Windows 7 Forums

Welcome to Windows 7 Forums. Our forum is dedicated to helping you find support and solutions for any problems regarding your Windows 7 PC be it Dell, HP, Acer, Asus or a custom build. We also provide an extensive Windows 7 tutorial section that covers a wide range of tips and tricks.


Windows 7: BSOD - wdf0100.sys error

27 Jan 2015   #1
Big3

Win 7 Ent x64
 
 
BSOD - wdf0100.sys error

I've deployed a new Win 7 x64 OS and installed all updates. Now I am receiving BSOD with references to wdf01000.sys and DRIVER_IRQL_NOT_LESS_OR_EQUAL remarks. Attached is a zip file with two memdumps. Any suggestions on resolving this would be appreciated.


My System SpecsSystem Spec
.
29 Jan 2015   #2
koolkat77

Microsoft Community Contributor Award Recipient

Windows 10 Home 64Bit
 
 

Allot of important info is missing from your zip, please follow Blue Screen of Death (BSOD) Posting Instructions to grab all and upload a new report here.
My System SpecsSystem Spec
29 Jan 2015   #3
Big3

Win 7 Ent x64
 
 

I've uploaded the DM log collector file above.
My System SpecsSystem Spec
.

30 Jan 2015   #4
koolkat77

Microsoft Community Contributor Award Recipient

Windows 10 Home 64Bit
 
 

Code:
Start Menu\Programs\McAfee	Public:Start Menu\Programs\McAfee	Public
Uninstall McAfee as it is a cause of BSOD's.

Keep MSE only.

Quote:
Revo Uninstaller:

Use Revo Uninstaller to uninstall stubborn software.




Microsoft Security Essentials is recommended from a strict BSOD perspective, compatibility & stability compared to other internet security software. Malwarebytes is a great combo to MSE. They are free and lightweight.

Also uninstall your existing Antivirus software before you install MSE.

Good and Free system security combination.

warning   Warning
Do not start the free trial of Malware Bytes; remember to deselect that option when prompted.

 Clean boot
Reduce items at start-up. No software except anti-virus is required plus doing this improves the time for logging into windows:Run the System File Checker that scans the of all protected Windows 7 system files and replaces incorrect corrupted, changed/modified, or damaged versions with the correct versions if possible:
  • Click on the
  • Type CMD on Search
  • Left click and Run as Administrator
  • Type SFC /scannow
Full tutorial here:
Code:

Microsoft (R) Windows Debugger Version 6.3.9600.16384 X86
Copyright (c) Microsoft Corporation. All rights reserved.


Loading Dump File [C:\Users\YUSRA\Downloads\Compressed\CCIU-I-105-Thu_01_29_2015_163357_10\012915-28735-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available


************* Symbol Path validation summary **************
Response                         Time (ms)     Location
Deferred                                       SRV*c:\symbols*http://msdl.microsoft.com/download/symbols
Symbol search path is: SRV*c:\symbols*http://msdl.microsoft.com/download/symbols
Executable search path is: 
Windows 7 Kernel Version 7601 (Service Pack 1) MP (24 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 7601.18700.amd64fre.win7sp1_gdr.141211-1742
Machine Name:
Kernel base = 0xfffff800`0384d000 PsLoadedModuleList = 0xfffff800`03a90890
Debug session time: Thu Jan 29 06:18:41.862 2015 (UTC + 6:00)
System Uptime: 0 days 4:13:49.192
Loading Kernel Symbols
.

Press ctrl-c (cdb, kd, ntsd) or ctrl-break (windbg) to abort symbol loads that take too long.
Run !sym noisy before .reload to track down problems loading symbols.

..............................................................
................................................................
................................................................
.........
Loading User Symbols
Loading unloaded module list
........................
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck D1, {ffffffffffffffe8, 2, 0, fffff88000ea31d9}

*** WARNING: Unable to verify timestamp for Wdf01000.sys
*** ERROR: Module load completed but symbols could not be loaded for Wdf01000.sys
Unable to open image file: C:\ProgramData\dbg\sym\Wdf01000.sys\51C51641c2000\Wdf01000.sys
The system cannot find the file specified.

Probably caused by : Wdf01000.sys ( Wdf01000+171d9 )

Followup: MachineOwner
---------

0: kd> !analyze -v
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

DRIVER_IRQL_NOT_LESS_OR_EQUAL (d1)
An attempt was made to access a pageable (or completely invalid) address at an
interrupt request level (IRQL) that is too high.  This is usually
caused by drivers using improper addresses.
If kernel debugger is available get stack backtrace.
Arguments:
Arg1: ffffffffffffffe8, memory referenced
Arg2: 0000000000000002, IRQL
Arg3: 0000000000000000, value 0 = read operation, 1 = write operation
Arg4: fffff88000ea31d9, address which referenced memory

Debugging Details:
------------------

Unable to open image file: C:\ProgramData\dbg\sym\Wdf01000.sys\51C51641c2000\Wdf01000.sys
The system cannot find the file specified.


