Dancing with the devil - My first BSOD experience

eastwind · 09 Aug 2010

I haven't had any problem with this laptop for years, haven't really installed any applications or hardware lately, but on sunday night, it started acting up. Giving me a BSOD. I'm running XP, I have AVG and Malware bytes. It was a tad slow, so I rebooted when I get to the login screen, it crashes. Once I click on an icon to login it crashes.

It doesn't display anything about NDIS.SYS when it crashes, but I booted into safe mode and renamed it, and when I did it, I can start up the system normally of course with no network support. Once I rename it, it starts crashing. I checked the version and it matches, I ran malware bytes and AVG and they found nothing.

No, what is strange is that i get this error.
DRIVER_IRQL_NOT_LESS_OR_EQUAL" with the technical info being "***STOP: 0x000000D1 (0x3D10047F, 0x00000002, 0x00000000, 0x????????"

The strangeness is that if you google 0x3d10047f, you only get 2 results of other people who are having the same problem and they all posted yesterday too. So it seems a bunch of random people around the world ended up with the same exact problem, unless of course that 0x3d10047f is the representation of the date. then I guess that will not be so strange. lol

I have attached a minidump

Any help will be greatly appreciated. Thanks

Jonathan_King · 09 Aug 2010

I must confess I am not very good at XP BSODs, but I'll give it a shot.

If XP is anything like Vista/7, a dump blaming a Windows networking driver often points to either a third-party security program, or the network adapter drivers.

AVG is notorious for causing crashes in Vista/7, not so sure about XP. Just to be on the safe side, remove AVG with this tool: http://download.avg.com/filedir/util...avgremover.exe

Replace it with the free MSE instead: http://www.microsoft.com/security_essentials

Also update your network adapter drivers.

Code:

Microsoft (R) Windows Debugger Version 6.12.0002.633 AMD64
Copyright (c) Microsoft Corporation. All rights reserved.


Loading Dump File [C:\Users\Jonathan\_jcgriff2_\dbug\__Kernel__\Mini080810-09.dmp]
Mini Kernel Dump File: Only registers and stack trace are available

Symbol search path is: SRV*c:\symbols*http://msdl.microsoft.com/download/symbols
Executable search path is: 
Windows XP Kernel Version 2600 (Service Pack 2) UP Free x86 compatible
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 2600.xpsp_sp2_gdr.100216-1441
Machine Name:
Kernel base = 0x804d7000 PsLoadedModuleList = 0x8055a6a0
Debug session time: Sun Aug  8 14:15:44.587 2010 (UTC - 4:00)
System Uptime: 0 days 0:01:08.188
Loading Kernel Symbols
...............................................................
...........................................................
Loading User Symbols
Loading unloaded module list
......
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck 100000D1, {3d10047f, 2, 0, 8271310f}

Probably caused by : Unknown_Image ( ANALYSIS_INCONCLUSIVE )

Followup: MachineOwner
---------

kd> !analyze -v;lmtsmn;.bugcheck;.logclose;q
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

DRIVER_IRQL_NOT_LESS_OR_EQUAL (d1)
An attempt was made to access a pageable (or completely invalid) address at an
interrupt request level (IRQL) that is too high.  This is usually
caused by drivers using improper addresses.
If kernel debugger is available get stack backtrace.
Arguments:
Arg1: 3d10047f, memory referenced
Arg2: 00000002, IRQL
Arg3: 00000000, value 0 = read operation, 1 = write operation
Arg4: 8271310f, address which referenced memory

Debugging Details:
------------------


READ_ADDRESS:  3d10047f 

CURRENT_IRQL:  2

FAULTING_IP: 
+2e5
8271310f 8b5218          mov     edx,dword ptr [edx+18h]

CUSTOMER_CRASH_COUNT:  9

DEFAULT_BUCKET_ID:  COMMON_SYSTEM_FAULT

BUGCHECK_STR:  0xD1

PROCESS_NAME:  System

LAST_CONTROL_TRANSFER:  from f85c4b6c to 8271310f

STACK_TEXT:  
WARNING: Frame IP not in any known module. Following frames may be wrong.
f3cbd914 f85c4b6c f3cbda03 00000001 00720075 0x8271310f
f3cbd918 f3cbda03 00000001 00720075 00650072 NDIS!ndisMiniDriverListLock
f3cbd91c 00000000 00720075 00650072 0000b469 0xf3cbda03


