Hello D-A-L!

Ive been having one problem with Vista for a little bit now. Sometimes when i turn on my computer i get a blue screen of death. I really have no idea why i get it. I was overclocking my computer, but i really doubt that was the problem. I still put it back to stock for a little bit so i can see if that really is the case.

I got a log file from debugwiz, ill post it here! It just seems i cant get away from these BSODs...

I have also gotten another one before...but it seems my other dmp file was overwritten.
----------------------------
Opened log file 'c:\debuglog.txt'

Microsoft (R) Windows Debugger Version 6.8.0004.0 X86
Copyright (c) Microsoft Corporation. All rights reserved.


Loading Dump File [C:\Windows\Minidump\Mini011508-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available

Symbol search path is: SRV*c:\symbols*http://msdl.microsoft.com/download/symbols
Executable search path is: C:\Windows;C:\Windows\system32;C:\Windows\system32 \drivers
Windows Vista Kernel Version 6000 MP (2 procs) Free x86 compatible
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 6000.16575.x86fre.vista_gdr.071009-1548
Kernel base = 0x82000000 PsLoadedModuleList = 0x82111e10
Debug session time: Tue Jan 15 08:17:29.118 2008 (GMT-5)
System Uptime: 0 days 0:00:13.962
Loading Kernel Symbols
.................................................. .................................................. ...........
Loading User Symbols
Loading unloaded module list
.
************************************************** *****************************
* *
* Bugcheck Analysis *
* *
************************************************** *****************************

Use !analyze -v to get detailed debugging information.

BugCheck A, {dc34, 2, 0, 8205f11b}



Probably caused by : ntkrpamp.exe ( nt!DeleteNodeFromTree+2c )

Followup: MachineOwner
---------

1: kd> !analyze -v;r;kv;lmtn;.logclose;q
************************************************** *****************************
* *
* Bugcheck Analysis *
* *
************************************************** *****************************

IRQL_NOT_LESS_OR_EQUAL (a)
An attempt was made to access a pageable (or completely invalid) address at an
interrupt request level (IRQL) that is too high. This is usually
caused by drivers using improper addresses.
If a kernel debugger is available get the stack backtrace.
Arguments:
Arg1: 0000dc34, memory referenced
Arg2: 00000002, IRQL
Arg3: 00000000, bitfield :
bit 0 : value 0 = read operation, 1 = write operation
bit 3 : value 0 = not an execute operation, 1 = execute operation (only on chips which support this level of status)
Arg4: 8205f11b, address which referenced memory

Debugging Details:
------------------




READ_ADDRESS: GetPointerFromAddress: unable to read from 821315ac
Unable to read MiSystemVaType memory at 821117e0
0000dc34

CURRENT_IRQL: 2

FAULTING_IP:
nt!DeleteNodeFromTree+2c
8205f11b 8b4304 mov eax,dword ptr [ebx+4]

CUSTOMER_CRASH_COUNT: 1

DEFAULT_BUCKET_ID: VISTA_DRIVER_FAULT

BUGCHECK_STR: 0xA

PROCESS_NAME: System

TRAP_FRAME: 82c33840 -- (.trap 0xffffffff82c33840)
.trap 0xffffffff82c33840
ErrCode = 00000000
eax=87095b38 ebx=0000dc30 ecx=82c338e4 edx=82c338e8 esi=872ece00 edi=8501eae8
eip=8205f11b esp=82c338b4 ebp=82c338c0 iopl=0 nv up ei pl zr na pe nc
cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00210246
nt!DeleteNodeFromTree+0x2c:
8205f11b 8b4304 mov eax,dword ptr [ebx+4] ds:0023:0000dc34=????????
.trap
Resetting default scope

LAST_CONTROL_TRANSFER: from 8205f11b to 8208fd84

STACK_TEXT:
82c33840 8205f11b badb0d00 82c338e8 82c33884 nt!KiTrap0E+0x2ac
82c338c0 8205f3f0 8501eae8 872ece00 82104320 nt!DeleteNodeFromTree+0x2c
82c338d8 8206d989 8501eae8 872ece00 8c401000 nt!RtlDeleteElementGenericTableAvl+0x3b
82c338f0 8206d766 8503a808 872b46a0 872b46a0 nt!VfAvlDeleteTreeNode+0x2b
82c33934 8225fa99 8c401000 8503a808 872b46a0 nt!VfTargetDriversRemove+0xdb
82c3394c 821dcb6e 872b46a0 00000000 87272728 nt!VerifierDriverUnloading+0x52
82c3398c 821951be 872b46a0 87272700 00000000 nt!MmUnloadSystemImage+0x298
82c339a4 821ed505 87272728 823a7078 87272710 nt!IopDeleteDriver+0x38
82c339c0 820478c8 87272728 00000000 87272728 nt!ObpRemoveObjectRoutine+0x100
82c339e8 821872ed 00000000 87187ea0 00000000 nt!ObfDereferenceObject+0xa1
82c33bc4 82348170 00000001 00000000 82c33c10 nt!IopLoadDriver+0x929
82c33c28 82344b8e 8080db44 00000000 00000000 nt!IopInitializeSystemDrivers+0x1af
82c33c84 8233ba34 80806c60 8503ab30 8503a808 nt!IoInitSystem+0x627
82c33d74 82133018 82c33dc0 822254e0 80806c60 nt!Phase1InitializationDiscard+0xba7
82c33d7c 822254e0 80806c60 82c38680 00000000 nt!Phase1Initialization+0xd
82c33dc0 8209159e 8213300b 80806c60 00000000 nt!PspSystemThreadStartup+0x9d
00000000 00000000 00000000 00000000 00000000 nt!KiThreadStartup+0x16


STACK_COMMAND: kb

FOLLOWUP_IP:
nt!DeleteNodeFromTree+2c
8205f11b 8b4304 mov eax,dword ptr [ebx+4]

