Random BSOD's "driver_irql_not_less_or_equal" afd.sys

BSODhater 1990 · 14 Jul 2012

I have tried everything

and exhausted my knowledge when it comes to hardware, my computer starting giving me random BSOD's, it only works in normal mode, and safe mode with networking for a short amount of time, but works perfectly fine in regular safe mode, I also let it sit in CMOS for about and hour without any reboot, I updated all my drivers which inherently has made things slightly worse (i.e BSOD's are more frequent) and it keeps spitting out different error codes the most recent one is the title and the only other one I can remember involved a "BAD_POOL_HEADER" or something along the lines of that, any help will be greatly appreciated. Also though I have manually backed up my data and have made Norton Ghost Images I would prefer not to reinstall unless someone knows how to restore just my files and programs but not the OS state. And I could not include a system health report as the Performance Logs & Alerts Service fails to run in safe mode but I have included my latest mini-dump files in the zip file attached.

Please help me, I'm frightened

System Specs:

Windows 7 Home Premium X64 OEM
16 GB Mushkin Silverline RAM
ZOTAC Graphic Card
Ethernet to USB
Acer Aspire x3400 motherboard
2 TB Seagate Barracuda- OS
1 TB Western Digital- Backup/Norton Ghost

**EDIT**

Has been running in safe mode without networking perfectly fine for about an hour or so, running a backup on my user profile.

usasma · 14 Jul 2012

No network card showing in systeminfo.txt - have you turned it off/removed it for some reason?
You have an nForce wired networking controller and a wireless USB device listed in the network adapter section of MSINFO32.

FYI - Win7 doesn't like wireless USB devices and will spit out errors rapidly if using an older (Vista era) driver. Here's my rant about these devices:

I do not recommend using wireless USB devices. Especially in Win7 systems.
These wireless USB devices have many issues with Win7 - and using Vista drivers with them is almost sure to cause a BSOD.
Should you want to keep using these devices, be sure to have Win7 drivers - DO NOT use Vista drivers!!!
An installable wireless PCI/PCIe card that's plugged into your motherboard is much more robust, reliable, and powerful.

Problem Devices section of MSINFO32 shows these problems:

Microsoft PS/2 Mouse ACPI\PNP0F03\4&47E29E2&0 This device is not present, is not working properly, or does not have all its drivers installed.

VMware VMCI Host Device ROOT\VMWVMCIHOSTDEV\0000 This device is not working properly because Windows cannot load the drivers required for this device.

Security Processor Loader Driver ROOT\LEGACY_SPLDR\0000 This device is not present, is not working properly, or does not have all its drivers installed.

If using a USB mouse (and you aren't having problems with it) this error is safe to ignore

Uninstall the VMWare stuff. Reinstall a fresh copy if you want to keep the program(s)

Security Loader errors are usually due to a malware infection (or an incompletely/improperly repaired malware infection). Start by scanning with some of these free tools: Free Online AntiMalware Resources. I am not a malware expert, so I'd suggest addressing those problems in the Security forums.

Daemon Tools (and Alcohol % software) are known to cause BSOD's on some Win7 systems (mostly due to the sptd.sys driver, although I have seen dtsoftbus01.sys blamed on several occasions).
Please uninstall the program, then use the following free tool to ensure that the troublesome sptd.sys driver is removed from your system (pick the 32 or 64 bit system depending on your system's configuration): DuplexSecure - FAQ

8 memory dumps
6 different BSOD error codes
7 different causes blamed

This is most likely a hardware error. They (hardware errors) are usually caused by one of these things:
- borked (broken) hardware (several different procedures used to isolate the problem device)
- overclocking - You'll know if you're overclocking or not. If uncertain we can suggest things to check.
- compatibility issues (such as the 2007 driver for your D-Link wireless USB device)
- low-level driver problems (such as Daemon Tools or the VMWare issues)
- or even malware (scanned for when we ask for hardware diagnostics from Initial Hardware Diagnostics or Hardware Diagnostics ).

