Windows 7 NEW PC - Windows7 64bit Memory Management (x1a) BSOD

Dan84

New Member
Since ive purchased my PC about once a day on average i get a BSOD, normally while playing a game but its happened browsing, i think maybe even just sitting idle as well. Details are listed below and dumb files attached as well as a .nfo file if you need more details about my set up.

Any help anyone can give will be appreciated.

Cheers,
Daniel
----------------------------------
Spec's:
Processor: Intel(R) Core(TM) i5 CPU 750 @ 2.67GHz, 2661 Mhz, 4 Core(s), 4 Logical Processor(s)
Motherboard: Gigabyte P55-UD3
Memory: Installed Physical Memory (RAM) 8.00 GB
Sound: SB X-Fi Xtreme Audio
Video: NVIDIA GeForce GTX 275
----------------------------------
Problem signature:
Problem Event Name: BlueScreen
OS Version: 6.1.7600.2.0.0.768.3
Locale ID: 3081

Additional information about the problem:
BCCode: 1a
BCP1: 0000000000008884
BCP2: FFFFFA80028F9DA0
BCP3: FFFFFA80028FCDD0
BCP4: 0000000000000405
OS Version: 6_1_7600
Service Pack: 0_0
Product: 768_1
 

Attachments

  • Minidump.zip
    283.7 KB · Views: 636
Hi Daniel,
thanks for posting the mini-dumps. The dumps point to memory problems so it's worth checking using something like: Memtest86+ - Advanced Memory Diagnostic Tool .
I suggest you check one stick at a time so you know which one is the culprit. Another way would be to run the machine with only one stick installed and see if the error/bsod happens. If not then swop the stick for another and repeat, keep doing this until the machine errors out on a particular stick.
 
All your dumps identify memory corruption as the cause of the crashes,

Bug Check 0x1A: MEMORY_MANAGEMENT



1.Update drivers* (see below)
2.Check RAM with memtest86 (3-4 hrs or overnight)





090210-16988-01.dmp
Probably caused by : memory_corruption ( nt!MiRelinkStandbyPage+c6 )
MEMORY_MANAGEMENT (1a)
PROCESS_NAME: svchost.exe
MODULE_NAME: nt
IMAGE_NAME: memory_corruption
FAILURE_BUCKET_ID: X64_0x1a_8884_nt!MiRelinkStandbyPage+c6


090310-16426-01.dmp
Probably caused by : hardware_ram ( ZEROED_PAGE_CORRUPTED )
MEMORY_MANAGEMENT (1a)
PROCESS_NAME: svchost.exe
IMAGE_NAME: hardware_ram
FAILURE_BUCKET_ID: X64_0x1a_8887_ZEROED_PAGE_CORRUPTED


090310-19359-01.dmp
Probably caused by : memory_corruption ( nt!MiRelinkStandbyPage+c6 )
MEMORY_MANAGEMENT (1a)
PROCESS_NAME: svchost.exe
MODULE_NAME: nt
IMAGE_NAME: memory_corruptionIMAGE_NAME: memory_corruption
FAILURE_BUCKET_ID: X64_0x1a_8884_nt!MiRelinkStandbyPage+c6


090310-22230-01.dmp
MEMORY_MANAGEMENT (1a)

90710-17784-01.dmp
MEMORY_MANAGEMENT (1a)

090410-26551-01.dmp
MEMORY_MANAGEMENT (1a)


Bug Check 0x1A: MEMORY_MANAGEMENT







Drivers to update:

ctoss2k.sys Thu Dec 08 07:04:15 2005
Creative Audio Product by Creative Technology Ltd

ctsfm2k.sys Thu Dec 08 07:04:05 2005
Creative SoundFont Management Device Driver by Creative Technology Ltd (creative.com)

ctusfsyn.sys Mon Aug 07 14:33:44 2006
Creative SoundFont Synthesizer (32-bit) is a driver file from company Creative Technology Ltd.

LGBusEnum.sys Wed Jul 15 01:34:45 2009
Logitech WingMan GamePanel Software

jraid.sys Wed May 27 08:39:35 2009
JMicron JMB36X RAID Driver
JMicron Technology Corp.Link Removed due to 404 Error
 
I very much doubt there is a memory issue since they're all of the same type of crash: 0x1a stops.

Updating drivers is very likely to fix the memory corruption errors, as posted above.

In addition, this Realtek lan driver is known to cause memory corruption:

Rt64win7 Rt64win7.sys Thu Feb 26 04:04:13 2009

You can update it by typing systeminfo in a command prompt. It will tell you which Realtek lan you have. Then search it's number on the left side of this link. If you have 8111, use the link itself:

RTL8111

----------

Must remove the notorious Daemon Tools and sptd.sys which crash Win7 like no tomorrow. Remove Daemon Tools normally, then use this installer/uninstaller to carefully remove sptd.sys:

DuplexSecure - Downloads

Reboot and install PowerIso if you still want drive emualtion.

http://www.PowerISO.com
 
Last edited:
Thanks for the help guys, I have run memtest84 previously before my post and it all worked fine.

