Jump to content

Recommended Posts

tcpip.sys is related to your networking.  Start by updating your wired/wireless/bluetooth drivers.

If the BSOD's continue, Please run this report collecting tool so that we can provide a complete analysis: (from the pinned topic at the top of the forum): 

 

Beyond that, I'm having troubles with my debugger getting symbols for ntoskrnl.exe from the Microsoft symbol server, so It's going to be a bit before I can run the downloaded memory dump.  The previous dumps have been running for 20 minutes now......

Share this post


Link to post
Share on other sites

Running your dump now....

Share this post


Link to post
Share on other sites

Dump is still running.  It's a STOP 0x3B (more info on that here:  http://www.carrona.org/bsodindx.html#0x0000003B

Most often these are software issues.  Running Driver Verifier might help identify the problem.  Please run it using these instructions:  http://www.carrona.org/verifier.html

I'm trying to setup the debugger on my test machine - but it's updating to the latest Insider Fast Ring build (14965)
After that I'll install the Debugging Tools and will run them from there (to see if it's my system that's misbehaving).

Share this post


Link to post
Share on other sites

Already running latest Intel I217-V drivers, and as I said it only BSOD when utilizing the entire bandwidth I have which is about 11MB/s - and requires waiting... about 5mins and it goes blue

Share this post


Link to post
Share on other sites

Not much in the dump file.

Try uninstalling the USB audio and physically removing the USB audio device from the system (this is only temporary).
Let us know if that helps the BSOD's

If that doesn't stop it, then try running Driver Verifier according to these instructions:  http://www.carrona.org/verifier.html

Analysis:
The following is for information purposes only. The following information contains the relevant information from the blue screen analysis:
**************************Sun Nov 13 06:02:57.365 2016 (UTC - 5:00)**************************
Loading Dump File [C:\Users\john\SysnativeBSODApps\111316-7109-01.dmp]
*** WARNING: Unable to verify timestamp for ntoskrnl.exe
*** ERROR: Module load completed but symbols could not be loaded for ntoskrnl.exe
Windows 10 Kernel Version 14965 MP (4 procs) Free x64
Built by: 14965.1001.amd64fre.rs_prerelease.161104-1700
System Uptime:2 days 16:44:16.001
*** WARNING: Unable to verify timestamp for ntoskrnl.exe
*** ERROR: Module load completed but symbols could not be loaded for ntoskrnl.exe
*** WARNING: Unable to verify timestamp for tcpip.sys
*** ERROR: Module load completed but symbols could not be loaded for tcpip.sys
Probably caused by :ntoskrnl.wrong.symbols.exe ( nt_wrong_symbols!581D5537826000 )
BugCheck 3B, {c0000005, fffff80563f12553, ffffe00028d4ca00, 0}
BugCheck Info: SYSTEM_SERVICE_EXCEPTION (3b)
Arguments:
Arg1: 00000000c0000005, Exception code that caused the bugcheck
Arg2: fffff80563f12553, Address of the instruction which caused the bugcheck
Arg3: ffffe00028d4ca00, Address of the context record for the exception that caused the bugcheck
Arg4: 0000000000000000, zero.
BUGCHECK_STR:  581D5537
PROCESS_NAME:  ntoskrnl.wrong.symbols.exe
FAILURE_BUCKET_ID: WRONG_SYMBOLS_X64_14965.1001.amd64fre.rs_prerelease.161104-1700_TIMESTAMP_161105-034247_581D5537_nt_wrong_symbols!581D5537826000
CPUID:        "Intel(R) Core(TM) i5-4690K CPU @ 3.50GHz"
MaxSpeed:     3500
CurrentSpeed: 3500
  BIOS Version                  F7
  BIOS Release Date             04/21/2015
  Manufacturer                  Gigabyte Technology Co., Ltd.
  Product Name                  Z97X-UD3H-BK
  Baseboard Product             Z97X-UD3H-BK-CF
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``

 

3rd Party Drivers:
The following is for information purposes only. My recommendations were given above. The drivers that follow belong to software or devices that were not developed by Microsoft.  You can find links to the driver information and where to update the drivers in the section after the code box:

**************************Sun Nov 13 06:02:57.365 2016 (UTC - 5:00)**************************
mwac.sys                    Tue Jun 17 22:07:00 2014 (53A0F444)
MBAMSwissArmy.sys           Wed Jul 29 00:26:01 2015 (55B855D9)
mbam.sys                    Tue Aug 11 13:35:19 2015 (55CA3257)
TeeDriverW8x64.sys          Thu Dec 24 11:24:00 2015 (567C1C20)
RTKVHD64.sys                Fri Jan 22 10:09:21 2016 (56A24621)
mbamchameleon.sys           Wed Jan 27 18:48:35 2016 (56A95753)
nvhda64v.sys                Tue May 10 04:59:01 2016 (5731A2D5)
e1d65x64.sys                Tue Jul 26 12:48:21 2016 (57979455)
nvvad64v.sys                Thu Sep 22 12:46:30 2016 (57E40AE6)
FocusriteUSBAudio.sys       Thu Oct 13 11:44:32 2016 (57FFABE0)
FocusriteUSBSwRoot.sys      Thu Oct 13 11:45:00 2016 (57FFABFC)
FocusriteUSB.sys            Thu Oct 13 11:45:15 2016 (57FFAC0B)
VBoxDrv.sys                 Tue Oct 18 09:43:47 2016 (58062713)
nvlddmkm.sys                Tue Oct 25 15:38:31 2016 (580FB4B7)
intelppm.sys                Fri Nov  4 23:37:32 2016 (581D53FC)
xusb22.sys                  Fri Nov  4 23:55:21 2016 (581D5829)
cldflt.sys                  Fri Nov  4 23:59:00 2016 (581D5904)
[/CODE]


[url=http://www.carrona.org/drivers/driver.php?id=mwac.sys]http://www.carrona.org/drivers/driver.php?id=[B][COLOR=BLUE]mwac.sys[/COLOR][/B][/url]
[url=http://www.carrona.org/drivers/driver.php?id=MBAMSwissArmy.sys]http://www.carrona.org/drivers/driver.php?id=[B][COLOR=BLUE]MBAMSwissArmy.sys[/COLOR][/B][/url]
[url=http://www.carrona.org/drivers/driver.php?id=mbam.sys]http://www.carrona.org/drivers/driver.php?id=[B][COLOR=BLUE]mbam.sys[/COLOR][/B][/url]
[url=http://www.carrona.org/drivers/driver.php?id=TeeDriverW8x64.sys]http://www.carrona.org/drivers/driver.php?id=[B][COLOR=BLUE]TeeDriverW8x64.sys[/COLOR][/B][/url]
[url=http://www.carrona.org/drivers/driver.php?id=RTKVHD64.sys]http://www.carrona.org/drivers/driver.php?id=[B][COLOR=BLUE]RTKVHD64.sys[/COLOR][/B][/url]
[url=http://www.carrona.org/drivers/driver.php?id=mbamchameleon.sys]http://www.carrona.org/drivers/driver.php?id=[B][COLOR=BLUE]mbamchameleon.sys[/COLOR][/B][/url]
[url=http://www.carrona.org/drivers/driver.php?id=nvhda64v.sys]http://www.carrona.org/drivers/driver.php?id=[B][COLOR=BLUE]nvhda64v.sys[/COLOR][/B][/url]
[url=http://www.carrona.org/drivers/driver.php?id=e1d65x64.sys]http://www.carrona.org/drivers/driver.php?id=[B][COLOR=BLUE]e1d65x64.sys[/COLOR][/B][/url]
[url=http://www.carrona.org/drivers/driver.php?id=nvvad64v.sys]http://www.carrona.org/drivers/driver.php?id=[B][COLOR=BLUE]nvvad64v.sys[/COLOR][/B][/url]
[color=#777777][color=#4b0082]FocusriteUSBAudio.sys[/color] - this driver hasn't been added to the DRT as of this run. Please search Google/Bing for the driver if additional information is needed.[/color]
[color=#777777][color=#4b0082]FocusriteUSBSwRoot.sys[/color] - this driver hasn't been added to the DRT as of this run. Please search Google/Bing for the driver if additional information is needed.[/color]
[color=#777777][color=#4b0082]FocusriteUSB.sys[/color] - this driver hasn't been added to the DRT as of this run. Please search Google/Bing for the driver if additional information is needed.[/color]
[url=http://www.carrona.org/drivers/driver.php?id=VBoxDrv.sys]http://www.carrona.org/drivers/driver.php?id=[B][COLOR=BLUE]VBoxDrv.sys[/COLOR][/B][/url]
[url=http://www.carrona.org/drivers/driver.php?id=nvlddmkm.sys]http://www.carrona.org/drivers/driver.php?id=[B][COLOR=BLUE]nvlddmkm.sys[/COLOR][/B][/url]
[url=http://www.carrona.org/drivers/driver.php?id=intelppm.sys]http://www.carrona.org/drivers/driver.php?id=[B][COLOR=BLUE]intelppm.sys[/COLOR][/B][/url]
[url=http://www.carrona.org/drivers/driver.php?id=xusb22.sys]http://www.carrona.org/drivers/driver.php?id=[B][COLOR=BLUE]xusb22.sys[/COLOR][/B][/url]
[color=#777777][color=#4b0082]cldflt.sys[/color] - this driver hasn't been added to the DRT as of this run. Please search Google/Bing for the driver if additional information is needed.[/color]

