Physical Memory Dump

Full_Metal · 07-22-2008, 04:56 AM

Hello, about every 4 hours my comp will crash and a blue screen with white writing appears.
This happens both when i start a fairly intense program, and just out of nowhere.
I have sussed that this may be to do with the graphics card - a Nvidia 6800
Or the ram, i am not sure whats in there (not my install) but i think its a 1g stick and one 256.
Also, people have said they need the MiniDump files to help. These are attached.

d_animality · 07-22-2008, 06:11 AM

Please post the BSOD message. To prevent automatic restart so that you can read the BSOD, please do the following:

1. Right Click the My Computer icons
2. Go to properties
3. In the System Properties window, click on the Advanced tab.
4. Under the Startup and Recovery area, click on the Settings button.
5. In the Startup and Recovery window, UNCHECK the check box next to Automatically restart.
6. Click OK in the Startup and Recovery window.
7. Click OK in the System Properties window.

From now on, when a problem causes a BSOD or another major error that halts the system,
the PC will not automatically reboot. Rebooting (Resetting) manually will be necessary.
Please post the error message that comes up.

Full_Metal · 07-23-2008, 01:42 AM

Thanks d_animality,
IRQL_NOT_LESS_OR_EQUAL

After the whole page of writing talking about BIOS and stuff, there is the following.

0X0000000A (0FFDFD980, 0X000000FF, 0X00000001, 0X804E2653)

Full_Metal · 07-23-2008, 02:38 AM

Just got this one.
0x0000000 (0x00000005, 0x0000001c, 0x00000001, 0x804Ei63E)
Happened when i was ripping a disc in media player, and then opening firefox.

**jcgriff2** · 07-23-2008, 02:49 AM

Hi. . .

I ran the last mini dump dated 07-22-08-04. The bugcheck (STOP error) was 0x000000c2 (0x00000007, 0x00000cd4, 0x00000000, 0xe5389e60). A 0xc2 indicates that a bad pool request was made.

Although it lists the Microsoft NT module ntkrnlmp.exe as the probable fault, I would first look at your anti-virus software AVG. I see various drivers belonging to AVG7.5. AVG 8 is now out. I would un-install AVG 7.5, re-boot, then install AVG 8.

See if this helps any.

Here is the dbug output:

Code:

Loading Dump File [D:\#Dumps\Full_Metal - XP - 07-23-08\Mini072208-04.dmp]
Mini Kernel Dump File: Only registers and stack trace are available

Symbol search path is: SRV*c:\symbols*http://msdl.microsoft.com/download/symbols
Executable search path is: 
Windows XP Kernel Version 2600 (Service Pack 2) MP (2 procs) Free x86 compatible
Product: WinNt, suite: TerminalServer SingleUserTS Personal
Built by: 2600.xpsp_sp2_gdr.070227-2254
Kernel base = 0x804d7000 PsLoadedModuleList = 0x805624a0
Debug session time: Tue Jul 22 07:29:13.750 2008 (GMT-4)
System Uptime: 0 days 0:00:55.484
Loading Kernel Symbols
...............................................................................................................................
Loading User Symbols
Loading unloaded module list
...
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck C2, {7, cd4, 0, e5389e60}

GetUlongFromAddress: unable to read from 8056a9f0
*** WARNING: Unable to verify timestamp for mdmxsdk.sys
*** ERROR: Module load completed but symbols could not be loaded for mdmxsdk.sys
*** WARNING: Unable to verify timestamp for avg7core.sys
*** ERROR: Module load completed but symbols could not be loaded for avg7core.sys
*** WARNING: Unable to verify timestamp for avgclean.sys
*** ERROR: Module load completed but symbols could not be loaded for avgclean.sys
*** WARNING: Unable to verify timestamp for a83nvf34.SYS
*** ERROR: Module load completed but symbols could not be loaded for a83nvf34.SYS
*** WARNING: Unable to verify timestamp for ALCXWDM.SYS
*** ERROR: Module load completed but symbols could not be loaded for ALCXWDM.SYS
*** WARNING: Unable to verify timestamp for e100b325.sys
*** ERROR: Module load completed but symbols could not be loaded for e100b325.sys
*** WARNING: Unable to verify timestamp for HSFCXTS2.sys
*** ERROR: Module load completed but symbols could not be loaded for HSFCXTS2.sys
*** WARNING: Unable to verify timestamp for HSFDPSP2.sys
*** ERROR: Module load completed but symbols could not be loaded for HSFDPSP2.sys
*** WARNING: Unable to verify timestamp for HSFBS2S2.sys
*** ERROR: Module load completed but symbols could not be loaded for HSFBS2S2.sys
*** WARNING: Unable to verify timestamp for nv4_mini.sys
*** ERROR: Module load completed but symbols could not be loaded for nv4_mini.sys
*** WARNING: Unable to verify timestamp for drmk.sys
*** ERROR: Module load completed but symbols could not be loaded for drmk.sys
*** WARNING: Unable to verify timestamp for nv4_disp.dll
*** ERROR: Module load completed but symbols could not be loaded for nv4_disp.dll
*** WARNING: Unable to verify timestamp for sptd.sys
*** ERROR: Module load completed but symbols could not be loaded for sptd.sys
*** WARNING: Unable to verify timestamp for PxHelp20.sys
*** ERROR: Module load completed but symbols could not be loaded for PxHelp20.sys
*** WARNING: Unable to verify timestamp for ElbyCDIO.sys
*** ERROR: Module load completed but symbols could not be loaded for ElbyCDIO.sys
*** WARNING: Unable to verify timestamp for ANIO.SYS
*** ERROR: Module load completed but symbols could not be loaded for ANIO.SYS
*** WARNING: Unable to verify timestamp for avg7rsxp.sys
*** ERROR: Module load completed but symbols could not be loaded for avg7rsxp.sys
*** WARNING: Unable to verify timestamp for fdc.sys
*** ERROR: Module load completed but symbols could not be loaded for fdc.sys
*** WARNING: Unable to verify timestamp for ElbyCDFL.sys
*** ERROR: Module load completed but symbols could not be loaded for ElbyCDFL.sys
*** WARNING: Unable to verify timestamp for avg7rsw.sys
*** ERROR: Module load completed but symbols could not be loaded for avg7rsw.sys
*** WARNING: Unable to verify timestamp for avgtdi.sys
*** ERROR: Module load completed but symbols could not be loaded for avgtdi.sys
*** WARNING: Unable to verify timestamp for WudfPf.sys
*** ERROR: Module load completed but symbols could not be loaded for WudfPf.sys
*** WARNING: Unable to verify timestamp for drmkaud.sys
*** ERROR: Module load completed but symbols could not be loaded for drmkaud.sys
GetUlongFromAddress: unable to read from 8056a9f0
Probably caused by : ntkrnlmp.exe ( nt!ExFreePoolWithTag+2c1 )

