Forum: Bluescreen vista

Bluescreen vista

Od ok tygodnia codziennie mam bluescreena :/ sprzętowo ani programowo nic ostatnio nie zmieniałem
tutaj analiza pliku minidump ze strony http://www.osronline.com/

moze ktoś coś odszyfruje?:)

z góry dzięki za pomoc!

Crash Dump Analysis provided by OSR Open Systems Resources, Inc. (http://www.osr.com)
Online Crash Dump Analysis Service
See http://www.osronline.com for more information
Windows Server 2008/Windows Vista Kernel Version 6002 (Service Pack 2) MP (2 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS Personal
Built by: 6002.18607.amd64fre.vistasp2_gdr.120402-0336
Machine Name:
Kernel base = 0xfffff800`02c17000 PsLoadedModuleList = 0xfffff800`02ddbdd0
Debug session time: Fri Aug 24 17:59:00.913 2012 (UTC - 4:00)
System Uptime: 0 days 1:45:55.119
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

PAGE_FAULT_IN_NONPAGED_AREA (50)
Invalid system memory was referenced. This cannot be protected by try-except,
it must be protected by a Probe. Typically the address is just plain bad or it
is pointing at freed memory.
Arguments:
Arg1: fffff68800078730, memory referenced.
Arg2: 0000000000000000, value 0 = read operation, 1 = write operation.
Arg3: fffff80002d0cc58, If non-zero, the instruction address which referenced the bad memory
address.
Arg4: 0000000000000005, (reserved)

Debugging Details:
------------------

Could not read faulting driver name
TRIAGER: Could not open triage file : e:\dump_analysis\program\triage\modclass.ini, error 2

READ_ADDRESS: GetPointerFromAddress: unable to read from fffff80002e3e080
GetUlongFromAddress: unable to read from fffff80002e3e160
fffff68800078730 Nonpaged pool

FAULTING_IP:
nt!MiFreeWsleList+2b8
fffff800`02d0cc58 488b4500 mov rax,qword ptr [rbp]

MM_INTERNAL_CODE: 5

CUSTOMER_CRASH_COUNT: 1

DEFAULT_BUCKET_ID: VISTA_DRIVER_FAULT

BUGCHECK_STR: 0x50

PROCESS_NAME: firefox.exe

CURRENT_IRQL: 0

TRAP_FRAME: fffffa6001939530 -- (.trap 0xfffffa6001939530)
NOTE: The trap frame does not contain all registers.
Some register values may be zeroed or incorrect.
rax=0200000000000000 rbx=0000000000000000 rcx=919000011a6b2884
rdx=000047c1fffffffe rsi=0000000000000000 rdi=0000000000000000
rip=fffff80002d0cc58 rsp=fffffa60019396c0 rbp=fffff68800078730
r8=fffff70001080000 r9=0000007ffffffff8 r10=fffffa800506e850
r11=0000098000000000 r12=0000000000000000 r13=0000000000000000
r14=0000000000000000 r15=0000000000000000
iopl=0 nv up ei ng nz na po nc
nt!MiFreeWsleList+0x2b8:
fffff800`02d0cc58 488b4500 mov rax,qword ptr [rbp] ss:fffff688`00078730=????????????????
Resetting default scope

LAST_CONTROL_TRANSFER: from fffff80002cd1966 to fffff80002c6ead0

STACK_TEXT:
fffffa60`01939448 fffff800`02cd1966 : 00000000`00000050 fffff688`00078730 00000000`00000000 fffffa60`01939530 : nt!KeBugCheckEx
fffffa60`01939450 fffff800`02c6d659 : 00000000`00000000 00000000`00000001 fffffa80`0761e500 91900001`1a6b2804 : nt! ?? ::FNODOBFM::`string'+0x2c3fd
fffffa60`01939530 fffff800`02d0cc58 : 91900001`1a6b2805 fffffa60`019397e8 fffffa60`01939840 fffff800`02c67bf7 : nt!KiPageFault+0x119
fffffa60`019396c0 fffff800`02d0ef4c : 00000000`000049b8 fffffa60`019399f0 fffffa80`00000000 00000000`00000000 : nt!MiFreeWsleList+0x2b8
fffffa60`01939980 fffff800`02d32981 : fffffa80`0506e850 00000000`00000001 fffffa60`01939bb0 fffffa60`01939be0 : nt!MiAgeWorkingSet+0x52c
fffffa60`01939b40 fffff800`02c1a2f0 : fffffa80`00000fc1 00000000`00000002 fffff800`02dc73a8 00000000`00000000 : nt!MiProcessWorkingSets+0x231
fffffa60`01939bb0 fffff800`02c826e0 : fffffa80`039c0000 00000000`00000001 00000000`00000002 00000000`00000008 : nt! ?? ::FNODOBFM::`string'+0x34ac0
fffffa60`01939c10 fffff800`02e7bf47 : fffffa80`039c0040 00000000`00000080 00000000`00000000 00000000`00000001 : nt!KeBalanceSetManager+0x120
fffffa60`01939d50 fffff800`02cabc36 : fffff800`02d8a680 fffffa80`039c0040 fffff800`02d8fb80 00000000`00000000 : nt!PspSystemThreadStartup+0x57
fffffa60`01939d80 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KxStartSystemThread+0x16

STACK_COMMAND: kb

FOLLOWUP_IP:
nt!MiFreeWsleList+2b8
fffff800`02d0cc58 488b4500 mov rax,qword ptr [rbp]

SYMBOL_STACK_INDEX: 3

SYMBOL_NAME: nt!MiFreeWsleList+2b8

FOLLOWUP_NAME: MachineOwner

MODULE_NAME: nt

DEBUG_FLR_IMAGE_TIMESTAMP: 4f79ae26

IMAGE_NAME: memory_corruption

FAILURE_BUCKET_ID: X64_0x50_nt!MiFreeWsleList+2b8

BUCKET_ID: X64_0x50_nt!MiFreeWsleList+2b8

Followup: MachineOwner
---------

http://www.vista.pl/porady/1425_jak_analizowac_ekran_bluescreen_po_awarii_systemu_windows_w_microsoft_debugging_tools_windbg_.html

Ok, wiec to co udało mi się ustalić do tej pory:

- zrobilem test pamięci narzędziem diagnostycznym wbudowanym w vindows (Vista) wykryl blędy i to tyle co windows powiedzial
- następnie zrobiłem test programem memtest (wersją działajaca spod windowsa) - lecial całą noc i nie wykryl błędow. Ale dzisiaj chce puscić memtesta86, którego sie odpala spod biosa.

Poki co wygląda to na błąd pamięci, ale zgodnie z zaleceniem zainstalowałem program Whocrashed - ktory to skolei wszystkie minidupmy interpretuje jako błąd sterowników a nie błąd hardware'owy.

czy w takim przypadku możliwe ze to jednak pamieć?

I jeszcze pytanie:

pamięci to patriot ddr2 800mhz 4-4-4-12 - mam 2 zestawy kazdy po 2x1 gb. Oba to ten sam model ale zauwazyłem ze jeden na naklejce ma 2.1 a drugi 2.2 volta.
na płycie są 4 sloty 2 czarne, 2 biale na przedmian. Ma znaczenie jak pamieci zostana wsadzone?