Windows 7 Forums
Welcome to Windows 7 Forums. Our forum is dedicated to helping you find support and solutions for any problems regarding your Windows 7 PC be it Dell, HP, Acer, Asus or a custom build. We also provide an extensive Windows 7 tutorial section that covers a wide range of tips and tricks.

Windows 7: BSOD: Paused YouTube video, left for 15 min, system rebooted

27 Mar 2015   #1

Windows 7 Ultimate x64
BSOD: Paused YouTube video, left for 15 min, system rebooted

I had a YouTube video paused (not full screen) and I had left the system idle like that for approx. 15 minutes. When I came back the system had said that it had recovered from an unexpected shutdown. Bluescreenview shows me the following error:
032715-15210-01.dmp 3/27/2015 9:34:11 PM IRQL_NOT_LESS_OR_EQUAL 0x0000000a 00000000`00000000 00000000`00000002 00000000`00000001 fffff800`02cce0cf ntoskrnl.exe ntoskrnl.exe+74ec0 NT Kernel & System Microsoft® Windows® Operating System Microsoft Corporation 6.1.7601.18741 (win7sp1_gdr.150202-1526) x64 ntoskrnl.exe+74ec0 C:\Windows\Minidump\032715-15210-01.dmp 4 15 7601 313,128 3/27/2015 9:35:45 PM

I can't make heads or tails of this and I fix computers around town as a freelance Technician

My System SpecsSystem Spec
28 Mar 2015   #2
SGT Oddball


Only one dump makes it a little harder to find a definitive cause, it looks like Symantec/Norton network security driver could well be the cause of the problem - Driver Reference Table - SYMNETS.SYS

*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *

Use !analyze -v to get detailed debugging information.

BugCheck A, {0, 2, 1, fffff80002cce0cf}

*** WARNING: Unable to verify timestamp for SYMNETS.SYS
*** ERROR: Module load completed but symbols could not be loaded for SYMNETS.SYS
Probably caused by : NETIO.SYS ( NETIO!WfpExpireEntryLru+17 )

Followup: MachineOwner

0: kd> !analyze -v
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *

An attempt was made to access a pageable (or completely invalid) address at an
interrupt request level (IRQL) that is too high.  This is usually
caused by drivers using improper addresses.
If a kernel debugger is available get the stack backtrace.
Arg1: 0000000000000000, memory referenced
Arg2: 0000000000000002, IRQL
Arg3: 0000000000000001, bitfield :
	bit 0 : value 0 = read operation, 1 = write operation
	bit 3 : value 0 = not an execute operation, 1 = execute operation (only on chips which support this level of status)
Arg4: fffff80002cce0cf, address which referenced memory

Debugging Details:

WRITE_ADDRESS: GetPointerFromAddress: unable to read from fffff80002efd100
GetUlongFromAddress: unable to read from fffff80002efd1c0
 0000000000000000 Nonpaged pool


fffff800`02cce0cf 488713          xchg    rdx,qword ptr [rbx]




PROCESS_NAME:  nis.exe

ANALYSIS_VERSION: 6.3.9600.17298 (debuggers(dbg).141024-1500) amd64fre

TRAP_FRAME:  fffff8800bbcff30 -- (.trap 0xfffff8800bbcff30)
NOTE: The trap frame does not contain all registers.
Some register values may be zeroed or incorrect.
rax=fffffa800b980ad0 rbx=0000000000000000 rcx=0000000000000000
rdx=fffff8800bbd0130 rsi=0000000000000000 rdi=0000000000000000
rip=fffff80002cce0cf rsp=fffff8800bbd00c0 rbp=0000000000000004
 r8=fffff8800bbd0130  r9=fffff8800198ac90 r10=0000000000000000
r11=0000000000000040 r12=0000000000000000 r13=0000000000000000
r14=0000000000000000 r15=0000000000000000
iopl=0         nv up ei pl nz na po nc
fffff800`02cce0cf 488713          xchg    rdx,qword ptr [rbx] ds:00000000`00000000=????????????????
Resetting default scope

LAST_CONTROL_TRANSFER:  from fffff80002cc3469 to fffff80002cc3ec0

fffff880`0bbcfde8 fffff800`02cc3469 : 00000000`0000000a 00000000`00000000 00000000`00000002 00000000`00000001 : nt!KeBugCheckEx
fffff880`0bbcfdf0 fffff800`02cc20e0 : 00000000`00000010 fffff880`0bbd0120 00000000`0000000b 00000000`00000000 : nt!KiBugCheckDispatch+0x69
fffff880`0bbcff30 fffff800`02cce0cf : 00000000`00000003 00000000`00000002 00000000`00000003 00000000`00000002 : nt!KiPageFault+0x260
fffff880`0bbd00c0 fffff880`017579c7 : 00000000`00000004 fffff880`0bbd03a0 00000000`0000d40d fffffa80`0c7eb7c8 : nt!KeAcquireInStackQueuedSpinLockAtDpcLevel+0x4f
fffff880`0bbd0110 fffff880`018e608d : fffffa80`10c42580 fffffa80`0cfc8550 fffff880`0bbd03a0 00000000`0000d40d : NETIO!WfpExpireEntryLru+0x17
fffff880`0bbd0160 fffff880`018ad7b7 : 00000000`00000004 fffff8a0`08780032 fffff880`0bbd03d0 fffffa80`00000001 : tcpip!WfpAleCloseRemoteEndpointConnection+0x2d
fffff880`0bbd0190 fffff880`01925e5b : fffffa80`10c42580 fffffa80`107bb56a 00000000`00000001 fffffa80`10c42580 : tcpip! ?? ::FNODOBFM::`string'+0x20f72
fffff880`0bbd02e0 fffff880`019261e2 : 00000dd4`0000000b fffffa80`107bb4a0 fffffa80`09f6cea0 00000000`00000001 : tcpip!WfpAleHandleSendCompletion+0xeb
fffff880`0bbd0400 fffff880`019306b2 : 00000000`00000000 00000000`00000001 00000000`00000000 fffffa80`09fb84e8 : tcpip!WfpAlepAuthorizeSendCompletion+0x32
fffff880`0bbd0450 fffff880`01551af2 : 00000000`00000dd4 00000000`00000dd4 fffffa80`102a2e00 00000000`00000001 : tcpip!WfpAleCompleteOperation+0x162
fffff880`0bbd04f0 fffff880`0b41e7bb : 00000000`00000000 00000000`00000000 fffffa80`1055b130 00000000`00000030 : fwpkclnt!FwpsCompleteOperation0+0x1e
fffff880`0bbd0520 00000000`00000000 : 00000000`00000000 fffffa80`1055b130 00000000`00000030 00000000`00000dd4 : SYMNETS+0x1e7bb


fffff880`017579c7 488b4310        mov     rax,qword ptr [rbx+10h]


SYMBOL_NAME:  NETIO!WfpExpireEntryLru+17

FOLLOWUP_NAME:  MachineOwner




IMAGE_VERSION:  6.1.7601.18327

FAILURE_BUCKET_ID:  X64_0xA_NETIO!WfpExpireEntryLru+17

BUCKET_ID:  X64_0xA_NETIO!WfpExpireEntryLru+17


FAILURE_ID_HASH_STRING:  km:x64_0xa_netio!wfpexpireentrylru+17

FAILURE_ID_HASH:  {fcdee258-ad7b-b100-5f3a-ac9544c5fd1f}

Followup: MachineOwner
My System SpecsSystem Spec

 BSOD: Paused YouTube video, left for 15 min, system rebooted

Thread Tools

Similar help and support threads
Thread Forum
BSOD while watching youtube video
Was watching a fairly short youtube video, fullscreen 720p, clicked on the timeline on the bottom to rewind a bit, aaaaand bam. Never had a problem with BSOD's since January 2012 when I built it, but I've gotten maybe 3 or so since I upgraded my CPU and graphics card in January 2014. Let me...
BSOD Help and Support
BSOD while watching YouTube video
I was watching a youtube video, then out of nowhere a BSOD happened with: DRIVER_IQRL_LESS_OR_NO_EQUAL Here are the DM log files. Please help me...
BSOD Help and Support
BSOD on anything Video-YouTube
When I try to figure out what going on it BSOD on me and it mostly does it during Video or Youtube play. I was not able to get the dump from the system as it was not allowing me to copy. I have install a Video card and also running a memory test to see if that is any issues. From what I can get...
BSOD Help and Support
BSOD watching YouTube video
Hi Today I got a BSOD randomly (as far as I could tell). I've had my comp for almost exactly a year, and this is the first I've gotten. Part of why I'm concerned is because the warranty is about to expire. Below is the window that popped up after restart, and attached is of course the file...
BSOD Help and Support
BSOD paused Youtube player, related to athr.sys?
Hello, I would appreciate it if someone could help me look at my BSOD crash data. My system data are: Windows 7 Professional 32 bit (Traditional Chinese version) OEM on a Lenovo X200s System's age is about 2yrs9mths OS's age is the same, I have not reinstalled. Just prior to this crash, I...
BSOD Help and Support
BSOD while watching a youtube video.
Got a BSOD while watching a youtube video, 480p medium sized window. I also had my music player open but wasn't listening to music at the time of the BSOD. Files: Help finding what caused this appreciated! Thanks :)
BSOD Help and Support

Our Sites

Site Links

About Us

Find Us

Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

© Designer Media Ltd

All times are GMT -5. The time now is 00:05.
Twitter Facebook Google+ Seven Forums iOS App Seven Forums Android App