BSOD twice while normally using laptop

[rovopio]

hello... i've got a BSOD, it happened twice on 2 weeks. The BSOD screen written IRL less_or_equal.

What kind of data / software do you guys need me to post?
Windows is updated. Antivirus using KIS 2013, windows defender is off. windows update keep asking for monthly windows defender update but since it's off, whenever i said okay and it got (seemingly) installed, after i reboot my computer, the same monthly update appears again. maybe because i turned the windows defender off

Problem signature:
Problem Event Name: BlueScreen
OS Version: 6.1.7601.2.1.0.768.3
Locale ID: 1033

Additional information about the problem:
BCCode: a
BCP1: FFFFFA80FEA73388
BCP2: 0000000000000002
BCP3: 0000000000000000
BCP4: FFFFF80003080DEB
OS Version: 6_1_7601
Service Pack: 1_0
Product: 768_1

Files that help describe the problem:
C:\Windows\Minidump\033113-25989-01.dmp
C:\Users\MYCOMP\AppData\Local\Temp\WER-44709-0.sysdata.xml

 

[koolkat77]

Kaspersky contributes in BSOD's as a test please remove it using its removal tool from here:

Uninstallers (removal tools) for common antivirus software - ESET Knowledgebase

Microsoft Security Essentials is recommended from a strict BSOD perspective.

Microsoft Security Essentials, Free antivirus for windows
Malwarebytes Anti-Malware Free
Good and Free system security combination

   Warning

Do not start the free trial of Malware Bytes; remember to deselect that option when prompted.

Run a full scan with both (separately) once downloaded, installed and updated.

Update the driver below:

If its wireless, match your device from here:
ATHEROS Wireless drivers for Windows

If its not a wireless, match your device from here:
ATHEROS Network drivers for Windows

Sometimes drivers remain, not completely uninstalled. Follow this tutorial for complete removal of drivers of the particular program:

• How to Clean Left Over Driver Files with Driver Sweeper

fffff880`0a6515e8  fffff880`05d88c7eUnable to load image \SystemRoot\system32\DRIVERS\athrx.sys, Win32 error 0n2
*** WARNING: Unable to verify timestamp for athrx.sys
*** ERROR: Module load completed but symbols could not be loaded for athrx.sys
 athrx+0x104c7e

lmvm athrx
start             end                 module name
fffff880`05c84000 fffff880`05f2e000   athrx    T (no symbols)           
    Loaded symbol image file: athrx.sys
    Image path: \SystemRoot\system32\DRIVERS\athrx.sys
    Image name: athrx.sys
    Timestamp:        Tue Oct 04 12:49:29 2011 (4E8AAC79)
    CheckSum:         002B1FA7
    ImageSize:        002AA000
    Translations:     0000.04b0 0000.04e4 0409.04b0 0409.04e4

Use the System File Checker tool (SFC.exe) to determine which file is causing the issue, and then replace the file.

To do this, follow these steps:

1. Open an elevated command prompt. To do this, click Start, click All Programs, click Accessories, right-click Command Prompt, and then click Run as administrator. If you are prompted for an administrator password or for a confirmation, type the password, or click Allow.

2. At the command prompt, type the following command, and then press ENTER: sfc /scannow
The sfc /scannow command scans all protected system files and replaces incorrect versions with correct Microsoft versions.

http://www.sevenforums.com/tutorials/1538-sfc-scannow-command-system-file-checker.html
Use the System File Checker tool to troubleshoot missing or corrupted system files on Windows Vista or on Windows 7

Check a drive for errors:
1. Check a drive for errors
2. Check your hard disk for errors in Windows 7
3. http://www.sevenforums.com/tutorials/433-disk-check.html

 

[rovopio]

quick question.. how do i know which one is mine from here... ATHEROS Wireless drivers for Windows ?

secondly.. will i have to remove Kaspersky forever or until we get to the end of this BSOD problem ?

thirdly... so,, the BSOD is caused by 3 things? atheros driver leftover, kaspersky, and incorrect version of windows files?

 

[koolkat77]

Remove Kaspersky as a test. If no BSOD's come back, you would have to talk to Kaspersky about it if you want it.

Look for this :ar: AR9002WB on that link.

