Windows 7 Forums Search
Welcome to Windows 7 Forums. Our forum is dedicated to helping you find solutions with any problems, errors or issues you are experiencing with Windows 7. The Windows 7 forum also covers news and updates and has an extensive Windows 7 tutorial section that covers a wide range of tips and tricks.


Windows 7 - Memory Corruption



 
09-02-2010   #1


Windows 7 Home Premium x64
 
 

Memory Corruption

I just found out I got some memory corruption, I been trying to get windows update to work and I was told by Flavius and woundering how I could fix this?

I been getting some bluescreens, Windows Update wont update and minor stuff wont save, like to have the desktop on the toolbar.

Code:
Microsoft (R) Windows Debugger Version 6.11.0001.404 AMD64
Copyright (c) Microsoft Corporation. All rights reserved.


Loading Dump File [G:\Folder1\MEMORY.DMP]
Kernel Summary Dump File: Only kernel address space is available

Symbol search path is: SRV*G:\SymCache*http://msdl.microsoft.com/download/symbols
Executable search path is: 
Windows 7 Kernel Version 7600 MP (6 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS Personal
Built by: 7600.16539.amd64fre.win7_gdr.100226-1909
Machine Name:
Kernel base = 0xfffff800`03055000 PsLoadedModuleList = 0xfffff800`03292e50
Debug session time: Wed Sep  1 15:26:51.102 2010 (GMT+2)
System Uptime: 0 days 1:21:14.177
Loading Kernel Symbols
...............................................................
................................................................
...................................
Loading User Symbols
PEB is paged out (Peb.Ldr = 00000000`fffdf018).  Type ".hh dbgerr001" for details
Loading unloaded module list
......
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck 4E, {99, 59b4, 2, 59b2}

PEB is paged out (Peb.Ldr = 00000000`fffdf018).  Type ".hh dbgerr001" for details
PEB is paged out (Peb.Ldr = 00000000`fffdf018).  Type ".hh dbgerr001" for details
Probably caused by : memory_corruption ( nt!MiBadShareCount+4c )

Followup: MachineOwner
---------

3: kd> !analyze -v
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

PFN_LIST_CORRUPT (4e)
Typically caused by drivers passing bad memory descriptor lists (ie: calling
MmUnlockPages twice with the same list, etc).  If a kernel debugger is
available get the stack trace.
Arguments:
Arg1: 0000000000000099, A PTE or PFN is corrupt
Arg2: 00000000000059b4, page frame number
Arg3: 0000000000000002, current page state
Arg4: 00000000000059b2, 0

Debugging Details:
------------------

PEB is paged out (Peb.Ldr = 00000000`fffdf018).  Type ".hh dbgerr001" for details
PEB is paged out (Peb.Ldr = 00000000`fffdf018).  Type ".hh dbgerr001" for details

BUGCHECK_STR:  0x4E_99

DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT

PROCESS_NAME:  SC2.exe

CURRENT_IRQL:  2

LAST_CONTROL_TRANSFER:  from fffff800031552bc to fffff800030c5600

STACK_TEXT:  
fffff880`0bec0f28 fffff800`031552bc : 00000000`0000004e 00000000`00000099 00000000`000059b4 00000000`00000002 : nt!KeBugCheckEx
fffff880`0bec0f30 fffff800`03137925 : 00000000`00000000 fffff680`002ecc20 00000000`00000002 00000000`00000001 : nt!MiBadShareCount+0x4c
fffff880`0bec0f70 fffff800`03099b43 : fffffa80`0a25e060 fffff700`0005820c 0000007f`fffffff8 fffff8a0`0b1ecbf8 : nt! ?? ::FNODOBFM::`string'+0x3226c
fffff880`0bec1000 fffff800`030985a2 : fffffa80`0a25e060 fffffa80`00000000 fffff880`0005563c fffff800`0000002b : nt!MiDeleteAddressesInWorkingSet+0x307
fffff880`0bec18b0 fffff800`033abc4f : fffff8a0`0c393530 fffff880`0bec1c20 00000000`00000000 fffffa80`09b3f780 : nt!MmCleanProcessAddressSpace+0x96
fffff880`0bec1900 fffff800`033844d1 : 00000000`20010000 00000000`00000001 00000000`fd27d000 fffffa80`087c11f0 : nt!PspExitThread+0x92f
fffff880`0bec19c0 fffff800`030a20e3 : fffff900`c22fbce0 00000000`00000000 fffff900`79747355 fffff900`00000029 : nt!PsExitSpecialApc+0x1d
fffff880`0bec19f0 fffff800`030a2520 : 00000000`31f9fe08 fffff880`0bec1a70 fffff800`033845dc 00000000`00000001 : nt!KiDeliverApc+0x2eb
fffff880`0bec1a70 fffff800`030c48f7 : fffff880`0bec1ca0 fffff800`030d15fa 00000000`0000002a 00000000`73532450 : nt!KiInitiateUserApc+0x70
fffff880`0bec1bb0 00000000`73532dd9 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSystemServiceExit+0x9c
00000000`31e9f0f8 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x73532dd9


