BSoD driver irql_less_or_not_equal (Qcamain 10x64.sys) Windows 10

Ryan_126

Commendable
Apr 21, 2016
1
0
1,510
I have a new Laptop and I have got this message about 7 times during my first two weeks. My screen goes to the BSoD and then restarts. This is the information from my minidump file. Is there anyone who can help me out?

Loading Dump File [C:\Windows\Minidump\042016-13171-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available

Symbol search path is: srv*
Executable search path is:
Windows 10 Kernel Version 10240 MP (4 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS Personal
Built by: 10240.16724.amd64fre.th1_st1.160222-1812
Machine Name:
Kernel base = 0xfffff801`7e484000 PsLoadedModuleList = 0xfffff801`7e7a9070
Debug session time: Wed Apr 20 19:34:35.377 2016 (UTC - 5:00)
System Uptime: 0 days 2:04:26.171
Loading Kernel Symbols
...............................................................
................................................................
....................................................
Loading User Symbols
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck D1, {349d45e0, 2, 0, fffff80069403756}

*** WARNING: Unable to verify timestamp for Qcamain10x64.sys
*** ERROR: Module load completed but symbols could not be loaded for Qcamain10x64.sys
Probably caused by : Qcamain10x64.sys ( Qcamain10x64+f3756 )

Followup: MachineOwner
---------

0: kd> !analyze -v
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

DRIVER_IRQL_NOT_LESS_OR_EQUAL (d1)
An attempt was made to access a pageable (or completely invalid) address at an
interrupt request level (IRQL) that is too high. This is usually
caused by drivers using improper addresses.
If kernel debugger is available get stack backtrace.
Arguments:
Arg1: 00000000349d45e0, memory referenced
Arg2: 0000000000000002, IRQL
Arg3: 0000000000000000, value 0 = read operation, 1 = write operation
Arg4: fffff80069403756, address which referenced memory

Debugging Details:
------------------


DUMP_CLASS: 1

DUMP_QUALIFIER: 400

BUILD_VERSION_STRING: 10240.16724.amd64fre.th1_st1.160222-1812

SYSTEM_MANUFACTURER: LENOVO

SYSTEM_PRODUCT_NAME: 80FG

SYSTEM_SKU: LENOVO_MT_80FG_BU_idea_FM_Lenovo Z70-80

SYSTEM_VERSION: Lenovo Z70-80

BIOS_VENDOR: LENOVO

BIOS_VERSION: ABCN95WW

BIOS_DATE: 07/31/2015

BASEBOARD_MANUFACTURER: LENOVO

BASEBOARD_PRODUCT: Lenovo Z70-80

BASEBOARD_VERSION: SDK0J40709 WIN

DUMP_TYPE: 2

BUGCHECK_P1: 349d45e0

BUGCHECK_P2: 2

BUGCHECK_P3: 0

BUGCHECK_P4: fffff80069403756

READ_ADDRESS: fffff8017e848500: Unable to get MiVisibleState
00000000349d45e0

CURRENT_IRQL: 2

FAULTING_IP:
Qcamain10x64+f3756
fffff800`69403756 488b4808 mov rcx,qword ptr [rax+8]

CPU_COUNT: 4

CPU_MHZ: 95a

CPU_VENDOR: GenuineIntel

CPU_FAMILY: 6

CPU_MODEL: 3d

CPU_STEPPING: 4

CPU_MICROCODE: 6,3d,4,0 (F,M,S,R) SIG: 1F'00000000 (cache) 1F'00000000 (init)

CUSTOMER_CRASH_COUNT: 1

DEFAULT_BUCKET_ID: WIN8_DRIVER_FAULT

BUGCHECK_STR: AV

PROCESS_NAME: System

ANALYSIS_SESSION_HOST: LAPTOP-CLEBQRT5

ANALYSIS_SESSION_TIME: 04-21-2016 10:44:44.0306

ANALYSIS_VERSION: 10.0.10586.567 amd64fre

TRAP_FRAME: ffffd0010a0303b0 -- (.trap 0xffffd0010a0303b0)
NOTE: The trap frame does not contain all registers.
Some register values may be zeroed or incorrect.
rax=00000000349d45d8 rbx=0000000000000000 rcx=ffffe000442dcf20
rdx=0000000034019468 rsi=0000000000000000 rdi=0000000000000000
rip=fffff80069403756 rsp=ffffd0010a030548 rbp=ffffd000232d1740
r8=ffffe000442dcd10 r9=0000000000000000 r10=ffffe000442dcd48
r11=ffffe000442dcd10 r12=0000000000000000 r13=0000000000000000
r14=0000000000000000 r15=0000000000000000
iopl=0 nv up ei ng nz na po nc
Qcamain10x64+0xf3756:
fffff800`69403756 488b4808 mov rcx,qword ptr [rax+8] ds:00000000`349d45e0=????????????????
Resetting default scope

