DRIVER_IRQL_NOT_LESS_OR_EQUAL (d1) "windows has recovered..unexpected shutdown"

bill2009 · Jun 25, 2011

System has been crashing under load for several months. First occurrences in Jan of this year, nothing obvious installed that day. Has happened 30-40 times since. Last 4 minidumps attached.

Vista 32 oem as installed on HP pavilion DV6000, about 4 yrs old
SP2 and automatic updates
2GB memory

the dumps seem to ref' tcpip.sys, the broadcom driver is current. The only AV on the system is MS security essentials.

Thanks in advance for any help or pointers.

richc46 · Jun 25, 2011

Welcome

Code:

 Microsoft (R) Windows Debugger Version 6.11.0001.404 AMD64
Copyright (c) Microsoft Corporation. All rights reserved.

Loading Dump File [C:\Users\richc46\AppData\Local\Temp\Temp1_june25bsod.zip\Windows_NT6_BSOD_jcgriff2\Mini061911-02.dmp]
Mini Kernel Dump File: Only registers and stack trace are available
Symbol search path is: SRV*c:\symbols*http://msdl.microsoft.com/download/symbols
Executable search path is: 
Windows Server 2008/Windows Vista Kernel Version 6002 (Service Pack 2) MP (2 procs) Free x86 compatible
Product: WinNt, suite: TerminalServer SingleUserTS Personal
Built by: 6002.18327.x86fre.vistasp2_gdr.101014-0432
Machine Name:
Kernel base = 0x82401000 PsLoadedModuleList = 0x82518c70
Debug session time: Sun Jun 19 17:07:31.881 2011 (GMT-4)
System Uptime: 0 days 0:17:03.456
Loading Kernel Symbols
...............................................................
................................................................
.....................................
Loading User Symbols
Loading unloaded module list
.....
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************
Use !analyze -v to get detailed debugging information.
BugCheck D1, {14, 2, 0, 87ea9e79}
Probably caused by : tcpip.sys ( tcpip!IppFillChecksumAtOffset+10 )
Followup: MachineOwner
---------
1: kd> !analyze -v
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************
DRIVER_IRQL_NOT_LESS_OR_EQUAL (d1)
An attempt was made to access a pageable (or completely invalid) address at an
interrupt request level (IRQL) that is too high.  This is usually
caused by drivers using improper addresses.
If kernel debugger is available get stack backtrace.
Arguments:
Arg1: 00000014, memory referenced
Arg2: 00000002, IRQL
Arg3: 00000000, value 0 = read operation, 1 = write operation
Arg4: 87ea9e79, address which referenced memory
Debugging Details:
------------------

