Windows 7 Forums

Welcome to Windows 7 Forums. Our forum is dedicated to helping you find support and solutions for any problems regarding your Windows 7 PC be it Dell, HP, Acer, Asus or a custom build. We also provide an extensive Windows 7 tutorial section that covers a wide range of tips and tricks.


Windows 7: BSOD at Windows 7 Startup IRQL_NOT_LESS_OR_EQUAL (a)

03 Mar 2013   #1
floridaIT

Windows 7 x64 Professional
 
 
BSOD at Windows 7 Startup IRQL_NOT_LESS_OR_EQUAL (a)

I have many Lenovo M92 towers deployed and intermittantly have the following error. The PC starts up and reverts the system to the previous date. I have attached a windows system info file that shows the pc configuration. I am in the process of downloading manufacturer updates to the Intel HD Graphics, RealTek Audio, and NIC drivers. In the meantime, does anyone see anything that would point me to the driver that is giving me grief?


Microsoft (R) Windows Debugger Version 6.12.0002.633 AMD64
Copyright (c) Microsoft Corporation. All rights reserved.

Loading Dump File [C:\Users\FloridaIT\Desktop\030113-15802-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available
Symbol search path is: C:\Symbols;SRV*f:\localsymbols*http://msdl.microsoft.com/download/symbols
Executable search path is:
Windows 7 Kernel Version 7601 (Service Pack 1) MP (8 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 7601.17835.amd64fre.win7sp1_gdr.120503-2030
Machine Name:
Kernel base = 0xfffff800`0300d000 PsLoadedModuleList = 0xfffff800`03251670
Debug session time: Fri Mar 1 08:08:31.482 2013 (UTC - 5:00)
System Uptime: 0 days 0:00:12.278
Loading Kernel Symbols
...............................................................
................................................................
.........
Loading User Symbols
Loading unloaded module list
...
ERROR: FindPlugIns 8007007b
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
Use !analyze -v to get detailed debugging information.
BugCheck A, {0, 2, 0, fffff800030a1174}
Probably caused by : ntkrnlmp.exe ( nt!KiPageFault+260 )
Followup: MachineOwner
---------
7: kd> !analyze -v
ERROR: FindPlugIns 8007007b
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
IRQL_NOT_LESS_OR_EQUAL (a)
An attempt was made to access a pageable (or completely invalid) address at an
interrupt request level (IRQL) that is too high. This is usually
caused by drivers using improper addresses.
If a kernel debugger is available get the stack backtrace.
Arguments:
Arg1: 0000000000000000, memory referenced
Arg2: 0000000000000002, IRQL
Arg3: 0000000000000000, bitfield :
bit 0 : value 0 = read operation, 1 = write operation
bit 3 : value 0 = not an execute operation, 1 = execute operation (only on chips which support this level of status)
Arg4: fffff800030a1174, address which referenced memory
Debugging Details:
------------------

READ_ADDRESS: GetPointerFromAddress: unable to read from fffff800032bb100
0000000000000000
CURRENT_IRQL: 2
FAULTING_IP:
nt!IopCompleteRequest+c64
fffff800`030a1174 488b09 mov rcx,qword ptr [rcx]
CUSTOMER_CRASH_COUNT: 1
DEFAULT_BUCKET_ID: VISTA_DRIVER_FAULT
BUGCHECK_STR: 0xA
PROCESS_NAME: csrss.exe
IRP_ADDRESS: ffffffffffffff88
TRAP_FRAME: fffff88003be65a0 -- (.trap 0xfffff88003be65a0)
NOTE: The trap frame does not contain all registers.
Some register values may be zeroed or incorrect.
rax=fffff88003be5818 rbx=0000000000000000 rcx=0000000000000000
rdx=0000000000000000 rsi=0000000000000000 rdi=0000000000000000
rip=fffff800030a1174 rsp=fffff88003be6730 rbp=0000000000000000
r8=0000000000004740 r9=0000000000000080 r10=0000000000000002
r11=00000000000001c8 r12=0000000000000000 r13=0000000000000000
r14=0000000000000000 r15=0000000000000000
iopl=0 nv up ei pl nz ac po cy
nt!IopCompleteRequest+0xc64:
fffff800`030a1174 488b09 mov rcx,qword ptr [rcx] ds:5578:00000000`00000000=????????????????
Resetting default scope
LAST_CONTROL_TRANSFER: from fffff8000308b769 to fffff8000308c1c0
STACK_TEXT:
fffff880`03be6458 fffff800`0308b769 : 00000000`0000000a 00000000`00000000 00000000`00000002 00000000`00000000 : nt!KeBugCheckEx
fffff880`03be6460 fffff800`0308a3e0 : 00000000`00000200 fffff880`03be6858 fffffa80`0a4c8b78 fffffa80`0afdcc60 : nt!KiBugCheckDispatch+0x69
fffff880`03be65a0 fffff800`030a1174 : 00000000`00000001 00000000`00000000 fffff880`20206f49 fffff880`03be6a18 : nt!KiPageFault+0x260
fffff880`03be6730 fffff800`0307ebd7 : 00000000`00000000 00000000`00000000 00000000`00000000 fffff8a0`00000000 : nt!IopCompleteRequest+0xc64
fffff880`03be6800 fffff800`03035a85 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiDeliverApc+0x1c7
fffff880`03be6880 fffff800`032d796a : fffffa80`0a9a9df0 fffffa80`0a336330 fffff880`03be6a10 fffff880`03be6a08 : nt!KiCheckForKernelApcDelivery+0x25
fffff880`03be68b0 fffff800`033a142e : fffffa80`00000004 fffffa80`0a336330 fffff880`03be6a10 00000000`00000000 : nt! ?? ::NNGAKEGL::`string'+0x2a53a
fffff880`03be69a0 fffff800`0308b453 : 00000000`00000034 fffffa80`0a895060 00000000`0021e3e8 00000000`0021e401 : nt!NtMapViewOfSection+0x2bd
fffff880`03be6a70 00000000`777d159a : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSystemServiceCopyEnd+0x13
00000000`0021e3c8 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x777d159a

