Jump to content

Welcome to Geeks to Go - Register now for FREE

Geeks To Go is a helpful hub, where thousands of volunteer geeks quickly serve friendly answers and support. Check out the forums and get free advice from the experts. Register now to gain access to all of our features, it's FREE and only takes one minute. Once registered and logged in, you will be able to create topics, post replies to existing threads, give reputation to your fellow members, get your own private messenger, post status updates, manage your profile and so much more.

Create Account How it Works
Photo

DRIVER IRQL NOT LESS OR EQUAL tcpip.sys Blue screen

- - - - -

  • Please log in to reply

#1
darkkuja2

darkkuja2

    Member

  • Member
  • PipPip
  • 20 posts

Hello,

 

I've been having some problems with my new computer it randomly crashes when I'm using it and it gives me a DRIVER IRQL NOT LESS OR EQUAL tcpip.sys error. I've been looking around and updating network drivers with no success. 

 

Attached is the dump files of the blue screens. Thanks in advance.

 

Alienware 15 r2

i7 6700HQ

gtx 970m

16 gb ram


Edited by darkkuja2, 26 April 2016 - 04:27 PM.

  • 0

Advertisements


#2
phillpower2

phillpower2

    Mechanised Mod

  • Moderator
  • 23,837 posts

:welcome:   darkkuja2,

 

We do not use rar here so please upload the dump/s using the method below;

 

1. Copy any dmp files from C:\Windows\Minidump onto the desktop.
2. Select all of them, right-click on one, and click on Send To> New Compressed (zipped) Folder.
3. Upload the zip folder using the Attach button, bottom left of the dialogue input box 

 

Tip

To ensure that you receive notification of any reply to your thread please click on the Follow this topic tab, top right corner above your OP.

 
 
 
 

  • 0

#3
darkkuja2

darkkuja2

    Member

  • Topic Starter
  • Member
  • PipPip
  • 20 posts

Oh my bad didn't know it was zip only, attached is the zipped folder.

Attached Files


  • 0

#4
phillpower2

phillpower2

    Mechanised Mod

  • Moderator
  • 23,837 posts

While I look at a your latest dmps can you do the following for us please;

 

Download then run Speccy (free) and post the resultant url for us, details here,  this will provide us with information about your computer hardware + any software that you have installed that may explain the present issue/s. 

 

Edit to add;

 

Your last crash dump points towards your AV software and the wireless device;

 

*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************
 
DRIVER_IRQL_NOT_LESS_OR_EQUAL (d1)
An attempt was made to access a pageable (or completely invalid) address at an
interrupt request level (IRQL) that is too high.  This is usually
caused by drivers using improper addresses.
If kernel debugger is available get stack backtrace.
Arguments:
Arg1: 0000000000000000, memory referenced
Arg2: 0000000000000002, IRQL
Arg3: 0000000000000000, value 0 = read operation, 1 = write operation
Arg4: fffff800ec4f5c22, address which referenced memory
 
Debugging Details:
------------------
 
TRIAGER: Could not open triage file : e:\dump_analysis\program\triage\modclass.ini, error 2
 
READ_ADDRESS: unable to get nt!MmSpecialPoolStart
unable to get nt!MmSpecialPoolEnd
unable to get nt!MmPagedPoolEnd
unable to get nt!MmNonPagedPoolStart
unable to get nt!MmSizeOfNonPagedPoolInBytes
 0000000000000000 
 
CURRENT_IRQL:  2
 
FAULTING_IP: 
tcpip!FlpReturnNetBufferListChain+8a262
fffff800`ec4f5c22 488b01          mov     rax,qword ptr [rcx]
 
DEFAULT_BUCKET_ID:  WIN8_DRIVER_FAULT
 
BUGCHECK_STR:  AV
 
PROCESS_NAME:  System
 
TRAP_FRAME:  ffffd000262d5210 -- (.trap 0xffffd000262d5210)
NOTE: The trap frame does not contain all registers.
Some register values may be zeroed or incorrect.
rax=ffffe0006cab1040 rbx=0000000000000000 rcx=0000000000000000
rdx=ffffe0006cab1040 rsi=0000000000000000 rdi=0000000000000000
rip=fffff800ec4f5c22 rsp=ffffd000262d53a0 rbp=0000000000000000
 r8=ffffe0006cab1040  r9=0000000000000050 r10=ffffe0006cab1020
r11=ffffe0006cab15e0 r12=0000000000000000 r13=0000000000000000
r14=0000000000000000 r15=0000000000000000
iopl=0         nv up ei ng nz na po nc
tcpip!FlpReturnNetBufferListChain+0x8a262:
fffff800`ec4f5c22 488b01          mov     rax,qword ptr [rcx] ds:00000000`00000000=0000000000000000
Resetting default scope
 
