Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Help with my error driver_irql_not_less_or_more please


  • Please log in to reply
7 replies to this topic

#1 lisa2612

lisa2612

  • Members
  • 3 posts
  • OFFLINE
  •  
  • Gender:Female
  • Local time:05:41 AM

Posted 05 September 2014 - 03:14 PM

Hiya,

 

I hope someone can help me fix this because I just don't know what I'm doing here !

 

Here are my dump files

 

http://www.sendspace.com/filegroup/EckqIObGlwVSewC25tN3MsR%2FQrYyIy5b6rEMHhbseIVj%2Fm5gcBpHTA

 

And my speccy snapshot

 

http://speccy.piriform.com/results/C6pY3Eg10HzE6te2gijq4xa

 

And finally the minibox report

 

MiniToolBox by Farbar  Version: 21-07-2014
Ran by Lisa (administrator) on 05-09-2014 at 21:13:13
Running from "C:\Users\Lisa\Downloads"
Microsoft Windows 8  (X64)
Boot Mode: Normal
***************************************************************************

========================= Event log errors: ===============================

Application errors:
==================
Error: (09/05/2014 04:06:53 PM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 260953

Error: (09/05/2014 04:06:53 PM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 260953

Error: (09/05/2014 04:06:53 PM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second

Error: (09/05/2014 04:06:50 PM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 258391

Error: (09/05/2014 04:06:50 PM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 258391

Error: (09/05/2014 04:06:50 PM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second

Error: (09/05/2014 03:49:56 PM) (Source: Application Hang) (User: )
Description: The program Explorer.EXE version 6.2.9200.16433 stopped interacting with Windows and was closed. To see if more information about the problem is available, check the problem history in the Action Center control panel.

Process ID: 8b4

Start Time: 01cfc45c5ed2a506

Termination Time: 2953

Application Path: C:\Windows\Explorer.EXE

Report Id: e1ce64af-350b-11e4-bea2-08606e4b5626

Faulting package full name:

Faulting package-relative application ID:

Error: (09/05/2014 03:33:02 PM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 632000

Error: (09/05/2014 03:33:02 PM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 632000

Error: (09/05/2014 03:33:02 PM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second


System errors:
=============
Error: (09/05/2014 08:31:57 PM) (Source: Microsoft-Windows-Kernel-General) (User: NT AUTHORITY)
Description: 0xc000014d0

Error: (09/05/2014 08:32:36 PM) (Source: BugCheck) (User: )
Description: 0x000000d1 (0x0000000000000158, 0x0000000000000002, 0x0000000000000001, 0xfffff88001e11744)C:\Windows\MEMORY.DMP090514-41171-01

Error: (09/05/2014 08:32:29 PM) (Source: EventLog) (User: )
Description: The previous system shutdown at 8:27:05 PM on ‎9/‎5/‎2014 was unexpected.

Error: (09/05/2014 08:26:32 PM) (Source: Microsoft-Windows-Kernel-General) (User: NT AUTHORITY)
Description: 0xc000014d0

Error: (09/05/2014 08:27:12 PM) (Source: BugCheck) (User: )
Description: 0x000000d1 (0x0000000000000158, 0x0000000000000002, 0x0000000000000001, 0xfffff88001d3f744)C:\Windows\MEMORY.DMP090514-40093-01

Error: (09/05/2014 08:27:05 PM) (Source: EventLog) (User: )
Description: The previous system shutdown at 8:22:29 PM on ‎9/‎5/‎2014 was unexpected.

Error: (09/05/2014 08:21:58 PM) (Source: Microsoft-Windows-Kernel-General) (User: NT AUTHORITY)
Description: 0xc000014d0

Error: (09/05/2014 08:22:36 PM) (Source: BugCheck) (User: )
Description: 0x000000d1 (0x0000000000000158, 0x0000000000000002, 0x0000000000000001, 0xfffff88001fb6744)C:\Windows\MEMORY.DMP090514-44093-01

Error: (09/05/2014 08:22:29 PM) (Source: EventLog) (User: )
Description: The previous system shutdown at 8:17:05 PM on ‎9/‎5/‎2014 was unexpected.

Error: (09/05/2014 08:17:40 PM) (Source: BugCheck) (User: )
Description: 0x000000d1 (0x0000000000000158, 0x0000000000000002, 0x0000000000000001, 0xfffff88001e32744)C:\Windows\MEMORY.DMP090514-61375-01


Microsoft Office Sessions:
=========================
Error: (09/05/2014 04:06:53 PM) (Source: Bonjour Service)(User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 260953

Error: (09/05/2014 04:06:53 PM) (Source: Bonjour Service)(User: )
Description: Task Scheduling Error: m->NextScheduledEvent 260953

Error: (09/05/2014 04:06:53 PM) (Source: Bonjour Service)(User: )
Description: Task Scheduling Error: Continuously busy for more than a second

Error: (09/05/2014 04:06:50 PM) (Source: Bonjour Service)(User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 258391

Error: (09/05/2014 04:06:50 PM) (Source: Bonjour Service)(User: )
Description: Task Scheduling Error: m->NextScheduledEvent 258391

Error: (09/05/2014 04:06:50 PM) (Source: Bonjour Service)(User: )
Description: Task Scheduling Error: Continuously busy for more than a second

Error: (09/05/2014 03:49:56 PM) (Source: Application Hang)(User: )
Description: Explorer.EXE6.2.9200.164338b401cfc45c5ed2a5062953C:\Windows\Explorer.EXEe1ce64af-350b-11e4-bea2-08606e4b5626

Error: (09/05/2014 03:33:02 PM) (Source: Bonjour Service)(User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 632000

Error: (09/05/2014 03:33:02 PM) (Source: Bonjour Service)(User: )
Description: Task Scheduling Error: m->NextScheduledEvent 632000

Error: (09/05/2014 03:33:02 PM) (Source: Bonjour Service)(User: )
Description: Task Scheduling Error: Continuously busy for more than a second



