Windows 8.1 BSOD Driver_IRQL_NOT_LESS_OR_EQUAL (tcpip.sys)

Hello,
I just bought my laptop 2 days ago (Windows 8.1).
I keep getting this blue screen which says "DRIVER_IRQL_NOT_LESS_OR_EQUAL (tcpip.sys)"
Here is my dumps:
https://mega.co.nz/#!opMhEB6R!RM7wuM7bNKKre4vFWCwGFTGwC3m-rOxGTH3Af0sQfS8
Can anyone help please?

ZigZag3143x
Thanks for reply.
I removed McAfee and some apps but still got BSOD.
I also have tried to update my drivers but it doesn't work.
Here is my new dumps:
https://docs.google.com/file/d/0B3zdgWZL0TUWeWJYUGVqM0Z1NFk/edit
lolqq
Of the 12 DMP files 6 are tcpip.sys, several are netr28x.sys (Related to
netr28x.sys 802.11 Wireless Adapter Driver from Ralink Technology, Corp.) I would udate the wifi driver and run driver verifier to find the underlying mis behaving driver.
These crashes were related to memory corruption (probably caused by a driver).
Please run these tests to verify your memory and find which driver is causing the problem.
If you are overclocking (pushing the components beyond their design) you should revert to default at least until the crashing is solved. If you don't
know what it is you probably are not overclocking.
Since it is more likely to be a driver please run verifier first.
1-Driver verifier (for complete directions see our wiki here)
If verifier does not find the issue we can move on to this.
2-Memtest. (You can read more about running memtest here)
If you cannot boot after enabling verifier reboot into safe mode
In Vista & win & (F8)
In win 8 http://www.howtogeek.com/107511/how-to-boot-into-safe-mode-on-windows-8-the-easy-way/
Co-Authored by JMH3143
Wanikiya and Dyami--Team Zigzag
I own a RALINK USB 802.11n adapter and it reproducible BSODs Windows 8.1
I replaced it with a netgear 802.11ac adapter which works fine
Corsair Carbide 300R with window
Corsair TX850V2 70A@12V
Asus M5A99FX PRO R2.0 CFX/SLI
AMD Phenom II 965 C3 Black Edition @ 4.0 GHz
G.SKILL RipjawsX DDR3-2133 8 GB
EVGA GTX 6600 Ti FTW Signature 2(Gk104 Kepler)
Asus PA238QR IPS LED HDMI DP 1080p
ST2000DM001 & Windows 8.1 Enterprise x64
Microsoft Wireless Desktop 2000
Wacom Bamboo CHT470M
Place your rig specifics into your signature like I have, makes it 100x easier to understand!
Hardcore Games Legendary is the Only Way to Play!

Similar Messages

Windows 8 Pro (64 Bit) error/crash: DRIVER_IRQL_NOT_LESS_OR_EQUAL (tcpip.sys)

Hi,
I bought a new computer with Windows 8 Pro (64 Bit) in February/March 2013 and it has crashed almost every day I've had it (it crashes at least every two days). Despite constantly sending the details of the crash through to Microsoft it doesn't seems
to have been addressed. The error message that pops up every time is the same. It is on a blue screen and says:
"Your computer has encountered an error and needs to restart :(
DRIVER_IRQL_NOT_LESS_OR_EQUAL (tcpip.sys)"
Can someone please explain what I need to do to fix this? I am not a tech head so some step by step instructions would be great. Can i (re)install new drivers etc or is this a common fault of Windows 8? This is driving me crazy. It
certainly doesn't make me feel like I have a new computer that's for sure!
I just read one post that suggested someone's fault ma be because of antivirus software AVG Internet Security 2013 (which I have). How can I find out iof this is the case? And if this software doesn't work with Windows 8 does anyone know
what is the best to use with Windows 8?
Any help would be massively appreciated.
Cheers,
rdtro1

* Bugcheck Analysis *
DRIVER_IRQL_NOT_LESS_OR_EQUAL (d1)
An attempt was made to access a pageable (or completely invalid) address at an
interrupt request level (IRQL) that is too high. This is usually
caused by drivers using improper addresses.
If kernel debugger is available get stack backtrace.
Arguments:
Arg1: 0000000000000000, memory referenced
Arg2: 0000000000000002, IRQL
Arg3: 0000000000000000, value 0 = read operation, 1 = write operation
Arg4: fffff88001b83e58, address which referenced memory
Debugging Details:
READ_ADDRESS: GetPointerFromAddress: unable to read from fffff800197d7168
GetUlongFromAddress: unable to read from fffff800197d71f8
0000000000000000 Nonpaged pool
CURRENT_IRQL: 2
FAULTING_IP:
tcpip!FlpReturnNetBufferListChain+e2738
fffff880`01b83e58 488b01 mov rax,qword ptr [rcx]
CUSTOMER_CRASH_COUNT: 1
DEFAULT_BUCKET_ID: WIN8_DRIVER_FAULT
BUGCHECK_STR: AV
PROCESS_NAME: System
ANALYSIS_VERSION: 6.3.9600.16384 (debuggers(dbg).130821-1623) amd64fre
TRAP_FRAME: fffff88002b38880 -- (.trap 0xfffff88002b38880)
NOTE: The trap frame does not contain all registers.
Some register values may be zeroed or incorrect.
rax=fffffa8004f6fc40 rbx=0000000000000000 rcx=0000000000000000
rdx=fffffa8004f6fc41 rsi=0000000000000000 rdi=0000000000000000
rip=fffff88001b83e58 rsp=fffff88002b38a10 rbp=0000000000000000
r8=fffffa8004f6fc40 r9=0000000000000000 r10=fffff88001400e80
r11=fffffa80061113d0 r12=0000000000000000 r13=0000000000000000
r14=0000000000000000 r15=0000000000000000
iopl=0 nv up ei ng nz na pe nc
tcpip!FlpReturnNetBufferListChain+0xe2738:
fffff880`01b83e58 488b01 mov rax,qword ptr [rcx] ds:00000000`00000000=????????????????
Resetting default scope
LAST_CONTROL_TRANSFER: from fffff800194d8769 to fffff800194d9440
STACK_TEXT:
00 nt!KeBugCheckEx
01 nt!KiBugCheckDispatch
02 nt!KiPageFault
03 tcpip!FlpReturnNetBufferListChain
04 NETIO!NetioDereferenceNetBufferList
05 fwpkclnt!FwppDereferenceNetioNetBufferList
06 fwpkclnt!FwpsDereferenceNetBufferList0
07 tunnel!TunnelUserRestoreAndFreeNblAndNbState
08 tunnel!TunnelUserReturnNetBufferLists
09 ndis!ndisInvokeNextReceiveCompleteHandler
0a ndis!NdisReturnNetBufferLists
0b tcpip!FlpReturnNetBufferListChain
0c NETIO!NetioDereferenceNetBufferListChain
0d tcpip!TcpFlushDelay
0e tcpip!TcpPreValidatedReceive
0f tcpip!IppDeliverListToProtocol
10 tcpip!IppProcessDeliverList
11 tcpip!IppReceiveHeaderBatch
12 tcpip!IpFlcReceivePackets
13 tcpip!FlpReceiveNonPreValidatedNetBufferListChain
14 tcpip!FlReceiveNetBufferListChainCalloutRoutine
15 nt!KeExpandKernelStackAndCalloutInternal
16 nt!KeExpandKernelStackAndCalloutEx
17 tcpip!FlReceiveNetBufferListChain
18 ndis!ndisMIndicateNetBufferListsToOpen
19 ndis!ndisInvokeNextReceiveHandler
1a ndis!NdisMIndicateReceiveNetBufferLists
1b tunnel!TeredoWfpIndicationWorker
1c tunnel!LwWorker
1d nt!IopProcessWorkItem
1e nt!ExpWorkerThread
1f nt!PspSystemThreadStartup
20 nt!KiStartSystemThread
Image path: \SystemRoot\system32\DRIVERS\tunnel.sys
Image name: tunnel.sys
Browse all global symbols functions data
Timestamp: Thu Jul 26 04:23:04 2012 (5010AA08)
CheckSum: 000296F2
ImageSize: 0002C000
File version: 6.2.9200.16384
Product version: 6.2.9200.16384
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.6 Driver
File date: 00000000.00000000
Translations: 0409.04b0
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: tunnel.sys
OriginalFilename: tunnel.sys
ProductVersion: 6.2.9200.16384
FileVersion: 6.2.9200.16384 (win8_rtm.120725-1247)
FileDescription: Microsoft Tunnel Interface Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.
Disable the Teredo Tunneling Pseudo-interface 6to4 Adapter
How to Disable Teredo Tunneling Pseudo-interface 6to4 Adapter
http://blogs.msdn.com/b/richin/archive/2010/11/26/how-to-disable-teredo-tunneling-pseudo-interface-6to4-adapter.aspx
Does this fix it?
"A programmer is just a tool which converts caffeine into code"

