C
ChrisB
Can anyone who has looked at a memory dump following a
crash make sense of this.
Is it a physical memory fault i.e hardware or is it
misleading?
Here is the dump
***********************************************************
*****
**
** Windows 2000 Crash Dump Analysis
**
***********************************************************
*****
*
Filename . . . . . . .memory.dmp
Signature. . . . . . .PAGE
ValidDump. . . . . . .DUMP
MajorVersion . . . . .free system
MinorVersion . . . . .2195
DirectoryTableBase . .0x00030000
PfnDataBase. . . . . .0x8909a000
PsLoadedModuleList . .0x8046e8f0
PsActiveProcessHead. .0x8046e728
MachineImageType . . .i386
NumberProcessors . . .1
BugCheckCode . . . . .0x0000001e
BugCheckParameter1 . .0xc0000005
BugCheckParameter2 . .0x80437a28
BugCheckParameter3 . .0x00000000
BugCheckParameter4 . .0x00000006
ExceptionCode. . . . .0x80000003
ExceptionFlags . . . .0x00000001
ExceptionAddress . . .0x80455def
***********************************************************
*****
** Symbol File Load Log
***********************************************************
*****
Error: memory read failed addr=0x89099248
***********************************************************
*****
** !drivers
***********************************************************
*****
Couldn't get offset of PsLoadedModuleListHead
***********************************************************
*****
** !locks -v -d
***********************************************************
*****
**** DUMP OF ALL RESOURCE OBJECTS ****
00000000: Unable to get value of ExpSystemResourcesList
***********************************************************
*****
** !vm
***********************************************************
*****
*** Virtual Memory Usage ***
unable to get MmNumberOfPhysicalPages
Physical Memory: 0 ( 0 Kb)
unable to get MmNumberOfPagingFiles
************ NO PAGING FILE *********************
00000000: Unable to get paged pool info 01003860
unable to get MmSizeOfPagedPoolInBytes
unable to get MmMaximumNonPagedPoolInBytes
unable to get nt!MmAllocatedNonPagedPool
unable to get MmTotalCommitLimit
unable to get MmTotalCommittedPages
unable to get MmSharedCommit
unable to get MmDriverCommit
unable to get MmProcessCommit
unable to get MmPagedPoolCommit
unable to get MmZeroedPageListHead
unable to get MmFreePageListHead
unable to get MmStandbyPageListHead
unable to get MmModifiedPageListHead
unable to get MmModifiedNoWritePageListHead
unable to get MmAvailablePages
unable to get MmResidentAvailablePages
unable to get nt!MmExtendedCommit
unable to get nt!MmPageFileFullExtendPages
unable to get nt!MmPageFileFullExtendCount
unable to get nt!MmTotalFreeSystemPtes
unable to get nt!MmSystemLockPagesCount
unable to get nt!MiSpecialPagesNonPaged
unable to get nt!MiSpecialPagesNonPagedMaximum
00000004: Unable to get number of free nonpaged PTEs
unable to get nt!MmSpecialPagesInUse
Available Pages: 0 ( 0 Kb)
ResAvail Pages: 0 ( 0 Kb)
********** Running out of physical memory
**********
Locked IO Pages: 0 ( 0 Kb)
Free NP PTEs: 0 ( 0 Kb)
Free Special NP: 0 ( 0 Kb)
Modified Pages: 0 ( 0 Kb)
00000000: Unable to get pool descriptor
***********************************************************
*****
** !errlog
***********************************************************
*****
Can't find error log list head
***********************************************************
*****
** !irpzone full
***********************************************************
*****
irpzone is no longer supported. Use irpfind to search
nonpaged pool for active Irps
***********************************************************
*****
** !process 0 0
***********************************************************
*****
**** NT ACTIVE PROCESS DUMP ****
unable to get MmUserProbeAddress
Unable to read _EPROCESS at 0
***********************************************************
*****
** !process 0 7
***********************************************************
*****
**** NT ACTIVE PROCESS DUMP ****
unable to get MmUserProbeAddress
Unable to read _EPROCESS at 0
***********************************************************
*****
** !process
***********************************************************
*****
Unable to read PCR for Processor 0
Unable to get current process pointer.