READ_ADDRESS: GetPointerFromAddress: unable to read from 82538868
Unable to read MiSystemVaType memory at 82518420
 00000014 
CURRENT_IRQL:  2
FAULTING_IP: 
tcpip!IppFillChecksumAtOffset+10
87ea9e79 8b5014          mov     edx,dword ptr [eax+14h]
CUSTOMER_CRASH_COUNT:  2
DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT
BUGCHECK_STR:  0xD1
PROCESS_NAME:  svchost.exe
TRAP_FRAME:  af848570 -- (.trap 0xffffffffaf848570)
ErrCode = 00000000
eax=00000000 ebx=00000006 ecx=00000000 edx=00000000 esi=8779d838 edi=00000010
eip=87ea9e79 esp=af8485e4 ebp=af8485ec iopl=0         nv up ei pl nz ac po nc
cs=0008  ss=0010  ds=0023  es=0023  fs=0030  gs=0000             efl=00010212
tcpip!IppFillChecksumAtOffset+0x10:
87ea9e79 8b5014          mov     edx,dword ptr [eax+14h] ds:0023:00000014=????????
Resetting default scope
LAST_CONTROL_TRANSFER:  from 87ea9e79 to 8244efd9
STACK_TEXT:  
af848570 87ea9e79 badb0d00 00000000 00000000 nt!KiTrap0E+0x2e1
af8485ec 87eb1696 00000000 00000010 8779d838 tcpip!IppFillChecksumAtOffset+0x10
af84860c 87e7ed50 87ed7cd0 00000006 96fd9020 tcpip!IppComputeChecksumForLoopbackPacket+0x40
af848630 87e7f021 87ed7cd0 00000006 af848664 tcpip!IppProcessDeliverList+0x1e2
af848688 87e63657 87ed7cd0 00000006 87ed7cd0 tcpip!IppReceiveHeaderBatch+0x1eb
af8486d4 87e6341a 853b4f08 02ed7cd0 854b5020 tcpip!IppLoopbackTransmit+0x226
af8486f8 87e6df0f af848724 87ed7cd0 00000001 tcpip!IppLoopbackEnqueue+0x12e
af848738 87e6de11 87ed7cd0 854a18ec 854a1988 tcpip!IppDispatchSendPacketHelper+0xf2
af8487d8 87e6ef71 004a18ec 00000000 877b0178 tcpip!IppPacketizeDatagrams+0x92b
af848810 87e705be 00000000 00000001 87ed7cd0 tcpip!IppSendDatagramsCommon+0x632
af848830 87e74fc5 854a6ed8 af84884c 824a79e0 tcpip!IpNlpSendDatagrams+0x4b
af8488fc 87e4ff19 00000000 854b5020 00000002 tcpip!TcpTcbHeaderSend+0x50e
af848930 87e3cd3e 87724190 c0000241 00000000 tcpip!TcpShutdownTcb+0x1bf
af84894c 87e507a5 87724100 af8489ec 00000000 tcpip!TcpAbortTcb+0x11c
af848960 824b3e74 af8489c4 fbbdfbd9 87724190 tcpip!TcpTlConnectionDisconnectCalloutRoutine+0x1a
af8489a0 87e50698 87e5078b af8489c4 00000000 nt!KeExpandKernelStackAndCalloutEx+0xbd
af8489d0 97c61247 87724190 af8489ec af848a48 tcpip!TcpTlConnectionDisconnect+0x5e
af848a44 97c61808 00583820 38405f66 8636ed90 afd!AfdBeginAbort+0x241
af848adc 97c4e0b1 8636ed90 0001202b 87583820 afd!AfdPartialDisconnect+0x34a
af848c58 82647fdc 8636ed01 00000001 03edf25c afd!AfdFastIoDeviceControl+0xac
af848d00 826494a2 87849f08 00001214 00000000 nt!IopXxxControlFile+0x2cf
af848d34 8244bc7a 00001984 00001214 00000000 nt!NtDeviceIoControlFile+0x2a
af848d34 770b5ca4 00001984 00001214 00000000 nt!KiFastCallEntry+0x12a
WARNING: Frame IP not in any known module. Following frames may be wrong.
03edf2a8 00000000 00000000 00000000 00000000 0x770b5ca4

