BSOD while reading something, error 0x000000d1

[clockup]

I was simply reading something I pasted into pastebin.com while listening to some music and I had a BSOD. Nothing much else to say.

I also had another BSOD which I attached as well which was when I turned on the computer, without logging in, and went away for a moment to get something to drink. When I came back and logged into my computer it told me I had a BSOD during the time I went away for a moment.

Please see attached files.

Thanks!

 

[koolkat77]

Welcome
Please upload all the files following the http://www.sevenforums.com/bsod-help-support/96879-blue-screen-death-bsod-posting-instructions.html

 

[koolkat77]

And apparently it seems that the cause of your BSOD is Atheros AR8121/AR8113/AR8114 PCI-E Ethernet Controller (NDIS6.20)

*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck D1, {72506c6b, 2, 0, fffff880016427d1}

*** WARNING: Unable to verify timestamp for L1E62x64.sys
*** ERROR: Module load completed but symbols could not be loaded for L1E62x64.sys
Probably caused by : L1E62x64.sys ( L1E62x64+760a )

Followup: MachineOwner
---------

1: kd> !analyze -v
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

DRIVER_IRQL_NOT_LESS_OR_EQUAL (d1)
An attempt was made to access a pageable (or completely invalid) address at an
interrupt request level (IRQL) that is too high.  This is usually
caused by drivers using improper addresses.
If kernel debugger is available get stack backtrace.
Arguments:
Arg1: 0000000072506c6b, memory referenced
Arg2: 0000000000000002, IRQL
Arg3: 0000000000000000, value 0 = read operation, 1 = write operation
Arg4: fffff880016427d1, address which referenced memory

Debugging Details:
------------------


READ_ADDRESS: GetPointerFromAddress: unable to read from fffff800020c5100
GetUlongFromAddress: unable to read from fffff800020c51c0
 0000000072506c6b Nonpaged pool

CURRENT_IRQL:  2

FAULTING_IP: 
ndis!NdisQueryNetBufferPhysicalCount+11
fffff880`016427d1 443b4228        cmp     r8d,dword ptr [rdx+28h]

CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  WIN7_DRIVER_FAULT

BUGCHECK_STR:  0xD1

PROCESS_NAME:  firefox.exe

TRAP_FRAME:  fffff88011270740 -- (.trap 0xfffff88011270740)
NOTE: The trap frame does not contain all registers.
Some register values may be zeroed or incorrect.
rax=0000000000000000 rbx=0000000000000000 rcx=fffffa8004a27850
rdx=0000000072506c43 rsi=0000000000000000 rdi=0000000000000000
rip=fffff880016427d1 rsp=fffff880112708d8 rbp=fffffa8007e1f030
 r8=000000002d888bba  r9=0000000050002391 r10=0000000000000000
r11=fffffa80053f2000 r12=0000000000000000 r13=0000000000000000
r14=0000000000000000 r15=0000000000000000
iopl=0         nv up ei pl nz na pe nc
ndis!NdisQueryNetBufferPhysicalCount+0x11:
fffff880`016427d1 443b4228        cmp     r8d,dword ptr [rdx+28h] ds:00000000`72506c6b=????????
Resetting default scope

LAST_CONTROL_TRANSFER:  from fffff80001e8c1e9 to fffff80001e8cc40

STACK_TEXT:  
fffff880`112705f8 fffff800`01e8c1e9 : 00000000`0000000a 00000000`72506c6b 00000000`00000002 00000000`00000000 : nt!KeBugCheckEx
fffff880`11270600 fffff800`01e8ae60 : 00001460`00000000 00000000`00000103 00000000`00000002 00001460`00000000 : nt!KiBugCheckDispatch+0x69
fffff880`11270740 fffff880`016427d1 : fffff880`0486e60a 00001460`00000000 00000000`00000000 fffffa80`04e0f000 : nt!KiPageFault+0x260
fffff880`112708d8 fffff880`0486e60a : 00001460`00000000 00000000`00000000 fffffa80`04e0f000 fffffa80`07e1f030 : ndis!NdisQueryNetBufferPhysicalCount+0x11
fffff880`112708e0 00001460`00000000 : 00000000`00000000 fffffa80`04e0f000 fffffa80`07e1f030 fffffa80`053f8000 : L1E62x64+0x760a
fffff880`112708e8 00000000`00000000 : fffffa80`04e0f000 fffffa80`07e1f030 fffffa80`053f8000 00000000`000001c0 : 0x00001460`00000000


STACK_COMMAND:  kb

FOLLOWUP_IP: 
L1E62x64+760a
fffff880`0486e60a ??              ???

