Windows 7 Forums

Welcome to Windows 7 Forums. Our forum is dedicated to helping you find support and solutions for any problems regarding your Windows 7 PC be it Dell, HP, Acer, Asus or a custom build. We also provide an extensive Windows 7 tutorial section that covers a wide range of tips and tricks.


Windows 7: IRQL_NOT_LESS_OR_EQUAL - ntoskrnl.exe?


06 Aug 2010   #1

Windows 7
 
 
IRQL_NOT_LESS_OR_EQUAL - ntoskrnl.exe?

Hello,

I have been getting IRQL_NOT_LESS_OR_EQUAL, blue screens of deaths lately and not exactly sure what is causing them.
The first few BSOD happened when i left the pc to idle (roughly 45 mins) and then returned to see the BSOD, bug check 0x0000000a.

I thought I resolved the issue by installing KB979444. A week and a bit later happened again.

Used BlueScreenView to see what the dump files contaned and ntoskrnl.exe is the first in the list and highlighted, which i don't think is the cause of the problem. Possibly a driver problem i think...

Currently using windows 7 x64

Attached the dump files using the special program provided on this forum

Any accurate diagnostics will be appreciated


My System SpecsSystem Spec
.

06 Aug 2010   #2

Microsoft Window 7 Professional 32 bit
 
 

The bugcheck result didn't give us definite results. TrustedInstall was the process running at the time of crash, but I don't think that is the cause of these stuff. The only stop code is A therefore I don't think this is hardware issue, but ether third party software or device drivers.
Quote:
STOP 0x0000000A: IRQL_NOT_LESS_OR_EQUAL

Usual causes: Kernel mode driver, System Service, BIOS, Windows, Virus scanner, Backup tool, compatibility
In looking through your driver, I can see that you are using Kaspersky, I doubt that it might be the cause. Third party antivirus software are notorious cause for BSOD. Please remove it completely for testing purpose. Then if you need an alternative program, you can try Microsoft Security Essential, it's BSODs free and it's free.
http://support.kaspersky.com/faq/?qid=208279463
http://www.microsoft.com/security_essentials <---MSE

Old Drivers:
Code:
 hotcore3 hotcore3.sys Wed Jul 30 04:58:17 2008 (488F9279)
HotBackup by Paragon Software Group.    Paragon Software: Download free partition software for home
 mv2      mv2.sys      Thu Feb 07 04:02:40 2008 (47AA2070)
UltraVnc miniport driver2                                                              
PxHlpa64 PxHlpa64.sys Tue Dec 11 06:49:01 2007 (475DD06D)
Sonic CD/DVD driver (used by many different CD/DVD programs) 
If you don't know what it is, Go to C:\Windows\System32\drivers and rename PxHlpa64.sys to PxHlpa64.BAK
This will break your CD/DVD program, but can easily be renamed after we've finished.
SysTrace SysTrace.sys Thu Oct 18 21:40:31 2007 (4717705F) <---Any Idea what it is 
VMNetSrv VMNetSrv.sys Wed Jan 16 18:52:01 2008 (478DEFE1)Microsoft Virtual Machine Network  Services Driver
BUGCHECK SUMMARY:
Code:
BugCheck A, {fffff8a01d47b054, 2, 1, fffff80002daf785}

Probably caused by : ntkrnlmp.exe ( nt!ObpQueryNameString+4ed )

Followup: MachineOwner
---------
PROCESS_NAME:  TrustedInstall


Let us know if you need help

Tuan
My System SpecsSystem Spec
07 Aug 2010   #3

Windows 7
 
 

Hello, thanks for the reply

I downloaded the Kaspersky removal tool and removed Kaspersky Internet Security 2010 successfully, then i decided to install the newer version of Kaspersky which is now available (Kaspesky Internet Security 2011) and see how it goes with that.

