B.S.O.D.-Driver Irql not less or equal

Hello,

I have been getting sporadic blue screens the past week or so..
I have defragmented all hard drives,run memtest+86,swapped over two memory sticks & its still happening..all very frustrating.
All google searches point to memory & drivers etc,but I'm lost now.

copy of debuglog.txt here,any help would be greatly appreciated.

Thanks Mint.

Microsoft (R) Windows Debugger Version 6.10.0003.233 X86
Copyright (c) Microsoft Corporation. All rights reserved.


Loading Dump File [E:\WINDOWS\Minidump\Mini121608-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available

Symbol search path is: SRV*c:\symbols*http://msdl.microsoft.com/download/symbols
Executable search path is: E:\WINDOWS;E:\WINDOWS\system32;E:\WINDOWS\system32\drivers
Windows XP Kernel Version 2600 (Service Pack 3) MP (2 procs) Free x86 compatible
Product: WinNt
Built by: 2600.xpsp_sp3_gdr.080814-1236
Machine Name:
Kernel base = 0x804d7000 PsLoadedModuleList = 0x8055d720
Debug session time: Tue Dec 16 20:02:02.311 2008 (GMT+0)
System Uptime: 0 days 2:17:12.350
Loading Kernel Symbols
...............................................................
.............................................................
Loading User Symbols
Loading unloaded module list
..............
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck D1, {4, 2, 1, 8971e3a0}

Probably caused by : ntkrpamp.exe ( nt!KiTrap0E+238 )

Followup: MachineOwner
---------

1: kd> !analyze -v;r;kv;lmtn;.logclose;q
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

DRIVER_IRQL_NOT_LESS_OR_EQUAL (d1)
An attempt was made to access a pageable (or completely invalid) address at an
interrupt request level (IRQL) that is too high. This is usually
caused by drivers using improper addresses.
If kernel debugger is available get stack backtrace.
Arguments:
Arg1: 00000004, memory referenced
Arg2: 00000002, IRQL
Arg3: 00000001, value 0 = read operation, 1 = write operation
Arg4: 8971e3a0, address which referenced memory

Debugging Details:
------------------


WRITE_ADDRESS: 00000004

CURRENT_IRQL: 2

FAULTING_IP:
+ffffffff8971e3a0
8971e3a0 ?? ???

CUSTOMER_CRASH_COUNT: 1

DEFAULT_BUCKET_ID: DRIVER_FAULT

BUGCHECK_STR: 0xD1

TRAP_FRAME: acc8e8a8 -- (.trap 0xffffffffacc8e8a8)
.trap 0xffffffffacc8e8a8
ErrCode = 00000002
eax=00000000 ebx=8938f3d0 ecx=00000000 edx=00000000 esi=c000009a edi=acc8ebd4
eip=8971e3a0 esp=acc8e91c ebp=8938f3d0 iopl=0 nv up ei ng nz ac po nc
cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00010292
8971e3a0 ?? ???
.trap
Resetting default scope

LAST_CONTROL_TRANSFER: from 8971e3a0 to 805446f0

STACK_TEXT:
acc8e8a8 8971e3a0 badb0d00 00000000 acc8edcc nt!KiTrap0E+0x238
WARNING: Frame IP not in any known module. Following frames may be wrong.
acc8e918 890de024 acc8eb0b 00000001 00000000 0x8971e3a0
acc8e91c acc8eb0b 00000001 00000000 00000000 0x890de024
acc8e920 00000000 00000000 00000000 00000000 0xacc8eb0b


STACK_COMMAND: kb

FOLLOWUP_IP:
nt!KiTrap0E+238
805446f0 f7457000000200 test dword ptr [ebp+70h],20000h

