Misterious BSOD & Freezes, clues point to both Hardware and Software

[Wizek]

Misterious BSOD & Freezes, clues point to both Hardware and Software

I have a serious and mysterious problem with my system.

Things that happened in the last few days according to Soluto: Screenshot
Event viewer says this about and before one of the BSODs (AKA Stop Error and Bug Check):
Screenshot ;
Screenshot ;
Screenshot and this one:
Screenshot
My specs are: Windows 7 Ultimate x64

Hardware: [url=http://prntscr.com/lalu]Screenshot[/url]
CPU - Intel Core 2 Duo E6400 @ 2.13GHz {~48 °C}
MEM - 4.0GB Dual-Channel DDR2 @ 400MHz (5-5-5-18)
MOBO - ASUS P5B-E Motherboard (Socket 775)
---> Integrated: Atheros L1 Gigabit Ethernet 10/100/1000Base-T Controller
GPU - ATI Radeon HD 4800 (XFX Pine Group) {~67 °C} 
HDD (sata) - 977GB SAMSUNG SAMSUNG HD103UJ ATA Device (IDE) {~39 °C}
HDD (sata) - 488GB SAMSUNG SAMSUNG HD501LJ ATA Device (IDE) {~40 °C}
PSU - Chieftech 500W ATW PFC

You can get the error codes from my attached minidumps easily with BlueScreenView, but anyways, I'll post the text of the BSODs here coupled with the screenshots both linked and attached:

http://img806.imageshack.us/img806/6729/6cf40d2248d4453d8b8895d.png
The problem seems to be caused by the following file: NETIO.SYS

SYSTEM_THREAD_EXCEPTION_NOT_HANDLED

*** STOP: 0x1000007e (0xffffffffc0000005, 0xfffff880019237a6, 0xfffff8800a404848, 
0xfffff8800a4040b0)

*** NETIO.SYS - Address 0xfffff880017584fb base at 0xfffff88001756000 DateStamp 
0x4a5bc18a

http://img62.imageshack.us/img62/1737/ffd593b52bd442bea2f7d29.png
The problem seems to be caused by the following file: tcpip.sys

SYSTEM_THREAD_EXCEPTION_NOT_HANDLED

*** STOP: 0x1000007e (0xffffffffc0000005, 0xfffff880019257a6, 0xfffff880031d3848, 
0xfffff880031d30b0)

*** tcpip.sys - Address 0xfffff880019257a6 base at 0xfffff88001802000 DateStamp 
0x4a5bc26e

http://img3.imageshack.us/img3/183/226fd747e1d6442c879dbd4.png
The problem seems to be caused by the following file: tcpip.sys

SYSTEM_THREAD_EXCEPTION_NOT_HANDLED

*** STOP: 0x1000007e (0xffffffffc0000005, 0xfffff880019257a6, 0xfffff88002fe8848, 
0xfffff88002fe80b0)

*** tcpip.sys - Address 0xfffff88001836aeb base at 0xfffff88001802000 DateStamp 
0x4a5bc26e

I've started to experience this problem right after downgrading from Google Chrome's Dev channel to the Stable one due to some minor issues compared to one I'm experiencing: After about an hour use of the "Stable" Chrome a BSOD appeared. It referenced TCPIP.SYS. 3 minidumps are attached, also can be found here RAR’d: http://bit.ly/bKSk2c . I'll explain later why I have only 3. After reboot, I had no network/internet at all. I could reach my router at 192.168.1.1 though, and it responded, but I could reach no other site. I tried reseting the routher, as well to disable then re-enable the network adapter, but I still didn’t got internet. Nither did I after a complete reboot. Only one thing worked: withdrawing the power supply for half a minute, then I had network after startup. Up until the next Blue Screen of Death or freeze. I got more freezes than BSODs. I happens completely unexpected, seemengly randomly, with no sign indicating it’ll freez. But it does completely: I’m not able to move my mouse on screen, no response for ctrl+alt+del, and I can’t even turn off the num-lock. Oh, and the HDD is also shut during this kind of freeze alltogether: I have a blue led wich flashes purpule if the HDD is doing anything, but upon freeze it stays blue. I tried letting my PC recover from freeze for about 10 minutes, but it remained constant, so I have to reboot. No network after either BSOD or complete freeze. I have to withdraw electricity. And even that doesn’t always work. For this reason and the reference to the TCPIP.SYS I suspect my onboard network adapter to be the cause. I’ve tried reverting it’s driver to an earlier state, because I couldn’t find an update, maybe I had the latest one. Although, ASUS only provided drives up to Vista x64.

