BSOD: NETIO.SYS+6dad

[Hobyman]

Hello all,

Getting a BSOD that, according to BlueScreenView, was caused by the NETIO.SYS driver. The requested documentation has been attached. This BSOD seems to manifest very randomly without regard to any specific activity patterns that I can identity. Additional details are below and any help that could be provided would be immensely helpful. Please note that while perfmon says I have no virus scanner, I am running AVG free (freshly installed before the test but for some reason not picked up). Thank you in advance!

Windows 7 (64 bit)
- full retail version

Age of hardware: brand new (just put the system together 2 weeks ago) but processor, motherboard, etc. are from late 2010/early 2011 (bought parts new from newegg).

Age of OS installation: First time was two weeks. Deleted the partition and re-installed yesterday. Issue is continuing.

 

[zigzag3143]

Netio.sys is usually related to the malware app you are running or malware itself.

AVG can be a contributing cause of BSOD'S . Please remove and replace with Microsoft Security Essentials AT LEAST TO TEST

Download tools and utilities | AVG Worldwide

Microsoft Security Essentials - Free Antivirus for Windows

 

[Hobyman]

Thank you kindly for your assistance. I removed AVG using the removal tool and installed Microsoft Security Essentials. Got another BSOD, this time caused by the ntoskrnl.exe driver (according to bluescreenview). As before, the appropriate files are attached and any help would be greatly appreciated. Thank you!

 

[zigzag3143]

Thank you kindly for your assistance. I removed AVG using the removal tool and installed Microsoft Security Essentials. Got another BSOD, this time caused by the ntoskrnl.exe driver (according to bluescreenview). As before, the appropriate files are attached and any help would be greatly appreciated. Thank you!

The most recent crash was inconclusive but may have been caused by whatever you were trying to install when it did crash. we need to wait for the next one.

 

[Hobyman]

The crash came three hours after installing MSE but I am happy to repost logs after the next crash if necessary? Just wanted to clarify the timing.

 

[zigzag3143]

The crash came three hours after installing MSE but I am happy to repost logs after the next crash if necessary? Just wanted to clarify the timing.

thanks. We can tell from the DMPS as they tell us the sequence of events. (and much more)

 

[Hobyman]

Well, it's been over 24 hours without a BSOD. However, Windows Explorer crashed on me twice today and had to reload itself. Could this be a further symptom of the issue?

 

[zigzag3143]

Well, it's been over 24 hours without a BSOD. However, Windows Explorer crashed on me twice today and had to reload itself. Could this be a further symptom of the issue?

It could and so can you upload the event viewer logs as directed.

Please provide us with your Event Viewer administrative logs by following these steps:
{Instructions courtesy of writhziden}

Click Start Menu
Type eventvwr into Search programs and files (do not hit enter)
Right click eventvwr.exe and click Run as administrator
Expand Custom Views
Click Administrative Events
Right click Administrative Events
Save all Events in Custom View As...
Save them in a folder where you will remember which folder and save as Errors.evtx
Go to where you saved Errors.evtx
Right click Errors.evtx -> send to -> compressed (zipped) folder
Upload the .zip file here.

 

[Hobyman]

Thank you for your reply. Here is the requested file.

 

[zigzag3143]

Thank you for your reply. Here is the requested file.

Your Event logs show two issues


First a corrupt (or missing) DLL file (part of the OS) called DUI70.DLL.

DUI70.dll is the Windows Direct UI Engine , so the problem is more likely related to your graphic card drivers. I would suggest updating your video drivers, disable aero, and run sfc /scannow (you will need to run this in an administrator console).

http://www.sevenforums.com/tutorials/1538-sfc-scannow-command-system-file-checker.html

How to use the System File Checker tool to troubleshoot missing or corrupted system files on Windows Vista or on Windows 7



Second, over 100 net framework optimization errors. You might want to re-install (or update) net framework.

 

[Hobyman]

Hello. Video card drivers were already up to date. Checked for an update to be sure and I have the most current version. I disabled Aero as instructed and ran the SFC scan. No issues were found. I also downloaded and installed the newest net framework. Since then, I have received three BSOD. Files are attached...

