The driver IRQL not less than or equal to value (kbdclass.sys) BSOD?
The driver IRQL not less than or equal to value (kbdclass.sys) BSOD?
Hello everyone,
I bought a Medion laptop 2 months ago, and since the first days I have been experiencing blue screens with the reason : DRIVER IRQL NOT LESS OR EQUAL (kbdclass.sys)
The laptop came without OS, so I installed Windows 11 and all the drivers (dowloaded from
the official website
).
I have been testing everything that I have found online, but it's been 2 months and nothing works... I also updated the Bios from the link of the official website.
Can I ask you a little help and read the analysis mini dump in order to find what can be done to fix it ?
Here is the mini dump :
Code:
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
DRIVER_IRQL_NOT_LESS_OR_EQUAL (d1)
An attempt was made to access a pageable (or completely invalid) address at an
interrupt request level (IRQL) that is too high. This is usually
caused by drivers using improper addresses.
If kernel debugger is available get stack backtrace.
Arguments:
Arg1: ffffa58ff3e70e74, memory referenced
Arg2: 0000000000000002, IRQL
Arg3: 0000000000000000, value 0 = read operation, 1 = write operation
Arg4: fffff805a5dd32d2, address which referenced memory
Debugging Details:
------------------
KEY_VALUES_STRING: 1
Key : Analysis.CPU.mSec
Value: 1687
Key : Analysis.Elapsed.mSec
Value: 5691
Key : Analysis.IO.Other.Mb
Value: 0
Key : Analysis.IO.Read.Mb
Value: 0
Key : Analysis.IO.Write.Mb
Value: 0
Key : Analysis.Init.CPU.mSec
Value: 218
Key : Analysis.Init.Elapsed.mSec
Value: 7863
Key : Analysis.Memory.CommitPeak.Mb
Value: 101
Key : Bugcheck.Code.LegacyAPI
Value: 0xd1
Key : Dump.Attributes.AsUlong
Value: 1808
Key : Dump.Attributes.DiagDataWrittenToHeader
Value: 1
Key : Dump.Attributes.ErrorCode
Value: 0
Key : Dump.Attributes.KernelGeneratedTriageDump
Value: 1
Key : Dump.Attributes.LastLine
Value: Dump completed successfully.
Key : Dump.Attributes.ProgressPercentage
Value: 0
Key : Failure.Bucket
Value: AV_kbdclass!memcpy
Key : Failure.Hash
Value: {dfec7698-3775-c204-13ee-4d0f5bb2791c}
Key : Hypervisor.Enlightenments.ValueHex
Value: 1417df84
Key : Hypervisor.Flags.AnyHypervisorPresent
Value: 1
Key : Hypervisor.Flags.ApicEnlightened
Value: 0
Key : Hypervisor.Flags.ApicVirtualizationAvailable
Value: 1
Key : Hypervisor.Flags.AsyncMemoryHint
Value: 0
Key : Hypervisor.Flags.CoreSchedulerRequested
Value: 0
Key : Hypervisor.Flags.CpuManager
Value: 1
Key : Hypervisor.Flags.DeprecateAutoEoi
Value: 1
Key : Hypervisor.Flags.DynamicCpuDisabled
Value: 1
Key : Hypervisor.Flags.Epf
Value: 0
Key : Hypervisor.Flags.ExtendedProcessorMasks
Value: 1
Key : Hypervisor.Flags.HardwareMbecAvailable
