[darkkuja2]

Hello,

 

I've been having some problems with my new computer it randomly crashes when I'm using it and it gives me a DRIVER IRQL NOT LESS OR EQUAL tcpip.sys error. I've been looking around and updating network drivers with no success. 

 

Attached is the dump files of the blue screens. Thanks in advance.

 

Alienware 15 r2

i7 6700HQ

gtx 970m

16 gb ram

Edited by darkkuja2, 26 April 2016 - 04:27 PM.

[Advertisements]

   darkkuja2,

 

We do not use rar here so please upload the dump/s using the method below;

 

1. Copy any dmp files from C:\Windows\Minidump onto the desktop.

2. Select all of them, right-click on one, and click on Send To> New Compressed (zipped) Folder.

3. Upload the zip folder using the Attach button, bottom left of the dialogue input box 

 

Tip

To ensure that you receive notification of any reply to your thread please click on the Follow this topic tab, top right corner above your OP.

 

 

 

 

[phillpower2]

   darkkuja2,

 

We do not use rar here so please upload the dump/s using the method below;

 

1. Copy any dmp files from C:\Windows\Minidump onto the desktop.

2. Select all of them, right-click on one, and click on Send To> New Compressed (zipped) Folder.

3. Upload the zip folder using the Attach button, bottom left of the dialogue input box 

 

Tip

To ensure that you receive notification of any reply to your thread please click on the Follow this topic tab, top right corner above your OP.

 

 

 

 

[darkkuja2]

Oh my bad didn't know it was zip only, attached is the zipped folder.

Attached Files

•  minidump.zip   864.54KB   363 downloads

[phillpower2]

While I look at a your latest dmps can you do the following for us please;

 

Download then run Speccy (free) and post the resultant url for us, details here,  this will provide us with information about your computer hardware + any software that you have installed that may explain the present issue/s. 

 

Edit to add;

 

Your last crash dump points towards your AV software and the wireless device;

 

*******************************************************************************

*                                                                             *

*                        Bugcheck Analysis                                    *

*                                                                             *

*******************************************************************************

 

DRIVER_IRQL_NOT_LESS_OR_EQUAL (d1)

An attempt was made to access a pageable (or completely invalid) address at an

interrupt request level (IRQL) that is too high.  This is usually

caused by drivers using improper addresses.

If kernel debugger is available get stack backtrace.

Arguments:

Arg1: 0000000000000000, memory referenced

Arg2: 0000000000000002, IRQL

Arg3: 0000000000000000, value 0 = read operation, 1 = write operation

Arg4: fffff800ec4f5c22, address which referenced memory

 

Debugging Details:

------------------

 

TRIAGER: Could not open triage file : e:\dump_analysis\program\triage\modclass.ini, error 2

 

READ_ADDRESS: unable to get nt!MmSpecialPoolStart

unable to get nt!MmSpecialPoolEnd

unable to get nt!MmPagedPoolEnd

unable to get nt!MmNonPagedPoolStart

unable to get nt!MmSizeOfNonPagedPoolInBytes

 0000000000000000 

 

CURRENT_IRQL:  2

 

FAULTING_IP: 

tcpip!FlpReturnNetBufferListChain+8a262

fffff800`ec4f5c22 488b01          mov     rax,qword ptr [rcx]

 

DEFAULT_BUCKET_ID:  WIN8_DRIVER_FAULT

 

BUGCHECK_STR:  AV

 

PROCESS_NAME:  System

 

TRAP_FRAME:  ffffd000262d5210 -- (.trap 0xffffd000262d5210)

NOTE: The trap frame does not contain all registers.

Some register values may be zeroed or incorrect.

rax=ffffe0006cab1040 rbx=0000000000000000 rcx=0000000000000000

rdx=ffffe0006cab1040 rsi=0000000000000000 rdi=0000000000000000

rip=fffff800ec4f5c22 rsp=ffffd000262d53a0 rbp=0000000000000000

 r8=ffffe0006cab1040  r9=0000000000000050 r10=ffffe0006cab1020

r11=ffffe0006cab15e0 r12=0000000000000000 r13=0000000000000000

r14=0000000000000000 r15=0000000000000000

iopl=0         nv up ei ng nz na po nc

tcpip!FlpReturnNetBufferListChain+0x8a262:

fffff800`ec4f5c22 488b01          mov     rax,qword ptr [rcx] ds:00000000`00000000=0000000000000000

