Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Driver Verifier BSOD - "tcpipreg.sys+35a5"


  • Please log in to reply
5 replies to this topic

#1 MrJayElectro

MrJayElectro

  • Members
  • 3 posts
  • OFFLINE
  •  
  • Local time:03:49 PM

Posted 18 December 2015 - 06:39 PM

I've been having troubles for nearly a month now. I've tried replacing RAM and checking RAM slots, checking my HDD with several programs including Windows programs, checking drivers in various ways, and "upgrading" my OS from disk as a Hail Mary.

The OS upgrade was the only thing to seemingly make any change, as it noticed immediately upon startup that the .NET Framework was damaged. Repairing it did not solve this issue.

I've used Driver Verifier to determine the issue, and it crashes at the login screen. When I restart into safe mode with networking, BlueEventViewer determines that it is ntoskrnl.exe and tcpipreg.sys. From previous forum searches on multiple different forums, I have concluded that ntoskrnl.exe is merely taking the blame, but I am unsure on tcpipreg.sys.

Attached are a perfmon zip and a sysnative zip. If anything else is needed, please let me know.

 

Edit: I'd like to add that if I remove the power cord to the laptop, I lose input. The mouse will still move, but refuses to click, and keyboard input fails entirely. This is only solved with a hard shutdown/restart as far as I can tell. This is a very recent issue and I cannot tie it to any software or hardware changes.

Adding on to the above edit, this seems to no longer be the case. Due to the fact that it had happened after four restarts, I assumed it was due to a failure of whatever driver controls the power settings, but as it now seems to be fine, I'm back to having no idea what's going on with this machine.

And as for other required info:

· OS - Windows 7 Professional SP1.
· This is an x64-based PC.
· Windows 7 Professional SP1 was originally installed.
· This is an OEM version.
· The system was built in March/April 2015.
· I last reinstalled the OS on December 17th 2015.

· CPU - Intel i7 4710MQ

· GPU - Nvidia GTX 950M


· I'm not sure who manufactured this, but I purchased it from ibuypower.
· I am not sure how to check the serial number.

· This is a laptop.

Attached Files


Edited by MrJayElectro, 18 December 2015 - 10:07 PM.


BC AdBot (Login to Remove)

 


#2 usasma

usasma

    Still visually handicapped (avatar is memory developed by my Dad


  • BSOD Kernel Dump Expert
  • 25,089 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Southeastern CT, USA
  • Local time:04:49 PM

Posted 20 December 2015 - 02:33 PM

I'm out of time for today, but I did find this article that might help you:  https://support.microsoft.com/en-us/kb/2550576

 

If not, I'll be back later on tonight or in the early morning (East coast USA) and will look into the reports that you've uploaded then.

Good luck!


My browser caused a flood of traffic, sio my IP address was banned. Hope to fix it soon. Will get back to posting as soon as Im able.

- John  (my website: http://www.carrona.org/ )**If you need a more detailed explanation, please ask for it. I have the Knack. **  If I haven't replied in 48 hours, please send me a message. My eye problems have recently increased and I'm having difficult reading posts. (23 Nov 2017)FYI - I am completely blind in the right eye and ~30% blind in the left eye.<p>If the eye problems get worse suddenly, I may not be able to respond.If that's the case and help is needed, please PM a staff member for assistance.

#3 usasma

usasma

    Still visually handicapped (avatar is memory developed by my Dad


  • BSOD Kernel Dump Expert
  • 25,089 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Southeastern CT, USA
  • Local time:04:49 PM

Posted 20 December 2015 - 07:08 PM

Unfortunately, it appears that your running pirated software.  We cannot help with systems like this.

I provide a courtesy analysis, but will not respond to questions about the analysis until you've gotten "legitimate".

 

Only 158 Windows Update hotfixes installed.  Most systems with SP1 have 350 or more.  Please visit Windows Update and get ALL available updates (it may take several trips to get them all).

