BSOD, Regular Bugcheck error

mrd156 · 06 Dec 2013

Would anyone be able to shed some light on this bug check error. Nearly once per day I get a bug check error and the system then BSODs.

You might see from the log back on the 19th the system would BSOD every hour. This was a permissions issue that I was able to resolve. I have been slowly working through the event viewer and down we get no errors warnings or critical's, just this bug check.

Any help would be well received.

Arc · 06 Dec 2013

You are facing some disc errors. Some errors are detected on the HDD (HDD2?) during the paging operations.

Code:

*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck 7A, {fffff6fc4000b930, ffffffffc00000c0, 2d5fa860, fffff88001726758}

GetPointerFromAddress: unable to read from fffff800032b4278
Probably caused by : memory_corruption

Followup: memory_corruption
---------

3: kd> !analyze -v
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

KERNEL_DATA_INPAGE_ERROR (7a)
The requested page of kernel data could not be read in.  Typically caused by
a bad block in the paging file or disk controller error. Also see
KERNEL_STACK_INPAGE_ERROR.
If the error status is 0xC000000E, 0xC000009C, 0xC000009D or 0xC0000185,
it means the disk subsystem has experienced a failure.
If the error status is 0xC000009A, then it means the request failed because
a filesystem failed to make forward progress.
Arguments:
Arg1: fffff6fc4000b930, lock type that was held (value 1,2,3, or PTE address)
Arg2: ffffffffc00000c0, error status (normally i/o status code)
Arg3: 000000002d5fa860, current process (virtual address for lock type 3, or PTE)
Arg4: fffff88001726758, virtual address that could not be in-paged (or PTE contents if arg1 is a PTE address)

Debugging Details:
------------------


ERROR_CODE: (NTSTATUS) 0xc00000c0 - This device does not exist.

BUGCHECK_STR:  0x7a_c00000c0

CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  CODE_CORRUPTION

PROCESS_NAME:  ImageServer.ex

CURRENT_IRQL:  0

TRAP_FRAME:  fffff8800e3cf0d0 -- (.trap 0xfffff8800e3cf0d0)
NOTE: The trap frame does not contain all registers.
Some register values may be zeroed or incorrect.
rax=0000000000000001 rbx=0000000000000000 rcx=0000000000083d01
rdx=fffff8800e3d0750 rsi=0000000000000000 rdi=0000000000000000
rip=fffff88001726758 rsp=fffff8800e3cf268 rbp=fffff8800e3cf3a0
 r8=fffff88001726758  r9=fffff8800e3cf3a0 r10=fffff8800e3d02f8
r11=fffff8800e3cf2d8 r12=0000000000000000 r13=0000000000000000
r14=0000000000000000 r15=0000000000000000
iopl=0         nv up ei ng nz na pe nc
Ntfs! ?? ::NNGAKEGL::`string'+0x25bd:
fffff880`01726758 0000            add     byte ptr [rax],al ds:00000000`00000001=??
Resetting default scope

MISALIGNED_IP: 
Ntfs! ?? ::NNGAKEGL::`string'+25bd
fffff880`01726758 0000            add     byte ptr [rax],al

LAST_CONTROL_TRANSFER:  from fffff800030ef752 to fffff8000307cbc0

STACK_TEXT:  
fffff880`0e3cedb8 fffff800`030ef752 : 00000000`0000007a fffff6fc`4000b930 ffffffff`c00000c0 00000000`2d5fa860 : nt!KeBugCheckEx
fffff880`0e3cedc0 fffff800`030a391f : fffffa80`04ec5980 fffff880`0e3cef30 fffff800`032b7540 fffffa80`04ec5980 : nt! ?? ::FNODOBFM::`string'+0x36c1a
fffff880`0e3ceea0 fffff800`0308a1b9 : 00000000`00000000 00000000`00000008 ffffffff`ffffffff fffff880`0168589c : nt!MiIssueHardFault+0x28b
fffff880`0e3cef70 fffff800`0307acee : 00000000`00000008 fffff880`01726758 fffff880`01651100 fffff880`01685ec0 : nt!MmAccessFault+0x1399
fffff880`0e3cf0d0 fffff880`01726758 : fffff800`030a7d8f fffffa80`04c7e8e0 00000000`00000000 fffff880`0e3d0210 : nt!KiPageFault+0x16e
fffff880`0e3cf268 fffff800`030a7d8f : fffffa80`04c7e8e0 00000000`00000000 fffff880`0e3d0210 fffff880`01561bcf : Ntfs! ?? ::NNGAKEGL::`string'+0x25bd
fffff880`0e3cf270 fffff800`030a77dd : fffff880`0e3d0750 fffff880`0e3d0750 00000000`00000000 fffff880`01638000 : nt!_C_specific_handler+0x13f
fffff880`0e3cf2e0 fffff800`030a7228 : fffff880`0e3d0750 fffff880`0e3cf360 fffff880`01651ad8 fffff880`01638000 : nt!RtlpExecuteHandlerForUnwind+0xd
fffff880`0e3cf310 fffff800`030a7d1c : fffff880`0e3d0880 fffff880`016bb644 fffff880`0e3d0150 ffffffff`c00000c0 : nt!RtlUnwindEx+0x472
fffff880`0e3cf9b0 fffff800`030a775d : fffff880`01685f40 fffff880`0e3d0880 00000000`00000000 fffff880`01638000 : nt!_C_specific_handler+0xcc
fffff880`0e3cfa20 fffff800`030a6535 : fffff880`01685f40 fffff880`0e3cfa98 fffff880`0e3d0150 fffff880`01638000 : nt!RtlpExecuteHandlerForException+0xd
fffff880`0e3cfa50 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!RtlDispatchException+0x415


