Win 8 x64 blue screening (NDIS.sys at fault)

freelancer91 · Mar 10, 2013

Hello,

I have had a couple blue screens over the past few days. I went to the trouble of running windbg to find out the cause but all I can figure out is that it is caused by ndis.sys. I don't know how to specify the symbol path for Windows 8. I would like to learn how to find the source of a blue screen myself in the future.

Anyway, here are my specs:

Intel DX48BT2 motherboard
Intel Core 2 Extreme QX9770 processor (3.2GHz, Quad Core)
BFG Nvidia Geforce GTX 295 (single PCB)
8GB (in 4 modules) of OCZ Gold Series 1333MHz Dual Channel DDR3 RAM
Samsung HD103UJ 1TB 7200rpm HDD (main system drive)
OCZ Vertex 1 30GB SSD (has a few games on it)
Hitachi Deskstar 2TB 7200rpm (attached exterally via eSATA)
System is watercooled
Windows 8 RTM x64

I have attached the 2 system dumps. Again, in addition to help with this error, I would like to learn how to solve these myself in the future. Of particular interest is how to install debugging symbols.

usasma · Mar 11, 2013

Symbol path is item E at this link: WinDbg Analysis Report

Go here for a lot of stuff on how to do BSOD analysis: BSOD (my website)

Please provide this information so we can provide a complete analysis: https://www.eightforums.com/bsod-cr...e-screen-death-bsod-posting-instructions.html

Your BIOS dates from 2009. Please check at the manufacturer's website to see if there are any BIOS updates available for your system. Also check the readme file to see if they apply to the problems that you are having. Please be advised that flashing the BIOS is a very unforgiving process - and one mistake can physically damage your motherboard.

If you're overclocking, please stop the overclock while we're troubleshooting. Feel free to resume the overclock once the system has been stabilized.

We've seen a number of BSOD issues with SSD's. Here's the information that I've compiled so far:

There's not a whole bunch available to test SSD's. The "easiest" test is to remove the SSD, install a platter-based hard drive, install Windows and test for stability that way.

Here's some suggestions:
- Update the SSD's firmware to the latest available version (VERY IMPORTANT!!!)
- Update the motherboard controllers drivers to the latest available version from the controller manufacturer (NOT the mobo manufacturer unless you can't find any on the controller manufacturer's website). Be sure to update ALL controllers on the motherboard! I STRONGLY suggest not using controller drivers older than mid-2012 with SSD's.
- Slow the memory (RAM) down to the next slower speed (I've only seen one person who claimed that this worked for them).
- Use any manufacturer's utilities that you may have. If you don't have any, then try this free one (I haven't used it myself): Crystal Dew World
....NOTE: Recently (Nov 2011) we had BSOD issues with the Marvell 91xx controller and an SSD. You may have to switch controllers also.
- Replace the SSD with a platter based hard drive and see if that stops the BSOD's. If it does, then it's likely that there's a problem with the SSD OR an incompatibility with your system.
06 Dec 2011 - This post tends to confirm issues with certain SSD chipsets and certain controllers - [SOLVED] cant find the cause of BSOD F4 - Tech Support Forum
05 Jan 2013 - very interesting post about difficulties with the Marvell controllers even when not connected to the SSD drives: https://www.eightforums.com/bsod-cr...-pc-reboots-when-waking-sleep.html#post169956
27 Feb 2013 - I'm starting to see much better reliability with SSD's using current (mid-2012 and later) storage drivers. I have withdrawn my objections to using these devices in everyday systems.

The common 3rd party driver in each of the memory dumps is dne64x.sys - a component of your Cisco VPN (which dates from 2008):

dne64x.sys Mon Nov 10 20:01:24 2008 (4918D964)
Citrix Deterministic Network Enhancer Miniport or Cisco Systems VPN Client
http://www.carrona.org/drivers/driver.php?id=dne64x.sys

Please uninstall it to see if that stops the BSOD's. If you want to reinstall it, please download the latest, Win8 compatible version.

Please update these older drivers. Links are included to assist in looking up the source of the drivers. If unable to find an update, please remove (un-install) the program responsible for that driver. DO NOT manually delete/rename the driver as it may make the system unbootable! :

dne64x.sys Mon Nov 10 20:01:24 2008 (4918D964)
Citrix Deterministic Network Enhancer Miniport or Cisco Systems VPN Client
http://www.carrona.org/drivers/driver.php?id=dne64x.sys

CVPNDRVA.sys Tue Mar 23 15:16:37 2010 (4BA91395)
Cisco Systems VPN Client
http://www.carrona.org/drivers/driver.php?id=CVPNDRVA.sys

e1e6032e.sys Mon Sep 26 18:52:28 2011 (4E81022C)
Intel 82562V-2 10/100 Network Connection Ethernet driver
http://www.carrona.org/drivers/driver.php?id=e1e6032e.sys

Analysis:
The following is for informational purposes only.

Code:

[font=lucida console]**************************Sat Mar  9 15:38:53.295 2013 (UTC - 4:00)**************************
Loading Dump File [C:\Users\Owner\SysnativeBSODApps\031013-32557-01.dmp]
Windows 8 Kernel Version 9200 MP (4 procs) Free x64
Built by: [B]9200[/B].16496.amd64fre.win8_gdr.130108-1504
System Uptime:[B]0 days 15:15:42.288[/B]
*** WARNING: Unable to verify timestamp for dne64x.sys
*** ERROR: Module load completed but symbols could not be loaded for dne64x.sys
Probably caused by :[B]dne64x.sys ( dne64x+d91f )[/B]
BugCheck [B]D1, {10, 2, 0, fffff8800189f5bb}[/B]
BugCheck Info: [url=http://www.carrona.org/bsodindx.html#0x000000D1]DRIVER_IRQL_NOT_LESS_OR_EQUAL (d1)[/url]
Arguments: 
Arg1: 0000000000000010, memory referenced
Arg2: 0000000000000002, IRQL
Arg3: 0000000000000000, value 0 = read operation, 1 = write operation
Arg4: fffff8800189f5bb, address which referenced memory
BUGCHECK_STR:  AV
DEFAULT_BUCKET_ID:  WIN8_DRIVER_FAULT
PROCESS_NAME:  svchost.exe
FAILURE_BUCKET_ID: [B]AV_dne64x+d91f[/B]
CPUID:        "Intel(R) Core(TM)2 Extreme CPU X9770  @ 3.20GHz"
MaxSpeed:     3200
CurrentSpeed: [B]3200[/B]
  BIOS Version                  BTX3810J.86A.2006.2009.1023.1057
  BIOS Release Date             10/23/2009
  Manufacturer                                                  
  Product Name                                                  
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
**************************Thu Mar  7 17:49:33.961 2013 (UTC - 4:00)**************************
Loading Dump File [C:\Users\Owner\SysnativeBSODApps\030713-42245-01.dmp]
Windows 8 Kernel Version 9200 MP (4 procs) Free x64
Built by: [B]9200[/B].16496.amd64fre.win8_gdr.130108-1504
System Uptime:[B]9 days 9:08:16.614[/B]
*** WARNING: Unable to verify timestamp for dne64x.sys
*** ERROR: Module load completed but symbols could not be loaded for dne64x.sys
Probably caused by :[B]dne64x.sys ( dne64x+d91f )[/B]
BugCheck [B]D1, {10, 2, 0, fffff880016b35bb}[/B]
BugCheck Info: [url=http://www.carrona.org/bsodindx.html#0x000000D1]DRIVER_IRQL_NOT_LESS_OR_EQUAL (d1)[/url]
Arguments: 
Arg1: 0000000000000010, memory referenced
Arg2: 0000000000000002, IRQL
Arg3: 0000000000000000, value 0 = read operation, 1 = write operation
Arg4: fffff880016b35bb, address which referenced memory
BUGCHECK_STR:  AV
DEFAULT_BUCKET_ID:  WIN8_DRIVER_FAULT
PROCESS_NAME:  explorer.exe
FAILURE_BUCKET_ID: [B]AV_dne64x+d91f[/B]
CPUID:        "Intel(R) Core(TM)2 Extreme CPU X9770  @ 3.20GHz"
MaxSpeed:     3200
CurrentSpeed: [B]3200[/B]
  BIOS Version                  BTX3810J.86A.2006.2009.1023.1057
  BIOS Release Date             10/23/2009
  Manufacturer                                                  
  Product Name                                                  
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
[/font]

3rd Party Drivers:
The following is for information purposes only.
Any drivers in red should be updated or removed from your system. And should have been discussed in the body of my post.

Code:

[font=lucida console]**************************Sat Mar  9 15:38:53.295 2013 (UTC - 4:00)**************************
[COLOR=RED][B]dne64x.sys                  Mon Nov 10 20:01:24 2008 (4918D964)[/B][/COLOR]
[COLOR=RED][B]CVPNDRVA.sys                Tue Mar 23 15:16:37 2010 (4BA91395)[/B][/COLOR]
[COLOR=RED][B]e1e6032e.sys                Mon Sep 26 18:52:28 2011 (4E81022C)[/B][/COLOR]
netr28ux.sys                Mon Apr 16 22:30:56 2012 (4F8CD5E0)
nvlddmkm.sys                Tue Oct  2 14:21:13 2012 (506B3099)
lvrs64.sys                  Mon Oct 22 22:11:24 2012 (5085FCCC)
lvuvc64.sys                 Mon Oct 22 22:12:08 2012 (5085FCF8)
intelppm.sys                Mon Nov  5 22:55:02 2012 (50988A16)
HWiNFO64A.SYS               Wed Nov 14 06:15:59 2012 (50A37D6F)
VBoxNetFlt.sys              Wed Dec 19 08:47:16 2012 (50D1C564)
VBoxNetAdp.sys              Wed Dec 19 08:47:17 2012 (50D1C565)
VBoxUSBMon.sys              Wed Dec 19 08:47:17 2012 (50D1C565)
VBoxDrv.sys                 Wed Dec 19 08:48:25 2012 (50D1C5A9)
[/font]

Win 8 x64 blue screening (NDIS.sys at fault)

freelancer91

New Member

My Computer

System One

usasma

Mr. Cranky Pants

My Computer

System One