BSOD Every Few Hours ndis.sys, tdx.sys
The problem I'm having seems related to the problem at http://social.technet.microsoft.com/Forums/en-US/w7itproappcompat/thread/53a5d149-0258-4853-a153-cf53c5681110/. The only thing is I'm running Win 7 Ultimate SP1 x86, so the patch doesn't apply. I was running NOD ESET, now I'm running MS Security Essentials. In both cases I'm getting lots of BSOD, especially when accessing my Synology Diskstation. I've tried running verifier.exe and it reported the following: ndis.sys 0x85c78787 base 0x85c07000 date 0x4ce78937 STOP 0x000000c9 (0x00000226, 0x85c78787, 0xb98f4f68, 0x00000000) I have memory.dmp files being generated all the time, but don't know where to upload them to help me get a solution. I submit every error to Microsoft as Windows' request, but there is always no solution found. Does anyone have any suggestions here? Ironically my Vista machine has never had this problem. BTW this is a clean install on to an SSD from a machine that was shipped with Vista.
March 4th, 2011 8:06am

Hi, Based on the stop code, this is the bug check code for all Driver Verifier I/O Verification violations: Bug Check 0xC9: DRIVER_VERIFIER_IOMANAGER_VIOLATION It would be caused by a corrupted driver; to find the root cause, please upload the dump file and post the link here: Use SkyDrive to upload collected files Alex ZhaoPlease remember to click Mark as Answer on the post that helps you, and to click Unmark as Answer if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.
Free Windows Admin Tool Kit Click here and download it now
March 8th, 2011 5:10am

I posted the file here: http://adservium.com/MEMORY.7z I believe it is related to Windows 7 accessing my Synology Diskstation. Once I stopped accessing my Synology NAS the comptuer stopped blue screening. My Vista machine can access the Synology with no problem. I originally had the default NIC drivers that came with Windows 7. After my machine started blue screening I installed the latest drivers from Intel for my 82566DM-2 adapter. The blue screening didn't go away. Thanks for your help.
March 8th, 2011 9:55am

Hi, This is mostly happens in Windows 7 64-bit Edition after UN-installing Anti-virus & Installing other Anti-virus... ndis.sys BSOD is caused due to TCP functionality problem, if WiFi driver crash, thr are several mini-ports in Device manager with yellow exclamation marks. This can be resolved by restoring system hive, located @ C:\Windows\System32\config\RegBack You have to boot PC offline & take a backup of System file from C:\Windows\System32\config then copy System from C:\Windows\System32\config\RegBack Paste it to C:\Windows\System32\config Turn off WiFi reboot. Once PC boots properly, update wireless card driver. --Harjit
Free Windows Admin Tool Kit Click here and download it now
March 8th, 2011 10:27am

That sounds like a very well thought-out solution, the only problem is this is a desktop with no WiFi running on Win7 32-bit. Does it still apply in this case?
March 8th, 2011 12:20pm

yes indeed if you remembered to take back-up, it will not harm anything & it will still work
Free Windows Admin Tool Kit Click here and download it now
March 8th, 2011 12:25pm

I don't see any devices in my Device Manager with yellow exclamation marks. I've even shown hidden devices. Additionally when I try to browse to c:\windows\system32\config I get a permission error.
March 8th, 2011 12:35pm

