KAV "Kaspersky Anti-Virus" Causes Blue Screen "no_more_irp_stack_locations"

I recently downloaded a copy of KAV Pro. After installing the
product, the installer asks me to reboot my machine, so I do…and on
the next boot, I get a blue screen error that reads
"no_more_irp_stack_locations". I have to restart in safe mode and then
uninstall KAV so that my machine will boot.

I tried everything to get this error to go away. I tried uninstalling
my video driver; I tried removing all over clocking from my CPU and
memory; I tried using very conservative settings in my bios like
disabling video bios caching and memory holes.

I tried disconnecting all of my USB devices except for my internal
card reader. I tried increasing the IRPStackSize value in my registry
to 20 and then 30 and then 50. It still refused to boot. I then tried
selecting only certain components of KAV in my installation. I found
that my machine will boot if I install KAV without the real time
monitor. As soon as I install the real time monitor…boom…my machine
kicks the "no_more_irp_stack_locations" blue screen error on the next
boot. This is happening on my machine with both of my operating
systems. The error is the same on both Windows 2000 and XP except on
XP it happens on shutdown instead of boot for some reason. I tried
the latest KAV 4.5.0.94 version from your site as well as the new KAV
5.0 beta 2; both versions will not work on my system.

I have never, ever, had a blue screen error on my system prior to
this. The following security products have worked well on my system
without any problems: NOD32, NIS 2003, NIS2004, MacAfee VirusScan,
TDS-3, TrojanHunter, Sygate Pro, Zonealarm Pro, and Grisoft AVG. None
of them are currently installed…I just want you to know that my system
has accepted these other program in the past without any troubles.

After much head scratching, I decided to do a completely fresh
installation of windows and try it again. I reformatted and
reinstalled windows on my disk and tried installing KAV again. The
same thing happened on the first reboot after installation. I decided
to dig deeper into my bios at this point. I started disabling
peripherals and then tried booting after each one was disabled. As a
last resort, I moved my boot drive to the standard Intel IDE
controller and then tried disabling my IDE RAID controller, it is a
High Point HPT374 RAID controller that is integrated into my Abit
motherboard...I found that disabling the HPT374 RAID controller
allowed my machine to boot with the KAV monitor installed. This is
not a solution, but at least it gives us some direction. After
discovering this, I tried updating my RAID controller's drivers and
bios but the error was persistent. My conclusion is that currently
KAV is not compatible with systems that have a HPT374 IDE RAID
controller or more specifically --- with the Abit IT7 motherboard.
Perhaps KAV is also not compatible with other RAID controllers. This
is unfortunate because the HPT374 controller was used exclusively in
many of the new Abit boards that have been released in the past few
years. There are many potential customers out there that have the
same configuration as this. Here is a link to the manufacturer of my
RAID controller http://www.highpoint-tech.com . Here is a link to my
motherboard manufacturer's web site
http://www.abit-usa.com/products/mb/...ies=1&model=33
.. Lastly, here is a link to a google groups search query. It will
show you that there are others who are experiencing this problem as
well: http://groups.google.com/groups?hl=e...=Google+Search
..


Please help me sort this out

--------------------------------------------------------------------------------


My system specs are below:

Motherboard: Abit – IT7
Video card: Vision Tek Geforce4 ti4200
Processor: Pentium 2.2b Northwood (BX80532PE2266d)
Memory: 512mb Corsair pc3000 memory stick (CMX5123000C2)

Hard drives: Qty (1) Western Digital 80GB (WD800JB)
Qty (1) Western Digital 40GB (WD400BB)
Qty (2) Toshiba (formerly IBM) 40GB
Deskstar 120GXP (IC35L040AVVA07)

All drives are installed on the HPT374
IDE RAID controller of the Motherboard

Floppy drive: Sony
DVD+R/W-R/W drive: Sony (DRU500ax)
Modem: USR (5610b) Controller Based PCI Modem
Power supply: ANTEC TruePower 430
CD RW Drive: Sony (CRX220A1)
Case: Lian-li (PC-65)
USB keyboard: Microsoft Wireless Optical Desktop Elite
USB mouse: Microsoft Wireless Intellimouse Explorer
USB PCI Card: ADS Technologies USB Turbo 2.0 PCI card
Card Reader: Atech Flash Technologies 9 in 1
internal/external USB 2.0 flash card reader

Printer: HP Office Jet G55 All-in-one
Web cam: Logitech Quickcam

On 7 Mar 2004 18:02:21 -0800, bgilmet@new.rr.com (Brandon) wrote:

>I recently downloaded a copy of KAV Pro. After installing the
>product, the installer asks me to reboot my machine, so I do…and on
>the next boot, I get a blue screen error that reads
>"no_more_irp_stack_locations". I have to restart in safe mode and then
>uninstall KAV so that my machine will boot.
>


Have you contacted Kaspersky?

