IRQL_NOT_LESS_OR_EQUAL with no driver referenced

0

I had a Windows Server 2008 R2 crash over the holidays and just got the dump file. When I looked into the dump file, I pulled out the Bug Check code 0x0000000a - IRQL_NOT_LESS_OR_EQUAL. However, looking in BlueScreenView there's no Driver associated with this and I'm puzzling over why this would be.

Dump properties

Looking the bug check up online, it looks like this is reporting accessing memory addresses that are restricted. Am I right in thinking that because of the lack of a driver reference, this means we are seeing something operating without a driver? As in, a very low level process?

windows-server-2008
bsod
asked on Server Fault Dec 1, 2015 by Sean Long

1 Answer

1

Bluescreen view only gives you a high level overview. In order to get in depth you will need to analyze the crash dump using Windows Debugging tools.

Analyzing a crash dump seems difficult, however it's pretty simple. This Technet article goes in depth, but it's really a 4 step process.

  1. Download the Windows Debugging tools from the wizard only instal the WinDbg tool.
  2. Launch the tool and configure the symbol path to use

SRVc:\SymbolsCache=http://msdl.microsoft.com/download/symbols

  1. Open the crash dump / minidump.
  2. Click on the blue link that says "!analyze -v" to get more information about the events leading up to the crash.
answered on Server Fault Dec 3, 2015 by Brett Larson

User contributions licensed under CC BY-SA 3.0