Crashing with Blue Screen Error

akashnazz · 04 Feb 2011

I have Dell 1558 core I7 740QM processor, with ATI mobility Radeon HD 5470 graphic card and having Window 7 64bit home premium installed in it.

Laptop crashes a lot giving Blue Screen Error:

Problem signature:
Problem Event Name: BlueScreen
OS Version: 6.1.7600.2.0.0.768.3
Locale ID: 16393

Additional information about the problem:
BCCode: d1
BCP1: 0000000000000028
BCP2: 0000000000000002
BCP3: 0000000000000000
BCP4: FFFFF8800140EA7D
OS Version: 6_1_7600
Service Pack: 0_0
Product: 768_1

Files that help describe the problem:
C:\WINDOWS\Minidump\020411-26535-01.dmp
C:\Users\Akash\AppData\Local\Temp\WER-85238-0.sysdata.xml

Read our privacy statement online:
Windows 7 Privacy Statement - Microsoft Windows

If the online privacy statement is not available, please read our privacy statement offline:
C:\Windows\system32\en-US\erofflps.txt

I have contacted dell customer service, they suggested me to format the laptop... but after formatting also it cashes giving blue screen error... Kindly help.. I am including the dump files.

wish · 04 Feb 2011

Hello,
2 crash related to netio.sys, that is part of Windows Network Subsystem.

For troubleshooting purpose, I would recommend you to uninstall McAfee and replace it with MSE.
http://www.microsoft.com/security_essentials/

Uninstall TuneUp Utilities.

Also update or uninstall Accelerometer driver.

Update these drivers:
SynTP.sys Mon Aug 24 10:37:05 2009 → Drivers | Synaptics
Rt64win7.sys Thu Aug 20 09:05:06 2009 → Realtek NIC driver

Then we'll see how it goes.

Code:

Windows 7 Kernel Version 7600 MP (8 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS Personal
Built by: 7600.16539.amd64fre.win7_gdr.100226-1909
Machine Name:
Kernel base = 0xfffff800`02c12000 PsLoadedModuleList = 0xfffff800`02e4fe50
Debug session time: Thu Feb  3 20:13:24.513 2011 (GMT-8)
System Uptime: 0 days 2:23:56.637
Loading Kernel Symbols
...............................................................
................................................................
.............................................
Loading User Symbols
Loading unloaded module list
.......
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck D1, {28, 2, 0, fffff8800140ea7d}

Probably caused by : NETIO.SYS ( NETIO!RtlCopyBufferToMdl+1d )

Followup: MachineOwner
---------

4: kd> !analyze -v
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

DRIVER_IRQL_NOT_LESS_OR_EQUAL (d1)
An attempt was made to access a pageable (or completely invalid) address at an
interrupt request level (IRQL) that is too high.  This is usually
caused by drivers using improper addresses.
If kernel debugger is available get stack backtrace.
Arguments:
Arg1: 0000000000000028, memory referenced
Arg2: 0000000000000002, IRQL
Arg3: 0000000000000000, value 0 = read operation, 1 = write operation
Arg4: fffff8800140ea7d, address which referenced memory

Debugging Details:
------------------


READ_ADDRESS: GetPointerFromAddress: unable to read from fffff80002eba0e0
 0000000000000028 

CURRENT_IRQL:  2

FAULTING_IP: 
NETIO!RtlCopyBufferToMdl+1d
fffff880`0140ea7d 448b5228        mov     r10d,dword ptr [rdx+28h]

CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT

BUGCHECK_STR:  0xD1

PROCESS_NAME:  System

TRAP_FRAME:  fffff880033686b0 -- (.trap 0xfffff880033686b0)
NOTE: The trap frame does not contain all registers.
Some register values may be zeroed or incorrect.
rax=fffff880033688d0 rbx=0000000000000000 rcx=0000000000000000
rdx=0000000000000000 rsi=0000000000000000 rdi=0000000000000000
rip=fffff8800140ea7d rsp=fffff88003368840 rbp=fffff88003368970
 r8=00000000ffffffbc  r9=0000000000000044 r10=0000000000000000
r11=fffffa800813bce0 r12=0000000000000000 r13=0000000000000000
r14=0000000000000000 r15=0000000000000000
iopl=0         nv up ei pl zr na po nc
NETIO!RtlCopyBufferToMdl+0x1d:
fffff880`0140ea7d 448b5228        mov     r10d,dword ptr [rdx+28h] ds:0011:00000000`00000028=????????
Resetting default scope

LAST_CONTROL_TRANSFER:  from fffff80002c81b69 to fffff80002c82600

STACK_TEXT:  
fffff880`03368568 fffff800`02c81b69 : 00000000`0000000a 00000000`00000028 00000000`00000002 00000000`00000000 : nt!KeBugCheckEx
fffff880`03368570 fffff800`02c807e0 : fffffa80`08d11a80 00000000`00000044 fffffa80`07180500 00000000`00000801 : nt!KiBugCheckDispatch+0x69
fffff880`033686b0 fffff880`0140ea7d : ffff0000`0240062b 00000000`00000001 00000000`00000027 fffffa80`04ec8c58 : nt!KiPageFault+0x260
fffff880`03368840 fffff880`016a027f : fffff880`05337110 fffff880`0166c1a6 00000000`00000001 fffff880`0533c0fe : NETIO!RtlCopyBufferToMdl+0x1d
fffff880`033688a0 fffff880`0166ab35 : fffffa80`0813bce0 00000000`00000001 fffffa80`09559010 00000000`00000000 : tcpip! ?? ::FNODOBFM::`string'+0x1d80f
fffff880`03368910 fffff880`01677b94 : 00000000`00000014 00000000`00000029 fffffa80`04d4c000 fffffa80`04ec8ab0 : tcpip!TcpTcbCarefulDatagram+0x535
fffff880`03368ac0 fffff880`0167c0ca : fffffa80`04d4bf00 00000000`00000000 fffffa80`04be1088 00000000`00000000 : tcpip!TcpTcbReceive+0x694
fffff880`03368c70 fffff880`0167bc17 : fffffa80`094898b2 fffffa80`04d4c000 00000000`00000000 fffff880`0165f400 : tcpip!TcpMatchReceive+0x1fa
fffff880`03368dc0 fffff880`0165e3c7 : fffffa80`04d4edc2 fffffa80`04d5e5a1 fffffa80`04d4edc2 00000000`00000000 : tcpip!TcpPreValidatedReceive+0x177
fffff880`03368e70 fffff880`0165e499 : fffff880`03368ff0 fffff880`01769800 fffff880`03369000 00000000`00000000 : tcpip!IppDeliverListToProtocol+0x97
fffff880`03368f30 fffff880`0165e990 : fffff8a0`0d97c9f0 fffffa80`04b15010 00000000`0000001d fffff880`03368ff0 : tcpip!IppProcessDeliverList+0x59
fffff880`03368fa0 fffff880`0165d821 : fffff880`01769800 fffffa80`094898a2 fffff880`01769800 fffff880`01769800 : tcpip!IppReceiveHeaderBatch+0x231
fffff880`03369080 fffff880`0165c272 : fffffa80`0512ab50 00000000`00000000 fffffa80`0512eb00 fffff880`00000001 : tcpip!IpFlcReceivePackets+0x651
fffff880`03369280 fffff880`016cae9a : 00000000`00000001 fffff8a0`00004bb0 fffffa80`0512ebb0 fffff800`02f7a9fa : tcpip!FlpReceiveNonPreValidatedNetBufferListChain+0x2b2
fffff880`03369360 fffff800`02c91d4a : 00000000`00000000 fffff880`03369400 00000000`00004800 00000000`00000001 : tcpip! ?? ::FNODOBFM::`string'+0x4d592
fffff880`033693b0 fffff880`016750e2 : fffff880`016755e0 fffff880`033694c0 00000000`00000000 00000000`00020006 : nt!KeExpandKernelStackAndCalloutEx+0xda
fffff880`03369490 fffff880`0159c0eb : fffffa80`051308d0 00000000`00000000 fffffa80`04f201a0 fffff880`03369590 : tcpip!FlReceiveNetBufferListChain+0xb2
fffff880`03369500 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : ndis!ndisMIndicateNetBufferListsToOpen+0xdb


STACK_COMMAND:  kb

FOLLOWUP_IP: 
NETIO!RtlCopyBufferToMdl+1d
fffff880`0140ea7d 448b5228        mov     r10d,dword ptr [rdx+28h]

SYMBOL_STACK_INDEX:  3

SYMBOL_NAME:  NETIO!RtlCopyBufferToMdl+1d

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: NETIO

IMAGE_NAME:  NETIO.SYS

DEBUG_FLR_IMAGE_TIMESTAMP:  4a5bc18a

FAILURE_BUCKET_ID:  X64_0xD1_NETIO!RtlCopyBufferToMdl+1d

BUCKET_ID:  X64_0xD1_NETIO!RtlCopyBufferToMdl+1d

Followup: MachineOwner
---------

akashnazz · 04 Feb 2011

ok.. I have uninstalled McAfee and have installed Avast Anitivirus instead of MSE. Also for accelerometer there wasn't any update for it so I have uninstalled it. I have updated SynTP driver also.

Laptop seems to be working fine.. hope that it will continue...
Also I have query that what does netio.sys do and if it is faulty then how to correct it. I have googled but cannot find a proper solution.
Kindly help related to it
and thanks for support.. :)

wish · 04 Feb 2011

It's sound good.

Then netio.sys is part of Windows, so it is not the real cause.
Netio.sys error usually triggered by antivirus software or 3rd party firewall.
Since you have updated drivers and changed the antivirus software, so we'll see how it goes.

akashnazz · 15 Feb 2011

ok now the computer worked good for few days and have again started crashing... while working the mouse cursor gets big and freezes I have to then manually restart the laptop...

Problem: Windows stopped working
"The computer has rebooted from a bugcheck. The bugcheck was: 0x00000101 (0x0000000000000019, 0x0000000000000000, 0xfffff88003087180, 0x0000000000000005). A dump was saved in: C:\Windows\MEMORY.DMP. Report Id: ."

Kindly tell what could be the problem. Thanks in advance.

DeanP · 15 Feb 2011

Upload the dumps please.

akashnazz · 15 Feb 2011

Sry, but the file size of memory.dmp is around 417mb and 157mb in compressed zip mode. And maximum file attachment is very less in the forum. Is there any other way of uploading the file..

DeanP · 15 Feb 2011

Upload the top 5 latest dump files.

akashnazz · 15 Feb 2011

no this time.. I haven't got any latest minidump files made in C:\WINDOWS\Minidump\ ... my dump file is made as memory.dmp (as said in the bug report) C:\Windows\MEMORY.DMP and the size of memory.dmp file is 417mb single..

I am still uploading minidump files.

akashnazz · 16 Feb 2011

anyone there for support

..?????