Microsoft (R) Windows Debugger Version 6.12.0002.633 AMD64
Copyright (c) Microsoft Corporation. All rights reserved.
Loading Dump File [F:\a\Minidump\D M P\120510-16536-02.dmp]
Mini Kernel Dump File: Only registers and stack trace are available
Symbol search path is: SRV*c:\websymbols*http://msdl.microsoft.com/download/symbols
Executable search path is:
Windows 7 Kernel Version 7600 MP (8 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 7600.16617.amd64fre.win7_gdr.100618-1621
Machine Name:
Kernel base = 0xfffff800`02867000 PsLoadedModuleList = 0xfffff800`02aa4e50
Debug session time: Sun Dec 5 14:41:38.786 2010 (UTC - 5:00)
System Uptime: 0 days 0:06:52.097
Loading Kernel Symbols
...............................................................
................................................................
............
Loading User Symbols
Loading unloaded module list
....
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
Use !analyze -v to get detailed debugging information.
BugCheck 1E, {ffffffffc000001d, fffff80002be87b9, 0, fffff8800a154700}
Probably caused by : memory_corruption
Followup: memory_corruption
---------
2: kd> !analyze -v
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
KMODE_EXCEPTION_NOT_HANDLED (1e)
This is a very common bugcheck. Usually the exception address pinpoints
the driver/function that caused the problem. Always note this address
as well as the link date of the driver/image that contains this address.
Arguments:
Arg1: ffffffffc000001d, The exception code that was not handled
Arg2: fffff80002be87b9, The address that the exception occurred at
Arg3: 0000000000000000, Parameter 0 of the exception
Arg4: fffff8800a154700, Parameter 1 of the exception
Debugging Details:
------------------
EXCEPTION_CODE: (NTSTATUS) 0xc000001d - {
FAULTING_IP:
nt!RtlpInheritAcl2+89
fffff800`02be87b9 c4 ???
EXCEPTION_PARAMETER1: 0000000000000000
EXCEPTION_PARAMETER2: fffff8800a154700
ERROR_CODE: (NTSTATUS) 0xc000001d - {
BUGCHECK_STR: 0x1E_c000001d
CUSTOMER_CRASH_COUNT: 2
DEFAULT_BUCKET_ID: CODE_CORRUPTION
PROCESS_NAME: SearchFilterHo
CURRENT_IRQL: 0
EXCEPTION_RECORD: fffff8800a154268 -- (.exr 0xfffff8800a154268)
ExceptionAddress: fffff80002be87b9 (nt!RtlpInheritAcl2+0x0000000000000089)
ExceptionCode: c000001d (Illegal instruction)
ExceptionFlags: 00000000
NumberParameters: 0
TRAP_FRAME: fffff8800a154310 -- (.trap 0xfffff8800a154310)
NOTE: The trap frame does not contain all registers.
Some register values may be zeroed or incorrect.
rax=00000000000000c8 rbx=0000000000000000 rcx=000000000000fffc
rdx=0000000000000000 rsi=0000000000000000 rdi=0000000000000000
rip=fffff80002be87b9 rsp=fffff8800a1544a0 rbp=0000000000000000
r8=0000000000000002 r9=fffff80002867000 r10=fffff8800a1547f0
r11=0000000000000000 r12=0000000000000000 r13=0000000000000000
r14=0000000000000000 r15=0000000000000000
iopl=0 nv up ei pl nz na pe nc
nt!RtlpInheritAcl2+0x89:
fffff800`02be87b9 c4 ???
Resetting default scope
LAST_CONTROL_TRANSFER: from fffff80002911a39 to fffff800028d7740
FAILED_INSTRUCTION_ADDRESS:
nt!RtlpInheritAcl2+89
fffff800`02be87b9 c4 ???
STACK_TEXT:
fffff880`0a153a98 fffff800`02911a39 : 00000000`0000001e ffffffff`c000001d fffff800`02be87b9 00000000`00000000 : nt!KeBugCheckEx
fffff880`0a153aa0 fffff800`028d6d82 : fffff880`0a154268 00000000`00000000 fffff880`0a154310 00000000`00000000 : nt!KiDispatchException+0x1b9
fffff880`0a154130 fffff800`028d4edf : fffff880`0a154310 fffff700`01080000 fffffa80`04142900 fffff800`00000000 : nt!KiExceptionDispatch+0xc2
fffff880`0a154310 fffff800`02be87b9 : fffff6fb`40000048 fffffa80`04142630 00000000`00000000 00000000`00000801 : nt!KiInvalidOpcodeFault+0x11f
fffff880`0a1544a0 fffff800`02be81b1 : 00000000`00000000 fffff880`0a154768 00000000`00000000 00000000`00000700 : nt!RtlpInheritAcl2+0x89
fffff880`0a154560 fffff800`02be7151 : 00000000`00000003 00000000`00000000 00000000`000000c8 fffff8a0`03172a7c : nt!RtlpInheritAcl+0x17d
fffff880`0a154620 fffff800`02b9e8b2 : fffff880`0a154d80 00000000`00000000 fffffa80`03c6ca30 00000000`00000000 : nt!RtlpNewSecurityObject+0x8c1
fffff880`0a1548b0 fffff800`02bc834e : 00000000`00000000 fffffa80`03f29720 00000000`00000000 00000000`00000000 : nt!ObpAssignSecurity+0x82
fffff880`0a154920 fffff800`02ba1b30 : ffffffff`ffffffff fffffa80`04142630 fffffa80`04142630 00000000`00000000 : nt!ObInsertObjectEx+0x20e
fffff880`0a154b60 fffff800`02ba5d86 : fffffa80`03c9a6e0 fffffa80`04142630 fffff880`0a155000 fffff880`0a154d40 : nt!PspInsertThread+0x3f0
fffff880`0a154ce0 fffff800`02ba608b : 00000000`00000000 00000000`00000000 00000000`00000001 fffff880`0a155510 : nt!PspCreateThread+0x246
fffff880`0a154f60 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!NtCreateThreadEx+0x243
STACK_COMMAND: kb
CHKIMG_EXTENSION: !chkimg -lo 50 -d !nt
fffff80002be87b9 - nt!RtlpInheritAcl2+89
[ 44:c4 ]
1 error : !nt (fffff80002be87b9)
MODULE_NAME: memory_corruption
IMAGE_NAME: memory_corruption
FOLLOWUP_NAME: memory_corruption
DEBUG_FLR_IMAGE_TIMESTAMP: 0
MEMORY_CORRUPTOR: ONE_BIT
FAILURE_BUCKET_ID: X64_MEMORY_CORRUPTION_ONE_BIT
BUCKET_ID: X64_MEMORY_CORRUPTION_ONE_BIT
Followup: memory_corruption
---------
Microsoft (R) Windows Debugger Version 6.12.0002.633 AMD64
Copyright (c) Microsoft Corporation. All rights reserved.
Loading Dump File [F:\a\Minidump\D M P\120610-17706-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available
Symbol search path is: SRV*c:\websymbols*http://msdl.microsoft.com/download/symbols
Executable search path is:
Windows 7 Kernel Version 7600 MP (8 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 7600.16617.amd64fre.win7_gdr.100618-1621
Machine Name:
Kernel base = 0xfffff800`02a5f000 PsLoadedModuleList = 0xfffff800`02c9ce50
Debug session time: Mon Dec 6 21:46:40.020 2010 (UTC - 5:00)
System Uptime: 0 days 0:00:18.316
Loading Kernel Symbols
...............................................................
................................................................
.....
Loading User Symbols
Loading unloaded module list
....
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
Use !analyze -v to get detailed debugging information.
BugCheck 50, {fffff8a0199fc6b0, 1, fffff8800103eb37, 2}
Could not read faulting driver name
Probably caused by : memory_corruption
Followup: memory_corruption
---------
6: kd> !analyze -v
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
PAGE_FAULT_IN_NONPAGED_AREA (50)
Invalid system memory was referenced. This cannot be protected by try-except,
it must be protected by a Probe. Typically the address is just plain bad or it
is pointing at freed memory.
Arguments:
Arg1: fffff8a0199fc6b0, memory referenced.
Arg2: 0000000000000001, value 0 = read operation, 1 = write operation.
Arg3: fffff8800103eb37, If non-zero, the instruction address which referenced the bad memory
address.
Arg4: 0000000000000002, (reserved)
Debugging Details:
------------------
Could not read faulting driver name
WRITE_ADDRESS: GetPointerFromAddress: unable to read from fffff80002d070e0
fffff8a0199fc6b0
FAULTING_IP:
fltmgr!TreeInsert+7b
fffff880`0103eb37 4c899248894a18 mov qword ptr [rdx+184A8948h],r10
MM_INTERNAL_CODE: 2
CUSTOMER_CRASH_COUNT: 1
DEFAULT_BUCKET_ID: CODE_CORRUPTION
BUGCHECK_STR: 0x50
PROCESS_NAME: services.exe
CURRENT_IRQL: 1
TRAP_FRAME: fffff8800287fb10 -- (.trap 0xfffff8800287fb10)
NOTE: The trap frame does not contain all registers.
