JupiterMoon
New Member
- Joined
- Jun 22, 2018
- Messages
- 23
- Thread Author
-
- #1
This gives the IRQL_UNEXPECTED_VALUE which is usually caused by a driver. But I don't know which driver.
Data from Event:
Log Name: System
Source: Microsoft-Windows-Kernel-Power
Date: 6/21/2018 8:25:30 PM
Event ID: 41
Task Category: (63)
Level: Critical
Keywords: (70368744177664),(2)
User: SYSTEM
Computer: Zekrom
Description:
The system has rebooted without cleanly shutting down first. This error could be caused if the system stopped responding, crashed, or lost power unexpectedly.
Event Xml:
<Event xmlns="Link Removed">
<System>
<Provider Name="Microsoft-Windows-Kernel-Power" Guid="{331C3B3A-2005-44C2-AC5E-77220C37D6B4}" />
<EventID>41</EventID>
<Version>6</Version>
<Level>1</Level>
<Task>63</Task>
<Opcode>0</Opcode>
<Keywords>0x8000400000000002</Keywords>
<TimeCreated SystemTime="2018-06-22T00:25:30.175952600Z" />
<EventRecordID>2781</EventRecordID>
<Correlation />
<Execution ProcessID="4" ThreadID="8" />
<Channel>System</Channel>
<Computer>Zekrom</Computer>
<Security UserID="S-1-5-18" />
</System>
<EventData>
<Data Name="BugcheckCode">200</Data>
<Data Name="BugcheckParameter1">0x20002</Data>
<Data Name="BugcheckParameter2">0xfffff80f47aa1010</Data>
<Data Name="BugcheckParameter3">0xfffffe8143757460</Data>
<Data Name="BugcheckParameter4">0x0</Data>
<Data Name="SleepInProgress">0</Data>
<Data Name="PowerButtonTimestamp">0</Data>
<Data Name="BootAppStatus">0</Data>
<Data Name="Checkpoint">0</Data>
<Data Name="ConnectedStandbyInProgress">false</Data>
<Data Name="SystemSleepTransitionsToOn">3</Data>
<Data Name="CsEntryScenarioInstanceId">0</Data>
<Data Name="BugcheckInfoFromEFI">false</Data>
<Data Name="CheckpointStatus">0</Data>
</EventData>
</Event>
This event seems relevant too?
Log Name: System
Source: Microsoft-Windows-WER-SystemErrorReporting
Date: 6/21/2018 8:25:56 PM
Event ID: 1001
Task Category: None
Level: Error
Keywords: Classic
User: N/A
Computer: Zekrom
Description:
The computer has rebooted from a bugcheck. The bugcheck was: 0x000000c8 (0x0000000000020002, 0xfffff80f47aa1010, 0xfffffe8143757460, 0x0000000000000000). A dump was saved in: C:\WINDOWS\MEMORY.DMP. Report Id: 3892e736-e707-4598-ab2d-e69b721606b3.
Event Xml:
<Event xmlns="Link Removed">
<System>
<Provider Name="Microsoft-Windows-WER-SystemErrorReporting" Guid="{ABCE23E7-DE45-4366-8631-84FA6C525952}" EventSourceName="BugCheck" />
<EventID Qualifiers="16384">1001</EventID>
<Version>0</Version>
<Level>2</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2018-06-22T00:25:56.229714100Z" />
<EventRecordID>2829</EventRecordID>
<Correlation />
<Execution ProcessID="0" ThreadID="0" />
<Channel>System</Channel>
<Computer>Zekrom</Computer>
<Security />
</System>
<EventData>
<Data Name="param1">0x000000c8 (0x0000000000020002, 0xfffff80f47aa1010, 0xfffffe8143757460, 0x0000000000000000)</Data>
<Data Name="param2">C:\WINDOWS\MEMORY.DMP</Data>
<Data Name="param3">3892e736-e707-4598-ab2d-e69b721606b3</Data>
</EventData>
</Event>
But I could not find the Dump file on my disk... For some reason both times this has happened have been while accessing paypal and on the paypal login site.
