locked
Blue Screen Issue RRS feed

  • Question

  • I have Windows 7 Pro x64 and I run VMWare also with multiple OS's (not at the same time).  Just loaded Windows 7 Ultimate x64 on VMWare today and am running it in evaluation mode.  I am using it as a media server to be ran through my PS3.  I have done this with a virtual server successfully with no issues.  But when I transfer video from one of my HDD's to my virtual machine through a mapped networked drive or homegroup it crashes to a quick bluescreen and i cannot read the error codes. Heres what i have dug up on it though and i will give specs for my desktop and virtual machine at the end also.

    Log Name:      Application
    Source:        VSS
    Date:          12/28/2010 11:45:42 PM
    Event ID:      8224
    Task Category: None
    Level:         Information
    Keywords:      Classic
    User:          N/A
    Computer:      LTB-DESKTOP
    Description:
    The VSS service is shutting down due to idle timeout.
    Event Xml:
    <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
      <System>
        <Provider Name="VSS" />
        <EventID Qualifiers="0">8224</EventID>
        <Level>4</Level>
        <Task>0</Task>
        <Keywords>0x80000000000000</Keywords>
        <TimeCreated SystemTime="2010-12-29T04:45:42.000000000Z" />
        <EventRecordID>59280</EventRecordID>
        <Channel>Application</Channel>
        <Computer>LTB-DESKTOP</Computer>
        <Security />
      </System>
      <EventData>
        <Data>
        </Data>
        <Binary>2D20436F64653A2020434F525356434330303030303737332D2043616C6C3A2020434F525356434330303030303735352D205049443A202030303030353034382D205449443A202030303030333431362D20434D443A2020433A5C57696E646F77735C73797374656D33325C76737376632E6578652020202D20557365723A204E616D653A204E5420415554484F524954595C53595354454D2C205349443A532D312D352D313820</Binary>
      </EventData>
    </Event>

    Log Name:      Application
    Source:        Microsoft-Windows-RPC-Events
    Date:          12/29/2010 12:01:44 AM
    Event ID:      11
    Task Category: None
    Level:         Warning
    Keywords:     
    User:          LOCAL SERVICE
    Computer:      LTB-DESKTOP
    Description:
    Possible Memory Leak.  Application (C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted) (PID: 1124) has passed a non-NULL pointer to RPC for an [out] parameter marked [allocate(all_nodes)].  [allocate(all_nodes)] parameters are always reallocated; if the original pointer contained the address of valid memory, that memory will be leaked.  The call originated on the interface with UUID ({3f31c91e-2545-4b7b-9311-9529e8bffef6}), Method number (20).  User Action: Contact your application vendor for an updated version of the application.
    Event Xml:
    <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
      <System>
        <Provider Name="Microsoft-Windows-RPC-Events" Guid="{F4AED7C7-A898-4627-B053-44A7CAA12FCD}" />
        <EventID>11</EventID>
        <Version>0</Version>
        <Level>3</Level>
        <Task>0</Task>
        <Opcode>0</Opcode>
        <Keywords>0x8000000000000000</Keywords>
        <TimeCreated SystemTime="2010-12-29T05:01:44.832400000Z" />
        <EventRecordID>59281</EventRecordID>
        <Correlation />
        <Execution ProcessID="1124" ThreadID="6464" />
        <Channel>Application</Channel>
        <Computer>LTB-DESKTOP</Computer>
        <Security UserID="S-1-5-19" />
      </System>
      <EventData>
        <Data Name="ApplicationName">C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted</Data>
        <Data Name="ProcessId">1124</Data>
        <Data Name="InterfaceId">{3F31C91E-2545-4B7B-9311-9529E8BFFEF6}</Data>
        <Data Name="Method">20</Data>
      </EventData>
    </Event>

    Log Name:      Application
    Source:        Windows Error Reporting
    Date:          12/28/2010 7:54:27 PM
    Event ID:      1001
    Task Category: None
    Level:         Information
    Keywords:      Classic
    User:          N/A
    Computer:      LTB-DESKTOP
    Description:
    Fault bucket X64_0xD1_ndis!ndisMSendCompleteNetBufferListsInternal+1c0, type 0
    Event Name: BlueScreen
    Response: Not available
    Cab Id: 0

    Problem signature:
    P1:
    P2:
    P3:
    P4:
    P5:
    P6:
    P7:
    P8:
    P9:
    P10:

    Attached files:
    C:\Windows\Minidump\122810-40061-01.dmp
    C:\Users\LTB\AppData\Local\Temp\WER-137733-0.sysdata.xml
    C:\Users\LTB\AppData\Local\Temp\WER90AA.tmp.WERInternalMetadata.xml

    These files may be available here:
    C:\ProgramData\Microsoft\Windows\WER\ReportArchive\Kernel_0_0_cab_1502b73d

