Solved BSOD - NETIO.SYS ntoskrnl.exe

danielb7390 · Jan 14, 2013

Hi,
Just registered to see if i can get some help with a very annoying bsod....
Some time ago i started getting bsod complaining netio.sys ntoskrnl.exe and also tcpip.sys!
I think i solved the tcpip.sys by removing peerblock but the other ones remained.
Tried updating Ethernet driver (atheros L1E) but with the last driver the network gets extremely slow so i reverted back to the driver from asus site.
It can work weeks without one BSOD or get a lots of then in a single day! Today already 3 and counting!
Already run memtest and it passed.

First BSOD:

Code:

Microsoft (R) Windows Debugger Version 6.2.9200.20512 AMD64
Copyright (c) Microsoft Corporation. All rights reserved.


Loading Dump File [C:\Windows\Minidump\011413-28516-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available

Symbol search path is: SRV*c:\symbols*http://msdl.microsoft.com/download/symbols
Executable search path is: 
Windows 7 Kernel Version 7601 (Service Pack 1) MP (2 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 7601.17944.amd64fre.win7sp1_gdr.120830-0333
Machine Name:
Kernel base = 0xfffff800`02e4c000 PsLoadedModuleList = 0xfffff800`03090670
Debug session time: Mon Jan 14 15:43:47.830 2013 (UTC + 0:00)
System Uptime: 0 days 2:01:44.500
Loading Kernel Symbols
...............................................................
................................................................
........................
Loading User Symbols
Loading unloaded module list
........
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck D1, {ffffffff0674cd78, 2, 1, fffff880015a2f7a}

Probably caused by : NETIO.SYS ( NETIO!FreeSomeCacheBucketEntries+4a )

Followup: MachineOwner
---------

19:17 14-01-2013

Code:

Microsoft (R) Windows Debugger Version 6.2.9200.20512 AMD64
Copyright (c) Microsoft Corporation. All rights reserved.


Loading Dump File [C:\Windows\Minidump\011413-14944-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available

Symbol search path is: SRV*c:\symbols*http://msdl.microsoft.com/download/symbols
Executable search path is: 
Windows 7 Kernel Version 7601 (Service Pack 1) MP (2 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 7601.17944.amd64fre.win7sp1_gdr.120830-0333
Machine Name:
Kernel base = 0xfffff800`02e14000 PsLoadedModuleList = 0xfffff800`03058670
Debug session time: Mon Jan 14 19:14:12.671 2013 (UTC + 0:00)
System Uptime: 0 days 0:12:36.216
Loading Kernel Symbols
...............................................................
................................................................
........................
Loading User Symbols
Loading unloaded module list
........
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck C2, {d, fffffa8003d2e2b0, 20206f49, fffffa8006c21740}

Probably caused by : ntkrnlmp.exe ( nt!KiDeliverApc+1c7 )

Followup: MachineOwner
---------

19:03 14-01-2013

Code:

Microsoft (R) Windows Debugger Version 6.2.9200.20512 AMD64
Copyright (c) Microsoft Corporation. All rights reserved.


Loading Dump File [C:\Windows\Minidump\011413-15834-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available

Symbol search path is: SRV*c:\symbols*http://msdl.microsoft.com/download/symbols
Executable search path is: 
Windows 7 Kernel Version 7601 (Service Pack 1) MP (2 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 7601.17944.amd64fre.win7sp1_gdr.120830-0333
Machine Name:
Kernel base = 0xfffff800`02e55000 PsLoadedModuleList = 0xfffff800`03099670
Debug session time: Mon Jan 14 19:00:07.593 2013 (UTC + 0:00)
System Uptime: 0 days 2:10:21.263
Loading Kernel Symbols
...............................................................
................................................................
........................
Loading User Symbols
Loading unloaded module list
..............
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck A, {0, 2, 1, fffff80002edad6c}

*** WARNING: Unable to verify timestamp for AVerPola.sys
*** ERROR: Module load completed but symbols could not be loaded for AVerPola.sys
Probably caused by : AVerPola.sys ( AVerPola+1afe4 )

Followup: MachineOwner
---------

The last one seems to be complaining with my dvb-t avermedia usb adapter i don't know why! That driver is the latest.

All 3 minidumps in attached zip

Thanks in advance!

EDIT: Didn't saw the notice above :sleepy:

.... adding the zip file! It has some more dumps that the other zip.

x BlueRobot · Jan 14, 2013

Code:

[COLOR="red"]BugCheck A[/COLOR], {0, 2, 1, fffff80002edad6c}

*** WARNING: Unable to verify timestamp for AVerPola.sys
*** ERROR: Module load completed but symbols could not be loaded for AVerPola.sys
Probably caused by : [COLOR="Red"]AVerPola.sys[/COLOR] ( AVerPola+1afe4 )

Code:

Usual causes:  Kernel mode driver, System Service, BIOS, Windows, Virus scanner, Backup tool, compatibility

Code:

1: kd> [COLOR="SeaGreen"]lmvm AVerPola[/COLOR]
start             end                 module name
fffff880`0594a000 fffff880`059e2100   AVerPola T (no symbols)           
    Loaded symbol image file: AVerPola.sys
    Image path: \SystemRoot\system32\DRIVERS\AVerPola.sys
    Image name: AVerPola.sys
    Timestamp:        [COLOR="Red"]Wed Aug 22 09:18:04 2012[/COLOR] (503495BC)
    CheckSum:         0009C2D8
    ImageSize:        00098100
    Translations:     0000.04b0 0000.04e4 0409.04b0 0409.04e4

This driver seems to be causing some issues, however, it may also be due to RAM problems or compatibility problems if you have fully updated the driver.

How many passes did you run MemTest86+ for?

Memory:

http://www.sevenforums.com/tutorials/105647-ram-test-memtest86.html

Run Memtest86+ for least 9-10 passes, and preferably overnight as it can take a while to fully complete.

Test each RAM stick individually, if an error is found then move the same RAM stick into the next DIMM slot and test again, if errors are found for the same RAM stick in every available slot then you have a faulty RAM module. On the other hand, if no errors are found in the next slot or the other slots for the same RAM module, then you have a faulty DIMM slot.

Test each RAM stick and every motherboard DIMM slot available.

Check for any driver compatibility issues with:

Windows 7 Upgrade Advisor - Download - Microsoft Windows

Reduce the number of programs at startup, to avoid any driver or program conflicts:

http://www.sevenforums.com/tutorial...ation-conflicts-performing-clean-startup.html

Please upload a .NFO file:

Start

rb: > Type: msinfo32 > File, Save

Install and perform full scans with:

:info: Remember to install the free version of Malwarebytes not the free trail; untick the free trial box during installation. MSE is the most lightweight and compatible with the Windows 7 operating system.

You can also view this thread for a complete free and lightweight security protection combination:

http://www.sevenforums.com/system-security/206705-good-free-system-security-combination.html

danielb7390 · Jan 14, 2013

Hi,
Thanks for you fast reply.
Memtest i think it was only 1pass because i needed the computer...
Already have MSE and i don't have virus.
The .NFO file you ask for i think its already on the "danielb7390.zip" file.
Will try to run memtest longer, its important to test each stick separated?

Also, don't know if important but this computer is kind of a home-server it runs apache,php,mysql,filezilla etc.

And another one... this is getting very strange...

Code:

Microsoft (R) Windows Debugger Version 6.2.9200.20512 AMD64
Copyright (c) Microsoft Corporation. All rights reserved.