[02]: [B]Atheros AR9002WB-1NG[/B] Wireless Network Adapter
                                 Connection Name: Wireless Network Connection
                                 DHCP Enabled:    Yes
                                 DHCP Server:     192.168.1.1
                                 IP address(es)
                                 [01]: 192.168.1.104
                                 [02]: fe80::f462:5153:5863:3e77

 

[koolkat77]

And yes for more information related to BSOD's, go through the HOW TO section: Crash and lockup debug 'How To' - Windows 7 Help Forums

 

[rovopio]

no more BSOD mate, tq~!

and recently revert to SSD as well. so.. start from fresh

 

[koolkat77]

Good news, glad you got it sorted.

If you have any problems, be sure to post here

 

[rovopio]

hi mate, tq very much for the advice, I'd like to ask how to update drivers on a notebook...? can i just install it on top of the old ones or shud i remove it first...?

cheers mate,

KP!

 

[Arc]

Hello kungfupanda7.
If the drivers are in a .exe format, just execute it. The new version will automatically update the existing version. But if the driver is a .sys version, follow http://www.sevenforums.com/tutorials/97061-driver-install-device-manager.html

As there is no more BSOD, you may mark the thread as solved.

 

[rovopio]

@koolkat77

hello koolkat...!! my BSOD is solved by doing a clean install on an SSD.
but i'd like to ask,,, the driver i used for atheros was the driver i installed from the driver CD. its version 9 0 0 222 if im not mistaken. and then the asus live update utility inform me of a new driver 9 2 0 458 or smtn, which i installed via asus live update.
Now this was then... when you helped me with my IRQL LESS OR EQUAL BSOD

When i installed windows,, I didn't get creative and installed my own driver, i used the original CD driver, and updated it with the asus live update utility, also from the CD driver.
So now... I'm kinda curious as to why the asus driver that i installed following the notebook manufacturer direction returned an error as the above. (unable to verify timestamp error BSOD thing you helped).

==========================

I'd like to ask, now that I'm on a fresh new clean install machine with SSD, I don't want to experience BSOD because of the same error again, which leads to my question.

How can i know if my driver have some remains or not? How to read my own dump file?

I've just finished installing my Notebook drivers. Asus live update prompts me to update to WLAN driver version 9 2 0 458 from the stock driver 9 0 0 222.

i'd like to see if the atheros is giving me timestamp error again or not. is it possible for me to read my own dump file to check if it is giving the same error or not, and if so..., what software should i use?

I really would like to know how to check if i still have that atheros wireless timestamp error or not before i install more softwares and windows updates and stuff. Not to mention, not wanting to get BSOD due to atheros error again

tl;dr where can i read this

fffff880`0a6515e8 fffff880`05d88c7eUnable to load image \SystemRoot\system32\DRIVERS\athrx.sys, Win32 error 0n2 *** WARNING: Unable to verify timestamp for athrx.sys *** ERROR: Module load completed but symbols could not be loaded for athrx.sys athrx+0x104c7e

is it on the dmp file? how can i open that?
i've checked eventapps eventsys and the other txt files but couldnt find that, i hvnt open the dmp file and thats why i ask here again

apologies for the long post!

cheers,

KP

 

[Arc]

cay you post it following the Blue Screen of Death (BSOD) Posting Instructions?

 

[rovopio]

edited to be more concise

=====
@arc so... technically i dont have BSOD anymore now as i said on the previous post that i did clean install with a new SSD.

sorry if i was all over the place.

Let me tell you the history of me using this notebook. Every couple of months i get BSOD. When i get BSOD i just clean install my windows. the first 2-3 months was okay, but then the 4th months i got BSOD, its always the same eror, IRQL less or equal. I was forced to clean install windows every couple of months to avoid this BSOD, rinse wash repeat.

Koolkat solved that, that apparently it was due to my atheros driver.

I dont wanna go through it again so now that im on a new clean install notebook, i'd like to learn where does koolkat and you and the BSOD team can read that error that koolkat was quoting.

is it from the dmp file from the dump folder generated by the SF diagnostic tool?

i'd like to learn how to read that before moving forward with updating my windows and installing programs.

