Memory.dmp

C

ChrisB

Can anyone who has looked at a memory dump following a
crash make sense of this.

Is it a physical memory fault i.e hardware or is it
misleading?

Here is the dump
***********************************************************
*****
**
** Windows 2000 Crash Dump Analysis
**
***********************************************************
*****
*
Filename . . . . . . .memory.dmp
Signature. . . . . . .PAGE
ValidDump. . . . . . .DUMP
MajorVersion . . . . .free system
MinorVersion . . . . .2195
DirectoryTableBase . .0x00030000
PfnDataBase. . . . . .0x8909a000
PsLoadedModuleList . .0x8046e8f0
PsActiveProcessHead. .0x8046e728
MachineImageType . . .i386
NumberProcessors . . .1
BugCheckCode . . . . .0x0000001e
BugCheckParameter1 . .0xc0000005
BugCheckParameter2 . .0x80437a28
BugCheckParameter3 . .0x00000000
BugCheckParameter4 . .0x00000006

ExceptionCode. . . . .0x80000003
ExceptionFlags . . . .0x00000001
ExceptionAddress . . .0x80455def



***********************************************************
*****
** Symbol File Load Log
***********************************************************
*****

Error: memory read failed addr=0x89099248


***********************************************************
*****
** !drivers
***********************************************************
*****

Couldn't get offset of PsLoadedModuleListHead

***********************************************************
*****
** !locks -v -d
***********************************************************
*****

**** DUMP OF ALL RESOURCE OBJECTS ****
00000000: Unable to get value of ExpSystemResourcesList

***********************************************************
*****
** !vm
***********************************************************
*****


*** Virtual Memory Usage ***
unable to get MmNumberOfPhysicalPages
Physical Memory: 0 ( 0 Kb)
unable to get MmNumberOfPagingFiles

************ NO PAGING FILE *********************

00000000: Unable to get paged pool info 01003860
unable to get MmSizeOfPagedPoolInBytes
unable to get MmMaximumNonPagedPoolInBytes
unable to get nt!MmAllocatedNonPagedPool
unable to get MmTotalCommitLimit
unable to get MmTotalCommittedPages
unable to get MmSharedCommit
unable to get MmDriverCommit
unable to get MmProcessCommit
unable to get MmPagedPoolCommit
unable to get MmZeroedPageListHead
unable to get MmFreePageListHead
unable to get MmStandbyPageListHead
unable to get MmModifiedPageListHead
unable to get MmModifiedNoWritePageListHead
unable to get MmAvailablePages
unable to get MmResidentAvailablePages
unable to get nt!MmExtendedCommit
unable to get nt!MmPageFileFullExtendPages
unable to get nt!MmPageFileFullExtendCount
unable to get nt!MmTotalFreeSystemPtes
unable to get nt!MmSystemLockPagesCount
unable to get nt!MiSpecialPagesNonPaged
unable to get nt!MiSpecialPagesNonPagedMaximum
00000004: Unable to get number of free nonpaged PTEs
unable to get nt!MmSpecialPagesInUse
Available Pages: 0 ( 0 Kb)
ResAvail Pages: 0 ( 0 Kb)

********** Running out of physical memory
**********

Locked IO Pages: 0 ( 0 Kb)
Free NP PTEs: 0 ( 0 Kb)
Free Special NP: 0 ( 0 Kb)

Modified Pages: 0 ( 0 Kb)
00000000: Unable to get pool descriptor

***********************************************************
*****
** !errlog
***********************************************************
*****

Can't find error log list head

***********************************************************
*****
** !irpzone full
***********************************************************
*****

irpzone is no longer supported. Use irpfind to search
nonpaged pool for active Irps

***********************************************************
*****
** !process 0 0
***********************************************************
*****

**** NT ACTIVE PROCESS DUMP ****
unable to get MmUserProbeAddress
Unable to read _EPROCESS at 0

***********************************************************
*****
** !process 0 7
***********************************************************
*****

**** NT ACTIVE PROCESS DUMP ****
unable to get MmUserProbeAddress
Unable to read _EPROCESS at 0

***********************************************************
*****
** !process
***********************************************************
*****

Unable to read PCR for Processor 0
Unable to get current process pointer.