 

Share this post


Link to post
Share on other sites

What if the latest Intel drivers have become corrupted?
I would suggest:
- downloading a fresh set of the latest W10 compatible wired/wireless/bluetooth drivers from the Gigabyte website
- uninstalling the current drivers from Control Panel...Programs and Features.  If (and only if) they aren't available there, then uninstall from Device Manager
- install the freshly downloaded drivers
- monitor for further BSOD's.

This is a process, and if this doesn't work, then we'll move on to other steps (that depend on these steps).
The next step is the Driver Verifier thing - as it'll give us more hints as to what is to blame here.


Good luck!

Share this post


Link to post
Share on other sites

Weird, used uTorrent today when Malwarebytes was turned on, and got a BSOD after ~20 seconds after adding torrent to download list. When I restarted my computer, I shut off malwarebytes and didn't bsod...

Very sure that it isn't my driver since they are working perfectly, also BSODed one time when I was using the Arma 3 Launcher server browser (a game) with same exception error and points to the same tcpip.sys

112916-4656-01.zip

 

btw sorry for late reply, just waited until another bsod to come so i could blame it on malwarebytes again :D

Edited by Hawaii_Beach

Share this post


Link to post
Share on other sites

Just received a suggestion from Maurice Naggar.  Try the public beta of MBAM 3, it should work well with the Fast Ring Insider builds: 

Gonna have to wait for a while for the memory dump.  Fast Ring builds run very, very slow in my copy of the debugger :0(

Share this post


Link to post
Share on other sites

Basically the same as the previous memory dump.  I'd still go with the public beta 2 of MBAM 3

Analysis:
The following is for information purposes only. The following information contains the relevant information from the blue screen analysis:
**************************Tue Nov 29 13:55:16.948 2016 (UTC - 5:00)**************************
Loading Dump File [C:\Users\john\SysnativeBSODApps\112916-4656-01.dmp]
*** WARNING: Unable to verify timestamp for ntoskrnl.exe
*** ERROR: Module load completed but symbols could not be loaded for ntoskrnl.exe
Windows 10 Kernel Version 14971 MP (4 procs) Free x64
Built by: 14971.1000.amd64fre.rs_prerelease.161111-1700
System Uptime:2 days 5:13:53.692
*** WARNING: Unable to verify timestamp for ntoskrnl.exe
*** ERROR: Module load completed but symbols could not be loaded for ntoskrnl.exe
*** WARNING: Unable to verify timestamp for tcpip.sys
*** ERROR: Module load completed but symbols could not be loaded for tcpip.sys
Probably caused by :tcpip.sys ( tcpip+148023 )
BugCheck 3B, {c0000005, fffff805eb7e8023, ffffde81ed9d8a00, 0}
BugCheck Info: SYSTEM_SERVICE_EXCEPTION (3b)
Arguments:
Arg1: 00000000c0000005, Exception code that caused the bugcheck
Arg2: fffff805eb7e8023, Address of the instruction which caused the bugcheck
Arg3: ffffde81ed9d8a00, Address of the context record for the exception that caused the bugcheck
Arg4: 0000000000000000, zero.
BUGCHECK_STR:  0x3B
DEFAULT_BUCKET_ID:  WIN8_DRIVER_FAULT
FAILURE_BUCKET_ID: OLD_IMAGE_tcpip.sys
CPUID:        "Intel(R) Core(TM) i5-4690K CPU @ 3.50GHz"
MaxSpeed:     3500
CurrentSpeed: 3500
  BIOS Version                  F7
  BIOS Release Date             04/21/2015
  Manufacturer                  Gigabyte Technology Co., Ltd.
  Product Name                  Z97X-UD3H-BK
  Baseboard Product             Z97X-UD3H-BK-CF
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
 


3rd Party Drivers:
The following is for information purposes only. My recommendations were given above. The drivers that follow belong to software or devices that were not developed by Microsoft.  You can find links to the driver information and where to update the drivers in the section after the code box:

**************************Tue Nov 29 13:55:16.948 2016 (UTC - 5:00)**************************
intelppm.sys                Thu Jan  1 19:54:27 1976 (0B49E4C3)
xusb22.sys                  Thu Aug  2 12:31:54 1990 (26B8557A)
mwac.sys                    Tue Jun 17 22:07:00 2014 (53A0F444)
MBAMSwissArmy.sys           Wed Jul 29 00:26:01 2015 (55B855D9)
mbam.sys                    Tue Aug 11 13:35:19 2015 (55CA3257)
TeeDriverW8x64.sys          Thu Dec 24 11:24:00 2015 (567C1C20)
RTKVHD64.sys                Fri Jan 22 10:09:21 2016 (56A24621)
mbamchameleon.sys           Wed Jan 27 18:48:35 2016 (56A95753)
nvhda64v.sys                Tue May 10 04:59:01 2016 (5731A2D5)
e1d65x64.sys                Tue Jul 26 12:48:21 2016 (57979455)
nvvad64v.sys                Tue Oct  4 03:20:09 2016 (57F35829)
FocusriteUSBAudio.sys       Thu Oct 13 11:44:32 2016 (57FFABE0)
FocusriteUSBSwRoot.sys      Thu Oct 13 11:45:00 2016 (57FFABFC)
FocusriteUSB.sys            Thu Oct 13 11:45:15 2016 (57FFAC0B)
VBoxDrv.sys                 Mon Nov 21 11:45:08 2016 (58332494)
nvlddmkm.sys                Thu Nov 24 14:04:44 2016 (583739CC)
cldflt.sys                  ***** Invalid 1989 Invalid 1989 Invalid
[/CODE]


[url=http://www.carrona.org/drivers/driver.php?id=intelppm.sys]http://www.carrona.org/drivers/driver.php?id=[B][COLOR=BLUE]intelppm.sys[/COLOR][/B][/url]
[url=http://www.carrona.org/drivers/driver.php?id=xusb22.sys]http://www.carrona.org/drivers/driver.php?id=[B][COLOR=BLUE]xusb22.sys[/COLOR][/B][/url]
[url=http://www.carrona.org/drivers/driver.php?id=mwac.sys]http://www.carrona.org/drivers/driver.php?id=[B][COLOR=BLUE]mwac.sys[/COLOR][/B][/url]
[url=http://www.carrona.org/drivers/driver.php?id=MBAMSwissArmy.sys]http://www.carrona.org/drivers/driver.php?id=[B][COLOR=BLUE]MBAMSwissArmy.sys[/COLOR][/B][/url]
[url=http://www.carrona.org/drivers/driver.php?id=mbam.sys]http://www.carrona.org/drivers/driver.php?id=[B][COLOR=BLUE]mbam.sys[/COLOR][/B][/url]
[url=http://www.carrona.org/drivers/driver.php?id=TeeDriverW8x64.sys]http://www.carrona.org/drivers/driver.php?id=[B][COLOR=BLUE]TeeDriverW8x64.sys[/COLOR][/B][/url]
[url=http://www.carrona.org/drivers/driver.php?id=RTKVHD64.sys]http://www.carrona.org/drivers/driver.php?id=[B][COLOR=BLUE]RTKVHD64.sys[/COLOR][/B][/url]
[url=http://www.carrona.org/drivers/driver.php?id=mbamchameleon.sys]http://www.carrona.org/drivers/driver.php?id=[B][COLOR=BLUE]mbamchameleon.sys[/COLOR][/B][/url]
[url=http://www.carrona.org/drivers/driver.php?id=nvhda64v.sys]http://www.carrona.org/drivers/driver.php?id=[B][COLOR=BLUE]nvhda64v.sys[/COLOR][/B][/url]
[url=http://www.carrona.org/drivers/driver.php?id=e1d65x64.sys]http://www.carrona.org/drivers/driver.php?id=[B][COLOR=BLUE]e1d65x64.sys[/COLOR][/B][/url]
[url=http://www.carrona.org/drivers/driver.php?id=nvvad64v.sys]http://www.carrona.org/drivers/driver.php?id=[B][COLOR=BLUE]nvvad64v.sys[/COLOR][/B][/url]
[color=#777777][color=#4b0082]FocusriteUSBAudio.sys[/color] - this driver hasn't been added to the DRT as of this run. Please search Google/Bing for the driver if additional information is needed.[/color]
[color=#777777][color=#4b0082]FocusriteUSBSwRoot.sys[/color] - this driver hasn't been added to the DRT as of this run. Please search Google/Bing for the driver if additional information is needed.[/color]
[color=#777777][color=#4b0082]FocusriteUSB.sys[/color] - this driver hasn't been added to the DRT as of this run. Please search Google/Bing for the driver if additional information is needed.[/color]
[url=http://www.carrona.org/drivers/driver.php?id=VBoxDrv.sys]http://www.carrona.org/drivers/driver.php?id=[B][COLOR=BLUE]VBoxDrv.sys[/COLOR][/B][/url]
[url=http://www.carrona.org/drivers/driver.php?id=nvlddmkm.sys]http://www.carrona.org/drivers/driver.php?id=[B][COLOR=BLUE]nvlddmkm.sys[/COLOR][/B][/url]
[color=#777777][color=#4b0082]cldflt.sys[/color] - this driver hasn't been added to the DRT as of this run. Please search Google/Bing for the driver if additional information is needed.[/color]

