I have some experience with programming, I am entering my 4th year in college as a CS Major, however, this is beyond me. I had to beat my brains out just to be able to LOOK at this, but I still get nothing out of it.
I will just cut to the chase.
While playing World of Warcraft, I constantly get a BSOD that restarts my computer before I get the chance to read it. Fortunately I have managed to catch just one line of the screen, something like:
IRQL_NOT_LESS_OR_EQUAL_TO.
I googled it and it gave me a blue screen screenshot that looked right. Then I learned about debugging programs and how to look in the minidump files, bla bla bla, and now I am here.
The most recent file looks like this. I have since uninstalled my Daemon Tools, wondering if that may solve the problem, but I am not holding my breath at all. If anyone can tell me what is wrong, and can help me at all, I would be very grateful.
Microsoft (R) Windows Debugger Version 6.7.0005.1
Copyright (c) Microsoft Corporation. All rights reserved.
Loading Dump File [C:\WINDOWS\Minidump\Mini071007-02.dmp]
Mini Kernel Dump File: Only registers and stack trace are available
Symbol search path is: *** Invalid ***
************************************************** **************************
* Symbol loading may be unreliable without a symbol search path. *
* Use .symfix to have the debugger choose a symbol path. *
* After setting your symbol path, use .reload to refresh symbol locations. *
************************************************** **************************
Executable search path is:
************************************************** *******************
* Symbols can not be loaded because symbol path is not initialized. *
* *
* The Symbol Path can be set by: *
* using the _NT_SYMBOL_PATH environment variable. *
* using the -y <symbol_path> argument when starting the debugger. *
* using .sympath and .sympath+ *
************************************************** *******************
Unable to load image ntoskrnl.exe, Win32 error 0n2
*** WARNING: Unable to verify timestamp for ntoskrnl.exe
*** ERROR: Module load completed but symbols could not be loaded for ntoskrnl.exe
Windows XP Kernel Version 2600 (Service Pack 2) MP (2 procs) Free x86 compatible
Product: WinNt, suite: TerminalServer SingleUserTS Personal
Kernel base = 0x804d7000 PsLoadedModuleList = 0x8055c700
Debug session time: Tue Jul 10 00:24:18.609 2007 (GMT-4)
System Uptime: 0 days 0:06:28.329
************************************************** *******************
* Symbols can not be loaded because symbol path is not initialized. *
* *
* The Symbol Path can be set by: *
* using the _NT_SYMBOL_PATH environment variable. *
* using the -y <symbol_path> argument when starting the debugger. *
* using .sympath and .sympath+ *
************************************************** *******************
Unable to load image ntoskrnl.exe, Win32 error 0n2
*** WARNING: Unable to verify timestamp for ntoskrnl.exe
*** ERROR: Module load completed but symbols could not be loaded for ntoskrnl.exe
Loading Kernel Symbols
.................................................. .................................................. ..............................
Loading User Symbols
Loading unloaded module list
..........
Unable to load image USBPORT.SYS, Win32 error 0n2
*** WARNING: Unable to verify timestamp for USBPORT.SYS
*** ERROR: Module load completed but symbols could not be loaded for USBPORT.SYS
************************************************** *****************************
* *
* Bugcheck Analysis *
* *
************************************************** *****************************
Use !analyze -v to get detailed debugging information.
BugCheck 100000D1, {ff084d9d, 1e, 0, ba25ace6}
***** Kernel symbols are WRONG. Please fix symbols to do analysis.
Probably caused by : USBPORT.SYS ( USBPORT+bce6 )
Followup: MachineOwner
---------
CCT
July 10th, 2007, 08:09 AM
I suspect one of your USB port devices is sharing an IRQ and is in conflict when operating a graphics intensive operation.
Check IRQ sharing in device manager, look for what shares with your vid card and switch USB devices around, etc.
NooNoo
July 10th, 2007, 12:50 PM
Also, turn off automatically restart so the error stays put until you turn off the machine...
Right click my computer, properties, advanced tab, start up and recovery settings button, uncheck automatically restart (near the bottom).
IRQL stop errors are usually about bad drivers.
Terratoch
July 10th, 2007, 07:14 PM
Thank you for the tips, but as for the IRQ Conflicts, I could find nothing. But I have yet ANOTHER minidump. Any analysis and advice as to how to resolve my problem would be even more appreciated.
Microsoft (R) Windows Debugger Version 6.7.0005.1
Copyright (c) Microsoft Corporation. All rights reserved.