SYMBOL_STACK_INDEX: 1

SYMBOL_NAME: nt!DeleteNodeFromTree+2c

FOLLOWUP_NAME: MachineOwner

MODULE_NAME: nt

IMAGE_NAME: ntkrpamp.exe

DEBUG_FLR_IMAGE_TIMESTAMP: 470c2f52

FAILURE_BUCKET_ID: 0xA_nt!DeleteNodeFromTree+2c

BUCKET_ID: 0xA_nt!DeleteNodeFromTree+2c

Followup: MachineOwner
---------

eax=82c4313c ebx=00000002 ecx=00000001 edx=8212943c esi=82c43120 edi=0000dc34
eip=8208fd84 esp=82c33828 ebp=82c33840 iopl=0 nv up ei ng nz na pe nc
cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00200286
nt!KiTrap0E+0x2ac:
8208fd84 833dc48d128200 cmp dword ptr [nt!KiFreezeFlag (82128dc4)],0 ds:0023:82128dc4=????????
ChildEBP RetAddr Args to Child
82c33840 8205f11b badb0d00 82c338e8 82c33884 nt!KiTrap0E+0x2ac (FPO: [0,0] TrapFrame @ 82c33840)
82c338c0 8205f3f0 8501eae8 872ece00 82104320 nt!DeleteNodeFromTree+0x2c
82c338d8 8206d989 8501eae8 872ece00 8c401000 nt!RtlDeleteElementGenericTableAvl+0x3b
82c338f0 8206d766 8503a808 872b46a0 872b46a0 nt!VfAvlDeleteTreeNode+0x2b
82c33934 8225fa99 8c401000 8503a808 872b46a0 nt!VfTargetDriversRemove+0xdb
82c3394c 821dcb6e 872b46a0 00000000 87272728 nt!VerifierDriverUnloading+0x52
82c3398c 821951be 872b46a0 87272700 00000000 nt!MmUnloadSystemImage+0x298
82c339a4 821ed505 87272728 823a7078 87272710 nt!IopDeleteDriver+0x38
82c339c0 820478c8 87272728 00000000 87272728 nt!ObpRemoveObjectRoutine+0x100
82c339e8 821872ed 00000000 87187ea0 00000000 nt!ObfDereferenceObject+0xa1
82c33bc4 82348170 00000001 00000000 82c33c10 nt!IopLoadDriver+0x929
82c33c28 82344b8e 8080db44 00000000 00000000 nt!IopInitializeSystemDrivers+0x1af
82c33c84 8233ba34 80806c60 8503ab30 8503a808 nt!IoInitSystem+0x627
82c33d74 82133018 82c33dc0 822254e0 80806c60 nt!Phase1InitializationDiscard+0xba7
82c33d7c 822254e0 80806c60 82c38680 00000000 nt!Phase1Initialization+0xd
82c33dc0 8209159e 8213300b 80806c60 00000000 nt!PspSystemThreadStartup+0x9d
00000000 00000000 00000000 00000000 00000000 nt!KiThreadStartup+0x16
start end module name
80402000 80403480 speedfan speedfan.sys Sun Sep 24 09:28:47 2006 (4516880F)
80404000 8040d000 WMILIB WMILIB.SYS Thu Nov 02 04:54:53 2006 (4549B25D)
8040d000 8041a000 WDFLDR WDFLDR.SYS Thu Nov 02 04:54:05 2006 (4549B22D)
8041a000 80455000 CLFS CLFS.SYS Thu Nov 02 04:30:52 2006 (4549ACBC)
80455000 8045d000 BOOTVID BOOTVID.dll Thu Nov 02 05:39:29 2006 (4549BCD1)
8045d000 80466000 PSHED PSHED.dll Thu Nov 02 05:42:51 2006 (4549BD9B)
80466000 804c6000 mcupdate_GenuineIntel mcupdate_GenuineIntel.dll Mon Apr 23 23:40:05 2007 (462D7C15)
804c6000 804ce000 kdcom kdcom.dll Thu Nov 02 05:42:20 2006 (4549BD7C)
804ce000 804ce680 giveio giveio.sys Wed Apr 03 22:33:25 1996 (316334F5)
80600000 8060e000 PCIIDEX PCIIDEX.SYS Tue Oct 23 22:02:39 2007 (471EA7BF)
8060e000 80615000 pciide pciide.sys Tue Oct 23 22:02:40 2007 (471EA7C0)
80615000 80625000 mountmgr mountmgr.sys Thu Nov 02 04:51:06 2006 (4549B17A)
80625000 80634000 volmgr volmgr.sys Thu Nov 02 04:51:44 2006 (4549B1A0)
80634000 80659000 pci pci.sys Thu Nov 02 04:35:13 2006 (4549ADC1)
80659000 80661000 msisadrv msisadrv.sys Thu Nov 02 04:35:08 2006 (4549ADBC)
80661000 806a4000 acpi acpi.sys Thu Aug 30 20:57:46 2007 (46D7678A)
806a4000 8071f000 Wdf01000 Wdf01000.sys Thu Nov 02 04:54:18 2006 (4549B23A)
8071f000 80800000 CI CI.dll Thu Nov 02 05:42:45 2006 (4549BD95)
82000000 823a1000 nt ntkrpamp.exe Tue Oct 09 21:48:02 2007 (470C2F52)
