BSOD Memory Management (poss. iastor.sys)

Page 1 of 2 12 LastLast

  1. Posts : 9
    Windows 10 Pro, 10.0, build: 10240
       #1

    BSOD Memory Management (poss. iastor.sys)


    I downloaded and ran dm_log_collector.exe but it did not generate a zip file. It generated a folder named "SFdebugFiles" containing dumps for the last five days. Is this what is needed?

    Background:

    My computer has been running Win-7 Pro for four years. I updated it to 10-Pro Aug. 30 and it ran fine. During that time I installed Vipre security software and updated a couple of other applications, including installing Start10.

    On Sept. 3 (4 days later) it began to BSOD with Memory Management error. I ran MEMTEST86 and it showed no memory problems. I ran the Dell Diagnostics from BIOS and it indicated a HDD error.

    I ran CHKDSK:
    Stage 1: Examining basic file system structure ...
    29 file records processed.
    File verification completed.
    0 large file records processed.
    0 bad file records processed

    Stage 2: Examining file name linkage
    43 index entries processed.
    Index verification completed.
    0 unindexed files scanned.
    0 unindexed files recovered to lost and found.

    Stage 3: Examining security descriptors ...
    Security descriptor verification completed.
    7 data files processed.
    Errors detected in the uppercase file.

    So I pulled the hard drive and imaged it onto a new and larger drive (500 GB to 2TB). The system booted very fast and worked fine. I was able to install Macrium Reflect 6 and pull an image, but it crashed before I could produce a boot disk. The space for the C: drive was still 500GB so I installed MiniTool Partition Wizard -- moved Dell restore partition to end of HDD and expanded the system partition and then uninstalled Minitool Partition Wizard.

    I installed "whocrashed.exe" and it showed:
    "probably caused by : ntoskrnl.exe (nt+0x14E240)"
    "Bugcheck code: 0x1A (0x3300, 0xFFFFD000A9FF6000, 0x800000019FD82963, 0x2)"
    "Error: MEMORY MANAGEMENT"
    "file path: C:WINDOWS\system32\ntoskrnl.exe"
    - next message, same time stamp
    "probably caused by : iastor.sys (iaStor+0x371EB)"
    "Bugcheck code: 0x1A (0x3300, 0xFFFFD000A9FF6000, 0x800000019FD82963, 0x2)"
    "Error: MEMORY MANAGEMENT"
    "file path: C:WINDOWS\system32\drivers\iastor.sys"
    "product: Intel Rapid Storage Technology driver"
    .
    This message seemed to appear just before each crash:
    "Windows Backup"
    "This feature is not available in a portable workstation environment"

    So I used regedit to remove the key "PortableOperatingSystem". That error no longer appears but the computer still crashes after a few minutes.

    I can boot into Win-10 but it only runs 4 to 6 minutes before crashing.

    Just in case it's what is needed, I have zipped and attached the "SFdebugFiles" folder. Please let me know if there is something else I should do.

    thanks,
    Tom
      My Computer


  2. Posts : 14,901
    Windows 10 Pro
       #2

    Hi tcloud,

    Welcome to the 10forums.

    Please read BSOD Posting Instructions
      My Computers


  3. Posts : 9
    Windows 10 Pro, 10.0, build: 10240
    Thread Starter
       #3

    axe0 said:
    Hi tcloud,

    Welcome to the 10forums.

    Please read BSOD Posting Instructions
    I read the instructions and watched the video. I followed the instructions, or so I thought. I ran ran dm_log_collector.exe but it did not generate a zip file. It generated a folder named "SFdebugFiles" and I attached that. What have I missed?
      My Computer


  4. Posts : 14,901
    Windows 10 Pro
       #4

    Please try this tool, BSOD Inspector.
      My Computers


  5. Posts : 9
    Windows 10 Pro, 10.0, build: 10240
    Thread Starter
       #5

    axe0 said:
    Hi tcloud,

    Welcome to the 10forums.

    Please read BSOD Posting Instructions
    I ran dm_log_collector again and it generated a zip file this time. It is attached.
      My Computer


  6. Posts : 14,901
    Windows 10 Pro
       #6

    I have taken a look at a few dumps.
    They all are saying the same.

