Jump to content

Welcome to Geeks to Go - Register now for FREE

Geeks To Go is a helpful hub, where thousands of volunteer geeks quickly serve friendly answers and support. Check out the forums and get free advice from the experts. Register now to gain access to all of our features, it's FREE and only takes one minute. Once registered and logged in, you will be able to create topics, post replies to existing threads, give reputation to your fellow members, get your own private messenger, post status updates, manage your profile and so much more.

Create Account How it Works
Photo

blue screen (tcpip.sys problem) Grrr!


  • Please log in to reply

#1
ezfzx

ezfzx

    New Member

  • Member
  • Pip
  • 4 posts
I've probably held onto Vista too long. But I'm not where I can change right now.
So anyway, A few times in the last month, I've gotten the BSOD stating it's a TCPIP.SYS problem.
I've read through a few other similar posts, but those solutions didn't apply to my specific issue.

I wanted to attach one of my Minidumps in anticipation of your request, but WINZIP wouldn't let me ZIP it for some reason. And your site won't let me attach a *.dmp file. (I could just change the name if you think that would work.)

Any help you can offer would be most appreciated by this humble public servant.
  • 0

Advertisements


#2
rockmilk

rockmilk

    Certified monkey.

  • Member
  • PipPipPipPipPip
  • 2,773 posts
Download Autoruns and Autorunsc
http://download.sysi...es/Autoruns.zip
Unzip it to your desktop and then double click autoruns.exe After the scan is finished then click on File>>>>>>>>>>>Save The default name will be autoruns.arn make sure to save it as Autoruns.txt under the file type option. in other words make sure it is a .txt file instead of .arn Attach the text in your next reply.



Download Security Check by screen317 from here.
http://screen317.spy...curityCheck.exe
Save it to your Desktop.
Double click SecurityCheck.exe and follow the onscreen instructions inside of the black box.
A Notepad document should open automatically called checkup.txt; please post the contents of that document.
  • 0

#3
ezfzx

ezfzx

    New Member

  • Topic Starter
  • Member
  • Pip
  • 4 posts
Here ya go. Hope this is enough.

Attached Files


  • 0

#4
rockmilk

rockmilk

    Certified monkey.

  • Member
  • PipPipPipPipPip
  • 2,773 posts
Just As I suspected here you are running two antivirus apps.

ZoneAlarm Internet Security Suite Antivirus
Spyware Doctor with AntiVirus

You need to remove one of these no doubt about it.

I suggest that you use revo free to do so.

http://www.revounins...e_download.html

If you still have crashes after please upload a new autoruns log and we can go from there.
  • 0

#5
rockmilk

rockmilk

    Certified monkey.

  • Member
  • PipPipPipPipPip
  • 2,773 posts
Further investgation of the autoruns log you have drivers for three av's running..

PC tools Drivers.

+ "PCTCore" "PC Tools KDS Core Driver" "PC Tools" "c:\windows\system32\drivers\pctcore64.sys" "11/23/2010 10:16 PM"
+ "pctDS" "PC Tools Data Store" "PC Tools" "c:\windows\system32\drivers\pctds64.sys" "6/3/2010 7:06 PM"
+ "pctEFA" "PC Tools Extended File Attributes" "PC Tools" "c:\windows\system32\drivers\pctefa64.sys" "7/15/2010 9:45 PM"

Kaspersky Drivers.


+ "KL1" "Kaspersky Unified Driver" "Kaspersky Lab ZAO" "c:\windows\system32\drivers\kl1.sys" "7/23/2012 7:37 AM"
+ "kl2" "Kaspersky Unified Driver" "Kaspersky Lab ZAO" "c:\windows\system32\drivers\kl2.sys" "3/4/2011 2:17 AM"
+ "KLIF" "Kaspersky Lab Interceptor and Filter" "Kaspersky Lab" "c:\windows\system32\drivers\klif.sys" "12/4/2012 4:30 AM"
+ "KLIM6" "Kaspersky Anti-Virus NDIS 6 Filter" "Kaspersky Lab ZAO" "c:\windows\system32\drivers\klim6.sys" "8/2/2012 4:09 AM"
+ "kltdi" "Network filtering component" "Kaspersky Lab" "c:\windows\system32\drivers\kltdi.sys" "9/14/2012 2:09 AM"
+ "kneps" "KNEPS Power" "Kaspersky Lab ZAO" "c:\windows\system32\drivers\kneps.sys" "12/24/2012 7:25 AM"


Zone Alarm Drivers.

