Want to protect your cyber security and still get fast solutions? Ask a secure question today.Go Premium

x
?
Solved

How do I find out what driver/application is loaded at a certain memory address?

Posted on 2009-04-29
10
Medium Priority
?
428 Views
Last Modified: 2013-12-01
We have a few identical computers which occasionally blue screen with identical STOP error codes (all the "numbers" at the bottom of the BSOD match not just the STOP code). I know the last "number" is the address which referenced memory but I want to find out what is actually loded at that memory address.

If I can find out what is loaded at this address I may be able to find out what is causing the BSODs. I've attached one of the BSOD's for your reference. Thanks.
BSOD.jpg
0
Comment
Question by:nborowicz
  • 4
  • 4
  • 2
10 Comments
 
LVL 7

Assisted Solution

by:maze-uk
maze-uk earned 160 total points
ID: 24259670
I think DEBUG is the command you are looking for.
We had laptops having this issue regularly, and it seem to have been faulty hardware (a bad serie...)
Are you using any unsigned driver, maybe?
0
 

Author Comment

by:nborowicz
ID: 24259852
Thanks maze-uk, but can you give me more info on this DEBUG command and how it will help me locate the process/driver/app that is loaded at specific memory address? The help for the DEBUG command is as follows:
Runs Debug, a program testing and editing tool.

DEBUG [[drive:][path]filename [testfile-parameters]]

  [drive:][path]filename  Specifies the file you want to test.
  testfile-parameters     Specifies command-line information required by
                          the file you want to test.

After Debug starts, type ? to display a list of debugging commands.
0
 
LVL 7

Assisted Solution

by:maze-uk
maze-uk earned 160 total points
ID: 24260111
I found information on debug here, including memory address check:
http://mirror.href.com/thestarman/asm/debug/debug.htm
see the dump sub command: http://mirror.href.com/thestarman/asm/debug/debug2.htm#D
0
Independent Software Vendors: We Want Your Opinion

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

 

Author Comment

by:nborowicz
ID: 24262371
Thank you maze-uk, I can now view the contents of the memory at an address (I was able to do this with a similar tool windbg) but I still cannot see what driver or application is loaded into that memory address. Do you know how I might be able to do this using DEBUG or another tool?
0
 
LVL 69

Expert Comment

by:Callandor
ID: 24263868
Here'a a Microsoft KB article about Stop 0x0A errors: http://support.microsoft.com/kb/314063
0
 

Author Comment

by:nborowicz
ID: 24271062
Thanks Callandor, I have seen that KB article already, it was very useful in describing what the 4 parameters mean, hence me asking this question.
0
 
LVL 69

Assisted Solution

by:Callandor
Callandor earned 80 total points
ID: 24278396
An alternate way to try to detect what is causing this is to use msconfig to stop certain drivers from loading and gradually enable them until the problem appears.
0
 
LVL 7

Expert Comment

by:maze-uk
ID: 24304794
You may be unsuccessful trying to find out what soft is the source.
As I told you we had a 'bad serie' of hardware. Once (all) our laptop's motherboard where replace, everything came fine.

Browse the Net (google is your friend) to look for other people with similar hardware  (make/model), who alos have the issue. (and possible solution...)
Also try the support from your hardware manufacturer. They may be aware of an issue and may replace the faulty hardware. Don't wait so you can benefit of the manufacturer's warranty...
0
 
LVL 7

Expert Comment

by:maze-uk
ID: 24304803
I said 'may be'... you may also prove me wrong... :-)
0
 

Accepted Solution

by:
nborowicz earned 0 total points
ID: 24336731
Thanks everyone for your comments but I'm going to close this question now because the solutions are running "dry". I think I may attempt a programming solution with C++ or similar.

Thanks again.
0

Featured Post

Hire Technology Freelancers with Gigs

Work with freelancers specializing in everything from database administration to programming, who have proven themselves as experts in their field. Hire the best, collaborate easily, pay securely, and get projects done right.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

I previously wrote an article addressing the use of UBCD4WIN and SARDU. All are great, but I have always been an advocate of SARDU. Recently it was suggested that I go back and take a look at Easy2Boot in comparison.
This article provides a convenient collection of links to Microsoft provided Security Patches for operating systems that have reached their End of Life support cycle. Included operating systems covered by this article are Windows XP,  Windows Server…
Two types of users will appreciate AOMEI Backupper Pro: 1 - Those with PCIe drives (and haven't found cloning software that works on them). 2 - Those who want a fast clone of their boot drive (no re-boots needed) and it can clone your drive wh…
Finding and deleting duplicate (picture) files can be a time consuming task. My wife and I, our three kids and their families all share one dilemma: Managing our pictures. Between desktops, laptops, phones, tablets, and cameras; over the last decade…
Suggested Courses
Course of the Month14 days, 11 hours left to enroll

578 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question