Windows 8 error/crash: DRIVER_IRQL_NOT_LESS_OR_EQUAL

Hi,
I bought a new computer with Windows 8 and it has crashed almost every day . Despite constantly sending the details of the crash through to Microsoft it doesn't seems to have been addressed. The error message that pops up every time is the
same. It is on a blue screen and says:
"Your computer has encountered an error and needs to restart :(
DRIVER_IRQL_NOT_LESS_OR_EQUAL (tcpip.sys)"
Can someone please explain what I need to do to fix this? I am not a tech head so some step by step instructions would be great. Can i (re)install new drivers etc or is this a common fault of Windows 8? This is driving me crazy. It certainly
doesn't make me feel like I have a new computer that's for sure!
minidump link --> https://onedrive.live.com/redir?resid=883C8D9112CF51%21107
Any help would be massively appreciated.
Cheers,

Hi
Your wifi or network adapter driver might need updating.

Windows latency issues 2-3 days after reboot. Sound/mouse/PC very Choppy - tcpip.sys ndis.sys NETIO.SYS

Alright, so I've tried what feels like everything. First off, I am troubleshooting for WINDOWS 7.
After I reboot, the computer functions relatively fine. Great latency, no choppyness, no matter what I do. About two to three days later, it gets incredibly bad. Specifically when browsing the internet using any browser. The audio becomes terribly choppy
as the mouse lags across the screen. Running LatencyMon, I see tcpip.sys is always at the top. This issue only seems to happen the most when internet activity usage is high. Also, ndis.sys is always up there too, as well as NETIO.SYS
Any help would be so greatly appreciated!! I run a small web server from this PC, so this is quite critical for me. It never used to happen until I recently began getting Pool_corruption blue screens, later to be discovered they were caused by my GIGABYTE
motherboards utility driver files, which I took care of.
I haven't really made any changes to my PC, besides several driver updates in attempt to resolve this. I have since updated my BIOS to the latest version. I even tried using Auslogics Boost Speed to improve the TCP settings based on on my 50mbps internet
speed. Nothing clears the lag, but a reboot, which is temporary. I used to run this PC for up to two weeks before I rebooted, no issues.
Driver Execution Time Screenshot:
http://gyazo.com/7adc868ee2b76dee4ef5c19ad19ce088
LatencyMon log below:
CONCLUSION
Your system appears to be having trouble handling real-time audio and other tasks. You are likely to experience buffer underruns appearing as drop outs, clicks or pops. One or more DPC routines that belong to a driver running in your system appear to be executing
for too long. At least one detected problem appears to be network related. In case you are using a WLAN adapter, try disabling it to get better results. One problem may be related to power management, disable CPU throttling settings in Control Panel and BIOS
setup. Check for BIOS updates.
LatencyMon has been analyzing your system for 0:16:52 (h:mm:ss) on all processors.
SYSTEM INFORMATION
Computer name: ThisIsAComputerName
OS version: Windows 7 Service Pack 1, 6.1, build: 7601 (x64)
Hardware: Z87X-UD4H, Gigabyte Technology Co., Ltd., Z87X-UD4H-CF
CPU: GenuineIntel Intel(R) Core(TM) i7-4770K CPU @ 3.50GHz
Logical processors: 8
Processor groups: 1
RAM: 16324 MB total
CPU SPEED
Reported CPU speed: 3491.0 MHz
Measured CPU speed: 3868.0 MHz (approx.)
Note: reported execution times may be calculated based on a fixed reported CPU speed. Disable variable speed settings like Intel Speed Step and AMD Cool N Quiet in the BIOS setup for more accurate results.
MEASURED INTERRUPT TO USER PROCESS LATENCIES
The interrupt to process latency reflects the measured interval that a usermode process needed to respond to a hardware request from the moment the interrupt service routine started execution. This includes the scheduling and execution of a DPC routine, the
signaling of an event and the waking up of a usermode thread from an idle wait state in response to that event.
Highest measured interrupt to process latency (µs): 81947.411914
Average measured interrupt to process latency (µs): 8.685069
Highest measured interrupt to DPC latency (µs): 71439.589036
Average measured interrupt to DPC latency (µs): 3.104919
REPORTED ISRs
Interrupt service routines are routines installed by the OS and device drivers that execute in response to a hardware interrupt signal.
Highest ISR routine execution time (µs): 147.623890
Driver with highest ISR routine execution time: USBPORT.SYS - USB 1.1 & 2.0 Port Driver, Microsoft Corporation
Highest reported total ISR routine time (%): 0.100862
Driver with highest ISR total time: dxgkrnl.sys - DirectX Graphics Kernel, Microsoft Corporation
Total time spent in ISRs (%) 0.146654
ISR count (execution time <250 µs): 2354800
ISR count (execution time 250-500 µs): 0
ISR count (execution time 500-999 µs): 0
ISR count (execution time 1000-1999 µs): 0
ISR count (execution time 2000-3999 µs): 0
ISR count (execution time >=4000 µs): 0
REPORTED DPCs
DPC routines are part of the interrupt servicing dispatch mechanism and disable the possibility for a process to utilize the CPU while it is interrupted until the DPC has finished execution.
Highest DPC routine execution time (µs): 4384.048124
Driver with highest DPC routine execution time: ndis.sys - NDIS 6.20 driver, Microsoft Corporation
Highest reported total DPC routine time (%): 0.031341
Driver with highest DPC total execution time: nvlddmkm.sys - NVIDIA Windows Kernel Mode Driver, Version 347.52 , NVIDIA Corporation
Total time spent in DPCs (%) 0.201231
DPC count (execution time <250 µs): 7333801
DPC count (execution time 250-500 µs): 0
DPC count (execution time 500-999 µs): 423
DPC count (execution time 1000-1999 µs): 433
DPC count (execution time 2000-3999 µs): 7
DPC count (execution time >=4000 µs): 0
REPORTED HARD PAGEFAULTS
Hard pagefaults are events that get triggered by making use of virtual memory that is not resident in RAM but backed by a memory mapped file on disk. The process of resolving the hard pagefault requires reading in the memory from disk while the process is interrupted
and blocked from execution.
NOTE: some processes were hit by hard pagefaults. If these were programs producing audio, they are likely to interrupt the audio stream resulting in dropouts, clicks and pops. Check the Processes tab to see which programs were hit.
Process with highest pagefault count: avastsvc.exe
Total number of hard pagefaults 1535
Hard pagefault count of hardest hit process: 344
Highest hard pagefault resolution time (µs): 77184.982813
Total time spent in hard pagefaults (%): 0.063944
Number of processes hit: 21
PER CPU DATA
CPU 0 Interrupt cycle time (s): 45.681687
CPU 0 ISR highest execution time (µs): 147.623890
CPU 0 ISR total execution time (s): 11.875990
CPU 0 ISR count: 2354800
CPU 0 DPC highest execution time (µs): 4384.048124
CPU 0 DPC total execution time (s): 13.495186
CPU 0 DPC count: 6501345
CPU 1 Interrupt cycle time (s): 16.680073
CPU 1 ISR highest execution time (µs): 0.0
CPU 1 ISR total execution time (s): 0.0
CPU 1 ISR count: 0
CPU 1 DPC highest execution time (µs): 3350.307935
CPU 1 DPC total execution time (s): 0.426748
CPU 1 DPC count: 107359
CPU 2 Interrupt cycle time (s): 17.093312
CPU 2 ISR highest execution time (µs): 0.0
CPU 2 ISR total execution time (s): 0.0
CPU 2 ISR count: 0
CPU 2 DPC highest execution time (µs): 1974.991693
CPU 2 DPC total execution time (s): 0.441413
CPU 2 DPC count: 122078
CPU 3 Interrupt cycle time (s): 17.086010
CPU 3 ISR highest execution time (µs): 0.0
CPU 3 ISR total execution time (s): 0.0
CPU 3 ISR count: 0
CPU 3 DPC highest execution time (µs): 2766.876540
CPU 3 DPC total execution time (s): 0.269897
CPU 3 DPC count: 65999
CPU 4 Interrupt cycle time (s): 8.237525
CPU 4 ISR highest execution time (µs): 0.0
CPU 4 ISR total execution time (s): 0.0
CPU 4 ISR count: 0
CPU 4 DPC highest execution time (µs): 1918.52220
CPU 4 DPC total execution time (s): 0.618606
CPU 4 DPC count: 220533
CPU 5 Interrupt cycle time (s): 8.578453
CPU 5 ISR highest execution time (µs): 0.0
CPU 5 ISR total execution time (s): 0.0
CPU 5 ISR count: 0
CPU 5 DPC highest execution time (µs): 1899.919794
CPU 5 DPC total execution time (s): 0.206159
CPU 5 DPC count: 56896
CPU 6 Interrupt cycle time (s): 11.541397
CPU 6 ISR highest execution time (µs): 0.0
CPU 6 ISR total execution time (s): 0.0
CPU 6 ISR count: 0
CPU 6 DPC highest execution time (µs): 1861.963334
CPU 6 DPC total execution time (s): 0.358036
CPU 6 DPC count: 108505
CPU 7 Interrupt cycle time (s): 12.079986
CPU 7 ISR highest execution time (µs): 0.0
CPU 7 ISR total execution time (s): 0.0
CPU 7 ISR count: 0
CPU 7 DPC highest execution time (µs): 1797.655113
CPU 7 DPC total execution time (s): 0.479542
CPU 7 DPC count: 151950

