<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
  <meta content="text/html; charset=ISO-8859-1"
 http-equiv="Content-Type">
  <title></title>
</head>
<body bgcolor="#ffffff" text="#000000">
When did this crash happen? Is it during the install as well?<br>
The Net[Flt/Adp] drivers are not even in the call stack.<br>
<br>
On 1/19/2010 7:52 PM, Huihong Luo wrote:
<blockquote cite="mid:425629.37450.qm@web34305.mail.mud.yahoo.com"
 type="cite">
  <table border="0" cellpadding="0" cellspacing="0">
    <tbody>
      <tr>
        <td
 style="font-family: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; font-size: inherit; line-height: inherit; font-size-adjust: inherit; font-stretch: inherit; -x-system-font: none;"
 valign="top">
        <div>decndis.sys caused the crash on one user</div>
        <div> </div>
        <div>decndis is part of the DEC (Digital Equipment Corp) LAT
protocol that we use to access the VAX</div>
        <div> </div>
        <div>0: kd> !analyze -v<br>
*******************************************************************************<br>
*                                                                            
*<br>
*                        Bugcheck
Analysis                                    *<br>
*                                                                            
*<br>
*******************************************************************************<br>
        <br>
DRIVER_IRQL_NOT_LESS_OR_EQUAL (d1)<br>
An attempt was made to access a pageable (or completely invalid)
address at an<br>
interrupt request level (IRQL) that is too high.  This is usually<br>
caused by drivers using improper addresses.<br>
If kernel debugger is available get stack backtrace.<br>
Arguments:<br>
Arg1: 000001f0, memory referenced<br>
Arg2: 00000002, IRQL<br>
Arg3: 00000000, value 0 = read <a moz-do-not-send="true" class="kLink"
 oncontextmenu="return false;" id="KonaLink5"
 onmouseover="adlinkMouseOver(event,this,5);"
 style="position: static; text-decoration: underline ! important;"
 onclick="adlinkMouseClick(event,this,5);"
 onmouseout="adlinkMouseOut(event,this,5);"
 href="http://www.sevenforums.com/#" target="_top"><font
 style="font-weight: 400; font-size: 10pt; color: rgb(0, 114, 188) ! important; font-family: verdana,geneva,lucida,'lucida grande',arial,helvetica,sans-serif; position: static;"
 color="#0072bc"><span class="kLink"
 style="font-weight: 400; font-size: 10pt; color: rgb(0, 114, 188) ! important; font-family: verdana,geneva,lucida,'lucida grande',arial,helvetica,sans-serif; position: relative;">operation</span></font></a>,
1 = write operation<br>
Arg4: 93401bb0, address which referenced memory<br>
        <br>
Debugging Details:<br>
------------------<br>
        <br>
        <br>
READ_ADDRESS: GetPointerFromAddress: unable to read from 82975718<br>
Unable to read MiSystemVaType memory at 82955160<br>
000001f0 <br>
        <br>
CURRENT_IRQL:  2<br>
        <br>
FAULTING_IP: <br>
decndis+1bb0<br>
93401bb0 6683bef001000001 cmp     word ptr [esi+1F0h],1<br>
        <br>
CUSTOMER_CRASH_COUNT:  1<br>
        <br>
DEFAULT_BUCKET_ID:  <a moz-do-not-send="true" class="kLink"
 oncontextmenu="return false;" id="KonaLink6"
 onmouseover="adlinkMouseOver(event,this,6);"
 style="position: static; text-decoration: underline ! important;"
 onclick="adlinkMouseClick(event,this,6);"
 onmouseout="adlinkMouseOut(event,this,6);"
 href="http://www.sevenforums.com/#" target="_top"><font
 style="font-weight: 400; font-size: 10pt; color: rgb(0, 114, 188) ! important; font-family: verdana,geneva,lucida,'lucida grande',arial,helvetica,sans-serif; position: static;"
 color="#0072bc"><span class="kLink"
 style="font-weight: 400; font-size: 10pt; color: rgb(0, 114, 188) ! important; font-family: verdana,geneva,lucida,'lucida grande',arial,helvetica,sans-serif; position: relative;">VISTA</span></font></a>_DRIVER_FAULT<br>
        <br>
BUGCHECK_STR:  0xD1<br>
        <br>
PROCESS_NAME:  System<br>
        <br>
TRAP_FRAME:  8078aab0 -- (.trap 0xffffffff8078aab0)<br>
ErrCode = 00000000<br>
eax=00000007 ebx=8589f0e0 ecx=00000000 edx=00000001 esi=00000000
edi=93406978<br>
eip=93401bb0 esp=8078ab24 ebp=8078ab28 iopl=0         nv up ei pl nz na
po nc<br>
cs=0008  ss=0010  ds=0023  es=0023  fs=0030  gs=0000            
efl=00010202<br>
decndis+0x1bb0:<br>
93401bb0 6683bef001000001 cmp     word ptr [esi+1F0h],1  
ds:0023:000001f0=????<br>
Resetting default scope<br>
        <br>
LAST_CONTROL_TRANSFER:  from 93401bb0 to 828537eb<br>
        <br>
STACK_TEXT:  <br>
8078aab0 93401bb0 badb0d00 00000001 80788000 nt!KiTrap0E+0x2cf<br>
WARNING: Stack unwind information not available. Following frames may
be wrong.<br>
8078ab28 934039c3 00000000 00000007 8078ab54 decndis+0x1bb0<br>
8078ab40 934023db 8078ab54 86907ebc 86908008 decndis+0x39c3<br>
8078ab78 93402af0 93406700 86945eac 00000000 decndis+0x23db<br>
8078ab8c 8ae7720d 93406700 86907ebc 00000000 decndis+0x2af0<br>
8078abac 8ae7709c 00908008 86907ebc 00000000
ndis!ndisSendCompleteWithPause+0xaf<br>
8078abd0 8ae758a6 86908008 00000000 00000001
ndis!ndisMSendNetBufferListsCompleteToNdisPackets+0x7c<br>
8078ac1c 8ae115e2 00000000 873ae3d8 00000001
ndis!ndisMSendCompleteNetBufferListsInternal+0x217<br>
8078ac30 8ef30848 85fcabd0 873ae3d8 00000001
ndis!NdisFSendNetBufferListsComplete+0x3a<br>
8078ac54 8ae115e2 85fca858 873ae3d8 00000001
pacer!PcFilterSendNetBufferListsComplete+0xb4<br>
8078ac68 8ef4bb35 85fc9008 873ae3d8 00000001
ndis!NdisFSendNetBufferListsComplete+0x3a<br>
8078ac8c 8ae75f0a 85fca008 873ae3d8 00000001 vpcnfltr+0x1b35<br>
8078acb0 8f1d71d9 8589f0e0 873ae3d8 00000001
ndis!NdisMSendNetBufferListsComplete+0xa4<br>
8078ad08 8f1d7e07 873ae3d8 00000000 85f9e000 k57nd60x+0x2b1d9<br>
8078ae60 8f1d606d 85f9e000 00000000 00000000 k57nd60x+0x2be07<br>
8078ae84 8f1ae9d5 85f9e000 00000000 00000000 k57nd60x+0x2a06d<br>
8078aeb0 8f1aef9d 00000001 8589f0e0 85f88578 k57nd60x+0x29d5<br>
8078aec8 8f1af147 00000000 00000000 8078af10 k57nd60x+0x2f9d<br>
8078aee0 8ae63301 85f9e000 00000000 00000000 k57nd60x+0x3147<br>
8078af20 8ae0e9f4 85f8864c 00f88578 00000000 ndis!ndisMiniportDpc+0xda<br>
