Hamachi + Avast Network Shield + Vista x64 Ultimate = BSOD

[system]

Hi, first post. I’ve got a problem, Hamachi + Avast Network Shield + Vista x64 Ultimate = BSOD for me. I get a blue screen ***STOP: 0x0000007F, ***NETIO.SYS - Address …

I’ve posted the following at https://forums.hamachi.cc/viewtopic.php?t=20323. Looking for ideas, thanks for any help. Monte

[i]Had a chat session with a Dell tech (Dell T7400) and we found that I could remove all network adapters from the Device Manager in Safe Mode, reboot Normal, the NIC gets reinstalled and it’s all good. If I reinstall Hamachi I get a bsod after the next reboot. This time I only uninstalled the Hamachi network adapter in Safe Mode, booted Normal and no problems.

Then I turned the Network Shield in Avast off (after doing some google searching) and tried it again, no problems. I have to turn the Avast Network Shield off in order to run Hamachi.

Let me know if there’s something I can do besides turn Avast off. It’s off, but I’d like to turn it back on. I read of problems with Kaspersky, but I didn’t get a good idea on a fix for that.

[/i]

[igor0]

During the bluescreen, the corresponding minidump file should be created in Windows\Minidump folder.
Please upload it to ftp://ftp.avast.com/incoming

[system]

@igor post:2

During the bluescreen, the corresponding minidump file should be created in Windows\Minidump folder.
Please upload it to ftp://ftp.avast.com/incoming

Don’t have an ftp program installed (that I know of). Have to get one and send the minidump tonight.

thanks,
Monte

[nmb]

open your windows explorer(say, my documents). type the address given. and drag the file in to the folder incoming.

nmb

[system]

@igor post:2

During the bluescreen, the corresponding minidump file should be created in Windows\Minidump folder.
Please upload it to ftp://ftp.avast.com/incoming

Got it. I zipped up 5 minidumps. I’d already had them zipped from when I sent them to another forum for help. Thanks for looking. Let me know if you need anything else. I could probably recreate the problem if these don’t show anything.

Monte

[system]

@nmb post:4

open your windows explorer(say, my documents). type the address given. and drag the file in to the folder incoming.

nmb

Thanks. I got there through IE.

Monte

[system]

gotta go to work, bye for now.

[lukor]

Hi, I looked through the dumps, nothing there that could lead us to any problem (in avast or elsewhere). I’ll ask the guys in Q/A if they are able to simulate the problem.

Lukas.

[pk]

montejw360: hello, it’s probably caused by stack overflow and I’d like to see what drivers are currently on the stack. Since these information are not stored in minidump, I’d like to ask you if you can generate kernel dump instead of minidump and upload this file on our ftp.

How to generate kernel memory dumps: http://digital.ni.com/public.nsf/websearch/581127525C80606A862570BE0003111D?OpenDocument.

The default location for the dump file is %SystemRoot%\MEMORY.DMP. %SystemRoot% is the Windows installation directory, usually C:\WINDOWS. This would make the location of the dump file be C:\WINDOWS\MEMORY.DMP.

Thanks!

[system]

@pk post:9

montejw360: hello, it’s probably caused by stack overflow and I’d like to see what drivers are currently on the stack. Since these information are not stored in minidump, I’d like to ask you if you can generate kernel dump instead of minidump and upload this file on our ftp.

How to generate kernel memory dumps: http://digital.ni.com/public.nsf/websearch/581127525C80606A862570BE0003111D?OpenDocument.

The default location for the dump file is %SystemRoot%\MEMORY.DMP. %SystemRoot% is the Windows installation directory, usually C:\WINDOWS. This would make the location of the dump file be C:\WINDOWS\MEMORY.DMP.

Thanks!

I found a c:\windows\memory.dmp dated the 25th. it’s 430 mb and for the life of me I can’t zip it. i’ve tried changing the name, extension, made a copy in a different folder. i’ll upload that if that’s what you want. but I can’t seem to add it to a zip file.

edit: i looked at the link for creating a kernel memory dump and my computer was already configured to create a kernel memory dump.

[pk]

no problem if you upload uncompressed memory.dmp file - or you can use other file archiver (e.g. http://www.7-zip.org). Thanks.

[system]

@pk post:11

no problem if you upload uncompressed memory.dmp file - or you can use other file archiver (e.g. http://www.7-zip.org). Thanks.

thanks for the link. copying montejw360memory.zip, check it in a while. should be about a 90 mb compressed file when it’s done.

edit: it’s done.

Monte

[pk]

Thanks for your kernel dump. The system double faulted, because lot of kernel stack space was consumed. Windows network drivers are used in conjunction with multiple third party network drivers and some of them loop packets back into tcpip.sys (windows application) in a sending/receiving calling context and this is quite unexpectedly expensive operation on Vista.

So, currently you use VBoxNetFlt.sys, hamachi.sys and nm3.sys drivers.
I’d suggest you to turn nm3.sys (Windows Network Monitor) off from all network adapters and see if it helps. If not, then it’s either VBoxNetFlt.sys or hamachi.sys fault.

[system]

@pk post:13

Thanks for your kernel dump. The system double faulted, because lot of kernel stack space was consumed. Windows network drivers are used in conjunction with multiple third party network drivers and some of them loop packets back into tcpip.sys (windows application) in a sending/receiving calling context and this is quite unexpectedly expensive operation on Vista.

So, currently you use VBoxNetFlt.sys, hamachi.sys and nm3.sys drivers.
I’d suggest you to turn nm3.sys (Windows Network Monitor) off from all network adapters and see if it helps. If not, then it’s either VBoxNetFlt.sys or hamachi.sys fault.

Thanks. It’s all over my head. Where do I look for “windows network monitor”? I’m looking around, can’t find it.

edit: Found it. I’ll turn it off, turn Avast Network Shield back on and see what happens. thanks.

[pk]

1. Go to Start and right click on Network and then click Properties.
2. Network and Sharing Center window will appear, after that click Manage network connections (pic: http://www.home-network-help.com/images/manage-network-connections.jpg)
3. Network Connections window will appears. Here you can right click on the network card that you wish to disable Network Monitor and click Properties. (pic: http://www.home-network-help.com/images/network-card-properties.jpg)
4. In the Local Area Connection Properties window, untick “Network Monitor” (not sure how it’s called on Vista) and click OK.

Just disable it from all adapters listed in Network Connections window.

[system]

@pk post:15

1. Go to Start and right click on Network and then click Properties.
2. Network and Sharing Center window will appear, after that click Manage network connections (pic: http://www.home-network-help.com/images/manage-network-connections.jpg)
3. Network Connections window will appears. Here you can right click on the network card that you wish to disable Network Monitor and click Properties. (pic: http://www.home-network-help.com/images/network-card-properties.jpg)
4. In the Local Area Connection Properties window, untick “Network Monitor” (not sure how it’s called on Vista) and click OK.

Just disable it from all adapters listed in Network Connections window.

I did that and have rebooted a few times, seems to be working. I’ll have to look at the Network Monitor and see if it’s something I want/need. For now it’s off, Avast Network Shield and Hamachi are on and no bsod.

Thanks,
Monte