Windows 8 - System service exception (ndys.sys)

Mathebic · Sep 2, 2013

Hello there, the past two weeks i've constantly getting BSOD on my Windows 8 machine. I've tried several times to fix this myself, but still unable to find out what is wrong, so this is my last solution.
I've put the files in the uploaded files.

usasma · Sep 3, 2013

Please visit Windows Update and get ALL available updates (it may take several trips to get them all).

C: drive only has about 7% free space. Windows likes 15% free space in order to perform stuff "behind the scenes" without adversely affecting the system's performance. Please free up 15% on ALL hard drives (you can get away with 10% on larger drives and won't notice a large performance penalty)

This device is disabled. Is this deliberate? If so, why?

VirtualBox Host-Only Ethernet Adapter ROOT\NET\0001 This device is disabled.

Please either:
- uninstall VirtualBox
- or enable the ethernet adapter and update it's drivers (feel free to disable it again once it's been updated).

Lot's more Live Kernel Events than BSOD events - this "may" be suggestive of a hardware problem.
Please do the following:
- open Event Viewer (eventvwr.msc)
- expand the Custom Views category (left click on the > next to the words "Custom Views")
- right click on Administrative Events
- select "Save all Events in Custom View as..."
- save the file as Admin.evtx
- zip up the file (right click on it, select "Send to", select "Compressed (zipped) folder")
- upload it with your next post (if it's too big, then upload it to a free file-hosting service and post a link here).

Daemon Tools (and Alcohol % software) are known to cause BSOD's on some Windows systems (mostly due to the sptd.sys driver, although I have seen dtsoftbus01.sys blamed on several occasions).

Please un-install the program, then use the following free tool to ensure that the troublesome sptd.sys driver is removed from your system (pick the 32 or 64 bit system depending on your system's configuration): ~~[DEL] DuplexSecure - FAQ [/DEL]~~ Link broken as of 21 Jul 2012
New link (15 Aug 2012): DuplexSecure - Downloads (pick the appropriate version for your system and select "Un-install" when you run it).
Alternate link: Disc-Tools.com
Manual procedure here: Registry and SPTD problems | DAEMON Pro Help

Please remove Gigabyte EasyTune6 (ET6) as it's driver (GVTDrv64.sys) is known to cause BSOD's on some Windows systems - and yours dates from 2006 (well before Win8 was a gleam in Steve Ballmer's eye!)

If installed, please remove Gigabyte EasySaver as it's driver (gdrv.sys) is known to cause BSOD's on some Windows systems - and yours dates from 2009

Please remove Razer GameBooster as it is known to cause BSOD's on some Windows systems. Feel free to reinstall the latest, Win8 compatible version once the system is stabilized.

Please update these older drivers. Links are included to assist in looking up the source of the drivers. If unable to find an update, please remove (un-install) the program responsible for that driver. DO NOT manually delete/rename the driver as it may make the system unbootable! :

hamachi.sys Thu Feb 19 05:36:41 2009 (499D3639)
LogMeIn Hamachi Virtual network interface driver
http://www.carrona.org/drivers/driver.php?id=hamachi.sys

uxpatch.sys Mon Jul 13 01:09:18 2009 (4A5AC17E)
Some sort of Theme package from the Within Network
http://www.carrona.org/drivers/driver.php?id=uxpatch.sys

HECIx64.sys Tue Sep 21 12:59:04 2010 (4C98E458)
Intel Management Engine Interface
http://www.carrona.org/drivers/driver.php?id=HECIx64.sys

IntcDAud.sys Fri Oct 15 04:28:17 2010 (4CB810A1)
Intel Graphics Media Accelerator HD Driver
http://www.carrona.org/drivers/driver.php?id=IntcDAud.sys

AppleCharger.sys Mon Jan 10 04:57:29 2011 (4D2AD809)
GIGABYTE On/Off Charge driver. See here for details - GIGABYTE ON/OFF Charge [br] May cause BSOD on Win7/8 systems - uninstall to test (haven't seen recently (15Jan2013))
http://www.carrona.org/drivers/driver.php?id=AppleCharger.sys

speedfan.sys Fri Mar 18 12:08:46 2011 (4D83838E)
SpeedFan
http://www.carrona.org/drivers/driver.php?id=speedfan.sys

Rt630x64.sys Wed Oct 19 08:12:55 2011 (4E9EBEC7)
Realtek PCI/PCIe Adapters
http://www.carrona.org/drivers/driver.php?id=Rt630x64.sys

Analysis:
The following is for informational purposes only.

Code:

[FONT=lucida console]**************************Sat Aug 31 08:14:31.228 2013 (UTC - 4:00)**************************
Loading Dump File [C:\Users\John\SysnativeBSODApps\083113-24781-01.dmp]
Windows 8 Kernel Version 9200 MP (8 procs) Free x64
Built by: [B]9200[/B].16628.amd64fre.win8_gdr.130531-1504
System Uptime:[B]0 days 22:58:22.479[/B]
*** ERROR: Module load completed but symbols could not be loaded for pcw.sys
Probably caused by :[B]pcw.sys ( pcw+61c3 )[/B]
BugCheck [B]3B, {c0000005, fffff88001576e0f, fffff8801e7338b0, 0}[/B]
BugCheck Info: [URL="http://www.carrona.org/bsodindx.html#0x0000003B"]SYSTEM_SERVICE_EXCEPTION (3b)[/URL]
Arguments: 
Arg1: 00000000c0000005, Exception code that caused the bugcheck
Arg2: fffff88001576e0f, Address of the instruction which caused the bugcheck
Arg3: fffff8801e7338b0, Address of the context record for the exception that caused the bugcheck
Arg4: 0000000000000000, zero.
BUGCHECK_STR:  0x3B
DEFAULT_BUCKET_ID:  WIN8_DRIVER_FAULT
PROCESS_NAME:  bitcoin-qt.exe
FAILURE_BUCKET_ID: [B]0x3B_pcw+61c3[/B]
CPUID:        "Intel(R) Core(TM) i7-2600K CPU @ 3.40GHz"
MaxSpeed:     3400
CurrentSpeed: [B]3392[/B]
  BIOS Version                  FD
  BIOS Release Date             03/20/2012
  Manufacturer                  Gigabyte Technology Co., Ltd.
  Product Name                  Z68AP-D3
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
**************************Thu Aug 29 09:29:47.195 2013 (UTC - 4:00)**************************
Loading Dump File [C:\Users\John\SysnativeBSODApps\082913-36250-01.dmp]
Windows 8 Kernel Version 9200 MP (8 procs) Free x64
Built by: [B]9200[/B].16628.amd64fre.win8_gdr.130531-1504
System Uptime:[B]2 days 23:25:08.291[/B]
*** ERROR: Module load completed but symbols could not be loaded for pcw.sys
Probably caused by :[B]pcw.sys ( pcw+61c3 )[/B]
BugCheck [B]3B, {c0000005, fffff88001943e0f, fffff8801d9be8b0, 0}[/B]
BugCheck Info: [URL="http://www.carrona.org/bsodindx.html#0x0000003B"]SYSTEM_SERVICE_EXCEPTION (3b)[/URL]
Arguments: 
Arg1: 00000000c0000005, Exception code that caused the bugcheck
Arg2: fffff88001943e0f, Address of the instruction which caused the bugcheck
Arg3: fffff8801d9be8b0, Address of the context record for the exception that caused the bugcheck
Arg4: 0000000000000000, zero.
BUGCHECK_STR:  0x3B
DEFAULT_BUCKET_ID:  WIN8_DRIVER_FAULT
PROCESS_NAME:  bitcoin-qt.exe
FAILURE_BUCKET_ID: [B]0x3B_pcw+61c3[/B]
CPUID:        "Intel(R) Core(TM) i7-2600K CPU @ 3.40GHz"
MaxSpeed:     3400
CurrentSpeed: [B]3392[/B]
  BIOS Version                  FD
  BIOS Release Date             03/20/2012
  Manufacturer                  Gigabyte Technology Co., Ltd.
  Product Name                  Z68AP-D3
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
**************************Mon Aug 26 09:36:01.767 2013 (UTC - 4:00)**************************
Loading Dump File [C:\Users\John\SysnativeBSODApps\082613-24234-01.dmp]
Windows 8 Kernel Version 9200 MP (8 procs) Free x64
Built by: [B]9200[/B].16628.amd64fre.win8_gdr.130531-1504
System Uptime:[B]1 days 3:14:53.511[/B]
*** ERROR: Module load completed but symbols could not be loaded for pcw.sys
Probably caused by :[B]pcw.sys ( pcw+61c3 )[/B]
BugCheck [B]3B, {c0000005, fffff8800154ce0f, fffff88002f8c8b0, 0}[/B]
BugCheck Info: [URL="http://www.carrona.org/bsodindx.html#0x0000003B"]SYSTEM_SERVICE_EXCEPTION (3b)[/URL]
Arguments: 
Arg1: 00000000c0000005, Exception code that caused the bugcheck
Arg2: fffff8800154ce0f, Address of the instruction which caused the bugcheck
Arg3: fffff88002f8c8b0, Address of the context record for the exception that caused the bugcheck
Arg4: 0000000000000000, zero.
BUGCHECK_STR:  0x3B
DEFAULT_BUCKET_ID:  WIN8_DRIVER_FAULT
PROCESS_NAME:  bitcoin-qt.exe
FAILURE_BUCKET_ID: [B]0x3B_pcw+61c3[/B]
CPUID:        "Intel(R) Core(TM) i7-2600K CPU @ 3.40GHz"
MaxSpeed:     3400
CurrentSpeed: [B]3392[/B]
  BIOS Version                  FD
  BIOS Release Date             03/20/2012
  Manufacturer                  Gigabyte Technology Co., Ltd.
  Product Name                  Z68AP-D3
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
**************************Sun Aug 18 07:30:16.054 2013 (UTC - 4:00)**************************
Loading Dump File [C:\Users\John\SysnativeBSODApps\081813-27265-01.dmp]
Windows 8 Kernel Version 9200 MP (8 procs) Free x64
Built by: [B]9200[/B].16628.amd64fre.win8_gdr.130531-1504
System Uptime:[B]1 days 21:12:50.325[/B]
*** ERROR: Module load completed but symbols could not be loaded for pcw.sys
Probably caused by :[B]pcw.sys ( pcw+61c3 )[/B]
BugCheck [B]3B, {c0000005, fffff8800190ee0f, fffff8801f3e18b0, 0}[/B]
BugCheck Info: [URL="http://www.carrona.org/bsodindx.html#0x0000003B"]SYSTEM_SERVICE_EXCEPTION (3b)[/URL]
Arguments: 
Arg1: 00000000c0000005, Exception code that caused the bugcheck
Arg2: fffff8800190ee0f, Address of the instruction which caused the bugcheck
Arg3: fffff8801f3e18b0, Address of the context record for the exception that caused the bugcheck
Arg4: 0000000000000000, zero.
BUGCHECK_STR:  0x3B
DEFAULT_BUCKET_ID:  WIN8_DRIVER_FAULT
PROCESS_NAME:  bitcoin-qt.exe
FAILURE_BUCKET_ID: [B]0x3B_pcw+61c3[/B]
CPUID:        "Intel(R) Core(TM) i7-2600K CPU @ 3.40GHz"
MaxSpeed:     3400
CurrentSpeed: [B]3392[/B]
  BIOS Version                  FD
  BIOS Release Date             03/20/2012
  Manufacturer                  Gigabyte Technology Co., Ltd.
  Product Name                  Z68AP-D3
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
**************************Wed Aug 14 11:57:26.295 2013 (UTC - 4:00)**************************
Loading Dump File [C:\Users\John\SysnativeBSODApps\081413-29093-01.dmp]
Windows 8 Kernel Version 9200 MP (8 procs) Free x64
Built by: [B]9200[/B].16628.amd64fre.win8_gdr.130531-1504
System Uptime:[B]1 days 2:11:00.301[/B]
*** ERROR: Module load completed but symbols could not be loaded for pcw.sys
Probably caused by :[B]pcw.sys ( pcw+61c3 )[/B]
BugCheck [B]3B, {c0000005, fffff880018f4e0f, fffff8801e17f8b0, 0}[/B]
BugCheck Info: [URL="http://www.carrona.org/bsodindx.html#0x0000003B"]SYSTEM_SERVICE_EXCEPTION (3b)[/URL]
Arguments: 
Arg1: 00000000c0000005, Exception code that caused the bugcheck
Arg2: fffff880018f4e0f, Address of the instruction which caused the bugcheck
Arg3: fffff8801e17f8b0, Address of the context record for the exception that caused the bugcheck
Arg4: 0000000000000000, zero.
BUGCHECK_STR:  0x3B
DEFAULT_BUCKET_ID:  WIN8_DRIVER_FAULT
PROCESS_NAME:  bitcoin-qt.exe
FAILURE_BUCKET_ID: [B]0x3B_pcw+61c3[/B]
CPUID:        "Intel(R) Core(TM) i7-2600K CPU @ 3.40GHz"
MaxSpeed:     3400
CurrentSpeed: [B]3392[/B]
  BIOS Version                  FD
  BIOS Release Date             03/20/2012
  Manufacturer                  Gigabyte Technology Co., Ltd.
  Product Name                  Z68AP-D3
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
**************************Sat Jul 27 06:06:32.650 2013 (UTC - 4:00)**************************
Loading Dump File [C:\Users\John\SysnativeBSODApps\072713-28484-01.dmp]
Windows 8 Kernel Version 9200 MP (8 procs) Free x64
Built by: [B]9200[/B].16628.amd64fre.win8_gdr.130531-1504
System Uptime:[B]0 days 1:16:19.024[/B]
Probably caused by :[B]Unknown_Image ( ANALYSIS_INCONCLUSIVE )[/B]
BugCheck [B]A, {10, 2, 1, fffff80203ae8fb5}[/B]
BugCheck Info: [URL="http://www.carrona.org/bsodindx.html#0x0000000A"]IRQL_NOT_LESS_OR_EQUAL (a)[/URL]
Arguments: 
Arg1: 0000000000000010, memory referenced
Arg2: 0000000000000002, IRQL
Arg3: 0000000000000001, bitfield :
    bit 0 : value 0 = read operation, 1 = write operation
    bit 3 : value 0 = not an execute operation, 1 = execute operation (only on chips which support this level of status)
Arg4: fffff80203ae8fb5, address which referenced memory
BUGCHECK_STR:  AV
DEFAULT_BUCKET_ID:  WIN8_DRIVER_FAULT
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
**************************Sat Jul 27 04:48:56.480 2013 (UTC - 4:00)**************************
Loading Dump File [C:\Users\John\SysnativeBSODApps\072713-37390-01.dmp]
Windows 8 Kernel Version 9200 MP (8 procs) Free x64
Built by: [B]9200[/B].16628.amd64fre.win8_gdr.130531-1504
System Uptime:[B]1 days 18:10:17.377[/B]
*** WARNING: Unable to verify timestamp for atikmpag.sys
*** ERROR: Module load completed but symbols could not be loaded for atikmpag.sys
Probably caused by :[B]atikmpag.sys ( atikmpag+acf0 )[/B]
BugCheck [B]116, {fffffa80146482a0, fffff88006890cf0, 0, d}[/B]
BugCheck Info: [URL="http://www.carrona.org/bsodindx.html#Example"]VIDEO_TDR_FAILURE (116)[/URL]
Arguments: 
Arg1: fffffa80146482a0, Optional pointer to internal TDR recovery context (TDR_RECOVERY_CONTEXT).
Arg2: fffff88006890cf0, The pointer into responsible device driver module (e.g. owner tag).
Arg3: 0000000000000000, Optional error code (NTSTATUS) of the last failed operation.
Arg4: 000000000000000d, Optional internal context dependent data.
BUGCHECK_STR:  0x116
DEFAULT_BUCKET_ID:  GRAPHICS_DRIVER_TDR_FAULT
PROCESS_NAME:  System
FAILURE_BUCKET_ID: [B]0x116_IMAGE_atikmpag.sys[/B]
CPUID:        "Intel(R) Core(TM) i7-2600K CPU @ 3.40GHz"
MaxSpeed:     3400
CurrentSpeed: [B]3392[/B]
  BIOS Version                  FD
  BIOS Release Date             03/20/2012
  Manufacturer                  Gigabyte Technology Co., Ltd.
  Product Name                  Z68AP-D3
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
[/FONT]

3rd Party Drivers:
The following is for information purposes only.
Any drivers in red should be updated or removed from your system. And should have been discussed in the body of my post.

Code:

[FONT=lucida console]**************************Sat Aug 31 08:14:31.228 2013 (UTC - 4:00)**************************
[COLOR=RED][B]GVTDrv64.sys                Tue Sep  5 03:10:02 2006 (44FD22CA)[/B][/COLOR]
[COLOR=RED][B]hamachi.sys                 Thu Feb 19 05:36:41 2009 (499D3639)[/B][/COLOR]
[COLOR=RED][B]gdrv.sys                    Thu Mar 12 23:22:29 2009 (49B9D175)[/B][/COLOR]
[COLOR=RED][B]uxpatch.sys                 Mon Jul 13 01:09:18 2009 (4A5AC17E)[/B][/COLOR]
[COLOR=RED][B]HECIx64.sys                 Tue Sep 21 12:59:04 2010 (4C98E458)[/B][/COLOR]
[COLOR=RED][B]IntcDAud.sys                Fri Oct 15 04:28:17 2010 (4CB810A1)[/B][/COLOR]
[COLOR=RED][B]AppleCharger.sys            Mon Jan 10 04:57:29 2011 (4D2AD809)[/B][/COLOR]
[COLOR=RED][B]speedfan.sys                Fri Mar 18 12:08:46 2011 (4D83838E)[/B][/COLOR]
[COLOR=RED][B]Rt630x64.sys                Wed Oct 19 08:12:55 2011 (4E9EBEC7)[/B][/COLOR]
[COLOR=RED][B]dtsoftbus01.sys             Fri Jan 13 08:45:46 2012 (4F10358A)[/B][/COLOR]
GEARAspiWDM.sys             Thu May  3 15:56:17 2012 (4FA2E2E1)
RTKVHD64.sys                Tue Jun 19 04:50:56 2012 (4FE03D70)
cmudaxp.sys                 Wed Aug 29 03:25:03 2012 (503DC3CF)
intelppm.sys                Mon Nov  5 22:55:02 2012 (50988A16)
igdkmd64.sys                Wed Dec 12 19:42:26 2012 (50C92472)
npf.sys                     Thu Feb 28 20:31:24 2013 (513004EC)
VBoxNetFlt.sys              Fri Apr 12 05:40:13 2013 (5167D67D)
VBoxUSBMon.sys              Fri Apr 12 05:40:14 2013 (5167D67E)
VBoxDrv.sys                 Fri Apr 12 05:41:29 2013 (5167D6C9)
aswRvrt.sys                 Thu May  9 04:47:02 2013 (518B6286)
aswFsBlk.SYS                Thu May  9 04:47:16 2013 (518B6294)
aswMonFlt.sys               Thu May  9 04:47:23 2013 (518B629B)
aswTdi.SYS                  Thu May  9 04:47:32 2013 (518B62A4)
aswrdr2.sys                 Thu May  9 04:47:41 2013 (518B62AD)
RzMaelstromVAD.sys          Fri May 17 11:27:53 2013 (51964C79)
aswVmm.sys                  Thu Jun 27 11:35:59 2013 (51CC5BDF)
aswSP.SYS                   Thu Jun 27 11:37:21 2013 (51CC5C31)
aswSnx.SYS                  Thu Jun 27 11:37:25 2013 (51CC5C35)
RzFilter.sys                Tue Jul  2 02:39:26 2013 (51D2759E)
RzDxgk.sys                  Tue Jul  2 02:39:29 2013 (51D275A1)
AtihdW86.sys                Fri Jul  5 14:10:40 2013 (51D70C20)
rzendpt.sys                 Tue Jul  9 23:02:44 2013 (51DCCED4)
rzudd.sys                   Tue Jul  9 23:02:46 2013 (51DCCED6)
atikmpag.sys                Tue Jul 23 19:10:26 2013 (51EF0D62)
atikmdag.sys                Tue Jul 23 20:03:16 2013 (51EF19C4)
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
**************************Wed Aug 14 11:57:26.295 2013 (UTC - 4:00)**************************
rzendpt.sys                 Thu Jun  6 23:29:51 2013 (51B153AF)
rzudd.sys                   Thu Jun  6 23:29:52 2013 (51B153B0)
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
**************************Sat Jul 27 04:48:56.480 2013 (UTC - 4:00)**************************
atikmpag.sys                Thu Mar 28 21:09:45 2013 (5154E9D9)
atikmdag.sys                Thu Mar 28 22:27:04 2013 (5154FBF8)
VBoxNetAdp.sys              Fri Apr 12 05:40:14 2013 (5167D67E)
AtihdW86.sys                Tue Apr 23 06:56:48 2013 (517668F0)
[/FONT]

Windows 8 - System service exception (ndys.sys)

Mathebic

New Member

My Computer

System One

usasma

Mr. Cranky Pants

My Computer

System One