8078af48 828753b5 85f8864c 85f88578 00000000 ndis!ndisInterruptDpc+0xaf<br>
8078afa4 82875218 82936d20 85cc7020 00000000 nt!KiExecuteAllDpcs+0xf9<br>
8078aff4 828749dc 8e9152cc 00000000 00000000 nt!KiRetireDpcList+0xd5<br>
8078aff8 8e9152cc 00000000 00000000 00000000 nt!KiDispatchInterrupt+0x2c<br>
828749dc 00000000 0000001a 00d6850f bb830000 0x8e9152cc<br>
        <br>
        <br>
STACK_COMMAND:  kb<br>
        <br>
FOLLOWUP_IP: <br>
decndis+1bb0<br>
93401bb0 6683bef001000001 cmp     word ptr [esi+1F0h],1<br>
        <br>
SYMBOL_STACK_INDEX:  1<br>
        <br>
SYMBOL_NAME:  decndis+1bb0<br>
        <br>
FOLLOWUP_NAME:  MachineOwner<br>
        <br>
MODULE_NAME: decndis<br>
        <br>
IMAGE_NAME:  decndis.sys<br>
        <br>
        <a moz-do-not-send="true" class="kLink"
 oncontextmenu="return false;" id="KonaLink7"
 onmouseover="adlinkMouseOver(event,this,7);"
 style="position: static; text-decoration: underline ! important;"
 onclick="adlinkMouseClick(event,this,7);"
 onmouseout="adlinkMouseOut(event,this,7);"
 href="http://www.sevenforums.com/#" target="_top"><font
 style="font-weight: 400; font-size: 10pt; color: rgb(0, 114, 188) ! important; font-family: verdana,geneva,lucida,'lucida grande',arial,helvetica,sans-serif; position: static;"
 color="#0072bc"><span class="kLink"
 style="font-weight: 400; font-size: 10pt; color: rgb(0, 114, 188) ! important; font-family: verdana,geneva,lucida,'lucida grande',arial,helvetica,sans-serif; position: relative;">DEBUG</span></font></a>_FLR_IMAGE_TIMESTAMP: 
3d8305c8<br>
        <br>
FAILURE_BUCKET_ID:  0xD1_decndis+1bb0<br>
        <br>
BUCKET_ID:  OLD_IMAGE_decndis.sys<br>
        <br>
Followup: MachineOwner<br>
---------<br>
        <br>
        <br>
--- On <b>Mon, 1/18/10, Huihong Luo <i><a class="moz-txt-link-rfc2396E" href="mailto:huisinro@yahoo.com"><huisinro@yahoo.com></a></i></b>
wrote:<br>
        </div>
        <blockquote
 style="border-left: 2px solid rgb(16, 16, 255); padding-left: 5px; margin-left: 5px;"><br>
From: Huihong Luo <a class="moz-txt-link-rfc2396E" href="mailto:huisinro@yahoo.com"><huisinro@yahoo.com></a><br>
Subject: Re: [vbox-dev] VBoxNetFlt.sys BSOD on installation time<br>
To: <a class="moz-txt-link-abbreviated" href="mailto:vbox-dev@virtualbox.org">vbox-dev@virtualbox.org</a>, "Alexey Eremenko" <a class="moz-txt-link-rfc2396E" href="mailto:al4321@gmail.com"><al4321@gmail.com></a><br>
Date: Monday, January 18, 2010, 10:43 AM<br>
          <br>
          <div class="plainMail">Thanks, I will check with the users.<br>
          <br>
--- On Mon, 1/18/10, Alexey Eremenko <<a moz-do-not-send="true"
 href="http://us.mc343.mail.yahoo.com/mc/compose?to=al4321@gmail.com"
 ymailto="mailto:al4321@gmail.com">al4321@gmail.com</a>> wrote:<br>
          <br>
> From: Alexey Eremenko <<a moz-do-not-send="true"
 href="http://us.mc343.mail.yahoo.com/mc/compose?to=al4321@gmail.com"
 ymailto="mailto:al4321@gmail.com">al4321@gmail.com</a>><br>
> Subject: Re: [vbox-dev] VBoxNetFlt.sys BSOD on installation time<br>
> To: <a moz-do-not-send="true"