STACK_COMMAND:  kb

CHKIMG_EXTENSION: !chkimg -lo 50 -d !Ntfs
    fffff88001726002-fffff88001726007  6 bytes - Ntfs! ?? ::NNGAKEGL::`string'+1da7
    [ eb 1b 48 8b 9d b0:00 00 00 00 00 00 ]
    fffff8800172600b-fffff88001726027  29 bytes - Ntfs! ?? ::NNGAKEGL::`string'+1db0 (+0x09)
    [ 48 8b 43 30 48 8b 50 60:00 00 00 00 00 00 00 00 ]
    fffff8800172602a-fffff88001726033  10 bytes - Ntfs! ?? ::NNGAKEGL::`string'+1dcf (+0x1f)
    [ ff 15 50 6c f5 ff 48 8b:00 00 00 00 00 00 00 00 ]
    fffff88001726037-fffff88001726039  3 bytes - Ntfs! ?? ::NNGAKEGL::`string'+1ddc (+0x0d)
    [ ff 08 eb:00 00 00 ]
    fffff8800172603b-fffff8800172604e  20 bytes - Ntfs! ?? ::NNGAKEGL::`string'+1de0 (+0x04)
    [ 48 83 c4 38 5d 5b c3 90:00 00 00 00 00 00 00 00 ]
    fffff88001726053-fffff8800172605c  10 bytes - Ntfs! ?? ::NNGAKEGL::`string'+1dfd (+0x18)
    [ 74 12 48 8d 55 40 48 8b:00 00 00 00 00 00 00 00 ]
    fffff88001726060-fffff88001726065  6 bytes - Ntfs! ?? ::NNGAKEGL::`string'+1e0a (+0x0d)
    [ e8 2f b6 fc ff eb:00 00 00 00 00 00 ]
    fffff88001726067-fffff8800172607b  21 bytes - Ntfs! ?? ::NNGAKEGL::`string'+1e11 (+0x07)
    [ 48 83 c4 30 5d c3 90 90:00 00 00 00 00 00 00 00 ]
    fffff8800172607d-fffff88001726082  6 bytes - Ntfs! ?? ::NNGAKEGL::`string'+1e2b (+0x16)
    [ 74 20 48 8b bd 98:00 00 00 00 00 00 ]
    fffff88001726086-fffff8800172608e  9 bytes - Ntfs! ?? ::NNGAKEGL::`string'+1e34 (+0x09)
    [ 48 8b 4f 50 48 81 c1 60:00 00 00 00 00 00 00 00 ]
    fffff88001726091-fffff8800172609b  11 bytes - Ntfs! ?? ::NNGAKEGL::`string'+1e3f (+0x0b)
    [ 33 d2 ff 15 f7 68 f5 ff:00 00 00 00 00 00 00 00 ]
    fffff8800172609d-fffff880017260a2  6 bytes - Ntfs! ?? ::NNGAKEGL::`string'+1e4b (+0x0c)
    [ eb 07 48 8b bd 98:00 00 00 00 00 00 ]
    fffff880017260a6-fffff880017260a9  4 bytes - Ntfs! ?? ::NNGAKEGL::`string'+1e54 (+0x09)
    [ 48 83 bd 88:00 00 00 00 ]
    fffff880017260ae-fffff880017260c1  20 bytes - Ntfs! ?? ::NNGAKEGL::`string'+1e5c (+0x08)
    [ 74 2a 48 8b 4f 58 48 83:00 00 00 00 00 00 00 00 ]
    fffff880017260c5-fffff880017260d8  20 bytes - Ntfs! ?? ::NNGAKEGL::`string'+1e73 (+0x17)
    [ e8 9e 5c f1 ff 48 8b 4f:00 00 00 00 00 00 00 00 ]
    fffff880017260da-fffff880017260f7  30 bytes - Ntfs! ?? ::NNGAKEGL::`string'+1e88 (+0x15)
    [ 48 83 c4 38 5f 5d c3 90:00 00 00 00 00 00 00 00 ]
    fffff880017260f9-fffff8800172610e  22 bytes - Ntfs! ?? ::NNGAKEGL::`string'+1eab (+0x1f)
    [ 74 2f 8b 75 20 85 f6 75:00 00 00 00 00 00 00 00 ]
    fffff88001726111-fffff88001726118  8 bytes - Ntfs! ?? ::NNGAKEGL::`string'+1ec3 (+0x18)
    [ ff 15 69 6b f5 ff be 01:00 00 00 00 00 00 00 00 ]
    fffff8800172611c-fffff8800172613d  34 bytes - Ntfs! ?? ::NNGAKEGL::`string'+1ece (+0x0b)
    [ 89 75 20 48 8d 4d 28 e8:00 00 00 00 00 00 00 00 ]
    fffff88001726140-fffff88001726146  7 bytes - Ntfs! ?? ::NNGAKEGL::`string'+1ef2 (+0x24)
    [ ff 15 1a 6b f5 ff eb:00 00 00 00 00 00 00 ]
    fffff88001726148-fffff8800172615c  21 bytes - Ntfs! ?? ::NNGAKEGL::`string'+1efa (+0x08)
    [ 48 83 c4 28 5e 5d c3 90:00 00 00 00 00 00 00 00 ]
    fffff88001726160-fffff88001726170  17 bytes - Ntfs! ?? ::NNGAKEGL::`string'+1f18 (+0x18)
    [ 33 db 48 3b cb 74 0d ff:00 00 00 00 00 00 00 00 ]
    fffff88001726174-fffff88001726177  4 bytes - Ntfs! ?? ::NNGAKEGL::`string'+1f2c (+0x14)
    [ 48 8b 9d 88:00 00 00 00 ]
    fffff8800172617b-fffff88001726186  12 bytes - Ntfs! ?? ::NNGAKEGL::`string'+1f33 (+0x07)
    [ 48 8b 53 60 48 8b 52 70:00 00 00 00 00 00 00 00 ]
    fffff8800172618a-fffff88001726193  10 bytes - Ntfs! ?? ::NNGAKEGL::`string'+1f42 (+0x0f)
    [ e8 b1 11 f2 ff 48 8d 8b:00 00 00 00 00 00 00 00 ]
