Windows 7: Dumping physical memory to disk

Agaurooh · 11 Jul 2011

Hi all,

I have had the following problem for a while now and it's quite annoying, could somebody help: ?

I have had a BSOD a radom times with the following message:

Dumping physical memory to disk

I have an XPS M1530
windows 7 ultimate full retail
the laptop is 3 years of age
I have reinstalled the OS 2 months ago

thanks a lot,
Bastien

**yowanvista** · 11 Jul 2011

Your Logitech Setpoint software seems to be the cause, please update it
Support + Downloads

Update your Creative Video Camera Device Driver
http://support.creative.com/

I recommend removing WinOptimizer, Windows 7 does not need to be optimized or tuned in any way. Tampering the system with such utilities can render it inoperable

Code:

*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

NTFS_FILE_SYSTEM (24)
    If you see NtfsExceptionFilter on the stack then the 2nd and 3rd
    parameters are the exception record and context record. Do a .cxr
    on the 3rd parameter and then kb to obtain a more informative stack
    trace.
Arguments:
Arg1: 00000000001904fb
Arg2: fffff8800a012648
Arg3: fffff8800a011ea0
Arg4: fffff880014636f5

Debugging Details:
------------------


EXCEPTION_RECORD:  fffff8800a012648 -- (.exr 0xfffff8800a012648)
ExceptionAddress: fffff880014636f5 (Ntfs!NtfsPreRequestProcessingExtend+0x0000000000000025)
   ExceptionCode: c0000005 (Access violation)
  ExceptionFlags: 00000000
NumberParameters: 2
   Parameter[0]: 0000000000000000
   Parameter[1]: 0000000000000004
Attempt to read from address 0000000000000004

CONTEXT:  fffff8800a011ea0 -- (.cxr 0xfffff8800a011ea0)
rax=fffffa800870a220 rbx=0000000000000000 rcx=0000000000000000
rdx=0000000000000000 rsi=0000000000000000 rdi=0000000000000000
rip=fffff880014636f5 rsp=fffff8800a012880 rbp=fffff8800a012a20
 r8=0000000000000000  r9=0000000000000000 r10=fffff880014af700
r11=fffffa800870a220 r12=fffffa8005801760 r13=fffffa8004726b60
r14=0000000000000000 r15=fffff8800a012a90
iopl=0         nv up ei pl zr na po nc
cs=0010  ss=0018  ds=002b  es=002b  fs=0053  gs=002b             efl=00010246
Ntfs!NtfsPreRequestProcessingExtend+0x25:
fffff880`014636f5 8b4104          mov     eax,dword ptr [rcx+4] ds:002b:00000000`00000004=????????
Resetting default scope

CUSTOMER_CRASH_COUNT:  1

PROCESS_NAME:  SetPoint.exe

CURRENT_IRQL:  0

ERROR_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced memory at 0x%08lx. The memory could not be %s.

EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced memory at 0x%08lx. The memory could not be %s.

EXCEPTION_PARAMETER1:  0000000000000000

EXCEPTION_PARAMETER2:  0000000000000004

READ_ADDRESS: GetPointerFromAddress: unable to read from fffff80003510100
 0000000000000004 

FOLLOWUP_IP: 
Ntfs!NtfsPreRequestProcessingExtend+25
fffff880`014636f5 8b4104          mov     eax,dword ptr [rcx+4]

FAULTING_IP: 
Ntfs!NtfsPreRequestProcessingExtend+25
fffff880`014636f5 8b4104          mov     eax,dword ptr [rcx+4]

BUGCHECK_STR:  0x24

DEFAULT_BUCKET_ID:  NULL_CLASS_PTR_DEREFERENCE

LAST_CONTROL_TRANSFER:  from fffff880014ed8e4 to fffff880014636f5

STACK_TEXT:  
fffff880`0a012880 fffff880`014ed8e4 : 00000000`00000000 00000000`00000000 fffff880`0a012a20 00000000`00000000 : Ntfs!NtfsPreRequestProcessingExtend+0x25
fffff880`0a012970 fffff880`01122bcf : fffffa80`05801ab8 fffffa80`05801760 fffffa80`0870a220 fffff880`0a012998 : Ntfs!NtfsFsdDirectoryControl+0x104
fffff880`0a0129e0 fffff880`011216df : fffffa80`04726b60 fffffa80`04088d10 fffffa80`04726b00 fffffa80`05801760 : fltmgr!FltpLegacyProcessingAfterPreCallbacksCompleted+0x24f
fffff880`0a012a70 fffff800`035c9acd : fffffa80`05801760 fffff880`0a012ca0 00000000`0012e728 fffff880`0a012bc8 : fltmgr!FltpDispatch+0xcf
fffff880`0a012ad0 fffff800`032dff93 : fffffa80`085de580 fffff880`0a012ca0 00000000`0012e728 fffff880`0a012bc8 : nt!NtQueryDirectoryFile+0x1ad
fffff880`0a012bb0 00000000`7701166a : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSystemServiceCopyEnd+0x13
00000000`0012e708 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x7701166a


SYMBOL_STACK_INDEX:  0

SYMBOL_NAME:  Ntfs!NtfsPreRequestProcessingExtend+25

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: Ntfs

IMAGE_NAME:  Ntfs.sys

DEBUG_FLR_IMAGE_TIMESTAMP:  4ce792f9

STACK_COMMAND:  .cxr 0xfffff8800a011ea0 ; kb

FAILURE_BUCKET_ID:  X64_0x24_Ntfs!NtfsPreRequestProcessingExtend+25

BUCKET_ID:  X64_0x24_Ntfs!NtfsPreRequestProcessingExtend+25

Followup: MachineOwner
---------

Agaurooh · 11 Jul 2011

Thank you for your speedy reply.

My webcam is integrated in the laptop, how can i find out which driver I should download?

Bastien

**yowanvista** · 11 Jul 2011

Quote: Originally Posted by Agaurooh

Thank you for your speedy reply.

My webcam is integrated in the laptop, how can i find out which driver I should download?

Bastien

Find out what model it is. You can also get the driver from the laptop's manufacturer website

Windows 7: Dumping physical memory to disk

Dumping physical memory to disk problems?