READ_ADDRESS: GetPointerFromAddress: unable to read from fffff80003afa100
GetUlongFromAddress: unable to read from fffff80003afa1c0
 ffffffffffffffe8 

CURRENT_IRQL:  2

FAULTING_IP: 
Wdf01000+171d9
fffff880`00ea31d9 483950e8        cmp     qword ptr [rax-18h],rdx

CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  WIN7_DRIVER_FAULT

BUGCHECK_STR:  0xD1

PROCESS_NAME:  System

ANALYSIS_VERSION: 6.3.9600.16384 (debuggers(dbg).130821-1623) x86fre

TRAP_FRAME:  fffff880009ff3b0 -- (.trap 0xfffff880009ff3b0)
NOTE: The trap frame does not contain all registers.
Some register values may be zeroed or incorrect.
rax=0000000000000000 rbx=0000000000000000 rcx=fffffa80401fe0f0
rdx=fffffa80745fc6a8 rsi=0000000000000000 rdi=0000000000000000
rip=fffff88000ea31d9 rsp=fffff880009ff540 rbp=fffff880009ff5b8
 r8=0000000000000000  r9=0000000000000000 r10=0000000000000000
r11=fffff80003a3de80 r12=0000000000000000 r13=0000000000000000
r14=0000000000000000 r15=0000000000000000
iopl=0         nv up ei pl nz na pe cy
Wdf01000+0x171d9:
fffff880`00ea31d9 483950e8        cmp     qword ptr [rax-18h],rdx ds:ffffffff`ffffffe8=????????????????
Resetting default scope

LAST_CONTROL_TRANSFER:  from fffff800038c3429 to fffff800038c3e80

STACK_TEXT:  
fffff880`009ff268 fffff800`038c3429 : 00000000`0000000a ffffffff`ffffffe8 00000000`00000002 00000000`00000000 : nt!KeBugCheckEx
fffff880`009ff270 fffff800`038c20a0 : 00000000`00000000 fffffa80`32957b50 00000000`00000010 00000000`00000000 : nt!KiBugCheckDispatch+0x69
fffff880`009ff3b0 fffff880`00ea31d9 : fffffa80`32957b50 fffff800`03a3de80 fffffa80`32957c10 00000000`00000000 : nt!KiPageFault+0x260
fffff880`009ff540 fffffa80`32957b50 : fffff800`03a3de80 fffffa80`32957c10 00000000`00000000 00000000`00000000 : Wdf01000+0x171d9
fffff880`009ff548 fffff800`03a3de80 : fffffa80`32957c10 00000000`00000000 00000000`00000000 fffffa80`401fe020 : 0xfffffa80`32957b50
fffff880`009ff550 fffffa80`32957c10 : 00000000`00000000 00000000`00000000 fffffa80`401fe020 fffffa80`401fd5f0 : nt!KiInitialPCR+0x180
fffff880`009ff558 00000000`00000000 : 00000000`00000000 fffffa80`401fe020 fffffa80`401fd5f0 fffff880`009ff608 : 0xfffffa80`32957c10


STACK_COMMAND:  kb

FOLLOWUP_IP: 
Wdf01000+171d9
fffff880`00ea31d9 483950e8        cmp     qword ptr [rax-18h],rdx

SYMBOL_STACK_INDEX:  3

SYMBOL_NAME:  Wdf01000+171d9

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: Wdf01000

IMAGE_NAME:  Wdf01000.sys

DEBUG_FLR_IMAGE_TIMESTAMP:  51c51641

FAILURE_BUCKET_ID:  X64_0xD1_Wdf01000+171d9

BUCKET_ID:  X64_0xD1_Wdf01000+171d9

ANALYSIS_SOURCE:  KM

FAILURE_ID_HASH_STRING:  km:x64_0xd1_wdf01000+171d9

FAILURE_ID_HASH:  {5bc4ed1b-6fae-55eb-0641-4a955e2d96ba}

Followup: MachineOwner
---------

My System SpecsSystem Spec
30 Jan 2015   #5
Big3

Win 7 Ent x64
 
 

Is this based on detailed analysis of the data submitted or just a random guess? I have several other similarly configured machines with no BSOD issue using this version of McAfee.
My System SpecsSystem Spec
30 Jan 2015   #6
koolkat77

Microsoft Community Contributor Award Recipient

Windows 10 Home 64Bit
 
 

You may install McAfee back at any time. But first let us wait and observe
My System SpecsSystem Spec
Reply

 BSOD - wdf0100.sys error




Thread Tools Search this Thread
Search this Thread:

Advanced Search




Similar help and support threads
Thread Forum
BSOD Memory Management Error, didn't catch error code.
Hello again, BSOD Forum, I've been free of frequent BSODs since earlier this year. Recently I must have installed some software or something else must have gone wrong, because the blue screens are back. Here is what happened earlier this year, in case anyone needs any further context: ...
BSOD Help and Support
Random BSOD stop error 0x0000001E, hardware error?
Hello, A few days ago I got a random BSOD with the 0x0..1E stop error. Now my computer will rarely boot and when it does it still randomly gets the same BSOD. I once got a 1D stop error but its mostly 1E that keeps happening. I run Windows 7 Professional 64-bit and this time I used a Windows DVD...
BSOD Help and Support
BSOD error.. Restarts, but power button stays on, graphics card error?
Hey guys, i want to thank you ahead of time for helping me. This BSOD is a pain in the butt. Intel Pentium 2.8GHZ RAM 3.5 32 bit OS Intel GG965 Express Chipset Family I have already reinstalled the operating system multiple times, i think its a faulty graphics card, but i want to be...
BSOD Help and Support
BSOD. error Custom built computer. error unknown between 0 or 1077...
Well I built this computer in september of 2011 everything was running great no problems at all until today. I left it on and went to the store came back and BSOD. My computer restarted before I could write down any information "Error code" system restore said it was a "unknown error" which...
BSOD Help and Support
BSOD error 3b then error 50 > Page Fault In Nonpaged Area
Hi , First i had bsod error 1a Memory_Management about 10 days ago and i reported it here in this topic http://www.sevenforums.com/crashes-debugging/190348-bsod-error-1a-memory_management.html and it ended and never came again since then but now this happened BCCode: 3b BCP1:...
BSOD Help and Support


Our Sites

Site Links

About Us

Find Us

Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

Designer Media Ltd

All times are GMT -5. The time now is 04:05.

Twitter Facebook Google+



Windows 7 Forums

Seven Forums Android App Seven Forums IOS App