Hello and thank you for the reply!
While I am waiting for the issue to start up again, I'd just like to cover some things you mentioned in your post. :)
I only updated the bios because I was originally experiencing these issues. It was a method to hopefully resolve them, which did not work. I was very careful, and the process was a success. I updated to the most recent recommended driver for my motherboard
from the manufacturers.
As for Auslogics Boost Speed, it is not running on my computer, as it is a piece of software I only have used to clean junk files (cache/temp) for a very long time now with no issue. I have also tried updating all of my drivers with success, however that
did not solve the issue either. I even rolled back my network card driver just in case with no luck.
I have not thought of disabling my audio driver yet, being how it effects far more than just my audio when it happens. My mouse is jittery/laggy as well when no sound is playing. But other tests have shown that it may be a network issue. Next time it happens
I'll temporary disable my network drivers to see if that causes the issue to clear up.
I will be sure to mark answers which help appropriately. Thanks again! I should return with the information requested from Zigzag's wiki within 2 days of on-time, when this happens again.

Windows 8 (64 bit) error/crash:DRIVER_IRQL_NOT_LESS_OR_EQUAL (NETIO.SYS)

Hi,
I bought a new computer with Windows 8 (64 Bit) in April/May 2013 and it has recently started crashing within the last week. The error message that pops up every time is the same. It is on a blue screen and says:
"Your computer has encountered an error and needs to restart :(
DRIVER_IRQL_NOT_LESS_OR_EQUAL (NETIO.SYS)"
Can someone please explain what I need to do to fix this?
I've read that it can be antiviruses such as Avast, however I am currently running Vipre. (I have Avira installed still, but disabled while I complete the trial of Vipre)
Any help would be *greatly* appreciated!
Thank you!

CH
These were Related to NETwew00.sys Intel® Wireless WiFi Link Driver from Intel Corporation. I would install the newest driver available.
2: kd>
Irp is active with 5 stacks 3 is current (= 0xffffe0000af33ce0)
No Mdl: No System Buffer: Thread 00000000: Irp stack trace.
cmd flg cl Device File Completion-Context
[ 0, 0] 0 0 00000000 00000000 00000000-00000000
Args: 00000000 00000000 00000000 00000000
[ 0, 0] 0 0 00000000 00000000 00000000-00000000
Args: 00000000 00000000 00000000 00000000
>[ 16, 2] 0 0 ffffe0000221a050 00000000 00000000-00000000
Unable to load image \SystemRoot\system32\DRIVERS\NETwew00.sys, Win32 error 0n2
*** WARNING: Unable to verify timestamp for NETwew00.sys
*** ERROR: Module load completed but symbols could not be loaded for NETwew00.sys
\Driver\NETwNe64
Args: 00014400 00000000 00000004 00000002
[ 16, 2] 0 e1 ffffe00001a01e20 00000000 fffff8009dbd6054-ffffe0000b5e7b10 Success Error Cancel pending
\Driver\vwifibus nt!PopSystemIrpCompletion
Args: 00014400 00000000 00000004 00000002
[ 0, 0] 0 0 00000000 00000000 00000000-ffffe0000b5e7b10
Args: 00000000 00000000 00000000 00000000
Wanikiya and Dyami--Team Zigzag

Tcpip.sys related BSOD in Vista at either wifi/ ethernet network connection with my university

