[Twithh]

Hi, I recently got a bluescreen,I didn't think it was to serious, but after that I've been getting several more of these bluescreens, also the errors i get on the screen is : Driver_IRQL_Less_Or_Not_Equal, Tcpip.sys - adress FFFFF88001887F40 base at FFFFF88001801000, Datestamp 4a5bc26e.

Stop: 0x000000D1 (0x0000000000000000,0x0000000000000002,0x0000000000000000,0xFFFFF88001887F40)

I would upload my dump files, but the site wouldn't let me(yes it's under 1MB).



EDIT: I managed to upload the dump files, it's only 2 files, because i formatted yesterday(thought it would solve my problem).  Dump Files.zip   45.6KB   105 downloads

Edited by Twithh, 25 January 2011 - 09:15 AM.

[Advertisements]

Hello Twithh.... Welcome to
GeeksToGo,


I'm sorry to hear about your issue. We will try to help you resolve this as soon as possible.

• Please understand we are all volunteers and we are not here all the time.
• Sometimes it may be a extended amount of time to get back to you. If it has been
  more then 3 days please shoot me a PM and I will try to get back to you quickly
  then.
• Please do the following and supply the requested information as needed. If you
  don't understand my instructions please ask and I will try to explain them
  clearer for you.
• Do not attempt any steps unless instructed or ask before to
  make sure they will not cause any further issues.

The explanation of your bugcode is as follows:

0x000000D1: DRIVER_IRQL_NOT_LESS_OR_EQUAL
(Click to consult the online Win XP Resource Kit article.)
The system attempted to access pageable memory using a kernel process IRQL that was too high. The most typical cause is a bad device driver (one that uses improper addresses). It can also be caused by caused by faulty or mismatched RAM, or a damaged pagefile.

Since you stated you formatted and did a fresh install then for now I'm discounting the possibility of a driver issue. So I'm going to focus on a hardware issue starting with the memory.

If you have more than one RAM module installed, try starting computer with one RAM stick at a time.

NOTE Keep in mind, the manual check listed above is always superior to the software check, listed below. DO NOT proceed with memtest, if you can go with option A

B. If you have only one RAM stick installed...
...run memtest...

1. Download - Pre-Compiled Bootable ISO (.zip)
2. Unzip downloaded memtest86+-2.11.iso.zip file.
3. Inside, you'll find memtest86+-2.11.iso file.
4. Download, and install ImgBurn: http://www.imgburn.com/
5. Insert blank CD into your CD drive.
6. Open ImgBurn, and click on Write image file to disc
7. Click on Browse for a file... icon:



8. Locate memtest86+-2.11.iso file, and click Open button.
9. Click on ImgBurn green arrow to start burning bootable memtest86 CD:



10. Once the CD is created, boot from it, and memtest will automatically start to run. You may have to change the boot sequence in your BIOS to make it work right.

To change Boot Sequence in your BIOS

Reboot the system and at the first post screen (where it is counting up memory) start tapping the DEL button
This will enter you into the Bios\Cmos area.
Find the Advanced area and click Enter
Look for Boot Sequence or Boot Options and highlight that click Enter
Now highlight the first drive and follow the directions on the bottom of the screen on how to modify it and change it to CDrom.
Change the second drive to the C or Main Drive
Once that is done then click F10 to Save and Exit
You will prompted to enter Y to verify Save and Exit. Click Y and the system will now reboot with the new settings.


The running program will look something like this depending on the size and number of ram modules installed:




It's recommended to run 5-6 passes. Each pass contains very same 8 tests.

This will show the progress of the test. It can take a while. Be patient, or leave it running overnight.



The following image is the test results area:



The most important item here is the “errors” line. If you see ANY errors, even one, most likely, you have bad RAM.

[rshaffer61]

Hello Twithh.... Welcome to
GeeksToGo,


I'm sorry to hear about your issue. We will try to help you resolve this as soon as possible.

• Please understand we are all volunteers and we are not here all the time.
• Sometimes it may be a extended amount of time to get back to you. If it has been
  more then 3 days please shoot me a PM and I will try to get back to you quickly
  then.
• Please do the following and supply the requested information as needed. If you
  don't understand my instructions please ask and I will try to explain them
  clearer for you.
• Do not attempt any steps unless instructed or ask before to
  make sure they will not cause any further issues.