Value: 1
Key : Hypervisor.Flags.MaxBankNumber
Value: 0
Key : Hypervisor.Flags.MemoryZeroingControl
Value: 0
Key : Hypervisor.Flags.NoExtendedRangeFlush
Value: 0
Key : Hypervisor.Flags.NoNonArchCoreSharing
Value: 1
Key : Hypervisor.Flags.Phase0InitDone
Value: 1
Key : Hypervisor.Flags.PowerSchedulerQos
Value: 0
Key : Hypervisor.Flags.RootScheduler
Value: 0
Key : Hypervisor.Flags.SynicAvailable
Value: 1
Key : Hypervisor.Flags.UseQpcBias
Value: 0
Key : Hypervisor.Flags.Value
Value: 21631230
Key : Hypervisor.Flags.ValueHex
Value: 14a10fe
Key : Hypervisor.Flags.VpAssistPage
Value: 1
Key : Hypervisor.Flags.VsmAvailable
Value: 1
Key : Hypervisor.RootFlags.AccessStats
Value: 1
Key : Hypervisor.RootFlags.CrashdumpEnlightened
Value: 1
Key : Hypervisor.RootFlags.CreateVirtualProcessor
Value: 1
Key : Hypervisor.RootFlags.DisableHyperthreading
Value: 0
Key : Hypervisor.RootFlags.HostTimelineSync
Value: 1
Key : Hypervisor.RootFlags.HypervisorDebuggingEnabled
Value: 0
Key : Hypervisor.RootFlags.IsHyperV
Value: 1
Key : Hypervisor.RootFlags.LivedumpEnlightened
Value: 1
Key : Hypervisor.RootFlags.MapDeviceInterrupt
Value: 1
Key : Hypervisor.RootFlags.MceEnlightened
Value: 1
Key : Hypervisor.RootFlags.Nested
Value: 0
Key : Hypervisor.RootFlags.StartLogicalProcessor
Value: 1
Key : Hypervisor.RootFlags.Value
Value: 1015
Key : Hypervisor.RootFlags.ValueHex
Value: 3f7
BUGCHECK_CODE: d1
BUGCHECK_P1: ffffa58ff3e70e74
BUGCHECK_P2: 2
BUGCHECK_P3: 0
BUGCHECK_P4: fffff805a5dd32d2
FILE_IN_CAB: 110523-20015-01.dmp
TAG_NOT_DEFINED_202b: *** Unknown TAG in analysis list 202b
DUMP_FILE_ATTRIBUTES: 0x1808
Kernel Generated Triage Dump
READ_ADDRESS: fffff8057b11d468: Unable to get MiVisibleState
Unable to get NonPagedPoolStart
Unable to get NonPagedPoolEnd
Unable to get PagedPoolStart
Unable to get PagedPoolEnd
unable to get nt!MmSpecialPagesInUse
ffffa58ff3e70e74
BLACKBOXBSD: 1 (!blackboxbsd)
BLACKBOXNTFS: 1 (!blackboxntfs)
BLACKBOXPNP: 1 (!blackboxpnp)
BLACKBOXWINLOGON: 1
CUSTOMER_CRASH_COUNT: 1
PROCESS_NAME: System
TRAP_FRAME: fffff8057d706030 -- (.trap 0xfffff8057d706030)
NOTE: The trap frame does not contain all registers.
Some register values may be zeroed or incorrect.
rax=ffffa58f179ef800 rbx=0000000000000000 rcx=ffffa58f179ef800
rdx=00000000dc481674 rsi=0000000000000000 rdi=0000000000000000
rip=fffff805a5dd32d2 rsp=fffff8057d7061c8 rbp=fffff8057d706240
r8=00000000000000c0 r9=0000000000000038 r10=ffffa58f062bc000
r11=ffffa58ff3e70f34 r12=0000000000000000 r13=0000000000000000
r14=0000000000000000 r15=0000000000000000
iopl=0 nv up ei pl nz na po nc
kbdclass!memcpy+0x92:
fffff805`a5dd32d2 0f100411 movups xmm0,xmmword ptr [rcx+rdx] ds:ffffa58f`f3e70e74=????????????????????????????????
