Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

BSOD while torrenting due to NETIO.SYS


  • Please log in to reply
26 replies to this topic

#1 Mike_007

Mike_007

  • Members
  • 17 posts
  • OFFLINE
  •  
  • Local time:10:20 PM

Posted 02 February 2015 - 10:15 PM

Hello. 

 

This same thread was started in 2013 (http://www.bleepingcomputer.com/forums/t/512348/bsod-while-torrenting-due-to-netiosys/)

 

I am having the exact same issue. My machine runs great until I run a torrent client. Then, after anywhere from 5-15 minutes after starting a download, I get a BSOD. The BlueScreenView log reads:

 

Bug Check String  : DRIVER_IRQL_NOT_LESS_OR_EQUAL
Bug Check Code    : 0x000000d1
Parameter 1       : 00000000`00000028
Parameter 2       : 00000000`
00000002
Parameter 3       : 00000000`00000000
Parameter 4       : fffff880`
017886fd        (the larger bold portions of this parameter changes from one BSOD to the next. The rest stays constant.)
Caused By Driver  : NETIO.SYS
Caused By Address : NETIO.SYS+106fd
Processor         : x64
Crash Address     : ntoskrnl.exe+76e80

 

I have attached the most recent Minidump files. 

 

Basically, I think that the culprit is a third party driver which is interacting with the network related system files of Windows. I just dont know how to identify which one that it could be. 

 

Any help on identifying the culprit would be greatly appreciated. 

 

Thanks.

Attached Files


Edited by Mike_007, 02 February 2015 - 10:28 PM.


BC AdBot (Login to Remove)

 


#2 Mike_007

Mike_007
  • Topic Starter

  • Members
  • 17 posts
  • OFFLINE
  •  
  • Local time:10:20 PM

Posted 03 February 2015 - 05:08 PM

78 reads and 0 replies...I must have everyone stumped. 



#3 Aura

Aura

    Bleepin' Special Ops


  • Malware Response Team
  • 19,697 posts
  • ONLINE
  •  
  • Gender:Male
  • Local time:10:20 PM

Posted 03 February 2015 - 05:18 PM

Hi Mike_007 :)

I think that the issue here isn't really your problem, but that fact that you are actively torrenting. A lot of people here are against torrenting since it can be used for illegal purposes, such as downloading copyrighted content like movies, games, music, etc. However, it can also be used for legitimate purposes, such as download various Linux .iso that are available via torrents or share of copyright free data. However, if you were to have that issue while torrenting illegally, it would go against the BleepingComputer's Rules and no one will be allowed to help you. I saw your thread yesterday and I hesitated to post in it just because of that, and I still am.

animinionsmalltext.gif
unite_blue.png
Security Administrator | Sysnative Windows Update Senior Analyst | Malware Hunter | @SecurityAura
My timezone UTC-05:00 (East. Coast). If I didn't reply to you within 48 hours, please send me a PM.


#4 Mike_007

Mike_007
  • Topic Starter

  • Members
  • 17 posts
  • OFFLINE
  •  
  • Local time:10:20 PM

Posted 03 February 2015 - 05:26 PM

I apologize. I should have started with a disclaimer. I am not using my torrent client for sharing any files that I should not be. 



#5 Mike_007

Mike_007
  • Topic Starter

  • Members
  • 17 posts
  • OFFLINE
  •  
  • Local time:10:20 PM

Posted 03 February 2015 - 05:46 PM

In addition, here is my hijackthis logfile

 

Mod Edit:  Removed HJT log, not used/allowed in this forum - Hamluis.


Edited by hamluis, 14 February 2015 - 12:10 PM.


#6 Aura

Aura

    Bleepin' Special Ops


  • Malware Response Team
  • 19,697 posts
  • ONLINE
  •  
  • Gender:Male
  • Local time:10:20 PM

Posted 03 February 2015 - 05:50 PM

HJT is outdated and discontinued, it shouldn't be used anymore. Also, it's not needed when troubleshooting an issue other than malware related. Can you tell me your computer/laptop brand and model and also the exact version of Windows 7 that you are using?

animinionsmalltext.gif
unite_blue.png
Security Administrator | Sysnative Windows Update Senior Analyst | Malware Hunter | @SecurityAura
My timezone UTC-05:00 (East. Coast). If I didn't reply to you within 48 hours, please send me a PM.


#7 Mike_007

Mike_007
  • Topic Starter

  • Members
  • 17 posts
  • OFFLINE
  •  
  • Local time:10:20 PM

Posted 03 February 2015 - 06:09 PM

As long as you promise not to laugh. Just kidding.

