Frequent BSOD, different error messages: IRQL_NOT_LESS_OR_EQUAL and MEMORY_MANAGEMENT

Jeff Wow

Commendable
Dec 17, 2016
4
0
1,510
I've been getting frequent BSOD crashes on my WIn10 PC for the last few days and cannot figure out the cause.

I have done no hardware changes and no software installs/uninstalls (outside from any automatic Win10 updates). I cannot detect a trend among what I'm doing at the time of the crash - sometimes just Firefox is running, sometimes Spotify, sometimes games via Steam, or some combination therein. Again, no different than my usual usage.

I've done a WhoCrashed dump, last five are below. As it keeps happening, I'll add them.

Any help would be greatly appreciated!

Thank you,

[EDIT: Added more Crash Dumps with different messages as they occur]


System Information (local)
--------------------------------------------------------------------------------

Windows version: Windows 10 , 10.0, build: 14393
Windows dir: C:\WINDOWS
Hardware: ASRock, H97 Pro4
CPU: GenuineIntel Intel(R) Core(TM) i5-4590 CPU @ 3.30GHz Intel586, level: 6
4 logical processors, active mask: 15
RAM: 17118490624 bytes total




--------------------------------------------------------------------------------
Crash Dump Analysis
--------------------------------------------------------------------------------

Crash dump directory: C:\WINDOWS\Minidump

Crash dumps are enabled on your computer.

On Sat 12/17/2016 6:28:46 PM your computer crashed
crash dump file: C:\WINDOWS\Minidump\121716-10296-01.dmp
This was probably caused by the following module: ntoskrnl.exe (nt+0x14A6F0)
Bugcheck code: 0x3B (0xC0000005, 0xFFFFF801356E6E93, 0xFFFF8901F7F06E60, 0x0)
Error: SYSTEM_SERVICE_EXCEPTION
file path: C:\WINDOWS\system32\ntoskrnl.exe
product: Microsoft® Windows® Operating System
company: Microsoft Corporation
description: NT Kernel & System
Bug check description: This indicates that an exception happened while executing a routine that transitions from non-privileged code to privileged code.
This appears to be a typical software driver bug and is not likely to be caused by a hardware problem.
The crash took place in the Windows kernel. Possibly this problem is caused by another driver that cannot be identified at this time.



On Sat 12/17/2016 6:28:46 PM your computer crashed
crash dump file: C:\WINDOWS\memory.dmp
This was probably caused by the following module: ntkrnlmp.exe (nt!KeBugCheckEx+0x0)
Bugcheck code: 0x3B (0xC0000005, 0xFFFFF801356E6E93, 0xFFFF8901F7F06E60, 0x0)
Error: SYSTEM_SERVICE_EXCEPTION
Bug check description: This indicates that an exception happened while executing a routine that transitions from non-privileged code to privileged code.
This appears to be a typical software driver bug and is not likely to be caused by a hardware problem.
The crash took place in the Windows kernel. Possibly this problem is caused by another driver that cannot be identified at this time.


On Sat 12/17/2016 6:15:41 PM your computer crashed
crash dump file: C:\WINDOWS\Minidump\121716-5140-01.dmp
This was probably caused by the following module: ntoskrnl.exe (nt+0x14A6F0)
Bugcheck code: 0x7A (0x1, 0xFFFFFFFFC0000005, 0xFFFF85010D571540, 0xFFFFF8BFFAFA4000)
Error: KERNEL_DATA_INPAGE_ERROR
file path: C:\WINDOWS\system32\ntoskrnl.exe
product: Microsoft® Windows® Operating System
company: Microsoft Corporation
description: NT Kernel & System
Bug check description: This bug check indicates that the requested page of kernel data from the paging file could not be read into memory.
The crash took place in the Windows kernel. Possibly this problem is caused by another driver that cannot be identified at this time.



On Sat 12/17/2016 6:15:41 PM your computer crashed
crash dump file: C:\WINDOWS\memory.dmp
This was probably caused by the following module: ntkrnlmp.exe (nt!KeBugCheckEx+0x0)
Bugcheck code: 0x7A (0x1, 0xFFFFFFFFC0000005, 0xFFFF85010D571540, 0xFFFFF8BFFAFA4000)
Error: KERNEL_DATA_INPAGE_ERROR
Bug check description: This bug check indicates that the requested page of kernel data from the paging file could not be read into memory.
The crash took place in the Windows kernel. Possibly this problem is caused by another driver that cannot be identified at this time.