    Analysis symbol: X64_0xD1_ndis!ndisMSendCompleteNetBufferListsInternal+1c0
    Rechecking for solution: 0
    Report Id: 122810-40061-01
    Report Status: 0
    Event Xml:
    <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
      <System>
        <Provider Name="Windows Error Reporting" />
        <EventID Qualifiers="0">1001</EventID>
        <Level>4</Level>
        <Task>0</Task>
        <Keywords>0x80000000000000</Keywords>
        <TimeCreated SystemTime="2010-12-29T00:54:27.000000000Z" />
        <EventRecordID>59195</EventRecordID>
        <Channel>Application</Channel>
        <Computer>LTB-DESKTOP</Computer>
        <Security />
      </System>
      <EventData>
        <Data>X64_0xD1_ndis!ndisMSendCompleteNetBufferListsInternal+1c0</Data>
        <Data>0</Data>
        <Data>BlueScreen</Data>
        <Data>Not available</Data>
        <Data>0</Data>
        <Data>
        </Data>
        <Data>
        </Data>
        <Data>
        </Data>
        <Data>
        </Data>
        <Data>
        </Data>
        <Data>
        </Data>
        <Data>
        </Data>
        <Data>
        </Data>
        <Data>
        </Data>
        <Data>
        </Data>
        <Data>
    C:\Windows\Minidump\122810-40061-01.dmp
    C:\Users\LTB\AppData\Local\Temp\WER-137733-0.sysdata.xml
    C:\Users\LTB\AppData\Local\Temp\WER90AA.tmp.WERInternalMetadata.xml</Data>
        <Data>C:\ProgramData\Microsoft\Windows\WER\ReportArchive\Kernel_0_0_cab_1502b73d</Data>
        <Data>X64_0xD1_ndis!ndisMSendCompleteNetBufferListsInternal+1c0</Data>
        <Data>0</Data>
        <Data>122810-40061-01</Data>
        <Data>0</Data>
      </EventData>
    </Event>

    Here are my desktop and VM specs

    Desktop

    OS Name Microsoft Windows 7 Professional
    Version 6.1.7600 Build 7600
    Other OS Description  Not Available
    OS Manufacturer Microsoft Corporation
    System Name LTB-DESKTOP
    System Manufacturer HP-Pavilion
    System Model NY545AA-ABA p6210y
    System Type x64-based PC
    Processor AMD Athlon(tm) II X4 620 Processor, 2600 Mhz, 4 Core(s), 4 Logical Processor(s)
    BIOS Version/Date American Megatrends Inc. 5.17, 7/24/2009
    SMBIOS Version 2.5
    Windows Directory C:\Windows
    System Directory C:\Windows\system32
    Boot Device \Device\HarddiskVolume1
    Locale United States
    Hardware Abstraction Layer Version = "6.1.7600.16385"
    User Name LTB-DESKTOP\LTB
    Time Zone Eastern Standard Time
    Installed Physical Memory (RAM) 6.00 GB
    Total Physical Memory 6.00 GB
    Available Physical Memory 1.66 GB
    Total Virtual Memory 15.0 GB
    Available Virtual Memory 10.3 GB
    Page File Space 9.00 GB
    Page File C:\pagefile.sys

    Virtual Machine

    Everything is the same except the computer name: Media PC, the manufacturer: VMWare, the number of processors: 1 physcial and 2 logical, and RAM: 2GB Total with 1.42GB Avaiable

    any help on this would be appeciated, thanks in advance

    Wednesday, December 29, 2010 5:44 AM

Answers

All replies

  • Bug Check 0xD1: DRIVER_IRQL_NOT_LESS_OR_EQUAL

    http://msdn.microsoft.com/en-us/library/ff560244%28VS.85%29.aspx

    To see the cause I have to take a look at the dumps with the Debugging Tools for Windows.

    Please start the Windows Explorer and go to the folder C:\Windows\Minidump. Next, copy the dmp files to your desktop, zip all dmp into 1 zip file and upload the zip file to your public Skydrive [1] folder and post a link here.

    André

    [1] http://social.technet.microsoft.com/Forums/en-US/w7itproui/thread/4fc10639-02db-4665-993a-08d865088d65


    "A programmer is just a tool which converts caffeine into code" CLIP- Stellvertreter http://www.winvistaside.de/
    • Marked as answer by Miya Yao Friday, January 7, 2011 3:32 AM
    Wednesday, December 29, 2010 12:05 PM
  • Sorry for getting back to you so late.  But i ended up nuking and rebuilding my computer later on after I posted this.  I was wanting to do it anyways so i saw this as a good time to actually do it.  But out of curiosity what would have you been looking for in the memory dumps ??
    Saturday, January 8, 2011 3:01 PM
  •  But out of curiosity what would have you been looking for in the memory dumps ??
    the dumps tell you some details and involved drivers.

    "A programmer is just a tool which converts caffeine into code" CLIP- Stellvertreter http://www.winvistaside.de/
    Saturday, January 8, 2011 3:11 PM