Sho-Down
01-15-2008, 06:36 AM
<--- My build
Built my new computer a few weeks ago with the help of you guys :) Everything has been fine up until a couple days ago when I started getting blue stop screens out of no where. Also Firefox sometimes freezes, and I can't close it or force it closed, so I have to restart my computer. I ran 'Windows Memory Diagnostic' tests and both of my ram sticks failed on all tests, there were like 2500 errors found. So I took out my ram, put them in different slots and then all tests passed. The system was fine for a few hrs, then the blue screens started coming back.
Some of the Stop screens:
DRIVER_IRQL_NOT_LESS_OR_EQUAL
PFN_LIST_CORRUPT
SPECIAL_POOL_DETECTED_MEMORY_CORRUPTION
BAD_POOL_HEADER
STOP: 0x000000C1
STOP: 0x0000008E
STOP: 0x000000D1
STOP: 0x0000007E
STOP: 0x0000004E
STOP: 0x0000000A
STOP: 0x00000024
STOP: 0x00000019
Checked a few memory dumps and found:
Warning : Unable to verify timestamp for sr.sys
Probably Caused by : hardware (sr!SrpDeleteContextCallback+6d)
Warning: Unable to verify timestamp for Ntfs.sys
Probably Caused by : hardware (d347bustd862)
And my latest mem dump:
Unable to load image ntoskrnl.exe, Win32 error 0n2
*** WARNING: Unable to verify timestamp for ntoskrnl.exe
Probably caused by : hardware ( Ntfs!NtfsOpenFile+6b6 )
NTFS_FILE_SYSTEM (24)
If you see NtfsExceptionFilter on the stack then the 2nd and 3rd
parameters are the exception record and context record. Do a .cxr
on the 3rd parameter and then kb to obtain a more informative stack
trace.
Arguments:
Arg1: 001902fe
Arg2: b6c5e220
Arg3: b6c5df1c
Arg4: 8054afd2
Debugging Details:
------------------
EXCEPTION_RECORD: b6c5e220 -- (.exr 0xffffffffb6c5e220)
ExceptionAddress: 8054afd2 (nt!ExFreePoolWithTag+0x0000038f)
ExceptionCode: c0000005 (Access violation)
ExceptionFlags: 00000000
NumberParameters: 2
Parameter[0]: 00000001
Parameter[1]: 00000005
Attempt to write to address 00000005
CONTEXT: b6c5df1c -- (.cxr 0xffffffffb6c5df1c)
eax=00000001 ebx=8a6a9078 ecx=8a6a9110 edx=0000000d esi=e10acc20 edi=000001ff
eip=8054afd2 esp=b6c5e2e8 ebp=b6c5e33c iopl=0 nv up ei pl nz na po nc
cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00010202
nt!ExFreePoolWithTag+0x38f:
8054afd2 894804 mov dword ptr [eax+4],ecx ds:0023:00000005=????????
Resetting default scope
CUSTOMER_CRASH_COUNT: 1
PROCESS_NAME: NMIndexStoreSvr
ERROR_CODE: (NTSTATUS) 0xc0000005 - The instruction at "0x%08lx" referenced memory at "0x%08lx". The memory could not be "%s".