Some register values may be zeroed or incorrect.
rax=fffff8a001553d68 rbx=0000000000000000 rcx=fffffa8005ec0898
rdx=fffff8a001553d68 rsi=0000000000000000 rdi=0000000000000000
rip=fffff8800103eb37 rsp=fffff8800287fca8 rbp=fffff8a001553da0
r8=fffffa8005e37320 r9=fffffa8006123010 r10=fffff8a000efced8
r11=0000000000000000 r12=0000000000000000 r13=0000000000000000
r14=0000000000000000 r15=0000000000000000
iopl=0 nv up ei pl nz na po nc
fltmgr!TreeInsert+0x7b:
fffff880`0103eb37 4c899248894a18 mov qword ptr [rdx+184A8948h],r10 ds:cde0:fffff8a0`199fc6b0=????????????????
Resetting default scope
LAST_CONTROL_TRANSFER: from fffff80002b4e8f2 to fffff80002acf740
STACK_TEXT:
fffff880`0287f9a8 fffff800`02b4e8f2 : 00000000`00000050 fffff8a0`199fc6b0 00000000`00000001 fffff880`0287fb10 : nt!KeBugCheckEx
fffff880`0287f9b0 fffff800`02acd82e : 00000000`00000001 00000000`00000000 fffff880`00000200 00000000`00000000 : nt! ?? ::FNODOBFM::`string'+0x40ec0
fffff880`0287fb10 fffff880`0103eb37 : fffff880`0103e65f 00000000`00000000 fffffa80`05ec0820 fffffa80`0567cde0 : nt!KiPageFault+0x16e
fffff880`0287fca8 fffff880`0103e65f : 00000000`00000000 fffffa80`05ec0820 fffffa80`0567cde0 fffff880`02881000 : fltmgr!TreeInsert+0x7b
fffff880`0287fcb0 fffff880`0105b5ef : 00000000`00008000 fffffa80`05ec0820 fffffa80`06123010 fffff880`0287fee8 : fltmgr!FltpGetFileNameInformation+0x37f
fffff880`0287fd30 fffff880`0164eada : fffffa80`0567cde0 00000000`00000000 00000000`00000594 fffffa80`062abd40 : fltmgr!FltGetFileNameInformationUnsafe+0x7f
fffff880`0287fda0 fffff880`0164edb3 : 00000000`00000000 fffff880`02880ca0 00000000`00000594 00000000`00000000 : tcpip!WfpAleCaptureImageFileName+0x3a
fffff880`0287fdf0 fffff880`0164f02e : fffffa80`05e37320 00000000`00000000 00000000`00000000 00000000`00000000 : tcpip!WfpCreateProcessNotifyRoutine+0x63
fffff880`0287fed0 fffff800`02d99e8f : fffffa80`05e37320 fffff880`02880ca0 fffffa80`05e37320 00000000`00000002 : tcpip!CreateProcessNotifyRoutineEx+0xe
fffff880`0287ff00 fffff800`02d7b277 : fffffa80`05e6d060 fffffa80`05e3d060 fffff880`028801b0 fffff880`028800ec : nt!PspInsertThread+0x74f
fffff880`02880080 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!NtCreateUserProcess+0x732
STACK_COMMAND: kb
CHKIMG_EXTENSION: !chkimg -lo 50 -d !fltmgr
fffff8800103eb39 - fltmgr!TreeInsert+7d
[ 12:92 ]
1 error : !fltmgr (fffff8800103eb39)
MODULE_NAME: memory_corruption
IMAGE_NAME: memory_corruption
FOLLOWUP_NAME: memory_corruption
DEBUG_FLR_IMAGE_TIMESTAMP: 0
MEMORY_CORRUPTOR: ONE_BIT
FAILURE_BUCKET_ID: X64_MEMORY_CORRUPTION_ONE_BIT
BUCKET_ID: X64_MEMORY_CORRUPTION_ONE_BIT
Followup: memory_corruption
---------
6: kd> lmtn
start end module name
fffff880`041b5000 fffff880`041f3000 1394ohci 1394ohci.sys Mon Jul 13 20:07:12 2009 (4A5BCC30)
fffff880`00f26000 fffff880`00f7d000 ACPI ACPI.sys Mon Jul 13 19:19:34 2009 (4A5BC106)
fffff880`02cfd000 fffff880`02d87000 afd afd.sys Mon Jul 13 19:21:40 2009 (4A5BC184)
fffff880`04fde000 fffff880`04ff4000 AgileVpn AgileVpn.sys Mon Jul 13 20:10:24 2009 (4A5BCCF0)
fffff880`00dd2000 fffff880`00ddd000 amdxata amdxata.sys Tue May 19 13:56:59 2009 (4A12F2EB)
fffff880`00d9f000 fffff880`00da8000 atapi atapi.sys Mon Jul 13 19:19:47 2009 (4A5BC113)
fffff880`00da8000 fffff880`00dd2000 ataport ataport.SYS Mon Jul 13 19:19:52 2009 (4A5BC118)
fffff880`051c1000 fffff880`051e1000 AtihdW76 AtihdW76.sys Mon Aug 16 06:41:02 2010 (4C6915BE)
fffff880`04808000 fffff880`04fde000 atikmdag atikmdag.sys Tue Sep 28 21:41:26 2010 (4CA29946)
fffff880`0416a000 fffff880`041b5000 atikmpag atikmpag.sys Tue Sep 28 21:14:49 2010 (4CA29309)
fffff880`01951000 fffff880`01958000 Beep Beep.SYS Mon Jul 13 20:00:13 2009 (4A5BCA8D)
fffff880`0411d000 fffff880`0412e000 blbdrive blbdrive.sys Mon Jul 13 19:35:59 2009 (4A5BC4DF)
fffff880`02b89000 fffff880`02ba7000 bowser bowser.sys Mon Jul 13 19:23:50 2009 (4A5BC206)
fffff960`00740000 fffff960`00767000 cdd cdd.dll unavailable (00000000)
fffff880`0191e000 fffff880`01948000 cdrom cdrom.sys Mon Jul 13 19:19:54 2009 (4A5BC11A)
fffff880`00cc5000 fffff880`00d85000 CI CI.dll Mon Jul 13 21:32:13 2009 (4A5BE01D)
fffff880`018b8000 fffff880`018e8000 CLASSPNP CLASSPNP.SYS Mon Jul 13 19:19:58 2009 (4A5BC11E)
fffff880`00c67000 fffff880`00cc5000 CLFS CLFS.SYS Mon Jul 13 19:19:57 2009 (4A5BC11D)
fffff880`010f6000 fffff880`01169000 cng cng.sys Mon Jul 13 19:49:40 2009 (4A5BC814)
fffff880`04270000 fffff880`04280000 CompositeBus CompositeBus.sys Mon Jul 13 20:00:33 2009 (4A5BCAA1)
fffff880`050cd000 fffff880`050db000 crashdmp crashdmp.sys Mon Jul 13 20:01:01 2009 (4A5BCABD)
fffff880`0407c000 fffff880`040ff000 csc csc.sys Mon Jul 13 19:24:26 2009 (4A5BC22A)
fffff880`040ff000 fffff880`0411d000 dfsc dfsc.sys Mon Jul 13 19:23:44 2009 (4A5BC200)
fffff880`02ca6000 fffff880`02cb5000 discache discache.sys Mon Jul 13 19:37:18 2009 (4A5BC52E)
fffff880`018a2000 fffff880`018b8000 disk disk.sys Mon Jul 13 19:19:57 2009 (4A5BC11D)
fffff880`0503d000 fffff880`0505f000 drmk drmk.sys Mon Jul 13 21:01:25 2009 (4A5BD8E5)
fffff880`050e7000 fffff880`050f0000 dump_atapi dump_atapi.sys Mon Jul 13 19:19:47 2009 (4A5BC113)
fffff880`050db000 fffff880`050e7000 dump_dumpata dump_dumpata.sys Mon Jul 13 19:19:47 2009 (4A5BC113)
fffff880`051e1000 fffff880`051f4000 dump_dumpfve dump_dumpfve.sys Mon Jul 13 19:21:51 2009 (4A5BC18F)
fffff880`050c1000 fffff880`050cd000 Dxapi Dxapi.sys Mon Jul 13 19:38:28 2009 (4A5BC574)
fffff880`0428e000 fffff880`04382000 dxgkrnl dxgkrnl.sys Thu Oct 01 21:00:14 2009 (4AC5509E)
fffff880`04382000 fffff880`043c8000 dxgmms1 dxgmms1.sys Mon Jul 13 19:38:32 2009 (4A5BC578)
fffff880`01084000 fffff880`01098000 fileinfo fileinfo.sys Mon Jul 13 19:34:25 2009 (4A5BC481)
fffff880`01038000 fffff880`01084000 fltmgr fltmgr.sys Mon Jul 13 19:19:59 2009 (4A5BC11F)
fffff880`01211000 fffff880`0121b000 Fs_Rec Fs_Rec.sys Mon Jul 13 19:19:45 2009 (4A5BC111)
fffff880`01868000 fffff880`018a2000 fvevol fvevol.sys Fri Sep 25 22:34:26 2009 (4ABD7DB2)
fffff880`0148b000 fffff880`014d5000 fwpkclnt fwpkclnt.sys Mon Jul 13 19:21:08 2009 (4A5BC164)
fffff800`02a16000 fffff800`02a5f000 hal hal.dll Mon Jul 13 21:27:36 2009 (4A5BDF08)
fffff880`043c8000 fffff880`043ec000 HDAudBus HDAudBus.sys Mon Jul 13 20:06:13 2009 (4A5BCBF5)
fffff880`05065000 fffff880`050c1000 HdAudio HdAudio.sys Mon Jul 13 20:06:59 2009 (4A5BCC23)
fffff880`0101a000 fffff880`01033000 HIDCLASS HIDCLASS.SYS Mon Jul 13 20:06:21 2009 (4A5BCBFD)
fffff880`051f4000 fffff880`051fc080 HIDPARSE HIDPARSE.SYS Mon Jul 13 20:06:17 2009 (4A5BCBF9)
fffff880`01224000 fffff880`01232000 hidusb hidusb.sys Mon Jul 13 20:06:22 2009 (4A5BCBFE)
fffff880`02ac1000 fffff880`02b89000 HTTP HTTP.sys Mon Jul 13 19:22:16 2009 (4A5BC1A8)
fffff880`0121b000 fffff880`01224000 hwpolicy hwpolicy.sys Mon Jul 13 19:19:22 2009 (4A5BC0FA)
fffff880`04154000 fffff880`0416a000 intelppm intelppm.sys Mon Jul 13 19:19:25 2009 (4A5BC0FD)
fffff880`04063000 fffff880`04072000 kbdclass kbdclass.sys Mon Jul 13 19:19:50 2009 (4A5BC116)
fffff880`02a65000 fffff880`02a73000 kbdhid kbdhid.sys Mon Jul 13 20:00:20 2009 (4A5BCA94)
fffff800`00bbf000 fffff800`00bc9000 kdcom kdcom.dll Mon Jul 13 21:31:07 2009 (4A5BDFDB)
fffff880`050fd000 fffff880`05140000 ks ks.sys Mon Jul 13 20:00:31 2009 (4A5BCA9F)
fffff880`013da000 fffff880`013f4000 ksecdd ksecdd.sys Mon Jul 13 19:20:54 2009 (4A5BC156)
fffff880`01460000 fffff880`0148b000 ksecpkg ksecpkg.sys Fri Dec 11 01:03:32 2009 (4B21E0B4)
fffff880`0505f000 fffff880`05064200 ksthunk ksthunk.sys Mon Jul 13 20:00:19 2009 (4A5BCA93)
fffff880`02a51000 fffff880`02a65000 LHidFilt LHidFilt.Sys Tue Nov 10 06:46:17 2009 (4AF95289)
fffff880`02a94000 fffff880`02aa9000 lltdio lltdio.sys Mon Jul 13 20:08:50 2009 (4A5BCC92)
fffff880`02a80000 fffff880`02a94000 LMouFilt LMouFilt.Sys Tue Nov 10 06:46:23 2009 (4AF9528F)
fffff880`018f6000 fffff880`01919000 luafv luafv.sys Mon Jul 13 19:26:13 2009 (4A5BC295)
fffff880`00c0f000 fffff880`00c53000 mcupdate_GenuineIntel mcupdate_GenuineIntel.dll Mon Jul 13 21:29:10 2009 (4A5BDF66)
fffff880`018e8000 fffff880`018f6000 monitor monitor.sys Mon Jul 13 19:38:52 2009 (4A5BC58C)
fffff880`01850000 fffff880`0185f000 mouclass mouclass.sys Mon Jul 13 19:19:50 2009 (4A5BC116)
fffff880`02a73000 fffff880`02a80000 mouhid mouhid.sys Mon Jul 13 20:00:20 2009 (4A5BCA94)
fffff880`00d85000 fffff880`00d9f000 mountmgr mountmgr.sys Mon Jul 13 19:19:54 2009 (4A5BC11A)
fffff880`02ba7000 fffff880`02bbf000 mpsdrv mpsdrv.sys Mon Jul 13 20:08:25 2009 (4A5BCC79)
fffff880`02bbf000 fffff880`02bec000 mrxsmb mrxsmb.sys Sat Feb 27 02:52:19 2010 (4B88CF33)
fffff880`02a00000 fffff880`02a4e000 mrxsmb10 mrxsmb10.sys Sat Feb 27 02:52:28 2010 (4B88CF3C)
fffff880`06c09000 fffff880`06c2c000 mrxsmb20 mrxsmb20.sys Sat Feb 27 02:52:26 2010 (4B88CF3A)
fffff880`019b6000 fffff880`019c1000 Msfs Msfs.SYS Mon Jul 13 19:19:47 2009 (4A5BC113)
fffff880`00f86000 fffff880`00f90000 msisadrv msisadrv.sys Mon Jul 13 19:19:26 2009 (4A5BC0FE)
fffff880`01098000 fffff880`010f6000 msrpc msrpc.sys Mon Jul 13 19:21:32 2009 (4A5BC17C)
fffff880`02c9b000 fffff880`02ca6000 mssmbios mssmbios.sys Mon Jul 13 19:31:10 2009 (4A5BC3BE)
fffff880`015e6000 fffff880`015f8000 mup mup.sys Mon Jul 13 19:23:45 2009 (4A5BC201)
fffff880`014f4000 fffff880`015e6000 ndis ndis.sys Mon Jul 13 19:21:40 2009 (4A5BC184)
fffff880`04280000 fffff880`0428c000 ndistapi ndistapi.sys Mon Jul 13 20:10:00 2009 (4A5BCCD8)
fffff880`01800000 fffff880`0182f000 ndiswan ndiswan.sys Mon Jul 13 20:10:11 2009 (4A5BCCE3)
fffff880`051ac000 fffff880`051c1000 NDProxy NDProxy.SYS Mon Jul 13 20:10:05 2009 (4A5BCCDD)
fffff880`02c00000 fffff880`02c0f000 netbios netbios.sys Mon Jul 13 20:09:26 2009 (4A5BCCB6)
fffff880`02d87000 fffff880`02dcc000 netbt netbt.sys Mon Jul 13 19:21:28 2009 (4A5BC178)
fffff880`01400000 fffff880`01460000 NETIO NETIO.SYS Mon Jul 13 19:21:46 2009 (4A5BC18A)
fffff880`019c1000 fffff880`019d2000 Npfs Npfs.SYS Mon Jul 13 19:19:48 2009 (4A5BC114)
fffff880`02c8f000 fffff880`02c9b000 nsiproxy nsiproxy.sys Mon Jul 13 19:21:02 2009 (4A5BC15E)
fffff800`02a5f000 fffff800`0303b000 nt ntkrnlmp.exe Sat Jun 19 00:16:41 2010 (4C1C44A9)
fffff880`01237000 fffff880`013da000 Ntfs Ntfs.sys Mon Jul 13 19:20:47 2009 (4A5BC14F)
fffff880`01948000 fffff880`01951000 Null Null.SYS Mon Jul 13 19:19:37 2009 (4A5BC109)
fffff880`02dd5000 fffff880`02dfb000 pacer pacer.sys Mon Jul 13 20:09:41 2009 (4A5BCCC5)
fffff880`00fd0000 fffff880`00fe5000 partmgr partmgr.sys Mon Jul 13 19:19:58 2009 (4A5BC11E)
fffff880`00f90000 fffff880`00fc3000 pci pci.sys Mon Jul 13 19:19:51 2009 (4A5BC117)
fffff880`00e5c000 fffff880`00e63000 pciide pciide.sys Mon Jul 13 19:19:49 2009 (4A5BC115)
fffff880`00e63000 fffff880`00e73000 PCIIDEX PCIIDEX.SYS Mon Jul 13 19:19:48 2009 (4A5BC114)
fffff880`01200000 fffff880`01211000 pcw pcw.sys Mon Jul 13 19:19:27 2009 (4A5BC0FF)
fffff880`05000000 fffff880`0503d000 portcls portcls.sys Mon Jul 13 20:06:27 2009 (4A5BCC03)
fffff880`00c53000 fffff880`00c67000 PSHED PSHED.dll Mon Jul 13 21:32:23 2009 (4A5BE027)
fffff880`02cb5000 fffff880`02cd9000 rasl2tp rasl2tp.sys Mon Jul 13 20:10:11 2009 (4A5BCCE3)
fffff880`02cd9000 fffff880`02cf4000 raspppoe raspppoe.sys Mon Jul 13 20:10:17 2009 (4A5BCCE9)
fffff880`0182f000 fffff880`01850000 raspptp raspptp.sys Mon Jul 13 20:10:18 2009 (4A5BCCEA)
fffff880`01000000 fffff880`0101a000 rassstp rassstp.sys Mon Jul 13 20:10:25 2009 (4A5BCCF1)
fffff880`02c3e000 fffff880`02c8f000 rdbss rdbss.sys Mon Jul 13 19:24:09 2009 (4A5BC219)
fffff880`04ff4000 fffff880`04fff000 rdpbus rdpbus.sys Mon Jul 13 20:17:46 2009 (4A5BCEAA)
fffff880`0199b000 fffff880`019a4000 RDPCDD RDPCDD.sys Mon Jul 13 20:16:34 2009 (4A5BCE62)
fffff880`019a4000 fffff880`019ad000 rdpencdd rdpencdd.sys Mon Jul 13 20:16:34 2009 (4A5BCE62)
fffff880`019ad000 fffff880`019b6000 rdprefmp rdprefmp.sys Mon Jul 13 20:16:35 2009 (4A5BCE63)
fffff880`011b5000 fffff880`011ef000 rdyboost rdyboost.sys Mon Jul 13 19:34:34 2009 (4A5BC48A)
fffff880`02aa9000 fffff880`02ac1000 rspndr rspndr.sys Mon Jul 13 20:08:50 2009 (4A5BCC92)
fffff880`014e5000 fffff880`014ed000 spldr spldr.sys Mon May 11 12:56:27 2009 (4A0858BB)
fffff880`0428c000 fffff880`0428d480 swenum swenum.sys Mon Jul 13 20:00:18 2009 (4A5BCA92)
fffff880`01601000 fffff880`017fe000 tcpip tcpip.sys Sun Jun 13 23:39:04 2010 (4C15A458)
fffff880`019f0000 fffff880`019fd000 TDI TDI.SYS Mon Jul 13 19:21:18 2009 (4A5BC16E)
fffff880`019d2000 fffff880`019f0000 tdx tdx.sys Mon Jul 13 19:21:15 2009 (4A5BC16B)
fffff880`02c2a000 fffff880`02c3e000 termdd termdd.sys Mon Jul 13 20:16:36 2009 (4A5BCE64)
fffff960`00440000 fffff960`0044a000 TSDDD TSDDD.dll Mon Jul 13 20:16:34 2009 (4A5BCE62)
fffff880`0412e000 fffff880`04154000 tunnel tunnel.sys Mon Jul 13 20:09:37 2009 (4A5BCCC1)
fffff880`05140000 fffff880`05152000 umbus umbus.sys Mon Jul 13 20:06:56 2009 (4A5BCC20)
fffff880`051fd000 fffff880`051fef00 USBD USBD.SYS Mon Jul 13 20:06:23 2009 (4A5BCBFF)
fffff880`04256000 fffff880`04267000 usbehci usbehci.sys Mon Jul 13 20:06:30 2009 (4A5BCC06)
fffff880`05152000 fffff880`051ac000 usbhub usbhub.sys Mon Jul 13 20:07:09 2009 (4A5BCC2D)
fffff880`04200000 fffff880`04256000 USBPORT USBPORT.SYS Mon Jul 13 20:06:31 2009 (4A5BCC07)
fffff880`043ec000 fffff880`043f9000 usbuhci usbuhci.sys Mon Jul 13 20:06:27 2009 (4A5BCC03)
fffff880`00fc3000 fffff880`00fd0000 vdrvroot vdrvroot.sys Mon Jul 13 20:01:31 2009 (4A5BCADB)
fffff880`01958000 fffff880`01966000 vga vga.sys Mon Jul 13 19:38:47 2009 (4A5BC587)
fffff880`01966000 fffff880`0198b000 VIDEOPRT VIDEOPRT.SYS Mon Jul 13 19:38:51 2009 (4A5BC58B)
fffff880`014d5000 fffff880`014e5000 vmstorfl vmstorfl.sys Mon Jul 13 19:42:54 2009 (4A5BC67E)
fffff880`00fe5000 fffff880`00ffa000 volmgr volmgr.sys Mon Jul 13 19:19:57 2009 (4A5BC11D)
fffff880`00e00000 fffff880`00e5c000 volmgrx volmgrx.sys Mon Jul 13 19:20:33 2009 (4A5BC141)
fffff880`01169000 fffff880`011b5000 volsnap volsnap.sys Mon Jul 13 19:20:08 2009 (4A5BC128)
fffff880`02c0f000 fffff880`02c2a000 wanarp wanarp.sys Mon Jul 13 20:10:21 2009 (4A5BCCED)
fffff880`0198b000 fffff880`0199b000 watchdog watchdog.sys Mon Jul 13 19:37:35 2009 (4A5BC53F)
fffff880`00e73000 fffff880`00f17000 Wdf01000 Wdf01000.sys Mon Jul 13 19:22:07 2009 (4A5BC19F)
fffff880`00f17000 fffff880`00f26000 WDFLDR WDFLDR.SYS Mon Jul 13 19:19:54 2009 (4A5BC11A)
fffff880`02dcc000 fffff880`02dd5000 wfplwf wfplwf.sys Mon Jul 13 20:09:26 2009 (4A5BCCB6)
fffff960`000d0000 fffff960`003df000 win32k win32k.sys Sat Jun 19 00:31:59 2010 (4C1C483F)
fffff880`04267000 fffff880`04270000 wmiacpi wmiacpi.sys Mon Jul 13 19:31:02 2009 (4A5BC3B6)
fffff880`00f7d000 fffff880`00f86000 WMILIB WMILIB.SYS Mon Jul 13 19:19:51 2009 (4A5BC117)
fffff880`00ddd000 fffff880`00dfe000 WudfPf WudfPf.sys Mon Jul 13 20:05:37 2009 (4A5BCBD1)
fffff880`04000000 fffff880`04063000 yk62x64 yk62x64.sys Mon Feb 23 10:02:27 2009 (49A2BA83)
Unloaded modules:
fffff880`018e8000 fffff880`018f6000 crashdmp.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
ImageSize: 0000E000
fffff880`018f6000 fffff880`01902000 dump_ataport
Timestamp: unavailable (00000000)
Checksum: 00000000
ImageSize: 0000C000
fffff880`01902000 fffff880`0190b000 dump_atapi.s
Timestamp: unavailable (00000000)
Checksum: 00000000
ImageSize: 00009000
fffff880`0190b000 fffff880`0191e000 dump_dumpfve
Timestamp: unavailable (00000000)
Checksum: 00000000
ImageSize: 00013000
No, not safe to replace the RAM. You could be replacing perfectly fine RAM and we will never know until you follow my advice.
CPU-Z >> CPUID - System & hardware benchmark, monitoring, reporting
Memory is definitely set unwell in the bios.
It needs to be set at 667 MHz with 9-9-9-24 timings.
Instead you have it at this now, which is bad: 533 MHz 8-8-8-20
Look in your motherboard manual if you need help how to set it up, or contact GSKILL or your motherboard manufacturer.
**************************************************************************
* *
* Bugcheck Analysis *
* *
**************************************************************************
Use !analyze -v to get detailed debugging information.
BugCheck 3B, {c0000005, fffff88001547071, fffff8800888ec30, 0}
Probably caused by : [COLOR=red][B]memory_corruption[/B][/COLOR]
Followup:[B] [COLOR=red]memory_corruption[/COLOR][/B]
---------
Microsoft (R) Windows Debugger Version 6.12.0002.633 AMD64
Copyright (c) Microsoft Corporation. All rights reserved.
Loading Dump File [F:\a\Minidump\D M P\DMP\011911-23883-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available
Symbol search path is: SRV*c:\websymbols*http://msdl.microsoft.com/download/symbols
Executable search path is:
Windows 7 Kernel Version 7600 MP (8 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 7600.16617.amd64fre.win7_gdr.100618-1621
Machine Name:
Kernel base = 0xfffff800`02a14000 PsLoadedModuleList = 0xfffff800`02c51e50
Debug session time: Wed Jan 19 21:10:30.825 2011 (UTC - 5:00)
System Uptime: 0 days 0:00:36.887
Loading Kernel Symbols
...............................................................
................................................................
................
Loading User Symbols
Loading unloaded module list
....
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
Use !analyze -v to get detailed debugging information.
BugCheck 3B, {c0000005, fffff88001547071, fffff8800888ec30, 0}
Probably caused by : memory_corruption
Followup: memory_corruption
---------
4: kd> !analyze -v
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
SYSTEM_SERVICE_EXCEPTION (3b)
An exception happened while executing a system service routine.
Arguments:
Arg1: 00000000c0000005, Exception code that caused the bugcheck
Arg2: fffff88001547071, Address of the instruction which caused the bugcheck
Arg3: fffff8800888ec30, Address of the context record for the exception that caused the bugcheck
Arg4: 0000000000000000, zero.
Debugging Details:
------------------
EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced memory at 0x%08lx. The memory could not be %s.