    fffff88001726196-fffff8800172619c  7 bytes - Ntfs! ?? ::NNGAKEGL::`string'+1f4e (+0x0c)
    [ ff 15 c4 6a f5 ff eb:00 00 00 00 00 00 00 ]
    fffff8800172619e-fffff880017261b2  21 bytes - Ntfs! ?? ::NNGAKEGL::`string'+1f56 (+0x08)
    [ 48 83 c4 38 5d 5b c3 90:00 00 00 00 00 00 00 00 ]
    fffff880017261b4-fffff880017261b9  6 bytes - Ntfs! ?? ::NNGAKEGL::`string'+1f7d (+0x16)
    [ 74 1d 48 83 7d 68:00 00 00 00 00 00 ]
    fffff880017261bb-fffff880017261c5  11 bytes - Ntfs! ?? ::NNGAKEGL::`string'+1f84 (+0x07)
    [ 74 16 48 8d 55 68 48 8b:00 00 00 00 00 00 00 00 ]
    fffff880017261c8-fffff880017261d1  10 bytes - Ntfs! ?? ::NNGAKEGL::`string'+1f91 (+0x0d)
    [ 48 8b 49 50 e8 77 4c f1:00 00 00 00 00 00 00 00 ]
    fffff880017261d3-fffff880017261f0  30 bytes - Ntfs! ?? ::NNGAKEGL::`string'+1f9c (+0x0b)
    [ 48 83 c4 60 5d c3 90 90:00 00 00 00 00 00 00 00 ]
    fffff880017261f3-fffff88001726212  32 bytes - Ntfs! ?? ::NNGAKEGL::`string'+1fc8 (+0x20)
    [ e8 9c b4 fc ff 48 8b 4d:00 00 00 00 00 00 00 00 ]
    fffff88001726215-fffff8800172621c  8 bytes - Ntfs! ?? ::NNGAKEGL::`string'+1fea (+0x22)
    [ 48 83 c1 68 48 8d 95 e8:00 00 00 00 00 00 00 00 ]
    fffff88001726220-fffff88001726222  3 bytes - Ntfs! ?? ::NNGAKEGL::`string'+1ff5 (+0x0b)
    [ 41 b8 38:00 00 00 ]
    fffff88001726226-fffff8800172622b  6 bytes - Ntfs! ?? ::NNGAKEGL::`string'+1ffb (+0x06)
    [ e8 e5 f9 f1 ff eb:00 00 00 00 00 00 ]
    fffff8800172622d-fffff880017262a3  119 bytes - Ntfs! ?? ::NNGAKEGL::`string'+2002 (+0x07)
    [ 48 83 c4 58 5d 5b c3 53:00 00 00 00 00 00 00 00 ]
    fffff880017262a7-fffff880017262aa  4 bytes - Ntfs! ?? ::NNGAKEGL::`string'+2083 (+0x7a)
    [ f0 83 80 88:00 00 00 00 ]
    fffff880017262ae-fffff880017262bb  14 bytes - Ntfs! ?? ::NNGAKEGL::`string'+208a (+0x07)
    [ ff 48 8b 48 70 f0 83 41:00 00 00 00 00 00 00 00 ]
    fffff880017262be-fffff880017262d5  24 bytes - Ntfs! ?? ::NNGAKEGL::`string'+209a (+0x10)
    [ 74 17 45 33 c9 45 33 c0:00 00 00 00 00 00 00 00 ]
    fffff880017262d7-fffff880017262ef  25 bytes - Ntfs! ?? ::NNGAKEGL::`string'+20b3 (+0x19)
    [ 48 83 c4 40 5f 5d 5b c3:00 00 00 00 00 00 00 00 ]
    fffff880017262f3-fffff880017262f8  6 bytes - Ntfs! ?? ::NNGAKEGL::`string'+20d5 (+0x1c)
    [ e8 9c b3 fc ff eb:00 00 00 00 00 00 ]
    fffff880017262fa-fffff8800172630f  22 bytes - Ntfs! ?? ::NNGAKEGL::`string'+20dc (+0x07)
    [ 48 83 c4 50 5d c3 55 48:00 00 00 00 00 00 00 00 ]
    fffff88001726313-fffff88001726318  6 bytes - Ntfs! ?? ::NNGAKEGL::`string'+20fc (+0x19)
    [ e8 7c b3 fc ff eb:00 00 00 00 00 00 ]
    fffff8800172631a-fffff8800172632b  18 bytes - Ntfs! ?? ::NNGAKEGL::`string'+2103 (+0x07)
    [ 48 83 c4 50 5d c3 55 48:00 00 00 00 00 00 00 00 ]
    fffff8800172632f-fffff88001726331  3 bytes - Ntfs! ?? ::NNGAKEGL::`string'+2120 (+0x15)
    [ 48 8b 8d:00 00 00 ]
    fffff88001726333 - Ntfs! ?? ::NNGAKEGL::`string'+2124 (+0x04)
    [ 03:00 ]
    fffff88001726336-fffff8800172633f  10 bytes - Ntfs! ?? ::NNGAKEGL::`string'+2127 (+0x03)
    [ e8 59 b3 fc ff 4c 8d 9d:00 00 00 00 00 00 00 00 ]
    fffff88001726342-fffff88001726353  18 bytes - Ntfs! ?? ::NNGAKEGL::`string'+2133 (+0x0c)
    [ 48 8b 4d 70 49 3b cb 74:00 00 00 00 00 00 00 00 ]
    fffff88001726355-fffff88001726367  19 bytes - Ntfs! ?? ::NNGAKEGL::`string'+2146 (+0x13)
    [ 48 83 c4 60 5d c3 90 55:00 00 00 00 00 00 00 00 ]
    fffff8800172636b-fffff8800172636e  4 bytes - Ntfs! ?? ::NNGAKEGL::`string'+2162 (+0x16)
    [ 48 8b 8d d0:00 00 00 00 ]
WARNING: !chkimg output was truncated to 50 lines. Invoke !chkimg without '-lo [num_lines]' to view  entire output.
3679 errors : !Ntfs (fffff88001726002-fffff88001726ffd)

