BSOD at (seemingly) random times, possibly related to openvpn.exe

RonesJones

New Member
Hi all,
Not really sure what to say about this, other than that I recall the messages "DRIVER_POWER_STATE_FAILURE" at one point, and variants of "DRIVER_IRQL_NOT_LESS_OR_EQUAL" (i.e. same message, without the "DRIVER"). Just as likely to happen at 4 a.m. when I'm asleep as it is when I'm in the middle of using Guitar Pro or playing a game on Steam.
Anyone have some more specific advice for me, based on the .dmp files? Any help would be greatly appreciated.
View attachment 28741
 

My Computer

System One

  • CPU
    Pentium E6600 @ 3.06GHz
    Memory
    4094MB RAM
    Graphics Card(s)
    AMD Radeon HD 7950
Code:
Microsoft (R) Windows Debugger Version 6.12.0002.633 AMD64
Copyright (c) Microsoft Corporation. All rights reserved.

Loading Dump File [C:\Users\Richard\AppData\Local\Temp\Temp1_RonesJones.zip\SF_30-11-2014\Mini112914-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available
Symbol search path is: SRV*c:\symbols*http://msdl.microsoft.com/download/symbols
Executable search path is: 
Windows Server 2008/Windows Vista Kernel Version 6002 (Service Pack 2) MP (2 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS Personal
Built by: 6002.18607.amd64fre.vistasp2_gdr.120402-0336
Machine Name:
Kernel base = 0xfffff800`02a58000 PsLoadedModuleList = 0xfffff800`02c1cdd0
Debug session time: Sat Nov 29 10:55:07.224 2014 (UTC - 5:00)
System Uptime: 2 days 16:19:39.471
Loading Kernel Symbols
...............................................................
................................................................
.......................
Loading User Symbols
Loading unloaded module list
.............
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************
Use !analyze -v to get detailed debugging information.
BugCheck D1, {0, 2, 1, fffffa6000e0f318}
[U][I][B]Unable to load image Rtlh64.sys[/B][/I][/U], Win32 error 0n2
*** WARNING: Unable to verify timestamp for Rtlh64.sys
*** ERROR: Module load completed but symbols could not be loaded for Rtlh64.sys
Probably caused by : pacer.sys ( pacer!PcFilterSendNetBufferListsComplete+f4 )
Followup: MachineOwner
---------
1: kd> !analyze -v
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************
DRIVER_IRQL_NOT_LESS_OR_EQUAL (d1)
An attempt was made to access a pageable (or completely invalid) address at an
interrupt request level (IRQL) that is too high.  This is usually
caused by drivers using improper addresses.
If kernel debugger is available get stack backtrace.
Arguments:
Arg1: 0000000000000000, memory referenced
Arg2: 0000000000000002, IRQL
Arg3: 0000000000000001, value 0 = read operation, 1 = write operation
Arg4: fffffa6000e0f318, address which referenced memory
Debugging Details:
------------------

