Help with BSOD - Windows 8

disseous · Oct 20, 2013

Hi,

I was hoping someone could help me figure out why I am getting random BSOD. I did a fresh install of windows and the issues seems to have creeped its way back.

Thanks in advance.

usasma · Oct 22, 2013

Only 12 Windows Updates installed. Most systems have 100 - 150 or more. Please visit Windows Update and get ALL available updates (it may take several trips to get them all).

You have 3 hard drives. What is the make/model/wattage and age of your Power Supply?

SSD's were temperamental when they first came out, but their reliability has improved greatly over the last year or two. There are 2 things that MUST be checked on systems with BSOD's and SSD's:

1) That the SSD firmware is the latest available for the SSD. I usually can't see this info in the reports, so I rely on you to check it.
2) That the storage controller drivers on the motherboard are the most recent. They must date from late 2012 or later. This is ALL controllers, not just the one that the SSD is attached to. If involved these should be visible in the memory dump - but it doesn't hurt to check manually.

AMD OverDrive (AODDriver2.sys) is either a stand-alone application, or a component of the AMD VISION Engine Control Center. This driver is known to cause BSOD's on some Windows systems.

Please un-install all AMD/ATI video stuff from Control Panel...Programs...Un-install a program
Then, download (but DO NOT install) a fresh copy of the ATI drivers from http://ati.amd.com (in the upper right corner of the page)
Use this procedure to install the DRIVER ONLY: ATI video cards - DRIVER ONLY installation procedure - Sysnative Forums

If the device (AODDriver or AODDriver4.01) remains a problem, open Device Manager, select the "View" item.
Then select "Show hidden devices" and scroll down to the Non-Plug and Play Drivers section.
Locate the AODDriver entry, right click on it and select "Un-install". Reboot for changes to take affect.

Sometimes the driver remains and continues to cause BSOD's. If this is the case for you, post back and we'll give further instructions for safely removing it.

If overclocking, please stop. Remove the overclock and return the system to stock/standard values while we're troubleshooting. Once the system is stable again, feel free to resume the overclocking.

Please update these older drivers. Links are included to assist in looking up the source of the drivers. If unable to find an update, please remove (un-install) the program responsible for that driver. DO NOT manually delete/rename the driver as it may make the system unbootable! :

tap0901.sys Thu Nov 24 13:50:27 2011 (4ECE91F3)
TAP-Win32 Adapter V9 or[br]OpenVPN driver or COMODO
http://www.carrona.org/drivers/driver.php?id=tap0901.sys

If all of this doesn't stop the BSOD's, please run Driver Verifier according to these instructions: Driver Verifier Settings

Analysis:
The following is for informational purposes only.

Code:

[font=lucida console]**************************Sun Oct 20 15:06:47.141 2013 (UTC - 4:00)**************************
Loading Dump File [C:\Users\John\SysnativeBSODApps\102013-7472-01.dmp]
Windows 8 Kernel Version 9200 MP (8 procs) Free x64
Built by: [B]9200[/B].16581.amd64fre.win8_gdr.130410-1505
System Uptime:[B]0 days 0:01:32.960[/B]
Probably caused by :[B]ntkrnlmp.exe ( nt!KiFastFailDispatch+d0 )[/B]
BugCheck [B]139, {3, fffff88002bf88a0, fffff88002bf87f8, 0}[/B]
BugCheck Info: [url=http://www.carrona.org/bsodindx.html#0x00000139]KERNEL_SECURITY_CHECK_FAILURE (139)[/url]
Arguments: 
Arg1: 0000000000000003, A LIST_ENTRY has been corrupted (i.e. double remove).
Arg2: fffff88002bf88a0, Address of the trap frame for the exception that caused the bugcheck
Arg3: fffff88002bf87f8, Address of the exception record for the exception that caused the bugcheck
Arg4: 0000000000000000, Reserved
BUGCHECK_STR:  0x139
DEFAULT_BUCKET_ID:  LIST_ENTRY_CORRUPT
PROCESS_NAME:  System
FAILURE_BUCKET_ID: [B]0x139_3_nt!KiFastFailDispatch[/B]
  BIOS Version                  F9
  BIOS Release Date             10/22/2012
  Manufacturer                  Gigabyte Technology Co., Ltd.
  Product Name                  GA-990FXA-UD3
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
**************************Fri Oct 18 23:44:18.538 2013 (UTC - 4:00)**************************
Loading Dump File [C:\Users\John\SysnativeBSODApps\101813-7004-01.dmp]
Windows 8 Kernel Version 9200 MP (8 procs) Free x64
Built by: [B]9200[/B].16384.amd64fre.win8_rtm.120725-1247
System Uptime:[B]0 days 1:25:51.606[/B]
Probably caused by :[B]memory_corruption ( nt!MiAgeWorkingSet+25c )[/B]
BugCheck [B]50, {fffffa8a3af07010, 0, fffff80307cc26ab, 2}[/B]
BugCheck Info: [url=http://www.carrona.org/bsodindx.html#0x00000050]PAGE_FAULT_IN_NONPAGED_AREA (50)[/url]
Arguments: 
Arg1: fffffa8a3af07010, memory referenced.
Arg2: 0000000000000000, value 0 = read operation, 1 = write operation.
Arg3: fffff80307cc26ab, If non-zero, the instruction address which referenced the bad memory
    address.
Arg4: 0000000000000002, (reserved)
BUGCHECK_STR:  AV
DEFAULT_BUCKET_ID:  WIN8_DRIVER_FAULT
PROCESS_NAME:  MOM.exe
FAILURE_BUCKET_ID: [B]AV_nt!MiAgeWorkingSet[/B]
  BIOS Version                  F9
  BIOS Release Date             10/22/2012
  Manufacturer                  Gigabyte Technology Co., Ltd.
  Product Name                  GA-990FXA-UD3
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
[/font]

3rd Party Drivers:
The following is for information purposes only.
Any drivers in red should be updated or removed from your system. And should have been discussed in the body of my post.

Code:

[font=lucida console]**************************Sun Oct 20 15:06:47.141 2013 (UTC - 4:00)**************************
[COLOR=RED][B]tap0901.sys                 Thu Nov 24 13:50:27 2011 (4ECE91F3)[/B][/COLOR]
athrx.sys                   Wed Mar 21 23:26:22 2012 (4F6A9BDE)
Rt630x64.sys                Tue Jun 12 09:37:53 2012 (4FD74631)
RTKVHD64.sys                Tue Jun 19 04:50:56 2012 (4FE03D70)
usbfilter.sys               Tue Jun 19 07:07:40 2012 (4FE05D7C)
dump_storahci.sys           Wed Jul 25 22:30:35 2012 (5010ABCB)
SaiU1708.sys                Thu Sep 20 06:03:52 2012 (505AEA08)
SaiK1708.sys                Thu Sep 20 06:03:56 2012 (505AEA0C)
SaiBus.sys                  Tue Apr 16 13:17:23 2013 (516D87A3)
SaiMini.sys                 Tue Apr 16 13:17:23 2013 (516D87A3)
[COLOR=RED][B]AODDriver2.sys              Thu Jun  6 04:56:26 2013 (51B04EBA)[/B][/COLOR]
AtihdW86.sys                Fri Jul  5 14:10:40 2013 (51D70C20)
atikmpag.sys                Thu Sep 26 15:49:46 2013 (52448FDA)
atikmdag.sys                Thu Sep 26 16:43:16 2013 (52449C64)
[/font]

disseous · Oct 22, 2013

Thank you so much for looking at this.

I did all but your note re. the storage controller drivers. I am unsure on how to check/do this.

After this I still got bsod. Please note I had verifier enabled.

Thanks again.

usasma · Oct 23, 2013

It's most important that you check the firmware for your SSD - I just can't do that.
I do do the storage controllers if they appear in the memory dumps - so don't worry about that for now.

Driver Verifier is supposed to cause BSOD's. Please be sure to turn it off now (as it'll slow down your system and will make it less stable). To do this, open up verifier.exe and select "Delete existing settings". Then click on "Finish" and reboot the system for the change in settings to take effect.