Loading Dump File [C:\WINDOWS\Minidump\Mini071007-05.dmp]
Mini Kernel Dump File: Only registers and stack trace are available
Symbol search path is: *** Invalid ***
************************************************** **************************
* Symbol loading may be unreliable without a symbol search path. *
* Use .symfix to have the debugger choose a symbol path. *
* After setting your symbol path, use .reload to refresh symbol locations. *
************************************************** **************************
Executable search path is:
************************************************** *******************
* Symbols can not be loaded because symbol path is not initialized. *
* *
* The Symbol Path can be set by: *
* using the _NT_SYMBOL_PATH environment variable. *
* using the -y <symbol_path> argument when starting the debugger. *
* using .sympath and .sympath+ *
************************************************** *******************
Unable to load image ntoskrnl.exe, Win32 error 0n2
*** WARNING: Unable to verify timestamp for ntoskrnl.exe
*** ERROR: Module load completed but symbols could not be loaded for ntoskrnl.exe
Windows XP Kernel Version 2600 (Service Pack 2) MP (2 procs) Free x86 compatible
Product: WinNt, suite: TerminalServer SingleUserTS Personal
Kernel base = 0x804d7000 PsLoadedModuleList = 0x8055c700
Debug session time: Tue Jul 10 12:56:08.765 2007 (GMT-4)
System Uptime: 0 days 9:22:34.496
************************************************** *******************
* Symbols can not be loaded because symbol path is not initialized. *
* *
* The Symbol Path can be set by: *
* using the _NT_SYMBOL_PATH environment variable. *
* using the -y <symbol_path> argument when starting the debugger. *
* using .sympath and .sympath+ *
************************************************** *******************
Unable to load image ntoskrnl.exe, Win32 error 0n2
*** WARNING: Unable to verify timestamp for ntoskrnl.exe
*** ERROR: Module load completed but symbols could not be loaded for ntoskrnl.exe
Loading Kernel Symbols
.................................................. .................................................. ................................
Loading User Symbols
Loading unloaded module list
................
************************************************** *****************************
* *
* Bugcheck Analysis *
* *
************************************************** *****************************
Use !analyze -v to get detailed debugging information.
BugCheck B8, {0, 0, 0, 0}
***** Kernel symbols are WRONG. Please fix symbols to do analysis.
*** WARNING: Unable to verify timestamp for hal.dll
*** ERROR: Module load completed but symbols could not be loaded for hal.dll
*** WARNING: Unable to verify timestamp for NDIS.sys
*** ERROR: Module load completed but symbols could not be loaded for NDIS.sys
*** WARNING: Unable to verify timestamp for vsdatant.sys
*** ERROR: Module load completed but symbols could not be loaded for vsdatant.sys
Probably caused by : vsdatant.sys ( vsdatant+35789 )
ATTEMPTED_SWITCH_FROM_DPC (b8)
A wait operation, attach process, or yield was attempted from a DPC routine.
This is an illegal operation and the stack track will lead to the offending
code and original DPC routine.
Arguments:
Arg1: 00000000, Original thread which is the cause of the failure
Arg2: 00000000, New thread
Arg3: 00000000, Stack address of the original thread
Arg4: 00000000
Debugging Details:
------------------
***** Kernel symbols are WRONG. Please fix symbols to do analysis.
Thanks someone said the problem may be virus related and I wanted to attack it from every angle. Could the problem be related to my new CD/DVD RW Drive? It is a SATA drive: LITE-ON DVDRW LH-20A1S. Looking in I just found something interesting. It was mentioned that the problem may be related to an IRQ Conflict between my video card and the USB ports. I checked but the video card shows IRQ 16, and it does not share it with... anything that I could find. However, in the device manager, it shows my NVIDIA nForce 590/570/550 Serial ATA Controller on IRQ 22, which is the same IRQ as the Standard Enhanced PCI USB Host Controller. I will submit a screenshot. I really have no idea what I'm talking about, I'm just providing all the information I can find and hoping that a solution can be devised from what I am finding. In case it helps, my motherboard is an ASUS M2N32-SLI Deluxe Wireless Edition Socket AM2 NVIDIA nForce 590 SLI MCP ATX AMD Motherboard (http://www.newegg.com/Product/Product.asp?item=N82E16813131011), my Processor is an AMD Athlon 64 X2 5200+ Windsor 2.6GHz 2 x 1MB L2 Cache Socket AM2 Processor (http://www.newegg.com/Product/Product.asp?item=N82E16819103759) and my video card is an ASUS EN7950GT/HTDP/512M GeForce 7950GT 512MB 256-bit GDDR3 PCI Express x16 HDCP Splendid Video Card (http://www.newegg.com/Product/Product.asp?item=N82E16814121025). In looking at everything, I see a bunch of IRQ that are the same. I have no idea what this means, or how to fix it. Any and all help in resolving this will be much appreciated. And the newest error message that I found is: A Wait Operation, Attach Process, or Yield was attempted from a DPC Routine. Another solution attempt I tried was using ForceASPI. I have since removed it, if this was a mistake, please let me know so I can re-do it.
