locked
Blue screen error in windows 7 RRS feed

  • Question

  • HI,

    I have been facing frequent windows restart due to blue screen error in last few days. Please help me out.

    the error i am getting is 

     

    Problem signature:

      Problem Event Name: BlueScreen

      OS Version: 6.1.7600.2.0.0.768.3

      Locale ID: 16393

     

    Additional information about the problem:

      BCCode: d1

      BCP1: 0000000000000028

      BCP2: 0000000000000002

      BCP3: 0000000000000000

      BCP4: FFFFF8800180EA7D

      OS Version: 6_1_7600

      Service Pack: 0_0

      Product: 768_1

     

    Please look at the crash dump files at my skydrive http://cid-0902b2fca16cf92d.skydrive.live.com/redir.aspx?resid=902B2FCA16CF92D!106&Bpub=SDX.Docs&Bsrc=GetSharingLink

     

    Friday, June 18, 2010 9:02 PM

Answers

  • The minidump files show a consistent  DRIVER_IRQL_NOT_LESS_OR_EQUAL Stop Error with a reference to the netio.sys. The tcpip.sys and ndis.sys were also "on the stack".

    Errors involving the netio.sys, tcpip.sys, etc., are often the result of having third party firewalls installed such as McAfee firewall as indicated in the following link:

    http://www.sevenforums.com/crashes-debugging/47459-bsod-netio-sys-tcip-sys.html

    If you uninstall McAfee firewall you may find the problem will resolve.

    As an alternative, you could leave McAfee intact and try the following hotfix:

    http://support.microsoft.com/kb/981180/en-us

    Although the error in the article is different the cause may be the same.   

    If the hotfix does not help or causes any other issue you should be able to uninstall it using "Uninstall a program".

    • Marked as answer by shadowfox_sid Saturday, June 19, 2010 11:46 AM
    Friday, June 18, 2010 11:17 PM
  • In addition to auggy's advice - you have the following stale drivers on your system:

    facap.sys 9/24/2008 (webcam related)

    CtClsFlt.sys 6/15/2009  ( integrated webcam driver )

    PxHlpa64.sys 6/23/2009 (Sonic)

    In the event you follow auggy's guidance and the behavior unfortunately persists, consider updating the above drivers with a more recent version, or removing them or the software that they came along with, to check the behavior.

    • Marked as answer by shadowfox_sid Saturday, June 19, 2010 11:46 AM
    Saturday, June 19, 2010 2:34 AM

All replies

  • The minidump files show a consistent  DRIVER_IRQL_NOT_LESS_OR_EQUAL Stop Error with a reference to the netio.sys. The tcpip.sys and ndis.sys were also "on the stack".

    Errors involving the netio.sys, tcpip.sys, etc., are often the result of having third party firewalls installed such as McAfee firewall as indicated in the following link:

    http://www.sevenforums.com/crashes-debugging/47459-bsod-netio-sys-tcip-sys.html

    If you uninstall McAfee firewall you may find the problem will resolve.

    As an alternative, you could leave McAfee intact and try the following hotfix:

    http://support.microsoft.com/kb/981180/en-us

    Although the error in the article is different the cause may be the same.   

    If the hotfix does not help or causes any other issue you should be able to uninstall it using "Uninstall a program".

    • Marked as answer by shadowfox_sid Saturday, June 19, 2010 11:46 AM
    Friday, June 18, 2010 11:17 PM
  • In addition to auggy's advice - you have the following stale drivers on your system:

    facap.sys 9/24/2008 (webcam related)

    CtClsFlt.sys 6/15/2009  ( integrated webcam driver )

    PxHlpa64.sys 6/23/2009 (Sonic)

    In the event you follow auggy's guidance and the behavior unfortunately persists, consider updating the above drivers with a more recent version, or removing them or the software that they came along with, to check the behavior.

    • Marked as answer by shadowfox_sid Saturday, June 19, 2010 11:46 AM
    Saturday, June 19, 2010 2:34 AM
  • thanx guys.. i have disabled mcafee firewall.. lets hope for the best..

     

    No.Compromise i have a question.

    when i try to update the drivers directly from the device manager by looking for fresh drivers it says that my drivers are up to date.. Can you help me out where can i find the specific drivers you are mentioning.

    Saturday, June 19, 2010 11:49 AM
  • You would want to contact the manufacturer of the system, hardware, or software that the drivers come with, or check their respective websites.  Often times, system makers have a download section on their site that lists available drivers, etc.  Updated software may contain updates to the drivers.
    Saturday, June 19, 2010 2:15 PM
  • Hello, I have a similar problem as the the person above, I installed windows 7 a day ago and now I cannot startup my computer, it goes straight to blue screen. I am hoping you can help me out. I tried to read the minidump files, but since I can only go on safe mode now, I can't install the debug software from the microsoft site.