The file Systrace.sys
File Desscription: Microsof MSN Flight Data Recorder Trace Driver
File Version: 2.0.1018.0

I did not misspell "Microsof"

updated hotcore3.sys, haven't changed any of the other drivers listed yet - going to wait and see if the BSOD happens again then i will take look at the other drivers mentioned.

Thanks for assistance
My System SpecsSystem Spec
.


07 Aug 2010   #4

Windows 7
 
 

Installed Kaspesky 2011 Internet Security - a day later when i left PC to idle, Blue screen of death happened again,
but this time it is BAD_POOL_HEADER
Used BlueScreenView to see what it says, and it has highlighted
klif.sys
ntoskrln.exe

I believe that klif.sys is related to Kaspesky
File Description:
Klif Mini-Filter [fre_wlh_AMD64]
File Version:
8.6.0.14
Product name:
Kaspesky Anti-Virus

* Attached another dump zip *

Going to uninstall this version of Kaspesky and try to troubleshoot again without it installed, leaving PC idle etc...
My System SpecsSystem Spec
07 Aug 2010   #5

Microsoft Window 7 Professional 32 bit
 
 

As I told you earlier, something is blocking Trustinstall from doing its job. Reading your DMP now to see if anything is unusual, but as I expected earlier, it is Kaspersky, this time it's more persuasive because It appear directly in the DMP. I know it's hard to uninstall something when you actually had to pay for it, but trust me, I used to delete my 200$ just to make my system able to run and today analyze this DMP for you
Code:
BugCheck 19, {20, fffff8a000000032, fffff8a000000a32, 5a00000}

Unable to load image \SystemRoot\system32\DRIVERS\klif.sys, Win32 error 0n2
*** WARNING: Unable to verify timestamp for klif.sys
*** ERROR: Module load completed but symbols could not be loaded for klif.sys
Probably caused by : klif.sys ( klif+4a5d0 )<-----Kaspersky

Followup: MachineOwner
---------
My System SpecsSystem Spec
08 Aug 2010   #6

Windows 7
 
 

Hmmm yes,
About a month ago formatted & did a 0 pass wipe a fresh new boot partition of windows 7 64 bit, because it had a few bad clusters and it was causing other strange problems.
Never had a problem with Kaspersky before hand on the previous windows 7 x64 installation, compared now to my recent fresh installation of windows 7 64 bit

Do you know of any other good anti-virus that run well in x64 O/S?

Yeah it is a bit disappointing, i will just fiddle with Kaspersky to see if i can get a setting or something to stop the error's later on - for now i will keep the Microsoft Security Essentials installed for a bit
My System SpecsSystem Spec
08 Aug 2010   #7

Microsoft Window 7 Professional 32 bit
 
 

There are many good antivirus out there but I always see BSODs correlate with them at different level. The best option right now to test if your computer is completely BSODs free is to try Microsoft security essential.
Keep MSE on your system and see how things go.

Let us know if you need help

Tuan
My System SpecsSystem Spec
08 Aug 2010   #8

Windows 7
 
 

Argh, the BSOD still happens when using 'Microsoft Security Essentials'

* Uploaded some more dumps *

in the administrator event logs i keep seeing this constant error with Source
MSSQL$SQLEXPRESS

FCB::RemoveAlternateStreams: Operating system error (null) occurred while creating or opening file 'C:\Program Files (x86)\Microsoft SQL Server\MSSQL.1\MSSQL\DATA\tempdb.mdf'

i am not sure whether is related to the BSOD cause date and time are roughly 30 mins apart

Also have two other errors that closer in time of the BSOD

SideBySide
Activation context generation failed for "C:\Program Files (x86)\Common Files\Adobe AIR\Versions\1.0\Adobe AIR.dll".Error in manifest or policy file "C:\Program Files (x86)\Common Files\Adobe AIR\Versions\1.0\Adobe AIR.dll" on line 3. The value "MAJOR_VERSION.MINOR_VERSION.BUILD_NUMBER_MAJOR.BUILD_NUMBER_MINOR" of attribute "version" in element "assemblyIdentity" is invalid.
SideBySide
Activation context generation failed for "C:\Program Files\BreakPoint Software\Hex Workshop v6\HWorks32.exe".Error in manifest or policy file "" on line . A component version required by the application conflicts with another component version already active. Conflicting components are:. Component 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16385_none_fa645303170382f6.manifest. Component 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16385_none_421189da2b7fabfc.manifest.