Resetting default scope

 

LAST_CONTROL_TRANSFER:  from fffff801dbd652e9 to fffff801dbd5a760

 

STACK_TEXT:  

ffffd000`262d50c8 fffff801`dbd652e9 : 00000000`0000000a 00000000`00000000 00000000`00000002 00000000`00000000 : nt!KeBugCheckEx

ffffd000`262d50d0 fffff801`dbd63ac7 : ffffd000`00200202 ffffd000`262d6800 00000000`00000018 ffffd000`262d5350 : nt!KiBugCheckDispatch+0x69

ffffd000`262d5210 fffff800`ec4f5c22 : ffffd000`262d5500 ffffe000`75a661a0 00000000`00000000 00000000`fffff948 : nt!KiPageFault+0x247

ffffd000`262d53a0 fffff800`ec35128a : 00000000`00000000 00000000`00000001 fffff800`ec46b9c0 00000000`00000000 : tcpip!FlpReturnNetBufferListChain+0x8a262

ffffd000`262d53f0 fffff800`ec43c560 : 00000000`00000001 fffff801`dbc27000 ffffe000`6ced4a60 ffffd000`262d5559 : NETIO!NetioDereferenceNetBufferListChain+0xea

ffffd000`262d54c0 fffff800`ec43d818 : fffff800`ec5ac000 ffffe000`662d5130 00000000`00000001 00000000`00000000 : tcpip!IppReceiveHeaderBatch+0x4b0

ffffd000`262d55c0 fffff800`ec47e1ff : ffffe000`6c05b630 ffffe000`6ced4a60 ffffd000`262d5701 00000000`00000000 : tcpip!IppFlcReceivePacketsCore+0x338

ffffd000`262d56e0 fffff800`ec47d85e : 00000000`00000002 ffffd000`00000001 fffff800`ec46b9c0 00000000`6ced4a01 : tcpip!FlpReceiveNonPreValidatedNetBufferListChain+0x25f

ffffd000`262d57c0 fffff801`dbc296f5 : 00000000`00000002 ffffe000`70206400 fffff800`ec47d790 ffffd000`262d5970 : tcpip!FlReceiveNetBufferListChainCalloutRoutine+0xce

ffffd000`262d58f0 fffff800`ec46bb46 : ffffe000`66182f30 00000000`00000006 ffffe000`66182cf0 00000000`00000000 : nt!KeExpandKernelStackAndCalloutInternal+0x85

ffffd000`262d5940 fffff800`ec232d97 : ffffe000`6d5f6c10 ffffd000`262d5a30 00000000`00000001 ffffe000`6ced4a60 : tcpip!FlReceiveNetBufferListChain+0xb6

ffffd000`262d59c0 fffff800`ec232558 : ffffe000`6d5f6c10 ffffe000`6ced4a60 00000000`00000000 fffff800`00000001 : ndis!ndisMIndicateNetBufferListsToOpen+0x3c7

ffffd000`262d5a70 fffff800`ec23eef5 : ffffe000`68df61a0 ffffd000`00000001 ffffe000`68df61a0 fffff800`ee409e40 : ndis!ndisMTopReceiveNetBufferLists+0x318

ffffd000`262d5b70 fffff800`ec2414c3 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : ndis!ndisCallReceiveHandler+0x85

ffffd000`262d5bc0 fffff800`ec25e938 : 00000000`00000000 ffffe000`6c56dc70 ffffe000`6ced4a60 00000000`00000001 : ndis!ndisInvokeNextReceiveHandler+0x253

ffffd000`262d5c90 fffff800`ec23f0f4 : ffffe000`6c56dc70 00000000`00000001 ffffe000`00000000 00000000`00000001 : ndis!ndisFilterIndicateReceiveNetBufferLists+0x1fe18

ffffd000`262d5d30 fffff800`ef16c459 : ffffe000`6c433010 00000000`00000001 ffffe000`6ced4a60 ffffe000`6c4340e0 : ndis!NdisFIndicateReceiveNetBufferLists+0x54

ffffd000`262d5d70 fffff800`ec23eef5 : ffffe000`6c56b810 ffffd000`262d5f81 fffff800`ec252360 ffffd000`262d60e0 : nwifi!Pt6Receive+0x2b9

ffffd000`262d5dd0 fffff800`ec25239e : ffffe000`70206400 fffff801`dbc8938e 00000000`00000000 00000000`00001024 : ndis!ndisCallReceiveHandler+0x85

ffffd000`262d5e20 fffff801`dbc296f5 : ffffd000`262d5f81 ffffd000`262d5f68 00000000`00000001 fffff800`00000000 : ndis!ndisDataPathExpandStackCallback+0x3e

ffffd000`262d5e70 fffff800`ec2552a1 : ffffe000`75a66030 00000000`00000000 ffffe000`6c56dc70 00000000`00000000 : nt!KeExpandKernelStackAndCalloutInternal+0x85

ffffd000`262d5ec0 fffff800`ec24150a : 00000000`00000000 ffffc001`011d82f0 ffffd000`262d6260 00000000`000000a8 : ndis!ndisExpandStack+0x19

ffffd000`262d5f00 fffff800`ec25e938 : 00000000`00000000 ffffe000`6c56fc70 ffffe000`75a66030 fffff801`dbc80000 : ndis!ndisInvokeNextReceiveHandler+0x29a

ffffd000`262d5fd0 fffff800`ec23f0f4 : ffffe000`6c56fc70 ffffe000`75a66030 ffffe000`00000000 00000000`00000001 : ndis!ndisFilterIndicateReceiveNetBufferLists+0x1fe18

ffffd000`262d6070 fffff800`ee771a69 : ffffe000`6c56eca0 ffffe000`6c56e010 00000000`00000000 00000000`00000001 : ndis!NdisFIndicateReceiveNetBufferLists+0x54

ffffd000`262d60b0 fffff800`ec23eef5 : ffffe000`6c56e010 ffffd000`262d62c1 fffff800`ec252360 fffff800`ec3641ff : vwififlt!FilterReceiveNetBufferLists+0x119

ffffd000`262d6110 fffff800`ec25239e : ffffe000`70206400 fffff800`ec6614c2 ffffe000`6b60c8d0 ffffe000`75a66030 : ndis!ndisCallReceiveHandler+0x85

ffffd000`262d6160 fffff801`dbc296f5 : ffffd000`262d62c1 ffffd000`262d62a8 00000000`00000001 00000000`00000004 : ndis!ndisDataPathExpandStackCallback+0x3e

ffffd000`262d61b0 fffff800`ec2552a1 : ffffe000`75a66030 00000000`00000000 ffffe000`6c56fc70 00000000`00000000 : nt!KeExpandKernelStackAndCalloutInternal+0x85

ffffd000`262d6200 fffff800`ec24150a : ffffe000`6c7844e0 00000000`00000000 fffff800`ef5a28f0 ffffe000`00000000 : ndis!ndisExpandStack+0x19

ffffd000`262d6240 fffff800`ec25e938 : 00000000`00000000 ffffe000`6c575800 ffffe000`75a66030 ffffd000`262d6389 : ndis!ndisInvokeNextReceiveHandler+0x29a

ffffd000`262d6310 fffff800`ec23f0f4 : ffffe000`6c575800 00000000`00000001 ffffe000`00000000 00000000`00000001 : ndis!ndisFilterIndicateReceiveNetBufferLists+0x1fe18

ffffd000`262d63b0 fffff800`ec6d1167 : 00000000`00000000 ffffd000`262d64f0 00000000`00000001 ffffe000`6c570ab0 : ndis!NdisFIndicateReceiveNetBufferLists+0x54

ffffd000`262d63f0 fffff800`ec23eef5 : 00000000`00000000 00000000`00000001 00000000`00000000 ffffe000`71bebb68 : wfplwfs!LwfLowerRecvNetBufferLists+0x167

ffffd000`262d6550 fffff800`ec25239e : ffffe000`70206400 ffffe000`7049df00 ffffe000`71beb9d8 fffff800`ec0c51ee : ndis!ndisCallReceiveHandler+0x85

ffffd000`262d65a0 fffff801`dbc296f5 : ffffd000`262d6780 ffffd000`262d6758 ffffe000`75a66030 00000000`00000000 : ndis!ndisDataPathExpandStackCallback+0x3e