***********************************************************
*****
** !thread
***********************************************************
*****

Unable to read PCR for Processor 0
unable to get MmUserProbeAddress
00000000: Unable to get thread contents

***********************************************************
*****
** Register Dump For Processor #0
***********************************************************
*****

eax=00079348 ebx=4b402a12 ecx=00070000 edx=0006fbe0
esi=0006fba0 edi=4b468180
eip=00000597 esp=77fcc4e0 ebp=00070178 iopl=0 nv
up di pl nz na pe nc
cs=77fcc603 ss=0000 ds=390000 es=72a09041 fs=6fbc0
gs=ffffffff efl=77fcc4c9
cr0=0006fdac cr2=00000000 cr3=0006fe08 dr0=7c5739a8
dr1=ffffffff dr2=0006fe18
dr3=01009470 dr6=00000001 dr7=01003860 cr4=7c57e597
gdtr=00000000 gdtl=0007 idtr=00000000 idtl=0007
tr=fdec ldtr=0006


***********************************************************
*****
** Stack Trace
***********************************************************
*****

ChildEBP RetAddr Args to Child
7c5d0794 00000000 00000000 00000000 00000000 0x00290290

0006FA5C 00 00 add byte ptr [eax],al
0006FA5C 00 00 add byte ptr [eax],al
0006FA5C 00 00 add byte ptr [eax],al
0006FA5C 00 00 add byte ptr [eax],al
0006FA5C 00 00 add byte ptr [eax],al
0006FA5C 00 00 add byte ptr [eax],al
0006FA5C 00 00 add byte ptr [eax],al
0006FA5C 00 00 add byte ptr [eax],al
0006FA5C 00 00 add byte ptr [eax],al
0006FA5C 00 00 add byte ptr [eax],al
0006FA5C 00 00 add byte ptr [eax],al
0006FA5C 00 00 add byte ptr [eax],al
0006FA5C 00 00 add byte ptr [eax],al
0006FA5C 00 00 add byte ptr [eax],al
0006FA5C 00 00 add byte ptr [eax],al
0006FA5C 00 00 add byte ptr [eax],al
0006FA5C 00 00 add byte ptr [eax],al
0006FA5C 00 00 add byte ptr [eax],al
0006FA5C 00 00 add byte ptr [eax],al
0006FA5C 00 00 add byte ptr [eax],al
0006FA5C 00 00 add byte ptr [eax],al
0006FA5C 00 00 add byte ptr [eax],al
0006FA5C 00 00 add byte ptr [eax],al
0006FA5C 00 00 add byte ptr [eax],al
0006FA5C 00 00 add byte ptr [eax],al
0006FA5C 00 00 add byte ptr [eax],al
0006FA5C 00 00 add byte ptr [eax],al
0006FA5C 00 00 add byte ptr [eax],al
0006FA5C 00 00 add byte ptr [eax],al
0006FA5C 00 00 add byte ptr [eax],al
0006FA5C 00 00 add byte ptr [eax],al
0006FA5C 00 00 add byte ptr [eax],al
0006FA5C 00 00 add byte ptr [eax],al
0006FA5C 00 00 add byte ptr [eax],al
0006FA5C 00 00 add byte ptr [eax],al
0006FA5C 00 00 add byte ptr [eax],al
0006FA5C 00 00 add byte ptr [eax],al
0006FA5C 00 00 add byte ptr [eax],al
0006FA5C 00 00 add byte ptr [eax],al
0006FA5C 00 00 add byte ptr [eax],al
--->0006FA5C 00 00 add byte ptr [eax],al
0006FA5C 00 00 add byte ptr [eax],al
0006FA5C 00 00 add byte ptr [eax],al
0006FA5C 00 00 add byte ptr [eax],al
0006FA5C 00 00 add byte ptr [eax],al
0006FA5C 00 00 add byte ptr [eax],al
0006FA5C 00 00 add byte ptr [eax],al
0006FA5C 00 00 add byte ptr [eax],al
0006FA5C 00 00 add byte ptr [eax],al
0006FA5C 00 00 add byte ptr [eax],al
0006FA5C 00 00 add byte ptr [eax],al
0006FA5C 00 00 add byte ptr [eax],al
0006FA5C 00 00 add byte ptr [eax],al
0006FA5C 00 00 add byte ptr [eax],al
0006FA5C 00 00 add byte ptr [eax],al
0006FA5C 00 00 add byte ptr [eax],al
0006FA5C 00 00 add byte ptr [eax],al
0006FA5C 00 00 add byte ptr [eax],al
0006FA5C 00 00 add byte ptr [eax],al
0006FA5C 00 00 add byte ptr [eax],al
0006FA5C 00 00 add byte ptr [eax],al
0006FA5C 00 00 add byte ptr [eax],al
0006FA5C 00 00 add byte ptr [eax],al
0006FA5C 00 00 add byte ptr [eax],al
0006FA5C 00 00 add byte ptr [eax],al
0006FA5C 00 00 add byte ptr [eax],al
0006FA5C 00 00 add byte ptr [eax],al
0006FA5C 00 00 add byte ptr [eax],al
0006FA5C 00 00 add byte ptr [eax],al
0006FA5C 00 00 add byte ptr [eax],al
0006FA5C 00 00 add byte ptr [eax],al
0006FA5C 00 00 add byte ptr [eax],al
0006FA5C 00 00 add byte ptr [eax],al
0006FA5C 00 00 add byte ptr [eax],al
0006FA5C 00 00 add byte ptr [eax],al
0006FA5C 00 00 add byte ptr [eax],al
0006FA5C 00 00 add byte ptr [eax],al
0006FA5C 00 00 add byte ptr [eax],al
0006FA5C 00 00 add byte ptr [eax],al
0006FA5C 00 00 add byte ptr [eax],al

