Gday all.
Was wondering if some enlightened individual could interpret a dump file for me please?
Getting random reboots (haven't changed hardware recently, no specific action causes them etc) and its rather annoying to say the least.
Used windbg to analyse memory.dmp but im a little out of my depth.
Will paste below but from what I can see, theres a problem with the NVidia driver / some bloatware that comes with it - NvBackend.exe
Anyway, opinions and help appreciated.
Please and thanks.
Microsoft (R) Windows Debugger Version 6.12.0002.633 AMD64
Copyright (c) Microsoft Corporation. All rights reserved.
Loading Dump File [C:\Windows\MEMORY.DMP]
Kernel Summary Dump File: Only kernel address space is available
Symbol search path is: srv*c:\symbols*http://msdl.microsoft.com/download/symbols
Executable search path is:
Windows 7 Kernel Version 7601 (Service Pack 1) MP (4 procs) Free x64
Kernel base = 0xfffff800`02c63000 PsLoadedModuleList = 0xfffff800`02ea6890
Debug session time: Sat Feb 7 18:27:12.964 2015 (UTC + 11:00)
System Uptime: 0 days 0:34:18.388
Loading Kernel Symbols
...............................................................
................................................................
............................
Loading User Symbols
PEB is paged out (Peb.Ldr = 00000000`7efdf018). Type ".hh dbgerr001" for details
Loading unloaded module list
.....
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
Use !analyze -v to get detailed debugging information.
BugCheck 19, {20, fffff8a0035857d0, fffff8a003585a30, 5260104}
Page 1b5ff9 not present in the dump file. Type ".hh dbgerr004" for details
Probably caused by : dxgkrnl.sys ( dxgkrnl!DxgkEscape+c3f )
Followup: MachineOwner
---------
3: kd> !analyze -v
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
BAD_POOL_HEADER (19)
The pool is already corrupt at the time of the current request.
This may or may not be due to the caller.
The internal pool links must be walked to figure out a possible cause of
the problem, and then special pool applied to the suspect tags or the driver
verifier to a suspect driver.
Arguments:
Arg1: 0000000000000020, a pool block header size is corrupt.
Arg2: fffff8a0035857d0, The pool entry we were looking for within the page.
Arg3: fffff8a003585a30, The next pool entry.
Arg4: 0000000005260104, (reserved)
Debugging Details:
------------------
BUGCHECK_STR: 0x19_20
POOL_ADDRESS: fffff8a0035857d0 Paged pool
DEFAULT_BUCKET_ID: VISTA_DRIVER_FAULT
PROCESS_NAME: NvBackend.exe
CURRENT_IRQL: 0
LAST_CONTROL_TRANSFER: from fffff80002e0bcae to fffff80002cd9e80
STACK_TEXT:
fffff880`09f867b8 fffff800`02e0bcae : 00000000`00000019 00000000`00000020 fffff8a0`035857d0 fffff8a0`03585a30 : nt!KeBugCheckEx
fffff880`09f867c0 fffff880`06b13523 : fffff8a0`035857e0 00000000`00000000 fffff880`4b677844 00000000`00000003 : nt!ExDeferredFreePool+0x12da
fffff880`09f86870 fffff960`0022a016 : 00000000`3b01100c fffffa80`09069b50 00000000`7efa4000 00000000`00000020 : dxgkrnl!DxgkEscape+0xc3f
fffff880`09f86bf0 fffff800`02cd9113 : fffffa80`09069b50 fffff880`00000000 00000000`00000000 00000000`00000000 : win32k!NtGdiDdDDIEscape+0x12
fffff880`09f86c20 00000000`7535148a : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSystemServiceCopyEnd+0x13
00000000`0296e688 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x7535148a
STACK_COMMAND: kb
FOLLOWUP_IP:
dxgkrnl!DxgkEscape+c3f
fffff880`06b13523 488d8c24a0000000 lea rcx,[rsp+0A0h]
SYMBOL_STACK_INDEX: 2
SYMBOL_NAME: dxgkrnl!DxgkEscape+c3f
FOLLOWUP_NAME: MachineOwner
MODULE_NAME: dxgkrnl
IMAGE_NAME: dxgkrnl.sys
DEBUG_FLR_IMAGE_TIMESTAMP: 539e411c
FAILURE_BUCKET_ID: X64_0x19_20_dxgkrnl!DxgkEscape+c3f
BUCKET_ID: X64_0x19_20_dxgkrnl!DxgkEscape+c3f
Followup: MachineOwner
---------
Was wondering if some enlightened individual could interpret a dump file for me please?
Getting random reboots (haven't changed hardware recently, no specific action causes them etc) and its rather annoying to say the least.