LAST_CONTROL_TRANSFER:  from fffff801dbd652e9 to fffff801dbd5a760
 
STACK_TEXT:  
ffffd000`262d50c8 fffff801`dbd652e9 : 00000000`0000000a 00000000`00000000 00000000`00000002 00000000`00000000 : nt!KeBugCheckEx
ffffd000`262d50d0 fffff801`dbd63ac7 : ffffd000`00200202 ffffd000`262d6800 00000000`00000018 ffffd000`262d5350 : nt!KiBugCheckDispatch+0x69
ffffd000`262d5210 fffff800`ec4f5c22 : ffffd000`262d5500 ffffe000`75a661a0 00000000`00000000 00000000`fffff948 : nt!KiPageFault+0x247
ffffd000`262d53a0 fffff800`ec35128a : 00000000`00000000 00000000`00000001 fffff800`ec46b9c0 00000000`00000000 : tcpip!FlpReturnNetBufferListChain+0x8a262
ffffd000`262d53f0 fffff800`ec43c560 : 00000000`00000001 fffff801`dbc27000 ffffe000`6ced4a60 ffffd000`262d5559 : NETIO!NetioDereferenceNetBufferListChain+0xea
ffffd000`262d54c0 fffff800`ec43d818 : fffff800`ec5ac000 ffffe000`662d5130 00000000`00000001 00000000`00000000 : tcpip!IppReceiveHeaderBatch+0x4b0
ffffd000`262d55c0 fffff800`ec47e1ff : ffffe000`6c05b630 ffffe000`6ced4a60 ffffd000`262d5701 00000000`00000000 : tcpip!IppFlcReceivePacketsCore+0x338
ffffd000`262d56e0 fffff800`ec47d85e : 00000000`00000002 ffffd000`00000001 fffff800`ec46b9c0 00000000`6ced4a01 : tcpip!FlpReceiveNonPreValidatedNetBufferListChain+0x25f
ffffd000`262d57c0 fffff801`dbc296f5 : 00000000`00000002 ffffe000`70206400 fffff800`ec47d790 ffffd000`262d5970 : tcpip!FlReceiveNetBufferListChainCalloutRoutine+0xce
ffffd000`262d58f0 fffff800`ec46bb46 : ffffe000`66182f30 00000000`00000006 ffffe000`66182cf0 00000000`00000000 : nt!KeExpandKernelStackAndCalloutInternal+0x85
ffffd000`262d5940 fffff800`ec232d97 : ffffe000`6d5f6c10 ffffd000`262d5a30 00000000`00000001 ffffe000`6ced4a60 : tcpip!FlReceiveNetBufferListChain+0xb6
ffffd000`262d59c0 fffff800`ec232558 : ffffe000`6d5f6c10 ffffe000`6ced4a60 00000000`00000000 fffff800`00000001 : ndis!ndisMIndicateNetBufferListsToOpen+0x3c7
ffffd000`262d5a70 fffff800`ec23eef5 : ffffe000`68df61a0 ffffd000`00000001 ffffe000`68df61a0 fffff800`ee409e40 : ndis!ndisMTopReceiveNetBufferLists+0x318
ffffd000`262d5b70 fffff800`ec2414c3 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : ndis!ndisCallReceiveHandler+0x85
ffffd000`262d5bc0 fffff800`ec25e938 : 00000000`00000000 ffffe000`6c56dc70 ffffe000`6ced4a60 00000000`00000001 : ndis!ndisInvokeNextReceiveHandler+0x253
ffffd000`262d5c90 fffff800`ec23f0f4 : ffffe000`6c56dc70 00000000`00000001 ffffe000`00000000 00000000`00000001 : ndis!ndisFilterIndicateReceiveNetBufferLists+0x1fe18
ffffd000`262d5d30 fffff800`ef16c459 : ffffe000`6c433010 00000000`00000001 ffffe000`6ced4a60 ffffe000`6c4340e0 : ndis!NdisFIndicateReceiveNetBufferLists+0x54
ffffd000`262d5d70 fffff800`ec23eef5 : ffffe000`6c56b810 ffffd000`262d5f81 fffff800`ec252360 ffffd000`262d60e0 : nwifi!Pt6Receive+0x2b9
ffffd000`262d5dd0 fffff800`ec25239e : ffffe000`70206400 fffff801`dbc8938e 00000000`00000000 00000000`00001024 : ndis!ndisCallReceiveHandler+0x85
ffffd000`262d5e20 fffff801`dbc296f5 : ffffd000`262d5f81 ffffd000`262d5f68 00000000`00000001 fffff800`00000000 : ndis!ndisDataPathExpandStackCallback+0x3e
ffffd000`262d5e70 fffff800`ec2552a1 : ffffe000`75a66030 00000000`00000000 ffffe000`6c56dc70 00000000`00000000 : nt!KeExpandKernelStackAndCalloutInternal+0x85
ffffd000`262d5ec0 fffff800`ec24150a : 00000000`00000000 ffffc001`011d82f0 ffffd000`262d6260 00000000`000000a8 : ndis!ndisExpandStack+0x19
ffffd000`262d5f00 fffff800`ec25e938 : 00000000`00000000 ffffe000`6c56fc70 ffffe000`75a66030 fffff801`dbc80000 : ndis!ndisInvokeNextReceiveHandler+0x29a
