Windows 7: help! bsod!! IRQL_NOT_LESS_OR_EQUAL

Sasandr0 · 23 Apr 2011

Is Windows 7 . . .
- x86 (32-bit) or x64 ? Windows Seven Home premium 64 bit
- the original installed OS on the system? yes
- an OEM or full retail version? OEM
- OEM = came pre-installed on system
- Full Retail = you purchased it from retailer

- What is the age of system (hardware)? next 20th of may it's a year
- What is the age of OS installation (have you re-installed the OS?) yes last july bat it isn't a re-installed it's a "ripristino"

hello...i'm new on this forum....This morning I turned on my computer
and immediately seemed to me a blue screen, without even having
finished loading all the drivers ....
I have attached the fie. zip and follow the instructions
of "jcgriff2" in the post called "Blue Screen of Death (BSOD ) Posting Instructions "
can you help me?

zigzag3143 · 23 Apr 2011

Quote: Originally Posted by Sasandr0

Is Windows 7 . . .
- x86 (32-bit) or x64 ? Windows Seven Home premium 64 bit
- the original installed OS on the system? yes
- an OEM or full retail version? OEM
- OEM = came pre-installed on system
- Full Retail = you purchased it from retailer

- What is the age of system (hardware)? next 20th of may it's a year
- What is the age of OS installation (have you re-installed the OS?) yes last july bat it isn't a re-installed it's a "ripristino"

hello...i'm new on this forum....This morning I turned on my computer
and immediately seemed to me a blue screen, without even having
finished loading all the drivers ....
I have attached the fie. zip and follow the instructions
of "jcgriff2" in the post called "Blue Screen of Death (BSOD ) Posting Instructions "
can you help me?

While it is hard to discern a pattern from only one DMP file this on appears to be caused by memory corruption (probably from your stpd.sys driver or avast)

I would

Please remove any CD virtualization programs such as Daemon Tools and Alcohol 120%.

They use a driver, found in your dmp,sptd.sys, that is notorious for causing BSODs.

Use this SPTD uninstaller DuplexSecure - Downloads

when you're done you can use this Freeware MagicISO Virtual CD/DVD-ROM(MagicDisc) in its place.

and

Remove Avast and replace with Microsoft Security essentials

http://files.avast.com/files/eng/aswclear5.exe

http://www.microsoft.com/security_essentials/

Code:

Microsoft (R) Windows Debugger Version 6.11.0001.404 X86
Copyright (c) Microsoft Corporation. All rights reserved.


Loading Dump File [C:\Users\K\Desktop\Windows_NT6_BSOD_jcgriff2\042311-22822-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available

Symbol search path is: SRV*C:\Symbols*http://msdl.microsoft.com/download/symbols;srv*e:\symbols
*http://msdl.microsoft.com/download/symbols
Executable search path is: 
Windows 7 Kernel Version 7601 (Service Pack 1) MP (4 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS Personal
Built by: 7601.17514.amd64fre.win7sp1_rtm.101119-1850
Machine Name:
Kernel base = 0xfffff800`0384d000 PsLoadedModuleList = 0xfffff800`03a92e90
Debug session time: Sat Apr 23 02:59:14.089 2011 (GMT-4)
System Uptime: 0 days 0:01:39.556
Loading Kernel Symbols
...............................................................
................................................................
.....................................
Loading User Symbols
Loading unloaded module list
...
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck A, {fffff6fc440385f0, 2, 0, fffff80003903e42}

Probably caused by : memory_corruption ( nt!MiReplenishBitMap+48 )

Followup: MachineOwner
---------

2: kd> !analyze -v
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

IRQL_NOT_LESS_OR_EQUAL (a)
An attempt was made to access a pageable (or completely invalid) address at an
interrupt request level (IRQL) that is too high.  This is usually
caused by drivers using improper addresses.
If a kernel debugger is available get the stack backtrace.
Arguments:
Arg1: fffff6fc440385f0, memory referenced
Arg2: 0000000000000002, IRQL
Arg3: 0000000000000000, bitfield :
    bit 0 : value 0 = read operation, 1 = write operation
    bit 3 : value 0 = not an execute operation, 1 = execute operation (only on chips which support this level of status)
Arg4: fffff80003903e42, address which referenced memory

Debugging Details:
------------------


READ_ADDRESS: GetPointerFromAddress: unable to read from fffff80003afe0e8
 fffff6fc440385f0 

CURRENT_IRQL:  2

FAULTING_IP: 
nt!MiReplenishBitMap+48
fffff800`03903e42 4a8b1cc0        mov     rbx,qword ptr [rax+r8*8]

CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT

BUGCHECK_STR:  0xA

PROCESS_NAME:  System

TRAP_FRAME:  fffff880033857f0 -- (.trap 0xfffff880033857f0)
NOTE: The trap frame does not contain all registers.
Some register values may be zeroed or incorrect.
rax=fffff6fc40000000 rbx=0000000000000000 rcx=00000000000000ff
rdx=0000000000000e00 rsi=0000000000000000 rdi=0000000000000000
rip=fffff80003903e42 rsp=fffff88003385980 rbp=0000000000000000
 r8=00000000008070be  r9=0000000000000000 r10=00000000008070be
r11=0000000000000007 r12=0000000000000000 r13=0000000000000000
r14=0000000000000000 r15=0000000000000000
iopl=0         nv up ei pl nz na po nc
nt!MiReplenishBitMap+0x48:
fffff800`03903e42 4a8b1cc0        mov     rbx,qword ptr [rax+r8*8] ds:dfc0:fffff6fc`440385f0=????????????????
Resetting default scope

LAST_CONTROL_TRANSFER:  from fffff800038ccbe9 to fffff800038cd640

STACK_TEXT:  
fffff880`033856a8 fffff800`038ccbe9 : 00000000`0000000a fffff6fc`440385f0 00000000`00000002 00000000`00000000 : nt!KeBugCheckEx
fffff880`033856b0 fffff800`038cb860 : fffffa80`05032040 fffff880`04ddfb5c 00000000`00000000 00000000`008070be : nt!KiBugCheckDispatch+0x69
fffff880`033857f0 fffff800`03903e42 : fffff880`0316dfc0 fffffa80`03bc7720 fffffa80`00000001 fffff880`033859e0 : nt!KiPageFault+0x260
fffff880`03385980 fffff800`038eb9cc : fffff6fc`40055588 00000000`0000aab1 00000000`00000001 00000000`00000000 : nt!MiReplenishBitMap+0x48
fffff880`03385a90 fffff800`038d0848 : fffffa80`03bc000b 0000713b`000067e8 0000aab1`000067f8 00000000`00000000 : nt!MmUnlockPages+0x58c
fffff880`03385b20 fffff880`012608dd : fffffa80`03d1b770 fffffa80`03d1b801 00000000`00000000 00000000`00000000 : nt!IopfCompleteRequest+0x168
fffff880`03385c00 fffff880`0128973d : fffffa80`03d1b928 fffffa80`0aa26c60 fffff880`05876408 00000000`00000000 : fltmgr!FltCompletePendedPostOperation+0xed
fffff880`03385c50 fffff800`038d7a21 : fffff880`01289680 fffff800`03a6a600 fffffa80`03bc7720 fffffa80`03d1b770 : fltmgr!FltpSafeCompletionWorker+0xbd
fffff880`03385cb0 fffff800`03b6acce : 00000000`00000000 fffffa80`03bc7720 00000000`00000080 fffffa80`03b4d5f0 : nt!ExpWorkerThread+0x111
fffff880`03385d40 fffff800`038befe6 : fffff880`031d3180 fffffa80`03bc7720 fffff880`031ddfc0 ffffffff`ffffffff : nt!PspSystemThreadStartup+0x5a
fffff880`03385d80 00000000`00000000 : fffff880`03386000 fffff880`03380000 fffff880`033859e0 00000000`00000000 : nt!KxStartSystemThread+0x16


STACK_COMMAND:  kb

FOLLOWUP_IP: 
nt!MiReplenishBitMap+48
fffff800`03903e42 4a8b1cc0        mov     rbx,qword ptr [rax+r8*8]

SYMBOL_STACK_INDEX:  3

SYMBOL_NAME:  nt!MiReplenishBitMap+48

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: nt

DEBUG_FLR_IMAGE_TIMESTAMP:  4ce7951a

IMAGE_NAME:  memory_corruption

FAILURE_BUCKET_ID:  X64_0xA_nt!MiReplenishBitMap+48

BUCKET_ID:  X64_0xA_nt!MiReplenishBitMap+48

Followup: MachineOwner
---------

Sasandr0 · 23 Apr 2011

ok ... I removed daemon tools via the control panel ... including the removal of Gadjet and toolbar ... I think that avast could not have caused a bsod ... ... but at least I think another issue that I'm having some period unutilizzo excessive ram memory by processes right now ... the memory is used 40% which is over 4 gb gb ... 1:55 to 1:54 .... is that normal? I made several scans of the system .. and Norman is the start ... and did not find anything ... then I downloaded spybot serch and distroy ... immnizzare to the system for viruses ... nothing but what do you recommend?

zigzag3143 · 23 Apr 2011

Quote: Originally Posted by Sasandr0

ok ... I removed daemon tools via the control panel ... including the removal of Gadjet and toolbar ... I think that avast could not have caused a bsod ... ... but at least I think another issue that I'm having some period unutilizzo excessive ram memory by processes right now ... the memory is used 40% which is over 4 gb gb ... 1:55 to 1:54 .... is that normal? I made several scans of the system .. and Norman is the start ... and did not find anything ... then I downloaded spybot serch and distroy ... immnizzare to the system for viruses ... nothing but what do you recommend?

One that we fix the BSOD's first.

Then we will need a picture of task manager with processes from all users

!.54 Gb isnt unusal dependant on what apps were running at the time so can we also get a picture of your task manager performance tab.

Sasandr0 · 23 Apr 2011

I was displaying the Windows event log and I noticed, in fact, remembered that I had another blue screen about a month ago ... exactly 28/3/2011...l 'id is always the same event (event id 41) and the same asset class (63)

Sasandr0 · 23 Apr 2011

ok I have attached the 3 files of my jobs ... like you asked ...

DeanP · 23 Apr 2011

Also, I would test your RAM with Memtest86+: RAM - Test with Memtest86+

Sasandr0 · 23 Apr 2011

there is a problem...i have a ntebook and it is warranty...how can i do?

Sasandr0 · 23 Apr 2011

appeared to me ... I have another bsod analyzed as before. dmp file I am attaching the file. zip

Windows 7: help! bsod!! IRQL_NOT_LESS_OR_EQUAL

help! bsod!! IRQL_NOT_LESS_OR_EQUAL problems?