Go Back   Tech Support Forum > Microsoft Support > BSOD, App Crashes And Hangs

User Tag List

[SOLVED] Frequent BSOD[50+ and counting) on Internet Related Programs (tcpip.sys)

This is a discussion on [SOLVED] Frequent BSOD[50+ and counting) on Internet Related Programs (tcpip.sys) within the BSOD, App Crashes And Hangs forums, part of the Tech Support Forum category. For the past 2 months I have received an increased growth in frequent BSOD relating to tcpip.sys. I have received


Closed Thread
 
Thread Tools Search this Thread
Old 09-16-2014, 07:04 PM   #1
Registered Member
 
Join Date: Sep 2014
Posts: 6
OS: Windows 7 Professional 32 bit



For the past 2 months I have received an increased growth in frequent BSOD relating to tcpip.sys. I have received over 50 BOSD in on week and approximately 10 in one day. It makes my life especially frustrating because of the delay in my school online homework, server hosting, and personal entertainment. I mainly receive BSOD on tcpip.sys address 86cD45AC base at 86c1b000. I have check many of my drivers for outdated and have attempted to fix corrupted registry keys. I do not have any experience in such things. I need urgent assistance. I'm not sure if it's a program, registry key, virus, or some other error.

Thanks in advance.

Other Info About problem below and The logs/analysis included below:

Problem signature:
Problem Event Name: BlueScreen
OS Version: 6.1.7601.2.1.0.256.48
Locale ID: 1033

Additional information about the problem:
BCCode: 50
BCP1: CCCCCDD8
BCP2: 00000000
BCP3: 86CD65AC
BCP4: 00000002
OS Version: 6_1_7601
Service Pack: 1_0
Product: 256_1

PC Specs(I have an old system)------
OS: Windows 7 Professional 32 bit
Processor: Intel core Quad Q6600 2.4 GHz
GPU: Geforce 9400 GT
RAM: 3GB
Hard Drive: Hitachi HDT735050VLA360 ATA9 (I believe this is it)
Network Adapter: Netgear RangeMax Wireless USB 2.0 WPN11(Although using FIOS Verizon Router)

Anti-Virus/Malware Software------
-McAfee
-Microsoft Security Essentials
-Spybot Free Edition
-Malwarebytes Anti-Malware

Note: I sometimes turn off Real Time Scanning/ Add an exception for gaming reasons

PC Speed Boosters------
Auslogics BoostSpeed 7
System Mechanic 14 (Don't use often)
Attached Files
File Type: zip BANPHAM-PC-Tue_09_16_2014_164628_13.zip (447.3 KB, 72 views)
File Type: txt Debug Analysis.txt (4.0 KB, 37 views)
sgtvinillaface is offline  
Sponsored Links
Advertisement
 
Old 09-16-2014, 07:41 PM   #2
TSF Team, Emeritus
 
Patrick's Avatar

Microsoft Most Valuable Professional
 
Join Date: Apr 2012
Location: Ring 0
Posts: 4,349
OS: W8.1 x64



Hi,

I don't even need to take a look at the crash dumps, respectfully.

Quote:
-McAfee
-Microsoft Security Essentials
-Spybot Free Edition
-Malwarebytes Anti-Malware
You have 2 antivirus suites running, and 2 anti-malware/spyware programs. There are definitely some huge kernel interceptor conflicts going on that are causing massive NETBIOS problems.

Trash McAfee and Spybot and keep MSE and Malwarebytes.

Quote:
Auslogics BoostSpeed 7
System Mechanic 14 (Don't use often)
Uninstall both. PC 'boosters' are unnecessary bloatware that don't do any real-world improvements whatsoever.

If you'd like to continue to do things such as automatically cleaning TEMP, history, cache, etc... use CCleaner (but don't registry clean).

Regards,

Patrick
Patrick is offline  
Old 09-16-2014, 08:33 PM   #3
Administrator
Manager, Microsoft Support
Acting Manager, Security
BSOD Kernel Dump Expert
Microsoft Windows Insider MVP
 
jcgriff2's Avatar

Microsoft Most Valuable Professional
 
Join Date: Sep 2007
Location: New Jersey Shore
Posts: 34,338
OS: Windows 10, 8.1 + Windbg :)



Hi. . .

