Windows 7 crash. BSOD. don't know why.


  1. Posts : 4
    windows 7 home premium 64 bit
       #1

    Windows 7 crash. BSOD. don't know why.


    I have a fresh windows 7 home 64 bit install been working fine for 2 weeks and today i got a BSOD. no idea why.
    attached is my perfmon and nt6 report zipped.
    thank you.
    SPECS
    Toshiba L675 laptop.
    Windows 7 home premium 64 bit - OEM
    I3 2.27 intel core
    intel graphics chip
    6gb ram
    laptop is 6 months old.
    640gb 5400rpm HD
    Windows 7 reinstalled 2 weeks ago.
      My Computer


  2. Posts : 28,845
    Win 8 Release candidate 8400
       #2

    devdvr said:
    I have a fresh windows 7 home 64 bit install been working fine for 2 weeks and today i got a BSOD. no idea why.
    attached is my perfmon and nt6 report zipped.
    thank you.
    SPECS
    Toshiba L675 laptop.
    Windows 7 home premium 64 bit - OEM
    I3 2.27 intel core
    intel graphics chip
    6gb ram
    laptop is 6 months old.
    640gb 5400rpm HD
    Windows 7 reinstalled 2 weeks ago.
    This one was caused by NETIO.sys and your PCTools. Usually netio.sys fiales when Zone alrm is installed.

    I would therefore remove Zone Alarm, and PCTools. Replace zone alarm with the win 7 firewall and use Microsoft security essentials for AV

    http://download.zonealarm.com/bin/fr...cpes_clean.exe

    http://www.microsoft.com/security_essentials/



    Code:
    Microsoft (R) Windows Debugger Version 6.11.0001.404 X86
    Copyright (c) Microsoft Corporation. All rights reserved.
    
    
    Loading Dump File [C:\Users\K\Desktop\Windows_NT6_BSOD_jcgriff2\013111-25942-01.dmp]
    Mini Kernel Dump File: Only registers and stack trace are available
    
    Symbol search path is: SRV*C:\Symbols*http://msdl.microsoft.com/download/symbols;srv*e:\symbols
    *http://msdl.microsoft.com/download/symbols
    Executable search path is: 
    Windows 7 Kernel Version 7600 MP (4 procs) Free x64
    Product: WinNt, suite: TerminalServer SingleUserTS Personal
    Built by: 7600.16617.amd64fre.win7_gdr.100618-1621
    Machine Name:
    Kernel base = 0xfffff800`02e11000 PsLoadedModuleList = 0xfffff800`0304ee50
    Debug session time: Mon Jan 31 09:49:58.353 2011 (GMT-5)
    System Uptime: 0 days 0:34:54.898
    Loading Kernel Symbols
    ...............................................................
    ................................................................
    ....................................
    Loading User Symbols
    Loading unloaded module list
    .....
    *******************************************************************************
    *                                                                             *
    *                        Bugcheck Analysis                                    *
    *                                                                             *
    *******************************************************************************
    
    Use !analyze -v to get detailed debugging information.
    
    BugCheck D1, {0, 2, 0, fffff88001a8c7a0}
    
    Unable to load image \Device\Harddisk0\Partition2\windows\system32\drivers\PctWfpFilter64.sys, Win32 error 0n2
    *** WARNING: Unable to verify timestamp for PctWfpFilter64.sys
    *** ERROR: Module load completed but symbols could not be loaded for PctWfpFilter64.sys
    Probably caused by : NETIO.SYS ( NETIO!NetioDereferenceNetBufferList+86 )
    
    Followup: MachineOwner
    ---------
    
    0: kd> !analyze -v
    *******************************************************************************
    *                                                                             *
    *                        Bugcheck Analysis                                    *
    *                                                                             *
    *******************************************************************************
    
    DRIVER_IRQL_NOT_LESS_OR_EQUAL (d1)
    An attempt was made to access a pageable (or completely invalid) address at an
    interrupt request level (IRQL) that is too high.  This is usually
    caused by drivers using improper addresses.
    If kernel debugger is available get stack backtrace.
    Arguments:
    Arg1: 0000000000000000, memory referenced
    Arg2: 0000000000000002, IRQL
    Arg3: 0000000000000000, value 0 = read operation, 1 = write operation
    Arg4: fffff88001a8c7a0, address which referenced memory
    
