 | | Welcome to Windows 7 Forums. Our forum is dedicated to helping you find solutions with any problems, errors or issues you are experiencing with Windows 7. The Windows 7 forum also covers news and updates and has an extensive Windows 7 tutorial section that covers a wide range of tips and tricks. | Windows 7 - Memory Corruption
|
09-02-2010
|
#1 | | Windows 7 Home Premium x64 |
Memory Corruption I just found out I got some memory corruption, I been trying to get windows update to work and I was told by Flavius and woundering how I could fix this?
I been getting some bluescreens, Windows Update wont update and minor stuff wont save, like to have the desktop on the toolbar. Code: Microsoft (R) Windows Debugger Version 6.11.0001.404 AMD64
Copyright (c) Microsoft Corporation. All rights reserved.
Loading Dump File [G:\Folder1\MEMORY.DMP]
Kernel Summary Dump File: Only kernel address space is available
Symbol search path is: SRV*G:\SymCache*http://msdl.microsoft.com/download/symbols
Executable search path is:
Windows 7 Kernel Version 7600 MP (6 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS Personal
Built by: 7600.16539.amd64fre.win7_gdr.100226-1909
Machine Name:
Kernel base = 0xfffff800`03055000 PsLoadedModuleList = 0xfffff800`03292e50
Debug session time: Wed Sep 1 15:26:51.102 2010 (GMT+2)
System Uptime: 0 days 1:21:14.177
Loading Kernel Symbols
...............................................................
................................................................
...................................
Loading User Symbols
PEB is paged out (Peb.Ldr = 00000000`fffdf018). Type ".hh dbgerr001" for details
Loading unloaded module list
......
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
Use !analyze -v to get detailed debugging information.
BugCheck 4E, {99, 59b4, 2, 59b2}
PEB is paged out (Peb.Ldr = 00000000`fffdf018). Type ".hh dbgerr001" for details
PEB is paged out (Peb.Ldr = 00000000`fffdf018). Type ".hh dbgerr001" for details
Probably caused by : memory_corruption ( nt!MiBadShareCount+4c )
Followup: MachineOwner
---------
3: kd> !analyze -v
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
PFN_LIST_CORRUPT (4e)
Typically caused by drivers passing bad memory descriptor lists (ie: calling
MmUnlockPages twice with the same list, etc). If a kernel debugger is
available get the stack trace.
Arguments:
Arg1: 0000000000000099, A PTE or PFN is corrupt
Arg2: 00000000000059b4, page frame number
Arg3: 0000000000000002, current page state
Arg4: 00000000000059b2, 0
Debugging Details:
------------------
PEB is paged out (Peb.Ldr = 00000000`fffdf018). Type ".hh dbgerr001" for details
PEB is paged out (Peb.Ldr = 00000000`fffdf018). Type ".hh dbgerr001" for details
BUGCHECK_STR: 0x4E_99
DEFAULT_BUCKET_ID: VISTA_DRIVER_FAULT
PROCESS_NAME: SC2.exe
CURRENT_IRQL: 2
LAST_CONTROL_TRANSFER: from fffff800031552bc to fffff800030c5600
STACK_TEXT:
fffff880`0bec0f28 fffff800`031552bc : 00000000`0000004e 00000000`00000099 00000000`000059b4 00000000`00000002 : nt!KeBugCheckEx
fffff880`0bec0f30 fffff800`03137925 : 00000000`00000000 fffff680`002ecc20 00000000`00000002 00000000`00000001 : nt!MiBadShareCount+0x4c
fffff880`0bec0f70 fffff800`03099b43 : fffffa80`0a25e060 fffff700`0005820c 0000007f`fffffff8 fffff8a0`0b1ecbf8 : nt! ?? ::FNODOBFM::`string'+0x3226c
fffff880`0bec1000 fffff800`030985a2 : fffffa80`0a25e060 fffffa80`00000000 fffff880`0005563c fffff800`0000002b : nt!MiDeleteAddressesInWorkingSet+0x307
