Windows 7 Forums
Welcome to Windows 7 Forums. Our forum is dedicated to helping you find support and solutions for any problems regarding your Windows 7 PC be it Dell, HP, Acer, Asus or a custom build. We also provide an extensive Windows 7 tutorial section that covers a wide range of tips and tricks.

Windows 7: Random BSOD on Multiple PC'sProbably caused by : nvcwfpco.sys

25 Jun 2014   #1

Windows 7 32bit
Random BSOD on Multiple PC'sProbably caused by : nvcwfpco.sys

I'm an IT Service Desk manager for a reasonably large site, since upgrading our PC's to Win 7 we have been seeing approx. 5 BSOD's per day with the same minidump errors seeming to relate to what i assume is our clients recommended VPN software.
Results from WinDBG are as below, any assistance would be greatly appreciated:

Microsoft (R) Windows Debugger Version 6.2.9200.20512 X86
Copyright (c) Microsoft Corporation. All rights reserved.
Loading Dump File [C:\Users\dtarrant\Desktop\BSOD Issues\062514-24523-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available
Symbol search path is: SRV*C:\Symbols*
Executable search path is: 
Windows 7 Kernel Version 7601 (Service Pack 1) MP (4 procs) Free x86 compatible
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 7601.17514.x86fre.win7sp1_rtm.101119-1850
Machine Name:
Kernel base = 0x82a08000 PsLoadedModuleList = 0x82b52850
Debug session time: Wed Jun 25 14:22:43.724 2014 (UTC + 10:00)
System Uptime: 0 days 22:39:25.015
Loading Kernel Symbols
Loading User Symbols
Loading unloaded module list
* *
* Bugcheck Analysis *
* *
Use !analyze -v to get detailed debugging information.
BugCheck D1, {b69b09cb, 2, 0, 95a27def}
Unable to load image \SystemRoot\system32\DRIVERS\nvcwfpco.sys, Win32 error 0n2
*** WARNING: Unable to verify timestamp for nvcwfpco.sys
*** ERROR: Module load completed but symbols could not be loaded for nvcwfpco.sys
Probably caused by : nvcwfpco.sys ( nvcwfpco+6def )
Followup: MachineOwner
2: kd> !analyze -v
* *
* Bugcheck Analysis *
* *
An attempt was made to access a pageable (or completely invalid) address at an
interrupt request level (IRQL) that is too high. This is usually
caused by drivers using improper addresses.
If kernel debugger is available get stack backtrace.
Arg1: b69b09cb, memory referenced
Arg2: 00000002, IRQL
Arg3: 00000000, value 0 = read operation, 1 = write operation
Arg4: 95a27def, address which referenced memory
Debugging Details:
READ_ADDRESS: GetPointerFromAddress: unable to read from 82b72718
Unable to read MiSystemVaType memory at 82b521a0
95a27def 668b02 mov ax,word ptr [edx]
TRAP_FRAME: 8db1be90 -- (.trap 0xffffffff8db1be90)
ErrCode = 00000000
eax=000007f5 ebx=00000000 ecx=000007f5 edx=b69b09cb esi=85dc6000 edi=0000b098
eip=95a27def esp=8db1bf04 ebp=8db1bf3c iopl=0 nv up ei ng nz ac po nc
cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00010292
95a27def 668b02 mov ax,word ptr [edx] ds:0023:b69b09cb=????
Resetting default scope
LAST_CONTROL_TRANSFER: from 95a27def to 82a495cb
8db1be90 95a27def badb0d00 b69b09cb 00000000 nt!KiTrap0E+0x2cf
WARNING: Stack unwind information not available. Following frames may be wrong.
8db1bf3c 95a28210 8db1bf78 95a3144f 8db1bf80 nvcwfpco+0x6def
8db1bf84 95a25e3c 8db1bfb4 8db1bfbc 00000000 nvcwfpco+0x7210
8db1bfc0 95a24c08 000002bb 8db1bfe8 8db1c004 nvcwfpco+0x4e3c
8db1bfe0 95a24489 8db1c004 8db1c004 8db1bff4 nvcwfpco+0x3c08
8db1bff8 95a2374c 85e9fe28 8db1c018 8db1c040 nvcwfpco+0x3489
8db1c084 8b9d2ede 00000000 00000000 b69b1150 nvcwfpco+0x274c
8db1c0a8 8b9bcf32 00000000 95a23200 8db1c2e4 NETIO!ProcessNonBufferedCallout+0x23
8db1c104 8b9bdad0 00000004 8db1c2e4 8db1c2f8 NETIO!ProcessCallout+0x184
8db1c13c 8b9bda6e 00000004 858d2588 8db1c2e4 NETIO!ProcessFastCalloutClassify+0x30
8db1c248 8be75057 00000004 8db1c2e4 8db1c2f8 NETIO!KfdClassify+0x115
8db1c454 8be7d627 88a37020 876e55e8 882dc7a0 tcpip!ShimIpPacketOutV4+0x1bd
8db1c488 8be9ac1a 00000000 88a37020 876e55e8 tcpip!IppInspectLocalPacketsOut+0x5c
8db1c590 8bea06c1 876e5544 882d8fa8 87d56698 tcpip!Ipv4pFragmentPacketHelper+0x195
8db1c5e0 8be9f92a 8bf00da0 00000000 00000000 tcpip!IppFragmentPackets+0xe7
8db1c618 8be7d449 8bf00da0 876e5544 876e55e0 tcpip!IppDispatchSendPacketHelper+0x266
8db1c6b8 8be7df07 006e5544 8db1c798 85a6eac8 tcpip!IppPacketizeDatagrams+0x8d6
8db1c738 8be7b031 00000000 00000007 8bf00da0 tcpip!IppSendDatagramsCommon+0x652
8db1c758 8be72d5f 876d2690 8db1c770 00000000 tcpip!IpNlpSendDatagrams+0x4b
8db1c7e4 8be70c3c 876d2690 8db1c8e0 888c67d8 tcpip!IppSlowSendDatagram+0x31
8db1c84c 8be71beb 876d2690 00000001 8db1c8e0 tcpip!IpNlpFastSendDatagram+0x1067
8db1c99c 8be8fcf6 88dee2f0 00000002 00000002 tcpip!TcpTcbSend+0x787
8db1c9ec 8be99272 00000002 8db1caa0 00000000 tcpip!TcpFlushDelay+0x1f1
8db1ca38 82a82039 87712e38 00000002 1c26804f tcpip!TcpPeriodicTimeoutHandler+0x389
8db1ca7c 82a81fdd 8db00120 8db1cba8 00000001 nt!KiProcessTimerDpcTable+0x50
8db1cb68 82a81e9a 8db00120 8db1cba8 00000000 nt!KiProcessExpiredTimerList+0x101
8db1cbdc 82a8000e 004fc7cd 85e91030 8db05800 nt!KiTimerExpiration+0x25c
8db1cc20 82a7fe38 00000000 0000000e 0000a0a9 nt!KiRetireDpcList+0xcb
8db1cc24 00000000 0000000e 0000a0a9 a9575b80 nt!KiIdleLoop+0x38
95a27def 668b02 mov ax,word ptr [edx]
SYMBOL_NAME: nvcwfpco+6def
MODULE_NAME: nvcwfpco
IMAGE_NAME: nvcwfpco.sys
FAILURE_BUCKET_ID: 0xD1_nvcwfpco+6def
BUCKET_ID: 0xD1_nvcwfpco+6def
Followup: MachineOwner
2: kd> .trap 0xffffffff8db1be90
ErrCode = 00000000
eax=000007f5 ebx=00000000 ecx=000007f5 edx=b69b09cb esi=85dc6000 edi=0000b098
eip=95a27def esp=8db1bf04 ebp=8db1bf3c iopl=0 nv up ei ng nz ac po nc
cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00010292
95a27def 668b02 mov ax,word ptr [edx] ds:0023:b69b09cb=????

My System SpecsSystem Spec
27 Jun 2014   #2

Microsoft Community Contributor Award Recipient

Microsoft Windows 10 Pro Insider Preview 64-bit

nvcwfpco.sys is Nortel VPN.

First try to update it. If there is no change after the update or there is no feasible update, uninstalling Nortel VPN might be an attempt.
My System SpecsSystem Spec

 Random BSOD on Multiple PC'sProbably caused by : nvcwfpco.sys

Thread Tools

Similar help and support threads
Thread Forum
Multiple BSOD's caused by ntoskrnl.exe, help!
Hello, this is my first time posting in a forum such as this so please forgive me for any fault in etiquette. My issue is that my laptop has been continuously crashing with BSOD errors for seemingly no reason. My original configuration was in windows 8.1 and started experiencing repeated crashes...
BSOD Help and Support
Multiple BSOD's caused by everything from Youtube to BF3
I am getting a Blue Screen that says "A device driver attempting to corrupt the system has been caught. The faulty driver currently on the kernel stack must be replaced" Then it dumps my memory and reboots the computer. I have been getting these BSOD's daily at random intervals for about two weeks...
BSOD Help and Support
BSOD - multiple caused by ntoskrnl.exe
On win 7 x64, on differents machines HP8100 SFF, DC7800SFF, I get randomly BSOD, all caused by the file ntoskrnl.exe. As attach the diagnostic results file on a HP8100. I think it is a driver issue (old version? incompatible?) Thanks for your analyse.
BSOD Help and Support
multiple BSOD, almost always caused by ntoskrnl.exe+7cc40
Hello, I must admit I'm completely lost by now and need help. The problem is, I have this notebookl: HP G72-b20SA Notebook PC Product Specifications HP G72-b20SA Notebook PC - HP Customer Care (United States - English) (HP G72-b20SA), and I'm getting random BSODs at completely random times....
BSOD Help and Support
multiple BSOD caused by ntoskrnl.exe
Hello, a month or so ago (just couple of months after I bought a new PC, pretty decent\expensive for my country) I started to experience a lot of BSODs, only at the time I started any game or any video file. Sometimes I could play for 3-4 hours or watch a video, sometimes it crashes 1-2minutes...
BSOD Help and Support

Our Sites

Site Links

About Us

Find Us

Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

Designer Media Ltd

All times are GMT -5. The time now is 02:44.
Twitter Facebook Google+