===
The reason i want to learn is beacuse I'm confused as to how come the atheros wireless driver has leftover since i installed the wireless driver from the CD stock driver. and then I updated that through asus live-update utility (as suggested by the notebook manual). I did not get creative with anything at all.
===

so now.. (before the BSOD ever happen again), i'm on a fresh new installed notebook and hvnt update my windows or install many programs now. i'd like to know before i do those things how check whether i have (yet another) atheros driver leftover again or not..

may i ask how to do that? i wanted to know which file on the dump folder generated by SF Diag tool should i read to found that problem koolkat was quoting (or hopefully not found, since its a new machine).

i followed the tutorial here http://www.sevenforums.com/crash-lockup-debug-how/26584-configuring-debugging-tools.html

but when i typed cd debuggers on the command prompt it returned "the system cannot find the path specified", even though i followed the instruction verbatim including installing debbugger package on c:\debuggers

did i downloaded the incorrect debugging tools or smthn from this link? Download and Install Debugging Tools for Windows
i chose this one Download the Microsoft Windows SDK for Windows 7 and checked everything when i downloaded it.
i havent download this one Download Windows Symbol Packages
Do i have to download the windows symbol packages as well? and did i chose the wrong download link?

i use this tutorial http://www.sevenforums.com/crash-lockup-debug-how/26584-configuring-debugging-tools.html but i got stucked here C:\>cd debuggers
C:\debuggers>windbg.exe -IA

System not recognized internal or external command etc etc was what i got


again, truly sorry for the inconvenience and being all over the place


basically i just would like to know where on the dump folders did koolkat got this quote

Code:

fffff880`0a6515e8 fffff880`05d88c7eUnable to load image \SystemRoot\system32\DRIVERS\athrx.sys, Win32 error 0n2
*** WARNING: Unable to verify timestamp for athrx.sys
*** ERROR: Module load completed but symbols could not be loaded for athrx.sys
athrx+0x104c7e

Code:

lmvm athrx
start end module name
fffff880`05c84000 fffff880`05f2e000 athrx T (no symbols)
Loaded symbol image file: athrx.sys
Image path: \SystemRoot\system32\DRIVERS\athrx.sys
Image name: athrx.sys
Timestamp: Tue Oct 04 12:49:29 2011 (4E8AAC79)
CheckSum: 002B1FA7
ImageSize: 002AA000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4

terribly apologize for being really all over the place @arc and @koolkat77

cheers,

KP

 

[rovopio]

@arc if my post is too long and confusing, let me know i have edited it just now to make it more readable. Let me know if you still need the dump file from my fresh new SSD install notebook

cheers,

KP~!

 

[Arc]

Other than the dump file, how can you test the timestrap of the atheros driver?

After a clean install, there will be no leftover as the drive/partition is formatted.

 

[rovopio]

Other than the dump file, how can you test the timestrap of the atheros driver?

After a clean install, there will be no leftover as the drive/partition is formatted.

i think when you read my comment the 1st time, i havent finish editing it and it was still alll over the place so you didnt get my question, so im sorry for that.

terribly sorry for not being clear.

that is exactly what im asking, how to read the dmp file? on the folder generated by the SF diag tool there are txt files and dmp files. i assumed the error koolkat was quoting, koolkat found on the dmp file? is it?

i've followed the tutorial to learn how to read dmp file myself, but i got stuck while doing it. which is what i posted earlier. really sorry if its not clear. I've just recently edited my post actually to make it more concise for you to read.

the second part of your answer about the timestamp, i got it from koolkat quote

fffff880`0a6515e8 fffff880`05d88c7eUnable to load image \SystemRoot\system32\DRIVERS\athrx.sys, Win32 error 0n2 *** WARNING: Unable to verify timestamp for athrx.sys *** ERROR: Module load completed but symbols could not be loaded for athrx.sys athrx+0x104c7e

so i wanna know whether i have that error again on my fresh new machine or not

about this part of your reply " After a clean install, there will be no leftover as the drive/partition is formatted."

i wrote above...

Let me tell you the history of me using this notebook. Every couple of months i get BSOD. When i get BSOD i just clean install my windows. the first 2-3 months was okay, but then the 4th months i got BSOD, its always the same eror, IRQL less or equal. I was forced to clean install windows every couple of months to avoid this BSOD, rinse wash repeat.

Koolkat solved that, that apparently it was due to my atheros driver. My confusion was because ive installed the driver from the driver CD and i updated the driver the way asus manual told me to updated it. thru live update utility.

but every few months, i got the same BSOD. I dont wanna go through it again so now that im on a new clean install notebook, i'd like to learn where does koolkat and you and the BSOD team can read that error that koolkat was quoting.

is it from the dmp file from the dump folder generated by the SF diagnostic tool?

so basically every couple of months after using the notebook, i got BSOD, then i do clean install, rinse wash repeat. now i just installed SSD and im really tired of having clean install every few months due to that atheros timestamp driver koolkat found.


how can i read dmp file myself of my new notebook install is my question actually. and where did koolkat and you can find the problem i have? is it from the txt files or from the dmp files on that folder?


cheers,

KP!