Dear all,
laptop:: Lenovo X61s 3G L7700
OS version: windows Vista business Sp1
tcpip.sys version: 6.0.6001.22167
wifi: Intel 4965AGN. Standard Gigabyte intel ethernet 82566MM
system drivers and BIOS are the most updated driver.
At my 2 homes using ADSL routers, there are absolutely no problems with network connection by wifi or ethernet. However, blue screen occurs when I bring this laptop to university and connect to the network via either ethernet or wifi. This happened to me a few months back. It crashed EVERY TIME when a network connection was attempted. It did not matter whether I updated my drivers on both wifi or ethernet cards. Whenever I bring it to either of my2 homes, no blue screen ever occurs.
It also happens when I attempt to connect to free wifi network in the airport. It crashes again with EXACTLY the same problem. I have to admit that I do not even where to start looking for the problems. System restore did not solve this either. I ran the WinBug analysis. It pointed towards tcpip.sys. My sys ver is at the top of this message.
Would appreciate if someone can point this to the right direction. I am seriously thinking of downgrading this to XP, since it had NEVER happened to XP.
thanks,
VIncent
WinBug analysis:
Microsoft (R) Windows Debugger Version 6.9.0003.113 X86
Copyright (c) Microsoft Corporation. All rights reserved.
Loading Dump File [C:\Users\vincentyip\Desktop\Mini011709-09.dmp]
Mini Kernel Dump File: Only registers and stack trace are available
Symbol search path is: SRV*c:\symbols*http://msdl.microsoft.com/download/symbols
Executable search path is:
Windows Server 2008 Kernel Version 6001 (Service Pack 1) MP (2 procs) Free x86 compatible
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 6001.18145.x86fre.vistasp1_gdr.080917-1612
Kernel base = 0x8200b000 PsLoadedModuleList = 0x82122c70
Debug session time: Sat Jan 17 21:04:50.693 2009 (GMT+0)
System Uptime: 0 days 0:08:18.357
Loading Kernel Symbols
Loading User Symbols
Loading unloaded module list
*                        Bugcheck Analysis                                    *
Use !analyze -v to get detailed debugging information.
BugCheck 1000007F, {8, 803d3130, 0, 0}
Unable to load image dne2000.sys, Win32 error 0n2
*** WARNING: Unable to verify timestamp for dne2000.sys
*** ERROR: Module load completed but symbols could not be loaded for dne2000.sys
Unable to load image Epfwndis.sys, Win32 error 0n2
*** WARNING: Unable to verify timestamp for Epfwndis.sys
*** ERROR: Module load completed but symbols could not be loaded for Epfwndis.sys
*** WARNING: Unable to verify timestamp for epfw.sys
*** ERROR: Module load completed but symbols could not be loaded for epfw.sys
Probably caused by : tcpip.sys ( tcpip!WfpAuditEventGeneral+1cb )
Followup: MachineOwner
1: kd> !analyze -v
*                        Bugcheck Analysis                                    *
UNEXPECTED_KERNEL_MODE_TRAP_M (1000007f)
This means a trap occurred in kernel mode, and it's a trap of a kind
that the kernel isn't allowed to have/catch (bound trap) or that
is always instant death (double fault). The first number in the
bugcheck params is the number of the trap (8 = double fault, etc)
Consult an Intel x86 family manual to learn more about what these
traps are. Here is a *portion* of those codes:
If kv shows a taskGate
        use .tss on the part before the colon, then kv.
Else if kv shows a trapframe
        use .trap on that value
Else
        .trap on the appropriate frame will show where the trap was taken
        (on x86, this will be the ebp that goes with the procedure KiTrap)
Endif
kb will then show the corrected stack.
Arguments:
Arg1: 00000008, EXCEPTION_DOUBLE_FAULT
Arg2: 803d3130
Arg3: 00000000
Arg4: 00000000
Debugging Details:
BUGCHECK_STR: 0x7f_8
CUSTOMER_CRASH_COUNT: 9
DEFAULT_BUCKET_ID: COMMON_SYSTEM_FAULT
PROCESS_NAME: System
CURRENT_IRQL: 2
LAST_CONTROL_TRANSFER: from 8a67c8da to 8203f6c0
STACK_TEXT:
8cf21274 8a67c8da 00000000 8cf21534 00000000 nt!SeReportSecurityEventWithSubCategory+0xe
8cf2154c 8a67cb3f 00003900 8cf216dc 8a67696d tcpip!WfpAuditEventGeneral+0x1cb
8cf21558 8a67696d 8cf21588 00000000 8cf21848 tcpip!KfdAuditEvent+0x38
8cf216dc 8a676709 0000001c 8cf219e0 8cf21848 tcpip!IndicateDropAudit+0x1ac
8cf217e0 8a67cddb 0000001c 0000001d 8cf219e0 tcpip!ShimIndicateDiscard+0x3e
8cf2181c 8a63025b 0000001c 8cf219e0 8cf21848 tcpip!ShimIndicateDiscardGeneral+0x50
8cf219f0 8a696833 00000011 00008900 00008900 tcpip!WfpInspectReceiveControlShimV4+0x2fb
8cf21a80 8a679a9f 00000002 86a52dc0 869ca000 tcpip!ProcessIcmpErrorClassify+0x1cf
8cf21d0c 8a67cf6f 00000001 00000002 00000000 tcpip!WfpProcessInTransportStackIndication+0xe1
8cf21d60 8a618e27 86a52dc0 00000002 00000001 tcpip!InetInspectReceiveDatagram+0xce
8cf21d94 8a618c2e 869d2668 b6aad4c8 a8396220 tcpip!RawBeginMessageIndication+0x35
8cf21de8 8a67657e 869d2668 00000002 00000000 tcpip!RawDeliverDatagrams+0xf9
8cf21e28 8a676105 869d2668 00000000 8cf21e64 tcpip!RawReceiveDatagrams+0x10d
8cf21e38 8a67402b 8cf21e4c c000023e 00000000 tcpip!RawNlClientReceiveDatagrams+0x12
8cf21e64 8a673dee 8a6cd19c 8cf21ec0 c000023e tcpip!IppDeliverListToProtocol+0x49
8cf21e84 8a673d34 8a6cac68 00000101 8cf21ec0 tcpip!IppProcessDeliverList+0x2a
8cf21edc 8a6734ec 8a6cac68 00000001 00000000 tcpip!IppReceiveHeaderBatch+0x20a
8cf21f6c 8a671fe6 879b6c90 00000000 820ee401 tcpip!IpFlcReceivePackets+0xbe1
8cf21fe8 8a67252e 89dfbbe8 89d16bf0 00000000 tcpip!FlpReceiveNonPreValidatedNetBufferListChain+0x6e3
8cf22010 8a5400b0 89dfbbe8 89d16bf0 00000000 tcpip!FlReceiveNetBufferListChain+0x104
8cf22044 8a532919 00dfb830 89d16bf0 00000000 ndis!ndisMIndicateNetBufferListsToOpen+0xab
8cf2206c 8a532890 00000000 00000001 87c840e8 ndis!ndisIndicateSortedNetBufferLists+0x4a
8cf221e8 8a47357f 87c840e8 00000000 00000000 ndis!ndisMDispatchReceiveNetBufferLists+0x129
8cf22204 8a5452ba 87c840e8 89d16bf0 00000000 ndis!ndisMTopReceiveNetBufferLists+0x2c
8cf22250 8a53fba0 02c840e8 8cf22294 00000001 ndis!ndisMIndicatePacketsToNetBufferLists+0xe9
8cf2228c 8a565bfc 85756ef8 8796aa54 89dd87c4 ndis!ndisLWM5IndicateReceive+0x31d
8cf222b0 8df0e67a 879b6d10 8796aa54 89dd87c4 ndis!EthIndicateReceive+0x1f
WARNING: Stack unwind information not available. Following frames may be wrong.
8cf22334 8deffa73 89df7020 89dd8778 89dd87c4 dne2000+0x1767a
8cf22360 8a565570 89df7020 89dd8778 89dd87c4 dne2000+0x8a73
8cf223d0 8ebe5f49 c000009a 8cf22400 00000001 ndis!ethFilterDprIndicateReceivePacket+0x2fc
8cf223f8 8ebe6f3b 89dd8778 00000000 87c99008 Epfwndis+0x2f49
8cf2243c 8ebe49cb 830020cc 89b582d8 00000008 Epfwndis+0x3f3b
8cf22488 8a5487fe 87bc3b80 87434d60 87bc3c38 Epfwndis+0x19cb
8cf224a4 8a548938 87bc3b80 87434d60 00000000 ndis!ndisDummyIrpHandler+0x72
8cf22594 820c6fd3 87bc3b80 87434d60 875ac9a8 ndis!ndisDeviceControlIrpHandler+0xe4
8cf225ac 8fd91011 89b0cbdc 875ac9a8 00000000 nt!IofCallDriver+0x63
8cf225d4 8fd91148 875ac9a8 875acffe 89b582d8 epfw+0x7011
8cf225ec 8fd8b1cb 89b0cbdc 8fd99924 830020cc epfw+0x7148
8cf2262c 8fd91bf3 89b0cb18 89b582d8 84e99264 epfw+0x11cb
8cf22640 8fd946a7 89b0cb18 89b582d8 84e99264 epfw+0x7bf3
8cf2268c 8a5a980a 86992548 00000089 876cf3d8 epfw+0xa6a7
8cf227f8 89b9af4e 0000044c 89b0cb18 89b582d8 NETIO!PopulateContext+0x2f
8cf228d0 8a5aa7a4 00000000 89b1bb6d 00002711 0x89b9af4e
8cf22964 8a5ae5ed 8a5d3324 8cf229e4 00000000 NETIO!MatchCondition+0x4b
8cf229ac 823cb5b0 876cf3b8 84916500 00000000 NETIO!KfdAleAcquireEndpointContextFromFlow+0x82
8cf229bc 8cf22a18 876cf3f8 8cf229e8 8a5ae3f7 hal!KfLowerIrql+0x64
00000000 00000000 00000000 00000000 00000000 0x8cf22a18
STACK_COMMAND: kb
FOLLOWUP_IP:
tcpip!WfpAuditEventGeneral+1cb
8a67c8da 5b              pop     ebx
SYMBOL_STACK_INDEX: 1
SYMBOL_NAME: tcpip!WfpAuditEventGeneral+1cb
FOLLOWUP_NAME: MachineOwner
MODULE_NAME: tcpip
IMAGE_NAME: tcpip.sys
DEBUG_FLR_IMAGE_TIMESTAMP: 4812c4ce
FAILURE_BUCKET_ID: 0x7f_8_tcpip!WfpAuditEventGeneral+1cb
BUCKET_ID: 0x7f_8_tcpip!WfpAuditEventGeneral+1cb
Followup: MachineOwner