STACK_COMMAND:  kb

SYMBOL_NAME:  ANALYSIS_INCONCLUSIVE

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: Unknown_Module

IMAGE_NAME:  Unknown_Image

DEBUG_FLR_IMAGE_TIMESTAMP:  0

FAILURE_BUCKET_ID:  0xD1_ANALYSIS_INCONCLUSIVE

BUCKET_ID:  0xD1_ANALYSIS_INCONCLUSIVE

Followup: MachineOwner
---------

start    end        module name
f7560000 f7577800   ac97intc ac97intc.sys Thu Jul 19 18:43:40 2001 (3B57629C)
f8727000 f8754d80   ACPI     ACPI.sys     Wed Aug 04 02:07:35 2004 (41107D27)
f8b92000 f8b94d80   ACPIEC   ACPIEC.sys   Fri Aug 17 16:57:55 2001 (3B7D8553)
f610a000 f612bc80   afd      afd.sys      Thu Aug 14 05:51:42 2008 (48A4002E)
f87d6000 f87e0580   agp440   agp440.sys   Wed Aug 04 02:07:40 2004 (41107D2C)
f86c1000 f86d8480   atapi    atapi.sys    Wed Aug 04 01:59:41 2004 (41107B4D)
bf04e000 bf080000   ati2cqag ati2cqag.dll Tue Feb 06 22:08:26 2007 (45C942AA)
bf012000 bf04e000   ati2dvag ati2dvag.dll Tue Feb 06 22:38:46 2007 (45C949C6)
f7631000 f7756000   ati2mtag ati2mtag.sys Tue Feb 06 22:38:31 2007 (45C949B7)
bf0b2000 bf2e5560   ati3duag ati3duag.dll Tue Feb 06 22:27:07 2007 (45C9470B)
bf080000 bf0b2000   atikvmag atikvmag.dll Tue Feb 06 22:13:07 2007 (45C943C3)
bf2e6000 bf379ac0   ativvaxx ativvaxx.dll Tue Feb 06 22:22:00 2007 (45C945D8)
bffa0000 bffe5c00   ATMFD    ATMFD.DLL    Tue Apr 20 01:51:20 2010 (4BCD40D8)
f8dc5000 f8dc5c00   audstub  audstub.sys  Fri Aug 17 16:59:40 2001 (3B7D85BC)
f6008000 f603b300   avgldx86 avgldx86.sys Thu Jun 03 17:05:19 2010 (4C08190F)
f8b36000 f8b3b940   avgmfx86 avgmfx86.sys Sun Apr 25 17:05:02 2010 (4BD4AE7E)
f619d000 f61d6b00   avgtdix  avgtdix.sys  Thu Jun 03 17:08:25 2010 (4C0819C9)
f8b8e000 f8b91700   BATTC    BATTC.SYS    Fri Aug 17 16:57:52 2001 (3B7D8550)
f8c9e000 f8c9f080   Beep     Beep.SYS     Fri Aug 17 16:47:33 2001 (3B7D82E5)
f8b86000 f8b89000   BOOTVID  BOOTVID.dll  Fri Aug 17 16:49:09 2001 (3B7D8345)
f7282000 f72d0320   btaudio  btaudio.sys  Thu Jun 08 01:06:57 2006 (4487B071)
f8b96000 f8b99a00   BtHidBus BtHidBus.sys Mon Jan 21 06:26:27 2008 (47948163)
f73ab000 f74779a0   btkrnl   btkrnl.sys   Wed Jun 07 19:33:32 2006 (4487624C)
f8916000 f8925900   Cdfs     Cdfs.SYS     Wed Aug 04 02:14:09 2004 (41107EB1)
f7d9c000 f7dab480   cdrom    cdrom.sys    Wed Apr 25 08:20:29 2007 (462F478D)
f87b6000 f87c2200   CLASSPNP CLASSPNP.SYS Wed Aug 04 02:14:26 2004 (41107EC2)
f8c56000 f8c59700   CmBatt   CmBatt.sys   Wed Aug 04 02:07:39 2004 (41107D2B)
f8b8a000 f8b8c480   compbatt compbatt.sys Fri Aug 17 16:57:58 2001 (3B7D8556)
f87a6000 f87aee00   disk     disk.sys     Wed Aug 04 01:59:53 2004 (41107B59)
f7d7c000 f7d8ab80   drmk     drmk.sys     Wed Aug 04 02:07:54 2004 (41107D3A)
f5ff0000 f6007480   dump_atapi dump_atapi.sys Wed Aug 04 01:59:41 2004 (41107B4D)