823a1000 823d5000 hal halmacpi.dll Thu Nov 02 04:30:18 2006 (4549AC9A)
82802000 82811000 partmgr partmgr.sys Thu Nov 02 04:51:47 2006 (4549B1A3)
82811000 82819000 spldr spldr.sys Wed Oct 25 18:40:44 2006 (453FE7EC)
82819000 8291d000 ndis ndis.sys Thu Nov 02 04:57:33 2006 (4549B2FD)
8291d000 8292d000 fileinfo fileinfo.sys Thu Nov 02 04:36:47 2006 (4549AE1F)
8292d000 8295e000 fltmgr fltmgr.sys Thu Nov 02 04:30:58 2006 (4549ACC2)
8295e000 82984000 SCSIPORT SCSIPORT.SYS Thu Nov 02 04:51:38 2006 (4549B19A)
82984000 8298fc80 jraid jraid.sys Wed Jun 13 11:47:13 2007 (46701181)
82990000 829ae000 ataport ataport.SYS Tue Oct 23 22:02:40 2007 (471EA7C0)
829ae000 829b6000 atapi atapi.sys Tue Oct 23 22:02:39 2007 (471EA7BF)
829b6000 82a00000 volmgrx volmgrx.sys Thu Nov 02 04:51:54 2006 (4549B1AA)
82a01000 82a0a000 crcdisk crcdisk.sys Thu Nov 02 04:52:27 2006 (4549B1CB)
82a0a000 82a1b000 disk disk.sys Thu Nov 02 04:51:40 2006 (4549B19C)
82a1b000 82a2a000 mup mup.sys Thu Nov 02 04:31:04 2006 (4549ACC8)
82a2a000 82a94000 ksecdd ksecdd.sys Thu Nov 02 04:43:45 2006 (4549AFC1)
82a94000 82b9c000 Ntfs Ntfs.sys Thu Oct 25 21:40:39 2007 (47214597)
82b9c000 82bd5000 NETIO NETIO.SYS Thu Sep 27 22:46:49 2007 (46FC6B19)
82bd5000 82c00000 msrpc msrpc.sys Thu Nov 02 04:50:16 2006 (4549B148)
82d84000 82da5000 CLASSPNP CLASSPNP.SYS Thu Nov 02 04:51:34 2006 (4549B196)
82da5000 82dca000 ecache ecache.sys Thu Nov 02 04:52:42 2006 (4549B1DA)
82dca000 82e00000 volsnap volsnap.sys Thu Oct 25 22:04:17 2007 (47214B21)
82e0a000 82e12000 rdpencdd rdpencdd.sys Thu Nov 02 05:02:01 2006 (4549B409)
82f5c000 82f6c000 NDProxy NDProxy.SYS Tue Jul 03 21:28:13 2007 (468AF7AD)
82fd0000 82fdf000 raspppoe raspppoe.sys Thu Nov 02 04:58:12 2006 (4549B324)
83e0b000 83e14000 Fs_Rec Fs_Rec.SYS Mon Apr 16 21:26:39 2007 (4624224F)
83e1d000 83e26000 rasacd rasacd.sys Thu Nov 02 04:58:13 2006 (4549B325)
83e26000 83e2f000 tunmp tunmp.sys Wed Jun 06 2253 2007 (466773F5)
83e5c000 83e65000 ws2ifsl ws2ifsl.sys Thu Nov 02 04:58:26 2006 (4549B332)
83ee4000 83ef1000 crashdmp crashdmp.sys Thu Nov 02 04:51:36 2006 (4549B198)
83f51000 83f59000 dump_atapi dump_atapi.sys Tue Oct 23 22:02:39 2007 (471EA7BF)
83f69000 83f71000 RDPCDD RDPCDD.sys Thu Nov 02 05:02:01 2006 (4549B409)
83f92000 83f93de0 nod32drv nod32drv.sys Fri May 11 02:23:05 2007 (46440BC9)
83f96000 83f97380 swenum swenum.sys Thu Nov 02 04:51:15 2006 (4549B183)
83fa0000 83fa1700 USBD USBD.SYS Thu Aug 30 21:19:54 2007 (46D76CBA)
8b208000 8b211880 AN983 AN983.sys Wed Jan 12 20:27:59 2005 (41E5CE9F)
8b212000 8b224000 HDAudBus HDAudBus.sys Sat Mar 24 14:54:34 2007 (460573EA)
8b224000 8b232000 usbehci usbehci.sys Thu Aug 30 21:19:59 2007 (46D76CBF)
8b232000 8b26f000 USBPORT USBPORT.SYS Thu Aug 30 21:20:03 2007 (46D76CC3)
8b26f000 8b27a000 usbuhci usbuhci.sys Thu Aug 30 21:19:58 2007 (46D76CBE)
8b27a000 8b287000 watchdog watchdog.sys Thu Nov 02 04:37:44 2006 (4549AE58)
8b287000 8b295000 intelppm intelppm.sys Thu Nov 02 04:30:18 2006 (4549AC9A)
8b295000 8b2a0000 tunnel tunnel.sys Wed Jun 06 22:57:03 2007 (466773FF)
8b2c3000 8b2cd000 serenum serenum.sys Thu Nov 02 04:51:25 2006 (4549B18D)
8b2cd000 8b2d8000 fdc fdc.sys Thu Nov 02 04:51:33 2006 (4549B195)
8b2d8000 8b2f0000 cdrom cdrom.sys Thu Nov 02 04:51:44 2006 (4549B1A0)
8b321000 8b328000 Null Null.SYS Thu Nov 02 04:51:05 2006 (4549B179)
