BSOD when surfing! tcpip.sys, ntoskrnl.exe, ntkrnlmp.exe and others

7eelop · 28 Mar 2016

Hello everyone!

I've been getting those stupid blue screens at random times. I usually clean everything so I have only 4 of all the minidumps. I've been trying to fix the tcpip problem but nothing.

I think it all started when I changed my VPN provider and client. I am not 100% sure, but it was around that time. After going back to my old client, I still got two blue screens. I didn't touch any of the drivers and I usually never update them.

Chances for malware are low, but still exist. I checked with malwarebytes and others (I have the premium edition and bitdefender premium) but nothing was found.

I did a memtest with memtest86, I don't know if it scanned the whole ram ( DDR3 made of 2GB and 4GB ) and after 3 passes no errors. Also CPU and GPU temperatures are fine. I tried to repair the hard drive too, using the windows tool and no problems either.

Also different dump analysis programs, indicate different problems, so I can't spot the source.

Thanks for reading!

ICIT2LOL · 29 Mar 2016

Hello and welcome nailza mate for starters what memtest did you use? we only use this one
RAM - Test with Memtest86+ and it has to run for at least 8 passes otherwise you may well not bother.

Code:

IMAGE_NAME:  ntkrnlmp.exe

DEBUG_FLR_IMAGE_TIMESTAMP:  56bb7781

IMAGE_VERSION:  6.1.7601.23349

FAILURE_BUCKET_ID:  X64_RAISED_IRQL_FAULT_vsserv.exe_nt!KiSystemServiceExit+245

BUCKET_ID:  X64_RAISED_IRQL_FAULT_vsserv.exe_nt!KiSystemServiceExit+245

ANALYSIS_SOURCE:  KM

FAILURE_ID_HASH_STRING:  km:x64_raised_irql_fault_vsserv.exe_nt!kisystemserviceexit+245

FAILURE_ID_HASH:  {7e9f2f5a-c8f7-350e-d3b5-490f9ba5e969}

Followup: MachineOwner

The highlighted dump is I think something to do with Bitdefender so are you running it??

Also some system specs please as it is very difficult to help if we do not know what we are dealing with.
System Info - See Your System Specs

Edit I meant to mention if errors in the memtest come up sooner than 8 passes you can stopp it.

7eelop · 29 Mar 2016

ICIT2LOL said:

The highlighted dump is I think something to do with Bitdefender so are you running it??

Also some system specs please as it is very difficult to help if we do not know what we are dealing with.
System Info - See Your System Specs

Edit I meant to mention if errors in the memtest come up sooner than 8 passes you can stopp it.

Hi ICIT2LOL and thanks for your response.

Yes I run bitdefender and malwarebytes, and they both seem to be the ones causing it. Any suggestions on fixxing it? Did you check the rest of the minidumps?

I used to get BSOD in the past because of Bitdefender and I managed to fix the problem by reinstalling it.

I used the memtest that you used memtest86+, but didn't let it for that long. I will do it today. I am using a laptop and I don't think I could remove any of the slots (at least I don't want to). Is there a way to test both of them while they are both in?

My system's specs are :

Intel(R) Core(TM) i5-3210M CPU @ 2.50GHz
Type2 - Board Vendor Name1 Type2 - Board Product Name1
InsydeH2O Version 03.72.016.80
6.00 GB, 5.89 GB
Hitachi HTS547564A9E384 ATA Device
(1) Realtek High Definition Audio (2) Intel(R) Display Audio
(1) Realtek Wifi Display VGA Adapter (2) Intel(R) HD Graphics 4000
Microsoft Windows 7 Home Premium 64-bit 7601 Multiprocessor Free Service Pack 1

Thanks for your time once again

ICIT2LOL · 30 Mar 2016

Now sorry late reply - I would at least uninstall MBAM - you can always run the free version late or you could change to another AV setup altogether. However Bitdefender is a good AV and if you have paid for it recently makes that a nuisance to have uninstall and reinstall.

Now if you uninstall the Bitdefender please use the correct removal tool as the Control Panel uninstall is not as thorough as the Bitdefender system removal tool Uninstall Bitdefender

Now if you take both off and the problem resolves then I would install Bitdefender just to try once more and if problems persist then there are free AV's here Free Windows Desktop Software Security List | Gizmo's Freeware loook for the real time ones but steer clear of AVG McAfee and Spybot they are not that much good - in my mind anyway.

