Memory Management Bluescreen

Page 1 of 2 12 LastLast

  1. Posts : 22
    10
       #1

    Memory Management Bluescreen


    This has been happening every once in a while and it's rather annoying. Nothing points towards RAM corruption though as all my RAM is usable and I did a test on the RAM. Not sure what's going on but maybe you all could help me out? It's beginning to become really annoying. Apparently it's a custom error...
      My Computers


  2. Posts : 32,437
    windows 10 professional version 1607 build 14393.969 64 bit
       #2

    See rule #4 on piracy:
    Forum Rules - Windows 10 Help Forums
    Please remove all software used to bypass or divert the activation of software and remove all pirated software.
    Once this is complete run the BETA log collector and post a new zip into the thread:
    https://www.tenforums.com/attachment...-v2-beta10.zip
    (extract > open)
      My Computer


  3. Posts : 22
    10
    Thread Starter
       #3

    Oh oops. My bad. Fixed. Let me know if I missed anything.
      My Computers


  4. Posts : 32,437
    windows 10 professional version 1607 build 14393.969 64 bit
       #4

    One of the files was missing from the log collector.
    Please rerun the log collector and post a new zip into the thread.
      My Computer


  5. Posts : 22
    10
    Thread Starter
       #5

    Okay I did. Is the file still missing?
      My Computers


  6. Posts : 32,437
    windows 10 professional version 1607 build 14393.969 64 bit
       #6

    The file is still missing.
    1) What steps were made to remove the piracy?
    2) Which files were modified?

    There was only 1 mini dump file with bugcheck 1A.
    The logs displayed other bugchecks: 21, 7E.



    3) Open file explorer> this PC > C: > in the right upper corner search for:
    C:\windows\memory.dmp > zip > post a one drive or drop box share link into the thread

    4) The computer has mismatched RAM. There are a pair of Samsung 4GB RAM and a 8GB module. When was the RAM module added?


    5) Run memtest86+ version 5.01 for at least 8 passes.
    Memtest86+ - Advanced Memory Diagnostic Tool
    This may take hours so plan to run it overnight.
    a) Please make sure you use the Memtest86+ version 5.01 with the link below.
    Memtest86+ - Advanced Memory Diagnostic Tool
    The testing is done not by time but by passes.
    The more passes the better.
    There are a significant number of false negatives if fewer than 8 passes are made.
    A false negative is a test pass when there is malfunctioning RAM.
    There is 8 GB of RAM on the computer.
    Memtest86+ version 5.01 testing takes approximately 1 - 2 hours /GB RAM
    Just 1 error is a fail and you can abort testing.
    Then test 1 RAM module at a time in the same DIMM each for 8 or more passes.
    b) When Memtest86+ version 5.01 has completed 8 or more passes use a camera or smart phone camera to take a picture and post an image into the thread.
    Memory problems. - Microsoft Community
    MemTest86+ - Test RAM | Windows 10 Tutorials

    6) If the computer has Ccleaner > click windows tab > scroll down to system and advanced > post an image into the thread


    7) In the left lower corner search type: system or system control > open system control panel > on the left pane click advanced system settings
    a) > on the advanced tab under startup and recovery > click settings > post an image of the startup and recovery into the thread.
    b) > on the advanced tab under performance > click on settings > under performance options > click on the advanced tab > under virtual memory > click on change > post an image of the virtual memory tab into the thread



    Code:
    6/11/2018 11:15 PM    Windows Error Reporting    Fault bucket , type 0
    Event Name: BlueScreen
    Response: Not available
    Cab Id: 0
    
    Problem signature:
    P1: 1000007e
    P2: ffffffffc0000005
    P3: fffff80454e291b0
    P4: fffffd80c6edf458
    P5: fffffd80c6edeca0
    P6: 10_0_17134
    P7: 0_0
    P8: 256_1
    P9: 
    P10: 
    
    Attached files:
    \\?\C:\WINDOWS\Minidump\061118-30406-01.dmp
    \\?\C:\WINDOWS\TEMP\WER-345500-0.sysdata.xml
    \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WERAF71.tmp.WERInternalMetadata.xml
    \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WERAFA1.tmp.xml
    \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WERB06B.tmp.csv
    \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WERB0DA.tmp.txt
    
