none
Windows 8 Pro (64 Bit) error/crash: DRIVER_IRQL_NOT_LESS_OR_EQUAL (tcpip.sys)

    Question

  • Hi,

    I bought a new computer with Windows 8 Pro (64 Bit) in February/March 2013 and it has crashed almost every day I've had it (it crashes at least every two days).  Despite constantly sending the details of the crash through to Microsoft it doesn't seems to have been addressed. The error message that pops up every time is the same.  It is on a blue screen and says:

    "Your computer has encountered an error and needs to restart :(

    DRIVER_IRQL_NOT_LESS_OR_EQUAL (tcpip.sys)"

    Can someone please explain what I need to do to fix this?  I am not a tech head so some step by step instructions would be great.  Can i (re)install new drivers etc or is this a common fault of Windows 8?  This is driving me crazy.  It certainly doesn't make me feel like I have a new computer that's for sure!

    I just read one post that suggested someone's fault ma be because of antivirus software AVG Internet Security 2013 (which I have).  How can I find out iof this is the case?  And if this software doesn't work with Windows 8 does anyone know what is the best to use with Windows 8?

    Any help would be massively appreciated.

    Cheers,

    rdtro1

    Monday, June 17, 2013 4:37 AM

Answers

  • yes, I got the dumps but they give me no ideas what is wrong. Activate driver verifier, maybe this helps:

    http://channel9.msdn.com/Shows/Defrag-Tools/Defrag-Tools-16-WinDbg-Driver-Verifier

    http://channel9.msdn.com/Shows/Defrag-Tools/Defrag-Tools-17-WinDbg-Driver-Verifier-Part-2

    http://channel9.msdn.com/Shows/Defrag-Tools/Defrag-Tools-18-WinDbg-Driver-Verifier-Part-3

    Upload the new dumps.


    "A programmer is just a tool which converts caffeine into code"

    Monday, June 17, 2013 7:31 PM

All replies

  • A bugcheck (BSOD) is a mechanism to protect your PC from damage.

    You get this one:

    Bug Check 0xD1: DRIVER_IRQL_NOT_LESS_OR_EQUAL
    http://msdn.microsoft.com/en-us/library/ff560244%28v=vs.85%29.aspx

    The DRIVER_IRQL_NOT_LESS_OR_EQUAL bug check has a value of 0x000000D1. This indicates that a kernel-mode driver attempted to access pageable memory at a process IRQL that was too high.


    To see the cause I have to take a look at the dumps with the Debugging Tools for Windows.

    Please start the Windows Explorer and go to the folder C:\Windows\Minidump. Next, copy the dmp files to your desktop, zip all dmp into 1 zip file and upload the zip file to your public Skydrive [1] folder and post a link here.

    If you can't see dmp files, make sure your Windows is configured correctly [2][3] to generate dumps.

    If you want to analyze them your own, check those videos [4][5] and read this KB article [6].

    André

    [1] http://social.technet.microsoft.com/Forums/en-US/w7itproui/thread/4fc10639-02db-4665-993a-08d865088d65
    [2] http://support.microsoft.com/kb/254649
    [3] http://blog.nirsoft.net/2010/07/27/how-to-configure-windows-to-create-minidump-files-on-bsod/
    [4] http://channel9.msdn.com/Shows/Defrag-Tools/Defrag-Tools-15-WinDbg-Bugchecks
    [5] http://channel9.msdn.com/Shows/Defrag-Tools/Defrag-Tools-16-WinDbg-Driver-Verifier, http://channel9.msdn.com/Shows/Defrag-Tools/Defrag-Tools-17-WinDbg-Driver-Verifier-Part-2, http://channel9.msdn.com/Shows/Defrag-Tools/Defrag-Tools-18-WinDbg-Driver-Verifier-Part-3
    [6] http://support.microsoft.com/kb/315263

    "A programmer is just a tool which converts caffeine into code"

    • Proposed as answer by Benjoe601 Friday, July 11, 2014 5:53 AM
    Monday, June 17, 2013 5:02 AM
  • Thanks for getting back so quickly, I'm very grateful.

    I found 41 files in that minidump folder and uploaded them into a folder called "Zip for André".

    I hope that I have done it all correctly.  Please advise if I need to do anything else.

    Thank you!

    Monday, June 17, 2013 5:24 AM
  • post the link here. I don't know the link of your skydrive

    "A programmer is just a tool which converts caffeine into code"

    Monday, June 17, 2013 5:28 AM
  • sorry!  I just tried putting the link up but it says I can't until my account has been verified.

    This is first time i've used this forum so am unsure how to do that.  Or do I have to wait for someone at microsoft to do it?

    Monday, June 17, 2013 5:33 AM
  • post the link without Http or replace http with hxxp

    "A programmer is just a tool which converts caffeine into code"

    Monday, June 17, 2013 5:36 AM
  • hxxps://skydrive.live.com/#cid=C30D696DDAE3D0EB&id=C30D696DDAE3D0EB%21133

    thanks! (i hope that helps)

    ps something's come up n i've gotta head out for a couple hours but will get back on asap/when back.  I'll be l;eaving in about 10 or 15 mins so can fix the address or zip file etc if there's anything i've not done right




    • Edited by rdtro1 Monday, June 17, 2013 5:50 AM update info
    Monday, June 17, 2013 5:40 AM
  • Hi André, were you able to find the the zip file?

    at https://skydrive.live.com/#cid=C30D696DDAE3D0EB&id=C30D696DDAE3D0EB%21133

    Cheers,

    r

    • Edited by rdtro1 Monday, June 17, 2013 8:24 AM
    Monday, June 17, 2013 8:19 AM
  • yes, I got the dumps but they give me no ideas what is wrong. Activate driver verifier, maybe this helps:

    http://channel9.msdn.com/Shows/Defrag-Tools/Defrag-Tools-16-WinDbg-Driver-Verifier

    http://channel9.msdn.com/Shows/Defrag-Tools/Defrag-Tools-17-WinDbg-Driver-Verifier-Part-2

    http://channel9.msdn.com/Shows/Defrag-Tools/Defrag-Tools-18-WinDbg-Driver-Verifier-Part-3

    Upload the new dumps.


