BSOD at random times: Driver IRQL Not Less Or Equal

[Lifering]

Hello,
I built this desktop approximately 2 years ago, but only just recently started experiencing BSOD at seemingly random times. The system hangs for a couple seconds, then goes blue and tells me "Driver IRQL Not Less Or Equal". I re-installed OEM Windows 7 Home Premium x64 about a week ago to try and clear up any problems, thinking it may have been a naughty program causing the BSOD, but in the past couple days it has crashed multiple times.

I haven't installed any new hardware (RAM, GPU, CPU, HDD) whatsoever. The only thing that has changed is that I'm using a USB wireless receiver, specifically an Encore ENUWI-2XN42, plugged in to the back of my computer.

Edit: I forgot to mention that I ran Memtest+86 earlier today, and it did not report any errors. I then tried to run the extended scan and it reported one error about 3% in, but then would hang consistently at 21% during three separate attempts.

I have attached the kernel dump that I retrieved with the program recommended by the forum. Thank you in advance for your help, I'm at wit's end.

 

[koolkat77]

Welcome

Update this driver: Driver Reference Table - RTL8192cu.sys

Sometimes drivers remain, not completely uninstalled. Follow this tutorial for complete removal of drivers of the particular program:

• How to Clean Left Over Driver Files with Driver Sweeper

*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck D1, {331, 2, 1, fffff88001f4e76e}

*** WARNING: Unable to verify timestamp for RTL8192cu.sys
*** ERROR: Module load completed but symbols could not be loaded for RTL8192cu.sys
Probably caused by : RTL8192cu.sys ( RTL8192cu+8c76e )

Followup: MachineOwner
---------

6: kd> !analyze -v
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

DRIVER_IRQL_NOT_LESS_OR_EQUAL (d1)
An attempt was made to access a pageable (or completely invalid) address at an
interrupt request level (IRQL) that is too high.  This is usually
caused by drivers using improper addresses.
If kernel debugger is available get stack backtrace.
Arguments:
Arg1: 0000000000000331, memory referenced
Arg2: 0000000000000002, IRQL
Arg3: 0000000000000001, value 0 = read operation, 1 = write operation
Arg4: fffff88001f4e76e, address which referenced memory

Debugging Details:
------------------


WRITE_ADDRESS: GetPointerFromAddress: unable to read from fffff800030c40e0
GetUlongFromAddress: unable to read from fffff800030c4198
 0000000000000331 Nonpaged pool

CURRENT_IRQL:  2

FAULTING_IP: 
RTL8192cu+8c76e
fffff880`01f4e76e 80a331030000fd  and     byte ptr [rbx+331h],0FDh

CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  WIN7_DRIVER_FAULT

BUGCHECK_STR:  0xD1

PROCESS_NAME:  System

TAG_NOT_DEFINED_c000000f:  FFFFF88003128FB0

TRAP_FRAME:  fffff880031215f0 -- (.trap 0xfffff880031215f0)
NOTE: The trap frame does not contain all registers.
Some register values may be zeroed or incorrect.
rax=fffffa8007cc9018 rbx=0000000000000000 rcx=fffffa8007d42000
rdx=fffffa8007c396f8 rsi=0000000000000000 rdi=0000000000000000
rip=fffff88001f4e76e rsp=fffff88003121780 rbp=fffffa8007d42000
 r8=0000000000000000  r9=0000000000000680 r10=0000000000000001
r11=fffff880031217f8 r12=0000000000000000 r13=0000000000000000
r14=0000000000000000 r15=0000000000000000
iopl=0         nv up ei pl zr na po nc
RTL8192cu+0x8c76e:
fffff880`01f4e76e 80a331030000fd  and     byte ptr [rbx+331h],0FDh ds:00000000`00000331=??
Resetting default scope

LAST_CONTROL_TRANSFER:  from fffff80002e8bda9 to fffff80002e8c840

STACK_TEXT:  
fffff880`031214a8 fffff800`02e8bda9 : 00000000`0000000a 00000000`00000331 00000000`00000002 00000000`00000001 : nt!KeBugCheckEx
fffff880`031214b0 fffff800`02e8aa20 : 00000056`0f861500 00000000`00000000 fffffa80`07ec9f90 fffff880`01f50e98 : nt!KiBugCheckDispatch+0x69
fffff880`031215f0 fffff880`01f4e76e : 00000000`43524344 fffffa80`07970a60 fffffa80`07392050 00000000`00000008 : nt!KiPageFault+0x260
fffff880`03121780 00000000`43524344 : fffffa80`07970a60 fffffa80`07392050 00000000`00000008 fffffa80`093d9960 : RTL8192cu+0x8c76e
fffff880`03121788 fffffa80`07970a60 : fffffa80`07392050 00000000`00000008 fffffa80`093d9960 00000000`00000000 : 0x43524344
fffff880`03121790 fffffa80`07392050 : 00000000`00000008 fffffa80`093d9960 00000000`00000000 fffff880`031217b0 : 0xfffffa80`07970a60
fffff880`03121798 00000000`00000008 : fffffa80`093d9960 00000000`00000000 fffff880`031217b0 fffff880`031217b0 : 0xfffffa80`07392050
fffff880`031217a0 fffffa80`093d9960 : 00000000`00000000 fffff880`031217b0 fffff880`031217b0 00000000`00000000 : 0x8
fffff880`031217a8 00000000`00000000 : fffff880`031217b0 fffff880`031217b0 00000000`00000000 00000000`00000000 : 0xfffffa80`093d9960


