Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

BSOD at random times. IRQL_NOT_LESS_OR_EQUAL (a)


  • Please log in to reply
2 replies to this topic

#1 krizol

krizol

  • Members
  • 1 posts
  • OFFLINE
  •  
  • Local time:11:41 AM

Posted 03 August 2015 - 10:50 AM

Hi, I have been getting the BSOD on and off for a while now. I assume it might be a hardware related I just don't know how to read the mini dump to figure out what it is.

Any help on how to fix this is greatly appreciated.

Here is my minidump (also as an attachment):

1: kd> !analyze -v
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

IRQL_NOT_LESS_OR_EQUAL (a)
An attempt was made to access a pageable (or completely invalid) address at an
interrupt request level (IRQL) that is too high. This is usually
caused by drivers using improper addresses.
If a kernel debugger is available get the stack backtrace.
Arguments:
Arg1: fffffa801aa6a0d0, memory referenced
Arg2: 0000000000000002, IRQL
Arg3: 0000000000000001, bitfield :
bit 0 : value 0 = read operation, 1 = write operation
bit 3 : value 0 = not an execute operation, 1 = execute operation (only on chips which support this level of status)
Arg4: fffff8000338a0b6, address which referenced memory

Debugging Details:
------------------


WRITE_ADDRESS: fffffa801aa6a0d0

CURRENT_IRQL: 2

FAULTING_IP:
nt!MiReleaseConfirmedPageFileSpace+86
fffff800`0338a0b6 480fb328 btr qword ptr [rax],rbp

CUSTOMER_CRASH_COUNT: 1

DEFAULT_BUCKET_ID: WIN7_DRIVER_FAULT

BUGCHECK_STR: 0xA

PROCESS_NAME: FlashPlayerPlu

TRAP_FRAME: fffff8800e2942b0 -- (.trap 0xfffff8800e2942b0)
NOTE: The trap frame does not contain all registers.
Some register values may be zeroed or incorrect.
rax=fffffa800abda010 rbx=0000000000000000 rcx=0000000000000000
rdx=0000000000000000 rsi=0000000000000000 rdi=0000000000000000
rip=fffff8000338a0b6 rsp=fffff8800e294440 rbp=000000007f480606
r8=fffff8800e294470 r9=fffffa800af07220 r10=0000000000000000
r11=0000000000000000 r12=0000000000000000 r13=0000000000000000
r14=0000000000000000 r15=0000000000000000
iopl=0 nv up ei pl zr na po nc
nt!MiReleaseConfirmedPageFileSpace+0x86:
fffff800`0338a0b6 480fb328 btr qword ptr [rax],rbp ds:fffffa80`0abda010=ffdfffffffffffe7
Resetting default scope

LAST_CONTROL_TRANSFER: from fffff800032c9e69 to fffff800032ca8c0

STACK_TEXT:
fffff880`0e294168 fffff800`032c9e69 : 00000000`0000000a fffffa80`1aa6a0d0 00000000`00000002 00000000`00000001 : nt!KeBugCheckEx
fffff880`0e294170 fffff800`032c8ae0 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiBugCheckDispatch+0x69
fffff880`0e2942b0 fffff800`0338a0b6 : 00000000`00000000 00000000`00000000 fffffa80`097afca0 fffffa80`097afca0 : nt!KiPageFault+0x260
fffff880`0e294440 fffff800`0333a6aa : 00000000`000000e8 fffff880`009ec180 00000000`03a12000 00000000`00000000 : nt!MiReleaseConfirmedPageFileSpace+0x86
fffff880`0e2944c0 fffff800`032b7daf : fffffa80`00000000 00000000`03a9ffff 00000000`00000000 00000000`00000000 : nt! ?? ::FNODOBFM::`string'+0x33736
fffff880`0e294680 fffff800`032c9b53 : ffffffff`ffffffff fffff880`0e294950 fffff880`0e294958 00000000`00008000 : nt!NtFreeVirtualMemory+0x61f
fffff880`0e294780 fffff800`032c6110 : fffff800`035460ff 00000000`00000010 00000000`00000082 fffff880`0e294948 : nt!KiSystemServiceCopyEnd+0x13
fffff880`0e294918 fffff800`035460ff : 00000000`00000010 00000000`00000082 fffff880`0e294948 00000000`00000000 : nt!KiServiceLinkage
fffff880`0e294920 fffff800`0359e1d9 : 00000000`039a0000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!RtlFreeUserStack+0x27
fffff880`0e294950 fffff800`0359e53d : 00000000`00000000 fffffa80`0dd00000 00000000`fff9b000 00000000`00000000 : nt!PspExitThread+0x5dd
fffff880`0e294a50 fffff800`0359e645 : fffffa80`0ada8060 00000000`00000000 fffffa80`0ada8060 00000000`fff9b000 : nt!PspTerminateThreadByPointer+0x4d
fffff880`0e294aa0 fffff800`032c9b53 : 00000000`00000000 fffff880`0e294b60 00000000`fff9b000 00000000`00567ba8 : nt!NtTerminateThread+0x45
fffff880`0e294ae0 00000000`7794e0ea : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSystemServiceCopyEnd+0x13
00000000`00eae7b8 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x7794e0ea


