BSOD IRQL_NOT_LESS_OR_EQUAL ntoskrnl.exe

kevinslondon · Oct 28, 2010

Hi all,

I wonder if someone can help me with this.

I've got a new (April 2010) desktop.
Core i5, 4GB Ram, Windows 7 Pro 32 bit OEM.

The computer starting blue screening soon after I got it and finally I lost patience and took it back to the shop. They said that Windows was corrupt and did a reinstallation. They ran lots of tests and claimed that all was OK on the hardware front.

Of course, the moment I got it back it started blue screening again. So far 3 times this week. I'm noticing a big increase in application unstability, IE, Thunderbird and Firefox have all crashed several times a day.

I've uninstalled my logitech 9000 webcam and removed the driver. I've run mem test overnight and fur test. Mem test passed 100% and fur test ran fine.

I've done quite a few searches on the net for this problem (seems to be quite common) but haven't found anything that helps so far.

Can someone take a look and let me know their thoughts?

Much appreciated,

Kevin

CarlTR6 · Oct 28, 2010

Hi, Kevin, and welcome to the forum. Sorry that you are having problems.

To begin your troubleshooting, I recommend that you uninstall Kaspsersky using this removal tool: Tool. Kaspersky is know to cause BSOD's on some Win 7 systems. You can try it again once you get your system stable; but I do not recommend doing so. Download and install Microsoft Security Essentials and make sure Windows Firewall is turned on.

Error code A, IRQL_NOT_LESS_OR_EQUAL. Usual causes: Kernel mode driver, System Service, BIOS, Windows, Virus scanner, Backup tool, compatibility.

Error code 1, APC_INDEX_MISMATCH. BSOD Index

Error code 1A, MEMORY_MANAGEMENT. Usual causes: Device driver, memory, kernel

Notice in the usual cause that device driver is mention in two of them and that antivirus scanner is mentioned.

Code:

Windows 7 Kernel Version 7600 MP (4 procs) Free x86 compatible
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 7600.16617.x86fre.win7_gdr.100618-1621
Machine Name:
Kernel base = 0x82c52000 PsLoadedModuleList = 0x82d91570
Debug session time: Mon Oct 25 14:11:48.480 2010 (GMT-4)
System Uptime: 0 days 1:43:44.526
Loading Kernel Symbols
...............................................................
................................................................
..........................
Loading User Symbols
Loading unloaded module list
......
1: kd> !Analyze
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck 1A, {5003, c0402000, f01, effe12}

Probably caused by : memory_corruption ( nt!MiAllocateWsle+6f )

Followup: MachineOwner
---------

1: kd> !analyze -v
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

MEMORY_MANAGEMENT (1a)
    # Any other values for parameter 1 must be individually examined.
Arguments:
Arg1: 00005003, The subtype of the bugcheck.
Arg2: c0402000
Arg3: 00000f01
Arg4: 00effe12

Debugging Details:
------------------


BUGCHECK_STR:  0x1a_5003

CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT

PROCESS_NAME:  plugin-contain

CURRENT_IRQL:  0

LAST_CONTROL_TRANSFER:  from 82cc812a to 82d23574

STACK_TEXT:  
a8b29c34 82cc812a 0000001a 00005003 c0402000 nt!KeBugCheckEx+0x1e
a8b29c68 82cbfc0f c000f828 8457f1c0 00000000 nt!MiAllocateWsle+0x6f
a8b29ca8 82cb23e4 00000001 03e0a000 00000111 nt!MiResolveDemandZeroFault+0x3cc
a8b29d1c 82c8a988 00000001 03e0a000 00000001 nt!MmAccessFault+0x185b
a8b29d1c 61e1d783 00000001 03e0a000 00000001 nt!KiTrap0E+0xdc
WARNING: Frame IP not in any known module. Following frames may be wrong.
03e09800 00000000 00000000 00000000 00000000 0x61e1d783


STACK_COMMAND:  kb

FOLLOWUP_IP: 
nt!MiAllocateWsle+6f
82cc812a cc              int     3

SYMBOL_STACK_INDEX:  1

SYMBOL_NAME:  nt!MiAllocateWsle+6f

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: nt

DEBUG_FLR_IMAGE_TIMESTAMP:  4c1c3f9b

IMAGE_NAME:  memory_corruption

FAILURE_BUCKET_ID:  0x1a_5003_nt!MiAllocateWsle+6f

BUCKET_ID:  0x1a_5003_nt!MiAllocateWsle+6f

Followup: MachineOwner
---------

*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck 1, {82e775e6, 0, ffff0000, 0}

Probably caused by : ntkrnlmp.exe ( nt!NtQueryValueKey+0 )

Followup: MachineOwner
---------

0: kd> !analyze -v
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

APC_INDEX_MISMATCH (1)
This is a kernel internal error. The most common reason to see this
bugcheck is when a filesystem or a driver has a mismatched number of
calls to disable and re-enable APCs. The key data item is the
Thread->KernelApcDisable field. A negative value indicates that a driver
has disabled APC calls without re-enabling them.  A positive value indicates
that the reverse is true. This check is made on exit from a system call.
Arguments:
Arg1: 82e775e6, address of system function (system call)
Arg2: 00000000, Thread->ApcStateIndex << 8 | Previous ApcStateIndex
Arg3: ffff0000, Thread->KernelApcDisable
Arg4: 00000000, Previous KernelApcDisable

Debugging Details:
------------------


OVERLAPPED_MODULE: Address regions for 'lvuvc' and 'lvuvc.sys' overlap

FAULTING_IP: 
nt!NtQueryValueKey+0
82e775e6 6a70            push    70h

CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT

BUGCHECK_STR:  0x1

PROCESS_NAME:  firefox.exe

CURRENT_IRQL:  0

LAST_CONTROL_TRANSFER:  from 77f064f4 to 82c4db23

STACK_TEXT:  
9bc73d34 77f064f4 badb0d00 001bebf4 00000000 nt!KiServiceExit2+0x17a
WARNING: Frame IP not in any known module. Following frames may be wrong.
001becdc 00000000 00000000 00000000 00000000 0x77f064f4


STACK_COMMAND:  .bugcheck ; kb

FOLLOWUP_IP: 
nt!NtQueryValueKey+0
82e775e6 6a70            push    70h

SYMBOL_NAME:  nt!NtQueryValueKey+0

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: nt

IMAGE_NAME:  ntkrnlmp.exe

DEBUG_FLR_IMAGE_TIMESTAMP:  4c1c3f9b

FAILURE_BUCKET_ID:  0x1_nt!NtQueryValueKey+0

BUCKET_ID:  0x1_nt!NtQueryValueKey+0

Followup: MachineOwner
---------

*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

IRQL_NOT_LESS_OR_EQUAL (a)
An attempt was made to access a pageable (or completely invalid) address at an
interrupt request level (IRQL) that is too high.  This is usually
caused by drivers using improper addresses.
If a kernel debugger is available get the stack backtrace.
Arguments:
Arg1: 00000001, memory referenced
Arg2: 00000002, IRQL
Arg3: 00000000, bitfield :
    bit 0 : value 0 = read operation, 1 = write operation
    bit 3 : value 0 = not an execute operation, 1 = execute operation (only on chips which support this level of status)
Arg4: 82c7aeb9, address which referenced memory

Debugging Details:
------------------


READ_ADDRESS: GetPointerFromAddress: unable to read from 82d72700
Unable to read MiSystemVaType memory at 82d520c0
 00000001 

CURRENT_IRQL:  2

FAULTING_IP: 
nt!NtWaitForWorkViaWorkerFactory+1e3
82c7aeb9 3b01            cmp     eax,dword ptr [ecx]

CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT

BUGCHECK_STR:  0xA

PROCESS_NAME:  wmpnetwk.exe

TRAP_FRAME:  80da9c44 -- (.trap 0xffffffff80da9c44)
ErrCode = 00000000
eax=00000001 ebx=80da9ce4 ecx=00000001 edx=00000000 esi=88852890 edi=80da9cd8
eip=82c7aeb9 esp=80da9cb8 ebp=80da9d24 iopl=0         nv up ei pl zr na pe nc
cs=0008  ss=0010  ds=0023  es=0023  fs=0030  gs=0000             efl=00010246
nt!NtWaitForWorkViaWorkerFactory+0x1e3:
82c7aeb9 3b01            cmp     eax,dword ptr [ecx]  ds:0023:00000001=????????
Resetting default scope