ffffd000`262d65f0 fffff800`ec2552a1 : 00000000`014fb4da 00000000`00000000 ffffe000`6c575800 00000000`00000000 : nt!KeExpandKernelStackAndCalloutInternal+0x85

ffffd000`262d6640 fffff800`ec233db9 : 00000000`00000000 ffffd000`262d6780 00000000`00000000 ffffc001`2ab21660 : ndis!ndisExpandStack+0x19

ffffd000`262d6680 fffff800`f0eeab54 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : ndis!NdisMIndicateReceiveNetBufferLists+0x3e9

ffffd000`262d6800 fffff800`f0eaa654 : 00000000`00000000 ffffe000`69f13690 ffffe000`69973910 ffffe000`69f10000 : wdiwifi!CPort::IndicateFrames+0xd8

ffffd000`262d6860 fffff800`f0ea9ac6 : 00000000`00000000 ffffd000`262d6969 ffffe000`69f13690 ffffe000`69f13690 : wdiwifi!CRxMgr::RxIndicatePortFrames+0x110

ffffd000`262d68c0 fffff800`f0eaae2a : 00000000`00000000 ffffe000`70206540 ffffe000`69f13690 00000000`00000000 : wdiwifi!CRxMgr::RxProcessAndIndicateNblChain+0x702

ffffd000`262d69d0 fffff801`dbc9eb50 : ffffe000`65e28b90 ffffe000`68df6050 00000000`00000000 00000000`00000000 : wdiwifi!RxMgrWorkItemRoutine+0x6a

ffffd000`262d6a10 fffff801`dbc696a9 : fffff801`dbfab200 ffffe000`70206400 fffff801`dbc9ea60 00000001`d54b5705 : nt!IopProcessWorkItem+0xf0

ffffd000`262d6a80 fffff801`dbcfb895 : 00000000`00000000 00000000`00000080 ffffe000`63eba680 ffffe000`70206400 : nt!ExpWorkerThread+0xe9

ffffd000`262d6b10 fffff801`dbd5f906 : ffffd000`5b2df180 ffffe000`70206400 fffff801`dbcfb854 00000000`00000000 : nt!PspSystemThreadStartup+0x41

ffffd000`262d6b60 00000000`00000000 : ffffd000`262d7000 ffffd000`262d0000 00000000`00000000 00000000`00000000 : nt!KiStartSystemThread+0x16

 

 

STACK_COMMAND:  kb

 

FOLLOWUP_IP: 

NETIO!NetioDereferenceNetBufferListChain+ea

fffff800`ec35128a 418bc4          mov     eax,r12d

 

SYMBOL_STACK_INDEX:  4

 

SYMBOL_NAME:  NETIO!NetioDereferenceNetBufferListChain+ea

 

FOLLOWUP_NAME:  MachineOwner

 

MODULE_NAME: NETIO

 

IMAGE_NAME:  NETIO.SYS

 

DEBUG_FLR_IMAGE_TIMESTAMP:  5632d715

 

FAILURE_BUCKET_ID:  X64_AV_NETIO!NetioDereferenceNetBufferListChain+ea

 

BUCKET_ID:  X64_AV_NETIO!NetioDereferenceNetBufferListChain+ea

 

Your penultimate crash dumps also points towards the same;

 

FAILURE_BUCKET_ID:  X64_AV_nwifi!Pt6Receive+2b9

 

BUCKET_ID:  X64_AV_nwifi!Pt6Receive+2b9

 

Need to wait on the Speccy url for now. 

[darkkuja2]

Here is the link of the Speccy: http://speccy.pirifo...tt8VFOgghjzZJlQ.

[phillpower2]

Nothing untoward showing in Speccy   uninstall this now if you like.

 

Download then run Autoruns and post the log for us please, see here  

 

1: Extract the Autoruns Zip file contents to a folder.

2: Double-click the "Autoruns.exe".

3: Click on the "Everything" tab

4: Go to File then to Export As or Save in some versions.

5: Save AutoRuns.txt file to known location like your Desktop > when you click on File > Save you will then get the option to Save as type, click the drop down tab, change it to Text and then click the Save button.

6: Attach to your next reply.

