Windows 7 Forums
Welcome to Windows 7 Forums. Our forum is dedicated to helping you find support and solutions for any problems regarding your Windows 7 PC be it Dell, HP, Acer, Asus or a custom build. We also provide an extensive Windows 7 tutorial section that covers a wide range of tips and tricks.

Windows 7: tcpip.sys related bsod

11 Dec 2012   #1

Windows 7 Home Premium 64bit
tcpip.sys related bsod


I keep getting bsods and suspect it has something to do with Planetside 2, as it started to occur after I installed that game. I noticed tcpip.sys was mentioned on the bsod, as well as "driver_irql_not_less_or_equal".

After restart i get information like this:

BCCode: d1
BCP1: 0000000000000009
BCP2: 0000000000000002
BCP3: 0000000000000000
BCP4: FFFFF880016B2F5F
OS Version: 6_1_7601
Service Pack: 1_0
Product: 768_1

Dumpfiles are attatched. I tried installing the windows debugger but installation failed.

My System SpecsSystem Spec
11 Dec 2012   #2

Microsoft Community Contributor Award Recipient

Windows 10 Home 64Bit

Welcome to SF.

Please upload your msinfo32.nfo file. To get this: Start Menu -> Type msinfo32 into the Search programs and files box -> When it opens, go to File, Save -> Save as msinfo32.nfo and save in a place you will remember -> Let it finish the process of gathering and saving the system info -> Right click the .nfo file, click send to compressed (zipped) folder -> Upload the .zip file here.

Please upload your msinfo32.txt file. To get this: Start Menu -> Type msinfo32 into the Search programs and files box -> When it opens, go to File, Export -> Save as msinfo32.txt and save in a place you will remember -> Let it finish the process of gathering and saving the system info -> Right click the .txt file, click send to compressed (zipped) folder -> Upload the .zip file here.
My System SpecsSystem Spec
12 Dec 2012   #3

Windows 7 Home Premium 64bit

Hi again!

Attatched are the files as requested.
My System SpecsSystem Spec

12 Dec 2012   #4

Microsoft Community Contributor Award Recipient

Windows 10 Home 64Bit


If you are overclocking your system, please return all overclocked components to their stock speeds. If the BSOD's are found not to be caused by the overclock, you can re-overclock the components once we have finished the diagnostics.

Start Menu\Programs\ASUS\AI Suite II	Public:Start Menu\Programs\ASUS\AI Suite II	Public
This is overclocking software and can lead to system instability and BSOD's. Please reset all components to their stock speeds and then remove the software.

Uninstall AVG: AVG | Download tools and utilities

Install MSE: Microsoft Security Essentials - Microsoft Windows

Also keep MBAM: Malwarebytes : Malwarebytes Anti-Malware removes malware including viruses, spyware, worms and trojans, plus it protects your computer

MSE is recommended from a strict BSOD perspective, compatibility & stability compared to other antiviruses/internet security software:-
1. Microsoft Security Essentials - Free Antivirus for Windows
2. Malwarebytes - Free
3. Good and Free system security combination.
Do not start the free trial of Malware Bytes; remember to deselect that option when prompted.

Run a full scan with both (separately) once downloaded, installed and updated.
System Optimisers

Please remove the following software
Start Menu\Programs\Advanced SystemCare 5	Public:Start Menu\Programs\Advanced SystemCare 5	Public
This software is a known cause of BSOD's. The windows 7 operating system does not require these registry cleaning software. They often tune-down rather than tune-up and can wreck the OS beyond repair. Microsoft have improved Windows 7 significantly and it is much better at organising and optimising itself than its predecessors. Check this, this and this thread for evidence.

If you feel the need to use a registry cleaning or optimisation software, most of us recommend the use of CCleaner but make sure you back up the registry before making letting ccleaner delete anything.
Update these drivers:
1. e1q62x64.sys
2. npf_devolo.sys
Go to this link Intel® Driver Update Utility and check the system for latest updates. Download and install them.

Check for a firmware update for the SSD.

Run the System File Checker. It allows the user to scan for and restore corruptions in Windows system files.
  • 1. Click on the
    2. Type CMD on Search
    3. Left click and Run as Administrator
    4. Type SFC /scannow
Full tutorial here:Run Disk Check on your hard disk for file system errors and bad sectors on it:Free up the start-up, nothing except the antivirus is usually needed.BUGCHECK ANALYSIS
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *

Use !analyze -v to get detailed debugging information.

BugCheck D1, {9, 2, 0, fffff880016b2f5f}

*** WARNING: Unable to verify timestamp for e1q62x64.sys
*** ERROR: Module load completed but symbols could not be loaded for e1q62x64.sys
Probably caused by : e1q62x64.sys ( e1q62x64+239e9 )

Followup: MachineOwner

5: kd> !analyze -v
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *

An attempt was made to access a pageable (or completely invalid) address at an
interrupt request level (IRQL) that is too high.  This is usually
caused by drivers using improper addresses.
If kernel debugger is available get stack backtrace.
Arg1: 0000000000000009, memory referenced
Arg2: 0000000000000002, IRQL
Arg3: 0000000000000000, value 0 = read operation, 1 = write operation
Arg4: fffff880016b2f5f, address which referenced memory

Debugging Details:

READ_ADDRESS: GetPointerFromAddress: unable to read from fffff800034b2100
GetUlongFromAddress: unable to read from fffff800034b21c0
 0000000000000009 Nonpaged pool


fffff880`016b2f5f 0fb61c11        movzx   ebx,byte ptr [rcx+rdx]




PROCESS_NAME:  PlanetSide2.ex

TAG_NOT_DEFINED_c000000f:  FFFFF880030B7FB0

TRAP_FRAME:  fffff880030b6a50 -- (.trap 0xfffff880030b6a50)
NOTE: The trap frame does not contain all registers.
Some register values may be zeroed or incorrect.
rax=fffffa800ce0c820 rbx=0000000000000000 rcx=0000000000000009
rdx=0000000000000000 rsi=0000000000000000 rdi=0000000000000000
rip=fffff880016b2f5f rsp=fffff880030b6be0 rbp=fffff880017db9a0
 r8=0000000000000010  r9=0000000000000002 r10=fffff880017d0002
r11=00000000ffffffff r12=0000000000000000 r13=0000000000000000
r14=0000000000000000 r15=0000000000000000
iopl=0         nv up ei pl zr na po nc
fffff880`016b2f5f 0fb61c11        movzx   ebx,byte ptr [rcx+rdx] ds:00000000`00000009=??
Resetting default scope

LAST_CONTROL_TRANSFER:  from fffff80003282569 to fffff80003282fc0

fffff880`030b6908 fffff800`03282569 : 00000000`0000000a 00000000`00000009 00000000`00000002 00000000`00000000 : nt!KeBugCheckEx
fffff880`030b6910 fffff800`032811e0 : 00000000`00000001 fffffa80`0ce21f00 00000000`00000005 00000000`00000000 : nt!KiBugCheckDispatch+0x69
fffff880`030b6a50 fffff880`016b2f5f : fffffa80`0e16c080 00000000`00005001 fffff880`030b6b80 00000000`00000000 : nt!KiPageFault+0x260
fffff880`030b6be0 fffff880`016c3992 : fffffa80`0d7ff900 fffffa80`0d7ff900 00000000`45660002 00000000`00000000 : tcpip!IpFlcReceivePreValidatedPackets+0xcf
fffff880`030b6d40 fffff800`0328ec48 : 00000000`00000000 00000000`00004800 fffffa80`0dd539f0 00000000`00000000 : tcpip!FlReceiveNetBufferListChainCalloutRoutine+0xa2
fffff880`030b6d90 fffff880`016c4092 : fffff880`016c38f0 fffff880`0159b395 00000000`00000002 fffffa80`1121b300 : nt!KeExpandKernelStackAndCalloutEx+0xd8
fffff880`030b6e70 fffff880`015920eb : fffffa80`0d869010 00000000`00000000 fffffa80`0d4811a0 fffff880`014dda76 : tcpip!FlReceiveNetBufferListChain+0xb2
fffff880`030b6ee0 fffff880`0155bad6 : fffffa80`00000005 00000000`00000000 00000000`00000000 00000000`00000001 : ndis!ndisMIndicateNetBufferListsToOpen+0xdb
fffff880`030b6f50 fffff880`014d5ac1 : fffffa80`0d4811a0 00000000`00000002 00000000`00000002 fffffa80`114537d0 : ndis!ndisMDispatchReceiveNetBufferLists+0x1d6
fffff880`030b73d0 fffff880`11da79e9 : fffffa80`0d771000 fffffa80`0d7b5c30 fffffa80`0d7b4180 00000000`00000002 : ndis!NdisMIndicateReceiveNetBufferLists+0xc1
fffff880`030b7420 fffffa80`0d771000 : fffffa80`0d7b5c30 fffffa80`0d7b4180 00000000`00000002 00000000`00000801 : e1q62x64+0x239e9
fffff880`030b7428 fffffa80`0d7b5c30 : fffffa80`0d7b4180 00000000`00000002 00000000`00000801 00000000`00000002 : 0xfffffa80`0d771000
fffff880`030b7430 fffffa80`0d7b4180 : 00000000`00000002 00000000`00000801 00000000`00000002 fffffa80`0d773b00 : 0xfffffa80`0d7b5c30
fffff880`030b7438 00000000`00000002 : 00000000`00000801 00000000`00000002 fffffa80`0d773b00 fffff880`11da7b84 : 0xfffffa80`0d7b4180
fffff880`030b7440 00000000`00000801 : 00000000`00000002 fffffa80`0d773b00 fffff880`11da7b84 00000000`00000001 : 0x2
fffff880`030b7448 00000000`00000002 : fffffa80`0d773b00 fffff880`11da7b84 00000000`00000001 fffffa80`0d7b5c30 : 0x801
fffff880`030b7450 fffffa80`0d773b00 : fffff880`11da7b84 00000000`00000001 fffffa80`0d7b5c30 fffffa80`0d7c5030 : 0x2
fffff880`030b7458 fffff880`11da7b84 : 00000000`00000001 fffffa80`0d7b5c30 fffffa80`0d7c5030 00000000`00000002 : 0xfffffa80`0d773b00
fffff880`030b7460 00000000`00000001 : fffffa80`0d7b5c30 fffffa80`0d7c5030 00000000`00000002 0000000a`0e0b6e01 : e1q62x64+0x23b84
fffff880`030b7468 fffffa80`0d7b5c30 : fffffa80`0d7c5030 00000000`00000002 0000000a`0e0b6e01 00000000`00000000 : 0x1
fffff880`030b7470 fffffa80`0d7c5030 : 00000000`00000002 0000000a`0e0b6e01 00000000`00000000 fffff880`11d9a6d0 : 0xfffffa80`0d7b5c30
fffff880`030b7478 00000000`00000002 : 0000000a`0e0b6e01 00000000`00000000 fffff880`11d9a6d0 fffff880`030b76d8 : 0xfffffa80`0d7c5030
fffff880`030b7480 0000000a`0e0b6e01 : 00000000`00000000 fffff880`11d9a6d0 fffff880`030b76d8 00000000`00000000 : 0x2
fffff880`030b7488 00000000`00000000 : fffff880`11d9a6d0 fffff880`030b76d8 00000000`00000000 fffffa80`0d464270 : 0x0000000a`0e0b6e01


fffff880`11da79e9 ??              ???


SYMBOL_NAME:  e1q62x64+239e9

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: e1q62x64

IMAGE_NAME:  e1q62x64.sys


FAILURE_BUCKET_ID:  X64_0xD1_e1q62x64+239e9

BUCKET_ID:  X64_0xD1_e1q62x64+239e9

Followup: MachineOwner

5: kd> lmvm e1q62x64
start             end                 module name
fffff880`11d84000 fffff880`11dd0000   e1q62x64 T (no symbols)           
    Loaded symbol image file: e1q62x64.sys
    Image path: \SystemRoot\system32\DRIVERS\e1q62x64.sys
    Image name: e1q62x64.sys
    Timestamp:        Fri Jul 09 04:07:00 2010 (4C364C04)
    CheckSum:         000506D5
    ImageSize:        0004C000
    Translations:     0000.04b0 0000.04e4 0409.04b0 0409.04e4
kd> lmvm npf_devolo
start             end                 module name
fffff880`06c7b000 fffff880`06c87000   npf_devolo T (no symbols)           
    Loaded symbol image file: npf_devolo.sys
    Image path: \SystemRoot\sysWOW64\drivers\npf_devolo.sys
    Image name: npf_devolo.sys
    Timestamp:        Fri Feb 02 15:24:05 2007 (45C30335)
    CheckSum:         00015803
    ImageSize:        0000C000
    Translations:     0000.04b0 0000.04e4 0409.04b0 0409.04e4
Post back results.
My System SpecsSystem Spec
12 Dec 2012   #5

Windows 7 Home Premium 64bit

Thanks for the reply!

I will post results when I have them ready. I am loaded with other work just now, but I removed "Advanced SystemCare 5" allready.

About the overclocking part, I'm not quite sure how to reset to stock speeds. My guess is they allready are at stock speeds, as I never have adjusted them manually, and as far as I know the auto-overclock features has never been in use. Can I just remove the software or do I need to make sure everything are at "stock speed" before I do so?
My System SpecsSystem Spec
12 Dec 2012   #6

Microsoft Community Contributor Award Recipient

Windows 10 Home 64Bit

Quote   Quote: Originally Posted by needfix View Post
Can I just remove the software?
Yup :)
My System SpecsSystem Spec
28 Dec 2012   #7

Microsoft Community Contributor Award Recipient

Windows 10 Home 64Bit

Any updates? :)
My System SpecsSystem Spec

 tcpip.sys related bsod

Thread Tools

Similar help and support threads
Thread Forum
Blue screen random shutdown (tcpip.sys related problem)
Hello, A month ago, my laptop started getting the blue screen of death and crashing, and in the small portion of time I have to read the error message before the laptop shuts down completely, it says something about "tcpip.sys" driver or something. can someone please help to find a solution....
BSOD Help and Support
BSOD on Internet Related Programs (tcpip.sys)
For the past 2 months I have received an increased growth in BOSD relating to tcpip.sys. I have received over 50 BOSD in on week and approximately 10 in one day. It makes my life especially frustrating because of the delay in my school online homework, server hosting, and personal entertainment. I...
BSOD Help and Support
BSOD's after adding RAM [ tcpip.sys ] [ error:tcpip+7a6cc ]
Bsod's started since i added a 4gb ddr3 RAM(1333MHZ ddr3 corsair single stick) to my board which already has 2 more sticks of 2gb each(1333MHZ, ddr3 , kingston) They happen every few hours... I reinstalled(removed and installed) network driver thrice.(didnt reboot the system though) I...
BSOD Help and Support
BSOD, Randomly Occurs, Seems related to tcpip.sys D1 Stop Error
Hi, I have a Toshiba Qosmio F60 notebook that recently started with the following BSoD: 0x000000D1 DRIVER_IRQL_NOT_LESS_OR_EQUAL It happens completely random and I have tried the Hotifx and instructions from Microsoft's KB article 977067. We have not made any recent driver updates or...
BSOD Help and Support
BSOD while uploading the file, seems to be tcpip.sys related
Please, help, people! I have been through 3 hours of my technical support and they do not know what it is. I can't upload important file, my job is in jeopardy! This is a new laptop with 32bit windows professional OEM. Thanks in advance.
BSOD Help and Support

Our Sites

Site Links

About Us

Find Us

Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

© Designer Media Ltd

All times are GMT -5. The time now is 00:31.
Twitter Facebook Google+