MODULE_NAME: memory_corruption

IMAGE_NAME:  memory_corruption

FOLLOWUP_NAME:  memory_corruption

DEBUG_FLR_IMAGE_TIMESTAMP:  0

MEMORY_CORRUPTOR:  LARGE

FAILURE_BUCKET_ID:  X64_MEMORY_CORRUPTION_LARGE

BUCKET_ID:  X64_MEMORY_CORRUPTION_LARGE

Followup: memory_corruption
---------

3: kd> !error c00000c0
Error code: (NTSTATUS) 0xc00000c0 (3221225664) - This device does not exist.

To give you some suggestions, we need to see some more data/info. Upload your MSINFO32.nfo file.

Click on the start button
Type "msinfo32" (without quotes) in the search bar of the start menu, click the resulting link. It will open the System Information window.
File>Save. In the "File Name" filed, put "MSINFO32" (without Quote), give the save location to desktop, and click the "save" button.
Give the time for processing, it will save a .nfo file on your desktop.
Zip it, and upload it following the instruction.

We need to check that file, to know your disc environment. Without checking it, any suggestion will be some guessworks only.

x BlueRobot · 06 Dec 2013

Code:

BugCheck 7A, {fffff6fc4000b930, ffffffffc00000c0, 2d5fa860, fffff88001726758}

Probably caused by : memory_corruption

The first parameter contains the address of the PTE of the virtual address which was meant to be paged in; the fourth parameter contains the PTE contents.

Code:

3: kd> !chkimg -f !ntfs
Warning: Any detected errors will be fixed to what we expect!
3679 errors (fixed): !ntfs (fffff88001726002-fffff88001726ffd)

Code:

3: kd> !exchain
12 stack frames, scanning for handlers...
Frame 0x02: nt!MiIssueHardFault+0x28b (fffff800`030a391f)
  ehandler nt!_GSHandlerCheck (fffff800`030cbb14)
Frame 0x07: nt!RtlpExecuteHandlerForUnwind+0xd (fffff800`030a77dd)
  ehandler nt!RtlpUnwindHandler (fffff800`030a7770)
Frame 0x0a: nt!RtlpExecuteHandlerForException+0xd (fffff800`030a775d)
  ehandler nt!RtlpExceptionHandler (fffff800`030a7720)

Code:

3: kd> !error ffffffffc00000c0
Error code: (NTSTATUS) 0xc00000c0 (3221225664) - This device does not exist.

The type of exception which was raised, was a device didn't exist.

No AV installed?

Install and perform full scans with:

Information

Remember to install the free version of Malwarebytes not the free trail; untick the free trial box during installation. MSE is the most lightweight and compatible with the Windows 7 operating system

You can also view this thread for a complete free and lightweight security protection combination:

Good and Free system security combination.

Please also boot into your BIOS, and check that your hard-drive is listed.

Run some hard-drive diagnostics and follow these steps:

Hard Drive Diagnostic Procedure

Find your hard-drive manufacturer and run their tests.

Additional Tests:

Post a screenshot of Crystal Disk Info summary:

Screenshots and Files - Upload and Post in Seven Forums

writhziden said:

If you have an SSD, make sure the following are up to date:

SSD firmware
BIOS Version
Chipset Drivers
Hard disk controller drivers/SATA drivers
If you have a Marvell IDE ATA/ATAPI device, make sure the drivers are up to date from the Intel site or Marvell site and not from your motherboard/vendor support site.

Check for any file system errors and bad sectors using Option #2 of:

Disk Check

Use this command with Disk Check:

Code:

chkdsk C: /f /r

Do not run any of the tests on a SSD, please check your SSD support page for the appropriate testing tools.

mrd156 · 09 Dec 2013

Many thanks for your help, I am looking further into this with the information you have pointed out.