STACK_COMMAND: kb

FOLLOWUP_IP:
nt!MiReleaseConfirmedPageFileSpace+86
fffff800`0338a0b6 480fb328 btr qword ptr [rax],rbp

SYMBOL_STACK_INDEX: 3

SYMBOL_NAME: nt!MiReleaseConfirmedPageFileSpace+86

FOLLOWUP_NAME: MachineOwner

MODULE_NAME: nt

DEBUG_FLR_IMAGE_TIMESTAMP: 556356e8

IMAGE_NAME: memory_corruption

FAILURE_BUCKET_ID: X64_0xA_nt!MiReleaseConfirmedPageFileSpace+86

BUCKET_ID: X64_0xA_nt!MiReleaseConfirmedPageFileSpace+86

Followup: MachineOwner
---------

1: kd> .trap 0xfffff8800e2942b0
NOTE: The trap frame does not contain all registers.
Some register values may be zeroed or incorrect.
rax=fffffa800abda010 rbx=0000000000000000 rcx=0000000000000000
rdx=0000000000000000 rsi=0000000000000000 rdi=0000000000000000
rip=fffff8000338a0b6 rsp=fffff8800e294440 rbp=000000007f480606
r8=fffff8800e294470 r9=fffffa800af07220 r10=0000000000000000
r11=0000000000000000 r12=0000000000000000 r13=0000000000000000
r14=0000000000000000 r15=0000000000000000
iopl=0 nv up ei pl zr na po nc
nt!MiReleaseConfirmedPageFileSpace+0x86:
fffff800`0338a0b6 480fb328 btr qword ptr [rax],rbp ds:fffffa80`0abda010=ffdfffffffffffe7
1: kd> knl
Couldn't resolve error at 'l'
1: kd> knL
*** Stack trace for last set context - .thread/.cxr resets it
# Child-SP RetAddr Call Site
00 fffff880`0e294440 fffff800`0333a6aa nt!MiReleaseConfirmedPageFileSpace+0x86
01 fffff880`0e2944c0 fffff800`032b7daf nt! ?? ::FNODOBFM::`string'+0x33736
02 fffff880`0e294680 fffff800`032c9b53 nt!NtFreeVirtualMemory+0x61f
03 fffff880`0e294780 fffff800`032c6110 nt!KiSystemServiceCopyEnd+0x13
04 fffff880`0e294918 fffff800`035460ff nt!KiServiceLinkage
05 fffff880`0e294920 fffff800`0359e1d9 nt!RtlFreeUserStack+0x27
06 fffff880`0e294950 fffff800`0359e53d nt!PspExitThread+0x5dd
07 fffff880`0e294a50 fffff800`0359e645 nt!PspTerminateThreadByPointer+0x4d
08 fffff880`0e294aa0 fffff800`032c9b53 nt!NtTerminateThread+0x45
09 fffff880`0e294ae0 00000000`7794e0ea nt!KiSystemServiceCopyEnd+0x13
0a 00000000`00eae7b8 00000000`00000000 0x7794e0ea

Cheers

K

Attached Files



BC AdBot (Login to Remove)