On Sat 12/17/2016 6:14:39 PM your computer crashed
crash dump file: C:\WINDOWS\Minidump\121716-10406-01.dmp
This was probably caused by the following module: ntoskrnl.exe (nt+0x14A6F0)
Bugcheck code: 0x109 (0xA39FE75FA9C8B589, 0x0, 0xE311F1D4F5EB2210, 0x101)
Error: CRITICAL_STRUCTURE_CORRUPTION
file path: C:\WINDOWS\system32\ntoskrnl.exe
product: Microsoft® Windows® Operating System
company: Microsoft Corporation
description: NT Kernel & System
Bug check description: This indicates that the kernel has detected critical kernel code or data corruption.
This might be a case of memory corruption. More often memory corruption happens because of software errors in buggy drivers, not because of faulty RAM modules.
The crash took place in the Windows kernel. Possibly this problem is caused by another driver that cannot be identified at this time.



On Sat 12/17/2016 5:12:09 PM your computer crashed
crash dump file: C:\WINDOWS\Minidump\121716-3718-01.dmp
This was probably caused by the following module: ntoskrnl.exe (nt+0x14A6F0)
Bugcheck code: 0x1A (0x41792, 0xFFFF8B80982F9D20, 0x800000000000000, 0x0)
Error: MEMORY_MANAGEMENT
file path: C:\WINDOWS\system32\ntoskrnl.exe
product: Microsoft® Windows® Operating System
company: Microsoft Corporation
description: NT Kernel & System
Bug check description: This indicates that a severe memory management error occurred.
This might be a case of memory corruption. More often memory corruption happens because of software errors in buggy drivers, not because of faulty RAM modules. This problem might also be caused because of overheating (thermal issue).
The crash took place in the Windows kernel. Possibly this problem is caused by another driver that cannot be identified at this time.



On Sat 12/17/2016 5:12:09 PM your computer crashed
crash dump file: C:\WINDOWS\memory.dmp
This was probably caused by the following module: ntkrnlmp.exe (nt!KeBugCheckEx+0x0)
Bugcheck code: 0x1A (0x41792, 0xFFFF8B80982F9D20, 0x800000000000000, 0x0)
Error: MEMORY_MANAGEMENT
Bug check description: This indicates that a severe memory management error occurred.
This might be a case of memory corruption. More often memory corruption happens because of software errors in buggy drivers, not because of faulty RAM modules. This problem might also be caused because of overheating (thermal issue).
The crash took place in the Windows kernel. Possibly this problem is caused by another driver that cannot be identified at this time.


On Sat 12/17/2016 1:19:10 PM your computer crashed
crash dump file: C:\WINDOWS\Minidump\121716-3671-01.dmp
This was probably caused by the following module: ntoskrnl.exe (nt+0x14A6F0)
Bugcheck code: 0xA (0xFFFFEE8810B3B410, 0x2, 0x0, 0xFFFFF800F968E3AA)
Error: IRQL_NOT_LESS_OR_EQUAL
file path: C:\WINDOWS\system32\ntoskrnl.exe
product: Microsoft® Windows® Operating System
company: Microsoft Corporation
description: NT Kernel & System
Bug check description: This indicates that Microsoft Windows or a kernel-mode driver accessed paged memory at DISPATCH_LEVEL or above.
This appears to be a typical software driver bug and is not likely to be caused by a hardware problem.
The crash took place in the Windows kernel. Possibly this problem is caused by another driver that cannot be identified at this time.



On Sat 12/17/2016 1:19:10 PM your computer crashed
crash dump file: C:\WINDOWS\memory.dmp
This was probably caused by the following module: ntkrnlmp.exe (nt!KeBugCheckEx+0x0)
Bugcheck code: 0xA (0xFFFFEE8810B3B410, 0x2, 0x0, 0xFFFFF800F968E3AA)
Error: IRQL_NOT_LESS_OR_EQUAL
Bug check description: This indicates that Microsoft Windows or a kernel-mode driver accessed paged memory at DISPATCH_LEVEL or above.
This appears to be a typical software driver bug and is not likely to be caused by a hardware problem.
The crash took place in the Windows kernel. Possibly this problem is caused by another driver that cannot be identified at this time.