ffffd000`262d5fd0 fffff800`ec23f0f4 : ffffe000`6c56fc70 ffffe000`75a66030 ffffe000`00000000 00000000`00000001 : ndis!ndisFilterIndicateReceiveNetBufferLists+0x1fe18
ffffd000`262d6070 fffff800`ee771a69 : ffffe000`6c56eca0 ffffe000`6c56e010 00000000`00000000 00000000`00000001 : ndis!NdisFIndicateReceiveNetBufferLists+0x54
ffffd000`262d60b0 fffff800`ec23eef5 : ffffe000`6c56e010 ffffd000`262d62c1 fffff800`ec252360 fffff800`ec3641ff : vwififlt!FilterReceiveNetBufferLists+0x119
ffffd000`262d6110 fffff800`ec25239e : ffffe000`70206400 fffff800`ec6614c2 ffffe000`6b60c8d0 ffffe000`75a66030 : ndis!ndisCallReceiveHandler+0x85
ffffd000`262d6160 fffff801`dbc296f5 : ffffd000`262d62c1 ffffd000`262d62a8 00000000`00000001 00000000`00000004 : ndis!ndisDataPathExpandStackCallback+0x3e
ffffd000`262d61b0 fffff800`ec2552a1 : ffffe000`75a66030 00000000`00000000 ffffe000`6c56fc70 00000000`00000000 : nt!KeExpandKernelStackAndCalloutInternal+0x85
ffffd000`262d6200 fffff800`ec24150a : ffffe000`6c7844e0 00000000`00000000 fffff800`ef5a28f0 ffffe000`00000000 : ndis!ndisExpandStack+0x19
ffffd000`262d6240 fffff800`ec25e938 : 00000000`00000000 ffffe000`6c575800 ffffe000`75a66030 ffffd000`262d6389 : ndis!ndisInvokeNextReceiveHandler+0x29a
ffffd000`262d6310 fffff800`ec23f0f4 : ffffe000`6c575800 00000000`00000001 ffffe000`00000000 00000000`00000001 : ndis!ndisFilterIndicateReceiveNetBufferLists+0x1fe18
ffffd000`262d63b0 fffff800`ec6d1167 : 00000000`00000000 ffffd000`262d64f0 00000000`00000001 ffffe000`6c570ab0 : ndis!NdisFIndicateReceiveNetBufferLists+0x54
ffffd000`262d63f0 fffff800`ec23eef5 : 00000000`00000000 00000000`00000001 00000000`00000000 ffffe000`71bebb68 : wfplwfs!LwfLowerRecvNetBufferLists+0x167
ffffd000`262d6550 fffff800`ec25239e : ffffe000`70206400 ffffe000`7049df00 ffffe000`71beb9d8 fffff800`ec0c51ee : ndis!ndisCallReceiveHandler+0x85
ffffd000`262d65a0 fffff801`dbc296f5 : ffffd000`262d6780 ffffd000`262d6758 ffffe000`75a66030 00000000`00000000 : ndis!ndisDataPathExpandStackCallback+0x3e
ffffd000`262d65f0 fffff800`ec2552a1 : 00000000`014fb4da 00000000`00000000 ffffe000`6c575800 00000000`00000000 : nt!KeExpandKernelStackAndCalloutInternal+0x85
ffffd000`262d6640 fffff800`ec233db9 : 00000000`00000000 ffffd000`262d6780 00000000`00000000 ffffc001`2ab21660 : ndis!ndisExpandStack+0x19
ffffd000`262d6680 fffff800`f0eeab54 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : ndis!NdisMIndicateReceiveNetBufferLists+0x3e9
ffffd000`262d6800 fffff800`f0eaa654 : 00000000`00000000 ffffe000`69f13690 ffffe000`69973910 ffffe000`69f10000 : wdiwifi!CPort::IndicateFrames+0xd8
ffffd000`262d6860 fffff800`f0ea9ac6 : 00000000`00000000 ffffd000`262d6969 ffffe000`69f13690 ffffe000`69f13690 : wdiwifi!CRxMgr::RxIndicatePortFrames+0x110
ffffd000`262d68c0 fffff800`f0eaae2a : 00000000`00000000 ffffe000`70206540 ffffe000`69f13690 00000000`00000000 : wdiwifi!CRxMgr::RxProcessAndIndicateNblChain+0x702
ffffd000`262d69d0 fffff801`dbc9eb50 : ffffe000`65e28b90 ffffe000`68df6050 00000000`00000000 00000000`00000000 : wdiwifi!RxMgrWorkItemRoutine+0x6a
ffffd000`262d6a10 fffff801`dbc696a9 : fffff801`dbfab200 ffffe000`70206400 fffff801`dbc9ea60 00000001`d54b5705 : nt!IopProcessWorkItem+0xf0
ffffd000`262d6a80 fffff801`dbcfb895 : 00000000`00000000 00000000`00000080 ffffe000`63eba680 ffffe000`70206400 : nt!ExpWorkerThread+0xe9
ffffd000`262d6b10 fffff801`dbd5f906 : ffffd000`5b2df180 ffffe000`70206400 fffff801`dbcfb854 00000000`00000000 : nt!PspSystemThreadStartup+0x41
ffffd000`262d6b60 00000000`00000000 : ffffd000`262d7000 ffffd000`262d0000 00000000`00000000 00000000`00000000 : nt!KiStartSystemThread+0x16
 