FAULTING_IP:
Fs_Rec!FsRecFsControl+5
fffff880`01547071 8b4bff mov ecx,dword ptr [rbx-1]
CONTEXT: fffff8800888ec30 -- (.cxr 0xfffff8800888ec30)
rax=00000000083d7c60 rbx=000000000000000d rcx=fffffa8006350770
rdx=0000000006350770 rsi=fffffa800880a060 rdi=fffffa80070c9610
rip=fffff88001547071 rsp=fffff8800888f608 rbp=fffff80002c89200
r8=fffffa8006351660 r9=000000000000000d r10=fffffa80055523c0
r11=0000000000000000 r12=fffffa80063507c0 r13=fffffa80070ca4e0
r14=fffffa80083d7c60 r15=0000000000000000
iopl=0 nv up ei ng nz na pe nc
cs=0010 ss=0018 ds=002b es=002b fs=0053 gs=002b efl=00010282
Fs_Rec!FsRecFsControl+0x5:
fffff880`01547071 8b4bff mov ecx,dword ptr [rbx-1] ds:002b:00000000`0000000c=????????
Resetting default scope
CUSTOMER_CRASH_COUNT: 1
DEFAULT_BUCKET_ID: CODE_CORRUPTION
BUGCHECK_STR: 0x3B
PROCESS_NAME: explorer.exe
CURRENT_IRQL: 0
LAST_CONTROL_TRANSFER: from 0000000000000000 to fffff88001547071
STACK_TEXT:
fffff880`0888f608 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : Fs_Rec!FsRecFsControl+0x5
CHKIMG_EXTENSION: !chkimg -lo 50 -d !Fs_Rec
fffff88001547000-fffff88001547040 65 bytes - Fs_Rec!FsRecLoadSync <PERF> (Fs_Rec+0x5000)
[ 00 00 00 00 00 00 00 00:fd fe fe ff fd fe fe ff ]
fffff88001547043-fffff88001547056 20 bytes - Fs_Rec!FsRecCreate+1f (+0x43)
[ 00 49 8b c8 66 f7 d8 1b:0e 00 00 00 00 00 00 00 ]
fffff88001547058-fffff8800154705a 3 bytes - Fs_Rec!FsRecCreate+34 (+0x15)
[ 15 13 d0:fd fe fe ]
fffff8800154705c-fffff8800154706c 17 bytes - Fs_Rec!FsRecCreate+38 (+0x04)
[ ff 8b c3 48 83 c4 20 5b:d1 bd bc ff a9 98 68 ff ]
fffff8800154706e-fffff88001547100 147 bytes - Fs_Rec!FsRecFsControl+2 (+0x12)
[ 5c 24 18 48 89 74 24 20:4a ff 92 8b 4b ff 91 8d ]
fffff88001547103-fffff88001547147 69 bytes - Fs_Rec!FsRecFsControl+97 (+0x95)
[ 00 0f b6 4a 01 41 2b ca:0e 00 00 00 00 00 00 00 ]
fffff88001547149-fffff880015471bb 115 bytes - Fs_Rec!FsRecFsControl+dd (+0x46)
[ 73 4d 84 c0 0f 45 de eb:94 4f ff 8c 95 50 ff 8b ]
fffff880015471be-fffff880015471c3 6 bytes - Fs_Rec!FsRecFsControl+152 (+0x75)
[ c0 74 05 bb 9c 01:00 2a 00 00 00 0e ]
fffff880015471c5-fffff880015471d2 14 bytes - Fs_Rec!FsRecFsControl+159 (+0x07)
[ c0 33 d2 48 8b cf 89 5f:00 00 00 00 00 00 00 88 ]
fffff880015471d4-fffff880015471fa 39 bytes - Fs_Rec!FsRecFsControl+168 (+0x0f)
[ 8b c3 48 8b 5c 24 40 48:fd fe fe ff fd fe fe ff ]
fffff880015471fc-fffff8800154726a 111 bytes - Fs_Rec!FsRecUnload+10 (+0x28)
[ cc cc cc cc cc cc cc cc:91 8b 4b ff 90 8d 4c ff ]
fffff8800154726c-fffff8800154726e 3 bytes - Fs_Rec!FsRecLoadFileSystem+68 (+0x70)
[ 15 17 ce:9d b3 79 ]
fffff88001547270-fffff8800154727b 12 bytes - Fs_Rec!FsRecLoadFileSystem+6c (+0x04)
[ ff 8b f0 eb 0e 48 8b 3b:fd fe fe ff d1 c6 bd ff ]
fffff8800154727f-fffff88001547292 20 bytes - Fs_Rec!FsRecLoadFileSystem+7b (+0x0f)
[ 48 8b 5f 40 83 7b 0c 02:2a 00 00 00 0e 00 00 00 ]
fffff88001547294-fffff880015472be 43 bytes - Fs_Rec!FsRecLoadFileSystem+90 (+0x15)
[ 48 8b 3b c7 43 0c 01 00:fd fe fe ff fd fe fe ff ]
fffff880015472c0 - Fs_Rec!FsRecLoadFileSystem+bc (+0x2c)
[ 48:92 ]
fffff880015472c2-fffff8800154730a 73 bytes - Fs_Rec!FsRecLoadFileSystem+be (+0x02)
[ 5c 24 50 48 8b 6c 24 58:4b ff 91 8d 4c ff 90 8f ]
fffff8800154730c-fffff8800154733f 52 bytes - Fs_Rec!FsRecGetDeviceSectors+2c (+0x4a)
[ 4c 8d 5c 24 50 48 8d 44:fd fe fe ff fd fe fe ff ]
fffff88001547343-fffff880015473ee 172 bytes - Fs_Rec!FsRecGetDeviceSectors+63 (+0x37)
[ 48 89 44 24 20 ff 15 ba:0e 00 00 00 00 00 00 00 ]
fffff880015473f0-fffff880015473f2 3 bytes - Fs_Rec!FsRecGetDeviceSectorSize+2c (+0xad)
[ 15 53 cc:fd fe fe ]
fffff880015473f4-fffff8800154745e 107 bytes - Fs_Rec!FsRecGetDeviceSectorSize+30 (+0x04)
[ ff 4c 8d 5c 24 50 48 8d:d1 c6 bd ff 88 84 81 ff ]
fffff88001547460-fffff88001547462 3 bytes - Fs_Rec!FsRecGetDeviceSectorSize+9c (+0x6c)
[ 15 2b cc:9d a4 6a ]
fffff88001547464-fffff8800154747e 27 bytes - Fs_Rec!FsRecGetDeviceSectorSize+a0 (+0x04)
[ ff 3d 03 01 00 00 75 19:d1 bd bc ff e6 e6 e7 ff ]
fffff88001547480-fffff88001547482 3 bytes - Fs_Rec!FsRecGetDeviceSectorSize+bc (+0x1c)
[ 15 f3 cb:fd fe fe ]
fffff88001547484-fffff880015474ba 55 bytes - Fs_Rec!FsRecGetDeviceSectorSize+c0 (+0x04)
[ ff 83 7e 48 02 74 1a 83:fd fe fe ff fd fe fe ff ]
fffff880015474bc-fffff880015474f6 59 bytes - Fs_Rec!FsRecGetDeviceSectorSize+f8 (+0x38)
[ 4c 8d 5c 24 50 48 8d 44:00 00 00 2a 00 00 00 0e ]
fffff880015474f8-fffff88001547502 11 bytes - Fs_Rec!FsRecGetDeviceSectorSize+134 (+0x3c)
[ 48 8b d0 48 85 c0 0f 84:a5 8e 5c ff a4 8f 5c ff ]
fffff88001547504-fffff88001547516 19 bytes - Fs_Rec!FsRecGetDeviceSectorSize+140 (+0x0c)
[ 48 8b 80 b8 00 00 00 48:a2 93 5e ff a1 95 5f ff ]
fffff88001547518-fffff88001547536 31 bytes - Fs_Rec!FsRecGetDeviceSectorSize+154 (+0x14)
[ 3d 03 01 00 00 75 1d 48:9d 9d 62 ff 9d 9e 63 ff ]
fffff88001547538-fffff88001547546 15 bytes - Fs_Rec!FsRecGetDeviceSectorSize+174 (+0x20)
[ 8b 44 24 50 48 85 db 74:da da da ff da da da ff ]
fffff88001547548-fffff880015475fd 182 bytes - Fs_Rec!FsRecGetDeviceSectorSize+184 (+0x10)
[ fe ff ff 8b 84 24 8c 00:da da da ff da da da ff ]
fffff880015475ff-fffff88001547646 72 bytes - Fs_Rec!FsRecReadBlock+7f (+0xb7)
[ c9 ff ff 48 89 06 48 85:ff fd fe fe ff fd fe fe ]
fffff8800154764a-fffff880015476fc 179 bytes - Fs_Rec!FsRecReadBlock+ca (+0x4b)
[ 48 8b cd 80 48 ba 02 ff:00 00 88 84 81 ff e0 d9 ]
fffff880015476ff-fffff88001547703 5 bytes - Fs_Rec!UdfsRecDevIoctl+53 (+0xb5)
[ 00 c6 44 24 30:2a 00 00 00 0e ]
fffff88001547705-fffff8800154771a 22 bytes - Fs_Rec!UdfsRecDevIoctl+59 (+0x06)