f8ca8000 f8ca9100   dump_WMILIB dump_WMILIB.SYS Fri Aug 17 17:07:23 2001 (3B7D878B)
f72f5000 f72f7900   Dxapi    Dxapi.sys    Fri Aug 17 16:53:19 2001 (3B7D843F)
bf000000 bf011580   dxg      dxg.sys      Wed Aug 04 02:00:51 2004 (41107B93)
f8e3e000 f8e3ed00   dxgthk   dxgthk.sys   Fri Aug 17 16:53:12 2001 (3B7D8438)
f75af000 f75cbc00   e100b325 e100b325.sys Tue Jun 12 13:02:45 2001 (3B264B35)
f8aae000 f8aaf000   fdc      fdc.sys      unavailable (00000000)
f88f6000 f88fe880   Fips     Fips.SYS     Fri Aug 17 21:31:49 2001 (3B7DC585)
f86a1000 f86c0780   fltMgr   fltMgr.sys   Mon Aug 21 05:14:57 2006 (44E97991)
f8c9c000 f8c9df00   Fs_Rec   Fs_Rec.SYS   Fri Aug 17 16:49:37 2001 (3B7D8361)
f86d9000 f86f7880   ftdisk   ftdisk.sys   Fri Aug 17 16:52:41 2001 (3B7D8419)
f8c5a000 f8c5c700   GEARAspiWDM GEARAspiWDM.sys Tue Apr 08 15:15:38 2008 (47FBC45A)
806ec000 806ffd80   hal      halacpi.dll  Wed Aug 04 01:59:04 2004 (41107B28)
f8b06000 f8b0c180   HIDPARSE HIDPARSE.SYS Wed Aug 04 02:08:15 2004 (41107D4F)
f7dbc000 f7dc8e00   i8042prt i8042prt.sys Wed Aug 04 02:14:36 2004 (41107ECC)
f8abe000 f8ac5000   ibmpmdrv ibmpmdrv.sys Wed Jul 02 22:54:03 2003 (3F039ACB)
f8c7a000 f8c7b580   intelide intelide.sys Wed Aug 04 01:59:40 2004 (41107B4C)
f7dcc000 f7dd4d00   intelppm intelppm.sys Wed Aug 04 01:59:19 2004 (41107B37)
f6154000 f6174f00   ipnat    ipnat.sys    Wed Sep 29 18:28:36 2004 (415B3714)
f622f000 f6241400   ipsec    ipsec.sys    Wed Aug 04 02:14:27 2004 (41107EC3)
f3d0a000 f3d1f580   irda     irda.sys     Wed Aug 04 02:00:50 2004 (41107B92)
f8c4e000 f8c50c00   irenum   irenum.sys   Wed Aug 04 02:00:45 2004 (41107B8D)
f8776000 f877ec00   isapnp   isapnp.sys   Fri Aug 17 16:58:01 2001 (3B7D8559)
f8a9e000 f8aa4000   kbdclass kbdclass.sys Wed Aug 04 01:58:32 2004 (41107B08)
f8c76000 f8c77b80   kdcom    kdcom.dll    Fri Aug 17 16:49:10 2001 (3B7D8346)
f7578000 f759a680   ks       ks.sys       Wed Aug 04 02:15:20 2004 (41107EF8)
f8678000 f868e980   KSecDD   KSecDD.sys   Mon Jun 22 07:34:51 2009 (4A3F6C5B)
f7478000 f753bf60   LTSM     LTSM.sys     Wed Jul 18 15:51:10 2001 (3B55E8AE)
f3ed8000 f3edaa80   mdc8021x mdc8021x.sys Sun Jun 01 14:09:41 2003 (3EDA4165)
f8ca0000 f8ca1080   mnmdd    mnmdd.SYS    Fri Aug 17 16:57:28 2001 (3B7D8538)
f8ac6000 f8acd580   Modem    Modem.SYS    Wed Aug 04 02:08:04 2004 (41107D44)
f8aa6000 f8aaba00   mouclass mouclass.sys Wed Aug 04 01:58:32 2004 (41107B08)
f8786000 f8790500   MountMgr MountMgr.sys Wed Aug 04 01:58:29 2004 (41107B05)
f603c000 f60aad80   mrxsmb   mrxsmb.sys   Wed Feb 24 07:31:27 2010 (4B851C1F)
f8b16000 f8b1aa80   Msfs     Msfs.SYS     Wed Aug 04 02:00:37 2004 (41107B85)
f8836000 f883e900   msgpc    msgpc.sys    Wed Aug 04 02:04:11 2004 (41107C5B)
