bsod bccode:d1 athrx.sys

gootle · 11 Dec 2010

Windows 7 x64
full retailed
age of system (hardware)- 1 month
- age of OS installation - 1 month

Lemur · 11 Dec 2010

I am impressed. Your Intel and NVidia drivers are from the future:

Driver c:\windows\system32\drivers\igdkmd64.sys (8.15.10.2202, 10.12 MB (10,611,552 bytes), 25/8/2553 19:36)

Driver c:\windows\system32\drivers\nvlddmkm.sys (8.17.12.5896, 12.58 MB (13,187,176 bytes), 10/12/2553 16:21)

As well as your Atheros Network driver:

Driver c:\windows\system32\drivers\athrx.sys (8.0.0.316, 1.52 MB (1,594,368 bytes), 8/11/2553 13:31)

Unable to load image \SystemRoot\system32\DRIVERS\athrx.sys, Win32 error 0n2
*** WARNING: Unable to verify timestamp for athrx.sys
*** ERROR: Module load completed but symbols could not be loaded for athrx.sys
Probably caused by : athrx.sys ( athrx+1cbd4 )

Please upgrade that driver. That corresponds to the athrx.sys error.

In addition, you have
sptd.sys

Please remove any CD virtualization programs such as Daemon Tools and Alcohol 120%. They use a driver, found in your dmp, sptd.sys, that is notorious for causing BSODs. Use this SPTD uninstaller when you're done:
http://www.duplexsecure.com/en/downloads

zigzag3143 · 11 Dec 2010

gootle said:

Windows 7 x64
full retailed
age of system (hardware)- 1 month
- age of OS installation - 1 month

Easy your atheros WLAN driver. re-install with the newest version

Code:


Microsoft (R) Windows Debugger Version 6.11.0001.404 X86
Copyright (c) Microsoft Corporation. All rights reserved.


Loading Dump File [C:\Users\K\Desktop\Windows_NT6_BSOD_jcgriff2\121210-26176-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available

Symbol search path is: C:\symbols;srv*e:\symbols
*http://msdl.microsoft.com/download/symbols
Executable search path is: 
Windows 7 Kernel Version 7600 MP (4 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 7600.16617.amd64fre.win7_gdr.100618-1621
Machine Name:
Kernel base = 0xfffff800`03013000 PsLoadedModuleList = 0xfffff800`03250e50
Debug session time: Sat Dec 11 21:43:08.749 2010 (GMT-5)
System Uptime: 0 days 0:01:50.263
Loading Kernel Symbols
...............................................................
................................................................
....................................................
Loading User Symbols
Loading unloaded module list
...
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck D1, {4, 2, 0, fffff88004646bd4}

Unable to load image \SystemRoot\system32\DRIVERS\athrx.sys, Win32 error 0n2
*** WARNING: Unable to verify timestamp for athrx.sys
*** ERROR: Module load completed but symbols could not be loaded for athrx.sys
Probably caused by : athrx.sys ( athrx+1cbd4 )

Followup: MachineOwner
---------

0: kd> !analyze -v
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

DRIVER_IRQL_NOT_LESS_OR_EQUAL (d1)
An attempt was made to access a pageable (or completely invalid) address at an
interrupt request level (IRQL) that is too high.  This is usually
caused by drivers using improper addresses.
If kernel debugger is available get stack backtrace.
Arguments:
Arg1: 0000000000000004, memory referenced
Arg2: 0000000000000002, IRQL
Arg3: 0000000000000000, value 0 = read operation, 1 = write operation
Arg4: fffff88004646bd4, address which referenced memory

Debugging Details:
------------------


READ_ADDRESS: GetPointerFromAddress: unable to read from fffff800032bb0e0
 0000000000000004 

CURRENT_IRQL:  2

FAULTING_IP: 
athrx+1cbd4
fffff880`04646bd4 0fb74004        movzx   eax,word ptr [rax+4]

CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT

BUGCHECK_STR:  0xD1

PROCESS_NAME:  avp.exe

TRAP_FRAME:  fffff8800a8722a0 -- (.trap 0xfffff8800a8722a0)
NOTE: The trap frame does not contain all registers.
Some register values may be zeroed or incorrect.
rax=0000000000000000 rbx=0000000000000000 rcx=fffffa80076e8128
rdx=fffff8800a872450 rsi=0000000000000000 rdi=0000000000000000
rip=fffff88004646bd4 rsp=fffff8800a872430 rbp=fffffa800c4e5970
 r8=fffffa80076bd670  r9=0000000000000000 r10=fffff80003212888
r11=fffffa80076e8030 r12=0000000000000000 r13=0000000000000000
r14=0000000000000000 r15=0000000000000000
iopl=0         nv up ei ng nz na pe nc
athrx+0x1cbd4:
fffff880`04646bd4 0fb74004        movzx   eax,word ptr [rax+4] ds:2b10:00000000`00000004=????
Resetting default scope

LAST_CONTROL_TRANSFER:  from fffff80003082ca9 to fffff80003083740

STACK_TEXT:  
fffff880`0a872158 fffff800`03082ca9 : 00000000`0000000a 00000000`00000004 00000000`00000002 00000000`00000000 : nt!KeBugCheckEx
fffff880`0a872160 fffff800`03081920 : fffffa80`0931bf40 fffffa80`074be1a0 fffff880`0a8723f8 fffff880`04a59941 : nt!KiBugCheckDispatch+0x69
fffff880`0a8722a0 fffff880`04646bd4 : fffffa80`0c7b3220 fffff880`0a872450 00000000`646e444e 00000000`000007ff : nt!KiPageFault+0x260
fffff880`0a872430 fffffa80`0c7b3220 : fffff880`0a872450 00000000`646e444e 00000000`000007ff fffffa80`0c3bb710 : athrx+0x1cbd4
fffff880`0a872438 fffff880`0a872450 : 00000000`646e444e 00000000`000007ff fffffa80`0c3bb710 fffffa80`0c7b3220 : 0xfffffa80`0c7b3220
fffff880`0a872440 00000000`646e444e : 00000000`000007ff fffffa80`0c3bb710 fffffa80`0c7b3220 fffffa80`0c415030 : 0xfffff880`0a872450
fffff880`0a872448 00000000`000007ff : fffffa80`0c3bb710 fffffa80`0c7b3220 fffffa80`0c415030 fffff880`00000000 : 0x646e444e
fffff880`0a872450 fffffa80`0c3bb710 : fffffa80`0c7b3220 fffffa80`0c415030 fffff880`00000000 fffffa80`076e8128 : 0x7ff
fffff880`0a872458 fffffa80`0c7b3220 : fffffa80`0c415030 fffff880`00000000 fffffa80`076e8128 fffff880`0468183b : 0xfffffa80`0c3bb710
fffff880`0a872460 fffffa80`0c415030 : fffff880`00000000 fffffa80`076e8128 fffff880`0468183b fffffa80`076e8030 : 0xfffffa80`0c7b3220
fffff880`0a872468 fffff880`00000000 : fffffa80`076e8128 fffff880`0468183b fffffa80`076e8030 fffffa80`076e8030 : 0xfffffa80`0c415030
fffff880`0a872470 fffffa80`076e8128 : fffff880`0468183b fffffa80`076e8030 fffffa80`076e8030 00000000`00000286 : 0xfffff880`00000000
fffff880`0a872478 fffff880`0468183b : fffffa80`076e8030 fffffa80`076e8030 00000000`00000286 fffff880`04646a61 : 0xfffffa80`076e8128
fffff880`0a872480 fffffa80`076e8030 : fffffa80`076e8030 00000000`00000286 fffff880`04646a61 fffffa80`076bd030 : athrx+0x5783b
