New Posts  All Forums:Forum Nav:

BSOD

post #1 of 18
Thread Starter 
Hi, so the past days ive been getting BSOD's. I have the Driver Verifier enabled at the moment, but havent got any BSOD's at the time. I have 1 dmp file wich im not sure how to attach/upload it. The bsod's are randoms aswell and i havent installed /changed any part in my computer lately.
Thanks in advance!!
post #2 of 18
Firstly Welcome to OCN. Secondly PC specs?
Piledriver Reborn
(21 items)
 
   
CPUMotherboardGraphicsRAM
Intel I7 4770k 4.5Ghz Asus Z97 P XFX R9 270X Boost Edition 16Gb (4x4Gb) @ 1600Mhz 
Hard DriveHard DriveHard DriveHard Drive
Kingston SSDNow 120GB M.2 Seagate Constellation ES 2TB OCZ Agility III 60GB Seagate Freeplay 1TB 
CoolingCoolingOSMonitor
Enermax UCTP12P 120mm x 5 Phanteks U-Type Black Windows 10 Pro Samsung 27" Curved S27D590C 
KeyboardPowerCaseMouse
Madcatz Eclipse V5 OCZ Core-X-Stream Series 500W Zalman Z11 Plus Corsair SABRE RGB 
Mouse PadAudioOtherOther
Strix Glide Gaming Pad Corsair Void 7.1 Ikea Corner Desk ThrustMaster T-Flight Hotas X 
Other
Xbox 360 Wireless Gaming Reciever 
CPUMotherboardGraphicsRAM
Intel I3 3110M Latitude E6230 Mainboard (CPU Integrated)  Intel HD 4000 Series SKHynix 2gb DDR3 (1600Mhz) 
RAMHard DriveCoolingOS
SKHynix 2gb DDR3 (1600Mhz) Sandisk X110 128gb Latitude E6230 Stock Cooler | Antec Formula 7 Windows 10 Insider Preview 
MonitorKeyboardPowerMouse
1366x768 @ 60Hz Latitude E6230 EN-GB Qwerty Keyboard Dell Extended 66600mWh Latitude E6230 Touchpad 
Audio
IDT High Definition Audio CODEC 
CPUMotherboardGraphicsRAM
Intel Core I5 3427U Panasonic CF-AX2 Intel HD 4000 Series 4GB 1333Mhz DDR3L 
Hard DriveCoolingOSOS
128GB Samsung P830 M-Sata SSD Stock Cooler Windows 10 Pro Remix OS 
MonitorKeyboardPowerMouse
1366x768 10.1" Touchscreen @ 60Hz Panasonix CF-AX2 EN-GB Qwerty Keyboard Panasonic 29520mWh Panasonic CF-AX2 Touchpad 
Audio
Realtek ALC269 
  hide details  
Reply
Piledriver Reborn
(21 items)
 