On Sat 12/17/2016 11:22:16 AM your computer crashed
crash dump file: C:\WINDOWS\Minidump\121716-3609-01.dmp
This was probably caused by the following module: ntoskrnl.exe (nt+0x14A6F0)
Bugcheck code: 0x1A (0x41792, 0xFFFF828000007DA0, 0x800000000000000, 0x0)
Error: MEMORY_MANAGEMENT
file path: C:\WINDOWS\system32\ntoskrnl.exe
product: Microsoft® Windows® Operating System
company: Microsoft Corporation
description: NT Kernel & System
Bug check description: This indicates that a severe memory management error occurred.
This might be a case of memory corruption. More often memory corruption happens because of software errors in buggy drivers, not because of faulty RAM modules. This problem might also be caused because of overheating (thermal issue).
The crash took place in the Windows kernel. Possibly this problem is caused by another driver that cannot be identified at this time.



On Sat 12/17/2016 9:20:48 AM your computer crashed
crash dump file: C:\WINDOWS\Minidump\121716-3953-01.dmp
This was probably caused by the following module: ntoskrnl.exe (nt+0x14A6F0)
Bugcheck code: 0x1A (0x41793, 0xFFFFAA3FFF905D20, 0x2, 0x1)
Error: MEMORY_MANAGEMENT
file path: C:\WINDOWS\system32\ntoskrnl.exe
product: Microsoft® Windows® Operating System
company: Microsoft Corporation
description: NT Kernel & System
Bug check description: This indicates that a severe memory management error occurred.
This might be a case of memory corruption. More often memory corruption happens because of software errors in buggy drivers, not because of faulty RAM modules. This problem might also be caused because of overheating (thermal issue).
The crash took place in the Windows kernel. Possibly this problem is caused by another driver that cannot be identified at this time.



On Wed 12/14/2016 10:36:22 PM your computer crashed
crash dump file: C:\WINDOWS\Minidump\121416-4062-01.dmp
This was probably caused by the following module: ntoskrnl.exe (nt+0x14A6F0)
Bugcheck code: 0xA (0xFFFFD80090C56DA0, 0x2, 0x0, 0xFFFFF801B208D381)
Error: IRQL_NOT_LESS_OR_EQUAL
file path: C:\WINDOWS\system32\ntoskrnl.exe
product: Microsoft® Windows® Operating System
company: Microsoft Corporation
description: NT Kernel & System
Bug check description: This indicates that Microsoft Windows or a kernel-mode driver accessed paged memory at DISPATCH_LEVEL or above.
This appears to be a typical software driver bug and is not likely to be caused by a hardware problem.
The crash took place in the Windows kernel. Possibly this problem is caused by another driver that cannot be identified at this time.




--------------------------------------------------------------------------------
Conclusion
--------------------------------------------------------------------------------

12 crash dumps have been found and analyzed. Only 5 are included in this report. No offending third party drivers have been found. Connsider using WhoCrashed Professional which offers more detailed analysis using symbol resolution. Also configuring your system to produce a full memory dump may help you.


Read the topic general suggestions for troubleshooting system crashes for more information.

Note that it's not always possible to state with certainty whether a reported driver is responsible for crashing your system or that the root cause is in another module. Nonetheless it's suggested you look for updates for the products that these drivers belong to and regularly visit Windows update or enable automatic updates for Windows. In case a piece of malfunctioning hardware is causing trouble, a search with Google on the bug check errors together with the model name and brand of your computer may help you investigate this further.
 
Solution
IRQ errors are driver errors, I can't tell which but maybe if you download the Asrock App store it might find some updates. The IRQ could also be USB devices so check them as well.

Memory management can be drivers or ram. parameter 1 = 0x41792 in one of them, that refers to the page file.

can you run the free version of http://www.memtest86.com/ on your ram, 1 stick at a time. It creates a bootable usb so you can run outside windows. Any errors are too many. You want 0.
IRQ errors are driver errors, I can't tell which but maybe if you download the Asrock App store it might find some updates. The IRQ could also be USB devices so check them as well.

Memory management can be drivers or ram. parameter 1 = 0x41792 in one of them, that refers to the page file.

can you run the free version of http://www.memtest86.com/ on your ram, 1 stick at a time. It creates a bootable usb so you can run outside windows. Any errors are too many. You want 0.
 
Solution

Ran the Asrock App store sw, made some updates, crashes still occurring. I'm getting all kinds of new messages now, posted here (and in the OP for posterity). Memtest is next.

