Hello everyone! I'm new here, hopefully someone can help with this. I've been crazy about a problem with my PC for a few months now but because of work I've barely been able to find the time to look into it until a few weeks ago. The error is as follows, ALWAYS when I turn off or restart the computer I get a memory management BSOD, it doesn't fail for a single day.
Probably at this point you think it is a RAM problem, I would say for sure it is not, at least at hardware level, I have done different RAM tests for hours and hours without errors and in my day to day I use the 16GB at 100% of its capacity with really heavy programs and I have never received a BSOD in those moments of stress, Drivers? everything is up to date.
After enough desperation I decided to do a completely clean install and I'm not talking about a soft format, I completely wiped the hard drives with a removable drive with a Linux Live and after that I did the install, extremely long process but no problems that same day when I shut down the computer, surprise surprise the <Mod Edit> BSOD.
At this point I had no idea what to do, a friend who works with Windows Servers recommended me to install WinDbg as he told me is what is used to discover the specific reason for crashes, I have done it and here I have the results of my MEMORY.DMP:
I honestly have no idea what it says, but according to what I have read there could be the culprit and therefore the solution.
Thank you for your attention, sorry for so much text (I have summarized it a lot) but I'm fed up with the problem, too many hours lost...
Probably at this point you think it is a RAM problem, I would say for sure it is not, at least at hardware level, I have done different RAM tests for hours and hours without errors and in my day to day I use the 16GB at 100% of its capacity with really heavy programs and I have never received a BSOD in those moments of stress, Drivers? everything is up to date.
After enough desperation I decided to do a completely clean install and I'm not talking about a soft format, I completely wiped the hard drives with a removable drive with a Linux Live and after that I did the install, extremely long process but no problems that same day when I shut down the computer, surprise surprise the <Mod Edit> BSOD.
At this point I had no idea what to do, a friend who works with Windows Servers recommended me to install WinDbg as he told me is what is used to discover the specific reason for crashes, I have done it and here I have the results of my MEMORY.DMP:
Microsoft (R) Windows Debugger Version 10.0.19041.685 AMD64
Copyright (c) Microsoft Corporation. All rights reserved.
Loading Dump File [C:\Users\tomas\Desktop\MEMORY.DMP]
Kernel Bitmap Dump File: Kernel address space is available, User address space may not be available.
Symbol search path is: srv*
Executable search path is:
Windows 10 Kernel Version 19041 MP (12 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS Personal
Built by: 19041.1.amd64fre.vb_release.191206-1406
Machine Name:
Kernel base = 0xfffff80110200000 PsLoadedModuleList = 0xfffff801
10e2a390
Debug session time: Fri Feb 19 05:47:13.306 2021 (UTC + 1:00)
System Uptime: 0 days 8:24:20.001
Loading Kernel Symbols
...............................................................
..................Page 2840d7 not present in the dump file. Type ".hh dbgerr004" for details
..............................................
.....................................Page 294fac not present in the dump file. Type ".hh dbgerr004" for details
...........................
..............
Loading User Symbols
PEB is paged out (Peb.Ldr = 0000000165497018). Type ".hh dbgerr001" for details Loading unloaded module list .............................. For analysis of this file, run !analyze -v 9: kd> !analyze -v ******************************************************************************* [LIST] [*]* [*]Bugcheck Analysis * [*]* [/LIST] ******************************************************************************* MEMORY_MANAGEMENT (1a) # Any other values for parameter 1 must be individually examined. Arguments: Arg1: 0000000018011544, The subtype of the bugcheck. Arg2: fffffc4000bed8f8 Arg3: ffffffffc000001d Arg4: 0000000000000000 Debugging Details: ------------------ KEY_VALUES_STRING: 1 Key : Analysis.CPU.Sec Value: 9 Key : Analysis.DebugAnalysisProvider.CPP Value: Create: 8007007e on DELL Key : Analysis.DebugData Value: CreateObject Key : Analysis.DebugModel Value: CreateObject Key : Analysis.Elapsed.Sec Value: 27 Key : Analysis.Memory.CommitPeak.Mb Value: 90 Key : Analysis.System Value: CreateObject BUGCHECK_CODE: 1a BUGCHECK_P1: 18011544 BUGCHECK_P2: fffffc4000bed8f8 BUGCHECK_P3: ffffffffc000001d BUGCHECK_P4: 0 PROCESS_NAME: aesm_service.exe STACK_TEXT: ffff9608
1422f8f8 fffff80110bacf46 : 00000000
0000001a 0000000018011544 fffffc40
00bed8f8 ffffffffc000001d : nt!KeBugCheckEx ffff9608
1422f900 fffff80110bace01 : ffffffff
ffffffff ffffe106901eb8e0 ffffe106
901eb958 ffffe10692581040 : nt!MiDeleteEnclavePages+0xb6 ffff9608
1422f940 fffff80110bac1c1 : 00000000
00000000 fffff80110bad290 fffff801
10e50fd0 ffff96080d94f960 : nt!MiDeleteAllHardwareEnclaves+0x111 ffff9608
1422f9c0 fffff80110bac4c3 : ffffe106
92581040 fffff80110bad290 ffffe106
6be97ce0 0000000000000000 : nt!MiShutdownSystem+0xd9 ffff9608
1422fa00 fffff80110bad49d : ffffe106
92581040 fffff80110bad290 ffffe106
6be97ce0 0000000000000000 : nt!MmShutdownSystem+0x13 ffff9608
1422fa30 fffff80110425975 : ffffe106
92581040 fffff8011052a520 ffffe106
6be97ce0 ffffe10600000000 : nt!PopGracefulShutdown+0x20d ffff9608
1422fa70 fffff80110517e25 : ffffe106
92581040 0000000000000080 ffffe106
6be9c040 0000000000000000 : nt!ExpWorkerThread+0x105 ffff9608
1422fb10 fffff801105fd0d8 : ffff8001
7aa44180 ffffe10692581040 fffff801
10517dd0 0000000000000246 : nt!PspSystemThreadStartup+0x55 ffff9608
1422fb60 0000000000000000 : ffff9608
14230000 ffff960814229000 00000000
00000000 00000000`00000000 : nt!KiStartSystemThread+0x28
SYMBOL_NAME: nt!MiDeleteEnclavePages+b6
MODULE_NAME: nt
STACK_COMMAND: .thread ; .cxr ; kb
IMAGE_NAME: memory_corruption
BUCKET_ID_FUNC_OFFSET: b6
FAILURE_BUCKET_ID: 0x1a_18011544_nt!MiDeleteEnclavePages
OS_VERSION: 10.0.19041.1
BUILDLAB_STR: vb_release
OSPLATFORM_TYPE: x64
OSNAME: Windows 10
FAILURE_ID_HASH: {70ee176e-1781-c320-228f-bb9b4e5e5b08}
Followup: MachineOwner
---------
I honestly have no idea what it says, but according to what I have read there could be the culprit and therefore the solution.
Thank you for your attention, sorry for so much text (I have summarized it a lot) but I'm fed up with the problem, too many hours lost...
Last edited by a moderator: