IRQL_NOT_LESS_OR_EQUAL issues

Howdy guys,

Been getting the dreaded blue screen of death seemingly at random times. Might happen once today, nothing for a week, then 3 times in an hour.

This always seems to occur when surfing the net, at least it has never happened when I'm doing non-internet-related activities anyway. No new hardware that I haven't used before so I have no clue what prompted the sudden changes.


The error screen says: IRQL_NOT_LESS_OR_EQUAL

Stop:0x0000000A (0x00000010,0x0000001B,0x00000001,0x821BCFF9)



When i reboot I get a popup with the following information...

Problem signature:
Problem Event Name: BlueScreen
OS Version: 6.0.6002.2.2.0.768.3
Locale ID: 1033
Additional information about the problem:
BCCode: a
BCP1: 00000010
BCP2: 0000001B
BCP3: 00000001
BCP4: 821BCFF9
OS Version: 6_0_6002
Service Pack: 2_0
Product: 768_1
Files that help describe the problem:
C:\Windows\Minidump\Mini081609-01.dmp
C:\Users\Owner\AppData\Local\Temp\WER-57015-0.sysdata.xml
C:\Users\Owner\AppData\Local\Temp\WER119E.tmp.version.txt
Read our privacy statement:
Microsoft Online Crash Analysis


My system specs are as follows:

Computer Type: Gateway FX 7024
OS: Vista Home Premium 32 bit with SP2
Vid Card: NVidia GeForce 8800GT
Ram: 3 GB
Processor: Intel Core 2 Quad CPU Q6600 @ 2.40GHz 2.39GHz




Any help with this would be appreciated as it is beginning to get kinda annoying.

Thanks.

Please zip up the contents of the C:\Windows\Minidump folder and attach the .zip file to your next post.

Meanwhile, here's some stuff to try for starters: BSOD troubleshooting preliminaries - Vox

Minidump files attached as requested.

Thanks for your efforts on my behalf. This has been sort of an irritating issue.

*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
Use !analyze -v to get detailed debugging information.
BugCheck A, {10, 1b, 1, 821bcff9}
Probably caused by : ntkrpamp.exe ( nt!KiTrap0E+2e1 )
Followup: MachineOwner
---------
2: kd> !analyze -v
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
IRQL_NOT_LESS_OR_EQUAL (a)
An attempt was made to access a pageable (or completely invalid) address at an
interrupt request level (IRQL) that is too high. This is usually
caused by drivers using improper addresses.
If a kernel debugger is available get the stack backtrace.
Arguments:
Arg1: 00000010, memory referenced
Arg2: 0000001b, IRQL
Arg3: 00000001, bitfield :
bit 0 : value 0 = read operation, 1 = write operation
bit 3 : value 0 = not an execute operation, 1 = execute operation (only on chips which support this level of status)
Arg4: 821bcff9, address which referenced memory
Debugging Details:
------------------

WRITE_ADDRESS: GetPointerFromAddress: unable to read from 81f37868
Unable to read MiSystemVaType memory at 81f17420
00000010
CURRENT_IRQL: 1b
FAULTING_IP:
hal!KeAcquireInStackQueuedSpinLockRaiseToSynch+29
821bcff9 8902 mov dword ptr [edx],eax
CUSTOMER_CRASH_COUNT: 1
DEFAULT_BUCKET_ID: VISTA_DRIVER_FAULT
BUGCHECK_STR: 0xA
PROCESS_NAME: iexplore.exe
TRAP_FRAME: a0f68a30 -- (.trap 0xffffffffa0f68a30)
ErrCode = 00000002
eax=a0f68aac ebx=02b99508 ecx=887672e0 edx=00000010 esi=88767288 edi=00000004
eip=821bcff9 esp=a0f68aa4 ebp=a0f68ab8 iopl=0 nv up ei ng nz na pe nc
cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00010286
hal!KeAcquireInStackQueuedSpinLockRaiseToSynch+0x29:
821bcff9 8902 mov dword ptr [edx],eax ds:0023:00000010=????????
Resetting default scope
LAST_CONTROL_TRANSFER: from 821bcff9 to 81e4dfb9
STACK_TEXT:
a0f68a30 821bcff9 badb0d00 00000010 0000ffff nt!KiTrap0E+0x2e1
a0f68aa0 81e26064 02b99508 00000000 887672e1 hal!KeAcquireInStackQueuedSpinLockRaiseToSynch+0x29
a0f68ab8 8200ec40 a0f68c2c ce1e2039 ffffffff nt!KeGetExecuteOptions+0x15
a0f68d28 81e4ac7a ffffffff 00000022 02b99508 nt!NtQueryInformationProcess+0xfde
a0f68d28 77ad5e74 ffffffff 00000022 02b99508 nt!KiFastCallEntry+0x12a
WARNING: Frame IP not in any known module. Following frames may be wrong.
02b99518 00000000 00000000 00000000 00000000 0x77ad5e74

STACK_COMMAND: kb
FOLLOWUP_IP:
nt!KiTrap0E+2e1
81e4dfb9 833d84ecf28100 cmp dword ptr [nt!KiFreezeFlag (81f2ec84)],0
SYMBOL_STACK_INDEX: 0
SYMBOL_NAME: nt!KiTrap0E+2e1
FOLLOWUP_NAME: MachineOwner
MODULE_NAME: nt
IMAGE_NAME: ntkrpamp.exe
DEBUG_FLR_IMAGE_TIMESTAMP: 49e0199e
FAILURE_BUCKET_ID: 0xA_nt!KiTrap0E+2e1
BUCKET_ID: 0xA_nt!KiTrap0E+2e1
Followup: MachineOwner
---------
2: kd> lmvm nt
start end module name
81e00000 821b9000 nt (pdb symbols) c:\symbolfiles\ntkrpamp.pdb\109FACEC7E244C8FAC6D191457B5C7022\ntkrpamp.pdb
Loaded symbol image file: ntkrpamp.exe
Mapped memory image file: C:\symbolfiles\ntkrpamp.exe\49E0199E3b9000\ntkrpamp.exe
Image path: ntkrpamp.exe
Image name: ntkrpamp.exe
Timestamp: Sat Apr 11 14:16:30 2009 (49E0199E)
CheckSum: 00373B2E
ImageSize: 003B9000
File version: 6.0.6002.18005
Product version: 6.0.6002.18005
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 1.0 App
File date: 00000000.00000000
Translations: 0409.04b0
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: ntkrpamp.exe
OriginalFilename: ntkrpamp.exe
ProductVersion: 6.0.6002.18005
FileVersion: 6.0.6002.18005 (lh_sp2rtm.090410-1830)
FileDescription: NT Kernel & System
LegalCopyright: © Microsoft Corporation. All rights reserved.

Since Internet Explorer crashed at the time of the STOP error, try starting it without any addons. Then update all your drivers including the motherboard.

To my knowledge I don't have any addons for IE. I usually try and stay away from any toolbars and stuff like that. I live in the armpit of nowhere, so being on dial-up I try to keep stuff as uncluttered as possible.

Also, whats the best way to go about making sure all my drivers are up to date?

I usually just go to my device manager and click the 'update drivers' button when I think I need a new one. I'm sort of what you would call....hmmm, whats a good word here...technologically inept. I can usually manage to run programs and fix minor problems but actually going deep into a computer to mess with its files or interpreting code is beyond my level of expertise. I usually fix stuff like this with a system restore or getting the latest Microsoft Updates, but that hasn't worked this time.

Thanks for the help. It's appreciated.

There's a large span of time between the dates of these BSOD's - as such we have to wonder if they're independent events, or part of a pattern (I dunno at this point).

The first one points to your storage drivers (iastor.sys), while the 3rd one points to your networking components (tcpip.sys). The others point to Windows components, so that's up in the air.

You have Service Pack 2 installed - but a lot of your drivers are older. I'd first suggest that you visit the website of the system manufacturer and update any drivers that have been released for the system. In particular I'd look for those drivers updated in late 2008/early 2009.

If the system continues to Blue Screen after the updates, please post back with the memory dump files and we'll go from there.
Here's a listing of the older drivers:

Here's a summary of the BSOD's: