Apotho

Hello, I'm new to this forum and coild use some assistance resolving a BSOD problem that is a bit past my ability to decipher.

I'm using a Dell Inspiron 1720 Laptop(Belarc report inclued in the zip file with the minidump files). The problem started about 3-4 weeks ago or so. I had several crashes that all but one reported TCPIP.SYS on the Blue Screen.

About the time the problem started, I had recently added several bundles of Video/Audio codecs to the system.

After having several BOSD crashes and not being able to resolve the problem, I did a clean install of windows from the dell image 2 weeks ago(9/15/09). As I normally do, I installed my Agnitum Firewall, and then Windows Defender. I then proceeded to run windows update to get current with Micrsoft and installed many applications and restored data files from a backup(Carbonite). Somewhere during this process the Blue Screen crashes(all TCPIP.SYS related) started happening again. Not sure exactly where in the recovery process as it took several days to complete all the restores and installs.

Since the Blue screens started again, I updated all the driver files from the Dell website, but the problem still persisted as of yesterday.

I looked at a Windows System Health report and the only problem was that the Dell 1395 WLAN device reported an error so I disabled the device in device Manager.

I have stripped down the autostart programs and actually deleted all the Application Rules in my Agnitum Firewall, it had lots of .tmp files from Installs
and uninstalls, so I thought a clean slate wouldn't necessarily be a bad thing. I did this early yesterday morning and as of this writing the machine has sat here all day without a BSOD(Early am). But, it hasn't done anything of consequence except attemp to get email with Pop Peeper.

I have used WinDbg to look at the dumps, but finding the problem is a bit more than I can resolve. Any help you can provide would be greatly appreciated.

Attached is a zip file including several of the minidumps, Belarc report and the System Health report.

I also have a large memory dump and I can provide a Hijackthis report if you would like to look at those.

Regards

Attached Files

Crashes.zip (272.1 KB, 1 views)

jcgriff2

Hi - Nice job on editing Belarc to remove sensitive information -- thank you.

I need add'l info, please.

http://www.techsupportforum.com/1871981-post2.html

Attach the resutling zip File to your next post.

Also, at least while you are here, please remove the Agnitum Firewall. It will cause us nothing but problems going forward. Simply disabling it will not be effective.

Regards. . .

jcgriff2

.

Apotho

Thanks for your reply.

Attached is the zip with the info you requested. I also included the Autoruns report. There is a file listed in the Autoruns that looks very supicious to me.
(LgklebsiBit c:\windows\system32\lgklebsi.dll)

I ran the Kaspersky online scan but got nothing about that file. I'll do some investigating to see what I can find about it.

*cringes, remove my fire wall? That makes me super paranoid.

Never used the windows firewall, guess I'll have to look at it as a temporary option.

The files I am sending will still show my firewall installed, till I get the windows one at least to provide some protection.

Attached Files

TSF_Vista_Support.zip (687.9 KB, 4 views)

jcgriff2

Well, you can hold off if you wish. It is just that I have seen so many BSODs caused by 3rd party firewalls in Vista and now in Windows 7. Also many app crashes caused by them as well.

Did you find anything out about that driver?

Thanks... jcgriff2

.

Apotho

If you are referring to the Dell 1395 Wlan driver, I guess I will need to run through the Dell Diags shipped with the PC, Their web page has no utility for testing that device that I can locate.

Regarding the supicious dll, I found very little on the web relating to it other than one site that shows a removal process with the usual disclamer that it applies to machine the person being helped is using.

I have a copy of AVG , guess I'll install it and run a scan. I did remove Outpost for now, so I have no antivirus except for Windows Defender.

Apotho

The AVG scan came up clean, just a few cookies listed. Specifically scanned the suspicious file with no virus reported. I also renamed the file and rebooted a couple Times since and it has not returned.

Apotho

The Diagnostic for the Dell 1395 WLan adapter tested out fine.

Apotho

Agnitum/Outpost has released a temporary fix for the BSOD problem I have been having, at this point I am going to consider this problem fixed unless I see another BSOD.

I have had 2 BSOD's with video as the cause, so I removed all the Dell/Invidia drivers and dropped back to the Windows install of the drivers. A few days of playing Guild Wars should let me know where I stand with the video crashes. This game has been the main source of the video BSOD's.

If you want, you can close this thread and I will repost if the Video problem is not resolved.

jcgriff2

Hi -

I believe the issue with TCP/IP to be your Broadcom Ethernet driver. It is from 2006; the Dell wifi is 2007. These are way too old to be in a system with Vista SP2 -

Your NVIDIA video driver is from mid-2008. Go to NVIDIA and gert a new driver.

NVIDIA GeForce 8600M GT

http://www.nvidia.com/Download/index.aspx?lang=en-us

You need to find updates for these or the BSODs will most certainly continue.

Regards. . .

jcgriff2

.

Apotho

I've been down that road with the video drivers, the problem just got worse each time I updated the drivers. Right now, the video is running smoothly for everything that I have done so far. Guildwars has never run so smoothly on this machine. No pauses, no corrupted video. Better than when the machine was brand new.

Uninstalling the Fire wall stopped the TCPIP.SYS BOSD's and since I reinstalled it and applied the patch from Agnitum, no crashes. Previously it was crashing 2-3 times a day.

I have a couple other games I will try out to make sure, but my motto has always been, "if it ain't broke, don't fix it".

What I currently have is all the current drivers installed from Dell, except the Video driver. If you saw something in the reports about the Broadcom or WiFi, other than the age, I am open to looking into it. Otherwise, I will deal with any problem that comes up, and If I can't get it resolved, you can bet I will be knocking at your virtual door again.

If not, Thanks!

All for your time and effort is very much appreciated.

Regards
Apotho

jcgriff2

I know what that is like. In 2008, I didn't update my NVIDIA drivers for several months b/c of BSODs others' that were experiencing. I too, left mine alone. Not this year, though.

I am glad that the source of the problem was found. So... you are patching tcpip.sys ? My philosophy is a little different at times -- I like to cause recreate crashes when possible to then see what fixes them.




What you have right now is a Vista SP2 system containing mostly updated 2009 Microsoft Vista drivers. As Windows Updates come in, some MS drivers will continue to be updated. Meantime, your 3rd party drivers like NVIDIA, IDT/Sigmatel, Broadcom Etherner, Dell wifi, etc... remain left behind in 2006, 7, etc... and eventually the gap between the two will catch up with you causing BSODs.


Your IDT codec will someday clash with the Microsoft driver for your USB audio. USB audio is set as primary for audio speakers; IDT/ Sigmatel is set primary for microphone -


Your touch pad will give you trouble sometime soon. Synoptics drivers are BSOD'ing all over as I write this -- they have a 2007 date as well. Your touchpad has all 3 drivers below loaded for its use -
`

If your current course of action works for you -- stick with it. At least now you know the state of your drivers, so when the next BSOD comes knocking, you'll be a little better prepared. Driver updates are the 1st thing I always look at when a system crashes.

Most likely the Dell support site is not being fully updated any longer -- like with other OEMs on systems that are >> 1 year old. I always go directly to Intel, NVIDIA, etc... for updates and bypass HP, Soy, etc.. these days. I know we were all told to return to mama-OEM for drivers, but when HP has a mid-2008 Intel wifi driver and Intel has an Aug 2009 version... Intel*dot*com wins every time.

Have a nice weekend.

jcgriff2

.

Apotho

Just a quick note to let you know where I stand ATM. I eventually upgraded my nvidia drivers to the latest version from nvidia. Things seem to be working very well now for everything I am doing. The nvshext.dll is causing explorer "right-click" crashes so I just disabled it with Shell Extension Viewer.

About that supicious file that I listed earlier, "C:\Windows\system32\lgklebsi.dll" appears to be part of the "Windows Essentials Codec Pack" that I installed. Same install date and time as the "Haali" codecs.

Thought I would post that info here since this thread is appearing in Google now when I search for that file. Maybe it will save someone else some trouble later.

Any way, Thanks again for your help.