
Quote: Originally Posted by
tez1982
thanks for the idea but it didn't work having removed norton and installed ms security bittorrent still caused BSOD within 5 mins of starting, i have updated the 2 previous zip files
Finally I think the true cause has revealed itself.
The requested page of kernel data could not be read in. Typically caused by
a bad block in the paging file or disk controller error. Also see
KERNEL_STACK_INPAGE_ERROR.
I would run a chkdsk to find out whihc
A- CHKDSK /R /F:
Run CHKDSK /R /F from an elevated (Run as administrator) Command Prompt.
Do this for each hard drive on your system.
When it tells you it can't do it right now - and asks you if you'd like to do it at the next reboot - answer Y (for Yes) and press Enter.
Then reboot and let the test run.
It may take a while for it to run, but keep an occasional eye on it to see if it generates any errors.
See "CHKDSK LogFile" below in order to check the results of the test.
B- Elevated Command Prompt:
Go to Start and type in "cmd.exe" (without the quotes)
At the top of the Search Box, right click on Cmd.exe and select "Run as administrator"
C-CHKDSK LogFile:
Go to Start and type in "eventvwr.msc" (without the quotes) and press Enter
Expand the Windows logs heading, then select the Application log file entry.
Double click on the Source column header.
Scroll down the list until you find the Chkdsk entry (wininit for Windows 7) (winlogon for XP).
Copy/paste the results into your next post.
Code:
Microsoft (R) Windows Debugger Version 6.11.0001.404 X86
Copyright (c) Microsoft Corporation. All rights reserved.
Loading Dump File [C:\Users\K\Desktop\Windows_NT6_BSOD_jcgriff2\061611-19515-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available
Symbol search path is: SRV*C:\Symbols*http://msdl.microsoft.com/download/symbols;srv*e:\symbols
*http://msdl.microsoft.com/download/symbols
Executable search path is:
Windows 7 Kernel Version 7601 (Service Pack 1) MP (2 procs) Free x86 compatible
Product: WinNt, suite: TerminalServer SingleUserTS Personal
Built by: 7601.17592.x86fre.win7sp1_gdr.110408-1631
Machine Name:
Kernel base = 0x82a4f000 PsLoadedModuleList = 0x82b984d0
Debug session time: Thu Jun 16 06:39:58.271 2011 (GMT-4)
System Uptime: 0 days 0:36:55.019
Loading Kernel Symbols
...............................................................
................................................................
.............................
Loading User Symbols
Loading unloaded module list
.......
0: kd> !analyze -v
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
KERNEL_DATA_INPAGE_ERROR (7a)
The requested page of kernel data could not be read in. Typically caused by
a bad block in the paging file or disk controller error. Also see
KERNEL_STACK_INPAGE_ERROR.
If the error status is 0xC000000E, 0xC000009C, 0xC000009D or 0xC0000185,
it means the disk subsystem has experienced a failure.
If the error status is 0xC000009A, then it means the request failed because
a filesystem failed to make forward progress.
Arguments:
Arg1: c0416060, lock type that was held (value 1,2,3, or PTE address)
Arg2: c0000185, error status (normally i/o status code)
Arg3: 19cc8860, current process (virtual address for lock type 3, or PTE)
Arg4: 82c0cd31, virtual address that could not be in-paged (or PTE contents if arg1 is a PTE address)
Debugging Details:
------------------
GetPointerFromAddress: unable to read from 82bb8830
ERROR_CODE: (NTSTATUS) 0xc0000185 - The I/O device reported an I/O error.
DISK_HARDWARE_ERROR: There was error with disk hardware
BUGCHECK_STR: 0x7a_c0000185
CUSTOMER_CRASH_COUNT: 1
DEFAULT_BUCKET_ID: CODE_CORRUPTION
PROCESS_NAME: System
CURRENT_IRQL: 0
TRAP_FRAME: 8a113c68 -- (.trap 0xffffffff8a113c68)
ErrCode = 00000010
eax=8544d870 ebx=00000000 ecx=00000009 edx=00000000 esi=00000314 edi=85e412a8
eip=82c0cd31 esp=8a113cdc ebp=8a113d00 iopl=0 nv up ei ng nz na po cy
cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00010283
nt!PiProcessReenumeration:
82c0cd31 0000 add byte ptr [eax],al ds:0023:8544d870=??
