Question
256 views

Bluescreen can't stop on my Acer E1-470 with windows 7 x-64 ultimate SP1

ishakernesto asked on
Bluescreen always appear when login to my laptop Acer E1-470 windows 7 x-64 SP1. please help me to stop this issues.
this the issues report
Log Name:      System
Source:        Microsoft-Windows-Kernel-Power
Date:          11/01/2014 10:17:29
Event ID:      41
Task Category: (63)
Level:         Critical
Keywords:      (2)
User:          SYSTEM
Computer:      ACER-PC
Description:
The system has rebooted without cleanly shutting down first. This error could be caused if the system stopped responding, crashed, or lost power unexpectedly.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Microsoft-Windows-Kernel-Power" Guid="{331C3B3A-2005-44C2-AC5E-77220C37D6B4}" />
    <EventID>41</EventID>
    <Version>2</Version>
    <Level>1</Level>
    <Task>63</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8000000000000002</Keywords>
    <TimeCreated SystemTime="2014-01-11T03:17:29.300013700Z" />
    <EventRecordID>26294</EventRecordID>
    <Correlation />
    <Execution ProcessID="4" ThreadID="8" />
    <Channel>System</Channel>
    <Computer>ACER-PC</Computer>
    <Security UserID="S-1-5-18" />
  </System>
  <EventData>
    <Data Name="BugcheckCode">209</Data>
    <Data Name="BugcheckParameter1">0x20</Data>
    <Data Name="BugcheckParameter2">0x2</Data>
    <Data Name="BugcheckParameter3">0x1</Data>
    <Data Name="BugcheckParameter4">0xfffff880055577c1</Data>
    <Data Name="SleepInProgress">false</Data>
    <Data Name="PowerButtonTimestamp">0</Data>
  </EventData>
</Event>
1 person had this question

Abuse history


The answered status icon Answer
Patrick Barker replied on

Yes, we received your replies.

Both of the attached DMP files are of the DRIVER_IRQL_NOT_LESS_OR_EQUAL (d1) bug check.

This indicates that a kernel-mode driver attempted to access pageable memory at a process IRQL that was too high.

A driver tried to access an address that is pageable (or that is completely invalid) while the IRQL was too high. This bug check is usually caused by drivers that have used improper addresses.

If we take a look at the call stack:

1: kd> kb
RetAddr           : Args to Child                                                           : Call Site
fffff800`02e7e169 : 00000000`0000000a 00000000`00000020 00000000`00000002 00000000`00000001 : nt!KeBugCheckEx
fffff800`02e7cde0 : ffffa44a`6980eca0 fffff880`00000022 fffffa80`0742f030 fffff880`063d5030 : nt!KiBugCheckDispatch+0x69
fffff880`05b507c1 : 00000000`000000d4 fffff880`05a782db fffffa80`0744e030 00000000`00000000 : nt!KiPageFault+0x260
00000000`000000d4 : fffff880`05a782db fffffa80`0744e030 00000000`00000000 00000000`00000000 : athrx+0x14d7c1
fffff880`05a782db : fffffa80`0744e030 00000000`00000000 00000000`00000000 fffff880`063d504d : 0xd4
fffffa80`0744e030 : 00000000`00000000 00000000`00000000 fffff880`063d504d fffff880`05d50778 : athrx+0x752db
00000000`00000000 : 00000000`00000000 fffff880`063d504d fffff880`05d50778 fffffa80`0000028b : 0xfffffa80`0744e030


We can see 2 athrx.sys calls which is the Atheros network adapter driver. Visit Acer's website and download and install the latest Atheros network drivers for your computer - http://us.acer.com/ac/en/US/content/drivers

Regards,

Patrick
Debugger/Reverse Engineer.
Be the first person to mark this helpful

Abuse history


progress