f8562000 f8565c80   mssmbios mssmbios.sys Wed Aug 04 02:07:47 2004 (41107D33)
f85a3000 f85bd580   Mup      Mup.sys      Wed Aug 04 02:15:20 2004 (41107EF8)
f85be000 f85eaa80   NDIS     NDIS.sys     Wed Aug 04 02:14:27 2004 (41107EC3)
f8c6a000 f8c6c580   ndistapi ndistapi.sys Fri Aug 17 16:55:29 2001 (3B7D84C1)
f72d5000 f72d8280   ndisuio  ndisuio.sys  Wed Aug 04 02:03:10 2004 (41107C1E)
f7394000 f73aa680   ndiswan  ndiswan.sys  Wed Aug 04 02:14:30 2004 (41107EC6)
f8866000 f886f480   NDProxy  NDProxy.SYS  Fri Aug 17 16:55:30 2001 (3B7D84C2)
f88c6000 f88ce700   netbios  netbios.sys  Wed Aug 04 02:03:19 2004 (41107C27)
f612c000 f6153c00   netbt    netbt.sys    Wed Aug 04 02:14:36 2004 (41107ECC)
f8b1e000 f8b25880   Npfs     Npfs.SYS     Wed Aug 04 02:00:38 2004 (41107B86)
f8ab6000 f8abd000   nscirda  nscirda.sys  Wed Aug 04 02:00:49 2004 (41107B91)
804d7000 806eb900   nt       ntoskrnl.exe Tue Feb 16 08:19:38 2010 (4B7A9B6A)
f85eb000 f8677400   Ntfs     Ntfs.sys     Fri Feb 09 06:10:31 2007 (45CC56A7)
f8de8000 f8de8b80   Null     Null.SYS     Fri Aug 17 16:47:39 2001 (3B7D82EB)
f8d3e000 f8d3ed80   OPRGHDLR OPRGHDLR.SYS Fri Aug 17 16:57:55 2001 (3B7D8553)
f759b000 f75ae900   parport  parport.sys  Wed Aug 04 01:59:04 2004 (41107B28)
f89fe000 f8a02900   PartMgr  PartMgr.sys  Fri Aug 17 21:32:23 2001 (3B7DC5A7)
f8716000 f8726a80   pci      pci.sys      Wed Aug 04 02:07:45 2004 (41107D31)
f89f6000 f89fc200   PCIIDEX  PCIIDEX.SYS  Wed Aug 04 01:59:40 2004 (41107B4C)
f86f8000 f8715480   pcmcia   pcmcia.sys   Wed Aug 04 02:07:45 2004 (41107D31)
f753c000 f755f980   portcls  portcls.sys  Wed Aug 04 02:15:47 2004 (41107F13)
f7383000 f7393e00   psched   psched.sys   Wed Aug 04 02:04:16 2004 (41107C60)
f8ade000 f8ae2580   ptilink  ptilink.sys  Fri Aug 17 16:49:53 2001 (3B7D8371)
f87c6000 f87cf200   PxHelp20 PxHelp20.sys Wed Mar 12 21:57:44 2008 (47D88A18)
f7766000 f7768280   rasacd   rasacd.sys   Fri Aug 17 16:55:39 2001 (3B7D84CB)
f8ace000 f8ad2c80   rasirda  rasirda.sys  Fri Aug 17 16:51:29 2001 (3B7D83D1)
f8806000 f8812880   rasl2tp  rasl2tp.sys  Wed Aug 04 02:14:21 2004 (41107EBD)
f8816000 f8820200   raspppoe raspppoe.sys Wed Aug 04 02:05:06 2004 (41107C92)
f8826000 f8831d00   raspptp  raspptp.sys  Wed Aug 04 02:14:26 2004 (41107EC2)
f8ae6000 f8aea080   raspti   raspti.sys   Fri Aug 17 16:55:32 2001 (3B7D84C4)
f60ab000 f60d5a00   rdbss    rdbss.sys    Fri May 05 05:47:55 2006 (445B1F4B)
f8ca2000 f8ca3080   RDPCDD   RDPCDD.sys   Fri Aug 17 16:46:56 2001 (3B7D82C0)
f7352000 f7382100   rdpdr    rdpdr.sys    Wed Aug 04 02:01:10 2004 (41107BA6)
f7d8c000 f7d9a080   redbook  redbook.sys  Wed Aug 04 01:59:34 2004 (41107B46)
f75cc000 f75f9200   rtl8180  rtl8180.sys  Tue Sep 30 22:54:44 2003 (3F7A41F4)
