RANDOM BSOD WINDOWS 7 64-Bit

chaospromos

Honorable
Jul 27, 2012
15
0
10,510
Hi, I'm getting a random BSOD in Windows 7 64-Bit
______________________________________________________________________

A problem has been detected and Windows has been shut down to prevent damage
to your computer.

The problem seems to be caused by the following file: tcpip.sys

DRIVER_IRQL_NOT_LESS_OR_EQUAL

Technical Information:

*** STOP: 0x000000d1 (0x000000000000001c, 0x0000000000000002, 0x0000000000000001,
0xfffff880020640be)

*** tcpip.sys - Address 0xfffff880020640be base at 0xfffff88002001000 DateStamp
0x522bced8
_____________________________________________________________________


The most recent hardware change has been adding two EVGA GTX980 Hybrid cards in SLI on my x79 MSI Big Bang xpower II mother board. I also activated the forced PCIe 3.0 mode via regedit.

I'm running:

3930k i7
32GB Corsair Vengeance 1600mhz 8x4GB
Revodrive 3 x2 Boot Drive
2 x EVGA GTX980 ti Hybrid
RME HSDPe RayDat PCIe Sound Card
Samsung 830 Pro 256GB SDD with PCIe mount

All my drivers are up to date, BIOS as well. I also tried disabling XMP in the BIOS, running driver verifier, and disabling TRIM and superfetch. My system at times seems sluggish, especially when moving icons on the desktop, or typing in a text field on Firefox. I've posted the mini dump below. Any help would be appreciated.


120616-113147-01.dmp 12/6/2016 2:17:03 PM DRIVER_IRQL_NOT_LESS_OR_EQUAL 0x000000d1 00000000`0000001c 00000000`00000002 00000000`00000001 fffff880`020640be tcpip.sys tcpip.sys+630be TCP/IP Driver Microsoft® Windows® Operating System Microsoft Corporation 6.1.7600.16385 (win7_rtm.090713-1255) x64 ntoskrnl.exe+75bc0 C:\Windows\Minidump\120616-113147-01.dmp 12 15 7601 409,136 12/6/2016 2:20:22 PM
______________________________________________________________________

Symbol search path is: SRV*H:\KERNELMEMORYDUMP\SYMBOLS*http://msdl.microsoft.com/download/symbols
Executable search path is:
Windows 7 Kernel Version 7601 (Service Pack 1) MP (12 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 7601.18247.amd64fre.win7sp1_gdr.130828-1532
Machine Name:
Kernel base = 0xfffff800`04e63000 PsLoadedModuleList = 0xfffff800`050a66d0
Debug session time: Tue Dec 6 14:17:03.135 2016 (GMT-5)
System Uptime: 0 days 14:51:14.351
Loading Kernel Symbols
...............................................................
................................................................
.......................................................
Loading User Symbols
PEB is paged out (Peb.Ldr = 00000000`fffdf018). Type ".hh dbgerr001" for details
Loading unloaded module list
.......................................
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck D1, {1c, 2, 1, fffff880020640be}

PEB is paged out (Peb.Ldr = 00000000`fffdf018). Type ".hh dbgerr001" for details
PEB is paged out (Peb.Ldr = 00000000`fffdf018). Type ".hh dbgerr001" for details
Probably caused by : tcpip.sys ( tcpip!TcpBeginTcbSend+33e )

Followup: MachineOwner



 

chaospromos

Honorable
Jul 27, 2012
15
0
10,510



Hello, thank you for replying. I have tried both my onboard LAN adapter, and disabling that and using my usual Netgear AC1200 wireless USB 3.0 adapter. As stated all drivers are fully updated. I'm generally very on top of drivers, firmware, and my BIOS. I tried searching before I posted here, about tcpip.sys BSOD errors, and couldn't come up with a solution. Is there any further diagnosis I could perform? I've used Windows DV, I've checked my error logs, and attempted many work around including using my wired connection and removing the wireless driver.

 
Hello... Microsoft owns those files/drivers... and I did a search in my OS for it... and there are many all over the Windows directory.
1) Since they are Windows OS communications files I suggest having the OS check them for you.. doing the Run the System File Checker tool https://support.microsoft.com/en-us/kb/929833

2) do you have any RED or YELLOw marks in your Control panel-device manager?

3) Disable in the MB BIO's Blue tooth chip? save&exit
4) Disable in the MB BIO's LAN chip? save&exit
5) Disconnect the USB3 Netgear connection?

I understand you need to use these things... but let the system operate for a few hours without them as a BSOD test.

Sometimes updates are flawed, and an older driver will work better... I myself do not do updates, because "if it's ain't broken... I don't try and fix it." B D I have rock solid systems with very old driver versions. B I

6) There are also Windows services... Task manager-Services and you can toggle items to turn on, turn off, start, stop, never start etc... there are some very important items needed to be started there for your OS and hardware communications needs... Some should be never be started for better OS Security too.... and some that don't apply to your system use B /

7) Windows also keeps records of problems in the Event Viewer and I find it much easier to read... You NEED to be logged on as administrator to the OS.

Right click computer-manage-System Tools-Event Viewer-Windows logs-system.... Click on the "RED" "Critical" errors, for more information... and files/drivers/Apps, comments/suggestions/information, General/Details associated with them.