 


m

#2 usasma

usasma

    Still visually handicapped (avatar is memory developed by my Dad


  • BSOD Kernel Dump Expert
  • 25,072 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Southeastern CT, USA
  • Local time:04:41 AM

Posted 05 August 2015 - 07:31 AM

Please provide this information so we can provide a complete analysis (from the Pinned Topic at the top of the forum):  http://www.bleepingcomputer.com/forums/t/576314/blue-screen-of-death-bsod-posting-instructions-windows-10-81-8-7-vista/

If you're overclocking, please stop the overclock while we're troubleshooting.  Feel free to resume the overclock once the system has been stabilized.  i5 and i7 processors can be "auto-overclocked" by using Intel's TurboBoost feature.  If so, it's safe to disregard this caution.

 

Processor may be overclocked!
Expected Frequency:   1600
Actual Frequency:     2294
Overclock Ratio:      1.43375

 

Please update these older drivers. Links are included to assist in looking up the source of the drivers. DO NOT manually delete/rename the driver as it may make the system unbootable! :

TVALZ.SYS                   Mon Jul 13 22:18:54 2009 (4A5BEB0E)
TOSHIBA ACPI-Based Value Added Logical and General Purpose Device Driver}http://eu.computers.toshiba-europe.com/innovation/download_drivers_bios.jsp
http://www.carrona.org/drivers/driver.php?id=TVALZ.SYS
 NOTE:  You may not be able to update this driver.  DO NOT UNINSTALL it!
 

Beyond this, as there was only 1 memory dump in the upload, I have these 4 suggestions:
1.  Get ALL available Windows Updates.  It may take several trips to get them all
2.  Get ALL available, Win8.1 compatible updates from the manufacturer's website.
3.  Start with these free hardware diagnostics:  http://www.carrona.org/hwdiag.html
4.  If all of the hardware tests pass, then run Driver Verifier according to these instructions:  http://www.carrona.org/verifier.html

 

Analysis:
The following is for informational purposes only.

[font=lucida console]**************************Mon Aug  3 09:02:07.679 2015 (UTC - 4:00)**************************
Loading Dump File [C:\Users\John\SysnativeBSODApps\080315-9937-01.dmp]
Windows 7 Kernel Version 7601 (Service Pack 1) MP (4 procs) Free x64
Built by: [B]7601[/B].18869.amd64fre.win7sp1_gdr.150525-0603
System Uptime:[B]7 days 1:28:22.703[/B]
Probably caused by :[B]memory_corruption ( nt!MiReleaseConfirmedPageFileSpace+86 )[/B]
BugCheck [B]A, {fffffa801aa6a0d0, 2, 1, fffff8000338a0b6}[/B]
BugCheck Info: [url=http://www.carrona.org/bsodindx.html#0x0000000A]IRQL_NOT_LESS_OR_EQUAL (a)[/url]
Arguments:
Arg1: fffffa801aa6a0d0, memory referenced
Arg2: 0000000000000002, IRQL
Arg3: 0000000000000001, bitfield :
    bit 0 : value 0 = read operation, 1 = write operation
    bit 3 : value 0 = not an execute operation, 1 = execute operation (only on chips which support this level of status)
Arg4: fffff8000338a0b6, address which referenced memory
BUGCHECK_STR:  0xA
DEFAULT_BUCKET_ID:  WIN7_DRIVER_FAULT
PROCESS_NAME:  FlashPlayerPlu
FAILURE_BUCKET_ID: [B]X64_0xA_nt!MiReleaseConfirmedPageFileSpace+86[/B]
CPUID:        "Intel(R) Core(TM) i5-4200U CPU @ 1.60GHz"
MaxSpeed:     1600
CurrentSpeed: [B]2294[/B]
 
Processor may be overclocked!
Expected Frequency:   1600
Actual Frequency:     2294
Overclock Ratio:      [color=red]1.43375[/color]
 
  BIOS Version                  Version 4.00  
  BIOS Release Date             04/08/2015
  Manufacturer                  TOSHIBA
  Product Name                  PORTEGE Z30-A
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
[/font]