Chris
 
J

Jerold Schulman

Here are the possibilities, as documented in the Microsoft Knowledge Base:
http://support.microsoft.com?kbid=129845 "Blue Screen Preparation Before
Contacting Microsoft"
http://support.microsoft.com?kbid=154915 "Blue Screen on Reboot After Installing
Corel CD Creator 2.0"
http://support.microsoft.com?kbid=161703 "'Stop 0x0000001E' Error Message During
Setup"
http://support.microsoft.com?kbid=167045 "Reasons Why Windows NT Does Not Boot
From a Shadow Mirror Drive"
http://support.microsoft.com?kbid=183169 "Possible Resolutions to STOP 0x0A
0x01E and 0x50 Errors"
http://support.microsoft.com?kbid=195857 "Open Handles Cause STOP 0x0000001E or
STOP 0x00000024"
http://support.microsoft.com?kbid=217078 "Stop 0x1e Error Message Adding Port to
Triple Lanstreamer PCI Network Adapter"
http://support.microsoft.com?kbid=237424 "Error Message on a Blue Screen When
Using Bookman Old Style Font"
http://support.microsoft.com?kbid=247598 "Error Message STOP 0x0000001E
KMODE_EXCEPTION_NOT_HANDLED"
http://support.microsoft.com?kbid=257956 "Error Message Appears When You Restart
Windows After Installation of Nero CD-Recording Software"
http://support.microsoft.com?kbid=259524 "List of Bugs Fixed in Windows 2000
Service Pack 1 [1 of 3]"
http://support.microsoft.com?kbid=260830 "STOP 0x1E in Usbhub.sys with Surprise
Removal of Plug and Play USB Hub"
http://support.microsoft.com?kbid=260982 "'Stop 0x0000001E' Error Message After
Changing Color Depth"
http://support.microsoft.com?kbid=261322 "Stop 0x0000001E Error Message When You
Print from a Windows 2000 Terminal Services Client"
http://support.microsoft.com?kbid=261807 "DirectCD 3.01 Prevents Starting in
Safe Mode in Windows 2000"
http://support.microsoft.com?kbid=263050 "Stop 0x0000001E Error Message Occurs
When You Run Norton AntiVirus"
http://support.microsoft.com?kbid=264223 "How to Troubleshoot 'Stop 0x0000001E'
with First Parameter of 0xC0000044"
http://support.microsoft.com?kbid=264794 "'Stop' Error Message with Firewall or
Similar Software Installed on a Windows 2000-Based Computer"
http://support.microsoft.com?kbid=264959 "Redirector Does Not Inform Cache
Manager of Memory Extends"
http://support.microsoft.com?kbid=264994 "'Stop 0x0000001E' After Installing
WriteDVD for Windows 2000 with Easy CD Creator"
http://support.microsoft.com?kbid=266169 "How to Troubleshoot Problems with
Standby Mode Hibernate Mode and Shutting Down Your Computer in Windows 2000"
http://support.microsoft.com?kbid=269593 "'Stop 0x0000001e' in Win32k.sys When
You Quit a Program"
http://support.microsoft.com?kbid=271961 "'STOP 0x1E' on Windows 2000 Domain
Controller with McAfee AntiVirus"
http://support.microsoft.com?kbid=273632 "Access Violation in win32kDesktopAlloc
with Null Heap Pointer"
http://support.microsoft.com?kbid=275678 "How to Troubleshoot a STOP 0x0000001E
KMODE_EXCEPTION_NOT_HANDLED Error Message"
http://support.microsoft.com?kbid=278999 "Stop 0x0000001E in Win32k.sys When
Using Animated Mouse Pointers"
http://support.microsoft.com?kbid=279640 "'Stop 0x0000001e' on Windows 2000
Server"
http://support.microsoft.com?kbid=280582 "The GetAncestor[] Function Can Cause
'Stop 0x1e' in Win32k.sys"
http://support.microsoft.com?kbid=285845 "STOP 0x0000001E Error in CDA1000.sys
Occurs with Adaptec AAA-133U2 RAID Controller"
http://support.microsoft.com?kbid=287524 "'Stop 0x0000001E' Error Message When
You Mount a Volume"
http://support.microsoft.com?kbid=288602 "Windows Setup Stops Responding with
the VIA Apollo KX133 Chip Set"
http://support.microsoft.com?kbid=288918 "'Stop 0x0000001e' Error Message After
You Install a UMAX Scanner"
http://support.microsoft.com?kbid=289001 "'STOP 0x0000001E' Error Message When
You Load Windows 2000 System Registry Hive"
http://support.microsoft.com?kbid=289831 "Stop 0x1E Error Message Appear on All
Servers in the Same Domain"
http://support.microsoft.com?kbid=294690 "'Stop 0x0000001E' Error Message in
Ntoskrnl.exe"
http://support.microsoft.com?kbid=294728 "Error Message STOP 0x00000001e
KMODE_EXCEPTION_NOT_HANDLED in Win32k.sys"
http://support.microsoft.com?kbid=296895 "STOP 0x0000001E Error Message Appears
