BSOD ntoskrnl.exe 64bit

Welcome

Problematic software:

Code:

Start Menu\Programs\COMODO	Public:Start Menu\Programs\COMODO	Public
Start Menu\Programs\COMODO\COMODO Internet Security	Public:Start Menu\Programs\COMODO\COMODO Internet Security	Public

Comodo Internet Security contributes in blue screens. Search in Google how to uninstall it properly. Make sure all the drivers are gone. If you feel there are remnants of its drivers use Driver Sweeper to get rid of them.

Coming to what was found in the dumps

Code:

fffff880`0331b1e8  fffff880`043e9efcUnable to load image \SystemRoot\system32\DRIVERS\VirtuWDDM.sys, Win32 error 0n2
*** WARNING: Unable to verify timestamp for VirtuWDDM.sys
*** ERROR: Module load completed but symbols could not be loaded for VirtuWDDM.sys
 VirtuWDDM+0x3efc
-------------------
fffff880`0331b258  fffff880`05303c4fUnable to load image \SystemRoot\system32\DRIVERS\athrx.sys, Win32 error 0n2
*** WARNING: Unable to verify timestamp for athrx.sys
*** ERROR: Module load completed but symbols could not be loaded for athrx.sys
 athrx+0x8bc4f
-------------------
fffff880`0331b4e8  fffff880`05b74fa4Unable to load image \SystemRoot\system32\DRIVERS\atikmdag.sys, Win32 error 0n2
*** WARNING: Unable to verify timestamp for atikmdag.sys
*** ERROR: Module load completed but symbols could not be loaded for atikmdag.sys
 atikmdag+0xb6fa4

Firewall/Antivirus programs like CIS often cause crashes with network drivers if under stress.

After you uninstalled the program I listed in the beginning, update these drivers:

Code:

1: kd> lmvm athrx
start             end                 module name
fffff880`05278000 fffff880`053ff000   athrx    T (no symbols)           
    Loaded symbol image file: athrx.sys
    Image path: \SystemRoot\system32\DRIVERS\athrx.sys
    Image name: athrx.sys
    Timestamp:        Thu Jan 28 07:25:39 2010 (4B60E793)
    CheckSum:         001852C3
    ImageSize:        00187000
    Translations:     0000.04b0 0000.04e4 0409.04b0 0409.04e4

Source:

• Driver Reference Table

For ATI Drivers, uninstall older first from control panel normally and use Driver Sweeper for any remnants:

Code:

1: kd> lmvm atikmdag
start             end                 module name
fffff880`05abe000 fffff880`064df000   atikmdag T (no symbols)           
    Loaded symbol image file: atikmdag.sys
    Image path: \SystemRoot\system32\DRIVERS\atikmdag.sys
    Image name: atikmdag.sys
    Timestamp:        Sat Jul 28 07:48:09 2012 (501344D9)
    CheckSum:         009DA146
    ImageSize:        00A21000
    Translations:     0000.04b0 0000.04e4 0409.04b0 0409.04e4

Source:

• Driver Reference Table

VIRTU LucidInterop WDDM Driver by LucidLogix
I'd consider to uninstall this program, but if there are driver updates for it, get the latest.

Code:

1: kd> lmvm VirtuWDDM
start             end                 module name
fffff880`043e6000 fffff880`043fb000   VirtuWDDM T (no symbols)           
    Loaded symbol image file: VirtuWDDM.sys
    Image path: \SystemRoot\system32\DRIVERS\VirtuWDDM.sys
    Image name: VirtuWDDM.sys
    Timestamp:        Sun Feb 05 17:24:50 2012 (4F2E6702)
    CheckSum:         0001EB45
    ImageSize:        00015000
    Translations:     0000.04b0 0000.04e4 0409.04b0 0409.04e4

Source:

• Driver Reference Table

Run the System File Checker that scans the the integrity of all protected Windows 7 system files and replaces incorrect corrupted, changed/modified, or damaged versions with the correct versions if possible:

• SFC /SCANNOW Command - System File Checker

Then run Disk Check on your hard drive for file system errors and bad sectors on it:

• Disk Check

Summary:

Code:

STOP 0x0000000A: IRQL_NOT_LESS_OR_EQUAL
Usual causes:  Kernel mode driver, System Service, BIOS, Windows, 
Virus scanner, Backup tool, compatibility
BugCheck A, {fffff80000c22958, 2, 1, fffff800030a983e}
Unable to load image \SystemRoot\system32\DRIVERS\VirtuWDDM.sys, Win32 error 0n2
*** WARNING: Unable to verify timestamp for VirtuWDDM.sys
*** ERROR: Module load completed but symbols could not be loaded for VirtuWDDM.sys
Unable to load image \SystemRoot\system32\DRIVERS\atikmdag.sys, Win32 error 0n2
*** WARNING: Unable to verify timestamp for atikmdag.sys
*** ERROR: Module load completed but symbols could not be loaded for atikmdag.sys
*** WARNING: Unable to verify timestamp for win32k.sys
*** ERROR: Module load completed but symbols could not be loaded for win32k.sys
Probably caused by : memory_corruption
..............................
STOP 0x000000D1: DRIVER_IRQL_NOT_LESS_OR_EQUAL
Usual causes:  Device driver
BugCheck D1, {60, 2, 8, 60}
Probably caused by : ntkrnlmp.exe ( nt!KiPageFault+260 )
..............................
STOP 0x000000D1: DRIVER_IRQL_NOT_LESS_OR_EQUAL
Usual causes:  Device driver
BugCheck D1, {0, 2, 8, 0}
Probably caused by : NETIO.SYS ( NETIO!RtlReturnTimerWheelEntry+45 )
..............................
STOP 0x00000050: PAGE_FAULT_IN_NONPAGED_AREA 
Usual causes:  Defective hardware (particularly memory - but not just RAM), 
Faulty system service, Antivirus,  Device driver, NTFS corruption, BIOS
BugCheck 50, {fffffa8810a655a4, 0, fffff800030ebc00, 5}
Could not read faulting driver name
Probably caused by : cdd.dll ( cdd!PresentWorkerThread+5ec )

Hope this helps & keep us posted of further BSoDs

rapstyle said:

thanks koolkat77 for the reply..
I have uninstalled comodo.
Now, I have found the drivers win78-10.0.0.75-whql.zip on the atheros site to update the athrx.sys file.
In the zip there are some .inf (athw8.inf, athw8x.inf, netathr.inf, netathrx.inf), some .sys and some .cat.
Should I install any .inf file? If so, which one? Or should I just replace athrx.sys?
Thanks in advance for the help

Download the .sys files and zip files if they're there.
This tutorial might help you as well,

• Driver Install - Device Manager

Select the device, right click and uninstall.
Then install the downloaded driver. It is the fourth one listed.

rapstyle said:

Ok, now i have the wifi drivers update at 24/07/2012. And i have also update the video drivers.
which antivirus and firewall do you think are the best? microsoft security essentials is a good solution?
Thanks

Yes you can use Microsoft security essentials with the great combination of Malware Bytes.

• Microsoft Security Essentials - Free Antivirus for Windows
• Malwarebytes - The Free version
• Good and Free system security combination.

Run a full scan with both (separately) once downloaded, installed and updated.

Good luck, keep us posted :)