LAST_CONTROL_TRANSFER: from fffff8017e5ddea9 to fffff8017e5d34d0

STACK_TEXT:
ffffd001`0a030268 fffff801`7e5ddea9 : 00000000`0000000a 00000000`349d45e0 00000000`00000002 00000000`00000000 : nt!KeBugCheckEx
ffffd001`0a030270 fffff801`7e5dc6c8 : 43383932`39443430 00000000`00000a30 00000000`00000000 00000000`00000000 : nt!KiBugCheckDispatch+0x69
ffffd001`0a0303b0 fffff800`69403756 : fffff800`69403918 00000000`00000000 00000000`00000000 ffffdff0`3fa80004 : nt!KiPageFault+0x248
ffffd001`0a030548 fffff800`69403918 : 00000000`00000000 00000000`00000000 ffffdff0`3fa80004 fffff801`7e48c982 : Qcamain10x64+0xf3756
ffffd001`0a030550 00000000`00000000 : 00000000`00000000 ffffdff0`3fa80004 fffff801`7e48c982 00000000`00000002 : Qcamain10x64+0xf3918


STACK_COMMAND: kb

THREAD_SHA1_HASH_MOD_FUNC: 0b080f895832826cf63167c5dbdec7b669fdd497

THREAD_SHA1_HASH_MOD_FUNC_OFFSET: f69c436ef56e3d574cbfd3e64d07bd17f1b4c532

THREAD_SHA1_HASH_MOD: ee8370cc880645c3b37481ed6d2a5049107db083

FOLLOWUP_IP:
Qcamain10x64+f3756
fffff800`69403756 488b4808 mov rcx,qword ptr [rax+8]

FAULT_INSTR_CODE: 8488b48

SYMBOL_STACK_INDEX: 3

SYMBOL_NAME: Qcamain10x64+f3756

FOLLOWUP_NAME: MachineOwner

MODULE_NAME: Qcamain10x64

IMAGE_NAME: Qcamain10x64.sys

DEBUG_FLR_IMAGE_TIMESTAMP: 55a66426

BUCKET_ID_FUNC_OFFSET: f3756

FAILURE_BUCKET_ID: AV_Qcamain10x64!Unknown_Function

BUCKET_ID: AV_Qcamain10x64!Unknown_Function

PRIMARY_PROBLEM_CLASS: AV_Qcamain10x64!Unknown_Function

TARGET_TIME: 2016-04-21T00:34:35.000Z

OSBUILD: 10240

OSSERVICEPACK: 0

SERVICEPACK_NUMBER: 0

OS_REVISION: 0

SUITE_MASK: 784

PRODUCT_TYPE: 1

OSPLATFORM_TYPE: x64

OSNAME: Windows 10

OSEDITION: Windows 10 WinNt TerminalServer SingleUserTS Personal

OS_LOCALE:

USER_LCID: 0

OSBUILD_TIMESTAMP: 2016-02-23 06:23:36

BUILDDATESTAMP_STR: 160222-1812

BUILDLAB_STR: th1_st1

BUILDOSVER_STR: 10.0.10240.16724.amd64fre.th1_st1.160222-1812

ANALYSIS_SESSION_ELAPSED_TIME: 67f

ANALYSIS_SOURCE: KM

FAILURE_ID_HASH_STRING: km:av_qcamain10x64!unknown_function

FAILURE_ID_HASH: {f52cafb4-1320-aedf-2a5d-ab5464b9e487}

Followup: MachineOwner
 
Solution
This is a really easy fix. All you need to do is either re-install or update Qcamain10x64.sys. Don't know if it's just out of date or compromised.

I'd recommend re-installing the driver first in Safe Mode. If that works then load into Windows normally and take a backup. If you use a disk imager like Macrium Reflect or a snapshot tool like Rollback rx use that to back up the machine, then just run the update.

If the above solution doesn't fix in Safe Mode, you'll want to update the driver.

If all else fails, run Startup Repair.
This is a really easy fix. All you need to do is either re-install or update Qcamain10x64.sys. Don't know if it's just out of date or compromised.

I'd recommend re-installing the driver first in Safe Mode. If that works then load into Windows normally and take a backup. If you use a disk imager like Macrium Reflect or a snapshot tool like Rollback rx use that to back up the machine, then just run the update.

If the above solution doesn't fix in Safe Mode, you'll want to update the driver.

If all else fails, run Startup Repair.
 
Solution