BSOD Asus Aspire 5332 NDIS.sys "driver_irql_not_less_or_equal"

[Atilla]

BSOD Asus Aspire 5332 NDIS.sys "driver_irql_not_less_or_equal"

Hello clever people, hopefully you can help me.

My Asus Aspire 5332 Windows 7 x64 is blue screening each time Windows starts in normal mode.
It starts in safe mode Ok but does not in normal mode. I have tried system restores to an older point in time but this hasnt resolved my issue.
No new hardware has been added and the last application to be installed was some time ago.
The BSOD is repeatable each time window loads in normal mode.
I've attached the .dmp files.

Any help greatly appreciated.

Thanks

 

[Pauly]

Im afraid you have not attached any files
Assuming you have run the SF tool zip the output folder and attach to your next post http://www.sevenforums.com/tutorials/9733-screenshots-files-upload-post-seven-forums.html

Or the full instructions if reqd
http://www.sevenforums.com/bsod-help-support/96879-blue-screen-death-bsod-posting-instructions.html

 

[Atilla]

Files attached now

Hi and thanks for replying.
I've attached the files.

Any advice appreciated.

 

[Pauly]

According to both dump files you have a problem the driver athrx.sys Driver Reference Table - athrx.sys this driver relates to your atheros network adapter its dated Fri Jul 17 03:33:40 2009 so first step would be to try updating it

*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************
Use !analyze -v to get detailed debugging information.
BugCheck D1, {10, 2, 0, fffff880016b95d6}
[B][U]*** WARNING: Unable to verify timestamp for athrx.sys[/U][/B]
[B][U]*** ERROR: Module load completed but symbols could not be loaded for athrx.sys[/U][/B]
[B][U]Probably caused by : athrx.sys ( athrx+2edf7 )[/U][/B]
[B]Followup: MachineOwner[/B]
---------
0: kd> !analyze -v
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************
DRIVER_IRQL_NOT_LESS_OR_EQUAL (d1)
An attempt was made to access a pageable (or completely invalid) address at an
interrupt request level (IRQL) that is too high.  This is usually
caused by drivers using improper addresses.
If kernel debugger is available get stack backtrace.
Arguments:
Arg1: 0000000000000010, memory referenced
Arg2: 0000000000000002, IRQL
Arg3: 0000000000000000, value 0 = read operation, 1 = write operation
Arg4: fffff880016b95d6, address which referenced memory
Debugging Details:
------------------
 
