Code:
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
Use !analyze -v to get detailed debugging information.
BugCheck 1A, {41790, c0802170, ffff, 0}
Probably caused by : memory_corruption ( nt!MiDeleteAddressesInWorkingSet+389 )
Followup: MachineOwner
---------
0: kd> !analyze -v
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
MEMORY_MANAGEMENT (1a)
# Any other values for parameter 1 must be individually examined.
Arguments:
Arg1: 00041790, A page table page has been corrupted. On a 64 bit OS, parameter 2
contains the address of the PFN for the corrupted page table page.
On a 32 bit OS, parameter 2 contains a pointer to the number of used
PTEs, and parameter 3 contains the number of used PTEs.
Arg2: c0802170
Arg3: 0000ffff
Arg4: 00000000
Debugging Details:
------------------
BUGCHECK_STR: 0x1a_41790
CUSTOMER_CRASH_COUNT: 1
DEFAULT_BUCKET_ID: WIN7_DRIVER_FAULT
PROCESS_NAME: chrome.exe
CURRENT_IRQL: 0
LAST_CONTROL_TRANSFER: from 82ccbdfe to 82ccd413
STACK_TEXT:
c1393c14 82ccbdfe 887c4950 887c4950 00000000 nt!MiDeleteAddressesInWorkingSet+0x389
c1393c40 82e76897 ed972351 87cbed48 00000002 nt!MmCleanProcessAddressSpace+0x8c
c1393cb4 82e8a1c7 00000000 859726b0 00000001 nt!PspExitThread+0x685
c1393ccc 82cbdbd0 859726b0 c1393cf8 c1393d04 nt!PsExitSpecialApc+0x22
c1393d1c 82c4a954 00000001 00000000 c1393d34 nt!KiDeliverApc+0x28b
c1393d1c 77477094 00000001 00000000 c1393d34 nt!KiServiceExit+0x64
WARNING: Frame IP not in any known module. Following frames may be wrong.
0214fd04 00000000 00000000 00000000 00000000 0x77477094
STACK_COMMAND: kb
FOLLOWUP_IP:
nt!MiDeleteAddressesInWorkingSet+389
82ccd413 cc int 3
SYMBOL_STACK_INDEX: 0
SYMBOL_NAME: nt!MiDeleteAddressesInWorkingSet+389
FOLLOWUP_NAME: MachineOwner
MODULE_NAME: nt
DEBUG_FLR_IMAGE_TIMESTAMP: 50e793e8
IMAGE_NAME: memory_corruption
FAILURE_BUCKET_ID: 0x1a_41790_nt!MiDeleteAddressesInWorkingSet+389
BUCKET_ID: 0x1a_41790_nt!MiDeleteAddressesInWorkingSet+389
Followup: MachineOwner
---------
Take memtest. Run for 8 passes and test each stick in a know good slot for an additional 6 passes.
RAM - Test with Memtest86+
Note
Pay close attention to part 3 of the tutorial in order to rule out the faulty stick.
Information
Errors are sometimes found after 8 passes.
Tip
Do this test overnight, before going to bed.