    "A programmer is just a tool which converts caffeine into code"

    Monday, June 17, 2013 7:31 PM
  • Hello there.  I'm sorry to hijack this thread but I'm having the same issue and I was hoping that perhaps someone here could help me. Here is the link to my skydrive with all of my dmp files. hxxp://sdrv.ms/1fauLH6

    Thanks in advance for any help you can offer.

    • Edited by corvus269 Sunday, August 25, 2013 12:43 AM
    Sunday, August 25, 2013 12:31 AM
  • You have memory corruptions, so run memtest86+ for several hours.

    http://www.geekstogo.com/forum/topic/246994-guide-to-using-memtest86


    "A programmer is just a tool which converts caffeine into code"

    Sunday, August 25, 2013 6:57 AM
  • Hi,

    A few days ago I also had a crash and also tcpip.sys i guess.

    Win 8 /64bit

    Could you please have a look in my dumps? how to fix it?

    Thanks in advance,


    https://skydrive.live.com/?cid=e9d604bdddf75dd1#!/?cid=E9D604BDDDF75DD1&id=E9D604BDDDF75DD1!112
    • Edited by Vilka 2013 Saturday, September 14, 2013 4:07 PM link
    Saturday, September 14, 2013 3:43 PM
  • the link doesn't work. Make sure you set the permissions in skydrive correctly.

    "A programmer is just a tool which converts caffeine into code"

    Saturday, September 14, 2013 7:59 PM
  • Now it should work))

    https://skydrive.live.com/redir?resid=E9D604BDDDF75DD1!215&authkey=!ALTnt4VMkjpXWH8

    thanks))

    Monday, September 16, 2013 7:57 AM
  • update the Realtek driver:

        Image path: \SystemRoot\system32\DRIVERS\Rt630x64.sys
        Image name: Rt630x64.sys
        Timestamp:        Tue Jun 12 15:37:53 2012 

    and look if this fixes it.

    "A programmer is just a tool which converts caffeine into code"

    Monday, September 16, 2013 6:37 PM
  • Hello. I also have the same problem with my PC.

    THIS IS LINK TO DUMP FILES:

    https://skydrive.live.com/#cid=252BA8D3D4B27F2A&id=252BA8D3D4B27F2A%21109

    It happens every time when I start to download big files (movie, games etc.). Usually it achieve 10% and after that screen become blue and restarts with this error.

    Thank you for responding.

    Thursday, September 19, 2013 9:20 AM
  • *******************************************************************************
    *                                                                             *
    *                        Bugcheck Analysis                                    *
    *                                                                             *
    *******************************************************************************
    
    DRIVER_IRQL_NOT_LESS_OR_EQUAL (d1)
    An attempt was made to access a pageable (or completely invalid) address at an
    interrupt request level (IRQL) that is too high.  This is usually
    caused by drivers using improper addresses.
    If kernel debugger is available get stack backtrace.
    Arguments:
    Arg1: 0000000000000000, memory referenced
    Arg2: 0000000000000002, IRQL
    Arg3: 0000000000000000, value 0 = read operation, 1 = write operation
    Arg4: fffff88001b83e58, address which referenced memory
    
    Debugging Details:
    ------------------
    
    
    READ_ADDRESS: GetPointerFromAddress: unable to read from fffff800197d7168
    GetUlongFromAddress: unable to read from fffff800197d71f8
     0000000000000000 Nonpaged pool
    
    CURRENT_IRQL:  2
    
    FAULTING_IP: 
    tcpip!FlpReturnNetBufferListChain+e2738
    fffff880`01b83e58 488b01          mov     rax,qword ptr [rcx]
    
    CUSTOMER_CRASH_COUNT:  1
    
    DEFAULT_BUCKET_ID:  WIN8_DRIVER_FAULT
    
    BUGCHECK_STR:  AV
    
    PROCESS_NAME:  System
    
    ANALYSIS_VERSION: 6.3.9600.16384 (debuggers(dbg).130821-1623) amd64fre
    
    TRAP_FRAME:  fffff88002b38880 -- (.trap 0xfffff88002b38880)
    NOTE: The trap frame does not contain all registers.
    Some register values may be zeroed or incorrect.
    rax=fffffa8004f6fc40 rbx=0000000000000000 rcx=0000000000000000
    rdx=fffffa8004f6fc41 rsi=0000000000000000 rdi=0000000000000000
    rip=fffff88001b83e58 rsp=fffff88002b38a10 rbp=0000000000000000
     r8=fffffa8004f6fc40  r9=0000000000000000 r10=fffff88001400e80
    r11=fffffa80061113d0 r12=0000000000000000 r13=0000000000000000
    r14=0000000000000000 r15=0000000000000000
    iopl=0         nv up ei ng nz na pe nc
    tcpip!FlpReturnNetBufferListChain+0xe2738:
    fffff880`01b83e58 488b01          mov     rax,qword ptr [rcx] ds:00000000`00000000=????????????????
    Resetting default scope
    