To give you some suggestions, we need to see some more data/info. Upload your MSINFO32.nfo file.

MSINFO file attached, hopefully will give more details.

No AV installed?

This is a new system, since the issues popped up I thought I would hold off. It is not used for internet access or downloading, only connected to the internet so I can get connected to it. I will run a scan to be sure.

Use this command with Disk Check:

I had run check disk with /f /r on all disks and got no bad sectors on any disks. I did not know that should not be done on the SSD so I will confirm with Kingston as to what tool I should use for this. I will also run some of the other hard drive diagnostic as you have indicated.

ARC, BlueRobot, Thanks again for you time.

Arc · 09 Dec 2013

Do some Disc checks.

Make it sure that the SSD is running with the latest firmware: products
Re-seat the sata and power.

Make it sure that the SATA cables are good, there is no bent pins in either of the connectors ends, and those are properly fixed.
Also you may plan to update the BIOS to version F8. Use @BIOS (available under utilities) to update the BIOS. GIGABYTE - Motherboard - Socket 1150 - GA-B85M-D3H (rev. 1.x)
Run chkdsk /f/r, following the option two of the tutorial Disk Check
Test all your HDDs: SeaTools for DOS and Windows - How to Use
** Note that your storage controller is set to AHCI mode. Read the first information under Option two carefully before you proceed.
- Step 3 and Step 4 are for HDDs only, not to be performed on a SSD.

Get rid of intel rapid storage. First uninstall it from Control Panel > Programs and Features. Then Uninstall the driver from device manager.

Right click on "my computer" icon and click "manage" on the context menu.
It will open the "computer management" window.
Select "Device Manager" in the left pane, It will list all the existing devices up.
Expand "IDE ATA/ATAPI controllers" by clicking on the triangle in front of it.
Select one Intel device item under it, right click, uninstall.
Continue the process for all Intel items under "IDE ATA/ATAPI controllers"
Now restart the computer. At restart, windows will auto configure the appropriate native system driver.

Let us know the results.

Edit: On a precautionary note, Test your RAM modules for possible errors.
How to Test and Diagnose RAM Issues with Memtest86+
Run memtest for at least 8 passes, preferably overnight.

If it start showing errors/red lines, stop testing. A single error is enough to determine that something is going bad there.

mrd156 · 10 Dec 2013

Ok so here is the update so far.

- Checked the SSD, this is running the latest Firmware
- Have updated the Gigabit Motherboard with F8 BIOS
- Removed Intel Rapid Storage
- Uninstalled AHCI controler driver, restarted installed auto detected system driver
- Ran Check Disk /f /r on all disks (minus SSD) no errors found

Accidentally ran system restore from 10 days ago, thought I was creating a new restore point. (I know I was tired!)

Has to redo the below steps again to sort out permissions for WMI;
BSOD Microsoft-Windows-WMI 0x80041003 - Windows Forums

Followed by this to sort out "Event ID 3012 — Performance Counter Loading" with lodctr /r
Event ID 3012 ? Performance Counter Loading

The system has been behaving so far today, will come back with updates. Going to run further scans tonight.

Arc · 10 Dec 2013

OK, keep us informed :)

x BlueRobot · 11 Dec 2013

Thanks for the update :)

mrd156 · 12 Dec 2013

New update on this;

Screenshot of Crystal Disk Info

Attachment 297142

Attachment 297143

Attachment 297144

Attachment 297145

Since I updated last on here we have had three more BSODs attached is a new grab all. Hopefully this will be able to determine the issue as I have ran most of the tests. I think the disks are OK based on the Check Disk and CrystalDisk results. Might be looking at RAM as the issue then.

Malwarebytes is just doing a full scan now, currently 2 objects detected.

I have not run the RAM test just yet because of the time it needs to run. I will need to run this overnight just haven't got around to it just yet.

Arc · 12 Dec 2013

Same issue continuing.

Code:

*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

KERNEL_DATA_INPAGE_ERROR (7a)
The requested page of kernel data could not be read in.  Typically caused by
a bad block in the paging file or disk controller error. Also see
KERNEL_STACK_INPAGE_ERROR.
If the error status is 0xC000000E, 0xC000009C, 0xC000009D or 0xC0000185,
it means the disk subsystem has experienced a failure.
If the error status is 0xC000009A, then it means the request failed because
a filesystem failed to make forward progress.
Arguments:
Arg1: fffff6fc4000a928, lock type that was held (value 1,2,3, or PTE address)
Arg2: ffffffffc000000e, error status (normally i/o status code)
Arg3: 00000000a0323860, current process (virtual address for lock type 3, or PTE)
Arg4: fffff88001525748, virtual address that could not be in-paged (or PTE contents if arg1 is a PTE address)

Debugging Details:
------------------


ERROR_CODE: (NTSTATUS) 0xc000000e - A device which does not exist was specified.