***********************************************************
*****
** !thread
***********************************************************
*****
Unable to read PCR for Processor 0
unable to get MmUserProbeAddress
00000000: Unable to get thread contents
***********************************************************
*****
** Register Dump For Processor #0
***********************************************************
*****
eax=00079348 ebx=4b402a12 ecx=00070000 edx=0006fbe0
esi=0006fba0 edi=4b468180
eip=00000597 esp=77fcc4e0 ebp=00070178 iopl=0 nv
up di pl nz na pe nc
cs=77fcc603 ss=0000 ds=390000 es=72a09041 fs=6fbc0
gs=ffffffff efl=77fcc4c9
cr0=0006fdac cr2=00000000 cr3=0006fe08 dr0=7c5739a8
dr1=ffffffff dr2=0006fe18
dr3=01009470 dr6=00000001 dr7=01003860 cr4=7c57e597
gdtr=00000000 gdtl=0007 idtr=00000000 idtl=0007
tr=fdec ldtr=0006
***********************************************************
*****
** Stack Trace
***********************************************************
*****
ChildEBP RetAddr Args to Child
7c5d0794 00000000 00000000 00000000 00000000 0x00290290
0006FA5C 00 00 add byte ptr [eax],al
0006FA5C 00 00 add byte ptr [eax],al
0006FA5C 00 00 add byte ptr [eax],al
0006FA5C 00 00 add byte ptr [eax],al
0006FA5C 00 00 add byte ptr [eax],al
0006FA5C 00 00 add byte ptr [eax],al
0006FA5C 00 00 add byte ptr [eax],al
0006FA5C 00 00 add byte ptr [eax],al
0006FA5C 00 00 add byte ptr [eax],al
0006FA5C 00 00 add byte ptr [eax],al
0006FA5C 00 00 add byte ptr [eax],al
0006FA5C 00 00 add byte ptr [eax],al
0006FA5C 00 00 add byte ptr [eax],al
0006FA5C 00 00 add byte ptr [eax],al
0006FA5C 00 00 add byte ptr [eax],al
0006FA5C 00 00 add byte ptr [eax],al
0006FA5C 00 00 add byte ptr [eax],al
0006FA5C 00 00 add byte ptr [eax],al
0006FA5C 00 00 add byte ptr [eax],al
0006FA5C 00 00 add byte ptr [eax],al
0006FA5C 00 00 add byte ptr [eax],al
0006FA5C 00 00 add byte ptr [eax],al
0006FA5C 00 00 add byte ptr [eax],al
0006FA5C 00 00 add byte ptr [eax],al
0006FA5C 00 00 add byte ptr [eax],al
0006FA5C 00 00 add byte ptr [eax],al
0006FA5C 00 00 add byte ptr [eax],al
0006FA5C 00 00 add byte ptr [eax],al
0006FA5C 00 00 add byte ptr [eax],al
0006FA5C 00 00 add byte ptr [eax],al
0006FA5C 00 00 add byte ptr [eax],al
0006FA5C 00 00 add byte ptr [eax],al
0006FA5C 00 00 add byte ptr [eax],al
0006FA5C 00 00 add byte ptr [eax],al
0006FA5C 00 00 add byte ptr [eax],al
0006FA5C 00 00 add byte ptr [eax],al
0006FA5C 00 00 add byte ptr [eax],al
0006FA5C 00 00 add byte ptr [eax],al
0006FA5C 00 00 add byte ptr [eax],al
0006FA5C 00 00 add byte ptr [eax],al
--->0006FA5C 00 00 add byte ptr [eax],al
0006FA5C 00 00 add byte ptr [eax],al
0006FA5C 00 00 add byte ptr [eax],al
0006FA5C 00 00 add byte ptr [eax],al
0006FA5C 00 00 add byte ptr [eax],al
0006FA5C 00 00 add byte ptr [eax],al
0006FA5C 00 00 add byte ptr [eax],al
0006FA5C 00 00 add byte ptr [eax],al
0006FA5C 00 00 add byte ptr [eax],al
0006FA5C 00 00 add byte ptr [eax],al
0006FA5C 00 00 add byte ptr [eax],al
0006FA5C 00 00 add byte ptr [eax],al
0006FA5C 00 00 add byte ptr [eax],al
0006FA5C 00 00 add byte ptr [eax],al