    These files may be available here:
    C:\ProgramData\Microsoft\Windows\WER\ReportQueue\Kernel_1000007e_7fb316dfe861415718e8ab9ff6ea780afd962b_00000000_cab_02e9b0d9
    
    Analysis symbol: 
    Rechecking for solution: 0
    Report Id: 649ebff7-c2ff-481d-b0e6-72e33594e1ab
    Report Status: 4
    Hashed bucket: 
    Cab Guid: 06/29/2018 10:59 PM    Windows Error Reporting    Fault bucket , type 0
    Event Name: BlueScreen
    Response: Not available
    Cab Id: 0
    
    Problem signature:
    P1: 1a
    P2: 403
    P3: ffffcc0dd74ee548
    P4: 80000001d598b867
    P5: ffffcc370fa1d8c0
    P6: 10_0_17134
    P7: 0_0
    P8: 256_1
    P9: 
    P10: 
    
    Attached files:
    \\?\C:\WINDOWS\Minidump\062918-33187-01.dmp
    \\?\C:\WINDOWS\TEMP\WER-310093-0.sysdata.xml
    \\?\C:\WINDOWS\MEMORY.DMP
    \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER1564.tmp.WERInternalMetadata.xml
    \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER1584.tmp.xml
    \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER15E1.tmp.csv
    \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER168E.tmp.txt
    
    These files may be available here:
    C:\ProgramData\Microsoft\Windows\WER\ReportQueue\Kernel_1a_f8b277de271931ff9469e814ef60d7c3756659a0_00000000_cab_02fd169c
    
    Analysis symbol: 
    Rechecking for solution: 0
    Report Id: 3ac84ad5-cda6-442b-a265-46283c8c4165
    Report Status: 4
    Hashed bucket: 
    Cab Guid: 0
    6/19/2018 7:37 AM    Windows Error Reporting    Fault bucket , type 0
    Event Name: BlueScreen
    Response: Not available
    Cab Id: 0
    
    Problem signature:
    P1: 21
    P2: ffffd700ef8d9080
    P3: 2
    P4: 10000003d
    P5: ffddcf30
    P6: 10_0_17134
    P7: 0_0
    P8: 256_1
    P9: 
    P10: 
    
    Attached files:
    \\?\C:\WINDOWS\Minidump\061918-43437-01.dmp
    \\?\C:\WINDOWS\TEMP\WER-330640-0.sysdata.xml
    \\?\C:\WINDOWS\MEMORY.DMP
    \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER869C.tmp.WERInternalMetadata.xml
    \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER86BC.tmp.xml
    \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER8758.tmp.csv
    \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER87B6.tmp.txt
    
    These files may be available here:
    C:\ProgramData\Microsoft\Windows\WER\ReportQueue\Kernel_21_9125485529350a4359629b448a825c1f8bbb3_00000000_cab_02f187b5
    
    Analysis symbol: 
    Rechecking for solution: 0
    Report Id: 7240abbf-f848-418e-9da1-d2bf437cc223
    Report Status: 4
    Hashed bucket: 
    Cab Guid: 0
    Code:
    6/29/2018 10:59 PM    Windows Error Reporting    Fault bucket 0x1a_403_nt!MiDeletePteRun, type 0
    Event Name: BlueScreen
    Response: Not available
    Cab Id: b11fca5f-6982-4bc2-8bf9-11b846a4f580
    
    Problem signature:
    P1: 1a
    P2: 403
    P3: ffffcc0dd74ee548
    P4: 80000001d598b867
    P5: ffffcc370fa1d8c0
    P6: 10_0_17134
    P7: 0_0
    P8: 256_1
    P9: 
    P10: 
    
    Attached files:
    \\?\C:\WINDOWS\Minidump\062918-33187-01.dmp
    \\?\C:\WINDOWS\TEMP\WER-310093-0.sysdata.xml
    \\?\C:\WINDOWS\MEMORY.DMP
    \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER1564.tmp.WERInternalMetadata.xml
    \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER1584.tmp.xml
    \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER15E1.tmp.csv
    \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER168E.tmp.txt
    
