Solved

[BSOD] driver_irql_not_less_or_equal tcpip.sys windows 8 [Dump files attached]

Hey I was doing some work yesterday and installed some things that had to do with packet sniffing and general network stuff that I needed to study network systems and I started getting blue screens. Now I don't remember what I installed so I am not sure how to remove it.

I was wondering first if it was causing the issue and second if you can extract the name of the problematic file/program from the dump files.

Windows 8 64 bit

Thanks.

DUMP FILES:
http://www.mediafire.com/download/7rkaakije86epz1/081014-64312-01.dmp
http://www.mediafire.com/download/oav4oe89q65iuio/081014-39218-01.dmp
http://www.mediafire.com/download/tp8dl12tq05a2fy/081014-36218-01.dmp
http://www.mediafire.com/download/hw8v94h9km896t1/080514-58171-01.dmp
http://www.mediafire.com/download/2nwk0nocjg68d9a/080414-34125-01.dmp
//NOT SURE IF THIS ONE IS RELATED.
http://www.mediafire.com/download/awzyms89qv3zegy/073114-56343-01.dmp

WhoCrashed analysis:

Crash dump directory: C:\Windows\Minidump

Crash dumps are enabled on your computer.

On Sat 09/08/2014 21:45:39 GMT your computer crashed
crash dump file: C:\Windows\memory.dmp
This was probably caused by the following module: tcpip.sys (tcpip+0x137EC3) 
Bugcheck code: 0xD1 (0x158, 0x2, 0x1, 0xFFFFF88001C25EC3)
Error: DRIVER_IRQL_NOT_LESS_OR_EQUAL
file path: C:\Windows\system32\drivers\tcpip.sys
product: Microsoft® Windows® Operating System
company: Microsoft Corporation
description: TCP/IP Driver
Bug check description: This indicates that a kernel-mode driver attempted to access pageable memory at a process IRQL that was too high.
This appears to be a typical software driver bug and is not likely to be caused by a hardware problem. 
The crash took place in a standard Microsoft module. Your system configuration may be incorrect. Possibly this problem is caused by another driver on your system that cannot be identified at this time. 


NOTE:
I have checked the files with WinDbg and it seems that some are from Bittorrent.exe and some are from mbamservice.exe (Malwarebytes Anti-Malware) and some from Skype.exe
1 answer Last reply Best Answer
More about bsod driver irql equal tcpip sys windows dump files attached
  1. Best answer
    All the bugchecks were related to the network attempting to send datagrams over TCP/IP
    my guess is your network driver is the problem and should be updated. The exception was one bugcheck that looked
    like (Malwarebytes Web Access Control) was corrupting your network drivers memory and this can be the root cause of all the bugchecks. I would update the network driver, see if the problem goes away. if not, update or remove the web access control software. (it was the cause of one if not all of the bugchecks)
    ===========
    third bugcheck looked like mwac.sys was mucking around and corrupted your network drivers.
    (Malwarebytes Web Access Control)
    (could be a bug in mwac.sys or caused by the old ethernet driver)

    \??\C:\Windows\system32\drivers\mwac.sys Tue Mar 04 13:47:40 2014
    corrupted memory belonging to
    =======
    second bugcheck looked like the first bugcheck in TCP/IP
    =========
    looked at your first bugcheck: it was a bugcheck in the TCP/IP stack most likely caused by a old network driver
    Rt630x64.sys
    SystemRoot\system32\DRIVERS\Rt630x64.sys Wed Oct 19 05:12:55 2011
    update http://www.realtek.com.tw/downloads/downloadsView.aspx?Langid=1&PNid=7&PFid=10&Level=3&Conn=2


    motherboard:
    BIOS Release Date 07/06/2010
    Manufacturer Gigabyte Technology Co., Ltd.
    Product H55M-USB3
    Processor Version Intel(R) Core(TM) i3 CPU
    Processor Voltage 8ah - 1.0V
    External Clock 133MHz
    Max Speed 4000MHz
    Current Speed 2800MHz
Ask a new question

Read More

Windows 8 TCP/IP