AFD.sys BSOD. RC 7100

[Wtfomgbbq]

So as many others have experienced, the AFD.sys bsod has come to me. I know that there are ways to fix it. Such as upgrading or downgrading your network card driver. However I have tried this and it does not work. My network card is the latest driver but wont allow me to downgrade.

My motherboard is an Asus P5KC. My network adapter is the Atheros L1 Gigabit Ethernet 10/100Base - T controller.

All help is greatly apreciated.

 

[zigzag3143]

wtfom

go into c:\windows\minidump, zip the dump file (*.DMP) and upload it to us using the attachment icon (shaped like a paper clip) in the reply form.

thanks

Ken

 

[Wtfomgbbq]

Ok well I am running into a problem. It is saying I need administrative control to access the folder. I click continue (I am the Admin of MY computer). Then I go in and see the .dmp files. When I try to use 7-zip to .zip em they give me access denied. Should I use Winzip?

 

[zigzag3143]

see if you can drag and drop them to the desktop. if not you may have to take ownership of the folder. there are insructions how here http://www.sevenforums.com/tutorials/1911-take-ownership-shortcut.html.

hope this helps and let me know if yo9u need help


Ken

 

[Wtfomgbbq]

Desktop moving worked . If this didn't work let me know.



View attachment 29248

 

[zigzag3143]

wtfom

all four dumps were very similar, bordering on identical. the offending file is afd.sys part of the tcp/ip stack. there are many reports of the same failure. there seems to be a memory leak in it. You appar to have been in IE when it crashed
]
read about it here Workarounds for Memory Leak in Some Versions of Microsoft Windows afd.sys file

I suspect that replacing the driver for the wifi card upfrading modem firmware will help


Microsoft (R) Windows Debugger Version 6.11.0001.404 X86
Copyright (c) Microsoft Corporation. All rights reserved.


Loading Dump File [C:\Users\K\Desktop\092009-17253-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available

Symbol search path is: SRV*d:\symbols*Symbol information
Executable search path is:
Windows 7 Kernel Version 7100 MP (4 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 7100.0.amd64fre.winmain_win7rc.090421-1700
Machine Name:
Kernel base = 0xfffff800`02a61000 PsLoadedModuleList = 0xfffff800`02c9ae90
Debug session time: Sun Sep 20 02:37:49.242 2009 (GMT-4)
System Uptime: 0 days 15:12:42.896
Loading Kernel Symbols
...............................................................
................................................................
.........................
Loading User Symbols
Loading unloaded module list
...............
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck 3B, {c0000005, fffff8800180f02a, fffff88008824a50, 0}

Probably caused by : afd.sys ( afd!AfdTLReleaseIndications+1a )

Followup: MachineOwner
---------

1: kd> !analyze -v
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

SYSTEM_SERVICE_EXCEPTION (3b)
An exception happened while executing a system service routine.
Arguments:
Arg1: 00000000c0000005, Exception code that caused the bugcheck
Arg2: fffff8800180f02a, Address of the exception record for the exception that caused the bugcheck
Arg3: fffff88008824a50, Address of the context record for the exception that caused the bugcheck
Arg4: 0000000000000000, zero.

Debugging Details:
------------------


EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced memory at 0x%08lx. The memory could not be %s.

FAULTING_IP:
afd!AfdTLReleaseIndications+1a
fffff880`0180f02a 488b4108 mov rax,qword ptr [rcx+8]

CONTEXT: fffff88008824a50 -- (.cxr 0xfffff88008824a50)
rax=fffff880018108b0 rbx=fffff88008825790 rcx=0000000000000000
rdx=fffff88008825450 rsi=fffffa80061d5e60 rdi=fffffa80041e1220
rip=fffff8800180f02a rsp=fffff88008825430 rbp=fffff88008825ca0
r8=0000000000000000 r9=0000000000000000 r10=c215768ae79edb8d
r11=00000000106a0d88 r12=0000000000000000 r13=fffff88008825a90
r14=0000000000000000 r15=0000000000000586
iopl=0 nv up ei ng nz na po nc
cs=0010 ss=0018 ds=002b es=002b fs=0053 gs=002b efl=00210286
afd!AfdTLReleaseIndications+0x1a:
fffff880`0180f02a 488b4108 mov rax,qword ptr [rcx+8] ds:002b:00000000`00000008=????????????????
Resetting default scope

CUSTOMER_CRASH_COUNT: 1

DEFAULT_BUCKET_ID: VISTA_DRIVER_FAULT

BUGCHECK_STR: 0x3B

PROCESS_NAME: iexplore.exe

CURRENT_IRQL: 0

LAST_CONTROL_TRANSFER: from 0000000000000000 to fffff8800180f02a

STACK_TEXT:
fffff880`08825430 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : afd!AfdTLReleaseIndications+0x1a


FOLLOWUP_IP:
afd!AfdTLReleaseIndications+1a
fffff880`0180f02a 488b4108 mov rax,qword ptr [rcx+8]

SYMBOL_STACK_INDEX: 0

SYMBOL_NAME: afd!AfdTLReleaseIndications+1a

FOLLOWUP_NAME: MachineOwner

MODULE_NAME: afd

IMAGE_NAME: afd.sys

DEBUG_FLR_IMAGE_TIMESTAMP: 49ee8e04

STACK_COMMAND: .cxr 0xfffff88008824a50 ; kb

FAILURE_BUCKET_ID: X64_0x3B_afd!AfdTLReleaseIndications+1a

BUCKET_ID: X64_0x3B_afd!AfdTLReleaseIndications+1a

Followup: MachineOwner
---------

 

[Wtfomgbbq]

It just doesn't happen in IE though. It happens with multiple applications running, Firefox, installing large programs (Autodesk programs). If that helps in anyway.

I suspect that replacing the driver for the wifi card upfrading modem firmware will help

What do you mean?.

Still confused.

Any other ideas would be greatly appreciated.

 

[zigzag3143]

Hi

Sorry about the delay. Im working on win 7 and vista.

Ok to change your network driver you can go into device manager and un-install the current driver. You can let win 7 find a replacement or get an older one and install it yourself. You should read that link about the work around.

In terms of your ongoing problems. we have to wait till you modify the afd.sys file and then we can investigate the errors generated in event viewer after afd is stabile.

Let me know how i can help.

Ken

 

[Wtfomgbbq]

Um you could help by explaining modding afd.sys file lol. Im good at building em but when this stuff happens its way over my league.

I also did read the link about the work around and will try it this weekend when I got a bit more time.

 

[zigzag3143]

Um you could help by explaining modding afd.sys file lol. Im good at building em but when this stuff happens its way over my league.

I also did read the link about the work around and will try it this weekend when I got a bit more time.

Hey WT

to replace the driver, you type device manager in search. Go to the network tab and find your device. right click>properties>driver>uninstall. then reboot windows will find a generic driver that should work.

Let me know if this doesn't work

Ken

 

[Wtfomgbbq]

K Ill try it right now .

Do I delete the driver software also?

 

[Wtfomgbbq]

Wow I think it worked. Ill let ya know if I get any more of these bsod. But until then its fixed

 

[zigzag3143]

wtf

If no BSOD's make a backup in case.


Good luck

Ken

 

[Wtfomgbbq]

I made a restore before I uninstalled the Drivers.

 

[Tews]

Restore does not equal backup.... play it safe.... back it up..

 

[Wtfomgbbq]

Back up what then?.

 

[zigzag3143]

backup with the generic driver. if you ever have to restore you dont want to have BSOD"S and not remember what caused them

ken

 

[Wtfomgbbq]

Got another bsod last night. Same thing as before so that didn't work