I had a very similar error about 4 months ago (which I discussed here: http://img2.pict.com/c2/1e/67/3802666/0/1279371913.jpg). Back then I suspected my old IDE HDD very much (it also failed SeaTools' Long Generic test), so I decided to remove it and reinstall my system to one of my other hard drives. And that BSODing and freezing completely disappeared, up until the past 4-5 days.

Additional information: I’ve run a complete virus scan on C:\ with MSE as well as with F-Secure 2010.
I’ve run Window's built-in error-checking (and set it to attempt to heal errors) on the HDD which on the system is.

Apart from my current suspicion for my on-board Atheros L1 Network Adapter I had no other problem with it in the past (well, kind of: it was hard to get it working under my Win7, the system didn't have an appropriate driver for it to install). And as I suspected my HDD back then, this might as well be a miscalculation because the problem remained, it just completely paused for 4 months. (although I don't really know how can that even be possible.)

But if the Lan Adapter is to be malfunctioning, then let me know, and also that whether I can get a new one without my motherboard being replaced. And if so, won't the remaining piece of integrated hardware affect my performance in any ways? Won't it cause any problems? (like continuing to cause this kind of BSODs) And if it needs to be replaced without the motherboard, which would you recommend and why? If the motherboard has to be replaced as well, what is your recommendation for that scenario and why? (Please take into consideration my above hardware specs as well.)

I think this is all. Do you still need more information? If so, please let me know and I'll try to provide.
I'd be very grateful if you could help me!
Best regards.

(I'll update this post within some hours)

 

[Jonathan_King]

I wonder if F-Secure is causing the problems, based on the conflict with the Windows Firewall. Please remove it with this tool, after uninstalling in Programs and Features: ftp://ftp.f-secure.com/support/tools/uitool/UninstallationTool.zip

Replace it with Microsoft Security Essentials: http://www.microsoft.com/security_essentials

Your dumps resemble this guy's: http://www.sevenforums.com/crashes-debugging/96431-bsod-every-2-3-days.html

Check out my advice about ONDAusbnet.sys.

ASACPI.sys needs to be updated. Please install the latest ATK0110 Driver for Vista/7 from the Utilities section: http://support.asus.com/download/download.aspx?SLanguage=en-us

...Summary of the Dumps:

[FONT=lucida console]
Built by: 7600.16539.amd64fre.win7_gdr.100226-1909
Debug session time: Fri Jul 16 09:42:04.754 2010 (UTC - 4:00)
System Uptime: 0 days 3:37:22.658
BugCheck 1000007E, {ffffffffc0000005, fffff880019257a6, fffff88002fe8848, fffff88002fe80b0}
*** WARNING: Unable to verify timestamp for MpNWMon.sys
*** ERROR: Module load completed but symbols could not be loaded for MpNWMon.sys
Probably caused by : fwpkclnt.sys ( fwpkclnt!FwpsCompleteOperation0+1e )
PROCESS_NAME:  System
BUGCHECK_STR:  0x7E
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨
Built by: 7600.16539.amd64fre.win7_gdr.100226-1909
Debug session time: Thu Jul 15 20:00:10.202 2010 (UTC - 4:00)
System Uptime: 0 days 15:16:30.106
BugCheck 1000007E, {ffffffffc0000005, fffff880019257a6, fffff880031d3848, fffff880031d30b0}
*** WARNING: Unable to verify timestamp for MpNWMon.sys
*** ERROR: Module load completed but symbols could not be loaded for MpNWMon.sys
Probably caused by : fwpkclnt.sys ( fwpkclnt!FwpsCompleteOperation0+1e )
PROCESS_NAME:  System
BUGCHECK_STR:  0x7E
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨
Built by: 7600.16539.amd64fre.win7_gdr.100226-1909
Debug session time: Wed Jul 14 18:44:10.501 2010 (UTC - 4:00)
System Uptime: 1 days 14:33:28.405
BugCheck 1000007E, {ffffffffc0000005, fffff880019237a6, fffff8800a404848, fffff8800a4040b0}
*** WARNING: Unable to verify timestamp for MpNWMon.sys
*** ERROR: Module load completed but symbols could not be loaded for MpNWMon.sys
Probably caused by : fwpkclnt.sys ( fwpkclnt!FwpsCompleteOperation0+1e )
PROCESS_NAME:  System
BUGCHECK_STR:  0x7E
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨
Built by: 7600.16539.x86fre.win7_gdr.100226-1909
Debug session time: Fri Jun 18 17:23:00.430 2010 (UTC - 4:00)
System Uptime: 0 days 2:55:23.083
*** WARNING: Unable to verify timestamp for ONDAusbnet.sys
*** ERROR: Module load completed but symbols could not be loaded for ONDAusbnet.sys
BUGCHECK_STR:  0xFE
PROCESS_NAME:  System
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨
Built by: 7600.16539.x86fre.win7_gdr.100226-1909
Debug session time: Mon Jun 14 18:00:43.383 2010 (UTC - 4:00)
System Uptime: 0 days 6:55:57.176
*** WARNING: Unable to verify timestamp for ONDAusbnet.sys
*** ERROR: Module load completed but symbols could not be loaded for ONDAusbnet.sys
BUGCHECK_STR:  0xFE
PROCESS_NAME:  System
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨
Built by: 7600.16539.x86fre.win7_gdr.100226-1909
Debug session time: Mon Jun 14 11:04:02.014 2010 (UTC - 4:00)
System Uptime: 2 days 5:40:21.774
BugCheck D1, {d8d55000, 2, 1, ab9c7503}
*** WARNING: Unable to verify timestamp for ONDAusbnet.sys
*** ERROR: Module load completed but symbols could not be loaded for ONDAusbnet.sys
Probably caused by : ONDAusbnet.sys ( ONDAusbnet+15503 )
BUGCHECK_STR:  0xD1
PROCESS_NAME:  System
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨
Built by: 7600.16539.x86fre.win7_gdr.100226-1909
Debug session time: Fri Jun 11 18:05:23.539 2010 (UTC - 4:00)
System Uptime: 0 days 4:13:52.317
*** WARNING: Unable to verify timestamp for ONDAusbnet.sys
*** ERROR: Module load completed but symbols could not be loaded for ONDAusbnet.sys
BUGCHECK_STR:  0xFE
PROCESS_NAME:  System
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨
Built by: 7600.16539.x86fre.win7_gdr.100226-1909
Debug session time: Fri Jun 11 13:50:18.441 2010 (UTC - 4:00)
System Uptime: 0 days 2:06:41.094
*** WARNING: Unable to verify timestamp for ONDAusbnet.sys
*** ERROR: Module load completed but symbols could not be loaded for ONDAusbnet.sys
BUGCHECK_STR:  0xFE
PROCESS_NAME:  System
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨
Built by: 7600.16539.x86fre.win7_gdr.100226-1909
Debug session time: Tue Jun  8 17:08:16.133 2010 (UTC - 4:00)
System Uptime: 1 days 10:55:31.505
*** WARNING: Unable to verify timestamp for ONDAusbnet.sys
*** ERROR: Module load completed but symbols could not be loaded for ONDAusbnet.sys
BUGCHECK_STR:  0xFE
PROCESS_NAME:  System
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨
Built by: 7600.16539.x86fre.win7_gdr.100226-1909
Debug session time: Mon Jun  7 06:11:15.089 2010 (UTC - 4:00)
System Uptime: 0 days 0:55:14.945
*** WARNING: Unable to verify timestamp for ONDAusbnet.sys
*** ERROR: Module load completed but symbols could not be loaded for ONDAusbnet.sys
BUGCHECK_STR:  0xFE
PROCESS_NAME:  System
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨
Built by: 7600.16539.x86fre.win7_gdr.100226-1909
Debug session time: Sun Jun  6 19:51:32.725 2010 (UTC - 4:00)
System Uptime: 3 days 13:56:57.835
*** WARNING: Unable to verify timestamp for ONDAusbnet.sys
*** ERROR: Module load completed but symbols could not be loaded for ONDAusbnet.sys
BUGCHECK_STR:  0xFE
PROCESS_NAME:  System
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨
[/FONT]