 
STACK_COMMAND:  kb
 
FOLLOWUP_IP: 
NETIO!NetioDereferenceNetBufferListChain+ea
fffff800`ec35128a 418bc4          mov     eax,r12d
 
SYMBOL_STACK_INDEX:  4
 
SYMBOL_NAME:  NETIO!NetioDereferenceNetBufferListChain+ea
 
FOLLOWUP_NAME:  MachineOwner
 
MODULE_NAME: NETIO
 
IMAGE_NAME:  NETIO.SYS
 
DEBUG_FLR_IMAGE_TIMESTAMP:  5632d715
 
FAILURE_BUCKET_ID:  X64_AV_NETIO!NetioDereferenceNetBufferListChain+ea
 
BUCKET_ID:  X64_AV_NETIO!NetioDereferenceNetBufferListChain+ea
 
Your penultimate crash dumps also points towards the same;
 
FAILURE_BUCKET_ID:  X64_AV_nwifi!Pt6Receive+2b9
 
BUCKET_ID:  X64_AV_nwifi!Pt6Receive+2b9
 
Need to wait on the Speccy url for now. 

  • 0

#5
darkkuja2

darkkuja2

    Member

  • Topic Starter
  • Member
  • PipPip
  • 20 posts

Here is the link of the Speccy: http://speccy.pirifo...tt8VFOgghjzZJlQ.


  • 0

#6
phillpower2

phillpower2

    Mechanised Mod

  • Moderator
  • 23,837 posts

Nothing untoward showing in Speccy  :( uninstall this now if you like.

 

Download then run Autoruns and post the log for us please, see here  

 

1: Extract the Autoruns Zip file contents to a folder.

2: Double-click the "Autoruns.exe".

3: Click on the "Everything" tab

4: Go to File then to Export As or Save in some versions.

5: Save AutoRuns.txt file to known location like your Desktop > when you click on File > Save you will then get the option to Save as type, click the drop down tab, change it to Text and then click the Save button.

6: Attach to your next reply.

 

Tutorial here


  • 0

#7
darkkuja2

darkkuja2

    Member

  • Topic Starter
  • Member
  • PipPip
  • 20 posts

Here is the export, thank you very much for your help.

Attached Files


  • 0

#8
darkkuja2

darkkuja2

    Member

  • Topic Starter
  • Member
  • PipPip
  • 20 posts

The computer crashed again two hours ago, I think it was the same error, just in case.


  • 0

#9
phillpower2

phillpower2

    Mechanised Mod

  • Moderator
  • 23,837 posts

Your notebook has the following network devices;

 

Adapters List
 
Enabled
 
Bluetooth Device (Personal Area Network)
 
 
Killer E2400 Gigabit Ethernet Controller
 
 
Killer Wireless-n/a/ac 1535 Wireless Network Adapter

 

 

but there are  Broadcom NetXtreme II GigE VBD" drivers installed that could be conflicting, create a new restore point and then uninstall the Broadcom drivers please.