=========================== Installed Programs ============================
µTorrent (HKCU\...\uTorrent) (Version: 3.4.2.32239 - BitTorrent Inc.)
Adobe Flash Player 12 Plugin (HKLM-x32\...\Adobe Flash Player Plugin) (Version: 12.0.0.70 - Adobe Systems Incorporated)
Adobe Reader X (10.1.8) MUI (HKLM-x32\...\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}) (Version: 10.1.8 - Adobe Systems Incorporated)
Alcor Micro USB Card Reader (HKLM-x32\...\AmUStor) (Version: 3.4.117.01527 - Alcor Micro Corp.)
Alcor Micro USB Card Reader (x32 Version: 3.4.117.01527 - Alcor Micro Corp.) Hidden
Apple Application Support (HKLM-x32\...\{A922C4B7-50E0-4787-A94C-59DBF3C65DBE}) (Version: 3.0 - Apple Inc.)
Apple Mobile Device Support (HKLM\...\{FE86CB0C-FCB3-4358-B4B0-B0A41E33B3DD}) (Version: 7.1.0.32 - Apple Inc.)
Apple Software Update (HKLM-x32\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.)
ASUS Instant Connect (HKLM-x32\...\{89ECB85A-D933-4CEA-9116-5CBC9C2ED95B}) (Version: 1.2.8 - ASUS)
ASUS InstantOn (HKLM-x32\...\{749F674B-2674-47E8-879C-5626A06B2A91}) (Version: 3.0.2 - ASUS)
ASUS LifeFrame3 (HKLM-x32\...\{1DBD1F12-ED93-49C0-A7CC-56CBDE488158}) (Version: 3.1.7 - ASUS)
ASUS Live Update (HKLM-x32\...\{FA540E67-095C-4A1B-97BA-4D547DEC9AF4}) (Version: 3.1.8 - ASUS)
ASUS Power4Gear Hybrid (HKLM\...\{9B6239BF-4E85-4590-8D72-51E30DB1A9AA}) (Version: 2.1.1 - ASUS)
ASUS Product Demo Movie  (HKLM-x32\...\{DC06C90B-C5BE-42F6-B74D-A9503170998C}) (Version: 1.0.3 - ASUS )
ASUS Smart Gesture (HKLM-x32\...\{4D3286A6-F6AB-498A-82A4-E4F040529F3D}) (Version: 1.0.32 - ASUS)
ASUS Splendid Video Enhancement Technology (HKLM-x32\...\{0969AF05-4FF6-4C00-9406-43599238DE0D}) (Version: 1.03.0004 - ASUS)
ASUS Tutor (HKLM-x32\...\{58172D66-2F69-4215-9AEC-ED8196023736}) (Version: 1.0.6 - ASUS)
ASUS USB Charger Plus (HKLM-x32\...\{A859E3E5-C62F-4BFA-AF1D-2B95E03166AF}) (Version: 2.1.4 - ASUS)
ASUS WebStorage Sync Agent (HKLM-x32\...\ASUS WebStorage) (Version: 1.1.9.120 - ASUS Cloud Corporation)
ATK Package (HKLM-x32\...\{AB5C933E-5C7D-4D30-B314-9C83A49B94BE}) (Version: 1.0.0023 - ASUS)
AVG 2014 (HKLM\...\AVG) (Version: 2014.0.4745 - AVG Technologies)
AVG 2014 (Version: 14.0.4015 - AVG Technologies) Hidden
AVG 2014 (Version: 14.0.4259 - AVG Technologies) Hidden
AVG 2014 (Version: 14.0.4745 - AVG Technologies) Hidden
AVG SafeGuard toolbar (HKLM-x32\...\AVG SafeGuard toolbar) (Version: 18.1.9.799 - AVG Technologies)
Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.)
calibre (HKLM-x32\...\{98B88424-054D-4866-8EC1-513616801BAE}) (Version: 1.1.0 - Kovid Goyal)
Free Documents Opener (HKCU\...\Free Documents Opener) (Version: 1.0 - Free Documents Opener)
Intel® Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 8.1.0.1252 - Intel Corporation)
Intel® Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 9.17.10.2843 - Intel Corporation)
Intel® SDK for OpenCL - CPU Only Runtime Package (HKLM-x32\...\{FCB3772C-B7D0-4933-B1A9-3707EBACC573}) (Version: 2.0.0.37149 - Intel Corporation)
Intel® Trusted Connect Service Client (Version: 1.24.388.1 - Intel Corporation) Hidden
iTunes (HKLM\...\{0D924CB2-2EA4-4044-BAF7-770202D6BD0D}) (Version: 11.1.4.62 - Apple Inc.)
Malwarebytes Anti-Malware version 2.0.2.1012 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.0.2.1012 - Malwarebytes Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Mozilla Firefox 31.0 (x86 en-US) (HKCU\...\Mozilla Firefox 31.0 (x86 en-US)) (Version: 31.0 - Mozilla)
QuickTime (HKLM-x32\...\{AF0CE7C0-A3E4-4D73-988B-B29187EC6E9A}) (Version: 7.73.80.64 - Apple Inc.)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6754 - Realtek Semiconductor Corp.)
Search Protection (HKCU\...\Search Protection) (Version: 8.7.0.2 - Spigot, Inc.)
Shared C Run-time for x64 (HKLM\...\{EF79C448-6946-4D71-8134-03407888C054}) (Version: 10.0.0 - McAfee)
Speccy (HKLM\...\Speccy) (Version: 1.26 - Piriform)
Visual Studio 2012 x64 Redistributables (HKLM\...\{8C775E70-A791-4DA8-BCC3-6AB7136F4484}) (Version: 14.0.0.1 - AVG Technologies)
Visual Studio 2012 x86 Redistributables (HKLM-x32\...\{98EFF19A-30AB-4E4B-B943-F06B1C63EBF8}) (Version: 14.0.0.1 - AVG Technologies CZ, s.r.o.)
VLC media player 2.1.3 (HKLM-x32\...\VLC media player) (Version: 2.1.3 - VideoLAN)
Windows Driver Package - ASUS (ATP) Mouse  (08/27/2012 1.0.0.125) (HKLM\...\2BD897DEE9289F769D9176245811D5330A360B0B) (Version: 08/27/2012 1.0.0.125 - ASUS)
WinFlash (HKLM-x32\...\{8F21291E-0444-4B1D-B9F9-4370A73E346D}) (Version: 2.41.1 - ASUS)
Wise Registry Cleaner 7.89 (HKLM-x32\...\Wise Registry Cleaner_is1) (Version: 7.89 - WiseCleaner.com, Inc.)