8b328000 8b32f000 Beep Beep.SYS Thu Nov 02 04:51:03 2006 (4549B177)
8b32f000 8b335380 HIDPARSE HIDPARSE.SYS Thu Nov 02 04:55:00 2006 (4549B264)
8b3c5000 8b3d0000 dump_dumpata dump_dumpata.sys Thu Nov 02 04:51:34 2006 (4549B196)
8b607000 8b624000 Rtlh86 Rtlh86.sys Wed Dec 05 23:50:50 2007 (47577FAA)
8b624000 8bdff660 nvlddmkm nvlddmkm.sys Tue Dec 11 21:03:03 2007 (475F4157)
8be12000 8be1c000 mssmbios mssmbios.sys Thu Nov 02 04:35:13 2006 (4549ADC1)
8be1c000 8be2b000 termdd termdd.sys Thu Nov 02 05:02:00 2006 (4549B408)
8be2b000 8be38000 umbus umbus.sys Thu Nov 02 04:55:24 2006 (4549B27C)
8be38000 8be43000 mouclass mouclass.sys Thu Nov 02 04:51:09 2006 (4549B17D)
8be43000 8be56000 raspptp raspptp.sys Thu Nov 02 04:58:14 2006 (4549B326)
8be56000 8be79000 ndiswan ndiswan.sys Thu Nov 02 04:58:13 2006 (4549B325)
8be79000 8be84000 ndistapi ndistapi.sys Tue Jul 03 21:28:09 2007 (468AF7A9)
8be84000 8be9b000 rasl2tp rasl2tp.sys Thu Nov 02 04:58:13 2006 (4549B325)
8be9b000 8bea6000 TDI TDI.SYS Thu Nov 02 04:58:46 2006 (4549B346)
8bea6000 8bee6000 storport storport.sys Thu Nov 02 04:51:45 2006 (4549B1A1)
8bee6000 8bf11000 msiscsi msiscsi.sys Thu Nov 02 04:52:40 2006 (4549B1D8)
8bf11000 8bf1c000 kbdclass kbdclass.sys Thu Nov 02 04:51:09 2006 (4549B17D)
8bf1c000 8bf2f000 i8042prt i8042prt.sys Thu Nov 02 04:51:12 2006 (4549B180)
8bf2f000 8bf47000 parport parport.sys Thu Nov 02 04:51:29 2006 (4549B191)
8bf47000 8bf61000 serial serial.sys Thu Nov 02 04:51:29 2006 (4549B191)
8bf61000 8c000000 dxgkrnl dxgkrnl.sys Thu Jul 26 21:07:53 2007 (46A94569)
8c002000 8c014000 USBSTOR USBSTOR.SYS Fri Apr 27 22:39:34 2007 (4632B3E6)
8c014000 8c041000 portcls portcls.sys Thu Nov 02 04:55:02 2006 (4549B266)
8c041000 8c04b000 flpydisk flpydisk.sys Thu Nov 02 04:51:32 2006 (4549B194)
8c04b000 8c07f000 usbhub usbhub.sys Thu Aug 30 21:20:18 2007 (46D76CD2)
8c14f000 8c179000 ks ks.sys Thu Nov 02 04:51:18 2006 (4549B186)
8c179000 8c200000 rdpdr rdpdr.sys Thu Nov 02 05:02:58 2006 (4549B442)
8c204000 8c20f000 Msfs Msfs.SYS Thu Nov 02 04:30:56 2006 (4549ACC0)
8c20f000 8c21b000 vga vga.sys Thu Nov 02 04:53:56 2006 (4549B224)
8c21b000 8c240000 drmk drmk.sys Thu Nov 02 05:20:49 2006 (4549B871)
8c240000 8c3ffe80 RTKVHDA RTKVHDA.sys Wed Jul 18 07:31:17 2007 (469DFA05)
8c401000 8c40d000 ATITool ATITool.sys Fri Nov 10 08:08:51 2006 (455479E3)
8c40d000 8c454000 afd afd.sys Thu Nov 02 04:58:41 2006 (4549B341)
8c454000 8c468000 smb smb.sys Thu Nov 02 04:57:10 2006 (4549B2E6)
8c468000 8c47d000 tdx tdx.sys Thu Nov 02 04:57:34 2006 (4549B2FE)
8c47d000 8c496000 fwpkclnt fwpkclnt.sys Thu Nov 02 04:57:26 2006 (4549B2F6)
8c496000 8c567000 tcpip tcpip.sys Thu Sep 27 22:47:19 2007 (46FC6B37)
8c567000 8c571000 nsiproxy nsiproxy.sys Thu Nov 02 04:57:30 2006 (4549B2FA)
8c571000 8c57f000 Npfs Npfs.SYS Thu Nov 02 04:30:57 2006 (4549ACC1)
8c59f000 8c5c0000 VIDEOPRT VIDEOPRT.SYS Thu Nov 02 04:54:07 2006 (4549B22F)
8c6f2000 8c709000 dfsc dfsc.sys Thu Nov 02 04:31:04 2006 (4549ACC8)
8c709000 8c75c000 csc csc.sys Mon Jun 18 20:48:27 2007 (467727DB)
8c75c000 8c797000 rdbss rdbss.sys Thu Nov 02 04:31:24 2006 (4549ACDC)
8c797000 8c7aa000 wanarp wanarp.sys Tue Jul 03 21:28:16 2007 (468AF7B0)
8c7aa000 8c7b8000 netbios netbios.sys Thu Nov 02 04:57:26 2006 (4549B2F6)
8c7b8000 8c7ce000 pacer pacer.sys Tue Jul 03 21:27:33 2007 (468AF785)
8c7ce000 8c800000 netbt netbt.sys Thu Nov 02 04:57:18 2006 (4549B2EE)

