Memory Management BSOD, can anyone help?

sxffr · Apr 4, 2020

Hi all, im wondering if someone could help me with a ongoing bsod issue i've been facing.
So recently, for the past week my computer crashes and gives me the bsod "memory managment"
I thought it would be my ram going bad, so i tested my ram with memtest twice and no errors were found, did the whole chkdsk and sfc thing, but still crashes every now and again.

I'm abit confused on whats causing the bsod, bsodviewer says its ntoskrnl.exe, and gives me the code;
(nt+0x1C2360)
Bugcheck code: 0x1A (0x61941, 0x775E66EF, 0x1D, 0xFFFFD8895AE7DA00)

heres my specs;
OS - Windows 10 X64, Retail.
i9-9900k
16GB Corsair Vengance ram
GTX 1080
Gigabyte z390 Gaming x
Corsair 860i

Any help will be appreciated. Thanks :)

Also, dont know if anyone is aware but malwarebytes flags sysnativebsod tool as ransomware, just a heads up!

MrPepka · Apr 5, 2020

After all, have you tried to swap RAM memory for another?

x BlueRobot · Apr 5, 2020

Rich (BB code):

MEMORY_MANAGEMENT (1a)
    # Any other values for parameter 1 must be individually examined.
Arguments:
Arg1: 0000000000061941, The subtype of the bugcheck. << Corrupt page table(s)
Arg2: 00000000775e66ef << Invalid memory address
Arg3: 000000000000001d
Arg4: ffffd8895ae7da00 << Trap frame

Rich (BB code):

15: kd> .trap ffffd8895ae7da00
NOTE: The trap frame does not contain all registers.
Some register values may be zeroed or incorrect.
rax=0000000000000000 rbx=0000000000000000 rcx=ff04bd3e34980000
rdx=0000000005acebe0 rsi=0000000000000000 rdi=0000000000000000
rip=00000000775e66ef rsp=000000000689fbac rbp=000000000689fd4c
 r8=000000000000002b  r9=0000000077603a4c r10=0000000000000000
r11=0000000005ace540 r12=0000000000000000 r13=0000000000000000
r14=0000000000000000 r15=0000000000000000
iopl=0         nv up ei pl nz na po nc
0023:775e66ef ??              ???

It seems like the entire dump file is pretty much corrupt, which is usually indicative of hardware issues.

sxffr said:
I thought it would be my ram going bad, so i tested my ram with memtest twice and no errors were found

How many passes did you run MemTest86 for? Did you use this tutorial here?

Test RAM with PassMark MemTest86

sxffr said:
did the whole chkdsk and sfc thing

What were the results? Any errors?

x BlueRobot · Apr 5, 2020

sxffr said:
Also, dont know if anyone is aware but malwarebytes flags sysnativebsod tool as ransomware, just a heads up!

Yes, this is a known issue, Kaspersky also typically lists the tool as a trojan. Please note that we can confirm that it is a false positive.

Which particular version of Malwarebytes were you using?

axe0 · Apr 5, 2020

The detection is indeed a known issue with a few security vendors. Although Malwarebytes detected it, they use the Sysnative BSOD Collection App as well amongst a few others for BSOD problems.
Blue Screen of Death (BSOD) Posting Instructions - Windows

sxffr · Apr 5, 2020

Hi all, thanks for your replies, i appreciate it!

MrPepka said:
After all, have you tried to swap RAM memory for another?
I have only tried using 1 ram stick, and tried re-seating them, i dont have any spare ram on handy, i did 4 passes on memtest with no errors.

x BlueRobot said:

Rich (BB code):

MEMORY_MANAGEMENT (1a)
    # Any other values for parameter 1 must be individually examined.
Arguments:
Arg1: 0000000000061941, The subtype of the bugcheck. << Corrupt page table(s)
Arg2: 00000000775e66ef << Invalid memory address
Arg3: 000000000000001d
Arg4: ffffd8895ae7da00 << Trap frame

Rich (BB code):

15: kd> .trap ffffd8895ae7da00
NOTE: The trap frame does not contain all registers.
Some register values may be zeroed or incorrect.
rax=0000000000000000 rbx=0000000000000000 rcx=ff04bd3e34980000
rdx=0000000005acebe0 rsi=0000000000000000 rdi=0000000000000000
rip=00000000775e66ef rsp=000000000689fbac rbp=000000000689fd4c
r8=000000000000002b  r9=0000000077603a4c r10=0000000000000000
r11=0000000005ace540 r12=0000000000000000 r13=0000000000000000
r14=0000000000000000 r15=0000000000000000
iopl=0         nv up ei pl nz na po nc
0023:775e66ef ??              ???

It seems like the entire dump file is pretty much corrupt, which is usually indicative of hardware issues.

How many passes did you run MemTest86 for? Did you use this tutorial here?

Test RAM with PassMark MemTest86

What were the results? Any errors?

Did what the tutorial said, no errors atall. infact the ram isnt that old.
However, i one of my harddrives had a bad sector and i replaced it afew days ago, used macruim reflect to transfer all data onto my new ssd hoping that it would resolve the issue, but it didnt, still getting the same error.

Ill post another minidump when it happens again!

Thanks

sxffr · Apr 5, 2020

x BlueRobot said:
Yes, this is a known issue, Kaspersky also typically lists the tool as a trojan. Please note that we can confirm that it is a false positive.

Which particular version of Malwarebytes were you using?

Im using 4.1.0, it detects it as Malware.Ransom.Angent.Generic, i understand this is a false positive tho!

x BlueRobot · Apr 5, 2020

sxffr said:
Did what the tutorial said, no errors atall. infact the ram isnt that old.

Age doesn't really matter, I've seen brand new kits of RAM still cause errors. Have you tried using one RAM stick at a time?

Search

Search

Memory Management BSOD, can anyone help?

sxffr

New member

Attachments

MrPepka

Sysnative Staff, BSOD Kernel Dump Senior Analyst

x BlueRobot

Administrator

x BlueRobot

Administrator

axe0

Administrator,
BSOD Academy Instructor,
Security Analyst

sxffr

New member

sxffr

New member

x BlueRobot

Administrator

Memory Management BSOD, can anyone help?

New member

Attachments

Sysnative Staff, BSOD Kernel Dump Senior Analyst

Administrator

Administrator

Administrator, BSOD Academy Instructor, Security Analyst

New member

New member

Administrator

Administrator,
BSOD Academy Instructor,
Security Analyst