WRITE_ADDRESS: GetPointerFromAddress: unable to read from fffff80002c7f080
 0000000000000000 
CURRENT_IRQL:  2
FAULTING_IP: 
ndis!NdisFSendNetBufferListsComplete+148
fffffa60`00e0f318 498917          mov     qword ptr [r15],rdx
CUSTOMER_CRASH_COUNT:  1
DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT
BUGCHECK_STR:  0xD1
PROCESS_NAME:  openvpn.exe
TRAP_FRAME:  fffffa6008ebfed0 -- (.trap 0xfffffa6008ebfed0)
NOTE: The trap frame does not contain all registers.
Some register values may be zeroed or incorrect.
rax=0000000000000000 rbx=0000000000000000 rcx=fffffa6000f6e0e0
rdx=fffffa80054fc6f0 rsi=0000000000000000 rdi=0000000000000000
rip=fffffa6000e0f318 rsp=fffffa6008ec0060 rbp=0000000000000000
 r8=0000000000000001  r9=fffffa8006a51620 r10=0000000000000147
r11=fffffa6008ec00c8 r12=0000000000000000 r13=0000000000000000
r14=0000000000000000 r15=0000000000000000
iopl=0         nv up ei pl zr na po nc
ndis!NdisFSendNetBufferListsComplete+0x148:
fffffa60`00e0f318 498917          mov     qword ptr [r15],rdx ds:2b40:00000000`00000000=????????????????
Resetting default scope
LAST_CONTROL_TRANSFER:  from fffff80002aaf86e to fffff80002aafad0
STACK_TEXT:  
fffffa60`08ebfd88 fffff800`02aaf86e : 00000000`0000000a 00000000`00000000 00000000`00000002 00000000`00000001 : nt!KeBugCheckEx
fffffa60`08ebfd90 fffff800`02aae74b : 00000000`00000001 00000000`00000000 00000000`00000000 fffffa80`06e2aaa0 : nt!KiBugCheckDispatch+0x6e
fffffa60`08ebfed0 fffffa60`00e0f318 : fffffa80`03ed0250 fffff800`02a165df fffffa80`06a69800 00000000`000000a5 : nt!KiPageFault+0x20b
fffffa60`08ec0060 fffffa60`03f498f0 : 00000000`00000000 fffffa80`05cf81a0 fffffa80`06e27010 fffffa80`03ed0250 : ndis!NdisFSendNetBufferListsComplete+0x148
fffffa60`08ec00d0 fffffa60`00fb124c : fffffa80`05cf81a0 fffffa60`00e65110 00000000`00000001 fffffa80`05cfec00 : pacer!PcFilterSendNetBufferListsComplete+0xf4
fffffa60`08ec0140 fffffa60`0236f9d7 : 00000000`00000000 fffffa80`06a51620 00000000`00000000 fffffa80`06a51620 : ndis!NdisMSendNetBufferListsComplete+0x7c
fffffa60`08ec0180 00000000`00000000 : fffffa80`06a51620 00000000`00000000 fffffa80`06a51620 fffffa80`06a69800 : Rtlh64+0x69d7

STACK_COMMAND:  kb
FOLLOWUP_IP: 
pacer!PcFilterSendNetBufferListsComplete+f4
fffffa60`03f498f0 4c8d5c2450      lea     r11,[rsp+50h]
SYMBOL_STACK_INDEX:  4
SYMBOL_NAME:  pacer!PcFilterSendNetBufferListsComplete+f4
FOLLOWUP_NAME:  MachineOwner
MODULE_NAME: pacer
IMAGE_NAME:  pacer.sys
DEBUG_FLR_IMAGE_TIMESTAMP:  49e02de0
FAILURE_BUCKET_ID:  X64_0xD1_pacer!PcFilterSendNetBufferListsComplete+f4
BUCKET_ID:  X64_0xD1_pacer!PcFilterSendNetBufferListsComplete+f4
Followup: MachineOwner
---------
Seems to be your realtek Ethernet driver. Go to the website and update. I have bolded and underlined the actually driver that is the cause.
I have, also, given you the entire dmp file for your information
 

My Computer

System One

  • Manufacturer/Model
    Dell XPS420
    Memory
    6 gig
    Graphics Card(s)
    ATI Radeon HD3650 256 MB
    Sound Card
    Intergrated 7.1 Channel Audio
    Monitor(s) Displays
    Dell SP2009W 20 inch Flat Panel w Webcam
    Hard Drives
    640 gb
    Cooling
    Fan
    Keyboard
    Dell USB
    Mouse
    Dell USB 4 button optical
    Other Info
    DSL provided by ATT
Oh wow, that was quick, thank you Richard! I've updated the driver - I'll be sure to check in if the problem persists or to say if it's all clear. Appreciate the help.
 

My Computer

System One

  • CPU
    Pentium E6600 @ 3.06GHz
    Memory
    4094MB RAM
    Graphics Card(s)
    AMD Radeon HD 7950
Let us know either way. You can be assured that I will give all the help that I can. Makes sense that it was the Ethernet driver since it happens at 4AM, when I assume you are not using the computer.
If you still have the problem, I have another suggestion.
 
Last edited:

My Computer

System One

  • Manufacturer/Model
    Dell XPS420
    Memory
    6 gig
    Graphics Card(s)
    ATI Radeon HD3650 256 MB
    Sound Card
    Intergrated 7.1 Channel Audio
    Monitor(s) Displays
    Dell SP2009W 20 inch Flat Panel w Webcam
    Hard Drives
    640 gb
    Cooling
    Fan
    Keyboard
    Dell USB
    Mouse
    Dell USB 4 button optical
    Other Info
    DSL provided by ATT
Back
Top