The explanation of your bugcode is as follows:

0x000000D1: DRIVER_IRQL_NOT_LESS_OR_EQUAL
(Click to consult the online Win XP Resource Kit article.)
The system attempted to access pageable memory using a kernel process IRQL that was too high. The most typical cause is a bad device driver (one that uses improper addresses). It can also be caused by caused by faulty or mismatched RAM, or a damaged pagefile.

Since you stated you formatted and did a fresh install then for now I'm discounting the possibility of a driver issue. So I'm going to focus on a hardware issue starting with the memory.

If you have more than one RAM module installed, try starting computer with one RAM stick at a time.

NOTE Keep in mind, the manual check listed above is always superior to the software check, listed below. DO NOT proceed with memtest, if you can go with option A

B. If you have only one RAM stick installed...
...run memtest...

1. Download - Pre-Compiled Bootable ISO (.zip)
2. Unzip downloaded memtest86+-2.11.iso.zip file.
3. Inside, you'll find memtest86+-2.11.iso file.
4. Download, and install ImgBurn: http://www.imgburn.com/
5. Insert blank CD into your CD drive.
6. Open ImgBurn, and click on Write image file to disc
7. Click on Browse for a file... icon:



8. Locate memtest86+-2.11.iso file, and click Open button.
9. Click on ImgBurn green arrow to start burning bootable memtest86 CD:



10. Once the CD is created, boot from it, and memtest will automatically start to run. You may have to change the boot sequence in your BIOS to make it work right.

To change Boot Sequence in your BIOS

Reboot the system and at the first post screen (where it is counting up memory) start tapping the DEL button
This will enter you into the Bios\Cmos area.
Find the Advanced area and click Enter
Look for Boot Sequence or Boot Options and highlight that click Enter
Now highlight the first drive and follow the directions on the bottom of the screen on how to modify it and change it to CDrom.
Change the second drive to the C or Main Drive
Once that is done then click F10 to Save and Exit
You will prompted to enter Y to verify Save and Exit. Click Y and the system will now reboot with the new settings.


The running program will look something like this depending on the size and number of ram modules installed:




It's recommended to run 5-6 passes. Each pass contains very same 8 tests.

This will show the progress of the test. It can take a while. Be patient, or leave it running overnight.



The following image is the test results area:



The most important item here is the “errors” line. If you see ANY errors, even one, most likely, you have bad RAM.

[Twithh]

Okay, I took out the RAM and booted with only one stick inside. I wasn't sure how to notice if anything was wrong or not, since the Bluescreens don't come when i boot, just randomly when i use my computer. So i used Memtest just to be sure, having installed one RAM stick at a time(runned Memtest 2 times) And it showed me 0 Errors after it had passed, so i don't think it's my RAM in this case. Thanks for your help so far =)

Twithh

[rshaffer61]

Run hard drive diagnostics: http://www.tacktech....ay.cfm?ttid=287
Make sure, you select tool, which is appropriate for the brand of your hard drive.
Depending on the program, it'll create bootable floppy, or bootable CD.
If downloaded file is of .iso type, use ImgBurn: http://www.imgburn.com/ to burn .iso file to a CD (select "Write image file to disc" option), and make the CD bootable.

NOTE. If your hard drive is made by Toshiba, try the Hitachi DFT CD Image version of the software

Thanks to Broni for the instructions

[Twithh]

Test Option: EXTENDED TEST
Model Number: WDC WD1001FALS-00E3A0
Unit Serial Number: WD-WCATR0264193
Firmware Number: 05.01D05
Capacity: 1000.20 GB
SMART Status: PASS
Test Result: PASS
Test Time: 23:33:04, January 25, 2011

Test Option: QUICK TEST
Model Number: WDC WD1001FALS-00E3A0
Unit Serial Number: WD-WCATR0264193
Firmware Number: 05.01D05
Capacity: 1000.20 GB
SMART Status: PASS
Test Result: PASS
Test Time: 23:35:16, January 25, 2011



As you can see above, i ran both the quick test and the extended test(lasted for 2 hrs.) just to make sure that my HDD was okay, and it seems it's not the problem. and Thanks for all the help so far Both you rshaffer, and Broni =)

I'm up for some more Testing tomorrow ! =)

Edited by Twithh, 25 January 2011 - 04:39 PM.