    LAST_CONTROL_TRANSFER:  from fffff800194d8769 to fffff800194d9440
    
    STACK_TEXT:  
    00 nt!KeBugCheckEx
    01 nt!KiBugCheckDispatch
    02 nt!KiPageFault
    03 tcpip!FlpReturnNetBufferListChain
    04 NETIO!NetioDereferenceNetBufferList
    05 fwpkclnt!FwppDereferenceNetioNetBufferList
    06 fwpkclnt!FwpsDereferenceNetBufferList0
    07 tunnel!TunnelUserRestoreAndFreeNblAndNbState
    08 tunnel!TunnelUserReturnNetBufferLists
    09 ndis!ndisInvokeNextReceiveCompleteHandler
    0a ndis!NdisReturnNetBufferLists
    0b tcpip!FlpReturnNetBufferListChain
    0c NETIO!NetioDereferenceNetBufferListChain
    0d tcpip!TcpFlushDelay
    0e tcpip!TcpPreValidatedReceive
    0f tcpip!IppDeliverListToProtocol
    10 tcpip!IppProcessDeliverList
    11 tcpip!IppReceiveHeaderBatch
    12 tcpip!IpFlcReceivePackets
    13 tcpip!FlpReceiveNonPreValidatedNetBufferListChain
    14 tcpip!FlReceiveNetBufferListChainCalloutRoutine
    15 nt!KeExpandKernelStackAndCalloutInternal
    16 nt!KeExpandKernelStackAndCalloutEx
    17 tcpip!FlReceiveNetBufferListChain
    18 ndis!ndisMIndicateNetBufferListsToOpen
    19 ndis!ndisInvokeNextReceiveHandler
    1a ndis!NdisMIndicateReceiveNetBufferLists
    1b tunnel!TeredoWfpIndicationWorker
    1c tunnel!LwWorker
    1d nt!IopProcessWorkItem
    1e nt!ExpWorkerThread
    1f nt!PspSystemThreadStartup
    20 nt!KiStartSystemThread
    
    
    
    
        Image path: \SystemRoot\system32\DRIVERS\tunnel.sys
        Image name: tunnel.sys
        Browse all global symbols  functions  data
        Timestamp:        Thu Jul 26 04:23:04 2012 (5010AA08)
        CheckSum:         000296F2
        ImageSize:        0002C000
        File version:     6.2.9200.16384
        Product version:  6.2.9200.16384
        File flags:       0 (Mask 3F)
        File OS:          40004 NT Win32
        File type:        3.6 Driver
        File date:        00000000.00000000
        Translations:     0409.04b0
        CompanyName:      Microsoft Corporation
        ProductName:      Microsoft® Windows® Operating System
        InternalName:     tunnel.sys
        OriginalFilename: tunnel.sys
        ProductVersion:   6.2.9200.16384
        FileVersion:      6.2.9200.16384 (win8_rtm.120725-1247)
        FileDescription:  Microsoft Tunnel Interface Driver
        LegalCopyright:   © Microsoft Corporation. All rights reserved.
    

    Disable the Teredo Tunneling Pseudo-interface 6to4 Adapter

    How to Disable Teredo Tunneling Pseudo-interface 6to4 Adapter

    http://blogs.msdn.com/b/richin/archive/2010/11/26/how-to-disable-teredo-tunneling-pseudo-interface-6to4-adapter.aspx

    Does this fix it?


    "A programmer is just a tool which converts caffeine into code"

    Thursday, September 19, 2013 6:50 PM
  • Yes it works. Thank you VERY much!!!
    • Edited by Ivankk Friday, September 20, 2013 3:48 AM
    Friday, September 20, 2013 3:48 AM
  • i Just bought a new pc with windows 8 4 days ago and it has been crashing each days a couple of time.

    Andre, i see you have helped so i was hoping maybe you would be able to help me aswell.

    the following is the error i have been getting: 

    driver_irql_not_less_or_equal wdf01000.sys 

    and this is the link for all my dmp files:

    hxxp://skydrive.live.com/?cid=e3f13912d6c14a36

    Sunday, September 22, 2013 6:15 PM
  • the link doesn't work. I can't see any dmp files.

    "A programmer is just a tool which converts caffeine into code"

    Sunday, September 22, 2013 6:23 PM
  • sorry i forgot to put them in public folder.. 

    try the previous link again..

    or u can open through this:

    hxxp://skydrive.live.com/redir?resid=E3F13912D6C14A36!483&authkey=!AFPCdIDNH-X5BOY


    Sunday, September 22, 2013 6:39 PM
  • if you could help.. id be very grateful 
    Sunday, September 22, 2013 7:41 PM
  • update the Synaptic Touch Pad driver:

    *******************************************************************************
    *                                                                             *
    *                        Bugcheck Analysis                                    *
    *                                                                             *
    *******************************************************************************
    
    DRIVER_IRQL_NOT_LESS_OR_EQUAL (d1)
    An attempt was made to access a pageable (or completely invalid) address at an
    interrupt request level (IRQL) that is too high.  This is usually
    caused by drivers using improper addresses.
    If kernel debugger is available get stack backtrace.
    Arguments:
    Arg1: 00000000003a5830, memory referenced
    Arg2: 0000000000000002, IRQL
    Arg3: 0000000000000000, value 0 = read operation, 1 = write operation
    Arg4: fffff880010502b0, address which referenced memory
    
    Debugging Details:
    ------------------
    
    CURRENT_IRQL:  2
    
    FAULTING_IP: 
    Wdf01000!imp_WdfRequestCreate+80
    fffff880`010502b0 ff5028          call    qword ptr [rax+28h]
    
    CUSTOMER_CRASH_COUNT:  1
    
    DEFAULT_BUCKET_ID:  WIN8_DRIVER_FAULT
    
    PROCESS_NAME:  System
    
    
    STACK_TEXT:  
    nt!KeBugCheckEx
    nt!KiBugCheckDispatch
    nt!KiPageFault
    Wdf01000!imp_WdfRequestCreate
    SynTP
    
    
    
    IMAGE_NAME:  SynTP.sys
    
    FAILURE_ID_HASH_STRING:  km:av_syntp+1f455
    
           
        Loaded symbol image file: SynTP.sys
        Image path: \SystemRoot\system32\DRIVERS\SynTP.sys
        Image name: SynTP.sys
        Timestamp:        Fri Sep 14 09:31:08 2012


    "A programmer is just a tool which converts caffeine into code"

    Monday, September 23, 2013 5:48 AM
  • thankyou for your reply.

    although i have no idea what to read from that bugcheck analysis but im downloading synaptic touchpad driver from the hp website. hopefully itll fix this crash issue.

    will let you know.. 