STACK_COMMAND:  kb
FOLLOWUP_IP: 
tcpip!IppFillChecksumAtOffset+10
87ea9e79 8b5014          mov     edx,dword ptr [eax+14h]
SYMBOL_STACK_INDEX:  1
SYMBOL_NAME:  tcpip!IppFillChecksumAtOffset+10
FOLLOWUP_NAME:  MachineOwner
MODULE_NAME: tcpip
IMAGE_NAME:  tcpip.sys
DEBUG_FLR_IMAGE_TIMESTAMP:  4c18d974
FAILURE_BUCKET_ID:  0xD1_tcpip!IppFillChecksumAtOffset+10
BUCKET_ID:  0xD1_tcpip!IppFillChecksumAtOffset+10
Followup: MachineOwner
---------
1: kd> lmtsmn
start    end        module name
8bea1000 8beae080   1394BUS  1394BUS.SYS  Sat Jan 19 00:53:27 2008 (47919057)
82a00000 82a46000   acpi     acpi.sys     Sat Apr 11 00:19:03 2009 (49E01A37)
97c3a000 97c82000   afd      afd.sys      Thu Apr 21 09:58:25 2011 (4DB03801)
87f15000 87f25000   amdk8    amdk8.sys    Sat Jan 19 00:27:20 2008 (47918A38)
82b18000 82b20000   atapi    atapi.sys    Sat Apr 11 00:39:09 2009 (49E01EED)
82b20000 82b3e000   ataport  ataport.SYS  Sat Apr 11 00:39:10 2009 (49E01EEE)
82a90000 82a9a000   BATTC    BATTC.SYS    Sat Jan 19 00:32:45 2008 (47918B7D)
8c40e000 8c556000   bcmwl6   bcmwl6.sys   Wed Oct 22 20:41:24 2008 (48FFC834)
92ba4000 92bab000   Beep     Beep.SYS     Sat Jan 19 00:49:10 2008 (47918F56)
8061f000 80627000   BOOTVID  BOOTVID.dll  Sat Jan 19 02:27:15 2008 (4791A653)
a5143000 a515c000   bowser   bowser.sys   Tue Feb 22 08:23:54 2011 (4D63B8EA)
a08e0000 a08ee000   cdd      cdd.dll      unavailable (00000000)
a59b3000 a59c9000   cdfs     cdfs.sys     Sat Jan 19 00:28:02 2008 (47918A62)
87f9f000 87fb7000   cdrom    cdrom.sys    Sat Apr 11 00:39:17 2009 (49E01EF5)
8bf82000 8bfb5000   CHDRT32  CHDRT32.sys  Tue Mar 04 13:31:57 2008 (47CD959D)
80668000 80748000   CI       CI.dll       Sat Apr 11 02:25:22 2009 (49E037D2)
8819a000 881bb000   CLASSPNP CLASSPNP.SYS Sat Apr 11 00:39:05 2009 (49E01EE9)
80627000 80668000   CLFS     CLFS.SYS     Sat Apr 11 00:13:51 2009 (49E018FF)
881f8000 881fb780   CmBatt   CmBatt.sys   Sat Jan 19 00:32:47 2008 (47918B7F)
82a8d000 82a8f900   compbatt compbatt.sys Sat Jan 19 00:32:47 2008 (47918B7F)
881fc000 881fe500   cpqbttn  cpqbttn.sys  Wed Jun 28 11:54:39 2006 (44A2A63F)
97d18000 97d25000   crashdmp crashdmp.sys Sat Apr 11 00:39:12 2009 (49E01EF0)
881bb000 881c4000   crcdisk  crcdisk.sys  Thu Nov 02 04:52:27 2006 (4549B1CB)
97d01000 97d18000   dfsc     dfsc.sys     Thu Apr 14 10:59:03 2011 (4DA70BB7)
88189000 8819a000   disk     disk.sys     Sat Apr 11 00:39:14 2009 (49E01EF2)
87fbd000 87fe2000   drmk     drmk.sys     Sat Jan 19 01:53:02 2008 (47919E4E)
97d30000 97d38000   dump_atapi dump_atapi.sys Sat Apr 11 00:39:09 2009 (49E01EED)
97d25000 97d30000   dump_dumpata dump_dumpata.sys Sat Apr 11 00:39:09 2009 (49E01EED)
97d38000 97d42000   Dxapi    Dxapi.sys    Sat Jan 19 00:36:12 2008 (47918C4C)
8cd3c000 8cddc000   dxgkrnl  dxgkrnl.sys  Thu Jan 20 08:50:57 2011 (4D383DC1)
97ca6000 97ca8000   eabfiltr eabfiltr.sys Thu Nov 30 11:24:57 2006 (456F05D9)
88162000 88189000   ecache   ecache.sys   Sat Apr 11 00:40:12 2009 (49E01F2C)
