[sbjorken]

Hello,

I bought a new laptop about 1½ months ago and recently I've been getting these blue screen stop messages several times a day saying something is wrong with the tcpip.sys and something with the datestamp.

I can't figure it out by myself so need some help!

I have attached my C:\Windows\Minidump folder (http://www.sendspace.com/file/dxnbq6)

Thanks in advance, really appreciated!

Edited by sbjorken, 19 September 2012 - 10:25 AM.

[Advertisements]

Please download MINITOOLBOX and save it to your desktop run it
http://download.blee...MiniToolBox.exe
Checkmark following boxes:


List content of Hosts
List last 10 Event Viewer log
List Installed Programs
List Users, Partitions and Memory size
List Devices (problems only)



Click Go and Attach the result.




Download Autoruns Unzip it to your desktop and then right click autoruns.exe run as admin After the scan is finished then click on File>>>>Save The default name will be autoruns.arn make sure to save it as Autoruns.txt in other words make sure it is a .txt file instead of .arn Post the text in your next reply.


http://technet.micro...s/bb963902.aspx

[rockmilk]

Please download MINITOOLBOX and save it to your desktop run it
http://download.blee...MiniToolBox.exe
Checkmark following boxes:


List content of Hosts
List last 10 Event Viewer log
List Installed Programs
List Users, Partitions and Memory size
List Devices (problems only)



Click Go and Attach the result.




Download Autoruns Unzip it to your desktop and then right click autoruns.exe run as admin After the scan is finished then click on File>>>>Save The default name will be autoruns.arn make sure to save it as Autoruns.txt in other words make sure it is a .txt file instead of .arn Post the text in your next reply.


http://technet.micro...s/bb963902.aspx

[sbjorken]

Alright, here it is:


result.txt: http://www.sendspace.com/file/8wz5dg


autoruns.txt: http://www.sendspace.com/file/9zo03u

Edited by sbjorken, 20 September 2012 - 02:15 AM.

[rockmilk]

You must choose between.

Norton
Zone Alarm
AVG

You must only run one antivirus application on your machine at one time.

Also just uninstall Spybot as it is as useless as me on sunday.

[sbjorken]

Put like that, that sounds like a very possible root of the problem.

Norton I have inactivated and Zone Alarm I am using only as a firewall. AVG I'm using as Anti-Virus. I thought this would work but perhaps not. I will try uninstalling everything except AVG.

[rockmilk]

I have been helping out on several forums for a while and 9.5 times out of ten the tcpip.sys blue screen error is usually related to having more than one antivirus application.

Here is a link to the removal tools for the antivirus applications.
http://kb.eset.com/e...tent&id=SOLN146




I would also suggest the removal of avg as well I highly suggest Avast.
http://www.filehippo...77d647fc834999/

[rockmilk]

Go ahead and run the Kaspersky removal tool as well I see some leftovers from it in your Autoruns log when you have uninstalled all of the antivirus applications and ran the related removal tools I woould like to see an updated autoruns log so that we can clean up any leftovers if needed and then I will shoot you a few tips to keep your machine running well.

[sbjorken]

Alright, it's now been three days without any tcpip and datestamp bluescreen errors. It's a relief. I ran the uninstallation of ZoneAlarm, AVG, Norton and Spybot both using Windows removal tool as well as the programs you linked (except for Spybot for which I only used the windows built-in one).

Although, I have experienced 3 bluescreen errors these past 3 days. The problem now is not the tcpip but something called simply STOP followed by a number series which often looks something like this: 0x000000000E. I do think this problem might have existed before I removed the antivirus application but compared to the tcpip ones probably not that common so I didn't consider them as serious.

I have run both the Minitoolbox and the autoruns programs again and here are the results (results.txt + autoruns.txt):

http://www.sendspace...SrERbpR0PyXDdAg

If you can help me with this issue as well I'd greatly appreciate it, and as far as it goes for the tips on how to keep my machine running well, I would happily accept them!

Sixten

[rockmilk]

Can you please upload the last 5 minidump files only. So that I can see what they are when I have this information we can get to work.

