Microsoft (R) Windows Debugger Version 6.12.0002.633 AMD64
Copyright (c) Microsoft Corporation. All rights reserved.
Loading Dump File [C:\Users\Icarus\Downloads\032112-17955-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available
Symbol search path is: http://msdl.microsoft.com/download/symbols
Executable search path is:
Windows 7 Kernel Version 7600 MP (4 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 7600.16917.amd64fre.win7_gdr.111118-2330
Machine Name:
Kernel base = 0xfffff800`03019000 PsLoadedModuleList = 0xfffff800`03255e70
Debug session time: Wed Mar 21 13:15:18.252 2012 (UTC - 4:00)
System Uptime: 0 days 0:14:59.204
Loading Kernel Symbols
...............................................................
................................................................
..................
Loading User Symbols
Loading unloaded module list
.....
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
Use !analyze -v to get detailed debugging information.
BugCheck 4E, {99, 8aeac, 2, 1}
Probably caused by : memory_corruption ( nt!MiBadShareCount+4c )
Followup: MachineOwner
---------
3: kd> !analyze -v
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
PFN_LIST_CORRUPT (4e)
Typically caused by drivers passing bad memory descriptor lists (ie: calling
MmUnlockPages twice with the same list, etc). If a kernel debugger is
available get the stack trace.
Arguments:
Arg1: 0000000000000099, A PTE or PFN is corrupt
Arg2: 000000000008aeac, page frame number
Arg3: 0000000000000002, current page state
Arg4: 0000000000000001, 0
Debugging Details:
------------------
BUGCHECK_STR: 0x4E_99
CUSTOMER_CRASH_COUNT: 1
DEFAULT_BUCKET_ID: VISTA_DRIVER_FAULT
PROCESS_NAME: plugin-contain
CURRENT_IRQL: 2
LAST_CONTROL_TRANSFER: from fffff8000311887c to fffff80003089540
STACK_TEXT:
fffff880`0888b198 fffff800`0311887c : 00000000`0000004e 00000000`00000099 00000000`0008aeac 00000000`00000002 : nt!KeBugCheckEx
fffff880`0888b1a0 fffff800`030fb37b : 00000000`00000000 fffffa80`01977810 0000000f`ffffffff fffff8a0`0a1b1a08 : nt!MiBadShareCount+0x4c
fffff880`0888b1e0 fffff800`030cf441 : 93200000`00000000 fffff680`00071f00 00000000`00000200 000fffff`ffffffff : nt! ?? ::FNODOBFM::`string'+0x320a7
fffff880`0888b260 fffff800`030ca7ae : 00000000`00000001 00000000`00000000 fffffa80`0a493b30 fffffa80`0a493ec8 : nt!MiDecommitPages+0x1a1
fffff880`0888baf0 fffff800`03088793 : ffffffff`ffffffff 00000000`0025e0d0 00000000`0025e0c8 00000000`00000001 : nt!NtFreeVirtualMemory+0x2de
fffff880`0888bbe0 00000000`76f8f89a : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSystemServiceCopyEnd+0x13
00000000`0025e098 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x76f8f89a
STACK_COMMAND: kb
FOLLOWUP_IP:
nt!MiBadShareCount+4c
fffff800`0311887c cc int 3
SYMBOL_STACK_INDEX: 1
SYMBOL_NAME: nt!MiBadShareCount+4c
FOLLOWUP_NAME: MachineOwner
MODULE_NAME: nt
DEBUG_FLR_IMAGE_TIMESTAMP: 4ec7a284
IMAGE_NAME: memory_corruption
FAILURE_BUCKET_ID: X64_0x4E_99_nt!MiBadShareCount+4c
BUCKET_ID: X64_0x4E_99_nt!MiBadShareCount+4c
Followup: MachineOwner
---------
Microsoft (R) Windows Debugger Version 6.12.0002.633 AMD64
Copyright (c) Microsoft Corporation. All rights reserved.
Loading Dump File [C:\Users\Icarus\Downloads\031112-35802-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available
Symbol search path is: http://msdl.microsoft.com/download/symbols
Executable search path is:
Windows 7 Kernel Version 7600 MP (4 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 7600.16841.amd64fre.win7_gdr.110622-1503
Machine Name:
Kernel base = 0xfffff800`0301d000 PsLoadedModuleList = 0xfffff800`0325ae70
Debug session time: Sun Mar 11 08:36:05.777 2012 (UTC - 4:00)
System Uptime: 0 days 0:40:04.729
Loading Kernel Symbols
...............................................................
................................................................
..................
Loading User Symbols
Loading unloaded module list
.....
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
Use !analyze -v to get detailed debugging information.
BugCheck 1A, {8887, fffffa800182c010, fffffa800002be90, 205}
Probably caused by : hardware_ram ( ZEROED_PAGE_CORRUPTED )
Followup: MachineOwner
---------
1: kd> !analyze -v
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
MEMORY_MANAGEMENT (1a)
# Any other values for parameter 1 must be individually examined.
Arguments:
Arg1: 0000000000008887, The subtype of the bugcheck.
Arg2: fffffa800182c010
Arg3: fffffa800002be90
Arg4: 0000000000000205
Debugging Details:
------------------
BUGCHECK_STR: 0x1a_8887
CUSTOMER_CRASH_COUNT: 1
DEFAULT_BUCKET_ID: VISTA_DRIVER_FAULT
PROCESS_NAME: MsMpEng.exe
CURRENT_IRQL: 2
STACK_TEXT:
fffff880`068228d8 fffff800`030ae764 : 00000000`0000001a 00000000`00008887 fffffa80`0182c010 fffffa80`0002be90 : nt!KeBugCheckEx
fffff880`068228e0 fffff800`030a99dc : fffffa80`01578270 fffffa80`00000000 00000000`01578270 fffffa80`0182c010 : nt!MiUnlinkPageFromLockedList+0x2e4
fffff880`06822970 fffff800`030a7593 : ffffffff`ffffff00 00000000`0251fff8 00000000`00000000 ffffffff`00000000 : nt!MiDispatchFault+0x7ac
fffff880`06822a80 fffff800`0308b6ae : 00000000`00000000 00000000`75112828 00000000`00000001 00000000`00001000 : nt!MmAccessFault+0x343
fffff880`06822be0 000007fe`ff6a117a : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiPageFault+0x16e
00000000`021ad808 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x7fe`ff6a117a
STACK_COMMAND: kb
SYMBOL_NAME: ZEROED_PAGE_CORRUPTED
FOLLOWUP_NAME: MachineOwner
MODULE_NAME: hardware
IMAGE_NAME: hardware_ram
DEBUG_FLR_IMAGE_TIMESTAMP: 0
FAILURE_BUCKET_ID: X64_0x1a_8887_ZEROED_PAGE_CORRUPTED
BUCKET_ID: X64_0x1a_8887_ZEROED_PAGE_CORRUPTED
Followup: MachineOwner
---------