BSODs caused by kaspersky
The kl1.sys and klif.sys BSODs were known issues in the older versions, upgrade to latest versions
-Uninstall completely Kaspersky
-Install new version
Product Updates
If that does not fix the BSOD you should permanently remove kaspoersky
Code:
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
Use !analyze -v to get detailed debugging information.
BugCheck A, {6ce7fff0, 2, 1, 82cb894b}
Unable to load image \SystemRoot\system32\DRIVERS\klif.sys, Win32 error 0n2
*** WARNING: Unable to verify timestamp for klif.sys
*** ERROR: Module load completed but symbols could not be loaded for klif.sys
Probably caused by : klif.sys ( klif+40d75 )
Followup: MachineOwner
---------
1: kd> !analyze -v
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
IRQL_NOT_LESS_OR_EQUAL (a)
An attempt was made to access a pageable (or completely invalid) address at an
interrupt request level (IRQL) that is too high. This is usually
caused by drivers using improper addresses.
If a kernel debugger is available get the stack backtrace.
Arguments:
Arg1: 6ce7fff0, memory referenced
Arg2: 00000002, IRQL
Arg3: 00000001, bitfield :
bit 0 : value 0 = read operation, 1 = write operation
bit 3 : value 0 = not an execute operation, 1 = execute operation (only on chips which support this level of status)
Arg4: 82cb894b, address which referenced memory
Debugging Details:
------------------
WRITE_ADDRESS: GetPointerFromAddress: unable to read from 82da0700
Unable to read MiSystemVaType memory at 82d800c0
6ce7fff0
CURRENT_IRQL: 2
FAULTING_IP:
nt!MiRemoveAnyPage+bf
82cb894b f00fba2800 lock bts dword ptr [eax],0
CUSTOMER_CRASH_COUNT: 1
DEFAULT_BUCKET_ID: VISTA_DRIVER_FAULT
BUGCHECK_STR: 0xA
PROCESS_NAME: avp.exe
TRAP_FRAME: a1312c3c -- (.trap 0xffffffffa1312c3c)
ErrCode = 00000002
eax=d4aed000 ebx=980c0566 ecx=00008e20 edx=00000000 esi=d4aed000 edi=00000000
eip=8d621d75 esp=a1312cb0 ebp=a1312cc8 iopl=0 nv up ei ng nz na pe nc
cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00010286
klif+0x40d75:
8d621d75 ?? ???
Resetting default scope
LAST_CONTROL_TRANSFER: from 82cb894b to 82c79b5b
STACK_TEXT:
a1312a24 82cb894b badb0d00 000000ff 00000000 nt!KiTrap0E+0x2cf
a1312ad8 82cb4008 00000083 00000000 82d6cac0 nt!MiRemoveAnyPage+0xbf
a1312b00 82cae90c 00000073 00000000 c0352bb4 nt!MiGetPage+0x281
a1312b38 82ca2fac 00000001 d4aed008 a1312c3c nt!MiResolveDemandZeroFault+0xc9
a1312bac 82ca0e13 d4aed008 00000000 00000000 nt!MiDispatchFault+0x580
a1312c24 82c79968 00000001 d4aed008 00000000 nt!MmAccessFault+0x128f
a1312c24 8d621d75 00000001 d4aed008 00000000 nt!KiTrap0E+0xdc
WARNING: Stack unwind information not available. Following frames may be wrong.
a1312cac 00000000 00010094 980c0566 00000000 klif+0x40d75
STACK_COMMAND: kb
FOLLOWUP_IP:
klif+40d75
8d621d75 ?? ???
SYMBOL_STACK_INDEX: 7
SYMBOL_NAME: klif+40d75
FOLLOWUP_NAME: MachineOwner
MODULE_NAME: klif
IMAGE_NAME: klif.sys
DEBUG_FLR_IMAGE_TIMESTAMP: 4ca58e03
FAILURE_BUCKET_ID: 0xA_klif+40d75
BUCKET_ID: 0xA_klif+40d75
IRQL_NOT_LESS_OR_EQUAL (a)
An attempt was made to access a pageable (or completely invalid) address at an
interrupt request level (IRQL) that is too high. This is usually
caused by drivers using improper addresses.
If a kernel debugger is available get the stack backtrace.
Arguments:
Arg1: 6ce7fff0, memory referenced
Arg2: 00000002, IRQL
Arg3: 00000001, bitfield :
bit 0 : value 0 = read operation, 1 = write operation
bit 3 : value 0 = not an execute operation, 1 = execute operation (only on chips which support this level of status)
Arg4: 82cb894b, address which referenced memory
Debugging Details:
------------------
WRITE_ADDRESS: GetPointerFromAddress: unable to read from 82da0700
Unable to read MiSystemVaType memory at 82d800c0
6ce7fff0
CURRENT_IRQL: 2
FAULTING_IP:
nt!MiRemoveAnyPage+bf
82cb894b f00fba2800 lock bts dword ptr [eax],0
CUSTOMER_CRASH_COUNT: 1
DEFAULT_BUCKET_ID: VISTA_DRIVER_FAULT
BUGCHECK_STR: 0xA
PROCESS_NAME: avp.exe
TRAP_FRAME: a1312c3c -- (.trap 0xffffffffa1312c3c)
ErrCode = 00000002
eax=d4aed000 ebx=980c0566 ecx=00008e20 edx=00000000 esi=d4aed000 edi=00000000
eip=8d621d75 esp=a1312cb0 ebp=a1312cc8 iopl=0 nv up ei ng nz na pe nc
cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00010286
klif+0x40d75:
8d621d75 ?? ???
Resetting default scope
LAST_CONTROL_TRANSFER: from 82cb894b to 82c79b5b
STACK_TEXT:
a1312a24 82cb894b badb0d00 000000ff 00000000 nt!KiTrap0E+0x2cf
a1312ad8 82cb4008 00000083 00000000 82d6cac0 nt!MiRemoveAnyPage+0xbf
a1312b00 82cae90c 00000073 00000000 c0352bb4 nt!MiGetPage+0x281
a1312b38 82ca2fac 00000001 d4aed008 a1312c3c nt!MiResolveDemandZeroFault+0xc9
a1312bac 82ca0e13 d4aed008 00000000 00000000 nt!MiDispatchFault+0x580
a1312c24 82c79968 00000001 d4aed008 00000000 nt!MmAccessFault+0x128f
a1312c24 8d621d75 00000001 d4aed008 00000000 nt!KiTrap0E+0xdc
WARNING: Stack unwind information not available. Following frames may be wrong.
a1312cac 00000000 00010094 980c0566 00000000 klif+0x40d75
STACK_COMMAND: kb
FOLLOWUP_IP:
klif+40d75
8d621d75 ?? ???
SYMBOL_STACK_INDEX: 7
SYMBOL_NAME: klif+40d75
FOLLOWUP_NAME: MachineOwner
MODULE_NAME: klif
IMAGE_NAME: klif.sys
DEBUG_FLR_IMAGE_TIMESTAMP: 4ca58e03
FAILURE_BUCKET_ID: 0xA_klif+40d75
BUCKET_ID: 0xA_klif+40d75
Followup: MachineOwner
---------
Quote