Hi, I have problem with Zone Alarm Security Suite
(vsdatant.sys). If installed with together with TDIFW
it caused BSOD of system with
DRIVER_IRQL_NOT_LESS_OR_EQUAL error.
There are these lines in memory.dmp:
DRIVER_IRQL_NOT_LESS_OR_EQUAL (d1)
An attempt was made to access a pageable (or completely
invalid) address at an
interrupt request level (IRQL) that is too high. This
is usually
caused by drivers using improper addresses.
If kernel debugger is available get stack backtrace.
Arguments:
Arg1: 008bcfc8, memory referenced
Arg2: 00000002, IRQL
Arg3: 00000000, value 0 = read operation, 1 = write
operation
Arg4: fc3ad0dd, address which referenced memory
Debugging Details:
------------------
READ_ADDRESS: 008bcfc8
CURRENT_IRQL: 2
FAULTING_IP:
cp_tdifw_drv!tdi_event_receive+14d
[v:\parentalcontrol\cp_tdi\src\drv\ev_recv.c @ 93]
fc3ad0dd 8b5160 mov edx,[ecx+0x60]
DEFAULT_BUCKET_ID: DRIVER_FAULT
BUGCHECK_STR: 0xD1
LAST_CONTROL_TRANSFER: from fc35bdcf to fc3ad0dd
LOCK_ADDRESS: 805415e0 -- (!locks 805415e0)
Resource @ nt!PiEngineLock (0x805415e0) Available
Contention Count = 1
1 total locks
PNP_TRIAGE:
Lock address : 0x805415e0
Thread Count : 0
Thread address: 0x00000000
Thread wait : 0x0
TRAP_FRAME: f9390aa4 -- (.trap fffffffff9390aa4)
ErrCode = 00000000
eax=f9390b70 ebx=fccc8630 ecx=008bcf68 edx=f9390b70
esi=fc3acf90 edi=fccc8630
eip=fc3ad0dd esp=f9390b18 ebp=f9390b38 iopl=0 nv up ei
pl nz na pe nc
cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000
efl=00010202
cp_tdifw_drv!tdi_event_receive+0x14d:
0008:fc3ad0dd 8b5160 mov edx,[ecx+0x60]
ds:0023:008bcfc8=????????
Resetting default scope
STACK_TEXT:
f9390b38 fc35bdcf fccc547c fcce8b38 00000c20
cp_tdifw_drv!tdi_event_receive+0x14d
[v:\parentalcontrol\cp_tdi\src\drv\ev_recv.c @ 93]
WARNING: Stack unwind information not available.
Following frames may be wrong.
fecc6290 804ea221 80d63a30 00000000 80639669
vsdatant+0x40dcf
fecc62f0 8062c190 80d5e030 81abcf48 00040200
nt!IopfCallDriver+0x31
fecc6378 8056f1ce 00000000 80e9a4c8 80e9a4c8
nt!IovCallDriver+0x9e
fecc63a4 804f14bb 80d5e030 fc90faa4 80e9a5a8
nt!IopSynchronousCall+0xb8
fecc63e4 8056b8a0 00000000 80e9a610 80da1701
nt!IopQueryDeviceRelations+0x39
fecc63f8 00000000 00000000 00000000 00000000
nt!PipEnumerateDevice+0x20
Line 93 in ev_recv.c is
PIO_STACK_LOCATION irps =
IoGetCurrentIrpStackLocation(*IoRequestPacket);
Does anybody know, how to solve this problem?
Thanks,
Marun
Logged In: NO
yes only one firewall running or it's a big problem