<table cellspacing="0" cellpadding="0" border="0" ><tr><td valign="top" style="font: inherit;">Hi,<div><br></div><div>I'm getting IRQL_NOT_LESS_OR_EQUAL blue screens about twice a day (even if I'm not using the VPN). The Stop code is:</div><div><br></div><div>Stop: 0x0000000A (0x000000000000002A, 0x000000000000000C, 0x0000000000000000, 0xFFFFF800020C2D17)</div><div><br></div><div>My computer is a Dell XPS 435T, running Vista Home Premium. I get the bsod running 2.1.5-rc-1 and 2.1.5-rc-4</div><div><br></div><div>Any help is greatly appreciated,</div><div><br></div><div>Eli</div><div><br></div><div>Looking at the minidump in WinDbg I get the following:</div><div><br></div><div><div><br></div><div>Microsoft (R) Windows Debugger Version 6.11.0001.404 AMD64</div><div>Copyright (c) Microsoft Corporation. All rights reserved.</div><div><br></div><div><br></div><div>Loading Dump File [C:\Windows\Minidump\Mini102209-01.dmp]</div><div>Mini Kernel Dump
File: Only registers and stack trace are available</div><div><br></div><div>Symbol search path is: SRV*C:\debug_symbols*http://msdl.microsoft.com/download/symbols</div><div>Executable search path is: </div><div>Windows Server 2008/Windows Vista Kernel Version 6002 (Service Pack 2) MP (8 procs) Free x64</div><div>Product: WinNt, suite: TerminalServer SingleUserTS Personal</div><div>Built by: 6002.18082.amd64fre.vistasp2_gdr.090803-2339</div><div>Machine Name:</div><div>Kernel base = 0xfffff800`02062000 PsLoadedModuleList = 0xfffff800`02226dd0</div><div>Debug session time: Thu Oct 22 21:16:40.792 2009 (GMT-4)</div><div>System Uptime: 1 days 23:05:19.684</div><div>Loading Kernel Symbols</div><div>...............................................................</div><div>................................................................</div><div>..................</div><div>Loading User Symbols</div><div>Loading unloaded module
list</div><div>............................</div><div>*******************************************************************************</div><div>* *</div><div>* Bugcheck Analysis *</div><div>*
*</div><div>*******************************************************************************</div><div><br></div><div>Use !analyze -v to get detailed debugging information.</div><div><br></div><div>BugCheck A, {2a, c, 0, fffff800020c2d17}</div><div><br></div><div>Unable to load image \SystemRoot\system32\DRIVERS\vfilter.sys, Win32 error 0n2</div><div>*** WARNING: Unable to verify timestamp for vfilter.sys</div><div>*** ERROR: Module load completed but symbols could not be loaded for vfilter.sys</div><div>Probably caused by : vfilter.sys ( vfilter+290f )</div><div><br></div><div>Followup: MachineOwner</div><div>---------</div><div><br></div><div>1: kd> !analyze -v</div><div>*******************************************************************************</div><div>*
*</div><div>* Bugcheck Analysis *</div><div>* *</div><div>*******************************************************************************</div><div><br></div><div>IRQL_NOT_LESS_OR_EQUAL (a)</div><div>An attempt was made to access a pageable (or completely invalid) address at an</div><div>interrupt request level (IRQL) that is too high. This is usually</div><div>caused by drivers using improper
addresses.</div><div>If a kernel debugger is available get the stack backtrace.</div><div>Arguments:</div><div>Arg1: 000000000000002a, memory referenced</div><div>Arg2: 000000000000000c, IRQL</div><div>Arg3: 0000000000000000, bitfield :</div><div><span class="Apple-tab-span" style="white-space:pre"> </span>bit 0 : value 0 = read operation, 1 = write operation</div><div><span class="Apple-tab-span" style="white-space:pre"> </span>bit 3 : value 0 = not an execute operation, 1 = execute operation (only on chips which support this level of status)</div><div>Arg4: fffff800020c2d17, address which referenced memory</div><div><br></div><div>Debugging Details:</div><div>------------------</div><div><br></div><div><br></div><div>READ_ADDRESS: GetPointerFromAddress: unable to read from fffff80002289080</div><div> 000000000000002a </div><div><br></div><div>CURRENT_IRQL:
c</div><div><br></div><div>FAULTING_IP: </div><div>nt!KeSetEvent+277</div><div>fffff800`020c2d17 4438682a cmp byte ptr [rax+2Ah],r13b</div><div><br></div><div>CUSTOMER_CRASH_COUNT: 1</div><div><br></div><div>DEFAULT_BUCKET_ID: VISTA_DRIVER_FAULT</div><div><br></div><div>BUGCHECK_STR: 0xA</div><div><br></div><div>PROCESS_NAME: McNASvc.exe</div><div><br></div><div>TRAP_FRAME: fffffa6009943de0 -- (.trap 0xfffffa6009943de0)</div><div>NOTE: The trap frame does not contain all registers.</div><div>Some register values may be zeroed or incorrect.</div><div>rax=0000000000000000 rbx=0000000000000000 rcx=fffffa60005ec7f0</div><div>rdx=0000000000000000 rsi=0000000000000000 rdi=0000000000000000</div><div>rip=fffff800020c2d17 rsp=fffffa6009943f70 rbp=0000000000000000</div><div> r8=0000000000000000 r9=0000000000000000 r10=6501a8c067295972</div><div>r11=fffffa8008217930
r12=0000000000000000 r13=0000000000000000</div><div>r14=0000000000000000 r15=0000000000000000</div><div>iopl=0 nv up ei pl zr na po nc</div><div>nt!KeSetEvent+0x277:</div><div>fffff800`020c2d17 4438682a cmp byte ptr [rax+2Ah],r13b ds:5130:00000000`0000002a=??</div><div>Resetting default scope</div><div><br></div><div>LAST_CONTROL_TRANSFER: from fffff800020bc1ee to fffff800020bc450</div><div><br></div><div>STACK_TEXT: </div><div>fffffa60`09943c98 fffff800`020bc1ee : 00000000`0000000a 00000000`0000002a 00000000`0000000c 00000000`00000000 : nt!KeBugCheckEx</div><div>fffffa60`09943ca0 fffff800`020bb0cb : 00000000`00000000 00000000`00000000 00000000`00000000 fffffa80`087c3af0 : nt!KiBugCheckDispatch+0x6e</div><div>fffffa60`09943de0 fffff800`020c2d17 : fffffa60`09943fe0 fffffa60`08bc1a74 00000000`0000002a fffffa60`09944060 : nt!KiPageFault+0x20b</div><div>fffffa60`09943f70
fffffa60`08bc190f : fffffa80`080a55d0 00000000`00000000 fffffa80`083fd601 fffffa80`00000000 : nt!KeSetEvent+0x277</div><div>fffffa60`09943fe0 fffffa80`080a55d0 : 00000000`00000000 fffffa80`083fd601 fffffa80`00000000 00000000`00000000 : vfilter+0x290f</div><div>fffffa60`09943fe8 00000000`00000000 : fffffa80`083fd601 fffffa80`00000000 00000000`00000000 fffffa60`08bc13fd : 0xfffffa80`080a55d0</div><div><br></div><div><br></div><div>STACK_COMMAND: kb</div><div><br></div><div>FOLLOWUP_IP: </div><div>vfilter+290f</div><div>fffffa60`08bc190f ?? ???</div><div><br></div><div>SYMBOL_STACK_INDEX: 4</div><div><br></div><div>SYMBOL_NAME: vfilter+290f</div><div><br></div><div>FOLLOWUP_NAME: MachineOwner</div><div><br></div><div>MODULE_NAME: vfilter</div><div><br></div><div>IMAGE_NAME: vfilter.sys</div><div><br></div><div>DEBUG_FLR_IMAGE_TIMESTAMP:
49703e23</div><div><br></div><div>FAILURE_BUCKET_ID: X64_0xA_vfilter+290f</div><div><br></div><div>BUCKET_ID: X64_0xA_vfilter+290f</div><div><br></div><div>Followup: MachineOwner</div><div>---------</div><div><br></div><div>1: kd> lmvm vfilter</div><div>start end module name</div><div>fffffa60`08bbf000 fffffa60`08bc9000 vfilter T (no symbols) </div><div> Loaded symbol image file: vfilter.sys</div><div> Image path: \SystemRoot\system32\DRIVERS\vfilter.sys</div><div> Image name: vfilter.sys</div><div> Timestamp: Fri Jan 16 02:58:27 2009 (49703E23)</div><div> CheckSum: 0000BF71</div><div> ImageSize:
0000A000</div><div> Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4</div><div><br></div></div><div><br></div><div>----------------------------------------------------------------</div></td></tr></table><br>