Unloaded modules:
83e14000 83e1d000 kbdhid.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
Closing open log file c:\debuglog.txt


Thanks!!

Run MemTest

I will run it tomorrow while im at school...for probably 6 hours lol.

Ill start it tomorrow morning and post back later in the day.

Thanks jephree! Ive actually ran this before..only for i think 3 passes.

After many passes there were no errors. I dont remember if there was 17 or 32 passes :/ .....but there was a lot. And no errors.

Ok run Check Disk if it has not been run automatically:

start > run > cmd

chkdsk /r

You will be told the volume is in use do you want to run on boot?

Y

reboot.


Also post more dumps if you get them.

Ran it. Didnt pick up any errors.

Do you think because i was overclocking my computer and had on C1E and EIST(I think it's called that) it made it unstable at certain points? I currently have it turned off. Maybe ill turn up the OC again, this time without C1E and EIST enabled.

Unless you have any other ideas?

Overclocking depends so much on the individual BIOS and motherboard.

BSODs are a definite symptom of instability. The one you posted was pointing towards memory in some form.

Good to hear that MemTest ran OK. Although not perfect MemTest will usually show bad RAM right off the bat.

If you system runs good at default or a lesser overclock then BSODs are a good indication that you found a limit and you need to back down.

If the BSODs continue at lower levels and or at Default settings then there might be a more intrinsic hardware issue.

Alright thanks Jephree!

I did a little test...and im about 95% sure it was the OC. Man that sucks...i got it back to stock and im running some orthos on it until i get back from school.

Well i got another one. I really wouldnt think the OC i had would be a problem...this is very annoying. It's only on start up when they happen.

Opened log file 'c:\debuglog.txt'

Microsoft (R) Windows Debugger Version 6.8.0004.0 X86
Copyright (c) Microsoft Corporation. All rights reserved.


Loading Dump File [C:\Windows\Minidump\Mini012908-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available

Symbol search path is: SRV*c:\symbols*http://msdl.microsoft.com/download/symbols
Executable search path is: C:\Windows;C:\Windows\system32;C:\Windows\system32 \drivers
Windows Vista Kernel Version 6000 MP (2 procs) Free x86 compatible
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 6000.16575.x86fre.vista_gdr.071009-1548
Kernel base = 0xe2000000 PsLoadedModuleList = 0xe2111e10
Debug session time: Tue Jan 29 01:25:19.479 2008 (GMT-5)
System Uptime: 0 days 0:00:14.197
Loading Kernel Symbols
.................................................. .................................................. ................
Loading User Symbols
************************************************** *****************************
* *
* Bugcheck Analysis *
* *
************************************************** *****************************

Use !analyze -v to get detailed debugging information.

BugCheck A, {1934, 2, 0, e205f11b}



Probably caused by : ntkrpamp.exe ( nt!DeleteNodeFromTree+2c )

Followup: MachineOwner
---------

1: kd> !analyze -v;r;kv;lmtn;.logclose;q
************************************************** *****************************
* *
* Bugcheck Analysis *
* *
************************************************** *****************************

IRQL_NOT_LESS_OR_EQUAL (a)
An attempt was made to access a pageable (or completely invalid) address at an
interrupt request level (IRQL) that is too high. This is usually
caused by drivers using improper addresses.
If a kernel debugger is available get the stack backtrace.
Arguments:
Arg1: 00001934, memory referenced
Arg2: 00000002, IRQL
Arg3: 00000000, bitfield :
bit 0 : value 0 = read operation, 1 = write operation
bit 3 : value 0 = not an execute operation, 1 = execute operation (only on chips which support this level of status)
Arg4: e205f11b, address which referenced memory

Debugging Details:
------------------




READ_ADDRESS: GetPointerFromAddress: unable to read from e21315ac
Unable to read MiSystemVaType memory at e21117e0
00001934

CURRENT_IRQL: 2

FAULTING_IP:
nt!DeleteNodeFromTree+2c
e205f11b 8b4304 mov eax,dword ptr [ebx+4]

CUSTOMER_CRASH_COUNT: 1

DEFAULT_BUCKET_ID: INTEL_CPU_MICROCODE_ZERO

BUGCHECK_STR: 0xA

PROCESS_NAME: System

TRAP_FRAME: ba603840 -- (.trap 0xffffffffba603840)
.trap 0xffffffffba603840
ErrCode = 00000000
eax=b7cb2fc8 ebx=00001930 ecx=ba6038e4 edx=ba6038e8 esi=b84af4d8 edi=b6218aa0
eip=e205f11b esp=ba6038b4 ebp=ba6038c0 iopl=0 nv up ei pl zr na pe nc
cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00210246
nt!DeleteNodeFromTree+0x2c:
e205f11b 8b4304 mov eax,dword ptr [ebx+4] ds:0023:00001934=????????
.trap
Resetting default scope

LAST_CONTROL_TRANSFER: from e205f11b to e208fd84

STACK_TEXT:
ba603840 e205f11b badb0d00 ba6038e8 ba603884 nt!KiTrap0E+0x2ac
ba6038c0 e205f3f0 b6218aa0 b84af4d8 e2104320 nt!DeleteNodeFromTree+0x2c
ba6038d8 e206d989 b6218aa0 b84af4d8 be000000 nt!RtlDeleteElementGenericTableAvl+0x3b
ba6038f0 e206d766 b62347c0 b84af518 b84af518 nt!VfAvlDeleteTreeNode+0x2b
ba603934 e225fa99 be000000 b62347c0 b84af518 nt!VfTargetDriversRemove+0xdb
ba60394c e21dcb6e b84af518 00000000 b845baa0 nt!VerifierDriverUnloading+0x52
ba60398c e21951be b84af518 b845ba78 00000000 nt!MmUnloadSystemImage+0x298
ba6039a4 e21ed505 b845baa0 e23a7078 b845ba88 nt!IopDeleteDriver+0x38
ba6039c0 e20478c8 b845baa0 00000000 b845baa0 nt!ObpRemoveObjectRoutine+0x100
ba6039e8 e21872ed 00000000 b83bf740 00000000 nt!ObfDereferenceObject+0xa1
ba603bc4 e2348170 00000001 00000000 ba603c10 nt!IopLoadDriver+0x929
ba603c28 e2344b8e e080ee50 00000000 00000000 nt!IopInitializeSystemDrivers+0x1af
ba603c84 e233ba34 e0806c60 b6234b30 b62347c0 nt!IoInitSystem+0x627
ba603d74 e2133018 ba603dc0 e22254e0 e0806c60 nt!Phase1InitializationDiscard+0xba7
ba603d7c e22254e0 e0806c60 ba608680 00000000 nt!Phase1Initialization+0xd
ba603dc0 e209159e e213300b e0806c60 00000000 nt!PspSystemThreadStartup+0x9d
00000000 00000000 00000000 00000000 00000000 nt!KiThreadStartup+0x16


STACK_COMMAND: kb

FOLLOWUP_IP:
nt!DeleteNodeFromTree+2c
e205f11b 8b4304 mov eax,dword ptr [ebx+4]

