BSOD, netio.sys, (STOP 0x000000D1)

Ibdman2000 · 02 Jun 2011

Hi there. This is my first posting (ever) so please bear with me. Hopefully I u/l everything correctly. I have a new Dell N7010 laptop that I bought a few weeks ago from Amazon. Soon after I installed all my software, I kept getting BSODs which first began after I installed and began playing a game (UT2004) and then when I would run uTorrent. I just uninstalled Ad-aware Free and I haven't had any BSODs yet but that was only a few hours ago. I also got them when I ran a program from Can You Run It? about whether I could run UT3. It also crashed once after it rebooted from a prior crash and all I had opened was winamp.

Please help!

Helpful info:
x64
orig installed OS: W7 OEM
age of system: brand new? 2010?
age of OS installation: I have not re-installed OS
Attachment 157659

zigzag3143 · 02 Jun 2011

Ibdman2000 said:

Hi there. This is my first posting (ever) so please bear with me. Hopefully I u/l everything correctly. I have a new Dell N7010 laptop that I bought a few weeks ago from Amazon. Soon after I installed all my software, I kept getting BSODs which first began after I installed and began playing a game (UT2004) and then when I would run uTorrent. I just uninstalled Ad-aware Free and I haven't had any BSODs yet but that was only a few hours ago. I also got them when I ran a program from Can You Run It? about whether I could run UT3. It also crashed once after it rebooted from a prior crash and all I had opened was winamp.

Please help!

Helpful info:
x64
orig installed OS: W7 OEM
age of system: brand new? 2010?
age of OS installation: I have not re-installed OS
Attachment 157659

This one was related to NETIO.SYS (the OS network input/output driver) It usually is not the true cause. Usually it is a firewall Like zone Alarm or an antivirus Like your Macaffee.

I would remove zone alarm and Macaffe and replace with Microsoft security essentials and the built in windows firewall

http://download.zonealarm.com/bin/fr...cpes_clean.exe

How to uninstall or reinstall supported McAfee consumer products using the McAfee Consumer Products Removal tool (MCPR.exe)

Virus, Spyware & Malware Protection | Microsoft Security Essentials

Code:

Microsoft (R) Windows Debugger Version 6.11.0001.404 X86
Copyright (c) Microsoft Corporation. All rights reserved.


Loading Dump File [C:\Users\K\Desktop\Windows_NT6_BSOD_jcgriff2\060111-27206-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available

Symbol search path is: SRV*C:\Symbols*http://msdl.microsoft.com/download/symbols;srv*e:\symbols
*http://msdl.microsoft.com/download/symbols
Executable search path is: 
Windows 7 Kernel Version 7601 (Service Pack 1) MP (4 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS Personal
Built by: 7601.17592.amd64fre.win7sp1_gdr.110408-1631
Machine Name:
Kernel base = 0xfffff800`02e4d000 PsLoadedModuleList = 0xfffff800`03092650
Debug session time: Thu Jun  2 00:08:12.566 2011 (GMT-4)
System Uptime: 0 days 0:17:14.065
Loading Kernel Symbols
...............................................................
................................................................
...................................................
Loading User Symbols
Loading unloaded module list
.....
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck D1, {28, 2, 0, fffff88001a56b2d}

Probably caused by : NETIO.SYS ( NETIO!RtlCopyBufferToMdl+1d )

Followup: MachineOwner
---------

0: kd> !analyze -v
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

DRIVER_IRQL_NOT_LESS_OR_EQUAL (d1)
An attempt was made to access a pageable (or completely invalid) address at an
interrupt request level (IRQL) that is too high.  This is usually
caused by drivers using improper addresses.
If kernel debugger is available get stack backtrace.
Arguments:
Arg1: 0000000000000028, memory referenced
Arg2: 0000000000000002, IRQL
Arg3: 0000000000000000, value 0 = read operation, 1 = write operation
Arg4: fffff88001a56b2d, address which referenced memory

Debugging Details:
------------------


READ_ADDRESS: GetPointerFromAddress: unable to read from fffff800030fc100
 0000000000000028 

CURRENT_IRQL:  2

FAULTING_IP: 
NETIO!RtlCopyBufferToMdl+1d
fffff880`01a56b2d 448b5228        mov     r10d,dword ptr [rdx+28h]

CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT

BUGCHECK_STR:  0xD1

PROCESS_NAME:  System

TRAP_FRAME:  fffff880037a77f0 -- (.trap 0xfffff880037a77f0)
NOTE: The trap frame does not contain all registers.
Some register values may be zeroed or incorrect.
rax=fffff880037a7a10 rbx=0000000000000000 rcx=0000000000000000
rdx=0000000000000000 rsi=0000000000000000 rdi=0000000000000000
rip=fffff88001a56b2d rsp=fffff880037a7980 rbp=fffff880037a7ab0
 r8=00000000ffffffbc  r9=0000000000000044 r10=0000000000000000
r11=fffffa8005f3d6a0 r12=0000000000000000 r13=0000000000000000
r14=0000000000000000 r15=0000000000000000
iopl=0         nv up ei pl zr na po nc
NETIO!RtlCopyBufferToMdl+0x1d:
fffff880`01a56b2d 448b5228        mov     r10d,dword ptr [rdx+28h] ds:79d8:00000000`00000028=????????
Resetting default scope