Not sure whether it has anything to do with the BSOD but the one above relating to the hex-workshop mentions a conflicting component.
Maybe i dunno, will uninstall it anyway and Microsoft SQL server 2005 because i didn't have this previously installed before hand.
My System SpecsSystem Spec
08 Aug 2010   #9

Microsoft Window 7 Professional 32 bit
 
 

open Services.msc and stop the Windows Module Installer service, that runs Trustedinstaller.exe. I'm sorry but TrustInstaller.exe is getting very annoying. I saw them in the previous DMP and told you to remove Kaspersky, but it appear again while using MSE. We probably can eliminate Antivirus. However, the original problem might due to the programs that give error in Event log.
I have done some research and this is what I've found:
Quote:
TrustedInstaller.exe is used by the windows service called "Windows
Module Installer" (Or rather is the service) Says it has something to do
with updating windows, so uninstalling or disabling it could cause some
updates to fail. I wouldn't remove or delete the file itself. Simply set
the service to start manualy.

1. Start Menu ->Run
2. type msconfig and select Services section.
3. delect the box next to Windows Module Installer

this will keep it from starting up when loading windows

Now to set it to manual start

1. Right click taskbar and select properties
2. Select Start Menu tab and choose Customise..." button
3. In the list, check "Display administrative tools" and click apply
and click ok
4. Now go to Start Menu -> Program Files -> Administrative tools ->
Services
5. Look in the list for the service "Windows Module Installer"
6. Double click and look for the dropdown menu, this will be on the
"General" tab
7. Select "Manual" from the list
8. Click apply, click ok
9. Now restart

Everything should be good now You might need to turn it off in the
processes from task manager, but I dout it.
Code:
BugCheck A, {0, 2, 0, fffff800032f3393}

Probably caused by : CLFS.SYS ( CLFS!CClfsLogFcbPhysical::MapCacheData+105 )

Followup: MachineOwner
---------
PROCESS_NAME:  TrustedInstall
My System SpecsSystem Spec
09 Aug 2010   #10

Windows 7
 
 

ok yes, thanks for your research
I followed your instructions, no problems
Hopefully this has fixed the BSOD issue.
I will reply back if i think it has solved the problem - just need to leave the PC idle etc, for about an hour or something and see if it is gone.

Thanks
My System SpecsSystem Spec
Reply

 IRQL_NOT_LESS_OR_EQUAL - ntoskrnl.exe?




Thread Tools



Similar help and support threads for2: IRQL_NOT_LESS_OR_EQUAL - ntoskrnl.exe?
Thread Forum
IRQL_NOT_LESS_OR_EQUAL ntoskrnl.exe/ntoskrnl.exe+75c00 BSOD Help and Support
IRQL_NOT_LESS_OR_EQUAL ntoskrnl.exe BSOD Help and Support
BSOD IRQL_NOT_LESS_OR_EQUAL ntoskrnl.exe BSOD Help and Support
IRQL_NOT_LESS_OR_EQUAL ntoskrnl.exe BSOD Help and Support
New Rig, IRQL_NOT_LESS_OR_EQUAL ntoskrnl.exe BSOD Help and Support
IRQL_NOT_LESS_OR_EQUAL ntoskrnl.exe BSOD BSOD Help and Support
BSOD IRQL_NOT_LESS_OR_EQUAL ntoskrnl.exe BSOD Help and Support

Our Sites

Site Links

About Us

Find Us

Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

Designer Media Ltd

All times are GMT -5. The time now is 04:16 AM.
Twitter Facebook Google+



Windows 7 Forums

Seven Forums Android App Seven Forums IOS App
  

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33