Unknown_Image minidump

Question

Hi,

My PC is crashing allot and i heard that you can verify the problem using minidump, so i wan't to ask what my problem is!

Minidump thru Osronline.

Crash Dump Analysis provided by OSR Open Systems Resources, Inc. (http://www.osr.com)
Online Crash Dump Analysis Service
See http://www.osronline.com for more information
Windows 8 Kernel Version 17134 MP (12 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS Personal
Machine Name:
Kernel base = 0xfffff800`0c49e000 PsLoadedModuleList = 0xfffff800`0c8581f0
Debug session time: Sun Aug  5 16:18:43.231 2018 (UTC - 4:00)
System Uptime: 0 days 0:24:59.934
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

ATTEMPTED_WRITE_TO_READONLY_MEMORY (be)
An attempt was made to write to readonly memory.  The guilty driver is on the
stack trace (and is typically the current instruction pointer).
When possible, the guilty driver's name (Unicode string) is printed on
the bugcheck screen and saved in KiBugCheckDriver.
Arguments:
Arg1: ffff9607a154d478, Virtual address for the attempted write.
Arg2: 810000000b2ce121, PTE contents.
Arg3: ffff8a0b77eeb5f0, (reserved)
Arg4: 000000000000000b, (reserved)

Debugging Details:
------------------

TRIAGER: Could not open triage file : e:\dump_analysis\program\triage\modclass.ini, error 2

CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  WIN8_DRIVER_FAULT

BUGCHECK_STR:  0xBE

PROCESS_NAME:  explorer.exe

CURRENT_IRQL:  2

BAD_PAGES_DETECTED: a13e

TRAP_FRAME:  ffff8a0b77eeb5f0 -- (.trap 0xffff8a0b77eeb5f0)
NOTE: The trap frame does not contain all registers.
Some register values may be zeroed or incorrect.
rax=ffff9607a1d49890 rbx=0000000000000000 rcx=0000000000000000
rdx=ffff9607a1d49890 rsi=0000000000000000 rdi=0000000000000000
rip=fffff8000c9ff8e0 rsp=ffff8a0b77eeb780 rbp=ffff8a0b77eeb839
 r8=0000000000000000  r9=0000000000000001 r10=fffff8000c8714e0
r11=0000000000000000 r12=0000000000000000 r13=0000000000000000
r14=0000000000000000 r15=0000000000000000
iopl=0         nv up ei ng nz na po nc
nt!PiDmEnumObjectsWithCallback+0x168:
fffff800`0c9ff8e0 f0ff4308        lock inc dword ptr [rbx+8] ds:00000000`00000008=????????
Resetting default scope

LOCK_ADDRESS:  fffff8000c8724e0 -- (!locks fffff8000c8724e0)

Resource @ nt!PiEngineLock (0xfffff8000c8724e0)    Available

WARNING: SystemResourcesList->Flink chain invalid. Resource may be corrupted, or already deleted.

WARNING: SystemResourcesList->Blink chain invalid. Resource may be corrupted, or already deleted.

1 total locks

PNP_TRIAGE: 
Lock address  : 0xfffff8000c8724e0
Thread Count  : 0
Thread address: 0x0000000000000000
Thread wait   : 0x0