I posted the file here: http://adservium.com/MEMORY.7z I believe it is related to Windows 7 accessing my Synology Diskstation. Once I stopped accessing my Synology NAS the comptuer stopped blue screening. My Vista machine can access the Synology with no problem. I originally had the default NIC drivers that came with Windows 7. After my machine started blue screening I installed the latest drivers from Intel for my 82566DM-2 adapter. The blue screening didn't go away. Thanks for your help. the Intel driver is the cause: Loaded symbol image file: e1e6232.sys Image path: \SystemRoot\system32\DRIVERS\e1e6232.sys Image name: e1e6232.sys Timestamp: Fri Mar 26 09:13:32 2010 ChildEBP RetAddr 82b2a414 82a6db85 nt!MiPfnReferenceCountIsZero+0x24 82b2a46c 82a7aad8 nt!MmUnlockPages+0x557 82b2a4a8 8b9e188d nt!IopfCompleteRequest+0x2cd 82b2a4c0 8c088444 tdx!TdxSendConnectionTlRequestComplete+0xbd 82b2a4e0 8c0b9d3a tcpip!TcpCompleteTcbSend+0x2e 82b2a53c 8c09d2d8 tcpip!TcpTcbReceive+0x2c4 82b2a5a4 8c09db0a tcpip!TcpMatchReceive+0x237 82b2a5f4 8c09db4b tcpip!TcpPreValidatedReceive+0x293 82b2a610 8c097e77 tcpip!TcpReceive+0x2d 82b2a620 8c0a00ab tcpip!TcpNlClientReceiveDatagrams+0x12 82b2a64c 8c09f9f6 tcpip!IppDeliverListToProtocol+0x49 82b2a66c 8c09ddb8 tcpip!IppProcessDeliverList+0x2a 82b2a6c4 8c09f89f tcpip!IppReceiveHeaderBatch+0x1fb 82b2a758 8c0adccc tcpip!IpFlcReceivePackets+0xbe5 82b2a7d4 8c0a82fe tcpip!FlpReceiveNonPreValidatedNetBufferListChain+0x746 82b2a808 82a8b654 tcpip!FlReceiveNetBufferListChainCalloutRoutine+0x11e 82b2a870 8c0a846c nt!KeExpandKernelStackAndCalloutEx+0x132 82b2a8ac 8bea318d tcpip!FlReceiveNetBufferListChain+0x7c 82b2a8e4 8be915be ndis!ndisMIndicateNetBufferListsToOpen+0x188 82b2a90c 8be914b2 ndis!ndisIndicateSortedNetBufferLists+0x4a 82b2aa88 8be3cc1d ndis!ndisMDispatchReceiveNetBufferLists+0x129 82b2aaa4 8be6d56a ndis!ndisMTopReceiveNetBufferLists+0x2d 82b2aac0 8be6d504 ndis!ndisFilterIndicateReceiveNetBufferLists+0x46 82b2aadc 91af2426 ndis!NdisFIndicateReceiveNetBufferLists+0x2f 82b2ab1c 8be91553 vpcnfltr!FilterReceiveNetBufferLists+0x45e 82b2ab44 8be3cc78 ndis!ndisMIndicateReceiveNetBufferListsInternal+0x62 82b2ab6c 921bf256 ndis!NdisMIndicateReceiveNetBufferLists+0x52 WARNING: Stack unwind information not available. Following frames may be wrong. 82b2abb4 921b982d e1e6232+0x7256 82b2abe8 921b9acf e1e6232+0x182d 82b2abf8 921b9b6a e1e6232+0x1acf 82b2ac10 8be91892 e1e6232+0x1b6a 82b2ac50 8be3ca0f ndis!ndisMiniportDpc+0xda 82b2ac78 82a7a1b5 ndis!ndisInterruptDpc+0xaf 82b2acd4 82a7a018 nt!KiExecuteAllDpcs+0xf9 82b2ad20 82a79e38 nt!KiRetireDpcList+0xd5"A programmer is just a tool which converts caffeine into code" Want to install RSAT on Windows 7 Sp1? Check my HowTo: http://www.msfn.org/board/index.php?showtopic=150221
Free Windows Admin Tool Kit Click here and download it now
March 8th, 2011 3:02pm

Thanks. I've uninstalled that driver and started using the Microsoft provided driver again. I'm sure this will happen more, when it does, may I ask, how did you get that information from the memory.dmp file?
March 8th, 2011 3:59pm

how did you get that information from the memory.dmp file? I opened the dmp file with Debugging tools for Windows: http://support.microsoft.com/kb/315263"A programmer is just a tool which converts caffeine into code" Want to install RSAT on Windows 7 Sp1? Check my HowTo: http://www.msfn.org/board/index.php?showtopic=150221
Free Windows Admin Tool Kit Click here and download it now
March 8th, 2011 4:02pm

This topic is archived. No further replies will be accepted.

Other recent topics Other recent topics