windows 7 BSOD in NETIO.sys when running uTorrent

[omanoe]

Hi,

According to BSOD instructions, provided are the attached zip file and here below is summary as asked :
· OS - Windows 7
· x86 (32-bit)
· this was original installed OS on system
· full retail version
· Age of system (hardware) : 2 years
· Age of OS installation : 2 years (no re-installation)


· CPU : Intel Core i5-2410M
· Video Card : Intel HD Graphics Family (ATI) 1,554 Mb
· MotherBoard : Lenovo 1ZK6A1CA21B ZIF socket 2 memory slots
· Memory : 4,096 MiB
· HDD : ST320LT020-9YG142 305,242 MiB
· LAN : Intel(R) 82579LM Gigabit Network Connection
· Wifi : Intel(R) WiFi Link 1000 BGN
· Specific software : McAfee VirusScan Enterprise 8.8 / HIPS / Cisco AnyConnect Secure / Cisco Network Magic / VMware Workstation 7
· System Manufacturer : LENOVO (Laptop Thinkpad)
· Exact model number : 4291CF3 (R9KZ1WP)

Thank you in advance of any help :thumbsup2:

 

[jcgriff2]

Hi -

Microsoft networking related driver netio.sys named in several BSODs as the probable cause - but it is merely a default.

McAfee Internet Security named probable cause in the latest BSODs -

[font=lucida console]mfeapfk.sys                 Tue Oct  9 12:53:12 2012 (50745678)
mfeavfk.sys                 Tue Oct  9 12:53:38 2012 (50745692)
mfefirek.sys                Tue Oct  9 12:56:06 2012 (50745726)
mfehidk.sys                 Tue Oct  9 12:52:13 2012 (5074563D)
mfenlfk.sys                 Tue Oct  9 12:53:02 2012 (5074566E)
mfewfpk.sys                 Tue Oct  9 12:52:44 2012 (5074565C)[/font]

http://www.sysnative.com/drivers/driver.php?id=mfeapfk.sys
http://www.sysnative.com/drivers/driver.php?id=mfeavfk.sys
http://www.sysnative.com/drivers/driver.php?id=mfefirek.sys
http://www.sysnative.com/drivers/driver.php?id=mfehidk.sys
http://www.sysnative.com/drivers/driver.php?id=mfenlfk.sys
http://www.sysnative.com/drivers/driver.php?id=mfewfpk.sys

Remove McAfee Internet Security using the removal tool - http://kb.eset.com/esetkb/index?page=content&id=SOLN146

Reboot upon completion.

Install Microsoft Security Essentials (MSE)


Update your Intel(R) WiFi Link 1000 BGN driver -

[font=lucida console]NETwNs32.sys                Wed Aug  3 20:26:47 2011 (4E39E747)[/font]

http://www.sysnative.com/drivers/driver.php?id=NETwNs32.sys


Remove ISO Drive and any other virtual devices until the BSOD epidemic is over -

[font=lucida console]ISODrive.sys                Thu Jan 28 22:38:44 2010 (4B625844)[/font]

http://www.sysnative.com/drivers/driver.php?id=ISODrive.sys


uTorrent is not helping matters here at all. I suggest removal at this time.


Regards. . .