If the above steps don't stop the BSOD's, please zip up and upload any new memory dumps with your next post - and we'll see what we can figure out from there.

The following info is just FYI, I've already addressed the issues that I saw in the above paragraphs

- Further info on BSOD error messages available at: http://www.carrona.org/bsodindx.html
- Info on how to troubleshoot BSOD's (DRAFT): http://www.carrona.org/userbsod.html
- How I do it: http://www.carrona.org/howidoit.html

3RD PARTY DRIVERS PRESENT IN THE DUMP FILES

Code:


BHDrvx64.sys               Wed May 16 22:16:36 2012 (4FB45F84)
DUBE100B.sys               Wed Apr 04 04:27:34 2007 (46136176)
ENG64.SYS                  Wed Apr 25 05:29:25 2012 (4F97C3F5)
EX64.SYS                   Wed Apr 25 05:27:28 2012 (4F97C380)
EraserUtilRebootDrv.sys    Tue May 15 20:36:03 2012 (4FB2F673)
GEARAspiWDM.sys            Mon May 16 16:56:05 2011 (4DD18F65)
GenericMount.sys           Mon Jan 18 08:50:40 2010 (4B546730)
IDSvia64.sys               Thu May 24 20:08:33 2012 (4FBECD81)
Ironx64.SYS                Mon Nov 14 21:00:53 2011 (4EC1C7D5)
RTKVHD64.sys               Mon Jul 20 06:52:29 2009 (4A644C6D)
RTKVHD64.sys               Tue Oct 18 07:48:20 2011 (4E9D6784)
SCDEmu.SYS                 Wed May 30 21:33:23 2012 (4FC6CA63)
SRTSP64.SYS                Thu Mar 15 14:09:13 2012 (4F623049)
SRTSPX64.SYS               Thu Mar 15 14:09:21 2012 (4F623051)
SYMDS64.SYS                Mon May 16 18:15:03 2011 (4DD1A1E7)
SYMEFA64.SYS               Tue Nov 22 19:49:28 2011 (4ECC4318)
SYMEVENT64x86.SYS          Mon Jan 23 13:57:54 2012 (4F1DADB2)
SYMNETS.SYS                Sat Nov 12 16:11:53 2011 (4EBEE119)
SymIMv.sys                 Sat Nov 12 16:08:22 2011 (4EBEE046)
VBoxDrv.sys                Wed Mar 14 13:22:40 2012 (4F60D3E0)
VBoxNetAdp.sys             Wed Mar 14 13:22:41 2012 (4F60D3E1)
VBoxNetFlt.sys             Wed Mar 14 13:22:40 2012 (4F60D3E0)
VBoxUSBMon.sys             Wed Mar 14 13:22:40 2012 (4F60D3E0)
VMNET.SYS                  Fri Jul 08 03:43:55 2011 (4E16B53B)