Per my original post:
"When my ATV is connected via ethernet, and I attempt to play some internet radio stations, some will work just fine while others won't. For example, when connected to my home network via ethernet, some internet radio channels (I can't give a percentage because I haven't tested all of them) will play just fine, however, others won't. The ATV will attempt to connect, but the spinning progress bar just goes and goes and goes until it eventually errors out (no error number is provided, it just says that there was trouble loading the content). The funny thing (or not so funny thing actually) is that if I unplug the ethernet cable, and connect my ATV to the network via wifi, those same stations that didn't play when ATV was connected via ethernet, WILL play when ATV is connected via wifi. So, in short, some stations play just fine when ATV is connected to home network, through wireless router, via either wifi OR ethernet, yet some will only play when ATV is connected to home network via wifi. I have found this to be the same when it comes to downloading or refreshing the photos in my photo stream. If I throw new photos in my photo stream on iCloud, and the ATV is connected via ethernet, they won't refresh to the ATV, however, if I unplug the ATV and connect via wifi they begin to refresh."
There are dozens of original threads out there that report of similar - if not exact, issues. I have contacted "Roy" per his request and not heard back from him (if such a person exists). I have "restored" my ATV and rebooted all equipment to no avail. Until Apple gets with it, acknowledges their problem, and fixes it, I am resigned to just having to deal with switching back and forth from wifi to ethernet, and so on.

Windows 8.1 BSOD problem

Hello i have an ASUS S400 CA ultrabook and my BSOD problems have started after automated upgrade from windows 8 to windows 8.1 Here is the latest dump file. BSOD problem says "DRIVER_IRQL_NOT_LESS_OR_EQUAL(athw8x.sys)"
I have downloaded driver from the ASUS website but the problem remains unsolved. Please, give me some advice, thank you in advance
https://dl.dropboxusercontent.com/u/79149617/042314-24390-01.dmp

Hi,
The attached DMP file is of the DRIVER_IRQL_NOT_LESS_OR_EQUAL (d1) bug check.
This indicates that a kernel-mode driver attempted to access pageable memory at a process IRQL that was too high.
A driver tried to access an address that is pageable (or that is completely invalid) while the IRQL was too high. This bug check is usually caused by drivers that have used improper addresses.
3: kd> k
Child-SP RetAddr Call Site
ffffd000`2161c3d8 fffff803`78f627e9 nt!KeBugCheckEx
ffffd000`2161c3e0 fffff803`78f6103a nt!KiBugCheckDispatch+0x69
ffffd000`2161c520 fffff800`0272571f nt!KiPageFault+0x23a
ffffd000`2161c6b0 ffffc000`00000000 athwbx+0x9671f
ffffd000`2161c6b8 fffff803`7918a223 0xffffc000`00000000
ffffd000`2161c6c0 ffffe000`6666744e nt!FsRtlTeardownPerStreamContexts+0x53
ffffd000`2161c730 ffffc000`03ba6010 0xffffe000`6666744e
ffffd000`2161c738 fffff800`00db4dd2 0xffffc000`03ba6010
ffffd000`2161c740 fffff800`00cdbe24 Ntfs!NtfsDeleteFcb+0x460
ffffd000`2161c7c0 fffff800`00000002 Ntfs!NtfsTeardownFromLcb+0x1f4
ffffd000`2161c850 fffff800`00000001 CI!_guard_check_icall_fptr <PERF> (CI+0x2)
ffffd000`2161c858 fffff800`029692f0 CI!_guard_check_icall_fptr <PERF> (CI+0x1)
ffffd000`2161c860 ffffe000`00000000 athwbx+0x2da2f0
ffffd000`2161c868 fffff800`029685d0 0xffffe000`00000000
ffffd000`2161c870 fffff800`02968550 athwbx+0x2d95d0
ffffd000`2161c878 ffffd000`2161c890 athwbx+0x2d9550
ffffd000`2161c880 ffffd000`2161c951 0xffffd000`2161c890
ffffd000`2161c888 ffffd000`2161c900 0xffffd000`2161c951
ffffd000`2161c890 ffffe000`01581098 0xffffd000`2161c900
ffffd000`2161c898 00000000`00000000 0xffffe000`01581098
^^ athwbx.sys is the Qualcomm Atheros AR9485WB-EG Wireless Network Adapter. In every case I've dealt with this driver, the manufacturer never actually had the latest version, and downloading this driver always helped -
http://www.atheros.cz/atheros-wireless-download.php?chipset=61&system=7
^^ Atheros' website can be kind of confusing to say the very least, so let me know if you need help downloading it.
Regards,
Patrick
“Be kind whenever possible. It is always possible.” - Dalai Lama

Adobe Premier Pro CC Crashes PC with error DRIVER_IRQL_NOT_LESS_OR_EQUAL (wdf01000.sys)

i am a gamer on youtube and i use my all the time i recently did a full system upgrade exceot the ram and hardrive it working fine but then the harddrive became faulty and premier pro cc allways crashed when i opened it so i put a new 120gb ssd in installed
a new version of windows did all the driver updates and it worked fine untill i closed premier pro now im back to it crashes every time i open it and it crashes my pc i allways get this error message DRIVER_IRQL_NOT_LESS_OR_EQUAL (wdf01000.sys)
could someone please help because i really need my pc working again and i hate using my mac

Thanks.
DRIVER_IRQL_NOT_LESS_OR_EQUAL (d1)
This indicates that a kernel-mode driver attempted to access pageable memory at a process IRQL that was too high.
A driver tried to access an address that is pageable (or that is completely invalid) while the IRQL was too high. This bug check is usually caused by drivers that have used improper addresses.
2: kd> .trap 0xffffd000fe1dc280
NOTE: The trap frame does not contain all registers.
Some register values may be zeroed or incorrect.
rax=0000000000000000 rbx=0000000000000000 rcx=0000000000000000
rdx=00000000c0000001 rsi=0000000000000000 rdi=0000000000000000
rip=fffff80031ca470a rsp=ffffd000fe1dc410 rbp=00000000c0000001
r8=00000000c0000001 r9=0000000000000000 r10=0000000000000038
r11=ffffd000fe1dc4c0 r12=0000000000000000 r13=0000000000000000
r14=0000000000000000 r15=0000000000000000
iopl=0 nv up ei pl zr na po nc
Wdf01000!FxRequest::CompleteInternal+0x4a:
fffff800`31ca470a 488b91b8000000 mov rdx,qword ptr [rcx+0B8h] ds:00000000`000000b8=????????????????
On the faulting instruction, there was a failure writing the contents of the
rdx register into the memory address pointed at by the sum of the
rcx register + 0B8h. This was brought upon by USBXHCI.sys.
1. Remove and replace avast! with Windows 8's built-in Windows Defender for temporary troubleshooting purposes as it's likely causing conflicts:
avast! removal -
http://www.avast.com/uninstall-utility
Windows Defender (how to turn on after removal)
A.
Navigate toControl Panel
(with icons). You can do this by hittingStart
> Search > Control Panel.
Once in Control Panel,
change the drop-down fromCategory
to
Large
and/or Small icons.
B.
Among the list of icons, find and click
Action Center.
C.
Assuming the removal of your prior antivirus software went properly, you will notice for both
Spyware and unwated software protection (important) and
Virus protection (important), it'll have a button labeled Turn on now. Click this button (it doesn't matter which, as Windows Defender serves as
both in Windows 8/8.1).
2. I am curious in regards to whether or not your Avstream drivers are causing a problem, as they are rather old:
2: kd> lmvm ElgatoGC658
start end module name
fffff800`34492000 fffff800`344a1000 ElgatoGC658 (deferred)
Image path: \SystemRoot\System32\Drivers\ElgatoGC658.sys
Image name: ElgatoGC658.sys
Timestamp: Wed Nov 09 02:39:12 2011
I would uninstall if no update is available.
Regards,
Patrick
“Be kind whenever possible. It is always possible.” - Dalai Lama

