Solved

BSOD Crash Help

Posted on 2014-11-11
3
176 Views
Last Modified: 2014-11-11
Hello experts.... I'm getting intermittent reboots in Wndows 7 and wondering if anyone can help point me in the right direction. I do not know the best way to troubleshoot this type of problem. Below is my crash dump analysis from http://www.osronline.com/

Instant Online Crash Analysis, brought to you by OSR Open Systems Resources, Inc.

Show DivPrimary Analysis

Crash Dump Analysis provided by OSR Open Systems Resources, Inc. (http://www.osr.com)
Online Crash Dump Analysis Service
See http://www.osronline.com for more information
Windows 7 Kernel Version 7601 (Service Pack 1) MP (8 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 7601.18409.amd64fre.win7sp1_gdr.140303-2144
Machine Name:
Kernel base = 0xfffff800`03c60000 PsLoadedModuleList = 0xfffff800`03ea3890
Debug session time: Tue Nov 11 11:18:44.527 2014 (UTC - 5:00)
System Uptime: 0 days 1:41:15.432
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

DRIVER_IRQL_NOT_LESS_OR_EQUAL (d1)
An attempt was made to access a pageable (or completely invalid) address at an
interrupt request level (IRQL) that is too high.  This is usually
caused by drivers using improper addresses.
If kernel debugger is available get stack backtrace.
Arguments:
Arg1: 0000000000000000, memory referenced
Arg2: 0000000000000002, IRQL
Arg3: 0000000000000008, value 0 = read operation, 1 = write operation
Arg4: 0000000000000000, address which referenced memory

Debugging Details:
------------------

TRIAGER: Could not open triage file : e:\dump_analysis\program\triage\modclass.ini, error 2

READ_ADDRESS: GetPointerFromAddress: unable to read from fffff80003f0d100
GetUlongFromAddress: unable to read from fffff80003f0d1c0
 0000000000000000 Nonpaged pool

CURRENT_IRQL:  2

FAULTING_IP:
+0
00000000`00000000 ??              ???

PROCESS_NAME:  System

CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  WIN7_DRIVER_FAULT

BUGCHECK_STR:  0xD1

TRAP_FRAME:  fffff8800e4a55f0 -- (.trap 0xfffff8800e4a55f0)
NOTE: The trap frame does not contain all registers.
Some register values may be zeroed or incorrect.
rax=fffffa800bf05500 rbx=0000000000000000 rcx=fffffa800db4c810
rdx=0000000000000016 rsi=0000000000000000 rdi=0000000000000000
rip=0000000000000000 rsp=fffff8800e4a5788 rbp=000000000000002a
 r8=fffff8800e4a5960  r9=0000000000000018 r10=fffffa800b120020
r11=fffff8800e4a5968 r12=0000000000000000 r13=0000000000000000
r14=0000000000000000 r15=0000000000000000
iopl=0         nv up ei ng nz na pe nc
00000000`00000000 ??              ???
Resetting default scope

LAST_CONTROL_TRANSFER:  from fffff80003cd5169 to fffff80003cd5bc0

FAILED_INSTRUCTION_ADDRESS:
+0
00000000`00000000 ??              ???

STACK_TEXT:  
fffff880`0e4a5788 fffff880`01095867 : 00000000`00000000 00000000`00000000 00000000`ffffffff ffffffff`ffffffff : 0x0
fffff880`0e4a5790 00000000`00000000 : 00000000`00000000 00000000`ffffffff ffffffff`ffffffff fffffa80`0b120270 : NEOFLTR_700_16499+0xc867


STACK_COMMAND:  .trap 0xfffff8800e4a55f0 ; kb

FOLLOWUP_IP:
NEOFLTR_700_16499+c867
fffff880`01095867 ??              ???

SYMBOL_STACK_INDEX:  1

SYMBOL_NAME:  NEOFLTR_700_16499+c867

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: NEOFLTR_700_16499

IMAGE_NAME:  NEOFLTR_700_16499.SYS

DEBUG_FLR_IMAGE_TIMESTAMP:  4c7762af

FAILURE_BUCKET_ID:  X64_0xD1_CODE_AV_NULL_IP_NEOFLTR_700_16499+c867

BUCKET_ID:  X64_0xD1_CODE_AV_NULL_IP_NEOFLTR_700_16499+c867

Followup: MachineOwner
---------


This free analysis is provided by OSR Open Systems Resources, Inc.
Want a deeper understanding of crash dump analysis? Check out our Windows Kernel Debugging and Crash Dump Analysis Seminar (opens in new tab/window)
Show DivCrash Code Links

Show DivInformation About Address 0x0

Show DivLoaded Module List

Show DivRaw Stack Contents

Show DivDump Header Information

Show DivStrings
CRASH-DATA.pdf
0
Comment
Question by:vicviper
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 2
3 Comments
 
LVL 70

Expert Comment

by:Qlemo
ID: 40435642
DRIVER_IRQL_NOT_LESS_OR_EQUAL tells us it is definitely a driver issue.
NEOFLTR hints towards Neoteris' SSL VPN driver, and I cannot see any other reference to a driver.

Do you run Juniper SSL VPN on that machine? If so, try to uninstall and monitor for further crashes.
0
 
LVL 70

Accepted Solution

by:
Qlemo earned 500 total points
ID: 40435657
Researching reveals there are repeated issues with W7 and that driver, and uninstall does not help. You need to deactivate/remove the driver in Driver Manager. Doing this (and no uninstall) might work already.
0
 

Author Closing Comment

by:vicviper
ID: 40436024
Thanks! Not sure why the Juniper software was even installed on my system since I certainly do not use VPN or anything. I uninstalled the program, which appears to have removed NEOFLTR_700_16499.SYS. Hopefully this will end the maddening restarts. Appreciate your response!
0

Featured Post

Get Actionable Data from Your Monitoring Solution

Your communication platform is only as good as the relevance of the information you send. Ensure your alerts get to the right people every time with actionable responses. Create escalation rules that ensure everyone follows the process and nothing is left to chance.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

As with any other System Center product, the installation for the Authoring Tool can be quite a pain sometimes. This article serves to help you avoid making these mistakes and hopefully save you a ton of time on troubleshooting :)  Step 1: Make sur…
A clone is a duplicate copy. Sheep have been cloned and maybe someday even people will be cloned, but disk cloning (performed by the hard drive cloning software) is a vital tool used to manage and protect data. Let’s look at what hard drive cloning …
The viewer will learn how to simulate a series of coin tosses with the rand() function and learn how to make these “tosses” depend on a predetermined probability. Flipping Coins in Excel: Enter =RAND() into cell A2: Recalculate the random variable…
The view will learn how to download and install SIMTOOLS and FORMLIST into Excel, how to use SIMTOOLS to generate a Monte Carlo simulation of 30 sales calls, and how to calculate the conditional probability based on the results of the Monte Carlo …

689 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question