Vista crashing, I need a way to know whats wrong

A

Abubakar

Hi,

My vista crashed 2 times today. This is probably the first time since
december 2007 when I bought my laptop with Vista. I know the usual question
would be to check if I installed some new drivers or any hardware device but
thats not the case as far as I know. Its a Vista Ultimate system, with a cor
2 duo 2.ghz, 2gb ram, wifi etc. The first time it crashed today was with a
blue screen with the usual bsod stuff printed on it (I know it can be
different stuff written there but right now I dont know the exact stuff
other than 'check for new hardware installation' msg). i was running visual
studio 2005 doing asp.net development with it. The second time when it
crashed it hanged and the computer made one beep sound, but no bsod, the
computer just didnt reply, and here also I was debugging something in
asp.net in vs 2k5.

Is there any software that that provide me some information that may help me
find out exactly whats wrong? Some internal diagnostic software that maybe
ships with vista?

regards.
 
A

Abubakar

Abubakar said:
Hi,

My vista crashed 2 times today. This is probably the first time since
december 2007 when I bought my laptop with Vista. I know the usual
question would be to check if I installed some new drivers or any hardware
device but thats not the case as far as I know. Its a Vista Ultimate
system, with a cor 2 duo 2.ghz, 2gb ram, wifi etc. The first time it
crashed today was with a blue screen with the usual bsod stuff printed on
it (I know it can be different stuff written there but right now I dont
know the exact stuff other than 'check for new hardware installation'
msg). i was running visual studio 2005 doing asp.net development with it.
The second time when it crashed it hanged and the computer made one beep
sound, but no bsod, the computer just didnt reply, and here also I was
debugging something in asp.net in vs 2k5.

Is there any software that that provide me some information that may help
me find out exactly whats wrong? Some internal diagnostic software that
maybe ships with vista?

regards.
 
M

Manny Weisbord

Try again in another three hours. I think the drive-through window is
closed for the night.
 
A

Abubakar

Rick Rogers said:
Hi,

The details of the blue screen are crucial to identifying the problem.
Error codes, parameters, and any modules involved can all provide clues.
Check the event log for details and post them.

The second "crash" sounds more like a hardware freeze, not an operating
system issue but rather a problem component. Could also be related to
overheating.

--
Best of Luck,

Rick Rogers, aka "Nutcase" - Microsoft MVP

Windows help - www.rickrogers.org
My thoughts http://rick-mvp.blogspot.com

event log is so huge, there r enteries about every second ! And search was
taking time. I will search for more, but after the second crash the
following was displayed when i logged in:
Problem signature:
Problem Event Name: BlueScreen
OS Version: 6.0.6001.2.1.0.256.1
Locale ID: 1033

Additional information about the problem:
BCCode: a
BCP1: 00000000
BCP2: 0000001B
BCP3: 00000001
BCP4: 83043A7F
OS Version: 6_0_6001
Service Pack: 1_0
Product: 256_1

Files that help describe the problem:
C:\Windows\Minidump\Mini051409-01.dmp
C:\Users\Ab\AppData\Local\Temp\WER-99450-0.sysdata.xml
C:\Users\Ab\AppData\Local\Temp\WER192A.tmp.version.txt

Read our privacy statement:
http://go.microsoft.com/fwlink/?linkid=50163&clcid=0x0409

The WER* files are not at there mentioned place, but the dump file is there.
I remember reading someone's blog that the dump file can be opened with
windbg ?

In the meanwhile the system crashed one more time with blue screen.

...ab
 
R

R. C. White

Hi, Abubakar.

Rick is the expert here, not me. But I think the heart of your problem is
here:
Problem signature:
Problem Event Name: BlueScreen
OS Version: 6.0.6001.2.1.0.256.1
Locale ID: 1033

Additional information about the problem:
BCCode: a
BCP1: 00000000
BCP2: 0000001B
BCP3: 00000001
BCP4: 83043A7F
OS Version: 6_0_6001
Service Pack: 1_0
Product: 256_1

Your "BCCode: a" corresponds to Stop Code 0x0A. My starting point for
researching Stop Codes is:
TROUBLESHOOTING WINDOWS STOP MESSAGES
http://www.aumha.org/a/stop.htm

One of the first listings there is:
0x0000000A: IRQL_NOT_LESS_OR_EQUAL

There are many possible causes and solutions for this error, "Typically due
to a bad driver, or faulty or incompatible hardware or software."