[ 89 44 24 28 48 8b 84 24:00 00 00 00 00 00 00 88 ]
fffff8800154771c-fffff8800154771e 3 bytes - Fs_Rec!UdfsRecDevIoctl+70 (+0x17)
[ 15 e7 c8:d1 bd bc ]
fffff88001547720-fffff88001547742 35 bytes - Fs_Rec!UdfsRecDevIoctl+74 (+0x04)
[ ff 48 8b d0 48 85 c0 75:a2 72 44 ff a1 73 45 ff ]
fffff88001547744-fffff88001547762 31 bytes - Fs_Rec!UdfsRecDevIoctl+98 (+0x24)
[ 3d 03 01 00 00 75 1d 48:9c 81 4b ff 9c 83 4c ff ]
fffff88001547764-fffff880015477c9 102 bytes - Fs_Rec!UdfsRecDevIoctl+b8 (+0x20)
[ 8b 44 24 50 4c 8d 9c 24:d1 bd bc ff e6 e6 e7 ff ]
fffff880015477cb-fffff880015477f2 40 bytes - Fs_Rec!UdfsReadTrackInfo+43 (+0x67)
[ 01 00 00 c6 44 24 38 52:00 88 84 81 ff e0 d9 d3 ]
fffff880015477f4-fffff8800154786e 123 bytes - Fs_Rec!UdfsReadTrackInfo+6c (+0x29)
[ ff 48 83 c4 58 c3 cc cc:d1 bd bc ff d1 bd bc ff ]
fffff88001547870-fffff8800154787b 12 bytes - Fs_Rec!UdfsRecSendSptCdb+70 (+0x7c)
[ 44 8b 27 41 8d 6c 24 4c:fd fe fe ff e0 d9 d3 ff ]
fffff8800154787e-fffff88001547881 4 bytes - Fs_Rec!UdfsRecSendSptCdb+7e (+0x0e)
[ 76 0a b8 0d:00 2a 00 00 ]
fffff88001547883-fffff88001547886 4 bytes - Fs_Rec!UdfsRecSendSptCdb+83 (+0x05)
[ 00 c0 e9 ce:0e 00 00 00 ]
fffff8800154788a-fffff88001547896 13 bytes - Fs_Rec!UdfsRecSendSptCdb+8a (+0x07)
[ 48 8d 4c 24 40 44 8b c5:00 00 88 84 81 ff e0 d9 ]
fffff88001547898-fffff8800154790a 115 bytes - Fs_Rec!UdfsRecSendSptCdb+98 (+0x0e)
[ ff 48 8d 4c 24 64 44 0f:fd fe fe ff fd fe fe ff ]
fffff8800154790c-fffff8800154794a 63 bytes - Fs_Rec!UdfsRecSendSptCdb+10c (+0x74)
[ 3b c3 7c 48 f6 44 24 7a:fd fe fe ff fd fe fe ff ]
fffff8800154794c-fffff88001547966 27 bytes - Fs_Rec!UdfsRecSendSptCdb+14c (+0x40)
[ 00 00 49 8b cd e8 9a b9:88 84 81 ff e0 d9 d3 ff ]
fffff88001547968-fffff880015479f0 137 bytes - Fs_Rec!UdfsRecSendSptCdb+168 (+0x1c)
[ 48 81 c4 58 02 00 00 41:fd fe fe ff fd fe fe ff ]
fffff880015479f2 - Fs_Rec!UdfsRecGetOpenSessionStart+6e (+0x8a)
[ ff:fe ]
WARNING: !chkimg output was truncated to 50 lines. Invoke !chkimg without '-lo [num_lines]' to view entire output.
3958 errors : !Fs_Rec (fffff88001547000-fffff88001547fff)
MODULE_NAME: memory_corruption
IMAGE_NAME: memory_corruption
FOLLOWUP_NAME: memory_corruption
DEBUG_FLR_IMAGE_TIMESTAMP: 0
MEMORY_CORRUPTOR: LARGE_4096
STACK_COMMAND: .cxr 0xfffff8800888ec30 ; kb
FAILURE_BUCKET_ID: X64_MEMORY_CORRUPTION_LARGE_4096
BUCKET_ID: X64_MEMORY_CORRUPTION_LARGE_4096
Followup: memory_corruption
---------
start end module name
fffff880`00c00000 fffff880`00c3e000 1394ohci 1394ohci.sys Mon Jul 13 20:07:12 2009 (4A5BCC30)
fffff880`00f07000 fffff880`00f5e000 ACPI ACPI.sys Mon Jul 13 19:19:34 2009 (4A5BC106)
fffff880`028ad000 fffff880`02928e00 AF15BDA AF15BDA.sys Tue Jun 02 20:58:22 2009 (4A25CAAE)
fffff880`02c03000 fffff880`02c8d000 afd afd.sys Mon Jul 13 19:21:40 2009 (4A5BC184)
fffff880`04063000 fffff880`04079000 AgileVpn AgileVpn.sys Mon Jul 13 20:10:24 2009 (4A5BCCF0)
fffff880`01185000 fffff880`01190000 amdxata amdxata.sys Tue May 19 13:56:59 2009 (4A12F2EB)
fffff880`01152000 fffff880`0115b000 atapi atapi.sys Mon Jul 13 19:19:47 2009 (4A5BC113)
fffff880`0115b000 fffff880`01185000 ataport ataport.SYS Mon Jul 13 19:19:52 2009 (4A5BC118)
fffff880`05122000 fffff880`05142000 AtihdW76 AtihdW76.sys Mon Aug 16 06:41:02 2010 (4C6915BE)
fffff880`0480e000 fffff880`04fe4000 atikmdag atikmdag.sys Tue Sep 28 21:41:26 2010 (4CA29946)
fffff880`04188000 fffff880`041d3000 atikmpag atikmpag.sys Tue Sep 28 21:14:49 2010 (4CA29309)
fffff880`02929000 fffff880`0292ce80 BdaSup BdaSup.SYS Mon Jul 13 20:06:40 2009 (4A5BCC10)
fffff880`014b6000 fffff880`014bd000 Beep Beep.SYS Mon Jul 13 20:00:13 2009 (4A5BCA8D)
fffff880`0413b000 fffff880`0414c000 blbdrive blbdrive.sys Mon Jul 13 19:35:59 2009 (4A5BC4DF)
fffff880`0476e000 fffff880`0478c000 bowser bowser.sys Mon Jul 13 19:23:50 2009 (4A5BC206)
fffff960`00750000 fffff960`00777000 cdd cdd.dll Wed May 19 15:48:26 2010 (4BF4408A)
fffff880`015d2000 fffff880`015fc000 cdrom cdrom.sys Mon Jul 13 19:19:54 2009 (4A5BC11A)
fffff880`00d0c000 fffff880`00dcc000 CI CI.dll Mon Jul 13 21:32:13 2009 (4A5BE01D)
fffff880`01450000 fffff880`01480000 CLASSPNP CLASSPNP.SYS Mon Jul 13 19:19:58 2009 (4A5BC11E)
fffff880`00cae000 fffff880`00d0c000 CLFS CLFS.SYS Mon Jul 13 19:19:57 2009 (4A5BC11D)
fffff880`014be000 fffff880`01531000 cng cng.sys Mon Jul 13 19:49:40 2009 (4A5BC814)
fffff880`04fe4000 fffff880`04ff4000 CompositeBus CompositeBus.sys Mon Jul 13 20:00:33 2009 (4A5BCAA1)
fffff880`051b3000 fffff880`051c1000 crashdmp crashdmp.sys Mon Jul 13 20:01:01 2009 (4A5BCABD)
fffff880`0409a000 fffff880`0411d000 csc csc.sys Mon Jul 13 19:24:26 2009 (4A5BC22A)
fffff880`0411d000 fffff880`0413b000 dfsc dfsc.sys Mon Jul 13 19:23:44 2009 (4A5BC200)
fffff880`02dc1000 fffff880`02dd0000 discache discache.sys Mon Jul 13 19:37:18 2009 (4A5BC52E)
fffff880`0143a000 fffff880`01450000 disk disk.sys Mon Jul 13 19:19:57 2009 (4A5BC11D)
fffff880`0517f000 fffff880`051a1000 drmk drmk.sys Mon Jul 13 21:01:25 2009 (4A5BD8E5)
fffff880`051cd000 fffff880`051d6000 dump_atapi dump_atapi.sys Mon Jul 13 19:19:47 2009 (4A5BC113)
fffff880`051c1000 fffff880`051cd000 dump_dumpata dump_dumpata.sys Mon Jul 13 19:19:47 2009 (4A5BC113)
fffff880`051d6000 fffff880`051e9000 dump_dumpfve dump_dumpfve.sys Mon Jul 13 19:21:51 2009 (4A5BC18F)
fffff880`051a7000 fffff880`051b3000 Dxapi Dxapi.sys Mon Jul 13 19:38:28 2009 (4A5BC574)
fffff880`042d8000 fffff880`043cc000 dxgkrnl dxgkrnl.sys Thu Oct 01 21:00:14 2009 (4AC5509E)
fffff880`04200000 fffff880`04246000 dxgmms1 dxgmms1.sys Mon Jul 13 19:38:32 2009 (4A5BC578)