 

Tutorial here

[darkkuja2]

Here is the export, thank you very much for your help.

Attached Files

•  DESKTOP.txt   78.08KB   421 downloads

[darkkuja2]

The computer crashed again two hours ago, I think it was the same error, just in case.

[phillpower2]

Your notebook has the following network devices;

 

Adapters List

 

Enabled

 

Bluetooth Device (Personal Area Network)

 

 

Killer E2400 Gigabit Ethernet Controller

 

 

Killer Wireless-n/a/ac 1535 Wireless Network Adapter

 

 

but there are  Broadcom NetXtreme II GigE VBD" drivers installed that could be conflicting, create a new restore point and then uninstall the Broadcom drivers please.

 

In addition to the above disable Java if you use it or uninstall it if you do not, Java is a known security weakness so if you really do need it, disable it when not in use and always check before you use it that you have the latest version.

 

Couple of questions if I may;

 

Does the computer only crash when connected to the internet.

 

You are using Windows Defender and Firewall, was this how you received the computer or was there another anti virus software installed and you uninstalled it.

 

Do you use Skype at all.

 

You are welcome btw 

[darkkuja2]

I can't seem to find the Broadcom driver I looked in device manager in all the tabs and add and remove programs. By disabling you mean disabling the startup and service of java? On the AV subject I think the computer came clean with no AV so I kept using windows defender since it seems to be "good enough", if you think otherwise I'm interested in your opinion. For skype I use it rarely is there a problem with it? I've heard of DDos vulnerability but haven't looked into the how you are vulnerable.

 

Edit:

Yes, it always crashes when I'm using the internet. Not sure if it had crashed while I'm not connected since I always am.

Edited by darkkuja2, 27 April 2016 - 01:56 PM.

[phillpower2]

View the List of Installed Drivers the Easy Way save the results as a Text File then copy/paste it into your next reply for us.

 

Do you actually use Java.

 

Windows Defender in Windows 8/8.1 and 10 is fine but new Dell computers typically ship with McAfee AV installed, being an Alienware yours may not have done though.

 

I suggest that as the computer is new that you do not tinker too much, run the Dell Bluescreen analyser test here and then if needs be the 40 minute Full Test. 

[darkkuja2]

Java I use it for a Jar simulation file I have to compare hand calcs to simulations. 

 

Edit: Dell Analysis came clean

Attached Files

•  drivers.txt   136.88KB   365 downloads

Edited by darkkuja2, 27 April 2016 - 05:25 PM.

[phillpower2]

Most odd, no Broadcom drivers on the list but clearly showing in Autoruns, see below;

 

+ "b06bdrv" "Broadcom NetXtreme II GigE VBD" "Broadcom Corporation" "c:\windows\system32\drivers\bxvbda.sys"

 

 

Disable the entry in AutoRuns, for "how to" see the tutorial here 

 

Hibernation is known to cause problems (normally when waking from sleep) it serves little purpose to most of use so please disable it, see below;

 

Open the Win+X menu, and click/tap on Command Prompt (Admin)

In the elevated command prompt, powercfg -h off press Enter and you are done.

 

Try starting the computer in Safe Mode only and test for a while, if all ok, restart the computer in Safe Mode with Networking and again test, steps for this below;

 

1. Restart your PC. When you get to the sign-in screen, hold the Shift key down while you select Power  > Restart.

2. After your PC restarts to the Choose an option screen, select Troubleshoot > Advanced options > Start-up Settings >Restart.

3. After your PC restarts, you’ll see a list of options. Select 4 or F4 to start your PC in Safe Mode. Or if you’ll need to use the Internet, select 5 or F5 for Safe Mode with Networking.

[darkkuja2]

I disabled the driver this morning but since the crashes happen rarely I still need to test it out. I haven't experienced any problem during start up and since I use the fast startup option I need to have hibernation turned on to be able to use this feature, right? correct me if I'm wrong. 

 

I will continue to monitor the system and keep you posted.

Thank you

[phillpower2]

I use the fast startup option I need to have hibernation turned on to be able to use this feature, right? correct me if I'm wrong. 

 

 

You are correct, never use fast boot myself as it has its downsides, see article here Windows on its own partition with plenty of free storage space = fast boot times with no downsides.

 

Aye keep us posted if you will and you are welcome btw