After You Install Sound Blaster LiveWare"
http://support.microsoft.com?kbid=296973 "'Stop 0x1E' Error Message with Intel
USB Camera Plugged into USB Keyboard or Bus-Powered Hub"
http://support.microsoft.com?kbid=297523 "Error Message Windows 2000 Could Not
Start Because of a Computer Disk Hardware Configuration Problem"
http://support.microsoft.com?kbid=298193 "List of bugs fixed in Windows 2000
Service Pack 2 [4 of 4]"
http://support.microsoft.com?kbid=299549 "Windows 2000 Post-SP2 Hotfixes Have
Been Repackaged to Verify the Inclusion of Previous Fixes"
http://support.microsoft.com?kbid=300224 "'Stop 0x0000001E
KMODE_EXCEPTION_NOT_HANDLED' Error Message May Be Displayed When You Use the
Diskperf Utility"
http://support.microsoft.com?kbid=301330 "'Stop 0x0000001E' Error Message
Printing with Hewlett-Packard DesignJet Printer Driver from a Terminal Services
Client"
http://support.microsoft.com?kbid=301376 "'Stop 0x0000001E' Error in
UserSetLastError When a Terminal Services Client Logs Off"
http://support.microsoft.com?kbid=302510 "Stop 0x0000001e Error Message in
Win32k.sys When Users Log Off from a Server Running Terminal Services"
http://support.microsoft.com?kbid=302971 "'Stop 0x1E' or 'Stop 0xc5' After You
Install Service Pack 2 and You Use Logitech Mouse Drivers"
http://support.microsoft.com?kbid=303191 "'Stop 0x0000001E' from I8042prt.sys
When Passing a Null Interrupt Pointer During Setup"
http://support.microsoft.com?kbid=304245 "Hard-Coded Breakpoint Is Encountered
in GetARPBuffer"
http://support.microsoft.com?kbid=306119 "Stop 0x0000001E Loading Adobe Type
Manager Font Driver"
http://support.microsoft.com?kbid=306451 "'Stop 0x0000001E' Error Message After
You Log Off from a Terminal Services Session"
http://support.microsoft.com?kbid=307030 "Stop 0x00000050 Error Message in the
Wdmaud.sys File in Windows 2000"
http://support.microsoft.com?kbid=309601 "Some Windows 2000 hotfixes may cause a
conflict with Service Pack 3 [SP3] for Windows 2000"
http://support.microsoft.com?kbid=311081 "Troubleshooting Multiple Cluster
Symptoms on the Same SAN"
http://support.microsoft.com?kbid=311278 "A 'Stop 0x0000001e 0xC0000005
0x00000009' Error Occurs in the Classpnp.sys Driver"
http://support.microsoft.com?kbid=317153 "Stop 0x0000001e or Stop 0x00000050
Error in Navap.sys When You Use Norton AutoProtect Feature"
http://support.microsoft.com?kbid=325602 "The StartTrace[] Function May Cause a
'Stop 0x0000001E' Error Message"
http://support.microsoft.com?kbid=326122 "A 'Stop C2' Error Is Caused by the
Classpnp.sys Driver"
http://support.microsoft.com?kbid=328036 "Removing USB Hub Causes STOP
0x0000001E"
http://support.microsoft.com?kbid=328506 "A 'Stop 0x0000001E' Error Message Is
Caused by Sfmsrv.sys"
http://support.microsoft.com?kbid=329586 "You receive a 'Random STOP 0x0000001e
[0xc0000005 0xA304EED9 0X00000000 0X0000001C]' error message when you close a
window in Windows 2000 or in Windows NT 4.0"
http://support.microsoft.com?kbid=329703 "'STOP' Error Messages in Qafilter.sys
or Qsfilter.sys with Third-Party Quota Management Tool"
http://support.microsoft.com?kbid=329850 "You Receive a 'STOP 0x0000001E' Error
Message When You Try to Log On to Your Exchange 2000 Server-Based Computer"
http://support.microsoft.com?kbid=329876 "STOP Errors When Alteon Gigabit
Network Adapter Is Installed"
http://support.microsoft.com?kbid=330363 "A 'Stop 0x0000001E' Error Occurs in
the NetWare Redirector"
http://support.microsoft.com?kbid=331102 "Disk.sys Causes an '0x0000001E' Error"
http://support.microsoft.com?kbid=810558 "'Stop 0x00000051 REGISTRY_ERROR' Error
Message When You Back Up the Registry Hive"
http://support.microsoft.com?kbid=811014 "'STOP 0x0000001E
KMODE_EXCEPTION_NOT_HANDLED in NTOSKRNL.EXE' Stop Error Message After You
Install PcAnywhere"
http://support.microsoft.com?kbid=811363 "A 'Stop 0x0000001E' Error Occurs in
Win32k.sys in Windows 2000"
http://support.microsoft.com?kbid=812707 "'STOP 0x0000001E' Error Message in
Tcipip.sys When Server Is Under a Heavy Network Load"
http://support.microsoft.com?kbid=813366 "Stop error 0x0000001E occurs when you
