BSOD w/cold boot

momlady1 · 22 Feb 2011

As w/many posters, I have had the BSOD w/a cold boot recurring for several weeks. It does not occur w/a warm reboot. I haven't installed any new hardware and this issue seems to have arisen spontaneously (something I'm sure you've heard many times before). Per your instructions, I am attaching the zip file w/info re my specific status - at least, I hope I'm sending the right information.

Thanks in advance for any help you can give me w/this frustrating problem.

**Capt.Jack Sparrow** · 22 Feb 2011

Hello and Welcome to SF!

Seems like the Dump are pointing to different drivers in each dump so we have to run some basic test to find out what is causing.

Run a Hardware Diagnostic : Hardware Diagnostic | Captain Debugger

Uninstall Trend Micro Internet Security completely and run the Cleanup Tool to remove the left over files. Install Microsoft Security Essentials instead.

Remove your Network adapter driver and Download a Fresh of your Network Drivers and install it. (Intel(R) 82567V-2 Gigabit Network, e1y60x64.sys Tue Aug 19 03:15:05 2008)

Code:

DRIVER_IRQL_NOT_LESS_OR_EQUAL (d1)
An attempt was made to access a pageable (or completely invalid) address at an
interrupt request level (IRQL) that is too high.  This is usually
caused by drivers using improper addresses.
If kernel debugger is available get stack backtrace.
Arguments:
Arg1: fffffaca081fac80, memory referenced
Arg2: 0000000000000002, IRQL
Arg3: 0000000000000000, value 0 = read operation, 1 = write operation
Arg4: fffff8800178382c, address which referenced memory

Debugging Details:
------------------


READ_ADDRESS: GetPointerFromAddress: unable to read from fffff800030a90e0
 fffffaca081fac80 

CURRENT_IRQL:  2

FAULTING_IP: 
NETIO!IndexListClassify+50
fffff880`0178382c 488b1f          mov     rbx,qword ptr [rdi]

CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT

BUGCHECK_STR:  0xD1

PROCESS_NAME:  svchost.exe

TRAP_FRAME:  fffff880096d6520 -- (.trap 0xfffff880096d6520)
NOTE: The trap frame does not contain all registers.
Some register values may be zeroed or incorrect.
rax=0000000000000000 rbx=0000000000000000 rcx=fffff880017cbbc0
rdx=fffffa80059f6d60 rsi=0000000000000000 rdi=0000000000000000
rip=fffff8800178382c rsp=fffff880096d66b0 rbp=0000000000000000
 r8=0000000000000000  r9=fffff880096d6730 r10=fffffa80059f6d60
r11=fffff880096d6c40 r12=0000000000000000 r13=0000000000000000
r14=0000000000000000 r15=0000000000000000
iopl=0         nv up ei pl nz na pe nc
NETIO!IndexListClassify+0x50:
fffff880`0178382c 488b1f          mov     rbx,qword ptr [rdi] ds:74d0:00000000`00000000=????????????????
Resetting default scope

LAST_CONTROL_TRANSFER:  from fffff80002e70ca9 to fffff80002e71740

STACK_TEXT:  
fffff880`096d63d8 fffff800`02e70ca9 : 00000000`0000000a fffffaca`081fac80 00000000`00000002 00000000`00000000 : nt!KeBugCheckEx
fffff880`096d63e0 fffff800`02e6f920 : 00000000`00000000 fffffaca`081fac80 00000000`00000000 00000000`00000000 : nt!KiBugCheckDispatch+0x69
fffff880`096d6520 fffff880`0178382c : fffffa80`0ac4aba0 fffffa80`057ed1b0 fffff880`096d6888 fffff880`096d6d30 : nt!KiPageFault+0x260
fffff880`096d66b0 fffff880`01784ccb : 00000000`00000000 00000000`00000000 fffff880`096d6d30 fffff880`096d6870 : NETIO!IndexListClassify+0x50
fffff880`096d6730 fffff880`0183f417 : fffff880`096d6b48 fffff880`096d6b48 00000000`00000000 fffffa80`059cd8c0 : NETIO!KfdClassify+0xa4e
fffff880`096d6aa0 fffff880`019066f2 : fffffa80`0b49e910 fffff880`019477b0 fffffa80`05667e10 00000000`0000057e : tcpip!WfpAleClassify+0x57
fffff880`096d6ae0 fffff880`01890dd5 : 00000000`00000000 00000000`00000000 00000000`00000000 fffffa80`05667e10 : tcpip!WfpAlepFlowEstablishedNotification+0x752
fffff880`096d6f30 fffff880`0183b907 : 00000000`00000001 fffff880`019477b0 fffff880`00000011 00000000`00000000 : tcpip! ?? ::FNODOBFM::`string'+0xc4d5
fffff880`096d7070 fffff880`0183e5e4 : 00000000`00000000 fffff880`096d74a8 fffff880`096d74b0 00000000`00000000 : tcpip!WfpAleConnectAcceptIndicate+0x187
fffff880`096d7160 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : tcpip!ProcessALEForTransportPacket+0x664


