It's getting stranger by the day..................
Last night I removed all RAM except one module and the pc booted perfectly, 1st time after a 2.5hr shutdown.
This morning I tried it again. Another perfect boot, 1st time. However when I tried to use IE windows kept reporting that it had stopped working. Every time I closed IE and reopened it windows would tell me IE had stopped working.
Anyway I powered down the pc and replaced the single RAM module with a different one in the same DIMM slot. On power up a BSOD which produced this dump file.
Microsoft (R) Windows Debugger Version 6.12.0002.633 AMD64
Copyright (c) Microsoft Corporation. All rights reserved.
Loading Dump File [C:\Windows\MEMORY.DMP]
Kernel Summary Dump File: Only kernel address space is available
WARNING: Whitespace at end of path element
Symbol search path is: SRV*C:\SymCache*
http://msdl.microsoft.com/download/symbols
Executable search path is:
Windows 7 Kernel Version 7600 MP (6 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 7600.16385.amd64fre.win7_rtm.090713-1255
Machine Name:
Kernel base = 0xfffff800`02a0c000 PsLoadedModuleList = 0xfffff800`02c49e50
Debug session time: Tue Aug 10 07:36:37.155 2010 (UTC + 1:00)
System Uptime: 0 days 0:00:41.059
Loading Kernel Symbols
...............................................................
................................................................
.......................
Loading User Symbols
Loading unloaded module list
....
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
Use !analyze -v to get detailed debugging information.
BugCheck 34, {50830, fffff880031317d8, fffff88003131030, fffff80002aaf299}
Probably caused by : memory_corruption ( nt!MiRemoveNode+139 )
Followup: MachineOwner
---------
2: kd> !analyze -v
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
CACHE_MANAGER (34)
See the comment for FAT_FILE_SYSTEM (0x23)
Arguments:
Arg1: 0000000000050830
Arg2: fffff880031317d8
Arg3: fffff88003131030
Arg4: fffff80002aaf299
Debugging Details:
------------------
EXCEPTION_RECORD: fffff880031317d8 -- (.exr 0xfffff880031317d8)
ExceptionAddress: fffff80002aaf299 (nt!MiRemoveNode+0x0000000000000139)
ExceptionCode: c0000005 (Access violation)
ExceptionFlags: 00000000
NumberParameters: 2
Parameter[0]: 0000000000000000
Parameter[1]: 0000000000000009
Attempt to read from address 0000000000000009
CONTEXT: fffff88003131030 -- (.cxr 0xfffff88003131030)
rax=0000000000000000 rbx=0000000000000001 rcx=fffff9800146f800
rdx=fffff80002c4a5c0 rsi=fffff8a0030165a0 rdi=fffff8a0030165a0
rip=fffff80002aaf299 rsp=fffff88003131a10 rbp=fffff80002c4a5c0
r8=fffffa80057844e0 r9=fffff880031318c8 r10=fffffa80022d4c80
r11=fffff88003131ab0 r12=0000000000000001 r13=0000000000000000
r14=00000000ffffffff r15=0000000000000001
iopl=0 nv up ei pl zr na po nc
cs=0010 ss=0018 ds=002b es=002b fs=0053 gs=002b efl=00010246
nt!MiRemoveNode+0x139:
fffff800`02aaf299 488b4308 mov rax,qword ptr [rbx+8] ds:002b:00000000`00000009=????????????????
Resetting default scope
PROCESS_NAME: System
CURRENT_IRQL: 0
ERROR_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced memory at 0x%08lx. The memory could not be %s.
EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced memory at 0x%08lx. The memory could not be %s.
EXCEPTION_PARAMETER1: 0000000000000000
EXCEPTION_PARAMETER2: 0000000000000009
READ_ADDRESS: 0000000000000009
FOLLOWUP_IP:
nt!MiRemoveNode+139
fffff800`02aaf299 488b4308 mov rax,qword ptr [rbx+8]
FAULTING_IP:
nt!MiRemoveNode+139
fffff800`02aaf299 488b4308 mov rax,qword ptr [rbx+8]
BUGCHECK_STR: 0x34
DEFAULT_BUCKET_ID: NULL_CLASS_PTR_DEREFERENCE
LAST_CONTROL_TRANSFER: from fffff80002d109eb to fffff80002aaf299
STACK_TEXT:
fffff880`03131a10 fffff800`02d109eb : fffffa80`03d64310 fffffa80`0196a040 00000000`00000000 fffff8a0`030165a0 : nt!MiRemoveNode+0x139
fffff880`03131a40 fffff800`02a830b4 : 00000000`00000000 00000000`00000002 fffffa80`0190f7f0 00000000`00000000 : nt! ?? ::NNGAKEGL::`string'+0x338cd
fffff880`03131a80 fffff800`02a6db50 : 00000000`00000002 fffffa80`04bb8760 00000000`00000000 00000000`00000000 : nt!ObfDereferenceObject+0xd4
fffff880`03131ae0 fffff800`02a7155c : fffffa80`03da74f0 00000000`00000030 fffffa80`03da74f0 fffffa80`0196a000 : nt!CcDeleteSharedCacheMap+0x1bc
fffff880`03131b50 fffff800`02a71d60 : fffff800`02c83100 fffff880`03131c58 00000000`00000000 fffff800`00000000 : nt!CcWriteBehind+0x5bc
fffff880`03131c00 fffff800`02a8b161 : fffffa80`01978870 fffff800`02d77504 fffff800`02c83140 00000000`00000000 : nt!CcWorkerThread+0x1c8
fffff880`03131cb0 fffff800`02d21166 : 00000000`00000000 fffffa80`0196a040 00000000`00000080 fffffa80`018ce040 : nt!ExpWorkerThread+0x111
fffff880`03131d40 fffff800`02a5c486 : fffff880`03087180 fffffa80`0196a040 fffff880`03092040 00000000`00000000 : nt!PspSystemThreadStartup+0x5a
fffff880`03131d80 00000000`00000000 : fffff880`03132000 fffff880`0312c000 fffff880`03130d20 00000000`00000000 : nt!KxStartSystemThread+0x16
SYMBOL_STACK_INDEX: 0
SYMBOL_NAME: nt!MiRemoveNode+139
FOLLOWUP_NAME: MachineOwner
MODULE_NAME: nt
DEBUG_FLR_IMAGE_TIMESTAMP: 4a5bc600
STACK_COMMAND: .cxr 0xfffff88003131030 ; kb
IMAGE_NAME: memory_corruption
FAILURE_BUCKET_ID: X64_0x34_nt!MiRemoveNode+139
BUCKET_ID: X64_0x34_nt!MiRemoveNode+139
Followup: MachineOwner
---------
After leaving the pc for 10 mins I rebooted and it booted perfectly 1st time. However during the start up process I selected "start Windows normally" and the disk checker started to analyse the HDD but then stopped saying direct access couldn't be gained or something. It happened to quickly for me to read but windows just came on as normal.
Any thoughts....................