This should give you some ideas of the kinds of questions Rick will need you
to answer in your next post.

RC
--
R. C. White, CPA
San Marcos, TX
(e-mail address removed)
Microsoft Windows MVP
Windows Live Mail 2009 (14.0.8064.0206) in Win7 Ultimate x64 RC 7100
 
A

Abubakar

ok waiting for Rick. In the meanwhile can you tell me where can I get the
information about what drivers got installed in the last 3 days? Because
atleast I dont remember installing something of this significance myself.
 
A

Abubakar

So I loaded the dmp file in windbg and typed !analyze -v and got the
following output:

0: kd> !analyze -v
*******************************************************************************
*
*
* Bugcheck Analysis
*
*
*
*******************************************************************************

IRQL_NOT_LESS_OR_EQUAL (a)
An attempt was made to access a pageable (or completely invalid) address at
an
interrupt request level (IRQL) that is too high. This is usually
caused by drivers using improper addresses.
If a kernel debugger is available get the stack backtrace.
Arguments:
Arg1: 00000000, memory referenced
Arg2: 0000001b, IRQL
Arg3: 00000001, bitfield :
bit 0 : value 0 = read operation, 1 = write operation
bit 3 : value 0 = not an execute operation, 1 = execute operation (only on
chips which support this level of status)
Arg4: 83043a7f, address which referenced memory

Debugging Details:
------------------

***** Kernel symbols are WRONG. Please fix symbols to do analysis.

*************************************************************************
*** ***
*** ***
*** Your debugger is not using the correct symbols ***
*** ***
*** In order for this command to work properly, your symbol path ***
*** must point to .pdb files that have full type information. ***
*** ***
*** Certain .pdb files (such as the public OS symbols) do not ***
*** contain the required information. Contact the group that ***
*** provided you with these symbols if you need this command to ***
*** work. ***
*** ***
*** Type referenced: nt!_KPRCB ***
*** ***
*************************************************************************
*************************************************************************
*** ***
*** ***
*** Your debugger is not using the correct symbols ***
*** ***
*** In order for this command to work properly, your symbol path ***
*** must point to .pdb files that have full type information. ***
*** ***
*** Certain .pdb files (such as the public OS symbols) do not ***
*** contain the required information. Contact the group that ***
*** provided you with these symbols if you need this command to ***
*** work. ***
*** ***
*** Type referenced: nt!KPRCB ***
*** ***
*************************************************************************
*************************************************************************
*** ***
*** ***
*** Your debugger is not using the correct symbols ***
*** ***
*** In order for this command to work properly, your symbol path ***
*** must point to .pdb files that have full type information. ***
*** ***
*** Certain .pdb files (such as the public OS symbols) do not ***
*** contain the required information. Contact the group that ***
*** provided you with these symbols if you need this command to ***
*** work. ***
*** ***
*** Type referenced: nt!_KPRCB ***
*** ***
*************************************************************************
*************************************************************************
*** ***
*** ***
*** Your debugger is not using the correct symbols ***
*** ***
*** In order for this command to work properly, your symbol path ***
*** must point to .pdb files that have full type information. ***
*** ***
*** Certain .pdb files (such as the public OS symbols) do not ***
*** contain the required information. Contact the group that ***
*** provided you with these symbols if you need this command to ***
*** work. ***
*** ***
*** Type referenced: nt!KPRCB ***
*** ***
*************************************************************************
*************************************************************************
*** ***
*** ***
*** Your debugger is not using the correct symbols ***
*** ***
*** In order for this command to work properly, your symbol path ***
*** must point to .pdb files that have full type information. ***
*** ***
*** Certain .pdb files (such as the public OS symbols) do not ***
*** contain the required information. Contact the group that ***
*** provided you with these symbols if you need this command to ***
*** work. ***
*** ***
*** Type referenced: nt!_KPRCB ***
*** ***
*************************************************************************
*************************************************************************
*** ***
*** ***
*** Your debugger is not using the correct symbols ***
*** ***
*** In order for this command to work properly, your symbol path ***
*** must point to .pdb files that have full type information. ***
*** ***
*** Certain .pdb files (such as the public OS symbols) do not ***
*** contain the required information. Contact the group that ***
*** provided you with these symbols if you need this command to ***
*** work. ***
*** ***
*** Type referenced: nt!_KPRCB ***
*** ***
*************************************************************************
*************************************************************************
*** ***
*** ***
*** Your debugger is not using the correct symbols ***
*** ***
*** In order for this command to work properly, your symbol path ***
*** must point to .pdb files that have full type information. ***
*** ***
*** Certain .pdb files (such as the public OS symbols) do not ***
*** contain the required information. Contact the group that ***
*** provided you with these symbols if you need this command to ***
*** work. ***
*** ***
*** Type referenced: nt!_KPRCB ***
*** ***
*************************************************************************
*************************************************************************
*** ***
*** ***
*** Your debugger is not using the correct symbols ***
*** ***
*** In order for this command to work properly, your symbol path ***
*** must point to .pdb files that have full type information. ***
*** ***
*** Certain .pdb files (such as the public OS symbols) do not ***
*** contain the required information. Contact the group that ***
*** provided you with these symbols if you need this command to ***
*** work. ***
*** ***
*** Type referenced: nt!_KPRCB ***
*** ***
*************************************************************************
*********************************************************************
* Symbols can not be loaded because symbol path is not initialized. *
* *
* The Symbol Path can be set by: *
* using the _NT_SYMBOL_PATH environment variable. *
* using the -y <symbol_path> argument when starting the debugger. *
* using .sympath and .sympath+ *
*********************************************************************
*********************************************************************
* Symbols can not be loaded because symbol path is not initialized. *
* *
* The Symbol Path can be set by: *
* using the _NT_SYMBOL_PATH environment variable. *
* using the -y <symbol_path> argument when starting the debugger. *
* using .sympath and .sympath+ *
*********************************************************************

