Windows XP Home Service Pack 3 BSOD

Discussion in 'Software' started by sporozoa, Jun 22, 2008.

  1. sporozoa

    sporozoa Private E-2

    I just got the BSOD while running my anti-virus software. When it restarted I ran Windows Debugger and this is what it gave me. I'm thinking that it has something to do with the 2 1GB sticks of DDR RAM I recently installed. Has anyone had an issue with ntkrnlpa.exe before?

    Debugging Details:
    ------------------


    BUGCHECK_STR: 0x4E_99

    CUSTOMER_CRASH_COUNT: 1

    DEFAULT_BUCKET_ID: DRIVER_FAULT

    LAST_CONTROL_TRANSFER: from 805141ee to 804f8cb5

    STACK_TEXT:
    f76e6bb4 805141ee 0000004e 00000099 00000000 nt!KeBugCheckEx+0x1b
    f76e6bd4 8051ec6d e28d1e58 ffffffff 8a2cced8 nt!MiRestoreTransitionPte+0x124
    f76e6bec 8051f21e 8a780920 805126d5 8a2ccf08 nt!MiRemovePageFromList+0xd1
    f76e6bf4 805126d5 8a2ccf08 000004c0 00000420 nt!MiRemoveAnyPage+0x56
    f76e6c20 80513210 00008000 8a780980 8a780990 nt!MiResolveMappedFileFault+0x3dd
    f76e6c64 805133ca 00000000 06bab000 c0035d58 nt!MiResolveProtoPteFault+0x18c
    f76e6ce8 8051d305 e28d1e58 06bab000 c0035d58 nt!MiDispatchFault+0xe8
    f76e6d4c 8054051c 00000000 06bab000 00000001 nt!MmAccessFault+0xf9d
    f76e6d4c 64209c59 00000000 06bab000 00000001 nt!KiTrap0E+0xcc
    WARNING: Frame IP not in any known module. Following frames may be wrong.
    026cc290 00000000 00000000 00000000 00000000 0x64209c59


    STACK_COMMAND: kb

    FOLLOWUP_IP:
    nt!MiRestoreTransitionPte+124
    805141ee 8b5008 mov edx,dword ptr [eax+8]

    SYMBOL_STACK_INDEX: 1

    SYMBOL_NAME: nt!MiRestoreTransitionPte+124

    FOLLOWUP_NAME: MachineOwner

    MODULE_NAME: nt

    DEBUG_FLR_IMAGE_TIMESTAMP: 4802516a

    IMAGE_NAME: memory_corruption

    FAILURE_BUCKET_ID: 0x4E_99_nt!MiRestoreTransitionPte+124

    BUCKET_ID: 0x4E_99_nt!MiRestoreTransitionPte+124

    Followup: MachineOwner
    ---------

    kd> lmvm nt
    start end module name
    804d7000 806cf580 nt (pdb symbols) C:\Program Files\Debugging Tools for Windows (x86)\sym\ntkrnlpa.pdb\30B5FB31AE7E4ACAABA750AA241FF3311\ntkrnlpa.pdb
    Loaded symbol image file: ntkrnlpa.exe
    Mapped memory image file: C:\Program Files\Debugging Tools for Windows (x86)\sym\ntkrnlpa.exe\4802516A1f8580\ntkrnlpa.exe
    Image path: ntkrnlpa.exe
    Image name: ntkrnlpa.exe
    Timestamp: Sun Apr 13 11:31:06 2008 (4802516A)
    CheckSum: 00204E7E
    ImageSize: 001F8580
    File version: 5.1.2600.5512
    Product version: 5.1.2600.5512
    File flags: 0 (Mask 3F)
    File OS: 40004 NT Win32
    File type: 1.0 App
    File date: 00000000.00000000
    Translations: 0409.04b0
    CompanyName: Microsoft Corporation
    ProductName: Microsoft® Windows® Operating System
    InternalName: ntkrnlpa.exe
    OriginalFilename: ntkrnlpa.exe
    ProductVersion: 5.1.2600.5512
    FileVersion: 5.1.2600.5512 (xpsp.080413-2111)
    FileDescription: NT Kernel & System
    LegalCopyright: © Microsoft Corporation. All rights reserved.
     
  2. DavidGP

    DavidGP MajorGeeks Forum Administrator - Grand Pooh-Bah Staff Member

    Hi

    What is your AV and have you check to see if its version is fully upto date?

    Also if suspecting RAM run Memtest86+ on each of the sticks individually. Or if you have your older ram still, pop that back into test if you can run the AV without a BSOD.

    Can you also run your AV in Safe Mode ok with no BSOD?
     

MajorGeeks.Com Menu

Downloads All In One Tweaks \ Android \ Anti-Malware \ Anti-Virus \ Appearance \ Backup \ Browsers \ CD\DVD\Blu-Ray \ Covert Ops \ Drive Utilities \ Drivers \ Graphics \ Internet Tools \ Multimedia \ Networking \ Office Tools \ PC Games \ System Tools \ Mac/Apple/Ipad Downloads

Other News: Top Downloads \ News (Tech) \ Off Base (Other Websites News) \ Way Off Base (Offbeat Stories and Pics)

Social: Facebook \ YouTube \ Twitter \ Tumblr \ Pintrest \ RSS Feeds