WRITE_ADDRESS: 00000005
BUGCHECK_STR: 0x24
DEFAULT_BUCKET_ID: NULL_CLASS_PTR_DEREFERENCE
MISALIGNED_IP:
nt!KeForceResumeThread+1
804f9deb 5d pop ebp
LAST_CONTROL_TRANSFER: from ba64fc99 to 8054afd2
STACK_TEXT:
b6c5e33c ba64fc99 00000011 00000001 4146744e nt!ExFreePoolWithTag+0x38f
b6c5e3f4 ba6509c3 89e37c08 e2b89510 e10f54c0 Ntfs!NtfsOpenFile+0x6b6
b6c5e430 ba650e8e 89e37c08 00000001 e2b89510 Ntfs!NtfsCreateAttributeWithValue+0xb6
b6c5e62c ba645932 89e37c08 89ddd180 89ddd334 Ntfs!NtfsUpdateScbFromAttribute+0x3f0
b6c5e880 ba642d2d 89e37c08 89ddd180 b6c5e8d8 Ntfs!NtfsCommonCreate+0xbc1
b6c5e964 804ef095 8a61e020 89ddd180 8a56b398 Ntfs!NtfsFsdCleanup+0x5b
b6c5e9c0 804ef095 8a61fac0 89ddd180 8a5f6658 nt!MiCheckControlArea+0x103
b6c5ea5c 804ef095 8a239298 89ddd180 89ddd180 nt!MiCheckControlArea+0x103
b6c5eb4c 805bddc0 8a5f6658 00000000 89e379e0 nt!MiCheckControlArea+0x103
b6c5ebc4 805ba448 00000000 b6c5ec04 00000040 nt!NtCreatePagingFile+0x4ed
b6c5ec18 80574ec1 00000000 00000000 c5ec9801 nt!CcPfParametersRead+0x14d
b6c5ec94 80575838 01a0fab4 c0100080 01a0fa54 nt!FsRtlIsNameInExpressionPrivate+0x4b
b6c5ecf0 80577f02 01a0fab4 c0100080 01a0fa54 nt!HvMarkDirty+0xdd
b6c5ed30 8054086c 01a0fab4 c0100080 01a0fa54 nt!RtlpInheritAcl2+0x5a
b6c5ed64 7c90eb94 badb0d00 01a0fa1c 00000000 nt!RtlIpv4StringToAddressExA+0x149
WARNING: Frame IP not in any known module. Following frames may be wrong.
b6c5ed78 00000000 00000000 00000000 00000000 0x7c90eb94
FOLLOWUP_IP:
Ntfs!NtfsOpenFile+6b6
ba64fc99 ?? ???
SYMBOL_STACK_INDEX: 1
SYMBOL_NAME: Ntfs!NtfsOpenFile+6b6
FOLLOWUP_NAME: MachineOwner
IMAGE_NAME: hardware
DEBUG_FLR_IMAGE_TIMESTAMP: 0
STACK_COMMAND: .cxr 0xffffffffb6c5df1c ; kb
MODULE_NAME: hardware
FAILURE_BUCKET_ID: IP_MISALIGNED
BUCKET_ID: IP_MISALIGNED
Followup: MachineOwner
Does any of this make sense to anyone? Is it more than likely 2 bad sticks of ram?
Built my new computer a few weeks ago with the help of you guys :) Everything has been fine up until a couple days ago when I started getting blue stop screens out of no where. Also Firefox sometimes freezes, and I can't close it or force it closed, so I have to restart my computer. I ran 'Windows Memory Diagnostic' tests and both of my ram sticks failed on all tests, there were like 2500 errors found. So I took out my ram, put them in different slots and then all tests passed. The system was fine for a few hrs, then the blue screens started coming back.
Some of the Stop screens:
DRIVER_IRQL_NOT_LESS_OR_EQUAL
PFN_LIST_CORRUPT
SPECIAL_POOL_DETECTED_MEMORY_CORRUPTION
BAD_POOL_HEADER
STOP: 0x000000C1
STOP: 0x0000008E
STOP: 0x000000D1
STOP: 0x0000007E
STOP: 0x0000004E
STOP: 0x0000000A
STOP: 0x00000024
STOP: 0x00000019
Checked a few memory dumps and found:
Warning : Unable to verify timestamp for sr.sys
Probably Caused by : hardware (sr!SrpDeleteContextCallback+6d)
Warning: Unable to verify timestamp for Ntfs.sys
Probably Caused by : hardware (d347bustd862)
And my latest mem dump:
Unable to load image ntoskrnl.exe, Win32 error 0n2
*** WARNING: Unable to verify timestamp for ntoskrnl.exe
Probably caused by : hardware ( Ntfs!NtfsOpenFile+6b6 )
NTFS_FILE_SYSTEM (24)
If you see NtfsExceptionFilter on the stack then the 2nd and 3rd
parameters are the exception record and context record. Do a .cxr
on the 3rd parameter and then kb to obtain a more informative stack
trace.