Followup: MachineOwner
---------

0: kd> !analyze -v;r;kv;lmtn
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

BAD_POOL_CALLER (c2)
The current thread is making a bad pool request.  Typically this is at a bad IRQL level or double freeing the same allocation, etc.
Arguments:
Arg1: 00000007, Attempt to free pool which was already freed
Arg2: 00000cd4, (reserved)
Arg3: 00000000, Memory contents of the pool block
Arg4: e5389e60, Address of the block of pool being deallocated

Debugging Details:
------------------

GetUlongFromAddress: unable to read from 8056a9f0
GetUlongFromAddress: unable to read from 8056a9f0

POOL_ADDRESS:  e5389e60 

BUGCHECK_STR:  0xc2_7

CUSTOMER_CRASH_COUNT:  4

DEFAULT_BUCKET_ID:  COMMON_SYSTEM_FAULT

PROCESS_NAME:  System

LOCK_ADDRESS:  805604e0 -- (!locks 805604e0)

Resource @ nt!PiEngineLock (0x805604e0)    Available

WARNING: SystemResourcesList->Flink chain invalid. Resource may be corrupted, or already deleted.


WARNING: SystemResourcesList->Blink chain invalid. Resource may be corrupted, or already deleted.

1 total locks

PNP_TRIAGE: 
	Lock address  : 0x805604e0
	Thread Count  : 0
	Thread address: 0x00000000
	Thread wait   : 0x0

LAST_CONTROL_TRANSFER:  from 80550fc5 to 8053738a

STACK_TEXT:  
b4db6a64 80550fc5 000000c2 00000007 00000cd4 nt!KeBugCheckEx+0x1b
b4db6ab4 806188dc e5389e60 e26b4d43 e5389e60 nt!ExFreePoolWithTag+0x2c1
b4db6ac8 80592a84 e5389e60 e5389e60 e1037008 nt!CmpFreeKeyControlBlock+0x1a
b4db6adc 80597abc e5389e60 b4db6af4 80571e4a nt!CmpCleanUpKcbCacheWithLock+0x4a
b4db6ae8 80571e4a e5389e60 b4db6b0c 80572561 nt!CmpDereferenceKeyControlBlockWithLock+0x40
b4db6af4 80572561 e5389e60 00000000 e4a57cc0 nt!CmpDereferenceKeyControlBlock+0x12
b4db6b0c 8056c78f e4a57cd8 00000000 e4a57cc0 nt!CmpDeleteKeyObject+0x92
b4db6b28 804e1957 e4a57cd8 00000000 0000071c nt!ObpRemoveObjectRoutine+0xdf
b4db6b40 8056ea9e 8935dca8 e1001e40 892f9bc8 nt!ObfDereferenceObject+0x4c
b4db6b58 8056e9bc e1001e40 e4a57cd8 0000071c nt!ObpCloseHandleTableEntry+0x155
b4db6ba0 8056ea06 0000071c 00000000 00000000 nt!ObpCloseHandle+0x87
b4db6bb4 804dd99f 8000071c b4db6cc4 804e3487 nt!NtClose+0x1d
b4db6bb4 804e3487 8000071c b4db6cc4 804e3487 nt!KiFastCallEntry+0xfc
b4db6c30 8059a147 8000071c 00000000 00000000 nt!ZwClose+0x11
b4db6cc4 8059ae17 0000001e 00000000 00000000 nt!IopGetDeviceInterfaces+0x577
b4db6cf0 8059ad80 e171fc10 b4db6d18 00000000 nt!PiGetInterfaceDeviceList+0x3e
b4db6d28 8059ac00 00000009 00008000 00000018 nt!PiControlGetInterfaceDeviceList+0xad
b4db6d50 804dd99f 00000009 0111f880 e52a4550 nt!NtPlugPlayControl+0xc2
b4db6d50 7c90eb94 00000009 0111f880 e52a4550 nt!KiFastCallEntry+0xfc
WARNING: Frame IP not in any known module. Following frames may be wrong.
0111f8b8 00000000 00000000 00000000 00000000 0x7c90eb94