So far i have removed those files and programs and updated all the drivers except for a those creative ones, any idea how to update these drivers? Just need to wait and see how things run over the next 24 or so hours:

ctoss2k.sys Thu Dec 08 07:04:15 2005
Creative Audio Product by Creative Technology Ltd

ctsfm2k.sys Thu Dec 08 07:04:05 2005
Creative SoundFont Management Device Driver by Creative Technology Ltd (creative.com)

ctusfsyn.sys Mon Aug 07 14:33:44 2006
Creative SoundFont Synthesizer (32-bit) is a driver file from company Creative Technology Ltd.

Cheers,
Daniel.
 
Ok, updated the creative drivers yesterday and just had another crash this time its a 1e, also noticed that the audio icon down in the tray says that the Audio Service is not running but sound still works so not sure whats wrong there.

New dump files attached.

Additional information about the problem:
BCCode: 1e
BCP1: FFFFFFFFC0000005
BCP2: FFFFF80002AFDB7F
BCP3: 0000000000000000
BCP4: FFFFFFFFFFFFFFFF
OS Version: 6_1_7600
Service Pack: 0_0
Product: 768_1

Files that help describe the problem:
C:\Windows\Minidump\090910-21949-01.dmp
 

Attachments

  • New Minidump.zip
    158.7 KB · Views: 358
Ah geez ive installed the sound card drivers but i guess they don't update

ctoss2k.sys Thu Dec 08 07:04:15 2005
Creative Audio Product by Creative Technology Ltd

ctsfm2k.sys Thu Dec 08 07:04:05 2005
Creative SoundFont Management Device Driver by Creative Technology Ltd (creative.com)

ctusfsyn.sys Mon Aug 07 14:33:44 2006
Creative SoundFont Synthesizer (32-bit) is a driver file from company Creative Technology Ltd.

Ive got no idea how to update them. But ive sent creative an email maybe they can help.
 
Last edited:
Which exact model is it for? The latest driver should be on their web page for it at the link above.

You can use Driver Sweeper in safe mode to clear all previous Creative stuff, which is excellent to do because of it being Creative....if that makes any sense, heh.
 
Its a SB X-Fi Xtreme Audio, downloaded the latest drivers and installed it but didnt do those files by the looks of it..
 
Ok, uninstalled every creative driver and software, and ran sweeper in safe mode, restarted then reinstalled the drivers.

recieved a IRQL_NOT_LESS_OR_EQUAL error later on.

Problem signature:
Problem Event Name: BlueScreen
OS Version: 6.1.7600.2.0.0.768.3
Locale ID: 3081

Additional information about the problem:
BCCode: a
BCP1: FFFFFA7FFFFFFFE0
BCP2: 0000000000000002
BCP3: 0000000000000001
BCP4: FFFFF80002AA0B7F
OS Version: 6_1_7600
Service Pack: 0_0
Product: 768_1

Files that help describe the problem:
C:\Windows\Minidump\091010-22292-01.dmp
 

Attachments

  • new dump.zip
    158 KB · Views: 308
Last edited:
Hello,

Run a Hardware Diagnostic (Memory and Hard Drive) follow this link for instructions Link Removed - Invalid URL
Make sure you run atleast 6 to 8 passes with MemTest86+ more likely it might be some hardware issue.

- Captain
 
Removed avg, was looking like it was good 2 days without bsod then

Problem signature:
Problem Event Name: BlueScreen
OS Version: 6.1.7600.2.0.0.768.3
Locale ID: 3081

Additional information about the problem:
BCCode: a
BCP1: FFFFFA7FFFFFFFE0
BCP2: 0000000000000002
BCP3: 0000000000000001
BCP4: FFFFF80002ADFB7F
OS Version: 6_1_7600
Service Pack: 0_0
Product: 768_1

Files that help describe the problem:
C:\Windows\Minidump\091210-15428-01.dmp
 

Attachments

  • 091210-15428-01.zip
    25.5 KB · Views: 299
Update your Creative drivers. They're from before Win 7 RTM and Creative is also know to cause issues all the time. That's 2 reasons:

P17 P17.sys Tue Apr 21 02:12:47 2009

Creative Worldwide Support

If you've uninstalled the Creative card and aren't using it, then delete the above driver manually in C:\Windows\System32\drivers

then reboot.
 
While you are at it you may also want to run a memory test. This BSOD was probably caused by a driver but eventually was blamed on memory corruption.

The file loaded in the memory stack at the time was your LOTROclient.ex. I would
Download a copy of Memtest86 and burn the ISO to a CD using Link Removed due to 404 Error or another ISO burning program. Boot from the CD, and leave it running for at least 5 or 6 passes.

Letus know if you need help

Ken J
Code:
Microsoft (R) Windows Debugger Version 6.11.0001.404 X86
Copyright (c) Microsoft Corporation. All rights reserved.