No memory dumps in the uploaded files.  Please do this:

 

Upload Dump Files:
NOTE:  If using a disk cleaning utility, please stop using it while we are troubleshooting your issues.
Please go to C:\Windows\Minidump and zip up the contents of the folder.  Then upload/attach the .zip file with your next post.
Left click on the first minidump file.
Hold down the "Shift" key and left click on the last minidump file.
Right click on the blue highlighted area and select "Send to"
Select "Compressed (zipped) folder" and note where the folder is saved.
Upload that .zip file with your next post.

If you have issues with "Access Denied" errors, try copying the files to your desktop and zipping them up from there.  If it still won't let you zip them up, post back for further advice.

If you don't have anything in that folder, please check in C:\Windows for a file named MEMORY.DMP.  If you find it, zip it up and upload it to a free file hosting service.  Then post the link to it in your topic so that we can download it. 

Also, search your entire hard drive for files ending in .dmp, .mdmp, and .hdmp.  Zip up any that you find and upload them with your next post.

Then, follow the directions here to set your system for Minidumps (much smaller than the MEMORY.DMP file):  http://www.carrona.org/setmini.html
More info on dump file options here: http://support.microsoft.com/kb/254649

 

It's possible that there is a hardware problem (from the memory dumps listed in the WER section of MSINFO32).

Please run these free diagnostics:  http://www.carrona.org/hwdiag.html

 

Beyond that, please run Driver Verifier according to these directions:  http://www.carrona.org/verifier.html

 

Also, there may be a problem with USB devices - so disconnect any connected devices.


My browser caused a flood of traffic, sio my IP address was banned. Hope to fix it soon. Will get back to posting as soon as Im able.

- John  (my website: http://www.carrona.org/ )**If you need a more detailed explanation, please ask for it. I have the Knack. **  If I haven't replied in 48 hours, please send me a message. My eye problems have recently increased and I'm having difficult reading posts. (23 Nov 2017)FYI - I am completely blind in the right eye and ~30% blind in the left eye.<p>If the eye problems get worse suddenly, I may not be able to respond.If that's the case and help is needed, please PM a staff member for assistance.

#4 MrJayElectro

MrJayElectro
  • Topic Starter

  • Members
  • 3 posts
  • OFFLINE
  •  
  • Local time:03:49 PM

Posted 20 December 2015 - 11:40 PM

>Unfortunately, it appears that your running pirated software.  We cannot help with systems like this.

Is there a way to prove that this isn't pirated? I used the license key straight from the bottom of the laptop when I reinstalled the OS as an "upgrade".

I will return when I've attempted to install all hotfixes. I'm actually having multiple issues with restarting and installing updates, as well as issues with explorer - right clicking or ctrl+v sometimes crashes explorer, and currently the desktop is unable to respond because I tried to paste dump files to the desktop.


Edit: I am back with every update available to me at this time, aside from Windows 10. I have zipped my BSOD dumps and recreated a perfmon zip as well as a Sysnative zip to reflect the updates and insist on the legitimacy of this OS. If this OS is still considered pirated, I will require assistance to prove otherwise.


A new problem has surfaced. At times, I am having trouble completely restarting. The computer shuts down nearly completely, but the power button remains active and the hard drive can still be heard and felt. Holding down the power button to force a shutdown, then restarting, shows that there are seemingly no issues and it resumes as if it was shut down properly. I am not sure what this could mean, but I assume it is related to the issues I have with copying and pasting files, as well as the sudden BSODs I've been getting for the past month that seem to point to tcpipreg.sys.

Attached Files


Edited by MrJayElectro, 21 December 2015 - 02:37 AM.


#5 usasma

usasma

    Still visually handicapped (avatar is memory developed by my Dad


  • BSOD Kernel Dump Expert
  • 25,089 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Southeastern CT, USA
  • Local time:04:49 PM

Posted 21 December 2015 - 05:26 PM

Did you stop using pirated software recently? If so, when and for what reason.

FYI - it's possible that the tweaks/changes made by the pirated software are causing problems.

 

As there were no memory dumps previously, I've run these and will include advice about them.

 

The errors, as you know, blame tcpipreg.sys and verifier confirms this.

As such you should concentrate on the network drivers.

Please:

- download fresh copies of the latest, W7 compatible driver software for your wired, wireless and bluetooth software.

If using firewall software or private internet access type of programs, please download fresh copies of those also.

