[Vpn-help] BSOD on Vista Home Premium

Thu Oct 22 21:41:00 CDT 2009

Hi,
I'm getting IRQL_NOT_LESS_OR_EQUAL blue screens about twice a day (even if I'm not using the VPN).  The Stop code is:
Stop: 0x0000000A (0x000000000000002A, 0x000000000000000C, 0x0000000000000000, 0xFFFFF800020C2D17)
My computer is a Dell XPS 435T, running Vista Home Premium.  I get the bsod running 2.1.5-rc-1 and 2.1.5-rc-4
Any help is greatly appreciated,
Eli
Looking at the minidump in WinDbg I get the following:

Loading Dump File [C:\Windows\Minidump\Mini102209-01.dmp]Mini Kernel Dump File: Only registers and stack trace are available
Symbol search path is: SRV*C:\debug_symbols*http://msdl.microsoft.com/download/symbolsExecutable search path is: Windows Server 2008/Windows Vista Kernel Version 6002 (Service Pack 2) MP (8 procs) Free x64Product: WinNt, suite: TerminalServer SingleUserTS PersonalBuilt by: 6002.18082.amd64fre.vistasp2_gdr.090803-2339Machine Name:Kernel base = 0xfffff800`02062000 PsLoadedModuleList = 0xfffff800`02226dd0Debug session time: Thu Oct 22 21:16:40.792 2009 (GMT-4)System Uptime: 1 days 23:05:19.684Loading Kernel Symbols.................................................................................................................................................Loading User SymbolsLoading unloaded module list............................********************************************************************************                                                                             **                    
    Bugcheck Analysis                                    **                                                                             ********************************************************************************
Use !analyze -v to get detailed debugging information.
BugCheck A, {2a, c, 0, fffff800020c2d17}
Unable to load image \SystemRoot\system32\DRIVERS\vfilter.sys, Win32 error 0n2*** WARNING: Unable to verify timestamp for vfilter.sys*** ERROR: Module load completed but symbols could not be loaded for vfilter.sysProbably caused by : vfilter.sys ( vfilter+290f )
Followup: MachineOwner---------
1: kd> !analyze -v********************************************************************************                                                                             **                        Bugcheck Analysis                                    **                                                                             ********************************************************************************
IRQL_NOT_LESS_OR_EQUAL (a)An attempt was made to access a pageable (or completely invalid) address at aninterrupt request level (IRQL) that is too high.  This is usuallycaused by drivers using improper addresses.If a kernel debugger is available get the stack backtrace.Arguments:Arg1: 000000000000002a, memory referencedArg2: 000000000000000c, IRQLArg3: 0000000000000000, bitfield :	bit 0 : value 0 = read operation, 1 = write operation	bit 3 : value 0 = not an execute operation, 1 = execute operation (only on chips which support this level of status)Arg4: fffff800020c2d17, address which referenced memory
Debugging Details:------------------

READ_ADDRESS: GetPointerFromAddress: unable to read from fffff80002289080 000000000000002a 
CURRENT_IRQL:  c
FAULTING_IP: nt!KeSetEvent+277fffff800`020c2d17 4438682a        cmp     byte ptr [rax+2Ah],r13b
CUSTOMER_CRASH_COUNT:  1
DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT
BUGCHECK_STR:  0xA
PROCESS_NAME:  McNASvc.exe
TRAP_FRAME:  fffffa6009943de0 -- (.trap 0xfffffa6009943de0)NOTE: The trap frame does not contain all registers.Some register values may be zeroed or incorrect.rax=0000000000000000 rbx=0000000000000000 rcx=fffffa60005ec7f0rdx=0000000000000000 rsi=0000000000000000 rdi=0000000000000000rip=fffff800020c2d17 rsp=fffffa6009943f70 rbp=0000000000000000 r8=0000000000000000  r9=0000000000000000 r10=6501a8c067295972r11=fffffa8008217930 r12=0000000000000000 r13=0000000000000000r14=0000000000000000 r15=0000000000000000iopl=0         nv up ei pl zr na po ncnt!KeSetEvent+0x277:fffff800`020c2d17 4438682a        cmp     byte ptr [rax+2Ah],r13b ds:5130:00000000`0000002a=??Resetting default scope
LAST_CONTROL_TRANSFER:  from fffff800020bc1ee to fffff800020bc450
STACK_TEXT:  fffffa60`09943c98 fffff800`020bc1ee : 00000000`0000000a 00000000`0000002a 00000000`0000000c 00000000`00000000 : nt!KeBugCheckExfffffa60`09943ca0 fffff800`020bb0cb : 00000000`00000000 00000000`00000000 00000000`00000000 fffffa80`087c3af0 : nt!KiBugCheckDispatch+0x6efffffa60`09943de0 fffff800`020c2d17 : fffffa60`09943fe0 fffffa60`08bc1a74 00000000`0000002a fffffa60`09944060 : nt!KiPageFault+0x20bfffffa60`09943f70 fffffa60`08bc190f : fffffa80`080a55d0 00000000`00000000 fffffa80`083fd601 fffffa80`00000000 : nt!KeSetEvent+0x277fffffa60`09943fe0 fffffa80`080a55d0 : 00000000`00000000 fffffa80`083fd601 fffffa80`00000000 00000000`00000000 : vfilter+0x290ffffffa60`09943fe8 00000000`00000000 : fffffa80`083fd601 fffffa80`00000000 00000000`00000000 fffffa60`08bc13fd : 0xfffffa80`080a55d0

STACK_COMMAND:  kb
FOLLOWUP_IP: vfilter+290ffffffa60`08bc190f ??              ???
SYMBOL_STACK_INDEX:  4
SYMBOL_NAME:  vfilter+290f
FOLLOWUP_NAME:  MachineOwner
MODULE_NAME: vfilter
IMAGE_NAME:  vfilter.sys
DEBUG_FLR_IMAGE_TIMESTAMP:  49703e23
FAILURE_BUCKET_ID:  X64_0xA_vfilter+290f
BUCKET_ID:  X64_0xA_vfilter+290f
Followup: MachineOwner---------
1: kd> lmvm vfilterstart             end                 module namefffffa60`08bbf000 fffffa60`08bc9000   vfilter  T (no symbols)               Loaded symbol image file: vfilter.sys    Image path: \SystemRoot\system32\DRIVERS\vfilter.sys    Image name: vfilter.sys    Timestamp:        Fri Jan 16 02:58:27 2009 (49703E23)    CheckSum:         0000BF71    ImageSize:        0000A000    Translations:     0000.04b0 0000.04e4 0409.04b0 0409.04e4

----------------------------------------------------------------

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.shrew.net/pipermail/vpn-help/attachments/20091022/2155ca3e/attachment-0001.html>