BSOD Help

[Oaklands]

I have lurked here for reference material for quite some time. Went to make my first post for help and realized after submitting I did not read the procedures. Ok, so here is the correct information.

My system is about 4-5 months old. I purchased everything from my vendor we use at work. Windows 7 OEM, had a crash last week so this is a fresh install. Had a hard drive go out and it is removed presently waiting for the RMA replacement.

Attached are the files generated. Thank you in advance for your help.

 

[zigzag3143]

I have lurked here for reference material for quite some time. Went to make my first post for help and realized after submitting I did not read the procedures. Ok, so here is the correct information.

My system is about 4-5 months old. I purchased everything from my vendor we use at work. Windows 7 OEM, had a crash last week so this is a fresh install. Had a hard drive go out and it is removed presently waiting for the RMA replacement.

Attached are the files generated. Thank you in advance for your help.

2 of three were caused by Kaspersky, the other inconclusive. I would remove and replace it with Microsoft Security Essentials


http://support.kaspersky.com/downloads/utils/kavremover10.zip

http://www.microsoft.com/security_essentials/

Microsoft (R) Windows Debugger Version 6.11.0001.404 X86
Copyright (c) Microsoft Corporation. All rights reserved.


Loading Dump File [C:\Users\K\Desktop\041911-38750-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available

Symbol search path is: SRV*C:\Symbols*http://msdl.microsoft.com/download/symbols;srv*e:\symbols
*http://msdl.microsoft.com/download/symbols
Executable search path is: 
Windows 7 Kernel Version 7600 MP (6 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 7600.16695.amd64fre.win7_gdr.101026-1503
Machine Name:
Kernel base = 0xfffff800`02a1f000 PsLoadedModuleList = 0xfffff800`02c5ce50
Debug session time: Tue Apr 19 20:10:30.609 2011 (GMT-4)
System Uptime: 1 days 15:33:49.591
Loading Kernel Symbols
...............................................................
................................................................
.......................................
Loading User Symbols
Loading unloaded module list
.............
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck D1, {a78, 2, 8, a78}

Unable to load image kl1.sys, Win32 error 0n2
*** WARNING: Unable to verify timestamp for kl1.sys
*** ERROR: Module load completed but symbols could not be loaded for kl1.sys
Probably caused by : kl1.sys ( kl1+1cd94c )

Followup: MachineOwner
---------

4: kd> !analyze -v
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

DRIVER_IRQL_NOT_LESS_OR_EQUAL (d1)
An attempt was made to access a pageable (or completely invalid) address at an
interrupt request level (IRQL) that is too high.  This is usually
caused by drivers using improper addresses.
If kernel debugger is available get stack backtrace.
Arguments:
Arg1: 0000000000000a78, memory referenced
Arg2: 0000000000000002, IRQL
Arg3: 0000000000000008, value 0 = read operation, 1 = write operation
Arg4: 0000000000000a78, address which referenced memory

Debugging Details:
------------------


READ_ADDRESS: GetPointerFromAddress: unable to read from fffff80002cc70e0
 0000000000000a78 

CURRENT_IRQL:  2

FAULTING_IP: 
+5c73952f02dedad4
00000000`00000a78 ??              ???

PROCESS_NAME:  System

CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT

BUGCHECK_STR:  0xD1

TRAP_FRAME:  fffff880039842a0 -- (.trap 0xfffff880039842a0)
NOTE: The trap frame does not contain all registers.
Some register values may be zeroed or incorrect.
rax=fffffa8009df3540 rbx=0000000000000000 rcx=fffff880039844a0
rdx=0000000000100000 rsi=0000000000000000 rdi=0000000000000000
rip=0000000000000a78 rsp=fffff88003984438 rbp=0000000000000000
 r8=fffff880039844d8  r9=fffff880039844c8 r10=fffffa80095701d0
r11=0000000000000002 r12=0000000000000000 r13=0000000000000000
r14=0000000000000000 r15=0000000000000000
iopl=0         ov up ei ng nz na pe nc
00000000`00000a78 ??              ???
Resetting default scope

LAST_CONTROL_TRANSFER:  from fffff80002a8eca9 to fffff80002a8f740

FAILED_INSTRUCTION_ADDRESS: 
+5c73952f02dedad4
00000000`00000a78 ??              ???

STACK_TEXT:  
fffff880`03984158 fffff800`02a8eca9 : 00000000`0000000a 00000000`00000a78 00000000`00000002 00000000`00000008 : nt!KeBugCheckEx
fffff880`03984160 fffff800`02a8d920 : fffffa80`0b6a4030 fffffa80`09df3554 fffff880`03984301 fffff880`00000028 : nt!KiBugCheckDispatch+0x69
fffff880`039842a0 00000000`00000a78 : fffff880`01a1694c 00000000`00000000 00000000`00000000 fffffa80`09df3530 : nt!KiPageFault+0x260
fffff880`03984438 fffff880`01a1694c : 00000000`00000000 00000000`00000000 fffffa80`09df3530 fffffa80`09df3554 : 0xa78
fffff880`03984440 00000000`00000000 : 00000000`00000000 fffffa80`09df3530 fffffa80`09df3554 00000000`00000000 : kl1+0x1cd94c


STACK_COMMAND:  kb

FOLLOWUP_IP: 
kl1+1cd94c
fffff880`01a1694c ??              ???

SYMBOL_STACK_INDEX:  4

SYMBOL_NAME:  kl1+1cd94c

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: kl1

IMAGE_NAME:  kl1.sys

DEBUG_FLR_IMAGE_TIMESTAMP:  4c0f985b

FAILURE_BUCKET_ID:  X64_0xD1_CODE_AV_BAD_IP_kl1+1cd94c

BUCKET_ID:  X64_0xD1_CODE_AV_BAD_IP_kl1+1cd94c

Followup: MachineOwner
---------

4: kd> lmvm kl1
start             end                 module name
fffff880`01849000 fffff880`01fa8000   kl1      T (no symbols)           
    Loaded symbol image file: kl1.sys
    Image path: kl1.sys
    Image name: kl1.sys
    Timestamp:        Wed Jun 09 09:34:19 2010 (4C0F985B)
    CheckSum:         0007B053
    ImageSize:        0075F000
    Translations:     0000.04b0 0000.04e4 0409.04b0 0409.04e4

 

[Oaklands]

Thank you for the information. I researched some items and thought I had Kaspersky fixed. I went 3 days without a BSOD and then they started coming back. I did a complete uninstall of Kaspersky Internet Security and loaded Windows Essentials. I am still having problems with multiple BSOD's the last couple of days. Attached is my updated file.

I thought I saw some references to my Catalyst Control Center and I could not even get it to load. With that in mind, I did a downgrade to version 10.12 and it loaded fine. Is it possible I am starting to have a motherboard problem? My memory checks out fine.

Thank you.