close a program window"
http://support.microsoft.com?kbid=815265 "'STOP 0x00000051' or 'STOP 0x0000001E'
error message when you start Configuration Manager in Windows 2000 Server or in
Windows XP"
http://support.microsoft.com?kbid=816047 "STOP 0x1E in Win32k.sys Error May
Occur in Windows 2000 or Windows XP Professional"
http://support.microsoft.com?kbid=817354 "Stop Error 0x1E Occurs on a Heavily
Loaded Server"
http://support.microsoft.com?kbid=817700 "You Receive a 'STOP 0x0000001E' Error
Message When You Quit a Program"
http://support.microsoft.com?kbid=819535 "'Stop 0x0000001e' error message when
you minimize or when you maximize a child window"
http://support.microsoft.com?kbid=819745 "'Stop 0x0000001E' error message when
you try to play music on a Windows 2000-based computer"
http://support.microsoft.com?kbid=820767 "Your Computer Automatically Restarts
or a Stop Error or Another Error Occurs When You Have Terminal Services Enabled"
http://support.microsoft.com?kbid=821844 "'Stop' Error Message in Cdr4_2K.sys
When You Connect an iLink CD-RW DVD-ROM Combination Drive"
http://support.microsoft.com?kbid=822384 "Some Windows 2000 Hotfixes May Cause a
Conflict with Service Pack 4 for Windows 2000"
http://support.microsoft.com?kbid=822556 "System crashes when you unmount an
IEEE 1394 removable storage device"
http://support.microsoft.com?kbid=822563 "Computer Restarts Unexpectedly or You
Receive a 'STOP 0x0000001E' Error Message on a Blue Screen"
http://support.microsoft.com?kbid=824288 "Stop 0x1E Error in Mup.sys After You
Apply Windows 2000 SP4"
http://support.microsoft.com?kbid=824910 "STOP 0x0000001E Error on Your Windows
2000-Based Server When an NTVDM Process Runs"
http://support.microsoft.com?kbid=830071 "Some Windows Procedures Do Not Work If
the Remote Procedure Call Service Is Disabled"
http://support.microsoft.com?kbid=831264 "Illegal Instruction Causes 'STOP
0x0000001E' Error Message"
http://support.microsoft.com?kbid=833649 "A terminal server that is running
Windows 2000 Server stops unexpectedly and you receive a 'STOP 0x0000001E'
error"
http://support.microsoft.com?kbid=833763 "You receive a 0x0A Stop error or a
0x1E Stop error on a Windows 2000-based computer"
http://support.microsoft.com?kbid=833993 "'Stop 0x1E' 'Stop 0x0a' or 'Stop 0x50'
error message when IopReleaseFileObjectLock[] accesses a freed file object in
Windows 2000"
http://support.microsoft.com?kbid=834745 "You receive an '0x0000001E
[KMODE_EXCEPTION_NOT_HANDLED]' error message on a Windows 2000 Server that is
running Terminal Services"
http://support.microsoft.com?kbid=835312 "You receive a 'Stop 0x1E' error on a
Windows 2000-based computer"
http://support.microsoft.com?kbid=835465 "'Stop 0x1E' error message in the
Sfmsrv.sys file on a Windows 2000-based server"
http://support.microsoft.com?kbid=836567 "'Stop' error when you install a
slipstreamed copy of Windows 2000 SP4 over a USB CD-ROM drive"
http://support.microsoft.com?kbid=837585 "Several orphaned Csrss.exe processes
cause performance issues on your Windows 2000-based terminal server"
http://support.microsoft.com?kbid=838417 "Stop error 0x0000001E is logged when
you restart the computer to complete the installation of Windows 2000"
http://support.microsoft.com?kbid=838921 "Stop error 0x1E occurs in the
Usbhub.sys driver when you install Windows 2000 SP4 from a USB CD drive"
http://support.microsoft.com?kbid=839427 "You receive a 'Stop 0x1E' error on a
Windows 2000-based computer"
http://support.microsoft.com?kbid=839429 "You receive a 'STOP 0x0000001E' error
message on a Windows 2000-based computer that is running Terminal Services"
http://support.microsoft.com?kbid=839516 "You may receive stop error messages
when you try to run Adaptec Easy CD Creator or Adaptec DirectCD on a Windows
2000-based computer"
http://support.microsoft.com?kbid=841054 "You receive a 'Stop 0x0000001E' error
message when you log off from a Windows 2000 Server terminal server"
http://support.microsoft.com?kbid=842584 "'STOP 0x0000001E' error in the
Win32k.sys device driver on a Windows 2000-based print server"



