Solved BSOD at user log in page everytime, error 0x000000d1

[Mudfiren]

Hi guys, been having this problem since yesterday

Upon booting the system, all looks fine till it loads the user account log in screen whereit hangs, makes a screeching noise (speakers), followed by the BSOD.

Then it collects data for crash dump and reboots. At the safe mode options, I've tried all three options, but only the 'safe mode only' option doesn't cause the system to hang

5o as I log in to my account in safe mode, I'm greeted with the 'windows have recovered from an unexpected shutdown' box, with the following,

Problem signature:
Problem event name: Bluescreen
OS version: 6.1.7601.2.1.0.768.3
Locale ID: 1033

Additinal information about the problem:
BCCode: d1
BCP1: 00000004
BCP2: 00000002
BCP3: 00000000
BCP4: 88F115CC
OS Version: 6_1_7601
Ser pack: 1_0
Preduct: 768_1

Files that describe the problem;
C:\windows\minidump\111412-18174-01.dmp
C:\users\home\appdata\local\temp\WER-46363-0.sysdata.xml (I can't locate this file)

I have no access to internet (and sound) as it is in safe mode, so I can't download any external driver reader as recommended by several online help. I don't really know how to use the windbg, as I'm not really an expert at computers

Hope you guys can help, really appreciate it

 

[Arc]

According to Carrona.org, STOP 0x000000D1: DRIVER_IRQL_NOT_LESS_OR_EQUAL
Usual causes: Device driver

But not seeing the crash dumps, we cannot decide about the driver; so please post it following the Blue Screen of Death (BSOD) Posting Instructions. If you cannot boot normally at all, boot into http://www.sevenforums.com/tutorials/666-advanced-boot-options.html, safe mode with networking, and then do it.

BTW, do you use any virtual drive emulator, say Daemon Tools or MagicDise?

 

[Mudfiren]

How do I get the crash dumps? I get the BSOD when I use safe mode with networking. I used daemon tools. After the BSOD started I deleted it but I still get the BSOD

 

[Arc]

http://www.sevenforums.com/tutorials/174459-dump-files-configure-windows-create-bsod.html

Follow it, and search manually in the default path: C:\Windows\Minidump or %SystemRoot%\Minidump.

Post the result following the Blue Screen of Death (BSOD) Posting Instructions.

 

[Mudfiren]

here is the zipped dump files

 

[Arc]

► Atheros AR5007G Wireless Network Adapter Driver

*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck D1, {4, 2, 0, 892e05cc}

Unable to load image \SystemRoot\system32\DRIVERS\athr.sys, Win32 error 0n2
*** WARNING: Unable to verify timestamp for athr.sys
*** ERROR: Module load completed but symbols could not be loaded for athr.sys
[COLOR=Red]Probably caused by : athr.sys[/COLOR] ( athr+3a5c1 )

Followup: MachineOwner
---------

And it is very old.

 kd> lmvm athr
start    end        module name
90869000 90979000   athr     T (no symbols)           
    Loaded symbol image file: athr.sys
    Image path: \SystemRoot\system32\DRIVERS\athr.sys
   [COLOR=Red] Image name: athr.sys
    Timestamp:        Tue Jun 09 23:34:52 2009[/COLOR] (4A2EA444)
    CheckSum:         0011A043
    ImageSize:        00110000
    Translations:     0000.04b0 0000.04e4 0409.04b0 0409.04e4

Update it from ATHEROS drivers for Microsoft Windows (Atheros?????).

► Get rid of nvstor.sys.

1. Right click on "my computer" icon and click "manage" on the context menu.
2. It will open the "computer management" window.
3. Select "Device Manager" in the left pane, It will list all the existing devices up.
4. Expand "Disc Drives" by clicking on the triangle in front of it.
5. Select one item under it, right click, uninstall.
6. Continue the process for all items under "Disc Drives"
7. Now restart the computer. At restart, windows will auto configure the appropriate system driver, msahci.sys.

► Free up the startup.

1. Click on the Start button
2. Type “msconfig (without quotes), click the resulting link. It will open the System Configuration window.
3. Select the “Startup” tab.
4. Deselect all items other than the antivirus.
5. Apply > OK
6. Accept the restart.

Let us know the results.

 

[Mudfiren]

After I uninstall the item under disk drive, it restarts and get BSOD

 

[Arc]

Need to see that dump.

If the crash took place before the desktop appeared, the dump might not be recorded, in that case send us a camera snap of the blue screen.

And, as a test, uninstall MagicDisc, and see if it is still crashing on startup or not. Later I may ask you to uninstall one more program, depending on the situation.

 

[Mudfiren]

I tried to uninstall, still get BSOD

 

[Mudfiren]

The BSOD pic

 

[Mudfiren]

The problem is definitely from another account as whenever I log in to that account in save mode, I get this sign

 

[Arc]

Well, boot into safe mode, uninstall Daemon tools and MagicDisc.

Then Uninstall McAfee Using McAfee Removal Tool.
Use Microsoft Security Essentials as your antivirus with windows inbuilt firewall, and free MBAM as the on demand scanner.

Download and install those, and then run full system scans with both of them, one by one.

Let us know the results.

 

[Mudfiren]

Here is the report. ive uninstall funshion, daemon tools, but not sure if i have cleaned it all. I cant download Microsoft Essential Security as i require an internet to install despite having the transferred the installation folder

 

[Arc]

A lot of trojans detected by MBAM, but no action is taken.

Try WDO.

• Windows Defender Offline

And, what is the problem with networking?

 

[Mudfiren]

Will try it now. There is the same BOSD when booting into safemode with networking.

 

[Mudfiren]

Hey thanks a lot for the support and help. Somehow I managed to install some spyware, and when restart, i only had repair system(recommended) and safe mode, so I just gave it a try and it went to fix some stuff and after restart, boom it doesn't give BSOD anymore. Thanks a lot once again

 

[Arc]

You are welcome. Nice to know that your issue is over