Blue screen (BugCheck D1) when Symantec Endpoint Protection (SEP) 12.1 is installed on a Windows 2008 64-bit Small Business Server


Article ID: 156621


Updated On:


Endpoint Protection


Random Blue screens occur on 2008 Small Business Servers referencing stop code 0xD1 (Bugcheck D1) while SEP 12.1 is installed.

Random Blue Screen with a Bugcheck D1

We have had a few different faulting modules and stack traces related to this issue.

Referenced driver faults include

- tcpip.sys
- tdx.sys
- symtdiv.sys



All submitted crash dumps were caused by the same direct reason:

tcpip!IppComputeChecksumForLoopbackPacket+0x6b is working with a structure pointer that is NULL.

This issue was caused by a fault within TCPIP.sys.



Microsoft released a hotfix on 10/9/2012 that resolves the issue with TCPIP.sys causing this blue screen.

KB2752589 is not publicly available and will not be provided in Windows Update. Affected customers need to call in to Microsoft and request the hotfix while referencing KB2752589.


Applies To

Windows 2008 Small Business Server SP2 64-bit