   
CPUMotherboardGraphicsRAM
Intel I7 4770k 4.5Ghz Asus Z97 P XFX R9 270X Boost Edition 16Gb (4x4Gb) @ 1600Mhz 
Hard DriveHard DriveHard DriveHard Drive
Kingston SSDNow 120GB M.2 Seagate Constellation ES 2TB OCZ Agility III 60GB Seagate Freeplay 1TB 
CoolingCoolingOSMonitor
Enermax UCTP12P 120mm x 5 Phanteks U-Type Black Windows 10 Pro Samsung 27" Curved S27D590C 
KeyboardPowerCaseMouse
Madcatz Eclipse V5 OCZ Core-X-Stream Series 500W Zalman Z11 Plus Corsair SABRE RGB 
Mouse PadAudioOtherOther
Strix Glide Gaming Pad Corsair Void 7.1 Ikea Corner Desk ThrustMaster T-Flight Hotas X 
Other
Xbox 360 Wireless Gaming Reciever 
CPUMotherboardGraphicsRAM
Intel I3 3110M Latitude E6230 Mainboard (CPU Integrated)  Intel HD 4000 Series SKHynix 2gb DDR3 (1600Mhz) 
RAMHard DriveCoolingOS
SKHynix 2gb DDR3 (1600Mhz) Sandisk X110 128gb Latitude E6230 Stock Cooler | Antec Formula 7 Windows 10 Insider Preview 
MonitorKeyboardPowerMouse
1366x768 @ 60Hz Latitude E6230 EN-GB Qwerty Keyboard Dell Extended 66600mWh Latitude E6230 Touchpad 
Audio
IDT High Definition Audio CODEC 
CPUMotherboardGraphicsRAM
Intel Core I5 3427U Panasonic CF-AX2 Intel HD 4000 Series 4GB 1333Mhz DDR3L 
Hard DriveCoolingOSOS
128GB Samsung P830 M-Sata SSD Stock Cooler Windows 10 Pro Remix OS 
MonitorKeyboardPowerMouse
1366x768 10.1" Touchscreen @ 60Hz Panasonix CF-AX2 EN-GB Qwerty Keyboard Panasonic 29520mWh Panasonic CF-AX2 Touchpad 
Audio
Realtek ALC269 
  hide details  
Reply
post #3 of 18
Thread Starter 
Processor: Intel Core i5 3570K 3,4GHz Quad Core
Graphics Card: Nvidia Geforce GTX 570
RAM: 8Gb Corsair Vengeance
Motherboard: MSI Z77A-S01
post #4 of 18
Thread Starter 
Got another BSOD like 20 minutes ago, another string code this time. IRQL_NOT_LESS_OR_EQUAL , still dont know how to upload the dumps. cant add them to a winrar, wont let me.
http://speedy.sh/qnW32/Ny-tt-WinRAR-ZIP-archive.zip
Edited by Fazzle - 8/16/13 at 10:46am
post #5 of 18
Hi,

The attached DMP file is of the IRQL_NOT_LESS_OR_EQUAL (a) bugcheck.

A kernel-mode driver or process attempted to access a protected memory location it does not have permission for, or a kernel interrupt request level (IRQL) attempted to access a memory address that is too high.

This bugcheck usually occurs when a driver uses an incorrect memory address. Other possible causes of this error include: bug in a device driver, system service, the BIOS, an old Anti-virus program or backup tool, hard disk issue, or possibly memory issues.

If we get the stack trace, we can see multiple page faults:
Code:
0: kd> kv
Child-SP          RetAddr           : Args to Child                                                           : Call Site
fffff880`0caad218 fffff800`030c71a9 : 00000000`0000000a fffffa7f`3fffffd8 00000000`00000002 00000000`00000001 : nt!KeBugCheckEx
fffff880`0caad220 fffff800`030c5e20 : fffffa80`0749cbd0 fffff880`0166b85c fffff880`00000001 fffffa80`005f8080 : nt!KiBugCheckDispatch+0x69
fffff880`0caad360 fffff800`030e7061 : fffffa80`0bc33270 fffffa80`0ba4a410 fffffa80`0bc32000 fffffa80`0bc32000 : nt!KiPageFault+0x260 (TrapFrame @ fffff880`0caad360)
fffff880`0caad4f0 fffff800`030eb898 : fffff880`0caad5c0 00000000`0001fd58 fffffa80`005f8080 fffff880`0707e17e : nt!MiUnlinkFreeOrZeroedPage+0x181
fffff880`0caad560 fffff800`030f5549 : fffff8a0`164b71a0 fffff880`00000000 00000000`0000005c fa800d76`e59004c0 : nt!MiRemoveAnyPage+0x1d8
fffff880`0caad680 fffff800`030e5c8c : fa800d76`e59004c0 fffffa80`073813f8 fffff8a0`164b7180 ffffffff`00000420 : nt!MiResolveMappedFileFault+0x9b9
fffff880`0caad7e0 fffff800`030e44f3 : fa800d76`e59004c0 00000000`2c6d0000 fffff680`00163680 fffffa80`073813f8 : nt!MiResolveProtoPteFault+0x47c
fffff880`0caad870 fffff800`030d4179 : 00000000`00000000 00000000`2c6d0000 fffffa80`07448060 00000000`00000000 : nt!MiDispatchFault+0x1c3
fffff880`0caad980 fffff800`030c5d2e : 00000000`00000000 00000000`2c6d0000 00000000`00000001 00000000`00000036 : nt!MmAccessFault+0x359
fffff880`0caadae0 00000000`0139322f : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiPageFault+0x16e (TrapFrame @ fffff880`0caadae0)
00000000`2b80d7b0 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x139322f