    Monday, September 23, 2013 3:16 PM
  • I have the same probleme here also,
    here is my dump file 
    http://sdrv.ms/16ouoe9

    hope you can help!
    Thanks,
    Alexandre

    Tuesday, September 24, 2013 5:15 PM
  • hello Andre

    i installed the latest synaptic touchpad driver

    i dint experience any crash yesterday but a little while ago the windows crashed again.

    here i have uploaded the latest dmp file

    hxxp://skydrive.live.com/?cid=e3f13912d6c14a36

    please have a look and let me know if im having the same problem or there is some other ..

    Tuesday, September 24, 2013 8:06 PM
  • I have the same probleme here also,
    here is my dump file 


    update your Intel Gigabit network card driver e1c63x64.sys

    nt!KeBugCheckEx
    nt!KiBugCheckDispatch
    nt!KiPageFault
    tcpip!FlpReturnNetBufferListChain
    NETIO!NetioDereferenceNetBufferListChain
    tcpip!IppReceiveHeaderBatch
    tcpip!IpFlcReceivePackets
    tcpip!FlpReceiveNonPreValidatedNetBufferListChain
    tcpip!FlReceiveNetBufferListChainCalloutRoutine
    nt!KeExpandKernelStackAndCalloutInternal
    nt!KeExpandKernelStackAndCalloutEx
    tcpip!FlReceiveNetBufferListChain
    ndis!ndisMIndicateNetBufferListsToOpen
    ndis!ndisInvokeNextReceiveHandler
    ndis!NdisMIndicateReceiveNetBufferLists
    e1c63x64
    0x0
    0x0
    
    
        Image path: \SystemRoot\system32\DRIVERS\e1c63x64.sys
        Image name: e1c63x64.sys
        Timestamp:        Thu Feb 21 06:31:49 2013 


    "A programmer is just a tool which converts caffeine into code"

    Tuesday, September 24, 2013 8:22 PM

  • i dint experience any crash yesterday but a little while ago the windows crashed again.

    here i have uploaded the latest dmp file


    the synaptic touchpad driver is still causing the crash.

    "A programmer is just a tool which converts caffeine into code"

    Tuesday, September 24, 2013 8:27 PM
  • well the HP's website only has two drivers available for touchpad. one which is the default from windows and the other is the latest upgrade.

    is there any other solution to this problem?

    Tuesday, September 24, 2013 9:09 PM
  • try this really new driver:

    http://www.devdrivers.ru/load/synaptics_touchpad_drivers/30


    "A programmer is just a tool which converts caffeine into code"

    Wednesday, September 25, 2013 5:25 AM
  • thanks..

    ill install this one and let you know if it solves the problem..

    Wednesday, September 25, 2013 4:09 PM
  • My error is very very basic it seems compared to the rest and I am quite the computer newbie when it comes to command prompts and all of that.... I have the error DRIVER_IRQL_NOT_LESS_OR_EQUAL with nothing after it like it seems a lot of other people have. I can't even log onto my computer after I type in my password the blue screen comes up with that error and makes my computer nothing more then a paperweight. It is a Razer Edge Pro running 8.1 Pro Preview. Any suggestions or help would be incredibly appreciated.
    Thursday, September 26, 2013 11:19 AM
  • How do i verify my account so I can add an link for the DMP and Sysinfo?
    Thursday, September 26, 2013 1:55 PM
  • post a link without http or replace it with hxxp

    "A programmer is just a tool which converts caffeine into code"

    Thursday, September 26, 2013 7:15 PM
  • Thanks much here is the link for my DMP and SYSinfo!!!

    hxxp://sdrv.ms/14L3v0B

    Friday, September 27, 2013 3:23 AM
  • update the RzFilter.sys driver. You should also go back to Windows 8 or install the RTM of 8.1. The preview is unstable for you. I see so many app crashes in the last monts.

    "A programmer is just a tool which converts caffeine into code"

    Friday, September 27, 2013 4:54 AM
  • Thank you for all the help everyone but it appears it is a unique problem for the razer edge pro and I have to wait for a recovery USB to arrive in the mail to fix anything =( again thank you for all of the quick replies and advice super appreciated!

    Saturday, September 28, 2013 12:05 PM
  • hey Andre

    i installed the driver from the link you gave.. it went fine for a few days but its crashing again now

    the difference is, before it used to crash while i was using my pc but now it crashes everytime i wake it up from sleep

    kindly have a look and see if the touchpad is still the issue

    hxxp://skydrive.live.com/?cid=e3f13912d6c14a36

    Wednesday, October 02, 2013 6:31 PM
  • the last dump also shows SynTP.sys

    "A programmer is just a tool which converts caffeine into code"

    Wednesday, October 02, 2013 6:38 PM
  • is there any way to stop this?

    Friday, October 04, 2013 9:06 PM
  • uninstall the touchpad driver

    "A programmer is just a tool which converts caffeine into code"

    Saturday, October 05, 2013 6:30 AM
  • I'm having an issue too. I thought it was just a few issues, but almost every BSOD I get throws a different error. However, more and more it is the tcpip.sys error. I've updated all drivers - or so device manager shows. I get a BSOD about every 20 minutes, regardless of what I'm doing - running vms, streaming Pandora, or even just sitting idle. That's the disturbing part.

    I'm running 8.1 RTM - and I know it's not released yet, but I'd like to see what's going on. As of now, Windows Firewall and Windows Defender. Other than that, no special software - aside from USB 3.0 drivers.