 

[Wizek]

Thanks for your reply Jonathan_King!

I'm uninstalling F-Secure currently, as you advised. Just to note, that my very similar problem from 4 months back didn't involved F-Secure, as I'm sure I used ESET's ESS. Also, I already have MSE installed up and running, but I didn't really trusted it (hence it's a free solution and those are sometimes not so good) so much to run it alone. Hope uninstalling helps, but I'm not positive.

Additionally: I've noticed in the past few days that my PC would freeze much more when the current "Stable" version of Chrome is running, especially before I try to download something. It just won't begin downloading, and my pc locks up. But the issue is still present without Chrome (maybe F-Secure is to be blamed in those instances), I still get freezes after startup when I haven't started Chrome, and the problem that I have no network at all, no matter what I do except withdrawing power. I've also run SpinRite to check wheter my System's HDD was faulty (I ran it on the deepest setting, level 5: "SpinRite offers five operational levels. Each represents a deeper level of analysis. The base levels (1 through 3) examine drive surfaces, recover unreadable data, and refresh drive surfaces by reading and writing each sector and electronically realigning the data underneath a drive’s read/write heads. At Level 4, Deep Defect Analysis, SpinRite performs deep surface analysis and defect scrubbing operations, analyzes the entire drive surface to certify its data storage integrity, and performs full data recovery. The deepest operational analysis, called Restore Good Sectors (level 5), does everything above plus it returns previously marked bad areas to use if they pass the tests 100%.") but it didn't show any sign of error. I also popped in my old IDE 120GB HDD which was suspected for faultiness 4 months ago: after about 10 hours of examination and data-refreshing, SpinRite 6 reported only one sector to be unreadable (and unrecoverable) but I guess it marked that sector to become out of use. Anyways, I plugged the HDD out, hence I don't need additional storage now. BUT I realized, that both my old Vista and Win7 partitions are there untouched, so if you may need those minidumps, I can get them.

Also: I've tried something out: I let uTorrent run for a night, because I remembered that my very similar freezes 4 months ago also happened at nght when uTorrent was running, and now the same happened. It is quite strange that I removed my old IDE HDD, and that seemengly resolved the issue for about 4 months, then pop up again. I don't think I had any freezes inbetween, at most rarely and not at all this much frustrating, but I can recall some BSODs, which behaved differently: They flashed up for some seconds, begun dumping memory, but the BSODs itself froze during the process, so thats why I don't have any minidumps of those rare occasions in my current system. I just restarted and everything was back to normal, I even had networking. If I don't touch Chrome "Stable" (I use a Chromium Nightly Build instead [6.0.464.0 (Developer Build 52077)]) and uTorrent I don't experience this issue: I let my PC up overnight, and even played some games, and it didn't freeze or BSOD'd under pressure.

I'm also looking into the ONDAusbnet.sys and ASACPI.sys issues.

Oh, and BTW, I like your avatar, because I love Chrome. The sad thing is that this issue is also seemingly related to Chrome "Stable".

 

[Jonathan_King]

Thanks. I like the avatar too...one of the SF GFX Team made it for me.

I doubt Chrome is the issue. It is more likely your anti-virus being more active during internet use. That would also explain the uTorrent issue.