    Debugging Details:
    ------------------
    
    
    READ_ADDRESS: GetPointerFromAddress: unable to read from fffff800030b90e0
     0000000000000000 
    
    CURRENT_IRQL:  2
    
    FAULTING_IP: 
    tcpip! ?? ::FNODOBFM::`string'+56f4
    fffff880`01a8c7a0 488b01          mov     rax,qword ptr [rcx]
    
    CUSTOMER_CRASH_COUNT:  1
    
    DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT
    
    BUGCHECK_STR:  0xD1
    
    PROCESS_NAME:  System
    
    TRAP_FRAME:  fffff88002c53520 -- (.trap 0xfffff88002c53520)
    NOTE: The trap frame does not contain all registers.
    Some register values may be zeroed or incorrect.
    rax=fffffa800c36aab0 rbx=0000000000000000 rcx=0000000000000000
    rdx=fffffa800c36aab1 rsi=0000000000000000 rdi=0000000000000000
    rip=fffff88001a8c7a0 rsp=fffff88002c536b0 rbp=0000000000000000
     r8=fffffa800c36aab0  r9=00000000000000d0 r10=fffff80002ffcb80
    r11=fffffa800b145eb0 r12=0000000000000000 r13=0000000000000000
    r14=0000000000000000 r15=0000000000000000
    iopl=0         nv up ei ng nz na po nc
    tcpip! ?? ::FNODOBFM::`string'+0x56f4:
    fffff880`01a8c7a0 488b01          mov     rax,qword ptr [rcx] ds:07ff:00000000`00000000=????????????????
    Resetting default scope
    
