Crash Dump :: Debuglog Analyse.

Any kind soul here is willing to help me to analyze the debug log. The server will display a message
"Error - A problem has been detected on hardware and has been shutdown to prevent damage to your computer
Page_fault_in_nonpaged_area
Technical Information
0 x 00000050 (0 x BAD0B148, 0 x 00000000, 0 x 8092AC24, 0 x 00000000) "

It will just hang there and nothing happened. we have to perform force shutdown and on again.
I suspect it is the the problem with the memory modules. Need some affirmation. Thanks

*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck 50, {bad0b148, 0, 8092ac24, 0}

Probably caused by : ntkrnlmp.exe ( nt!ObpRemoveObjectRoutine+ca )

Followup: MachineOwner
---------

0: kd> !analyze -v
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

PAGE_FAULT_IN_NONPAGED_AREA (50)
Invalid system memory was referenced. This cannot be protected by try-except,
it must be protected by a Probe. Typically the address is just plain bad or it
is pointing at freed memory.
Arguments:
Arg1: bad0b148, memory referenced.
Arg2: 00000000, value 0 = read operation, 1 = write operation.
Arg3: 8092ac24, If non-zero, the instruction address which referenced the bad memory
address.
Arg4: 00000000, (reserved)

Debugging Details:
------------------


READ_ADDRESS: bad0b148

FAULTING_IP:
nt!ObpRemoveObjectRoutine+ca
8092ac24 833800 cmp dword ptr [eax],0

MM_INTERNAL_CODE: 0

DEFAULT_BUCKET_ID: DRIVER_FAULT

BUGCHECK_STR: 0x50

PROCESS_NAME: System

CURRENT_IRQL: 1

TRAP_FRAME: f78e6ce8 -- (.trap fffffffff78e6ce8)
ErrCode = 00000000
eax=bad0b148 ebx=889fd1b0 ecx=00000000 edx=a197000a esi=00000000 edi=00000000
eip=8092ac24 esp=f78e6d5c ebp=f78e6d68 iopl=0 nv up ei ng nz na pe nc
cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00010286
nt!ObpRemoveObjectRoutine+0xca:
8092ac24 833800 cmp dword ptr [eax],0 ds:0023:bad0b148=????????
Resetting default scope

LAST_CONTROL_TRANSFER: from 808689ee to 8087b6be

STACK_TEXT:
f78e6c80 808689ee 00000050 bad0b148 00000000 nt!KeBugCheckEx+0x1b
f78e6cd0 80837d0a 00000000 bad0b148 00000000 nt!MmAccessFault+0x813
f78e6cd0 8092ac24 00000000 bad0b148 00000000 nt!KiTrap0E+0xdc
f78e6d68 80932495 889fd1c8 00000001 8a3978d0 nt!ObpRemoveObjectRoutine+0xca
f78e6d80 8083f72e 00000000 00000000 8a3978d0 nt!ObpProcessRemoveObjectQueue+0x36
f78e6dac 8092ccff 00000000 00000000 00000000 nt!ExpWorkerThread+0xeb
f78e6ddc 80841a96 8083f671 00000000 00000000 nt!PspSystemThreadStartup+0x2e
00000000 00000000 00000000 00000000 00000000 nt!KiThreadStartup+0x16


STACK_COMMAND: kb

FOLLOWUP_IP:
nt!ObpRemoveObjectRoutine+ca
8092ac24 833800 cmp dword ptr [eax],0

SYMBOL_STACK_INDEX: 3

SYMBOL_NAME: nt!ObpRemoveObjectRoutine+ca

FOLLOWUP_NAME: MachineOwner

MODULE_NAME: nt

IMAGE_NAME: ntkrnlmp.exe

DEBUG_FLR_IMAGE_TIMESTAMP: 42435e60

FAILURE_BUCKET_ID: 0x50_BADMEMREF_nt!ObpRemoveObjectRoutine+ca

BUCKET_ID: 0x50_BADMEMREF_nt!ObpRemoveObjectRoutine+ca

Followup: MachineOwner
---------

 

Hi,

Your debug report is incomplete. Can you attach the output of 'lm tn' and it is module list of all the device drivers? If your windows install ZoneAlarm, upgrade or de-install ZA may resolve the problem.