0006FA5C 00 00 add byte ptr [eax],al
0006FA5C 00 00 add byte ptr [eax],al
0006FA5C 00 00 add byte ptr [eax],al
0006FA5C 00 00 add byte ptr [eax],al
0006FA5C 00 00 add byte ptr [eax],al
0006FA5C 00 00 add byte ptr [eax],al
0006FA5C 00 00 add byte ptr [eax],al
0006FA5C 00 00 add byte ptr [eax],al
0006FA5C 00 00 add byte ptr [eax],al
0006FA5C 00 00 add byte ptr [eax],al
0006FA5C 00 00 add byte ptr [eax],al
0006FA5C 00 00 add byte ptr [eax],al
0006FA5C 00 00 add byte ptr [eax],al
0006FA5C 00 00 add byte ptr [eax],al
0006FA5C 00 00 add byte ptr [eax],al
0006FA5C 00 00 add byte ptr [eax],al
0006FA5C 00 00 add byte ptr [eax],al
0006FA5C 00 00 add byte ptr [eax],al
0006FA5C 00 00 add byte ptr [eax],al
0006FA5C 00 00 add byte ptr [eax],al
0006FA5C 00 00 add byte ptr [eax],al
0006FA5C 00 00 add byte ptr [eax],al
0006FA5C 00 00 add byte ptr [eax],al
0006FA5C 00 00 add byte ptr [eax],al
0006FA5C 00 00 add byte ptr [eax],al
0006FA5C 00 00 add byte ptr [eax],al
Chris
crash make sense of this.
Is it a physical memory fault i.e hardware or is it
misleading?
Here is the dump
***********************************************************
*****
**
** Windows 2000 Crash Dump Analysis
**
***********************************************************
*****
*
Filename . . . . . . .memory.dmp
Signature. . . . . . .PAGE
ValidDump. . . . . . .DUMP
MajorVersion . . . . .free system
MinorVersion . . . . .2195
DirectoryTableBase . .0x00030000
PfnDataBase. . . . . .0x8909a000
PsLoadedModuleList . .0x8046e8f0
PsActiveProcessHead. .0x8046e728
MachineImageType . . .i386
NumberProcessors . . .1
BugCheckCode . . . . .0x0000001e
BugCheckParameter1 . .0xc0000005
BugCheckParameter2 . .0x80437a28
BugCheckParameter3 . .0x00000000
BugCheckParameter4 . .0x00000006
ExceptionCode. . . . .0x80000003
ExceptionFlags . . . .0x00000001
ExceptionAddress . . .0x80455def
***********************************************************
*****
** Symbol File Load Log
***********************************************************
*****
Error: memory read failed addr=0x89099248
***********************************************************
*****
** !drivers
***********************************************************
*****
Couldn't get offset of PsLoadedModuleListHead
***********************************************************
*****
** !locks -v -d
***********************************************************
*****
**** DUMP OF ALL RESOURCE OBJECTS ****
00000000: Unable to get value of ExpSystemResourcesList
***********************************************************
*****
** !vm
***********************************************************
*****
*** Virtual Memory Usage ***
unable to get MmNumberOfPhysicalPages
Physical Memory: 0 ( 0 Kb)
unable to get MmNumberOfPagingFiles
************ NO PAGING FILE *********************
00000000: Unable to get paged pool info 01003860
unable to get MmSizeOfPagedPoolInBytes
unable to get MmMaximumNonPagedPoolInBytes
unable to get nt!MmAllocatedNonPagedPool
unable to get MmTotalCommitLimit
unable to get MmTotalCommittedPages
unable to get MmSharedCommit