 

Share this post


Link to post
Share on other sites

@Hawaii Beach

There is a brand new beta 3.0.4 I would recommend you install, given your pc is on a Insider Preview build.

I am now running that on one of my pc's with build 14965.   Also running that on another pc with current branch 14393.

See the latest announcement

 

Edited by Maurice Naggar

Share this post


Link to post
Share on other sites

Bravo !    :D

^_^    

Congratulations.  Welcome aboard.  Glad to hear you are loving Malwarebytes 3.

Share this post


Link to post
Share on other sites

Please zip up and upload the memory dumps in C:\Windows\Minidump
If unable to zip them there, try copying them to your Desktop and zip them up there.

Share this post


Link to post
Share on other sites
On ‎2016‎-‎12‎-‎05 at 10:45 PM, usasma said:

Please zip up and upload the memory dumps in C:\Windows\Minidump
If unable to zip them there, try copying them to your Desktop and zip them up there.

Already uploaded memory dump??

Share this post


Link to post
Share on other sites

I have the same BSOD problem with Utorrent when just open it even if i have no active torrents downloading and for more information to the mbam team i tried disabling web protection and the BSOD gone this is my workaround fix for current time until support team release fix for this tcpip.sys problem in the near future and also i have norton security as my main antivirus and web protection until malwarebytes 3 get updates for this problem

Share this post


Link to post
Share on other sites

Hawaii_Beach - I can't seem to locate the link for the latest memory dump.
Could you repost it?

Mostafa_2016 - please start your own topic in order for your problem to get the individual attention that it deserves.
Also, please post the reports asked for in the pinned topic at the top of the forum:
 

Quote

Please run this report collecting tool so that we can provide a complete analysis: (from the pinned topic at the top of the forum):  https://forums.malwarebytes.org/topic/170037-blue-screen-of-death-bsod-posting-instructions-windows-10-81-8-7-vista/

FYI - I don't often use the Perfmon report, so if it doesn't work please just let me know.
NOTE:  On problem systems it can take up to 20 minutes for the log files to complete.  Please be patient and let it run.

If you still have problems with it running, there's an alternate tool here (direct download link):  https://github.com/blueelvis/BSOD-Inspector/releases/download/1.0.5/BSODInspector-1.0.5.exe

NOTE:
Please zip up the (.ZIP) files - do not use .RAR or other compression utilities.
.ZIP is the type file that can be uploaded to the forums.

 

Share this post


Link to post
Share on other sites

FWIW, I had the same experience when I had Snappy Driver Installer try to download a large (5+ GB) amount of updated driverpacks.  This was on IP build 14986.

Unfortunately, it led to other issues with my machine and hte OS, and MiniDump was empty after reboot.

I have since reinstalled my OS from scratch, and am currently setting everything back up, but I will be creating a couple of VMs to keep testing with MBAM 3 and the IP build 14986 to se if I can confirm that it causes an issue unilaterally or only in certain situations.

Share this post


Link to post
Share on other sites

The memory dump is the same one that I initially analyzed (back on 16 November in Post #6 of this topic).

If still getting BSOD's, Please run this report collecting tool again so that we can get a fresh set of reports: (from the pinned topic at the top of the forum): 



FYI - I don't often use the Perfmon report, so if it doesn't work please just let me know.
NOTE:  On problem systems it can take up to 20 minutes for the log files to complete.  Please be patient and let it run.

If you still have problems with it running, there's an alternate tool here (direct download link):  https://github.com/blueelvis/BSOD-Inspector/releases/download/1.0.5/BSODInspector-1.0.5.exe

NOTE:
Please zip up the (.ZIP) files - do not use .RAR or other compression utilities.
.ZIP is the type file that can be uploaded to the forums.

Share this post


Link to post
Share on other sites

A full memory dump may help.  If you could, please zip it up and upload it to a free file-hosting site (such as OneDrive) - then post a link to it here.

Share this post


Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now

  • Recently Browsing   0 members

    No registered users viewing this page.

×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.