NETIO.SYS BSOD whilst using a torrenting application.

[kilebantick]

Hey there users of Sevenforums.

I'm currently having an infuriating issue with my computer.
As of late (I've searched for a cause, to no avail!) I've been having a rather nasty and annoying issue with my computer.

As soon as I open up uTorrent (a torrenting application) and begin to seed or download anything (the majority of which is Adventure Time, if that helps at all) and it downloads/uploads for a minute, to 5 minutes, I'll get a BSOD saying something about "NETIO.SYS".

My limited Google-fu has yielded nothing, other than that my AV may be at fault, but it was uninstalled and the issue persisted.

ALL of my drivers are currently as up to date as is humanly possible (without the use of a time machine). My install is currently quite small as I'm not wanting to make my old as hell Vertex 2's too angry, I don't have many intrusive applications installed either.

I have attached my .dmp file, I hope that it's the correct file to upload.

Any and all help is greatly appreciated as this is really frustrating.

 

[YoYo155]

Hello, please follow the http://www.sevenforums.com/bsod-help-support/96879-blue-screen-death-bsod-posting-instructions.html .

What I can see from the dump is pretty much what I expected it to be.

BugCheck D1, {28, 2, 0, fffff88001d1e6fd}

Probably caused by : NETIO.SYS ( NETIO!RtlCopyBufferToMdl+1d )

k
 # Child-SP          RetAddr           Call Site
00 fffff880`037bc648 fffff800`02ed2169 nt!KeBugCheckEx
01 fffff880`037bc650 fffff800`02ed0de0 nt!KiBugCheckDispatch+0x69
02 fffff880`037bc790 fffff880`01d1e6fd nt!KiPageFault+0x260
03 fffff880`037bc920 fffff880`01ea84eb NETIO!RtlCopyBufferToMdl+0x1d
04 fffff880`037bc980 fffff880`01e740f6 tcpip! ?? ::FNODOBFM::`string'+0x1bb3f
05 fffff880`037bc9f0 fffff880`01e636b8 tcpip!TcpTcbCarefulDatagram+0x1a46
06 fffff880`037bcba0 fffff880`01e6297a tcpip!TcpTcbReceive+0x37c
07 fffff880`037bccb0 fffff880`01e63aeb tcpip!TcpMatchReceive+0x1fa
08 fffff880`037bce00 fffff880`01e5bf17 tcpip!TcpPreValidatedReceive+0x36b
09 fffff880`037bced0 fffff880`01e5ba8a tcpip!IppDeliverListToProtocol+0x97
0a fffff880`037bcf90 fffff880`01e5b089 tcpip!IppProcessDeliverList+0x5a
0b fffff880`037bd030 fffff880`01e58d2f tcpip!IppReceiveHeaderBatch+0x23a
0c fffff880`037bd110 fffff880`01e58302 tcpip!IpFlcReceivePackets+0x64f
0d fffff880`037bd310 fffff880`01ecabca tcpip!FlpReceiveNonPreValidatedNetBufferListChain+0x2b2
0e fffff880`037bd3f0 fffff800`02ede878 tcpip! ?? ::FNODOBFM::`string'+0x49ca2
0f fffff880`037bd440 fffff880`01e57e22 nt!KeExpandKernelStackAndCalloutEx+0xd8
10 fffff880`037bd520 fffff880`01cda0eb tcpip!FlReceiveNetBufferListChain+0xb2
11 fffff880`037bd590 fffff880`01ca3ad6 ndis!ndisMIndicateNetBufferListsToOpen+0xdb
12 fffff880`037bd600 00000000`00000000 ndis!ndisMDispatchReceiveNetBufferLists+0x1d6

The three drivers on the stack, ndis | tcpip | NETIO are all legitimate Windows components so they are not the cause, all of those are network drivers so I was looking for drivers that do just that
not surprisingly athrx is awfully outdated.

lmvm athrx
start             end                 module name
fffff880`06667000 fffff880`067e4000   athrx    T (no symbols)           
    Loaded symbol image file: athrx.sys
    Image path: \SystemRoot\system32\DRIVERS\athrx.sys
    Image name: athrx.sys
    Timestamp:        [COLOR=Red]Mon Oct 05 19:33:57 2009[/COLOR]

• Driver Reference Table - athrx.sys

I don't have any information about the machine as no other file was uploaded,
but please update the driver.

• ATHEROS drivers for Microsoft Windows
  

 

[kilebantick]

Hey mate. I tried the SF_Diagnostic tool last night and it didn't put a folder on my desktop unfortunately. It decided to put it in D:\users\ect\ect\ect\ect as opposed to C:\users\ect\ect\ect\ect, but found it nonetheless.

The Atheros driver is for my TP-Link wireless card which has an Atheros chip on it. The card is currently out, yet unfortunately the issue is still happening.

Here is that .zip you were asking for mate.
Thanks for the help!

 

[YoYo155]

No new dumps in that file :/ ..
Look in the minidump folder for any new ones.

C:\Windows\minidump

 

[kilebantick]

Oh my, I'm really sorry about that. I had no idea I had to let the computer completely flush it's memory before I did a hard reset, my apologies.

Here is the dump file generated 30 seconds ago from a BSOD I deliberately caused by opening uTorrent .

Thanks for your help mate.