SYMBOL_STACK_INDEX: 0

SYMBOL_NAME: nt!KiTrap0E+238

FOLLOWUP_NAME: MachineOwner

MODULE_NAME: nt

IMAGE_NAME: ntkrpamp.exe

DEBUG_FLR_IMAGE_TIMESTAMP: 48a3fbd9

FAILURE_BUCKET_ID: 0xD1_nt!KiTrap0E+238

BUCKET_ID: 0xD1_nt!KiTrap0E+238

Followup: MachineOwner
---------

eax=bab4013c ebx=00000002 ecx=00000000 edx=00000000 esi=8971e3a0 edi=00000004
eip=805446f0 esp=acc8e890 ebp=acc8e8a8 iopl=0 nv up ei ng nz na pe nc
cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00000286
nt!KiTrap0E+0x238:
805446f0 f7457000000200 test dword ptr [ebp+70h],20000h ss:0010:acc8e918=00010292
ChildEBP RetAddr Args to Child
acc8e8a8 8971e3a0 badb0d00 00000000 acc8edcc nt!KiTrap0E+0x238 (FPO: [0,0] TrapFrame @ acc8e8a8)
WARNING: Frame IP not in any known module. Following frames may be wrong.
acc8e918 890de024 acc8eb0b 00000001 00000000 0x8971e3a0
acc8e91c acc8eb0b 00000001 00000000 00000000 0x890de024
acc8e920 00000000 00000000 00000000 00000000 0xacc8eb0b
start end module name
804d7000 806e4000 nt ntkrpamp.exe Thu Aug 14 10:33:13 2008 (48A3FBD9)
806e4000 80704d00 hal halmacpi.dll Sun Apr 13 19:31:27 2008 (4802517F)
ac640000 ac663180 Fastfat Fastfat.SYS Sun Apr 13 20:14:28 2008 (48025B94)
acdf7000 ace48800 srv srv.sys Mon Sep 08 11:41:40 2008 (48C50164)
ad051000 ad091a80 HTTP HTTP.sys Sun Apr 13 19:53:48 2008 (480256BC)
ad182000 ad193000 avgtdix avgtdix.sys unavailable (00000000)
ad1bb000 ad1e7180 mrxdav mrxdav.sys Sun Apr 13 19:32:42 2008 (480251CA)
ad3c8000 ad3dc480 wdmaud wdmaud.sys Sun Apr 13 20:17:18 2008 (48025C3E)
ad70d000 ad70f580 BUFADPT BUFADPT.SYS Thu Mar 10 05:44:15 2005 (422FDEAF)
b608d000 b60a4900 dump_atapi dump_atapi.sys Sun Apr 13 19:40:29 2008 (4802539D)
b60cd000 b60e4000 avgldx86 avgldx86.sys unavailable (00000000)
b60e4000 b6153280 mrxsmb mrxsmb.sys Fri Oct 24 12:21:07 2008 (4901AFA3)
b6154000 b617ee80 rdbss rdbss.sys Sun Apr 13 20:28:38 2008 (48025EE6)
b621f000 b6240d00 afd afd.sys Thu Aug 14 11:04:35 2008 (48A40333)
b6241000 b6266500 ipnat ipnat.sys Sun Apr 13 19:57:10 2008 (48025786)
b6267000 b628ec00 netbt netbt.sys Sun Apr 13 20:20:59 2008 (48025D1B)
b628f000 b62e7480 tcpip tcpip.sys Fri Jun 20 12:51:09 2008 (485B99AD)
b62e8000 b62fa600 ipsec ipsec.sys Sun Apr 13 20:19:42 2008 (48025CCE)
b64a9000 b64ab900 Dxapi Dxapi.sys Fri Aug 17 21:53:19 2001 (3B7D843F)
b8775000 b87d2f00 update update.sys Sun Apr 13 19:39:46 2008 (48025372)
b87d3000 b8802e80 rdpdr rdpdr.sys Sun Apr 13 19:32:50 2008 (480251D2)
b8962000 b8972e00 psched psched.sys Sun Apr 13 19:56:36 2008 (48025764)
b8973000 b8989580 ndiswan ndiswan.sys Sun Apr 13 20:20:41 2008 (48025D09)
b899b000 b8a02000 ahrsoszj ahrsoszj.SYS unavailable (00000000)
b8a02000 b8a15f00 VIDEOPRT VIDEOPRT.SYS Sun Apr 13 19:44:39 2008 (48025497)
b8a16000 b8fef860 nv4_mini nv4_mini.sys Tue Oct 07 22:25:58 2008 (48EBD3E6)
b8ff0000 b9026500 NVSNPU NVSNPU.SYS Fri Sep 30 21:51:48 2005 (433DA564)
b9027000 b9070900 NVNRM NVNRM.SYS Fri Sep 30 21:52:02 2005 (433DA572)
b9071000 b90cbf00 bcmwl5 bcmwl5.sys Mon Jul 11 22:43:30 2005 (42D2E802)
b90cc000 b90ee700 ks ks.sys Sun Apr 13 20:16:34 2008 (48025C12)
b90ef000 b9112a80 portcls portcls.sys Sun Apr 13 20:19:40 2008 (48025CCC)
b9113000 b94ea000 ALCXWDM ALCXWDM.SYS unavailable (00000000)
b94ea000 b950d200 USBPORT USBPORT.SYS Sun Apr 13 19:45:34 2008 (480254CE)