LAST_CONTROL_TRANSFER:  from fffff8000c6885c7 to fffff8000c636430

STACK_TEXT:  
ffff8a0b`77eeb338 fffff800`0c6885c7 : 00000000`000000be ffff9607`a154d478 81000000`0b2ce121 ffff8a0b`77eeb5f0 : nt!KeBugCheckEx
ffff8a0b`77eeb340 fffff800`0c54b408 : 00000000`00000000 00000000`00000003 00000000`00000000 ffff8844`22110880 : nt!MiSystemFault+0x1416e7
ffff8a0b`77eeb480 fffff800`0c643ada : ffffd103`00000000 00000000`00000000 fffff800`0c795140 ffffd103`b31b0b60 : nt!MmAccessFault+0x1f8
ffff8a0b`77eeb5f0 fffff800`0c9ff8e0 : ffff9607`a1d5d230 ffff8a0b`77eeb839 fffff800`0c871480 00000000`00000000 : nt!KiPageFault+0x31a
ffff8a0b`77eeb780 fffff800`0ca05034 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`c0000001 : nt!PiDmEnumObjectsWithCallback+0x168
ffff8a0b`77eeb8a0 fffff800`0ca0332d : 00000000`00000000 ffffd103`00000000 00000000`00000016 00000000`00000000 : nt!PiDqObjectManagerEnumerateAndRegisterQuery+0x348
ffff8a0b`77eeb9e0 fffff800`0ca5310a : ffffd103`b31b0b60 00000000`00000000 00000000`00000000 ffff8a0b`77eebb20 : nt!PiDqQuerySerializeActionQueue+0xa1
ffff8a0b`77eeba70 fffff800`0ca015ea : ffffd103`b6f803a0 fffff800`0c52d501 ffffd103`00000000 ffffd103`b6085e00 : nt!PiDqIrpQueryGetResult+0x14e
ffff8a0b`77eebb10 fffff800`0ca00266 : ffffd103`b6f803a0 ffffd103`b0971e40 fffff800`0c799940 00000000`00002000 : nt!PiDqDispatch+0x1ca
ffff8a0b`77eebb50 fffff800`0c5221a9 : ffffd103`b6f803a0 ffffd103`b7ca3860 00000000`00000000 00000000`20206f49 : nt!PiDaDispatch+0x46
ffff8a0b`77eebb80 fffff800`0c9952eb : ffffd103`b6f803a0 00000000`00000000 ffffd103`b6f803a0 00000000`00000000 : nt!IofCallDriver+0x59
ffff8a0b`77eebbc0 fffff800`0c9a122f : ffffd103`00000000 ffffd103`b7ca38b0 00000000`00000000 ffff8a0b`77eec001 : nt!IopSynchronousServiceTail+0x1ab
ffff8a0b`77eebc70 fffff800`0c9a19d6 : ffff87ec`25a7908f 00000000`00000000 00000000`00000000 00000000`1aaacf88 : nt!IopXxxControlFile+0x66f
ffff8a0b`77eebda0 fffff806`f18ae0f8 : 00000000`00000002 00000000`000002f8 00000000`00000088 00000000`82ac8004 : nt!NtDeviceIoControlFile+0x56
ffff8a0b`77eebe10 00000000`00000002 : 00000000`000002f8 00000000`00000088 00000000`82ac8004 00000000`1aaacf88 : aswSnx+0x2e0f8
ffff8a0b`77eebe18 00000000`000002f8 : 00000000`00000088 00000000`82ac8004 00000000`1aaacf88 fffff806`00470007 : 0x2
ffff8a0b`77eebe20 00000000`00000088 : 00000000`82ac8004 00000000`1aaacf88 fffff806`00470007 00000000`00000000 : 0x2f8
ffff8a0b`77eebe28 00000000`82ac8004 : 00000000`1aaacf88 fffff806`00470007 00000000`00000000 00000000`00000000 : 0x88
ffff8a0b`77eebe30 00000000`1aaacf88 : fffff806`00470007 00000000`00000000 00000000`00000000 00000000`1f4fd7f0 : 0x82ac8004
ffff8a0b`77eebe38 fffff806`00470007 : 00000000`00000000 00000000`00000000 00000000`1f4fd7f0 00000000`00001000 : 0x1aaacf88
ffff8a0b`77eebe40 00000000`00000000 : 00000000`00000000 00000000`1f4fd7f0 00000000`00001000 00000000`00000000 : 0xfffff806`00470007

