I had a Windows Server 2008 R2 crash over the holidays and just got the dump file. When I looked into the dump file, I pulled out the Bug Check code 0x0000000a - IRQL_NOT_LESS_OR_EQUAL
. However, looking in BlueScreenView there's no Driver associated with this and I'm puzzling over why this would be.
Looking the bug check up online, it looks like this is reporting accessing memory addresses that are restricted. Am I right in thinking that because of the lack of a driver reference, this means we are seeing something operating without a driver? As in, a very low level process?
Bluescreen view only gives you a high level overview. In order to get in depth you will need to analyze the crash dump using Windows Debugging tools.
Analyzing a crash dump seems difficult, however it's pretty simple. This Technet article goes in depth, but it's really a 4 step process.
SRVc:\SymbolsCache=http://msdl.microsoft.com/download/symbols
User contributions licensed under CC BY-SA 3.0