LAST_CONTROL_TRANSFER:  from fffff80002ecc2a9 to fffff80002eccd00

STACK_TEXT:  
fffff880`037a76a8 fffff800`02ecc2a9 : 00000000`0000000a 00000000`00000028 00000000`00000002 00000000`00000000 : nt!KeBugCheckEx
fffff880`037a76b0 fffff800`02ecaf20 : 000067ee`00000000 fffff880`01c8edd2 fffffa80`0b1b27a0 00000000`00000044 : nt!KiBugCheckDispatch+0x69
fffff880`037a77f0 fffff880`01a56b2d : fffffa80`05e17120 00000000`00000072 fffffa80`09f93250 fffffa80`0a2e96f8 : nt!KiPageFault+0x260
fffff880`037a7980 fffff880`01cd25ec : 00000000`00000000 fffff880`01ca1376 00000000`00000001 00000000`00000000 : NETIO!RtlCopyBufferToMdl+0x1d
fffff880`037a79e0 fffff880`01c9e963 : fffffa80`05f3d6a0 00000000`00000001 fffffa80`05e17120 00000000`00000000 : tcpip! ?? ::FNODOBFM::`string'+0x1d6ef
fffff880`037a7a50 fffff880`01c8cd54 : fffffa80`058c7150 fffff880`0602c1ef fffffa80`08321290 fffffa80`09b23780 : tcpip!TcpTcbCarefulDatagram+0x543
fffff880`037a7c00 fffff880`01c8b5ea : fffffa80`080f0a80 fffff880`01c83aa4 fffffa80`080b1790 00000000`00000000 : tcpip!TcpTcbReceive+0x724
fffff880`037a7df0 fffff880`01c8d2ab : fffff880`06b260f0 fffffa80`08200000 00000000`00000000 fffff880`037a8100 : tcpip!TcpMatchReceive+0x1fa
fffff880`037a7f40 fffff880`01c84137 : fffffa80`080f0a80 fffffa80`080f34c1 fffffa80`0000ae08 00000000`0000ae08 : tcpip!TcpPreValidatedReceive+0x36b
fffff880`037a8010 fffff880`01c83caa : 00000000`00000000 fffff880`01d93800 fffff880`037a81d0 fffffa80`0b3916c0 : tcpip!IppDeliverListToProtocol+0x97
fffff880`037a80d0 fffff880`01c832a9 : fffffa80`0b3916c0 fffffa80`0b3916c0 00000000`00000000 fffff880`037a81c0 : tcpip!IppProcessDeliverList+0x5a
fffff880`037a8170 fffff880`01c80fff : 00000000`00000000 00000000`09b09600 fffff880`01d93800 fffff880`01d93800 : tcpip!IppReceiveHeaderBatch+0x23a
fffff880`037a8250 fffff880`01c805f2 : fffffa80`09b09c20 00000000`00000000 fffffa80`09b09600 fffff880`00000001 : tcpip!IpFlcReceivePackets+0x64f
fffff880`037a8450 fffff880`01cf475a : fffffa80`05e11f50 00000000`00000014 fffffa80`09b096d0 fffffa80`0b6ad8e0 : tcpip!FlpReceiveNonPreValidatedNetBufferListChain+0x2b2
fffff880`037a8530 fffff800`02ed9668 : fffffa80`080e0c38 00000000`00000000 fffffa80`05456040 00000000`00000001 : tcpip! ?? ::FNODOBFM::`string'+0x56e52
fffff880`037a8580 fffff880`01c80152 : fffff880`01c7f9b0 00000000`00000000 00000000`00000000 fffffa80`080e0c01 : nt!KeExpandKernelStackAndCalloutEx+0xd8
fffff880`037a8660 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : tcpip!FlReceiveNetBufferListChain+0xb2


STACK_COMMAND:  kb

FOLLOWUP_IP: 
NETIO!RtlCopyBufferToMdl+1d
fffff880`01a56b2d 448b5228        mov     r10d,dword ptr [rdx+28h]

SYMBOL_STACK_INDEX:  3

SYMBOL_NAME:  NETIO!RtlCopyBufferToMdl+1d

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: NETIO

IMAGE_NAME:  NETIO.SYS

DEBUG_FLR_IMAGE_TIMESTAMP:  4ce79381

FAILURE_BUCKET_ID:  X64_0xD1_NETIO!RtlCopyBufferToMdl+1d

BUCKET_ID:  X64_0xD1_NETIO!RtlCopyBufferToMdl+1d

Followup: MachineOwner
---------

Ibdman2000 · 02 Jun 2011

Thanks for your prompt reply. I'm a bit confused on how to proceed since I never installed Zone Alarm and had uninstalled McAfee to put NAV2010 on instead. Any other thoughts as to what might be causing this?
Also, certain times when I turn on my computer my wireless connectivity icon changes. Sometimes its the series of bars showing signal strength and other times its a monitor with a power cord to the left and giant red X over it. Why is this the case? And is there any way to not have the second icon keep coming up?

zigzag3143 · 02 Jun 2011

Ibdman2000 said:

Thanks for your prompt reply. I'm a bit confused on how to proceed since I never installed Zone Alarm and had uninstalled McAfee to put NAV2010 on instead. Any other thoughts as to what might be causing this?
Also, certain times when I turn on my computer my wireless connectivity icon changes. Sometimes its the series of bars showing signal strength and other times its a monitor with a power cord to the left and giant red X over it. Why is this the case? And is there any way to not have the second icon keep coming up?

I did say often it is zone alarm, and there is a preferred method for removing Mac. FYI Norton is also a major cause.