unable to get MmDriverCommit
unable to get MmProcessCommit
unable to get MmPagedPoolCommit
unable to get MmZeroedPageListHead
unable to get MmFreePageListHead
unable to get MmStandbyPageListHead
unable to get MmModifiedPageListHead
unable to get MmModifiedNoWritePageListHead
unable to get MmAvailablePages
unable to get MmResidentAvailablePages
unable to get nt!MmExtendedCommit
unable to get nt!MmPageFileFullExtendPages
unable to get nt!MmPageFileFullExtendCount
unable to get nt!MmTotalFreeSystemPtes
unable to get nt!MmSystemLockPagesCount
unable to get nt!MiSpecialPagesNonPaged
unable to get nt!MiSpecialPagesNonPagedMaximum
00000004: Unable to get number of free nonpaged PTEs
unable to get nt!MmSpecialPagesInUse
Available Pages: 0 ( 0 Kb)
ResAvail Pages: 0 ( 0 Kb)
********** Running out of physical memory
**********
Locked IO Pages: 0 ( 0 Kb)
Free NP PTEs: 0 ( 0 Kb)
Free Special NP: 0 ( 0 Kb)
Modified Pages: 0 ( 0 Kb)
00000000: Unable to get pool descriptor
***********************************************************
*****
** !errlog
***********************************************************
*****
Can't find error log list head
***********************************************************
*****
** !irpzone full
***********************************************************
*****
irpzone is no longer supported. Use irpfind to search
nonpaged pool for active Irps
***********************************************************
*****
** !process 0 0
***********************************************************
*****
**** NT ACTIVE PROCESS DUMP ****
unable to get MmUserProbeAddress
Unable to read _EPROCESS at 0
***********************************************************
*****
** !process 0 7
***********************************************************
*****
**** NT ACTIVE PROCESS DUMP ****
unable to get MmUserProbeAddress
Unable to read _EPROCESS at 0
***********************************************************
*****
** !process
***********************************************************
*****
Unable to read PCR for Processor 0
Unable to get current process pointer.
***********************************************************
*****
** !thread
***********************************************************
*****
Unable to read PCR for Processor 0
unable to get MmUserProbeAddress
00000000: Unable to get thread contents
***********************************************************
*****
** Register Dump For Processor #0
***********************************************************
*****
eax=00079348 ebx=4b402a12 ecx=00070000 edx=0006fbe0
esi=0006fba0 edi=4b468180
eip=00000597 esp=77fcc4e0 ebp=00070178 iopl=0 nv
up di pl nz na pe nc
cs=77fcc603 ss=0000 ds=390000 es=72a09041 fs=6fbc0
gs=ffffffff efl=77fcc4c9
cr0=0006fdac cr2=00000000 cr3=0006fe08 dr0=7c5739a8
dr1=ffffffff dr2=0006fe18
dr3=01009470 dr6=00000001 dr7=01003860 cr4=7c57e597
gdtr=00000000 gdtl=0007 idtr=00000000 idtl=0007
tr=fdec ldtr=0006
***********************************************************
*****
** Stack Trace
***********************************************************
*****
ChildEBP RetAddr Args to Child
