Solved BSOD Win7. No issue in SafeMode/Networking, crashes 2 min after login

[wsb252]

Dell Studio XPS w/ 6GB RAM. Has been running fine for 2 years.
Yesterday, started giving a BSOD of IRQ1_LEVEL_LESS_THAN_OR_EQUAL.

No issues when running in SafeMode w/ networking, but when logging in in normal mode, about 2 minutes after doing the login, it crashes EVERY TIME.


- I've rolled back to a restore point from 1 week ago. No luck.
- I've tried to analyze the crash files myself using WinDbg, but I've not found anything interesting (though it is likely my lack of skill at using WinDbg).
- No issues in Safe Mode or Safe Mode w/ Networking

Trying to avoid a reinstall of the OS, but wanted to see if anyone could help interpret the crash files. My guess is that it is a 3rd party driver that is causing the crash, but need help identifying which one, if possible. Not sure why it would start yesterday afternoon for some unknown reason.

Any help would be appreciated. Dump files are attached

 

[Northernsoul55]

Hi

From your crash logs:

STOP 0x0000000A: IRQL_NOT_LESS_OR_EQUAL  
Usual causes:  Kernel mode driver, System Service, BIOS, Windows, Virus scanner, Backup tool, compatibility

Please uninstall the programs Acronis / Acronis true image.

Looks like you recently installed very old webcam software?
It is this driver which is contributing to your BSOD's:

Driver: [COLOR=red]P0630Vid.sys[/COLOR]
Dated: Fri Nov 11 05:55:57 [COLOR=red]2005[/COLOR]
Refers to: Creative Labs WebCam driver

Uninstall the program, then re-install.
Update web-site: :ar: Creative Worldwide Support

Also Update these drivers:

[COLOR=red]usbaapl64.sys[/COLOR]
Apple iPod/iPhone Mobile USB device driver

:ar: http://www.apple.com/downloads/

Driver: [COLOR=red]k57nd60a.sys[/COLOR]
Dated: Fri Oct 16 11:29:38 [COLOR=red]2009[/COLOR]
Refers to: Broadcom NetLink Gigabit Ethernet NDIS6.x Unified Driver

:ar: http://www.broadcom.com/support/ethernet_nic/downloaddrivers.php
:ar: Drivers & Downloads | Dell US

Post back any progress.

cheers

Dave

 

[wsb252]

Thanks for your help:

1. Removed Acronis True Image. No change (e.g. still crashing)
2. Removed Creative WebCam software and driver. No change. (Don't think they make a Win7 driver for my webcam so I might have to go get a new one)
3. Updated the Broadcom Driver. Stable so far . . . .
4. Unable to run the Dell Driver Manager program due to it complaining about needing .NET 4 - yet I have .NET 4 installed.
5. Unable to figure out how to refresh the iPod USB driver.

But, things appear stable/resolved as of #3, so I'm going to watch things for a couple of days and confirm.

Greatly appreciate the help.

 

[wsb252]

Spoke too soon. Crashes started up again. Updated log files

 

[Northernsoul55]

Hi

From your latest crash logs:

*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************
Use !analyze -v to get detailed debugging information.
BugCheck 1E, {ffffffffc0000005, fffff80002f1416b, 0, 1000002e1}
Probably caused by : [COLOR=red]ntkrnlmp.exe[/COLOR] ( nt!output_l+31b )
Followup: MachineOwner
---------
3: kd> !analyze -v
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************
KMODE_EXCEPTION_NOT_HANDLED (1e)

The analysis is somewhat inconclusive and is not showing cause or any misbehaving drivers.
Usually a ntkrnlmp.exe fault points to memory or harddrive issues (see tests below)

Please update these drivers:

Driver: [COLOR=red]AtiPcie.sys[/COLOR]
Dated: Mon Aug 24 09:25:26 [COLOR=red]2009[/COLOR]
Refers to: ATI PCIE Driver for ATI PCIE chipset or 
ATI PCI Express (3GIO) Filter

:ar: http://support.amd.com/us/Pages/AMDSupportHub.aspx

Driver: [COLOR=red]RTKVHD64.sys[/COLOR]
Dated: Tue Nov 17 12:13:00 [COLOR=red]2009[/COLOR]
Refers to: Realtek High Definition Audio Function Driver

