Solved BSOD upon uninstalling avast & installing kaspersky

[Mudfiren]

Hi everyone,

Recently i bought kaspersky for my laptop, so i decided to use it for my CPU too

I was initially using avast, which was a conflict to kaspersky, so i tried to uninstall it, but failed

So i used the avast uninstaller to uninstall it and installed kaspersky

Next day the CPU gets BSOD upon entering the user page

Ive attached the dump files in this thread

Thanks for all your help

 

[x BlueRobot]

Welcome to the forums Mudfiren,

There seems to be two key files missing from the folder, the MSINFO32 and the systeminfo.txt file. Please follow these instructions to upload both files.

MSINFO32:

1. Start rb:
2. Type: msinfo32
3. File, Save
4. Place the file into a zipped folder

Systeminfo.txt:

1. Start rb:
2. Type: cmd
3. Right-Click cmd -> Run as Adminstrator
4. Accept UAC prompt (if shown)
5. Enter the following command -> systeminfo.exe>C:\systeminfo.txt
6. Close Command Prompt
7. Go to the C:\ and find the file called "systeminfo"
8. Place in a zipped folder

Once the steps have been completed, then please attach the two zipped folders in your next post - http://www.sevenforums.com/tutorials/9733-screenshots-files-upload-post-seven-forums.html

 

[Mudfiren]

Thank you x BlueRobot. I've attached the two folders as per your request

 

[x BlueRobot]

Thanks for the files

[COLOR="Red"]BugCheck D1[/COLOR], {4, 2, [COLOR="Blue"]0[/COLOR], [COLOR="SeaGreen"]89a6a5fc[/COLOR]}

Unable to load image \SystemRoot\system32\DRIVERS\athr.sys, Win32 error 0n2
*** WARNING: Unable to verify timestamp for athr.sys
*** ERROR: Module load completed but symbols could not be loaded for athr.sys
Probably caused by : [COLOR="red"]athr.sys[/COLOR] ( athr+3a5c1 )

The bugcheck suggests that device drivers have been referencing invalid memory addresses, and then attempting to read from these addresses.

TRAP_FRAME:  8b941bac -- ([COLOR="SeaGreen"].trap 0xffffffff8b941bac[/COLOR])
ErrCode = 00000000
eax=00000000 [COLOR="red"]ebx=00000000[/COLOR] ecx=89a75b30 edx=871f4818 esi=870fa028 edi=89a75b30
eip=89a6a5fc esp=8b941c20 ebp=8b941c2c iopl=0         nv up ei ng nz na pe nc
cs=0008  ss=0010  ds=0023  es=0023  fs=0030  gs=0000             efl=00010286
ndis!NdisFreeTimerObject+0x18:
[COLOR="seagreen"]89a6a5fc[/COLOR] 8b4b04          mov     ecx,dword ptr [[COLOR="Red"]ebx+4[/COLOR]] ds:0023:00000004=????????
Resetting default scope

It seems the address was a NULL pointer, which is a illegal operation.

1: kd> [COLOR="SeaGreen"]lmvm athr[/COLOR]
start    end        module name
92677000 92787000   athr     T (no symbols)           
    Loaded symbol image file: athr.sys
    Image path: \SystemRoot\system32\DRIVERS\athr.sys
    Image name: athr.sys
    Timestamp:        [COLOR="red"]Tue Jun 09 19:04:52 2009[/COLOR] (4A2EA444)
    CheckSum:         0011A043
    ImageSize:        00110000
    Translations:     0000.04b0 0000.04e4 0409.04b0 0409.04e4

Your Atheros Extensible Wireless LAN driver for CB42/CB43/MB42/MB43 Network Adapter seems to be a possible cause, and is very outdated, please update from here - ATHEROS drivers for Microsoft Windows (Atheros?????)

Remove:

Start Menu\Programs\Kaspersky Internet Security 2013

Kaspersky Internet Security is known to cause BSODs, please remove the program using the Kaspersky Removal Tool. Furthermore, Internet Security are known to conflict with the network drivers.

Install and perform full scans with:

• Malwarebytes : Free anti-malware download <-- You already have this
• Microsoft Security Essentials | Protect against viruses, spyware, and other malware

   Information

Remember to install the free version of Malwarebytes not the free trail; untick the free trial box during installation. MSE is the most lightweight and compatible with the Windows 7 operating system

You can also view this thread for a complete free and lightweight security protection combination:

• http://www.sevenforums.com/system-security/206705-good-free-system-security-combination.html

Remove:

Start Menu\Programs\DAEMON Tools Lite
Start Menu\Programs\DAEMON Tools Pro

Download SPTD standalone installer from Disk-Tools.com, and execute the downloaded file as guided below :

• Double click to open it.
• Click this button only:
• 
• If it is grayed out, as in the picture, there is no more SPTD in your system, and you just close the window.

Daemon Tools uses a driver called sptd.sys, which is known to cause BSODs with Windows 7. It is recommend you remove this program, and use Windows own in-built features or ImgBurn.

 

[Mudfiren]

Thank you very much! Though it's disappointing i can't use kaspersky. There is no way i can use kaspersky without bsod?

 

[x BlueRobot]

There's no direct evidence in this particular that Kaspersky is causing the BSODs, but there is a strong possibility with the network drivers being blamed and it is a well known cause for BSODs. I've got another thread at the moment where Kaspersky is causing problems.

 

[sonotatechie]

Hello everyone, I am reading above and wanting to know if this BSOD is still a problem with current versions of Kaspersky? I was using AVAST free and now, after what seems I may have had a worm in my email, and thinking best to upgrade to Kaspersky full Internet Security for laptop and android. Apologies, I am totally new to trying to do my own tech support so I appreciate any input - I see there were in the past problems with both uninstalling AVAST and also with installing Kaspersky and subsequent BSOD could result with either in the past. Sure I'd rather avoid this.
Thank you for your patience with a newbie