Solved ntoskrnl.exe+75b80 BSOD every few days

[Khanzori]

Hello,

For a few weeks i have been having BSOD errors.

I tried searching for help on google but i didn't find anything useful.

When using blue screen viewer it says it's mostly caused by ntoskrnl.exe but I am not sure if it's correct, this mostly happens when playing games.

I also attached .dmp files of the latest crashes.

 

[YoYo155]

Welcome to SF .

Limited set of information only makes the task at hand harder to resolve, please follow the instructions
and help us help you. :ar:http://www.sevenforums.com/bsod-help-support/96879-blue-screen-death-bsod-posting-instructions.html

What I did manage to get was issues with your Internet Adapter being very old and Kaspersky contributing to the mix.

lmvm athrx
fffff880`05e03000 fffff880`05f89000   athrx    T (no symbols)           
    Loaded symbol image file: athrx.sys
    Image path: \SystemRoot\system32\DRIVERS\athrx.sys
    Image name: athrx.sys
    Browse all global symbols  functions  data
    Timestamp:        [COLOR=Red][U][B]Wed Nov 24 02:11:58 2010[/B][/U][/COLOR] (4CEC584E)

• Driver Reference Table - athrx.sys

This link would have been more specific if I had the proper information; :: ATHEROS drivers for Microsoft Windows :: Please update.

Remove Kaspersky and install Microsoft Security Essentials as a reliable alternative.

Please upload the rest of the files generated and keep us posted .

 

[Khanzori]

Alright, i uninstalled Kaspersky and installed MS Security Essentials.

I also checked to see if there were any updates for the tp-link adapter driver and it couldn't find any new updates.

Also attached the files the diagnostic tool got to this post.

 

[Khanzori]

It seems it has gotten worse now.

It blue screened twice today while i was playing Battlefield 3 and both times when it restarted it couldn't even get into windows and blue screened again, then windows started.

I attached the .dmp files to this post

 

[YoYo155]

Thanks for the feedback .

One of the bugchecks point once again to your PCI wireless adapter.
Which sub-model is it out of the three?
View attachment 286921

The other shows an increased activity with ataport.sys which is very vulnerable to a special kind
of malicious software named a root-kit.

0xfffff80000b9c7d8 : 0xfffff8800110c1a0 : ataport!WPP_MAIN_CB
0xfffff80000b9c808 : 0xfffff880010ff436 : ataport!IdeCompleteScsiIrp+0x62
0xfffff80000b9c838 : 0xfffff880010ff25e : ataport!IdeCommonCrbCompletion+0x5a
0xfffff80000b9c848 : 0xfffff88001101b6f : ataport!IdeDispatchChannelRequest+0xef
0xfffff80000b9c868 : 0xfffff880010f9e32 : ataport!IdeTranslateCompletedRequest+0x236
0xfffff80000b9c8b8 : 0xfffff880011087ba : ataport!PortAvioSchedulerTransferBatch+0x1ba
0xfffff80000b9c8f8 : 0xfffff88001100352 : ataport!IdeStartNextDeviceRequest+0x18e
0xfffff80000b9c938 : 0xfffff88000c87600 : atapi!AtapiHwStartIo+0x10
0xfffff80000b9c968 : 0xfffff8800110c1a0 : ataport!WPP_MAIN_CB
0xfffff80000b9c998 : 0xfffff88001102821 : ataport!IdeProcessCompletedRequests+0x4d5
0xfffff80000b9c9c0 : 0xfffff80003243e80 : nt!KiInitialPCR+0x180
0xfffff80000b9c9f0 : 0xfffff80000b9cc38 : 0xfffff800030c088a : nt!KiIdleLoop+0x5a
0xfffff80000b9c9f8 : 0xfffff80003243e80 : nt!KiInitialPCR+0x180
0xfffff80000b9ca18 : 0xfffff88001102307 : ataport!IdeSeverCompletedList+0x1b7
0xfffff80000b9ca58 : 0xfffff88001102ad5 : ataport!IdeGetInterruptState+0x39
0xfffff80000b9cac8 : 0xfffff88001102120 : ataport!IdePortCompletionDpc+0x1a8
0xfffff80000b9ba30 : 0xfffff800032d6dd4 : "nt!BBTBuffer <PERF> (nt+0x283dd4)"
0xfffff80000b9ba38 : 0xfffff880010f6000 : "ataport!ChannelSyncAcpiEvalMethod <PERF> (ataport+0x0)"
0xfffff80000b9ba40 : 0xfffff8800110d780 : "ataport!__PchSym_ <PERF> (ataport+0x17780)"
0xfffff80000b9ba48 : 0xfffff880010f6000 : "ataport!ChannelSyncAcpiEvalMethod <PERF> (ataport+0x0)"
0xfffff80000b9ba50 : 0xfffff8800110d75c : "ataport!__PchSym_ <PERF> (ataport+0x1775c)"
0xfffff80000b9ba58 : 0xfffff880010f6000 : "ataport!ChannelSyncAcpiEvalMethod <PERF> (ataport+0x0)"
0xfffff80000b9ba60 : 0xfffff8800110d234 : "ataport!__PchSym_ <PERF> (ataport+0x17234)"
0xfffff80000b9ba68 : 0xfffff880010f6000 : "ataport!ChannelSyncAcpiEvalMethod <PERF> (ataport+0x0)"
0xfffff80000b9ba70 : 0xfffff8800110d960 : "ataport!__PchSym_ <PERF> (ataport+0x17960)"
0xfffff80000b9ba78 : 0xfffff880010f6000 : "ataport!ChannelSyncAcpiEvalMethod <PERF> (ataport+0x0)"

