Jump to content

Welcome to Geeks to Go - Register now for FREE

Geeks To Go is a helpful hub, where thousands of volunteer geeks quickly serve friendly answers and support. Check out the forums and get free advice from the experts. Register now to gain access to all of our features, it's FREE and only takes one minute. Once registered and logged in, you will be able to create topics, post replies to existing threads, give reputation to your fellow members, get your own private messenger, post status updates, manage your profile and so much more.

Create Account How it Works
Photo

Windows BSOD (tcpip.sys- ntoskrnl.exe problem), Windows 7


  • Please log in to reply

#1
Kvjimbo

Kvjimbo

    Member

  • Member
  • PipPip
  • 43 posts

My OS is Windows 7 Pro 64 bit.

 

I have several shut downs recently following a BSOD and I've copied the latest dmp file.

 

The system is very slow for 20 to 30 minutes following a restart or after waking up from sleep mode. There is also more hard drive activity when I'm not using the system than there was in the past.

 

I recently ran a hard drive test and it was OK . Next I'm going to run the Windows Memory Diagnostic Program as recommended in a post.

 

I also saw a post on an other site that mentioned there is a root kit that can affect these files and running the

Trojan.Zeroaccess Removal Tool was recommended. I haven't tried that yet.

 

Dump File         : 122814-47517-01.dmp
Crash Time        : 12/28/2014 4:40:22 PM
Bug Check String  : DRIVER_IRQL_NOT_LESS_OR_EQUAL
Bug Check Code    : 0x000000d1
Parameter 1       : 00000000`00000000
Parameter 2       : 00000000`00000002
Parameter 3       : 00000000`00000000
Parameter 4       : fffff880`01a9456b
Caused By Driver  : tcpip.sys
Caused By Address : tcpip.sys+9456b
File Description  : 
Product Name      : 
Company           : 
File Version      : 
Processor         : x64
Crash Address     : ntoskrnl.exe+75bc0
Stack Address 1   : 
Stack Address 2   : 
Stack Address 3   : 
Computer Name     : 
Full Path         : C:\Windows\Minidump\122814-47517-01.dmp
Processors Count  : 4
Major Version     : 15
Minor Version     : 7601
Dump File Size    : 275,744
Dump File Time    : 12/28/2014 4:42:09 PM
==================================================

  • 0

Advertisements


#2
rockmilk

rockmilk

    Certified monkey.

  • Member
  • PipPipPipPipPip
  • 2,773 posts

Please download MINITOOLBOX and run it.



Checkmark following boxes:


Flush DNS
Reset FF proxy Settings
Reset Ie Proxy Settings
Report IE Proxy Settings
Report FF Proxy Settings
List content of Hosts
List IP configuration
List Winsock Entries
List last 10 Event Viewer log
List Installed Programs
List Users, Partitions and Memory size
List Devices (problems only)



Click Go and post the result.

Upload your minidumps as well please.
http://h30434.www3.h....es/td-p/253475


  • 0

#3
Kvjimbo

Kvjimbo

    Member

  • Topic Starter
  • Member
  • PipPip
  • 43 posts

I've attached the files.

Attached Files


Edited by Kvjimbo, 29 December 2014 - 06:24 PM.

  • 0

#4
rockmilk

rockmilk

    Certified monkey.

  • Member
  • PipPipPipPipPip
  • 2,773 posts

Seems that Malwarebytes Anti-Malware is to blame for the crash. Go ahead and remove it, then run the Malwarebytes cleanup tool.

 

1. Uninstall Malwarebytes' Anti-Malware using Add/Remove programs in the control panel.
2. Restart your computer (very important).
3. Download and run this utility. mbam-clean.exe
4. It will ask to restart your computer (please allow it to).
5. After the computer restarts, install the latest version from here. mbam-setup.exe

 

Now remove from your computer the following.

 

Hit the start button at the bottom left hand corner of your Screen.
Type or copy and paste appwiz.cpl into the Run Box.
Hit enter.
Scroll down to the following item(s): Note: If you encounter a program that will not remove or is not listed then skip it please.

As an alternative you may use Revo Uninstaller Freeware Here is a good tutorial on the use of Revo Uninstaller.

 

Bonjour
Google Earth
iolo technologies' System Mechanic
Norton Internet Security
Spybot - Search & Destroy

Right Click one at a time and select remove.
Now close the programs and features window.
Once finished reboot the machine.

 

Open your copy of ccleaner hit the tools button then then startup and disable everything from start-up nothing is needed at this point. While you are in there untick the option for it to delete minidump files.

 

ArdcXjN.png

 

Now run the Norton removal tool.ftp://ftp.symantec.com/public/english_us_canada/removal_tools/Norton_Removal_Tool.exe

 

After running the removal tool, then reboot your machine.

 

Now install 360 total security, run a full scan of your computer. http://www.360totalsecurity.com/

 

Also from your minitoolbox log it seems that there was a DNS time out.

 

DNS request timed out.
    timeout was 2 seconds.
Server:  UnKnown
Address:  192.168.1.254

 

Please change your DNS to Google or Open DNS  How to change DNS server.

 

 

Report back to me how your machine is performing after these steps, if it is still bluescreening then upload new dumps and a minitoolbox so I have something to go on.


  • 0

#5
rockmilk

rockmilk

    Certified monkey.

  • Member
  • PipPipPipPipPip
  • 2,773 posts

A couple of things that I forgot.......

 

I would like you to perform a checkdisk /r here is a youtube video that will help you with that. :)

 

 

 

 

Also I would like you to reset your hosts file to remove the settings that spybot has set.

 

  • Click here to download RstHosts v2.0
  • Save the file to your desktop.
  • Right Click and Run as Administrator.

 

Db97omh.png


  • 0

#6
Kvjimbo

Kvjimbo

    Member

  • Topic Starter
  • Member
  • PipPip
  • 43 posts

rockmilk,

 

Thanks for your recommendations. I'll let you know if I have anymore problems.


  • 0

#7
rockmilk

rockmilk

    Certified monkey.

  • Member
  • PipPipPipPipPip
  • 2,773 posts

:thumbsup:  Please come back and let me know either way.....


  • 0

#8
Kvjimbo

Kvjimbo

    Member

  • Topic Starter
  • Member
  • PipPip
  • 43 posts

:thumbsup: I'll let you know either way.


  • 0

#9
rockmilk

rockmilk

    Certified monkey.

  • Member
  • PipPipPipPipPip
  • 2,773 posts

Thanks........Happy New Year! :)


  • 0

#10
Kvjimbo

Kvjimbo

    Member

  • Topic Starter
  • Member
  • PipPip
  • 43 posts

The system is back to normal.

 

Thanks for your help!


  • 0

#11
rockmilk

rockmilk

    Certified monkey.

  • Member
  • PipPipPipPipPip
  • 2,773 posts

Glad to have helped, and thanks for letting me know. :)


  • 0

#12
honshu

honshu

    Member

  • Member
  • PipPip
  • 73 posts

good day

i have the same problem but the solutions you offerred did not work for me

could you be any help?

thanks


  • 0

#13
rockmilk

rockmilk

    Certified monkey.

  • Member
  • PipPipPipPipPip
  • 2,773 posts

good day

i have the same problem but the solutions you offerred did not work for me

could you be any help?

thanks

 

 

Please start your own thread, post the logs and minidumps in it.


  • 0

#14
honshu

honshu

    Member

  • Member
  • PipPip
  • 73 posts

ok thanks


  • 0






Similar Topics

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users

As Featured On:

Microsoft Yahoo BBC MSN PC Magazine Washington Post HP