STACK_COMMAND:  kb

FOLLOWUP_IP: 
nt!ExFreePoolWithTag+2c1
80550fc5 83f801          cmp     eax,1

SYMBOL_STACK_INDEX:  1

SYMBOL_NAME:  nt!ExFreePoolWithTag+2c1

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: nt

IMAGE_NAME:  ntkrnlmp.exe

DEBUG_FLR_IMAGE_TIMESTAMP:  45e54690

FAILURE_BUCKET_ID:  0xc2_7_nt!ExFreePoolWithTag+2c1

BUCKET_ID:  0xc2_7_nt!ExFreePoolWithTag+2c1

Followup: MachineOwner
---------

eax=ffdff13c ebx=00000cd4 ecx=00000000 edx=00000547 esi=e5389e58 edi=e5389518
eip=8053738a esp=b4db6a4c ebp=b4db6a64 iopl=0         nv up ei ng nz na pe nc
cs=0008  ss=0010  ds=0023  es=0023  fs=0030  gs=0000             efl=00000286
nt!KeBugCheckEx+0x1b:
8053738a 5d              pop     ebp
ChildEBP RetAddr  Args to Child              
b4db6a64 80550fc5 000000c2 00000007 00000cd4 nt!KeBugCheckEx+0x1b (FPO: [Non-Fpo])
b4db6ab4 806188dc e5389e60 e26b4d43 e5389e60 nt!ExFreePoolWithTag+0x2c1 (FPO: [Non-Fpo])
b4db6ac8 80592a84 e5389e60 e5389e60 e1037008 nt!CmpFreeKeyControlBlock+0x1a (FPO: [Non-Fpo])
b4db6adc 80597abc e5389e60 b4db6af4 80571e4a nt!CmpCleanUpKcbCacheWithLock+0x4a (FPO: [Non-Fpo])
b4db6ae8 80571e4a e5389e60 b4db6b0c 80572561 nt!CmpDereferenceKeyControlBlockWithLock+0x40 (FPO: [Non-Fpo])
b4db6af4 80572561 e5389e60 00000000 e4a57cc0 nt!CmpDereferenceKeyControlBlock+0x12 (FPO: [Non-Fpo])
b4db6b0c 8056c78f e4a57cd8 00000000 e4a57cc0 nt!CmpDeleteKeyObject+0x92 (FPO: [Non-Fpo])
b4db6b28 804e1957 e4a57cd8 00000000 0000071c nt!ObpRemoveObjectRoutine+0xdf (FPO: [Non-Fpo])
b4db6b40 8056ea9e 8935dca8 e1001e40 892f9bc8 nt!ObfDereferenceObject+0x4c (FPO: [0,0,0])
b4db6b58 8056e9bc e1001e40 e4a57cd8 0000071c nt!ObpCloseHandleTableEntry+0x155 (FPO: [Non-Fpo])
b4db6ba0 8056ea06 0000071c 00000000 00000000 nt!ObpCloseHandle+0x87 (FPO: [Non-Fpo])
b4db6bb4 804dd99f 8000071c b4db6cc4 804e3487 nt!NtClose+0x1d (FPO: [Non-Fpo])
b4db6bb4 804e3487 8000071c b4db6cc4 804e3487 nt!KiFastCallEntry+0xfc (FPO: [0,0] TrapFrame @ b4db6bc0)
b4db6c30 8059a147 8000071c 00000000 00000000 nt!ZwClose+0x11 (FPO: [1,0,0])
b4db6cc4 8059ae17 0000001e 00000000 00000000 nt!IopGetDeviceInterfaces+0x577 (FPO: [Non-Fpo])
b4db6cf0 8059ad80 e171fc10 b4db6d18 00000000 nt!PiGetInterfaceDeviceList+0x3e (FPO: [Non-Fpo])
b4db6d28 8059ac00 00000009 00008000 00000018 nt!PiControlGetInterfaceDeviceList+0xad (FPO: [Non-Fpo])
b4db6d50 804dd99f 00000009 0111f880 e52a4550 nt!NtPlugPlayControl+0xc2 (FPO: [Non-Fpo])
b4db6d50 7c90eb94 00000009 0111f880 e52a4550 nt!KiFastCallEntry+0xfc (FPO: [0,0] TrapFrame @ b4db6d64)
WARNING: Frame IP not in any known module. Following frames may be wrong.
0111f8b8 00000000 00000000 00000000 00000000 0x7c90eb94
start    end        module name
804d7000 806fd000   nt       ntkrnlmp.exe Wed Feb 28 04:08:32 2007 (45E54690)
806fd000 8071dd00   hal      halmacpi.dll Wed Aug 04 01:59:09 2004 (41107B2D)
b4e87000 b4ed8480   srv      srv.sys      Mon Aug 14 06:34:39 2006 (44E051BF)
b502d000 b5058d80   mrxdav   mrxdav.sys   Tue Dec 18 04:51:33 2007 (47679825)
b5059000 b5083180   kmixer   kmixer.sys   Wed Jun 14 04:47:45 2006 (448FCD31)
b5124000 b5146c80   aec      aec.sys      Fri Oct 01 13:00:21 2004 (415D8D25)