fffff880`0a872488 fffffa80`076e8030 : 00000000`00000286 fffff880`04646a61 fffffa80`076bd030 fffffa80`076e8030 : 0xfffffa80`076e8030
fffff880`0a872490 00000000`00000286 : fffff880`04646a61 fffffa80`076bd030 fffffa80`076e8030 fffffa80`076af430 : 0xfffffa80`076e8030
fffff880`0a872498 fffff880`04646a61 : fffffa80`076bd030 fffffa80`076e8030 fffffa80`076af430 00000000`00000001 : 0x286
fffff880`0a8724a0 fffffa80`076bd030 : fffffa80`076e8030 fffffa80`076af430 00000000`00000001 fffffa80`076e8030 : athrx+0x1ca61
fffff880`0a8724a8 fffffa80`076e8030 : fffffa80`076af430 00000000`00000001 fffffa80`076e8030 fffffa80`076e8030 : 0xfffffa80`076bd030
fffff880`0a8724b0 fffffa80`076af430 : 00000000`00000001 fffffa80`076e8030 fffffa80`076e8030 fffffa80`0c4e5970 : 0xfffffa80`076e8030
fffff880`0a8724b8 00000000`00000001 : fffffa80`076e8030 fffffa80`076e8030 fffffa80`0c4e5970 fffff880`046477e6 : 0xfffffa80`076af430
fffff880`0a8724c0 fffffa80`076e8030 : fffffa80`076e8030 fffffa80`0c4e5970 fffff880`046477e6 fffffa80`076bd030 : 0x1
fffff880`0a8724c8 fffffa80`076e8030 : fffffa80`0c4e5970 fffff880`046477e6 fffffa80`076bd030 fffffa80`076e8030 : 0xfffffa80`076e8030
fffff880`0a8724d0 fffffa80`0c4e5970 : fffff880`046477e6 fffffa80`076bd030 fffffa80`076e8030 00000000`00000001 : 0xfffffa80`076e8030
fffff880`0a8724d8 fffff880`046477e6 : fffffa80`076bd030 fffffa80`076e8030 00000000`00000001 fffffa80`07cea010 : 0xfffffa80`0c4e5970
fffff880`0a8724e0 fffffa80`076bd030 : fffffa80`076e8030 00000000`00000001 fffffa80`07cea010 fffffa80`076e8030 : athrx+0x1d7e6
fffff880`0a8724e8 fffffa80`076e8030 : 00000000`00000001 fffffa80`07cea010 fffffa80`076e8030 00000000`00000000 : 0xfffffa80`076bd030
fffff880`0a8724f0 00000000`00000001 : fffffa80`07cea010 fffffa80`076e8030 00000000`00000000 fffffa80`0c415030 : 0xfffffa80`076e8030
fffff880`0a8724f8 fffffa80`07cea010 : fffffa80`076e8030 00000000`00000000 fffffa80`0c415030 00000000`00000000 : 0x1
fffff880`0a872500 fffffa80`076e8030 : 00000000`00000000 fffffa80`0c415030 00000000`00000000 00000000`00000000 : 0xfffffa80`07cea010
fffff880`0a872508 00000000`00000000 : fffffa80`0c415030 00000000`00000000 00000000`00000000 fffffa80`00000000 : 0xfffffa80`076e8030


STACK_COMMAND:  kb

FOLLOWUP_IP: 
athrx+1cbd4
fffff880`04646bd4 0fb74004        movzx   eax,word ptr [rax+4]

SYMBOL_STACK_INDEX:  3

SYMBOL_NAME:  athrx+1cbd4

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: athrx

IMAGE_NAME:  athrx.sys

DEBUG_FLR_IMAGE_TIMESTAMP:  4b8db121

FAILURE_BUCKET_ID:  X64_0xD1_athrx+1cbd4

BUCKET_ID:  X64_0xD1_athrx+1cbd4

Followup: MachineOwner
---------

reventon · 12 Dec 2010

Hi,

Code:

athrx.sys    Wed Mar 03 13:45:21 2010 (4B8DB121)

You may be able to find an update for the networking driver here - ASUSTeK Computer Inc.-Support-