    Here is the link for the minidump files:

    http://cid-3e4a7ea184db84ad.office.live.com/browse.aspx/.Documents/Minidump%20files

     

    And here is the error report that I get when I log back into safe mode:

    <!-- [if gte mso 9]><xml> <w:WordDocument> <w:View>Normal</w:View> <w:Zoom>0</w:Zoom> <w:TrackMoves/> <w:TrackFormatting/> <w:PunctuationKerning/> <w:ValidateAgainstSchemas/> <w:SaveIfXMLInvalid>false</w:SaveIfXMLInvalid> <w:IgnoreMixedContent>false</w:IgnoreMixedContent> <w:AlwaysShowPlaceholderText>false</w:AlwaysShowPlaceholderText> <w:DoNotPromoteQF/> <w:LidThemeOther>EN-US</w:LidThemeOther> <w:LidThemeAsian>X-NONE</w:LidThemeAsian> <w:LidThemeComplexScript>X-NONE</w:LidThemeComplexScript> <w:Compatibility> <w:BreakWrappedTables/> <w:SnapToGridInCell/> <w:WrapTextWithPunct/> <w:UseAsianBreakRules/> <w:DontGrowAutofit/> <w:SplitPgBreakAndParaMark/> <w:DontVertAlignCellWithSp/> <w:DontBreakConstrainedForcedTables/> <w:DontVertAlignInTxbx/> <w:Word11KerningPairs/> <w:CachedColBalance/> <w:UseFELayout/> </w:Compatibility> <m:mathPr> <m:mathFont m:val="Cambria Math"/> <m:brkBin m:val="before"/> <m:brkBinSub m:val="--"/> <m:smallFrac m:val="off"/> <m:dispDef/> <m:lMargin m:val="0"/> <m:rMargin m:val="0"/> <m:defJc m:val="centerGroup"/> <m:wrapIndent m:val="1440"/> <m:intLim m:val="subSup"/> <m:naryLim m:val="undOvr"/> </m:mathPr></w:WordDocument> </xml><![endif]--> <!-- /* Font Definitions */ @font-face {font-family:"Cambria Math"; panose-1:2 4 5 3 5 4 6 3 2 4; mso-font-charset:0; mso-generic-font-family:roman; mso-font-pitch:variable; mso-font-signature:-1610611985 1107304683 0 0 415 0;} @font-face {font-family:Calibri; panose-1:2 15 5 2 2 2 4 3 2 4; mso-font-alt:"Century Gothic"; mso-font-charset:0; mso-generic-font-family:swiss; mso-font-pitch:variable; mso-font-signature:-520092929 1073786111 9 0 415 0;} @font-face {font-family:"Segoe UI"; panose-1:2 11 5 2 4 2 4 2 2 3; mso-font-charset:0; mso-generic-font-family:swiss; mso-font-pitch:variable; mso-font-signature:-520084737 -1073683329 41 0 479 0;} /* Style Definitions */ p.MsoNormal, li.MsoNormal, div.MsoNormal {mso-style-unhide:no; mso-style-qformat:yes; mso-style-parent:""; margin-top:0in; margin-right:0in; margin-bottom:10.0pt; margin-left:0in; line-height:115%; mso-pagination:widow-orphan; font-size:11.0pt; font-family:"Calibri","sans-serif"; mso-ascii-font-family:Calibri; mso-ascii-theme-font:minor-latin; mso-fareast-font-family:"Times New Roman"; mso-fareast-theme-font:minor-fareast; mso-hansi-font-family:Calibri; mso-hansi-theme-font:minor-latin; mso-bidi-font-family:"Times New Roman"; mso-bidi-theme-font:minor-bidi;} .MsoChpDefault {mso-style-type:export-only; mso-default-props:yes; mso-ascii-font-family:Calibri; mso-ascii-theme-font:minor-latin; mso-fareast-font-family:"Times New Roman"; mso-fareast-theme-font:minor-fareast; mso-hansi-font-family:Calibri; mso-hansi-theme-font:minor-latin; mso-bidi-font-family:"Times New Roman"; mso-bidi-theme-font:minor-bidi;} .MsoPapDefault {mso-style-type:export-only; margin-bottom:10.0pt; line-height:115%;} @page Section1 {size:8.5in 11.0in; margin:1.0in 1.0in 1.0in 1.0in; mso-header-margin:.5in; mso-footer-margin:.5in; mso-paper-source:0;} div.Section1 {page:Section1;} -->

    Problem signature:

      Problem Event Name:                        BlueScreen

      OS Version:                                          6.1.7600.2.0.0.256.1

      Locale ID:                                             1033

     

    Additional information about the problem:

      BCCode:                                               d1

      BCP1:                                                    0000001D

      BCP2:                                                    00000002

      BCP3:                                                    00000000

      BCP4:                                                    8B85FD1A

      OS Version:                                          6_1_7600

      Service Pack:                                       0_0

      Product:                                               256_1

     

    Files that help describe the problem:

      C:\Windows\Minidump\061910-34663-01.dmp

      C:\Users\Shawn\AppData\Local\Temp\WER-47720-0.sysdata.xml

     

     

     Hope someone can help me!

    Saturday, June 19, 2010 10:18 PM
  • SeannJ, the error you are receiving is a DRIVER_IRQL_NOT_LESS_OR_EQUAL stop error being caused by the Rtnicxp.sys.

    The Rtnicxp.sys appears to be a driver for Realtek network adapter in Safe Mode.

    The date of the Rtnicxp.sys is May 30, 2008 so this driver should be updated.

    You may be able to restart the computer in Normal Mode by disabling the Realtek network adapter in the Device Manager.

    When you are back in Normal Mode update the Realtek Network adapter drivers. I believe Realtek has updated drivers on their site. 

    Sunday, June 20, 2010 2:35 AM
  • auggy's suggestions are spot-on, as usual.

    In addition, the following stale drivers are present on your system and you would want to check into updates for these, especially the Realtek NIC driver Rt86win7.sys as that version seems to be associated with a variety of problems with the RTM Windows 7.

    PxHelp20.sys 2/1/2005 

    irsir.sys 1/19/2008 

    Rtnicxp.sys 5/30/2008 

    bdvedisk.sys 9/29/2008 

    Rt86win7.sys 2/26/2009 

    bdfwfpf.sys 7/9/2009 

    BdfNdisf6.sys 7/21/2009 

    bdfsfltr.sys  7/23/2009 



    Monday, June 21, 2010 3:00 PM
  • Hi auggy

    i followed your suggestions and switchedoff the mcafee firewall and did not face the bluescreen issue for a week. but suddenly i got four crashes today. can you analyse them and let me know what is the issue. Also out of the four crashes in two of them my screen started showing colors as if something might be wrong with my graphics card. please sugget.

    the crash dump files are in my skydrive folder.

    http://cid-0902b2fca16cf92d.skydrive.live.com/redir.aspx?resid=902B2FCA16CF92D!106&Bpub=SDX.Docs&Bsrc=GetSharingLink

    Saturday, June 26, 2010 5:45 PM
  •  The bugchecks appear to be the same as you originally had.  The following stale drivers still are present, according to the dump:

    facap.sys 9/24/2008

    CtClsFlt.sys 6/15/2009 

    PxHlpa64.sys 6/23/2009 

    You may also wish to try removing the McAfee software and checking the behavior without it installed.  (In the interim, you could use a lighter-weight solution such as the free Microsoft Security Essentials.)


    Saturday, June 26, 2010 6:23 PM
  • dear sir .

    i also hv same problem of bluescreen error

    Problem signature:
      Problem Event Name:    BlueScreen
      OS Version:    6.1.7600.2.0.0.768.3
      Locale ID:    16393

    Additional information about the problem:
      BCCode:    19
      BCP1:    0000000000000003
      BCP2:    FFFFF80002E1EBD0
      BCP3:    FFFFFA80042EDFD0
      BCP4:    FFFFF80002E1EBD0
      OS Version:    6_1_7600
      Service Pack:    0_0
      Product:    768_1

    Files that help describe the problem:
      C:\WINDOWS\Minidump\070610-30232-01.dmp
      C:\Users\JAI SHRI RAM\AppData\Local\Temp\WER-89310-0.sysdata.xml

    Read our privacy statement online:
      http://go.microsoft.com/fwlink/?linkid=104288&clcid=0x0409

    If the online privacy statement is not available, please read our privacy statement offline:
      C:\Windows\system32\en-US\erofflps.txt

     

     

     

    what should i do now ....  plz help me ...

    Tuesday, July 6, 2010 11:17 AM
  • @arc7ww - your problem is different and you should start a new thread.   You're getting a bugcheck due to memory corruption - a corrupt freelist.  Post details and crash dump link in a new thread.
    Tuesday, July 6, 2010 11:24 AM
  • bt sir what to do now ..... ????       
    Tuesday, July 6, 2010 12:01 PM
  • Start a new thread for discussion of your specific problem - click here to do so.
    Tuesday, July 6, 2010 12:55 PM