Getting Blue Screen error in Windows 7 Netio.sys driver_irql_not_less_or_equal error

Hi,

Results verified by WinDBG, DumpCHK, and BlueScreenVIew.

The Bug_Check D1 CAUSE netio.sys which is a Windows component which means something
else drove it into Fault. Most likely are the combination of McAfee and the network drivers.


BugCheck D1, {28, 2, 0, fffff8800196cb2d}
Probably caused by : NETIO.SYS ( NETIO!RtlCopyBufferToMdl+1d )
MODULE_NAME: NETIO
IMAGE_NAME:  NETIO.SYS
FAILURE_BUCKET_ID:  X64_0xD1_NETIO!RtlCopyBufferToMdl+1d
BUCKET_ID:  X64_0xD1_NETIO!RtlCopyBufferToMdl+1d

1. McAfee has been known to cause this issue. Uninstall McAfee and run its Removal Tool to prevent
trouble causing remnants from being left behind. Below are recommendations to use while testing,
even better permanently.

McAfee Removal Tool
http://service.mcafee.com/FAQDocument.aspx?id=TS100507

List of anti-malware program cleanup/uninstall tools
http://social.answers.microsoft.com/Forums/en-US/msestart/thread/407bf6da-c05d-4546-8788-0aa4c25a1f91/

------------------------------

Here is what I use and recommend : (These are all Free versions and very effective.) 

Avast and Prevx have proven extremely reliable and compatible with everything I have
thrown at them. Microsoft Security Essentials and Prevx have also proven to be very
reliable and compatible. Use MSE and Prevx or Avast and Prevx however not all 3.

Avast Home Free - stop any shields you do not need except leave Standard, Web, and
Network running.

Prevx - Home - Free

Windows Firewall

Windows Defender (not needed if using MSE)

IE - Protected Mode

IE 8 - SmartScreen Filter ON  (IE 7 Phishing Filter)

I also have IE to always start with InPrivate Filter active if IE 8.
(You occasionally have to turn it temporarily off with the little Icon on LEFT of the + bottom
right of IE)

Two versions of Avast are available 6.x and 4.8x

Avast 6.x - Home - Free - Stop the Shields you do not use (except File, Web, Network, &
Behavior) - double click the Orange Icon in Notification Area - Real Time Shields - click the
Shield you want to stop - STOP. To stop the Orange Icon from showing an error indicator -
click the Orange Icon - Upper Right - Settings - click Status Bar - uncheck the Shields you
disabled - click OK
http://www.avast.com/free-antivirus-download

Avast 4.8x - Home - Free - stop any shields you do not need except leave Standard, Web,
and Network running. (Double Click Blue icon - details next to OK. - upper left Shields -
Terminate those you do not use.)
http://www.avast.com/free-antivirus-download#tab4

Or use Microsoft Security Essentials - Free
http://www.microsoft.com/Security_Essentials/

Prevx works well along side Avast or MSE

Prevx - Home - Free small, fast, exceptional CLOUD protection, works with other security
programs. This is a scanner only, VERY EFFECTIVE, if it finds something come back here
or use Google to see how to remove. 
http://www.prevx.com/   <-- information
http://info.prevx.com/downloadcsi.asp  <-- download

PCmag - Prevx - Editor'a Choice
http://www.pcmag.com/article2/0,2817,2346862,00.asp

Also get Malwarebytes - free - use as scanner only. If you ever suspect malware, and that
would be unsual with Avast and Prevx running except for an occasional low level cookie
(no big deal), UPDATE it and then run it as a scanner. I have many scanners and they
never find anything of note since I started using this setup.
http://www.malwarebytes.org/products/malwarebytes_free

-------------------------------------------------------------------------------------------------------------------------

2. Update the network drivers - check with Dell first and then Broadcom and Realtek. Most important
are the ones you use, either Wifi (wireless) or NIC (wired).

