BSOD - IDSvia64.sys

[RockStar1965]

I have exhausted all leads,

I am very technical and can usually resolve this stuff, but this really eludes me.

I have included a zip package with loads of debug info in a format that another form used, but not one comment, soooo depressed, even a s___ to be you would be great lol

ASUS P8Z86-V PRO/GEN3 Motherboard
ASUS GTX 580 ENGTX580 DCII/2DIS/1536MD5
Processor Intel(R) Core(TM) i7-2600K CPU @ 3.40GHz
16 GB RAM
OCZ Agility3, bios 2.15 (Updated) SSD Boot
Western Digital WD2002FAEX 2TB Drive
Western Digital WD30EZRX 3 TB Drive
3 Raided Western Digital 2TB = 5.5 TB Raid Drive

Built the machine to run as a media server and for Battlefield 3

About two months ago I started to get plagued with BSOD
I attached my dmp files.

It seems it has something to do with the anti-virus, but I removed Norton 360 ver 4 and replaced it with Norton Security 2012 hoping this would resolve it.

If I restore my machine back to Jan 3 2012, the problem seem to go away, but then after I do my updates, it comes back.

It almost seems that when I am running Uttorent and IE8 is when I notice it most, but I am unsure.
I have replaced the SSD, no change, switched to HDD, no change.

Upgraded Norton, no change.

Tried the last seven Nivida drivers, no change.

All I know is two months age this system ran for almost nine months without a failure type reboot.

Gaming system $10 anyone lol...
OK Sorry $8 FIRM!
Douglas

 

[JMH]

I have exhausted all leads,

I am very technical and can usually resolve this stuff, but this really eludes me.


It seems it has something to do with the anti-virus, but I removed Norton 360 ver 4 and replaced it with Norton Security 2012 hoping this would resolve it.

Upgraded Norton, no change.

Douglas

Douglas,
Your Dmp's list Norton as being the cause...

Symantec is a frequent cause of BSOD's.
I would remove and replace it with Microsoft Security Essentials AT LEAST TO TEST


http://us.norton.com/support/kb/web_view.jsp?wv_type=public_web&docurl=20080710133834EN

Microsoft Security Essentials - Free Antivirus for Windows

 

[RockStar1965]

Hello JMH

OK I will do that, Im just suprised that it has been happening for a month or more for me and I haven't gotten any hits for that driver IDSvia64.sys googling the problem, I'm pretty sure there would be a good chunk of people with a simular setup out there.

I started to think that maybe Utorrent, cause it is getting fancy may have put something in their stuff that might cause Norton to crash/conflict.

I will do a backup and remove Norton as you suggest, pain, just renew them under Norton Internet Security from 360, thinking they may be slightly different.

Even though it had something to do with my boot from the SSD, but I have another operating system from a HDD, that eventually BSOD me.

I do know, earilier I did have some crashes that didn't reference Norton, but they were not as often, but I did a system restore from Jan 3 and everything seemed fine, but after doing the update, they went bad again

Douglas

 

[JMH]

Here you go...
Six point to Norton.

View attachment 205546

 

[RockStar1965]

Thank you so much for your time.

Interesting though that I haven't had a BSOD for the last 24 hours,

I am going run all those debug stuff and do a file compare to see if something updated in the last 48 hours.

I will try those steps and will respond with any findings.

Again Thank you!

 

[JMH]

Keep us posted re developments there please.

 

[RockStar1965]

General Cleanup Reinstall Windows, new type of crash

Hello, I was able to verify that Norton was definiately the problem, and they sent me a fix that they swore by, I know lol.

Anyways did a clean install of windows and got a new BSOD.

Can you tell me if this is the Norton Issue or is it a Device Driver, if so which one, I think there are like a thousands.

Thank you in advance

 

[writhziden]

Problem Devices:

Officejet Pro 8500 A909n	ROOT\MULTIFUNCTION\0000	This device is disabled.

Security Software (just to make sure it is installed and working properly; nothing needs to be done at this time):

ccsvchst.exe	c:\program files (x86)\norton internet security\engine\19.6.2.10\ccsvchst.exe	2824	8	1024	10240	4/11/2012 6:47 AM	11.2.1.4	134.99 KB (138,232 bytes)	4/9/2012 1:17 PM
ccsvchst.exe	c:\program files (x86)\norton internet security\engine\19.6.2.10\ccsvchst.exe	4856	8	1024	10240	4/11/2012 9:17 AM	11.2.1.4	134.99 KB (138,232 bytes)	4/9/2012 1:17 PM

Microsoft (R) Windows Debugger Version 6.12.0002.633 AMD64
Copyright (c) Microsoft Corporation. All rights reserved.