Please update these older drivers. Links are included to assist in looking up the source of the drivers. If unable to find an update, please remove (un-install) the program responsible for that driver. DO NOT manually delete/rename the driver as it may make the system unbootable! :

Rt630x64.sys Wed Oct 19 08:12:55 2011 (4E9EBEC7)
Realtek PCI/PCIe Adapters
http://www.carrona.org/drivers/driver.php?id=Rt630x64.sys

The Driver Verifier memory dump blames ntkrnlmp.exe - the kernel (core) of the operating system. If it were actually to blame, you'd see many more problems other than the occasional BSOD.

As such, we look at (in this order):
- 3rd party drivers
- hardware/low-level issues
- Windows drivers

Once you update the Realtek PCI/PCIe adapter driver (wired networking) listed above, then we wait for further BSOD's

If the BSOD's recur, there's 3 possibilities:
- it points out additional 3rd party drivers that we haven't seen
- it points out random drivers/3rd party drivers that we've already seen
- it points out Windows drivers

Once it stops pointing out 3rd party drivers - then we move on to hardware diagnostics.

If that's the case, please start these free diagnostics: Hardware Diagnostics
(if you'd like, you can get a headstart and start running them now).

Analysis:
The following is for informational purposes only.

Code:

[FONT=lucida console]**************************Tue Oct 22 15:52:10.439 2013 (UTC - 4:00)**************************
Loading Dump File [C:\Users\John\SysnativeBSODApps\102213-56659-01.dmp]
Windows 8 Kernel Version 9200 MP (8 procs) Free x64
Built by: [B]9200[/B].16581.amd64fre.win8_gdr.130410-1505
System Uptime:[B]0 days 0:21:21.288[/B]
Probably caused by :[B]ntkrnlmp.exe ( nt!CmpCleanUpKcbCacheWithLock+75 )[/B]
BugCheck [B]3B, {c0000005, fffff801828b22b5, fffff880104bedd0, 0}[/B]
BugCheck Info: [URL="http://www.carrona.org/bsodindx.html#0x0000003B"]SYSTEM_SERVICE_EXCEPTION (3b)[/URL]
Arguments: 
Arg1: 00000000c0000005, Exception code that caused the bugcheck
Arg2: fffff801828b22b5, Address of the instruction which caused the bugcheck
Arg3: fffff880104bedd0, Address of the context record for the exception that caused the bugcheck
Arg4: 0000000000000000, zero.
BUGCHECK_STR:  0x3B
DEFAULT_BUCKET_ID: [B][COLOR=RED]VERIFIER_ENABLED_VISTA_MINIDUMP[/COLOR][/B]
PROCESS_NAME:  TiWorker.exe
FAILURE_BUCKET_ID: [B]0x3B_VRF_nt!CmpCleanUpKcbCacheWithLock[/B]
  BIOS Version                  F10a
  BIOS Release Date             01/24/2013
  Manufacturer                  Gigabyte Technology Co., Ltd.
  Product Name                  GA-990FXA-UD3
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
**************************Tue Oct 22 15:30:06.505 2013 (UTC - 4:00)**************************
Loading Dump File [C:\Users\John\SysnativeBSODApps\102213-47190-01.dmp]
Windows 8 Kernel Version 9200 MP (8 procs) Free x64
Built by: [B]9200[/B].16581.amd64fre.win8_gdr.130410-1505
System Uptime:[B]0 days 0:02:01.349[/B]
Probably caused by :[B]ntkrnlmp.exe ( nt!KiFastFailDispatch+d0 )[/B]
BugCheck [B]139, {3, fffff88002d09940, fffff88002d09898, 0}[/B]
BugCheck Info: [URL="http://www.carrona.org/bsodindx.html#0x00000139"]KERNEL_SECURITY_CHECK_FAILURE (139)[/URL]
Arguments: 
Arg1: 0000000000000003, A LIST_ENTRY has been corrupted (i.e. double remove).
Arg2: fffff88002d09940, Address of the trap frame for the exception that caused the bugcheck
Arg3: fffff88002d09898, Address of the exception record for the exception that caused the bugcheck
Arg4: 0000000000000000, Reserved
BUGCHECK_STR:  0x139
DEFAULT_BUCKET_ID:  LIST_ENTRY_CORRUPT
PROCESS_NAME:  System
FAILURE_BUCKET_ID: [B]0x139_VRF_3_nt!KiFastFailDispatch[/B]
  BIOS Version                  F10a
  BIOS Release Date             01/24/2013
  Manufacturer                  Gigabyte Technology Co., Ltd.
  Product Name                  GA-990FXA-UD3
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
**************************Mon Oct 21 23:23:48.510 2013 (UTC - 4:00)**************************
Loading Dump File [C:\Users\John\SysnativeBSODApps\102113-11715-01.dmp]
Windows 8 Kernel Version 9200 MP (8 procs) Free x64
Built by: [B]9200[/B].16384.amd64fre.win8_rtm.120725-1247
System Uptime:[B]0 days 0:11:53.369[/B]
*** WARNING: Unable to verify timestamp for win32k.sys
*** ERROR: Module load completed but symbols could not be loaded for win32k.sys
Probably caused by :[B]memory_corruption[/B]
BugCheck [B]3B, {c0000005, fffff880078c00f9, fffff8800d8cbb80, 0}[/B]
BugCheck Info: [URL="http://www.carrona.org/bsodindx.html#0x0000003B"]SYSTEM_SERVICE_EXCEPTION (3b)[/URL]
Arguments: 
Arg1: 00000000c0000005, Exception code that caused the bugcheck
Arg2: fffff880078c00f9, Address of the instruction which caused the bugcheck
Arg3: fffff8800d8cbb80, Address of the context record for the exception that caused the bugcheck
Arg4: 0000000000000000, zero.
BUGCHECK_STR:  0x3B
DEFAULT_BUCKET_ID:  CODE_CORRUPTION
PROCESS_NAME:  csrss.exe
FAILURE_BUCKET_ID: [B]MEMORY_CORRUPTION_ONE_BIT[/B]
  BIOS Version                  F10a
  BIOS Release Date             01/24/2013
  Manufacturer                  Gigabyte Technology Co., Ltd.
  Product Name                  GA-990FXA-UD3
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
[/FONT]