afcdp.sys                  Tue Aug 10 11:24:00 2010 (4C616F10)
amdxata.sys                Fri Mar 19 12:18:18 2010 (4BA3A3CA)
ccSetx64.sys               Fri Nov 04 18:05:25 2011 (4EB461A5)
dtsoftbus01.sys            Fri Jan 13 08:45:46 2012 (4F10358A)
dump_nvstor64.sys          Fri Apr 09 05:22:41 2010 (4BBEF1E1)
dump_nvstor64.sys          Wed Apr 29 21:57:30 2009 (49F9058A)
eeCtrl64.sys               Tue May 15 20:36:03 2012 (4FB2F673)
hcmon.sys                  Tue Aug 30 02:05:35 2011 (4E5C7DAF)
mwlPSDFilter.sys           Tue Jun 02 06:07:30 2009 (4A24F9E2)
mwlPSDNServ.sys            Tue Jun 02 06:07:39 2009 (4A24F9EB)
mwlPSDVDisk.sys            Tue Jun 02 06:15:29 2009 (4A24FBC1)
nvBridge.kmd               Mon Nov 23 19:09:33 2009 (4B0B243D)
nvhda64v.sys               Thu Jul 07 12:21:14 2011 (4E15DCFA)
nvhda64v.sys               Tue Jan 17 07:45:46 2012 (4F156D7A)
nvhda64v.sys               Tue May 10 05:41:18 2011 (4DC9083E)
nvlddmkm.sys               Thu Feb 09 21:02:58 2012 (4F347AD2)
nvlddmkm.sys               Wed Aug 03 05:08:32 2011 (4E391010)
nvmf6264.sys               Thu Apr 30 15:45:59 2009 (49F9FFF7)
nvmf6264.sys               Thu Jul 30 19:48:18 2009 (4A723142)
nvsmu.sys                  Fri Apr 24 23:07:14 2009 (49F27E62)
nvsmu.sys                  Mon Mar 22 21:29:19 2010 (4BA8196F)
nvstor64.sys               Fri Apr 09 05:22:41 2010 (4BBEF1E1)
nvstor64.sys               Wed Apr 29 21:57:30 2009 (49F9058A)
snapman.sys                Tue Aug 10 06:15:05 2010 (4C6126A9)
symsnap.sys                Tue Sep 15 17:02:11 2009 (4AB000D3)
tdrpm273.sys               Tue Aug 10 05:54:18 2010 (4C6121CA)
timntr.sys                 Wed Jun 02 08:56:47 2010 (4C06550F)
vmci.sys                   Tue Jul 26 22:42:09 2011 (4E2F7B01)
vmnetadapter.sys           Fri Jul 08 03:43:56 2011 (4E16B53C)
vmnetbridge.sys            Fri Jul 08 03:44:44 2011 (4E16B56C)
vmnetuserif.sys            Mon Apr 30 21:17:44 2012 (4F9F39B8)
vmx86.sys                  Mon Apr 30 23:28:58 2012 (4F9F587A)
vstor2-mntapi10-shared.sys Tue Jul 12 12:35:21 2011 (4E1C77C9)