Loading Dump File [C:\Windows\Minidump\011413-14289-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available

Symbol search path is: SRV*c:\symbols*[URL]http://msdl.microsoft.com/download/symbols[/URL]
Executable search path is: 
Windows 7 Kernel Version 7601 (Service Pack 1) MP (2 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 7601.17944.amd64fre.win7sp1_gdr.120830-0333
Machine Name:
Kernel base = 0xfffff800`02e18000 PsLoadedModuleList = 0xfffff800`0305c670
Debug session time: Mon Jan 14 20:08:41.442 2013 (UTC + 0:00)
System Uptime: 0 days 0:53:22.112
Loading Kernel Symbols
...............................................................
................................................................
......................
Loading User Symbols
Loading unloaded module list
..........
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck A, {fffffa82c66c9e40, 2, 0, fffff800034023da}

Probably caused by : USBPORT.SYS ( USBPORT!USBPORT_Core_iCompleteDoneTransfer+45f )

Followup: MachineOwner
---------

x BlueRobot · Jan 14, 2013

I saw that you were using uTorrent, which increases the risk of a infection, it's best to run full scans with more than one detection program, since no program is perfect at detecting malicious files and software; make sure you have the latest virus definitions for all the detection programs provided too.

It is also important to run the test on each stick separately, since if there is an error detected, then you will able to detect which slot or stick is causing the problem much faster. It seems to be an issue with your RAM or the drivers installed on your system; these can become corrupted by malware.

danielb7390 · Jan 14, 2013

Will run malwarebytes although i don't think i have any virus, i run utorrent but i don't install any downloads on this pc, anyways gonna test and will get back to you tomorrow.

danielb7390 · Jan 15, 2013

Let memtest run for 3hours while i was out and it passed all 3 passes. It's enough to put ram out of the problem?? i can run it today overnight if necessary.

Virus came clean in MSE and MalwareBytes.

x BlueRobot · Jan 15, 2013

You to run it for least 9-10 passes, since errors have been found after 8 passes.

danielb7390 · Jan 15, 2013

Ok will let it run overnight then.

danielb7390 · Jan 16, 2013

Memtest - 10pass - ~11hours - 0 Errors

EDIT:Just got another one...

Code:

Microsoft (R) Windows Debugger Version 6.2.9200.20512 AMD64
Copyright (c) Microsoft Corporation. All rights reserved.


Loading Dump File [C:\Windows\Minidump\011613-22916-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available

Symbol search path is: SRV*c:\symbols*http://msdl.microsoft.com/download/symbols
Executable search path is: 
Windows 7 Kernel Version 7601 (Service Pack 1) MP (2 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 7601.17944.amd64fre.win7sp1_gdr.120830-0333
Machine Name:
Kernel base = 0xfffff800`02e4f000 PsLoadedModuleList = 0xfffff800`03093670
Debug session time: Wed Jan 16 15:49:37.199 2013 (UTC + 0:00)
System Uptime: 0 days 7:06:44.885
Loading Kernel Symbols
...............................................................
................................................................
......................
Loading User Symbols
Loading unloaded module list
................
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck A, {fffffa82c5ed8260, 2, 0, fffff80002e083da}

Probably caused by : USBPORT.SYS ( USBPORT!USBPORT_Core_iCompleteDoneTransfer+45f )

Followup: MachineOwner
---------

EDIT(after ~~25min)

Code:

Microsoft (R) Windows Debugger Version 6.2.9200.20512 AMD64
Copyright (c) Microsoft Corporation. All rights reserved.


Loading Dump File [C:\Windows\Minidump\011613-14679-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available

Symbol search path is: SRV*c:\symbols*http://msdl.microsoft.com/download/symbols
Executable search path is: 
Windows 7 Kernel Version 7601 (Service Pack 1) MP (2 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 7601.17944.amd64fre.win7sp1_gdr.120830-0333
Machine Name:
Kernel base = 0xfffff800`02e19000 PsLoadedModuleList = 0xfffff800`0305d670
Debug session time: Wed Jan 16 16:14:35.064 2013 (UTC + 0:00)
System Uptime: 0 days 0:23:29.750
Loading Kernel Symbols
...............................................................
................................................................
.....................
Loading User Symbols
Loading unloaded module list
..........
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck D1, {ffffffff04d154b8, 2, 1, fffff8800172ff7a}

Probably caused by : NETIO.SYS ( NETIO!FreeSomeCacheBucketEntries+4a )

Followup: MachineOwner
---------

USBPORT NETIO AVERPOL NTOSKRN what else????

x BlueRobot · Jan 16, 2013

AVerPola.sys belongs to your AVerMedia USB Polaris Series Capture Service, and the driver seemed to be causing some problems.