MODULE_NAME: win32k

FAULTING_MODULE: 8300a000 nt

DEBUG_FLR_IMAGE_TIMESTAMP: 498f9e9d

WRITE_ADDRESS: unable to get nt!MmSpecialPoolStart
unable to get nt!MmSpecialPoolEnd
unable to get nt!MmPoolCodeStart
unable to get nt!MmPoolCodeEnd
00000000

CURRENT_IRQL: 1b

FAULTING_IP:
nt+39a7f
83043a7f ?? ???

CUSTOMER_CRASH_COUNT: 1

DEFAULT_BUCKET_ID: WRONG_SYMBOLS

BUGCHECK_STR: 0xA

LAST_CONTROL_TRANSFER: from 83043a7f to 83064d24

STACK_TEXT:
WARNING: Stack unwind information not available. Following frames may be
wrong.
af34dac4 83043a7f badb0d00 00000000 83141a08 nt+0x5ad24
af34db44 830c5714 fe49eb40 af34db64 85d99184 nt+0x39a7f
af34db70 8322ea40 fe49eb40 af34dbb8 fc495008 nt+0xbb714
af34dbd0 8320314b fe49eb40 04b80000 00000000 nt+0x224a40
af34dbe4 98183f3e fe49eb40 04b80000 fc282e60 nt+0x1f914b
af34dc14 9818e83a af34dce4 af34dc5c fc2e97d8 win32k+0xd3f3e
af34dc28 9818ec64 af34dcf0 0000045c 0000045c win32k+0xde83a
af34dc40 9818f740 af34dcf0 af34dce4 3b011852 win32k+0xdec64
af34dd10 83061a1a 3b011852 00000000 0000012e win32k+0xdf740
af34dd44 771f9a94 badb0d00 02a6cac8 00000000 nt+0x57a1a
af34dd48 badb0d00 02a6cac8 00000000 00000000 0x771f9a94
af34dd4c 02a6cac8 00000000 00000000 00000000 0xbadb0d00
af34dd50 00000000 00000000 00000000 00000000 0x2a6cac8


STACK_COMMAND: kb

FOLLOWUP_IP:
win32k+d3f3e
98183f3e ?? ???

SYMBOL_STACK_INDEX: 5

SYMBOL_NAME: win32k+d3f3e

FOLLOWUP_NAME: MachineOwner

IMAGE_NAME: win32k.sys

BUCKET_ID: WRONG_SYMBOLS

Followup: MachineOwner
---------


SO a lot of "Your debugger is not using the correct symbols" can be seen.
Where do I get those and are they going to help?