STACK_COMMAND: kb
FOLLOWUP_IP:
nt!KiPageFault+260
fffff800`0308a3e0 440f20c0 mov rax,cr8
SYMBOL_STACK_INDEX: 2
SYMBOL_NAME: nt!KiPageFault+260
FOLLOWUP_NAME: MachineOwner
MODULE_NAME: nt
IMAGE_NAME: ntkrnlmp.exe
DEBUG_FLR_IMAGE_TIMESTAMP: 4fa390f3
FAILURE_BUCKET_ID: X64_0xA_nt!KiPageFault+260
BUCKET_ID: X64_0xA_nt!KiPageFault+260
Followup: MachineOwner
---------


My System SpecsSystem Spec
.
04 Mar 2013   #2
Arc

Microsoft Community Contributor Award Recipient

Microsoft Windows 10 Pro Insider Preview 64-bit
 
 

My System SpecsSystem Spec
22 Mar 2013   #3
floridaIT

Windows 7 x64 Professional
 
 
SFDiagnostic Tool data

Sorry this took so long...I've uploaded the SFDiagnostic Tool data file here. Thank you for your help!!
My System SpecsSystem Spec
.

22 Mar 2013   #4
Arc

Microsoft Community Contributor Award Recipient

Microsoft Windows 10 Pro Insider Preview 64-bit
 
 

Listing up the elements that made your computer crash to BSOD.

  • Norton Internet Security
Code:
fffff880`047df3b8  fffff880`04e539f0Unable to load image \??\C:\Windows\system32\Drivers\SYMEVENT64x86.SYS, Win32 error 0n2
*** WARNING: Unable to verify timestamp for SYMEVENT64x86.SYS
*** ERROR: Module load completed but symbols could not be loaded for SYMEVENT64x86.SYS
 SYMEVENT64x86+0x269f0
Description here: Driver Reference Table - SYMEVENT64x86.SYS

  • Symantec Heuristics Driver
Code:
fffff880`047df358  fffff880`043ca2e0Unable to load image \??\C:\ProgramData\Symantec\Symantec Endpoint Protection\12.1.2015.2015.105\Data\Definitions\BASHDefs\20130301.011\BHDrvx64.sys, Win32 error 0n2
*** WARNING: Unable to verify timestamp for BHDrvx64.sys
*** ERROR: Module load completed but symbols could not be loaded for BHDrvx64.sys
 BHDrvx64+0x1372e0
Description here: Driver Reference Table - BHDrvx64.sys

  • Symantec /Norton
Code:
fffff880`047df028  fffff880`051d6ab8Unable to load image \??\C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys, Win32 error 0n2
*** WARNING: Unable to verify timestamp for EraserUtilRebootDrv.sys
*** ERROR: Module load completed but symbols could not be loaded for EraserUtilRebootDrv.sys
 EraserUtilRebootDrv+0x2ab8
Description here: Driver Reference Table - EraserUtilRebootDrv.sys

So you are seeing that it in Norton that is the problem for you. Uninstall Norton and all Symentec products using Norton Removal tool. Use Microsoft Security Essentials as your antivirus with windows inbuilt firewall, and free MBAM as the on demand scanner.
Download, install and update those, and then run full system scans with both of them, one by one.