Can anyone who has looked at a memory dump following a
crash make sense of this.

Is it a physical memory fault i.e hardware or is it
misleading?

Here is the dump
***********************************************************
*****
**
** Windows 2000 Crash Dump Analysis
**
***********************************************************
*****
*
Filename . . . . . . .memory.dmp
Signature. . . . . . .PAGE
ValidDump. . . . . . .DUMP
MajorVersion . . . . .free system
MinorVersion . . . . .2195
DirectoryTableBase . .0x00030000
PfnDataBase. . . . . .0x8909a000
PsLoadedModuleList . .0x8046e8f0
PsActiveProcessHead. .0x8046e728
MachineImageType . . .i386
NumberProcessors . . .1
BugCheckCode . . . . .0x0000001e
BugCheckParameter1 . .0xc0000005
BugCheckParameter2 . .0x80437a28
BugCheckParameter3 . .0x00000000
BugCheckParameter4 . .0x00000006

ExceptionCode. . . . .0x80000003
ExceptionFlags . . . .0x00000001
ExceptionAddress . . .0x80455def



***********************************************************
*****
** Symbol File Load Log
***********************************************************
*****

Error: memory read failed addr=0x89099248


***********************************************************
*****
** !drivers
***********************************************************
*****

Couldn't get offset of PsLoadedModuleListHead

***********************************************************
*****
** !locks -v -d
***********************************************************
*****