Code:


Loading Dump File [C:\Users\John\_jcgriff2_\dbug\__Kernel__\062812-24460-01.dmp]
Built by: 7601.17835.amd64fre.win7sp1_gdr.120503-2030
Debug session time: Thu Jun 28 06:12:18.389 2012 (UTC - 4:00)
System Uptime: 0 days 7:24:24.669
BugCheck D1, {fffff880014fec08, 0, 8, fffff880014fec08}
Probably caused by : Ntfs.sys ( Ntfs! ?? ::NNGAKEGL::`string'+2bf0 )
DEFAULT_BUCKET_ID:  WIN7_DRIVER_FAULT
BUGCHECK_STR:  0xD1
PROCESS_NAME:  TrueImageHomeS
FAILURE_BUCKET_ID:  X64_0xD1_CODE_AV_BAD_IP_Ntfs!_??_::NNGAKEGL::_string_+2bf0
Bugcheck code 000000D1
Arguments fffff880`014fec08 00000000`00000000 00000000`00000008 fffff880`014fec08
BiosVersion = P01-B1
BiosReleaseDate = 04/02/2010
SystemManufacturer = Acer
SystemProductName = Aspire X3400
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
Loading Dump File [C:\Users\John\_jcgriff2_\dbug\__Kernel__\070212-49826-01.dmp]
Built by: 7601.17835.amd64fre.win7sp1_gdr.120503-2030
Debug session time: Mon Jul  2 18:24:55.074 2012 (UTC - 4:00)
System Uptime: 1 days 0:35:33.823
BugCheck 3B, {c0000005, fffff8800284743a, fffff8800f211a50, 0}
Probably caused by : afd.sys ( afd!AfdTLReleaseIndications+1a )
DEFAULT_BUCKET_ID:  WIN7_DRIVER_FAULT
BUGCHECK_STR:  0x3B
PROCESS_NAME:  BitTorrent.exe
FAILURE_BUCKET_ID:  X64_0x3B_afd!AfdTLReleaseIndications+1a
Bugcheck code 0000003B
Arguments 00000000`c0000005 fffff880`0284743a fffff880`0f211a50 00000000`00000000
BiosVersion = P01-B1
BiosReleaseDate = 04/02/2010
SystemManufacturer = Acer
SystemProductName = Aspire X3400
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
Loading Dump File [C:\Users\John\_jcgriff2_\dbug\__Kernel__\071012-35334-01.dmp]
Built by: 7601.17835.amd64fre.win7sp1_gdr.120503-2030
Debug session time: Tue Jul 10 22:22:21.351 2012 (UTC - 4:00)
System Uptime: 0 days 1:03:14.740
BugCheck D3, {fffff880019eacb0, 2, 1, fffff800032db266}
Probably caused by : win32k.sys ( win32k!xxxRealSleepThread+257 )
DEFAULT_BUCKET_ID:  WIN7_DRIVER_FAULT
BUGCHECK_STR:  0xD3
PROCESS_NAME:  taskmgr.exe
FAILURE_BUCKET_ID:  X64_0xD3_win32k!xxxRealSleepThread+257
Bugcheck code 000000D3
Arguments fffff880`019eacb0 00000000`00000002 00000000`00000001 fffff800`032db266
BiosVersion = P01-B1
BiosReleaseDate = 04/02/2010
SystemManufacturer = Acer
SystemProductName = Aspire X3400
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
Loading Dump File [C:\Users\John\_jcgriff2_\dbug\__Kernel__\071012-36176-01.dmp]
Built by: 7601.17835.amd64fre.win7sp1_gdr.120503-2030
Debug session time: Tue Jul 10 21:17:36.732 2012 (UTC - 4:00)
System Uptime: 3 days 21:19:00.121
BugCheck 19, {3, fffff880030fb7d0, fffff880010fb7d0, fffff880030fb7d0}
Probably caused by : Pool_Corruption ( nt!ExDeferredFreePool+a53 )
BUGCHECK_STR:  0x19_3
DEFAULT_BUCKET_ID:  WIN7_DRIVER_FAULT
PROCESS_NAME:  explorer.exe
FAILURE_BUCKET_ID:  X64_0x19_3_nt!ExDeferredFreePool+a53
Bugcheck code 00000019
Arguments 00000000`00000003 fffff880`030fb7d0 fffff880`010fb7d0 fffff880`030fb7d0
BiosVersion = P01-B1
BiosReleaseDate = 04/02/2010
SystemManufacturer = Acer
SystemProductName = Aspire X3400
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
Loading Dump File [C:\Users\John\_jcgriff2_\dbug\__Kernel__\071212-50154-01.dmp]
Built by: 7601.17835.amd64fre.win7sp1_gdr.120503-2030
Debug session time: Thu Jul 12 04:36:13.285 2012 (UTC - 4:00)
System Uptime: 0 days 5:42:46.675
BugCheck 19, {20, fffffa80092e9b50, fffffa80092ea950, 4e004c0}
*** WARNING: Unable to verify timestamp for win32k.sys
*** ERROR: Module load completed but symbols could not be loaded for win32k.sys
Probably caused by : NETIO.SYS ( NETIO!SortMatchList+7f )