Resetting default scope
STACK_TEXT:
fffff805`7d705ee8 fffff805`7a827da9 : 00000000`0000000a ffffa58f`f3e70e74 00000000`00000002 00000000`00000000 : nt!KeBugCheckEx
fffff805`7d705ef0 fffff805`7a823434 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiBugCheckDispatch+0x69
fffff805`7d706030 fffff805`a5dd32d2 : fffff805`a5dd5b5d 00000000`0e4ae0dc fffff805`7d706240 ffffa58f`0cfa65a0 : nt!KiPageFault+0x474
fffff805`7d7061c8 fffff805`a5dd5b5d : 00000000`0e4ae0dc fffff805`7d706240 ffffa58f`0cfa65a0 fffff805`a5da2d5c : kbdclass!memcpy+0x92
fffff805`7d7061d0 fffff805`b6cd1511 : ffffa58e`ffcc8ac0 fffff805`7d706398 ffffa58f`062c7310 fffff805`7d706398 : kbdclass!KeyboardClassServiceCallback+0x16d
fffff805`7d706270 ffffa58e`ffcc8ac0 : fffff805`7d706398 ffffa58f`062c7310 fffff805`7d706398 00000000`00000008 : HKKbdFltr+0x1511
fffff805`7d706278 fffff805`7d706398 : ffffa58f`062c7310 fffff805`7d706398 00000000`00000008 fffff805`7d7062f0 : 0xffffa58e`ffcc8ac0
fffff805`7d706280 ffffa58f`062c7310 : fffff805`7d706398 00000000`00000008 fffff805`7d7062f0 ffffa58e`ffcc8970 : 0xfffff805`7d706398
fffff805`7d706288 fffff805`7d706398 : 00000000`00000008 fffff805`7d7062f0 ffffa58e`ffcc8970 fffff805`b6cd13f0 : 0xffffa58f`062c7310
fffff805`7d706290 00000000`00000008 : fffff805`7d7062f0 ffffa58e`ffcc8970 fffff805`b6cd13f0 fffff805`7651b180 : 0xfffff805`7d706398
fffff805`7d706298 fffff805`7d7062f0 : ffffa58e`ffcc8970 fffff805`b6cd13f0 fffff805`7651b180 fffff805`a5dab848 : 0x8
fffff805`7d7062a0 ffffa58e`ffcc8970 : fffff805`b6cd13f0 fffff805`7651b180 fffff805`a5dab848 ffffa58e`ffcc8ac0 : 0xfffff805`7d7062f0
fffff805`7d7062a8 fffff805`b6cd13f0 : fffff805`7651b180 fffff805`a5dab848 ffffa58e`ffcc8ac0 fffff805`7d706329 : 0xffffa58e`ffcc8970
fffff805`7d7062b0 fffff805`7651b180 : fffff805`a5dab848 ffffa58e`ffcc8ac0 fffff805`7d706329 ffffa58e`fcdecde0 : HKKbdFltr+0x13f0
fffff805`7d7062b8 fffff805`a5dab848 : ffffa58e`ffcc8ac0 fffff805`7d706329 ffffa58e`fcdecde0 fffff805`a5db0258 : 0xfffff805`7651b180
fffff805`7d7062c0 fffff805`7a62a72c : 00000000`00000000 ffff9001`00000010 00000000`00000000 ffff9001`9d3c15b0 : i8042prt!I8042KeyboardIsrDpc+0x1a8
fffff805`7d706390 fffff805`7a629731 : 00000000`00000000 fffff805`7d7069d0 00000000`00000000 00000000`0000044d : nt!KiExecuteAllDpcs+0x42c
fffff805`7d7068d0 fffff805`7a81753e : 00000000`00000000 fffff805`7651b180 fffff805`7b14d6c0 ffffa58e`ffa6e040 : nt!KiRetireDpcList+0x1b1
fffff805`7d706b80 00000000`00000000 : fffff805`7d707000 fffff805`7d700000 00000000`00000000 00000000`00000000 : nt!KiIdleLoop+0x9e
SYMBOL_NAME: kbdclass!memcpy+92
MODULE_NAME: kbdclass
IMAGE_NAME: kbdclass.sys
IMAGE_VERSION: 10.0.22621.1774