I'm searching for mark russinovich's post in which he explains in detail
about some fellow colleagu who identified the device through the dump file
(using windbg) and gets the latest drivers to fix the problem. I read it
once but have to search for it.
 
S

Steve McGarrett

excuse me?

You made your first post. You reposted - by replying to your original
post (without additional comment) and quoting it barely 2 hours later.

I think Manny was trying to tell you to be patient.
 
M

Manny Weisbord

Abubakar said:
excuse me?

You waited only two hours to repost your problem. Are you under the
impression that this place has someone at your beck and call 24x7 like
the drive-through window at your local fast food restaurant?
 
A

Abubakar

Manny Weisbord said:
You waited only two hours to repost your problem. Are you under the
impression that this place has someone at your beck and call 24x7 like
the drive-through window at your local fast food restaurant?

no, no way. I wanted to post the diagnostic messages as a reply to my own
post but accidentally hit some shortcut key and the post got submitted. If I
would be getting impatient than I would have rephrased the subject and post
it as a new question.
 
T

Timothy Davis [MSFT]

Bugcheck IRQL_NOT_LESS_OR_EQUAL has several reasons to be thrown. This
particular instance was caused by a kernel driver dereferencing a null
pointer.

Unfortunately, I don't see an obvious culprit in the crash dump file - as
the binary that dereferenced the pointer is Win32k.sys. In situations like
this, Win3k.sys is most likely the victim of another kernel driver doing
something bad.

To see what kinds of drivers/software you may have recently installed, you
can look at the [%windir%\inf\setupapi.*.log] files.

It appears that you do not have a driver loaded for your display adapter -
but instead are using VGA.sys. Is there a reason for this?

Also, I could not find any information on the kernel driver awgqdlyk.sys,
which is loaded on your machine. You can find this file in your
[%windir%\system32\drivers] folder. You might want to see what that file
is, and where it came from.
 
A

Abubakar

According to my information I'm using nvidia drivers version 177.84 for the
graphics card geforce 8400m gs.

I searched for the file "awgqdlyk.sys" but couldnt find it in my pc.

I just looked at the log files you mentioned but they are huge and I will
take some time understanding those. I searched for the "awgqdlyk.sys" in the
logs but it could not find it in any log. Any possibility you didnt
misspelled awgqdlyk.sys?

The system has not crashed since more than a day.

Timothy Davis said:
Bugcheck IRQL_NOT_LESS_OR_EQUAL has several reasons to be thrown. This
particular instance was caused by a kernel driver dereferencing a null
pointer.

Unfortunately, I don't see an obvious culprit in the crash dump file - as
the binary that dereferenced the pointer is Win32k.sys. In situations
like this, Win3k.sys is most likely the victim of another kernel driver
doing something bad.

To see what kinds of drivers/software you may have recently installed, you
can look at the [%windir%\inf\setupapi.*.log] files.

It appears that you do not have a driver loaded for your display adapter -
but instead are using VGA.sys. Is there a reason for this?

Also, I could not find any information on the kernel driver awgqdlyk.sys,
which is loaded on your machine. You can find this file in your
[%windir%\system32\drivers] folder. You might want to see what that file
is, and where it came from.


Timothy Davis said:
Hi Abubakar,

Please upload the crash dump file to the following URL:

https://sftus.one.microsoft.com/choosetransfer.aspx?key=1fa89359-ae3c-444f-8f40-cbd3adb352c8


Please note: This file transfer session will be removed once you upload
the file.
 
R

Rick Rogers

Randomly named .sys files, especially those located under
C:\Windows\System32\Drivers, are usually trojans. These certainly have been
known to cause these kernel crashes.

--
Best of Luck,

Rick Rogers, aka "Nutcase" - Microsoft MVP

Windows help - www.rickrogers.org
My thoughts http://rick-mvp.blogspot.com

Timothy Davis said:
Bugcheck IRQL_NOT_LESS_OR_EQUAL has several reasons to be thrown. This
particular instance was caused by a kernel driver dereferencing a null
pointer.

