[ezfzx]

I've probably held onto Vista too long. But I'm not where I can change right now.
So anyway, A few times in the last month, I've gotten the BSOD stating it's a TCPIP.SYS problem.
I've read through a few other similar posts, but those solutions didn't apply to my specific issue.

I wanted to attach one of my Minidumps in anticipation of your request, but WINZIP wouldn't let me ZIP it for some reason. And your site won't let me attach a *.dmp file. (I could just change the name if you think that would work.)

Any help you can offer would be most appreciated by this humble public servant.

[Advertisements]

Download Autoruns and Autorunsc
http://download.sysi...es/Autoruns.zip
Unzip it to your desktop and then double click autoruns.exe After the scan is finished then click on File>>>>>>>>>>>Save The default name will be autoruns.arn make sure to save it as Autoruns.txt under the file type option. in other words make sure it is a .txt file instead of .arn Attach the text in your next reply.



Download Security Check by screen317 from here.
http://screen317.spy...curityCheck.exe
Save it to your Desktop.
Double click SecurityCheck.exe and follow the onscreen instructions inside of the black box.
A Notepad document should open automatically called checkup.txt; please post the contents of that document.

[rockmilk]

Download Autoruns and Autorunsc
http://download.sysi...es/Autoruns.zip
Unzip it to your desktop and then double click autoruns.exe After the scan is finished then click on File>>>>>>>>>>>Save The default name will be autoruns.arn make sure to save it as Autoruns.txt under the file type option. in other words make sure it is a .txt file instead of .arn Attach the text in your next reply.



Download Security Check by screen317 from here.
http://screen317.spy...curityCheck.exe
Save it to your Desktop.
Double click SecurityCheck.exe and follow the onscreen instructions inside of the black box.
A Notepad document should open automatically called checkup.txt; please post the contents of that document.

[ezfzx]

Here ya go. Hope this is enough.

Attached Files

•  checkup.txt   1.13KB   179 downloads
•  AutoRuns.txt   131.21KB   173 downloads

[rockmilk]

Just As I suspected here you are running two antivirus apps.

ZoneAlarm Internet Security Suite Antivirus
Spyware Doctor with AntiVirus

You need to remove one of these no doubt about it.

I suggest that you use revo free to do so.

http://www.revounins...e_download.html

If you still have crashes after please upload a new autoruns log and we can go from there.

[rockmilk]

Further investgation of the autoruns log you have drivers for three av's running..

PC tools Drivers.

+ "PCTCore" "PC Tools KDS Core Driver" "PC Tools" "c:\windows\system32\drivers\pctcore64.sys" "11/23/2010 10:16 PM"
+ "pctDS" "PC Tools Data Store" "PC Tools" "c:\windows\system32\drivers\pctds64.sys" "6/3/2010 7:06 PM"
+ "pctEFA" "PC Tools Extended File Attributes" "PC Tools" "c:\windows\system32\drivers\pctefa64.sys" "7/15/2010 9:45 PM"

Kaspersky Drivers.

+ "KL1" "Kaspersky Unified Driver" "Kaspersky Lab ZAO" "c:\windows\system32\drivers\kl1.sys" "7/23/2012 7:37 AM"
+ "kl2" "Kaspersky Unified Driver" "Kaspersky Lab ZAO" "c:\windows\system32\drivers\kl2.sys" "3/4/2011 2:17 AM"
+ "KLIF" "Kaspersky Lab Interceptor and Filter" "Kaspersky Lab" "c:\windows\system32\drivers\klif.sys" "12/4/2012 4:30 AM"
+ "KLIM6" "Kaspersky Anti-Virus NDIS 6 Filter" "Kaspersky Lab ZAO" "c:\windows\system32\drivers\klim6.sys" "8/2/2012 4:09 AM"
+ "kltdi" "Network filtering component" "Kaspersky Lab" "c:\windows\system32\drivers\kltdi.sys" "9/14/2012 2:09 AM"
+ "kneps" "KNEPS Power" "Kaspersky Lab ZAO" "c:\windows\system32\drivers\kneps.sys" "12/24/2012 7:25 AM"


Zone Alarm Drivers.

+ "Vsdatant" "Zone Alarm Firewall Driver" "Check Point Software Technologies LTD" "c:\windows\system32\drivers\vsdatant.sys" "6/6/2013 10:51 PM"
+ "vsdatant7" "ZoneAlarm Firewalling Driver" "Check Point Software Technologies LTD" "c:\windows\system32\drivers\vsdatant.win7.sys" "10/17/2009 1:35 AM"

Do all three of these show up in add remove programs?

As kaspersky and pctools are not listed in your start up these may just be remnants and the respective removal tools need to be engaged.

http://kb.eset.com/e...46&locale=en_US
http://www.pctools.c...-Spyware-Doctor

[ezfzx]

Well, you're right that I probably don't need 2 or 3 AV programs, though, in the past, I discovered each was finding issues that the other didn't catch.

However, I've had the system that way for quite some time. The TCPIP-related blue screens only just started a few weeks ago. Now, I did upgrade ZA recently. Do you think ZA changed out my TCPIP driver?

[rockmilk]

You simply need to have one Antivirus.
Multiple Av can cause the tcpip Bluescreen.
Once you have removed all but one let me know.
Otherwise it will be pointless for me to continue helping you.
Hope you understand have a good day.

[ezfzx]

OK, well I took out PC Tools, but can't find Kaspersky on the program list to get rid of it. Sheesh.

[rockmilk]

You will need to open Autoruns and untick the items below and reboot.


Kaspersky Drivers.

+ "KL1" "Kaspersky Unified Driver" "Kaspersky Lab ZAO" "c:\windows\system32\drivers\kl1.sys" "7/23/2012 7:37 AM"
+ "kl2" "Kaspersky Unified Driver" "Kaspersky Lab ZAO" "c:\windows\system32\drivers\kl2.sys" "3/4/2011 2:17 AM"
+ "KLIF" "Kaspersky Lab Interceptor and Filter" "Kaspersky Lab" "c:\windows\system32\drivers\klif.sys" "12/4/2012 4:30 AM"
+ "KLIM6" "Kaspersky Anti-Virus NDIS 6 Filter" "Kaspersky Lab ZAO" "c:\windows\system32\drivers\klim6.sys" "8/2/2012 4:09 AM"
+ "kltdi" "Network filtering component" "Kaspersky Lab" "c:\windows\system32\drivers\kltdi.sys" "9/14/2012 2:09 AM"
+ "kneps" "KNEPS Power" "Kaspersky Lab ZAO" "c:\windows\system32\drivers\kneps.sys" "12/24/2012 7:25 AM"

Also run the kaspersky removal tool.
http://support.kaspe...ce.aspx?el=1464

Does Zone alarm have av with it or is it just the firewall?

[rockmilk]

Also upload the minidump files.
http://h30434.www3.h...les/td-p/253475

I will anaylyze them for you and post the outcome I am pretty certain one of the AV's will be to blame,but this is for you to see what is going on only.