 

sorry, below is the result generated by "lm tn ". btw zonealarm is not installed. thanks for your help!!

0: kd> lm tn
start end module name
80800000 80a75000 nt ntkrnlmp.exe Fri Mar 25 08:42:08 2005 (42435E60)
80a75000 80aa1000 hal halmacpi.dll Fri Mar 25 08:28:37 2005 (42435B35)
b5117000 b51317c0 naiavf5x naiavf5x.sys Wed Nov 03 01:32:39 2004 (4187C4B7)
b597a000 b59a7000 RDPWD RDPWD.SYS Wed Jun 15 23:33:14 2005 (42B04A3A)
b5aef000 b5afa000 TDTCP TDTCP.SYS Fri Mar 25 08:27:15 2005 (42435AE3)
b5c9f000 b5cc9000 Fastfat Fastfat.SYS Fri Mar 25 08:40:20 2005 (42435DF4)
b6099000 b60a8740 ScSBB ScSBB.sys Tue Dec 14 16:19:17 2004 (41BEA205)
b6189000 b61f5000 srv srv.sys Fri Sep 01 22:32:26 2006 (44F8447A)
b6a6d000 b6aa1000 mrxdav mrxdav.sys Fri Mar 25 08:30:11 2005 (42435B93)
b6af1000 b6b06000 Cdfs Cdfs.SYS Fri Mar 25 08:40:55 2005 (42435E17)
b6b06000 b6b17000 Fips Fips.SYS Fri Mar 25 08:40:33 2005 (42435E01)
b6b17000 b6b97000 mrxsmb mrxsmb.sys Tue May 09 01:18:45 2006 (445F7D75)
b6b97000 b6bd0000 rdbss rdbss.sys Tue May 09 01:18:53 2006 (445F7D7D)
b6bd0000 b6bf7000 vmm vmm.sys Sat Oct 02 06:43:12 2004 (415DDD80)
b6bf7000 b6c21000 afd afd.sys Fri Mar 25 08:40:43 2005 (42435E0B)
b6c21000 b6c79780 vsdatant vsdatant.sys Tue Aug 30 08:22:30 2005 (4313A6C6)
b6cea000 b6cf7000 netbios netbios.sys Fri Mar 25 08:33:21 2005 (42435C51)
b6eba000 b6eeb000 netbt netbt.sys Fri Mar 25 08:40:31 2005 (42435DFF)
b6f11000 b6f18000 dxgthk dxgthk.sys Tue Mar 25 15:05:52 2003 (3E7FFFD0)
b6f19000 b6f20000 parvdm parvdm.sys Tue Mar 25 15:03:49 2003 (3E7FFF55)
b7491000 b74958e0 ImbDrvNT ImbDrvNT.sys Tue Dec 14 16:19:22 2004 (41BEA20A)
b7bf8000 b7c06460 mvstdi5x mvstdi5x.sys Fri Oct 08 00:35:49 2004 (41657065)
b7c08000 b7c15000 wanarp wanarp.sys Fri Mar 25 08:34:07 2005 (42435C7F)
b7e04000 b7e089a0 dump_dpti2o dump_dpti2o.sys Thu May 02 22:49:25 2002 (3CD151F5)
b8f31000 b8f92000 tcpip tcpip.sys Wed May 24 09:02:22 2006 (4473B09E)
b8f92000 b8fab000 ipsec ipsec.sys Fri Mar 25 08:40:49 2005 (42435E11)
b930e000 b9318000 dump_diskdump dump_diskdump.sys Fri Mar 25 08:28:56 2005 (42435B48)
b93e9000 b93f1000 EntDrv52 EntDrv52.sys Wed Oct 06 07:23:57 2004 (41632D0D)
b97e7000 b97f2000 Msfs Msfs.SYS Fri Mar 25 08:30:04 2005 (42435B8C)
b9827000 b9835000 msgpc msgpc.sys Fri Mar 25 08:33:31 2005 (42435C5B)