Expanding Window panes and Posting screen images from here will help us, help you faster... But copy and posting text will work too B )

a) kernel 41 errors mean the OS was not properly shut down... either by You OR the hardware.
 

chaospromos

Honorable
Jul 27, 2012
15
0
10,510



Just to give you a background, I'm well beyond the basic troubleshooting here. Event viewer does have some items, though they didn't really tell me much more than the crash dump did. I'll post some of that info. I have windows performance toolkit as well, if there is anything I can run there I will give it a try for you. I've run sfc \scannow, on many different occasions, with no result. I've done thourough malware and virus scans, checked partition alignment and divisibility (integer) using diskpart in the console, etc. Specifically, what would you like to see from my event viewer, or anything else? I can upload screen shots but there is a million configurations or processes I could show you, let me know and I'll get on it right away.
 
Hello... Ya well we get the noobs as well as the experts here... B ) you never know what is on the other side of the screen... this type of trouble shooting/helpping is really tough to do... I work best with the screen, keyboard and broken PC in front of me B D

I'm just a guy that has been in engineering and maintenance... and started with a i286 12 Mhz system. And sometimes people just need someone to bounce some things/ideas/experience off of... so if I could help there is all I'm trying to do here B / no ego/know it all from me.

PC stand for "personal computer" and typically what gets installed on them causes the problem... or someone changed a setting in it, a BAD update, or they needs a procedure is typical here B /

I've never run sfc/scannow... but a google search suggested that for your error.... and typically if I suspect a file problem... I just load a fresh copy on a spare Hardrive to rule those out B / it only takes 15-30 mins to have a default OS install ready to test with your hardware... Have you tried that yet? B /

Basically the Event viewer is a running log (debug screen)... and I find it so much easier to read than the other peoples suggested tools here... also this is a tool you would use on a manufacturing machine problem... so it's natural for me to use.

But if you are getting Kernel 41 errors (not caused by you)... I would start focusing on the Physical hardware. B /
 

chaospromos

Honorable
Jul 27, 2012
15
0
10,510


Crap I somehow just clicked on pick this as the solution by accident, I just woke up and my eyes are blurry as hell.
I was saying that I had already completed basic troubleshooting steps, nothing to do with egos and skill levels.
I used work on 386 and 486 machines when I started lol. Dos 3.1, Windows 3.1 and the original Linux . When I was a kid I used to play around with QDOS and Apple II. Seems like a lifetime ago, back when you had to create your own batch files and executables were a commodity.

I would try a fresh OS, but I need a spare drive. I have 5 drives in this machine, but all of them are used for important projects. I need a larger capacity SSD for my boot drive anyway, so I will purcahse one and go with a fresh OS and give it a few weeks before I start migrating and reinstalling everything. I really hope there isn't an issue with my twin 980ti cards. Those are the only new pieces of hardware i've installed in the past 3 years, and it seems like that is when the problem came up. I know the event viewer well though, what I was asking you is what did you wish to see from the event viewer? I have two custom boot logs set up there, and there are multiple variables within event viewer, as well as a lot of logs, so what would you like to see there?

 
Hello... I got it... Well the Event Viewer can have all the past logs deleted and started a new... basically there will be a chronological steps recorded to any problem or shut down.
Well as a system ages so do the parts... and the heat will increase the aging of the parts too. but I suggest trying a Fresh OS install on a spare? since the error is a OS file B /
 

chaospromos

Honorable
Jul 27, 2012
15
0
10,510
I'm going to grab another SSD and see if that works. Had another random BSOD today when clicking the back button on the Firefox browser.
I'm running very cool, 28C on both graphics cards, and 32-34C on the CPU. I'm hoping for a software issue.
 
Hello... The Fresh drive and OS install can answer both questions (Hardware vs Software) really fast B )
Take note of your MB revision # there can be Hardware chip changes between them... and you will need the proper driver for that piece of hardware.

if your hardware checks out with fresh OS install (no updates just drivers)
Create storage area for "Restore points" and create a restore point between every software install/update and you can Backup fast when you see the problem come back... and the software/update offender.
 

chaospromos

Honorable
Jul 27, 2012
15
0
10,510
Waiting on the new SSD, I ordered a 500GB Samsung 850 Pro.
Strangely, I can't use backup, or create restore points on this machine, it always gives me the error "Backup Failed", or "Failed to create a restore point".
When I had an external HD I was able to back my drives up, but with the Revodrive 3 X2 as your boot drive, you can't load an OS image even if you wanted to. I think I am going to start from scratch with the new Samsung 500GB SSD as the boot drive, and use the Revodrive 3 X2 as the gaming drive.
I've also been playing with software configuration and services, and I may have found the issue. It's possibly the Netgear Genie service that was conflicting somehow with TCPIP.sys or causing it to call an inaccessible memory address. On switching to the onboard LAN port, AND completely wiping Netgear software from the PC and all traces from the Registry, I'm finding there is no lag while typing anymore, all pages are loading quickly with no delay, my CPU load is way down, my memory usage is way down, and I haven't blue screened since. I'm burning in this config until my new SSD arives, so lets see if that was the reason. Thank you for your input, and I'm keeping my fingers crossed.