- then uninstall the current versions that are installed on your computer (using Control Panel...Programs and Features)

- then install the freshly downloaded packages

- then monitor for further BSOD's

 

The next step (if this doesn't help) would be to backup your stuff, then wipe the system and reinstall Windows "clean".

This would rule out software problems and could help to confirm if this is a hardware problem or not.

Here's a guide on how to do this:  http://www.carrona.org/canned.html#clean

 

 

Analysis:
The following is for informational purposes only.
**************************Fri Dec 18 19:14:36.113 2015 (UTC - 5:00)**************************
Loading Dump File [C:\Users\John\SysnativeBSODApps\121815-26036-01.dmp]
Windows 7 Kernel Version 7601 (Service Pack 1) MP (8 procs) Free x64
Built by: 7601.19045.amd64fre.win7sp1_gdr.151019-1254
System Uptime: 0 days 0:00:40.003
*** ERROR: Module load completed but symbols could not be loaded for tcpipreg.sys
Probably caused by : tcpipreg.sys ( tcpipreg+45a1 )
BugCheck C4, {0, 0, 0, 0}
BugCheck Info: DRIVER_VERIFIER_DETECTED_VIOLATION (c4)
DRIVER_VERIFIER_DETECTED_VIOLATION (c4)
Arguments:
Arg1: 0000000000000000, caller is trying to allocate zero bytes
Arg2: 0000000000000000, current IRQL
Arg3: 0000000000000000, pool type
Arg4: 0000000000000000, number of bytes
BUGCHECK_STR:  0xc4_0
PROCESS_NAME:  System
FAILURE_BUCKET_ID:  X64_0xc4_0_VRF_tcpipreg+45a1
CPUID:        "Intel® Core™ i7-4710MQ CPU @ 2.50GHz"
MaxSpeed:     2500
CurrentSpeed: 2494
  BIOS Version                  1.03.02
  BIOS Release Date             01/23/2015
  Manufacturer                  Notebook                        
  Product Name                  W65_67SC                        
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
**************************Fri Dec 18 18:26:31.476 2015 (UTC - 5:00)**************************
Loading Dump File [C:\Users\John\SysnativeBSODApps\121815-19047-01.dmp]
Windows 7 Kernel Version 7601 (Service Pack 1) MP (8 procs) Free x64
Built by: 7601.19045.amd64fre.win7sp1_gdr.151019-1254
System Uptime: 0 days 0:00:38.366
*** ERROR: Module load completed but symbols could not be loaded for tcpipreg.sys
Probably caused by : tcpipreg.sys ( tcpipreg+45a1 )
BugCheck C4, {0, 0, 0, 0}
BugCheck Info: DRIVER_VERIFIER_DETECTED_VIOLATION (c4)
DRIVER_VERIFIER_DETECTED_VIOLATION (c4)
Arguments:
Arg1: 0000000000000000, caller is trying to allocate zero bytes
Arg2: 0000000000000000, current IRQL
Arg3: 0000000000000000, pool type
Arg4: 0000000000000000, number of bytes
BUGCHECK_STR:  0xc4_0
PROCESS_NAME:  System
FAILURE_BUCKET_ID:  X64_0xc4_0_VRF_tcpipreg+45a1
CPUID:        "Intel® Core™ i7-4710MQ CPU @ 2.50GHz"
MaxSpeed:     2500
CurrentSpeed: 2494
  BIOS Version                  1.03.02
  BIOS Release Date             01/23/2015
  Manufacturer                  Notebook                        
  Product Name                  W65_67SC                        
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``