    You'll find the dmp files at: http://sdrv.ms/16pLp5e

    Thanks in advance for all of your help! Looks like you've really been able to resolve issues for some. I looked through what's there, and wasn't able to see much - too much lack of experience.

    Saturday, October 05, 2013 5:06 PM
  • I'm having an issue too. I thought it was just a few issues, but almost every BSOD I get throws a different error. However, more and more it is the tcpip.sys error.


    1 bit of the driver is damaged:

    *******************************************************************************
    *                                                                             *
    *                        Bugcheck Analysis                                    *
    *                                                                             *
    *******************************************************************************
    
    DRIVER_IRQL_NOT_LESS_OR_EQUAL (d1)
    An attempt was made to access a pageable (or completely invalid) address at an
    interrupt request level (IRQL) that is too high.  This is usually
    caused by drivers using improper addresses.
    If kernel debugger is available get stack backtrace.
    Arguments:
    Arg1: 0000000000000000, memory referenced
    Arg2: 0000000000000002, IRQL
    Arg3: 0000000000000001, value 0 = read operation, 1 = write operation
    Arg4: fffff80000ca267a, address which referenced memory
    
    Debugging Details:
    ------------------
    
    CURRENT_IRQL:  2
    
    FAULTING_IP: 
    tcpip!IppSendDatagramsCommon+3fa
    fffff800`00ca267a 010f            add     dword ptr [rdi],ecx
    
    CUSTOMER_CRASH_COUNT:  1
    
    DEFAULT_BUCKET_ID:  CODE_CORRUPTION
    
    BUGCHECK_STR:  AV
    
    PROCESS_NAME:  svchost.exe
    
    ANALYSIS_VERSION: 6.3.9600.16384 (debuggers(dbg).130821-1623) amd64fre
    
    
    STACK_TEXT:  
    nt!KeBugCheckEx
    nt!KiBugCheckDispatch
    nt!KiPageFault
    tcpip!IppSendDatagramsCommon
    tcpip!IpNlpSendDatagrams
    tcpip!UdpSendMessagesOnPathCreation
    tcpip!UdpSendMessages
    tcpip!UdpTlProviderSendMessagesCalloutRoutine
    nt!KeExpandKernelStackAndCalloutInternal
    tcpip!UdpTlProviderSendMessages
    afd!AfdFastDatagramSend
    afd!AfdFastIoDeviceControl
    nt!IopXxxControlFile
    nt!NtDeviceIoControlFile
    nt!KiSystemServiceCopyEnd
    0x0
    
    
    
    STACK_COMMAND:  kb
    
    CHKIMG_EXTENSION: !chkimg -lo 50 -d !tcpip
        fffff80000ca2678 - tcpip!IppSendDatagramsCommon+3f8
    	[ 83:8b ]
    1 error : !tcpip (fffff80000ca2678)
    
    MODULE_NAME: memory_corruption
    
    IMAGE_NAME:  memory_corruption
    
    FOLLOWUP_NAME:  memory_corruption
    
    DEBUG_FLR_IMAGE_TIMESTAMP:  0
    
    MEMORY_CORRUPTOR:  ONE_BIT
    
    FAILURE_BUCKET_ID:  MEMORY_CORRUPTION_ONE_BIT
    

    Run this command to check/repair damaged files:

    http://blogs.technet.com/b/joscon/archive/2012/09/26/fixing-component-store-corruption-in-windows-8-and-windows-server-2012.aspx


    "A programmer is just a tool which converts caffeine into code"

    Saturday, October 05, 2013 7:04 PM
  • Thanks!

    I tried that, and the log says that nothing needed repaired. Almost immediately after reboot I got another BSOD.

    I tweaked some setting for the dump files... Take a look if you might. I'm also trying to search Google to see if maybe there is an updated version of the driver.

    The same link should work for the updated list.
    • Edited by nwcorsentino Saturday, October 05, 2013 10:14 PM
    Saturday, October 05, 2013 10:12 PM
  • Also do a RAM check with memtest86+

    "A programmer is just a tool which converts caffeine into code"

    Sunday, October 06, 2013 6:24 AM
  • Dear Andre.

    Sorry for late answer. I did have the same issue today, after what i decided to update the Realtek driver. And this updating caused 2 other crashes :(

    Could you please check the dump file by those links? All 3 crashes happened today within 2 hours.

    https://skydrive.live.com/redir?resid=E9D604BDDDF75DD1!216&authkey=!AJ17lrha7M8Pjmk

    https://skydrive.live.com/redir?resid=E9D604BDDDF75DD1!218&authkey=!AIjDvXeMf7Qyofk

    https://skydrive.live.com/redir?resid=E9D604BDDDF75DD1!217&authkey=!AKRQQ0GSWAWGzmo

    Thank you for any help you may offer.

    Kind regards.

    Monday, October 07, 2013 9:08 PM
  • 2 crashes are caused by the nVIDIA driver for your "NVIDIA GeForce GT 640M LE" (VEN_10DE&DEV_0FD3). Yours is from 2012. Try a newer driver.

    http://www.nvidia.com/object/notebook-win8-win7-64bit-331.40-beta-driver.html

    http://www.nvidia.com/object/notebook-win8-win7-64bit-327.23-whql-driver.html


    "A programmer is just a tool which converts caffeine into code"

    Tuesday, October 08, 2013 5:18 AM
  • I'm having a similar problem from last few days.... when i try to connect to internet,it shows BSOD and says we encountered a problem and we will restart the pc for you...also it shows for information on your problem search for DRIVER_IRQL_NOT_LESS_OR_EQUAL (ndis.sys).

    please help me to fix this problem...any help would be kindly appreciated :)


    Friday, October 25, 2013 10:36 AM

  • please help me to fix this problem...any help would be kindly appreciated :)


    upload the dumps

    "A programmer is just a tool which converts caffeine into code"

    Friday, October 25, 2013 6:10 PM
  • Please help me fix the problem, I have the same driver_irql problem since the day I upgraded to windows 8.1.