82bcb000 82bdb000   fileinfo fileinfo.sys Sat Jan 19 00:34:27 2008 (47918BE3)
82b99000 82bcb000   fltmgr   fltmgr.sys   Sat Apr 11 00:13:59 2009 (49E01907)
92b94000 92b9d000   Fs_Rec   Fs_Rec.SYS   Sat Jan 19 00:27:57 2008 (47918A5D)
8c1f4000 8c1ffa80   ftdibus  ftdibus.sys  Wed Jun 27 09:05:49 2007 (468260AD)
87de5000 87dfb000   ftser2k  ftser2k.sys  Wed Jun 27 09:04:11 2007 (4682604B)
87efa000 87f15000   fwpkclnt fwpkclnt.sys Sat Apr 11 00:45:42 2009 (49E02076)
87fb7000 87fbc280   GEARAspiWDM GEARAspiWDM.sys Mon May 18 08:16:53 2009 (4A1151B5)
827bb000 827ee000   hal      halmacpi.dll Sat Apr 11 00:13:13 2009 (49E018D9)
8be04000 8be91000   HDAudBus HDAudBus.sys Sat Apr 11 00:42:41 2009 (49E01FC1)
87f25000 87f35000   HIDCLASS HIDCLASS.SYS Sat Apr 11 00:42:47 2009 (49E01FC7)
87f35000 87f3b380   HIDPARSE HIDPARSE.SYS Sat Jan 19 00:53:16 2008 (4791904C)
8d54a000 8d5ff000   HSX_CNXT HSX_CNXT.sys Wed Jun 20 14:28:20 2007 (467971C4)
8d447000 8d54a000   HSX_DPV  HSX_DPV.sys  Wed Jun 20 14:29:51 2007 (4679721F)
8d409000 8d447000   HSXHWAZL HSXHWAZL.sys Wed Jun 20 14:28:32 2007 (467971D0)
a50b9000 a5126000   HTTP     HTTP.sys     Sat Feb 20 15:53:31 2010 (4B804BCB)
8cde8000 8cdfb000   i8042prt i8042prt.sys Sat Jan 19 00:49:17 2008 (47918F5D)
a598d000 a59b3000   ipnat    ipnat.sys    Sat Jan 19 00:56:28 2008 (4791910C)
8c556000 8c561000   kbdclass kbdclass.sys Sat Jan 19 00:49:14 2008 (47918F5A)
8c1e0000 8c1e9000   kbdhid   kbdhid.sys   Sat Apr 11 00:38:40 2009 (49E01ED0)
80607000 8060e000   kdcom    kdcom.dll    Sat Apr 11 02:25:29 2009 (49E037D9)
8c1b6000 8c1e0000   ks       ks.sys       Sat Apr 11 00:38:47 2009 (49E01ED7)
87c03000 87c74000   ksecdd   ksecdd.sys   Mon Jun 15 08:48:53 2009 (4A364335)
97d74000 97d84000   lltdio   lltdio.sys   Sat Jan 19 00:55:03 2008 (479190B7)
97d51000 97d6c000   luafv    luafv.sys    Sat Jan 19 00:30:35 2008 (47918AFB)
a5883000 a5886180   mdmxsdk  mdmxsdk.sys  Mon Jun 19 17:26:59 2006 (449716A3)
8bfe2000 8bfef000   modem    modem.sys    Sat Jan 19 00:57:16 2008 (4791913C)
97d42000 97d51000   monitor  monitor.sys  Sat Jan 19 00:52:19 2008 (47919013)
8c59c000 8c5a7000   mouclass mouclass.sys Sat Jan 19 00:49:14 2008 (47918F5A)
82b08000 82b18000   mountmgr mountmgr.sys Sat Jan 19 00:49:13 2008 (47918F59)
92b6d000 92b93680   MpFilter MpFilter.sys Tue Sep 14 17:23:59 2010 (4C8FE7EF)
b3038000 b303d900   MpKsle58bc58d MpKsle58bc58d.sys Tue Mar 30 22:06:14 2010 (4BB2AE16)
a5965000 a596e200   MpNWMon  MpNWMon.sys  Tue Sep 14 17:23:50 2010 (4C8FE7E6)
a515c000 a5171000   mpsdrv   mpsdrv.sys   Sat Jan 19 00:54:45 2008 (479190A5)
a5171000 a5192000   mrxdav   mrxdav.sys   Sat Apr 11 00:14:39 2009 (49E0192F)
a5192000 a51b1000   mrxsmb   mrxsmb.sys   Fri Apr 29 09:24:39 2011 (4DBABC17)
a51b1000 a51ea000   mrxsmb10 mrxsmb10.sys Fri Apr 29 09:24:48 2011 (4DBABC20)
97dcb000 97de3000   mrxsmb20 mrxsmb20.sys Fri Apr 29 09:24:41 2011 (4DBABC19)
92be8000 92bf3000   Msfs     Msfs.SYS     Sat Jan 19 00:28:08 2008 (47918A68)
82a4f000 82a57000   msisadrv msisadrv.sys Sat Jan 19 00:32:51 2008 (47918B83)