3rd Party Drivers:
The following is for information purposes only.
Any drivers in RED should be updated or removed from your system. And should have been discussed in the body of my post.
**************************Fri Dec 18 19:14:36.113 2015 (UTC - 5:00)**************************
intelppm.sys                Mon Jul 13 19:19:25 2009 (4A5BC0FD)
amdxata.sys                 Fri Mar 19 12:18:18 2010 (4BA3A3CA)
GEARAspiWDM.sys             Thu May  3 15:56:17 2012 (4FA2E2E1)
npf.sys                     Thu Feb 28 20:31:24 2013 (513004EC)
SvThANSP.sys                Fri Oct 11 23:08:38 2013 (5258BD36)
RtsP2Stor.sys               Fri Jan  3 03:06:41 2014 (52C66F91)
SynTP.sys                   Thu Jan  9 22:16:42 2014 (52CF661A)
iusb3hub.sys                Fri May 30 09:16:45 2014 (538884BD)
iusb3xhc.sys                Fri May 30 09:16:48 2014 (538884C0)
Netwsw02.sys                Mon Dec  8 04:53:22 2014 (54857512)
rzpnk.sys                   Thu May 28 15:22:11 2015 (55676AE3)
rzpmgrk.sys                 Thu Jun 11 22:57:21 2015 (557A4A91)
igdkmd64.sys                Wed Aug  5 00:53:18 2015 (55C196BE)
nvpciflt.sys                Sat Nov 14 00:22:50 2015 (5646C52A)
nvlddmkm.sys                Sat Nov 14 00:38:16 2015 (5646C8C8)
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
**************************Fri Dec 18 18:26:31.476 2015 (UTC - 5:00)**************************
Rt64win7.sys                Tue Feb 18 06:38:35 2014 (5303463B)
RtsPer.sys                  Thu May  8 06:12:53 2014 (536B58A5)
rzudd.sys                   Tue Aug 11 07:13:50 2015 (55C9D8EE)
http://www.carrona.org/drivers/driver.php?id=intelppm.sys
http://www.carrona.org/drivers/driver.php?id=amdxata.sys
http://www.carrona.org/drivers/driver.php?id=GEARAspiWDM.sys
http://www.carrona.org/drivers/driver.php?id=npf.sys
http://www.carrona.org/drivers/driver.php?id=SvThANSP.sys
http://www.carrona.org/drivers/driver.php?id=RtsP2Stor.sys
http://www.carrona.org/drivers/driver.php?id=SynTP.sys
http://www.carrona.org/drivers/driver.php?id=iusb3hub.sys
http://www.carrona.org/drivers/driver.php?id=iusb3xhc.sys
http://www.carrona.org/drivers/driver.php?id=Netwsw02.sys
http://www.carrona.org/drivers/driver.php?id=rzpnk.sys
http://www.carrona.org/drivers/driver.php?id=rzpmgrk.sys
http://www.carrona.org/drivers/driver.php?id=igdkmd64.sys
http://www.carrona.org/drivers/driver.php?id=nvpciflt.sys
http://www.carrona.org/drivers/driver.php?id=nvlddmkm.sys
http://www.carrona.org/drivers/driver.php?id=Rt64win7.sys
http://www.carrona.org/drivers/driver.php?id=RtsPer.sys
http://www.carrona.org/drivers/driver.php?id=rzudd.sys
 


My browser caused a flood of traffic, sio my IP address was banned. Hope to fix it soon. Will get back to posting as soon as Im able.

- John  (my website: http://www.carrona.org/ )**If you need a more detailed explanation, please ask for it. I have the Knack. **  If I haven't replied in 48 hours, please send me a message. My eye problems have recently increased and I'm having difficult reading posts. (23 Nov 2017)FYI - I am completely blind in the right eye and ~30% blind in the left eye.<p>If the eye problems get worse suddenly, I may not be able to respond.If that's the case and help is needed, please PM a staff member for assistance.

#6 MrJayElectro

MrJayElectro
  • Topic Starter

  • Members
  • 3 posts
  • OFFLINE
  •  
  • Local time:03:49 PM

Posted 21 December 2015 - 08:31 PM

As I tried to update a wireless adapter, it failed, crashed, and failed to load Windows. Fortunately, I lost merely two days of work and have a full backup on an old HDD. I will report back if there is another crash in the near future, but for now I believe this is solved.

In regards to the allegations of pirated software, I left the box checked for "Verify Windows when I am connected to the internet" - it failed to do so repeatedly, and as I was attempting to make that work, I was also running the Sysnative executable and the performance monitor. I believe this made it appear as if I was running a pirated OS. Shortly afterwards, I had verified the OS with the product key itself and ran into no issues. I understand your concern, but I am no Windows pirate.






0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users