+ "Vsdatant" "Zone Alarm Firewall Driver" "Check Point Software Technologies LTD" "c:\windows\system32\drivers\vsdatant.sys" "6/6/2013 10:51 PM"
+ "vsdatant7" "ZoneAlarm Firewalling Driver" "Check Point Software Technologies LTD" "c:\windows\system32\drivers\vsdatant.win7.sys" "10/17/2009 1:35 AM"

Do all three of these show up in add remove programs?

As kaspersky and pctools are not listed in your start up these may just be remnants and the respective removal tools need to be engaged.

http://kb.eset.com/e...46&locale=en_US
http://www.pctools.c...-Spyware-Doctor
  • 0

#6
ezfzx

ezfzx

    New Member

  • Topic Starter
  • Member
  • Pip
  • 4 posts
Well, you're right that I probably don't need 2 or 3 AV programs, though, in the past, I discovered each was finding issues that the other didn't catch.

However, I've had the system that way for quite some time. The TCPIP-related blue screens only just started a few weeks ago. Now, I did upgrade ZA recently. Do you think ZA changed out my TCPIP driver?
  • 0

#7
rockmilk

rockmilk

    Certified monkey.

  • Member
  • PipPipPipPipPip
  • 2,773 posts
You simply need to have one Antivirus.
Multiple Av can cause the tcpip Bluescreen.
Once you have removed all but one let me know.
Otherwise it will be pointless for me to continue helping you.
Hope you understand have a good day.
  • 0

#8
ezfzx

ezfzx

    New Member

  • Topic Starter
  • Member
  • Pip
  • 4 posts
OK, well I took out PC Tools, but can't find Kaspersky on the program list to get rid of it. Sheesh.
  • 0

#9
rockmilk

rockmilk

    Certified monkey.

  • Member
  • PipPipPipPipPip
  • 2,773 posts
You will need to open Autoruns and untick the items below and reboot.


Kaspersky Drivers.

+ "KL1" "Kaspersky Unified Driver" "Kaspersky Lab ZAO" "c:\windows\system32\drivers\kl1.sys" "7/23/2012 7:37 AM"
+ "kl2" "Kaspersky Unified Driver" "Kaspersky Lab ZAO" "c:\windows\system32\drivers\kl2.sys" "3/4/2011 2:17 AM"
+ "KLIF" "Kaspersky Lab Interceptor and Filter" "Kaspersky Lab" "c:\windows\system32\drivers\klif.sys" "12/4/2012 4:30 AM"
+ "KLIM6" "Kaspersky Anti-Virus NDIS 6 Filter" "Kaspersky Lab ZAO" "c:\windows\system32\drivers\klim6.sys" "8/2/2012 4:09 AM"
+ "kltdi" "Network filtering component" "Kaspersky Lab" "c:\windows\system32\drivers\kltdi.sys" "9/14/2012 2:09 AM"
+ "kneps" "KNEPS Power" "Kaspersky Lab ZAO" "c:\windows\system32\drivers\kneps.sys" "12/24/2012 7:25 AM"

Also run the kaspersky removal tool.
http://support.kaspe...ce.aspx?el=1464

Does Zone alarm have av with it or is it just the firewall?
  • 0

#10
rockmilk

rockmilk

    Certified monkey.

  • Member
  • PipPipPipPipPip
  • 2,773 posts
Also upload the minidump files.
http://h30434.www3.h...les/td-p/253475

I will anaylyze them for you and post the outcome I am pretty certain one of the AV's will be to blame,but this is for you to see what is going on only.
  • 0






Similar Topics

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users

As Featured On:

Microsoft Yahoo BBC MSN PC Magazine Washington Post HP