3rd Party Drivers:
The following is for information purposes only.
Any drivers in red should be updated or removed from your system. And should have been discussed in the body of my post.
[font=lucida console]**************************Mon Aug  3 09:02:07.679 2015 (UTC - 4:00)**************************
intelppm.sys                Mon Jul 13 19:19:25 2009 (4A5BC0FD)
[COLOR=RED][B]TVALZ.SYS                   Mon Jul 13 22:18:54 2009 (4A5BEB0E)[/B][/COLOR]
amdxata.sys                 Fri Mar 19 12:18:18 2010 (4BA3A3CA)
tosrfcom.sys                Tue Jun 12 08:21:05 2012 (4FD73431)
tosporte.sys                Fri Jul 27 03:34:04 2012 (5012446C)
ISCTD64.sys                 Tue Nov 27 14:52:34 2012 (50B51A02)
em015_64.dat                Fri Mar  1 08:27:56 2013 (5130ACDC)
INETMON.sys                 Wed Mar 13 17:11:58 2013 (5140EB9E)
iusb3hub.sys                Fri Mar 29 08:36:15 2013 (51558ABF)
iusb3xhc.sys                Fri Mar 29 08:36:19 2013 (51558AC3)
iusb3hcs.sys                Fri Mar 29 08:37:59 2013 (51558B27)
RtsPer.sys                  Thu Jun  6 04:23:31 2013 (51B04703)
TVALZFL.sys                 Fri Jun  7 02:54:13 2013 (51B18395)
irstrtdv.sys                Fri Jun 28 16:09:48 2013 (51CDED8C)
iaStorA.sys                 Wed Jul 24 15:28:22 2013 (51F02AD6)
iaStorF.sys                 Wed Jul 24 15:28:24 2013 (51F02AD8)
ikbevent.sys                Tue Aug  6 19:41:35 2013 (520189AF)
imsevent.sys                Tue Aug  6 19:45:57 2013 (52018AB5)
TeeDriverx64.sys            Thu Sep  5 14:02:18 2013 (5228C72A)
Apfiltr.sys                 Thu Oct 17 06:02:16 2013 (525FB5A8)
tosrfec.sys                 Tue Mar  4 23:55:07 2014 (5316AE2B)
ibtfudrv.sys                Mon Apr 14 21:05:30 2014 (534C85DA)
e1d62x64.sys                Mon Jul 28 18:38:34 2014 (53D6D0EA)
RTKVHD64.sys                Tue Aug 12 06:27:01 2014 (53E9EBF5)
VBoxUSBMon.sys              Fri Nov 21 08:55:55 2014 (546F446B)
VBoxDrv.sys                 Fri Nov 21 08:57:03 2014 (546F44AF)
igdkmd64.sys                Sun Dec 14 23:32:12 2014 (548E644C)
eamonm.sys                  Tue Jan 20 05:39:35 2015 (54BE3067)
ehdrv.sys                   Tue Jan 20 05:39:52 2015 (54BE3078)
EpfwLWF.sys                 Tue Jan 20 05:41:00 2015 (54BE30BC)
epfw.sys                    Tue Jan 20 05:41:08 2015 (54BE30C4)
epfwwfp.sys                 Wed Jan 28 08:02:37 2015 (54C8DDED)
NETwsw02.sys                Mon Mar 23 05:04:01 2015 (550FD701)
em008_64.dat                Wed Jul  8 05:45:34 2015 (559CF13E)
em008_64.dat                Thu Jul 16 10:58:01 2015 (55A7C679)
em006_64.dat                Fri Jul 17 06:57:17 2015 (55A8DF8D)
em018_64.dat                Fri Jul 17 07:03:56 2015 (55A8E11C)
[/font]
http://www.carrona.org/drivers/driver.php?id=intelppm.sys
http://www.carrona.org/drivers/driver.php?id=TVALZ.SYS
http://www.carrona.org/drivers/driver.php?id=amdxata.sys
http://www.carrona.org/drivers/driver.php?id=tosrfcom.sys
http://www.carrona.org/drivers/driver.php?id=tosporte.sys
http://www.carrona.org/drivers/driver.php?id=ISCTD64.sys
em015_64.dat - this driver hasn't been added to the DRT as of this run. Please search Google/Bing for the driver if additional information is needed.
http://www.carrona.org/drivers/driver.php?id=INETMON.sys
http://www.carrona.org/drivers/driver.php?id=iusb3hub.sys
http://www.carrona.org/drivers/driver.php?id=iusb3xhc.sys
http://www.carrona.org/drivers/driver.php?id=iusb3hcs.sys
http://www.carrona.org/drivers/driver.php?id=RtsPer.sys
http://www.carrona.org/drivers/driver.php?id=TVALZFL.sys
http://www.carrona.org/drivers/driver.php?id=irstrtdv.sys
http://www.carrona.org/drivers/driver.php?id=iaStorA.sys
http://www.carrona.org/drivers/driver.php?id=iaStorF.sys
http://www.carrona.org/drivers/driver.php?id=ikbevent.sys
http://www.carrona.org/drivers/driver.php?id=imsevent.sys
http://www.carrona.org/drivers/driver.php?id=TeeDriverx64.sys
http://www.carrona.org/drivers/driver.php?id=Apfiltr.sys
http://www.carrona.org/drivers/driver.php?id=tosrfec.sys
ibtfudrv.sys - this driver hasn't been added to the DRT as of this run. Please search Google/Bing for the driver if additional information is needed.
http://www.carrona.org/drivers/driver.php?id=e1d62x64.sys
http://www.carrona.org/drivers/driver.php?id=RTKVHD64.sys
http://www.carrona.org/drivers/driver.php?id=VBoxUSBMon.sys
http://www.carrona.org/drivers/driver.php?id=VBoxDrv.sys
http://www.carrona.org/drivers/driver.php?id=igdkmd64.sys
http://www.carrona.org/drivers/driver.php?id=eamonm.sys
http://www.carrona.org/drivers/driver.php?id=ehdrv.sys
http://www.carrona.org/drivers/driver.php?id=EpfwLWF.sys
http://www.carrona.org/drivers/driver.php?id=epfw.sys
http://www.carrona.org/drivers/driver.php?id=epfwwfp.sys
http://www.carrona.org/drivers/driver.php?id=NETwsw02.sys
http://www.carrona.org/drivers/driver.php?id=em008_64.dat
http://www.carrona.org/drivers/driver.php?id=em008_64.dat
http://www.carrona.org/drivers/driver.php?id=em006_64.dat
http://www.carrona.org/drivers/driver.php?id=em018_64.dat