You can also see right above the first page fault the MmAccessFault call. Page faults cannot be handled by the MmAccessFault
when the IRQL is 2 or higher, and at that point then become illegal operations - BugCheck A, {fffffa7f3fffffd8, 2, 1, fffff800030e7061}

2nd parameter of the bugcheck = the IRQL is 2.

If we run a .trap on one of the page faults to obtain the registers, we can see the following:
Code:
0: kd> .trap 0xfffff8800caad360
NOTE: The trap frame does not contain all registers.
Some register values may be zeroed or incorrect.
rax=ffffffffe7fffffa rbx=0000000000000000 rcx=0000000000000007
rdx=fffffa8000000008 rsi=0000000000000000 rdi=0000000000000000
rip=fffff800030e7061 rsp=fffff8800caad4f0 rbp=0000000000000058
 r8=0000000000000000  r9=0000000000000000 r10=fffffa80065d0de0
r11=fffff80003242e80 r12=0000000000000000 r13=0000000000000000
r14=0000000000000000 r15=0000000000000000
iopl=0         nv up ei ng nz ac po cy
nt!MiUnlinkFreeOrZeroedPage+0x181

MiUnlinkFreeOrZeroedPage created a page fault, and we can see the function is pointing to the rip register which contains the address which referenced memory from the 4th parameter of the bugcheck.

From looking at this, I am assuming a device driver issue, however, hard disk or memory is possible as well.

In your loaded drivers list, dtsoftbus01.sys is listed which is the Daemon Tools driver. Daemon Tools is a very popular cause of BSOD's in 7/8 based systems. Please uninstall Daemon Tools. Alternative imaging programs are: MagicISO, Power ISO, etc.

If removing Daemon Tools doesn't help the issue, let's run some hardware diagnostics:

Memtest:

Memtest86+:

Download Memtest86+ here:

http://www.memtest.org/

Which should I download?

You can either download the pre-compiled ISO that you would burn to a CD and then boot from the CD, or you can download the auto-installer for the USB key. What this will do is format your USB drive, make it a bootable device, and then install the necessary files. Both do the same job, it's just up to you which you choose, or which you have available (whether it's CD or USB).

How Memtest works:

Memtest86 writes a series of test patterns to most memory addresses, reads back the data written, and compares it for errors.

The default pass does 9 different tests, varying in access patterns and test data. A tenth test, bit fade, is selectable from the menu. It writes all memory with zeroes, then sleeps for 90 minutes before checking to see if bits have changed (perhaps because of refresh problems). This is repeated with all ones for a total time of 3 hours per pass.

Many chipsets can report RAM speeds and timings via SPD (Serial Presence Detect) or EPP (Enhanced Performance Profiles), and some even support changing the expected memory speed. If the expected memory speed is overclocked, Memtest86 can test that memory performance is error-free with these faster settings.

Some hardware is able to report the "PAT status" (PAT: enabled or PAT: disabled). This is a reference to Intel Performance acceleration technology; there may be BIOS settings which affect this aspect of memory timing.

This information, if available to the program, can be displayed via a menu option.