fffff880`011dc000 fffff880`011f0000 fileinfo fileinfo.sys Mon Jul 13 19:34:25 2009 (4A5BC481)
fffff880`01190000 fffff880`011dc000 fltmgr fltmgr.sys Mon Jul 13 19:19:59 2009 (4A5BC11F)
fffff880`01542000 fffff880`0154c000 Fs_Rec Fs_Rec.sys Mon Jul 13 19:19:45 2009 (4A5BC111)
fffff880`01400000 fffff880`0143a000 fvevol fvevol.sys Fri Sep 25 22:34:26 2009 (4ABD7DB2)
fffff880`01600000 fffff880`0164a000 fwpkclnt fwpkclnt.sys Mon Jul 13 19:21:08 2009 (4A5BC164)
fffff880`043dd000 fffff880`043ea000 GEARAspiWDM GEARAspiWDM.sys Mon May 18 08:17:04 2009 (4A1151C0)
fffff800`02ff0000 fffff800`03039000 hal hal.dll Mon Jul 13 21:27:36 2009 (4A5BDF08)
fffff880`04246000 fffff880`0426a000 HDAudBus HDAudBus.sys Mon Jul 13 20:06:13 2009 (4A5BCBF5)
fffff880`05000000 fffff880`0505c000 HdAudio HdAudio.sys Mon Jul 13 20:06:59 2009 (4A5BCC23)
fffff880`0294b000 fffff880`02964000 HIDCLASS HIDCLASS.SYS Mon Jul 13 20:06:21 2009 (4A5BCBFD)
fffff880`02964000 fffff880`0296c080 HIDPARSE HIDPARSE.SYS Mon Jul 13 20:06:17 2009 (4A5BCBF9)
fffff880`0293d000 fffff880`0294b000 hidusb hidusb.sys Mon Jul 13 20:06:22 2009 (4A5BCBFE)
fffff880`046a6000 fffff880`0476e000 HTTP HTTP.sys Mon Jul 13 19:22:16 2009 (4A5BC1A8)
fffff880`0164a000 fffff880`01653000 hwpolicy hwpolicy.sys Mon Jul 13 19:19:22 2009 (4A5BC0FA)
fffff880`04172000 fffff880`04188000 intelppm intelppm.sys Mon Jul 13 19:19:25 2009 (4A5BC0FD)
fffff880`00e3f000 fffff880`00e4e000 kbdclass kbdclass.sys Mon Jul 13 19:19:50 2009 (4A5BC116)
fffff880`02982000 fffff880`02990000 kbdhid kbdhid.sys Mon Jul 13 20:00:20 2009 (4A5BCA94)
fffff800`00bb8000 fffff800`00bc2000 kdcom kdcom.dll Mon Jul 13 21:31:07 2009 (4A5BDFDB)
fffff880`0505e000 fffff880`050a1000 ks ks.sys Mon Jul 13 20:00:31 2009 (4A5BCA9F)
fffff880`013d2000 fffff880`013ec000 ksecdd ksecdd.sys Mon Jul 13 19:20:54 2009 (4A5BC156)
fffff880`017a7000 fffff880`017d2000 ksecpkg ksecpkg.sys Fri Dec 11 01:03:32 2009 (4B21E0B4)
fffff880`051a1000 fffff880`051a6200 ksthunk ksthunk.sys Mon Jul 13 20:00:19 2009 (4A5BCA93)
fffff880`0296d000 fffff880`02982000 LHidFilt LHidFilt.Sys Tue Aug 24 13:21:36 2010 (4C73FFA0)
fffff880`02800000 fffff880`02815000 lltdio lltdio.sys Mon Jul 13 20:08:50 2009 (4A5BCC92)
fffff880`0299d000 fffff880`029b1000 LMouFilt LMouFilt.Sys Tue Aug 24 13:21:43 2010 (4C73FFA7)
fffff880`029b1000 fffff880`029d4000 luafv luafv.sys Mon Jul 13 19:26:13 2009 (4A5BC295)
fffff880`00c56000 fffff880`00c9a000 mcupdate_GenuineIntel mcupdate_GenuineIntel.dll Mon Jul 13 21:29:10 2009 (4A5BDF66)
fffff880`0292f000 fffff880`0293d000 monitor monitor.sys Mon Jul 13 19:38:52 2009 (4A5BC58C)
fffff880`00fec000 fffff880`00ffb000 mouclass mouclass.sys Mon Jul 13 19:19:50 2009 (4A5BC116)
fffff880`02990000 fffff880`0299d000 mouhid mouhid.sys Mon Jul 13 20:00:20 2009 (4A5BCA94)
fffff880`01138000 fffff880`01152000 mountmgr mountmgr.sys Mon Jul 13 19:19:54 2009 (4A5BC11A)
fffff880`01200000 fffff880`0122d000 MpFilter MpFilter.sys Sat Mar 20 01:58:08 2010 (4BA463F0)
fffff880`0478c000 fffff880`047a4000 mpsdrv mpsdrv.sys Mon Jul 13 20:08:25 2009 (4A5BCC79)
fffff880`047a4000 fffff880`047d1000 mrxsmb mrxsmb.sys Sat Feb 27 02:52:19 2010 (4B88CF33)
fffff880`04600000 fffff880`0464e000 mrxsmb10 mrxsmb10.sys Sat Feb 27 02:52:28 2010 (4B88CF3C)
fffff880`0464e000 fffff880`04671000 mrxsmb20 mrxsmb20.sys Sat Feb 27 02:52:26 2010 (4B88CF3A)
fffff880`010b3000 fffff880`010be000 Msfs Msfs.SYS Mon Jul 13 19:19:47 2009 (4A5BC113)
fffff880`00f67000 fffff880`00f71000 msisadrv msisadrv.sys Mon Jul 13 19:19:26 2009 (4A5BC0FE)
fffff880`01000000 fffff880`0105e000 msrpc msrpc.sys Mon Jul 13 19:21:32 2009 (4A5BC17C)
fffff880`02db6000 fffff880`02dc1000 mssmbios mssmbios.sys Mon Jul 13 19:31:10 2009 (4A5BC3BE)
fffff880`017ea000 fffff880`017fc000 mup mup.sys Mon Jul 13 19:23:45 2009 (4A5BC201)
fffff880`01655000 fffff880`01747000 ndis ndis.sys Mon Jul 13 19:21:40 2009 (4A5BC184)
fffff880`043f3000 fffff880`043ff000 ndistapi ndistapi.sys Mon Jul 13 20:10:00 2009 (4A5BCCD8)
fffff880`02dd0000 fffff880`02dff000 ndiswan ndiswan.sys Mon Jul 13 20:10:11 2009 (4A5BCCE3)
fffff880`0510d000 fffff880`05122000 NDProxy NDProxy.SYS Mon Jul 13 20:10:05 2009 (4A5BCCDD)
fffff880`02d01000 fffff880`02d10000 netbios netbios.sys Mon Jul 13 20:09:26 2009 (4A5BCCB6)
fffff880`02c8d000 fffff880`02cd2000 netbt netbt.sys Mon Jul 13 19:21:28 2009 (4A5BC178)
fffff880`01747000 fffff880`017a7000 NETIO NETIO.SYS Thu Apr 08 22:43:59 2010 (4BBE946F)
fffff880`00fdb000 fffff880`00fec000 Npfs Npfs.SYS Mon Jul 13 19:19:48 2009 (4A5BC114)
fffff880`02daa000 fffff880`02db6000 nsiproxy nsiproxy.sys Mon Jul 13 19:21:02 2009 (4A5BC15E)
fffff800`02a14000 fffff800`02ff0000 nt ntkrnlmp.exe Sat Jun 19 00:16:41 2010 (4C1C44A9)
fffff880`0122f000 fffff880`013d2000 Ntfs Ntfs.sys Mon Jul 13 19:20:47 2009 (4A5BC14F)
fffff880`013ec000 fffff880`013f5000 Null Null.SYS Mon Jul 13 19:19:37 2009 (4A5BC109)
fffff880`02cdb000 fffff880`02d01000 pacer pacer.sys Mon Jul 13 20:09:41 2009 (4A5BCCC5)
fffff880`00fb1000 fffff880`00fc6000 partmgr partmgr.sys Mon Jul 13 19:19:58 2009 (4A5BC11E)
fffff880`00f71000 fffff880`00fa4000 pci pci.sys Mon Jul 13 19:19:51 2009 (4A5BC117)
fffff880`01121000 fffff880`01128000 pciide pciide.sys Mon Jul 13 19:19:49 2009 (4A5BC115)
fffff880`01128000 fffff880`01138000 PCIIDEX PCIIDEX.SYS Mon Jul 13 19:19:48 2009 (4A5BC114)
fffff880`01531000 fffff880`01542000 pcw pcw.sys Mon Jul 13 19:19:27 2009 (4A5BC0FF)
fffff880`07213000 fffff880`072b9000 peauth peauth.sys Mon Jul 13 21:01:19 2009 (4A5BD8DF)