    I have uploaded the dmp files.

    Link:- https://skydrive.live.com/redir?resid=3567386271AE914D!370&authkey=!AI4DCk_TuDWPBu8

    Please help, Thanks in advance

    Saturday, October 26, 2013 9:29 AM
  • Hi, sorry to hijack this thread, but I have the same problem, but it says (igdkmd64.sys) instead of (tcpip.sys) like the original post. I have uploaded my dumps here: http://sdrv.ms/1hiat2v

    This only started happening after I updated to Windows 8.1, so any ideas/help would be greatly appreciated!

    Saturday, October 26, 2013 1:44 PM
  • disable the toredo tunnel adapter:

    nt!KeBugCheckEx
    nt!KiBugCheckDispatch
    nt!KiPageFault
    NETIO!RtlCopyBufferToMdl
    tcpip!TcpTcbReassemblyRetrieveSegments
    tcpip!TcpTcbCarefulDatagram
    tcpip!TcpTcbReceive
    tcpip!TcpMatchReceive
    tcpip!TcpPreValidatedReceive
    tcpip!IppDeliverListToProtocol
    tcpip!IppProcessDeliverList
    tcpip!IppReceiveHeaderBatch
    tcpip!IppFlcReceivePacketsCore
    tcpip!FlpReceiveNonPreValidatedNetBufferListChain
    tcpip!FlReceiveNetBufferListChainCalloutRoutine
    nt!KeExpandKernelStackAndCalloutInternal
    tcpip!FlReceiveNetBufferListChain
    ndis!ndisMIndicateNetBufferListsToOpen
    ndis!NdisMIndicateReceiveNetBufferLists
    tunnel!TeredoWfpIndicationWorker
    tunnel!LwWorker
    nt!IopProcessWorkItem
    nt!ExpWorkerThread
    nt!PspSystemThreadStartup
    nt!KiStartSystemThread
    
    
        Image path: \SystemRoot\system32\DRIVERS\tunnel.sys
        Image name: tunnel.sys
        Timestamp:        Thu Aug 22 13:35:45 2013 (5215F791)
        CheckSum:         0002B6E4
        ImageSize:        0002D000
        File version:     6.3.9600.16384
        Product version:  6.3.9600.16384
        File flags:       0 (Mask 3F)
        File OS:          40004 NT Win32
        File type:        3.6 Driver
        File date:        00000000.00000000
        Translations:     0409.04b0
        CompanyName:      Microsoft Corporation
        ProductName:      Microsoft® Windows® Operating System
        InternalName:     tunnel.sys
        OriginalFilename: tunnel.sys
        ProductVersion:   6.3.9600.16384
        FileVersion:      6.3.9600.16384 (winblue_rtm.130821-1623)
        FileDescription:  Microsoft Tunnel Interface Driver
        LegalCopyright:   © Microsoft Corporation. All rights reserved.
    

    Disable the Teredo Tunneling Pseudo-interface 6to4 Adapter

    How to Disable Teredo Tunneling Pseudo-interface 6to4 Adapter

    http://blogs.msdn.com/b/richin/archive/2010/11/26/how-to-disable-teredo-tunneling-pseudo-interface-6to4-adapter.aspx


    "A programmer is just a tool which converts caffeine into code"

    Saturday, October 26, 2013 7:34 PM
  • igdkmd64.sys = Intel HD driver. Try different Intel drivers.

    "A programmer is just a tool which converts caffeine into code"

    Saturday, October 26, 2013 7:38 PM
  • I actually saw the same thing when I looked it up, and I installed the Windows 8.1 Drivers for my graphics card, but it didn't help much.
    Saturday, October 26, 2013 7:50 PM
  • Please help me fix the problem, I have the same driver_irql problem since the day I upgraded to windows 8.1.

    I have uploaded the dmp files.

    Link:- https://skydrive.live.com/redir?resid=3567386271AE914D!370&authkey=!AI4DCk_TuDWPBu8

    Please help, Thanks in advance

    PLease give me a solution

    Saturday, October 26, 2013 8:01 PM
  • Please help me fix the problem, I have the same driver_irql problem since the day I upgraded to windows 8.1.

    I've already replied to you. disable the toredo tunnel adapter.

    "A programmer is just a tool which converts caffeine into code"

    Sunday, October 27, 2013 6:15 AM
  • Please help me fix the problem, I have the same driver_irql problem since the day I upgraded to windows 8.1.

    I've already replied to you. disable the toredo tunnel adapter.

    "A programmer is just a tool which converts caffeine into code"

    Thanx a lot, I have disabled it, Lets c if it works.. Thanks again
    Sunday, October 27, 2013 7:36 AM
  • Thanks for your help!!!

    https://skydrive.live.com/#cid=197AB37F1F3FC35C&id=197AB37F1F3FC35C%21418

    Friday, November 01, 2013 11:06 PM
  • Thanks for your help!!!

    https://skydrive.live.com/#cid=197AB37F1F3FC35C&id=197AB37F1F3FC35C%21418

    update the Touchpad driver (SynTP.sys)

    Call Site
    nt!KeBugCheckEx
    nt!KiBugCheckDispatch
    nt!KiPageFault
    SynTP
    
    
    
       Image path: \SystemRoot\system32\DRIVERS\SynTP.sys
       Image name: SynTP.sys
       Timestamp:        Wed Apr 24 02:34:23 2013 


    "A programmer is just a tool which converts caffeine into code"