STACK_COMMAND:  kb

FOLLOWUP_IP: 
NETIO!IndexListClassify+50
fffff880`0178382c 488b1f          mov     rbx,qword ptr [rdi]

SYMBOL_STACK_INDEX:  3

SYMBOL_NAME:  NETIO!IndexListClassify+50

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: NETIO

IMAGE_NAME:  NETIO.SYS

DEBUG_FLR_IMAGE_TIMESTAMP:  4a5bc18a

FAILURE_BUCKET_ID:  X64_0xD1_NETIO!IndexListClassify+50

BUCKET_ID:  X64_0xD1_NETIO!IndexListClassify+50

Followup: MachineOwner
---------

1: kd> lmvm NETIO
start             end                 module name
fffff880`0177d000 fffff880`017dd000   NETIO      (pdb symbols)          c:\symbols\netio.pdb\4ACD68B3A9824AAAB3C53C0077FC611F2\netio.pdb
    Loaded symbol image file: NETIO.SYS
    Mapped memory image file: c:\symbols\NETIO.SYS\4A5BC18A60000\NETIO.SYS
    Image path: \SystemRoot\system32\drivers\NETIO.SYS
    Image name: NETIO.SYS
    Timestamp:        Tue Jul 14 04:51:46 2009 (4A5BC18A)
    CheckSum:         0005F36C
    ImageSize:        00060000
    File version:     6.1.7600.16385
    Product version:  6.1.7600.16385
    File flags:       0 (Mask 3F)
    File OS:          40004 NT Win32
    File type:        3.6 Driver
    File date:        00000000.00000000
    Translations:     0409.04b0
    CompanyName:      Microsoft Corporation
    ProductName:      Microsoft® Windows® Operating System
    InternalName:     netio.sys
    OriginalFilename: netio.sys
    ProductVersion:   6.1.7600.16385
    FileVersion:      6.1.7600.16385 (win7_rtm.090713-1255)
    FileDescription:  Network I/O Subsystem
    LegalCopyright:   © Microsoft Corporation. All rights reserved.

momlady1 · 19 Mar 2011

Sorry to be so long in replying to your kind advice. Well, since I last wrote to you, I removed Trend Micro and installed MS Security Essentials. I also removed the network driver (Intel) and reinstalled it per Gateway's instruction and advice. Additionally, I completely reinstalled the OS. Yet, I am still experiencing the "unexpected shutdown." Unfortunately, the times it has occurred, I was away from the computer and can't provide much detail.
Please help - this is becoming more than an annoyance.

**Capt.Jack Sparrow** · 21 Mar 2011

Hi there,

Without the crash dump we would be helpless. Please post the files.

Thanks,
Captain

momlady1 · 21 Mar 2011

I hope this will help - sorry to be such a pest.

B

momlady1 · 11 Apr 2011

Anyone?

QUADratic · 19 Feb 2012

Hi did you get any resolution to this issue, I am having similar issues with 0x000000f4 BSOD. I note there are a few users who are reporting simialr behaviour.

I am hoping maybe we can all disect our systems to see if there is a common component or maybe someonw has a solution that isn't posted.

My issue here : https://www.sevenforums.com/crashes-d...d-boot-up.html

Thanks