Any other questions, they can most likely be answered by reading this great guide here:

http://forum.canardpc.com/threads/28864-FAQ-please-read-before-posting

Chkdsk:

Chkdsk:
There are various ways to run Chkdsk~


Method 1:

Start > Search bar > Type cmd (right click run as admin to execute Elevated CMD)

Elevated CMD should now be opened, type the following:

chkdsk x: /r

x implies your drive letter, so if your hard drive in question is letter c, it would be:

chkdsk c: /r

Restart system and let chkdsk run.

Method 2:


Open the "Computer" window
Right-click on the drive in question
Select the "Tools" tab
In the Error-checking area, click .

If you'd like to get a log file that contains the chkdsk results, do the following:

Press Windows Key + R and type powershell.exe in the run box

Paste the following command and press enter afterwards:

get-winevent -FilterHashTable @{logname="Application"; id="1001"}| ?{$_.providername –match "wininit"} | fl timecreated, message | out-file Desktop\CHKDSKResults.txt

This will output a .txt file on your Desktop containing the results of the chkdsk.

If chkdsk turns out okay, run Seatools -

http://www.seagate.com/support/downloads/seatools/

You can run it via Windows or DOS. Do note that the only difference is simply the environment you're running it in. In Windows, if you are having what you believe to be device driver related issues that may cause conflicts or false positive, it may be a wise decision to choose the most minimal testing environment (DOS).

Run all tests EXCEPT: Fix All, Long Generic, and anything Advanced.

Regards,

Patrick
post #6 of 18
Thread Starter 
Got another BSOD today, like 3 hours after my reinstall on windows were done, i did all the steps you linked even though i didnt understand half of it :/
http://speedy.sh/sQhZS/Dmp.zip
Theres the dmp file anyway. I dont know if its the same but its atleas IRQL .
Thinking about letting my computer back to where i bought it for a repair, but im not sure what causing it frown.gif
By the way. it passed all the tests on SeaTools and nothing happened while doing the Chkdsk thing.
Thanks!
post #7 of 18
Hi,

Did you run Memtest for at least 8 passes to check and see if your memory isn't at fault? Handing it in for repair is always an option if you are not comfortable carrying out troubleshooting steps, but do note it can get expensive.

Regards,

Patrick
post #8 of 18
Thread Starter 
Nope i didnt do the memtest yet. I dont know what i understood it should take a while so i will probably do it while im not at the computer, could i do it when im asleep? or do i need to be alert and be there all the time? still i didnt understand how to do it. i will do it with a usb thats all i know tongue.gif
Thx /Marcus
PS forgot to tell that i think i still have guarantee left if that covers it up ?
Edited by Fazzle - 8/17/13 at 3:51pm
post #9 of 18
Hi,

You can start the Memtest and then go away from the computer, yes. If there are errors the test doesn't restart or anything.

Regards,

Patrick
post #10 of 18
Quote:
Originally Posted by pjBSOD View Post

Hi,

You can start the Memtest and then go away from the computer, yes. If there are errors the test doesn't restart or anything.

Regards,

Patrick
HOW DARE YOU TAKE MY NAME! (Jokes)
And speaking of BSOD, shortly after reading this thread while playing a game I just got a "An attempt to write to a read-only section" BSOD, What are the odds! tongue.gif
Piledriver Reborn
(21 items)
 