SYMBOL_STACK_INDEX:  4

SYMBOL_NAME:  L1E62x64+760a

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: L1E62x64

IMAGE_NAME:  L1E62x64.sys

DEBUG_FLR_IMAGE_TIMESTAMP:  4a90ceb9

FAILURE_BUCKET_ID:  X64_0xD1_L1E62x64+760a

BUCKET_ID:  X64_0xD1_L1E62x64+760a

Followup: MachineOwner
---------

1: kd> lmvm L1E62x64
start             end                 module name
fffff880`04867000 fffff880`04879000   L1E62x64 T (no symbols)           
    Loaded symbol image file: L1E62x64.sys
    Image path: \SystemRoot\system32\DRIVERS\L1E62x64.sys
    Image name: L1E62x64.sys
    Timestamp:        Sun Aug 23 11:08:09 2009 (4A90CEB9)
    CheckSum:         0001697B
    ImageSize:        00012000
    Translations:     0000.04b0 0000.04e4 0409.04b0 0409.04e4

Update the driver following this method:

Sometimes drivers remain, not completely uninstalled. Follow this tutorial for complete removal of drivers of the particular program:

• How to Clean Left Over Driver Files with Driver Sweeper

Links for update: Driver Reference Table - L1E62x64.sys

If its wireless, match your device from here:

• ATHEROS Wireless drivers for Windows

If its not a wireless, match your device from here:

• ATHEROS Network drivers for Windows

 

[clockup]

Thanks for the quick reply. Please see the attached files.

In the mean time I'll update that specific driver. Are both BSODs caused by the same driver?

 

[koolkat77]

Can you tell me what's all this?

# Copyright (c) 1993-2009 Microsoft Corp.
#
# This is a sample HOSTS file used by Microsoft TCP/IP for Windows.
#
# This file contains the mappings of IP addresses to host names. Each
# entry should be kept on an individual line. The IP address should
# be placed in the first column followed by the corresponding host name.
# The IP address and the host name should be separated by at least one
# space.
#
# Additionally, comments (such as these) may be inserted on individual
# lines or following the machine name denoted by a '#' symbol.
#
# For example:
#
#      102.54.94.97     rhino.acme.com          # source server
#       38.25.63.10     x.acme.com              # x client host

# localhost name resolution is handled within DNS itself.
#	127.0.0.1       localhost
#	::1             localhost
127.0.0.1 hl2rcv.adobe.com
127.0.0.1 adobeereg.com
127.0.0.1 activate.adobe.com
127.0.0.1 practivate.adobe.com
127.0.0.1 ereg.adobe.com
127.0.0.1 activate.wip3.adobe.com
127.0.0.1 ereg.wip3.adobe.com
127.0.0.1 wip3.adobe.com
127.0.0.1 activate-sea.adobe.com
127.0.0.1 wwis-dubc1-vip60.adobe.com
127.0.0.1 activate-sjc0.adobe.com
127.0.0.1 3dns.adobe.com
127.0.0.1 3dns-1.adobe.com
127.0.0.1 3dns-2.adobe.com
127.0.0.1 3dns-3.adobe.com
127.0.0.1 3dns-4.adobe.com
127.0.0.1 adobe-dns.adobe.com
127.0.0.1 adobe-dns-1.adobe.com
127.0.0.1 adobe-dns-2.adobe.com
127.0.0.1 adobe-dns-3.adobe.com
127.0.0.1 adobe-dns-4.adobe.com
127.0.0.1 adobe-dns-5.adobe.com
127.0.0.1 hh-software.com
127.0.0.1 www.hh-software.com
127.0.0.1 activate.adobe.de
127.0.0.1 practivate.adobe.de
127.0.0.1 ereg.adobe.de
127.0.0.1 activate.wip3.adobe.de

 

[clockup]

I'm not sure what to say. It's my hosts file? Is there something wrong?

 

[koolkat77]

They're a bunch of activation block for adobe and Microsoft products

Where did you get your copy of windows 7 from?

 

[NoelDP]

Installation is probably counterfeit - ASUS Key on what appears to be a retail ASUS motherboard.


Please follow this tutorial and post an MGADiag report

http://www.sevenforums.com/windows-updates-activation/234159-windows-genuine-activation-issue-posting-instructions.html


Please also state the Version and Edition of Windows quoted on your COA sticker (if you have one) on the case of your machine (or inside the battery compartment), but do NOT quote the Key on the sticker!
http://www.microsoft.com/en-us/howtotell/Hardware.aspx

Ignore errors produced when clicking on the Copy button - they simply mean that the tool could not create the backup files for some reason. The data is still copied to the clipboard for pasting to your response.