Let us know the results.
My System SpecsSystem Spec
22 Mar 2013   #5
floridaIT

Windows 7 x64 Professional
 
 

Wow...Unfortunately, we will have to contact our vendor since we've purchased symantec for all PC's enterprise wide. I'll check their blogs to see if there's an client update available for Symantec Endpoint Protection. I'll leave the thread open until I can check with the vendor and will update the thread once I have more info. Thank you for your help.
My System SpecsSystem Spec
22 Mar 2013   #6
Arc

Microsoft Community Contributor Award Recipient

Microsoft Windows 10 Pro Insider Preview 64-bit
 
 

Best of luck
My System SpecsSystem Spec
22 Mar 2013   #7
floridaIT

Windows 7 x64 Professional
 
 

Arc, can you tell me if you see the same from the attached file? This is a different PC, same model. It helps to have another PC for comparison. Thank you again.
My System SpecsSystem Spec
22 Mar 2013   #8
Arc

Microsoft Community Contributor Award Recipient

Microsoft Windows 10 Pro Insider Preview 64-bit
 
 

Essentially identical, other than the date of the crash. Failing modules are:
  • SYMEVENT64x86.SYS
  • BHDrvx64.sys
  • EraserUtilRebootDrv.sys
Descriptions are given in my earlier post
My System SpecsSystem Spec
22 Mar 2013   #9
floridaIT

Windows 7 x64 Professional
 
 

Thanks again!
My System SpecsSystem Spec
22 Mar 2013   #10
Arc

Microsoft Community Contributor Award Recipient

Microsoft Windows 10 Pro Insider Preview 64-bit
 
 

Waiting for the update as you mentioned earlier
My System SpecsSystem Spec
Reply

 BSOD at Windows 7 Startup IRQL_NOT_LESS_OR_EQUAL (a)




Thread Tools Search this Thread
Search this Thread:

Advanced Search




Similar help and support threads
Thread Forum
BSOD: irql_not_less_or_equal - on first startup only
Everytime i boot my PC now since about 2 weeks ago, i always hear it start up, then reset and start up and ask what mode to start in (normally, safemode etc) selecting normal, the pc then starts up fine, says it will scan for reasons it didnt start up and find nothing. I watched what was...
BSOD Help and Support
BSOD on startup IRQL_NOT_LESS_OR_EQUAL
Hello First, i apologize if my english is bad but it's not my native language So here is my problem : A friend of mine wanted me to install windows seven on this laptop. So i've created a USB install of Windows seven pro x64 with Rufus and a non-modified iso (with the gtp option for UEFI...
BSOD Help and Support
BSOD IRQL_NOT_LESS_OR_EQUAL on Startup/Shutdown
Dear SevenForums, For some time now, I have been experiencing infrequent BSODs with the error of IRQL_NOT_LESS_OR_EQUAL when I start / shutdown my PC. I am running windows 7 Ultimate 64-bit, and my SF file is attached to this thread. I should note a few other important details. I tried...
BSOD Help and Support
BSOD on startup with IRQL_NOT_LESS_OR_EQUAL message
Hi. I am a Windows 7 user who is NOT techie. When I cold-boot the computer (not resume or anything like that) sometimes (not all the time) the startup is interrupted with this blue screen (I just learned in trying to research this that it's ominously called "The Blue Screen of Death" ~ yuck). ...
BSOD Help and Support
BSOD ~15 mnis after startup, IRQL_NOT_LESS_OR_EQUAL, W7 HP x64
So I have been getting a recurring BSOD with my new SSD, ~15 mins after a hard boot up it will BSOD, recover, and then work as normal, however whn I shut it down it continues to do this, and it has become fairly annoying. Any help would be appeciated. System Specs: Acer Aspire 8943G Intel...
BSOD Help and Support
BSOD on startup IRQL_NOT_LESS_OR_EQUAL
Upon start up my ASUS G53JW received a BSOD. This is a few days after I updated my video card driver to accommodate for Battlefield 3, and it also had a xbox 360 controller plugged into it, which isn't how it usually starts up. Received the error code DRIVER_IRQL_NOT_LESS_OR_EQUAL. I just want to...
BSOD Help and Support


Our Sites

Site Links

About Us

Find Us

Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

Designer Media Ltd

All times are GMT -5. The time now is 17:35.

Twitter Facebook Google+



Windows 7 Forums

Seven Forums Android App Seven Forums IOS App