BSOD - IDSvia64.sys

RockStar1965 said:

I have exhausted all leads,

I am very technical and can usually resolve this stuff, but this really eludes me.


It seems it has something to do with the anti-virus, but I removed Norton 360 ver 4 and replaced it with Norton Security 2012 hoping this would resolve it.

Upgraded Norton, no change.

Douglas

Douglas,
Your Dmp's list Norton as being the cause...

Symantec is a frequent cause of BSOD's.
I would remove and replace it with Microsoft Security Essentials AT LEAST TO TEST


http://us.norton.com/support/kb/web_...080710133834EN

Microsoft Security Essentials - Free Antivirus for Windows

Hello JMH

OK I will do that, Im just suprised that it has been happening for a month or more for me and I haven't gotten any hits for that driver IDSvia64.sys googling the problem, I'm pretty sure there would be a good chunk of people with a simular setup out there.

I started to think that maybe Utorrent, cause it is getting fancy may have put something in their stuff that might cause Norton to crash/conflict.

I will do a backup and remove Norton as you suggest, pain, just renew them under Norton Internet Security from 360, thinking they may be slightly different.

Even though it had something to do with my boot from the SSD, but I have another operating system from a HDD, that eventually BSOD me.

I do know, earilier I did have some crashes that didn't reference Norton, but they were not as often, but I did a system restore from Jan 3 and everything seemed fine, but after doing the update, they went bad again

Douglas

Here you go...
Six point to Norton.

Attachment 205546

Thank you so much for your time.

Interesting though that I haven't had a BSOD for the last 24 hours,

I am going run all those debug stuff and do a file compare to see if something updated in the last 48 hours.

I will try those steps and will respond with any findings.

Again Thank you!

Keep us posted re developments there please.

Hello, I was able to verify that Norton was definiately the problem, and they sent me a fix that they swore by, I know lol.

Anyways did a clean install of windows and got a new BSOD.

Can you tell me if this is the Norton Issue or is it a Device Driver, if so which one, I think there are like a thousands.

Thank you in advance

Problem Devices:

Code:

Officejet Pro 8500 A909n	ROOT\MULTIFUNCTION\0000	This device is disabled.

Security Software (just to make sure it is installed and working properly; nothing needs to be done at this time):

Code:

ccsvchst.exe	c:\program files (x86)\norton internet security\engine\19.6.2.10\ccsvchst.exe	2824	8	1024	10240	4/11/2012 6:47 AM	11.2.1.4	134.99 KB (138,232 bytes)	4/9/2012 1:17 PM
ccsvchst.exe	c:\program files (x86)\norton internet security\engine\19.6.2.10\ccsvchst.exe	4856	8	1024	10240	4/11/2012 9:17 AM	11.2.1.4	134.99 KB (138,232 bytes)	4/9/2012 1:17 PM

Code:

Microsoft (R) Windows Debugger Version 6.12.0002.633 AMD64
Copyright (c) Microsoft Corporation. All rights reserved.


Loading Dump File [D:\Kingston\BSODDmpFiles\RockStar1965\Windows_NT6_BSOD_jcgriff2\041112-19032-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available

Symbol search path is: SRV*C:\SymCache*http://msdl.microsoft.com/download/symbols
Executable search path is: 
Windows 7 Kernel Version 7601 (Service Pack 1) MP (8 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 7601.17790.amd64fre.win7sp1_gdr.120305-1505
Machine Name:
Kernel base = 0xfffff800`02e66000 PsLoadedModuleList = 0xfffff800`030aa650
Debug session time: Wed Apr 11 07:45:18.498 2012 (UTC - 6:00)
System Uptime: 0 days 8:19:44.326
Loading Kernel Symbols
...............................................................
................................................................
................................................................
.
Loading User Symbols
Loading unloaded module list
.......
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck C5, {7, 2, 1, fffff80003010617}

Probably caused by : NETIO.SYS ( NETIO!WfpPoolAllocNonPaged+17 )

Followup: MachineOwner
---------

0: kd> !analyze -v
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

DRIVER_CORRUPTED_EXPOOL (c5)
An attempt was made to access a pageable (or completely invalid) address at an
interrupt request level (IRQL) that is too high.  This is
caused by drivers that have corrupted the system pool.  Run the driver
verifier against any new (or suspect) drivers, and if that doesn't turn up
the culprit, then use gflags to enable special pool.
Arguments:
Arg1: 0000000000000007, memory referenced
Arg2: 0000000000000002, IRQL
Arg3: 0000000000000001, value 0 = read operation, 1 = write operation
Arg4: fffff80003010617, address which referenced memory

Debugging Details:
------------------


BUGCHECK_STR:  0xC5_2

CURRENT_IRQL:  2

FAULTING_IP: 
nt!ExAllocatePoolWithTag+537
fffff800`03010617 48895808        mov     qword ptr [rax+8],rbx

CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT

PROCESS_NAME:  System

TRAP_FRAME:  fffff8800bdd4a10 -- (.trap 0xfffff8800bdd4a10)
NOTE: The trap frame does not contain all registers.
Some register values may be zeroed or incorrect.
rax=ffffffffffffffff rbx=0000000000000000 rcx=fffffa80163b9010
rdx=0000000000000000 rsi=0000000000000000 rdi=0000000000000000
rip=fffff80003010617 rsp=fffff8800bdd4ba0 rbp=0000000000001000
 r8=0000000000000000  r9=fffff8000306c5b0 r10=fffff8000306c348
r11=00000000000000ff r12=0000000000000000 r13=0000000000000000
r14=0000000000000000 r15=0000000000000000
iopl=0         nv up ei pl zr na po nc
nt!ExAllocatePoolWithTag+0x537:
fffff800`03010617 48895808        mov     qword ptr [rax+8],rbx ds:e6e8:00000000`00000007=????????????????
Resetting default scope

LAST_CONTROL_TRANSFER:  from fffff80002ee2229 to fffff80002ee2c80

STACK_TEXT:  
fffff880`0bdd48c8 fffff800`02ee2229 : 00000000`0000000a 00000000`00000007 00000000`00000002 00000000`00000001 : nt!KeBugCheckEx
fffff880`0bdd48d0 fffff800`02ee0ea0 : fffff880`00000000 fffff880`0193aee6 ffff0000`0cec7b8d fffff800`0306c5b0 : nt!KiBugCheckDispatch+0x69
fffff880`0bdd4a10 fffff800`03010617 : fffff880`0bdd4c18 fffff880`0180e53a fffffa80`145573f0 fffff880`0190ec26 : nt!KiPageFault+0x260
fffff880`0bdd4ba0 fffff880`0190a267 : fffffa80`00000000 fffff880`0bdd4d60 fffff880`0bdd5010 fffff880`00000000 : nt!ExAllocatePoolWithTag+0x537
fffff880`0bdd4c90 fffff880`0190d74d : 00000000`00000003 00000000`00000000 fffffa80`0c6f35a0 fffffa80`0cd13c30 : NETIO!WfpPoolAllocNonPaged+0x17
fffff880`0bdd4cc0 fffff880`0190d86d : 00000000`00000000 fffff880`0bdd4e2c fffff880`0bdd4dd0 fffffa80`0d690010 : NETIO!ConstructNewCacheEntry+0x12d
fffff880`0bdd4d40 fffff880`019067df : 00000000`00000000 fffffa80`0d690010 fffff880`0bdd5240 00000000`00000000 : NETIO!ProcessCacheMiss+0x8d
fffff880`0bdd4d90 fffff880`01aee39e : 00000000`0000000c fffff880`0bdd5230 00000000`00000000 fffffa80`10d98c50 : NETIO!KfdClassify+0xb31
fffff880`0bdd5100 fffff880`01b41a5a : 00000000`0006c59d fffffa80`145573f0 fffffa80`145573f0 fffffa80`1455afd6 : tcpip!ProcessInboundTransportLayerClassify+0x21e
fffff880`0bdd5320 fffff880`01b26ec8 : 00000000`00000000 00000000`ffffffff fffffa80`110b1340 fffff880`012447d9 : tcpip!WfpProcessInTransportStackIndication+0xc0a
fffff880`0bdd5820 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : tcpip!TcpTcbReceive+0x808


STACK_COMMAND:  kb

FOLLOWUP_IP: 
NETIO!WfpPoolAllocNonPaged+17
fffff880`0190a267 488903          mov     qword ptr [rbx],rax

SYMBOL_STACK_INDEX:  4

SYMBOL_NAME:  NETIO!WfpPoolAllocNonPaged+17

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: NETIO

IMAGE_NAME:  NETIO.SYS

DEBUG_FLR_IMAGE_TIMESTAMP:  4ce79381

FAILURE_BUCKET_ID:  X64_0xC5_2_NETIO!WfpPoolAllocNonPaged+17

BUCKET_ID:  X64_0xC5_2_NETIO!WfpPoolAllocNonPaged+17

Followup: MachineOwner
---------

The crash is network related. Do you have the 2012 version of Norton? Also, install the latest LAN and BlueTooth drivers from ASUS - Motherboards- ASUS P8Z68-V PRO/GEN3 -> Download -> OS: Windows 7 64bit

Hello Thank you.

I remember that I did an update of the network card from the intel update site, and went back there and noticed that they say for (OEM) to use only the mfg driver.

I have just reinstalled all the ASUS drivers, bluetooth, sata, audio and all, and will see if this clears it up.

I play BF3 and it seems to drop me every once in a while, but that is BF3 for you, NVidia driver and all.

I did the Norton 2012 installation from a file they sent me that eliminated the original crash symtom.

Thank you for all the help on this forum

Hello Again BSOD,

I believe I have reinstalled all the original ASUS driver...

Douglas