    These files may be available here:
    C:\ProgramData\Microsoft\Windows\WER\ReportArchive\Kernel_1a_f8b277de271931ff9469e814ef60d7c3756659a0_00000000_cab_2f9950e6
    
    Analysis symbol: 
    Rechecking for solution: 0
    Report Id: 3ac84ad5-cda6-442b-a265-46283c8c4165
    Report Status: 268435456
    Hashed bucket: 
    Cab Guid: 06/19/2018 7:37 AM    Windows Error Reporting    Fault bucket 0x21_nt!MiReturnFullProcessCharges, type 0
    Event Name: BlueScreen
    Response: Not available
    Cab Id: 874e4b88-45a9-4a16-ab76-42482086c91c
    
    Problem signature:
    P1: 21
    P2: ffffd700ef8d9080
    P3: 2
    P4: 10000003d
    P5: ffddcf30
    P6: 10_0_17134
    P7: 0_0
    P8: 256_1
    P9: 
    P10: 
    
    Attached files:
    \\?\C:\WINDOWS\Minidump\061918-43437-01.dmp
    \\?\C:\WINDOWS\TEMP\WER-330640-0.sysdata.xml
    \\?\C:\WINDOWS\MEMORY.DMP
    \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER869C.tmp.WERInternalMetadata.xml
    \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER86BC.tmp.xml
    \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER8758.tmp.csv
    \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER87B6.tmp.txt
    
    These files may be available here:
    C:\ProgramData\Microsoft\Windows\WER\ReportArchive\Kernel_21_9125485529350a4359629b448a825c1f8bbb3_00000000_cab_17b1bb97
    
    Analysis symbol: 
    Rechecking for solution: 0
    Report Id: 7240abbf-f848-418e-9da1-d2bf437cc223
    Report Status: 268435456
    Hashed bucket: 
    Cab Guid: 0
    Code:
    6/11/2018 11:16 PM    Windows Error Reporting    Fault bucket AV_atikmdag!DMM_PowerManagement::GetPwrMgmtState, type 0
    Event Name: BlueScreen
    Response: Not available
    Cab Id: d7c0c632-a050-4d4f-896a-075d059f6e5f
    
    Problem signature:
    P1: 1000007e
    P2: ffffffffc0000005
    P3: fffff80454e291b0
    P4: fffffd80c6edf458
    P5: fffffd80c6edeca0
    P6: 10_0_17134
    P7: 0_0
    P8: 256_1
    P9: 
    P10: 
    
    Attached files:
    \\?\C:\WINDOWS\Minidump\061118-30406-01.dmp
    \\?\C:\WINDOWS\TEMP\WER-345500-0.sysdata.xml
    \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WERAF71.tmp.WERInternalMetadata.xml
    \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WERAFA1.tmp.xml
    \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WERB06B.tmp.csv
    \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WERB0DA.tmp.txt
    \\?\C:\Windows\Temp\WEREAB6.tmp.WERDataCollectionStatus.txt
    
    These files may be available here:
    C:\ProgramData\Microsoft\Windows\WER\ReportArchive\Kernel_1000007e_7fb316dfe861415718e8ab9ff6ea780afd962b_00000000_cab_209ded94
    
    Analysis symbol: 
    Rechecking for solution: 0
    Report Id: 649ebff7-c2ff-481d-b0e6-72e33594e1ab
    Report Status: 268435456
    Hashed bucket: 
    Cab Guid: 0
    Last edited by zbook; 30 Jun 2018 at 02:36.
      My Computer



  7. Posts : 22
    10
    Thread Starter
       #7

    1) What steps were made to remove the piracy?
    Control Panel, and then CCleaner's Registry Cleaner.

    2) Which files were modified?

    I uninstalled a few programs I don't think were legally on here and then wiped them.

    There was only 1 mini dump file with bugcheck 1A.
    The logs displayed other bugchecks: 21, 7E.
    Strange... Why do you think it doesn't show the others in the mini dump?

