Random BSOD, DRIVER_IRQL_NOT_LESS_OR_EQUAL fltmgr.sys and ntoskrnl.exe

Page 1 of 2 12 LastLast

  1. Posts : 7
    Windows 7 Home Premimun 64bit
       #1

    Random BSOD, DRIVER_IRQL_NOT_LESS_OR_EQUAL fltmgr.sys and ntoskrnl.exe


    Hi,

    I have been randomly receiving BSODs for quite some time however it appears to be occurring with more frequency now. There hasn't been a specific program running that appears to be linked to the BSOD. Through Event Viewer, the report blames fltmgr.sys and ntoskrnl.exe for the BSOD with a bug check code of 0x000000d1.

    My system:
    Windows 7 Home Premium x64bit
    Original install of the OS
    OEM- installed when I purchased the computer
    I purchased the computer around March 2011 as a new computer

    Attached is the Zip file as requested. I've also attached more detailed info about my computer's specs.
      My Computer


  2. Posts : 11,840
    64-bit Windows 8.1 Pro
       #2

    BSOD caused by Spyware Terminator, please remove this program, for testing purposes ...

    Code:
    
    Microsoft (R) Windows Debugger Version 6.12.0002.633 AMD64
    Copyright (c) Microsoft Corporation. All rights reserved.
    
    
    Loading Dump File [D:\Users\SP1\Desktop\121011-28485-01.dmp]
    Mini Kernel Dump File: Only registers and stack trace are available
    
    Symbol search path is: SRV*c:\symbols*http://msdl.microsoft.com/download/symbols
    Executable search path is: 
    Windows 7 Kernel Version 7601 (Service Pack 1) MP (4 procs) Free x64
    Product: WinNt, suite: TerminalServer SingleUserTS Personal
    Built by: 7601.17640.amd64fre.win7sp1_gdr.110622-1506
    Machine Name:
    Kernel base = 0xfffff800`0300a000 PsLoadedModuleList = 0xfffff800`0324f670
    Debug session time: Sat Dec 10 03:30:51.734 2011 (UTC - 5:00)
    System Uptime: 1 days 6:20:07.123
    Loading Kernel Symbols
    ...............................................................
    ................................................................
    ....................................
    Loading User Symbols
    Loading unloaded module list
    ...............
    *******************************************************************************
    *                                                                             *
    *                        Bugcheck Analysis                                    *
    *                                                                             *
    *******************************************************************************
    
    Use !analyze -v to get detailed debugging information.
    
    BugCheck D1, {fffff8a01683dac8, 2, 0, fffff88001326039}
    
    Unable to load image \SystemRoot\system32\DRIVERS\stflt.sys, Win32 error 0n2
    *** WARNING: Unable to verify timestamp for stflt.sys
    *** ERROR: Module load completed but symbols could not be loaded for stflt.sys
    Probably caused by : stflt.sys ( stflt+1ed9 )
    
    Followup: MachineOwner
    ---------
    
    1: kd> !analyze -v
    *******************************************************************************
    *                                                                             *
    *                        Bugcheck Analysis                                    *
    *                                                                             *
    *******************************************************************************
    
    DRIVER_IRQL_NOT_LESS_OR_EQUAL (d1)
    An attempt was made to access a pageable (or completely invalid) address at an
    interrupt request level (IRQL) that is too high.  This is usually
    caused by drivers using improper addresses.
    If kernel debugger is available get stack backtrace.
    Arguments:
    Arg1: fffff8a01683dac8, memory referenced
    Arg2: 0000000000000002, IRQL
    Arg3: 0000000000000000, value 0 = read operation, 1 = write operation
    Arg4: fffff88001326039, address which referenced memory
    
    Debugging Details:
    ------------------
    
    
    READ_ADDRESS: GetPointerFromAddress: unable to read from fffff800032b9100
     fffff8a01683dac8 
    
    CURRENT_IRQL:  2
    
    FAULTING_IP: 
    fltmgr!GetContextFromStreamList+99
    fffff880`01326039 488b4820        mov     rcx,qword ptr [rax+20h]
    
    CUSTOMER_CRASH_COUNT:  1
    
    DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT
    
    BUGCHECK_STR:  0xD1
    
    PROCESS_NAME:  System
    
    TRAP_FRAME:  fffff8800311b420 -- (.trap 0xfffff8800311b420)
    NOTE: The trap frame does not contain all registers.
    Some register values may be zeroed or incorrect.
    rax=fffff8a01683daa8 rbx=0000000000000000 rcx=fffffa80084dd3c0
    rdx=fffffa8004c8ef20 rsi=0000000000000000 rdi=0000000000000000
    rip=fffff88001326039 rsp=fffff8800311b5b0 rbp=fffffa8004c79638
     r8=fffffa800971eb90  r9=fffff8800311b6c8 r10=fffffa80084dd3c8
    r11=0000000000000011 r12=0000000000000000 r13=0000000000000000
    r14=0000000000000000 r15=0000000000000000
    iopl=0         nv up ei ng nz na pe nc
    fltmgr!GetContextFromStreamList+0x99:
    fffff880`01326039 488b4820        mov     rcx,qword ptr [rax+20h] ds:0002:fffff8a0`1683dac8=fffffa8004c8ef20
    Resetting default scope
    