Also, my computer sometimes uses all of its 16GB of RAM when I'm just browsing the internet and I was worried I may have a memory leak in one of my drivers or something? Could that be related? Thanks
Data from Event:
Log Name: System
Source: Microsoft-Windows-Kernel-Power
Date: 6/21/2018 8:25:30 PM
Event ID: 41
Task Category: (63)
Level: Critical
Keywords: (70368744177664),(2)
User: SYSTEM
Computer: Zekrom
Description:
The system has rebooted without cleanly shutting down first. This error could be caused if the system stopped responding, crashed, or lost power unexpectedly.
Event Xml:
<Event xmlns="Link Removed">
<System>
<Provider Name="Microsoft-Windows-Kernel-Power" Guid="{331C3B3A-2005-44C2-AC5E-77220C37D6B4}" />
<EventID>41</EventID>
<Version>6</Version>
<Level>1</Level>
<Task>63</Task>
<Opcode>0</Opcode>
<Keywords>0x8000400000000002</Keywords>
<TimeCreated SystemTime="2018-06-22T00:25:30.175952600Z" />
<EventRecordID>2781</EventRecordID>
<Correlation />
<Execution ProcessID="4" ThreadID="8" />
<Channel>System</Channel>
<Computer>Zekrom</Computer>
<Security UserID="S-1-5-18" />
</System>
<EventData>
<Data Name="BugcheckCode">200</Data>
<Data Name="BugcheckParameter1">0x20002</Data>
<Data Name="BugcheckParameter2">0xfffff80f47aa1010</Data>
<Data Name="BugcheckParameter3">0xfffffe8143757460</Data>
<Data Name="BugcheckParameter4">0x0</Data>
<Data Name="SleepInProgress">0</Data>
<Data Name="PowerButtonTimestamp">0</Data>
<Data Name="BootAppStatus">0</Data>
<Data Name="Checkpoint">0</Data>
<Data Name="ConnectedStandbyInProgress">false</Data>
<Data Name="SystemSleepTransitionsToOn">3</Data>
<Data Name="CsEntryScenarioInstanceId">0</Data>
<Data Name="BugcheckInfoFromEFI">false</Data>
<Data Name="CheckpointStatus">0</Data>
</EventData>
</Event>
This event seems relevant too?
Log Name: System
Source: Microsoft-Windows-WER-SystemErrorReporting
Date: 6/21/2018 8:25:56 PM
Event ID: 1001
Task Category: None
Level: Error
Keywords: Classic
User: N/A
Computer: Zekrom
Description:
The computer has rebooted from a bugcheck. The bugcheck was: 0x000000c8 (0x0000000000020002, 0xfffff80f47aa1010, 0xfffffe8143757460, 0x0000000000000000). A dump was saved in: C:\WINDOWS\MEMORY.DMP. Report Id: 3892e736-e707-4598-ab2d-e69b721606b3.
Event Xml:
<Event xmlns="Link Removed">
<System>
<Provider Name="Microsoft-Windows-WER-SystemErrorReporting" Guid="{ABCE23E7-DE45-4366-8631-84FA6C525952}" EventSourceName="BugCheck" />
<EventID Qualifiers="16384">1001</EventID>
<Version>0</Version>
<Level>2</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2018-06-22T00:25:56.229714100Z" />
<EventRecordID>2829</EventRecordID>
<Correlation />
<Execution ProcessID="0" ThreadID="0" />
<Channel>System</Channel>
<Computer>Zekrom</Computer>
<Security />
</System>
<EventData>
<Data Name="param1">0x000000c8 (0x0000000000020002, 0xfffff80f47aa1010, 0xfffffe8143757460, 0x0000000000000000)</Data>
<Data Name="param2">C:\WINDOWS\MEMORY.DMP</Data>
<Data Name="param3">3892e736-e707-4598-ab2d-e69b721606b3</Data>
</EventData>
</Event>
But I could not find the Dump file on my disk... For some reason both times this has happened have been while accessing paypal and on the paypal login site.
