BSOD from tcpip.sys

[dwhitephp]

I've been getting sporadic BSOD with title "System service exception (tcpip.sys)". Typically when running the Chrome browser, but happens other times too. Also have received a "bad pool caller" one time.

I'm attaching a zip file from the Sysnative tool, but when I try to create the perfmon, it won't run. Yes, I'm running as an administrator, but I get the following message a few seconds after typing in the command...

[TABLE="width: 100%"]
[TR]
[TD] Error:[/TD]
[/TR]
[TR]
[TD][/TD]
[TD] An error occured while attempting to generate the report.[/TD]
[TD][/TD]
[/TR]
[TR]
[TD][/TD]
[TD]The operator or administrator has refused the request.[/TD]
[/TR]
[/TABLE]


So, I'm not able to attach the perfmon report.

I did run the SCF command. Results look like it fixed some things, but said it could not fix them all.

Acer Aspire V laptop
Malwarebytes Anti-Malware (professional version, updated and running)
McAfee All Access AntiVirus (paid version, updated and running)

Hoping someone can help.

Dave White

Adding a SYSTEMINFO file in case that helps...

DKW

 

[dwhitephp]

Odd. I added the perfmon stuff as a reply, but it's not showing up. I'll have to get the failing computer out and resend...

Dave

 

[dwhitephp]

Here's another try to add the perfmon xml files...

 

[dwhitephp]

Been several weeks. Anyone have any ideas?

 

[xilolee]

Hi dwhitephp. :smile9:
From the last crash dump it seems MBAM is the culprit.
To be certain of it you can try to remove MBAM or to run driver verifier.

If you want to try to run driver verifier, please read CAREFULLY the following instructions and guide (and also some other tutorials/guides and WARNINGS).
From an elevated command prompt, launch:

bcdedit

Then:

bcdedit /set bootmenupolicy legacy

Then:

bcdedit

You should get something like (see bold strings):

Read More:

c:\>bcdedit
Windows Boot Manager
--------------------
identifier {bootmgr}
device partition=\Device\HarddiskVolume2
path \EFI\Microsoft\Boot\bootmgfw.efi
description Windows Boot Manager
locale it-IT
inherit {globalsettings}
default {current}
resumeobject {5d5a2019-d643-11e4-a71c-9001aae18364}
displayorder {current}
toolsdisplayorder {memdiag}
timeout 30
Windows Boot Loader
-------------------
identifier {current}
device partition=C:
path \WINDOWS\system32\winload.efi
description Windows 10
locale it-IT
inherit {bootloadersettings}
recoverysequence {5d5a201b-d643-11e4-a71c-9001aae18364}
recoveryenabled Yes
isolatedcontext Yes
allowedinmemorysettings 0x15000075
osdevice partition=C:
systemroot \WINDOWS
resumeobject {5d5a2019-d643-11e4-a71c-9001aae18364}
nx OptIn
bootmenupolicy Standard

C:\>bcdedit /set bootmenupolicy legacy
The operation completed successfully.

c:\>bcdedit
Windows Boot Manager
--------------------
identifier {bootmgr}
device partition=\Device\HarddiskVolume2
path \EFI\Microsoft\Boot\bootmgfw.efi
description Windows Boot Manager
locale it-IT
inherit {globalsettings}
default {current}
resumeobject {5d5a2019-d643-11e4-a71c-9001aae18364}
displayorder {current}
toolsdisplayorder {memdiag}
timeout 30
Windows Boot Loader
-------------------
identifier {current}
device partition=C:
path \WINDOWS\system32\winload.efi
description Windows 10
locale it-IT
inherit {bootloadersettings}
recoverysequence {5d5a201b-d643-11e4-a71c-9001aae18364}
recoveryenabled Yes
isolatedcontext Yes
allowedinmemorysettings 0x15000075
osdevice partition=C:
systemroot \WINDOWS
resumeobject {5d5a2019-d643-11e4-a71c-9001aae18364}
nx OptIn
bootmenupolicy Legacy

Restart your PC and see if you are able to make appear windows advanced boot options (SAFE MODE included!) with the good old F8 key.
If yes, read and try the guide about Driver Verifier - BSOD related - Windows 10, 8.1, 8, 7 & Vista (click).
You'll need to go to safe mode to reset verifier settings, if you'll get a very fast BSOD after you logged into windows.
Take precautions before enabling verifier: create a restore point and create a system image (better safe than sorry).

 

[dwhitephp]

Thanks for the reply. For now, I will work with Malwarebytes. I have the purchased version, so I hope they will be helpful. Does anyone have a recommendation for another malware protection suite that does not cause BSOD?

Thanks,

Dave

 

[xilolee]

You can try the EmsiSoft Emergency Kit Free (click), superAntiSpyware Free Edition (click), Panda Cloud Cleaner Portable Free (click), SpywareBlaster 5.2 Free (click), Crystal Security Portable Free (click), and so forth - MajorGeeks list (click).