DISK_HARDWARE_ERROR: There was error with disk hardware

BUGCHECK_STR:  0x7a_c000000e

CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  CODE_CORRUPTION

PROCESS_NAME:  System

CURRENT_IRQL:  0

TRAP_FRAME:  fffff880009d5340 -- (.trap 0xfffff880009d5340)
NOTE: The trap frame does not contain all registers.
Some register values may be zeroed or incorrect.
rax=fffff88001525748 rbx=0000000000000000 rcx=fffff880009d5510
rdx=fffff880009d6b20 rsi=0000000000000000 rdi=0000000000000000
rip=fffff88001525748 rsp=fffff880009d54d8 rbp=fffff880009d5640
 r8=fffff880009d5cc0  r9=fffff880009d5640 r10=0000000000000000
r11=fffff880009d5548 r12=0000000000000000 r13=0000000000000000
r14=0000000000000000 r15=0000000000000000
iopl=0         nv up ei ng nz na po nc
Ntfs! ?? ::NNGAKEGL::`string'+0x7520:
fffff880`01525748 008009000100    add     byte ptr [rax+10009h],al ds:fffff880`01535751=cb
Resetting default scope

LAST_CONTROL_TRANSFER:  from fffff80003148752 to fffff800030d5bc0

STACK_TEXT:  
fffff880`009d5028 fffff800`03148752 : 00000000`0000007a fffff6fc`4000a928 ffffffff`c000000e 00000000`a0323860 : nt!KeBugCheckEx
fffff880`009d5030 fffff800`030fc91f : fffffa80`043cf120 fffff880`009d51a0 fffff800`03310540 fffffa80`043cf120 : nt! ?? ::FNODOBFM::`string'+0x36c1a
fffff880`009d5110 fffff800`030e31b9 : 00000000`00000000 00000000`00000008 ffffffff`ffffffff fffff880`01433000 : nt!MiIssueHardFault+0x28b
fffff880`009d51e0 fffff800`030d3cee : 00000000`00000008 fffff880`01525748 fffffa80`07c07000 fffff880`014823c4 : nt!MmAccessFault+0x1399
fffff880`009d5340 fffff880`01525748 : fffff800`03100cdc fffffa80`04c43b50 fffff800`030e1c0b 00000000`00000000 : nt!KiPageFault+0x16e
fffff880`009d54d8 fffff800`03100cdc : fffffa80`04c43b50 fffff800`030e1c0b 00000000`00000000 00000000`00000002 : Ntfs! ?? ::NNGAKEGL::`string'+0x7520
fffff880`009d54e0 fffff880`0144c265 : fffff880`014824fc fffff880`009d6b20 fffff880`009d6468 fffff880`009d6b20 : nt!_C_specific_handler+0x8c
fffff880`009d5550 fffff800`0310075d : fffff880`01482358 00000000`00000000 fffff880`01433000 00000000`00000000 : Ntfs!_GSHandlerCheck_SEH+0x75
fffff880`009d5580 fffff800`030ff535 : fffff880`01482358 fffff880`009d55f8 fffff880`009d6468 fffff880`01433000 : nt!RtlpExecuteHandlerForException+0xd
fffff880`009d55b0 fffff800`031104c1 : fffff880`009d6468 fffff880`009d5cc0 fffff880`00000000 fffffa80`03fa7040 : nt!RtlDispatchException+0x415
fffff880`009d5c90 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiDispatchException+0x135