========================= Devices: ================================


========================= Memory info: ===================================

Percentage of memory in use: 82%
Total physical RAM: 1931.61 MB
Available physical RAM: 329.94 MB
Total Pagefile: 3915.61 MB
Available Pagefile: 2026.91 MB
Total Virtual: 4095.88 MB
Available Virtual: 3981.96 MB

========================= Partitions: =====================================

1 Drive c: (OS) (Fixed) (Total:119.24 GB) (Free:64.19 GB) NTFS
2 Drive d: (Data) (Fixed) (Total:157.55 GB) (Free:157.19 GB) NTFS

========================= Users: ========================================

User accounts for \\LISASPC

Administrator            Guest                    Lisa                     


**** End of log ****
 

 

 

Please, please help. Thank you so much



BC AdBot (Login to Remove)

 


#2 Jared44

Jared44

  • BSOD Kernel Dump Expert
  • 205 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Dronfield
  • Local time:04:41 AM

Posted 06 September 2014 - 08:04 AM

DRIVER_IRQL_NOT_LESS_OR_EQUAL (d1)
An attempt was made to access a pageable (or completely invalid) address at an
interrupt request level (IRQL) that is too high.  This is usually
caused by drivers using improper addresses.
If kernel debugger is available get stack backtrace.
Arguments:
Arg1: 0000000000000158, memory referenced
Arg2: 0000000000000002, IRQL
Arg3: 0000000000000001, value 0 = read operation, 1 = write operation
Arg4: fffff88001fb6744, address which referenced memory

This bugcheck indicates a driver referenced invalid or pageable memory at an IRQL too high (DPC/Dispatch level or above)

0: kd> .trap 0xfffff8801a2ac1f0
NOTE: The trap frame does not contain all registers.
Some register values may be zeroed or incorrect.
rax=0000000000000000 rbx=0000000000000000 rcx=fffffa80038d81f0
rdx=0000000000000000 rsi=0000000000000000 rdi=0000000000000000
rip=fffff88001e32744 rsp=fffff8801a2ac380 rbp=fffff8801a2ac4d0
 r8=fffff8801a2ac528  r9=fffff8801a2ac618 r10=fffffa8003ff2c70
r11=0000000000000000 r12=0000000000000000 r13=0000000000000000
r14=0000000000000000 r15=0000000000000000
iopl=0         nv up ei pl nz na po nc
tcpip!WfpProcessOutTransportStackIndication+0xe3684:
fffff880`01e32744 f0ff8058010000  lock inc dword ptr [rax+158h] ds:00000000`00000158=????????

So a network routine attempted to write to the address 0x158 at an IRQL of DPC/Dispatch level, this address is invalid and therefore we bugchecked.

The address was calculated by adding the values of rax and 158 together and because rax was null we wrote to 0x158.

 

tcpip or Transmission Control Protocol / Internet Protocol was the culprit it would most likely be your network driver giving it bad information in which case an update would be required.