:ar: http://www.realtek.com.tw/downloads/downloadsView.aspx?Langid=1&PNid=8&PFid=14&Level=3&Conn=2

Driver: [COLOR=red]atikmpag.sys[/COLOR]
Dated: Thu Jan 14 02:10:57 [COLOR=red]2010 [/COLOR]
Refers to: ATI Video driver

:ar: http://support.amd.com/us/Pages/AMDSupportHub.aspx

-------------------------------------------------------------------------------------------
Update the BIOS if possible, you already have Version A06 installed,
but looks like it may have been revised on a later release:

[BIOS Information (Type 0) - Length 24 - Handle 0000h]
  Vendor                        Dell Inc.
  BIOS Version                  [COLOR=red]A06[/COLOR]
  BIOS Starting Address Segment e000
  BIOS Release Date            [COLOR=red] 09/10/2010[/COLOR]
  BIOS ROM Size                 100000

File Name: S7100A06.EXE
Release Date: 2/16/2011
Importance: Recommended
Version: A06

:ar: http://www.dell.com/support/drivers/us/en/19/Product/studio-xps-7100

---------------------------------------------------------------------------------------
Carry out these tests and post back any results:



Run SFC to check the integrity of all Windows 7 system files:

• Click on Start > Type in search cmd
  Right-click cmd after results are displayed and Run as Administrator
  Type SFC /scannow at the prompt
  (Note: There is a space between SFC and /scannow)

:ar: SFC Tutorial

   Note

Select option two. If any problems are found, run the scan 3 times and immediately
reboot the computer after each scan.

Also run chkdsk in an elevated command prompt in order to check for file system errors
and bad sectors on your HDD:

• Click on Start>Type in search cmd
• Right click cmd and Run as Administrator
• At the command prompt please type: chkdsk /f/r
  (There is a space between chkdsk and /f/r)

:ar: Chkdsk Tutorial

Also please down and run the Dell Diagnostic Utility to check out your system:

:ar: http://www.dell.com/support/Diagnostics/us/en/19/

Check to see if you have all the latest Windows updates installed?
(With exception of your Video/graphics drivers)

Problem devices:

Device: security processor loader driver 
Device PNP ID: root\legacy_spldr\0000

Scan the system for possible virus infection:

:ar: http://www.sevenforums.com/tutorials/166445-windows-defender-offline.html
:ar: http://support.kaspersky.com/5350?vs=s88446#s88446

Also please download and run Malwarebytes:


Download

   Note

Do not start the free trial of Malware Bytes, deselect that option when prompted.

Run a full scan once downloaded, installed and updated.

Check your memory for errors:

Take memtest. Run for 8 passes and test each stick in a know good slot for an additional 6 passes.
:ar: http://www.sevenforums.com/tutorials/105647-ram-test-memtest86.html

   Tip

Run these tests overnight

Cheers

Dave

 

[wsb252]

OK. I ended up re-installing Win7 back to a vanilla install.
I installed Avast Anitvirus immediately and it started saying "URL.Mal" virus and blocking outbound requests. So, I was obviously infected with something.
MalwareBytes found some Trojan viruses on my sons' Internet Temp Files from the old installation and cleaned them.
Still getting URL.Mal popups. No other virus signatures found. Still crashing in normal mode.
Finally downloaded and ran aswMBR and it detected a RootKit Virus, but could not clean it.
Installed MalwareBytes RootKit Detector Beta and it was able to clean the virus off my machine.
Several virus scans of Avast, MalwareBytes, TrendMicro ATTK and a couple of other different virus/RootKit scanners later, and I am now virus (and crash) free.

Closing as solved, but the root of my BSOD crashs was a RootKit virus. I greatly appreciate the crashfile analysis help from the community. Thanks to all.

 

[Northernsoul55]

Ahhhh....And if you had just followed my advice in post #5 and scanned for viruses,
then a re-install of Win 7 wouldnt have been neccessary

Glad its now sorted

Please mark the thread as solved thanks.

Cheers

Dave