STACK_COMMAND:  kb

FOLLOWUP_IP: 
RTL8192cu+8c76e
fffff880`01f4e76e 80a331030000fd  and     byte ptr [rbx+331h],0FDh

SYMBOL_STACK_INDEX:  3

SYMBOL_NAME:  RTL8192cu+8c76e

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: RTL8192cu

IMAGE_NAME:  RTL8192cu.sys

DEBUG_FLR_IMAGE_TIMESTAMP:  4c174e98

FAILURE_BUCKET_ID:  X64_0xD1_RTL8192cu+8c76e

BUCKET_ID:  X64_0xD1_RTL8192cu+8c76e

Followup: MachineOwner
---------

6: kd> lmvm RTL8192cu
start             end                 module name
fffff880`01ec2000 fffff880`01fd4000   RTL8192cu T (no symbols)           
    Loaded symbol image file: RTL8192cu.sys
    Image path: \SystemRoot\system32\DRIVERS\RTL8192cu.sys
    Image name: RTL8192cu.sys
    Timestamp:        Tue Jun 15 15:57:44 2010 (4C174E98)
    CheckSum:         000BFA37
    ImageSize:        00112000
    Translations:     0000.04b0 0000.04e4 0409.04b0 0409.04e4

Make scans with the following:

-Kaspersky TDSSKiller

• Anti-rootkit utility TDSSKiller

-ESET online scanner

• Free Online Virus Scanner | ESET

Microsoft Security Essentials.

Recommended from a strict BSOD perspective, compatibility & stability compared to other antiviruses/internet security software. It is free and lightweight:-

• Microsoft Security Essentials, Free antivirus for windows.
• Malwarebytes Anti-Malware Free
• Good and Free system security combination
• 
  

   Warning

:ar: Do not start the free trial of Malware Bytes; remember to deselect that option when prompted.

Run a full scan with both (separately) once downloaded, installed and updated.
Perform a System File Check to check the integrity of all protected Windows 7 :

1. Click on the start rb:
2. Type CMD on Search
3. Left click and Run as Administrator
4. Type

   SFC /scannow

Full tutorial here:

• SFC /Scannow Command - System File Checker

Disk Check on your hard drive for file system errors and bad sectors on it.

• How to run Disk Check on Windows 7

Reduce items at start-up. Nothing except anti-virus is required plus improves the time for logging in windows.

• http://www.sevenforums.com/tutorials/1401-startup-programs-change.html
• http://www.sevenforums.com/tutorial...ation-conflicts-performing-clean-startup.html

Install all updates including Service Pack 1:

• Learn how to install Windows 7 Service Pack 1 (SP1)

 

[Lifering]

Thanks!

Thanks for the quick response!

I updated the RTL8192cu.sys driver and installed Microsoft Security Essentials, after which Microsoft update found loads of updates that it wanted to install. I let it do it's thing, and since then have not experienced any BSOD. I'm not going to "mark this as solved" yet, because it has only been 20 hours since I updated stuff.

If things go smoothly for the next week then I'll close the thread. Thanks again for deciphering the dump files for me and providing all kinds of useful links.

 

[koolkat77]

Yup sure, keep the thread open for a week before marking as solved

 

[Lifering]

It crashed again... Same error message.

My computer crashed yet again, with the same error: Driver IRQL Not Less Or Equal. Nothing has changed since last time I posted, and it has crashed a few times since then. I have attached the dump files obtained with the tool provided by Seven Forums. Thank you for your help, I''m at a complete loss.

 

[koolkat77]

Upload a screenshot of your hard disk using CrystalDiskInfo:

• CrystalDiskInfo Standard Edition
• How to Upload and Post a Screenshot and File in Seven Forums

Make a hard drive test from the hard drive manufacturers website:

• Hard Drive Diagnostic Procedure

Hard drive test both short and long with:

• SeaTools for Windows

DOS version of Seatools:

• SeaTools for DOS
• SeaTools for DOS tutorial

Take memtest. Run for 8 passes and test each stick in a know good slot for an additional 6 passes.

• http://www.sevenforums.com/tutorials/105647-ram-test-memtest86.html

   Note

Pay close attention to part 3 of the tutorial in order to rule out the faulty stick.

   Information

Errors are sometimes found after 8 passes.

   Tip

Do this test overnight, before going to bed.

If Memtest86+ does not find any errors with ram run Windows Memory Diagnostics for 7-8 passes following its tutorial:

• http://www.sevenforums.com/tutorials/715-memory-diagnostics-tool.html

 

[Lifering]

Hard disk info

Here is the screenshot of the Crystal Disk Info.

I'll be able to get to the hard disk and ram testing later in the week. I'll post again as soon as I've tested everything.

Thank you again for your prompt replies.

 

[koolkat77]

No problem, take your time.