L1C63x64	fffff880`050e8000	fffff880`05106000	Wed Feb 15 06:55:09 2012 (4f3b56cd)	0001eeb4		L1C63x64.sys
athrx	fffff880`04e08000	fffff880`050db000	Thu Mar 22 03:26:22 2012 (4f6a9bde)	002d9ae7		athrx.sys

Both your wireless and ethernet drivers date to 2012 which is too old, you need to update them from your manufacturers website.

 

Your ethernet driver is for the:

 
Qualcomm Atheros AR8151 PCI-E Gigabit Ethernet Controller (NDIS 6.30)


#3 lisa2612

lisa2612
  • Topic Starter

  • Members
  • 3 posts
  • OFFLINE
  •  
  • Gender:Female
  • Local time:05:41 AM

Posted 06 September 2014 - 10:42 AM

I did as you said and updated my wirelss and ethernet drivers and it's still crashing. I'm really not very computer savy so any help is apprieciated.

 

Thanks



#4 Jared44

Jared44

  • BSOD Kernel Dump Expert
  • 205 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Dronfield
  • Local time:04:41 AM

Posted 06 September 2014 - 10:42 AM

Can you upload the new dump files so I can take a look please.



#5 lisa2612

lisa2612
  • Topic Starter

  • Members
  • 3 posts
  • OFFLINE
  •  
  • Gender:Female
  • Local time:05:41 AM

Posted 06 September 2014 - 04:08 PM

http://www.sendspace.com/filegroup/e7WuVIg9AO42VetK1CJMsInvyo4Vllv%2B

 

Thanks so much for doing this for me ! I really am very grateful.



#6 Jared44

Jared44

  • BSOD Kernel Dump Expert
  • 205 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Dronfield
  • Local time:04:41 AM

Posted 06 September 2014 - 04:46 PM

Okay.

DRIVER_IRQL_NOT_LESS_OR_EQUAL (d1)
An attempt was made to access a pageable (or completely invalid) address at an
interrupt request level (IRQL) that is too high. This is usually
caused by drivers using improper addresses.
If kernel debugger is available get stack backtrace.
Arguments:
Arg1: 0000000000000158, memory referenced
Arg2: 0000000000000002, IRQL
Arg3: 0000000000000001, value 0 = read operation, 1 = write operation
Arg4: fffff88001d73744, address which referenced memory

 

We can see that memory being wrote to at 0x158 was clearly invalid just by looking at the address, the IRQL was at 2 as well which is why we got this bugcheck. If the IRQL was below 2 we would probably have had a 0x50.

1: kd> .trap 0xfffff880194367a0
NOTE: The trap frame does not contain all registers.
Some register values may be zeroed or incorrect.
rax=0000000000000000 rbx=0000000000000000 rcx=fffffa800393f570
rdx=0000000000000000 rsi=0000000000000000 rdi=0000000000000000
rip=fffff88001d73744 rsp=fffff88019436930 rbp=fffff88019436a80
r8=fffff88019436ad8 r9=fffff88019436bc8 r10=fffffa80041f5d70
r11=0000000000000009 r12=0000000000000000 r13=0000000000000000
r14=0000000000000000 r15=0000000000000000
iopl=0 nv up ei pl nz na po nc
tcpip!WfpProcessOutTransportStackIndication+0xe3684:
fffff880`01d73744 f0ff8058010000 lock inc dword ptr [rax+158h] ds:00000000`00000158=????????

We can see our address being calculated by adding the contents of the rax register with 158 (rax was null) which results in a memory write to 0x158.

