Solved

BSOD Crash Help

Posted on 2014-11-11
3
165 Views
Last Modified: 2014-11-11
Hello experts.... I'm getting intermittent reboots in Wndows 7 and wondering if anyone can help point me in the right direction. I do not know the best way to troubleshoot this type of problem. Below is my crash dump analysis from http://www.osronline.com/

Instant Online Crash Analysis, brought to you by OSR Open Systems Resources, Inc.

Show DivPrimary Analysis

Crash Dump Analysis provided by OSR Open Systems Resources, Inc. (http://www.osr.com)
Online Crash Dump Analysis Service
See http://www.osronline.com for more information
Windows 7 Kernel Version 7601 (Service Pack 1) MP (8 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 7601.18409.amd64fre.win7sp1_gdr.140303-2144
Machine Name:
Kernel base = 0xfffff800`03c60000 PsLoadedModuleList = 0xfffff800`03ea3890
Debug session time: Tue Nov 11 11:18:44.527 2014 (UTC - 5:00)
System Uptime: 0 days 1:41:15.432
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

DRIVER_IRQL_NOT_LESS_OR_EQUAL (d1)
An attempt was made to access a pageable (or completely invalid) address at an
interrupt request level (IRQL) that is too high.  This is usually
caused by drivers using improper addresses.
If kernel debugger is available get stack backtrace.
Arguments:
Arg1: 0000000000000000, memory referenced
Arg2: 0000000000000002, IRQL
Arg3: 0000000000000008, value 0 = read operation, 1 = write operation
Arg4: 0000000000000000, address which referenced memory

Debugging Details:
------------------

TRIAGER: Could not open triage file : e:\dump_analysis\program\triage\modclass.ini, error 2

READ_ADDRESS: GetPointerFromAddress: unable to read from fffff80003f0d100
GetUlongFromAddress: unable to read from fffff80003f0d1c0
 0000000000000000 Nonpaged pool

CURRENT_IRQL:  2

FAULTING_IP:
+0
00000000`00000000 ??              ???

PROCESS_NAME:  System

CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  WIN7_DRIVER_FAULT

BUGCHECK_STR:  0xD1

TRAP_FRAME:  fffff8800e4a55f0 -- (.trap 0xfffff8800e4a55f0)
NOTE: The trap frame does not contain all registers.
Some register values may be zeroed or incorrect.
rax=fffffa800bf05500 rbx=0000000000000000 rcx=fffffa800db4c810
rdx=0000000000000016 rsi=0000000000000000 rdi=0000000000000000
rip=0000000000000000 rsp=fffff8800e4a5788 rbp=000000000000002a
 r8=fffff8800e4a5960  r9=0000000000000018 r10=fffffa800b120020
r11=fffff8800e4a5968 r12=0000000000000000 r13=0000000000000000
r14=0000000000000000 r15=0000000000000000
iopl=0         nv up ei ng nz na pe nc
00000000`00000000 ??              ???
Resetting default scope

LAST_CONTROL_TRANSFER:  from fffff80003cd5169 to fffff80003cd5bc0

FAILED_INSTRUCTION_ADDRESS:
+0
00000000`00000000 ??              ???

STACK_TEXT:  
fffff880`0e4a5788 fffff880`01095867 : 00000000`00000000 00000000`00000000 00000000`ffffffff ffffffff`ffffffff : 0x0
fffff880`0e4a5790 00000000`00000000 : 00000000`00000000 00000000`ffffffff ffffffff`ffffffff fffffa80`0b120270 : NEOFLTR_700_16499+0xc867


STACK_COMMAND:  .trap 0xfffff8800e4a55f0 ; kb

FOLLOWUP_IP:
NEOFLTR_700_16499+c867
fffff880`01095867 ??              ???

SYMBOL_STACK_INDEX:  1

SYMBOL_NAME:  NEOFLTR_700_16499+c867

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: NEOFLTR_700_16499

IMAGE_NAME:  NEOFLTR_700_16499.SYS

DEBUG_FLR_IMAGE_TIMESTAMP:  4c7762af

FAILURE_BUCKET_ID:  X64_0xD1_CODE_AV_NULL_IP_NEOFLTR_700_16499+c867

BUCKET_ID:  X64_0xD1_CODE_AV_NULL_IP_NEOFLTR_700_16499+c867

Followup: MachineOwner
---------


This free analysis is provided by OSR Open Systems Resources, Inc.
Want a deeper understanding of crash dump analysis? Check out our Windows Kernel Debugging and Crash Dump Analysis Seminar (opens in new tab/window)
Show DivCrash Code Links

Show DivInformation About Address 0x0

Show DivLoaded Module List

Show DivRaw Stack Contents

Show DivDump Header Information

Show DivStrings
CRASH-DATA.pdf
0
Comment
Question by:vicviper
  • 2
3 Comments
 
LVL 68

Expert Comment

by:Qlemo
ID: 40435642
DRIVER_IRQL_NOT_LESS_OR_EQUAL tells us it is definitely a driver issue.
NEOFLTR hints towards Neoteris' SSL VPN driver, and I cannot see any other reference to a driver.

Do you run Juniper SSL VPN on that machine? If so, try to uninstall and monitor for further crashes.
0
 
LVL 68

Accepted Solution

by:
Qlemo earned 500 total points
ID: 40435657
Researching reveals there are repeated issues with W7 and that driver, and uninstall does not help. You need to deactivate/remove the driver in Driver Manager. Doing this (and no uninstall) might work already.
0
 

Author Closing Comment

by:vicviper
ID: 40436024
Thanks! Not sure why the Juniper software was even installed on my system since I certainly do not use VPN or anything. I uninstalled the program, which appears to have removed NEOFLTR_700_16499.SYS. Hopefully this will end the maddening restarts. Appreciate your response!
0

Featured Post

Comprehensive Backup Solutions for Microsoft

Acronis protects the complete Microsoft technology stack: Windows Server, Windows PC, laptop and Surface data; Microsoft business applications; Microsoft Hyper-V; Azure VMs; Microsoft Windows Server 2016; Microsoft Exchange 2016 and SQL Server 2016.

Join & Write a Comment

Suggested Solutions

Moving your enterprise fax infrastructure from in-house fax machines and servers to the cloud makes sense — from both an efficiency and productivity standpoint. But does migrating to a cloud fax solution mean you will no longer be able to send or re…
Great sound, comfort and fit, excellent build quality, versatility, compatibility. These are just some of the many reasons for choosing a headset from Sennheiser.
The viewer will learn how to use a discrete random variable to simulate the return on an investment over a period of years, create a Monte Carlo simulation using the discrete random variable, and create a graph to represent the possible returns over…
The viewer will learn how to create two correlated normally distributed random variables in Excel, use a normal distribution to simulate the return on different levels of investment in each of the two funds over a period of ten years, and, create a …

758 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

20 Experts available now in Live!

Get 1:1 Help Now