Hello everyone! I'm new here, hopefully someone can help with this. I've been crazy about a problem with my PC for a few months now but because of work I've barely been able to find the time to look into it until a few weeks ago. The error is as follows, ALWAYS when I turn off or restart the computer I get a memory management BSOD, it doesn't fail for a single day.
Probably at this point you think it is a RAM problem, I would say for sure it is not, at least at hardware level, I have done different RAM tests for hours and hours without errors and in my day to day I use the 16GB at 100% of its capacity with really heavy programs and I have never received a BSOD in those moments of stress, Drivers? everything is up to date.
After enough desperation I decided to do a completely clean install and I'm not talking about a soft format, I completely wiped the hard drives with a removable drive with a Linux Live and after that I did the install, extremely long process but no problems that same day when I shut down the computer, surprise surprise the <Mod Edit> BSOD.
At this point I had no idea what to do, a friend who works with Windows Servers recommended me to install WinDbg as he told me is what is used to discover the specific reason for crashes, I have done it and here I have the results of my MEMORY.DMP:
Thank you for your attention, sorry for so much text (I have summarized it a lot) but I'm fed up with the problem, too many hours lost...
Probably at this point you think it is a RAM problem, I would say for sure it is not, at least at hardware level, I have done different RAM tests for hours and hours without errors and in my day to day I use the 16GB at 100% of its capacity with really heavy programs and I have never received a BSOD in those moments of stress, Drivers? everything is up to date.
After enough desperation I decided to do a completely clean install and I'm not talking about a soft format, I completely wiped the hard drives with a removable drive with a Linux Live and after that I did the install, extremely long process but no problems that same day when I shut down the computer, surprise surprise the <Mod Edit> BSOD.
At this point I had no idea what to do, a friend who works with Windows Servers recommended me to install WinDbg as he told me is what is used to discover the specific reason for crashes, I have done it and here I have the results of my MEMORY.DMP:
I honestly have no idea what it says, but according to what I have read there could be the culprit and therefore the solution.Microsoft (R) Windows Debugger Version 10.0.19041.685 AMD64
Copyright (c) Microsoft Corporation. All rights reserved.
Loading Dump File [C:\Users\tomas\Desktop\MEMORY.DMP]
Kernel Bitmap Dump File: Kernel address space is available, User address space may not be available.
Symbol search path is: srv*
Executable search path is:
Windows 10 Kernel Version 19041 MP (12 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS Personal
Built by: 19041.1.amd64fre.vb_release.191206-1406
Machine Name:
Kernel base = 0xfffff80110200000 PsLoadedModuleList = 0xfffff801
10e2a390
Debug session time: Fri Feb 19 05:47:13.306 2021 (UTC + 1:00)
System Uptime: 0 days 8:24:20.001
Loading Kernel Symbols
...............................................................
..................Page 2840d7 not present in the dump file. Type ".hh dbgerr004" for details
..............................................
.....................................Page 294fac not present in the dump file. Type ".hh dbgerr004" for details
...........................
..............
Loading User Symbols
PEB is paged out (Peb.Ldr = 0000000165497018). Type ".hh dbgerr001" for details
1422f8f8 fffff801
Loading unloaded module list
..............................
For analysis of this file, run !analyze -v
9: kd> !analyze -v
*******************************************************************************
[LIST]
[*]*
[*]Bugcheck Analysis *
[*]*
[/LIST]
*******************************************************************************
MEMORY_MANAGEMENT (1a)
# Any other values for parameter 1 must be individually examined.
Arguments:
Arg1: 0000000018011544, The subtype of the bugcheck.
Arg2: fffffc4000bed8f8
Arg3: ffffffffc000001d
Arg4: 0000000000000000
Debugging Details:
------------------
KEY_VALUES_STRING: 1
Key : Analysis.CPU.Sec
Value: 9
Key : Analysis.DebugAnalysisProvider.CPP
Value: Create: 8007007e on DELL
Key : Analysis.DebugData
Value: CreateObject
Key : Analysis.DebugModel
Value: CreateObject
Key : Analysis.Elapsed.Sec
Value: 27
Key : Analysis.Memory.CommitPeak.Mb
Value: 90
Key : Analysis.System
Value: CreateObject
BUGCHECK_CODE: 1a
BUGCHECK_P1: 18011544
BUGCHECK_P2: fffffc4000bed8f8
BUGCHECK_P3: ffffffffc000001d
BUGCHECK_P4: 0
PROCESS_NAME: aesm_service.exe
STACK_TEXT:
ffff960810bacf46 : 00000000
0000001a 0000000018011544 fffffc40
00bed8f8 ffffffffc000001d : nt!KeBugCheckEx
1422f900 fffff801
ffff960810bace01 : ffffffff
ffffffff ffffe106901eb8e0 ffffe106
901eb958 ffffe10692581040 : nt!MiDeleteEnclavePages+0xb6
1422f940 fffff801
ffff960810bac1c1 : 00000000
00000000 fffff80110bad290 fffff801
10e50fd0 ffff96080d94f960 : nt!MiDeleteAllHardwareEnclaves+0x111
1422f9c0 fffff801
ffff960810bac4c3 : ffffe106
92581040 fffff80110bad290 ffffe106
6be97ce0 0000000000000000 : nt!MiShutdownSystem+0xd9
1422fa00 fffff801
ffff960810bad49d : ffffe106
92581040 fffff80110bad290 ffffe106
6be97ce0 0000000000000000 : nt!MmShutdownSystem+0x13
1422fa30 fffff801
ffff960810425975 : ffffe106
92581040 fffff8011052a520 ffffe106
6be97ce0 ffffe10600000000 : nt!PopGracefulShutdown+0x20d
1422fa70 fffff801
ffff960810517e25 : ffffe106
92581040 0000000000000080 ffffe106
6be9c040 0000000000000000 : nt!ExpWorkerThread+0x105
1422fb10 fffff801
ffff9608105fd0d8 : ffff8001
7aa44180 ffffe10692581040 fffff801
10517dd0 0000000000000246 : nt!PspSystemThreadStartup+0x55
1422fb60 00000000
ffff960800000000 : ffff9608
14230000 ffff960814229000 00000000
00000000 00000000`00000000 : nt!KiStartSystemThread+0x28
SYMBOL_NAME: nt!MiDeleteEnclavePages+b6
MODULE_NAME: nt
STACK_COMMAND: .thread ; .cxr ; kb
IMAGE_NAME: memory_corruption
BUCKET_ID_FUNC_OFFSET: b6
FAILURE_BUCKET_ID: 0x1a_18011544_nt!MiDeleteEnclavePages
OS_VERSION: 10.0.19041.1
BUILDLAB_STR: vb_release
OSPLATFORM_TYPE: x64
OSNAME: Windows 10
FAILURE_ID_HASH: {70ee176e-1781-c320-228f-bb9b4e5e5b08}
Followup: MachineOwner
---------
Thank you for your attention, sorry for so much text (I have summarized it a lot) but I'm fed up with the problem, too many hours lost...
Last edited by a moderator: