Windows 10: Memory Dump

I am getting an blue screen and memory dump.


Please can someone assist in resolving this matter, I keep on losing work and it is frustrating


*******************************************************************************

* *

* Bugcheck Analysis *

* *

*******************************************************************************



SYSTEM_SERVICE_EXCEPTION 3b

An exception happened while executing a system service routine.

Arguments:

Arg1: 00000000c0000006, Exception code that caused the bugcheck

Arg2: fffff8061f7d7f42, Address of the instruction which caused the bugcheck

Arg3: ffff8083bc5394f0, Address of the context record for the exception that caused the bugcheck

Arg4: 0000000000000000, zero.



Debugging Details:

------------------





KEY_VALUES_STRING: 1





PROCESSES_ANALYSIS: 1



SERVICE_ANALYSIS: 1



STACKHASH_ANALYSIS: 1



TIMELINE_ANALYSIS: 1





DUMP_CLASS: 1



DUMP_QUALIFIER: 401



BUILD_VERSION_STRING: 18362.1.amd64fre.19h1_release.190318-1202



SYSTEM_MANUFACTURER: LENOVO



SYSTEM_PRODUCT_NAME: 10BD000ESA



SYSTEM_SKU: LENOVO_MT_10BD



SYSTEM_VERSION: ThinkCentre E73z



BIOS_VENDOR: LENOVO



BIOS_VERSION: FGKT34AUS



BIOS_DATE: 08/29/2014



BASEBOARD_MANUFACTURER: LENOVO



BASEBOARD_PRODUCT: SHARKBAY



BASEBOARD_VERSION: 0B98401 PRO



DUMP_TYPE: 1



BUGCHECK_P1: c0000006



BUGCHECK_P2: fffff8061f7d7f42



BUGCHECK_P3: ffff8083bc5394f0



BUGCHECK_P4: 0



EXCEPTION_CODE: NTSTATUS 0xc0000006 - The instruction at 0x%p referenced memory at 0x%p. The required data was not placed into memory because of an I/O error status of 0x%x.



FAULTING_IP:

nt!HvpGetCellPaged+a2

fffff806`1f7d7f42 418b02 mov eax,dword ptr [r10]



CONTEXT: ffff8083bc5394f0 -- .cxr 0xffff8083bc5394f0

rax=0000000000000000 rbx=ffff8083bc539f40 rcx=0000000000000007

rdx=0000000003879020 rsi=00000000000002d3 rdi=ffffdd0c1f7cd000

rip=fffff8061f7d7f42 rsp=ffff8083bc539ee8 rbp=ffffdd0c1f7cd000

r8=000000000000001c r9=ffffc688acc72080 r10=00000177fd88a020

r11=0000000000000020 r12=0000000012eae192 r13=ffff8083bc53a1a0

r14=00000000000002d3 r15=00000177fd7cb024

iopl=0 nv up ei pl nz na pe nc

cs=0010 ss=0018 ds=002b es=002b fs=0053 gs=002b efl=00010202

nt!HvpGetCellPaged+0xa2:

fffff806`1f7d7f42 418b02 mov eax,dword ptr [r10] ds:002b:00000177`fd88a020=????????

Resetting default scope



BUGCHECK_STR: 0x3B_c0000006



CPU_COUNT: 4



CPU_MHZ: e6b



CPU_VENDOR: GenuineIntel



CPU_FAMILY: 6



CPU_MODEL: 3c



CPU_STEPPING: 3



CPU_MICROCODE: 6,3c,3,0 F,M,S,R SIG: 25'00000000 cache 25'00000000 init



BLACKBOXBSD: 1 !blackboxbsd





BLACKBOXNTFS: 1 !blackboxntfs





BLACKBOXPNP: 1 !blackboxpnp





BLACKBOXWINLOGON: 1



DEFAULT_BUCKET_ID: WIN8_DRIVER_FAULT



PROCESS_NAME: Registry



CURRENT_IRQL: 0



ANALYSIS_SESSION_HOST: DESKTOP-80ANR7J



ANALYSIS_SESSION_TIME: 03-30-2020 11:11:04.0593



ANALYSIS_VERSION: 10.0.18362.1 amd64fre



LAST_CONTROL_TRANSFER: from fffff8061f8cb09f to fffff8061f7d7f42



STACK_TEXT:

ffff8083`bc539ee8 fffff806`1f8cb09f : 00000000`c3b262ae ffff8083`bc53a270 ffffc688`acc72080 ffffdd0c`2a373720 : nt!HvpGetCellPaged+0xa2

ffff8083`bc539ef0 fffff806`1f8c9999 : 00000001`ffffffff 00000000`12eae192 ffffdd0c`00000001 ffffdd0c`2a3736f0 : nt!CmpDoCompareKeyName+0x2f

ffff8083`bc539f40 fffff806`1f8bb8ca : ffffdd0c`2a3736f0 00000000`00000006 ffff8083`bc53a138 ffff8083`bc53a1c0 : nt!CmpWalkOneLevel+0x709

ffff8083`bc53a050 fffff806`1f8b8934 : ffff8083`0000001c ffff8083`bc53a3a0 ffff8083`bc53a368 00000000`00000000 : nt!CmpDoParseKey+0x9fa

ffff8083`bc53a2f0 fffff806`1f8b681f : ffffc688`a48ad700 ffffdd0c`2a802401 00000000`00000000 00000000`00000001 : nt!CmpParseKey+0x274

ffff8083`bc53a510 fffff806`1f8b4c81 : ffffc688`a48ad700 ffff8083`bc53a758 ffffdd0c`00000040 ffffc688`a0ccd2a0 : nt!ObpLookupObjectName+0x78f

ffff8083`bc53a6d0 fffff806`1f8be19c : 00000000`00000001 00000000`00000000 00000000`00000000 ffffc688`a0ccd2a0 : nt!ObOpenObjectByNameEx+0x201

ffff8083`bc53a810 fffff806`1f8be01d : 0000006f`ad7fe530 ffff8083`bc53ab80 00000000`00000001 00000000`00000000 : nt!ObOpenObjectByName+0x5c

ffff8083`bc53a860 fffff806`1f8c003f : 000001e4`2bcbbeb0 00000000`00000000 00000000`00000000 000001e4`2acae820 : nt!CmOpenKey+0x29d

ffff8083`bc53aac0 fffff806`1f3d3c18 : 000001e4`00000000 ffff8083`00000001 000001e4`2bcbbeb0 ffff8083`bc53ab80 : nt!NtOpenKeyEx+0xf

ffff8083`bc53ab00 00007fff`d089e414 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSystemServiceCopyEnd+0x28

0000006f`ad7fe458 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x00007fff`d089e414





THREAD_SHA1_HASH_MOD_FUNC: c60f19c144f9d7dd390ce35adb8e8dcc06aff971



THREAD_SHA1_HASH_MOD_FUNC_OFFSET: d82e865cfa12e23bdd842357f7d98796f05fcb05



THREAD_SHA1_HASH_MOD: b28610981796779b4ac02f58898fde25728a775c



FOLLOWUP_IP:

nt!HvpGetCellPaged+a2

fffff806`1f7d7f42 418b02 mov eax,dword ptr [r10]



FAULT_INSTR_CODE: 41028b41



SYMBOL_STACK_INDEX: 0



SYMBOL_NAME: nt!HvpGetCellPaged+a2



FOLLOWUP_NAME: MachineOwner



MODULE_NAME: nt



IMAGE_NAME: ntkrnlmp.exe



DEBUG_FLR_IMAGE_TIMESTAMP: 0



STACK_COMMAND: .cxr 0xffff8083bc5394f0 ; kb



BUCKET_ID_FUNC_OFFSET: a2



FAILURE_BUCKET_ID: 0x3B_c0000006_nt!HvpGetCellPaged



BUCKET_ID: 0x3B_c0000006_nt!HvpGetCellPaged



PRIMARY_PROBLEM_CLASS: 0x3B_c0000006_nt!HvpGetCellPaged



TARGET_TIME: 2020-03-30T07:12:50.000Z



OSBUILD: 18362



OSSERVICEPACK: 0



SERVICEPACK_NUMBER: 0



OS_REVISION: 0



SUITE_MASK: 272



PRODUCT_TYPE: 1



OSPLATFORM_TYPE: x64



OSNAME: Windows 10



OSEDITION: Windows 10 WinNt TerminalServer SingleUserTS



OS_LOCALE:



USER_LCID: 0



OSBUILD_TIMESTAMP: unknown_date



BUILDDATESTAMP_STR: 190318-1202



BUILDLAB_STR: 19h1_release



BUILDOSVER_STR: 10.0.18362.1.amd64fre.19h1_release.190318-1202



ANALYSIS_SESSION_ELAPSED_TIME: 1b9c7



ANALYSIS_SOURCE: KM



FAILURE_ID_HASH_STRING: km:0x3b_c0000006_nt!hvpgetcellpaged



FAILURE_ID_HASH: {68f3db38-ae8e-4bae-c37a-85819946495f}



Followup: MachineOwner

---------

:)

 

Frequent Memory Dumps

Thank you for your response.

I have uninstalled cccleANER as suggested.

I have turned off real time scanning on McAfee Total Protection.

A couple of questions:

1. How can I check that I am not getting Memory dump files anymore? - they were detected by cccleANER
2. How can I check that I'm not getting interference between Malwarebytes and McAfee? - i.e. I need to know what level of RAM?
   

Thank you for your assistance

 

Surface Pro Kernel Memory Dump When It Turn On Every time!

Hi,



Thank you for writing to Microsoft Community Forums.



As the dump file is kernel memory dump file. Please note that it records only the kernel memory. This speeds up the process of recording information in a log when your computer stops unexpectedly. You must have a pagefile large enough to accommodate
your kernel memory. The page file must be on the boot volume. Otherwise, a memory dump cannot be created. Before we provide any suggestions, I would like to confirm few things:

1. Could you please elaborate the statement: I got a very strange thing my Surface Pro Memory Dump when I turn on it everytime, but It don't happen if I just reboot after turn on?
   
2. Are you getting blue screen while booting or while using Windows?
   
3. Which version of Windows 10 are you using?
   

Meanwhile you can try the steps provided in the article: Bug
Check 0x9F: DRIVER_POWER_STATE_FAILURE (based on the dump files analyzation).



We await your reply.

Regards,

 

What Is Memory Dump?

No. Memory dump and being low on memory are entirely two different things.

Dump file, as the name suggests is a copy of what was in your RAM when your system crashed with a Blue screen of Death.

If your system is low on memory, you might need to add RAM to the device. How much RAM is currently installed?