b9857000 b9864000 Npfs Npfs.SYS Fri Mar 25 08:30:04 2005 (42435B8C)
b9a0c000 b9a20000 usbhub usbhub.sys Fri Mar 25 08:30:46 2005 (42435BB6)
b9a20000 b9a2e000 HIDCLASS HIDCLASS.SYS Tue Mar 25 15:10:17 2003 (3E8000D9)
b9a30000 b9a3d000 Modem Modem.SYS Tue Mar 25 15:14:40 2003 (3E8001E0)
b9a40000 b9a4a000 flpydisk flpydisk.sys Tue Mar 25 15:04:32 2003 (3E7FFF80)
b9a90000 b9a99000 hidusb hidusb.sys Tue Mar 25 15:10:17 2003 (3E8000D9)
b9ac0000 b9b00000 update update.sys Fri Mar 25 08:40:27 2005 (42435DFB)
b9b00000 b9b37000 rdpdr rdpdr.sys Fri Mar 25 08:30:20 2005 (42435B9C)
b9b37000 b9b4a000 raspptp raspptp.sys Fri Mar 25 08:40:43 2005 (42435E0B)
b9b4a000 b9b64000 ndiswan ndiswan.sys Fri Mar 25 08:40:46 2005 (42435E0E)
b9b64000 b9b79000 rasl2tp rasl2tp.sys Fri Mar 25 08:40:29 2005 (42435DFD)
b9b79000 b9ba3000 USBPORT USBPORT.SYS Fri Mar 25 08:30:43 2005 (42435BB3)
b9ba3000 b9bcb000 ks ks.sys Fri Mar 25 08:41:03 2005 (42435E1F)
b9bcb000 b9bdf000 redbook redbook.sys Fri Mar 25 08:28:46 2005 (42435B3E)
b9bdf000 b9bf4000 cdrom cdrom.sys Fri Mar 25 08:28:57 2005 (42435B49)
b9bf4000 b9c09000 serial serial.sys Fri Mar 25 08:28:29 2005 (42435B2D)
b9c09000 b9c21000 parport parport.sys Fri Mar 25 08:28:25 2005 (42435B29)
b9c21000 b9c34000 i8042prt i8042prt.sys Fri Mar 25 08:41:05 2005 (42435E21)
b9c34000 b9c59600 e100b325 e100b325.sys Wed Oct 29 04:09:53 2003 (3F9ECD11)
b9c5a000 b9c75a00 b57xp32 b57xp32.sys Tue Feb 03 10:18:55 2004 (401F050F)
b9c76000 b9c91000 VIDEOPRT VIDEOPRT.SYS Fri Mar 25 08:29:53 2005 (42435B81)
b9c91000 b9ce4d80 ati2mpad ati2mpad.sys Fri Jul 19 09:13:20 2002 (3D3767B0)
b9fd8000 b9fdf000 Null Null.SYS Tue Mar 25 15:03:05 2003 (3E7FFF29)
ba020000 ba02f000 raspppoe raspppoe.sys Fri Mar 25 08:34:16 2005 (42435C88)
ba030000 ba039000 ndistapi ndistapi.sys Fri Mar 25 08:34:11 2005 (42435C83)
ba040000 ba04e000 VMNetSrv VMNetSrv.sys Tue Jun 15 09:18:09 2004 (40CE4E51)
ba050000 ba05c000 TAPE TAPE.SYS Fri Mar 25 08:29:01 2005 (42435B4D)
ba060000 ba06a000 serenum serenum.sys Fri Mar 25 08:28:27 2005 (42435B2B)
ba070000 ba07b000 fdc fdc.sys Fri Mar 25 08:28:43 2005 (42435B3B)
ba080000 ba08a000 mouclass mouclass.sys Tue Mar 25 15:03:09 2003 (3E7FFF2D)
ba090000 ba09a000 kbdclass kbdclass.sys Tue Mar 25 15:03:10 2003 (3E7FFF2E)
ba0a0000 ba0a9000 watchdog watchdog.sys Fri Mar 25 08:30:19 2005 (42435B9B)
ba0b0000 ba0bf000 intelppm intelppm.sys Fri Mar 25 08:28:40 2005 (42435B38)
ba726000 ba72de20 tifsfilt tifsfilt.sys Thu Apr 13 21:19:47 2006 (443E4FF3)
ba72e000 ba736000 RDPCDD RDPCDD.sys Tue Mar 25 15:03:05 2003 (3E7FFF29)
bf800000 bf9d0000 win32k win32k.sys Thu Oct 06 08:37:08 2005 (434471B4)
bf9d0000 bf9e6000 dxg dxg.sys Fri Mar 25 08:27:25 2005 (42435AED)
bf9e6000 bfa3c680 ati2drad ati2drad.dll Fri Mar 25 10:30:34 2005 (424377CA)
f70fc000 f711b000 Mup Mup.sys Fri Mar 25 08:40:49 2005 (42435E11)
f711b000 f71335c0 snapman snapman.sys Thu Mar 30 20:03:12 2006 (442BC900)
f7134000 f7192ba0 timntr timntr.sys Thu Apr 13 21:17:06 2006 (443E4F52)
f7193000 f71c9000 NDIS NDIS.sys Fri Mar 25 08:40:26 2005 (42435DFA)
f71c9000 f725e000 Ntfs Ntfs.sys Fri Mar 25 08:40:29 2005 (42435DFD)
f725e000 f7285000 KSecDD KSecDD.sys Fri Mar 25 08:28:53 2005 (42435B45)
f7285000 f72aa000 fltmgr fltmgr.sys Mon Aug 21 17:59:45 2006 (44E98411)
f72aa000 f72bd000 CLASSPNP CLASSPNP.SYS Fri Mar 25 08:40:23 2005 (42435DF7)
f72bd000 f72ce620 AACMgt AACMgt.sys Thu Apr 29 12:17:31 2004 (409081DB)
f72cf000 f72e9000 storport storport.sys Fri Mar 25 08:28:57 2005 (42435B49)
f72e9000 f732e000 elxstor elxstor.sys Tue Mar 23 09:25:11 2004 (405F91F7)
f732e000 f734d000 SCSIPORT SCSIPORT.SYS Fri Mar 25 08:40:26 2005 (42435DFA)
f734d000 f7382400 a320raid a320raid.sys Thu Apr 03 06:30:31 2003 (3E8B6487)
f7383000 f739f000 atapi atapi.sys Fri Mar 25 08:28:49 2005 (42435B41)
f739f000 f73c9000 volsnap volsnap.sys Fri Mar 25 08:29:10 2005 (42435B56)
f73c9000 f73f5000 dmio dmio.sys Fri Mar 25 08:30:02 2005 (42435B8A)
f73f5000 f741c000 ftdisk ftdisk.sys Fri Mar 25 08:29:00 2005 (42435B4C)
f741c000 f7432000 pci pci.sys Fri Mar 25 08:34:14 2005 (42435C86)
f7432000 f7466000 ACPI ACPI.sys Fri Mar 25 08:34:09 2005 (42435C81)
f7487000 f7490000 WMILIB WMILIB.SYS Tue Mar 25 15:13:00 2003 (3E80017C)
f7497000 f74a6000 isapnp isapnp.sys Tue Mar 25 15:16:35 2003 (3E800253)
f74a7000 f74b4000 PCIIDEX PCIIDEX.SYS Fri Mar 25 08:28:48 2005 (42435B40)
f74b7000 f74c7000 MountMgr MountMgr.sys Fri Mar 25 08:27:23 2005 (42435AEB)
f74c7000 f74d2000 PartMgr PartMgr.sys Fri Mar 25 08:40:34 2005 (42435E02)
f74d7000 f74e0000 elxadjct elxadjct.sys Tue Mar 23 09:36:04 2004 (405F9484)
f74e7000 f74f7000 disk disk.sys Fri Mar 25 08:28:58 2005 (42435B4A)