fffff880`0bec18b0 fffff800`033abc4f : fffff8a0`0c393530 fffff880`0bec1c20 00000000`00000000 fffffa80`09b3f780 : nt!MmCleanProcessAddressSpace+0x96
fffff880`0bec1900 fffff800`033844d1 : 00000000`20010000 00000000`00000001 00000000`fd27d000 fffffa80`087c11f0 : nt!PspExitThread+0x92f
fffff880`0bec19c0 fffff800`030a20e3 : fffff900`c22fbce0 00000000`00000000 fffff900`79747355 fffff900`00000029 : nt!PsExitSpecialApc+0x1d
fffff880`0bec19f0 fffff800`030a2520 : 00000000`31f9fe08 fffff880`0bec1a70 fffff800`033845dc 00000000`00000001 : nt!KiDeliverApc+0x2eb
fffff880`0bec1a70 fffff800`030c48f7 : fffff880`0bec1ca0 fffff800`030d15fa 00000000`0000002a 00000000`73532450 : nt!KiInitiateUserApc+0x70
fffff880`0bec1bb0 00000000`73532dd9 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSystemServiceExit+0x9c
00000000`31e9f0f8 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x73532dd9
STACK_COMMAND: kb
FOLLOWUP_IP:
nt!MiBadShareCount+4c
fffff800`031552bc cc int 3
SYMBOL_STACK_INDEX: 1
SYMBOL_NAME: nt!MiBadShareCount+4c
FOLLOWUP_NAME: MachineOwner
MODULE_NAME: nt
DEBUG_FLR_IMAGE_TIMESTAMP: 4b88cfeb
IMAGE_NAME: memory_corruption
FAILURE_BUCKET_ID: X64_0x4E_99_nt!MiBadShareCount+4c
BUCKET_ID: X64_0x4E_99_nt!MiBadShareCount+4c
Followup: MachineOwner
---------
3: kd> !analyze -v
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
PFN_LIST_CORRUPT (4e)
Typically caused by drivers passing bad memory descriptor lists (ie: calling
MmUnlockPages twice with the same list, etc). If a kernel debugger is
available get the stack trace.
Arguments:
Arg1: 0000000000000099, A PTE or PFN is corrupt
Arg2: 00000000000059b4, page frame number
Arg3: 0000000000000002, current page state
Arg4: 00000000000059b2, 0
Debugging Details:
------------------
PEB is paged out (Peb.Ldr = 00000000`fffdf018). Type ".hh dbgerr001" for details
PEB is paged out (Peb.Ldr = 00000000`fffdf018). Type ".hh dbgerr001" for details
BUGCHECK_STR: 0x4E_99
DEFAULT_BUCKET_ID: VISTA_DRIVER_FAULT
PROCESS_NAME: SC2.exe
CURRENT_IRQL: 2
LAST_CONTROL_TRANSFER: from fffff800031552bc to fffff800030c5600
STACK_TEXT:
fffff880`0bec0f28 fffff800`031552bc : 00000000`0000004e 00000000`00000099 00000000`000059b4 00000000`00000002 : nt!KeBugCheckEx
fffff880`0bec0f30 fffff800`03137925 : 00000000`00000000 fffff680`002ecc20 00000000`00000002 00000000`00000001 : nt!MiBadShareCount+0x4c
fffff880`0bec0f70 fffff800`03099b43 : fffffa80`0a25e060 fffff700`0005820c 0000007f`fffffff8 fffff8a0`0b1ecbf8 : nt! ?? ::FNODOBFM::`string'+0x3226c
fffff880`0bec1000 fffff800`030985a2 : fffffa80`0a25e060 fffffa80`00000000 fffff880`0005563c fffff800`0000002b : nt!MiDeleteAddressesInWorkingSet+0x307
fffff880`0bec18b0 fffff800`033abc4f : fffff8a0`0c393530 fffff880`0bec1c20 00000000`00000000 fffffa80`09b3f780 : nt!MmCleanProcessAddressSpace+0x96
fffff880`0bec1900 fffff800`033844d1 : 00000000`20010000 00000000`00000001 00000000`fd27d000 fffffa80`087c11f0 : nt!PspExitThread+0x92f
fffff880`0bec19c0 fffff800`030a20e3 : fffff900`c22fbce0 00000000`00000000 fffff900`79747355 fffff900`00000029 : nt!PsExitSpecialApc+0x1d
fffff880`0bec19f0 fffff800`030a2520 : 00000000`31f9fe08 fffff880`0bec1a70 fffff800`033845dc 00000000`00000001 : nt!KiDeliverApc+0x2eb
fffff880`0bec1a70 fffff800`030c48f7 : fffff880`0bec1ca0 fffff800`030d15fa 00000000`0000002a 00000000`73532450 : nt!KiInitiateUserApc+0x70
fffff880`0bec1bb0 00000000`73532dd9 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSystemServiceExit+0x9c
00000000`31e9f0f8 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x73532dd9
STACK_COMMAND: kb
FOLLOWUP_IP:
nt!MiBadShareCount+4c
fffff800`031552bc cc int 3