**** DUMP OF ALL RESOURCE OBJECTS ****
00000000: Unable to get value of ExpSystemResourcesList

***********************************************************
*****
** !vm
***********************************************************
*****


*** Virtual Memory Usage ***
unable to get MmNumberOfPhysicalPages
Physical Memory: 0 ( 0 Kb)
unable to get MmNumberOfPagingFiles

************ NO PAGING FILE *********************

00000000: Unable to get paged pool info 01003860
unable to get MmSizeOfPagedPoolInBytes
unable to get MmMaximumNonPagedPoolInBytes
unable to get nt!MmAllocatedNonPagedPool
unable to get MmTotalCommitLimit
unable to get MmTotalCommittedPages
unable to get MmSharedCommit
unable to get MmDriverCommit
unable to get MmProcessCommit
unable to get MmPagedPoolCommit
unable to get MmZeroedPageListHead
unable to get MmFreePageListHead
unable to get MmStandbyPageListHead
unable to get MmModifiedPageListHead
unable to get MmModifiedNoWritePageListHead
unable to get MmAvailablePages
unable to get MmResidentAvailablePages
unable to get nt!MmExtendedCommit
unable to get nt!MmPageFileFullExtendPages
unable to get nt!MmPageFileFullExtendCount
unable to get nt!MmTotalFreeSystemPtes
unable to get nt!MmSystemLockPagesCount
unable to get nt!MiSpecialPagesNonPaged
unable to get nt!MiSpecialPagesNonPagedMaximum
00000004: Unable to get number of free nonpaged PTEs
unable to get nt!MmSpecialPagesInUse
Available Pages: 0 ( 0 Kb)
ResAvail Pages: 0 ( 0 Kb)

********** Running out of physical memory
**********

Locked IO Pages: 0 ( 0 Kb)
Free NP PTEs: 0 ( 0 Kb)
Free Special NP: 0 ( 0 Kb)

Modified Pages: 0 ( 0 Kb)
00000000: Unable to get pool descriptor

***********************************************************
*****
** !errlog
***********************************************************
*****

Can't find error log list head

***********************************************************
*****
** !irpzone full
***********************************************************
*****

irpzone is no longer supported. Use irpfind to search
nonpaged pool for active Irps

***********************************************************
*****
** !process 0 0
***********************************************************
*****

**** NT ACTIVE PROCESS DUMP ****
unable to get MmUserProbeAddress
Unable to read _EPROCESS at 0

***********************************************************
*****
** !process 0 7
***********************************************************
*****

**** NT ACTIVE PROCESS DUMP ****
unable to get MmUserProbeAddress
Unable to read _EPROCESS at 0

***********************************************************
*****
** !process
***********************************************************
*****

Unable to read PCR for Processor 0
Unable to get current process pointer.

***********************************************************
*****
** !thread
***********************************************************
*****

Unable to read PCR for Processor 0
unable to get MmUserProbeAddress
00000000: Unable to get thread contents

***********************************************************
*****
** Register Dump For Processor #0
***********************************************************
*****

eax=00079348 ebx=4b402a12 ecx=00070000 edx=0006fbe0
esi=0006fba0 edi=4b468180
eip=00000597 esp=77fcc4e0 ebp=00070178 iopl=0 nv
up di pl nz na pe nc
cs=77fcc603 ss=0000 ds=390000 es=72a09041 fs=6fbc0
gs=ffffffff efl=77fcc4c9
cr0=0006fdac cr2=00000000 cr3=0006fe08 dr0=7c5739a8
dr1=ffffffff dr2=0006fe18
dr3=01009470 dr6=00000001 dr7=01003860 cr4=7c57e597
gdtr=00000000 gdtl=0007 idtr=00000000 idtl=0007
tr=fdec ldtr=0006


***********************************************************
*****
** Stack Trace
***********************************************************
*****

ChildEBP RetAddr Args to Child
7c5d0794 00000000 00000000 00000000 00000000 0x00290290