STACK_COMMAND:  kb

CHKIMG_EXTENSION: !chkimg -lo 50 -d !Ntfs
    fffff88001525000-fffff88001525005  6 bytes - Ntfs! ?? ::NNGAKEGL::`string'+65f6
    [ 70 48 8b 82 88 17:00 00 00 00 00 00 ]
    fffff88001525008-fffff88001525012  11 bytes - Ntfs! ?? ::NNGAKEGL::`string'+65fe (+0x08)
    [ f0 46 01 2c 30 48 8b 82:00 80 9f e7 01 00 00 00 ]
    fffff88001525014-fffff88001525019  6 bytes - Ntfs! ?? ::NNGAKEGL::`string'+660a (+0x0c)
    [ 48 83 c0 30 f0 44:01 00 00 00 00 c0 ]
    fffff8800152501b-fffff88001525054  58 bytes - Ntfs! ?? ::NNGAKEGL::`string'+6611 (+0x07)
    [ 28 48 8b 7d 70 38 5d 61:10 00 00 00 00 30 4f fd ]
    fffff88001525056-fffff8800152506f  26 bytes - Ntfs! ?? ::NNGAKEGL::`string'+6cd5 (+0x3b)
    [ e8 71 70 f2 ff eb 00 48:00 00 68 71 af fa ff 07 ]
    fffff88001525073-fffff8800152507c  10 bytes - Ntfs! ?? ::NNGAKEGL::`string'+6cf8 (+0x1d)
    [ 48 8b 01 8b 10 89 95 b4:00 00 00 00 00 00 c0 75 ]
    fffff8800152507e-fffff8800152508c  15 bytes - Ntfs! ?? ::NNGAKEGL::`string'+6d03 (+0x0b)
    [ 89 55 60 48 8b d1 44 8b:00 00 00 80 06 00 00 01 ]
    fffff8800152508f-fffff880015250a7  25 bytes - Ntfs! ?? ::NNGAKEGL::`string'+6d14 (+0x11)
    [ e8 5c 7c f3 ff eb 00 48:00 b0 66 af fa ff 07 00 ]
    fffff880015250ab-fffff880015250b4  10 bytes - Ntfs! ?? ::NNGAKEGL::`string'+6d38 (+0x1c)
    [ 48 8b 01 8b 10 89 95 b8:00 00 00 00 00 00 80 7c ]
    fffff880015250b6-fffff880015250c4  15 bytes - Ntfs! ?? ::NNGAKEGL::`string'+6d43 (+0x0b)
    [ 89 55 60 48 8b d1 44 8b:00 00 00 c0 00 00 00 01 ]
    fffff880015250c7-fffff880015250df  25 bytes - Ntfs! ?? ::NNGAKEGL::`string'+6d54 (+0x11)
    [ e8 24 7c f3 ff eb 00 48:00 00 61 af fa ff 07 00 ]
    fffff880015250e3-fffff880015250e7  5 bytes - Ntfs! ?? ::NNGAKEGL::`string'+6d78 (+0x1c)
    [ 48 8b 01 44 8b:00 00 00 00 00 ]
    fffff880015250e9-fffff880015250ec  4 bytes - Ntfs! ?? ::NNGAKEGL::`string'+6d7e (+0x06)
    [ 44 89 85 b0:80 7d a9 03 ]
    fffff880015250f0-fffff880015250f7  8 bytes - Ntfs! ?? ::NNGAKEGL::`string'+6d85 (+0x07)
    [ 48 8b d1 48 8b 8d 30 01:00 00 02 00 00 01 00 00 ]
    fffff880015250f9-fffff88001525115  29 bytes - Ntfs! ?? ::NNGAKEGL::`string'+6d8e (+0x09)
    [ 00 e8 f1 7b f3 ff eb 00:80 ef b2 39 00 00 00 90 ]
    fffff88001525117-fffff8800152511b  5 bytes - Ntfs! ?? ::NNGAKEGL::`string'+6db8 (+0x1e)
    [ 48 8b 01 44 8b:00 00 00 00 00 ]
    fffff8800152511d-fffff8800152512b  15 bytes - Ntfs! ?? ::NNGAKEGL::`string'+6dbe (+0x06)
    [ 44 89 85 c0 00 00 00 48:00 00 00 00 c0 7f a9 03 ]
    fffff8800152512d-fffff88001525147  27 bytes - Ntfs! ?? ::NNGAKEGL::`string'+6dce (+0x10)
    [ 00 e8 bd 7b f3 ff eb 00:01 00 00 00 80 f1 b2 39 ]
    fffff8800152514b-fffff88001525152  8 bytes - Ntfs! ?? ::NNGAKEGL::`string'+6df8 (+0x1e)
    [ 48 8b 01 8b 10 89 95 bc:00 00 00 00 00 00 00 00 ]
    fffff88001525156-fffff88001525165  16 bytes - Ntfs! ?? ::NNGAKEGL::`string'+6e03 (+0x0b)
    [ 89 55 60 48 8b d1 44 8b:00 00 00 80 80 a9 03 00 ]
    fffff88001525167-fffff8800152516c  6 bytes - Ntfs! ?? ::NNGAKEGL::`string'+6e14 (+0x11)
    [ e8 84 7b f3 ff eb:00 00 00 f2 b2 39 ]
    fffff8800152516e-fffff88001525186  25 bytes - Ntfs! ?? ::NNGAKEGL::`string'+6e1b (+0x07)
    [ 48 83 c4 30 5d c3 53 55:00 00 50 a5 ae fa ff 07 ]
    fffff88001525189-fffff8800152518f  7 bytes - Ntfs! ?? ::NNGAKEGL::`string'+6e3e (+0x1b)
    [ 74 10 4c 8b a5 38 01:00 00 00 00 00 00 00 ]
    fffff88001525192-fffff8800152519f  14 bytes - Ntfs! ?? ::NNGAKEGL::`string'+6e47 (+0x09)
    [ 41 0f ba 74 24 04 09 eb:81 a9 03 00 00 00 00 80 ]
    fffff880015251a1-fffff880015251ae  14 bytes - Ntfs! ?? ::NNGAKEGL::`string'+6e56 (+0x0f)
    [ 00 38 5d 31 74 0c 48 8b:40 f2 b2 39 00 00 00 50 ]
    fffff880015251b2-fffff880015251d2  33 bytes - Ntfs! ?? ::NNGAKEGL::`string'+6e67 (+0x11)
    [ ff 38 5d 32 74 09 48 8b:00 00 00 00 00 00 00 00 ]
    fffff880015251d4-fffff880015251ff  44 bytes - Ntfs! ?? ::NNGAKEGL::`string'+6e89 (+0x22)
    [ ff 38 5d 35 75 3e 38 5d:00 01 00 00 00 c0 f4 b2 ]