Dell Support
http://support.dell.com/

Dell Drivers - Product Manuals & Warranty Info (left side) - Tech Support and more
http://support.dell.com/support/index.aspx?c=us&l=en&s=dhs

Dell Forums
http://en.community.dell.com/forums/

Broadcom 802.11 Network Adapter wireless driver  (WiFi)
Description:   Broadcom 802.11 Network Adapter wireless driver 

Broadcom Support and Drivers
http://www.broadcom.com/support/

Realtek 8136/8168/8169 PCI/PCIe Adapters  - NIC
Description:   Realtek 8136/8168/8169 NDIS 6.20 64-bit Driver 

Realtek RTL8168/RTL8169
http://www.realtek.com/downloads/downloadsView.aspx?Langid=1&PNid=5&PFid=5&Level=5&Conn=4&DownTypeID=3&GetDown=false#RTL8111B/RTL8168B/RTL8111/RTL8168<br>RTL8111C/RTL8111CP/RTL8111D(L)<br>RTL8168C/RTL8111DP/RTL8111E<br>RTL8168E

----------------------------------------------------------------------------------------------------------------------

3. Use the methods in the troubleshooter below.

For BlueScreen troubleshooting methods using BlueScreenView and MyEventViewer see my replies
in this thread - top 3 answers (+1 other).

http://social.answers.microsoft.com/Forums/en-US/w7repair/thread/c675b7b8-795f-474d-a1c4-6b77b3fcd990

==============================================================

BCCode: D1     0x000000D1

Check these KB's

Stop error when you resume a computer that is running Windows 7 or Windows Server 2008 R2
from sleep or from hibernation: "STOP: 0x000000D1"
http://support.microsoft.com/kb/978982

Stop error on a Windows Server 2008 R2-based or Windows 7-based computer when the operating
system uses a virtual storport miniport driver to save a dump file or a hibernation file: "0x000000D1"
http://support.microsoft.com/kb/2320550

Those and 7 other KB Articles are available
http://support.microsoft.com/search/default.aspx?mode=a&query=0x000000D1&spid=14019&catalog=LCID%3D1033&1033comm=1&res=10

--------------------------------------------------

Think Video drivers mainly though it can be others. See the driver section in my generic bluescreen
troubleshooting methods below. BIOS, low level chipset drivers and antivirus/antispyway/security
programs can also cause this. Check the troubleshooter and when you get to the driver and memory testing sections refer to the generic methods in next message and then return to the troubleshooter
if needed.


Cause

A driver tried to access an address that is pageable (or that is completely invalid) while the IRQL was too high.

This bug check is usually caused by drivers that have used improper addresses.

If the first parameter has the same value as the fourth parameter, and the third parameter indicates an execute operation, this bug check was likely caused by a driver that was trying to execute code when the code itself was paged out. Possible causes for the page fault include the following:

• The function was marked as pageable and was running at an elevated IRQL (which includes obtaining a lock).
• The function call was made to a function in another driver, and that driver was unloaded.
• The function was called by using a function pointer that was an invalid pointer.

BCCode: d1   0x000000d1  <-- read this link
http://www.faultwire.com/solutions-fatal_error/DRIVER-IRQL-NOT-LESS-OR-EQUAL-0x000000D1-*1210.html?order=votes

=========================================

Look in the Event Viewer to see if anything is reported about those.
http://www.computerperformance.co.uk/vista/vista_event_viewer.htm

MyEventViewer - Free - a simple alternative to the standard event viewer of Windows.
TIP - Options - Advanced Filter allows you to see a time frame instead of the whole file.
http://www.nirsoft.net/utils/my_event_viewer.html

-------------------------------------------------------------------------

Here are some methods to possibly fix the blue screen issue. If you could give the Blue Screen
info that would help. Such as the BCC and the other 4 entries on the lower left. And any other
error information such as STOP codes and info such as IRQL_NOT_LESS_OR_EQUAL or PAGE_FAULT_IN_NONPAGED_AREA and similar messages.