    Saturday, November 02, 2013 7:03 AM
  • Seriously?!? C'mon Microsoft! I've had my brand new computer for 2 whole days, it's crashed 5 times already, from at least 3 different error messages! The forums I've been reading indicate this has been a problem for windows 8 users for over a year! I do not have the patience or the time to spend fixing issues on a BRAND NEW MACHINE!!! Good grief, who's in charge of all this, Kathleen Sebelius? I will be returning (what promised to be an awesome computer) on Monday and start my search for an Apple product, which up until now I have avoided because of my loyalty to Microsoft for the last 15 years! Funny thing is, Windows 8 is crashing RIGHT NOW while I'm simply trying to play a DVD movie, and I am typing this message on my iPad! Angry, YES I'M ANGRY, what in the world...
    Sunday, November 10, 2013 3:30 AM
  • Seriously?!? C'mon Microsoft! I've had my brand new computer for 2 whole days, it's crashed 5 times already, from at least 3 different error messages!
    upload the dumps

    "A programmer is just a tool which converts caffeine into code"

    Sunday, November 10, 2013 6:45 AM
  • Hey,

    I'm getting this error while playing games on my surface pro 2.  Any chance you could tell me what's going on?

    Cheers

    hxxps://skydrive.live.com/redir?resid=AE25A5448ACFFC3A!497&authkey=!APRCRUdZw3UKhas'



    Thursday, November 14, 2013 4:09 AM
  • Hey,

    I'm getting this error while playing games on my surface pro 2.  Any chance you could tell me what's going on?



    update the Intel HD GPU driver:

    nt!KeBugCheckEx
    nt!KiBugCheckDispatch
    nt!KiPageFault
    igdkmd64
    0x0
    0x0
    0x0
    
    
    
    
        Image path: \SystemRoot\system32\DRIVERS\igdkmd64.sys
        Image name: igdkmd64.sys
        Timestamp:        Wed Jul 31 19:49:00 2013 

    Also install all updates, you use the 8.1 RTM without any update:

    Built by: 9600.16384.amd64fre.winblue_rtm.130821-1623
    


    "A programmer is just a tool which converts caffeine into code"

    Thursday, November 14, 2013 6:03 AM
  • Thanks for the quick reply.  I'm not the most tech savy and I'm having trouble finding the proper driver update.  Is it possible for you to link me them?
    Thursday, November 14, 2013 7:50 AM
  •  Is it possible for you to link me them?

    Get the latest driver from Microsoft's download center:

    http://www.microsoft.com/en-us/download/details.aspx?id=38826

    Download the Octorber2013SurfaceProWin8.1.zip, extract the zip and use device manager to update the driver.


    "A programmer is just a tool which converts caffeine into code"

    Thursday, November 14, 2013 6:29 PM
  • Hey,

    I followed your instruction but I am getting the notice "Windows has determined the driver software for your device is up to date".  Any ideas what/if I'm doing something wrong?

    Thanks again
    Thursday, November 14, 2013 8:46 PM
  • when using Device manager, select to manually choice the driver, and click on "have disk". Here select the expended driver.

    "A programmer is just a tool which converts caffeine into code"

    Friday, November 15, 2013 5:24 AM
  • Hi Andre, I have similar problem with 8.1

    DRIVER_IRQL_NOT_LESS_OR_EQUAL

    synTP.sys

    Would you be so kind and help me debug..

    janno

    greggaab at hot.ee

    https://dl.dropboxusercontent.com/u/23748183/DUMP.zip

    Friday, November 29, 2013 12:25 PM
  • Hi Andre, I have similar problem with 8.1

    DRIVER_IRQL_NOT_LESS_OR_EQUAL

    synTP.sys

    Would you be so kind and help me debug..


    Try a different Synaptic Touchpad driver:

    *******************************************************************************
    *                                                                             *
    *                        Bugcheck Analysis                                    *
    *                                                                             *
    *******************************************************************************
    
    DRIVER_CORRUPTED_EXPOOL (c5)
    An attempt was made to access a pageable (or completely invalid) address at an
    interrupt request level (IRQL) that is too high.
    
    
    nt!KeBugCheckEx
    nt!KiBugCheckDispatch
    nt!KiPageFault
    nt!ExFreePoolWithTag
    SynTP
    0x0
    Wdf01000!FxObject::PerformDisposingDisposeChildrenLocked
    Wdf01000!FxObject::PerformEarlyDisposeWorkerAndUnlock
    Wdf01000!FxObject::DisposeChildrenWorker
    Wdf01000!FxObject::PerformDisposingDisposeChildrenLocked
    Wdf01000!FxObject::PerformEarlyDisposeWorkerAndUnlock
    Wdf01000!FxObject::EarlyDispose
    Wdf01000!FxPkgPnp::PnpEventRemovedCommonCode
    Wdf01000!FxPkgFdo::PnpEventFdoRemovedOverload
    Wdf01000!FxPkgPnp::PnpEnterNewState
    Wdf01000!FxPkgPnp::PnpProcessEventInner
    Wdf01000!FxPkgPnp::PnpProcessEvent
    Wdf01000!FxPkgPnp::_PnpRemoveDevice
    Wdf01000!FxPkgPnp::Dispatch
    Wdf01000!FxDevice::DispatchWithLock
    kbdclass! ?? ::FNODOBFM::`string'
    nt!IopSynchronousCall
    nt!IopRemoveDevice
    nt!PnpRemoveLockedDeviceNode
    nt!PnpDeleteLockedDeviceNode
    nt!PnpDeleteLockedDeviceNodes
    nt!PnpDelayedRemoveWorker
    nt!PnpChainDereferenceComplete
    nt!PnpIsChainDereferenced
    nt!PnpProcessQueryRemoveAndEject
    nt!PnpProcessTargetDeviceEvent
    nt!PnpDeviceEventWorker
    nt!ExpWorkerThread
    nt!PspSystemThreadStartup
    nt!KiStartSystemThread
    
    
        Image path: \SystemRoot\system32\DRIVERS\SynTP.sys
        Image name: SynTP.sys
        Timestamp:        Wed Aug 14 04:53:25 2013 


    After joining the forum 4 years ago, I'll leave it soon. The abusive behavior of moderator and CGS users to repost already posted answers or only posting generic and useless replies like "Do a clean boot" to nearly all question and marking their own replies as answer reduces the quality of the forum dramatically. I'm tired of such trolls and no longer wasting my spare free time. If you're an user who whats high quality answers and help by analyzing your crash dumps, xperf/xbootmgr trace or CBS logs ask on msfn.org, I'll take a look at them. After December 1st 2013 I'll only post to topics where I already replies to. So hurry up and ask your question.