Cannot install blackberry link on new Q10 as crashes with fatal error DRIVER_IRQL_NOT_LESS_OR_EQUAL (ndis.sys)

I cannot install blackberry link on new Q10 as repeatedly crashes with fatal error DRIVER_IRQL_NOT_LESS_OR_EQUAL (ndis.sys) makes blackberry Q10 phone pretty useless!! Is there any other way to transfer content from PC to Blackberry?? Will blackberry fix this problem- cannot find any solutions on Google. Thanks
Solved!
Go to Solution.

Hello Black55
Welcome to http://supportforums.blackberry.com/
You can tell which version you have installed Blackberry Link
Respect al error that you listed, you are likely to mistake the sea tu windows corrupt.
Regards.
BBM Channels PIN: C0007093A
Do not forget to give LIKE Those people who help you and advise you about your doubts. if the review has been SOLVED** # 4LL #ÉliteRoad Make a backup of your BlackBerry
BlackBerry Protect and BlackBerry Link constantly. #ichooseBlackBerry10 Gutijose14 Forums Veteran I

Blue Screen Error - DRIVER_IRQL_NOT_LESS_OR_EQUAL (Netwbw02.sys) - Satellite Laptop

Hi, I have been getting blue screen errors the past couple days.
The error says: DRIVER_IRQL_NOT_LESS_OR_EQUAL (Netwbw02.sys)
Attached is the dump file. Let me know if you are able to open it. Any help would be appreciated!
https://onedrive.live.com/redir?resid=B6AB1143124F198F%21442

Which Satellite? There is a label on the bottom.
Bug Check 0xD1: DRIVER_IRQL_NOT_LESS_OR_EQUAL
Caused By Driver : fvevol.sys         <--- BitLocker Drive Encryption Driver
If you saw Netwbw02.sys mentioned, give us some more .dmp files.
==================================================
Dump File         : 020215-31750-01.dmp
Crash Time        : 2/2/2015 2:14:04 PM
Bug Check String : DRIVER_IRQL_NOT_LESS_OR_EQUAL
Bug Check Code    : 0x000000d1
Parameter 1       : ffffd001`1c2c1000
Parameter 2       : 00000000`00000002
Parameter 3       : 00000000`00000001
Parameter 4       : fffff801`9eff6874
Caused By Driver : fvevol.sys
Caused By Address : fvevol.sys+15f6874
File Description :
Product Name      :
Company           :
File Version      :
Processor         : x64
Computer Name     :
Full Path         : C:\Test\020215-31750-01.dmp
Processors Count : 4
Major Version     : 15
Minor Version     : 9600
==================================================
-Jerry

Windows 8.1 BSOD please help Minidump file attached

Windows 8.1 BSOD please help Minidump file and dxdiag info file link is below,
This BSOD frequency is about once every 1 hour to 4 hours,
Memtest passed with one pass on the one chip of 4GB
Brand new 8.1 install
https://drive.google.com/file/d/0B39S6eNyRvOHRnZHRG1Jd1lwT2M/view?usp=sharing
https://docs.google.com/document/d/1XueM-ov7wjfePJh45Pp3fg1QSSzFBqMuO1tfr9GZm8k/edit?usp=sharing

This is a crash related to some type of hardware failure. Please refer to the Wiki link below, for some troubleshooting tips.
BugCheck Code 124 Co-Authored by ZigZag3143& JMH3143
http://answers.microsoft.com/en-us/windows/wiki/windows_other-system/bugcheck-code-124/98c998d2-447a-40ce-ae1f-8211e355f14d
WARNING: Whitespace at end of path element
Symbol search path is: SRV*c:\symbols*http://msdl.microsoft.com/download/symbols
Executable search path is:
Windows 7 Kernel Version 9600 MP (2 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 9600.16422.amd64fre.winblue_gdr.131006-1505
Machine Name:
Kernel base = 0xfffff800`c0e7b000 PsLoadedModuleList = 0xfffff800`c113f990
Debug session time: Tue Mar 3 23:19:34.178 2015 (UTC - 5:00)
System Uptime: 0 days 0:00:04.947
Loading Kernel Symbols
Loading User Symbols
Mini Kernel Dump does not contain unloaded driver list
* Bugcheck Analysis *
Use !analyze -v to get detailed debugging information.
BugCheck 124, {0, ffffe000016f88f8, 0, 0}
Probably caused by : hardware
Followup: MachineOwner
1: kd> !analyze -v
* Bugcheck Analysis *
WHEA_UNCORRECTABLE_ERROR (124)
A fatal hardware error has occurred. Parameter 1 identifies the type of error
source that reported the error. Parameter 2 holds the address of the
WHEA_ERROR_RECORD structure that describes the error conditon.
Arguments:
Arg1: 0000000000000000, Machine Check Exception
Arg2: ffffe000016f88f8, Address of the WHEA_ERROR_RECORD structure.
Arg3: 0000000000000000, High order 32-bits of the MCi_STATUS value.
Arg4: 0000000000000000, Low order 32-bits of the MCi_STATUS value.
Debugging Details:
BUGCHECK_STR: 0x124_AuthenticAMD
CUSTOMER_CRASH_COUNT: 1
DEFAULT_BUCKET_ID: VISTA_DRIVER_FAULT
PROCESS_NAME: System
CURRENT_IRQL: 0
STACK_TEXT:
ffffd000`2087f6c0 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!WheapCreateLiveTriageDump+0x81
STACK_COMMAND: kb
FOLLOWUP_NAME: MachineOwner
MODULE_NAME: hardware
IMAGE_NAME: hardware
DEBUG_FLR_IMAGE_TIMESTAMP: 0
FAILURE_BUCKET_ID: X64_0x124_AuthenticAMD_PROCESSOR_BUS_PRV
BUCKET_ID: X64_0x124_AuthenticAMD_PROCESSOR_BUS_PRV
Followup: MachineOwner
1: kd> !errrec ffffe000016f88f8
===============================================================================
Common Platform Error Record @ ffffe000016f88f8
Record Id : 01d0563268a81312
Severity : Fatal (1)
Length : 928
Creator : Microsoft
Notify Type : Machine Check Exception
Timestamp : 3/4/2015 4:19:34
Flags : 0x00000002 PreviousError
===============================================================================
Section 0 : Processor Generic
Descriptor @ ffffe000016f8978
Section @ ffffe000016f8a50
Offset : 344
Length : 192
Flags : 0x00000001 Primary
Severity : Fatal
Proc. Type : x86/x64
Instr. Set : x64
Error Type : BUS error
Operation : Generic
Flags : 0x00
Level : 3
CPU Version : 0x0000000000100f42
Processor ID : 0x0000000000000000
===============================================================================
Section 1 : x86/x64 Processor Specific
Descriptor @ ffffe000016f89c0
Section @ ffffe000016f8b10
Offset : 536
Length : 128
Flags : 0x00000000
Severity : Fatal
Local APIC Id : 0x0000000000000000
CPU Id : 42 0f 10 00 00 08 02 00 - 09 20 80 00 ff fb 8b 17
00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00
00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00
Proc. Info 0 @ ffffe000016f8b10
===============================================================================
Section 2 : x86/x64 MCA
Descriptor @ ffffe000016f8a08
Section @ ffffe000016f8b90
Offset : 664
Length : 264
Flags : 0x00000000
Severity : Fatal
Error : BUSLG_OBS_ERR_*_NOTIMEOUT_ERR (Proc 0 Bank 4)
Status : 0xba00001000020c0f

Server 2k8 r2: UDP traffic from over 30K IPs causing tcpip.sys to contend on spinlocks resulting in 1/2 second DPCs. Works fine in Win2k3.