In addition to the multiple A/Vs installed, your Netgear RangeMax Wireless USB 2.0 driver is a likely BSOD contributor due to its age and the fact that Microsoft networking drivers netio.sys and tcpip.sys are among the "probably caused by" per Windbg -
Code:
WPN111v.sys  Tue Jul 29 08:45:18 2008 (488F10DE)
http://sysnative.com/drivers/driver.php?id=WPN111v.sys

tcpip.sys and netio.sys are not the cause and are listed (blamed) merely as a default.

Update Netgear driver - see if v3.0 will install - https://downloadcenter.netgear.com/en...#searchResults

Select "WPN111 Software Version 3.0 (Supports Win 7)". Create a Windows System Restore point first -

https://www.sysnative.com/forums/wind...ows-vista.html

Regards. . .

jcgriff2

`
jcgriff2 is offline  
Sponsored Links
Advertisement
 
Old 09-16-2014, 10:17 PM   #4
Registered Member
 
Join Date: Sep 2014
Posts: 6
OS: Windows 7 Professional 32 bit



Quote:
Originally Posted by Patrick View Post
Hi,

I don't even need to take a look at the crash dumps, respectfully.

You have 2 antivirus suites running, and 2 anti-malware/spyware programs. There are definitely some huge kernel interceptor conflicts going on that are causing massive NETBIOS problems.

Trash McAfee and Spybot and keep MSE and Malwarebytes.

Uninstall both. PC 'boosters' are unnecessary bloatware that don't do any real-world improvements whatsoever.

If you'd like to continue to do things such as automatically cleaning TEMP, history, cache, etc... use CCleaner (but don't registry clean).

Regards,

Patrick
I wouldn't necessarily jump to conclusions.... Just please analyze at least the dump file that I debugged. The text document. I need specific results. I don't want to leave my software out especially the paid ones.
sgtvinillaface is offline  
Old 09-16-2014, 10:22 PM   #5
Registered Member
 
Join Date: Sep 2014
Posts: 6
OS: Windows 7 Professional 32 bit



Quote:
Originally Posted by jcgriff2 View Post
Hi. . .

In addition to the multiple A/Vs installed, your Netgear RangeMax Wireless USB 2.0 driver is a likely BSOD contributor due to its age and the fact that Microsoft networking drivers netio.sys and tcpip.sys are among the "probably caused by" per Windbg -
Code:
WPN111v.sys  Tue Jul 29 08:45:18 2008 (488F10DE)
http://sysnative.com/drivers/driver.php?id=WPN111v.sys

tcpip.sys and netio.sys are not the cause and are listed (blamed) merely as a default.

Update Netgear driver - see if v3.0 will install - NETGEAR Support | Downloads | WPN111

Select "WPN111 Software Version 3.0 (Supports Win 7)". Create a Windows System Restore point first -

Windows System Restore - Create a Restore Point (Windows 8.1, 8, 7 & Vista) - Sysnative Forums

Regards. . .

jcgriff2

`
You actually might be on to something.. I've had have crashes relating to WPN111v.sys , but my only problem is that I have problems with installing v3.0 When I try to uninstall the 2.0 it doesn't really uninstall and leaves the 3.0 to say that I still have to uninstall it.
sgtvinillaface is offline  
Old 09-16-2014, 10:24 PM   #6
Registered Member
 
Join Date: Sep 2014
Posts: 6
OS: Windows 7 Professional 32 bit



I'm actually starting to look at the debugged dump file myself and what caught my eye was : mbam.ex I searched it up and it looks like Malwarebytes Anti-Malware. Seems nearly impossible. What could it really be?
sgtvinillaface is offline  
Old 09-16-2014, 11:18 PM   #7
TSF Team, Emeritus
 
Patrick's Avatar

Microsoft Most Valuable Professional
 
Join Date: Apr 2012
Location: Ring 0
Posts: 4,349
OS: W8.1 x64



Quote:
I wouldn't necessarily jump to conclusions
With all due respect, this isn't a jump to a conclusion. If you have two antiviruses installed, they are both trying to do the same thing which is causing a conflict.

Picture the following:

- Man walks up to gate and there's a security officer.

- Security officer requests he needs to inspect the box the man is holding before he allows the man through the gate.

- As the man is getting ready to hand the box to the first security officer, a second security officer comes barging inappropriately through the gate.

- The man shows the box to the original (and first) security officer. At this point, the second security officer then says 'Please also show me the box'.

- The man has an extremely confused look on his face, mainly because he just had his box checked by the first security guard and it was deemed safe to pass through the gate with the man.

Replace security guard #1 with McAfee, security guard #2 with MSE, and the box with a network packet being checked for integrity and validity.

---------------------------

However, because I may as well at this point:

PAGE_FAULT_IN_NONPAGED_AREA (50)

This indicates that invalid system memory has been referenced.

First of all, the dump is verifier enabled:

Code:
Verify Flags Level 0x00000fbb

  STANDARD FLAGS:
    [X] (0x00000000) Automatic Checks
    [X] (0x00000001) Special pool
    [X] (0x00000002) Force IRQL checking
    [X] (0x00000008) Pool tracking
    [X] (0x00000010) I/O verification
    [X] (0x00000020) Deadlock detection
    [X] (0x00000080) DMA checking
    [X] (0x00000100) Security checks
    [X] (0x00000800) Miscellaneous checks

  ADDITIONAL FLAGS:
    [ ] (0x00000004) Randomized low resources simulation
    [X] (0x00000200) Force pending I/O requests
    [X] (0x00000400) IRP logging

    [X] Indicates flag is enabled
With that said, we should have a pretty elaborate stack:

Code:
2: kd> k
ChildEBP RetAddr  
afd5f9f8 8343aa38 nt!MmAccessFault+0xbd
afd5f9f8 86cd65ac nt!KiTrap0E+0xdc
afd5fa88 86b52a0f tcpip!AlepFreeCloneConnectRedirectLayerData+0x15
afd5faa0 86b5297b NETIO!ClassifyContextCleanupRoutine+0x62
afd5faac 86b52bc9 NETIO!WfpObjectDereference+0x1e
afd5fabc 86d6fa84 NETIO!FeReleaseClassifyHandle+0x2c
afd5facc a1b26749 fwpkclnt!FwpsReleaseClassifyHandle0+0x18
afd5fae4 a1b26fc1 mwac+0x5749
afd5fafc a1b24c0a mwac+0x5fc1
afd5fb14 a1b23ec3 mwac+0x3c0a
afd5fb70 a1b23b20 mwac+0x2ec3
afd5fb90 a1b24b18 mwac+0x2b20
afd5fbac a1b29266 mwac+0x3b18
afd5fbcc a1b28255 mwac+0x8266
afd5fbdc 837286c3 mwac+0x7255
afd5fc00 83430fe1 nt!IovCallDriver+0x258
afd5fc14 83606bbc nt!IofCallDriver+0x1b
afd5fc34 83608f9f nt!IopSynchronousServiceTail+0x1f8
afd5fcd0 8360ff71 nt!IopXxxControlFile+0x6aa
afd5fd04 83437856 nt!NtDeviceIoControlFile+0x2a
afd5fd04 773370f4 nt!KiSystemServicePostCall
2615fa1c 00000000 0x773370f4
Malwarebytes' Web Access Control (MWAC) driver is calling various network routines and functions here such as the Network I/O Subsystem's FeReleaseClassifyHandle function, etc. We go right off the rails and access invalid memory at - tcpip!AlepFreeCloneConnectRedirectLayerData+0x15.

Malwarebytes itself is likely not the problem, and again, it's dealing with the security guard situation I mentioned above. It's trying to do network work, and either McAfee or MSE are getting in its way.

As I said, it comes down to using either McAfee or MSE (not both). Personally, as I also said, I'd uninstall McAfee and keep MSE. I've seen too many problems stem from McAfee.

-- Also, I'd like to make note that McAfee should have automatically disabled MSE upon its installation unless you yourself re-enabled it. It's disabled for a reason, and that's because situations like this will start to happen.

A direct quote from a MSFT employee if my word is not enough:

Quote:
“Can Microsoft Security Essentials co-exist with other antivirus software like McAfee or Norton? Or do I have to uninstall my current McAfee Suite?”