Also, my computer sometimes uses all of its 16GB of RAM when I'm just browsing the internet and I was worried I may have a memory leak in one of my drivers or something? Could that be related? Thanks
Solution
Also the website that had been crashing (PayPal login) allowed me to log in and do stuff now without issues so it was Intel Technology Access! Awesome, thank you for all the help!!!
JupiterMoon
New Member
- Joined
- Jun 22, 2018
- Messages
- 23
- Thread Author
-
- #23
JupiterMoon
New Member
- Joined
- Jun 22, 2018
- Messages
- 23
- Thread Author
-
- #24
Also I'm confused because I trying to learn more about the verifier, and it says it works while the user profile is loaded? Mine made me restart my computer, and it shows the windows loading screen and then a blue screen when a driver is detected?
kemical
Essential Member
- Joined
- Aug 28, 2007
- Messages
- 36,176
You should see a heading for change start up settings but you don't have one.
Your definitely sure your booting from the usb as that looks like the generic recovery screen.
In any case try clicking on command prompt and then type:
bcdedit /set {default} safeboot minimal
Here's a guide to help
How to Force Windows To Restart in Safe Mode
Once or if you get back into safe mode turn the verifier off by following the guide I posted above.
Your definitely sure your booting from the usb as that looks like the generic recovery screen.
In any case try clicking on command prompt and then type:
bcdedit /set {default} safeboot minimal
Here's a guide to help
How to Force Windows To Restart in Safe Mode
Once or if you get back into safe mode turn the verifier off by following the guide I posted above.
JupiterMoon
New Member
- Joined
- Jun 22, 2018
- Messages
- 23
- Thread Author
-
- #26
yeah, I had two usb options and set them first. Actually the partition 1 may have been the one I had to use?
I managed to get the startup settings when it tried to fix the offending driver and failed, and am on my computer now
I found the log files, even though it was in C: not E: like the earlier window said. Also, the last edit time is four hours in the future?
I managed to get the startup settings when it tried to fix the offending driver and failed, and am on my computer now
I found the log files, even though it was in C: not E: like the earlier window said. Also, the last edit time is four hours in the future?
Attachments
JupiterMoon
New Member
- Joined
- Jun 22, 2018
- Messages
- 23
- Thread Author
-
- #27
JupiterMoon
New Member
- Joined
- Jun 22, 2018
- Messages
- 23
- Thread Author
-
- #28
I ended up updating my chipset drivers again because my MSI update tool said the ones from that link were out of date
kemical
Essential Member
- Joined
- Aug 28, 2007
- Messages
- 36,176
Code:
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
Use !analyze -v to get detailed debugging information.
BugCheck C4, {2000, fffff80b8fcb3679, 0, 6452644e}
*** WARNING: Unable to verify timestamp for ndisrfl.sys
*** ERROR: Module load completed but symbols could not be loaded for ndisrfl.sys
Probably caused by : ndisrfl.sys ( ndisrfl+3679 )
Followup: MachineOwner
same driver again.
You could try uninstalling it totally and see if windows has a better driver.
Also try testing your RAM as i saw something which may indicate yours is faulty.
Use the windows memory test:
- Click Start, type mdsched.exe in the Search box, and then press Enter.
- Choose whether to restart the computer and run the tool immediately or schedule the tool to run at the next restart.
- Windows Memory Diagnostics runs automatically after the computer restarts and performs a standard memory test automatically. If you want to perform fewer or more tests, press F1, use the Up and Down arrow keys to set the Test Mix as Basic, Standard, or Extended, and then press F10 to apply the desired settings and resume testing.
- When testing is completed, the computer restarts automatically. You’ll see the test results when you log on.