8c5b7000 8c5e6000   msiscsi  msiscsi.sys  Sat Apr 11 00:40:07 2009 (49E01F27)
87d7f000 87daa000   msrpc    msrpc.sys    Sat Apr 11 00:37:32 2009 (49E01E8C)
8c600000 8c60a000   mssmbios mssmbios.sys Sat Jan 19 00:32:55 2008 (47918B87)
88153000 88162000   mup      mup.sys      Sat Apr 11 00:14:12 2009 (49E01914)
87c74000 87d7f000   ndis     ndis.sys     Sat Apr 11 00:45:52 2009 (49E02080)
8c5f1000 8c5fc000   ndistapi ndistapi.sys Sat Jan 19 00:56:24 2008 (47919108)
97dae000 97db8000   ndisuio  ndisuio.sys  Sat Jan 19 00:55:40 2008 (479190DC)
8c14b000 8c16e000   ndiswan  ndiswan.sys  Sat Apr 11 00:46:31 2009 (49E020A7)
8bf71000 8bf82000   NDProxy  NDProxy.SYS  Sat Jan 19 00:56:28 2008 (4791910C)
97c98000 97ca6000   netbios  netbios.sys  Sat Jan 19 00:55:45 2008 (479190E1)
97c08000 97c3a000   netbt    netbt.sys    Sat Apr 11 00:45:35 2009 (49E0206F)
87daa000 87de5000   NETIO    NETIO.SYS    Mon Apr 05 11:15:04 2010 (4BB9FE78)
a59c9000 a59d4c00   NisDrvWFP NisDrvWFP.sys Tue Sep 14 17:24:12 2010 (4C8FE7FC)
82be4000 82bf2000   Npfs     Npfs.SYS     Sat Apr 11 00:14:01 2009 (49E01909)
97cf7000 97d01000   nsiproxy nsiproxy.sys Sat Jan 19 00:55:50 2008 (479190E6)
82401000 827bb000   nt       ntkrpamp.exe Thu Oct 14 10:16:54 2010 (4CB710D6)
88002000 88112000   Ntfs     Ntfs.sys     Sat Apr 11 00:14:34 2009 (49E0192A)
92b9d000 92ba4000   Null     Null.SYS     Sat Jan 19 00:49:12 2008 (47918F58)
8c60a000 8cd3b5c0   nvlddmkm nvlddmkm.sys Wed Jun 24 09:12:07 2009 (4A422627)
8c004000 8c103600   nvmfdx32 nvmfdx32.sys Fri Aug 01 14:37:49 2008 (489357FD)
87f45000 87f47f00   nvsmu    nvsmu.sys    Fri Feb 16 10:50:31 2007 (45D5D2C7)
82b3e000 82b58000   nvstor32 nvstor32.sys Thu Apr 19 16:10:03 2007 (4627CC9B)
97d84000 97dae000   nwifi    nwifi.sys    Sat Apr 11 00:43:27 2009 (49E01FEF)
8be91000 8bea0300   ohci1394 ohci1394.sys Sat Apr 11 00:43:04 2009 (49E01FD8)
97c82000 97c98000   pacer    pacer.sys    Sat Apr 11 00:45:51 2009 (49E0207F)
82a7e000 82a8d000   partmgr  partmgr.sys  Sat Apr 11 00:39:19 2009 (49E01EF7)
82a57000 82a7e000   pci      pci.sys      Sat Apr 11 00:19:16 2009 (49E01A44)
82af3000 82afa000   pciide   pciide.sys   Sat Apr 11 00:39:10 2009 (49E01EEE)
82afa000 82b08000   PCIIDEX  PCIIDEX.SYS  Sat Apr 11 00:39:09 2009 (49E01EED)
a5887000 a5965000   peauth   peauth.sys   Mon Oct 23 04:55:32 2006 (453C8384)
8bfb5000 8bfe2000   portcls  portcls.sys  Sat Apr 11 00:42:48 2009 (49E01FC8)
8060e000 8061f000   PSHED    PSHED.dll    Sat Apr 11 02:25:32 2009 (49E037DC)
82bdb000 82be3b80   PxHelp20 PxHelp20.sys Fri Feb 02 16:23:57 2007 (45C3ABED)
92bf3000 92bfc000   rasacd   rasacd.sys   Sat Jan 19 00:56:31 2008 (4791910F)
8c134000 8c14b000   rasl2tp  rasl2tp.sys  Sat Jan 19 00:56:33 2008 (47919111)
8c16e000 8c17d000   raspppoe raspppoe.sys Sat Apr 11 00:46:30 2009 (49E020A6)
8c17d000 8c191000   raspptp  raspptp.sys  Sat Jan 19 00:56:34 2008 (47919112)
8c191000 8c1a6000   rassstp  rassstp.sys  Sat Apr 11 00:46:40 2009 (49E020B0)
97cbb000 97cf7000   rdbss    rdbss.sys    Sat Apr 11 00:14:26 2009 (49E01922)