On Sat 12/17/2016 6:28:46 PM your computer crashed
crash dump file: C:\WINDOWS\Minidump\121716-10296-01.dmp
This was probably caused by the following module: ntoskrnl.exe (nt+0x14A6F0)
Bugcheck code: 0x3B (0xC0000005, 0xFFFFF801356E6E93, 0xFFFF8901F7F06E60, 0x0)
Error: SYSTEM_SERVICE_EXCEPTION
file path: C:\WINDOWS\system32\ntoskrnl.exe
product: Microsoft® Windows® Operating System
company: Microsoft Corporation
description: NT Kernel & System
Bug check description: This indicates that an exception happened while executing a routine that transitions from non-privileged code to privileged code.
This appears to be a typical software driver bug and is not likely to be caused by a hardware problem.
The crash took place in the Windows kernel. Possibly this problem is caused by another driver that cannot be identified at this time.



On Sat 12/17/2016 6:28:46 PM your computer crashed
crash dump file: C:\WINDOWS\memory.dmp
This was probably caused by the following module: ntkrnlmp.exe (nt!KeBugCheckEx+0x0)
Bugcheck code: 0x3B (0xC0000005, 0xFFFFF801356E6E93, 0xFFFF8901F7F06E60, 0x0)
Error: SYSTEM_SERVICE_EXCEPTION
Bug check description: This indicates that an exception happened while executing a routine that transitions from non-privileged code to privileged code.
This appears to be a typical software driver bug and is not likely to be caused by a hardware problem.
The crash took place in the Windows kernel. Possibly this problem is caused by another driver that cannot be identified at this time.


On Sat 12/17/2016 6:15:41 PM your computer crashed
crash dump file: C:\WINDOWS\Minidump\121716-5140-01.dmp
This was probably caused by the following module: ntoskrnl.exe (nt+0x14A6F0)
Bugcheck code: 0x7A (0x1, 0xFFFFFFFFC0000005, 0xFFFF85010D571540, 0xFFFFF8BFFAFA4000)
Error: KERNEL_DATA_INPAGE_ERROR
file path: C:\WINDOWS\system32\ntoskrnl.exe
product: Microsoft® Windows® Operating System
company: Microsoft Corporation
description: NT Kernel & System
Bug check description: This bug check indicates that the requested page of kernel data from the paging file could not be read into memory.
The crash took place in the Windows kernel. Possibly this problem is caused by another driver that cannot be identified at this time.



On Sat 12/17/2016 6:15:41 PM your computer crashed
crash dump file: C:\WINDOWS\memory.dmp
This was probably caused by the following module: ntkrnlmp.exe (nt!KeBugCheckEx+0x0)
Bugcheck code: 0x7A (0x1, 0xFFFFFFFFC0000005, 0xFFFF85010D571540, 0xFFFFF8BFFAFA4000)
Error: KERNEL_DATA_INPAGE_ERROR
Bug check description: This bug check indicates that the requested page of kernel data from the paging file could not be read into memory.
The crash took place in the Windows kernel. Possibly this problem is caused by another driver that cannot be identified at this time.



On Sat 12/17/2016 6:14:39 PM your computer crashed
crash dump file: C:\WINDOWS\Minidump\121716-10406-01.dmp
This was probably caused by the following module: ntoskrnl.exe (nt+0x14A6F0)
Bugcheck code: 0x109 (0xA39FE75FA9C8B589, 0x0, 0xE311F1D4F5EB2210, 0x101)
Error: CRITICAL_STRUCTURE_CORRUPTION
file path: C:\WINDOWS\system32\ntoskrnl.exe
product: Microsoft® Windows® Operating System
company: Microsoft Corporation
description: NT Kernel & System
Bug check description: This indicates that the kernel has detected critical kernel code or data corruption.
This might be a case of memory corruption. More often memory corruption happens because of software errors in buggy drivers, not because of faulty RAM modules.
The crash took place in the Windows kernel. Possibly this problem is caused by another driver that cannot be identified at this time.



On Sat 12/17/2016 5:12:09 PM your computer crashed
crash dump file: C:\WINDOWS\Minidump\121716-3718-01.dmp
This was probably caused by the following module: ntoskrnl.exe (nt+0x14A6F0)
Bugcheck code: 0x1A (0x41792, 0xFFFF8B80982F9D20, 0x800000000000000, 0x0)
Error: MEMORY_MANAGEMENT
file path: C:\WINDOWS\system32\ntoskrnl.exe
product: Microsoft® Windows® Operating System
company: Microsoft Corporation
description: NT Kernel & System
Bug check description: This indicates that a severe memory management error occurred.
This might be a case of memory corruption. More often memory corruption happens because of software errors in buggy drivers, not because of faulty RAM modules. This problem might also be caused because of overheating (thermal issue).
The crash took place in the Windows kernel. Possibly this problem is caused by another driver that cannot be identified at this time.