SYMBOL_STACK_INDEX: 1

SYMBOL_NAME: nt!DeleteNodeFromTree+2c

FOLLOWUP_NAME: MachineOwner

MODULE_NAME: nt

IMAGE_NAME: ntkrpamp.exe

DEBUG_FLR_IMAGE_TIMESTAMP: 470c2f52

FAILURE_BUCKET_ID: 0xA_nt!DeleteNodeFromTree+2c

BUCKET_ID: 0xA_nt!DeleteNodeFromTree+2c

Followup: MachineOwner
---------

eax=baa4613c ebx=00000002 ecx=00000001 edx=e212943c esi=baa46120 edi=00001934
eip=e208fd84 esp=ba603828 ebp=ba603840 iopl=0 nv up ei ng nz na pe nc
cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00200286
nt!KiTrap0E+0x2ac:
e208fd84 833dc48d12e200 cmp dword ptr [nt!KiFreezeFlag (e2128dc4)],0 ds:0023:e2128dc4=????????
ChildEBP RetAddr Args to Child
ba603840 e205f11b badb0d00 ba6038e8 ba603884 nt!KiTrap0E+0x2ac (FPO: [0,0] TrapFrame @ ba603840)
ba6038c0 e205f3f0 b6218aa0 b84af4d8 e2104320 nt!DeleteNodeFromTree+0x2c
ba6038d8 e206d989 b6218aa0 b84af4d8 be000000 nt!RtlDeleteElementGenericTableAvl+0x3b
ba6038f0 e206d766 b62347c0 b84af518 b84af518 nt!VfAvlDeleteTreeNode+0x2b
ba603934 e225fa99 be000000 b62347c0 b84af518 nt!VfTargetDriversRemove+0xdb
ba60394c e21dcb6e b84af518 00000000 b845baa0 nt!VerifierDriverUnloading+0x52
ba60398c e21951be b84af518 b845ba78 00000000 nt!MmUnloadSystemImage+0x298
ba6039a4 e21ed505 b845baa0 e23a7078 b845ba88 nt!IopDeleteDriver+0x38
ba6039c0 e20478c8 b845baa0 00000000 b845baa0 nt!ObpRemoveObjectRoutine+0x100
ba6039e8 e21872ed 00000000 b83bf740 00000000 nt!ObfDereferenceObject+0xa1
ba603bc4 e2348170 00000001 00000000 ba603c10 nt!IopLoadDriver+0x929
ba603c28 e2344b8e e080ee50 00000000 00000000 nt!IopInitializeSystemDrivers+0x1af
ba603c84 e233ba34 e0806c60 b6234b30 b62347c0 nt!IoInitSystem+0x627
ba603d74 e2133018 ba603dc0 e22254e0 e0806c60 nt!Phase1InitializationDiscard+0xba7
ba603d7c e22254e0 e0806c60 ba608680 00000000 nt!Phase1Initialization+0xd
ba603dc0 e209159e e213300b e0806c60 00000000 nt!PspSystemThreadStartup+0x9d
00000000 00000000 00000000 00000000 00000000 nt!KiThreadStartup+0x16
start end module name
ba202000 ba203480 speedfan speedfan.sys Sun Sep 24 09:28:47 2006 (4516880F)
ba204000 ba20d000 WMILIB WMILIB.SYS Thu Nov 02 04:54:53 2006 (4549B25D)
ba20d000 ba21a000 WDFLDR WDFLDR.SYS Wed Dec 05 2119 2007 (47575C9F)
ba21a000 ba255000 CLFS CLFS.SYS Wed Dec 05 20:55:42 2007 (4757569E)
ba255000 ba25d000 BOOTVID BOOTVID.dll Thu Nov 02 05:39:29 2006 (4549BCD1)
ba25d000 ba266000 PSHED PSHED.dll Thu Nov 02 05:42:51 2006 (4549BD9B)
ba266000 ba2c6000 mcupdate_GenuineIntel mcupdate_GenuineIntel.dll Mon Apr 23 23:40:05 2007 (462D7C15)
ba2c6000 ba2ce000 kdcom kdcom.dll Thu Nov 02 05:42:20 2006 (4549BD7C)
ba2ce000 ba2ce680 giveio giveio.sys Wed Apr 03 22:33:25 1996 (316334F5)
ba400000 ba40e000 PCIIDEX PCIIDEX.SYS Tue Oct 23 22:02:39 2007 (471EA7BF)
ba40e000 ba415000 pciide pciide.sys Tue Oct 23 22:02:40 2007 (471EA7C0)
ba415000 ba425000 mountmgr mountmgr.sys Thu Nov 02 04:51:06 2006 (4549B17A)
ba425000 ba434000 volmgr volmgr.sys Thu Nov 02 04:51:44 2006 (4549B1A0)
ba434000 ba459000 pci pci.sys Thu Nov 02 04:35:13 2006 (4549ADC1)
ba459000 ba461000 msisadrv msisadrv.sys Thu Nov 02 04:35:08 2006 (4549ADBC)
ba461000 ba4a4000 acpi acpi.sys Thu Aug 30 20:57:46 2007 (46D7678A)
ba4a4000 ba51f000 Wdf01000 Wdf01000.sys Wed Dec 05 2128 2007 (47575CA8)
ba51f000 ba600000 CI CI.dll Thu Nov 02 05:42:45 2006 (4549BD95)
ba604000 ba60d000 crcdisk crcdisk.sys Thu Nov 02 04:52:27 2006 (4549B1CB)
ba60d000 ba615000 spldr spldr.sys Wed Oct 25 18:40:44 2006 (453FE7EC)
ba615000 ba719000 ndis ndis.sys Thu Nov 02 04:57:33 2006 (4549B2FD)
ba719000 ba729000 fileinfo fileinfo.sys Thu Nov 02 04:36:47 2006 (4549AE1F)
