Vista - IRQL_NOT_LESS_OR_EQUAL Memory Error

Hi,

Ive been having lots of memory issues with my computer, I'm running vista 64bit with 6 gigs of memory (complete specs are in my specs tab) and I keep getting various BSODs. The most recent one was while I was playing left 4 dead, IRQL_NOT_LESS_OR_EQUAL. They crop up fairly regularly while using the computer even when I'm not playing games or surfing the internet. Ive attached the dump:

Mini101109-02.zip

Anybody have any experience with this?

Thanks, Lucien

IRQL_NOT_LESS_OR_EQUAL usually means driver conflict. Use this program (before trying any solutions) to help you diagnose where the issue lies.

I would normally suggest:
1. Try a different RAM configuration (use only 2GB RAM instead of 6)
2. Reinstall drivers (start with graphics)

Don't forget to post back.

ntoskrnl problem. try running memtest86+

**EDIT **
http://www.memtest.org/

I download the Who Crashed program but whenever I run it, all it says is "File access denied". The program is fully up to date and I've contacted the company that makes the program, although I'm not sure how fast or even if I'll get a response given that its a free program.

Looking at your two other options I'm going to try to update all my drivers first, since I have limited experience with actually building or working with computer hardware and would prefer if we could solve this problem with a software solution rather then a hardware one. I'll try to update my drivers and let you know how that goes.

Hello Lucien,
When you run the Who Crashed program are you running it as an administrator, try that and post your results, good luck.
Take a read here too. it will give you some insight as to the problem you are faced with.

http://technet.microsoft.com/en-us/l.../cc957609.aspx

Lemur, thanks for the suggestion re: memtest86+, this might sound like a basic question but how do I run memtest86+? Ive downloaded a file and it wants me to make a boot cd from it and use that. Is there a thread or youtube video that can show me how to use this program?

Go here and download the pre-configured version, its a bit easier.


Download MemTest 3.8 - A small but very powerful utility for RAM testing - Softpedia

stoneys-nutz, that worked perfectly! I'm still getting the hang of vista thanks for the pointer. Ive posted the results for this problem below:

***

Too many crashes have been detected. Only the latest 40 crashes will be displayed.

On Sun 11/10/2009 12:40:18 AM your computer crashed
This was likely caused by the following module: ntoskrnl.exe
Bugcheck code: 0xA (0x493, 0xC, 0x0, 0xFFFFF800020C77AF)
Error: IRQL_NOT_LESS_OR_EQUAL
file path: C:\Windows\system32\ntoskrnl.exe
product: Microsoft® Windows® Operating System
company: Microsoft Corporation
description: NT Kernel & System
The crash took place in a standard Microsoft module. Likely the culprit is another driver on your system which cannot be identified.

***

The program ran through the last 40(!) crash dumps, which unfortunately contain not just the IRQL_NOT_LESS_OR_EQUAL but also DRIVER_PORTION_MUST_BE_NONPAGED, SYSTEM_SERVICE_EXCEPTION, NTFS_FILE_SYSTEM, IRQL_NOT_LESS_OR_EQUALDRIVER_IRQL_NOT_LESS_OR_EQUAL, CACHE_MANAGER, KMODE_EXCEPTION_NOT_HANDLED, MEMORY_MANAGEMENT and FLTMGR_FILE_SYSTEM.




Although 85% of those are either IRQL_NOT_LESS_OR_EQUAL,PAGE_FAULT_IN_NONPAGED_AREA or SYSTEM_SERVICE_EXCEPTION. I think this means I have a fairly significant problem... although you guys will probably have more of an idea then me. The last line for all of these was: The crash took place in a standard Microsoft module. Likely the culprit is another driver on your system which cannot be identified.

My next step will probably be running memtest86+ via the instructions stoneys-nutz posted. I'll let you know how it goes.

Thanks for the help so far guys, I didn't expect it this quickly

Lucien

Hi and welcome

I know you are having quite a time of it but BSOD's are difficult to diagnose. the one you uploaded was probably caused by something other than the ntkrnlmp listed but it is fairly ambiguous. Keep uploading the dumps as each new one gives us more info.

What service pack are you running?



Microsoft (R) Windows Debugger Version 6.11.0001.404 X86
Copyright (c) Microsoft Corporation. All rights reserved.


Loading Dump File [C:\Users\K\Desktop\Mini101109-02.dmp]
Mini Kernel Dump File: Only registers and stack trace are available

Symbol search path is: SRV*d:\symbols*Symbol information
Executable search path is:
Windows Server 2008/Windows Vista Kernel Version 6001 (Service Pack 1) MP (4 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS Personal
Built by: 6001.18295.amd64fre.vistasp1_gdr.090721-0152
Machine Name:
Kernel base = 0xfffff800`02056000 PsLoadedModuleList = 0xfffff800`0221bdb0
Debug session time: Sat Oct 10 20:37:50.593 2009 (GMT-4)
System Uptime: 0 days 1:39:54.637
Loading Kernel Symbols
...............................................................
................................................................
..........
Loading User Symbols
Loading unloaded module list
...
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck A, {493, c, 0, fffff800020c77af}

Probably caused by : ntkrnlmp.exe ( nt!KeReleaseSemaphore+4f )

Followup: MachineOwner
---------

1: kd> !analyze -v
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

IRQL_NOT_LESS_OR_EQUAL (a)
An attempt was made to access a pageable (or completely invalid) address at an
interrupt request level (IRQL) that is too high. This is usually
caused by drivers using improper addresses.
If a kernel debugger is available get the stack backtrace.
Arguments:
Arg1: 0000000000000493, memory referenced
Arg2: 000000000000000c, IRQL
Arg3: 0000000000000000, bitfield :
bit 0 : value 0 = read operation, 1 = write operation
bit 3 : value 0 = not an execute operation, 1 = execute operation (only on chips which support this level of status)
Arg4: fffff800020c77af, address which referenced memory

Debugging Details:
------------------


READ_ADDRESS: GetPointerFromAddress: unable to read from fffff8000227f080
0000000000000493

CURRENT_IRQL: c

FAULTING_IP:
nt!KeReleaseSemaphore+4f
fffff800`020c77af 8b7b04 mov edi,dword ptr [rbx+4]

CUSTOMER_CRASH_COUNT: 2

DEFAULT_BUCKET_ID: VISTA_DRIVER_FAULT

BUGCHECK_STR: 0xA

PROCESS_NAME: WinService.exe


STACK_COMMAND: kb

FOLLOWUP_IP:
nt!KeReleaseSemaphore+4f
fffff800`020c77af 8b7b04 mov edi,dword ptr [rbx+4]

SYMBOL_STACK_INDEX: 3

SYMBOL_NAME: nt!KeReleaseSemaphore+4f

FOLLOWUP_NAME: MachineOwner

MODULE_NAME: nt

IMAGE_NAME: ntkrnlmp.exe

DEBUG_FLR_IMAGE_TIMESTAMP: 4a65b149

FAILURE_BUCKET_ID: X64_0xA_nt!KeReleaseSemaphore+4f

BUCKET_ID: X64_0xA_nt!KeReleaseSemaphore+4f

Followup: MachineOwner
---------

Hi zigzag3143, I'm running 6.0.6001 Service Pack 1 Build 6001

In addition I just ran memtest86+ for about 4 minutes with 2 copies of the program open each set to 2047 meg. The 1st program ran to 5.5% and generated 80 errors and the second program ran to 0.5% and generated 295 errors. I stopped running it at that point as pressing enter on my keyboard was getting ridiculous. I'm unsure what to do next... any suggestions?