    The cause is Acronis, maybe because of an outdated version?
    Please update Acronis
    Code:
    7: kd> lmvm vsflt53start             end                 module name
    fffff801`f3890000 fffff801`f38b5000   vsflt53  T (no symbols)           
        Loaded symbol image file: vsflt53.sys
        Image path: \SystemRoot\system32\DRIVERS\vsflt53.sys
        Image name: vsflt53.sys
        Timestamp:        Tue Apr 12 13:31:35 2011 (4DA43817)
        CheckSum:         00025AE0
        ImageSize:        00025000
        Translations:     0000.04b0 0000.04e4 0409.04b0 0409.04e4
    7: kd> lmvm snapman
    start             end                 module name
    fffff801`f43a0000 fffff801`f43e6000   snapman  T (no symbols)           
        Loaded symbol image file: snapman.sys
        Image path: \SystemRoot\system32\DRIVERS\snapman.sys
        Image name: snapman.sys
        Timestamp:        Wed Mar 09 14:22:38 2011 (4D777F1E)
        CheckSum:         0004F614
        ImageSize:        00046000
        Translations:     0000.04b0 0000.04e4 0409.04b0 0409.04e4
    If you are using RAID, update Intel Rapid Storage Technology
    If you are not using RAID, disable Intel Rapid Storage Technology in the services (search services.msc)
    Code:
    7: kd> lmvm iastorstart             end                 module name
    fffff801`f3a20000 fffff801`f3b74000   iaStor   T (no symbols)           
        Loaded symbol image file: iaStor.sys
        Image path: \SystemRoot\System32\drivers\iaStor.sys
        Image name: iaStor.sys
        Timestamp:        Tue Sep 14 03:23:32 2010 (4C8ECE94)
        CheckSum:         00073894
        ImageSize:        00154000
        Translations:     0000.04b0 0000.04e4 0409.04b0 0409.04e4
      My Computers


  7. Posts : 9
    Windows 10 Pro, 10.0, build: 10240
    Thread Starter
       #7

    axe0 said:
    I have taken a look at a few dumps.
    They all are saying the same.

    The cause is Acronis, maybe because of an outdated version?
    Please update Acronis
    Code:
    7: kd> lmvm vsflt53start             end                 module name
    fffff801`f3890000 fffff801`f38b5000   vsflt53  T (no symbols)           
        Loaded symbol image file: vsflt53.sys
        Image path: \SystemRoot\system32\DRIVERS\vsflt53.sys
        Image name: vsflt53.sys
        Timestamp:        Tue Apr 12 13:31:35 2011 (4DA43817)
        CheckSum:         00025AE0
        ImageSize:        00025000
        Translations:     0000.04b0 0000.04e4 0409.04b0 0409.04e4
    7: kd> lmvm snapman
    start             end                 module name
    fffff801`f43a0000 fffff801`f43e6000   snapman  T (no symbols)           
        Loaded symbol image file: snapman.sys
        Image path: \SystemRoot\system32\DRIVERS\snapman.sys
        Image name: snapman.sys
        Timestamp:        Wed Mar 09 14:22:38 2011 (4D777F1E)
        CheckSum:         0004F614
        ImageSize:        00046000
        Translations:     0000.04b0 0000.04e4 0409.04b0 0409.04e4
    If you are using RAID, update Intel Rapid Storage Technology
    If you are not using RAID, disable Intel Rapid Storage Technology in the services (search services.msc)
    Code:
    7: kd> lmvm iastorstart             end                 module name
    fffff801`f3a20000 fffff801`f3b74000   iaStor   T (no symbols)           
        Loaded symbol image file: iaStor.sys
        Image path: \SystemRoot\System32\drivers\iaStor.sys
        Image name: iaStor.sys
        Timestamp:        Tue Sep 14 03:23:32 2010 (4C8ECE94)
        CheckSum:         00073894
        ImageSize:        00154000
        Translations:     0000.04b0 0000.04e4 0409.04b0 0409.04e4
    Thank you very much.

    I don't have Acronis -- I uninstalled it three years ago. Maybe some of it was left behind, but how do I find it? I looked in services and there is nothing by Acronis and I don't know how to find snapman or vsflt53. Can I just delete the files above? There is no folder Acronis in either of my Program Files directories.

    Do I look for something in the registry?

    There is also no "Intel Rapid Storage Technology" in services.msc. There is nothing there that starts with "Intel".
      My Computer


  8. Posts : 14,901
    Windows 10 Pro
       #8

    Please install Acronis, IRST and Revo uninstaller free.
    In Revo uninstaller, uninstall Acronis and IRST and remove the traces.
      My Computers


  9. Posts : 9
    Windows 10 Pro, 10.0, build: 10240
    Thread Starter
       #9

    axe0 said:
    Please install Acronis, IRST and Revo uninstaller free.
    In Revo uninstaller, uninstall Acronis and IRST and remove the traces.
    I ran Revo free and no indication of anything Acronis or Intel. I will do more research on Revo.
      My Computer


  10. Posts : 14,901
    Windows 10 Pro
       #10

    Revo will not find anything about Acronis and IRST without them installed.
      My Computers


 

  Related Discussions
Our Sites
Site Links
About Us
Windows 10 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 10" and related materials are trademarks of Microsoft Corp.

© Designer Media Ltd
All times are GMT -5. The time now is 07:05.
Find Us




Windows 10 Forums