ba729000 ba75a000 fltmgr fltmgr.sys Thu Nov 02 04:30:58 2006 (4549ACC2)
ba75a000 ba780000 SCSIPORT SCSIPORT.SYS Thu Nov 02 04:51:38 2006 (4549B19A)
ba780000 ba78fe00 jraid jraid.sys Sat Sep 29 01:30:52 2007 (46FDE30C)
ba790000 ba7ae000 ataport ataport.SYS Tue Oct 23 22:02:40 2007 (471EA7C0)
ba7ae000 ba7b6000 atapi atapi.sys Tue Oct 23 22:02:39 2007 (471EA7BF)
ba7b6000 ba800000 volmgrx volmgrx.sys Thu Nov 02 04:51:54 2006 (4549B1AA)
ba80c000 ba81b000 mup mup.sys Thu Nov 02 04:31:04 2006 (4549ACC8)
ba81b000 ba82a000 partmgr partmgr.sys Thu Nov 02 04:51:47 2006 (4549B1A3)
ba82a000 ba894000 ksecdd ksecdd.sys Thu Nov 02 04:43:45 2006 (4549AFC1)
ba894000 ba99c000 Ntfs Ntfs.sys Thu Oct 25 21:40:39 2007 (47214597)
ba99c000 ba9d5000 NETIO NETIO.SYS Thu Sep 27 22:46:49 2007 (46FC6B19)
ba9d5000 baa00000 msrpc msrpc.sys Thu Nov 02 04:50:16 2006 (4549B148)
bab73000 bab94000 CLASSPNP CLASSPNP.SYS Thu Nov 02 04:51:34 2006 (4549B196)
bab94000 baba5000 disk disk.sys Thu Nov 02 04:51:40 2006 (4549B19C)
baba5000 babca000 ecache ecache.sys Thu Nov 02 04:52:42 2006 (4549B1DA)
babca000 bac00000 volsnap volsnap.sys Thu Oct 25 22:04:17 2007 (47214B21)
bac90000 baca0000 HIDCLASS HIDCLASS.SYS Thu Nov 02 04:55:00 2006 (4549B264)
bad50000 bad60000 NDProxy NDProxy.SYS Tue Jul 03 21:28:13 2007 (468AF7AD)
badd4000 bade3000 raspppoe raspppoe.sys Thu Nov 02 04:58:12 2006 (4549B324)
bade3000 badec000 hidusb hidusb.sys Thu Nov 02 04:55:01 2006 (4549B265)
bb487000 bb48d380 HIDPARSE HIDPARSE.SYS Thu Nov 02 04:55:00 2006 (4549B264)
bb48e000 bb495000 Null Null.SYS Thu Nov 02 04:51:05 2006 (4549B179)
bb495000 bb49c000 Beep Beep.SYS Thu Nov 02 04:51:03 2006 (4549B177)
bb4f2000 bb4fa000 NuidFltr NuidFltr.sys Wed Aug 15 04:14:02 2007 (46C2B5CA)
bb4fa000 bb502000 mouhid mouhid.sys Wed Dec 05 21:18:25 2007 (47575BF1)
bb51a000 bb522000 RDPCDD RDPCDD.sys Thu Nov 02 05:02:01 2006 (4549B409)
bb522000 bb52a000 rdpencdd rdpencdd.sys Thu Nov 02 05:02:01 2006 (4549B409)
bb562000 bb56a000 dump_atapi dump_atapi.sys Tue Oct 23 22:02:39 2007 (471EA7BF)
bb57f000 bb580de0 nod32drv nod32drv.sys Fri May 11 02:23:05 2007 (46440BC9)
bb585000 bb586380 swenum swenum.sys Thu Nov 02 04:51:15 2006 (4549B183)
bb593000 bb594700 USBD USBD.SYS Thu Aug 30 21:19:54 2007 (46D76CBA)
bb5ec000 bb5fa000 intelppm intelppm.sys Thu Nov 02 04:30:18 2006 (4549AC9A)
bcc04000 bcc11000 umbus umbus.sys Thu Nov 02 04:55:24 2006 (4549B27C)
bcc11000 bcc1f000 usbehci usbehci.sys Thu Aug 30 21:19:59 2007 (46D76CBF)
bcc1f000 bcc2c000 watchdog watchdog.sys Thu Nov 02 04:37:44 2006 (4549AE58)
bcc5c000 bcc69000 crashdmp crashdmp.sys Thu Nov 02 04:51:36 2006 (4549B198)
bccbb000 bccca000 termdd termdd.sys Thu Nov 02 05:02:00 2006 (4549B408)
bcd25000 bcd31000 vga vga.sys Thu Nov 02 04:53:56 2006 (4549B224)
bcd38000 bcd46000 Npfs Npfs.SYS Thu Nov 02 04:30:57 2006 (4549ACC1)
bcd50000 bcd5b000 dump_dumpata dump_dumpata.sys Thu Nov 02 04:51:34 2006 (4549B196)
bcd5b000 bcd66000 tunnel tunnel.sys Wed Jun 06 22:57:03 2007 (466773FF)
bcd66000 bcd71000 usbuhci usbuhci.sys Thu Aug 30 21:19:58 2007 (46D76CBE)
bcd71000 bcd7c000 fdc fdc.sys Thu Nov 02 04:51:33 2006 (4549B195)
bcd7c000 bcd87000 kbdclass kbdclass.sys Wed Dec 05 21:18:23 2007 (47575BEF)
bcd87000 bcd92000 TDI TDI.SYS Thu Nov 02 04:58:46 2006 (4549B346)
bcd92000 bcd9d000 ndistapi ndistapi.sys Tue Jul 03 21:28:09 2007 (468AF7A9)
bcda8000 bcdb3000 mouclass mouclass.sys Wed Dec 05 21:18:22 2007 (47575BEE)
bcdb3000 bcdbe000 Msfs Msfs.SYS Thu Nov 02 04:30:56 2006 (4549ACC0)
bd403000 bd440000 USBPORT USBPORT.SYS Thu Aug 30 21:20:03 2007 (46D76CC3)
bd440000 bd449000 rasacd rasacd.sys Thu Nov 02 04:58:13 2006 (4549B325)
