BSOD and Memory Dump in Vista

J

JoseA

New Member
Hi, so I've been getting at least once for the last three consecutive days, a BSOD with subsequent memory dump when I'm doing stuff like running Revo Uninstaller, cleaning the Recycle bin or Copying a few Gbs to my external HDD. There doesn't seem to be a recurring message every time it happens although last night I got the BSOD saying IRQL Less than equal, and today I copied this report after it happened:

Sorry, it's in Portuguese, but the structure of these reports is always the same:

Assinatura do problema: (Problem Signature)
Nome do Evento de Problema: BlueScreen (Problem Event)
Versão do SO: 6.0.6001.2.1.0.768.3
ID de Região: 2070

Informações adicionais sobre o problema: (additional Info on the Problem)
BCCode: 1000008e
BCP1: C0000005
BCP2: 82263B24
BCP3: 8B6DBB48
BCP4: 00000000
OS Version: 6_0_6001
Service Pack: 1_0
Product: 768_1

Ficheiros que ajudam a descrever o problema: (Files which help describe the problem)
C:\Windows\Minidump\Mini022409-01.dmp
C:\Users\José\AppData\Local\Temp\WER-76300-0.sysdata.xml
C:\Users\José\AppData\Local\Temp\WERFC29.tmp.version.txt

Leia a nossa declaração de privacidade: (Read our privacy statement)
Microsoft - Análise de travamento online

I fear due to last nights message IRQL Less than equal, that I might be having some problem with my RAM. I ran FreePCAudit and it didn't detect anything, all the 1 GB of RAM is being detected. My laptop is a Toshiba Satellite A 100 -749 and I'm running Vista Home Premium.

Any help is appreciated, thanks.
 

My Computer

System One

IRQL Less than equal

The above means that this error is due to a bad or incompatible driver.

0x0000000A: IRQL_NOT_LESS_OR_EQUAL
(Click to consult the online MSDN article.)
Typically due to a bad driver, or faulty or incompatible hardware or software. Use
the General Troubleshooting of STOP Messages checklist above. Technically, this
error condition means that a kernel-mode process or driver tried to access a memory
location to which it did not have permission, or at a kernel Interrupt ReQuest Level
(IRQL) that was too high. (A kernel-mode process can access only other processes
that have an IRQL lower than, or equal to, its own.)
a.. Troubleshooting “Stop 0x0A” Messages in Windows {KB 165863} Win NT, Win 2000,
Win XP
b.. Troubleshooting a Stop 0x0000000A Error in Windows XP {KB 314063} Win XP
a.. Possible Resolutions to STOP 0x0A, 0x01E, and 0x50 Errors {KB 183169} Win NT,
Win 2000, Win XP
b.. During upgrade to Win XP {KB 311564} Win XP
c.. STOP 0x0000000A Error Message When You Change from AC Power to DC Power {KB
316676} Win XP
d.. “Stop 0x0000000A” Error Message When You Fast Switch Between Users {KB 310918}
Win XP
e.. While booting NT on same partition as Win 2000 or XP {KB 227301} Win NT, Win
2000, Win XP
f.. Windows XP Restarts When You Try to Shut Down Your Computer {KB 311806}
g.. “Fatal System Error” When You Try to Use a Hewlett-Packard 5100C ScanJet {KB
307129} Win XP (with Brother printer)
h.. Computer May Hang During a Heavy Load with an Ericsson HIS Modem {KB 319810}
Win 2000, Win XP
i.. STOP 0x4E, STOP 0x1A, STOP 0x50, and STOP 0xA Errors Occur When You Try to
Start the Computer {KB 271955} Win NT 4.0 (corrupt physical RAM)
j.. “Stop: 0x0000000A (00000063, 0000001c, 00000000, parameter4)” error message on
a Windows 2000-based computer {KB 837384} Win 2000 (program error, hotfix available)
k.. How to Use Driver Verifier to Troubleshoot Windows Drivers {KB 244617} Win
2000, Win XP, Server 2003
l.. Error Message When Installing Windows Vista on a Computer With More Than 3 GB
of RAM: STOP 0x0000000A {KB 929777} Vista (update patch available)
m.. Randomly Stop 0xA Errors in Storport.sys When You Start Windows Vista {KB
930261} Vista (hotfix available)

--
Peter

Please Reply to Newsgroup for the benefit of others
Requests for assistance by email can not and will not be acknowledged.

"JoseA" <[email protected]> wrote in message
news:[email protected]...