Resetting default scope
LOCK_ADDRESS: 82bb5be0 -- (!locks 82bb5be0)
Resource @ nt!PiEngineLock (0x82bb5be0) Available
WARNING: SystemResourcesList->Flink chain invalid. Resource may be corrupted, or already deleted.
WARNING: SystemResourcesList->Blink chain invalid. Resource may be corrupted, or already deleted.
1 total locks
PNP_TRIAGE:
Lock address : 0x82bb5be0
Thread Count : 0
Thread address: 0x00000000
Thread wait : 0x0
LAST_CONTROL_TRANSFER: from 82af2e35 to 82b2df2c
STACK_TEXT:
8a113acc 82af2e35 0000007a c0416060 c0000185 nt!KeBugCheckEx+0x1e
8a113b3c 82af6716 8a113b90 82bb92c0 8a113bb0 nt!MiWaitForInPageComplete+0x302
8a113bcc 82adf967 82bb92c0 82c0cd31 855c29b8 nt!MiIssueHardFault+0x3b3
8a113c50 82a903d8 00000008 82c0cd31 00000000 nt!MmAccessFault+0x2656
8a113c50 82c0cd31 00000008 82c0cd31 00000000 nt!KiTrap0E+0xdc
8a113d00 82accaab 00000000 00000000 847144c0 nt!PiProcessReenumeration
8a113d50 82c57f64 00000001 900d4fa4 00000000 nt!ExpWorkerThread+0x10d
8a113d90 82b00219 82acc99e 00000001 00000000 nt!PspSystemThreadStartup+0x9e
00000000 00000000 00000000 00000000 00000000 nt!KiThreadStartup+0x19
STACK_COMMAND: kb
CHKIMG_EXTENSION: !chkimg -lo 50 -d !nt
82c0c000-82c0c004 5 bytes - nt!PipProcessDevNodeTree+348
[ fe ff ff e9 c9:00 00 00 00 00 ]
82c0c008-82c0c00c 5 bytes - nt!PipProcessDevNodeTree+34b (+0x08)
[ 8b c7 e8 22 0f:00 00 00 00 00 ]
82c0c00f-82c0c017 9 bytes - nt!PipProcessDevNodeTree+352 (+0x07)
[ 8b f0 c7 85 58 fe ff ff:00 00 00 00 00 00 00 00 ]
82c0c01b-82c0c029 15 bytes - nt!PipProcessDevNodeTree+35e (+0x0c)
[ e9 4d fe ff ff 39 9d 54:00 00 00 00 00 00 00 00 ]
82c0c02c - nt!PipProcessDevNodeTree+36f (+0x11)
[ 40:00 ]
82c0c02e-82c0c032 5 bytes - nt!PipProcessDevNodeTree+371 (+0x02)
[ 74 07 be 2d 02:00 00 00 00 00 ]
82c0c034-82c0c046 19 bytes - nt!PipProcessDevNodeTree+377 (+0x06)
[ c0 eb 42 ff 75 1c 33 db:00 00 00 00 00 00 00 00 ]
82c0c04d-82c0c05c 16 bytes - nt!PipProcessDevNodeTree+390 (+0x19)
[ 01 8b f0 74 12 8b 47 10:00 00 00 00 00 00 00 00 ]
82c0c060-82c0c067 8 bytes - nt!PipProcessDevNodeTree+3a3 (+0x13)
[ ff ff ff fe 81 fe 03 01:00 00 00 00 00 00 00 00 ]
82c0c06a-82c0c086 29 bytes - nt!PipProcessDevNodeTree+3ad (+0x0a)
[ 75 0b 89 9d 54 fe ff ff:00 00 00 00 00 00 00 00 ]
82c0c08a-82c0c095 12 bytes - nt!PipProcessDevNodeTree+3cd (+0x20)
[ 8b f7 85 db 7d 2d 33 c0:00 00 00 00 00 00 00 00 ]
82c0c097-82c0c09e 8 bytes - nt!PipProcessDevNodeTree+3da (+0x0d)