SYMBOL_STACK_INDEX: 1
SYMBOL_NAME: nt!MiBadShareCount+4c
FOLLOWUP_NAME: MachineOwner
MODULE_NAME: nt
DEBUG_FLR_IMAGE_TIMESTAMP: 4b88cfeb
IMAGE_NAME: memory_corruption
FAILURE_BUCKET_ID: X64_0x4E_99_nt!MiBadShareCount+4c
BUCKET_ID: X64_0x4E_99_nt!MiBadShareCount+4c
Followup: MachineOwner
--------- I am in no hurry atm, since I am going away over the weekend. could it be a start to clean the RAM sticks? | My System Specs | | OS Windows 7 Home Premium x64 |
09-03-2010
|
#2 | | Windows Seven Professional x64 |
No,
It sounds like an infection. Try doing a complete system scan using Malwarebytes and Spybot S&D.
These should yeild some nasties hiding on your HDD.
Let us know what it finds,
Ben | My System Specs | | System Manufacturer/Model Number iBUYPOWER W870CU OS Windows Seven Professional x64 CPU Intel Core i7-740QM @ 1.73GHz 6M Motherboard Intel PM55 Memory 2 X 4GB DDR3 677MHz Graphics Card ATI Mobility Radeon HD 5870 1GB GDDR5 Sound Card Realtek High Definition Audio Monitor(s) Displays 17.3" HD+/ FHD LED-backlight Screen Resolution 1920X1080 Keyboard Microsoft eHome MCIR 109 Mouse Finger Sensing HID-Compliant Mouse Pad PSU 43290mWh Intel Lithium-Ion Battery Case Cleveo W870CU Cooling 3 Fans Hard Drives Seagate 500 GB 7200RPM ATA Harddrive Internet Speed 100 MB/s Other Info Biometric Enabled
USB 3.0 Enabled
2.0MP Cam |
09-03-2010
|
#3 | | Windows 7 Professional x64 |
In addition to Ben's advice, please follow these directions: Blue Screen of Death (BSOD) Posting Instructions | My System Specs | | System Manufacturer/Model Number Jonathan King OS Windows 7 Professional x64 CPU AMD Athlon Dual Core Processor 4850e overclocked @ 2.90 GHz Motherboard ASRock A780 FullDisplayPort Memory 6.0GB Dual-Channel DDR2 290MHz Crucial Technology Graphics Card EVGA GeForce GTX 480 SuperClocked+ Sound Card Realtek High Definition Audio Onboard Monitor(s) Displays 2x Acer S273HLbmii 27" Screen Resolution 2 x 1920x1080 Keyboard Microsoft Wired Desktop 500 (PS/2) Mouse Microsoft Wired Desktop 500 (USB) PSU Corsair HW Series 750w Modular Case Antec 300 Cooling stock cpu, 120mm hard drive bay fan Hard Drives WD 320GB SATA, Hitachi 1TB SATA, Samsung 1.5TB SATA Internet Speed 25 Mb/s download; 1 Mb/s upload |
09-03-2010
|
#4 | | Windows 7 Home Premium x64 |
OK. I just left home, but before I did a MemTest 86+, and it found an error. I didnt have time to run the full test thought, and I didnt quite understand what was wrong. | My System Specs | | OS Windows 7 Home Premium x64 |
09-03-2010
|
#5 | | Windows 7 Professional x64 |
See part 3 of this guide: RAM - Test with Memtest86+ | My System Specs | | System Manufacturer/Model Number Jonathan King OS Windows 7 Professional x64 CPU AMD Athlon Dual Core Processor 4850e overclocked @ 2.90 GHz Motherboard ASRock A780 FullDisplayPort Memory 6.0GB Dual-Channel DDR2 290MHz Crucial Technology Graphics Card EVGA GeForce GTX 480 SuperClocked+ Sound Card Realtek High Definition Audio Onboard Monitor(s) Displays 2x Acer S273HLbmii 27" Screen Resolution 2 x 1920x1080 Keyboard Microsoft Wired Desktop 500 (PS/2) Mouse Microsoft Wired Desktop 500 (USB) PSU Corsair HW Series 750w Modular Case Antec 300 Cooling stock cpu, 120mm hard drive bay fan Hard Drives WD 320GB SATA, Hitachi 1TB SATA, Samsung 1.5TB SATA Internet Speed 25 Mb/s download; 1 Mb/s upload |
09-05-2010
|
#6 | | Windows 7 Home Premium x64 |
I just got home and ran these tests. I havent had time to run the anti-virus or memtest, since it almost 1130 pm. I will do the virus tests while at school tomorrow.