There's seems to be a issue with some of the USB drivers, follow these steps:

Start rb:
Type: Device Manager
Expand USB Controllers
Uninstall driver (for every listed device)
Reboot

The drivers should now be automatically reconfigured by Windows upon reboot.

If you are using any USB devices, then remove these from the USB ports (leave keyboard and mouse), and then update all the devices with the latest drivers, including the mouse and keyboard if applicable.

Turn off USB Suspension:

http://www.sevenforums.com/tutorials/147369-usb-selective-suspend-turn-off.html

danielb7390 · Jan 16, 2013

Disabled USB Suspension.
Uninstalled all devices on "USB Controllers"
I don't really have many usb devices connected (AverMedia and UPS Monitor) no keyboard or mouse is plugged in.

x BlueRobot · Jan 16, 2013

Have you rebooted?

danielb7390 · Jan 16, 2013

Yes, also updated realteck audio driver.

Also theres any reason why the last atheros lan driver gives me extremly slow network? I'm stuck in a 2009 driver because of that.

x BlueRobot · Jan 16, 2013

What browser are using? It could depend on what programs you are using your network bandwidth, post a screenshot of your Resource Monitor (Network tab):

Start

rb: > Type: Resource Monitor > Network

http://www.sevenforums.com/tutorials/9733-screenshots-files-upload-post-seven-forums.html

It's would better to update your network card driver, and what is your network connection speed?

danielb7390 · Jan 16, 2013

With this driver i can copy files @50MB/S or more with network usage @50%
With the last one it gets below 1MB/S with network usage <1%!
Copying files using windows share. 1Gb/s network

x BlueRobot · Jan 16, 2013

Post the screenshot of the tab, just to make sure no unnecessary processes are using your network.

danielb7390 · Jan 16, 2013

With the good driver or the bad one?
Good one: (Before you ask: radio.exe is a vb.net app i made)

x BlueRobot · Jan 16, 2013

I can see a few programs which seem to be taking up quite a few resources, try and reduce the number of program at boot.

http://www.sevenforums.com/tutorials/1401-startup-programs-change.html

Option #3 is my preferred method, but every method works the same.

danielb7390 · Jan 16, 2013

Problem is i always had all of those processes and i need them running! This is a home-server so it has to run services

Before i run all the same stuff in a intel atom and didn't have any problems.

Anyways that "extra" processes won't explain why with the new driver it drops from 50MB/s to <1MB/S its a very big difference!

EDIT:The system just froze while running the daily scheduled task to update the TV EPG using the dvb-t usb.

x BlueRobot · Jan 16, 2013

What does Radio.exe even do? Is it really necessary for uTorrent to be booted every time even when your not using it? I've never heard of new driver causing the network speed to be reduced, post a screenshot with the newer driver.

Have you ran the Upgrade Advisor to check for any driver or program compatibility issues?

Windows 7 Upgrade Advisor - Download - Microsoft Windows

Solved BSOD - NETIO.SYS ntoskrnl.exe

New member

My Computer

Closed by request

My Computer

New member

My Computer

Closed by request

My Computer

New member

My Computer

New member

My Computer

Closed by request

My Computer

New member

My Computer

New member

My Computer

Closed by request

My Computer

New member

My Computer

Closed by request

My Computer

New member

My Computer

Closed by request

My Computer

New member

My Computer

Closed by request

My Computer

New member

My Computer

Closed by request

My Computer

New member

My Computer

Closed by request

My Computer