BSOD 0x000000D1 message shortly after restart

[joannw]

I am running Windows 7 Professional SP1. I am getting this error message when my computer restarts. It seems that it may be following a hibernate or a crash. How do I determine what is causing it. I have download the Debugging Toolkit in the Windows SDK but when I open the Tools folder, I do not find the Debugging Toolkit.

I have a memory.dmp file which I do not have permission to open or attach. My userid is in the administrator group.

 

[koolkat77]

Welcome

Please upload your msinfo32.nfo file. To get this:

• Click on the Start rb:
• Type msinfo32 into the Search programs and files box
• When it opens, go to File, Save
• Save as msinfo32.nfo and save in a place you will remember
• Let it finish the process of gathering and saving the system info
• Right click the .nfo file, click send to compressed (zipped) folder
• Upload the .zip file here.

Your bug check D1 is usually caused by a device driver.

STOP 0x000000D1: DRIVER_IRQL_NOT_LESS_OR_EQUAL   
Usual causes:  Device driver

Try following the instructions again, we won't be able to do much without the .dmp files

 

[joannw]

I have uploaded the msinfo zip file. Since I submitted this note, I got another BSOD with 0x0000000F4.

 

[koolkat77]

Thanks.

Your BSOD was caused by "Symantec Endpoint Protection 11 firewall". Norton/Symantec is known to cause blue screens. My suggestion to you is to uninstall all the Norton/Symantec components installed in your computer if you want your PC to be BSoD free. Search in Google for evidence.

STOP 0x000000D1: DRIVER_IRQL_NOT_LESS_OR_EQUAL
Usual causes:  Device driver
BugCheck D1, {29, 2, 0, fffff8800186c97c}
Probably caused by : teefer2.sys ( teefer2+6085 )

Use Microsoft Security Essentials. It's free, light weight and does not cause problems on the Windows 7 OS. Prefer MBAM for additional security. I've listed some tutorials as well.

• Norton Removal Tool ; Link 1
• Norton Removal ; Link 2
• Microsoft Security Essentials - Free Antivirus for Windows
• Malwarebytes - The Free version
• http://www.sevenforums.com/system-security/206705-good-free-system-security-combination.html

Run a full scan with both (separately) once downloaded, installed and updated.

Another BSoD may have occurred due to very old Nvidia drivers.

BugCheck 116, {fffffa800b7ba010, fffff88005ce3180, 0, 2}
Probably caused by : nvlddmkm.sys ( nvlddmkm+15180 )
---------
6: kd> lmvm nvlddmkm
start             end                 module name
fffff880`05cce000 fffff880`067f7700   nvlddmkm T (no symbols)           
    Loaded symbol image file: nvlddmkm.sys
    Image path: \SystemRoot\system32\DRIVERS\nvlddmkm.sys
    Image name: [COLOR="red"]nvlddmkm.sys[/COLOR]
    Timestamp:        [COLOR="Red"]Thu Dec 03 22:22:44 2009[/COLOR] (4B17E5D4)
    CheckSum:         00B2F149
    ImageSize:        00B29700
    Translations:     0000.04b0 0000.04e4 0409.04b0 0409.04e4

Uninstall the older first from control panel then install the latest from the link below:

• Download NVIDIA Forceware 306.97 WHQL Vista 64 - FileHippo.com

If you feel there are left over of the older Nvidia drivers then use Driver Sweeper to get rid of them.

Now run the System File Checker that scans the integrity of all protected Windows 7 system files and replaces incorrect corrupted, changed/modified, or damaged versions with the correct versions if possible and then run Disk Check on your hard disk for file system errors and bad sectors on it

• http://www.sevenforums.com/tutorials/1538-sfc-scannow-command-system-file-checker.html
• http://www.sevenforums.com/tutorials/433-disk-check.html

Let us know the results, good luck

 

[koolkat77]

Did the steps above help solve the BSOD problems? Let us know.

 

[joannw]

BSOD after restart from hibernate

I am frequently getting BSOD. I believe that it happens after restarting from a hibernate. I am attaching the SF_Diagnostic_Tool folder. Can you tell me what is causing this?

 

[koolkat77]

Welcome to SevenForums

Your BSODs were caused by teefer2.sys, aka Symantec Endpoint Protection

[FONT="Verdana"]Start Menu\Programs\Symantec Endpoint Protection	Public:Start Menu\Programs\Symantec Endpoint Protection	Public[/FONT]

Norton/Symantec is a frequent cause of BSODs, uninstall it and all its components with removal tool or with Revo Uninstaller Free [Advanced Mode]

Removal Tool

Recommended antivirus program for Windows 7 based on stability compared to others:-

• Microsoft Security Essentials - Free Antivirus for Windows
• Malwarebytes - The Free version
• http://www.sevenforums.com/system-security/206705-good-free-system-security-combination.html

Do not start the free trial of Malware Bytes; remember to deselect that option when prompted.

Run a full scan with both (separately) once downloaded, installed and updated

Run the System File Checker that scans the of all protected Windows 7 system files and replaces incorrect corrupted, changed/modified, or damaged versions with the correct versions if possible:

• http://www.sevenforums.com/tutorials/1538-sfc-scannow-command-system-file-checker.html

Run Disk Check on your hard disk for file system errors and bad sectors on it:

• http://www.sevenforums.com/tutorials/433-disk-check.html

Free up your start-up, keep nothing except MSE

• http://www.sevenforums.com/tutorials/1401-startup-programs-change.html

Following is for information purpose only;

*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck D1, {29, 2, 0, fffff8800186c97c}

*** WARNING: Unable to verify timestamp for teefer2.sys
*** ERROR: Module load completed but symbols could not be loaded for teefer2.sys
Probably caused by : teefer2.sys ( teefer2+6085 )

Followup: MachineOwner
---------

You also need to update to the latest drivers for your graphics card

Click on the Start rb: ► Control Panel ► Programs ► Uninstall a program ► Uninstall everything related to ATI, delete remnants of its drivers using Driver Sweeper

*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck 116, {fffffa800b7ba010, fffff88005ce3180, 0, 2}

Unable to load image \SystemRoot\system32\DRIVERS\nvlddmkm.sys, Win32 error 0n2
*** WARNING: Unable to verify timestamp for nvlddmkm.sys
*** ERROR: Module load completed but symbols could not be loaded for nvlddmkm.sys
Probably caused by : nvlddmkm.sys ( nvlddmkm+15180 )

Followup: MachineOwner
---------
6: kd> lmvm nvlddmkm
start             end                 module name
fffff880`05cce000 fffff880`067f7700   nvlddmkm T (no symbols)           
    Loaded symbol image file: nvlddmkm.sys
    Image path: \SystemRoot\system32\DRIVERS\nvlddmkm.sys
    Image name: nvlddmkm.sys
    Timestamp:        Thu Dec 03 22:22:44 2009 (4B17E5D4)
    CheckSum:         00B2F149
    ImageSize:        00B29700
    Translations:     0000.04b0 0000.04e4 0409.04b0 0409.04e4

Keep us posted of the results and further BSODs