    LAST_CONTROL_TRANSFER:  from fffff80002e80ca9 to fffff80002e81740
    
    STACK_TEXT:  
    fffff880`02c533d8 fffff800`02e80ca9 : 00000000`0000000a 00000000`00000000 00000000`00000002 00000000`00000000 : nt!KeBugCheckEx
    fffff880`02c533e0 fffff800`02e7f920 : fffffa80`064f6200 fffffa80`0bdc6030 fffffa80`063a0950 fffffa80`064e2f00 : nt!KiBugCheckDispatch+0x69
    fffff880`02c53520 fffff880`01a8c7a0 : fffffa80`0bdc6030 fffff880`0426aaca fffff880`206c644d fffffa80`0b4dc030 : nt!KiPageFault+0x260
    fffff880`02c536b0 fffff880`019316a6 : fffffa80`0bdc6030 00000000`064d4000 00000000`00000000 fffffa80`064d4000 : tcpip! ?? ::FNODOBFM::`string'+0x56f4
    fffff880`02c53700 fffff880`0192f35d : 00000000`00000000 fffffa80`0b4dc030 00000000`00000000 fffff880`01b6e9a0 : NETIO!NetioDereferenceNetBufferList+0x86
    fffff880`02c53730 fffff880`01a60e26 : fffffa80`064d4000 fffffa80`0b4dc100 00000000`00000011 fffffa80`0bdc6030 : NETIO!NetioDereferenceNetBufferListChain+0x2dd
    fffff880`02c537b0 fffff880`01a5fb21 : 00000000`00000000 fffffa80`064d4000 fffff880`01b6e9a0 00000000`0b716d01 : tcpip!IppReceiveHeaderBatch+0x3c7
    fffff880`02c53890 fffff880`01b37542 : fffffa80`0a464110 00000000`00000000 fffffa80`0b716d01 00000000`00000001 : tcpip!IpFlcReceivePackets+0x651
    fffff880`02c53a90 fffff880`0107cafa : fffffa80`09938302 fffffa80`09938370 00000000`00000002 00000000`00000000 : tcpip!IppInspectInjectReceive+0xf2
    fffff880`02c53ad0 fffff880`0426371d : fffffa80`0a5af9f0 fffffa80`0b716d50 00000000`c0000000 fffff880`00000000 : fwpkclnt!FwpsInjectTransportReceiveAsync0+0x256
    fffff880`02c53b80 fffffa80`0a5af9f0 : fffffa80`0b716d50 00000000`c0000000 fffff880`00000000 fffffa80`0b560002 : PctWfpFilter64+0xd71d
    fffff880`02c53b88 fffffa80`0b716d50 : 00000000`c0000000 fffff880`00000000 fffffa80`0b560002 fffffa80`00000001 : 0xfffffa80`0a5af9f0
    fffff880`02c53b90 00000000`c0000000 : fffff880`00000000 fffffa80`0b560002 fffffa80`00000001 fffffa80`0000000c : 0xfffffa80`0b716d50
    fffff880`02c53b98 fffff880`00000000 : fffffa80`0b560002 fffffa80`00000001 fffffa80`0000000c fffffa80`00000000 : 0xc0000000
    fffff880`02c53ba0 fffffa80`0b560002 : fffffa80`00000001 fffffa80`0000000c fffffa80`00000000 fffffa80`00000000 : 0xfffff880`00000000
    fffff880`02c53ba8 fffffa80`00000001 : fffffa80`0000000c fffffa80`00000000 fffffa80`00000000 fffff880`04263250 : 0xfffffa80`0b560002
    fffff880`02c53bb0 fffffa80`0000000c : fffffa80`00000000 fffffa80`00000000 fffff880`04263250 fffffa80`0b716d50 : 0xfffffa80`00000001
    fffff880`02c53bb8 fffffa80`00000000 : fffffa80`00000000 fffff880`04263250 fffffa80`0b716d50 00000000`00000002 : 0xfffffa80`0000000c
    fffff880`02c53bc0 fffffa80`00000000 : fffff880`04263250 fffffa80`0b716d50 00000000`00000002 fffffa80`0b4dc030 : 0xfffffa80`00000000
    fffff880`02c53bc8 fffff880`04263250 : fffffa80`0b716d50 00000000`00000002 fffffa80`0b4dc030 fffff880`04272338 : 0xfffffa80`00000000
    fffff880`02c53bd0 fffffa80`0b716d50 : 00000000`00000002 fffffa80`0b4dc030 fffff880`04272338 00000000`00000000 : PctWfpFilter64+0xd250
    fffff880`02c53bd8 00000000`00000002 : fffffa80`0b4dc030 fffff880`04272338 00000000`00000000 00000000`00000000 : 0xfffffa80`0b716d50
    fffff880`02c53be0 fffffa80`0b4dc030 : fffff880`04272338 00000000`00000000 00000000`00000000 00000000`53636670 : 0x2
    fffff880`02c53be8 fffff880`04272338 : 00000000`00000000 00000000`00000000 00000000`53636670 fffffa80`0ba00120 : 0xfffffa80`0b4dc030
    fffff880`02c53bf0 00000000`00000000 : 00000000`00000000 00000000`53636670 fffffa80`0ba00120 fffff880`04275128 : PctWfpFilter64+0x1c338
    
    
    STACK_COMMAND:  kb
    
    FOLLOWUP_IP: 
    NETIO!NetioDereferenceNetBufferList+86
    fffff880`019316a6 4885ff          test    rdi,rdi
    
    SYMBOL_STACK_INDEX:  4
    
    SYMBOL_NAME:  NETIO!NetioDereferenceNetBufferList+86
    
    FOLLOWUP_NAME:  MachineOwner
    
    MODULE_NAME: NETIO
    
    IMAGE_NAME:  NETIO.SYS
    
    DEBUG_FLR_IMAGE_TIMESTAMP:  4a5bc18a
    
    FAILURE_BUCKET_ID:  X64_0xD1_NETIO!NetioDereferenceNetBufferList+86
    
    BUCKET_ID:  X64_0xD1_NETIO!NetioDereferenceNetBufferList+86
    
    Followup: MachineOwner
    ---------
      My Computer


  3. Posts : 4
    windows 7 home premium 64 bit
    Thread Starter
       #3

    thanks for the help but i don't have zone alarm installed. never did. i do have pctools spyware doctor tho
      My Computer


 

  Related Discussions
Our Sites
Site Links
About Us
Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

© Designer Media Ltd
All times are GMT -5. The time now is 01:37.
Find Us