Windows 7: Frequent BSOD's (athr.sys) during normal usage.

Alanisette · 29 Dec 2012

Alright, so here's the lowdown:

This started yesterday, and before this began my laptop ran normally and I like to game a lot. I use my laptop mainly for playing League of Legends, and the occasional web browsing. I have been running my laptop nonstop for the past couple of weeks or so, as a rough estimate. The night of the day before yesterday (which was this past Wednesday), I decided to put my laptop to sleep. The following afternoon on Thursday, I turned on my laptop right after coming home from work. I suddenly noticed my Internet was going slower than usual, so I ran some tests on Pingtest.net. My results were 1/5 - 1/3 packet loss, and highly variable pings and jitters. After some time passed, the BSOD came up. Frustration set in, and decided to just restart it. After rebooting, it started happening about every 45min to every hour. I decided to reboot to my Windows 8 Release Preview that I have partitioned on my drive. I haven't used this OS in quite a while, so I thought this would ameliorate the problem. Nope, it didn't. I switched back to Windows 7 and decided to do a System Restore to this past Wednesday. It didn't work, so I went to restore it further back, and that didn't work either. And now, I'm here. I would love some insight on this problem. It's frustrating and annoying to keep seeing this. This is my first time posting on these forums, so I hopefully followed the protocols on here correctly. If not, I'd like to know any mistakes I have made, any important information missing that I forgot to say and/or may be relevant, etc. Thank you in advance.

DocBrown · 29 Dec 2012

Welcome Alanisette

I see one of our resident BSOD experts is analyzing your zip file now.

Have you rebooted your cable modem & router ?

**koolkat77** · 29 Dec 2012

Thanks Doc

Hi and Welcome to SevenForums Alanisette.

BSOD Report

Code:

*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck D1, {30, 2, 0, 96ab48a5}

Unable to load image \SystemRoot\system32\DRIVERS\athr.sys, Win32 error 0n2
*** WARNING: Unable to verify timestamp for athr.sys
*** ERROR: Module load completed but symbols could not be loaded for athr.sys
*** ERROR: Symbol file could not be found.  Defaulted to export symbols for ndis.sys - 
Probably caused by : athr.sys ( athr+428a5 )

Followup: MachineOwner
---------

1: kd> !analyze -v
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

DRIVER_IRQL_NOT_LESS_OR_EQUAL (d1)
An attempt was made to access a pageable (or completely invalid) address at an
interrupt request level (IRQL) that is too high.  This is usually
caused by drivers using improper addresses.
If kernel debugger is available get stack backtrace.
Arguments:
Arg1: 00000030, memory referenced
Arg2: 00000002, IRQL
Arg3: 00000000, value 0 = read operation, 1 = write operation
Arg4: 96ab48a5, address which referenced memory

Debugging Details:
------------------


READ_ADDRESS: GetPointerFromAddress: unable to read from 82fb1848
Unable to read MiSystemVaType memory at 82f90e20
 00000030 

CURRENT_IRQL:  2

FAULTING_IP: 
athr+428a5
96ab48a5 8b5130          mov     edx,dword ptr [ecx+30h]

CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  WIN7_DRIVER_FAULT

BUGCHECK_STR:  0xD1

PROCESS_NAME:  System

TAG_NOT_DEFINED_c000000f:  FFFFFFFF807E5000

TRAP_FRAME:  807e0894 -- (.trap 0xffffffff807e0894)
ErrCode = 00000000
eax=0000001a ebx=87acbbf8 ecx=00000000 edx=00000088 esi=00000000 edi=00000000
eip=96ab48a5 esp=807e0908 ebp=807e090c iopl=0         nv up ei pl nz na po nc
cs=0008  ss=0010  ds=0023  es=0023  fs=0030  gs=0000             efl=00010202
athr+0x428a5:
96ab48a5 8b5130          mov     edx,dword ptr [ecx+30h] ds:0023:00000030=????????
Resetting default scope

LAST_CONTROL_TRANSFER:  from 96ab48a5 to 82e87cdb

STACK_TEXT:  
807e0894 96ab48a5 badb0d00 00000088 88887aa8 nt!KiTrap0E+0x2cf
WARNING: Stack unwind information not available. Following frames may be wrong.
807e090c 96ab4647 00000000 84fdabe4 8500bca0 athr+0x428a5
807e0944 96ab3c52 854c7108 87b041e8 00000000 athr+0x42647
807e096c 96adafc0 854c7028 87b041e8 00000018 athr+0x41c52
807e09c0 96adb8c7 87a8d020 87b041e8 00000000 athr+0x68fc0
807e0b14 96a8ccfe 87b041e8 807e0b30 96a89d2f athr+0x698c7
807e0b20 96a89d2f 87b041e8 87acfc70 807e0b40 athr+0x1acfe
807e0b30 96ad19c7 87acfc70 87b041e8 807e0b68 athr+0x17d2f
807e0b40 96ad16b7 87aa2628 87b041e8 00000000 athr+0x5f9c7
807e0b68 96a8562a 87aa2628 87b041e8 00000000 athr+0x5f6b7
807e0b94 96a85414 8794aa50 87b04160 87acbbf8 athr+0x1362a
807e0bac 96a86499 8794aa50 85224850 ad26ace8 athr+0x13414
807e0bc4 96a86525 8794aa50 807e0bdc 96ae3514 athr+0x14499
807e0bd0 96ae3514 8794aa50 807e0bf8 96ae81bf athr+0x14525
807e0bdc 96ae81bf 87aa7020 87ac0022 807c5a54 athr+0x71514
807e0bf8 96a8cabd 87aa7020 807e0c14 96a73761 athr+0x761bf
807e0c04 96a73761 87a8d020 8794aa50 807e0c50 athr+0x1aabd
807e0c14 8926f89a 8794aa50 00000000 807e0c40 athr+0x1761
807e0c50 8921aa1f 87acbc0c 00acbbf8 00000000 ndis!NdisIMNotifyPnPEvent+0x4bde
807e0c78 82ebe935 87acbc0c 87acbbf8 00000000 ndis!NdisScheduleWorkItem+0xdb
807e0cd4 82ebe798 807c4120 807c9800 00000000 nt!KiExecuteAllDpcs+0xf9
807e0d20 82ebe5b8 00000000 0000000e 006d0064 nt!KiRetireDpcList+0xd5
807e0d24 00000000 0000000e 006d0064 016c0000 nt!KiIdleLoop+0x38