Arguments:
Arg1: 001902fe
Arg2: b6c5e220
Arg3: b6c5df1c
Arg4: 8054afd2
Debugging Details:
------------------
EXCEPTION_RECORD: b6c5e220 -- (.exr 0xffffffffb6c5e220)
ExceptionAddress: 8054afd2 (nt!ExFreePoolWithTag+0x0000038f)
ExceptionCode: c0000005 (Access violation)
ExceptionFlags: 00000000
NumberParameters: 2
Parameter[0]: 00000001
Parameter[1]: 00000005
Attempt to write to address 00000005
CONTEXT: b6c5df1c -- (.cxr 0xffffffffb6c5df1c)
eax=00000001 ebx=8a6a9078 ecx=8a6a9110 edx=0000000d esi=e10acc20 edi=000001ff
eip=8054afd2 esp=b6c5e2e8 ebp=b6c5e33c iopl=0 nv up ei pl nz na po nc
cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00010202
nt!ExFreePoolWithTag+0x38f:
8054afd2 894804 mov dword ptr [eax+4],ecx ds:0023:00000005=????????
Resetting default scope
CUSTOMER_CRASH_COUNT: 1
PROCESS_NAME: NMIndexStoreSvr
ERROR_CODE: (NTSTATUS) 0xc0000005 - The instruction at "0x%08lx" referenced memory at "0x%08lx". The memory could not be "%s".
WRITE_ADDRESS: 00000005
BUGCHECK_STR: 0x24
DEFAULT_BUCKET_ID: NULL_CLASS_PTR_DEREFERENCE
MISALIGNED_IP:
nt!KeForceResumeThread+1
804f9deb 5d pop ebp
LAST_CONTROL_TRANSFER: from ba64fc99 to 8054afd2
STACK_TEXT:
b6c5e33c ba64fc99 00000011 00000001 4146744e nt!ExFreePoolWithTag+0x38f
b6c5e3f4 ba6509c3 89e37c08 e2b89510 e10f54c0 Ntfs!NtfsOpenFile+0x6b6
b6c5e430 ba650e8e 89e37c08 00000001 e2b89510 Ntfs!NtfsCreateAttributeWithValue+0xb6
b6c5e62c ba645932 89e37c08 89ddd180 89ddd334 Ntfs!NtfsUpdateScbFromAttribute+0x3f0
b6c5e880 ba642d2d 89e37c08 89ddd180 b6c5e8d8 Ntfs!NtfsCommonCreate+0xbc1
b6c5e964 804ef095 8a61e020 89ddd180 8a56b398 Ntfs!NtfsFsdCleanup+0x5b
b6c5e9c0 804ef095 8a61fac0 89ddd180 8a5f6658 nt!MiCheckControlArea+0x103
b6c5ea5c 804ef095 8a239298 89ddd180 89ddd180 nt!MiCheckControlArea+0x103
b6c5eb4c 805bddc0 8a5f6658 00000000 89e379e0 nt!MiCheckControlArea+0x103
b6c5ebc4 805ba448 00000000 b6c5ec04 00000040 nt!NtCreatePagingFile+0x4ed
b6c5ec18 80574ec1 00000000 00000000 c5ec9801 nt!CcPfParametersRead+0x14d
b6c5ec94 80575838 01a0fab4 c0100080 01a0fa54 nt!FsRtlIsNameInExpressionPrivate+0x4b
b6c5ecf0 80577f02 01a0fab4 c0100080 01a0fa54 nt!HvMarkDirty+0xdd
b6c5ed30 8054086c 01a0fab4 c0100080 01a0fa54 nt!RtlpInheritAcl2+0x5a
b6c5ed64 7c90eb94 badb0d00 01a0fa1c 00000000 nt!RtlIpv4StringToAddressExA+0x149
WARNING: Frame IP not in any known module. Following frames may be wrong.
b6c5ed78 00000000 00000000 00000000 00000000 0x7c90eb94
FOLLOWUP_IP:
Ntfs!NtfsOpenFile+6b6
ba64fc99 ?? ???
SYMBOL_STACK_INDEX: 1
SYMBOL_NAME: Ntfs!NtfsOpenFile+6b6
FOLLOWUP_NAME: MachineOwner
IMAGE_NAME: hardware
DEBUG_FLR_IMAGE_TIMESTAMP: 0
STACK_COMMAND: .cxr 0xffffffffb6c5df1c ; kb
MODULE_NAME: hardware
FAILURE_BUCKET_ID: IP_MISALIGNED
BUCKET_ID: IP_MISALIGNED
Followup: MachineOwner
Does any of this make sense to anyone? Is it more than likely 2 bad sticks of ram?