Yes, you should uninstall McAfee Suite before installing Microsoft Security Essentials.
Regards,

Patrick
Patrick is offline  
Old 09-17-2014, 12:04 AM   #8
Administrator
Manager, Microsoft Support
Acting Manager, Security
BSOD Kernel Dump Expert
Microsoft Windows Insider MVP
 
jcgriff2's Avatar

Microsoft Most Valuable Professional
 
Join Date: Sep 2007
Location: New Jersey Shore
Posts: 34,338
OS: Windows 10, 8.1 + Windbg :)



Quote:
Originally Posted by sgtvinillaface View Post
You actually might be on to something.. I've had have crashes relating to WPN111v.sys , but my only problem is that I have problems with installing v3.0 When I try to uninstall the 2.0 it doesn't really uninstall and leaves the 3.0 to say that I still have to uninstall it.
Try Revo free edition to fully remove v2.0 - https://www.revouninstaller.com/revo_..._download.html

Select the 4th option on the 2nd screen for full removal.

I would also suggest disconnecting the USB wifi adapter prior to starting the v2.0 uninstall. Re-boot system; plug wifi in; install v3.0

The driver you have installed now was written for Vista and is not always stable under Windows 7. The BSODs that mention MBAM may be occurring while it is "phoning home", i.e., 2014 edition MBAM is conflicting with a 2008 networking driver in a W7 system introduced in 2009. Same with McAfee - it is constantly reaching out over your network to call home.

I do agree with Patrick about the conflicting security apps. I definitely recommend the removal of McAfee for now. (You can always reinstall it after the BSOD epidemic is solved). McAfee and the other Internet Security Suites' 3rd party firewall tends to block local NETBIOS ports used by system services.

Use McAfee removal tool - https://kb.eset.com/esetkb/index?page=content&id=SOLN146

I do believe the 2008 Netgear driver is a major player in the crashes.

Regards. . .

jcgriff2

`
jcgriff2 is offline  
Old 09-17-2014, 12:59 AM   #9
TSF Team, Emeritus
 
Patrick's Avatar

Microsoft Most Valuable Professional
 
Join Date: Apr 2012
Location: Ring 0
Posts: 4,349
OS: W8.1 x64



Indeed, it's likely a combination of several different network issues which we've targeted.

Regards,

Patrick
Patrick is offline  
Old 09-17-2014, 03:04 PM   #10
Registered Member
 
Join Date: Sep 2014
Posts: 6
OS: Windows 7 Professional 32 bit



Quote:
Originally Posted by jcgriff2 View Post
Try Revo free edition to fully remove v2.0 - Download Revo Uninstaller Freeware - Free and Full Download - Uninstall software, remove programs, solve uninstall problems

Select the 4th option on the 2nd screen for full removal.

I would also suggest disconnecting the USB wifi adapter prior to starting the v2.0 uninstall. Re-boot system; plug wifi in; install v3.0

The driver you have installed now was written for Vista and is not always stable under Windows 7. The BSODs that mention MBAM may be occurring while it is "phoning home", i.e., 2014 edition MBAM is conflicting with a 2008 networking driver in a W7 system introduced in 2009. Same with McAfee - it is constantly reaching out over your network to call home.

I do agree with Patrick about the conflicting security apps. I definitely recommend the removal of McAfee for now. (You can always reinstall it after the BSOD epidemic is solved). McAfee and the other Internet Security Suites' 3rd party firewall tends to block local NETBIOS ports used by system services.

Use McAfee removal tool - Uninstallers (removal tools) for common Windows antivirus software - ESET Knowledgebase

I do believe the 2008 Netgear driver is a major player in the crashes.

Regards. . .

jcgriff2

`
This seems quite reasonable, jcgriff2. I'll try to fix this with your solution. Lets see if my BSOD situation will be resolved.Netgear, Malwarebytes, and McAfee.... Seems ironic how McAfee may seem to perform worse than MSE even as a paid 3rd party software.