As for MSE's trustworthiness...you can trust it as much as any other program. Couple that with common sense about what you download, and you should be good.

There is no need to purchase anti-virus software anymore, despite what ESET, Semantic, ZoneAlarm, and Kaspersky want you to believe.

 

[Wizek]

Ok, I removed F-Secure as you suggested, after run the downloaded Uninstalling tool, my PC rebooted. I fired up uTorrent and Chrome Stable, and it needed only 5 minutes or so to be completely locked up. No mouse movements, no caps-lock toggle, no HDD work shown by led, no response to ctrl+alt+del; just the usual. Trying to update those 2 sys files currently. Will report back shortly with the result.

Update: http://prntscr.com/ls30 <-- This is what Google returns for searching that sys. Notice how the 3rd hit is this very thread, and the 4th is the guy's you referenced. Where could I find an update if Google fails me?

Moving on to ASACPI.sys.

 

[Jonathan_King]

Two more things for you to try. First, a system files check.

Open an elevated command prompt and enter sfc /scannow.

You should also reset the Windows Firewall. Open an elevated command prompt again, and run netsh advfirewall reset.

 

[Wizek]

ASUS only seems to be providing updates for Win Vista x64 and lower. I've downloaded this driver, and it said me this upon running with compatibility settings (without that it wouldn't start.)

Doing your newest sugestions. And how about that ONDAusbnet.sys?

UPDATE: The result of the two commands:

Rebooting "stresstesting" with Chrome Stable and uTorrent in order to see whether the Firewall reset solved anything. Back in moments.

UPDATE 2: Immediately after reboot, I hit the uTorrent and Chrome shortcuts on the taskbar, and my system was locked up after 57 seconds.

 

[Wizek]

Ok, so I've done everything you suggested, except that ONDAusbnet.sys, which of I couldn't found any valuable trace. How to move on in this direction?

I've downloaded and run something which seems to be an update for ASACPI.sys, and I've posted the result; unclear command-line text.

The problem still persists, when running the uTorrent-ChromeStable combo, but If I leave both of them untouched I can get hours with even resource-heavy applications (like some of the latest games) without a single lockup or BSOD (even though I haven't experienced any BSOD since 16 Jul, and only 2 on that day, and one the day before 16th; lockups are way more frequent).

 

[Wizek]

Ok, so it seems I was able to solve the issue: uTorrent and Chrome Stable has been running for 12 hours without any lockup.

SOLUTION: Just simply update your Atheros L1 Gigabit Ethernet 10/100/1000 Base-T Controller's driver from here.

I don't really know how could this be possible. First, I thought I had the latest driver for my Network Adapter. It all begun with 3 BSODs. Then, when they seemed all networking related, I reverted the driver to an earlier "working" version. It seems to be, that in the same time, I also updated my ASACPI.sys through ASUS's support site: so BSODs went away, but freezes came because of the wrong driver.
If you have the same problem, I'm providing this list of other things I've tried which has uncertain contribution to the solution (in order of somewhat probable to the least probable):

• Uninstalled my F-Secure 2010 in oder to resolve any posible conflicts between it and MSE and/or Windows Firewall.
• Reset Windows Firewall's settings to the original with netsh advfirewall reset
• Ran the built in ChkDsk on system partition.
• Ran SpinRite at level 5 to let it maintain my HDD in case it had some unreadable/damaged data at any crucial point.
• Ran a malware scan on all drives with MSE, F-Secure 2010 and ESET's online search and removal tool. Neither of them found any potential harm that could lead to such phenomenon like my issue.
• Reseted to defaults and tweaked my BIOS quite some times, but I think it ended up in the end with the same settings I had just before the issue.
• Checked system files for integrity with sfc /scannow - it told me my files were Ok.

These are the ones I can recall now.

Now if only one could tell me how could anything go wrong with the my suspect: the ASACPI.sys to cause BSODs...

Thanks for all your intention to help, I'll maybe return to this thread if the driver update hasn't really resolved all the problems, only seemingly.