b5147000 b515b400   wdmaud   wdmaud.sys   Wed Jun 14 05:00:44 2006 (448FD03C)
b597c000 b597ee40   mdmxsdk  mdmxsdk.sys  Wed Mar 17 15:04:10 2004 (4058A12A)
b625c000 b6268e80   DMusic   DMusic.sys   Wed Aug 04 02:07:37 2004 (41107D29)
b626c000 b6279400   swmidi   swmidi.sys   Fri Aug 17 17:00:42 2001 (3B7D85FA)
b628c000 b629ad80   sysaudio sysaudio.sys Wed Aug 04 02:15:54 2004 (41107F1A)
b636c000 b6379a80   nwlnkspx nwlnkspx.sys Fri Aug 17 16:54:16 2001 (3B7D8478)
b6404000 b6419980   nwlnkipx nwlnkipx.sys Wed Aug 04 02:03:29 2004 (41107C31)
b6496000 b6499280   ndisuio  ndisuio.sys  Wed Aug 04 02:03:10 2004 (41107C1E)
b6f3b000 b6f52480   dump_atapi dump_atapi.sys Wed Aug 04 01:59:41 2004 (41107B4D)
b6f7b000 b6f9e000   Fastfat  Fastfat.SYS  Wed Aug 04 02:14:15 2004 (41107EB7)
b6f9e000 b7066a60   avg7core avg7core.sys Wed Oct 10 12:23:39 2007 (470CFC8B)
b70bd000 b712ba00   mrxsmb   mrxsmb.sys   Fri May 05 05:41:42 2006 (445B1DD6)
b712c000 b7156a00   rdbss    rdbss.sys    Fri May 05 05:47:55 2006 (445B1F4B)
b71f7000 b7218c80   afd      afd.sys      Fri Jun 20 06:44:37 2008 (485B8A15)
b7219000 b7240c00   netbt    netbt.sys    Wed Aug 04 02:14:36 2004 (41107ECC)
b7241000 b7261f00   ipnat    ipnat.sys    Wed Sep 29 18:28:36 2004 (415B3714)
b7262000 b72b9f80   tcpip    tcpip.sys    Fri Jun 20 06:45:10 2008 (485B8A36)
b72ba000 b72cc400   ipsec    ipsec.sys    Wed Aug 04 02:14:27 2004 (41107EC3)
b734d000 b7351500   watchdog watchdog.sys Wed Aug 04 02:07:32 2004 (41107D24)
b948d000 b94e5e80   update   update.sys   Mon Apr 23 06:32:54 2007 (462C8B56)
b94ed000 b94ee000   avgclean avgclean.sys Mon Dec 03 07:09:01 2007 (4753F1DD)
b94ee000 b94eeb80   Null     Null.SYS     Fri Aug 17 16:47:39 2001 (3B7D82EB)
b952c000 b953ce00   psched   psched.sys   Wed Aug 04 02:04:16 2004 (41107C60)
b953d000 b9553680   ndiswan  ndiswan.sys  Wed Aug 04 02:14:30 2004 (41107EC6)
b9554000 b95b9000   a83nvf34 a83nvf34.SYS Thu Mar 27 08:24:26 2008 (47EB91FA)
b95b9000 b95dc980   portcls  portcls.sys  Wed Aug 04 02:15:47 2004 (41107F13)
b95dd000 b99b1d80   ALCXWDM  ALCXWDM.SYS  Fri Aug 18 01:52:33 2006 (44E555A1)
b9e52000 b9e65900   parport  parport.sys  Wed Aug 04 01:59:04 2004 (41107B28)
b9e66000 b9e89800   e100b325 e100b325.sys Tue Mar 04 14:56:25 2003 (3E6504E9)
b9e8a000 b9f31400   HSFCXTS2 HSFCXTS2.sys Thu Jun 17 18:55:36 2004 (40D22168)
b9f32000 ba030480   HSFDPSP2 HSFDPSP2.sys Thu Jun 17 18:55:00 2004 (40D22144)
ba031000 ba053680   ks       ks.sys       Wed Aug 04 02:15:20 2004 (41107EF8)
ba054000 ba089b80   HSFBS2S2 HSFBS2S2.sys Thu Jun 17 18:56:20 2004 (40D22194)
ba08a000 ba0ace80   USBPORT  USBPORT.SYS  Wed Aug 04 02:08:34 2004 (41107D62)
ba0ad000 ba0c0780   VIDEOPRT VIDEOPRT.SYS Wed Aug 04 02:07:04 2004 (41107D08)
ba0c1000 ba4876e0   nv4_mini nv4_mini.sys Fri Aug 11 23:24:08 2006 (44DD49D8)
ba488000 ba497700   nwlnknb  nwlnknb.sys  Fri Aug 17 16:54:16 2001 (3B7D8478)
ba498000 ba4a0900   msgpc    msgpc.sys    Wed Aug 04 02:04:11 2004 (41107C5B)
ba4a8000 ba4b3d00   raspptp  raspptp.sys  Wed Aug 04 02:14:26 2004 (41107EC2)
ba4b8000 ba4c2200   raspppoe raspppoe.sys Wed Aug 04 02:05:06 2004 (41107C92)
ba4c8000 ba4d4880   rasl2tp  rasl2tp.sys  Wed Aug 04 02:14:21 2004 (41107EBD)
