Solved BSOD at random times: DRIVER IRQL NOT LESS OR EQUAL

[Gokkus]

Hello everyone,

The BSOD appears at random times, at random intervals even when not doing anything. I updated my sound driver since my computer often makes a very disturbing sound before starting memory dump. This did not help however. I bought the computer in its entirety less than 2 years ago from a professional computer store.

Please, please help.

EDIT: in case it matter, it happens when playing a game, watching a youtube video or after it got rebooted and I had done nothing yet.
EDIT2: I also did a virus scan that came up empty.

Thanks,
Gokkus

 

[koolkat77]

AVG is a frequent cause of BSOD's. Please uninstall it and use MSE for the time being.
------------------------
Microsoft Security Essentials & the Free version of Malwarebytes, update and make full scans separately:

• Uninstallers (removal tools) for common antivirus software - ESET Knowledgebase
• Help protect your PC with Microsoft Security Essentials
• Malwarebytes Free

   Note

:info: Do not start the trial version of MalwareBytes

You may also take a look at:

• Good & Free System Security Combination

------------------------

Start Menu\Programs\DAEMON Tools Pro	Public

Daemon Tools (also Alcohol % software) are known to cause BSOD's on some Win7 systems (mostly due to the sptd.sys driver, although we have seen dtsoftbus01.sys blamed on several occasions). Please uninstall Daemon Tools.

• DuplexSecure - FAQ

As an alternative:

• We recommend the use of Total Mounter or Magic ISO

------------------------
Reduce the start-up items, Antivirus software is basically whats required.

• Remove Startup Programs in Windows 7
• Clean Startup in Windows 7

------------------------
Make scans with these tools -

• TDSSKiller Rootkit Removal Utility Free Download | Kaspersky Lab US
• Online Virus Scanner Eset

------------------------
Run the System File Checker that scans the of all protected Windows 7 system files and replaces incorrect corrupted, changed/modified, or damaged versions with the correct versions if possible:

• Click on the rb:
• Type CMD on Search
• Left click and Run as Administrator
• Type SFC /scannow - read here

Run Disk Check on your Hard Drive for file system errors and bad sectors on it - read here
Update your Realtek RTL8168D/8111D Family PCI-E Gigabit Ethernet NIC drivers.

• Realtek RTL8168D/8111D Family PCI-E Gigabit Ethernet NIC

Additional Tests:
------------------------
Upload a screenshot using:

• CrystalDiskInfo:tip: For how to upload a screenshot or file, read here

Test your Hard Drive(s) by running:

• Hard Drive Diagnostic Procedure

------------------------
Test and Diagnose RAM Issues with Memtest86+:

• RAM - Test with Memtest86+

   Tip

• :info: Pay close attention to Part 3 of the tutorial "If you have errors"
• :tip: Test the RAM with Memtest86+ for at least 7-10 passes. It may take up to 22 passes to find problems. Make sure to run it once after the system has been on for a few hours and is warm, and then also run it again when the system has been off for a few hours and is cold.

Let us know the results.

 

[Gokkus]

Thank you very much for replying koolkat!

I have done everything you proposed. It took quite some time but I added the results from the scans to this post.
During the scans and installing the programs I have had no BSOD's. I reckon the next step is to see whether a BSOD occurs again and to update my computer's security

 

[koolkat77]

Looks good. Thanks

 

[Gokkus]

Unfortunately BSOD happened again watching a clip with VLC. Is it possible it has to do with sound or graphics?

 

[koolkat77]

Did you update the realtek driver?
Driver Reference Table

*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck D1, {fffff8800538e000, 2, 0, fffff880047eaea2}

*** WARNING: Unable to verify timestamp for Rt64win7.sys
*** ERROR: Module load completed but symbols could not be loaded for Rt64win7.sys
Probably caused by : Rt64win7.sys ( Rt64win7+73ea2 )

Followup: MachineOwner
---------

0: kd> !analyze -v
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

DRIVER_IRQL_NOT_LESS_OR_EQUAL (d1)
An attempt was made to access a pageable (or completely invalid) address at an
interrupt request level (IRQL) that is too high.  This is usually
caused by drivers using improper addresses.
If kernel debugger is available get stack backtrace.
Arguments:
Arg1: fffff8800538e000, memory referenced
Arg2: 0000000000000002, IRQL
Arg3: 0000000000000000, value 0 = read operation, 1 = write operation
Arg4: fffff880047eaea2, address which referenced memory

Debugging Details:
------------------


READ_ADDRESS: GetPointerFromAddress: unable to read from fffff800038c9100
GetUlongFromAddress: unable to read from fffff800038c91c0
 fffff8800538e000 Nonpaged pool

CURRENT_IRQL:  2

FAULTING_IP: 
Rt64win7+73ea2
fffff880`047eaea2 410fb609        movzx   ecx,byte ptr [r9]

CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  WIN7_DRIVER_FAULT

BUGCHECK_STR:  0xD1

PROCESS_NAME:  System

TRAP_FRAME:  fffff88009e005e0 -- (.trap 0xfffff88009e005e0)
NOTE: The trap frame does not contain all registers.
Some register values may be zeroed or incorrect.
rax=0000000000000000 rbx=0000000000000000 rcx=0000000000000000
rdx=000000001f096cf6 rsi=0000000000000000 rdi=0000000000000000
rip=fffff880047eaea2 rsp=fffff88009e00778 rbp=0000000000000e87
 r8=0000000000001d0e  r9=fffff8800538e000 r10=0000000000000000
r11=fffff8800538201a r12=0000000000000000 r13=0000000000000000
r14=0000000000000000 r15=0000000000000000
iopl=0         nv up ei pl nz na po nc
Rt64win7+0x73ea2:
fffff880`047eaea2 410fb609        movzx   ecx,byte ptr [r9] ds:fffff880`0538e000=??
Resetting default scope

LAST_CONTROL_TRANSFER:  from fffff80003691129 to fffff80003691b80

STACK_TEXT:  
fffff880`09e00498 fffff800`03691129 : 00000000`0000000a fffff880`0538e000 00000000`00000002 00000000`00000000 : nt!KeBugCheckEx
fffff880`09e004a0 fffff800`0368fda0 : 00000000`00000000 fffffa80`05f3b900 00000000`00000000 00000000`00000185 : nt!KiBugCheckDispatch+0x69
fffff880`09e005e0 fffff880`047eaea2 : 00000000`00000000 00000000`00003205 00000000`000000ff fffff880`05382000 : nt!KiPageFault+0x260
fffff880`09e00778 00000000`00000000 : 00000000`00003205 00000000`000000ff fffff880`05382000 00000000`00000008 : Rt64win7+0x73ea2


STACK_COMMAND:  kb

FOLLOWUP_IP: 
Rt64win7+73ea2
fffff880`047eaea2 410fb609        movzx   ecx,byte ptr [r9]

SYMBOL_STACK_INDEX:  3

SYMBOL_NAME:  Rt64win7+73ea2

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: Rt64win7

IMAGE_NAME:  Rt64win7.sys

DEBUG_FLR_IMAGE_TIMESTAMP:  4dd13a6b

FAILURE_BUCKET_ID:  X64_0xD1_Rt64win7+73ea2

BUCKET_ID:  X64_0xD1_Rt64win7+73ea2

Followup: MachineOwner
---------

0: kd> lmvm Rt64win7
start             end                 module name
fffff880`04777000 fffff880`047fb000   Rt64win7 T (no symbols)           
    Loaded symbol image file: Rt64win7.sys
    Image path: \SystemRoot\system32\DRIVERS\Rt64win7.sys
    Image name: Rt64win7.sys
    Timestamp:        Mon May 16 20:53:31 2011 (4DD13A6B)
    CheckSum:         000859EC
    ImageSize:        00084000
    Translations:     0000.04b0 0000.04e4 0409.04b0 0409.04e4

 

[Gokkus]

I have used the realtak site to update a driver (attachment).
To be honest though, I'm not always exactly sure what I'm doing because my knowledge of this area is limited. Thanks for the help though.

 

[koolkat77]

Go here
Download



Take the Win8 and Win8.1 Auto Installation Program (SID:1594877) dated 2013/8/1.

 

[Gokkus]

Done. Though when I run the AutoInst, it gives me a "FindFile failed" error and states the new version of the driver is: 7.45.516.2011

 

[koolkat77]

Download the first one :ar: Win7 and WinServer 2008 R2 Driver and follow http://www.sevenforums.com/tutorials/97061-driver-install-device-manager.html to install it

 

[Gokkus]

PART ONE shows the 'other devices' tab which my device manager does not have. I cannot find 'ethernet controller' under any of the tabs. Is there an alternative?

 

[Arc]

Go to Realtek . Download the first one of the list.

View attachment 283740

Download it on your desktop. Then Unzip it.

Now Open Device manager. Expand Network Adapters. Right click on Realtek. Select Update Driver Software.

View attachment 283741

Then Click on Browse My computer ....

View attachment 283742

Browse to Desktop > Install_Win7_7073_****** folder. Make it sure that the include subfolder is clicked. Click on next.

View attachment 283743

What happens then?

 

[Gokkus]

It successfully installed the new driver: Realtek PCIe GBE Family Controller.

 

[Arc]

OK, now observe the situation for a couple of days, then report us back.

 

[Gokkus]

Thank you for your help. I have had no problems or BSOD's in the past few days so I assume it is in order.

 

[koolkat77]

Thanks for the update, thank you Arc also

Best of luck. But do post if they happen again

 

[Arc]

thanks for the update, thank you arc also

best of luck. But do post if they happen again

o.h.m.s.