7c5d0794 00000000 00000000 00000000 00000000 0x00290290
0006FA5C 00 00 add byte ptr [eax],al
0006FA5C 00 00 add byte ptr [eax],al
0006FA5C 00 00 add byte ptr [eax],al
0006FA5C 00 00 add byte ptr [eax],al
0006FA5C 00 00 add byte ptr [eax],al
0006FA5C 00 00 add byte ptr [eax],al
0006FA5C 00 00 add byte ptr [eax],al
0006FA5C 00 00 add byte ptr [eax],al
0006FA5C 00 00 add byte ptr [eax],al
0006FA5C 00 00 add byte ptr [eax],al
0006FA5C 00 00 add byte ptr [eax],al
0006FA5C 00 00 add byte ptr [eax],al
0006FA5C 00 00 add byte ptr [eax],al
0006FA5C 00 00 add byte ptr [eax],al
0006FA5C 00 00 add byte ptr [eax],al
0006FA5C 00 00 add byte ptr [eax],al
0006FA5C 00 00 add byte ptr [eax],al
0006FA5C 00 00 add byte ptr [eax],al
0006FA5C 00 00 add byte ptr [eax],al
0006FA5C 00 00 add byte ptr [eax],al
0006FA5C 00 00 add byte ptr [eax],al
0006FA5C 00 00 add byte ptr [eax],al
0006FA5C 00 00 add byte ptr [eax],al
0006FA5C 00 00 add byte ptr [eax],al
0006FA5C 00 00 add byte ptr [eax],al
0006FA5C 00 00 add byte ptr [eax],al
0006FA5C 00 00 add byte ptr [eax],al
0006FA5C 00 00 add byte ptr [eax],al
0006FA5C 00 00 add byte ptr [eax],al
0006FA5C 00 00 add byte ptr [eax],al
0006FA5C 00 00 add byte ptr [eax],al
0006FA5C 00 00 add byte ptr [eax],al
0006FA5C 00 00 add byte ptr [eax],al
0006FA5C 00 00 add byte ptr [eax],al
0006FA5C 00 00 add byte ptr [eax],al
0006FA5C 00 00 add byte ptr [eax],al
0006FA5C 00 00 add byte ptr [eax],al
0006FA5C 00 00 add byte ptr [eax],al
0006FA5C 00 00 add byte ptr [eax],al
0006FA5C 00 00 add byte ptr [eax],al
--->0006FA5C 00 00 add byte ptr [eax],al
0006FA5C 00 00 add byte ptr [eax],al
0006FA5C 00 00 add byte ptr [eax],al
0006FA5C 00 00 add byte ptr [eax],al
0006FA5C 00 00 add byte ptr [eax],al
0006FA5C 00 00 add byte ptr [eax],al
0006FA5C 00 00 add byte ptr [eax],al
0006FA5C 00 00 add byte ptr [eax],al
0006FA5C 00 00 add byte ptr [eax],al
0006FA5C 00 00 add byte ptr [eax],al
0006FA5C 00 00 add byte ptr [eax],al
0006FA5C 00 00 add byte ptr [eax],al
0006FA5C 00 00 add byte ptr [eax],al
0006FA5C 00 00 add byte ptr [eax],al
0006FA5C 00 00 add byte ptr [eax],al
0006FA5C 00 00 add byte ptr [eax],al
0006FA5C 00 00 add byte ptr [eax],al
0006FA5C 00 00 add byte ptr [eax],al
0006FA5C 00 00 add byte ptr [eax],al
0006FA5C 00 00 add byte ptr [eax],al
0006FA5C 00 00 add byte ptr [eax],al
0006FA5C 00 00 add byte ptr [eax],al
0006FA5C 00 00 add byte ptr [eax],al
0006FA5C 00 00 add byte ptr [eax],al
0006FA5C 00 00 add byte ptr [eax],al
0006FA5C 00 00 add byte ptr [eax],al
0006FA5C 00 00 add byte ptr [eax],al
0006FA5C 00 00 add byte ptr [eax],al
0006FA5C 00 00 add byte ptr [eax],al
0006FA5C 00 00 add byte ptr [eax],al
0006FA5C 00 00 add byte ptr [eax],al
0006FA5C 00 00 add byte ptr [eax],al
0006FA5C 00 00 add byte ptr [eax],al
0006FA5C 00 00 add byte ptr [eax],al
0006FA5C 00 00 add byte ptr [eax],al
0006FA5C 00 00 add byte ptr [eax],al
0006FA5C 00 00 add byte ptr [eax],al
0006FA5C 00 00 add byte ptr [eax],al
0006FA5C 00 00 add byte ptr [eax],al
0006FA5C 00 00 add byte ptr [eax],al
Chris