STACK_COMMAND:  kb

FOLLOWUP_IP: 
nt!MiBadShareCount+4c
fffff800`031552bc cc              int     3

SYMBOL_STACK_INDEX:  1

SYMBOL_NAME:  nt!MiBadShareCount+4c

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: nt

DEBUG_FLR_IMAGE_TIMESTAMP:  4b88cfeb

IMAGE_NAME:  memory_corruption

FAILURE_BUCKET_ID:  X64_0x4E_99_nt!MiBadShareCount+4c

BUCKET_ID:  X64_0x4E_99_nt!MiBadShareCount+4c

Followup: MachineOwner
---------

3: kd> !analyze -v
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

PFN_LIST_CORRUPT (4e)
Typically caused by drivers passing bad memory descriptor lists (ie: calling
MmUnlockPages twice with the same list, etc).  If a kernel debugger is
available get the stack trace.
Arguments:
Arg1: 0000000000000099, A PTE or PFN is corrupt
Arg2: 00000000000059b4, page frame number
Arg3: 0000000000000002, current page state
Arg4: 00000000000059b2, 0

Debugging Details:
------------------

PEB is paged out (Peb.Ldr = 00000000`fffdf018).  Type ".hh dbgerr001" for details
PEB is paged out (Peb.Ldr = 00000000`fffdf018).  Type ".hh dbgerr001" for details

BUGCHECK_STR:  0x4E_99

DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT

PROCESS_NAME:  SC2.exe

CURRENT_IRQL:  2

LAST_CONTROL_TRANSFER:  from fffff800031552bc to fffff800030c5600

STACK_TEXT:  
fffff880`0bec0f28 fffff800`031552bc : 00000000`0000004e 00000000`00000099 00000000`000059b4 00000000`00000002 : nt!KeBugCheckEx
fffff880`0bec0f30 fffff800`03137925 : 00000000`00000000 fffff680`002ecc20 00000000`00000002 00000000`00000001 : nt!MiBadShareCount+0x4c
fffff880`0bec0f70 fffff800`03099b43 : fffffa80`0a25e060 fffff700`0005820c 0000007f`fffffff8 fffff8a0`0b1ecbf8 : nt! ?? ::FNODOBFM::`string'+0x3226c
fffff880`0bec1000 fffff800`030985a2 : fffffa80`0a25e060 fffffa80`00000000 fffff880`0005563c fffff800`0000002b : nt!MiDeleteAddressesInWorkingSet+0x307
fffff880`0bec18b0 fffff800`033abc4f : fffff8a0`0c393530 fffff880`0bec1c20 00000000`00000000 fffffa80`09b3f780 : nt!MmCleanProcessAddressSpace+0x96
fffff880`0bec1900 fffff800`033844d1 : 00000000`20010000 00000000`00000001 00000000`fd27d000 fffffa80`087c11f0 : nt!PspExitThread+0x92f
fffff880`0bec19c0 fffff800`030a20e3 : fffff900`c22fbce0 00000000`00000000 fffff900`79747355 fffff900`00000029 : nt!PsExitSpecialApc+0x1d
fffff880`0bec19f0 fffff800`030a2520 : 00000000`31f9fe08 fffff880`0bec1a70 fffff800`033845dc 00000000`00000001 : nt!KiDeliverApc+0x2eb
fffff880`0bec1a70 fffff800`030c48f7 : fffff880`0bec1ca0 fffff800`030d15fa 00000000`0000002a 00000000`73532450 : nt!KiInitiateUserApc+0x70
fffff880`0bec1bb0 00000000`73532dd9 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSystemServiceExit+0x9c
00000000`31e9f0f8 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x73532dd9