   
CPUMotherboardGraphicsRAM
Intel I7 4770k 4.5Ghz Asus Z97 P XFX R9 270X Boost Edition 16Gb (4x4Gb) @ 1600Mhz 
Hard DriveHard DriveHard DriveHard Drive
Kingston SSDNow 120GB M.2 Seagate Constellation ES 2TB OCZ Agility III 60GB Seagate Freeplay 1TB 
CoolingCoolingOSMonitor
Enermax UCTP12P 120mm x 5 Phanteks U-Type Black Windows 10 Pro Samsung 27" Curved S27D590C 
KeyboardPowerCaseMouse
Madcatz Eclipse V5 OCZ Core-X-Stream Series 500W Zalman Z11 Plus Corsair SABRE RGB 
Mouse PadAudioOtherOther
Strix Glide Gaming Pad Corsair Void 7.1 Ikea Corner Desk ThrustMaster T-Flight Hotas X 
Other
Xbox 360 Wireless Gaming Reciever 
CPUMotherboardGraphicsRAM
Intel I3 3110M Latitude E6230 Mainboard (CPU Integrated)  Intel HD 4000 Series SKHynix 2gb DDR3 (1600Mhz) 
RAMHard DriveCoolingOS
SKHynix 2gb DDR3 (1600Mhz) Sandisk X110 128gb Latitude E6230 Stock Cooler | Antec Formula 7 Windows 10 Insider Preview 
MonitorKeyboardPowerMouse
1366x768 @ 60Hz Latitude E6230 EN-GB Qwerty Keyboard Dell Extended 66600mWh Latitude E6230 Touchpad 
Audio
IDT High Definition Audio CODEC 
CPUMotherboardGraphicsRAM
Intel Core I5 3427U Panasonic CF-AX2 Intel HD 4000 Series 4GB 1333Mhz DDR3L 
Hard DriveCoolingOSOS
128GB Samsung P830 M-Sata SSD Stock Cooler Windows 10 Pro Remix OS 
MonitorKeyboardPowerMouse
1366x768 10.1" Touchscreen @ 60Hz Panasonix CF-AX2 EN-GB Qwerty Keyboard Panasonic 29520mWh Panasonic CF-AX2 Touchpad 
Audio
Realtek ALC269 
  hide details  
Reply
Piledriver Reborn
(21 items)
 
   
CPUMotherboardGraphicsRAM
Intel I7 4770k 4.5Ghz Asus Z97 P XFX R9 270X Boost Edition 16Gb (4x4Gb) @ 1600Mhz 
Hard DriveHard DriveHard DriveHard Drive
Kingston SSDNow 120GB M.2 Seagate Constellation ES 2TB OCZ Agility III 60GB Seagate Freeplay 1TB 
CoolingCoolingOSMonitor
Enermax UCTP12P 120mm x 5 Phanteks U-Type Black Windows 10 Pro Samsung 27" Curved S27D590C 
KeyboardPowerCaseMouse
Madcatz Eclipse V5 OCZ Core-X-Stream Series 500W Zalman Z11 Plus Corsair SABRE RGB 
Mouse PadAudioOtherOther
Strix Glide Gaming Pad Corsair Void 7.1 Ikea Corner Desk ThrustMaster T-Flight Hotas X 
Other
Xbox 360 Wireless Gaming Reciever 
CPUMotherboardGraphicsRAM
Intel I3 3110M Latitude E6230 Mainboard (CPU Integrated)  Intel HD 4000 Series SKHynix 2gb DDR3 (1600Mhz) 
RAMHard DriveCoolingOS
SKHynix 2gb DDR3 (1600Mhz) Sandisk X110 128gb Latitude E6230 Stock Cooler | Antec Formula 7 Windows 10 Insider Preview 
MonitorKeyboardPowerMouse
1366x768 @ 60Hz Latitude E6230 EN-GB Qwerty Keyboard Dell Extended 66600mWh Latitude E6230 Touchpad 
Audio
IDT High Definition Audio CODEC 
CPUMotherboardGraphicsRAM
Intel Core I5 3427U Panasonic CF-AX2 Intel HD 4000 Series 4GB 1333Mhz DDR3L 
Hard DriveCoolingOSOS
128GB Samsung P830 M-Sata SSD Stock Cooler Windows 10 Pro Remix OS 
MonitorKeyboardPowerMouse
1366x768 10.1" Touchscreen @ 60Hz Panasonix CF-AX2 EN-GB Qwerty Keyboard Panasonic 29520mWh Panasonic CF-AX2 Touchpad 
Audio
Realtek ALC269 
  hide details  
Reply
New Posts  All Forums:Forum Nav:
  Return Home
  Back to Forum: Crash Analysis and Debugging