We have a UDP server that accepts many connections. In Win2k3 it can talk to anywhere from 90K to 120K IP addresses with no problem.
On Win2k8R2 it throttles and often tips over at 30K users.
I have xperf logs showing the problems. DPCs start out taking reasonable amounts of time, but eventually grow to take half a second upwards of 3/4 of a second; at that point the network stack seems to tip over and start again.
I've appended some of the xperf data. I don't see a way to provide an attachment.
The nic is the Intel 82576 with only one link active. Again - same code same hardware runs fine on win2k3.
There are various routes to it, but huge swaths of code always end up in: NDIS.SYS!NdisAcquireReadWriteLock.
I would assume on the same lock, and I would guess it's a spin lock since it spends all its time in ntkrnlmp.exe!KeAcquireSpinLockAtDpcLevel.
In our sample the process had a weight of 540,714 units. Of that at least 210,597 ended up trying to acquire that lock via WSASendTo. Gory details appended.
From the DPC view, you can see the calls that were taking 1/2 a second or longer. There are 110 of them in a 37 second sample. The time to process varies randomly and there are many thousands in between. This is appended as the second set
of voluminous data.
OS is Win2k R2 SP1
The Intel 82576 NIC has the latest available drivers
I've already tried altering just about every network parameter to observe the results. RSS enabled/disabled. RSS NIC configured for 1 or more CPUs. Various timings for Interrupt deferral, etc...
The net effect of all this was that I could move the shape of the curves, and even stop the network from tipping over entirely; however the DPC times are still awful; the spinlocks are still spinning and the net throughput is still 1/4 of Win2k3.
Any suggestions? What's the next step?
Joe
Stack
Weight
% Weight
Count
| | | | | |- ws2_32.dll!WSASendTo
210597.1896
5.33
210735
| | | | | | |- mswsock.dll!WSPSendTo
210222.4585
5.32
210356
| | | | | | | |- ntdll.dll!ZwDeviceIoControlFile
209948.2971
5.31
210079
| | | | | | | | ntdll.dll!LdrInitializeThunk
209948.2971
5.31
210079
| | | | | | | | ntdll.dll! ?? ::FNODOBFM::`string'
209948.2971
5.31
210079
| | | | | | | | wow64.dll!Wow64LdrpInitialize
209948.2971
5.31
210079
| | | | | | | | wow64.dll!RunCpuSimulation
209948.2971
5.31
210079
| | | | | | | | wow64cpu.dll!DeviceIoctlFileFault
209948.2971
5.31
210079
| | | | | | | | wow64cpu.dll!CpupSyscallStub
209948.2971
5.31
210079
| | | | | | | | |- ntkrnlmp.exe!KiSystemServiceCopyEnd
209865.9437
5.31
209996
| | | | | | | | | |- ntkrnlmp.exe!NtDeviceIoControlFile
209861.9414
5.31
209992
| | | | | | | | | | |- ntkrnlmp.exe!IopXxxControlFile
209856.0089
5.31
209986
| | | | | | | | | | | |- afd.sys!AfdFastIoDeviceControl
209456.9132
5.3
209583
| | | | | | | | | | | | |- afd.sys!AfdFastDatagramSend
209323.6618
5.3
209448
| | | | | | | | | | | | | |- afd.sys!AfdTLFastDgramSend
208405.7464
5.27
208521
| | | | | | | | | | | | | | |- tcpip.sys!UdpTlProviderSendMessages
208270.0504
5.27
208384
| | | | | | | | | | | | | | | |- ntkrnlmp.exe!KeExpandKernelStackAndCalloutEx
208216.8802
5.27
208330
| | | | | | | | | | | | | | | | |- tcpip.sys!UdpTlProviderSendMessagesCalloutRoutine
208164.7757
5.27
208277
| | | | | | | | | | | | | | | | | |- tcpip.sys!UdpSendMessages
208158.8001
5.27
208271
| | | | | | | | | | | | | | | | | | |- tcpip.sys!UdpSendMessagesOnPathCreation
204713.1138
5.18
204823
| | | | | | | | | | | | | | | | | | | |- tcpip.sys!WfpAleFastUdpInspection
127845.6429
3.23
127912
| | | | | | | | | | | | | | | | | | | | |- NDIS.SYS!NdisAcquireReadWriteLock
127041.047
3.21
127099
| | | | | | | | | | | | | | | | | | | | |- ntkrnlmp.exe!RtlLookupEntryHashTable
264.272245
0.01
267
| | | | | | | | | | | | | | | | | | | | |- tcpip.sys!WfpAleFastUdpInspection<itself>
171.42808
0
173
| | | | | | | | | | | | | | | | | | | | |- tcpip.sys!WfpAlepIsSameEndpoint
131.641229
0
133
| | | | | | | | | | | | | | | | | | | | |- netio.sys!WfpRefreshEntryLru
125.181435
0
126
| | | | | | | | | | | | | | | | | | | | |- tcpip.sys!memset
39.508324
0
40
| | | | | | | | | | | | | | | | | | | | |- netio.sys!KfdIsLayerEmpty
30.500205
0
31
| | | | | | | | | | | | | | | | | | | | |- netio.sys!KfdGetLayerCacheEpoch
18.334937
0
19
| | | | | | | | | | | | | | | | | | | | |- NDIS.SYS!NdisReleaseReadWriteLock
15.799406
0
16
| | | | | | | | | | | | | | | | | | | | |- ntkrnlmp.exe! ?? ::FNODOBFM::`string'
3.992942
0
4
| | | | | | | | | | | | | | | | | | | | |- tcpip.sys!KfdIsLayerEmpty
3.937052
0
4
| | | | | | | | | | | | | | | | | | | |- tcpip.sys!IpNlpFastSendDatagram
63245.49252
1.6
63271
| | | | | | | | | | | | | | | | | | | | |- tcpip.sys!IppSendDatagramsCommon
62205.09904
1.57
62216
| | | | | | | | | | | | | | | | | | | | | |- tcpip.sys!WfpProcessOutTransportStackIndication
61667.95687
1.56
61676
| | | | | | | | | | | | | | | | | | | | | | |- tcpip.sys!ProcessALEForTransportPacket
61615.13818
1.56
61623
| | | | | | | | | | | | | | | | | | | | | | | |- tcpip.sys!WfpAleMatchStatefulEndpoint
50338.28726
1.27
50346
| | | | | | | | | | | | | | | | | | | | | | | | |- NDIS.SYS!NdisAcquireReadWriteLock
50260.6444
1.27
50268
| | | | | | | | | | | | | | | | | | | | | | | | |- tcpip.sys!WfpAleMatchStatefulEndpoint<itself>
31.797626
0
32
| | | | | | | | | | | | | | | | | | | | | | | | |- ntkrnlmp.exe!RtlLookupEntryHashTable
20.90588
0
21
| | | | | | | | | | | | | | | | | | | | | | | | |- tcpip.sys!WfpAlepIsSameEndpoint
8.997452
0
9
| | | | | | | | | | | | | | | | | | | | | | | | |- tcpip.sys!memset
8.940707
0
9
| | | | | | | | | | | | | | | | | | | | | | | | |- netio.sys!WfpRefreshEntryLru
2.999293
0
3
| | | | | | | | | | | | | | | | | | | | | | | | |- tcpip.sys!_security_check_cookie
2.001804
0
2
| | | | | | | | | | | | | | | | | | | | | | | | |- NDIS.SYS!NdisReleaseReadWriteLock
2.000098
0
2
| | | | | | | | | | | | | | | | | | | | | | | |- tcpip.sys!WfpAleConnectAcceptIndicate
11225.06641
0.28
11225
| | | | | | | | | | | | | | | | | | | | | | | | |- tcpip.sys!WfpAleAuthorizeSend
11219.07252
0.28
11219
| | | | | | | | | | | | | | | | | | | | | | | | | |- tcpip.sys!WfpAlepAuthorizeSend
11208.09459
0.28
11208
| | | | | | | | | | | | | | | | | | | | | | | | | | |- tcpip.sys!WfpAleInsertRemoteEndpoint
11035.14208
0.28
11035
| | | | | | | | | | | | | | | | | | | | | | | | | | | |- NDIS.SYS!NdisAcquireReadWriteLock
10873.02754
0.28
10873
DPC Raw Info:
Function
Count
Max Actual Duration (ms)
ndisInterruptDpc
554751
713.847
1
713.847
1
708.4239
1
677.1281
1
672.813
1
672.2575
1
660.812
1
660.0321
1
655.2213
1
647.1885
1
641.3311
1
632.4002
1
622.6813
1
621.7657
1
620.5844
1
617.5036
1
615.4015
1
610.9474
1
606.8938
1
604.7577
1
594.5486
1
587.6109
1
581.5086
1
580.0222
1
579.7739
1
576.6219
1
576.4333
1
575.1572
1
574.4537
1
574.1743
1
573.7621
1
560.8745
1
559.7798
1
557.8415
1
557.8143
1
557.5373
1
553.3025
1
553.172
1
550.6415
1
549.8416
1
549.612
1
549.5203
1
548.3752
1
548.0821
1
547.8116
1
547.4588
1
547.2672
1
545.9869
1
544.6088
1
544.3772
1
542.6019
1
542.4782
1
542.2717
1
542.2666
1
542.2051
1
540.3364
1
538.9678
1
538.8142
1
538.3009
1
537.85
1
535.7837
1
534.7581
1
534.7572
1
532.4798
1
532.2034
1
532.0741
1
531.8791
1
530.7899
1
529.894
1
528.7522
1
527.006
1
526.6041
1
526.3972
1
525.4709
1
525.351
1
524.2444
1
522.7439
1
521.5258
1
520.562
1
520.4451
1
518.5009
1
517.4765
1
517.375
1
517.282
1
512.0087
1
511.5543
1
511.5373
1
510.6021
1
509.3328
1
508.7159
1
507.1279
1
505.7661
1
505.1325
1
504.612
1
501.9754
1
501.9476
1
501.94
1
500.7436
1
500.625
1
500.5376
1
499.567
1
499.5614
1
499.36
1
499.2837
1
499.0861
1
499.0537
1
498.7743
1
498.4466
1
498.3967
1
496.5591
1
495.4409
Joe Rohde