ba4d8000 ba4e6b80   drmk     drmk.sys     Wed Aug 04 02:07:54 2004 (41107D3A)
ba4e8000 ba4f6080   redbook  redbook.sys  Wed Aug 04 01:59:34 2004 (41107B46)
ba4f8000 ba504180   cdrom    cdrom.sys    Wed Aug 04 01:59:52 2004 (41107B58)
ba508000 ba512380   imapi    imapi.sys    Wed Aug 04 02:00:12 2004 (41107B6C)
ba518000 ba524e00   i8042prt i8042prt.sys Wed Aug 04 02:14:36 2004 (41107ECC)
ba8de000 ba8ded00   dxgthk   dxgthk.sys   Fri Aug 17 16:53:12 2001 (3B7D8438)
baccd000 baccf580   ndistapi ndistapi.sys Fri Aug 17 16:55:29 2001 (3B7D84C1)
bace9000 baceb900   Dxapi    Dxapi.sys    Fri Aug 17 16:53:19 2001 (3B7D843F)
baf90000 baf92280   rasacd   rasacd.sys   Fri Aug 17 16:55:39 2001 (3B7D84CB)
bafd4000 bafd7c80   mssmbios mssmbios.sys Wed Aug 04 02:07:47 2004 (41107D33)
bf800000 bf9c2800   win32k   win32k.sys   Wed Mar 19 05:46:46 2008 (47E0E106)
bf9c3000 bf9d4580   dxg      dxg.sys      Wed Aug 04 02:00:51 2004 (41107B93)
bf9d5000 bfe1eb00   nv4_disp nv4_disp.dll Fri Aug 11 23:18:47 2006 (44DD4897)
f745f000 f7467880   Fips     Fips.SYS     Fri Aug 17 21:31:49 2001 (3B7DC585)
f746f000 f7477700   netbios  netbios.sys  Wed Aug 04 02:03:19 2004 (41107C27)
f747f000 f748fa80   pci      pci.sys      Wed Aug 04 02:07:45 2004 (41107D31)
f7490000 f74bdd80   ACPI     ACPI.sys     Wed Aug 04 02:07:35 2004 (41107D27)
f74be000 f74d5800   SCSIPORT SCSIPORT.SYS Wed Aug 04 01:59:39 2004 (41107B4B)
f74d6000 f75d6000   sptd     sptd.sys     Wed Mar 05 19:32:57 2008 (47CF3BB9)
f75f7000 f75ffc00   isapnp   isapnp.sys   Fri Aug 17 16:58:01 2001 (3B7D8559)
f7607000 f7611500   MountMgr MountMgr.sys Wed Aug 04 01:58:29 2004 (41107B05)
f7617000 f7623c80   VolSnap  VolSnap.sys  Wed Aug 04 02:00:14 2004 (41107B6E)
f7627000 f762fe00   disk     disk.sys     Wed Aug 04 01:59:53 2004 (41107B59)
f7637000 f7643200   CLASSPNP CLASSPNP.SYS Wed Aug 04 02:14:26 2004 (41107EC2)
f7647000 f764fb80   PxHelp20 PxHelp20.sys Fri Feb 02 16:23:57 2007 (45C3ABED)
f7657000 f7661580   agp440   agp440.sys   Wed Aug 04 02:07:40 2004 (41107D2C)
f7687000 f768fd00   intelppm intelppm.sys Wed Aug 04 01:59:19 2004 (41107B37)
f7697000 f76a6d80   serial   serial.sys   Wed Aug 04 02:15:51 2004 (41107F17)
f76a7000 f76b0f00   termdd   termdd.sys   Wed Aug 04 01:58:52 2004 (41107B1C)
f76b7000 f76c0480   NDProxy  NDProxy.SYS  Fri Aug 17 16:55:30 2001 (3B7D84C2)
f76c7000 f76d5100   usbhub   usbhub.sys   Wed Aug 04 02:08:40 2004 (41107D68)
f76f7000 f76ff700   wanarp   wanarp.sys   Wed Aug 04 02:04:57 2004 (41107C89)
f7707000 f770d200   PCIIDEX  PCIIDEX.SYS  Wed Aug 04 01:59:40 2004 (41107B4C)
f770f000 f7713900   PartMgr  PartMgr.sys  Fri Aug 17 21:32:23 2001 (3B7DC5A7)
f7737000 f773b880   TDI      TDI.SYS      Wed Aug 04 02:07:47 2004 (41107D33)
f773f000 f7743580   ptilink  ptilink.sys  Fri Aug 17 16:49:53 2001 (3B7D8371)
f7747000 f774b080   raspti   raspti.sys   Fri Aug 17 16:55:32 2001 (3B7D84C4)
f7757000 f775c000   flpydisk flpydisk.sys Wed Aug 04 01:59:24 2004 (41107B3C)
f7767000 f776c200   vga      vga.sys      Wed Aug 04 02:07:06 2004 (41107D0A)
f776f000 f7773a80   Msfs     Msfs.SYS     Wed Aug 04 02:00:37 2004 (41107B85)