[rshaffer61]

Download BlueScreenView
No installation required.
Double click on BlueScreenView.exe file to run the program.
When scanning is done, go Edit>Select All.
Go File>Save Selected Items, and save the report as BSOD.txt.
Open BSOD.txt in Notepad, copy all content, and paste it into your next reply.

Thanks to Broni for the instructions and program

[Twithh]

Thanks for fast reply! i appreciate that: )

DUMP FILE 1:
==================================================
Dump File : 012511-18938-01.dmp
Crash Time : 25.01.2011 15:52:11
Bug Check String : DRIVER_IRQL_NOT_LESS_OR_EQUAL
Bug Check Code : 0x000000d1
Parameter 1 : 00000000`00000000
Parameter 2 : 00000000`00000002
Parameter 3 : 00000000`00000000
Parameter 4 : fffff880`01887f40
Caused By Driver : tcpip.sys
Caused By Address : tcpip.sys+86f40
File Description :
Product Name :
Company :
File Version :
Processor : x64
Computer Name :
Full Path : C:\Windows\Minidump\012511-18938-01.dmp
Processors Count : 6
Major Version : 15
Minor Version : 7600
Dump File Size : 275 904
==================================================




DUMP FILE 2:
==================================================
Dump File : 012411-23462-01.dmp
Crash Time : 24.01.2011 17:34:30
Bug Check String : DRIVER_IRQL_NOT_LESS_OR_EQUAL
Bug Check Code : 0x000000d1
Parameter 1 : 00000000`00000000
Parameter 2 : 00000000`00000002
Parameter 3 : 00000000`00000000
Parameter 4 : fffff880`01887f40
Caused By Driver : tcpip.sys
Caused By Address : tcpip.sys+86f40
File Description :
Product Name :
Company :
File Version :
Processor : x64
Computer Name :
Full Path : C:\Windows\Minidump\012411-23462-01.dmp
Processors Count : 6
Major Version : 15
Minor Version : 7600
Dump File Size : 275 904
==================================================

[rshaffer61]

Ok time to look at drivers then.
Please restart your system and boot into Safe Mode With networking
This way you can still post here if need be. Let me know if you get any BSOD then.
If not then we can look at something loading on startup that is causing the issue which most likely will be found in the Msconfig Startup area.

[Twithh]

Thanks, I'll be doing this tomorrow as it is now 12:17 AM here, The BSOD appears to sometimes appear a bit after i manually start Bit Torrent, might be something to take a look at. The BSOD also doesn't appear as frequently now as before(can be good in one point of view), so might be hard for me to find out if It's a driver or merely a startup program, I'll do more after school tomorrow. Thanks for all The help!

[rshaffer61]

The BSOD appears to sometimes appear a bit after i manually start Bit Torrent,

Yep could possibly be a hidden infection but let's see what happens with the steps I gave last.

[Twithh]

okay, i'm now in safe mode, but i don't get the BSOD's frequently anymore, so what should i do while in safemode? I can tell you that i have no BSOD's now, but i suspect the system driver Tcpip.sys. As this is the driver specified in my dump file report. What do you think?

[rshaffer61]

Reboot back to normal mode then proceed with the following steps.
Go HERE and read the tutorial that shows how to do SFC or System File Checker and running in a Elevated Command Prompt in Vista and Win7.

[Twithh]

Okay i've done as you instructed me to do, and the check found no errors. I also ran a Chkdsk just to be sure, and when i logged on after the check, it said that my volume is clean. I do not know if it was all along, or if the check cleaned it up.

[rshaffer61]

Any BSOD's today in the last 5 hours?

[Twithh]

I haven't gotten any BSOD's in the last 2 hours with Bit Torrent running in the background! Thanks for all your help Rshaffer!