BSOD [Windows 7 x64]

[Deathless]

Hi,

Before i start i want you to know that i asked for help 4 weeks ago. After 4 weeks i got another BSOD. This is the thread. This BSOD happend while i was watching a movie in MPC-HC. Using only "ffdshow tryouts project" and MPC-HC, no other codecs/filters. The minidump is attached.

Thanks in advance!

 

[richc46]

I verified the excellent advice that you were given in the prior thread. In addition to the advice given in that thread please uninstall your virtualization program, Daemon, Alcohol 120% etc. Then use the uninstall tool to remove the SPTD Driver.

I am not doing a complete analysis because, I will be on a travel status in the very near future and may not be able to assist you further. Others may help.
For now uninstall the program and sptd, with the uninstall tool, which is a known problem.

http://www.duplexsecure.com/en/downloads

 

[Deathless]

Ok. Will do that. The thing is that this isn't happening every day so i can now if this is really the problem. Only from month to month.

 

[zigzag3143]

Ok. Will do that. The thing is that this isn't happening every day so i can now if this is really the problem. Only from month to month.

This crash was caused by your Atheros Lan/wifi driver. I would download a fresh driver and install it

Let us know if you need further assistance

Ken

Microsoft (R) Windows Debugger Version 6.11.0001.404 X86
Copyright (c) Microsoft Corporation. All rights reserved.


Loading Dump File [C:\Users\K\Desktop\072110-21824-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available

Symbol search path is: SRV*C:\symbols*http://msdl.microsoft.com/download/symbols;srv*e:\symbols
*http://msdl.microsoft.com/download/symbols
Executable search path is: 
Windows 7 Kernel Version 7600 MP (4 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 7600.16385.amd64fre.win7_rtm.090713-1255
Machine Name:
Kernel base = 0xfffff800`03017000 PsLoadedModuleList = 0xfffff800`03254e50
Debug session time: Wed Jul 21 03:31:48.252 2010 (GMT-4)
System Uptime: 0 days 0:08:23.250
Loading Kernel Symbols
.

Press ctrl-c (cdb, kd, ntsd) or ctrl-break (windbg) to abort symbol loads that take too long.
Run !sym noisy before .reload to track down problems loading symbols.

..............................................................
................................................................
.......................
Loading User Symbols
Loading unloaded module list
....
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck D1, {28, 2, 0, fffff880014c5c1e}

Unable to load image \SystemRoot\system32\DRIVERS\L1E60x64.sys, Win32 error 0n2
*** WARNING: Unable to verify timestamp for L1E60x64.sys
*** ERROR: Module load completed but symbols could not be loaded for L1E60x64.sys
Unable to load image \SystemRoot\system32\drivers\afwcore.sys, Win32 error 0n2
*** WARNING: Unable to verify timestamp for afwcore.sys
*** ERROR: Module load completed but symbols could not be loaded for afwcore.sys
Probably caused by : L1E60x64.sys ( L1E60x64+6fa8 )

Followup: MachineOwner
---------

2: kd> !analyze -v
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

DRIVER_IRQL_NOT_LESS_OR_EQUAL (d1)
An attempt was made to access a pageable (or completely invalid) address at an
interrupt request level (IRQL) that is too high.  This is usually
caused by drivers using improper addresses.
If kernel debugger is available get stack backtrace.
Arguments:
Arg1: 0000000000000028, memory referenced
Arg2: 0000000000000002, IRQL
Arg3: 0000000000000000, value 0 = read operation, 1 = write operation
Arg4: fffff880014c5c1e, address which referenced memory

Debugging Details:
------------------


READ_ADDRESS: GetPointerFromAddress: unable to read from fffff800032bf0e0
 0000000000000028 

CURRENT_IRQL:  2

FAULTING_IP: 
ndis! ?? ::FNODOBFM::`string'+14dd
fffff880`014c5c1e 8b4728          mov     eax,dword ptr [rdi+28h]

CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT

BUGCHECK_STR:  0xD1

PROCESS_NAME:  uTorrent.exe

TRAP_FRAME:  fffff880065c6600 -- (.trap 0xfffff880065c6600)
NOTE: The trap frame does not contain all registers.
Some register values may be zeroed or incorrect.
rax=0000000000000000 rbx=0000000000000000 rcx=0000000000000036
rdx=fffffa800a33e030 rsi=0000000000000000 rdi=0000000000000000
rip=fffff880014c5c1e rsp=fffff880065c6790 rbp=fffffa800bb0b2a0
 r8=fffffa800bf4a570  r9=0000000000000001 r10=0000000000000000
r11=fffffa800750e1a0 r12=0000000000000000 r13=0000000000000000
r14=0000000000000000 r15=0000000000000000
iopl=0         nv up ei pl nz na po nc
ndis! ?? ::FNODOBFM::`string'+0x14dd:
fffff880`014c5c1e 8b4728          mov     eax,dword ptr [rdi+28h] ds:7820:00000000`00000028=????????
Resetting default scope