    fffff88001525201-fffff8800152521d  29 bytes - Ntfs! ?? ::NNGAKEGL::`string'+6eb6 (+0x2d)
    [ 00 48 8b 75 38 38 5d 30:80 95 19 00 00 00 00 00 ]
    fffff8800152521f-fffff8800152523c  30 bytes - Ntfs! ?? ::NNGAKEGL::`string'+6ed4 (+0x1e)
    [ 38 5d 34 74 23 45 33 c9:00 10 6b af fa ff 07 00 ]
    fffff8800152523e-fffff8800152529e  97 bytes - Ntfs! ?? ::NNGAKEGL::`string'+6ef3 (+0x1f)
    [ 44 2b de 44 89 5d 50 eb:00 00 00 40 1d 00 01 00 ]
    fffff880015252a2-fffff880015252bc  27 bytes - Ntfs! ?? ::NNGAKEGL::`string'+6f5e (+0x64)
    [ ff 15 90 29 f5 ff eb 04:00 00 00 00 00 00 00 40 ]
    fffff880015252bf-fffff880015252f6  56 bytes - Ntfs! ?? ::NNGAKEGL::`string'+6f7b (+0x1d)
    [ 48 8b cb e8 29 5b f2 ff:00 70 61 af fa ff 07 00 ]
    fffff880015252f8-fffff88001525309  18 bytes - Ntfs! ?? ::NNGAKEGL::`string'+6fb4 (+0x39)
    [ 07 00 00 ff 15 9f 29 f5:30 63 af fa ff 07 00 00 ]
    fffff8800152530d-fffff8800152531c  16 bytes - Ntfs! ?? ::NNGAKEGL::`string'+6fc9 (+0x15)
    [ 8a 05 f6 94 f6 ff 40 3a:00 00 00 00 00 00 00 00 ]
    fffff8800152531e-fffff8800152532d  16 bytes - Ntfs! ?? ::NNGAKEGL::`string'+6fda (+0x11)
    [ 48 8d 15 ab a5 fa ff 33:00 00 00 40 00 00 00 01 ]
    fffff88001525330-fffff88001525343  20 bytes - Ntfs! ?? ::NNGAKEGL::`string'+6fec (+0x12)
    [ 00 89 74 24 20 44 8a ce:c0 62 af fa ff 07 00 00 ]
    fffff88001525345-fffff88001525348  4 bytes - Ntfs! ?? ::NNGAKEGL::`string'+7001 (+0x15)
    [ 4c 8b a5 e8:07 00 00 01 ]
    fffff8800152534c-fffff88001525384  57 bytes - Ntfs! ?? ::NNGAKEGL::`string'+7008 (+0x07)
    [ 49 8b 8c 24 b8 00 00 00:00 00 00 00 00 40 90 a9 ]
    fffff88001525388-fffff88001525395  14 bytes - Ntfs! ?? ::NNGAKEGL::`string'+7044 (+0x3c)
    [ 45 33 c0 49 8b d4 48 8b:00 c0 90 a9 03 00 00 00 ]
    fffff88001525399-fffff880015253b2  26 bytes - Ntfs! ?? ::NNGAKEGL::`string'+7055 (+0x11)
    [ e8 56 95 f2 ff 8b d8 3b:40 00 b3 39 00 00 00 90 ]
    fffff880015253b5-fffff880015253de  42 bytes - Ntfs! ?? ::NNGAKEGL::`string'+7071 (+0x1c)
    [ 48 8d 15 14 a5 fa ff 8b:00 00 00 ff 00 00 00 00 ]
    fffff880015253e0-fffff880015253ee  15 bytes - Ntfs! ?? ::NNGAKEGL::`string'+709c (+0x2b)
    [ 00 00 3d 10 00 00 c0 0f:28 35 fd fa ff 07 00 00 ]
    fffff880015253f0-fffff88001525408  25 bytes - Ntfs! ?? ::NNGAKEGL::`string'+70ac (+0x10)
    [ 48 83 c4 50 41 5c 5f 5e:00 00 00 00 00 00 00 00 ]
    fffff8800152540a-fffff8800152541e  21 bytes - Ntfs! ?? ::NNGAKEGL::`string'+7187 (+0x1a)
    [ 00 00 33 db 48 3b cb 74:03 b3 39 00 00 00 48 b5 ]
    fffff88001525420-fffff88001525425  6 bytes - Ntfs! ?? ::NNGAKEGL::`string'+719d (+0x16)
    [ 00 00 48 8b 8d 88:d8 fa 6e f9 ff 07 ]
    fffff88001525428-fffff88001525439  18 bytes - Ntfs! ?? ::NNGAKEGL::`string'+71a5 (+0x08)
    [ 00 48 3b cb 74 0f 33 d2:01 00 00 00 00 00 00 00 ]
    fffff8800152543d-fffff8800152545b  31 bytes - Ntfs! ?? ::NNGAKEGL::`string'+71ba (+0x15)
    [ 48 8b 4d 68 48 3b cb 74:01 00 00 00 40 03 b3 39 ]
    fffff8800152545e-fffff88001525461  4 bytes - Ntfs! ?? ::NNGAKEGL::`string'+71db (+0x21)
    [ f0 83 81 dc:00 00 00 00 ]
    fffff88001525465-fffff8800152546f  11 bytes - Ntfs! ?? ::NNGAKEGL::`string'+71e2 (+0x07)
    [ ff 88 5d 58 eb 07 48 8b:00 00 00 00 80 c4 08 00 ]
    fffff88001525471-fffff8800152547c  12 bytes - Ntfs! ?? ::NNGAKEGL::`string'+71ee (+0x0c)
    [ 00 38 5d 50 74 12 48 81:40 00 00 00 02 00 00 00 ]
WARNING: !chkimg output was truncated to 50 lines. Invoke !chkimg without '-lo [num_lines]' to view  entire output.
3711 errors : !Ntfs (fffff88001525000-fffff88001525fff)

MODULE_NAME: memory_corruption

IMAGE_NAME:  memory_corruption

FOLLOWUP_NAME:  memory_corruption

DEBUG_FLR_IMAGE_TIMESTAMP:  0

MEMORY_CORRUPTOR:  LARGE_4096

FAILURE_BUCKET_ID:  X64_MEMORY_CORRUPTION_LARGE_4096

BUCKET_ID:  X64_MEMORY_CORRUPTION_LARGE_4096

Followup: memory_corruption
---------

Do Seatools for DOS test on all your three HDDs: SeaTools for DOS and Windows - How to Use