bd464000 bd46d000 tunmp tunmp.sys Wed Jun 06 2253 2007 (466773F5)
bd49a000 bd4a3000 ws2ifsl ws2ifsl.sys Thu Nov 02 04:58:26 2006 (4549B332)
bd4da000 bd4e3880 AN983 AN983.sys Wed Jan 12 20:27:59 2005 (41E5CE9F)
bd4e4000 bd4ee000 serenum serenum.sys Thu Nov 02 04:51:25 2006 (4549B18D)
bd4ee000 bd4f8000 mssmbios mssmbios.sys Thu Nov 02 04:35:13 2006 (4549ADC1)
bd4f8000 bd502000 flpydisk flpydisk.sys Thu Nov 02 04:51:32 2006 (4549B194)
bd502000 bd50c000 nsiproxy nsiproxy.sys Thu Nov 02 04:57:30 2006 (4549B2FA)
bd570000 bd579000 kbdhid kbdhid.sys Wed Dec 05 21:18:26 2007 (47575BF2)
bd579000 bd582000 Fs_Rec Fs_Rec.SYS Mon Apr 16 21:26:39 2007 (4624224F)
bd59f000 bd5b9000 serial serial.sys Thu Nov 02 04:51:29 2006 (4549B191)
bd5b9000 bd5d6000 Rtlh86 Rtlh86.sys Fri Dec 28 0652 2007 (4774DC50)
bd5d6000 bd5ee000 cdrom cdrom.sys Thu Nov 02 04:51:44 2006 (4549B1A0)
bd5ee000 bd600000 HDAudBus HDAudBus.sys Sat Mar 24 14:54:34 2007 (460573EA)
be000000 be00c000 ATITool ATITool.sys Fri Nov 10 08:08:51 2006 (455479E3)
be00c000 be024000 parport parport.sys Thu Nov 02 04:51:29 2006 (4549B191)
be024000 be7ff680 nvlddmkm nvlddmkm.sys Tue Dec 18 23:42:32 2007 (4768A138)
bee01000 bee0f000 netbios netbios.sys Thu Nov 02 04:57:26 2006 (4549B2F6)
bee0f000 bee96000 rdpdr rdpdr.sys Thu Nov 02 05:02:58 2006 (4549B442)
bee96000 beea9000 raspptp raspptp.sys Thu Nov 02 04:58:14 2006 (4549B326)
beea9000 beecc000 ndiswan ndiswan.sys Thu Nov 02 04:58:13 2006 (4549B325)
beecc000 beee3000 rasl2tp rasl2tp.sys Thu Nov 02 04:58:13 2006 (4549B325)
beee3000 bef23000 storport storport.sys Thu Nov 02 04:51:45 2006 (4549B1A1)
bef23000 bef4e000 msiscsi msiscsi.sys Thu Nov 02 04:52:40 2006 (4549B1D8)
bef4e000 bef61000 i8042prt i8042prt.sys Wed Dec 05 21:18:28 2007 (47575BF4)
bef61000 bf000000 dxgkrnl dxgkrnl.sys Thu Jul 26 21:07:53 2007 (46A94569)
bf208000 bf229000 VIDEOPRT VIDEOPRT.SYS Thu Nov 02 04:54:07 2006 (4549B22F)
bf229000 bf240000 usbccgp usbccgp.sys Thu Aug 30 21:20:08 2007 (46D76CC8)
bf280000 bf2a5000 drmk drmk.sys Thu Nov 02 05:20:49 2006 (4549B871)
bf2a5000 bf2d2000 portcls portcls.sys Thu Nov 02 04:55:02 2006 (4549B266)
bf2d2000 bf306000 usbhub usbhub.sys Thu Aug 30 21:20:18 2007 (46D76CD2)
bf3d6000 bf400000 ks ks.sys Thu Nov 02 04:51:18 2006 (4549B186)
bf407000 bf420000 fwpkclnt fwpkclnt.sys Thu Nov 02 04:57:26 2006 (4549B2F6)
bf440000 bf5ffe80 RTKVHDA RTKVHDA.sys Wed Jul 18 07:31:17 2007 (469DFA05)
bf612000 bf629000 dfsc dfsc.sys Thu Nov 02 04:31:04 2006 (4549ACC8)
bf629000 bf664000 rdbss rdbss.sys Thu Nov 02 04:31:24 2006 (4549ACDC)
bf664000 bf677000 wanarp wanarp.sys Tue Jul 03 21:28:16 2007 (468AF7B0)
bf677000 bf68d000 pacer pacer.sys Tue Jul 03 21:27:33 2007 (468AF785)
bf68d000 bf6bf000 netbt netbt.sys Thu Nov 02 04:57:18 2006 (4549B2EE)
bf6bf000 bf706000 afd afd.sys Thu Nov 02 04:58:41 2006 (4549B341)
bf706000 bf71a000 smb smb.sys Thu Nov 02 04:57:10 2006 (4549B2E6)
bf71a000 bf72f000 tdx tdx.sys Thu Nov 02 04:57:34 2006 (4549B2FE)
bf72f000 bf800000 tcpip tcpip.sys Thu Sep 27 22:47:19 2007 (46FC6B37)
bf96d000 bf9c0000 csc csc.sys Mon Jun 18 20:48:27 2007 (467727DB)
e2000000 e23a1000 nt ntkrpamp.exe Tue Oct 09 21:48:02 2007 (470C2F52)
e23a1000 e23d5000 hal halmacpi.dll Thu Nov 02 04:30:18 2006 (4549AC9A)
Closing open log file c:\debuglog.txt

Thanks.

I would say it is the same problem. Memory again would be suspect.

How much RAM do you have? I see issues with Vista running 4GB on 32 bit machines. There is a patch for this if it is the case.

Otherwise I will try to follow the stack. Perhaps peterdiva might stop by. He is a good log interpreter.