READ_ADDRESS: GetPointerFromAddress: unable to read from fffff800028c10e0
GetUlongFromAddress: unable to read from fffff800028c1198
 0000000000000010 Nonpaged pool
CURRENT_IRQL:  2
FAULTING_IP: 
ndis!NdisFreeTimerObject+16
fffff880`016b95d6 488b5310        mov     rdx,qword ptr [rbx+10h]
CUSTOMER_CRASH_COUNT:  1
DEFAULT_BUCKET_ID:  WIN7_DRIVER_FAULT
BUGCHECK_STR:  0xD1
PROCESS_NAME:  System
TRAP_FRAME:  fffff88001fb1850 -- (.trap 0xfffff88001fb1850)
NOTE: The trap frame does not contain all registers.
Some register values may be zeroed or incorrect.
rax=0000000000000000 rbx=0000000000000000 rcx=fffff880016f0908
rdx=0000000000000000 rsi=0000000000000000 rdi=0000000000000000
rip=fffff880016b95d6 rsp=fffff88001fb19e0 rbp=fffff8000282e5a0
 r8=0000000000011120  r9=0000000000000000 r10=fffff8000261a000
r11=fffffa800632b030 r12=0000000000000000 r13=0000000000000000
r14=0000000000000000 r15=0000000000000000
iopl=0         nv up ei ng nz na po nc
ndis!NdisFreeTimerObject+0x16:
fffff880`016b95d6 488b5310        mov     rdx,qword ptr [rbx+10h] ds:00000000`00000010=????????????????
Resetting default scope
LAST_CONTROL_TRANSFER:  from fffff80002688de9 to fffff80002689880
STACK_TEXT:  
fffff880`01fb1708 fffff800`02688de9 : 00000000`0000000a 00000000`00000010 00000000`00000002 00000000`00000000 : nt!KeBugCheckEx
fffff880`01fb1710 fffff800`02687a60 : fffffa80`05bca000 00000000`00000000 00000000`000007ff fffffa80`05bb66a0 : nt!KiBugCheckDispatch+0x69
fffff880`01fb1850 fffff880`016b95d6 : fffffa80`03d28380 fffff880`02f38716 fffffa80`0632c448 00000000`00000000 : nt!KiPageFault+0x260
fffff880`01fb19e0 fffff880`02ea6df7 : fffffa80`0632c448 fffff880`02ebd0bf fffff880`02fbd190 fffff880`02fbd180 : ndis!NdisFreeTimerObject+0x16
fffff880`01fb1a10 fffffa80`0632c448 : fffff880`02ebd0bf fffff880`02fbd190 fffff880`02fbd180 00000000`00011120 : athrx+0x2edf7
fffff880`01fb1a18 fffff880`02ebd0bf : fffff880`02fbd190 fffff880`02fbd180 00000000`00011120 fffff880`02ea7053 : 0xfffffa80`0632c448
fffff880`01fb1a20 fffff880`02fbd190 : fffff880`02fbd180 00000000`00011120 fffff880`02ea7053 fffffa80`0632b2c8 : athrx+0x450bf
fffff880`01fb1a28 fffff880`02fbd180 : 00000000`00011120 fffff880`02ea7053 fffffa80`0632b2c8 fffffa80`05a40000 : athrx+0x145190
fffff880`01fb1a30 00000000`00011120 : fffff880`02ea7053 fffffa80`0632b2c8 fffffa80`05a40000 fffffa80`05aca050 : athrx+0x145180
fffff880`01fb1a38 fffff880`02ea7053 : fffffa80`0632b2c8 fffffa80`05a40000 fffffa80`05aca050 fffff880`02eaa468 : 0x11120
fffff880`01fb1a40 fffffa80`0632b2c8 : fffffa80`05a40000 fffffa80`05aca050 fffff880`02eaa468 fffffa80`05a45030 : athrx+0x2f053
fffff880`01fb1a48 fffffa80`05a40000 : fffffa80`05aca050 fffff880`02eaa468 fffffa80`05a45030 fffff880`02ea9c99 : 0xfffffa80`0632b2c8
fffff880`01fb1a50 fffffa80`05aca050 : fffff880`02eaa468 fffffa80`05a45030 fffff880`02ea9c99 fffffa80`0632b030 : 0xfffffa80`05a40000
fffff880`01fb1a58 fffff880`02eaa468 : fffffa80`05a45030 fffff880`02ea9c99 fffffa80`0632b030 00000000`00000000 : 0xfffffa80`05aca050
fffff880`01fb1a60 fffffa80`05a45030 : fffff880`02ea9c99 fffffa80`0632b030 00000000`00000000 00000000`00000000 : athrx+0x32468
fffff880`01fb1a68 fffff880`02ea9c99 : fffffa80`0632b030 00000000`00000000 00000000`00000000 fffffa80`0632b000 : 0xfffffa80`05a45030
fffff880`01fb1a70 fffffa80`0632b030 : 00000000`00000000 00000000`00000000 fffffa80`0632b000 00000000`00000000 : athrx+0x31c99
fffff880`01fb1a78 00000000`00000000 : 00000000`00000000 fffffa80`0632b000 00000000`00000000 fffff880`02ea9c39 : 0xfffffa80`0632b030
 
STACK_COMMAND:  kb
FOLLOWUP_IP: 
athrx+2edf7
fffff880`02ea6df7 ??              ???
SYMBOL_STACK_INDEX:  4
SYMBOL_NAME:  athrx+2edf7
FOLLOWUP_NAME:  MachineOwner
MODULE_NAME: athrx
IMAGE_NAME:  athrx.sys
DEBUG_FLR_IMAGE_TIMESTAMP:  4a5fe304
FAILURE_BUCKET_ID:  X64_0xD1_athrx+2edf7
BUCKET_ID:  X64_0xD1_athrx+2edf7
Followup: MachineOwner
---------
0: kd> lmvm athrx
start             end                 module name
fffff880`02e78000 fffff880`02fe9000   athrx    T (no symbols)           
    [B][U]Loaded symbol image file: athrx.sys[/U][/B]
[B][U]   Image path: \SystemRoot\system32\DRIVERS\athrx.sys[/U][/B]
[B][U]   Image name: athrx.sys[/U][/B]
[B][U]   Timestamp:        Fri Jul 17 03:33:40 2009 (4A5FE304)[/U][/B]
    CheckSum:         00171808
    ImageSize:        00171000
    Translations:     0000.04b0 0000.04e4 0409.04b0 0409.04e4