LAST_CONTROL_TRANSFER:  from fffff80003088469 to fffff80003088f00

STACK_TEXT:  
fffff880`065c64b8 fffff800`03088469 : 00000000`0000000a 00000000`00000028 00000000`00000002 00000000`00000000 : nt!KeBugCheckEx
fffff880`065c64c0 fffff800`030870e0 : fffffa80`0bf4a518 fffffa80`0a33e030 fffffa80`0bf71ff0 00000000`00000000 : nt!KiBugCheckDispatch+0x69
fffff880`065c6600 fffff880`014c5c1e : fffffa80`0a12e640 fffffa80`0bb0b2a0 00000000`000000a0 00000000`00000000 : nt!KiPageFault+0x260
fffff880`065c6790 fffff880`06194fa8 : fffffa80`0750e1a0 fffff880`03ea16fc fffffa80`0bf4a570 fffffa80`0bb0b2a0 : ndis! ?? ::FNODOBFM::`string'+0x14dd
fffff880`065c6830 fffffa80`0750e1a0 : fffff880`03ea16fc fffffa80`0bf4a570 fffffa80`0bb0b2a0 fffffa80`0bf72180 : L1E60x64+0x6fa8
fffff880`065c6838 fffff880`03ea16fc : fffffa80`0bf4a570 fffffa80`0bb0b2a0 fffffa80`0bf72180 fffffa80`000001c0 : 0xfffffa80`0750e1a0
fffff880`065c6840 fffffa80`0bf4a570 : fffffa80`0bb0b2a0 fffffa80`0bf72180 fffffa80`000001c0 00000000`00000000 : afwcore+0x3b6fc
fffff880`065c6848 fffffa80`0bb0b2a0 : fffffa80`0bf72180 fffffa80`000001c0 00000000`00000000 00000000`00000000 : 0xfffffa80`0bf4a570
fffff880`065c6850 fffffa80`0bf72180 : fffffa80`000001c0 00000000`00000000 00000000`00000000 00000000`00000000 : 0xfffffa80`0bb0b2a0
fffff880`065c6858 fffffa80`000001c0 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0xfffffa80`0bf72180
fffff880`065c6860 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 fffffa80`0c9717c0 : 0xfffffa80`000001c0


STACK_COMMAND:  kb

FOLLOWUP_IP: 
L1E60x64+6fa8
fffff880`06194fa8 ??              ???

SYMBOL_STACK_INDEX:  4

SYMBOL_NAME:  L1E60x64+6fa8

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: L1E60x64

IMAGE_NAME:  L1E60x64.sys

DEBUG_FLR_IMAGE_TIMESTAMP:  4869eab8

FAILURE_BUCKET_ID:  X64_0xD1_L1E60x64+6fa8

BUCKET_ID:  X64_0xD1_L1E60x64+6fa8

Followup: MachineOwner
---------

 

[Deathless]

What Atheros Lan/wifi driver? My internet connection is based on usb. I don't even have a laptop.

 

[zigzag3143]

What Atheros Lan/wifi driver? My internet connection is based on usb. I don't even have a laptop.

Probably caused by : L1E60x64.sys

All I know is that L1E60x64.sys is the driver for Atheros Lan driver

Its being loaded for some reason

Ken

 

[Tews]

Do a global search for L1E60x64.sys and remove it...

 

[zigzag3143]

What Atheros Lan/wifi driver? My internet connection is based on usb. I don't even have a laptop.

Probably caused by : L1E60x64.sys

All I know is that L1E60x64.sys is the driver for Atheros Lan driver

Its being loaded for some reason

also listed is your afwcore.sys (Agnitum Firewall Core Driver/Agnitum Ltd.) it could also be partially at fault

Ken

 

[Deathless]

I couldn't find any of this files on my sistem. I searched everywhere. I used windows's search function and Total Commander with no results. Do you know any good driver manager?

 

[richc46]

Run as administrator, in a cmd prompt type driverquery.
http://www.sevenforums.com/tutorials/11841-run-administrator.html

 

[Deathless]

Then what? There's a big list of drivers with no paths or any details.

 

[richc46]

That will just verify that it is actually on your system. I thought that you questioned that fact.

 

[Deathless]

Well, there wasn't any Agnitum driver there.

 

[Tews]

The driver you need to look for is L1E60x64.sys ...

 

[Deathless]

I searched everywhere!! There is no L1E60x64.sys

 

[Tews]

Please follow the instructions in this guide... it will give us more information than a single .dmp file....

Blue Screen of Death (BSOD) Posting Instructions

 

[Deathless]

Is Windows 7 . . .
- x86 (32-bit) or x64 ?
- the original installed OS on the system?
- an OEM or full retail version?
- OEM = came pre-installed on system
- Full Retail = you purchased it from retailer

- What is the age of system (hardware)?
- What is the age of OS installation (have you re-installed the OS?

The files are attached. The perfmon /report didn't worked. It took longer than 60 seconds.

1. x64
2. Yes.
3.No
4.Yes, retail.
5. 2 years old.
6. Original Install Date: 10/19/2009, 3:31:19 AM
​

 

[Jonathan_King]

Looks like your SpeedTouch drivers are the cause. Please update or remove them.

Remove any CD virtualization programs such as Daemon Tools and Alcohol 120%. They use a driver, found in your dmp, sptd.sys, that is notorious for causing BSODs. Use this SPTD uninstaller when you're done: DuplexSecure - Downloads

...Summary of the Dumps:

[font=lucida console]
Built by: 7600.16539.amd64fre.win7_gdr.100226-1909
Debug session time: Mon Jul 19 16:57:12.349 2010 (UTC - 4:00)
System Uptime: 1 days 11:33:44.097
BugCheck D1, {4c, 2, 0, fffff880051294d7}
*** WARNING: Unable to verify timestamp for stbus.sys
*** ERROR: Module load completed but symbols could not be loaded for stbus.sys
Probably caused by : stbus.sys ( stbus+34d7 )
BUGCHECK_STR:  0xD1
PROCESS_NAME:  System
[/font]

 

[Deathless]

Ah, Speedtouch is the problem 100%. When i remove the USB my computer crashes. But, unfortunately, i can't remove this drivers. I will buy another modem. Thank you for assistance!

 

[Jonathan_King]

Have you tried using Safe Mode?