BUGCHECK_STR:  0x19_20
DEFAULT_BUCKET_ID:  WIN7_DRIVER_FAULT
PROCESS_NAME:  System
FAILURE_BUCKET_ID:  X64_0x19_20_NETIO!SortMatchList+7f
Bugcheck code 00000019
Arguments 00000000`00000020 fffffa80`092e9b50 fffffa80`092ea950 00000000`04e004c0
BiosVersion = P01-B1
BiosReleaseDate = 04/02/2010
SystemManufacturer = Acer
SystemProductName = Aspire X3400
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
Loading Dump File [C:\Users\John\_jcgriff2_\dbug\__Kernel__\071312-45957-01.dmp]
Built by: 7601.17835.amd64fre.win7sp1_gdr.120503-2030
Debug session time: Fri Jul 13 11:57:47.099 2012 (UTC - 4:00)
System Uptime: 0 days 14:14:44.488
BugCheck 1A, {41284, fffff70001081001, 2c507c, fffff70001080000}
Probably caused by : ntkrnlmp.exe ( nt! ?? ::FNODOBFM::`string'+4ac3 )
BUGCHECK_STR:  0x1a_41284
DEFAULT_BUCKET_ID:  WIN7_DRIVER_FAULT
PROCESS_NAME:  gbtray.exe
FAILURE_BUCKET_ID:  X64_0x1a_41284_nt!_??_::FNODOBFM::_string_+4ac3
Bugcheck code 0000001A
Arguments 00000000`00041284 fffff700`01081001 00000000`002c507c fffff700`01080000
BiosVersion = P01-B1
BiosReleaseDate = 04/02/2010
SystemManufacturer = Acer
SystemProductName = Aspire X3400
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
Loading Dump File [C:\Users\John\_jcgriff2_\dbug\__Kernel__\071412-43368-01.dmp]
Built by: 7601.17835.amd64fre.win7sp1_gdr.120503-2030
Debug session time: Sat Jul 14 00:04:36.626 2012 (UTC - 4:00)
System Uptime: 0 days 0:03:33.250
BugCheck D1, {8, 2, 0, fffff8800249c43a}
*** WARNING: Unable to verify timestamp for win32k.sys
*** ERROR: Module load completed but symbols could not be loaded for win32k.sys
Probably caused by : afd.sys ( afd!AfdTLReleaseIndications+1a )
DEFAULT_BUCKET_ID:  WIN7_DRIVER_FAULT
BUGCHECK_STR:  0xD1
PROCESS_NAME:  System
FAILURE_BUCKET_ID:  X64_0xD1_afd!AfdTLReleaseIndications+1a
Bugcheck code 000000D1
Arguments 00000000`00000008 00000000`00000002 00000000`00000000 fffff880`0249c43a
BiosVersion = P01-B1
BiosReleaseDate = 04/02/2010
SystemManufacturer = Acer
SystemProductName = Aspire X3400
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
Loading Dump File [C:\Users\John\_jcgriff2_\dbug\__Kernel__\071412-47642-01.dmp]
Built by: 7601.17835.amd64fre.win7sp1_gdr.120503-2030
Debug session time: Fri Jul 13 23:53:07.687 2012 (UTC - 4:00)
System Uptime: 0 days 3:05:24.076
BugCheck A, {48, 2, 1, fffff8000334634f}
Probably caused by : memory_corruption ( nt!MiIdentifyPfn+26f )
DEFAULT_BUCKET_ID:  WIN7_DRIVER_FAULT
BUGCHECK_STR:  0xA
PROCESS_NAME:  svchost.exe
FAILURE_BUCKET_ID:  X64_0xA_nt!MiIdentifyPfn+26f
Bugcheck code 0000000A
Arguments 00000000`00000048 00000000`00000002 00000000`00000001 fffff800`0334634f
BiosVersion = P01-B1
BiosReleaseDate = 04/02/2010
SystemManufacturer = Acer
SystemProductName = Aspire X3400
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``

BSODhater 1990 · 14 Jul 2012

Ok, I found an HDD with a full system clone from about a month ago way before this started happening (i.e Before changing the network and graphic card-Blue screens and such) , I'm in the process of cloning that drive to my system drive using an Acronis bootable environment, after that I will shutdown the system remove the graphic card as well as the Ethernet 2 usb device, and enable on-board graphics, but my onboard networking card does not work (always assigns me an invalid IP starting with 169.) but for all intensive purposes I will enable anyway, I do have a brand new PCI network card sitting on me desk in box, so I'll prob install that one until i can get a new motherboard with more than 1 PCI port. I'll let you know how it goes