As examples :

BCCode: 116
BCP1: 87BC9510
BCP2: 8C013D80
BCP3: 00000000
BCP4: 00000002

or in this format :

Stop: 0x00000000 (oxoooooooo oxoooooooo oxooooooooo oxoooooooo)
tcpip.sys - Address 0x00000000 base at 0x000000000 DateStamp 0x000000000


This is an excellent tool for posting Blue Screen Error Information

BlueScreenView scans all your minidump files created during 'blue screen of death'
crashes, and displays the information about all crashes in one table - Free
http://www.nirsoft.net/utils/blue_screen_view.html


Many BlueScreens are caused by old or corrupted drivers, especially video drivers however
there are other causes.

You can do these in Safe Mode if needed or from Command Prompt from Vista DVD or
Recovery Options if your system has that installed by the maker.

How to Boot to the System Recovery Options in Windows 7
http://www.sevenforums.com/tutorials/668-system-recovery-options.html

You can try a System Restore back to a point before the problem started if there is one.

How to Do a System Restore in Windows 7
http://www.sevenforums.com/tutorials/700-system-restore.html

-------------------------------------------------------------------------

Start - type this in Search Box ->  COMMAND   find at top and RIGHT CLICK  -  RUN AS ADMIN

Enter this at the prompt - sfc /scannow

How to Repair Windows 7 System Files with System File Checker
http://www.sevenforums.com/tutorials/1538-sfc-scannow-command-system-file-checker.html

How to analyze the log file entries that the Microsoft Windows Resource Checker (SFC.exe) program
generates in Windows Vista cbs.log (and Windows 7)
http://support.microsoft.com/kb/928228

The log might give you the answer if there was a corrupted driver. (Does not tell all the possible
driver issues).

Also run CheckDisk so we can rule out corruption as much as possible.

How to Run Check Disk at Startup in Windows 7
http://www.sevenforums.com/tutorials/433-disk-check.html

-------------------------------------------------------------------------

Often updating drivers will help, usually Video, Sound, Network Card  (NIC), WiFi, 3rd party
keyboard and mouse, as well as other major device drivers.

Manually look at manufacturer's sites for drivers - and Device Maker's sites.
http://pcsupport.about.com/od/driverssupport/ht/driverdlmfgr.htm

Installing and updating drivers in 7 (updating drivers manually using the methods above is preferred
to ensure the latest drivers from System maker and Device makers are found)
http://www.sevenforums.com/tutorials/43216-installing-updating-drivers-7-a.html

How To Disable Automatic Driver Installation In Windows Vista - Drivers
http://www.addictivetips.com/windows-tips/how-to-disable-automatic-driver-installation-in-windows-vista/
http://technet.microsoft.com/en-us/library/cc730606(WS.10).aspx

-------------------------------------------------------------------------

How to fix BlueScreen (STOP) errors that cause Windows Vista to shut down or restart
unexpectedly
http://support.microsoft.com/kb/958233

Troubleshooting Vista Blue Screen, STOP Errors (and Windows 7)
http://www.chicagotech.net/vista/vistabluescreen.htm

Understanding and Decoding BSOD (blue screen of death) Messages
http://www.taranfx.com/blog/?p=692

Windows - Troubleshooting Blue Screen Errors
http://kb.wisc.edu/page.php?id=7033

-------------------------------------------------------------------------

In some cases this might be required.

StartUp Repair from Recovery Options or Windows 7 disk

How to Run a Startup Repair in Windows 7
http://www.sevenforums.com/tutorials/681-startup-repair.html

How to Boot to the System Recovery Options in Windows 7
http://www.sevenforums.com/tutorials/668-system-recovery-options.html

How to Create a Windows 7 System Repair Disc
http://www.sevenforums.com/tutorials/2083-system-repair-disc-create.html

Hope this helps.

Rob Brown - Microsoft MVP <- profile - Windows Expert - Consumer : Bicycle - Mark Twain said it right.