STACK_COMMAND:  kb

FOLLOWUP_IP: 
nt!MiBadShareCount+4c
fffff800`031552bc cc              int     3

SYMBOL_STACK_INDEX:  1

SYMBOL_NAME:  nt!MiBadShareCount+4c

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: nt

DEBUG_FLR_IMAGE_TIMESTAMP:  4b88cfeb

IMAGE_NAME:  memory_corruption

FAILURE_BUCKET_ID:  X64_0x4E_99_nt!MiBadShareCount+4c

BUCKET_ID:  X64_0x4E_99_nt!MiBadShareCount+4c

Followup: MachineOwner
---------
I am in no hurry atm, since I am going away over the weekend. could it be a start to clean the RAM sticks?

My System SpecsSystem Spec
09-03-2010   #2


Windows Seven Professional x64
 
 


No,
It sounds like an infection. Try doing a complete system scan using Malwarebytes and Spybot S&D.

These should yeild some nasties hiding on your HDD.

Let us know what it finds,
Ben
My System SpecsSystem Spec
09-03-2010   #3


Windows 7 Professional x64
 
 


In addition to Ben's advice, please follow these directions: Blue Screen of Death (BSOD) Posting Instructions
My System SpecsSystem Spec
.


09-03-2010   #4


Windows 7 Home Premium x64
 
 


OK. I just left home, but before I did a MemTest 86+, and it found an error. I didnt have time to run the full test thought, and I didnt quite understand what was wrong.
My System SpecsSystem Spec
09-03-2010   #5


Windows 7 Professional x64
 
 


See part 3 of this guide: RAM - Test with Memtest86+
My System SpecsSystem Spec
09-05-2010   #6


Windows 7 Home Premium x64
 
 


Quote   Quote: Originally Posted by Jonathan_King View Post
In addition to Ben's advice, please follow these directions: Blue Screen of Death (BSOD) Posting Instructions
I just got home and ran these tests. I havent had time to run the anti-virus or memtest, since it almost 1130 pm. I will do the virus tests while at school tomorrow.

The "perfmon /report" is using ages. About 15 minutes now :S I didnt do that earlier when I only had 3 RAM sticks in (forgotten to set in the last one in after cleaning).

Windows 7 64 bit. Home Premium
I built the pc myself, at around May.
Havent reinstalled at any times


Last edited by Dudex; 09-06-2010 at 08:36 AM.. Reason: more too add
My System SpecsSystem Spec
09-06-2010   #7


Windows 7 Home Premium x64
 
 


While at shcool, I ran an memtest86+ on one of my sticks in #1 slot. From 8am-14pm, it found 36 errors... That sounds like alot. I havent tested if its the slot or the stick.
My System SpecsSystem Spec
09-06-2010   #8


Windows 7 Home Premium x64
 
 


so what should I do?
My System SpecsSystem Spec
09-06-2010   #9


Windows 7 Professional x64
 
 


If I had to blame a single cause, it would be Daemon Tools Lite. Not that the program itself is buggy, but it uses a buggy driver, SPTD.sys, which is a known cause of BSODs.

First, remove Daemon Tools. Then, remove SPTD with this tool: http://www.duplexsecure.com/download...t-v172-x64.exe

In the same BSOD that SPTD showed up as an error, your DeathAdder mouse drivers were directly blamed. See if there is an update for those March 2010 drivers.

I suspect that will do the trick, but if you continue to have BSODs, remove AVG with this tool: http://download.avg.com/filedir/util...removerx64.exe

Replace it with MSE: http://www.microsoft.com/security_essentials

Install these Realtek drivers: Realtek

...Summary of the Dumps:
Code:

Built by: 7600.16539.amd64fre.win7_gdr.100226-1909
Debug session time: Wed Sep  1 09:26:51.102 2010 (UTC - 4:00)
System Uptime: 0 days 1:21:14.177
BugCheck 4E, {99, 59b4, 2, 59b2}
Probably caused by : memory_corruption ( nt!MiBadShareCount+4c )
BUGCHECK_STR:  0x4E_99
PROCESS_NAME:  SC2.exe
ииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииии
Built by: 7600.16539.amd64fre.win7_gdr.100226-1909
Debug session time: Sun Aug 29 04:08:53.579 2010 (UTC - 4:00)
System Uptime: 0 days 16:23:49.940
BugCheck 1E, {ffffffffc0000047, fffff800030b8ef8, fffffa8008f8c010, 100000000}
*** WARNING: Unable to verify timestamp for danew.sys
*** ERROR: Module load completed but symbols could not be loaded for danew.sys
*** WARNING: Unable to verify timestamp for sptd.sys
*** ERROR: Module load completed but symbols could not be loaded for sptd.sys
Probably caused by : danew.sys ( danew+6da )
BUGCHECK_STR:  0x1E_c0000047
PROCESS_NAME:  System
ииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииии
Built by: 7600.16539.amd64fre.win7_gdr.100226-1909
Debug session time: Sat Aug 28 09:57:02.581 2010 (UTC - 4:00)
System Uptime: 0 days 4:37:11.017
BugCheck 4E, {99, 13e77b, 2, aa341}
Probably caused by : memory_corruption ( nt!MiBadShareCount+4c )
BUGCHECK_STR:  0x4E_99
PROCESS_NAME:  System
ииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииии
My System SpecsSystem Spec
09-07-2010   #10


Windows 7 Home Premium x64
 
 


Quote   Quote: Originally Posted by Jonathan_King View Post
If I had to blame a single cause, it would be Daemon Tools Lite. Not that the program itself is buggy, but it uses a buggy driver, SPTD.sys, which is a known cause of BSODs.

First, remove Daemon Tools. Then, remove SPTD with this tool: http://www.duplexsecure.com/download...t-v172-x64.exe

In the same BSOD that SPTD showed up as an error, your DeathAdder mouse drivers were directly blamed. See if there is an update for those March 2010 drivers.

I suspect that will do the trick, but if you continue to have BSODs, remove AVG with this tool: http://download.avg.com/filedir/util...removerx64.exe

Replace it with MSE: http://www.microsoft.com/security_essentials

Install these Realtek drivers: Realtek

...Summary of the Dumps:
Code:

Built by: 7600.16539.amd64fre.win7_gdr.100226-1909
Debug session time: Wed Sep  1 09:26:51.102 2010 (UTC - 4:00)
System Uptime: 0 days 1:21:14.177
BugCheck 4E, {99, 59b4, 2, 59b2}
Probably caused by : memory_corruption ( nt!MiBadShareCount+4c )
BUGCHECK_STR:  0x4E_99
PROCESS_NAME:  SC2.exe
ииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииии
Built by: 7600.16539.amd64fre.win7_gdr.100226-1909
Debug session time: Sun Aug 29 04:08:53.579 2010 (UTC - 4:00)
System Uptime: 0 days 16:23:49.940
BugCheck 1E, {ffffffffc0000047, fffff800030b8ef8, fffffa8008f8c010, 100000000}
*** WARNING: Unable to verify timestamp for danew.sys
*** ERROR: Module load completed but symbols could not be loaded for danew.sys
*** WARNING: Unable to verify timestamp for sptd.sys
*** ERROR: Module load completed but symbols could not be loaded for sptd.sys
Probably caused by : danew.sys ( danew+6da )
BUGCHECK_STR:  0x1E_c0000047
PROCESS_NAME:  System
ииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииии
Built by: 7600.16539.amd64fre.win7_gdr.100226-1909
Debug session time: Sat Aug 28 09:57:02.581 2010 (UTC - 4:00)
System Uptime: 0 days 4:37:11.017
BugCheck 4E, {99, 13e77b, 2, aa341}
Probably caused by : memory_corruption ( nt!MiBadShareCount+4c )
BUGCHECK_STR:  0x4E_99
PROCESS_NAME:  System
ииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииии
Would Avast work, since I got a bug that makes Winodws Update + MSE not update? I previously made a post in the Windows Update section, and he belived that my RAM might cause that problem.
My System SpecsSystem Spec
Reply

Memory Corruption problems?



Thread Tools



Similar Threads for: Memory Corruption
Thread Forum
Solved Corruption General Discussion
BSOD Special Pool Detected Memory Corruption Crashes and Debugging
Memory corruption or something else? Crashes and Debugging
Memory Corruption BSOD - Only on first boot. Crashes and Debugging
Question about all of these memory corruption issues Crashes and Debugging


All times are GMT -5. The time now is 09:16 PM.



Windows 7 Forums is an independent web site and has not been authorized,
sponsored, or otherwise approved by Microsoft Corporation.
"Windows 7" and related materials are trademarks of Microsoft Corp.
й Designer Media Ltd
  

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30