    LAST_CONTROL_TRANSFER:  from fffff800030861e9 to fffff80003086c40
    
    STACK_TEXT:  
    fffff880`0311b2d8 fffff800`030861e9 : 00000000`0000000a fffff8a0`1683dac8 00000000`00000002 00000000`00000000 : nt!KeBugCheckEx
    fffff880`0311b2e0 fffff800`03084e60 : 00000000`00000001 fffff800`03093241 fffff880`019fb128 00000000`00000000 : nt!KiBugCheckDispatch+0x69
    fffff880`0311b420 fffff880`01326039 : 00000000`00000000 00000000`00000000 fffff880`0311b660 fffff880`01325aae : nt!KiPageFault+0x260
    fffff880`0311b5b0 fffff880`01325cb3 : fffffa80`084dd3c0 fffffa80`084dd3c0 fffffa80`04c79530 fffffa80`0971eb90 : fltmgr!GetContextFromStreamList+0x99
    fffff880`0311b630 fffff880`08270ed9 : fffffa80`084dd3c0 00000000`00000000 fffff880`0311b708 fffff880`0311b708 : fltmgr!FltGetStreamHandleContext+0x43
    fffff880`0311b660 fffffa80`084dd3c0 : 00000000`00000000 fffff880`0311b708 fffff880`0311b708 00000000`00000000 : stflt+0x1ed9
    fffff880`0311b668 00000000`00000000 : fffff880`0311b708 fffff880`0311b708 00000000`00000000 fffff800`0308cfda : 0xfffffa80`084dd3c0
    
    
    STACK_COMMAND:  kb
    
    FOLLOWUP_IP: 
    stflt+1ed9
    fffff880`08270ed9 ??              ???
    
    SYMBOL_STACK_INDEX:  5
    
    SYMBOL_NAME:  stflt+1ed9
    
    FOLLOWUP_NAME:  MachineOwner
    
    MODULE_NAME: stflt
    
    IMAGE_NAME:  stflt.sys
    
    DEBUG_FLR_IMAGE_TIMESTAMP:  4c2b57fc
    
    FAILURE_BUCKET_ID:  X64_0xD1_stflt+1ed9
    
    BUCKET_ID:  X64_0xD1_stflt+1ed9
    
    Followup: MachineOwner
    ---------
      My Computer


  3. Posts : 28,845
    Win 8 Release candidate 8400
       #3

    Kashana86 said:
    Hi,

    I have been randomly receiving BSODs for quite some time however it appears to be occurring with more frequency now. There hasn't been a specific program running that appears to be linked to the BSOD. Through Event Viewer, the report blames fltmgr.sys and ntoskrnl.exe for the BSOD with a bug check code of 0x000000d1.

    My system:
    Windows 7 Home Premium x64bit
    Original install of the OS
    OEM- installed when I purchased the computer
    I purchased the computer around March 2011 as a new computer

    Attached is the Zip file as requested. I've also attached more detailed info about my computer's specs.

    Run a system file check to verify and repair your system files.
    To do this type cmd in search, then right click to run as administrator, then
    SFC /SCANNOW

    It may need to be run up to three times before successful
    Let us know the results from the report at the end.
    Read here for more information SFC /SCANNOW Command - System File Checker

      My Computer


  4. Posts : 7
    Windows 7 Home Premimun 64bit
    Thread Starter
       #4

    I uninstalled Spyware Terminator as requested. After restarting my computer, I ran the system file check once. It came back with the response: " Verification 100% complete. Windows Resource Protection did not find any integrity violations."
      My Computer


  5. Posts : 28,845
    Win 8 Release candidate 8400
       #5

    Kashana86 said:
    I uninstalled Spyware Terminator as requested. After restarting my computer, I ran the system file check once. It came back with the response: " Verification 100% complete. Windows Resource Protection did not find any integrity violations."
    Thats good. any crashes since?
      My Computer


  6. Posts : 7
    Windows 7 Home Premimun 64bit
    Thread Starter
       #6

    Not yet. It happens randomly but I will post back if it does. Fingers crossed!
      My Computer


  7. Posts : 7
    Windows 7 Home Premimun 64bit
    Thread Starter
       #7

    Spoke too soon. Just got a BSOD while using firefox.
      My Computer


  8. Posts : 28,845
    Win 8 Release candidate 8400
       #8

    Kashana86 said:
    Spoke too soon. Just got a BSOD while using firefox.
    Dmp file?.
      My Computer


  9. Posts : 7
    Windows 7 Home Premimun 64bit
    Thread Starter
       #9

    zigzag3143 said:
    Kashana86 said:
    Spoke too soon. Just got a BSOD while using firefox.
    Dmp file?.

    Most recent minidump.
      My Computer


  10. Posts : 7
    Windows 7 Home Premimun 64bit
    Thread Starter
       #10

    Any additional suggestions? I just got an additional BSOD but no minidump was created. This time it occurred after turning the computer back after hibernating.
      My Computer


 
Page 1 of 2 12 LastLast

  Related Discussions
Our Sites
Site Links
About Us
Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

© Designer Media Ltd
All times are GMT -5. The time now is 01:50.
Find Us