Loading Dump File [C:\Users\K\Desktop\091210-15428-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available

WARNING: Whitespace at end of path element
Symbol search path is: SRV*C:\symbols;*http://msdl.microsoft.com/download/symbols ;srv*e:\symbols
*http://msdl.microsoft.com/download/symbols
Executable search path is: 
Windows 7 Kernel Version 7600 MP (4 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS Personal
Built by: 7600.16617.amd64fre.win7_gdr.100618-1621
Machine Name:
Kernel base = 0xfffff800`02a4a000 PsLoadedModuleList = 0xfffff800`02c87e50
Debug session time: Sat Sep 11 21:25:35.630 2010 (GMT-4)
System Uptime: 0 days 6:40:11.241
Loading Kernel Symbols
...............................................................
................................................................
...............
Loading User Symbols
Loading unloaded module list
.......
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck A, {fffffa7fffffffe0, 2, 1, fffff80002adfb7f}

[U][I][B]Probably caused by : memory_corruption[/B][/I][/U] ( nt!MiReplenishPageSlist+100 )

Followup: MachineOwner
---------

3: kd> !analyze -v
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

IRQL_NOT_LESS_OR_EQUAL (a)
An attempt was made to access a pageable (or completely invalid) address at an
interrupt request level (IRQL) that is too high.  This is usually
caused by drivers using improper addresses.
If a kernel debugger is available get the stack backtrace.
Arguments:
Arg1: fffffa7fffffffe0, memory referenced
Arg2: 0000000000000002, IRQL
Arg3: 0000000000000001, bitfield :
    bit 0 : value 0 = read operation, 1 = write operation
    bit 3 : value 0 = not an execute operation, 1 = execute operation (only on chips which support this level of status)
Arg4: fffff80002adfb7f, address which referenced memory

Debugging Details:
------------------


WRITE_ADDRESS: GetPointerFromAddress: unable to read from fffff80002cf20e0
 fffffa7fffffffe0 

CURRENT_IRQL:  2

FAULTING_IP: 
nt!MiReplenishPageSlist+100
fffff800`02adfb7f f00fba6b1000    lock bts dword ptr [rbx+10h],0

CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT

BUGCHECK_STR:  0xA

[U][I][B]PROCESS_NAME:  lotroclient.ex[/B][/I][/U]

TRAP_FRAME:  fffff880096597b0 -- (.trap 0xfffff880096597b0)
NOTE: The trap frame does not contain all registers.
Some register values may be zeroed or incorrect.
rax=ffffffffffffffff rbx=0000000000000000 rcx=fdffffffffffffff
rdx=000000000000004f rsi=0000000000000000 rdi=0000000000000000
rip=fffff80002adfb7f rsp=fffff88009659940 rbp=fffffa80066004b0
 r8=fffff80002cf4400  r9=fffffa8006600000 r10=fffffa80066004d0
r11=fffff88009659998 r12=0000000000000000 r13=0000000000000000
r14=0000000000000000 r15=0000000000000000
iopl=0         nv up ei pl zr na po nc
nt!MiReplenishPageSlist+0x100:
fffff800`02adfb7f f00fba6b1000    lock bts dword ptr [rbx+10h],0 ds:00000000`00000010=????????
Resetting default scope

LAST_CONTROL_TRANSFER:  from fffff80002ab9ca9 to fffff80002aba740

STACK_TEXT:  
fffff880`09659668 fffff800`02ab9ca9 : 00000000`0000000a fffffa7f`ffffffe0 00000000`00000002 00000000`00000001 : nt!KeBugCheckEx
fffff880`09659670 fffff800`02ab8920 : 00000000`00000001 fffffa7f`ffffffd0 fffffa80`07e1d000 00000000`00000000 : nt!KiBugCheckDispatch+0x69
fffff880`096597b0 fffff800`02adfb7f : 00000000`00000000 ff305064`ff2e5366 ff0c2433`00000002 00000000`00040001 : nt!KiPageFault+0x260
fffff880`09659940 fffff800`02ae00af : fffff800`02cf4400 00000000`0000001e fffffa80`041405a0 fffffa7f`ffffffd0 : nt!MiReplenishPageSlist+0x100
fffff880`096599a0 fffff800`02ad5a9a : fffff680`0035e9f8 00000000`00000002 00000000`00000000 ffffffff`ffffffff : nt!MiRemoveAnyPage+0x24f
fffff880`09659ac0 fffff800`02ab882e : 00000000`00000001 00000000`00000040 00000000`66df5901 00000000`6ae58380 : nt!MmAccessFault+0x169a
fffff880`09659c20 00000000`6babfae2 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiPageFault+0x16e
00000000`0ce4f02c 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x6babfae2


STACK_COMMAND:  kb

FOLLOWUP_IP: 
nt!MiReplenishPageSlist+100
fffff800`02adfb7f f00fba6b1000    lock bts dword ptr [rbx+10h],0

SYMBOL_STACK_INDEX:  3

SYMBOL_NAME:  nt!MiReplenishPageSlist+100

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: nt

DEBUG_FLR_IMAGE_TIMESTAMP:  4c1c44a9

IMAGE_NAME:  memory_corruption

FAILURE_BUCKET_ID:  X64_0xA_nt!MiReplenishPageSlist+100

BUCKET_ID:  X64_0xA_nt!MiReplenishPageSlist+100

Followup: MachineOwner
---------
 
Back
Top