JupiterMoon
New Member
- Joined
- Jun 22, 2018
- Messages
- 23
- Thread Author
-
- #30
I looked at the driver and think I will just uninstall it, my device is a desktop and not a touchscreen.
Intel® Technology Access exposes the 2-in-1 sensor and display setting detection to the browser applications using web services. The 2-in-1 sensor determines the mode of a device (for example: tablet mode or clamshell mode). The Display settings detect and get the screen resolution and orientation values.
It also exposes the Microsoft Windows 8.x* COM sensors accelerometer, ambient light, compass, inclinometer & orientation.
I am about to start the memory problem checker now.
Intel® Technology Access exposes the 2-in-1 sensor and display setting detection to the browser applications using web services. The 2-in-1 sensor determines the mode of a device (for example: tablet mode or clamshell mode). The Display settings detect and get the screen resolution and orientation values.
It also exposes the Microsoft Windows 8.x* COM sensors accelerometer, ambient light, compass, inclinometer & orientation.
I am about to start the memory problem checker now.
JupiterMoon
New Member
- Joined
- Jun 22, 2018
- Messages
- 23
- Thread Author
-
- #31
I went to uninstall it and I got a fatal error, I tried again and got the same error. Just an error, no BSOD but I need it gone because I don't have an applicable machine and it is causing problems... I don't know how to make sense of the logs though
Attachments
kemical
Essential Member
- Joined
- Aug 28, 2007
- Messages
- 36,176
Why send the dump file?
Did you bsod again?
As for the driver, I'd try installing the latest version but this time right click it and run as admin. As to why it's causing you so many issues is unclear and as I said earlier please run your memory tester.
Why send the Intel logs? Where did you get them from and when did they appear?
Did you bsod again?
As for the driver, I'd try installing the latest version but this time right click it and run as admin. As to why it's causing you so many issues is unclear and as I said earlier please run your memory tester.
Why send the Intel logs? Where did you get them from and when did they appear?
JupiterMoon
New Member
- Joined
- Jun 22, 2018
- Messages
- 23
- Thread Author
-
- #33
Oh, I didn't mean to send that sorry. I clicked it by accident and thought I pressed delete but did not.
They appeared when the uninstallation failed
They appeared when the uninstallation failed
JupiterMoon
New Member
- Joined
- Jun 22, 2018
- Messages
- 23
- Thread Author
-
- #35
I ran the memory tester on default settings, no issues were found. Should I run it again and change the settings? Or is it good, and my memory is fine?
JupiterMoon
New Member
- Joined
- Jun 22, 2018
- Messages
- 23
- Thread Author
-
- #36
Also the website that had been crashing (PayPal login) allowed me to log in and do stuff now without issues so it was Intel Technology Access! Awesome, thank you for all the help!!!
kemical
Essential Member
- Joined
- Aug 28, 2007
- Messages
- 36,176
Your very welcome Jupiter and your memory sounds fine.
Tell me though, what did you do with the offending driver? Replace it, uninstall it or run as admin as I suggested above? (I only ask as it's helpful for others as well as myself )
Tell me though, what did you do with the offending driver? Replace it, uninstall it or run as admin as I suggested above? (I only ask as it's helpful for others as well as myself
JupiterMoon
New Member
- Joined
- Jun 22, 2018
- Messages
- 23
- Thread Author
-
- #38
I ended up uninstalling it, but only because I found the software package to be unnecessary. It's not intended for use with non-touchscreen desktops.
I would have ran it as an admin, but I decided I don't want the software. I consider it bloatware if I don't need it. Sorry for not following your recommendation, though.
I would have ran it as an admin, but I decided I don't want the software. I consider it bloatware if I don't need it. Sorry for not following your recommendation, though.
Similar threads
- Replies
- 3
- Views
- 3K
- Question
- Replies
- 1
- Views
- 2K
- Solved
- Replies
- 10
- Views
- 5K
- Replies
- 5
- Views
- 8K
- Replies
- 2
- Views
- 2K