b950e000 b9521900 parport parport.sys Sun Apr 13 19:40:09 2008 (48025389)
b9522000 b952be80 NDProxy NDProxy.SYS Sun Apr 13 19:57:28 2008 (48025798)
b9542000 b9551000 AmdTools AmdTools.sys Wed Jun 07 20:15:29 2006 (448725D1)
b9552000 b955bf00 termdd termdd.sys Sun Apr 13 19:38:36 2008 (4802532C)
b9562000 b956a900 msgpc msgpc.sys Sun Apr 13 19:56:32 2008 (48025760)
b9572000 b957dd00 raspptp raspptp.sys Sun Apr 13 20:19:47 2008 (48025CD3)
b9582000 b958c200 raspppoe raspppoe.sys Sun Apr 13 19:57:31 2008 (4802579B)
b9592000 b959e880 rasl2tp rasl2tp.sys Sun Apr 13 20:19:43 2008 (48025CCF)
b95a2000 b95b0100 redbook redbook.sys Sun Apr 13 19:40:27 2008 (4802539B)
b95b2000 b95c1600 cdrom cdrom.sys Sun Apr 13 19:40:45 2008 (480253AD)
b9ac0000 b9ac3c80 mssmbios mssmbios.sys Sun Apr 13 19:36:45 2008 (480252BD)
b9adc000 b9ade780 ndistapi ndistapi.sys Sun Apr 13 19:57:27 2008 (48025797)
ba41e000 ba420280 rasacd rasacd.sys Fri Aug 17 21:55:39 2001 (3B7D84CB)
ba436000 ba439300 nvnetbus nvnetbus.sys Fri Sep 30 21:52:21 2005 (433DA585)
ba442000 ba445d80 serenum serenum.sys Sun Apr 13 19:40:12 2008 (4802538C)
ba47e000 ba4c2000 MDFSYSNT MDFSYSNT.sys unavailable (00000000)
ba4c2000 ba4dbb80 Mup Mup.sys Sun Apr 13 20:17:05 2008 (48025C31)
ba4dc000 ba508980 NDIS NDIS.sys Sun Apr 13 20:20:35 2008 (48025D03)
ba509000 ba595600 Ntfs Ntfs.sys Sun Apr 13 20:15:49 2008 (48025BE5)
ba596000 ba5a9000 WudfPf WudfPf.sys unavailable (00000000)
ba5a9000 ba5bf880 KSecDD KSecDD.sys Sun Apr 13 19:31:40 2008 (4802518C)
ba5c0000 ba5d1f00 sr sr.sys Sun Apr 13 19:36:50 2008 (480252C2)
ba5d2000 ba5f1b00 fltmgr fltmgr.sys Sun Apr 13 19:32:58 2008 (480251DA)
ba5f2000 ba608d80 nvata nvata.sys Fri Aug 19 01:52:05 2005 (43052D35)
ba609000 ba620900 atapi atapi.sys Sun Apr 13 19:40:29 2008 (4802539D)
ba621000 ba646700 dmio dmio.sys Sun Apr 13 19:44:45 2008 (4802549D)
ba647000 ba665880 ftdisk ftdisk.sys Fri Aug 17 21:52:41 2001 (3B7D8419)
ba666000 ba676a80 pci pci.sys Sun Apr 13 19:36:43 2008 (480252BB)
ba677000 ba6a4d80 ACPI ACPI.sys Sun Apr 13 19:36:33 2008 (480252B1)
ba6a5000 ba6bc880 SCSIPORT SCSIPORT.SYS Sun Apr 13 19:40:29 2008 (4802539D)
ba6bd000 ba7a7000 sptd sptd.sys unavailable (00000000)
ba8a8000 ba8b1180 isapnp isapnp.sys Sun Apr 13 19:36:40 2008 (480252B8)
ba8b8000 ba8c2580 MountMgr MountMgr.sys Sun Apr 13 19:39:45 2008 (48025371)
ba8c8000 ba8d4c80 VolSnap VolSnap.sys Sun Apr 13 19:41:00 2008 (480253BC)
ba8d8000 ba8e0e00 disk disk.sys Sun Apr 13 19:40:46 2008 (480253AE)
ba8e8000 ba8f4180 CLASSPNP CLASSPNP.SYS Sun Apr 13 20:16:21 2008 (48025C05)
ba8f8000 ba900b80 PxHelp20 PxHelp20.sys Fri Feb 02 21:23:57 2007 (45C3ABED)
ba938000 ba941000 cdrbsdrv cdrbsdrv.SYS unavailable (00000000)
ba978000 ba986880 usbhub usbhub.sys Sun Apr 13 19:45:36 2008 (480254D0)
ba988000 ba990500 NVENETFD NVENETFD.sys Fri Sep 30 21:52:19 2005 (433DA583)
ba9b8000 ba9c0780 netbios netbios.sys Sun Apr 13 19:56:01 2008 (48025741)
ba9c8000 ba9d0700 wanarp wanarp.sys Sun Apr 13 19:57:20 2008 (48025790)
ba9e8000 ba9f2e00 Fips Fips.SYS Sun Apr 13 19:33:27 2008 (480251F7)
baa08000 baa16d80 sysaudio sysaudio.sys Sun Apr 13 20:15:55 2008 (48025BEB)
baa48000 baa57900 Cdfs Cdfs.SYS Sun Apr 13 20:14:21 2008 (48025B8D)
baad8000 baae6000 AmdK8 AmdK8.sys Sun Jul 02 06:39:38 2006 (44A75C1A)