 

Gateway SX2370

Windows 7 Home Premium SP1



#8 Aura

Aura

    Bleepin' Special Ops


  • Malware Response Team
  • 19,697 posts
  • ONLINE
  •  
  • Gender:Male
  • Local time:10:20 PM

Posted 03 February 2015 - 06:15 PM

Do you know the exact model number? It should be Gateway SX2370-XXYY, where XX are letters and YY numbers. You can find that product number most likely on your computer user manual or the sticker on it. Also, Windows 7 Home Premium SP1 64-bits?

animinionsmalltext.gif
unite_blue.png
Security Administrator | Sysnative Windows Update Senior Analyst | Malware Hunter | @SecurityAura
My timezone UTC-05:00 (East. Coast). If I didn't reply to you within 48 hours, please send me a PM.


#9 Mike_007

Mike_007
  • Topic Starter

  • Members
  • 17 posts
  • OFFLINE
  •  
  • Local time:10:20 PM

Posted 03 February 2015 - 06:20 PM

SX2370-UB30P. 64-bit.



#10 Aura

Aura

    Bleepin' Special Ops


  • Malware Response Team
  • 19,697 posts
  • ONLINE
  •  
  • Gender:Male
  • Local time:10:20 PM

Posted 03 February 2015 - 06:27 PM

Download and install these Realtek LAN drivers for your Ethernet Controller:

http://global-download.gateway.com/GDFiles/Driver/Lan/Lan_Realtek_7.45.516.2011_W7x86W7x64_A.zip?acerid=634522698272515554&Step1=DESKTOP&Step2=SX%20SERIES&Step3=SX2370&OS=711&LC=en&BC=GATEWAY&SC=PA_6G

Once done, restart your computer and see if you still have BSODs when using uTorrent.

animinionsmalltext.gif
unite_blue.png
Security Administrator | Sysnative Windows Update Senior Analyst | Malware Hunter | @SecurityAura
My timezone UTC-05:00 (East. Coast). If I didn't reply to you within 48 hours, please send me a PM.


#11 Mike_007

Mike_007
  • Topic Starter

  • Members
  • 17 posts
  • OFFLINE
  •  
  • Local time:10:20 PM

Posted 03 February 2015 - 06:34 PM

Thank you Aura, I will try that momentarily. In the meantime, a strange thing happened. I just ran sfc /scannow, and I have been up and running crash-free for a good 15 minutes...longer then I have been able to in over a week. I tried to attach CBS.log, but the file is too large to attach. There were quite a few fixes performed.



#12 Aura

Aura

    Bleepin' Special Ops


  • Malware Response Team
  • 19,697 posts
  • ONLINE
  •  
  • Gender:Male
  • Local time:10:20 PM

Posted 03 February 2015 - 06:41 PM

What you can do is to open another elevated command prompt, like you did for the SFC scan, and enter this command:

findstr /c:"[SR]" %windir%\logs\cbs\cbs.log > %userprofile%\Desktop\sfcdetails.txt

A file called sfcdetails.txt will appear on your desktop. Open it, then copy and paste the content of that file in your next reply.

animinionsmalltext.gif
unite_blue.png
Security Administrator | Sysnative Windows Update Senior Analyst | Malware Hunter | @SecurityAura
My timezone UTC-05:00 (East. Coast). If I didn't reply to you within 48 hours, please send me a PM.


#13 Mike_007

Mike_007
  • Topic Starter

  • Members
  • 17 posts
  • OFFLINE
  •  
  • Local time:10:20 PM

Posted 04 February 2015 - 05:57 PM

Ok Aura, here is the log file.

 

Let me know if you can decipher what it was that went wrong.

Attached Files



#14 Aura

Aura

    Bleepin' Special Ops


  • Malware Response Team
  • 19,697 posts
  • ONLINE
  •  
  • Gender:Male
  • Local time:10:20 PM

Posted 04 February 2015 - 06:09 PM

The corrupted files are related to the Group Police Editor (which manage local GPOs). I doubt you use them, so leaving them as such isn't that bad. However, if you wish to repair them, you'll have to do an in-place upgrade of your Windows 7.

http://www.sevenforums.com/tutorials/3413-repair-install.html

animinionsmalltext.gif
unite_blue.png
Security Administrator | Sysnative Windows Update Senior Analyst | Malware Hunter | @SecurityAura
My timezone UTC-05:00 (East. Coast). If I didn't reply to you within 48 hours, please send me a PM.


#15 Mike_007

Mike_007
  • Topic Starter

  • Members
  • 17 posts
  • OFFLINE
  •  
  • Local time:10:20 PM

Posted 04 February 2015 - 06:15 PM

Thanks Aura. How would these files get corrupted? I have modified group policies for other users in the past, but this has been quite some time ago. Do you think that I should still update my Realtek LAN drivers for my Ethernet Controller, as you stated above? Thanks again!






0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users