 href="http://us.mc343.mail.yahoo.com/mc/compose?to=vbox-dev@virtualbox.org"
 ymailto="mailto:vbox-dev@virtualbox.org">vbox-dev@virtualbox.org</a><br>
> Date: Monday, January 18, 2010, 10:38 AM<br>
> On Mon, Jan 18, 2010 at 8:35 PM,<br>
> Alexey Eremenko <<a moz-do-not-send="true"
 href="http://us.mc343.mail.yahoo.com/mc/compose?to=al4321@gmail.com"
 ymailto="mailto:al4321@gmail.com">al4321@gmail.com</a>><br>
> wrote:<br>
> > On Mon, Jan 18, 2010 at 8:19 PM, Huihong Luo <<a
 moz-do-not-send="true"
 href="http://us.mc343.mail.yahoo.com/mc/compose?to=huisinro@yahoo.com"
 ymailto="mailto:huisinro@yahoo.com">huisinro@yahoo.com</a>><br>
> wrote:<br>
> >> This did happen, although very rarely, 2 users<br>
> from our 30k users got the BSOD. From the below minidump<br>
> info, it's to do with power state of the net filter driver.<br>
> They tested VirtualBox 3.1.2, and got same BSOD.<br>
> >><br>
> >> I checked the logs, seems this bug was fixed<br>
> somewhat, but it still exists.<br>
> >><br>
> ><br>
> > The only bug that is somewhat related I can think of,<br>
> is the<br>
> > professional (server) network cards, that support<br>
> bonding and VLANs<br>
> > that are may have compatibility problems with<br>
> vboxnetflt.<br>
> > (there was a ticket but I can't find it)<br>
> <br>
> Found it !<br>
> <a moz-do-not-send="true"
 href="http://www.virtualbox.org/ticket/5519" target="_blank">http://www.virtualbox.org/ticket/5519</a><br>
> <br>
> > It also may have conflict with TrendMicro AV:<br>
> > <a moz-do-not-send="true"
 href="http://www.virtualbox.org/ticket/3370" target="_blank">http://www.virtualbox.org/ticket/3370</a><br>
> <br>
> <br>
> -- <br>
> -Alexey Eromenko "Technologov"<br>
> <br>
> _______________________________________________<br>
> vbox-dev mailing list<br>
> <a moz-do-not-send="true"
 href="http://us.mc343.mail.yahoo.com/mc/compose?to=vbox-dev@virtualbox.org"
 ymailto="mailto:vbox-dev@virtualbox.org">vbox-dev@virtualbox.org</a><br>
> <a moz-do-not-send="true"
 href="http://vbox.innotek.de/mailman/listinfo/vbox-dev" target="_blank">http://vbox.innotek.de/mailman/listinfo/vbox-dev</a><br>
> <br>
          <br>
_______________________________________________<br>
vbox-dev mailing list<br>
          <a moz-do-not-send="true"
 href="http://us.mc343.mail.yahoo.com/mc/compose?to=vbox-dev@virtualbox.org"
 ymailto="mailto:vbox-dev@virtualbox.org">vbox-dev@virtualbox.org</a><br>
          <a moz-do-not-send="true"
 href="http://vbox.innotek.de/mailman/listinfo/vbox-dev" target="_blank">http://vbox.innotek.de/mailman/listinfo/vbox-dev</a><br>
          </div>
        </blockquote>
        </td>
      </tr>
    </tbody>
  </table>
  <pre wrap="">
<fieldset class="mimeAttachmentHeader"></fieldset>
_______________________________________________
vbox-dev mailing list
<a class="moz-txt-link-abbreviated" href="mailto:vbox-dev@virtualbox.org">vbox-dev@virtualbox.org</a>
<a class="moz-txt-link-freetext" href="http://vbox.innotek.de/mailman/listinfo/vbox-dev">http://vbox.innotek.de/mailman/listinfo/vbox-dev</a>
  </pre>
</blockquote>
<br>
</body>
</html>