Pfn_list_corrupt???

Is that bad?
Should I let it perform the memory dump on the blue screen of death (which it looks like it wants to take ages about) I've been resetting the system at that point. Seems to work ok after a reboot. Seems to.....!

Thrip

 

How often does it happen?

 

Roughly once every 3 or 4 reboots, it happens when I go to shutdown. I've been doing quite a lot of that with all the installs I'm doing at the moment.T

 

I don't suppose you've tried this : http://forums.majorgeeks.com/showthread.php?t=35246

Might give you an idea as to what file is causing it.

 

I checked it and holy crap, I'm supposed to do what!!?? Maybe not so complicated when you break it down. Annoyingly Crap Cleaner was set to delete dumps and I haven't had one relating to pfn since. I have had one that apparantly relates to AVG which is a little worrying and thankfully I don't need to do MS's job for them as it told me what it was on the blue screen of deat.

I did just delete all the restore points to get the trojan that has been plagueing me off this system and it did a humungous file check/truncating session when it rebooted which I hope is the normal response to deleting all the restore points. Registry Mechanic and Crap Cleaner seem happy with the state of things so maybe that was just a blip.

T

 

Ok I installed the Wdbg app and ran a test on the dumps. I'm no expert but that looks to me like a dodgy hard drive as the worst case scenario. A reinstall of AVG might be required too. I'm running out of options here, I'm gonna have to format the hard drive and reinstall everything I reckon unless there's some means of checking the performance of the hard drive, I suppose it might be a hardware fault.

Results below, edited to what I assume is the relevant content:

Dump1
Unable to load image \??\C:\PROGRA~1\Grisoft\AVG6\avgcore.sys, Win32 error 2
*** WARNING: Unable to verify timestamp for avgcore.sys
*** ERROR: Module load completed but symbols could not be loaded for avgcore.sys
Could not read faulting driver name
Unable to load image \??\C:\PROGRA~1\Grisoft\AVG6\avgfsh.sys, Win32 error 2
*** WARNING: Unable to verify timestamp for avgfsh.sys
*** ERROR: Module load completed but symbols could not be loaded for avgfsh.sys
Probably caused by : avgcore.sys ( avgcore+2aa72 )

PAGE_FAULT_IN_NONPAGED_AREA (50)
Invalid system memory was referenced. This cannot be protected by try-except,
it must be protected by a Probe. Typically the address is just plain bad or it
is pointing at freed memory.

Dump2
Probably caused by : Ntfs.sys ( Ntfs!NtfsFreeFcbTableEntry+48 )
NTFS_FILE_SYSTEM (24)
If you see NtfsExceptionFilter on the stack then the 2nd and 3rd
parameters are the exception record and context record. Do a .cxr
on the 3rd parameter and then kb to obtain a more informative stack
trace.
EXCEPTION_RECORD: f7c62a44 -- (.exr fffffffff7c62a44)
ExceptionAddress: 8053455d (nt!ExFreePoolWithTag+0x00000405)
ExceptionCode: c0000005 (Access violation)
ExceptionFlags: 00000000
NumberParameters: 2
Parameter[0]: 00000000
Parameter[1]: 00000024
Attempt to read from address 00000024

Dump3
Probably caused by : memory_corruption ( nt!MiDeletePte+3ba )
PFN_LIST_CORRUPT (4e)
Typically caused by drivers passing bad memory descriptor lists (ie: calling
MmUnlockPages twice with the same list, etc). If a kernel debugger is
available get the stack trace.

Dump4
*** WARNING: Unable to verify timestamp for avgfsh.sys
*** ERROR: Module load completed but symbols could not be loaded for avgfsh.sys
Probably caused by : Ntfs.sys ( Ntfs!NtfsRemovePrefix+18 )

 

Stand back a bit and look at the bigger picture.

Do you notice two AVG antivirus files are involved?

Try uninstalling AVG and see if the problem dissapears.

You might be surprised.

 

I did notice AVG crop up twice. It's currently uninstalled as advised but as I have never had problems with it before I would rather reinstall it then use something else, for added protection I can use the free scans at Housecall and Panda. It's the other dumps that are worrying me as I have no idea what their cause is, memory corruption and NTFS errors look to me like some sort of hardware problem with the hard drive. Is that likeley or is it something less drastic?


T

 

New animal in the zoo:


IRQL_NOT_LESS_OR_EQUAL (a)

An attempt was made to access a pageable (or completely invalid) address at an

interrupt request level (IRQL) that is too high. This is usually

caused by drivers using improper addresses.

?

T

 

debug that one too. Post the output like you did before.

I wasn't suggesting to stop using avg, just to temporarily uninstall it to see if its the culprit.

 

I just did didn't I?

It has still blue screen dumped with AVG inactive/uninstalled, I think, I'll try again. Not all the dumps were AVG related though some seemed to relate to NTFS and memory, or could they have been AVG related too? The last one I referenced sysaudio.sys and there's nothing about AVG in the dump file. I have attached it as a txt anyway, maybe somebody here can make sense of it.

T

 

did u ever get this figuered out because it is so similar to my problems?

 

Three year old thread, I doubt they will reply.

Please make a new thread if you have issues.