STACK_COMMAND: .cxr; .ecxr ; kb
BUCKET_ID_FUNC_OFFSET: 92
FAILURE_BUCKET_ID: AV_kbdclass!memcpy
OSPLATFORM_TYPE: x64
OSNAME: Windows 10
FAILURE_ID_HASH: {dfec7698-3775-c204-13ee-4d0f5bb2791c}
Followup: MachineOwner
Edit :
Note that I have installed Windows 11 (not windows 10)
My laptop is a Medion Deputy P40 (MSN: 3003 5597)
Processor 12th Gen Intel® Core™ i5-12450H, 2000 Mhz, 8 Core(s), 12 Logical Processor(s)
BIOS Version/Date INSYDE Corp. 1.07.09RME2, 17/07/2023
Many thanks
If you're sure you don't require the keyboard features from the Hotkey/Control Centre product, or if even the newest release triggers BSODs, you can eliminate the hkkbdflt.sys filter driver from the keyboard driver stack by modifying the Windows registry. This task requires editing the registry, so if you're not confident in handling it yourself, you should seek assistance from someone skilled.
kbdclass is connected to keyboards.
HKKbdFltr+0x1511 relates to hotkeys.
It might be your touchpad software, but I don’t know the manufacturer.
Since Medion only offers driver packages, it’s hard to confirm what’s installed.
Please follow option one on the provided link.
Then proceed with the steps below: Small memory dumps – Windows will generate a small memory dump (minidump) after each BSOD.
Open Windows File Explorer
Go to C:\Windows\Minidump
Move the mini-dump files to your Desktop
Avoid using Winzip; use Windows’ built-in feature
Select the files on your Desktop, right-click and choose ‘Send to’ – Compressed (zipped) folder
Upload the zip file to the Cloud (OneDrive, DropBox, etc.)
Share the link to the zip file so we can review it together.
Hello, thank you for your prompt reply! That means a lot.
I regret that I can't perform the first step of your link since I'm using Windows 11, and the instructions seem tailored for Windows 10. Still, if the aim was to obtain crash dump files, here are five or six links I've attached in a zip file:
https://go.wetransfer.com/t-TbQD4YXXH3
I believe Windows 11 automatically saves them. Was that what you were looking for?
Regarding HKKbdFltr, I've noticed in several forums that this was the root cause of my issue. HKKbdFltr is a file included with the Control Center, which can be downloaded from the Medion website as part of the drivers package.
I conducted some tests: after completely uninstalling the Control Center, I still retained the BDOS. Recently, I reinstalled it but placed files related to HKKbdFltr in the trash, yet the BDoS persisted (for example, I moved HKKbdFltr.sys to the trash).
I need to create a Win 11 version then. It's mostly similar, just figuring out how to reach step 2.