0006FA5C 00 00 add byte ptr [eax],al
0006FA5C 00 00 add byte ptr [eax],al
0006FA5C 00 00 add byte ptr [eax],al
0006FA5C 00 00 add byte ptr [eax],al
0006FA5C 00 00 add byte ptr [eax],al
0006FA5C 00 00 add byte ptr [eax],al
0006FA5C 00 00 add byte ptr [eax],al
0006FA5C 00 00 add byte ptr [eax],al
0006FA5C 00 00 add byte ptr [eax],al
0006FA5C 00 00 add byte ptr [eax],al
0006FA5C 00 00 add byte ptr [eax],al
0006FA5C 00 00 add byte ptr [eax],al
0006FA5C 00 00 add byte ptr [eax],al
0006FA5C 00 00 add byte ptr [eax],al
0006FA5C 00 00 add byte ptr [eax],al
0006FA5C 00 00 add byte ptr [eax],al
0006FA5C 00 00 add byte ptr [eax],al
0006FA5C 00 00 add byte ptr [eax],al
0006FA5C 00 00 add byte ptr [eax],al
0006FA5C 00 00 add byte ptr [eax],al
0006FA5C 00 00 add byte ptr [eax],al
0006FA5C 00 00 add byte ptr [eax],al
0006FA5C 00 00 add byte ptr [eax],al
0006FA5C 00 00 add byte ptr [eax],al
0006FA5C 00 00 add byte ptr [eax],al
0006FA5C 00 00 add byte ptr [eax],al
0006FA5C 00 00 add byte ptr [eax],al
0006FA5C 00 00 add byte ptr [eax],al
0006FA5C 00 00 add byte ptr [eax],al
0006FA5C 00 00 add byte ptr [eax],al
0006FA5C 00 00 add byte ptr [eax],al
0006FA5C 00 00 add byte ptr [eax],al
0006FA5C 00 00 add byte ptr [eax],al
0006FA5C 00 00 add byte ptr [eax],al
0006FA5C 00 00 add byte ptr [eax],al
0006FA5C 00 00 add byte ptr [eax],al
0006FA5C 00 00 add byte ptr [eax],al
0006FA5C 00 00 add byte ptr [eax],al
0006FA5C 00 00 add byte ptr [eax],al
0006FA5C 00 00 add byte ptr [eax],al
--->0006FA5C 00 00 add byte ptr [eax],al
0006FA5C 00 00 add byte ptr [eax],al
0006FA5C 00 00 add byte ptr [eax],al
0006FA5C 00 00 add byte ptr [eax],al
0006FA5C 00 00 add byte ptr [eax],al
0006FA5C 00 00 add byte ptr [eax],al
0006FA5C 00 00 add byte ptr [eax],al
0006FA5C 00 00 add byte ptr [eax],al
0006FA5C 00 00 add byte ptr [eax],al
0006FA5C 00 00 add byte ptr [eax],al
0006FA5C 00 00 add byte ptr [eax],al
0006FA5C 00 00 add byte ptr [eax],al
0006FA5C 00 00 add byte ptr [eax],al
0006FA5C 00 00 add byte ptr [eax],al
0006FA5C 00 00 add byte ptr [eax],al
0006FA5C 00 00 add byte ptr [eax],al
0006FA5C 00 00 add byte ptr [eax],al
0006FA5C 00 00 add byte ptr [eax],al
0006FA5C 00 00 add byte ptr [eax],al
0006FA5C 00 00 add byte ptr [eax],al
0006FA5C 00 00 add byte ptr [eax],al
0006FA5C 00 00 add byte ptr [eax],al
0006FA5C 00 00 add byte ptr [eax],al
0006FA5C 00 00 add byte ptr [eax],al
0006FA5C 00 00 add byte ptr [eax],al
0006FA5C 00 00 add byte ptr [eax],al
0006FA5C 00 00 add byte ptr [eax],al
0006FA5C 00 00 add byte ptr [eax],al
0006FA5C 00 00 add byte ptr [eax],al
0006FA5C 00 00 add byte ptr [eax],al
0006FA5C 00 00 add byte ptr [eax],al
0006FA5C 00 00 add byte ptr [eax],al
0006FA5C 00 00 add byte ptr [eax],al
0006FA5C 00 00 add byte ptr [eax],al
0006FA5C 00 00 add byte ptr [eax],al
0006FA5C 00 00 add byte ptr [eax],al
0006FA5C 00 00 add byte ptr [eax],al
0006FA5C 00 00 add byte ptr [eax],al
0006FA5C 00 00 add byte ptr [eax],al
0006FA5C 00 00 add byte ptr [eax],al

Chris


Jerold Schulman
Windows: General MVP
JSI, Inc.
http://www.jsiinc.com
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Top