Want to protect your cyber security and still get fast solutions? Ask a secure question today.Go Premium

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 193
  • Last Modified:

BSOD Crash Help

Hello experts.... I'm getting intermittent reboots in Wndows 7 and wondering if anyone can help point me in the right direction. I do not know the best way to troubleshoot this type of problem. Below is my crash dump analysis from http://www.osronline.com/

Instant Online Crash Analysis, brought to you by OSR Open Systems Resources, Inc.

Show DivPrimary Analysis

Crash Dump Analysis provided by OSR Open Systems Resources, Inc. (http://www.osr.com)
Online Crash Dump Analysis Service
See http://www.osronline.com for more information
Windows 7 Kernel Version 7601 (Service Pack 1) MP (8 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 7601.18409.amd64fre.win7sp1_gdr.140303-2144
Machine Name:
Kernel base = 0xfffff800`03c60000 PsLoadedModuleList = 0xfffff800`03ea3890
Debug session time: Tue Nov 11 11:18:44.527 2014 (UTC - 5:00)
System Uptime: 0 days 1:41:15.432
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

DRIVER_IRQL_NOT_LESS_OR_EQUAL (d1)
An attempt was made to access a pageable (or completely invalid) address at an
interrupt request level (IRQL) that is too high.  This is usually
caused by drivers using improper addresses.
If kernel debugger is available get stack backtrace.
Arguments:
Arg1: 0000000000000000, memory referenced
Arg2: 0000000000000002, IRQL
Arg3: 0000000000000008, value 0 = read operation, 1 = write operation
Arg4: 0000000000000000, address which referenced memory

Debugging Details:
------------------

TRIAGER: Could not open triage file : e:\dump_analysis\program\triage\modclass.ini, error 2

READ_ADDRESS: GetPointerFromAddress: unable to read from fffff80003f0d100
GetUlongFromAddress: unable to read from fffff80003f0d1c0
 0000000000000000 Nonpaged pool

CURRENT_IRQL:  2

FAULTING_IP:
+0
00000000`00000000 ??              ???

PROCESS_NAME:  System

CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  WIN7_DRIVER_FAULT

BUGCHECK_STR:  0xD1

TRAP_FRAME:  fffff8800e4a55f0 -- (.trap 0xfffff8800e4a55f0)
NOTE: The trap frame does not contain all registers.
Some register values may be zeroed or incorrect.
rax=fffffa800bf05500 rbx=0000000000000000 rcx=fffffa800db4c810
rdx=0000000000000016 rsi=0000000000000000 rdi=0000000000000000
rip=0000000000000000 rsp=fffff8800e4a5788 rbp=000000000000002a
 r8=fffff8800e4a5960  r9=0000000000000018 r10=fffffa800b120020
r11=fffff8800e4a5968 r12=0000000000000000 r13=0000000000000000
r14=0000000000000000 r15=0000000000000000
iopl=0         nv up ei ng nz na pe nc
00000000`00000000 ??              ???
Resetting default scope

LAST_CONTROL_TRANSFER:  from fffff80003cd5169 to fffff80003cd5bc0

FAILED_INSTRUCTION_ADDRESS:
+0
00000000`00000000 ??              ???

STACK_TEXT:  
fffff880`0e4a5788 fffff880`01095867 : 00000000`00000000 00000000`00000000 00000000`ffffffff ffffffff`ffffffff : 0x0
fffff880`0e4a5790 00000000`00000000 : 00000000`00000000 00000000`ffffffff ffffffff`ffffffff fffffa80`0b120270 : NEOFLTR_700_16499+0xc867


STACK_COMMAND:  .trap 0xfffff8800e4a55f0 ; kb

FOLLOWUP_IP:
NEOFLTR_700_16499+c867
fffff880`01095867 ??              ???

SYMBOL_STACK_INDEX:  1

SYMBOL_NAME:  NEOFLTR_700_16499+c867

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: NEOFLTR_700_16499

IMAGE_NAME:  NEOFLTR_700_16499.SYS

DEBUG_FLR_IMAGE_TIMESTAMP:  4c7762af

FAILURE_BUCKET_ID:  X64_0xD1_CODE_AV_NULL_IP_NEOFLTR_700_16499+c867

BUCKET_ID:  X64_0xD1_CODE_AV_NULL_IP_NEOFLTR_700_16499+c867

Followup: MachineOwner
---------


This free analysis is provided by OSR Open Systems Resources, Inc.
Want a deeper understanding of crash dump analysis? Check out our Windows Kernel Debugging and Crash Dump Analysis Seminar (opens in new tab/window)
Show DivCrash Code Links

Show DivInformation About Address 0x0

Show DivLoaded Module List

Show DivRaw Stack Contents

Show DivDump Header Information

Show DivStrings
CRASH-DATA.pdf
0
vicviper
Asked:
vicviper
  • 2
1 Solution
 
QlemoC++ DeveloperCommented:
DRIVER_IRQL_NOT_LESS_OR_EQUAL tells us it is definitely a driver issue.
NEOFLTR hints towards Neoteris' SSL VPN driver, and I cannot see any other reference to a driver.

Do you run Juniper SSL VPN on that machine? If so, try to uninstall and monitor for further crashes.
0
 
QlemoC++ DeveloperCommented:
Researching reveals there are repeated issues with W7 and that driver, and uninstall does not help. You need to deactivate/remove the driver in Driver Manager. Doing this (and no uninstall) might work already.
0
 
vicviperAuthor Commented:
Thanks! Not sure why the Juniper software was even installed on my system since I certainly do not use VPN or anything. I uninstalled the program, which appears to have removed NEOFLTR_700_16499.SYS. Hopefully this will end the maddening restarts. Appreciate your response!
0

Featured Post

Meet the Family that is Made for Collaboration

The TeamConnect Family product group as part of the Sennheiser for Business Portfolio comprising high-quality, technically well-conceived meeting solutions for business communication – designed for any meeting room and any meeting situation.

  • 2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now