f8c4a000 f8c4dc80   serenum  serenum.sys  Wed Aug 04 01:59:06 2004 (41107B2A)
f7dac000 f7dbbd80   serial   serial.sys   Wed Aug 04 02:15:51 2004 (41107F17)
f868f000 f86a0f00   sr       sr.sys       Wed Aug 04 02:06:22 2004 (41107CDE)
f8b26000 f8b2c000   StarOpen StarOpen.SYS Tue Jun 27 15:15:56 2006 (44A183EC)
f8c96000 f8c97100   swenum   swenum.sys   Wed Aug 04 01:58:41 2004 (41107B11)
f61d7000 f622ef80   tcpip    tcpip.sys    Fri Jun 20 06:45:10 2008 (485B8A36)
f8ad6000 f8ada880   TDI      TDI.SYS      Wed Aug 04 02:07:47 2004 (41107D33)
f8846000 f884ff00   termdd   termdd.sys   Wed Aug 04 01:58:52 2004 (41107B1C)
f60d6000 f6109580   truecrypt truecrypt.sys Mon Jun 15 05:16:47 2009 (4A36117F)
f8c46000 f8c48d00   TwoTrack TwoTrack.sys Fri Aug 17 16:48:10 2001 (3B7D830A)
f72f9000 f7351e80   update   update.sys   Mon Apr 23 06:32:54 2007 (462C8B56)
f8c98000 f8c99280   USBD     USBD.SYS     Fri Aug 17 17:02:58 2001 (3B7D8682)
f88a6000 f88b4100   usbhub   usbhub.sys   Wed Aug 04 02:08:40 2004 (41107D68)
f75fa000 f761ce80   USBPORT  USBPORT.SYS  Wed Aug 04 02:08:34 2004 (41107D62)
f8a96000 f8a9b000   usbuhci  usbuhci.sys  Wed Aug 04 02:08:34 2004 (41107D62)
f8b0e000 f8b13200   vga      vga.sys      Wed Aug 04 02:07:06 2004 (41107D0A)
f761d000 f7630780   VIDEOPRT VIDEOPRT.SYS Wed Aug 04 02:07:04 2004 (41107D08)
f8796000 f87a2c80   VolSnap  VolSnap.sys  Wed Aug 04 02:00:14 2004 (41107B6E)
f88b6000 f88be700   wanarp   wanarp.sys   Wed Aug 04 02:04:57 2004 (41107C89)
f8b3e000 f8b42500   watchdog watchdog.sys Wed Aug 04 02:07:32 2004 (41107D24)
bf800000 bf9c3e00   win32k   win32k.sys   Sun May 02 01:56:23 2010 (4BDD1407)
f8c78000 f8c79100   WMILIB   WMILIB.SYS   Fri Aug 17 17:07:23 2001 (3B7D878B)

Unloaded modules:
f88e6000 f88f1000   imapi.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  0000B000
f88d6000 f88e6000   tosrfcom.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  00010000
f776a000 f776e000   kbdhid.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  00004000
f8afe000 f8b03000   Cdaudio.SYS
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  00005000
f776e000 f7771000   Sfloppy.SYS
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  00003000
f8af6000 f8afb000   Flpydisk.SYS
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  00005000
Bugcheck code 100000D1
Arguments 3d10047f 00000002 00000000 8271310f

eastwind · 09 Aug 2010

i tried updating the network drivers. but it says i already have the latest drivers installed.

ttran · 10 Aug 2010

Go to Device manager, uninstall the network adapter driver that you want, then install the driver that you newly downloaded.

Jonathan_King · 10 Aug 2010

Yes, be sure to look on your computer manufacturer's site. If you post your model, we can get you a link.