 

[zigzag3143]

Of these 5, 3 point to a memory exception. Can be either RAM, or a driver.



These crashes were caused by memory corruption/exception (probably a driver).
Please run these two tests to verify your memory and find which driver is causing the problem.

* If you are overclocking anything reset to default before running these tests.
In other words STOP!!!

* If you have raid update its Driver.



Memtest.

*Download a copy of Memtest86 and burn the ISO to a CD using Iso Recorder or another ISO burning program. Memtest86+ - Advanced Memory Diagnostic Tool

*Boot from the CD, and leave it running for at least 5 or 6 passes.

Just remember, any time Memtest reports errors, it can be either bad RAM or a bad motherboard slot.

Test the sticks individually, and if you find a good one, test it in all slots.

Any errors are indicative of a memory problem.

If a known good stick fails in a motherboard slot it is probably the slot.

http://www.sevenforums.com/tutorials/105647-ram-test-memtest86.html



Driver verifier

Using Driver Verifier is an iffy proposition. Most times it'll crash and it'll tell you what the driver is. But sometimes it'll crash and won't tell you the driver. Other times it'll crash before you can log in to Windows. If you can't get to Safe Mode, then you'll have to resort to offline editing of the registry to disable Driver Verifier.

So, I'd suggest that you first backup your stuff and then make sure you've got access to another computer so you can contact us if problems arise. Then make a System Restore point (so you can restore the system using the Vista/Win7 Startup Repair feature).

Then, here's the procedure:
- Go to Start and type in "verifier" (without the quotes) and press Enter
- Select "Create custom settings (for code developers)" and click "Next"
- Select "Select individual settings from a full list" and click "Next"
- Select everything EXCEPT FOR "Special Pool", "Force Pending I/O Requests" and "Low Resource Simulation" and click "Next"
- Select "Select driver names from a list" and click "Next"
Then select all drivers NOT provided by Microsoft and click "Next"
- Select "Finish" on the next page.

Reboot the system and wait for it to crash to the Blue Screen.
Continue to use your system normally, and if you know what causes the crash, do that repeatedly.
The objective here is to get the system to crash because Driver Verifier is stressing the drivers out.
If it doesn't crash for you, then let it run for at least 36 hours of continuous operation.

Reboot into Windows (after the crash) and turn off Driver Verifier by going back in and selecting "Delete existing settings" on the first page, then locate and zip up the memory dump file and upload it with your next post.

If you can't get into Windows because it crashes too soon, try it in Safe Mode.
If you can't get into Safe Mode, try using System Restore from your installation DVD to set the system back to the previous restore point that you created.

 

[cpgdallas]

Minidump and NETIO.SYS

Need help with finding the exact cause of the BSOD. HEre is the dump file debugging results:
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
Use !analyze -v to get detailed debugging information.
BugCheck 3B, {c0000005, fffff88001739c63, fffff880219eb1b0, 0}
Probably caused by : NETIO.SYS ( NETIO!memcmp+53 )
Followup: MachineOwner
---------
0: kd> !analyze -v
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
SYSTEM_SERVICE_EXCEPTION (3b)
An exception happened while executing a system service routine.
Arguments:
Arg1: 00000000c0000005, Exception code that caused the bugcheck
Arg2: fffff88001739c63, Address of the instruction which caused the bugcheck
Arg3: fffff880219eb1b0, Address of the context record for the exception that caused the bugcheck
Arg4: 0000000000000000, zero.
Debugging Details:
------------------

EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced memory at 0x%08lx. The memory could not be %s.
FAULTING_IP:
NETIO!memcmp+53
fffff880`01739c63 483b040a cmp rax,qword ptr [rdx+rcx]
CONTEXT: fffff880219eb1b0 -- (.cxr 0xfffff880219eb1b0)
rax=007600650064005c rbx=0000000000000000 rcx=fffffa8008e17600
rdx=006405f1f77f8a68 rsi=fffff880219ec060 rdi=fffff880219ebcc0
rip=fffff88001739c63 rsp=fffff880219ebb98 rbp=fffffa8009b9ce68
r8=000000000000006a r9=0000000000000003 r10=fffffa8009b9ce70
r11=fffff880219ec068 r12=fffff880219ebcc8 r13=fffffa8009b9ce20
r14=fffffa8009b9ce68 r15=fffff880219ebe60
iopl=0 nv up ei pl nz na po nc
cs=0010 ss=0018 ds=002b es=002b fs=0053 gs=002b efl=00010206
NETIO!memcmp+0x53:
fffff880`01739c63 483b040a cmp rax,qword ptr [rdx+rcx] ds:002b:00640072`00610068=????????????????
Resetting default scope
CUSTOMER_CRASH_COUNT: 1
DEFAULT_BUCKET_ID: VISTA_DRIVER_FAULT
BUGCHECK_STR: 0x3B
PROCESS_NAME: svchost.exe
CURRENT_IRQL: 2
LAST_CONTROL_TRANSFER: from fffff8800173d536 to fffff88001739c63
STACK_TEXT:
fffff880`219ebb98 fffff880`0173d536 : fffff880`219ebbd8 fffff880`219ebbd0 00020000`00020001 00020001`00020000 : NETIO!memcmp+0x53
fffff880`219ebba0 fffff880`0173d2cd : fffff880`c0000022 fffffa80`00000000 00000000`00000000 fffffa80`08d53010 : NETIO!CompareBlobs+0x46
fffff880`219ebbd0 fffff880`017432a1 : 0000c0a8`836e0800 00000000`00000000 fffffa80`06702340 00000000`00000000 : NETIO!MatchValues+0x10d
fffff880`219ebc20 fffff880`017459c5 : fffff880`219ebcc0 00000000`000000e0 fffffa80`0af02180 00000000`000007ff : NETIO!CheckEqualConditionEnumMatch+0x51
fffff880`219ebc50 fffff880`01745a69 : 00000000`00000000 fffff880`219ec060 fffff880`219ebdf0 00000000`00000000 : NETIO!CheckSpecialCasesConditionEnumMatch+0x35
fffff880`219ebc90 fffff880`01743003 : 6e83a8c0`2fdb1180 00000000`000007ff fffff880`219ebe78 fffff880`0173d646 : NETIO!MatchConditionContains+0x79
fffff880`219ebd90 fffff880`017430a9 : fffffa80`00000000 00000000`00000000 fffffa80`04a38a50 fffffa80`04946850 : NETIO!FilterMatchEnum+0x174
fffff880`219ebdf0 fffff880`0174294a : 00000000`00000001 00000000`00000000 fffffa80`00000000 fffffa80`048aa070 : NETIO!IndexListEnum+0x6f
fffff880`219ebe60 fffff880`01743816 : 00000000`00000000 fffff880`219ebf80 fffff880`21020003 00000000`0000006a : NETIO!FeEnumLayer+0xaa
fffff880`219ebec0 fffff880`019023c8 : 00000000`00000024 00000000`00000000 fffff880`219ec120 00000000`00000002 : NETIO!KfdEnumLayer+0x26
fffff880`219ebf00 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : tcpip!FindPermittedPorts+0x1d8

FOLLOWUP_IP:
NETIO!memcmp+53
fffff880`01739c63 483b040a cmp rax,qword ptr [rdx+rcx]
SYMBOL_STACK_INDEX: 0
SYMBOL_NAME: NETIO!memcmp+53
FOLLOWUP_NAME: MachineOwner
MODULE_NAME: NETIO
IMAGE_NAME: NETIO.SYS
DEBUG_FLR_IMAGE_TIMESTAMP: 4ce79381
STACK_COMMAND: .cxr 0xfffff880219eb1b0 ; kb
FAILURE_BUCKET_ID: X64_0x3B_NETIO!memcmp+53
BUCKET_ID: X64_0x3B_NETIO!memcmp+53
Followup: MachineOwner
---------

OS is fully updated.

 

[writhziden]

cpgdallas, please start your own thread and follow the http://www.sevenforums.com/crashes-debugging/96879-blue-screen-death-bsod-posting-instructions.html to provide us with the full crash reports. These will allow us to give more accurate troubleshooting steps than the information you have provided in the post in this thread. It will also guarantee you get the dedicated help you need for your crash problems.