Windows 7: BSOD - NETIO.SYS ntoskrnl.exe

danielb7390 · 14 Jan 2013

Hi,
Just registered to see if i can get some help with a very annoying bsod....
Some time ago i started getting bsod complaining netio.sys ntoskrnl.exe and also tcpip.sys!
I think i solved the tcpip.sys by removing peerblock but the other ones remained.
Tried updating Ethernet driver (atheros L1E) but with the last driver the network gets extremely slow so i reverted back to the driver from asus site.
It can work weeks without one BSOD or get a lots of then in a single day! Today already 3 and counting!
Already run memtest and it passed.

First BSOD:

Code:

Microsoft (R) Windows Debugger Version 6.2.9200.20512 AMD64
Copyright (c) Microsoft Corporation. All rights reserved.


Loading Dump File [C:\Windows\Minidump\011413-28516-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available

Symbol search path is: SRV*c:\symbols*http://msdl.microsoft.com/download/symbols
Executable search path is: 
Windows 7 Kernel Version 7601 (Service Pack 1) MP (2 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 7601.17944.amd64fre.win7sp1_gdr.120830-0333
Machine Name:
Kernel base = 0xfffff800`02e4c000 PsLoadedModuleList = 0xfffff800`03090670
Debug session time: Mon Jan 14 15:43:47.830 2013 (UTC + 0:00)
System Uptime: 0 days 2:01:44.500
Loading Kernel Symbols
...............................................................
................................................................
........................
Loading User Symbols
Loading unloaded module list
........
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck D1, {ffffffff0674cd78, 2, 1, fffff880015a2f7a}

Probably caused by : NETIO.SYS ( NETIO!FreeSomeCacheBucketEntries+4a )

Followup: MachineOwner
---------

19:17 14-01-2013

Code:

Microsoft (R) Windows Debugger Version 6.2.9200.20512 AMD64
Copyright (c) Microsoft Corporation. All rights reserved.


Loading Dump File [C:\Windows\Minidump\011413-14944-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available

Symbol search path is: SRV*c:\symbols*http://msdl.microsoft.com/download/symbols
Executable search path is: 
Windows 7 Kernel Version 7601 (Service Pack 1) MP (2 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 7601.17944.amd64fre.win7sp1_gdr.120830-0333
Machine Name:
Kernel base = 0xfffff800`02e14000 PsLoadedModuleList = 0xfffff800`03058670
Debug session time: Mon Jan 14 19:14:12.671 2013 (UTC + 0:00)
System Uptime: 0 days 0:12:36.216
Loading Kernel Symbols
...............................................................
................................................................
........................
Loading User Symbols
Loading unloaded module list
........
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck C2, {d, fffffa8003d2e2b0, 20206f49, fffffa8006c21740}

Probably caused by : ntkrnlmp.exe ( nt!KiDeliverApc+1c7 )

Followup: MachineOwner
---------

19:03 14-01-2013

Code:

Microsoft (R) Windows Debugger Version 6.2.9200.20512 AMD64
Copyright (c) Microsoft Corporation. All rights reserved.


Loading Dump File [C:\Windows\Minidump\011413-15834-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available

Symbol search path is: SRV*c:\symbols*http://msdl.microsoft.com/download/symbols
Executable search path is: 
Windows 7 Kernel Version 7601 (Service Pack 1) MP (2 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 7601.17944.amd64fre.win7sp1_gdr.120830-0333
Machine Name:
Kernel base = 0xfffff800`02e55000 PsLoadedModuleList = 0xfffff800`03099670
Debug session time: Mon Jan 14 19:00:07.593 2013 (UTC + 0:00)
System Uptime: 0 days 2:10:21.263
Loading Kernel Symbols
...............................................................
................................................................
........................
Loading User Symbols
Loading unloaded module list
..............
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck A, {0, 2, 1, fffff80002edad6c}

*** WARNING: Unable to verify timestamp for AVerPola.sys
*** ERROR: Module load completed but symbols could not be loaded for AVerPola.sys
Probably caused by : AVerPola.sys ( AVerPola+1afe4 )

Followup: MachineOwner
---------

The last one seems to be complaining with my dvb-t avermedia usb adapter i don't know why! That driver is the latest.

All 3 minidumps in attached zip

Thanks in advance!

EDIT: Didn't saw the notice above

.... adding the zip file! It has some more dumps that the other zip.

**x BlueRobot** · 14 Jan 2013

Code:

BugCheck A, {0, 2, 1, fffff80002edad6c}

*** WARNING: Unable to verify timestamp for AVerPola.sys
*** ERROR: Module load completed but symbols could not be loaded for AVerPola.sys
Probably caused by : AVerPola.sys ( AVerPola+1afe4 )

Code:

Usual causes:  Kernel mode driver, System Service, BIOS, Windows, Virus scanner, Backup tool, compatibility

Code:

1: kd> lmvm AVerPola
start             end                 module name
fffff880`0594a000 fffff880`059e2100   AVerPola T (no symbols)           
    Loaded symbol image file: AVerPola.sys
    Image path: \SystemRoot\system32\DRIVERS\AVerPola.sys
    Image name: AVerPola.sys
    Timestamp:        Wed Aug 22 09:18:04 2012 (503495BC)
    CheckSum:         0009C2D8
    ImageSize:        00098100
    Translations:     0000.04b0 0000.04e4 0409.04b0 0409.04e4

This driver seems to be causing some issues, however, it may also be due to RAM problems or compatibility problems if you have fully updated the driver.

How many passes did you run MemTest86+ for?

Memory:

RAM - Test with Memtest86+

Run Memtest86+ for least 9-10 passes, and preferably overnight as it can take a while to fully complete.

Test each RAM stick individually, if an error is found then move the same RAM stick into the next DIMM slot and test again, if errors are found for the same RAM stick in every available slot then you have a faulty RAM module. On the other hand, if no errors are found in the next slot or the other slots for the same RAM module, then you have a faulty DIMM slot.

Test each RAM stick and every motherboard DIMM slot available.

Check for any driver compatibility issues with:

Windows 7 Upgrade Advisor - Download - Microsoft Windows

Reduce the number of programs at startup, to avoid any driver or program conflicts:

Troubleshoot Application Conflicts by Performing a Clean Startup

Please upload a .NFO file:

Start

> Type: msinfo32 > File, Save

Install and perform full scans with:

Remember to install the free version of Malwarebytes not the free trail; untick the free trial box during installation. MSE is the most lightweight and compatible with the Windows 7 operating system.

You can also view this thread for a complete free and lightweight security protection combination:

Good and Free system security combination.

danielb7390 · 14 Jan 2013

Hi,
Thanks for you fast reply.
Memtest i think it was only 1pass because i needed the computer...
Already have MSE and i don't have virus.
The .NFO file you ask for i think its already on the "danielb7390.zip" file.
Will try to run memtest longer, its important to test each stick separated?

Also, don't know if important but this computer is kind of a home-server it runs apache,php,mysql,filezilla etc.

And another one... this is getting very strange...

Code:

Microsoft (R) Windows Debugger Version 6.2.9200.20512 AMD64
Copyright (c) Microsoft Corporation. All rights reserved.


Loading Dump File [C:\Windows\Minidump\011413-14289-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available

Symbol search path is: SRV*c:\symbols*http://msdl.microsoft.com/download/symbols
Executable search path is: 
Windows 7 Kernel Version 7601 (Service Pack 1) MP (2 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 7601.17944.amd64fre.win7sp1_gdr.120830-0333
Machine Name:
Kernel base = 0xfffff800`02e18000 PsLoadedModuleList = 0xfffff800`0305c670
Debug session time: Mon Jan 14 20:08:41.442 2013 (UTC + 0:00)
System Uptime: 0 days 0:53:22.112
Loading Kernel Symbols
...............................................................
................................................................
......................
Loading User Symbols
Loading unloaded module list
..........
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck A, {fffffa82c66c9e40, 2, 0, fffff800034023da}

Probably caused by : USBPORT.SYS ( USBPORT!USBPORT_Core_iCompleteDoneTransfer+45f )

Followup: MachineOwner
---------

**x BlueRobot** · 14 Jan 2013

I saw that you were using uTorrent, which increases the risk of a infection, it's best to run full scans with more than one detection program, since no program is perfect at detecting malicious files and software; make sure you have the latest virus definitions for all the detection programs provided too.

It is also important to run the test on each stick separately, since if there is an error detected, then you will able to detect which slot or stick is causing the problem much faster. It seems to be an issue with your RAM or the drivers installed on your system; these can become corrupted by malware.

danielb7390 · 14 Jan 2013

Will run malwarebytes although i don't think i have any virus, i run utorrent but i don't install any downloads on this pc, anyways gonna test and will get back to you tomorrow.

danielb7390 · 15 Jan 2013

Let memtest run for 3hours while i was out and it passed all 3 passes. It's enough to put ram out of the problem?? i can run it today overnight if necessary.

Virus came clean in MSE and MalwareBytes.

**x BlueRobot** · 15 Jan 2013

You to run it for least 9-10 passes, since errors have been found after 8 passes.

danielb7390 · 15 Jan 2013

Ok will let it run overnight then.

danielb7390 · 16 Jan 2013

Memtest - 10pass - ~11hours - 0 Errors

EDIT:Just got another one...

Code:

Microsoft (R) Windows Debugger Version 6.2.9200.20512 AMD64
Copyright (c) Microsoft Corporation. All rights reserved.


Loading Dump File [C:\Windows\Minidump\011613-22916-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available

Symbol search path is: SRV*c:\symbols*http://msdl.microsoft.com/download/symbols
Executable search path is: 
Windows 7 Kernel Version 7601 (Service Pack 1) MP (2 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 7601.17944.amd64fre.win7sp1_gdr.120830-0333
Machine Name:
Kernel base = 0xfffff800`02e4f000 PsLoadedModuleList = 0xfffff800`03093670
Debug session time: Wed Jan 16 15:49:37.199 2013 (UTC + 0:00)
System Uptime: 0 days 7:06:44.885
Loading Kernel Symbols
...............................................................
................................................................
......................
Loading User Symbols
Loading unloaded module list
................
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck A, {fffffa82c5ed8260, 2, 0, fffff80002e083da}

Probably caused by : USBPORT.SYS ( USBPORT!USBPORT_Core_iCompleteDoneTransfer+45f )

Followup: MachineOwner
---------

EDIT(after ~~25min)

Code:

Microsoft (R) Windows Debugger Version 6.2.9200.20512 AMD64
Copyright (c) Microsoft Corporation. All rights reserved.


Loading Dump File [C:\Windows\Minidump\011613-14679-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available

Symbol search path is: SRV*c:\symbols*http://msdl.microsoft.com/download/symbols
Executable search path is: 
Windows 7 Kernel Version 7601 (Service Pack 1) MP (2 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 7601.17944.amd64fre.win7sp1_gdr.120830-0333
Machine Name:
Kernel base = 0xfffff800`02e19000 PsLoadedModuleList = 0xfffff800`0305d670
Debug session time: Wed Jan 16 16:14:35.064 2013 (UTC + 0:00)
System Uptime: 0 days 0:23:29.750
Loading Kernel Symbols
...............................................................
................................................................
.....................
Loading User Symbols
Loading unloaded module list
..........
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck D1, {ffffffff04d154b8, 2, 1, fffff8800172ff7a}

Probably caused by : NETIO.SYS ( NETIO!FreeSomeCacheBucketEntries+4a )

Followup: MachineOwner
---------

USBPORT NETIO AVERPOL NTOSKRN what else????

**x BlueRobot** · 16 Jan 2013

AVerPola.sys belongs to your AVerMedia USB Polaris Series Capture Service, and the driver seemed to be causing some problems.

There's seems to be a issue with some of the USB drivers, follow these steps:

Start
Type: Device Manager
Expand USB Controllers
Uninstall driver (for every listed device)
Reboot

The drivers should now be automatically reconfigured by Windows upon reboot.

If you are using any USB devices, then remove these from the USB ports (leave keyboard and mouse), and then update all the devices with the latest drivers, including the mouse and keyboard if applicable.

Turn off USB Suspension:

USB Selective Suspend - Turn On or Off

Windows 7: BSOD - NETIO.SYS ntoskrnl.exe

BSOD - NETIO.SYS ntoskrnl.exe problems?