However, in my opinion the cause is more likely to be the presence of Kaspersky (note the process running at the time of all BSODs is avp.exe - Kaspersky). If the update fails to solve the problem then please remove it via the following method - KIS Removal -- jcgriff2.com

Lemur said:

I am impressed. Your Intel and NVidia drivers are from the future:

Driver c:\windows\system32\drivers\igdkmd64.sys (8.15.10.2202, 10.12 MB (10,611,552 bytes), 25/8/2553 19:36)

Driver c:\windows\system32\drivers\nvlddmkm.sys (8.17.12.5896, 12.58 MB (13,187,176 bytes), 10/12/2553 16:21)

As well as your Atheros Network driver:

Driver c:\windows\system32\drivers\athrx.sys (8.0.0.316, 1.52 MB (1,594,368 bytes), 8/11/2553 13:31)

Where do you see those dates?

Code:


igdkmd64.sys Thu Aug 26 07:35:58 2010 (4C75709E)
nvlddmkm.sys Sat Jul 10 09:15:58 2010 (4C37918E)
athrx.sys    Wed Mar 03 13:45:21 2010 (4B8DB121)

Regards,
Reventon

BUGCHECK SUMMARY

Code:


Built by: 7600.16617.amd64fre.win7_gdr.100618-1621
Debug session time: Sun Dec 12 15:43:08.749 2010 (GMT+13)
System Uptime: 0 days 0:01:50.263
BugCheck D1, {4, 2, 0, fffff88004646bd4}
*** WARNING: Unable to verify timestamp for athrx.sys
*** ERROR: Module load completed but symbols could not be loaded for athrx.sys
Probably caused by : athrx.sys ( athrx+1cbd4 )
DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT
BUGCHECK_STR:  0xD1
PROCESS_NAME:  avp.exe
Bugcheck code 000000D1
Arguments 00000000`00000004 00000000`00000002 00000000`00000000 fffff880`04646bd4
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
Built by: 7600.16617.amd64fre.win7_gdr.100618-1621
Debug session time: Fri Dec 10 19:14:32.774 2010 (GMT+13)
System Uptime: 0 days 0:01:43.914
BugCheck D1, {4, 2, 0, fffff88004685bd4}
*** WARNING: Unable to verify timestamp for athrx.sys
*** ERROR: Module load completed but symbols could not be loaded for athrx.sys
Probably caused by : athrx.sys ( athrx+1cbd4 )
DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT
BUGCHECK_STR:  0xD1
PROCESS_NAME:  avp.exe
Bugcheck code 000000D1
Arguments 00000000`00000004 00000000`00000002 00000000`00000000 fffff880`04685bd4
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
Built by: 7600.16617.amd64fre.win7_gdr.100618-1621
Debug session time: Fri Dec 10 03:01:48.483 2010 (GMT+13)
System Uptime: 0 days 0:02:05.997
BugCheck D1, {4, 2, 0, fffff8800304cbd4}
*** WARNING: Unable to verify timestamp for athrx.sys
*** ERROR: Module load completed but symbols could not be loaded for athrx.sys
Probably caused by : athrx.sys ( athrx+1cbd4 )
DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT
BUGCHECK_STR:  0xD1
PROCESS_NAME:  avp.exe
Bugcheck code 000000D1
Arguments 00000000`00000004 00000000`00000002 00000000`00000000 fffff880`0304cbd4
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
Built by: 7600.16617.amd64fre.win7_gdr.100618-1621
Debug session time: Fri Dec 10 02:56:25.620 2010 (GMT+13)
System Uptime: 0 days 0:01:58.134
BugCheck D1, {4, 2, 0, fffff88003c8bbd4}
*** WARNING: Unable to verify timestamp for athrx.sys
*** ERROR: Module load completed but symbols could not be loaded for athrx.sys
Probably caused by : athrx.sys ( athrx+1cbd4 )
DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT
BUGCHECK_STR:  0xD1
PROCESS_NAME:  avp.exe
Bugcheck code 000000D1
Arguments 00000000`00000004 00000000`00000002 00000000`00000000 fffff880`03c8bbd4
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``