Windows 10: BSOD Memory Management (poss. iastor.sys)

I downloaded and ran dm_log_collector.exe but it did not generate a zip file. It generated a folder named "SFdebugFiles" containing dumps for the last five days. Is this what is needed?

Background:

My computer has been running Win-7 Pro for four years. I updated it to 10-Pro Aug. 30 and it ran fine. During that time I installed Vipre security software and updated a couple of other applications, including installing Start10.

On Sept. 3 (4 days later) it began to BSOD with Memory Management error. I ran MEMTEST86 and it showed no memory problems. I ran the Dell Diagnostics from BIOS and it indicated a HDD error.

I ran CHKDSK:
Stage 1: Examining basic file system structure ...
29 file records processed.
File verification completed.
0 large file records processed.
0 bad file records processed

Stage 2: Examining file name linkage
43 index entries processed.
Index verification completed.
0 unindexed files scanned.
0 unindexed files recovered to lost and found.

Stage 3: Examining security descriptors ...
Security descriptor verification completed.
7 data files processed.
Errors detected in the uppercase file.

So I pulled the hard drive and imaged it onto a new and larger drive (500 GB to 2TB). The system booted very fast and worked fine. I was able to install Macrium Reflect 6 and pull an image, but it crashed before I could produce a boot disk. The space for the C: drive was still 500GB so I installed MiniTool Partition Wizard -- moved Dell restore partition to end of HDD and expanded the system partition and then uninstalled Minitool Partition Wizard.

I installed "whocrashed.exe" and it showed:
"probably caused by : ntoskrnl.exe (nt+0x14E240)"
"Bugcheck code: 0x1A (0x3300, 0xFFFFD000A9FF6000, 0x800000019FD82963, 0x2)"
"Error: MEMORY MANAGEMENT"
"file path: C:WINDOWS\system32\ntoskrnl.exe"
- next message, same time stamp
"probably caused by : iastor.sys (iaStor+0x371EB)"
"Bugcheck code: 0x1A (0x3300, 0xFFFFD000A9FF6000, 0x800000019FD82963, 0x2)"
"Error: MEMORY MANAGEMENT"
"file path: C:WINDOWS\system32\drivers\iastor.sys"
"product: Intel Rapid Storage Technology driver"
.
This message seemed to appear just before each crash:
"Windows Backup"
"This feature is not available in a portable workstation environment"

So I used regedit to remove the key "PortableOperatingSystem". That error no longer appears but the computer still crashes after a few minutes.

I can boot into Win-10 but it only runs 4 to 6 minutes before crashing.

Just in case it's what is needed, I have zipped and attached the "SFdebugFiles" folder. Please let me know if there is something else I should do.

thanks,
Tom

:)

 

Windows 10 Kernel_Security_Check_Failure

After removing ExpressCache, I restart again with verifier on and had the same BSOD error but this time being iastor.sys

 

memory management issue BSOD after upgrading from win 7 to 10

After unistalling Avast Antivirus I 'managed' to have restarts (no BSOD every 20 minutes) every hour or so. I managed to run verifier.On the first restart before even starting the windows a BSOD appear with the logo Driver Verifier critical something and
the iaStor.sys file was named.Is this the driver that could cause the problem?Ran sfc/scannow but no problem was noticed. At the same time an Office update that cannot be installed repeats the process of installing too many times - Update for Office 2003 (KB907417)
- Error 0x80096004. No dump file was created during verifier check

 

Hi tcloud,

Welcome to the 10forums.

Please read BSOD Posting Instructions

 

I read the instructions and watched the video. I followed the instructions, or so I thought. I ran ran dm_log_collector.exe but it did not generate a zip file. It generated a folder named "SFdebugFiles" and I attached that. What have I missed?

 

Please try this tool, BSOD Inspector.

 

I ran dm_log_collector again and it generated a zip file this time. It is attached.

 

I have taken a look at a few dumps.
They all are saying the same.

The cause is Acronis, maybe because of an outdated version?
Please update Acronis
Code: 7: kd> lmvm vsflt53start end module name fffff801`f3890000 fffff801`f38b5000 vsflt53 T (no symbols) Loaded symbol image file: vsflt53.sys Image path: \SystemRoot\system32\DRIVERS\vsflt53.sys Image name: vsflt53.sys Timestamp: Tue Apr 12 13:31:35 2011 (4DA43817) CheckSum: 00025AE0 ImageSize: 00025000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4 7: kd> lmvm snapman start end module name fffff801`f43a0000 fffff801`f43e6000 snapman T (no symbols) Loaded symbol image file: snapman.sys Image path: \SystemRoot\system32\DRIVERS\snapman.sys Image name: snapman.sys Timestamp: Wed Mar 09 14:22:38 2011 (4D777F1E) CheckSum: 0004F614 ImageSize: 00046000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4[/quote] If you are using RAID, update Intel Rapid Storage Technology
If you are not using RAID, disable Intel Rapid Storage Technology in the services (search services.msc)
Code: 7: kd> lmvm iastorstart end module name fffff801`f3a20000 fffff801`f3b74000 iaStor T (no symbols) Loaded symbol image file: iaStor.sys Image path: \SystemRoot\System32\drivers\iaStor.sys Image name: iaStor.sys Timestamp: Tue Sep 14 03:23:32 2010 (4C8ECE94) CheckSum: 00073894 ImageSize: 00154000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4[/quote]

 

If you are using RAID, update Intel Rapid Storage Technology
If you are not using RAID, disable Intel Rapid Storage Technology in the services (search services.msc)
Code: 7: kd> lmvm iastorstart end module name fffff801`f3a20000 fffff801`f3b74000 iaStor T (no symbols) Loaded symbol image file: iaStor.sys Image path: \SystemRoot\System32\drivers\iaStor.sys Image name: iaStor.sys Timestamp: Tue Sep 14 03:23:32 2010 (4C8ECE94) CheckSum: 00073894 ImageSize: 00154000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4[/quote] [/quote] Thank you very much.

I don't have Acronis -- I uninstalled it three years ago. Maybe some of it was left behind, but how do I find it? I looked in services and there is nothing by Acronis and I don't know how to find snapman or vsflt53. Can I just delete the files above? There is no folder Acronis in either of my Program Files directories.

Do I look for something in the registry?

There is also no "Intel Rapid Storage Technology" in services.msc. There is nothing there that starts with "Intel".

 

Please install Acronis, IRST and Revo uninstaller free.
In Revo uninstaller, uninstall Acronis and IRST and remove the traces.

 

I ran Revo free and no indication of anything Acronis or Intel. I will do more research on Revo.

 

Revo will not find anything about Acronis and IRST without them installed.

 

I don't have source for IRST -- it appears to be a Dell driver and there is nothing on the Dell site indicating an update for it for this particular computer. I have researched this driver (iastor.sys) for this machine and found nothing as an update or installation for it.

Acronis hosed my computer so badly that I don't want it near my computer. I understand the logic, but I'd like to find another way to remove it other than re-installing it.

If the computer would run for longer than three or four minutes I'd look in the registry for it.

thanks,
Tom

 

Move the drivers somwhere else.
If moving them doesn't give problems, then delete them.

 

Update & FYI:

Attempt to install Acronis TrueImage 2012 fails with message "this software doesn't work with Windows 10"

Removing all Acronis / TrueImage registry entries does not stop BSOD

The Acronis drivers, according to what I've read, are inserted in between system drivers and can't be easily removed (though that's what I'm going to work on now).

WRT Intel driver iastor.sys -- the registry entries are protected and can't be deleted. It can be found under:
Device Manager > IDE ATA/ATAPI controllers > Intel 7 Series Chipset Family SATA AHCI Controller > iastor.sys
(my laptop uses iastorA.sys)

I tried to update the driver but it is current. Then, uninstalled it and rebooted and it came back. Then, uninstalled it and removed the software (iastor.sys) and rebooted -- crashed saying couldn't find boot device.

So -- apparently the iastor.sys is not a RAID controller in this circumstance but the SATA AHCI controller and I'm stuck with it.

I'm going to work on the Acronis angle, but wonder if there is something else that is being overlooked.

thanks again,
Tom