jcgriff2

`


BSOD SUMMARY

[font=lucida console]
Debug session time: Wed May  1 11:03:31.504 2013 (UTC - 4:00)
Loading Dump File [C:\Users\PalmDesert\SysnativeBSODApps\050113-25802-01.dmp]
Built by: 7601.18044.x86fre.win7sp1_gdr.130104-1431
System Uptime: 0 days 19:41:28.455
*** WARNING: Unable to verify timestamp for mfenlfk.sys
*** ERROR: Module load completed but symbols could not be loaded for mfenlfk.sys
*** WARNING: Unable to verify timestamp for mfeapfk.sys
*** ERROR: Module load completed but symbols could not be loaded for mfeapfk.sys
Probably caused by : NETIO.SYS ( NETIO!RtlCopyBufferToMdl+1c )
BugCheck D1, {14, 2, 0, 8d4c1bd2}
BugCheck Info: [url=http://www.carrona.org/bsodindx.html#0x000000D1]DRIVER_IRQL_NOT_LESS_OR_EQUAL (d1)[/url]
Bugcheck code 000000d1
Arguments: 
Arg1: 00000014, memory referenced
Arg2: 00000002, IRQL
Arg3: 00000000, value 0 = read operation, 1 = write operation
Arg4: 8d4c1bd2, address which referenced memory
BUGCHECK_STR:  0xD1
DEFAULT_BUCKET_ID:  WIN7_DRIVER_FAULT
PROCESS_NAME:  System
FAILURE_BUCKET_ID:  0xD1_NETIO!RtlCopyBufferToMdl+1c


¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``


Debug session time: Mon Apr 29 11:56:01.234 2013 (UTC - 4:00)
Loading Dump File [C:\Users\PalmDesert\SysnativeBSODApps\042913-28048-01.dmp]
Built by: 7601.18044.x86fre.win7sp1_gdr.130104-1431
System Uptime: 2 days 20:57:44.670
*** WARNING: Unable to verify timestamp for mfenlfk.sys
*** ERROR: Module load completed but symbols could not be loaded for mfenlfk.sys
Probably caused by : NETIO.SYS ( NETIO!RtlCopyBufferToMdl+1c )
BugCheck D1, {14, 2, 0, 8d206bd2}
BugCheck Info: [url=http://www.carrona.org/bsodindx.html#0x000000D1]DRIVER_IRQL_NOT_LESS_OR_EQUAL (d1)[/url]
Bugcheck code 000000d1
Arguments: 
Arg1: 00000014, memory referenced
Arg2: 00000002, IRQL
Arg3: 00000000, value 0 = read operation, 1 = write operation
Arg4: 8d206bd2, address which referenced memory
BUGCHECK_STR:  0xD1
DEFAULT_BUCKET_ID:  WIN7_DRIVER_FAULT
PROCESS_NAME:  System
FAILURE_BUCKET_ID:  0xD1_NETIO!RtlCopyBufferToMdl+1c


¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``

         
       [color=#000033]J. C. Griffith, Microsoft MVP (jcgriff2)[/color]   
             
           [url=http://mvp.microsoft.com/en-us/mvp/John%20C.%20Griffith-4025562[/url]   

           [url=https://www.sysnative.com][color=#000033][u][url]www.sysnative.com[/url][/u][/color][/url]
             
           [url=http://jcgriff2.com][color=#000055][u][url]www.jcgriff2.com[/url][/u][/color][/url] 


¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨

[/font]

 

[omanoe]

Dear Mister JCGriffith,

Thank you very much for your analysis. I'll apply all your suggestions one-by-one.
While waiting I ve found this : [FIX] uTorrent Crashes With BSOD In Windows 7 Enterprise 64-Bit With Driver Errors
and tried netsh interface teredo set state disabled as suggested in that link.
I don't know what disabling teredo does mean but since that i didn't have any BSOD.
I will inform of further behaviour. Thanks again.

Best regards
omanoe

 

[jcgriff2]

Dear Mister JCGriffith,

Thank you very much for your analysis. I'll apply all your suggestions one-by-one.

You are most welcome -- I hope they work & resolve the BSODs.

While waiting I ve found this : [FIX] uTorrent Crashes With BSOD In Windows 7 Enterprise 64-Bit With Driver Errors
and tried netsh interface teredo set state disabled as suggested in that link.

TBH, I would forget about that link. The best thing to do now is remove uTorrent. You can decide on your own what to do after the BSODs are solved.

I don't know what disabling teredo does mean but since that i didn't have any BSOD.
I will inform of further behaviour. Thanks again.

Best regards
omanoe

Toredo is related to IPv6 and likely a moot point at this time.

Regards. . .

jcgriff2