LAST_CONTROL_TRANSFER:  from 82c7aeb9 to 82c4bb7b

STACK_TEXT:  
80da9c44 82c7aeb9 badb0d00 00000000 82e10a8b nt!KiTrap0E+0x2cf
80da9d24 82c4879a 00000102 0102fcd0 0102fd7c nt!NtWaitForWorkViaWorkerFactory+0x1e3
80da9d24 774664f4 00000102 0102fcd0 0102fd7c nt!KiFastCallEntry+0x12a
WARNING: Frame IP not in any known module. Following frames may be wrong.
0102fd7c 00000000 00000000 00000000 00000000 0x774664f4


STACK_COMMAND:  kb

FOLLOWUP_IP: 
nt!NtWaitForWorkViaWorkerFactory+1e3
82c7aeb9 3b01            cmp     eax,dword ptr [ecx]

SYMBOL_STACK_INDEX:  1

SYMBOL_NAME:  nt!NtWaitForWorkViaWorkerFactory+1e3

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: nt

IMAGE_NAME:  ntkrnlmp.exe

DEBUG_FLR_IMAGE_TIMESTAMP:  4c1c3f9b

FAILURE_BUCKET_ID:  0xA_nt!NtWaitForWorkViaWorkerFactory+1e3

BUCKET_ID:  0xA_nt!NtWaitForWorkViaWorkerFactory+1e3

Followup: MachineOwner
---------

0: kd> lmtsmn
start    end        module name
8ce1b000 8ce63000   ACPI     ACPI.sys     Mon Jul 13 19:11:11 2009 (4A5BBF0F)
8df1b000 8df75000   afd      afd.sys      Mon Jul 13 19:12:34 2009 (4A5BBF62)
8d400000 8d412000   AgileVpn AgileVpn.sys Mon Jul 13 19:55:00 2009 (4A5BC954)
8cfac000 8cfb5000   amdxata  amdxata.sys  Tue May 19 13:57:35 2009 (4A12F30F)
94bdb000 94bdc6c0   ASACPI   ASACPI.sys   Wed Jul 15 23:28:28 2009 (4A5E9E5C)
9fe03000 9fe0c000   asyncmac asyncmac.sys Mon Jul 13 19:54:46 2009 (4A5BC946)
8cf40000 8cf49000   atapi    atapi.sys    Mon Jul 13 19:11:15 2009 (4A5BBF13)
8cf49000 8cf6c000   ataport  ataport.SYS  Mon Jul 13 19:11:18 2009 (4A5BBF16)
96880000 9689d000   AtihdW73 AtihdW73.sys Thu Jul 15 08:45:57 2010 (4C3F0305)
9440e000 94a72000   atikmdag atikmdag.sys Wed Aug 25 21:43:45 2010 (4C75C6D1)
8d76d000 8d7a8000   atikmpag atikmpag.sys Wed Aug 25 21:20:36 2010 (4C75C164)
8de81000 8de88000   Beep     Beep.SYS     Mon Jul 13 19:45:00 2009 (4A5BC6FC)
8d72c000 8d73a000   blbdrive blbdrive.sys Mon Jul 13 19:23:04 2009 (4A5BC1D8)
8cca7000 8ccaf000   BOOTVID  BOOTVID.dll  Mon Jul 13 21:04:34 2009 (4A5BD9A2)
96bd5000 96bee000   bowser   bowser.sys   Mon Jul 13 19:14:21 2009 (4A5BBFCD)
97c20000 97c3e000   cdd      cdd.dll      unavailable (00000000)
8ddd8000 8ddf7000   cdrom    cdrom.sys    Mon Jul 13 19:11:24 2009 (4A5BBF1C)
8ccf1000 8cd9c000   CI       CI.dll       Mon Jul 13 21:09:28 2009 (4A5BDAC8)
8dd81000 8dda6000   CLASSPNP CLASSPNP.SYS Mon Jul 13 19:11:20 2009 (4A5BBF18)
8ccaf000 8ccf1000   CLFS     CLFS.SYS     Mon Jul 13 19:11:10 2009 (4A5BBF0E)