fffff880`05142000 fffff880`0517f000 portcls portcls.sys Mon Jul 13 20:06:27 2009 (4A5BCC03)
fffff880`00c9a000 fffff880`00cae000 PSHED PSHED.dll Mon Jul 13 21:32:23 2009 (4A5BE027)
fffff880`041d3000 fffff880`041f7000 rasl2tp rasl2tp.sys Mon Jul 13 20:10:11 2009 (4A5BCCE3)
fffff880`04079000 fffff880`04094000 raspppoe raspppoe.sys Mon Jul 13 20:10:17 2009 (4A5BCCE9)
fffff880`00e1e000 fffff880`00e3f000 raspptp raspptp.sys Mon Jul 13 20:10:18 2009 (4A5BCCEA)
fffff880`00dcc000 fffff880`00de6000 rassstp rassstp.sys Mon Jul 13 20:10:25 2009 (4A5BCCF1)
fffff880`02d59000 fffff880`02daa000 rdbss rdbss.sys Mon Jul 13 19:24:09 2009 (4A5BC219)
fffff880`042cd000 fffff880`042d8000 rdpbus rdpbus.sys Mon Jul 13 20:17:46 2009 (4A5BCEAA)
fffff880`013f5000 fffff880`013fe000 RDPCDD RDPCDD.sys Mon Jul 13 20:16:34 2009 (4A5BCE62)
fffff880`010a1000 fffff880`010aa000 rdpencdd rdpencdd.sys Mon Jul 13 20:16:34 2009 (4A5BCE62)
fffff880`010aa000 fffff880`010b3000 rdprefmp rdprefmp.sys Mon Jul 13 20:16:35 2009 (4A5BCE63)
fffff880`01598000 fffff880`015d2000 rdyboost rdyboost.sys Mon Jul 13 19:34:34 2009 (4A5BC48A)
fffff880`02815000 fffff880`0282d000 rspndr rspndr.sys Mon Jul 13 20:08:50 2009 (4A5BCC92)
fffff880`02d3f000 fffff880`02d59000 SCDEmu SCDEmu.SYS Mon Apr 12 04:52:25 2010 (4BC2DF49)
fffff880`072b9000 fffff880`072c4000 secdrv secdrv.SYS Wed Sep 13 09:18:38 2006 (4508052E)
fffff880`017e2000 fffff880`017ea000 spldr spldr.sys Mon May 11 12:56:27 2009 (4A0858BB)
fffff880`0736a000 fffff880`07400000 srv srv.sys Thu Aug 26 23:38:00 2010 (4C773318)
fffff880`07303000 fffff880`0736a000 srv2 srv2.sys Thu Aug 26 23:37:46 2010 (4C77330A)
fffff880`072c4000 fffff880`072f1000 srvnet srvnet.sys Thu Aug 26 23:37:24 2010 (4C7732F4)
fffff880`04ff4000 fffff880`04ff5480 swenum swenum.sys Mon Jul 13 20:00:18 2009 (4A5BCA92)
fffff880`01801000 fffff880`019fe000 tcpip tcpip.sys Sun Jun 13 23:39:04 2010 (4C15A458)
fffff880`072f1000 fffff880`07303000 tcpipreg tcpipreg.sys Mon Jul 13 20:09:49 2009 (4A5BCCCD)
fffff880`011f0000 fffff880`011fd000 TDI TDI.SYS Mon Jul 13 19:21:18 2009 (4A5BC16E)
fffff880`00e00000 fffff880`00e1e000 tdx tdx.sys Mon Jul 13 19:21:15 2009 (4A5BC16B)
fffff880`02d2b000 fffff880`02d3f000 termdd termdd.sys Mon Jul 13 20:16:36 2009 (4A5BCE64)
fffff960`00440000 fffff960`0044a000 TSDDD TSDDD.dll unavailable (00000000)
fffff880`0414c000 fffff880`04172000 tunnel tunnel.sys Mon Jul 13 20:09:37 2009 (4A5BCCC1)
fffff880`050a1000 fffff880`050b3000 umbus umbus.sys Mon Jul 13 20:06:56 2009 (4A5BCC20)
fffff880`0292d000 fffff880`0292ef00 USBD USBD.SYS Mon Jul 13 20:06:23 2009 (4A5BCBFF)
fffff880`043cc000 fffff880`043dd000 usbehci usbehci.sys Mon Jul 13 20:06:30 2009 (4A5BCC06)
fffff880`050b3000 fffff880`0510d000 usbhub usbhub.sys Mon Jul 13 20:07:09 2009 (4A5BCC2D)
fffff880`04277000 fffff880`042cd000 USBPORT USBPORT.SYS Mon Jul 13 20:06:31 2009 (4A5BCC07)
fffff880`0426a000 fffff880`04277000 usbuhci usbuhci.sys Mon Jul 13 20:06:27 2009 (4A5BCC03)
fffff880`00fa4000 fffff880`00fb1000 vdrvroot vdrvroot.sys Mon Jul 13 20:01:31 2009 (4A5BCADB)
fffff880`0105e000 fffff880`0106c000 vga vga.sys Mon Jul 13 19:38:47 2009 (4A5BC587)
fffff880`0106c000 fffff880`01091000 VIDEOPRT VIDEOPRT.SYS Mon Jul 13 19:38:51 2009 (4A5BC58B)
fffff880`017d2000 fffff880`017e2000 vmstorfl vmstorfl.sys Mon Jul 13 19:42:54 2009 (4A5BC67E)
fffff880`00fc6000 fffff880`00fdb000 volmgr volmgr.sys Mon Jul 13 19:19:57 2009 (4A5BC11D)
fffff880`010c5000 fffff880`01121000 volmgrx volmgrx.sys Mon Jul 13 19:20:33 2009 (4A5BC141)
fffff880`0154c000 fffff880`01598000 volsnap volsnap.sys Mon Jul 13 19:20:08 2009 (4A5BC128)
fffff880`02d10000 fffff880`02d2b000 wanarp wanarp.sys Mon Jul 13 20:10:21 2009 (4A5BCCED)
fffff880`01091000 fffff880`010a1000 watchdog watchdog.sys Mon Jul 13 19:37:35 2009 (4A5BC53F)
fffff880`00e54000 fffff880`00ef8000 Wdf01000 Wdf01000.sys Mon Jul 13 19:22:07 2009 (4A5BC19F)
fffff880`00ef8000 fffff880`00f07000 WDFLDR WDFLDR.SYS Mon Jul 13 19:19:54 2009 (4A5BC11A)
fffff880`02cd2000 fffff880`02cdb000 wfplwf wfplwf.sys Mon Jul 13 20:09:26 2009 (4A5BCCB6)
fffff960`00040000 fffff960`00350000 win32k win32k.sys Tue Oct 19 23:08:46 2010 (4CBE5D3E)
fffff880`043ea000 fffff880`043f3000 wmiacpi wmiacpi.sys Mon Jul 13 19:31:02 2009 (4A5BC3B6)
fffff880`00f5e000 fffff880`00f67000 WMILIB WMILIB.SYS Mon Jul 13 19:19:51 2009 (4A5BC117)
fffff880`029d4000 fffff880`029f5000 WudfPf WudfPf.sys Mon Jul 13 20:05:37 2009 (4A5BCBD1)
fffff880`04000000 fffff880`04063000 yk62x64 yk62x64.sys Wed Sep 15 10:31:29 2010 (4C90D8C1)
Unloaded modules:
fffff880`01480000 fffff880`0148e000 crashdmp.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
ImageSize: 0000E000
fffff880`0148e000 fffff880`0149a000 dump_ataport
Timestamp: unavailable (00000000)
Checksum: 00000000
ImageSize: 0000C000
fffff880`0149a000 fffff880`014a3000 dump_atapi.s
Timestamp: unavailable (00000000)
Checksum: 00000000
ImageSize: 00009000
fffff880`014a3000 fffff880`014b6000 dump_dumpfve
Timestamp: unavailable (00000000)
Checksum: 00000000
ImageSize: 00013000
But seeing as memory corruption comes up again, I might have to replace my RAM after all...
TorrentG said:3) Take all the RAM out of the machine. Place it in the trash. Go to store and buy new matching set RAM. Install it in machine. Set bios to Optimized Defaults. Save.
-------
Good luck with the new hardware. Please tell us how great it is working after you do the above, especially step 3.
That's exactly what TorrentG advised to you in the very beginning. : )