Loading Dump File [D:\Kingston\BSODDmpFiles\RockStar1965\Windows_NT6_BSOD_jcgriff2\041112-19032-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available

Symbol search path is: SRV*C:\SymCache*http://msdl.microsoft.com/download/symbols
Executable search path is: 
Windows 7 Kernel Version 7601 (Service Pack 1) MP (8 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 7601.17790.amd64fre.win7sp1_gdr.120305-1505
Machine Name:
Kernel base = 0xfffff800`02e66000 PsLoadedModuleList = 0xfffff800`030aa650
Debug session time: Wed Apr 11 07:45:18.498 2012 (UTC - 6:00)
System Uptime: 0 days 8:19:44.326
Loading Kernel Symbols
...............................................................
................................................................
................................................................
.
Loading User Symbols
Loading unloaded module list
.......
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck C5, {7, 2, 1, fffff80003010617}

Probably caused by : NETIO.SYS ( NETIO!WfpPoolAllocNonPaged+17 )

Followup: MachineOwner
---------

0: kd> !analyze -v
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

DRIVER_CORRUPTED_EXPOOL (c5)
An attempt was made to access a pageable (or completely invalid) address at an
interrupt request level (IRQL) that is too high.  This is
caused by drivers that have corrupted the system pool.  Run the driver
verifier against any new (or suspect) drivers, and if that doesn't turn up
the culprit, then use gflags to enable special pool.
Arguments:
Arg1: 0000000000000007, memory referenced
Arg2: 0000000000000002, IRQL
Arg3: 0000000000000001, value 0 = read operation, 1 = write operation
Arg4: fffff80003010617, address which referenced memory

Debugging Details:
------------------


BUGCHECK_STR:  0xC5_2

CURRENT_IRQL:  2

FAULTING_IP: 
nt!ExAllocatePoolWithTag+537
fffff800`03010617 48895808        mov     qword ptr [rax+8],rbx

CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT

PROCESS_NAME:  System

TRAP_FRAME:  fffff8800bdd4a10 -- (.trap 0xfffff8800bdd4a10)
NOTE: The trap frame does not contain all registers.
Some register values may be zeroed or incorrect.
rax=ffffffffffffffff rbx=0000000000000000 rcx=fffffa80163b9010
rdx=0000000000000000 rsi=0000000000000000 rdi=0000000000000000
rip=fffff80003010617 rsp=fffff8800bdd4ba0 rbp=0000000000001000
 r8=0000000000000000  r9=fffff8000306c5b0 r10=fffff8000306c348
r11=00000000000000ff r12=0000000000000000 r13=0000000000000000
r14=0000000000000000 r15=0000000000000000
iopl=0         nv up ei pl zr na po nc
nt!ExAllocatePoolWithTag+0x537:
fffff800`03010617 48895808        mov     qword ptr [rax+8],rbx ds:e6e8:00000000`00000007=????????????????
Resetting default scope

LAST_CONTROL_TRANSFER:  from fffff80002ee2229 to fffff80002ee2c80

STACK_TEXT:  
fffff880`0bdd48c8 fffff800`02ee2229 : 00000000`0000000a 00000000`00000007 00000000`00000002 00000000`00000001 : nt!KeBugCheckEx
fffff880`0bdd48d0 fffff800`02ee0ea0 : fffff880`00000000 fffff880`0193aee6 ffff0000`0cec7b8d fffff800`0306c5b0 : nt!KiBugCheckDispatch+0x69
fffff880`0bdd4a10 fffff800`03010617 : fffff880`0bdd4c18 fffff880`0180e53a fffffa80`145573f0 fffff880`0190ec26 : nt!KiPageFault+0x260
fffff880`0bdd4ba0 fffff880`0190a267 : fffffa80`00000000 fffff880`0bdd4d60 fffff880`0bdd5010 fffff880`00000000 : nt!ExAllocatePoolWithTag+0x537
fffff880`0bdd4c90 fffff880`0190d74d : 00000000`00000003 00000000`00000000 fffffa80`0c6f35a0 fffffa80`0cd13c30 : NETIO!WfpPoolAllocNonPaged+0x17
fffff880`0bdd4cc0 fffff880`0190d86d : 00000000`00000000 fffff880`0bdd4e2c fffff880`0bdd4dd0 fffffa80`0d690010 : NETIO!ConstructNewCacheEntry+0x12d
fffff880`0bdd4d40 fffff880`019067df : 00000000`00000000 fffffa80`0d690010 fffff880`0bdd5240 00000000`00000000 : NETIO!ProcessCacheMiss+0x8d
fffff880`0bdd4d90 fffff880`01aee39e : 00000000`0000000c fffff880`0bdd5230 00000000`00000000 fffffa80`10d98c50 : NETIO!KfdClassify+0xb31
fffff880`0bdd5100 fffff880`01b41a5a : 00000000`0006c59d fffffa80`145573f0 fffffa80`145573f0 fffffa80`1455afd6 : tcpip!ProcessInboundTransportLayerClassify+0x21e
fffff880`0bdd5320 fffff880`01b26ec8 : 00000000`00000000 00000000`ffffffff fffffa80`110b1340 fffff880`012447d9 : tcpip!WfpProcessInTransportStackIndication+0xc0a
fffff880`0bdd5820 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : tcpip!TcpTcbReceive+0x808