The memtest mate has to be run for at least 8 passes otherwise as I might have mentioned you may just well not bother. If errors come up before then you can stop the test and then it is a matter of testing each stick on it's own to find the bad stick. If you are really unlucky they both might be bad but unusual to have that happen.

ICIT2LOL · 30 Mar 2016

Now sorry late reply - I would at least uninstall MBAM - you can always run the free version late or you could change to another AV setup altogether. However Bitdefender is a good AV and if you have paid for it recently makes that a nuisance to have uninstall and reinstall.

Now if you uninstall the Bitdefender please use the correct removal tool as the Control Panel uninstall is not as thorough as the Bitdefender system removal tool Uninstall Bitdefender

Now if you take both off and the problem resolves then I would install Bitdefender just to try once more and if problems persist then there are free AV's here Free Windows Desktop Software Security List | Gizmo's Freeware loook for the real time ones but steer clear of AVG McAfee and Spybot they are not that much good - in my mind anyway.

The memtest mate has to be run for at least 8 passes otherwise as I might have mentioned you may just well not bother. If errors come up before then you can stop the test and then it is a matter of testing each stick on it's own to find the bad stick. If you are really unlucky they both might be bad but unusual to have that happen.

7eelop · 30 Mar 2016

ICIT2LOL said:

Now sorry late reply - I would at least uninstall MBAM - you can always run the free version late or you could change to another AV setup altogether. However Bitdefender is a good AV and if you have paid for it recently makes that a nuisance to have uninstall and reinstall.

Now if you uninstall the Bitdefender please use the correct removal tool as the Control Panel uninstall is not as thorough as the Bitdefender system removal tool Uninstall Bitdefender

Now if you take both off and the problem resolves then I would install Bitdefender just to try once more and if problems persist then there are free AV's here Free Windows Desktop Software Security List | Gizmo's Freeware loook for the real time ones but steer clear of AVG McAfee and Spybot they are not that much good - in my mind anyway.

The memtest mate has to be run for at least 8 passes otherwise as I might have mentioned you may just well not bother. If errors come up before then you can stop the test and then it is a matter of testing each stick on it's own to find the bad stick. If you are really unlucky they both might be bad but unusual to have that happen.

No worries, thanks for your reply anyways :) . I see. I did let it run for 8 passes and I got 0 errors (tested both sticks together).

So I guess malwarebytes and bitdefender are the problems right? Is there anything else that might be causing this problem? I've paid for both, so I will try and clean then and then reinstall them and see if they get back to normal.

**axe0** · 30 Mar 2016

You could try to exclude Bitdefender in Malwarebytes and otherwise, but when I look at the code ICIT2LOL posted the usual solution is a repair install/reinstall.

The instructions for adding files and folders to the Bitdefender Total Security exclusions list is actually on their website at this link:
How to add exceptions in Bitdefender 2014
=For 32-bit supported OS: Windows XP, Windows Vista / 7 / 8:
You must add the following files to the Bitdefender exclusion list:
C:\Program Files\Malwarebytes Anti-Malware\mbam.exe
C:\Program Files\Malwarebytes Anti-Malware\mbamdor.exe
C:\Program Files\Malwarebytes Anti-Malware\mbampt.exe
C:\Program Files\Malwarebytes Anti-Malware\mbamservice.exe
C:\Program Files\Malwarebytes Anti-Malware\mbamscheduler.exe
=For 64-bit supported OS: Windows Vista / 7 / 8
You must add the following files to the Bitdefender exclusion list:
C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe
C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamdor.exe
C:\Program Files (x86)\Malwarebytes Anti-Malware\mbampt.exe
C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe
C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe
Once you get those files added to the exclusion list, that is all that is needed in that application. Save the information and close Bitdefender.
Next, please follow these instructions to add Bitdefender Total Security installation folder to the Malwarebytes Premium “Malware Exclusions” list:
Step 1. Open the Malwarebytes application.
Step 2. Click on “Settings”
Step 3. Click “Malware Exclusions” in the left column.
Step 4. Click on “Add Folder”
Step 4. Navigate to C:\Program Files
Step 5. Click once on the “Bitdefender Total Security” folder to highlight it.
Step 6. Click on “Select Folder” button.
Step 7. Close Malwarebytes.
Step 8. Reboot your computer. <—Very Important

The quote is a copy/paste from a reply I got from Malwarebytes, I'm currently having a bit of trouble when enabling the web protection, it gives me a 0xC2(BAD_POOL_CALLER) BSOD.

ICIT2LOL · 30 Mar 2016

Yep I am beginning to think the MBAM is stalling the Bitdefender for some reason and why I was interested in whether it is the paid for or free version.
As I think I mentioned before my Kaspersky doesn't like MBAM or other paid for versions of scanners on board so I only run the free stuff. Having said that I think axe has probably the better solution.

BorisTheAnimal · 30 Mar 2016

Three of the dumps complained about mwac.sys which is the process known as Malwarebytes Web Access Control belongs to software MBAMWebAccessControl or Malwarebytes Anti-Malware version by Malwarebytes (Malwarebytes | Free Anti-Malware & Internet Security Software).

I would recommend to uninstall MB and use another on in it's stead.

Cheers, Boris :)

7eelop · 30 Mar 2016

axe0 said:

You could try to exclude Bitdefender in Malwarebytes and otherwise, but when I look at the code ICIT2LOL posted the usual solution is a repair install/reinstall.

The instructions for adding files and folders to the Bitdefender Total Security exclusions list is actually on their website at this link:
How to add exceptions in Bitdefender 2014
=For 32-bit supported OS: Windows XP, Windows Vista / 7 / 8:
You must add the following files to the Bitdefender exclusion list:
C:\Program Files\Malwarebytes Anti-Malware\mbam.exe
C:\Program Files\Malwarebytes Anti-Malware\mbamdor.exe
C:\Program Files\Malwarebytes Anti-Malware\mbampt.exe
C:\Program Files\Malwarebytes Anti-Malware\mbamservice.exe
C:\Program Files\Malwarebytes Anti-Malware\mbamscheduler.exe
=For 64-bit supported OS: Windows Vista / 7 / 8
You must add the following files to the Bitdefender exclusion list:
C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe
C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamdor.exe
C:\Program Files (x86)\Malwarebytes Anti-Malware\mbampt.exe
C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe
C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe
Once you get those files added to the exclusion list, that is all that is needed in that application. Save the information and close Bitdefender.
Next, please follow these instructions to add Bitdefender Total Security installation folder to the Malwarebytes Premium “Malware Exclusions” list:
Step 1. Open the Malwarebytes application.
Step 2. Click on “Settings”
Step 3. Click “Malware Exclusions” in the left column.
Step 4. Click on “Add Folder”
Step 4. Navigate to C:\Program Files
Step 5. Click once on the “Bitdefender Total Security” folder to highlight it.
Step 6. Click on “Select Folder” button.
Step 7. Close Malwarebytes.
Step 8. Reboot your computer. <—Very Important

The quote is a copy/paste from a reply I got from Malwarebytes, I'm currently having a bit of trouble when enabling the web protection, it gives me a 0xC2(BAD_POOL_CALLER) BSOD.

Thanks axe0! It is a good suggestion. Hope it will work.

BorisTheAnimal said:

Three of the dumps complained about mwac.sys which is the process known as Malwarebytes Web Access Control belongs to software MBAMWebAccessControl or Malwarebytes Anti-Malware version by Malwarebytes (Malwarebytes | Free Anti-Malware & Internet Security Software).

I would recommend to uninstall MB and use another on in it's stead.

Cheers, Boris :)

ICIT2LOL said:

Yep I am beginning to think the MBAM is stalling the Bitdefender for some reason and why I was interested in whether it is the paid for or free version.
As I think I mentioned before my Kaspersky doesn't like MBAM or other paid for versions of scanners on board so I only run the free stuff. Having said that I think axe has probably the better solution.

The thing is that I only had a problem with bitdefender in the past (with the 2015 version) and it stopped when I installed the 2016 one. I've been using the malwarebytes premium for a while as well and no problems either.

By the way I tried some 'tcpip.sys remedies like updating drivers, uninstalling useless programs, removing all previous vpn software and cleaning the registry, and everything has been ok for the last few days. Hopefully I will have no more BSOD with axe0's recommendation.

The thing is that I've been using mbam and bdef combined for a while and I've had no problems. Is there a chance that it might be a virus that infected the antivirus software?