 

A lock inc assembly instruction, this means a lock is being implemented on a increment instruction which adds a value at a certain interval.

fffff880`19436658 fffff802`3c2e4769 : 00000000`0000000a 00000000`00000158 00000000`00000002 00000000`00000001 : nt!KeBugCheckEx
fffff880`19436660 fffff802`3c2e2fe0 : 00000000`00000001 fffffa80`0393f570 ffff917b`c81bb100 fffff880`194367a0 : nt!KiBugCheckDispatch+0x69
fffff880`194367a0 fffff880`01d73744 : fffff880`19436a80 fffffa80`041f8db0 00000000`00000001 fffffa80`0393f570 : nt!KiPageFault+0x260
fffff880`19436930 fffff880`01c92fae : fffff880`19436f00 fffffa80`05240002 fffff880`1943a69a fffffa80`0399a69a : tcpip!WfpProcessOutTransportStackIndication+0xe3684
fffff880`19436b50 fffff880`01c9a6de : fffffa80`00000000 00000000`00000000 00000000`00000000 fffffa80`03db5b0c : tcpip!WfpInspectSendNonTcpDatagram+0x15e
fffff880`19436c60 fffff880`01c9b3fa : fffffa80`03db5e18 fffffa80`03db5b38 fffff880`01f7e110 fffff880`01dc6b90 : tcpip!IppInspectLocalDatagramsOut+0x4fe
fffff880`19436e30 fffff880`01d30ac9 : 00000000`00000004 fffff880`01dc6b90 fffffa80`0366e580 00000000`00000000 : tcpip!IppSendDatagramsCommon+0x3da
fffff880`19436ff0 fffff880`01e70888 : fffffa80`03cbce10 fffff880`0192c804 fffff880`19432000 fffff880`194371a8 : tcpip!IppInspectInjectTlSend+0x185
fffff880`19437120 fffff802`3c33a986 : fffffa80`0702de10 fffffa80`0702de10 00000000`0000007d 00000000`00000001 : fwpkclnt!FwppInjectionStackCallout+0x88
fffff880`194371b0 fffff802`3c33d3f5 : fffff880`01e70800 fffff880`194373b0 00000000`00000010 fffffa80`0366e580 : nt!KeExpandKernelStackAndCalloutInternal+0xe6
fffff880`194372b0 fffff880`01e838ae : 00000000`00000000 fffff880`194373f0 fffffa80`068b5900 00000000`00000000 : nt!KeExpandKernelStackAndCalloutEx+0x25
fffff880`194372f0 fffff880`01e83a2a : 00000000`00000001 fffffa80`0702de10 00000000`00000000 00000000`00000000 : fwpkclnt!FwppInjectTransportSendAsync+0x5de
fffff880`194374f0 fffff880`01d14326 : 00000000`00000000 fffff880`19437641 fffffa80`0680c250 00000000`00000000 : fwpkclnt!FwpsInjectTransportSendAsync1+0x66
fffff880`19437560 fffff880`01d13f38 : fffffa80`038b6018 fffffa80`07b01040 00000000`00000000 fffffa80`066e8d20 : tcpip!TlShimInjectRedirectedPacket+0x36a
fffff880`19437690 fffff880`01d1c330 : fffffa80`07b01010 00000000`00000002 fffff880`1796e500 00000000`00000000 : tcpip!TlShimInspectConnectRequestComplete+0xb8
fffff880`19437700 fffff880`0192d260 : fffffa80`07b01010 00000000`00000000 fffff880`1796e500 fffffa80`040ed400 : tcpip!AlepReleaseConnectRequestInspectContext+0x84
fffff880`19437750 fffff880`0192c8a5 : c9738dad`419b694f fffffa80`073db8d0 00000000`00000000 00000000`00000ab9 : NETIO!ClassifyContextCleanupRoutine+0x50
fffff880`19437780 fffff880`01e8299f : 00000000`00000ab9 00000000`00000002 fffff880`1796e500 fffffa80`076cd2c0 : NETIO!WfpObjectDereference+0x15
fffff880`194377b0 fffff880`179664b0 : fffffa80`040ed400 00000000`00000002 fffff880`1796e500 00000000`00000002 : fwpkclnt!FwpsReleaseClassifyHandle0+0xf
fffff880`194377e0 fffffa80`040ed400 : 00000000`00000002 fffff880`1796e500 00000000`00000002 00000000`00000002 : mwac+0x64b0