f7777000 f777e880   Npfs     Npfs.SYS     Wed Aug 04 02:00:38 2004 (41107B86)
f7787000 f778b680   ElbyCDIO ElbyCDIO.sys Tue Aug 07 15:48:32 2007 (46B8CC90)
f7797000 f779dde0   ANIO     ANIO.SYS     Mon May 05 06:18:54 2003 (3EB63A8E)
f77a7000 f77adc80   avg7rsxp avg7rsxp.sys Tue Jan 30 10:08:42 2007 (45BF5F7A)
f77af000 f77b4000   usbuhci  usbuhci.sys  Wed Aug 04 02:08:34 2004 (41107D62)
f77b7000 f77bd800   usbehci  usbehci.sys  Wed Aug 04 02:08:34 2004 (41107D62)
f77bf000 f77c6580   Modem    Modem.SYS    Wed Aug 04 02:08:04 2004 (41107D44)
f77c7000 f77c8000   fdc      fdc.sys      unavailable (00000000)
f77cf000 f77d4a00   mouclass mouclass.sys Wed Aug 04 01:58:32 2004 (41107B08)
f77d7000 f77dd000   kbdclass kbdclass.sys Wed Aug 04 01:58:32 2004 (41107B08)
f77df000 f77e5b00   ElbyCDFL ElbyCDFL.sys Thu Dec 14 16:22:33 2006 (4581C099)
f782e000 f783ff00   sr       sr.sys       Wed Aug 04 02:06:22 2004 (41107CDE)
f7840000 f7857480   atapi    atapi.sys    Wed Aug 04 01:59:41 2004 (41107B4D)
f7858000 f7876880   ftdisk   ftdisk.sys   Fri Aug 17 16:52:41 2001 (3B7D8419)
f7887000 f7896900   Cdfs     Cdfs.SYS     Wed Aug 04 02:14:09 2004 (41107EB1)
f7897000 f789a000   BOOTVID  BOOTVID.dll  Fri Aug 17 16:49:09 2001 (3B7D8345)
f7923000 f7926c80   serenum  serenum.sys  Wed Aug 04 01:59:06 2004 (41107B2A)
f7927000 f7929980   gameenum gameenum.sys Wed Aug 04 02:08:20 2004 (41107D54)
f7950000 f7966780   KSecDD   KSecDD.sys   Wed Aug 04 01:59:45 2004 (41107B51)
f7967000 f7986780   fltMgr   fltMgr.sys   Mon Aug 21 05:14:57 2006 (44E97991)
f7987000 f7988b80   kdcom    kdcom.dll    Fri Aug 17 16:49:10 2001 (3B7D8346)
f7989000 f798a100   WMILIB   WMILIB.SYS   Fri Aug 17 17:07:23 2001 (3B7D878B)
f798b000 f798c580   intelide intelide.sys Wed Aug 04 01:59:40 2004 (41107B4C)
f79a3000 f79a4080   avg7rsw  avg7rsw.sys  Tue Jul 26 08:10:51 2005 (42E6284B)
f79d3000 f79d4900   splitter splitter.sys Wed Jun 14 04:47:46 2006 (448FCD32)
f79df000 f79e0a80   ParVdm   ParVdm.SYS   Fri Aug 17 16:49:49 2001 (3B7D836D)
f79e1000 f79e2100   dump_WMILIB dump_WMILIB.SYS Fri Aug 17 17:07:23 2001 (3B7D878B)
f79e3000 f79e4360   avgtdi   avgtdi.sys   Thu Aug 25 05:59:58 2005 (430D969E)
f79f7000 f79f8100   swenum   swenum.sys   Wed Aug 04 01:58:41 2004 (41107B11)
f79fb000 f79fc280   USBD     USBD.SYS     Fri Aug 17 17:02:58 2001 (3B7D8682)
f79fd000 f79fef00   Fs_Rec   Fs_Rec.SYS   Fri Aug 17 16:49:37 2001 (3B7D8361)
f79ff000 f7a00080   Beep     Beep.SYS     Fri Aug 17 16:47:33 2001 (3B7D82E5)
f7a01000 f7a02080   mnmdd    mnmdd.SYS    Fri Aug 17 16:57:28 2001 (3B7D8538)
f7a03000 f7a04080   RDPCDD   RDPCDD.sys   Fri Aug 17 16:46:56 2001 (3B7D82C0)
f7a0f000 f7a3ba80   NDIS     NDIS.sys     Wed Aug 04 02:14:27 2004 (41107EC3)
f7a3c000 f7a4ef00   WudfPf   WudfPf.sys   Thu Sep 28 21:55:43 2006 (451C7D1F)
f7a4f000 f7a4fd00   pciide   pciide.sys   Fri Aug 17 16:51:49 2001 (3B7D83E5)
f7a53000 f7a53b80   drmkaud  drmkaud.sys  Wed Aug 04 02:07:56 2004 (41107D3C)
f7a9f000 f7a9fc00   audstub  audstub.sys  Fri Aug 17 16:59:40 2001 (3B7D85BC)
f7b37000 f7b51580   Mup      Mup.sys      Wed Aug 04 02:15:20 2004 (41107EF8)
f7b52000 f7bde400   Ntfs     Ntfs.sys     Fri Feb 09 06:10:31 2007 (45CC56A7)