[ c0 0f 94 c0 8d 04 85 0a:00 00 00 00 00 00 00 00 ]
82c0c0a2-82c0c0a8 7 bytes - nt!PipProcessDevNodeTree+3e5 (+0x0b)
[ 50 32 c0 e8 ef 19 10:00 00 00 00 00 00 00 ]
82c0c0aa-82c0c0ad 4 bytes - nt!PipProcessDevNodeTree+3ed (+0x08)
[ 83 bf 3c 01:00 00 00 00 ]
82c0c0b1-82c0c0bf 15 bytes - nt!PipProcessDevNodeTree+3f4 (+0x07)
[ 74 14 ff 77 10 e8 b0 e7:00 00 00 00 00 00 00 00 ]
82c0c0c2-82c0c0d6 21 bytes - nt!PipProcessDevNodeTree+405 (+0x11)
[ e8 d2 7d e5 ff 8b f3 85:00 00 00 00 00 00 00 00 ]
82c0c0d8-82c0c0e2 11 bytes - nt!PipProcessDevNodeTree+41b (+0x16)
[ e9 90 fd ff ff 83 a5 3c:00 00 00 00 00 00 00 00 ]
82c0c0e4-82c0c0f1 14 bytes - nt!PipProcessDevNodeTree+427 (+0x0c)
[ 33 ff 47 57 57 8d b5 48:00 00 00 00 00 00 00 00 ]
82c0c0f4-82c0c0f9 6 bytes - nt!PipProcessDevNodeTree+437 (+0x10)
[ 83 a5 54 fe ff ff:00 00 00 00 00 00 ]
82c0c0fb-82c0c129 47 bytes - nt!PipProcessDevNodeTree+43e (+0x07)
[ 57 ff 75 1c ff 75 18 ff:00 00 00 00 00 00 00 00 ]
82c0c12b-82c0c160 54 bytes - nt!PipProcessDevNodeTree+46e (+0x30)
[ 56 ff 71 18 8d 85 5c fe:00 00 00 00 00 00 00 00 ]
82c0c162-82c0c166 5 bytes - nt!PipProcessDevNodeTree+4a5 (+0x37)
[ 57 e8 83 fe 01:00 00 00 00 00 ]
82c0c168-82c0c184 29 bytes - nt!PipProcessDevNodeTree+4ab (+0x06)
[ 8d 85 5c fe ff ff 50 8d:00 00 00 00 00 00 00 00 ]
82c0c186-82c0c18a 5 bytes - nt!PipProcessDevNodeTree+4c9 (+0x1e)
[ 85 c0 0f 84 9d:00 00 00 00 00 ]
82c0c18e-82c0c190 3 bytes - nt!PipProcessDevNodeTree+4d1 (+0x08)
[ 8b 80 b0:00 00 00 ]
82c0c194-82c0c1fe 107 bytes - nt!PipProcessDevNodeTree+4d7 (+0x06)
[ 8b 78 14 89 bd 50 fe ff:00 00 00 00 00 00 00 00 ]
82c0c202-82c0c213 18 bytes - nt!PipProcessDevNodeTree+545 (+0x6e)
[ 39 95 30 fe ff ff 0f 85:00 00 00 00 00 00 00 00 ]
82c0c215-82c0c226 18 bytes - nt!PipProcessDevNodeTree+558 (+0x13)
[ 74 1b 8b b5 34 fe ff ff:00 00 00 00 00 00 00 00 ]
82c0c228-82c0c22c 5 bytes - nt!PipProcessDevNodeTree+56b (+0x13)
[ fb ff ff b8 01:00 00 00 00 00 ]
82c0c22f-82c0c234 6 bytes - nt!PipProcessDevNodeTree+572 (+0x07)
[ c0 eb 1a 83 7d 20:00 00 00 00 00 00 ]
82c0c236-82c0c25b 38 bytes - nt!PipProcessDevNodeTree+579 (+0x07)
[ 75 0e 8b 85 40 fe ff ff:00 00 00 00 00 00 00 00 ]
82c0c25d-82c0c2d2 118 bytes - nt!PipProcessDevNodeTree+5a0 (+0x27)
[ 90 cf bd c0 82 01 be c0:00 00 00 00 00 00 00 00 ]
82c0c2d5-82c0c2d7 3 bytes - nt!PnpDeviceCompletionProcessCompletedRequests+3e (+0x78)
[ 3d ce 02:00 00 00 ]