On 7 Mar 2004 18:02:21 -0800, bgilmet@new.rr.com (Brandon) wrote:

>I found that disabling the HPT374 RAID controller
>allowed my machine to boot with the KAV monitor installed. This is
>not a solution, but at least it gives us some direction.

Please inform Kaspersky about this.

I have Highpoint Raid 370 on my mobo and I do not suffer from this
problem (I have seen it occasionally a couple of times).
Jari

Thank you both for your replies.

I did inform Kaspersky about it yesterday. Via e-mail to their
support dept. and I put a post on their forum. I hope that I will
hear from them shortly.

> I have Highpoint Raid 370 on my mobo and I do not suffer from this
> problem (I have seen it occasionally a couple of times).

Perhaps there is some fundamental difference between the HPT370 and
the HPT374, or maybe not.

Perhaps it is related to the amount of disks that are on the
controller. I am spinning 4 disks on my HPT374.

How many do you spin on yours?

If it is not the controller that KAV does not like, (and I truly do
believe it is the HPT374 controller that KAV is fighting with) then it
must be something downstream of the controller that KAV does not like.
I hypothesize that it could be the amount of disks, or the
configuration of the disks, or the particular make and brand of the
disks.

On 8 Mar 2004 07:09:05 -0800, bgilmet@new.rr.com (Brandon) wrote:

>How many do you spin on yours?

I have 3 disks

I see that you have seen the posting about stacks. Did increasing them
help at all?
Jari

A solution to this problem was provided to me by Kaspersky's Support
team.

There is a registry entry that controls the load order of the
Kaspersky driver that causes this error.

The key is located at:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Klif

Inside of the Klif key is an entry named "Start" the default value is
1.

The possible values for the entry are 1,2, and 3.

The values define the order of driver load:

1. Boot
2. Automatic
3. Demand

Level "2" allows the driver to load after all main drivers have been
loaded.

Kaspersky asked that I try using value "2" by booting into safe mode
and changing the value. They said that this does not reduce
protection level at any rate, but can solve conflicts that can occur
with the IRP stack.

I followed their advice and changed the value from 1 to 2 and it fixed
the problem.

bgilmet@new.rr.com (Brandon) wrote:

>A solution to this problem was provided to me by Kaspersky's Support
>team.
>
>There is a registry entry that controls the load order of the
>Kaspersky driver that causes this error.
>
>The key is located at:
>HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Klif
>
>Inside of the Klif key is an entry named "Start" the default value is
>1.
>
>The possible values for the entry are 1,2, and 3.
>
>The values define the order of driver load:
>
>1. Boot
>2. Automatic
>3. Demand
>
>Level "2" allows the driver to load after all main drivers have been
>loaded.
>
>Kaspersky asked that I try using value "2" by booting into safe mode
>and changing the value. They said that this does not reduce
>protection level at any rate, but can solve conflicts that can occur
>with the IRP stack.
>
>I followed their advice and changed the value from 1 to 2 and it fixed
>the problem.

Thanks for the suggestion; I tried it but it didn't work for me.
Kaspersky Anti-Virus Personal trashed my registry *again.* Had to
restore it form a back-up but that still didn't fix the problem, so I
booted into Win98 and replaced the whole Winnt directory from a
back-up. That restored things to working order, and now I'm running
Kaspersky Anti-Virus Lite again, although it's now expired.

I give up. I've been screwing around for over a week, and have had
only two contacts from Kaspersky tech support--from two different
techs asking me to run the same data-gathering tool they provided; no
feedback from either. If I hadn't backed up my Winnt directory I'd be
SOL!

Larry
---
Reply to larry sabo (one word) at istop dot com.