 
My browser caused a flood of traffic, sio my IP address was banned. Hope to fix it soon. Will get back to posting as soon as Im able.

- John  (my website: http://www.carrona.org/ )**If you need a more detailed explanation, please ask for it. I have the Knack. **  If I haven't replied in 48 hours, please send me a message. My eye problems have recently increased and I'm having difficult reading posts. (23 Nov 2017)FYI - I am completely blind in the right eye and ~30% blind in the left eye.<p>If the eye problems get worse suddenly, I may not be able to respond.If that's the case and help is needed, please PM a staff member for assistance.

#3 usasma

usasma

    Still visually handicapped (avatar is memory developed by my Dad


  • BSOD Kernel Dump Expert
  • 25,072 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Southeastern CT, USA
  • Local time:04:41 AM

Posted 05 August 2015 - 07:33 AM

Just as an aside - with all the Eset stuff in the memory dump, I'd have to wonder about malware or corruption of the Eset stuff.

Please scan with several antivirus programs.

If clean, then uninstall the Eset program.

Then download and install a fresh copy of Eset from the manufacturer's website.


My browser caused a flood of traffic, sio my IP address was banned. Hope to fix it soon. Will get back to posting as soon as Im able.

- John  (my website: http://www.carrona.org/ )**If you need a more detailed explanation, please ask for it. I have the Knack. **  If I haven't replied in 48 hours, please send me a message. My eye problems have recently increased and I'm having difficult reading posts. (23 Nov 2017)FYI - I am completely blind in the right eye and ~30% blind in the left eye.<p>If the eye problems get worse suddenly, I may not be able to respond.If that's the case and help is needed, please PM a staff member for assistance.




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users