STACK_COMMAND:  kb

FOLLOWUP_IP: 
athr+428a5
96ab48a5 8b5130          mov     edx,dword ptr [ecx+30h]

SYMBOL_STACK_INDEX:  1

SYMBOL_NAME:  athr+428a5

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: athr

IMAGE_NAME:  athr.sys

DEBUG_FLR_IMAGE_TIMESTAMP:  4acea1f4

FAILURE_BUCKET_ID:  0xD1_athr+428a5

BUCKET_ID:  0xD1_athr+428a5

Followup: MachineOwner
---------
kd> lmvm athr
start    end        module name
96a72000 96b82000   athr     T (no symbols)           
    Loaded symbol image file: athr.sys
    Image path: \SystemRoot\system32\DRIVERS\athr.sys
    Image name: athr.sys
    Timestamp:        Fri Oct 09 08:37:40 2009 (4ACEA1F4)
    CheckSum:         00111E34
    ImageSize:        00110000
    Translations:     0000.04b0 0000.04e4 0409.04b0 0409.04e4

Download and install the latest version for the.. Atheros Extensible Wireless LAN driver for CB42/CB43/MB42/MB43 Network Adapter - D-Link AirPlus DWL-G520 Wireless PCI Adapter(rev.B) discontinued 2008

METHOD:

Quote:

Click on the Start

► Control Panel ► Programs ► Uninstall a program ► Uninstall everything related to ATHEROS and reboot the system. Delete remnants of its drivers/older drivers using Driver Sweeper

Drivers - Clean Left over Files after Uninstalling

Atheros Driver:

If its wireless, match your device from here:

ATHEROS Wireless drivers for Windows

If its not a wireless, match your device from here:

ATHEROS Network drivers for Windows

Perform a System File Check:

Click on the start
Type CMD on Search
Left click and Run as Administrator
Type SFC /scannow

Full tutorial here:

SFC /SCANNOW Command - System File Checker

Disk Check on your hard drive for file system errors and bad sectors on it:

Disk Check

Reduce items at start-up. Nothing except anti-virus is required:

Go to this link: Intel® Driver Update Utility and check the system for latest updates. Download and install them one by one.

Post back your results.

Alanisette · 29 Dec 2012

Quick question before I begin this process: When I do begin to delete the drivers, I will have to continue this process over an Ethernet Connection, correct?

Edit: Also, thank you for the warm welcomes and for the quick assistance.

**koolkat77** · 29 Dec 2012

Quote: Originally Posted by Alanisette

Quick question before I begin this process: When I do begin to delete the drivers, I will have to continue this process over an Ethernet Connection, correct?

Edit: Also, thank you for the warm welcomes and for the quick assistance.

Yes.

You're welcome

Alanisette · 29 Dec 2012

Another question: What do I do with the drivers that I have downloaded? Do I move them to a system folder, or do I open one of the files? And, the program where you remove leftover files from the drivers does not show the driver for my wireless card, so does that mean I can skip that part?

**koolkat77** · 29 Dec 2012

Quote: Originally Posted by Alanisette

Another question: What do I do with the drivers that I have downloaded? Do I move them to a system folder, or do I open one of the files?

Follow steps in the tutorial below:

Driver Install - Device Manager

**koolkat77** · 29 Dec 2012

Quote: Originally Posted by Alanisette

And, the program where you remove leftover files from the drivers does not show the driver for my wireless card, so does that mean I can skip that part?

Hmm. Yup you can.

Alanisette · 29 Dec 2012

Turns out when I tried to go in Device Manager to find my wifi adapter, it was removed from the list, so I couldn't update. I'm currently reinstalling my old driver and will proceed on.

Alanisette · 29 Dec 2012

Alright, after installing the new drivers, the BSOD's popped up as soon as I would click on a network to connect. I have a picture of the BSOD. So, I tried rolling back the driver to the original driver, and this driver works. As for now, I will go with the original driver, but thanks to you guys for your help. I will start this process when I begin to have problems again. Here's the photo.

Windows 7: Frequent BSOD's (athr.sys) during normal usage.

Frequent BSOD's (athr.sys) during normal usage. problems?