8d174000 8d1d1000   cng      cng.sys      Mon Jul 13 19:32:55 2009 (4A5BC427)
8d7ed000 8d7fa000   CompositeBus CompositeBus.sys Mon Jul 13 19:45:26 2009 (4A5BC716)
96a54000 96a61000   crashdmp crashdmp.sys Mon Jul 13 19:45:50 2009 (4A5BC72E)
8d6b0000 8d714000   csc      csc.sys      Mon Jul 13 19:15:08 2009 (4A5BBFFC)
8d714000 8d72c000   dfsc     dfsc.sys     Mon Jul 13 19:14:16 2009 (4A5BBFC8)
8d6a4000 8d6b0000   discache discache.sys Mon Jul 13 19:24:04 2009 (4A5BC214)
8dd70000 8dd81000   disk     disk.sys     Mon Jul 13 19:11:28 2009 (4A5BBF20)
968cc000 968e5000   drmk     drmk.sys     Mon Jul 13 20:36:05 2009 (4A5BD2F5)
96a6c000 96a75000   dump_atapi dump_atapi.sys Mon Jul 13 19:11:15 2009 (4A5BBF13)
96a61000 96a6c000   dump_dumpata dump_dumpata.sys Mon Jul 13 19:11:16 2009 (4A5BBF14)
96a75000 96a86000   dump_dumpfve dump_dumpfve.sys Mon Jul 13 19:12:47 2009 (4A5BBF6F)
96a86000 96a90000   Dxapi    Dxapi.sys    Mon Jul 13 19:25:25 2009 (4A5BC265)
94a72000 94b29000   dxgkrnl  dxgkrnl.sys  Thu Oct 01 20:48:33 2009 (4AC54DE1)
94b29000 94b62000   dxgmms1  dxgmms1.sys  Mon Jul 13 19:25:25 2009 (4A5BC265)
8cfe9000 8cffa000   fileinfo fileinfo.sys Mon Jul 13 19:21:51 2009 (4A5BC18F)
8cfb5000 8cfe9000   fltmgr   fltmgr.sys   Mon Jul 13 19:11:13 2009 (4A5BBF11)
8d1df000 8d1e8000   Fs_Rec   Fs_Rec.sys   Mon Jul 13 19:11:14 2009 (4A5BBF12)
8dd3e000 8dd70000   fvevol   fvevol.sys   Fri Sep 25 22:24:21 2009 (4ABD7B55)
8d581000 8d5b2000   fwpkclnt fwpkclnt.sys Mon Jul 13 19:12:03 2009 (4A5BBF43)
83013000 8304a000   hal      halmacpi.dll Mon Jul 13 19:11:03 2009 (4A5BBF07)
94b62000 94b81000   HDAudBus HDAudBus.sys Mon Jul 13 19:50:55 2009 (4A5BC85F)
96a9b000 96aae000   HIDCLASS HIDCLASS.SYS Mon Jul 13 19:51:01 2009 (4A5BC865)
96aae000 96ab4480   HIDPARSE HIDPARSE.SYS Mon Jul 13 19:50:59 2009 (4A5BC863)
96a90000 96a9b000   hidusb   hidusb.sys   Mon Jul 13 19:51:04 2009 (4A5BC868)
96b50000 96bd5000   HTTP     HTTP.sys     Mon Jul 13 19:12:53 2009 (4A5BBF75)
8dd36000 8dd3e000   hwpolicy hwpolicy.sys Mon Jul 13 19:11:01 2009 (4A5BBF05)
94be7000 94bff000   i8042prt i8042prt.sys Mon Jul 13 19:11:23 2009 (4A5BBF1B)
8d75b000 8d76d000   intelppm intelppm.sys Mon Jul 13 19:11:03 2009 (4A5BBF07)
8cf6c000 8cf86000   jraid    jraid.sys    Fri Jul 17 11:31:37 2009 (4A609959)
94400000 9440d000   kbdclass kbdclass.sys Mon Jul 13 19:11:15 2009 (4A5BBF13)
80bcf000 80bd7000   kdcom    kdcom.dll    Mon Jul 13 21:08:58 2009 (4A5BDAAA)
8d814000 8dd36000   kl1      kl1.sys      Wed Jun 09 09:24:39 2010 (4C0F9617)
8df15000 8df1b000   kl2      kl2.sys      Wed Jun 09 09:24:35 2010 (4C0F9613)
8ddf7000 8de7a000   klif     klif.sys     Fri Aug 06 13:16:02 2010 (4C5C4352)
8dfcd000 8dfd5000   klim6    klim6.sys    Thu Apr 22 11:07:20 2010 (4BD06628)
96ac2000 96acb000   klmouflt klmouflt.sys Mon Nov 02 11:26:08 2009 (4AEF0820)
8d381000 8d3b5000   ks       ks.sys       Wed Mar 03 22:57:52 2010 (4B8F2FC0)
8d161000 8d174000   ksecdd   ksecdd.sys   Mon Jul 13 19:11:56 2009 (4A5BBF3C)
8d2dd000 8d302000   ksecpkg  ksecpkg.sys  Thu Dec 10 23:04:22 2009 (4B21C4C6)
96b2d000 96b3d000   lltdio   lltdio.sys   Mon Jul 13 19:53:18 2009 (4A5BC8EE)
96af8000 96b13000   luafv    luafv.sys    Mon Jul 13 19:15:44 2009 (4A5BC020)
9fd94000 9fd98a80   LVPr2Mon LVPr2Mon.sys Fri May 07 21:36:25 2010 (4BE4C019)
8cc1e000 8cc96000   mcupdate_GenuineIntel mcupdate_GenuineIntel.dll Mon Jul 13 21:06:41 2009 (4A5BDA21)
96acb000 96ad6000   monitor  monitor.sys  Mon Jul 13 19:25:58 2009 (4A5BC286)
8d374000 8d381000   mouclass mouclass.sys Mon Jul 13 19:11:15 2009 (4A5BBF13)
96ab7000 96ac2000   mouhid   mouhid.sys   Mon Jul 13 19:45:08 2009 (4A5BC704)
8cf2a000 8cf40000   mountmgr mountmgr.sys Mon Jul 13 19:11:27 2009 (4A5BBF1F)
96bee000 96c00000   mpsdrv   mpsdrv.sys   Mon Jul 13 19:52:52 2009 (4A5BC8D4)
96800000 96823000   mrxsmb   mrxsmb.sys   Sat Feb 27 02:32:02 2010 (4B88CA72)
8d3c3000 8d3fe000   mrxsmb10 mrxsmb10.sys Sat Feb 27 02:32:21 2010 (4B88CA85)
8dda6000 8ddc1000   mrxsmb20 mrxsmb20.sys Sat Feb 27 02:32:11 2010 (4B88CA7B)
8deda000 8dee5000   Msfs     Msfs.SYS     Mon Jul 13 19:11:26 2009 (4A5BBF1E)
8ce6c000 8ce74000   msisadrv msisadrv.sys Mon Jul 13 19:11:09 2009 (4A5BBF0D)
8d136000 8d161000   msrpc    msrpc.sys    Mon Jul 13 19:11:59 2009 (4A5BBF3F)
8d69a000 8d6a4000   mssmbios mssmbios.sys Mon Jul 13 19:19:25 2009 (4A5BC0FD)
8d62f000 8d63f000   mup      mup.sys      Mon Jul 13 19:14:14 2009 (4A5BBFC6)
8d1e8000 8d29f000   ndis     ndis.sys     Mon Jul 13 19:12:24 2009 (4A5BBF58)
8d42a000 8d435000   ndistapi ndistapi.sys Mon Jul 13 19:54:24 2009 (4A5BC930)
8d302000 8d324000   ndiswan  ndiswan.sys  Mon Jul 13 19:54:34 2009 (4A5BC93A)
9686f000 96880000   NDProxy  NDProxy.SYS  Mon Jul 13 19:54:27 2009 (4A5BC933)
8dfd5000 8dfe3000   netbios  netbios.sys  Mon Jul 13 19:53:54 2009 (4A5BC912)
8df75000 8dfa7000   netbt    netbt.sys    Mon Jul 13 19:12:18 2009 (4A5BBF52)
8d29f000 8d2dd000   NETIO    NETIO.SYS    Mon Jul 13 19:12:35 2009 (4A5BBF63)
8dee5000 8def3000   Npfs     Npfs.SYS     Mon Jul 13 19:11:31 2009 (4A5BBF23)