Report
- Mostly for me
File: 110523-20015-01.dmp (Nov 6 2023 - 02:41:25)
BugCheck: [DRIVER_IRQL_NOT_LESS_OR_EQUAL (D1)]
*** WARNING: Timestamp verification failed for HKKbdFltr.sys
Likely due to: kbdclass.sys (Process: System)
Duration: 12 Day(s), 7 Hour(s), 01 Min(s), 24 Sec(s)
File: 102323-17734-01.dmp (Oct 24 2023 - 06:57:51)
BugCheck: [DRIVER_IRQL_NOT_LESS_OR_EQUAL (D1)]
*** WARNING: Timestamp verification failed for HKKbdFltr.sys
Likely due to: kbdclass.sys (Process: System)
Duration: 0 Day(s), 1 Hour(s), 37 Min(s), 18 Sec(s)
File: 102223-17796-01.dmp (Oct 23 2023 - 03:12:55)
BugCheck: [DRIVER_IRQL_NOT_LESS_OR_EQUAL (D1)]
*** WARNING: Timestamp verification failed for HKKbdFltr.sys
Likely due to: kbdclass.sys (Process: Overwatch.exe)
Duration: 5 Day(s), 19 Hour(s), 27 Min(s), 00 Sec(s)
File: 100923-17312-01.dmp (Oct 10 2023 - 07:28:08)
BugCheck: [DRIVER_IRQL_NOT_LESS_OR_EQUAL (D1)]
*** WARNING: Timestamp verification failed for HKKbdFltr.sys
Likely due to: kbdclass.sys (Process: Overwatch.exe)
Duration: 0 Day(s), 23 Hour(s), 43 Min(s), 41 Sec(s)
File: 100823-20500-01.dmp (Oct 9 2023 - 07:24:16)
BugCheck: [DRIVER_IRQL_NOT_LESS_OR_EQUAL (D1)]
*** WARNING: Timestamp verification failed for HKKbdFltr.sys
Likely due to: kbdclass.sys (Process: Razer Synapse)
Duration: 1 Day(s), 22 Hour(s), 00 Min(s), 19 Sec(s)
File: 100823-19062-01.dmp (Oct 9 2023 - 07:44:09)
BugCheck: [DRIVER_IRQL_NOT_LESS_OR_EQUAL (D1)]
*** WARNING: Timestamp verification failed for HKKbdFltr.sys
Likely due to: kbdclass.sys (Process: System)
Duration: 0 Day(s), 0 Hour(s), 19 Min(s), 34 Sec(s)
Mar 06 2019
HKKbdFltr.sys – HotKey Keyboard Class Filter driver (Insyde Software Corp.)
You might attempt autoruns and halt the driver at startup by following this link:
https://learn.microsoft.com/en-us/sysint...s/autoruns
Running it as administrator is recommended, since it originates from Microsoft. Disabling it should resolve the issue, but if any application still relies on it, restarting after stopping it may help. Autoruns can also terminate drivers, though caution is advised—it could be required for updates.
The same driver was responsible five years ago with Medion Erasers; see the link for details.
Reference: Microsoft catalog update for Windows 11 touchpad drivers (only three are from Asus).
If you're certain that you don't need the keyboard features provided by the Hotkey/Control Centre product, or if even the latest version causes BSODs, you can remove the hkkbdflt.sys filter driver provided by the Hotkey/Control Centre product from the keyboard driver stack.
This involves editing the Windows registry, so if you're not comfortable doing this yourself you'll need to find somebody competent to do it for you.
Here's what you need to do...
Open the registry editor (regedit).
Navigate to the key HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4d36e96b-e325-11ce-bfc1-08002be10318}.
Note: You might find it easier to use the Edit > Find option and just enter {4d36e96b-e325-11ce-bfc1-08002be10318} into the find box.
Also Note: there are many keys with VERY similar names, be CERTAIN you're looking at the correct one!
Right-click on the key in the left-hand pane and select Export. Choose a folder and filename of your choice and click OK to save a copy of the existing key (just in case).
In the right-hand pane, in the UpperFilters entry you'll probably see hkkbdfltr kbdclass. Delete the hkkbdfltr entry so you just have kbdclass in there (DO NOT delete kbdclass!)
If you have other entries in the UpperFilters list just delete hkkbdfltr and leave the others alone (for now).
Reboot.
See how that goes. If things fall apart and you want to restore the registry key you changed, navigate to where you saved the exported .reg file and double-click the .reg file. Accept the warning and the exported key will be restored.
Thank you very much for your replies.
@Colif and @ubuysa, your assistance is really appreciated. I'll check the registry solution first, and if it doesn't succeed, I'll try @Colif's Autorun fix.
Once again, thank you! I'll keep you updated.
I completed the registration process and didn't experience any crashes during the 2-3 hours of gaming yesterday, which looks good 🤞🤞
Thanks to both of you!