[sbjorken]

How do I do this? Do I unselect "List last 10 Event Viewer log" ?

[rockmilk]

Open your minidump folder and select the last 5 zip it up attach here or upload and send me a link.I am sorry in your first post I saw that you uploaded your minidump file so I assumed you knew what to do.

[sbjorken]

Ah yea sorry, confused it with the Minitoolbox.

Of course, here they are: http://www.sendspace.com/file/5g5xzc

[rockmilk]

First I would like you to go to your minidump folder then open it and then select edit then right click and delete all the minidump files located there making the folder empty.

Your hosts file is blank we need to fix that.

Open an elevated command prompt then copy and paste the following one at a time hitting enter after each.

cd C:\windows\system32\drivers\etc

takeown /a /f hosts

cacls hosts /p everyone:f

Reply Y Then copy and paste the text below hitting enter after.

attrib -s -h -r hosts

Close the command prompt window.

Go here and run the fix it for the hosts file,as admin.
http://support.microsoft.com/kb/972034

After the fix it runs then reboot,the hosts file should be restored to original.


Hit the start button and type cmd in the run box then when the commmand prompt appears at the top of the start menu right click it and select run as admin.Then copy and paste the following commands below hitting enter after each.Then reboot your machine.



net stop winmgmt /y
cd %windir%\system32\wbem
ren repository repository.old
net start winmgmt /y


After the reboot install Avast free.
http://www.filehippo...77d647fc834999/


Uninstall the programs below.

ZoneAlarm LTD Toolbar
Bing Bar (Version: 7.0.610.0)
BitTorrentControl_v12 Toolbar (Version: 6.9.0.16)
Bonjour (Version: 3.0.0.10)
DAEMON Tools Lite (Version: 4.45.4.0315) Known for causing bluescreen errors.



Open Autoruns and un-tick the items below and reboot.