Unloaded modules:
b7067000 b70bd000   A5AGU.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
f775f000 f7764000   Cdaudio.SYS
    Timestamp: unavailable (00000000)
    Checksum:  00000000
baf94000 baf97000   Sfloppy.SYS
    Timestamp: unavailable (00000000)
    Checksum:  00000000

Regards. . .

jcgriff2

.

Full_Metal · 07-30-2008, 08:45 PM

Thanks jc, alas, it is still crashing, this is one that happened after installing the new avg.
0x0000000A (0x6E66744E, 0x00000001c, 0x00000001, 0x804E163c)

**jcgriff2** · 08-03-2008, 10:47 PM

Hi. . .

Sorry to hear of the persistant crashes.

I have processed all of the mini kernel dumps, with varying results:

A Summary of Bugcheck Codes:

Code:

BugCheck 4E, {99, 1a2cb, 0, 0}
BugCheck 1000000A, {ffdfd980, ff, 1, 804e26f3}
BugCheck 4E, {7, 4838c, 46f98, 0}
BugCheck 1000000A, {4, 1c, 1, 804e163e}

BugCheck 1000000A, {ffdfc980, ff, 1, 804e26f3}
BugCheck 1000008E, {c0000005, 80592ac4, baf0f920, 0}
BugCheck F4, {3, 89291608, 8929177c, 80604418}
BugCheck 1000000A, {0, 1c, 1, 804e163c}

BugCheck C2, {7, cd4, e6fa4a12, e1180818}
BugCheck 1000000A, {ffdfd980, ff, 1, 804e26f3}
BugCheck 1000000A, {0, 1c, 1, 804e163c}
BugCheck C2, {7, cd4, 0, e5389e60}

0x0000004e = 0x4e = the page frame number (PFN) list is corrupted. The first parameter of 0x00000099 = a Page Table Entry (PTE) is corrupt. A bad driver is the usual cause.

0x0000004e, (00000007,...) = A driver has unlocked a certain page more times than it locked it. Locking means holding an object exclusively.

0x1000000a = 0xa = a Microsoft or a kernel mode driver accessed paged memory when it should not have.

0x000000f4 (0x00000003,,,) = 0xf4 (0x3,,,) = a process crucial to the system was unexpectedly terminated.

0x0000008e (0xc0000005,,,) = a kernel mode process generated an error - involving the violation of protected memory.

0x000000c2 (0x00000003,,,) = a propcess crucial to the system was unexpectedly terminated.

0x000000f4 (0x00000007,,,) = a bad pool request - specifically a driver tried to free memory that was already freed.

Additional summary information from the dbug logs:

Code:

Debug session time: Sun Jul 13 22:05:53.093 2008 (GMT-4)
System Uptime: 0 days 17:05:57.829
BugCheck 4E, {99, 1a2cb, 0, 0}
Probably caused by : memory_corruption ( nt!MiDecrementShareCount+4f )
PROCESS_NAME:  firefox.exe
--------------------------------------------------------------------------------
Debug session time: Mon Jul 14 06:51:12.593 2008 (GMT-4)
System Uptime: 0 days 0:10:12.325
BugCheck 1000000A, {ffdfd980, ff, 1, 804e26f3}
Probably caused by : Unknown_Image ( ANALYSIS_INCONCLUSIVE )
PROCESS_NAME:  firefox.exe
--------------------------------------------------------------------------------
Debug session time: Tue Jul 15 05:09:41.375 2008 (GMT-4)
System Uptime: 0 days 22:17:56.095
BugCheck 4E, {7, 4838c, 46f98, 0}
Probably caused by : Unknown_Image ( ANALYSIS_INCONCLUSIVE )
PROCESS_NAME:  csrss.exe
--------------------------------------------------------------------------------
Debug session time: Tue Jul 15 07:01:49.671 2008 (GMT-4)
System Uptime: 0 days 0:40:57.274
BugCheck 1000000A, {4, 1c, 1, 804e163e}
Probably caused by : ntkrnlmp.exe ( nt!KiUnlinkThread+e )
PROCESS_NAME:  firefox.exe
--------------------------------------------------------------------------------
Debug session time: Fri Jul 18 04:55:46.916 2008 (GMT-4)
System Uptime: 0 days 22:55:46.083
BugCheck 1000000A, {ffdfc980, ff, 1, 804e26f3}
Probably caused by : win32k.sys ( win32k!MessageTable+548 )
PROCESS_NAME:  firefox.exe
--------------------------------------------------------------------------------
Debug session time: Sat Jul 19 12:49:48.887 2008 (GMT-4)
System Uptime: 0 days 9:55:31.812
BugCheck 1000008E, {c0000005, 80592ac4, baf0f920, 0}
Probably caused by : ntkrnlmp.exe ( nt!CmpRemoveKeyHash+31 )
PROCESS_NAME:  svchost.exe
--------------------------------------------------------------------------------
Debug session time: Sun Jul 20 00:03:06.908 2008 (GMT-4)
System Uptime: 0 days 0:50:07.070
BugCheck F4, {3, 89291608, 8929177c, 80604418}
Probably caused by : csrss.exe
PROCESS_NAME:  csrss.exe
--------------------------------------------------------------------------------
Debug session time: Sun Jul 20 05:32:17.830 2008 (GMT-4)
System Uptime: 0 days 5:12:22.185
BugCheck 1000000A, {0, 1c, 1, 804e163c}
Probably caused by : kmixer.sys ( kmixer!MxWriteComplete+1ea )
PROCESS_NAME:  Idle
--------------------------------------------------------------------------------
Debug session time: Mon Jul 21 17:29:25.294 2008 (GMT-4)
System Uptime: 1 days 11:08:08.508
BugCheck C2, {7, cd4, e6fa4a12, e1180818}
Probably caused by : ntkrnlmp.exe ( nt!ExFreePoolWithTag+2c1 )
PROCESS_NAME:  System
--------------------------------------------------------------------------------
Debug session time: Tue Jul 22 04:12:49.037 2008 (GMT-4)
System Uptime: 0 days 10:43:06.047
BugCheck 1000000A, {ffdfd980, ff, 1, 804e26f3}
Probably caused by : Unknown_Image ( ANALYSIS_INCONCLUSIVE )
PROCESS_NAME:  lsass.exe
--------------------------------------------------------------------------------
Debug session time: Tue Jul 22 07:27:37.473 2008 (GMT-4)
System Uptime: 0 days 1:15:50.424
BugCheck 1000000A, {0, 1c, 1, 804e163c}
Probably caused by : ntkrnlmp.exe ( nt!KiUnlinkThread+c )
PROCESS_NAME:  msnmsgr.exe
--------------------------------------------------------------------------------
Debug session time: Tue Jul 22 07:29:13.750 2008 (GMT-4)
System Uptime: 0 days 0:00:55.484
BugCheck C2, {7, cd4, 0, e5389e60}
Probably caused by : ntkrnlmp.exe ( nt!ExFreePoolWithTag+2c1 )
PROCESS_NAME:  System

Usually different bugchecks within a short amount of time indicate a hardware issue; however all of these seem to refer to a 3rd party driver that is causing trouble. It could be a conflict with another 3rd party driver or with a recently updated Microsoft driver that came in from Windows Updates.

I would suggest that you run in SAFEMODE w/Networking and see if BSODs persist.

I cannot tell you much more than this from the information contained in the mini dumps.

I have attached the full dbug outputs.

Regards. . .

jcgriff2

07-22-2008, 06:11 AM	#2 (permalink)
d_animality Registered User Join Date: Nov 2007 Location: Brunei Posts: 292 OS: XP Pro SP2 My System	Re: Physical Memory Dump Please post the BSOD message. To prevent automatic restart so that you can read the BSOD, please do the following: 1. Right Click the My Computer icons 2. Go to properties 3. In the System Properties window, click on the Advanced tab. 4. Under the Startup and Recovery area, click on the Settings button. 5. In the Startup and Recovery window, UNCHECK the check box next to Automatically restart. 6. Click OK in the Startup and Recovery window. 7. Click OK in the System Properties window. From now on, when a problem causes a BSOD or another major error that halts the system, the PC will not automatically reboot. Rebooting (Resetting) manually will be necessary. Please post the error message that comes up.

07-23-2008, 01:42 AM	#3 (permalink)
Full_Metal Registered User Join Date: Jul 2008 Posts: 4 OS: Win XP	Re: Physical Memory Dump Thanks d_animality, IRQL_NOT_LESS_OR_EQUAL After the whole page of writing talking about BIOS and stuff, there is the following. 0X0000000A (0FFDFD980, 0X000000FF, 0X00000001, 0X804E2653)

07-23-2008, 02:38 AM	#4 (permalink)
Full_Metal Registered User Join Date: Jul 2008 Posts: 4 OS: Win XP	Re: Physical Memory Dump Just got this one. 0x0000000 (0x00000005, 0x0000001c, 0x00000001, 0x804Ei63E) Happened when i was ripping a disc in media player, and then opening firefox.

07-30-2008, 08:45 PM	#6 (permalink)
Full_Metal Registered User Join Date: Jul 2008 Posts: 4 OS: Win XP	Re: Physical Memory Dump Thanks jc, alas, it is still crashing, this is one that happened after installing the new avg. 0x0000000A (0x6E66744E, 0x00000001c, 0x00000001, 0x804E163c)