    Saturday, November 30, 2013 7:45 AM
  • Hello Andre

    After a couple of weeks of no crashes, it started again a few days ago.

    kindly take a look at these files and let me know if its the same problem and any possible fixes u could recommend.

    hxxp://skydrive.live.com/?cid=e3f13912d6c14a36

    regards

    Saleh

    Saturday, December 07, 2013 12:40 AM
  • https://skydrive.live.com/redir?resid=A301CA9DCAEE0B2D!2026&authkey=!AERmkvf55xebHTs&ithint=file%2c.rar

    Hi Andre,

    Please find the link to skydrive for my minidump files. Please let me know whats wrong with my laptop. 

    Regards

    Piyush Goyal

    Thursday, January 30, 2014 5:14 PM
  • https://skydrive.live.com/?cid=b3cc0d588ca5f9db&id=&action=Share#cid=B3CC0D588CA5F9DB&id=B3CC0D588CA5F9DB!161

    the above is the link to dmp files
    plz plz give me a solution as soon as possible
    I'm relaying on u :)

    Thank you
    Anas

    Thursday, January 30, 2014 8:21 PM
  • here's my link https://skydrive.live.com/?mkt=en-US#cid=C5D188B564E71647&id=C5D188B564E71647!105 .. can u also help me to fix this problem ? thanks
    Sunday, February 09, 2014 6:29 AM
  • i too xperience the same problem 

    but i just deleted one of the two DMP files

    the link to one of the DMP file is

    https://skydrive.live.com/redir?resid=D8F497FD31729CA3!105&authkey=!ACcDNC2f8BVYDdM&ithint=file%2c.zip

    Sunday, February 16, 2014 3:07 PM
  • https://onedrive.live.com/?cid=252BA8D3D4B27F2A&id=252BA8D3D4B27F2A!109#cid=3044b96c80751e32

    plz check my error too

    Thursday, February 20, 2014 6:32 AM
  • Here's My Link

    https://onedrive.live.com/redir?resid=CB0A371B194161D7!1900&authkey=!AJbytv23YFnC1WQ&ithint=file%2c.rar

    i don't know what's this problem........??

    PLZ..someone help

    Regards,

    MohamedG23
    Thursday, February 20, 2014 11:52 AM
  • https://onedrive.live.com/#cid=08d610a44936b043

    I have the same problem sir! DRIVER_IRQL_NOT_LESS_OR_EQUAL (tcpip.sys)

    Here's my link, could you please also look into it, appreciate all the help!

    Sunday, March 09, 2014 12:38 PM
  • https://onedrive.live.com/#cid=08d610a44936b043

    I have the same problem sir! DRIVER_IRQL_NOT_LESS_OR_EQUAL (tcpip.sys)

    Here's my link, could you please also look into it, appreciate all the help!

    Sunday, March 09, 2014 12:39 PM
  • Hi, I also have the same problem.

    I'm using a Samsung ATIV Book 2 Laptop, with Windows 8

    Here is the dump file

    https://onedrive.live.com/redir?resid=B372A22EE93628A5!114&authkey=!AFi-q3Oog67VTuk&ithint=file%2c.zip

    Please reply
    Friday, March 14, 2014 4:22 AM
  • Hi Andre, i have the same problem... my pc (win8 64 bit) crashes about every 40 minutes and the message specify DRIVER_IRQL_NOT_LESS_OR_EQUAL (NETIO.SYS).

    this is the link of my dump files https://onedrive.live.com/redir?resid=7BC9282BC1DA3F5B!107&authkey=!ABQ-f6RkRzNp0Yg&ithint=file%2c.zip

    thanks for help!... i work and study by this pc!! :(

    Saturday, April 05, 2014 12:16 PM
  • Hello i have this same problem, with this drivers, this is my public link of Skydrive 

    https://onedrive.live.com/redir?resid=3A80446C27922BB4%21394
    Wednesday, April 16, 2014 6:54 PM
  • here is my mimidump files..help me..
    https://onedrive.live.com/?cid=bc985eff9a68c755&id=BC985EFF9A68C755%21174#cid=E671EF1AC0CA4B7C&id=E671EF1AC0CA4B7C%21107
    Monday, April 28, 2014 10:21 AM
  • Hello.  Could you please take a look at my dumps i cant for the life of me work out where there coming from.   Link:  https://onedrive.live.com/redir?resid=6A822A50351E894A%211546

    thanks.

    Thursday, May 01, 2014 12:20 PM
  • Hi

    I also have same problem. Here is dmp file:

    https://onedrive.live.com/redir?resid=779FB05B369CD935%21122

    Wednesday, June 25, 2014 9:20 PM
  • Hi Andre

    You are a genius to be able to help so many people. I also have the same crash problem and would appreciate it if you could take a look at my Minidump files to see what the problem could be

    //onedrive.live.com/?gologin=1&mkt=en-GB#cid=A17FDD16B3A60D4A&id=A17FDD16B3A60D4A%21110

    Really appreciate your help

    Thanks

    Wednesday, July 09, 2014 11:19 AM