Here is the screenshot with all the information that I believe was relevant, and that could fit.
http://aycu13.webshots.com/image/19452/2003793628185753565_rs.jpg
NooNoo
July 11th, 2007, 07:22 AM
With the best will in the world, you are over thinking this.
The screen shot gives very little useful information. The full stop error, however would be very useful.
Since vsdatant.sys is part of zone alarm firewall have you thought about disabling zone alarm and trying to reproduce the BSOD?
Have you looked to see if there are any updates/patches for your version of ZA?
Have you checked the event viewer?
Terratoch
July 11th, 2007, 08:11 AM
I removed Zone Alarm, and that got rid of the old error message, but then I got a new one:
Microsoft (R) Windows Debugger Version 6.7.0005.1
Copyright (c) Microsoft Corporation. All rights reserved.
Loading Dump File [C:\WINDOWS\Minidump\Mini071107-02.dmp]
Mini Kernel Dump File: Only registers and stack trace are available
Symbol search path is: *** Invalid ***
************************************************** **************************
* Symbol loading may be unreliable without a symbol search path. *
* Use .symfix to have the debugger choose a symbol path. *
* After setting your symbol path, use .reload to refresh symbol locations. *
************************************************** **************************
Executable search path is:
************************************************** *******************
* Symbols can not be loaded because symbol path is not initialized. *
* *
* The Symbol Path can be set by: *
* using the _NT_SYMBOL_PATH environment variable. *
* using the -y <symbol_path> argument when starting the debugger. *
* using .sympath and .sympath+ *
************************************************** *******************
Unable to load image ntoskrnl.exe, Win32 error 0n2
*** WARNING: Unable to verify timestamp for ntoskrnl.exe
*** ERROR: Module load completed but symbols could not be loaded for ntoskrnl.exe
Windows XP Kernel Version 2600 (Service Pack 2) MP (2 procs) Free x86 compatible
Product: WinNt, suite: TerminalServer SingleUserTS Personal
Kernel base = 0x804d7000 PsLoadedModuleList = 0x8055c700
Debug session time: Wed Jul 11 02:36:25.328 2007 (GMT-4)
System Uptime: 0 days 1:04:25.936
************************************************** *******************
* Symbols can not be loaded because symbol path is not initialized. *
* *
* The Symbol Path can be set by: *
* using the _NT_SYMBOL_PATH environment variable. *
* using the -y <symbol_path> argument when starting the debugger. *
* using .sympath and .sympath+ *
************************************************** *******************
Unable to load image ntoskrnl.exe, Win32 error 0n2
*** WARNING: Unable to verify timestamp for ntoskrnl.exe
*** ERROR: Module load completed but symbols could not be loaded for ntoskrnl.exe
Loading Kernel Symbols
.................................................. .................................................. .........................
Loading User Symbols
Loading unloaded module list
.......................
************************************************** *****************************
* *
* Bugcheck Analysis *
* *
************************************************** *****************************
Use !analyze -v to get detailed debugging information.
BugCheck B8, {0, 0, 0, 0}
***** Kernel symbols are WRONG. Please fix symbols to do analysis.
*** WARNING: Unable to verify timestamp for hal.dll
*** ERROR: Module load completed but symbols could not be loaded for hal.dll
*** WARNING: Unable to verify timestamp for tcpip.sys
*** ERROR: Module load completed but symbols could not be loaded for tcpip.sys
Probably caused by : tcpip.sys ( tcpip+8247 )
ATTEMPTED_SWITCH_FROM_DPC (b8)
A wait operation, attach process, or yield was attempted from a DPC routine.
This is an illegal operation and the stack track will lead to the offending
code and original DPC routine.
