Sign in with
Sign up | Sign in
Your question

[BSOD] driver_irql_not_less_or_equal tcpip.sys windows 8 [Dump files attached]

  • Windows 8
  • TCP/IP
Last response: in Windows 8
August 9, 2014 3:09:05 PM

Hey I was doing some work yesterday and installed some things that had to do with packet sniffing and general network stuff that I needed to study network systems and I started getting blue screens. Now I don't remember what I installed so I am not sure how to remove it.

I was wondering first if it was causing the issue and second if you can extract the name of the problematic file/program from the dump files.

Windows 8 64 bit



WhoCrashed analysis:
  1. Crash dump directory: C:\Windows\Minidump
  3. Crash dumps are enabled on your computer.
  5. On Sat 09/08/2014 21:45:39 GMT your computer crashed
  6. crash dump file: C:\Windows\memory.dmp
  7. This was probably caused by the following module: tcpip.sys (tcpip+0x137EC3)
  8. Bugcheck code: 0xD1 (0x158, 0x2, 0x1, 0xFFFFF88001C25EC3)
  10. file path: C:\Windows\system32\drivers\tcpip.sys
  11. product: Microsoft® Windows® Operating System
  12. company: Microsoft Corporation
  13. description: TCP/IP Driver
  14. Bug check description: This indicates that a kernel-mode driver attempted to access pageable memory at a process IRQL that was too high.
  15. This appears to be a typical software driver bug and is not likely to be caused by a hardware problem.
  16. The crash took place in a standard Microsoft module. Your system configuration may be incorrect. Possibly this problem is caused by another driver on your system that cannot be identified at this time.

I have checked the files with WinDbg and it seems that some are from Bittorrent.exe and some are from mbamservice.exe (Malwarebytes Anti-Malware) and some from Skype.exe [NOTE 2: I dont really know how to use WinDbg just figured I could try and see what I can find]

More about : bsod driver irql equal tcpip sys windows dump files attached

a b * Windows 8
August 9, 2014 6:46:39 PM

All the bugchecks were related to the network attempting to send datagrams over TCP/IP
my guess is your network driver is the problem and should be updated. The exception was one bugcheck that looked
like (Malwarebytes Web Access Control) was corrupting your network drivers memory and this can be the root cause of all the bugchecks. I would update the network driver, see if the problem goes away. if not, update or remove the web access control software. (it was the cause of one if not all of the bugchecks)
third bugcheck looked like mwac.sys was mucking around and corrupted your network drivers.
(Malwarebytes Web Access Control)
(could be a bug in mwac.sys or caused by the old ethernet driver)

\??\C:\Windows\system32\drivers\mwac.sys Tue Mar 04 13:47:40 2014
corrupted memory belonging to
second bugcheck looked like the first bugcheck in TCP/IP
looked at your first bugcheck: it was a bugcheck in the TCP/IP stack most likely caused by a old network driver
SystemRoot\system32\DRIVERS\Rt630x64.sys Wed Oct 19 05:12:55 2011

BIOS Release Date 07/06/2010
Manufacturer Gigabyte Technology Co., Ltd.
Product H55M-USB3
Processor Version Intel(R) Core(TM) i3 CPU
Processor Voltage 8ah - 1.0V
External Clock 133MHz
Max Speed 4000MHz
Current Speed 2800MHz