baae8000 baaf7c00 serial serial.sys Sun Apr 13 20:15:44 2008 (48025BE0)
baaf8000 bab04d00 i8042prt i8042prt.sys Sun Apr 13 20:17:59 2008 (48025C67)
bab08000 bab16b00 drmk drmk.sys Sun Apr 13 19:45:12 2008 (480254B8)
bab18000 bab22480 imapi imapi.sys Sun Apr 13 19:40:57 2008 (480253B9)
bab28000 bab2e180 PCIIDEX PCIIDEX.SYS Sun Apr 13 19:40:29 2008 (4802539D)
bab30000 bab34d00 PartMgr PartMgr.sys Sun Apr 13 19:40:48 2008 (480253B0)
bab38000 bab3d000 MDPMGRNT MDPMGRNT.sys unavailable (00000000)
bab70000 bab74a80 TDI TDI.SYS Sun Apr 13 20:00:04 2008 (48025834)
bab78000 bab7c580 ptilink ptilink.sys Fri Aug 17 21:49:53 2001 (3B7D8371)
bab80000 bab84080 raspti raspti.sys Fri Aug 17 21:55:32 2001 (3B7D84C4)
bab90000 bab95000 flpydisk flpydisk.sys Sun Apr 13 19:40:24 2008 (48025398)
babc0000 babc5200 vga vga.sys Sun Apr 13 19:44:40 2008 (48025498)
babc8000 babcca80 Msfs Msfs.SYS Sun Apr 13 19:32:38 2008 (480251C6)
babd0000 babd7880 Npfs Npfs.SYS Sun Apr 13 19:32:38 2008 (480251C6)
babd8000 babdd000 ElbyCDIO ElbyCDIO.sys unavailable (00000000)
babe0000 babe4ec0 avgmfx86 avgmfx86.sys Thu Jun 26 16:19:13 2008 (4863B371)
bac00000 bac04500 watchdog watchdog.sys Sun Apr 13 19:44:59 2008 (480254AB)
bac38000 bac3f000 fdc fdc.sys unavailable (00000000)
bac40000 bac45a00 mouclass mouclass.sys Sun Apr 13 19:39:47 2008 (48025373)
bac48000 bac4e000 kbdclass kbdclass.sys Sun Apr 13 19:39:46 2008 (48025372)
bac50000 bac54300 usbohci usbohci.sys Sun Apr 13 19:45:34 2008 (480254CE)
bac58000 bac5f600 usbehci usbehci.sys Sun Apr 13 19:45:34 2008 (480254CE)
bac60000 bac66680 ElbyCDFL ElbyCDFL.sys Tue Aug 31 19:07:08 2004 (4134BE4C)
bac70000 bac74d80 bwcdrv bwcdrv.sys Sun Dec 21 08:21:02 2003 (3FE557EE)
bacb8000 bacbb000 BOOTVID BOOTVID.dll Fri Aug 17 21:49:09 2001 (3B7D8345)
bada8000 bada9b80 kdcom kdcom.dll Fri Aug 17 21:49:10 2001 (3B7D8346)
badaa000 badab100 WMILIB WMILIB.SYS Fri Aug 17 22:07:23 2001 (3B7D878B)
badac000 badad700 dmload dmload.sys Fri Aug 17 21:58:15 2001 (3B7D8567)
badee000 badef420 ASACPI ASACPI.sys Fri Aug 13 03:52:52 2004 (411C2D04)
badf0000 badf1100 swenum swenum.sys Sun Apr 13 19:39:52 2008 (48025378)
bae00000 bae01280 USBD USBD.SYS Fri Aug 17 22:02:58 2001 (3B7D8682)
bae04000 bae05f00 Fs_Rec Fs_Rec.SYS Fri Aug 17 21:49:37 2001 (3B7D8361)
bae06000 bae07080 Beep Beep.SYS Fri Aug 17 21:47:33 2001 (3B7D82E5)
bae08000 bae09080 mnmdd mnmdd.SYS Fri Aug 17 21:57:28 2001 (3B7D8538)
bae0a000 bae0b080 RDPCDD RDPCDD.sys Fri Aug 17 21:46:56 2001 (3B7D82C0)
bae0c000 bae0d440 AsIO AsIO.sys Wed Dec 21 08:55:21 2005 (43A91879)
bae30000 bae31a80 ParVdm ParVdm.SYS Fri Aug 17 21:49:49 2001 (3B7D836D)
bae34000 bae35100 dump_WMILIB dump_WMILIB.SYS Fri Aug 17 22:07:23 2001 (3B7D878B)
bae70000 bae70d00 pciide pciide.sys Fri Aug 17 21:51:49 2001 (3B7D83E5)
bae8b000 bae8bb80 Null Null.SYS Fri Aug 17 21:47:39 2001 (3B7D82EB)
baee5000 baee5d00 dxgthk dxgthk.sys Fri Aug 17 21:53:12 2001 (3B7D8438)
baeef000 baeefc00 audstub audstub.sys Fri Aug 17 21:59:40 2001 (3B7D85BC)
bf800000 bf9c2c80 win32k win32k.sys Mon Sep 15 13:12:42 2008 (48CE513A)
bf9c3000 bf9d4600 dxg dxg.sys Sun Apr 13 19:38:27 2008 (48025323)
bf9d5000 bff9c080 nv4_disp nv4_disp.dll Tue Oct 07 22:19:43 2008 (48EBD26F)
bffa0000 bffe5c00 ATMFD ATMFD.DLL Mon Apr 14 01:09:55 2008 (4802A0D3)