STACK_COMMAND:  kb

FOLLOWUP_IP: 
NETIO!WfpPoolAllocNonPaged+17
fffff880`0190a267 488903          mov     qword ptr [rbx],rax

SYMBOL_STACK_INDEX:  4

SYMBOL_NAME:  NETIO!WfpPoolAllocNonPaged+17

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: NETIO

IMAGE_NAME:  NETIO.SYS

DEBUG_FLR_IMAGE_TIMESTAMP:  4ce79381

FAILURE_BUCKET_ID:  X64_0xC5_2_NETIO!WfpPoolAllocNonPaged+17

BUCKET_ID:  X64_0xC5_2_NETIO!WfpPoolAllocNonPaged+17

Followup: MachineOwner
---------

The crash is network related. Do you have the 2012 version of Norton? Also, install the latest LAN and BlueTooth drivers from ASUS - Motherboards- ASUS P8Z68-V PRO/GEN3 -> Download -> OS: Windows 7 64bit

 

[RockStar1965]

Hello Thank you.

I remember that I did an update of the network card from the intel update site, and went back there and noticed that they say for (OEM) to use only the mfg driver.

I have just reinstalled all the ASUS drivers, bluetooth, sata, audio and all, and will see if this clears it up.

I play BF3 and it seems to drop me every once in a while, but that is BF3 for you, NVidia driver and all.

I did the Norton 2012 installation from a file they sent me that eliminated the original crash symtom.

Thank you for all the help on this forum

 

[RockStar1965]

Hello Again BSOD,

I believe I have reinstalled all the original ASUS driver...

Douglas

 

[writhziden]

Loading Dump File [D:\Kingston\BSODDmpFiles\RockStar1965\Windows_NT6_BSOD_jcgriff2\041112-13572-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available

Symbol search path is: SRV*C:\SymCache*http://msdl.microsoft.com/download/symbols
Executable search path is: 
Windows 7 Kernel Version 7601 (Service Pack 1) MP (8 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 7601.17790.amd64fre.win7sp1_gdr.120305-1505
Machine Name:
Kernel base = 0xfffff800`03214000 PsLoadedModuleList = 0xfffff800`03458650
Debug session time: Wed Apr 11 22:20:12.911 2012 (UTC - 6:00)
System Uptime: 0 days 1:36:15.739
Loading Kernel Symbols
...............................................................
................................................................
................................................................
............
Loading User Symbols
Loading unloaded module list
....
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck 19, {3, fffffa801dfc6260, fffffa801dfc6260, ffffffffffffffff}

Unable to load image \SystemRoot\system32\DRIVERS\e1c62x64.sys, Win32 error 0n2
*** WARNING: Unable to verify timestamp for e1c62x64.sys
*** ERROR: Module load completed but symbols could not be loaded for e1c62x64.sys
Probably caused by : Pool_Corruption ( nt!ExDeferredFreePool+cbb )

Followup: Pool_corruption
---------

0: kd> !analyze -v
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

BAD_POOL_HEADER (19)
The pool is already corrupt at the time of the current request.
This may or may not be due to the caller.
The internal pool links must be walked to figure out a possible cause of
the problem, and then special pool applied to the suspect tags or the driver
verifier to a suspect driver.
Arguments:
Arg1: 0000000000000003, the pool freelist is corrupt.
Arg2: fffffa801dfc6260, the pool entry being checked.
Arg3: fffffa801dfc6260, the read back flink freelist value (should be the same as 2).
Arg4: ffffffffffffffff, the read back blink freelist value (should be the same as 2).

