IRQL_NOT_LESS_OR_EQUAL Memory Error

[Lucien]

Hi,

Ive been having lots of memory issues with my computer, I'm running vista 64bit with 6 gigs of memory (complete specs are in my specs tab) and I keep getting various BSODs. The most recent one was while I was playing left 4 dead, IRQL_NOT_LESS_OR_EQUAL. They crop up fairly regularly while using the computer even when I'm not playing games or surfing the internet. Ive attached the dump:

View attachment Mini101109-02.zip

Anybody have any experience with this?

Thanks, Lucien

 

[VaguelyRapt]

IRQL_NOT_LESS_OR_EQUAL usually means driver conflict. Use this program (before trying any solutions) to help you diagnose where the issue lies.

I would normally suggest:
1. Try a different RAM configuration (use only 2GB RAM instead of 6)
2. Reinstall drivers (start with graphics)

Don't forget to post back.

 

[lemur]

ntoskrnl problem. try running memtest86+

**EDIT **
http://www.memtest.org/

 

[Lucien]

I download the Who Crashed program but whenever I run it, all it says is "File access denied". The program is fully up to date and I've contacted the company that makes the program, although I'm not sure how fast or even if I'll get a response given that its a free program.

Looking at your two other options I'm going to try to update all my drivers first, since I have limited experience with actually building or working with computer hardware and would prefer if we could solve this problem with a software solution rather then a hardware one. I'll try to update my drivers and let you know how that goes.

 

[stoneys-nutz]

I download the Who Crashed program but whenever I run it, all it says is "File access denied". The program is fully up to date and I've contacted the company that makes the program, although I'm not sure how fast or even if I'll get a response given that its a free program.

Looking at your two other options I'm going to try to update all my drivers first, since I have limited experience with actually building or working with computer hardware and would prefer if we could solve this problem with a software solution rather then a hardware one. I'll try to update my drivers and let you know how that goes.

Hello Lucien,
When you run the Who Crashed program are you running it as an administrator, try that and post your results, good luck.
Take a read here too. it will give you some insight as to the problem you are faced with.

http://technet.microsoft.com/en-us/library/cc957609.aspx

 

[Lucien]

Lemur, thanks for the suggestion re: memtest86+, this might sound like a basic question but how do I run memtest86+? Ive downloaded a file and it wants me to make a boot cd from it and use that. Is there a thread or youtube video that can show me how to use this program?

 

[stoneys-nutz]

Go here and download the pre-configured version, its a bit easier.


Download MemTest 3.8 - A small but very powerful utility for RAM testing - Softpedia

 

[Lucien]

stoneys-nutz, that worked perfectly! I'm still getting the hang of vista thanks for the pointer. Ive posted the results for this problem below:

***

[FONT=Segoe UI, Arial]Too many crashes have been detected. Only the latest 40 crashes will be displayed.

[/FONT][FONT=Segoe UI, Arial]On Sun 11/10/2009 12:40:18 AM your computer crashed
This was likely caused by the following module: [FONT=Segoe UI, Arial]ntoskrnl.exe[/FONT]
Bugcheck code: 0xA (0x493, 0xC, 0x0, 0xFFFFF800020C77AF)
Error: [FONT=Segoe UI, Arial]IRQL_NOT_LESS_OR_EQUAL[/FONT]
[/FONT][FONT=Segoe UI, Arial]file path: C:\Windows\system32\ntoskrnl.exe
product: [FONT=Segoe UI, Arial]Microsoft® Windows® Operating System[/FONT]
company: [FONT=Segoe UI, Arial]Microsoft Corporation[/FONT]
description: NT Kernel & System
The crash took place in a standard Microsoft module. Likely the culprit is another driver on your system which cannot be identified.

***

The program ran through the last 40(!) crash dumps, which unfortunately contain not just the [/FONT][FONT=Segoe UI, Arial][FONT=Segoe UI, Arial]IRQL_NOT_LESS_OR_EQUAL but also [/FONT][/FONT][FONT=Segoe UI, Arial]DRIVER_PORTION_MUST_BE_NONPAGED, [/FONT][FONT=Segoe UI, Arial]SYSTEM_SERVICE_EXCEPTION[/FONT][FONT=Segoe UI, Arial][FONT=Segoe UI, Arial], [/FONT][/FONT][FONT=Segoe UI, Arial]NTFS_FILE_SYSTEM[/FONT][FONT=Segoe UI, Arial][FONT=Segoe UI, Arial], [/FONT][/FONT][FONT=Segoe UI, Arial][FONT=Segoe UI, Arial][URL="http://www.google.com/search?q=bugcheck+IRQL_NOT_LESS_OR_EQUAL"]IRQL_NOT_LESS_OR_EQUAL[/FONT][/FONT][/URL][FONT=Segoe UI, Arial][FONT=Segoe UI, Arial] [/FONT][/FONT][FONT=Segoe UI, Arial]DRIVER_IRQL_NOT_LESS_OR_EQUAL, [/FONT][FONT=Segoe UI, Arial]CACHE_MANAGER[/FONT], [FONT=Segoe UI, Arial]KMODE_EXCEPTION_NOT_HANDLED[/FONT], [FONT=Segoe UI, Arial]MEMORY_MANAGEMENT and [/FONT][FONT=Segoe UI, Arial]FLTMGR_FILE_SYSTEM. [/FONT]




Although 85% of those are either [FONT=Segoe UI, Arial][FONT=Segoe UI, Arial]IRQL_NOT_LESS_OR_EQUAL[/FONT][/FONT],[FONT=Segoe UI, Arial] [/FONT][FONT=Segoe UI, Arial][URL="http://www.google.com/search?q=bugcheck+PAGE_FAULT_IN_NONPAGED_AREA"]PAGE_FAULT_IN_NONPAGED_AREA[/FONT][/URL][FONT=Segoe UI, Arial] or SYSTEM_SERVICE_EXCEPTION[/FONT]. I think this means I have a fairly significant problem... although you guys will probably have more of an idea then me. The last line for all of these was: [FONT=Segoe UI, Arial]The crash took place in a standard Microsoft module. Likely the culprit is another driver on your system which cannot be identified. [/FONT]

My next step will probably be running memtest86+ via the instructions stoneys-nutz posted. I'll let you know how it goes.

Thanks for the help so far guys, I didn't expect it this quickly

 

[zigzag3143]

Lemur, thanks for the suggestion re: memtest86+, this might sound like a basic question but how do I run memtest86+? Ive downloaded a file and it wants me to make a boot cd from it and use that. Is there a thread or youtube video that can show me how to use this program?

Lucien

Hi and welcome

I know you are having quite a time of it but BSOD's are difficult to diagnose. the one you uploaded was probably caused by something other than the ntkrnlmp listed but it is fairly ambiguous. Keep uploading the dumps as each new one gives us more info.

What service pack are you running?



Microsoft (R) Windows Debugger Version 6.11.0001.404 X86
Copyright (c) Microsoft Corporation. All rights reserved.


Loading Dump File [C:\Users\K\Desktop\Mini101109-02.dmp]
Mini Kernel Dump File: Only registers and stack trace are available

Symbol search path is: SRV*d:\symbols*Symbol information
Executable search path is:
Windows Server 2008/Windows Vista Kernel Version 6001 (Service Pack 1) MP (4 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS Personal
Built by: 6001.18295.amd64fre.vistasp1_gdr.090721-0152
Machine Name:
Kernel base = 0xfffff800`02056000 PsLoadedModuleList = 0xfffff800`0221bdb0
Debug session time: Sat Oct 10 20:37:50.593 2009 (GMT-4)
System Uptime: 0 days 1:39:54.637
Loading Kernel Symbols
...............................................................
................................................................
..........
Loading User Symbols
Loading unloaded module list
...
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck A, {493, c, 0, fffff800020c77af}

Probably caused by : ntkrnlmp.exe ( nt!KeReleaseSemaphore+4f )

Followup: MachineOwner
---------

1: kd> !analyze -v
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

IRQL_NOT_LESS_OR_EQUAL (a)
An attempt was made to access a pageable (or completely invalid) address at an
interrupt request level (IRQL) that is too high. This is usually
caused by drivers using improper addresses.
If a kernel debugger is available get the stack backtrace.
Arguments:
Arg1: 0000000000000493, memory referenced
Arg2: 000000000000000c, IRQL
Arg3: 0000000000000000, bitfield :
bit 0 : value 0 = read operation, 1 = write operation
bit 3 : value 0 = not an execute operation, 1 = execute operation (only on chips which support this level of status)
Arg4: fffff800020c77af, address which referenced memory

Debugging Details:
------------------


READ_ADDRESS: GetPointerFromAddress: unable to read from fffff8000227f080
0000000000000493

CURRENT_IRQL: c

FAULTING_IP:
nt!KeReleaseSemaphore+4f
fffff800`020c77af 8b7b04 mov edi,dword ptr [rbx+4]

CUSTOMER_CRASH_COUNT: 2

DEFAULT_BUCKET_ID: VISTA_DRIVER_FAULT

BUGCHECK_STR: 0xA

PROCESS_NAME: WinService.exe


STACK_COMMAND: kb

FOLLOWUP_IP:
nt!KeReleaseSemaphore+4f
fffff800`020c77af 8b7b04 mov edi,dword ptr [rbx+4]

SYMBOL_STACK_INDEX: 3

SYMBOL_NAME: nt!KeReleaseSemaphore+4f

FOLLOWUP_NAME: MachineOwner

MODULE_NAME: nt

IMAGE_NAME: ntkrnlmp.exe

DEBUG_FLR_IMAGE_TIMESTAMP: 4a65b149

FAILURE_BUCKET_ID: X64_0xA_nt!KeReleaseSemaphore+4f

BUCKET_ID: X64_0xA_nt!KeReleaseSemaphore+4f

Followup: MachineOwner
---------

 

[Lucien]

Hi zigzag3143, I'm running 6.0.6001 Service Pack 1 Build 6001

In addition I just ran memtest86+ for about 4 minutes with 2 copies of the program open each set to 2047 meg. The 1st program ran to 5.5% and generated 80 errors and the second program ran to 0.5% and generated 295 errors. I stopped running it at that point as pressing enter on my keyboard was getting ridiculous. I'm unsure what to do next... any suggestions?

 

[zigzag3143]

Hi zigzag3143, I'm running 6.0.6001 Service Pack 1 Build 6001

In addition I just ran memtest86+ for about 4 minutes with 2 copies of the program open each set to 2047 meg. The 1st program ran to 5.5% and generated 80 errors and the second program ran to 0.5% and generated 295 errors. I stopped running it at that point as pressing enter on my keyboard was getting ridiculous. I'm unsure what to do next... any suggestions?

is your computer overclocked? us the ram all the same?

 

[Lucien]

No its not overclocked and yes it uses all the same RAM: 3 x Strontium (Hynix) 2GB DDR2 800 sticks

 

[usasma]

Remove all but one stick of RAM (in the first slot) and run the test on that stick. Don't forget to unplug the machine from the wall and ground yourself on the metal of the case before touching the RAM sticks.

Run the test until failures occur. If no failure occurs run the test for at least 3 passes.

Then test the other sticks in that slot.
Then, take one of the good sticks and test it in each of the other slots.

 

[Lucien]

Well it was working fine, I tested 2 of the sticks with no errors to 300% but when I went to test the third one I must have pushed it in too hard or something because all of a sudden the computer wouldn't turn on and would only emit a beep beep followed by a pause followed by beep beep indefinitely (the screen also stayed black). However when I tried the other sticks which had previously worked the same thing happened no matter which slots I placed the ram in and which ram stick I used. I think I may have done something to the mother board or pushed the 3rd stick in too hard or something? :huh:

Anyway I'm contacting the shop where I bought the computer to see if they can test the motherboard and memory for me... and replace them if damaged. Since two of the sticks worked fine I think the issue was either with the third stick or with the slots on the motherboard although you guys probably would have a much more educated opinion then mine. I'll keep you posted on how it goes.

 

[Frostmourne]

What was the beep code? It probably corresponded to bad memory. And if you are running a core i7 use ddr3, not 2.

 

[lemur]

I hope nothing is damaged from the memory insertion. Let us know how things turn out.

 

[Lucien]

Hi All,

Sorry about the delay. Well the computer came back from the shop a few days ago but I'm still getting BSOD's. They tested it at the shop and replaced the memory for me (covered under warranty) and after testing they said they thought it was fine to pick up. However I'm still getting them. I'm certainly getting them a lot less now (probably every 1-3 hours when playing games, left 4 dead, team fort 2 etc etc, instead of every ten minutes). The guy at the shop suggested downgrading to vista 32 bit and I'm considering it, unless you guys have any more ideas?

Lucien

PS: turns out the memory was fine just not inserted correctly... I'm not sure how i did it right twice and then messed it up 5 times in a row? Ah well...

 

[usasma]

Please upload the latest memory dump files.

FWIW - the winservice.exe process in the other memory dump is usually associated with a virus. Have you scanned the system for viruses? They can cause BSOD's.

 

[Lucien]

View attachment MiniDump.zip

I use Avira AntiVir Personal, and its up date and not detecting any viruses. Would you recommend another anti-virus program?

 

[usasma]

I use Avira Free myself. I'd suggest locating the file on your hard drive, then submit it to Jotti's malware scan

Running the minidumps now.....