8d690000 8d69a000   nsiproxy nsiproxy.sys Mon Jul 13 19:12:08 2009 (4A5BBF48)
82c13000 83013000   nt       ntkrnlmp.exe Fri Jun 18 23:55:07 2010 (4C1C3F9B)
8d007000 8d136000   Ntfs     Ntfs.sys     Mon Jul 13 19:12:05 2009 (4A5BBF45)
8de7a000 8de81000   Null     Null.SYS     Mon Jul 13 19:11:12 2009 (4A5BBF10)
8dfae000 8dfcd000   pacer    pacer.sys    Mon Jul 13 19:53:58 2009 (4A5BC916)
8cea9000 8ceba000   partmgr  partmgr.sys  Mon Jul 13 19:11:35 2009 (4A5BBF27)
8ce74000 8ce9e000   pci      pci.sys      Mon Jul 13 19:11:16 2009 (4A5BBF14)
8cf15000 8cf1c000   pciide   pciide.sys   Mon Jul 13 19:11:19 2009 (4A5BBF17)
8cf1c000 8cf2a000   PCIIDEX  PCIIDEX.SYS  Mon Jul 13 19:11:15 2009 (4A5BBF13)
8d1d1000 8d1df000   pcw      pcw.sys      Mon Jul 13 19:11:10 2009 (4A5BBF0E)
9fc25000 9fcbc000   peauth   peauth.sys   Mon Jul 13 20:35:44 2009 (4A5BD2E0)
9689d000 968cc000   portcls  portcls.sys  Mon Jul 13 19:51:00 2009 (4A5BC864)
8cc96000 8cca7000   PSHED    PSHED.dll    Mon Jul 13 21:09:36 2009 (4A5BDAD0)
8d412000 8d42a000   rasl2tp  rasl2tp.sys  Mon Jul 13 19:54:33 2009 (4A5BC939)
8d324000 8d33c000   raspppoe raspppoe.sys Mon Jul 13 19:54:53 2009 (4A5BC94D)
8d33c000 8d353000   raspptp  raspptp.sys  Mon Jul 13 19:54:47 2009 (4A5BC947)
8d353000 8d36a000   rassstp  rassstp.sys  Mon Jul 13 19:54:57 2009 (4A5BC951)
8d64f000 8d690000   rdbss    rdbss.sys    Mon Jul 13 19:14:26 2009 (4A5BBFD2)
8d36a000 8d374000   rdpbus   rdpbus.sys   Mon Jul 13 20:02:40 2009 (4A5BCB20)
8dec2000 8deca000   RDPCDD   RDPCDD.sys   Mon Jul 13 20:01:40 2009 (4A5BCAE4)
8deca000 8ded2000   rdpencdd rdpencdd.sys Mon Jul 13 20:01:39 2009 (4A5BCAE3)
8ded2000 8deda000   rdprefmp rdprefmp.sys Mon Jul 13 20:01:41 2009 (4A5BCAE5)
8d602000 8d62f000   rdyboost rdyboost.sys Mon Jul 13 19:22:02 2009 (4A5BC19A)
96b3d000 96b50000   rspndr   rspndr.sys   Mon Jul 13 19:53:20 2009 (4A5BC8F0)
8d7a8000 8d7ed000   Rt86win7 Rt86win7.sys Wed Jun 23 05:10:23 2010 (4C21CF7F)
8cf86000 8cfac000   SCSIPORT SCSIPORT.SYS Mon Jul 13 19:45:55 2009 (4A5BC733)
9fcbc000 9fcc6000   secdrv   secdrv.SYS   Wed Sep 13 09:18:32 2006 (45080528)
94bdd000 94be7000   serenum  serenum.sys  Mon Jul 13 19:45:27 2009 (4A5BC717)
8dfe3000 8dffd000   serial   serial.sys   Mon Jul 13 19:45:33 2009 (4A5BC71D)
8d5fa000 8d602000   spldr    spldr.sys    Mon May 11 12:13:47 2009 (4A084EBB)
9fd43000 9fd94000   srv      srv.sys      Thu Aug 26 23:31:26 2010 (4C77318E)
9fcf4000 9fd43000   srv2     srv2.sys     Thu Aug 26 23:30:45 2010 (4C773165)
9fcc6000 9fce7000   srvnet   srvnet.sys   Thu Aug 26 23:30:39 2010 (4C77315F)
8dffd000 8dffe380   swenum   swenum.sys   Mon Jul 13 19:45:08 2009 (4A5BC704)
8d438000 8d581000   tcpip    tcpip.sys    Sun Jun 13 23:36:59 2010 (4C15A3DB)
9fce7000 9fcf4000   tcpipreg tcpipreg.sys Mon Jul 13 19:54:14 2009 (4A5BC926)
8df0a000 8df15000   TDI      TDI.SYS      Mon Jul 13 19:12:12 2009 (4A5BBF4C)
8def3000 8df0a000   tdx      tdx.sys      Mon Jul 13 19:12:10 2009 (4A5BBF4A)
8d63f000 8d64f000   termdd   termdd.sys   Mon Jul 13 20:01:35 2009 (4A5BCADF)
97fe0000 97fe9000   TSDDD    TSDDD.dll    Mon Jul 13 20:01:40 2009 (4A5BCAE4)
8d73a000 8d75b000   tunnel   tunnel.sys   Mon Jul 13 19:54:03 2009 (4A5BC91B)
8d3b5000 8d3c3000   umbus    umbus.sys    Mon Jul 13 19:51:38 2009 (4A5BC88A)
96ae1000 96af8000   usbccgp  usbccgp.sys  Mon Jul 13 19:51:31 2009 (4A5BC883)
96ab5000 96ab6700   USBD     USBD.SYS     Mon Jul 13 19:51:05 2009 (4A5BC869)
94b81000 94b90000   usbehci  usbehci.sys  Mon Jul 13 19:51:14 2009 (4A5BC872)
9682b000 9686f000   usbhub   usbhub.sys   Mon Jul 13 19:52:06 2009 (4A5BC8A6)
94b90000 94bdb000   USBPORT  USBPORT.SYS  Mon Jul 13 19:51:13 2009 (4A5BC871)
96ad6000 96ae1000   usbprint usbprint.sys Mon Jul 13 20:17:06 2009 (4A5BCE82)
8ce9e000 8cea9000   vdrvroot vdrvroot.sys Mon Jul 13 19:46:19 2009 (4A5BC74B)
8de88000 8de94000   vga      vga.sys      Mon Jul 13 19:25:50 2009 (4A5BC27E)
968e5000 96a54000   viahduaa viahduaa.sys Thu Jul 09 23:04:40 2009 (4A56AFC8)
8de94000 8deb5000   VIDEOPRT VIDEOPRT.SYS Mon Jul 13 19:25:49 2009 (4A5BC27D)
8d5b2000 8d5ba380   vmstorfl vmstorfl.sys Mon Jul 13 19:28:44 2009 (4A5BC32C)
8ceba000 8ceca000   volmgr   volmgr.sys   Mon Jul 13 19:11:25 2009 (4A5BBF1D)
8ceca000 8cf15000   volmgrx  volmgrx.sys  Mon Jul 13 19:11:41 2009 (4A5BBF2D)
8d5bb000 8d5fa000   volsnap  volsnap.sys  Mon Jul 13 19:11:34 2009 (4A5BBF26)
8d800000 8d813000   wanarp   wanarp.sys   Mon Jul 13 19:55:02 2009 (4A5BC956)
8deb5000 8dec2000   watchdog watchdog.sys Mon Jul 13 19:24:10 2009 (4A5BC21A)
8cd9c000 8ce0d000   Wdf01000 Wdf01000.sys Mon Jul 13 19:11:36 2009 (4A5BBF28)
8ce0d000 8ce1b000   WDFLDR   WDFLDR.SYS   Mon Jul 13 19:11:25 2009 (4A5BBF1D)
8dfa7000 8dfae000   wfplwf   wfplwf.sys   Mon Jul 13 19:53:51 2009 (4A5BC90F)
97d80000 97fcb000   win32k   win32k.sys   Tue Aug 31 22:34:29 2010 (4C7DBBB5)
8ce63000 8ce6c000   WMILIB   WMILIB.SYS   Mon Jul 13 19:11:22 2009 (4A5BBF1A)
96b13000 96b2d000   WudfPf   WudfPf.sys   Mon Jul 13 19:50:13 2009 (4A5BC835)