STACK_COMMAND:  kb

SYMBOL_NAME:  PAGE_NOT_ZERO

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: Unknown_Module

IMAGE_NAME:  Unknown_Image

DEBUG_FLR_IMAGE_TIMESTAMP:  0

BUCKET_ID:  PAGE_NOT_ZERO

Followup: MachineOwner
---------

 *** Memory manager detected 41278 instance(s) of page corruption, target is likely to have memory corruption.and Crash Dump Analysis provided by OSR Open Systems Resources, Inc. (http://www.osr.com)
Online Crash Dump Analysis Service
See http://www.osronline.com for more information
Windows 8 Kernel Version 17134 MP (12 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS Personal
Machine Name:
Kernel base = 0xfffff800`df891000 PsLoadedModuleList = 0xfffff800`dfc4b1f0
Debug session time: Sun Aug  5 17:02:29.620 2018 (UTC - 4:00)
System Uptime: 0 days 0:26:37.324
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

MEMORY_MANAGEMENT (1a)
    # Any other values for parameter 1 must be individually examined.
Arguments:
Arg1: 0000000000041201, The subtype of the bugcheck.
Arg2: ffff9680edbe5580
Arg3: 81000000de53f867
Arg4: ffff9b067e3c9e30

Debugging Details:
------------------

TRIAGER: Could not open triage file : e:\dump_analysis\program\triage\modclass.ini, error 2

BUGCHECK_STR:  0x1a_41201

CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  WIN8_DRIVER_FAULT

PROCESS_NAME:  svchost.exe

CURRENT_IRQL:  2

BAD_PAGES_DETECTED: 93ed

LAST_CONTROL_TRANSFER:  from fffff800dfa7c2bf to fffff800dfa29430

STACK_TEXT:  
ffff838a`0d7b45a8 fffff800`dfa7c2bf : 00000000`0000001a 00000000`00041201 ffff9680`edbe5580 81000000`de53f867 : nt!KeBugCheckEx
ffff838a`0d7b45b0 fffff800`df93d5d0 : 00000000`00001000 81000000`de53f867 ffff96cb`4076df28 00000000`00000000 : nt!MiGetPageProtection+0x13f89f
ffff838a`0d7b4610 fffff800`df99b1b6 : 000001db`7cc00000 fffff800`dfd93502 ffff9b06`812e6990 00000000`00000018 : nt!MiQueryAddressState+0x550
ffff838a`0d7b4800 fffff800`dfda4ad6 : ffff9b06`00000000 00000000`00000000 ffff9b06`00000001 ffff838a`00000001 : nt!MiQueryAddressSpan+0x126
ffff838a`0d7b48a0 fffff800`dfda4371 : ffff4e78`ac6c4ef3 0000023d`5b4f0000 00000000`10000000 000000e7`18c7f3a0 : nt!MmQueryVirtualMemory+0x756
ffff838a`0d7b4a40 fffff800`dfa39a43 : ffff9b06`792fcbb0 00000000`00000000 00007ffa`77566d4d ffff838a`0d7b4a00 : nt!NtQueryVirtualMemory+0x25
ffff838a`0d7b4a90 00007ffa`630ba314 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSystemServiceCopyEnd+0x13
000000e7`18c7f128 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x7ffa`630ba314

STACK_COMMAND:  kb

SYMBOL_NAME:  PAGE_NOT_ZERO

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: Unknown_Module

IMAGE_NAME:  Unknown_Image

DEBUG_FLR_IMAGE_TIMESTAMP:  0

BUCKET_ID:  PAGE_NOT_ZERO

Followup: MachineOwner
---------

 *** Memory manager detected 37869 instance(s) of page corruption, target is likely to have memory corruption.

Answer 1

We need log files(called dump files) that tell us what lead to crash.

Please share them with us for a better analysis of the problem. Instructions can be found here:

https://answers.microsoft.com/en-us/windows/for...

Please let us know if you need any assistance about posting dump files.

Answer 2

Hi, Koen

Check these links, the first is to check the Ram Memory and the second is to check the Operating System, I hope you can solve the problem.

https://www.softwareok.com/?seite=faq-Windows-1...

https://support.microsoft.com/en-us/help/929833...

Standard Disclaimer: There are links to non-Microsoft websites. The pages appear to be providing accurate, safe information. Watch out for ads on the sites that may advertise products frequently classified as a PUP (Potentially Unwanted Products). Thoroughly research any product advertised on the sites before you decide to download and install it.