 

In addition to the above disable Java if you use it or uninstall it if you do not, Java is a known security weakness so if you really do need it, disable it when not in use and always check before you use it that you have the latest version.

 

Couple of questions if I may;

 

Does the computer only crash when connected to the internet.

 

You are using Windows Defender and Firewall, was this how you received the computer or was there another anti virus software installed and you uninstalled it.

 

Do you use Skype at all.

 

You are welcome btw  :)


  • 0

#10
darkkuja2

darkkuja2

    Member

  • Topic Starter
  • Member
  • PipPip
  • 20 posts

I can't seem to find the Broadcom driver I looked in device manager in all the tabs and add and remove programs. By disabling you mean disabling the startup and service of java? On the AV subject I think the computer came clean with no AV so I kept using windows defender since it seems to be "good enough", if you think otherwise I'm interested in your opinion. For skype I use it rarely is there a problem with it? I've heard of DDos vulnerability but haven't looked into the how you are vulnerable.

 

Edit:

Yes, it always crashes when I'm using the internet. Not sure if it had crashed while I'm not connected since I always am.

:)


Edited by darkkuja2, 27 April 2016 - 01:56 PM.

  • 0

Advertisements


#11
phillpower2

phillpower2

    Mechanised Mod

  • Moderator
  • 23,837 posts

View the List of Installed Drivers the Easy Way save the results as a Text File then copy/paste it into your next reply for us.

 

Do you actually use Java.

 

Windows Defender in Windows 8/8.1 and 10 is fine but new Dell computers typically ship with McAfee AV installed, being an Alienware yours may not have done though.

 

I suggest that as the computer is new that you do not tinker too much, run the Dell Bluescreen analyser test here and then if needs be the 40 minute Full Test. 


  • 0

#12
darkkuja2

darkkuja2

    Member

  • Topic Starter
  • Member
  • PipPip
  • 20 posts

Java I use it for a Jar simulation file I have to compare hand calcs to simulations. 

 

Edit: Dell Analysis came clean

Attached Files


Edited by darkkuja2, 27 April 2016 - 05:25 PM.

  • 0

#13
phillpower2

phillpower2

    Mechanised Mod

  • Moderator
  • 23,837 posts

Most odd, no Broadcom drivers on the list but clearly showing in Autoruns, see below;

 

+ "b06bdrv" "Broadcom NetXtreme II GigE VBD" "Broadcom Corporation" "c:\windows\system32\drivers\bxvbda.sys"

 

 

Disable the entry in AutoRuns, for "how to" see the tutorial here 

 

Hibernation is known to cause problems (normally when waking from sleep) it serves little purpose to most of use so please disable it, see below;

 

Open the Win+X menu, and click/tap on Command Prompt (Admin)

In the elevated command prompt, powercfg -h off press Enter and you are done.

 

Try starting the computer in Safe Mode only and test for a while, if all ok, restart the computer in Safe Mode with Networking and again test, steps for this below;

 

  1. Restart your PC. When you get to the sign-in screen, hold the Shift key down while you select Power 5a774598-9041-49c1-ac51-955242b27bd4_50. > Restart.
  2. After your PC restarts to the Choose an option screen, select Troubleshoot > Advanced options > Start-up Settings >Restart.

  3. After your PC restarts, you’ll see a list of options. Select 4 or F4 to start your PC in Safe Mode. Or if you’ll need to use the Internet, select 5 or F5 for Safe Mode with Networking.


  • 0

#14
darkkuja2

darkkuja2

    Member

  • Topic Starter
  • Member
  • PipPip
  • 20 posts

I disabled the driver this morning but since the crashes happen rarely I still need to test it out. I haven't experienced any problem during start up and since I use the fast startup option I need to have hibernation turned on to be able to use this feature, right? correct me if I'm wrong. 

 

I will continue to monitor the system and keep you posted.

Thank you :)


  • 0

#15
phillpower2

phillpower2

    Mechanised Mod

  • Moderator
  • 23,837 posts
I use the fast startup option I need to have hibernation turned on to be able to use this feature, right? correct me if I'm wrong. 

 

 

You are correct, never use fast boot myself as it has its downsides, see article here Windows on its own partition with plenty of free storage space = fast boot times with no downsides.

 

Aye keep us posted if you will and you are welcome btw  :)


  • 0






Similar Topics

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users

As Featured On:

Microsoft Yahoo BBC MSN PC Magazine Washington Post HP