BTW, isn't there a way to enable the ports in McAfee's firewall?
sgtvinillaface is offline  
Old 09-17-2014, 06:45 PM   #11
Administrator
Manager, Microsoft Support
Acting Manager, Security
BSOD Kernel Dump Expert
Microsoft Windows Insider MVP
 
jcgriff2's Avatar

Microsoft Most Valuable Professional
 
Join Date: Sep 2007
Location: New Jersey Shore
Posts: 34,338
OS: Windows 10, 8.1 + Windbg :)



Quote:
Originally Posted by sgtvinillaface View Post
...Seems ironic how McAfee may seem to perform worse than MSE even as a paid 3rd party software.
Hi -

I wouldn't necessarily say that McAfee performs worse than MSE, just that McAfee's firewall (same with other 3rd party firewalls) tends to cause problems like app hangs, app crashes and even BSODs.

Once McAfee is removed, you should experience faster response time and a decrease in app hangs and app crashes.

You can check out app hangs and app crashes easily using the Reliability Monitor - https://www.sysnative.com/forums/wind...ows-vista.html

After McAfee removal, make sure the Windows Firewall is turned ON and I would suggest resetting it to default settings as well.

Quote:
Originally Posted by sgtvinillaface View Post
BTW, isn't there a way to enable the ports in McAfee's firewall?
Yes, but I honestly couldn't tell you what ports needed to be opened or how to precisely configure McAfee's firewall to assure that all system services (svchost) and others are allowed through (given the necessary perms).

I have tested many of the Internet Security Suites and found they are capable of bringing my 8 core/ 12 GB RAM system to a crawl at times.

Regards. . .

jcgriff2

`
jcgriff2 is offline  
Old 09-17-2014, 09:50 PM   #12
Registered Member
 
Join Date: Sep 2014
Posts: 6
OS: Windows 7 Professional 32 bit



Quote:
Originally Posted by jcgriff2 View Post
Quote:
Originally Posted by sgtvinillaface View Post
...Seems ironic how McAfee may seem to perform worse than MSE even as a paid 3rd party software.
Hi -

I wouldn't necessarily say that McAfee performs worse than MSE, just that McAfee's firewall (same with other 3rd party firewalls) tends to cause problems like app hangs, app crashes and even BSODs.

Once McAfee is removed, you should experience faster response time and a decrease in app hangs and app crashes.

You can check out app hangs and app crashes easily using the Reliability Monitor - Windows Reliability Monitor - (Windows 8.1, 8, 7 & Vista) - Sysnative Forums

After McAfee removal, make sure the Windows Firewall is turned ON and I would suggest resetting it to default settings as well.

Quote:
Originally Posted by sgtvinillaface View Post
BTW, isn't there a way to enable the ports in McAfee's firewall?
Yes, but I honestly couldn't tell you what ports needed to be opened or how to precisely configure McAfee's firewall to assure that all system services (svchost) and others are allowed through (given the necessary perms).

I have tested many of the Internet Security Suites and found they are capable of bringing my 8 core/ 12 GB RAM system to a crawl at times.

Regards. . .

jcgriff2

`
Yeah McAfee can be a resource hog, but it seems my situation is resolved - uninstalls - like malwarebytes... Thanks for the help.
sgtvinillaface is offline  
Old 09-17-2014, 10:15 PM   #13
TSF Team, Emeritus
 
Patrick's Avatar

Microsoft Most Valuable Professional
 
Join Date: Apr 2012
Location: Ring 0
Posts: 4,349
OS: W8.1 x64



Very glad to hear things have been sorted.

Regards,

Patrick
Patrick is offline  
Closed Thread

Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is on
Smilies are on
[IMG] code is on
HTML code is Off
Trackbacks are Off
Pingbacks are Off
Refbacks are Off


Post a Question


» Site Navigation
 > FAQ
  > 10.0.0.2
Powered by vBadvanced CMPS v3.2.3


All times are GMT -7. The time now is 10:04 PM.


Powered by vBulletin® Version 3.8.8
Copyright ©2000 - 2020, vBulletin Solutions, Inc.
vBulletin Security provided by vBSecurity v2.2.2 (Pro) - vBulletin Mods & Addons Copyright © 2020 DragonByte Technologies Ltd.
User Alert System provided by Advanced User Tagging v3.1.0 (Pro) - vBulletin Mods & Addons Copyright © 2020 DragonByte Technologies Ltd.
Copyright 2001 - 2018, Tech Support Forum

Windows 10 - Windows 7 - Windows XP - Windows Vista - Trojan Removal - Spyware Removal - Virus Removal - Networking - Security - Top Web Hosts