    3) Open file explorer> this PC > C: > in the right upper corner search for:
    C:\windows\memory.dmp > zip > post a one drive or drop box share link into the thread
    Can't find. Even attempting to search for it didn't find it for me...
    Attachment 194016

    4) The computer has mismatched RAM. There are a pair of Samsung 4GB RAM and a 8GB module. When was the RAM module added?
    Added it soon as I got the computer over a year ago from another computer. I only had the bluescreen issue recently.

    5) Run memtest86+ version 5.01 for at least 8 passes.
    Memtest86+ - Advanced Memory Diagnostic Tool
    This may take hours so plan to run it overnight.
    a) Please make sure you use the Memtest86+ version 5.01 with the link below.
    Memtest86+ - Advanced Memory Diagnostic Tool
    The testing is done not by time but by passes.
    The more passes the better.
    There are a significant number of false negatives if fewer than 8 passes are made.
    A false negative is a test pass when there is malfunctioning RAM.
    There is 8 GB of RAM on the computer.
    Memtest86+ version 5.01 testing takes approximately 1 - 2 hours /GB RAM
    Just 1 error is a fail and you can abort testing.
    Then test 1 RAM module at a time in the same DIMM each for 8 or more passes.
    b) When Memtest86+ version 5.01 has completed 8 or more passes use a camera or smart phone camera to take a picture and post an image into the thread.
    Memory problems. - Microsoft Community
    MemTest86+ - Test RAM | Windows 10 Tutorials
    Will do, will edit when that is done.

    6) If the computer has Ccleaner > click windows tab > scroll down to system and advanced > post an image into the thread
    Attachment 194013

    7) In the left lower corner search type: system or system control > open system control panel > on the left pane click advanced system settings
    a) > on the advanced tab under startup and recovery > click settings > post an image of the startup and recovery into the thread.
    b) > on the advanced tab under performance > click on settings > under performance options > click on the advanced tab > under virtual memory > click on change > post an image of the virtual memory tab into the thread
    Attachment 194014Attachment 194015
      My Computers


  8. Posts : 32,437
    windows 10 professional version 1607 build 14393.969 64 bit
       #8

    For startup and recovery > system failure > un-check automatically restart
    For every BSOD related crash you should now see a bugcheck and : (
    Sometimes a misbehaving driver is displayed in the form *.sys.
    If you see the driver record it and post it into the thread.
    If you see a BSOD dump live the window should display a % counter.
    Make sure that you allow it to rise to 100% before rebooting so that there is sufficient time to create the dump file.

    The memory dump could have been removed in the earlier cleaning steps. The logs displayed:
    Crash dump found at C:\WINDOWS\MEMORY.DMP
    Creation date: 06/29/2018 18:54:36
    Size on disk: 785 MB
    For any crashes post a new beta zip and memory dump.
      My Computer


  9. Posts : 22
    10
    Thread Starter
       #9

    Alright, I have done so and I guess now it's a waiting game to see when it crashes again after I've done a memtest86+, huh? What happens if this thread goes inactive while I wait? Will I have to start a new thread or just post when new information comes in as you have requested?
      My Computers


  10. Posts : 32,437
    windows 10 professional version 1607 build 14393.969 64 bit
       #10

    When the Memtest86+ version 5.01 has completed 8 or more passes please post an image into the thread. The more the passes the better as sometimes it takes passes into the 20s to find malfunctioning RAM. The Memtest86+ version 5.01 results are also useful in checking the DIMM and MB.

    This thread will remain active and those subscribed will get notices when there is activity.

    For any BSOD with the above changes to startup and recovery you should be able to see the BSOD window. Then post the beta log collector zip and a memory dump.

    There may be crashes that are not BSOD crashes. These unexpected restarts are sometimes seen in the logs.

    At times a tool can be used to find unstable drivers. This is used when there are few crashes and more information is needed so that more dumps can be debugged. This tool is Windows driver verifier and there are custom settings used and backups performed before the tool is used.
      My Computer


 

Related Threads
Our Sites
Site Links
About Us
Windows 10 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 10" and related materials are trademarks of Microsoft Corp.

Designer Media Ltd
All times are GMT -5. The time now is 18:36.
Find Us




Windows 10 Forums