locked
Windows Vista Business Crash. What May Be The Fix From Its Memory Dump Debug? RRS feed

  • Question

  • Hello, here the memory dump after a random crash of my windows vista business: (no hardware installation; all drivers updated)

    <<

    Microsoft (R) Windows Debugger Version 6.11.0001.404 X86

    Copyright (c) Microsoft Corporation. All rights reserved.

     

     

    Loading Dump File [C:\Users\Utente\Desktop\MEMORY.DMP]

    Kernel Summary Dump File: Only kernel address space is available

     

    Symbol search path is: SRV*c:\symcache*http://msdl.microsoft.com/download/symbols

    Executable search path is:

    Windows Server 2008/Windows Vista Kernel Version 6002 (Service Pack 2) MP (8 procs) Free x86 compatible

    Product: WinNt, suite: TerminalServer SingleUserTS

    Built by: 6002.18267.x86fre.vistasp2_gdr.100608-0458

    Machine Name:

    Kernel base = 0x8403b000 PsLoadedModuleList = 0x84152c70

    Debug session time: Fri Oct 15 10:34:47.281 2010 (GMT+2)

    System Uptime: 1 days 22:51:30.618

    Loading Kernel Symbols

    ...............................................................

    ................................................................

    ........................

    Loading User Symbols

    PEB is paged out (Peb.Ldr = 7ffda00c).  Type ".hh dbgerr001" for details

    Loading unloaded module list

    .........

    *******************************************************************************

    *                                                                             *

    *                        Bugcheck Analysis                                    *

    *                                                                             *

    *******************************************************************************

     

    Use !analyze -v to get detailed debugging information.

     

    BugCheck A, {9b026a20, 2, 1, 840c18c6}

     

    PEB is paged out (Peb.Ldr = 7ffda00c).  Type ".hh dbgerr001" for details

    PEB is paged out (Peb.Ldr = 7ffda00c).  Type ".hh dbgerr001" for details

    Probably caused by : memory_corruption ( nt!MiRestoreTransitionPte+13f )

     

    Followup: MachineOwner

    ---------

     

    windbg> .hh dbgerr001

    4: kd> !analyze -v

    *******************************************************************************

    *                                                                             *

    *                        Bugcheck Analysis                                    *

    *                                                                             *

    *******************************************************************************

     

    IRQL_NOT_LESS_OR_EQUAL (a)

    An attempt was made to access a pageable (or completely invalid) address at an

    interrupt request level (IRQL) that is too high.  This is usually

    caused by drivers using improper addresses.

    If a kernel debugger is available get the stack backtrace.

    Arguments:

    Arg1: 9b026a20, memory referenced

    Arg2: 00000002, IRQL

    Arg3: 00000001, bitfield :

          bit 0 : value 0 = read operation, 1 = write operation

          bit 3 : value 0 = not an execute operation, 1 = execute operation (only on chips which support this level of status)

    Arg4: 840c18c6, address which referenced memory

     

    Debugging Details:

    ------------------

     

    PEB is paged out (Peb.Ldr = 7ffda00c).  Type ".hh dbgerr001" for details

    PEB is paged out (Peb.Ldr = 7ffda00c).  Type ".hh dbgerr001" for details

     

    WRITE_ADDRESS:  9b026a20

     

    CURRENT_IRQL:  2

     

    FAULTING_IP:

    nt!MiRestoreTransitionPte+13f

    840c18c6 ff4810          dec     dword ptr [eax+10h]

     

    DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT

     

    BUGCHECK_STR:  0xA

     

    PROCESS_NAME:  firefox.exe

     

    TRAP_FRAME:  f49fbb9c -- (.trap 0xfffffffff49fbb9c)

    ErrCode = 00000002

    eax=9b026a10 ebx=86023390 ecx=8b026a58 edx=00000000 esi=81949008 edi=00000fff

    eip=840c18c6 esp=f49fbc10 ebp=f49fbc3c iopl=0         nv up ei pl nz na pe nc

    cs=0008  ss=0010  ds=0023  es=0023  fs=0030  gs=0000             efl=00010206

    nt!MiRestoreTransitionPte+0x13f:

    840c18c6 ff4810          dec     dword ptr [eax+10h]  ds:0023:9b026a20=????????

    Resetting default scope

     

    LAST_CONTROL_TRANSFER:  from 840c18c6 to 84088fd9

     

    STACK_TEXT: 

    f49fbb9c 840c18c6 badb0d00 00000000 84153040 nt!KiTrap0E+0x2e1

    f49fbc3c 840c1766 00000000 ffffffff 0000018d nt!MiRestoreTransitionPte+0x13f

    f49fbc50 840d1092 88a202d8 4000018d 88a204a8 nt!MiRemoveStandbyPage+0xa3

    f49fbc8c 840b3471 0000018d 00000080 31221867 nt!MiRemoveAnyPage+0x337

    f49fbcd4 840d4b9a 00000001 1a363000 c00d1b18 nt!MiResolveDemandZeroFault+0x2e2

    f49fbd4c 84088dd4 00000001 1a363000 00000001 nt!MmAccessFault+0x191a

    f49fbd4c 5d402d08 00000001 1a363000 00000001 nt!KiTrap0E+0xdc

    WARNING: Frame IP not in any known module. Following frames may be wrong.

    1390e400 00000000 00000000 00000000 00000000 0x5d402d08

     

     

    STACK_COMMAND:  kb

     

    FOLLOWUP_IP:

    nt!MiRestoreTransitionPte+13f

    840c18c6 ff4810          dec     dword ptr [eax+10h]

     

    SYMBOL_STACK_INDEX:  1

     

    SYMBOL_NAME:  nt!MiRestoreTransitionPte+13f

     

    FOLLOWUP_NAME:  MachineOwner

     

    MODULE_NAME: nt

     

    DEBUG_FLR_IMAGE_TIMESTAMP:  4c0e557c

     

    IMAGE_NAME:  memory_corruption

     

    FAILURE_BUCKET_ID:  0xA_nt!MiRestoreTransitionPte+13f

     

    BUCKET_ID:  0xA_nt!MiRestoreTransitionPte+13f

     

    Followup: MachineOwner

    ---------

    >>

    May you help me to fix and to undestand the cause please?

     

    Thank you.

    mr. G. CALAMITA

    October, 15th 2010.

    Friday, October 15, 2010 2:14 PM

Answers

  • Hi,

    Thank you for your post!

     

    From the log file, I noticed a process name: Firefox.exe.

     

    With that in mind, this issue may occur due to conflict with firefox. I would suggest disable\uninstall firefox to check the result.

     

    Regards,


    Please remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread. ”
    Thursday, October 21, 2010 5:41 AM
    Moderator