Unfortunately, I don't see an obvious culprit in the crash dump file - as
the binary that dereferenced the pointer is Win32k.sys. In situations
like this, Win3k.sys is most likely the victim of another kernel driver
doing something bad.

To see what kinds of drivers/software you may have recently installed, you
can look at the [%windir%\inf\setupapi.*.log] files.

It appears that you do not have a driver loaded for your display adapter -
but instead are using VGA.sys. Is there a reason for this?

Also, I could not find any information on the kernel driver awgqdlyk.sys,
which is loaded on your machine. You can find this file in your
[%windir%\system32\drivers] folder. You might want to see what that file
is, and where it came from.


Timothy Davis said:
Hi Abubakar,

Please upload the crash dump file to the following URL:

https://sftus.one.microsoft.com/choosetransfer.aspx?key=1fa89359-ae3c-444f-8f40-cbd3adb352c8


Please note: This file transfer session will be removed once you upload
the file.
 
T

Timothy Davis [MSFT]

Unless the crash dump is corrupted (doesn't appear to be), then no, it is
not misspelled.

8dc05000 8dc6b000 awgqdlyk (deferred)
Image path: \SystemRoot\System32\Drivers\awgqdlyk.SYS
Image name: awgqdlyk.SYS
Timestamp: Sun Jun 03 22:12:12 2007 (46639F2C)
CheckSum: 0005673F
ImageSize: 00066000
Translations: 0000.04b0 0000.04e0 0409.04b0 0409.04e0

If you boot from your Vista installation DVD (or even the Win7 RC DVD),
there is an option to "repair your PC". If you select this, you should be
able to get to a window that will give you several options - one of which is
to open a command prompt. You can also use a linux live CD to do this.

From there, you can search for this .sys file. If you find it here, but not
when running Windows, then likely you have a virus. If you are able to find
this file, try copying it to a flash drive - I would be interested in it if
you could send it to me.



Abubakar said:
According to my information I'm using nvidia drivers version 177.84 for
the graphics card geforce 8400m gs.

I searched for the file "awgqdlyk.sys" but couldnt find it in my pc.

I just looked at the log files you mentioned but they are huge and I will
take some time understanding those. I searched for the "awgqdlyk.sys" in
the logs but it could not find it in any log. Any possibility you didnt
misspelled awgqdlyk.sys?

The system has not crashed since more than a day.

Timothy Davis said:
Bugcheck IRQL_NOT_LESS_OR_EQUAL has several reasons to be thrown. This
particular instance was caused by a kernel driver dereferencing a null
pointer.

Unfortunately, I don't see an obvious culprit in the crash dump file - as
the binary that dereferenced the pointer is Win32k.sys. In situations
like this, Win3k.sys is most likely the victim of another kernel driver
doing something bad.

To see what kinds of drivers/software you may have recently installed,
you can look at the [%windir%\inf\setupapi.*.log] files.

It appears that you do not have a driver loaded for your display
adapter - but instead are using VGA.sys. Is there a reason for this?

Also, I could not find any information on the kernel driver awgqdlyk.sys,
which is loaded on your machine. You can find this file in your
[%windir%\system32\drivers] folder. You might want to see what that file
is, and where it came from.


Timothy Davis said:
Hi Abubakar,

Please upload the crash dump file to the following URL:

https://sftus.one.microsoft.com/choosetransfer.aspx?key=1fa89359-ae3c-444f-8f40-cbd3adb352c8


Please note: This file transfer session will be removed once you upload
the file.

right now i'm on this page:
http://www.microsoft.com/whdc/DevTools/Debugging/symbolpkg.mspx

Hi, Abubakar.

Rick is the expert here, not me. But I think the heart of your
problem is here:

Problem signature:
Problem Event Name: BlueScreen
OS Version: 6.0.6001.2.1.0.256.1
Locale ID: 1033

Additional information about the problem:
BCCode: a
BCP1: 00000000
BCP2: 0000001B
BCP3: 00000001
BCP4: 83043A7F
OS Version: 6_0_6001
Service Pack: 1_0
Product: 256_1

Your "BCCode: a" corresponds to Stop Code 0x0A. My starting point for
researching Stop Codes is:
TROUBLESHOOTING WINDOWS STOP MESSAGES
http://www.aumha.org/a/stop.htm

One of the first listings there is:
0x0000000A: IRQL_NOT_LESS_OR_EQUAL

There are many possible causes and solutions for this error,
"Typically due to a bad driver, or faulty or incompatible hardware or
software."