Unloaded modules:
9fd99000 9fe03000   spsys.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
8cc00000 8cc18000   parport.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
8dda6000 8ddb3000   crashdmp.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
8ddb3000 8ddbe000   dump_ataport
    Timestamp: unavailable (00000000)
    Checksum:  00000000
8ddbe000 8ddc7000   dump_atapi.s
    Timestamp: unavailable (00000000)
    Checksum:  00000000
8ddc7000 8ddd8000   dump_dumpfve
    Timestamp: unavailable (00000000)
    Checksum:  00000000

All three dumps indicate a hardware or hardware related problem (driver). They do not tell us a specific cause.

You have one outdated driver loaded on your system. Older drivers can and do cause memory corruption and BSOD's. Update this driver.

viahduaa.sys Thu Jul 09 23:04:40 2009 - VIA High Definition Audio Function DriverVIA Drivers Download - VIA Technologies, Inc.

How to find drivers -

- I have listed links to most of the drivers in the code box below. Please use the links there to see what info I've found about those drivers.
- search Google for the name of the driver
- compare the Google results with what's installed on your system to figure out which device/program it belongs to
- visit the web site of the manufacturer of the hardware/program to get the latest drivers (DON'T use Windows Update or the Update driver function of Device Manager).
- if there are difficulties in locating them, post back with questions and someone will try and help you locate the appropriate program.

- - The most common drivers are listed on this page: Driver Reference
- - Driver manufacturer links are on this page: Drivers and Downloads

Uninstall Kaspersky, update the above driver and reboot. Run your system and let's see how it does. If you get another BSOD, upload it to us and we will go from there.

kevinslondon · Oct 28, 2010

Thanks very much for the quick response. I've uninstalled Kaspersky, and installed MSE as recommended.

Thanks again.

Kevin

CarlTR6 · Oct 28, 2010

You are welcome. Good work. Now update that driver. If you need help with it, please ask. I hope your problem will be this easy to resolve.

kevinslondon · Oct 28, 2010

I'll post back in a couple of days if all goes well.

Otherwise you might hear from me sooner

Thanks again

Kevin

CarlTR6 · Oct 28, 2010

Very good. We will be here and I have my fingers crossed!

kevinslondon · Nov 1, 2010

Hi all,

I left my machine running for 3 days and I'm happy to report no blue screens.

It's not totally fixed yet, the event logs are showing that svchost.exe_SysMain is crashing but I'm going to live with that for now until I have more time to try and find out why.

Thanks for all your help Carl.

Kevin

CarlTR6 · Nov 1, 2010

Your are very welcome, Kevin. I am glad I could help and I am happy to hear you are BSOD free. Thanks for updating us. Happy computing.

BSOD IRQL_NOT_LESS_OR_EQUAL ntoskrnl.exe

kevinslondon

New member

My Computer

At a glance

CarlTR6

Antique Senior Member

My Computer

At a glance

kevinslondon

New member

My Computer

At a glance

CarlTR6

Antique Senior Member

My Computer

At a glance

kevinslondon

New member

My Computer

At a glance

CarlTR6

Antique Senior Member

My Computer

At a glance

kevinslondon

New member

My Computer

At a glance

CarlTR6

Antique Senior Member

My Computer

At a glance

Similar threads

BSOD IRQL_NOT_LESS_OR_EQUAL ntoskrnl.exe

New member

My Computer My Computer

At a glance

Antique Senior Member

My Computer My Computer

At a glance

New member

My Computer My Computer

At a glance

Antique Senior Member

My Computer My Computer

At a glance

New member

My Computer My Computer

At a glance

Antique Senior Member

My Computer My Computer

At a glance

New member

My Computer My Computer

At a glance

Antique Senior Member

My Computer My Computer

At a glance

Similar threads

My Computer

My Computer

My Computer

My Computer

My Computer

My Computer

My Computer

My Computer