Microsoft KB Archive/942972

= Event ID 1801 may be logged in the System log on a computer that is running Windows Vista =

Article ID: 942972

Article Last Modified on 10/26/2007

-

APPLIES TO


 * Windows Vista Business
 * Windows Vista Enterprise
 * Windows Vista Home Basic
 * Windows Vista Home Premium
 * Windows Vista Ultimate
 * Windows Vista Business 64-bit Edition
 * Windows Vista Enterprise 64-bit Edition
 * Windows Vista Home Basic 64-bit Edition
 * Windows Vista Home Premium 64-bit Edition
 * Windows Vista Ultimate 64-bit Edition

-



SYMPTOMS
A computer that is running Windows Vista may stop responding. Or, programs that are running on this computer may stop responding. Also, you may receive a Stop error in Windows Vista. Moreover, an event that resembles the following may be logged in the System log:

Source: Application Popup

Event ID: 1801

Level: Error

User: N/A

Text: The hardware has reported an uncorrectable memory error.



CAUSE
The following issues may cause the problems that are mentioned in the &quot;Symptoms&quot; section.

Cause 1
This problem may occur because of physical memory errors.

Cause 2
This problem may occur because of incorrect random access memory (RAM) timing issues in the basic input/output system (BIOS).

Cause 3
This problem may occur because the processor is overclocked.

Cause 4
This problem may occur is memory overwrites direct memory access (DMA).

Note Memory chips that have Parity bits or error-correction coding (ECC) bits also experience memory errors that occur because of the first three causes that are listed in this section.

To detect possible memory problems, Windows Vista performs a consistency check on a subset of all the physical memory pages. When Windows Vista satisfies a memory request by removing a page from the zeroed list, it may first check the page to confirm whether the contents are still completely zero. For performance reasons, this check is not performed on every page. However, sampling is performed on a subset of all the allocations.

If a page that is checked does not consist of all zeros, memory corruption has occurred. The event that is described in the &quot;Symptoms&quot; section is logged in the System log. Then, the memory is rezeroed, and the system continues.



RESOLUTION
To resolve this problem, find the most likely cause that is described in the Cause section. Then, use the resolution that is appropriate for the cause.

Resolution for Cause 1
Use directed swapping to find the memory chip that is experiencing data loss.

Resolution for Cause 2
Contact the computer vendor for a BIOS update.

Resolution for Cause 3
Change the system configuration to use supported clock frequencies.

Resolution for Cause 4
Remove recently-added hardware or drivers that may be causing the problem.



MORE INFORMATION
The following is the raw data from the event that is described in the &quot;Symptoms&quot; section: Offset 0xC : C0000709 = STATUS_HARDWARE_MEMORY_ERROR. Offset 0x10: Stop code that we would have crashed with: PAGE_NOT_ZERO == 0x127 FAULTY_HARDWARE_CORRUPTED_PAGE == 0x12B Offset 0x20 & 0x24 : physical address (4-byte aligned) of memory location with the first data error. Note space is left for the full 64-bit physical address. Offset 0x28 : 4-byte contents of the physical address that the first data error. If there is multiple bits set, a DMA-style overwrite is possible. The following registry subkeys influence the behavior of the code that checks for memory consistency:  

The following is an explanation of the values that you can set for the PageValidationFrequency registry entry:  A value of 0 means to check every page. A value of 1 means to check every other page. A value of 2 means to check every fourth page.

Note Internally, the value is converted to a power of 2.

The default value of the PageValidationFrequency registry entry is 0x10 (decimal 16). 

The following is an explanation of the values that you can set for the PageValidationAction registry entry:  A value of 1 indicates that a stop is initiated when an error occurs.</li> A value of 0 indicates that an event is logged and the operating system continues working.</li></ul>

The default value of the PageValidationAction registry entry is 0.</li></ul>

Keywords: kbtshoot kbprb kbexpertiseinter KB942972

-

[mailto:TECHNET@MICROSOFT.COM Send feedback to Microsoft]

© Microsoft Corporation. All rights reserved.