This should give you some ideas of the kinds of questions Rick will
need you to answer in your next post.

RC
--
R. C. White, CPA
San Marcos, TX
(e-mail address removed)
Microsoft Windows MVP
Windows Live Mail 2009 (14.0.8064.0206) in Win7 Ultimate x64 RC 7100


Hi,

The details of the blue screen are crucial to identifying the
problem. Error codes, parameters, and any modules involved can all
provide clues. Check the event log for details and post them.

The second "crash" sounds more like a hardware freeze, not an
operating system issue but rather a problem component. Could also be
related to overheating.

--
Best of Luck,

Rick Rogers, aka "Nutcase" - Microsoft MVP

Windows help - www.rickrogers.org
My thoughts http://rick-mvp.blogspot.com

Hi,

My vista crashed 2 times today. This is probably the first time
since december 2007 when I bought my laptop with Vista. I know the
usual question would be to check if I installed some new drivers or
any hardware device but thats not the case as far as I know. Its a
Vista Ultimate system, with a cor 2 duo 2.ghz, 2gb ram, wifi etc.
The first time it crashed today was with a blue screen with the
usual bsod stuff printed on it (I know it can be different stuff
written there but right now I dont know the exact stuff other than
'check for new hardware installation' msg). i was running visual
studio 2005 doing asp.net development with it. The second time when
it crashed it hanged and the computer made one beep sound, but no
bsod, the computer just didnt reply, and here also I was debugging
something in asp.net in vs 2k5.

Is there any software that that provide me some information that
may help me find out exactly whats wrong? Some internal diagnostic
software that maybe ships with vista?

regards.



event log is so huge, there r enteries about every second ! And
search was taking time. I will search for more, but after the second
crash the following was displayed when i logged in:
Problem signature:
Problem Event Name: BlueScreen
OS Version: 6.0.6001.2.1.0.256.1
Locale ID: 1033

Additional information about the problem:
BCCode: a
BCP1: 00000000
BCP2: 0000001B
BCP3: 00000001
BCP4: 83043A7F
OS Version: 6_0_6001
Service Pack: 1_0
Product: 256_1

Files that help describe the problem:
C:\Windows\Minidump\Mini051409-01.dmp
C:\Users\Ab\AppData\Local\Temp\WER-99450-0.sysdata.xml
C:\Users\Ab\AppData\Local\Temp\WER192A.tmp.version.txt

Read our privacy statement:
http://go.microsoft.com/fwlink/?linkid=50163&clcid=0x0409

The WER* files are not at there mentioned place, but the dump file is
there. I remember reading someone's blog that the dump file can be
opened with windbg ?

In the meanwhile the system crashed one more time with blue screen.

..ab
 
F

Frank Holman

Abubakar said:
oh thats nasty. Vista should have some rules to detect such patterns and
prompt the user. Or maybe some setting which we could turn on to enable UAC
like prompts if anything goes in n out of such critical folders.

Anyway I have already migrated 90% of my stuff to Windows 7 rc1, but this
installation of Vista is also going to be used for some time.

You ARE aware that when the final release comes out, your RC1 setup
will be worthless, right?
Rick Rogers said:
Randomly named .sys files, especially those located under
C:\Windows\System32\Drivers, are usually trojans. These certainly have
been known to cause these kernel crashes.

--
Best of Luck,

Rick Rogers, aka "Nutcase" - Microsoft MVP

Windows help - www.rickrogers.org
My thoughts http://rick-mvp.blogspot.com

Timothy Davis said:
Bugcheck IRQL_NOT_LESS_OR_EQUAL has several reasons to be thrown. This
particular instance was caused by a kernel driver dereferencing a null
pointer.

Unfortunately, I don't see an obvious culprit in the crash dump file - as
the binary that dereferenced the pointer is Win32k.sys. In situations
like this, Win3k.sys is most likely the victim of another kernel driver
doing something bad.

To see what kinds of drivers/software you may have recently installed,
you can look at the [%windir%\inf\setupapi.*.log] files.