Arguments:
Arg1: 00000000, Original thread which is the cause of the failure
Arg2: 00000000, New thread
Arg3: 00000000, Stack address of the original thread
Arg4: 00000000
Debugging Details:
------------------
***** Kernel symbols are WRONG. Please fix symbols to do analysis.
1: kd> lmvm tcpip
start end module name
b7493000 b74ead80 tcpip T (no symbols)
Loaded symbol image file: tcpip.sys
Image path: tcpip.sys
Image name: tcpip.sys
Timestamp: Thu Apr 20 07:51:47 2006 (444775D3)
CheckSum: 0005F865
ImageSize: 00057D80
Translations: 0000.04b0 0000.04e0 0409.04b0 0409.04e0
1: kd> lmvm nt
start end module name
804d7000 806e2000 nt T (no symbols)
Loaded symbol image file: ntoskrnl.exe
Image path: ntoskrnl.exe
Image name: ntoskrnl.exe
Timestamp: Wed Feb 28 03:38:53 2007 (45E53F9D)
CheckSum: 001F873F
ImageSize: 0020B000
Translations: 0000.04b0 0000.04e0 0409.04b0 0409.04e0
That is 90% greek to me.
This came when I alt-tabbed out of the game with Firefox up. I also went into my machine and tinkered around a bit, and learned that two of the cases USB ports were not plugged into the motherboard. I had opened it with the intention of unplugging them to see if that would help at all, but since this was already the case, I plugged them back in and moved my USB Mouse and Keyboard to the front two USB ports.
NooNoo
July 11th, 2007, 08:16 AM
Either your ethernet card is dying or the driver is corrupt - start with a new driver.
Terratoch
July 11th, 2007, 08:19 AM
i sincerely hope not this motherboard is brand new. I will try a new driver, but it has 2 ethernet ports.
Do you know what this 1394 Net Adapter is? Could that be causing the problem?
NooNoo
July 11th, 2007, 08:36 AM
drivers are here (http://support.asus.com/download/download.aspx?SLanguage=en-us&model=M2N32-SLI%20Deluxe)
Terratoch
July 11th, 2007, 08:47 AM
I will try them out. Thanks very much for all the assistance.
NooNoo
July 11th, 2007, 12:34 PM
1394 is the firewire connection, it can be disabled if you don't want to use it for networking without affecting its function for i-link
Terratoch
July 11th, 2007, 10:18 PM
So far so good. Thanks to everyone for their suggestions I haven't experienced a blue screen for a few hours now, which is better than before when I was getting one about once every 20 minutes or less. I'm getting ready to exhale my held breath.
Terratoch
July 11th, 2007, 10:33 PM
Famous last words... Not 15 minutes later, another bluescreen.
DRIVER_IRQL_NOT_LESS_OR_EQUAL.
Microsoft (R) Windows Debugger Version 6.7.0005.1
Copyright (c) Microsoft Corporation. All rights reserved.
Loading Dump File [C:\WINDOWS\Minidump\Mini071107-03.dmp]
Mini Kernel Dump File: Only registers and stack trace are available
Symbol search path is: *** Invalid ***
************************************************** **************************
* Symbol loading may be unreliable without a symbol search path. *
* Use .symfix to have the debugger choose a symbol path. *
* After setting your symbol path, use .reload to refresh symbol locations. *
************************************************** **************************
Executable search path is:
************************************************** *******************
* Symbols can not be loaded because symbol path is not initialized. *
* *
* The Symbol Path can be set by: *
* using the _NT_SYMBOL_PATH environment variable. *
* using the -y <symbol_path> argument when starting the debugger. *
* using .sympath and .sympath+ *
************************************************** *******************
Unable to load image ntoskrnl.exe, Win32 error 0n2
*** WARNING: Unable to verify timestamp for ntoskrnl.exe
*** ERROR: Module load completed but symbols could not be loaded for ntoskrnl.exe
Windows XP Kernel Version 2600 (Service Pack 2) MP (2 procs) Free x86 compatible
Product: WinNt, suite: TerminalServer SingleUserTS Personal
Kernel base = 0x804d7000 PsLoadedModuleList = 0x8055c700
Debug session time: Wed Jul 11 22:29:25.093 2007 (GMT-4)
System Uptime: 0 days 1:30:44.812
************************************************** *******************
* Symbols can not be loaded because symbol path is not initialized. *
* *
* The Symbol Path can be set by: *
* using the _NT_SYMBOL_PATH environment variable. *
* using the -y <symbol_path> argument when starting the debugger. *
* using .sympath and .sympath+ *
************************************************** *******************
Unable to load image ntoskrnl.exe, Win32 error 0n2
*** WARNING: Unable to verify timestamp for ntoskrnl.exe
*** ERROR: Module load completed but symbols could not be loaded for ntoskrnl.exe
Loading Kernel Symbols
.................................................. .................................................. ..............................