Hi Joe,
The issue can be checked only by dump file. In this scenario, we may have to capture the dump file and MPS reports to analysis. I am afraid
that your issue falls into the paid support category which requires a more in-depth level of support. Please visit the below link to see the various paid support options that are available to better meet your needs.
http://support.microsoft.com/default.aspx?id=fh;en-us;offerprophone
Thanks for your understanding and efforts with the issue.
Annie

Encore CS6 and tcpip.sys

I have recently dipped my toes in the water of Blu-Ray creation, after may hundreds of successful DVDs. The current menu is created from within Encore but using a .png background image and buttons created in Photoshop. The content consists of 12 sequences, imported from the Premiere Pro CS6 timeline. Every time i select 'Build' the system gets a little way in, not always the same place,and the whole computer crashes with a message which isn't on he scren for very long but names a file - TCPIP.SYS. I can't quite see wehat the connection between tcpip.sys and Encore can be. It automatically reboots the PC and we go round in a cirtcle. Has anyone else seen this behaviour and, if so, was a solutiojn found? The PC is a Hewlett Packard i7 with 16Gb of RAM and plenty of hard disc space (128Gb+) away from the C: drive.

Many thanks for your thoughts, Stan. It's late here in the UK so I'll change the preference tomorrow and see if more information can be gleaned
I supose I should have tried a 'simple' BD first but, as ever with me, far from dipping my toes, I jump in with both feet! I didn't expect the workflow to be much different to DVD. I have read somewhere else in the forum, that it is better to Export from PrPro rather than 'Import' to Encore. I have been importing from the PrPro Timeline direct to Encore. I'll give that a try tomorrow, aslo.
Once again, many thanks. I'll report back when I am more awake!

HP g049au downgraded to windows 7 32 bit showing atikmdag.sys display problem

HP g049au downgraded to windows 7 32 bit showing atikmdag.sys display problem.
Downgraded according to HP support instructions found here- http://h30434.www3.hp.com/t5/Notebook-Operating-Systems-and-Software/hp-15-g049au-K5B45PA-driver-for...
Crash dump analysis-
On Mon 10/20/2014 5:20:39 PM GMT your computer crashed
crash dump file: C:\Windows\Minidump\102014-17222-01.dmp
uptime: 01:20:20
This was probably caused by the following module: atikmdag.sys (atikmdag+0x1CEB1)
Bugcheck code: 0xA0000001 (0x5, 0x0, 0x0, 0x0)
Error: CUSTOM_ERROR
file path: C:\Windows\system32\drivers\atikmdag.sys
product: ATI Radeon Family
company: Advanced Micro Devices, Inc.
description: ATI Radeon Kernel Mode Driver
A third party driver was identified as the probable root cause of this system error. It is suggested you look for an update for the following driver: atikmdag.sys (ATI Radeon Kernel Mode Driver, Advanced Micro Devices, Inc.).
Google query: Advanced Micro Devices, Inc. CUSTOM_ERROR

Hello @HPpowerUser,
Welcome to the HP Forums, I hope you enjoy your experience! To help you get the most out of the HP Forums I would like to direct your attention to the HP Forums Guide First Time Here? Learn How to Post and More.
I have read your post on how you have downgraded your system from Windows 8 (64-bit) to Windows 7 (32-bit), and that your system is displaying a atikmdag.sys. I would be happy to assist you in this matter!
According to the available drivers and software for your computer, Windows 7 is only supported for the (64-bit) version of Operating System. To maintain a compatible set of drivers on your system, I recommend downgrading to a 64-bit version of Windows 7.
I hope this helps!
Best Regards
MechPilot
I work on behalf of HP
Please click “Accept as Solution ” if you feel my post solved your issue, it will help others find the solution.
Click the “Kudos, Thumbs Up" on the right to say “Thanks” for helping!

T500 Crashes with tcpip.sys

T500
Vista Ultimate SP2
OK, my fan has been fixed now and the temperature-related crashes have disappeared. Thanks:-)
Only now my system crashes with a message mentioning tcpip.sys.
The only way to get around it was to go into safe mode with networking or to uninstall my avast antivirus.
I searched around and there seems to be a very tricky hotfix from Microsoft on that.
Anyone with experience on it?
Thanks.
Solved!
Go to Solution.

I had two antivirus programs on, one which dealt with the accesses by programs from the laptop to the outer world.
This had worked for two years, but after some updates, it didn't any more.
I removed this one, and it's solved now, even though it might be less protected.
Whocrashed was very helpful in identifying this.

Windows 8.1 BSOD Driver_IRQL_NOT_LESS_OR_EQUAL (tcpip.sys)

Similar Messages

Maybe you are looking for