 

[Arc]

Yes, the quoted part is form your dump file.

An IRQL Less or not Equal bsod may be saused by any driver, not necessarily the Atheros one.
At the same time, all the so called driver updating utilities are kinda craps. Moreover, ASUS bundled "utilities" are all craps. They never help you, but cause problems and conflicts. We avoid those, we suggest to avoid those. Hopefully this time there will be no more crashes caused by Atheros, specially in the absence of Kaspersky.

Reading a dump data properly needs a time and patience to learn. I guess you have got your windbg installed and configured? Now, follow it: http://www.sevenforums.com/crash-lockup-debug-how/277355-debugging-bsod-my-way.html

For practice, take any random dump from any of the threads and proceed. Compare your reading with the other peoples readings. Gradually you will get it.

 

[rovopio]

Yes, the quoted part is form your dump file.

An IRQL Less or not Equal bsod may be saused by any driver, not necessarily the Atheros one.
At the same time, all the so called driver updating utilities are kinda craps. Moreover, ASUS bundled "utilities" are all craps. They never help you, but cause problems and conflicts. We avoid those, we suggest to avoid those. Hopefully this time there will be no more crashes caused by Atheros, specially in the absence of Kaspersky.

Reading a dump data properly needs a time and patience to learn. I guess you have got your windbg installed and configured? Now, follow it: http://www.sevenforums.com/crash-lockup-debug-how/277355-debugging-bsod-my-way.html

For practice, take any random dump from any of the threads and proceed. Compare your reading with the other peoples readings. Gradually you will get it.

arc tq very much for helping me despite my hurdles of writing english in a clear and concise manner.

okay then, since SSD is fast i will clean install one more time and not install the asus bundled utilities since it's proven to be crap based on my own experience of updating and getting BSOD.

Last 2 question on this thread before i mark this solved... um,,

1) how do i install the new atheros driver then without that asus utility?

When i wanted to update the driver from Stock driver 9 0 0 222 to the latest one available on asus website 9 2 0 458 how should i do that? should i uninstall 9 0 0 222 first cleanly (including deleting leftover on registry), before installing the 9 2 0 458?

can i just override installation on top of the old one for this wireless atheros driver or uninstalling the old one first is really vital?


2) on that note how to uninstall a driver? i never know that. is it through device manager and click uninstall? is that it or is there other steps i have to take?

also when i right click uninstall from device manager there is a checkbox saying "delete software for this device". should i check that box?

 

[Arc]

Answer to your first question: If you execute the setup.exe, it will automatically update the existing driver.

Ansewr to the second question: Installation procedure depends on the format of driver file. If it is .exe one, just double click it. But if it is a .sys, follow http://www.sevenforums.com/tutorials/97061-driver-install-device-manager.html

And, it does not matter what pattern of windbg you are getting ... a part of SDK or a part of WDK. you will install the debugger tool only, so the package does not matter.

Before associating the dump files with windbg, what you have to do in the elivated command prompt, you have to stay on the proper root. I replied you in the other thread.

Even if the dumps are not associated with windbg, you can open windbg, then File > Open Crash Dump and browse to the dump and open it. The result will be the same.

 

[rovopio]

alrighty... so i checked out the dmp files myself from my old dump folders on the post#1 on this thread... there are 2 dmp files

033113-25989-01
031513-24710-01

i typed !analyze - V and IRQL less or equal comes out.

1 file written probable caused by afd.sys
another file written probable caused by ntkrnlmp.exe ( nt!KiTimerWaitTest+2b3 )

image =>

which thread should i go to understand more what it means? Also... why i couldn't find this error that koolkat founded on my dump files?

lmvm athrx start end module name fffff880`05c84000 fffff880`05f2e000 athrx T (no symbols) Loaded symbol image file: athrx.sys Image path: \SystemRoot\system32\DRIVERS\athrx.sys Image name: athrx.sys Timestamp: Tue Oct 04 12:49:29 2011 (4E8AAC79) CheckSum: 002B1FA7 ImageSize: 002AA000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4

the athryx.sys error. did i do any steps wrong...?


cheers,

KP!

 

[Arc]

It will not appear at itself. You need to dig the data to a depth to get it and for that you need a great lot of practice and time to devote on the program.