Loading User Symbols
Loading unloaded module list
...............
Unable to load image USBPORT.SYS, Win32 error 0n2
*** WARNING: Unable to verify timestamp for USBPORT.SYS
*** ERROR: Module load completed but symbols could not be loaded for USBPORT.SYS
************************************************** *****************************
* *
* Bugcheck Analysis *
* *
************************************************** *****************************
Use !analyze -v to get detailed debugging information.
BugCheck 100000D1, {ff084d9d, 1e, 0, ba258ce6}
***** Kernel symbols are WRONG. Please fix symbols to do analysis.
DRIVER_IRQL_NOT_LESS_OR_EQUAL (d1)
An attempt was made to access a pageable (or completely invalid) address at an
interrupt request level (IRQL) that is too high. This is usually
caused by drivers using improper addresses.
If kernel debugger is available get stack backtrace.
Arguments:
Arg1: ff084d9d, memory referenced
Arg2: 0000001e, IRQL
Arg3: 00000000, value 0 = read operation, 1 = write operation
Arg4: ba258ce6, address which referenced memory
Debugging Details:
------------------
***** Kernel symbols are WRONG. Please fix symbols to do analysis.
MODULE_NAME: USBPORT
FAULTING_MODULE: 804d7000 nt
DEBUG_FLR_IMAGE_TIMESTAMP: 41107d62
READ_ADDRESS: unable to get nt!MmSpecialPoolStart
unable to get nt!MmSpecialPoolEnd
unable to get nt!MmPoolCodeStart
unable to get nt!MmPoolCodeEnd
ff084d9d
0: kd> lmvm USBPORT
start end module name
ba24d000 ba26fe80 USBPORT T (no symbols)
Loaded symbol image file: USBPORT.SYS
Image path: USBPORT.SYS
Image name: USBPORT.SYS
Timestamp: Wed Aug 04 02:08:34 2004 (41107D62)
CheckSum: 0002F594
ImageSize: 00022E80
Translations: 0000.04b0 0000.04e0 0409.04b0 0409.04e0
0: kd> lmvm nt
start end module name
804d7000 806e2000 nt T (no symbols)
Loaded symbol image file: ntoskrnl.exe
Image path: ntoskrnl.exe
Image name: ntoskrnl.exe
Timestamp: Wed Feb 28 03:38:53 2007 (45E53F9D)
CheckSum: 001F873F
ImageSize: 0020B000
Translations: 0000.04b0 0000.04e0 0409.04b0 0409.04e0
I will see what I can find on my own until someone can get back to me on this. Thanks
EDIT: I just realized that I have not yet installed drivers for my USB Keyboard or Mouse. I will see if doing that fixes the problem.
NooNoo
July 12th, 2007, 05:58 AM
Did you reinstall the chipset drivers yet?
Terratoch
July 12th, 2007, 12:18 PM
Yes, yes, and yes. I gave up, bit the bullet, formatted the hard drive, and found the problem is being caused by my SATA DVD-RW Drive. How? Because the first time I tried to reinstall Windows I got the same *expletive* error message that I got 10,000 times before 1/10th of the way through the installation. five times. Fortunately for me, we have about 10 other CD/DVD rom drives just layin' around. Fortunately for Me I thought ahead a bit and backed up the entire registry after I installed all my *cough* essential programs, (WoW, FFXI, Etc). But of course, I am an ignorant jackass, and learned the hard way the drawbacks of restoring the registry BEFORE all the other programs are installed. 4 formats and reinstallations later, here I am, ready to give it another shot, with nothing lost but a night of my life. I am not holding my breath at all, so expect another post within the next 12 hours, after all the *expletive* windows updates have downloaded, and I have restored the registry and given it another shot. Time to reactivate windows. God i hate that. Cross your fingers for me and wish me some luck.
But Like I said I am relatively confident the problem is being caused by my SATA DVD-RW Drive. Here are the specs.
Name:
LiteON 20x DVD Writer Serial ATA Interface
Model No: LH-20A1S12C
If anyone finds out why this would be causing my computer to throw up BSOD's at a steadily increasing rate, feel free to enlighten me. Thanks in advance.
NooNoo
July 13th, 2007, 05:38 AM
A number of reasons
The drive is dirty
The cable is faulty/incorrectly plugged in
The drive is faulty
The motherboard port is faulty
The ide features software as part of the nforce drivers are installed
The drive needs a firmware update (there are none at Lite on that I can find)
windrivers.com
Copyright WebMediaBrands Inc., All Rights Reserved.