f74f7000 f7503000 Dfs Dfs.sys Fri Mar 25 08:30:28 2005 (42435BA4)
f7507000 f7511000 crcdisk crcdisk.sys Fri Mar 25 08:29:40 2005 (42435B74)
f7557000 f7561000 Dxapi Dxapi.sys Tue Mar 25 15:06:01 2003 (3E7FFFD9)
f7587000 f7596000 termdd termdd.sys Fri Mar 25 08:27:15 2005 (42435AE3)
f75a7000 f75b5000 NDProxy NDProxy.SYS Fri Mar 25 08:34:13 2005 (42435C85)
f75b7000 f75c3000 vga vga.sys Fri Mar 25 08:29:54 2005 (42435B82)
f75c7000 f75d1880 mdm2iteg mdm2iteg.sys Thu Nov 27 16:05:24 2003 (3FC5B044)
f7607000 f7612000 TDI TDI.SYS Fri Mar 25 08:35:34 2005 (42435CD6)
f7647000 f7650000 mssmbios mssmbios.sys Fri Mar 25 08:34:14 2005 (42435C86)
f7697000 f76a0000 raspti raspti.sys Fri Mar 25 08:34:16 2005 (42435C88)
f76a7000 f76b2000 ptilink ptilink.sys Fri Mar 25 08:28:25 2005 (42435B29)
f7707000 f770f000 kdcom kdcom.dll Tue Mar 25 15:08:00 2003 (3E800050)
f770f000 f7717000 BOOTVID BOOTVID.dll Tue Mar 25 15:07:58 2003 (3E80004E)
f7717000 f771e000 pciide pciide.sys Tue Mar 25 15:04:46 2003 (3E7FFF8E)
f771f000 f7726000 dmload dmload.sys Tue Mar 25 15:08:08 2003 (3E800058)
f7727000 f772b9a0 dpti2o dpti2o.sys Thu May 02 22:49:25 2002 (3CD151F5)
f774f000 f7755300 HIDPARSE HIDPARSE.SYS Fri Mar 25 08:30:36 2005 (42435BAC)
f779f000 f77a7000 Fs_Rec Fs_Rec.SYS Tue Mar 25 15:08:36 2003 (3E800074)
f77a7000 f77af000 mouhid mouhid.sys Tue Mar 25 15:03:12 2003 (3E7FFF30)
f77df000 f77e7000 audstub audstub.sys Tue Mar 25 15:09:12 2003 (3E800098)
f77ef000 f77f3400 usbohci usbohci.sys Fri Mar 25 08:30:45 2005 (42435BB5)
f77f7000 f77ff000 rasacd rasacd.sys Tue Mar 25 15:11:50 2003 (3E800136)
f7807000 f780e000 Beep Beep.SYS Tue Mar 25 15:03:04 2003 (3E7FFF28)
f781f000 f7827000 mnmdd mnmdd.SYS Tue Mar 25 15:07:53 2003 (3E800049)
f79f3000 f79f43e0 tnbg_lto tnbg_lto.sys Thu Jan 26 16:48:52 2006 (43D88CF4)
f79f5000 f79f6280 swenum swenum.sys Fri Mar 25 08:27:42 2005 (42435AFE)
f79f7000 f79f8580 USBD USBD.SYS Tue Mar 25 15:10:39 2003 (3E8000EF)

Unloaded modules:
b8abc000 b8aca000 imapi.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f7557000 f7560000 kbdhid.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f77af000 f77b7000 Sfloppy.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000

 

Upgrade ZoneAlarm

Hi,

Your problem may be related to ZA. Upgrade or de-install ZA may resolve the problem.