Almost Random BSOD. Found Problem. Need Solution. 0x000000d1

Hello

Attachment 200314

For the Past 3 weeks or so, my computer has been having almost random blue screen errors. I have tried to purposefully recreate the Blue Screen to find out what might be causing it. But I have had no luck doing so. They come at random times. Some days it doesn't happen. Other days it happens 10+ times.

To start off, I looked up on google the error which is DRIVER_IRQL_NOT_LESS_OR_EQUAL 0x000000d1 (0x0000000000000050, 0x0000000000000002, 0x0000000000000000, 0xfffff805833d7304). I tried many solutions including updating all my drivers, scaning for viruses, etc. None of them worked.

So I dug deeper and tried launching into windows auto repair mode. But all I got from that was that the issue couldn't be fixed. So I tried to move on to reverting back on a restore point. Both of the restore points I had before the date of the first BSOD were corrupted.

I did some more research and found out about BlueScreenView and the Event Viewer. The BlueScreenView told me about what drivers were failing. NETIO.SYS and ntoskrnl.exe. 0x000000d1 (0x0000000000000050, 0x0000000000000002, 0x0000000000000000, 0xfffff805833d7304).

Attachment 200321

The Event Viewer told me what was causing these to fail.
WAS service or Windows Process Activation Service. This program was throwing multiple errors as shown below.

1. The WAS service terminated with the following error:
The specified procedure could not be found.

2. The W3SVC service depends on the WAS service which failed to start because of the following error:
The specified procedure could not be found.

3. Remote Access Connection Manager failed to start because the Protocol engine [IKEv2] failed to initialize. The request is not supported.

4. Remote Access Connection Manager failed to start because the Protocol engine [rasgreeng.dll] failed to initialize. The specified module could not be found.

5. The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID
{D63B10C5-BB46-4990-A94F-E40B9D520160}
and APPID
{9CA88EE3-ACB7-47C8-AFC4-AB702511C276}
to the user Cooliothemo2-PC\Cooliothemo2 SID (S-1-5-21-1052756382-3906890127-696261874-1000) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.

Attachment 200319

I did more research into this and found that there might be some files missing that is causing the WAS program to not work correctly or open up at all. So I learned of the Process Monitor and was able to scan what processes were being used while trying to open up the WAS service. I recorded the data.

I then went into regedit and started adding the missing files manually which has taken a very long time. I'm still working on it as I type this. Though an hour ago I had another BSOD while adding in missing files. So I'm not 100% sure if this is the correct solution.

Attachment 200320

When it say's NAME NOT FOUND, It means missing the file. And When I add it and rescan the file says SUCCESS, so it might be working.

All in all, I feel like I have exhausted all my known possible solutions to this problem. If anyone has any other ideas or solutions I could try out, that would be great.

Thanks.

Hi,

its not a good idea to use multiple security tools (virus scanners, firewalls....) at the same time:

Code:

0x000000D1:    DRIVER_IRQL_NOT_LESS_OR_EQUAL (2018-08-22 01:25:39) [Windows 10] 
 
CAUSED BY:     NETIO.SYS  * Network I/O Subsystem (Windows System File)  
               avgStm.sys [2018-06-15]   
               vsdatant.sys [2017-03-12] * Zone Alarm TrueVector Device Driver * => http://www.zonealarm.com/security/en-us/support/zonealarm-service-support.htm 
               rt640x64.sys [2018-06-15] * Realtek NICDRV 8169 PCIe GBE Family Controller driver  * => http://www.realtek.com.tw/downloads/downloadsView.aspx?Langid=1&PNid=13&PFid=5&Level=5&Conn=4&DownTypeID=3&GetDown=false 

PROCESS:       System 
 
Usual causes:  Device driver

In the logs I found following tools:
- AVG (full packet)
- ZoneAlarm Firewall

Please uninstall using following uninstaller tools und see how it goes:

AVG	AVG | Download tools and utilities

Zone Alarm

Registered ZA user: Self-Service Support Download Zone Alarm Clean.exe PostProcessing: Only if there are ZA remnants after running the tool in normal mode - boot to Safe mode and re-run ZA clean.

Run IObit Uninstaller (YT) to uninstall this software completely without leftover files.

I used the Uninstaller you linked to do as you said. I got rid of all AVG and Zone Alarm data from my computer. So far, I have not gotten a BSOD within 3 hours of doing so, though it is usually at random and I am not sure how to recreate the BSOD to test it but I think your solution might have worked.

Thank you very much for your help!

Glad to hear that your problem is now fixed. Let us know if there are any other problems.