Debugging Details:
------------------


BUGCHECK_STR:  0x19_3

CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT

PROCESS_NAME:  System

CURRENT_IRQL:  2

LAST_CONTROL_TRANSFER:  from fffff800033bd70f to fffff80003290c80

STACK_TEXT:  
fffff880`0e06c698 fffff800`033bd70f : 00000000`00000019 00000000`00000003 fffffa80`1dfc6260 fffffa80`1dfc6260 : nt!KeBugCheckEx
fffff880`0e06c6a0 fffff800`033bf1a1 : 00000000`00000000 fffffa80`1e108870 00000000`00000000 fffffa80`1930e1a0 : nt!ExDeferredFreePool+0xcbb
fffff880`0e06c730 fffff880`01c208a7 : fffffa80`19c08480 00000000`0000005b fffffa80`6264444e fffff880`0fa2c569 : nt!ExFreePoolWithTag+0x411
fffff880`0e06c7e0 fffff880`0fa29c91 : 00000000`00000801 fffffa80`19ca6a30 00000000`0000004e fffff880`0fa2c723 : ndis!NdisMFreeNetBufferSGList+0xa7
fffff880`0e06c820 00000000`00000801 : fffffa80`19ca6a30 00000000`0000004e fffff880`0fa2c723 fffffa80`1deb12a0 : e1c62x64+0x29c91
fffff880`0e06c828 fffffa80`19ca6a30 : 00000000`0000004e fffff880`0fa2c723 fffffa80`1deb12a0 fffffa80`19d43d50 : 0x801
fffff880`0e06c830 00000000`0000004e : fffff880`0fa2c723 fffffa80`1deb12a0 fffffa80`19d43d50 fffffa80`0000001b : 0xfffffa80`19ca6a30
fffff880`0e06c838 fffff880`0fa2c723 : fffffa80`1deb12a0 fffffa80`19d43d50 fffffa80`0000001b 00000000`00000003 : 0x4e
fffff880`0e06c840 fffffa80`1deb12a0 : fffffa80`19d43d50 fffffa80`0000001b 00000000`00000003 fffffa80`00000000 : e1c62x64+0x2c723
fffff880`0e06c848 fffffa80`19d43d50 : fffffa80`0000001b 00000000`00000003 fffffa80`00000000 00000000`00000000 : 0xfffffa80`1deb12a0
fffff880`0e06c850 fffffa80`0000001b : 00000000`00000003 fffffa80`00000000 00000000`00000000 0000000a`00000001 : 0xfffffa80`19d43d50
fffff880`0e06c858 00000000`00000003 : fffffa80`00000000 00000000`00000000 0000000a`00000001 fffffa80`19bf6000 : 0xfffffa80`0000001b
fffff880`0e06c860 fffffa80`00000000 : 00000000`00000000 0000000a`00000001 fffffa80`19bf6000 00000000`00000000 : 0x3
fffff880`0e06c868 00000000`00000000 : 0000000a`00000001 fffffa80`19bf6000 00000000`00000000 00000000`00000000 : 0xfffffa80`00000000


STACK_COMMAND:  kb

FOLLOWUP_IP: 
nt!ExDeferredFreePool+cbb
fffff800`033bd70f cc              int     3

SYMBOL_STACK_INDEX:  1

SYMBOL_NAME:  nt!ExDeferredFreePool+cbb

FOLLOWUP_NAME:  Pool_corruption

IMAGE_NAME:  Pool_Corruption

DEBUG_FLR_IMAGE_TIMESTAMP:  0

MODULE_NAME: Pool_Corruption

FAILURE_BUCKET_ID:  X64_0x19_3_nt!ExDeferredFreePool+cbb

BUCKET_ID:  X64_0x19_3_nt!ExDeferredFreePool+cbb

Followup: Pool_corruption
---------

The latest crash appears to be caused by your Intel(R) 82579V Gigabit Network Connection driver. When you re-installed the old one, did you follow these steps:

1. First, download the mfg driver. Then do the next steps.
2. Click Start Menu
3. Right Click My Computer/Computer
4. Click Manage
5. Click Device Manager from the list on the left
6. Expand Network adapters
7. Right click the Intel Ethernet device
8. Click Uninstall (do not click OK in the dialog box that pops up after hitting Uninstall)
9. Put a tick in Delete driver software for this device (if this option is available, otherwise just hit OK) and hit OK
10. Restart your computer only if Windows asks you to.
11. Install the mfg driver for the device.

Alternatively:

1. Login as an adminstrative user.
2. First, download the mfg driver. Then do the next steps.
3. Click Start Menu
4. Click Control Panel
5. Click Hardware and Sound
6. Click Device Manager (the last link under Devices and Printers)
7. Expand Network adapters
8. Right click the Intel Ethernet device
9. Click Uninstall (do not click OK in the dialog box that pops up after hitting Uninstall)
10. Put a tick in Delete driver software for this device (if this option is available, otherwise just hit OK) and hit OK
11. Restart your computer only if Windows asks you to.
12. Install the mfg driver for the device.