It appears that you do not have a driver loaded for your display
adapter - but instead are using VGA.sys. Is there a reason for this?

Also, I could not find any information on the kernel driver awgqdlyk.sys,
which is loaded on your machine. You can find this file in your
[%windir%\system32\drivers] folder. You might want to see what that file
is, and where it came from.


Hi Abubakar,

Please upload the crash dump file to the following URL:

https://sftus.one.microsoft.com/choosetransfer.aspx?key=1fa89359-ae3c-444f-8f40-cbd3adb352c8


Please note: This file transfer session will be removed once you upload
the file.

right now i'm on this page:
http://www.microsoft.com/whdc/DevTools/Debugging/symbolpkg.mspx

Hi, Abubakar.

Rick is the expert here, not me. But I think the heart of your
problem is here:

Problem signature:
Problem Event Name: BlueScreen
OS Version: 6.0.6001.2.1.0.256.1
Locale ID: 1033

Additional information about the problem:
BCCode: a
BCP1: 00000000
BCP2: 0000001B
BCP3: 00000001
BCP4: 83043A7F
OS Version: 6_0_6001
Service Pack: 1_0
Product: 256_1

Your "BCCode: a" corresponds to Stop Code 0x0A. My starting point for
researching Stop Codes is:
TROUBLESHOOTING WINDOWS STOP MESSAGES
http://www.aumha.org/a/stop.htm

One of the first listings there is:
0x0000000A: IRQL_NOT_LESS_OR_EQUAL

There are many possible causes and solutions for this error,
"Typically due to a bad driver, or faulty or incompatible hardware or
software."

This should give you some ideas of the kinds of questions Rick will
need you to answer in your next post.

RC
--
R. C. White, CPA
San Marcos, TX
(e-mail address removed)
Microsoft Windows MVP
Windows Live Mail 2009 (14.0.8064.0206) in Win7 Ultimate x64 RC 7100


Hi,

The details of the blue screen are crucial to identifying the
problem. Error codes, parameters, and any modules involved can all
provide clues. Check the event log for details and post them.

The second "crash" sounds more like a hardware freeze, not an
operating system issue but rather a problem component. Could also be
related to overheating.

--
Best of Luck,

Rick Rogers, aka "Nutcase" - Microsoft MVP

Windows help - www.rickrogers.org
My thoughts http://rick-mvp.blogspot.com

Hi,

My vista crashed 2 times today. This is probably the first time
since december 2007 when I bought my laptop with Vista. I know the
usual question would be to check if I installed some new drivers or
any hardware device but thats not the case as far as I know. Its a
Vista Ultimate system, with a cor 2 duo 2.ghz, 2gb ram, wifi etc.
The first time it crashed today was with a blue screen with the
usual bsod stuff printed on it (I know it can be different stuff
written there but right now I dont know the exact stuff other than
'check for new hardware installation' msg). i was running visual
studio 2005 doing asp.net development with it. The second time when
it crashed it hanged and the computer made one beep sound, but no
bsod, the computer just didnt reply, and here also I was debugging
something in asp.net in vs 2k5.

Is there any software that that provide me some information that
may help me find out exactly whats wrong? Some internal diagnostic
software that maybe ships with vista?

regards.



event log is so huge, there r enteries about every second ! And
search was taking time. I will search for more, but after the second
crash the following was displayed when i logged in:
Problem signature:
Problem Event Name: BlueScreen
OS Version: 6.0.6001.2.1.0.256.1
Locale ID: 1033

Additional information about the problem:
BCCode: a
BCP1: 00000000
BCP2: 0000001B
BCP3: 00000001
BCP4: 83043A7F
OS Version: 6_0_6001
Service Pack: 1_0
Product: 256_1

Files that help describe the problem:
C:\Windows\Minidump\Mini051409-01.dmp
C:\Users\Ab\AppData\Local\Temp\WER-99450-0.sysdata.xml
C:\Users\Ab\AppData\Local\Temp\WER192A.tmp.version.txt

Read our privacy statement:
http://go.microsoft.com/fwlink/?linkid=50163&clcid=0x0409

The WER* files are not at there mentioned place, but the dump file is
there. I remember reading someone's blog that the dump file can be
opened with windbg ?

In the meanwhile the system crashed one more time with blue screen.

..ab
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Top