Download and scan for infections.
Kaspersky TDSSKiller

Post back with the results!

 

[Khanzori]

I have the TL-WN751ND model.

Also the the TDSSKiller didn't find anything while scanning.

 

[YoYo155]

Thanks for the update .
There is an updated driver please select the appropriate version.

• How to find the hardware version?
• V1: Driver
• V2: Driver

 

[Khanzori]

Alright, i updated the driver but in device manager it still says it's the old version from 2010, is it just me being stupid and not understanding how it works or did it not work?

 

[YoYo155]

I'm deducting that you have the V1 version, which is oddly enough presented to be from 2011 but is actually from 2010 (the same driver as above).

Before we continue, is there any hacked software you want to remove that might be causing this?

12.09.2013 14:34    Application Error    Faulting application name: AutoKMS.exe, version: 2.2.2.0, time stamp: 0x4e32f719
Faulting module name: unknown, version: 0.0.0.0, time stamp: 0x00000000
Exception code: 0xc0000005
Fault offset: 0x003a69f6
Faulting process id: 0x680
Faulting application start time: 0x01ceafc5083e56a8
Faulting application path: C:\Windows\AutoKMS\AutoKMS.exe
Faulting module path: unknown
Report Id: 5ea6ade1-1bb8-11e3-9795-60a44c3de649

 

[Khanzori]

I am not sure if i have any hacked software.

Also it bluescreened today twice in a row while playing LoL, i attached the dmp files to this post

EDIT: i also noticed that in the Event Viewer an application called MsMpEng.exe causes an application error

 

[YoYo155]

Khanzori, look AutoKMS is used to crack activate Microsoft Office (usually 2010) so your machine's
security is already compromised which opens a whole can of worms as is all on itself
which means debugging a broken system is useless.

As for the bugchecks, I will leave you with this.
The fault is again pointed at athrx.sys your TP-Link card.
Seeing that you're using the latest driver (it seems that no new drivers are being developed anymore)
I would called it a hardware fault unless it happens strictly while playing LoL or other games which have
anti-cheat engines as they are known to cause major issues, especially Steam client games.
Last option but a fairly slim chance is a faulty motherboard slot, worth a shot.


I recommend you start with a fresh install of Windows Seven to eliminate any security holes
put in place by cracked software.

I'm going to unsubscribe now seeing as it is useless to continue on with this, but I won't do so until
your next post to see if you need any help determining whether you have a legitimate copy of Windows
to start off with and help with reinstalling the OS.

By the way MsMpEng is a part of Microsoft Security Essentials, which can imply to the above.
Until then.

 

[Khanzori]

Alright, i'll go and get a new adapter and see if it works, i'll do a fresh install, thank you for all the help!

 

[YoYo155]

You're welcome, I'm glad I could be of support .
Good luck with the above.