 

[YoYo155]

It's the same but with a different culprit .

lmvm Rt64win7
start             end                 module name
fffff880`066b0000 fffff880`06735000   Rt64win7 T (no symbols)           
    Loaded symbol image file: Rt64win7.sys
    Image path: \SystemRoot\system32\DRIVERS\Rt64win7.sys
    Image name: Rt64win7.sys
    Timestamp:        [U][COLOR=Red][B]Fri Jun 10 09:33:15 2011[/B][/COLOR][/U]

• Driver Reference Table - Rt64win7.sys

Description | Version | Update | File Size | Download

Win7 and WinServer 2008 R2 Auto Installation Program (SID:1606895) | 7.075 | 2013/9/24 | 5962k | Choose a server​

 

[kilebantick]

I have updated it (Haha, 3 years newer! Crazy!!!) and am doing tests now to see how it'll go. I'll get back to you soon.
Thanks once again for your help YoYo, it is greatly appreciated.

Edit: Yes, this is working, and working very well at that. My network throughput to my server has almost doubled in speed (as well as no random stutterings) and my computer isn't BSODing at all whilst having uTorrent open (did I mention it's grabbing episodes far quicker than earlier).

I'll not mark this as solved just yet, I'll wait an hour or so, but I'm EXTREMELY happy and thankful so far YoYo.

If only there were some way I could repay you mate. Thank you!

 

[YoYo155]

If only there were some way I could repay you mate. Thank you!

No need , I'm happy I could be of an assistant.

In due time, please mark the thread as solved.

 

[kilebantick]

Yup. Perfectly fixed! Thanks mate! Time to enjoy some Adventure Time with the girlfriend, she'll be wrapped!!!

 

[YoYo155]

Good news and you're welcome, enjoy your stay .

 

[kilebantick]

Hey mate. The issue returned shortly after it was seemingly fixed. The computer will "last" longer now before BSODing, but the end result is always the same. A nice healthy crash .

Here is a new and updated dump.

Thanks once again for the help mate.

 

[YoYo155]

Hmm that's interesting, fault is exactly the same as before.

DRIVER_IRQL_NOT_LESS_OR_EQUAL (d1)

Arguments:
Arg1: 00000000000000[hl][B]28[/B][/hl][B], memory referenced[/B]
Arg2: 000000000000000[COLOR=Red][B]2, IRQL[/B][/COLOR]
Arg3: 0000000000000000, value 0 = read operation, 1 = write operation
Arg4: [COLOR=RoyalBlue][U]fffff88001c106fd[/U][/COLOR], address which referenced memory

Probably caused by : NETIO.SYS [HL]( NETIO![U][COLOR=RoyalBlue]RtlCopyBufferToMdl[/COLOR][/U]+1d )[/HL]

k
 # Child-SP          RetAddr           Call Site
00 fffff880`037ca648 fffff800`02e8d169 nt!KeBugCheckEx
01 fffff880`037ca650 fffff800`02e8bde0 nt!KiBugCheckDispatch+0x69
02 fffff880`037ca790 fffff880`01c106fd nt![COLOR=Red][B]KiPageFault[/B][/COLOR]+0x260
03 fffff880`037ca920 fffff880`01ea84eb NETIO!RtlCopyBufferToMdl+0x1d

Both the memory referenced and the routine are the same which leads me to believe
that it is something in the software itself is causing this to happen.

Look for Windows updates and using a different version of the software causing this issue.
In the next update follow the complete procedure please | http://www.sevenforums.com/bsod-help-support/96879-blue-screen-death-bsod-posting-instructions.html .

 

[kilebantick]

Hey mate.

Have tried a few different torrenting applications to no avail, they all crash in the same manner. I've promptly uninstalled them all as some come with bloatware you can't choose to not install.

I've updated as many of my drivers as I can, updated everything through Windows Update, tried a different network card, moved the network card to a different PCI slot, ect. To no avail.

Haven't tried torrenting in Safe Mode yet, that'll be my next step.

I've attatched all of the stuff PROPERLY as per your request. Sorry about that mate. .

 

[YoYo155]

The bug checks are the exact same again, I can see you're back to using the 2011 driver...

can you explain what is the content of this directory?

[U][B]d:\w7rtm\net\netio[/B][/U]\iphlpsvc\tunnel\usertunnels.c

 

[kilebantick]

From what I can see, that directory doesn't exist, at all, on either drives. The driver seems to have reverted, but I've updated it once again.

I found out that it will not blue screen in Safe Mode. I've resorted to doing all downloads/updating in Safe Mode. .

 

[YoYo155]

That is a workaround, but not a solution.

Open an elevated command prompt and past in the following:

attrib -s -h -a -r "D:\w7rtm\*.* /s /d"

This should unhide it's hidden in any way.

 

[kilebantick]

It comes up with "Path not found - D:\w7rtm\*.* \s.

I'm likely upgrading my computer within the next month (4930k/2x680's/2xD5's, 360 and 480 rad), so I perhaps I'll just put up with it until then.

Thanks for all of your continue support and help mate, it's greatly appreciated, you do good work

 

[YoYo155]

Thank you for the feedback .
Just a question though, did you copy/paste the command into the CMD? Because what you wrote above
has the \ facing the wrong way.

It comes up with "Path not found - D:\w7rtm\*.* \s.

I'm likely upgrading my computer within the next month (4930k/2x680's/2xD5's, 360 and 480 rad), so I perhaps I'll just put up with it until then.

Thanks for all of your continue support and help mate, it's greatly appreciated, you do good work