92bd8000 92be0000   RDPCDD   RDPCDD.sys   Sat Jan 19 01:01:08 2008 (47919224)
92be0000 92be8000   rdpencdd rdpencdd.sys Sat Jan 19 01:01:09 2008 (47919225)
b3003000 b3036000   RDPWD    RDPWD.SYS    Sat Apr 11 00:51:22 2009 (49E021CA)
8bec9000 8bed7000   rimmptsk rimmptsk.sys Wed Nov 15 03:16:23 2006 (455ACCD7)
8bed7000 8beeb000   rimsptsk rimsptsk.sys Tue Nov 14 22:42:45 2006 (455A8CB5)
8beeb000 8bf3c000   rixdptsk rixdptsk.sys Tue Nov 14 20:35:19 2006 (455A6ED7)
97db8000 97dcb000   rspndr   rspndr.sys   Sat Jan 19 00:55:03 2008 (479190B7)
8beaf000 8bec9000   sdbus    sdbus.sys    Sat Apr 11 00:19:14 2009 (49E01A42)
a596f000 a5979000   secdrv   secdrv.SYS   Wed Sep 13 09:18:32 2006 (45080528)
8bfef000 8bff9000   serenum  serenum.sys  Thu Nov 02 04:51:25 2006 (4549B18D)
807dd000 807f1000   smb      smb.sys      Sat Apr 11 00:45:22 2009 (49E02062)
92b66000 92b6ca80   sncduvc  sncduvc.SYS  Wed Feb 11 00:45:01 2009 (499265DD)
92806000 92b58280   snp2uvc  snp2uvc.sys  Tue Jun 09 01:16:40 2009 (4A2DF038)
8814b000 88153000   spldr    spldr.sys    Thu Jun 21 20:29:17 2007 (467B17DD)
a5009000 a50b9000   spsys    spsys.sys    Tue Mar 10 13:10:28 2009 (49B69F04)
a5834000 a5883000   srv      srv.sys      Fri Feb 18 09:03:28 2011 (4D5E7C30)
a580c000 a5834000   srv2     srv2.sys     Fri Apr 29 09:25:09 2011 (4DBABC35)
a5126000 a5143000   srvnet   srvnet.sys   Fri Apr 29 09:25:08 2011 (4DBABC34)
82b58000 82b99000   storport storport.sys Sat Apr 11 00:39:19 2009 (49E01EF7)
92b59000 92b65f00   STREAM   STREAM.SYS   Sat Apr 11 00:42:47 2009 (49E01FC7)
8cdfd000 8cdfe380   swenum   swenum.sys   Sat Jan 19 00:49:20 2008 (47918F60)
8c561000 8c59b680   SynTP    SynTP.sys    Thu May 27 17:40:25 2010 (4BFEE6C9)
87e0d000 87efa000   tcpip    tcpip.sys    Wed Jun 16 10:02:28 2010 (4C18D974)
a5979000 a5985000   tcpipreg tcpipreg.sys Wed Jun 16 10:01:59 2010 (4C18D957)
8c5e6000 8c5f1000   TDI      TDI.SYS      Sat Jan 19 00:57:10 2008 (47919136)
a59d5000 a59e0000   tdtcp    tdtcp.sys    Sat Jan 19 01:01:08 2008 (47919224)
807c7000 807dd000   tdx      tdx.sys      Sat Apr 11 00:45:56 2009 (49E02084)
8c1a6000 8c1b6000   termdd   termdd.sys   Sat Apr 11 00:51:14 2009 (49E021C2)
8c1e9000 8c1f3280   tosporte tosporte.sys Tue Oct 10 06:33:20 2006 (452B76F0)
8c5a7000 8c5b6d80   tosrfcom tosrfcom.sys Mon Aug 01 03:45:06 2005 (42EDD302)
a08c0000 a08c9000   TSDDD    TSDDD.dll    Sat Jan 19 01:01:09 2008 (47919225)
a59e0000 a59ec000   tssecsrv tssecsrv.sys Sat Jan 19 01:01:15 2008 (4791922B)
881ef000 881f8000   tunmp    tunmp.sys    Sat Jan 19 00:55:40 2008 (479190DC)
881e4000 881ef000   tunnel   tunnel.sys   Thu Feb 18 06:28:13 2010 (4B7D244D)
8c400000 8c40d000   umbus    umbus.sys    Sat Jan 19 00:53:40 2008 (47919064)
87fe2000 87ff9000   usbccgp  usbccgp.sys  Sat Jan 19 00:53:29 2008 (47919059)
8cdfb000 8cdfc700   USBD     USBD.SYS     Sat Jan 19 00:53:17 2008 (4791904D)
87f90000 87f9f000   usbehci  usbehci.sys  Sat Apr 11 00:42:52 2009 (49E01FCC)