On Sat 12/17/2016 5:12:09 PM your computer crashed
crash dump file: C:\WINDOWS\memory.dmp
This was probably caused by the following module: ntkrnlmp.exe (nt!KeBugCheckEx+0x0)
Bugcheck code: 0x1A (0x41792, 0xFFFF8B80982F9D20, 0x800000000000000, 0x0)
Error: MEMORY_MANAGEMENT
Bug check description: This indicates that a severe memory management error occurred.
This might be a case of memory corruption. More often memory corruption happens because of software errors in buggy drivers, not because of faulty RAM modules. This problem might also be caused because of overheating (thermal issue).
The crash took place in the Windows kernel. Possibly this problem is caused by another driver that cannot be identified at this time.
 
lots of memory based errors there. still more Memory management 0x41792 references, page file again.

If memtest comes up blank, try running the trial version of http://www.hdtune.com/ on your drive and see how it is.

if that is still fine, i will get you to do next bit:
Can you follow option one here: http://www.tenforums.com/tutorials/5560-bsod-minidump-configure-create-windows-10-a.html
and then do this step below: Small memory dumps - Have Windows Create a Small Memory Dump (Minidump) on BSOD

that creates a file in c/windows/minidump
copy that file to documents
upload the copy from documents to a cloud server and share the link here and someone with right software to read them will help you fix it :)
 

Memtest found 2,800 errors, and I was able to narrow it down to which sticks were the problem and pull those. Replacements are in the mail. I thought I was good, but I just had another crash (an hour after removing the bad RAM):


On Sun 12/18/2016 3:03:56 PM your computer crashed
crash dump file: C:\WINDOWS\Minidump\121816-5921-01.dmp
This was probably caused by the following module: ntfs.sys (NTFS+0xB58A6)
Bugcheck code: 0x1000007E (0xFFFFFFFFC0000005, 0xFFFFF8007A8C6BE8, 0xFFFFA5817A1574A8, 0xFFFFA5817A156CD0)
Error: SYSTEM_THREAD_EXCEPTION_NOT_HANDLED_M
file path: C:\WINDOWS\system32\drivers\ntfs.sys
product: Microsoft® Windows® Operating System
company: Microsoft Corporation
description: NT File System Driver
Bug check description: This indicates that a system thread generated an exception which the error handler did not catch.
This appears to be a typical software driver bug and is not likely to be caused by a hardware problem.
The crash took place in a standard Microsoft module. Your system configuration may be incorrect. Possibly this problem is caused by another driver on your system that cannot be identified at this time.



On Sun 12/18/2016 3:03:56 PM your computer crashed
crash dump file: C:\WINDOWS\memory.dmp
This was probably caused by the following module: ntfs.sys (NTFS+0xB58A6)
Bugcheck code: 0x7E (0xFFFFFFFFC0000005, 0xFFFFF8007A8C6BE8, 0xFFFFA5817A1574A8, 0xFFFFA5817A156CD0)
Error: SYSTEM_THREAD_EXCEPTION_NOT_HANDLED
file path: C:\WINDOWS\system32\drivers\ntfs.sys
product: Microsoft® Windows® Operating System
company: Microsoft Corporation
description: NT File System Driver
Bug check description: This bug check indicates that a system thread generated an exception that the error handler did not catch.
The crash took place in a standard Microsoft module. Your system configuration may be incorrect. Possibly this problem is caused by another driver on your system that cannot be identified at this time.
 
2800 ouch... that fixed the memory errors at least. win 10 is harder on ram than previous versions as it uses it more.
1. if you close a program, instead of putting all the data on hdd, it compresses it in ram. this means if you open program again, it loads much faster
2. When you turn Win 10 off, it uses hybred hibernate instead of shutting down. it saves half data to ram & other half to hibernate file. This makes start up much faster on systme s with a hdd, not so much on ssd.

Bugcheck code: 0x1000007E
Check the System Log in Event Viewer for additional error messages that might help identify the device or driver that is causing bug check 0x7E.
Check with your hardware vendor for any BIOS updates. Hardware issues, such as BIOS incompatibilities, memory conflicts, and IRQ conflicts can also generate this error.


Did you test hdd? ntfs.sys is the file system so I suspect its a sata driver but then you ran asrock app store.

create a minidump, it might show us more than what who crashed reveals.
 
After numerous other tests, the memtest86 solution was what I needed. One of the DIMMs was riddled with errors, so I replaced the pair and have had zero issues since then.

Thank you so much!
 

TRENDING THREADS