Used windbg to analyse memory.dmp but im a little out of my depth.
Will paste below but from what I can see, theres a problem with the NVidia driver / some bloatware that comes with it - NvBackend.exe
Anyway, opinions and help appreciated.
Please and thanks.
Microsoft (R) Windows Debugger Version 6.12.0002.633 AMD64
Copyright (c) Microsoft Corporation. All rights reserved.
Loading Dump File [C:\Windows\MEMORY.DMP]
Kernel Summary Dump File: Only kernel address space is available
Symbol search path is: srv*c:\symbols*http://msdl.microsoft.com/download/symbols
Executable search path is:
Windows 7 Kernel Version 7601 (Service Pack 1) MP (4 procs) Free x64
Kernel base = 0xfffff800`02c63000 PsLoadedModuleList = 0xfffff800`02ea6890
Debug session time: Sat Feb 7 18:27:12.964 2015 (UTC + 11:00)
System Uptime: 0 days 0:34:18.388
Loading Kernel Symbols
...............................................................
................................................................
............................
Loading User Symbols
PEB is paged out (Peb.Ldr = 00000000`7efdf018). Type ".hh dbgerr001" for details
Loading unloaded module list
.....
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
Use !analyze -v to get detailed debugging information.
BugCheck 19, {20, fffff8a0035857d0, fffff8a003585a30, 5260104}
Page 1b5ff9 not present in the dump file. Type ".hh dbgerr004" for details
Probably caused by : dxgkrnl.sys ( dxgkrnl!DxgkEscape+c3f )
Followup: MachineOwner
---------
3: kd> !analyze -v
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
BAD_POOL_HEADER (19)
The pool is already corrupt at the time of the current request.
This may or may not be due to the caller.
The internal pool links must be walked to figure out a possible cause of
the problem, and then special pool applied to the suspect tags or the driver
verifier to a suspect driver.
Arguments:
Arg1: 0000000000000020, a pool block header size is corrupt.
Arg2: fffff8a0035857d0, The pool entry we were looking for within the page.
Arg3: fffff8a003585a30, The next pool entry.
Arg4: 0000000005260104, (reserved)
Debugging Details:
------------------
BUGCHECK_STR: 0x19_20
POOL_ADDRESS: fffff8a0035857d0 Paged pool
DEFAULT_BUCKET_ID: VISTA_DRIVER_FAULT
PROCESS_NAME: NvBackend.exe
CURRENT_IRQL: 0
LAST_CONTROL_TRANSFER: from fffff80002e0bcae to fffff80002cd9e80
STACK_TEXT:
fffff880`09f867b8 fffff800`02e0bcae : 00000000`00000019 00000000`00000020 fffff8a0`035857d0 fffff8a0`03585a30 : nt!KeBugCheckEx
fffff880`09f867c0 fffff880`06b13523 : fffff8a0`035857e0 00000000`00000000 fffff880`4b677844 00000000`00000003 : nt!ExDeferredFreePool+0x12da
fffff880`09f86870 fffff960`0022a016 : 00000000`3b01100c fffffa80`09069b50 00000000`7efa4000 00000000`00000020 : dxgkrnl!DxgkEscape+0xc3f
fffff880`09f86bf0 fffff800`02cd9113 : fffffa80`09069b50 fffff880`00000000 00000000`00000000 00000000`00000000 : win32k!NtGdiDdDDIEscape+0x12
fffff880`09f86c20 00000000`7535148a : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSystemServiceCopyEnd+0x13
00000000`0296e688 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x7535148a
STACK_COMMAND: kb
FOLLOWUP_IP:
dxgkrnl!DxgkEscape+c3f
fffff880`06b13523 488d8c24a0000000 lea rcx,[rsp+0A0h]
SYMBOL_STACK_INDEX: 2
SYMBOL_NAME: dxgkrnl!DxgkEscape+c3f
FOLLOWUP_NAME: MachineOwner
MODULE_NAME: dxgkrnl
IMAGE_NAME: dxgkrnl.sys
DEBUG_FLR_IMAGE_TIMESTAMP: 539e411c
FAILURE_BUCKET_ID: X64_0x19_20_dxgkrnl!DxgkEscape+c3f
BUCKET_ID: X64_0x19_20_dxgkrnl!DxgkEscape+c3f
Followup: MachineOwner
---------
My Computer
At a glance
Windows 7 Ultimate x64Intel Core i5 760 @ 2.80 GHz8 gigNVIDIA GeForce 8400 GS
- Computer type
- PC/Desktop
- OS
- Windows 7 Ultimate x64
- CPU
- Intel Core i5 760 @ 2.80 GHz
- Memory
- 8 gig
- Graphics Card(s)
- NVIDIA GeForce 8400 GS