>
> Hi, so I've been getting at least once for the last three consecutive
> days, a BSOD with subsequent memory dump when I'm doing stuff like
> running Revo Uninstaller, cleaning the Recycle bin or Copying a few Gbs
> to my external HDD. There doesn't seem to be a recurring message every
> time it happens although last night I got the BSOD saying IRQL Less than
> equal, and today I copied this report after it happened:
>
> Sorry, it's in Portuguese, but the structure of these reports is always
> the same:
>
> Assinatura do problema: (Problem Signature)
> Nome do Evento de Problema: BlueScreen (Problem Event)
> Versão do SO: 6.0.6001.2.1.0.768.3
> ID de Região: 2070
>
> Informações adicionais sobre o problema: (additional Info on the
> Problem)
> BCCode: 1000008e
> BCP1: C0000005
> BCP2: 82263B24
> BCP3: 8B6DBB48
> BCP4: 00000000
> OS Version: 6_0_6001
> Service Pack: 1_0
> Product: 768_1
>
> Ficheiros que ajudam a descrever o problema: (Files which help describe
> the problem)
> C:\Windows\Minidump\Mini022409-01.dmp
> C:\Users\José\AppData\Local\Temp\WER-76300-0.sysdata.xml
> C:\Users\José\AppData\Local\Temp\WERFC29.tmp.version.txt
>
> Leia a nossa declaração de privacidade: (Read our privacy statement)
> 'Microsoft - Análise de travamento online'
> (http://go.microsoft.com/fwlink/?linkid=50163&clcid=0x0816)
>
> I fear due to last nights message IRQL Less than equal, that I might be
> having some problem with my RAM. I ran FreePCAudit and it didn't detect
> anything, all the 1 GB of RAM is being detected. My laptop is a Toshiba
> Satellite A 100 -749 and I'm running Vista Home Premium.
>
> Any help is appreciated, thanks.
>
>
> --
> JoseA
Click to expand...
 

My Computer

System One

Flavius said:
JoseA said:
C:\Windows\Minidump\Mini022409-01.dmp
Click to expand...
Debug this file and attache here (see here how to read DMP file How to read the small memory dump files that Windows creates for debugging
Click to expand...

Hope I did this right. I got:

Microsoft (R) Windows Debugger Version 6.11.0001.402 X86
Copyright (c) Microsoft Corporation. All rights reserved.


Loading Dump File [c:\windows\minidump\mini022409-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available

WARNING: Inaccessible path: 'c:\windows\i386'
Symbol search path is: srv*c:\symbols*Symbol information
Executable search path is: c:\windows\i386
Windows Server 2008/Windows Vista Kernel Version 6001 (Service Pack 1) MP (2 procs) Free x86 compatible
Product: WinNt, suite: TerminalServer SingleUserTS Personal
Built by: 6001.18145.x86fre.vistasp1_gdr.080917-1612
Machine Name:
Kernel base = 0x8204a000 PsLoadedModuleList = 0x82157930
Debug session time: Tue Feb 24 12:13:15.810 2009 (GMT+1)
System Uptime: 0 days 3:10:08.243
Loading Kernel Symbols
...............................................................
................................................................
..........................
Loading User Symbols
Loading unloaded module list
............
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck 1000008E, {c0000005, 82263b24, 8b6dbb48, 0}

Probably caused by : ntkrnlmp.exe ( nt!HvpGetCellMapped+8c )

Followup: MachineOwner
---------

0: kd> !analyze -v
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

KERNEL_MODE_EXCEPTION_NOT_HANDLED_M (1000008e)
This is a very common bugcheck. Usually the exception address pinpoints
the driver/function that caused the problem. Always note this address
as well as the link date of the driver/image that contains this address.
Some common problems are exception code 0x80000003. This means a hard
coded breakpoint or assertion was hit, but this system was booted
/NODEBUG. This is not supposed to happen as developers should never have
hardcoded breakpoints in retail code, but ...
If this happens, make sure a debugger gets connected, and the
system is booted /DEBUG. This will let us see why this breakpoint is
happening.
Arguments:
Arg1: c0000005, The exception code that was not handled
Arg2: 82263b24, The address that the exception occurred at
Arg3: 8b6dbb48, Trap Frame
Arg4: 00000000

Debugging Details:
------------------


EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - A instru o no 0x%08lx fez refer ncia mem ria no 0x%08lx. A mem ria n o p de ser %s.

FAULTING_IP:
nt!HvpGetCellMapped+8c
82263b24 8b4f04 mov ecx,dword ptr [edi+4]

TRAP_FRAME: 8b6dbb48 -- (.trap 0xffffffff8b6dbb48)
ErrCode = 00000000
eax=00000be0 ebx=00000000 ecx=00000202 edx=8d8c3000 esi=8933e108 edi=00001dc0
eip=82263b24 esp=8b6dbbbc ebp=8b6dbbfc iopl=0 nv up ei pl nz na pe nc
cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00010206
nt!HvpGetCellMapped+0x8c:
82263b24 8b4f04 mov ecx,dword ptr [edi+4] ds:0023:00001dc4=????????
Resetting default scope

CUSTOMER_CRASH_COUNT: 1

DEFAULT_BUCKET_ID: VISTA_DRIVER_FAULT

BUGCHECK_STR: 0x8E

PROCESS_NAME: revouninstaller

CURRENT_IRQL: 0

LAST_CONTROL_TRANSFER: from 82251114 to 82263b24

STACK_TEXT:
8b6dbbfc 82251114 8933e108 405dcbe0 9cf9e3f8 nt!HvpGetCellMapped+0x8c
8b6dbc28 8225870c 9cf9e3f8 8b6dbc6c 00000001 nt!CmpGetValueKeyFromCache+0x96
8b6dbca8 82258cc6 a4ee91a8 00000000 00000001 nt!CmEnumerateValueKey+0x49c
8b6dbd44 820a197a 00000000 00000000 00000001 nt!NtEnumerateValueKey+0x1f2
8b6dbd44 77be9a94 00000000 00000000 00000001 nt!KiFastCallEntry+0x12a
WARNING: Frame IP not in any known module. Following frames may be wrong.
02dae334 00000000 00000000 00000000 00000000 0x77be9a94


STACK_COMMAND: kb

FOLLOWUP_IP:
nt!HvpGetCellMapped+8c
82263b24 8b4f04 mov ecx,dword ptr [edi+4]

SYMBOL_STACK_INDEX: 0

SYMBOL_NAME: nt!HvpGetCellMapped+8c

FOLLOWUP_NAME: MachineOwner

MODULE_NAME: nt

IMAGE_NAME: ntkrnlmp.exe

DEBUG_FLR_IMAGE_TIMESTAMP: 48d1b7e8

FAILURE_BUCKET_ID: 0x8E_nt!HvpGetCellMapped+8c

BUCKET_ID: 0x8E_nt!HvpGetCellMapped+8c

Followup: MachineOwner
 

My Computer

System One

JoseA said:
Flavius said:
JoseA said:
0: kd> !analyze -v
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

KERNEL_MODE_EXCEPTION_NOT_HANDLED_M (1000008e)
This is a very common bugcheck. Usually the exception address pinpoints
the driver/function that caused the problem. Always note this address
as well as the link date of the driver/image that contains this address.
Some common problems are exception code 0x80000003. This means a hard
coded breakpoint or assertion was hit, but this system was booted
/NODEBUG. This is not supposed to happen as developers should never have
hardcoded breakpoints in retail code, but ...
If this happens, make sure a debugger gets connected, and the
system is booted /DEBUG. This will let us see why this breakpoint is
happening.
Arguments:
Arg1: c0000005, The exception code that was not handled
Arg2: 82263b24, The address that the exception occurred at
Arg3: 8b6dbb48, Trap Frame
Arg4: 00000000

Debugging Details:
------------------


EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - A instru o no 0x%08lx fez refer ncia mem ria no 0x%08lx. A mem ria n o p de ser %s.

FAULTING_IP:
nt!HvpGetCellMapped+8c
82263b24 8b4f04 mov ecx,dword ptr [edi+4]

TRAP_FRAME: 8b6dbb48 -- (.trap 0xffffffff8b6dbb48)
ErrCode = 00000000
eax=00000be0 ebx=00000000 ecx=00000202 edx=8d8c3000 esi=8933e108 edi=00001dc0
eip=82263b24 esp=8b6dbbbc ebp=8b6dbbfc iopl=0 nv up ei pl nz na pe nc
cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00010206
nt!HvpGetCellMapped+0x8c:
82263b24 8b4f04 mov ecx,dword ptr [edi+4] ds:0023:00001dc4=????????
Resetting default scope

CUSTOMER_CRASH_COUNT: 1

DEFAULT_BUCKET_ID: VISTA_DRIVER_FAULT

BUGCHECK_STR: 0x8E

PROCESS_NAME: revouninstaller

CURRENT_IRQL: 0

LAST_CONTROL_TRANSFER: from 82251114 to 82263b24

STACK_TEXT:
8b6dbbfc 82251114 8933e108 405dcbe0 9cf9e3f8 nt!HvpGetCellMapped+0x8c
8b6dbc28 8225870c 9cf9e3f8 8b6dbc6c 00000001 nt!CmpGetValueKeyFromCache+0x96
8b6dbca8 82258cc6 a4ee91a8 00000000 00000001 nt!CmEnumerateValueKey+0x49c
8b6dbd44 820a197a 00000000 00000000 00000001 nt!NtEnumerateValueKey+0x1f2
8b6dbd44 77be9a94 00000000 00000000 00000001 nt!KiFastCallEntry+0x12a
WARNING: Frame IP not in any known module. Following frames may be wrong.
02dae334 00000000 00000000 00000000 00000000 0x77be9a94


STACK_COMMAND: kb

FOLLOWUP_IP:
nt!HvpGetCellMapped+8c
82263b24 8b4f04 mov ecx,dword ptr [edi+4]

SYMBOL_STACK_INDEX: 0

SYMBOL_NAME: nt!HvpGetCellMapped+8c

FOLLOWUP_NAME: MachineOwner

MODULE_NAME: nt

IMAGE_NAME: ntkrnlmp.exe

DEBUG_FLR_IMAGE_TIMESTAMP: 48d1b7e8

FAILURE_BUCKET_ID: 0x8E_nt!HvpGetCellMapped+8c

BUCKET_ID: 0x8E_nt!HvpGetCellMapped+8c

Followup: MachineOwner
Click to expand...

I thought this was what you are asking for. I posted it a couple posts back?
Click to expand...
Click to expand...
 

My Computer

System One

You must log in or register to reply here.
Back
Top