOR: LARGE
STACK_COMMAND: .cxr 0xffffbe81303b5f80 ; kb
FAILURE_BUCKET_ID: X64_MEMORY_CORRUPTION_LARGE
BUCKET_ID: X64_MEMORY_CORRUPTION_LARGE
Followup: memory_corruption
And the last one:
Crash Dump Analysis provided by OSR Open Systems Resources, Inc. (http://www.osr.com) Online Crash Dump Analysis Service See http://ift.tt/1iM0ypn for more information Windows 8 Kernel Version 15063 MP (12 procs) Free x64 Product: WinNt, suite: TerminalServer SingleUserTS Machine Name: Kernel base = 0xfffff80162699000 PsLoadedModuleList = 0xfffff801629e55c0 Debug session time: Tue Oct 10 09:14:23.524 2017 (UTC - 4:00) System Uptime: 0 days 9:13:49.179
- *
- Bugcheck Analysis *
- * *******************************************************************************
MEMORY_MANAGEMENT (1a) # Any other values for parameter 1 must be individually examined. Arguments: Arg1: 0000000000041792, The subtype of the bugcheck. Arg2: fffffb8115cfc240 Arg3: 0018000000000000 Arg4: 0000000000000000
Debugging Details:
TRIAGER: Could not open triage file : e:\dump_analysis\program\triage\modclass.ini, error 2
BUGCHECK_STR: 0x1a_41792
DEFAULT_BUCKET_ID: WIN8_DRIVER_FAULT
PROCESS_NAME: RainbowSix.exe
CURRENT_IRQL: 2
BAD_PAGES_DETECTED: 12fa5
LAST_CONTROL_TRANSFER: from fffff80162838e46 to fffff80162805580
STACK_TEXT:
ffff85815ef865a8 fffff80162838e46 : 000000000000001a 0000000000041792 fffffb8115cfc240 0018000000000000 : nt!KeBugCheckEx ffff85815ef865b0 fffff80162718a6d : ffffb2886aff2d88 ffffb2886bc24080 ffffb2886aff2d88 ffffb2886aff27c0 : nt!MiDeleteVirtualAddresses+0x11b646 ffff85815ef86860 fffff80162b4c83c : 000000000008d000 ffffb2886b5297f0 0000004cf9dfee40 0000000000000000 : nt!MiDeleteVad+0x3ad ffff85815ef869e0 fffff80162bc5c66 : ffffb2886aff27c0 0000004c00000008 ffffb2885e0b1390 0000022b9f830000 : nt!MiUnmapViewOfSection+0xec ffff85815ef86ab0 fffff80162810413 : ffffb2886bc24080 0000000000000064 ffffb2886bc24080 ffffb2886aff27c0 : nt!NtUnmapViewOfSectionEx+0x86 ffff85815ef86b00 00007ff8764658e4 : 0000000000000000 0000000000000000 0000000000000000 0000000000000000 : nt!KiSystemServiceCopyEnd+0x13 0000004cf9dfe9d8 0000000000000000 : 0000000000000000 0000000000000000 0000000000000000 0000000000000000 : 0x7ff8`764658e4
STACK_COMMAND: kb
SYMBOL_NAME: PAGE_NOT_ZERO
FOLLOWUP_NAME: MachineOwner
MODULE_NAME: Unknown_Module
IMAGE_NAME: Unknown_Image
DEBUG_FLR_IMAGE_TIMESTAMP: 0
BUCKET_ID: PAGE_NOT_ZERO
Followup: MachineOwner
*** Memory manager detected 77733 instance(s) of page corruption, target is likely to have memory corruption.
Please give me any advice yoiu have to help resolve this issue! I also have ran the windows memory diagnostic tool twice and have had no errors. I am also currently running a full scan with windows defender, and i will follow up the results when done.
Submitted October 10, 2017 at 07:26PM by AstingyMAN http://ift.tt/2ga13jd
0 komentar:
Post a Comment