Unloaded modules:
ab836000 ab861000 kmixer.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
ab836000 ab861000 kmixer.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
ab813000 ab836000 aec.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
ac1b5000 ac1e0000 kmixer.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
ac1b5000 ac1e0000 kmixer.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
ad2da000 ad305000 kmixer.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
ad47d000 ad48a000 DMusic.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
ad4ad000 ad4bb000 swmidi.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
bae2e000 bae30000 splitter.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
bae8a000 bae8b000 drmkaud.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
ad3a5000 ad3c8000 aec.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
ba9d8000 ba9e1000 processr.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
babb8000 babbd000 Cdaudio.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
ba422000 ba425000 Sfloppy.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
Closing open log file c:temp\debuglog.txt

 

Hi-

Let's try a slightly different approach here:

Fire up driver verifier by going start>run>verifier.exe

1. Create Custom Settings
2. Select individual settings from list
3. Check everything but "low resource simulation "
4. Select drivers from a list
5. Click the provider heading to sort
6. Check everything that doesn't have Microsoft as the provider
7. Pick your C drive
8. Finish & reboot

Next time the box crashes, post that analysis again. Driver verifier adds a bunch of checks to help us identify the culprit.

 

Hi mate and thank you for your reply..
after much gnashing of teeth & more BSOD's,
plus a few trojans appearing-I bit the bullet over the weekend
and went for a reformat & clean install,and have only just got
back on the internet etc..
Hopefully this wil cure things.
So thank you for the input as I will certainly make use of it,

cheers mint.