fffff880`194377e8 00000000`00000002 : fffff880`1796e500 00000000`00000002 00000000`00000002 fffff880`17966ef5 : 0xfffffa80`040ed400
fffff880`194377f0 fffff880`1796e500 : 00000000`00000002 00000000`00000002 fffff880`17966ef5 fffffa80`040ed400 : 0x2
fffff880`194377f8 00000000`00000002 : 00000000`00000002 fffff880`17966ef5 fffffa80`040ed400 fffff880`00000002 : mwac+0xe500
fffff880`19437800 00000000`00000002 : fffff880`17966ef5 fffffa80`040ed400 fffff880`00000002 fffff880`1796e7c0 : 0x2
fffff880`19437808 fffff880`17966ef5 : fffffa80`040ed400 fffff880`00000002 fffff880`1796e7c0 00000000`00000002 : 0x2
fffff880`19437810 fffffa80`040ed400 : fffff880`00000002 fffff880`1796e7c0 00000000`00000002 00000000`00000002 : mwac+0x6ef5
fffff880`19437818 fffff880`00000002 : fffff880`1796e7c0 00000000`00000002 00000000`00000002 fffff880`1796448c : 0xfffffa80`040ed400
fffff880`19437820 fffff880`1796e7c0 : 00000000`00000002 00000000`00000002 fffff880`1796448c fffff880`1796e800 : 0xfffff880`00000002
fffff880`19437828 00000000`00000002 : 00000000`00000002 fffff880`1796448c fffff880`1796e800 00000000`00000002 : mwac+0xe7c0
fffff880`19437830 00000000`00000002 : fffff880`1796448c fffff880`1796e800 00000000`00000002 ffff4f3a`855a7f00 : 0x2
fffff880`19437838 fffff880`1796448c : fffff880`1796e800 00000000`00000002 ffff4f3a`855a7f00 00000000`00000000 : 0x2
fffff880`19437840 fffff880`1796e800 : 00000000`00000002 ffff4f3a`855a7f00 00000000`00000000 fffffa80`0389a990 : mwac+0x448c
fffff880`19437848 00000000`00000002 : ffff4f3a`855a7f00 00000000`00000000 fffffa80`0389a990 fffff880`1796326b : mwac+0xe800
fffff880`19437850 ffff4f3a`855a7f00 : 00000000`00000000 fffffa80`0389a990 fffff880`1796326b 00000000`00000000 : 0x2
fffff880`19437858 00000000`00000000 : fffffa80`0389a990 fffff880`1796326b 00000000`00000000 00000000`00000000 : 0xffff4f3a`855a7f00

 

We can see a few user mode routines paired with Malwarebytes, it then begins calling network routines.

 

I can see you have Malwarebytes and AVG installed at the same time which is never good, I suggest you replace them both with Microsoft Security Essentials.

 

Your network driver is also outdated so you should update that as well.

 

Lastly, these dump files are nearly identical so it seems something is using a bad pointer but it's one of those three, most likely Malwarebytes.

 

Any questions let me know.


Edited by Jared44, 06 September 2014 - 04:46 PM.


#7 rockysosua

rockysosua

  • Members
  • 772 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Caribbean
  • Local time:12:41 AM

Posted 06 September 2014 - 05:57 PM

Could you explain why having Malwarebytes and AVG on a computer at the same time, is no good?


All is well in Paradise.

#8 Jared44

Jared44

  • BSOD Kernel Dump Expert
  • 205 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Dronfield
  • Local time:04:41 AM

Posted 06 September 2014 - 05:59 PM

Well if it's the real time version which it is then they can and do a lot of time conflict with each other.
This causes more harm than good.




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users