The " perfmon /report" is using ages. About 15 minutes now :S I didnt do that earlier when I only had 3 RAM sticks in (forgotten to set in the last one in after cleaning).
Windows 7 64 bit. Home Premium
I built the pc myself, at around May.
Havent reinstalled at any times
Last edited by Dudex; 09-06-2010 at 08:36 AM..
Reason: more too add
| My System Specs | | OS Windows 7 Home Premium x64 |
09-06-2010
|
#7 | | Windows 7 Home Premium x64 |
While at shcool, I ran an memtest86+ on one of my sticks in #1 slot. From 8am-14pm, it found 36 errors... That sounds like alot. I havent tested if its the slot or the stick. | My System Specs | | OS Windows 7 Home Premium x64 |
09-06-2010
|
#8 | | Windows 7 Home Premium x64 |
| My System Specs | | OS Windows 7 Home Premium x64 |
09-06-2010
|
#9 | | Windows 7 Professional x64 |
If I had to blame a single cause, it would be Daemon Tools Lite. Not that the program itself is buggy, but it uses a buggy driver, SPTD.sys, which is a known cause of BSODs.
First, remove Daemon Tools. Then, remove SPTD with this tool: http://www.duplexsecure.com/download...t-v172-x64.exe
In the same BSOD that SPTD showed up as an error, your DeathAdder mouse drivers were directly blamed. See if there is an update for those March 2010 drivers.
I suspect that will do the trick, but if you continue to have BSODs, remove AVG with this tool: http://download.avg.com/filedir/util...removerx64.exe
Replace it with MSE: http://www.microsoft.com/security_essentials
Install these Realtek drivers: Realtek ...Summary of the Dumps: Code:
Built by: 7600.16539.amd64fre.win7_gdr.100226-1909
Debug session time: Wed Sep 1 09:26:51.102 2010 (UTC - 4:00)
System Uptime: 0 days 1:21:14.177
BugCheck 4E, {99, 59b4, 2, 59b2}
Probably caused by : memory_corruption ( nt!MiBadShareCount+4c )
BUGCHECK_STR: 0x4E_99
PROCESS_NAME: SC2.exe
ииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииии
Built by: 7600.16539.amd64fre.win7_gdr.100226-1909
Debug session time: Sun Aug 29 04:08:53.579 2010 (UTC - 4:00)
System Uptime: 0 days 16:23:49.940
BugCheck 1E, {ffffffffc0000047, fffff800030b8ef8, fffffa8008f8c010, 100000000}
*** WARNING: Unable to verify timestamp for danew.sys
*** ERROR: Module load completed but symbols could not be loaded for danew.sys
*** WARNING: Unable to verify timestamp for sptd.sys
*** ERROR: Module load completed but symbols could not be loaded for sptd.sys
Probably caused by : danew.sys ( danew+6da )
BUGCHECK_STR: 0x1E_c0000047
PROCESS_NAME: System
ииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииии
Built by: 7600.16539.amd64fre.win7_gdr.100226-1909
Debug session time: Sat Aug 28 09:57:02.581 2010 (UTC - 4:00)
System Uptime: 0 days 4:37:11.017
BugCheck 4E, {99, 13e77b, 2, aa341}
Probably caused by : memory_corruption ( nt!MiBadShareCount+4c )
BUGCHECK_STR: 0x4E_99
PROCESS_NAME: System
ииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииии
| My System Specs | | System Manufacturer/Model Number Jonathan King OS Windows 7 Professional x64 CPU AMD Athlon Dual Core Processor 4850e overclocked @ 2.90 GHz Motherboard ASRock A780 FullDisplayPort Memory 6.0GB Dual-Channel DDR2 290MHz Crucial Technology Graphics Card EVGA GeForce GTX 480 SuperClocked+ Sound Card Realtek High Definition Audio Onboard Monitor(s) Displays 2x Acer S273HLbmii 27" Screen Resolution 2 x 1920x1080 Keyboard Microsoft Wired Desktop 500 (PS/2) Mouse Microsoft Wired Desktop 500 (USB) PSU Corsair HW Series 750w Modular Case Antec 300 Cooling stock cpu, 120mm hard drive bay fan Hard Drives WD 320GB SATA, Hitachi 1TB SATA, Samsung 1.5TB SATA Internet Speed 25 Mb/s download; 1 Mb/s upload |
09-07-2010
|
#10 | | Windows 7 Home Premium x64 |

Quote: Originally Posted by Jonathan_King If I had to blame a single cause, it would be Daemon Tools Lite. Not that the program itself is buggy, but it uses a buggy driver, SPTD.sys, which is a known cause of BSODs.
First, remove Daemon Tools. Then, remove SPTD with this tool: http://www.duplexsecure.com/download...t-v172-x64.exe
In the same BSOD that SPTD showed up as an error, your DeathAdder mouse drivers were directly blamed. See if there is an update for those March 2010 drivers.
I suspect that will do the trick, but if you continue to have BSODs, remove AVG with this tool: http://download.avg.com/filedir/util...removerx64.exe
Replace it with MSE: http://www.microsoft.com/security_essentials
Install these Realtek drivers: Realtek ...Summary of the Dumps: Code:
Built by: 7600.16539.amd64fre.win7_gdr.100226-1909
Debug session time: Wed Sep 1 09:26:51.102 2010 (UTC - 4:00)
System Uptime: 0 days 1:21:14.177
BugCheck 4E, {99, 59b4, 2, 59b2}
Probably caused by : memory_corruption ( nt!MiBadShareCount+4c )
BUGCHECK_STR: 0x4E_99
PROCESS_NAME: SC2.exe
ииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииии
Built by: 7600.16539.amd64fre.win7_gdr.100226-1909
Debug session time: Sun Aug 29 04:08:53.579 2010 (UTC - 4:00)
System Uptime: 0 days 16:23:49.940
BugCheck 1E, {ffffffffc0000047, fffff800030b8ef8, fffffa8008f8c010, 100000000}
*** WARNING: Unable to verify timestamp for danew.sys
*** ERROR: Module load completed but symbols could not be loaded for danew.sys
*** WARNING: Unable to verify timestamp for sptd.sys
*** ERROR: Module load completed but symbols could not be loaded for sptd.sys
Probably caused by : danew.sys ( danew+6da )
BUGCHECK_STR: 0x1E_c0000047
PROCESS_NAME: System
ииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииии
Built by: 7600.16539.amd64fre.win7_gdr.100226-1909
Debug session time: Sat Aug 28 09:57:02.581 2010 (UTC - 4:00)
System Uptime: 0 days 4:37:11.017
BugCheck 4E, {99, 13e77b, 2, aa341}
Probably caused by : memory_corruption ( nt!MiBadShareCount+4c )
BUGCHECK_STR: 0x4E_99
PROCESS_NAME: System
ииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииии
Would Avast work, since I got a bug that makes Winodws Update + MSE not update? I previously made a post in the Windows Update section, and he belived that my RAM might cause that problem. | My System Specs | | OS Windows 7 Home Premium x64 Memory Corruption problems? All times are GMT -5. The time now is 09:16 PM. |  |