82c0c2d9-82c0c2e1 9 bytes - nt!PnpDeviceCompletionProcessCompletedRequests+42 (+0x04)
[ c0 75 03 89 45 fc c7 06:00 00 00 00 00 00 00 00 ]
82c0c2e5-82c0c2f4 16 bytes - nt!PnpDeviceCompletionProcessCompletedRequests+4e (+0x0c)
[ e8 19 7c e5 ff 85 c0 74:00 00 00 00 00 00 00 00 ]
82c0c2f6-82c0c300 11 bytes - nt!PnpDeviceCompletionProcessCompletedRequests+5f (+0x11)
[ 90 90 90 90 90 8b 49 10:00 00 00 00 00 00 00 00 ]
82c0c304-82c0c32b 40 bytes - nt!PiCheckForActiveDependencies+9 (+0x0e)
[ 32 c0 83 c1 34 8b 11 eb:00 00 00 00 00 00 00 00 ]
82c0c32f-82c0c339 11 bytes - nt!PipCallDriverAddDevice+e (+0x2b)
[ 53 8b 5d 08 56 33 f6 83:00 00 00 00 00 00 00 00 ]
82c0c33c-82c0c34d 18 bytes - nt!PipCallDriverAddDevice+1b (+0x0d)
[ ff 57 89 74 24 1c 89 74:00 00 00 00 00 00 00 00 ]
82c0c34f-82c0c359 11 bytes - nt!PipCallDriverAddDevice+2e (+0x13)
[ 89 74 24 24 89 74 24 20:00 00 00 00 00 00 00 00 ]
82c0c35d-82c0c368 12 bytes - nt!PipCallDriverAddDevice+3c (+0x0e)
[ 39 35 28 6c b8 82 74 52:00 00 00 00 00 00 00 00 ]
82c0c36c-82c0c370 5 bytes - nt!PipCallDriverAddDevice+4b (+0x0f)
[ 50 8d 84 24 c0:00 00 00 00 00 ]
82c0c374-82c0c389 22 bytes - nt!PipCallDriverAddDevice+53 (+0x08)
[ 50 8d 44 24 34 50 6a 04:00 00 00 00 00 00 00 00 ]
82c0c38b-82c0c393 9 bytes - nt!PipCallDriverAddDevice+6a (+0x17)
[ 85 c0 7c 28 81 7c 24 2c:00 00 00 00 00 00 00 00 ]
82c0c397-82c0c3b4 30 bytes - nt!PipCallDriverAddDevice+76 (+0x0c)
[ 77 1e 8d 44 24 38 50 ff:00 00 00 00 00 00 00 00 ]
82c0c3b7-82c0c3ba 4 bytes - nt!PipCallDriverAddDevice+96 (+0x20)
[ 83 bb 6c 01:00 00 00 00 ]
82c0c3bd-82c0c3cd 17 bytes - nt!PipCallDriverAddDevice+9c (+0x06)
[ ff 6a fe 59 75 1b 8b 43:00 00 00 00 00 00 00 00 ]
82c0c3d0-82c0c3d3 4 bytes - nt!PipCallDriverAddDevice+af (+0x13)
[ 89 83 6c 01:00 00 00 00 ]
82c0c3d6-82c0c3db 6 bytes - nt!PipCallDriverAddDevice+b5 (+0x06)
[ eb 06 89 8b 6c 01:00 00 00 00 00 00 ]
82c0c3de-82c0c3e1 4 bytes - nt!PipCallDriverAddDevice+bd (+0x08)
[ 8b 83 6c 01:00 00 00 00 ]
WARNING: !chkimg output was truncated to 50 lines. Invoke !chkimg without '-lo [num_lines]' to view entire output.
3541 errors : !nt (82c0c000-82c0cffe)
MODULE_NAME: memory_corruption
IMAGE_NAME: memory_corruption
FOLLOWUP_NAME: memory_corruption
DEBUG_FLR_IMAGE_TIMESTAMP: 0
MEMORY_CORRUPTOR: LARGE_4096
FAILURE_BUCKET_ID: MEMORY_CORRUPTION_LARGE_4096
BUCKET_ID: MEMORY_CORRUPTION_LARGE_4096
Followup: memory_corruption
---------