+ "DAEMON Tools Lite" "DAEMON Tools Lite" "DT Soft Ltd" "c:\program files (x86)\daemon tools lite\dtlite.exe"
+ "Google Update" "Google Installer" "Google Inc." "c:\users\sixten\appdata\local\google\update\googleupdate.exe"
+ "rdpclip" "" "" "File not found: rdpclip"
"HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" "" "" ""
+ "ZoneAlarm Security Engine Registrar" "" "" "File not found: C:\Program Files\CheckPoint\ZAForceField\TrustChecker\bin\TrustCheckerIEPlugin.dll"
"HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects" "" "" ""
+ "BitTorrentControl_v12 Toolbar" "Conduit Toolbar" "Conduit Ltd." "c:\program files (x86)\bittorrentcontrol_v12\prxtbbitt.dll"
+ "ZoneAlarm Security Engine Registrar" "" "" "File not found: C:\Program Files\CheckPoint\ZAForceField\WOW64\TrustChecker\bin\TrustCheckerIEPlugin.dll"
"HKLM\Software\Microsoft\Internet Explorer\Toolbar" "" "" ""
+ "ZoneAlarm Security Engine" "" "" "File not found: C:\Program Files\CheckPoint\ZAForceField\TrustChecker\bin\TrustCheckerIEPlugin.dll"
"HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Toolbar" "" "" ""
+ "Bing" "Bing Client Extensions" "Microsoft Corporation." "c:\program files (x86)\microsoft\bingbar\bingext.dll"
+ "BitTorrentControl_v12 Toolbar" "Conduit Toolbar" "Conduit Ltd." "c:\program files (x86)\bittorrentcontrol_v12\prxtbbitt.dll"
+ "ZoneAlarm Security Engine" "" "" "File not found: C:\Program Files\CheckPoint\ZAForceField\WOW64\TrustChecker\bin\TrustCheckerIEPlugin.dll"
"HKLM\Software\Microsoft\Internet Explorer\Extensions" "" "" ""
+ "\Apple\AppleSoftwareUpdate" "Apple Software Update" "Apple Inc." "c:\program files (x86)\apple software update\softwareupdate.exe"
+ "\Easy Software Manager Agent" "SWMAgent" "SAMSUNG ELECTRONICS CO., Ltd." "c:\program files (x86)\samsung\easy software manager\swmagent.exe"
+ "\EasyBatteryManager" "" "SAMSUNG Electronics co., LTD." "c:\program files (x86)\samsung\easy settings\ebm\easybatterymgr4.exe"
+ "\EasyDisplayMgr" "Easy Display Manager" "Samsung Electronics Co., Ltd." "c:\program files (x86)\samsung\easy settings\dmhkcore.exe"
+ "\EasyPartitionManager" "" "" "File not found: C:\Windows\MSetup\BA46-12225A06\EPM.exe"
+ "\EasySpeedUpManager" "Easy Speed Up Manager" "Samsung Electronics" "c:\program files (x86)\samsung\easy settings\easyspeedupmanager.exe"
+ "\GoogleUpdateTaskUserS-1-5-21-3088619050-1145404384-3683591367-1000Core" "Google Installer" "Google Inc." "c:\users\sixten\appdata\local\google\update\googleupdate.exe"
+ "\GoogleUpdateTaskUserS-1-5-21-3088619050-1145404384-3683591367-1000UA" "Google Installer" "Google Inc." "c:\users\sixten\appdata\local\google\update\googleupdate.exe"
+ "\Microsoft\Windows Defender\MP Scheduled Scan" "Microsoft Malware Protection Command Line Utility" "Microsoft Corporation" "c:\program files\windows defender\mpcmdrun.exe"
+ "\SamsungSupportCenter" "SSCKbdHk" "SAMSUNG Electronics" "c:\program files (x86)\samsung\easy support center\ssckbdhk.exe"
+ "\SCCSpeedBoot" "SCCSpeedBoot" "Samsung Electronics Co., Ltd." "c:\program files (x86)\samsung\easy settings\sccspeedboot.exe"
+ "AdobeARMservice" "Med Adobe Acrobat Updater håller du din Adobe-programvara uppdaterad." "Adobe Systems Incorporated" "c:\program files (x86)\common files\adobe\arm\1.0\armsvc.exe"
+ "AdobeFlashPlayerUpdateSvc" "Med den här tjänsten hålls Adobe Flash Player-installationen uppdaterad med de senaste förbättringarna och säkerhetskorrigeringarna." "Adobe Systems Incorporated" "c:\windows\syswow64\macromed\flash\flashplayerupdateservice.exe"
+ "BBSvc" "Keeps Bing Bar up-to-date. Disabling this service might prevent updates and expose your computer to security vulnerabilities or functional flaws in Bing Bar." "Microsoft Corporation." "c:\program files (x86)\microsoft\bingbar\bbsvc.exe"
+ "Bonjour Service" "Gör det möjligt för hårdvaruenheter och programvarutjänster att automatiskt konfigurera sig själva på nätverket och annonsera sin närvaro." "Apple Inc." "c:\program files\bonjour\mdnsresponder.exe"
+ "GameConsoleService" "GameConsole management services" "WildTangent, Inc." "c:\program files (x86)\wildgames\game console - wildgames\gameconsoleservice.exe"
+ "SeaPort" "Enables the detection, download and installation of up-to-date configuration files for Bing Bar. Also provides server communication for the customer experience improvement program. Stopping or disabling this service may prevent you from getting the latest updates for Bing Bar, which may expose your computer to security vulnerabilities or functional flaws in the Bing Bar." "Microsoft Corporation" "c:\program files (x86)\microsoft\bingbar\seaport.exe"
+ "WinDefend" "Skydd mot spionprogram och oönskad programvara" "Microsoft Corporation" "c:\program files\windows defender\mpsvc.dll"

After the reboot run for a while and if you get a blue screen then upload the minidump for me.

[sbjorken]

Done, done and done.

Today I celebrate 7 days without a bluescreen. Although everything seems to be working well, I wouldn't mind if you let this conversation remain on the notifications list, just in case something reoccurs.

I wish to thank you a lot for your help, outstanding service really!

[rockmilk]

Glad all is well.

Threads are never closed here come back and post when you are ready have a good night.