8bf3c000 8bf71000   usbhub   usbhub.sys   Sat Apr 11 00:43:14 2009 (49E01FE2)
87f48000 87f52000   usbohci  usbohci.sys  Sat Apr 11 00:42:52 2009 (49E01FCC)
87f52000 87f90000   USBPORT  USBPORT.SYS  Sat Apr 11 00:42:55 2009 (49E01FCF)
92bab000 92bb7000   vga      vga.sys      Sat Jan 19 00:52:06 2008 (47919006)
92bb7000 92bd8000   VIDEOPRT VIDEOPRT.SYS Sat Jan 19 00:52:10 2008 (4791900A)
82a9a000 82aa9000   volmgr   volmgr.sys   Sat Jan 19 00:49:51 2008 (47918F7F)
82aa9000 82af3000   volmgrx  volmgrx.sys  Sat Apr 11 00:39:25 2009 (49E01EFD)
88112000 8814b000   volsnap  volsnap.sys  Sat Apr 11 00:39:37 2009 (49E01F09)
97ca8000 97cbb000   wanarp   wanarp.sys   Sat Jan 19 00:56:31 2008 (4791910F)
8cddc000 8cde8000   watchdog watchdog.sys Sat Apr 11 00:22:43 2009 (49E01B13)
80748000 807b9000   Wdf01000 Wdf01000.sys Mon Jul 13 19:11:36 2009 (4A5BBF28)
807b9000 807c7000   WDFLDR   WDFLDR.SYS   Mon Jul 13 19:11:25 2009 (4A5BBF1D)
a06a0000 a08a4000   win32k   win32k.sys   Thu Mar 03 08:24:58 2011 (4D6F96AA)
8c104000 8c133b60   windrvr6 windrvr6.sys Wed Sep 02 08:14:07 2009 (4A9E618F)
87f3c000 87f45000   wmiacpi  wmiacpi.sys  Sat Jan 19 00:32:47 2008 (47918B7F)
82a46000 82a4f000   WMILIB   WMILIB.SYS   Sat Jan 19 00:53:08 2008 (47919044)
a5985000 a598d000   xaudio   xaudio.sys   Tue Jul 10 17:27:55 2007 (4693F9DB)
Unloaded modules:
b3036000 b3038000   MSPQM.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
97d6c000 97d74000   drmkaud.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
881c4000 881d1000   crashdmp.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
881d1000 881dc000   dump_ataport
    Timestamp: unavailable (00000000)
    Checksum:  00000000
881dc000 881e4000   dump_atapi.s
    Timestamp: unavailable (00000000)
    Checksum:  00000000

Yes, indeed the cause is tcpip.sys
tcpip.sys is a Windows OS driver that handles networking/internet connection. Can be caused when NIC/wireless drivers are in need of an update and those occasions when either security software is in conflict or the NIC card is bad.
Since this is an MS driver, it is probably not the direct cause
Update all network drivers.
Uninstall your Anti Virus and use Microsoft Security Essetials as a test.
Bug Check 0xD1: DRIVER_IRQL_NOT_LESS_OR_EQUAL
Make sure that your Windows Update is set to download drivers.

bill2009 · Jun 25, 2011

Thanks for the quick response.
-I've checked that the wireless driver is up to date from the broadcom site and the anti-virus *is* ms-security essentials.

The machine is running a memory test at the moment but when it's done i'll check the ethernet nic driver and disable/uninstall ms security as well to see if it makes a difference.

richc46 · Jun 25, 2011

You may want to try with the previous version of the Driver, too. Most current is not always the best.

DRIVER_IRQL_NOT_LESS_OR_EQUAL (d1) "windows has recovered..unexpected shutdown"

bill2009

New Member

My Computer

System One

richc46

My Computer

System One

bill2009

New Member

My Computer

System One

richc46

My Computer

System One