3rd Party Drivers:
The following is for information purposes only.
Any drivers in red should be updated or removed from your system. And should have been discussed in the body of my post.

Code:

[FONT=lucida console]**************************Tue Oct 22 15:52:10.439 2013 (UTC - 4:00)**************************
[COLOR=RED][B]Rt630x64.sys                Wed Oct 19 08:12:55 2011 (4E9EBEC7)[/B][/COLOR]
athrx.sys                   Wed Mar 21 23:26:22 2012 (4F6A9BDE)
RtHDMIVX.sys                Tue Jun  5 01:45:14 2012 (4FCD9CEA)
RTKVHD64.sys                Tue Jun 19 04:50:56 2012 (4FE03D70)
SaiU1708.sys                Thu Sep 20 06:03:52 2012 (505AEA08)
SaiK1708.sys                Thu Sep 20 06:03:56 2012 (505AEA0C)
SaiBus.sys                  Tue Apr 16 13:17:23 2013 (516D87A3)
SaiMini.sys                 Tue Apr 16 13:17:23 2013 (516D87A3)
tap0901.sys                 Thu Aug 22 08:40:01 2013 (521606A1)
atikmpag.sys                Thu Sep 26 15:49:46 2013 (52448FDA)
atikmdag.sys                Thu Sep 26 16:43:16 2013 (52449C64)
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
**************************Mon Oct 21 23:23:48.510 2013 (UTC - 4:00)**************************
[COLOR=RED][B]AODDriver2.sys              Tue Mar  6 04:55:00 2012 (4F55DEF4)[/B][/COLOR]
usbfilter.sys               Tue Jun 19 07:07:40 2012 (4FE05D7C)
AtihdW86.sys                Tue Jul 17 03:34:09 2012 (50051571)
atikmpag.sys                Fri Jul 27 21:14:47 2012 (50133D07)
atikmdag.sys                Fri Jul 27 21:48:09 2012 (501344D9)
[/FONT]

Help with BSOD - Windows 8

disseous

New Member

My Computer

System One

usasma

Mr. Cranky Pants

My Computer

System One

disseous

New Member

My Computer

System One

usasma

Mr. Cranky Pants

My Computer

System One