Frequent BSODs on Win8.1 laptop, different error codes

Noc · Aug 2, 2014

Hello y’all, new transitionee from Seven Forums here.

My new laptop is suffering from chronic and unpredictable BSOD crashes and nothing I do seems to work. I’ve tried all the latest drivers and updates for bupkes. It’s a clean Windows 8.1 installation with drivers and updates straight from the official Toshiba support page for my specific model. It started BSODing randomly from the start until I took it to a PC repair shop, where the guy who fixed it said the problem was with the drivers (I was unable to get any specifics). The problem seemed to be fixed.

It then started BSODing again – though with different error codes this time – when I continued to configure my system and install programs, though I’m unable to tell what may be causing it. There’s also some moderate system instability where explorer.exe in particular occasionally crashes, though I believe that may be Win8.1 being inherently unstable at this point.

I’ve emailed Toshiba support and haven’t received an answer.

SF Diagnostic Tool results in the attached .zip. Thanks in advance for any assistance.

blueelvis · Aug 2, 2014

Hi Noc & Welcome to the forums ^_^,

I have analyzed your Dump files and below has been provided an analysis of the same for informative purposes :-

Code:

**************************Sat Aug  2 09:50:21.885 2014 (UTC + 5:30)**************************
Probably caused by : memory_corruption
 
BugCheck 50, {ffffffffffffffc3, 1, fffff80356e6efa9, 0}
BugCheck Info: [url=http://www.carrona.org/bsodindx.html#0x00000050]PAGE_FAULT_IN_NONPAGED_AREA (50)[/url]
 
BUGCHECK_STR:  AV
 
DEFAULT_BUCKET_ID:  CODE_CORRUPTION
 
PROCESS_NAME:  explorer.exe
 
FAILURE_BUCKET_ID:  MEMORY_CORRUPTION_ONE_BIT
 
MaxSpeed:     2400
 
CurrentSpeed: 2394
 
  BIOS Version                  1.50
 
  BIOS Release Date             04/18/2014
 
  Manufacturer                  TOSHIBA
 
  Product Name                  Satellite P70-A
 
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
**************************Sat Aug  2 09:37:07.776 2014 (UTC + 5:30)**************************
Probably caused by : ntkrnlmp.exe ( nt! ?? ::OKHAJAOM::`string'+b69 )
 
BugCheck C000021A, {ffffc0011576cc50, 0, 0, 0}
BugCheck Info: [url=http://www.carrona.org/bsodindx.html#Example]WINLOGON_FATAL_ERROR (c000021a)[/url]
 
Arg2: 0000000000000000, Error Code.
 
BUGCHECK_STR:  0xc000021a_RPC_Terminated
 
PROCESS_NAME:  services.exe
 
FAILURE_BUCKET_ID:  0xc000021a_RPC_Terminated_nt!_??_::OKHAJAOM::_string_
 
MaxSpeed:     2400
 
CurrentSpeed: 2394
 
  BIOS Version                  1.50
 
  BIOS Release Date             04/18/2014
 
  Manufacturer                  TOSHIBA
 
  Product Name                  Satellite P70-A
 
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``

Below is a list of the 3rd party drivers present on your system :-

Code:

**************************Sat Aug  2 09:50:21.885 2014 (UTC + 5:30)**************************
[B][U]BazisVirtualCDBus.sys   Mon Aug  8 23:41:12 2011 (4E4026C0)
tap0901.sys             Fri Nov 25 00:20:27 2011 (4ECE91F3)
dump_truecrypt.sys      Tue Feb  7 14:39:36 2012 (4F30EA50)
truecrypt.sys           Tue Feb  7 14:39:36 2012 (4F30EA50)
Thpevm.SYS              Fri Jun 22 03:02:18 2012 (4FE392E2)
tdcmdpst.sys            Thu Jul 26 05:11:48 2012 (5010843C)
L1C63x64.sys            Fri Dec 14 13:54:04 2012 (50CAE224)
HECIx64.sys             Tue Dec 18 01:02:21 2012 (50CF7345)
[/U][/B]thpdrv.sys              Mon Feb 25 23:15:51 2013 (512BA34F)
SynTP.sys               Fri Apr  5 10:05:02 2013 (515E5476)
klpd.sys                Fri Apr 12 17:04:45 2013 (5167F155)
RtsP2Stor.sys           Fri Jul  5 08:29:40 2013 (51D6369C)
CHDRT64.sys             Thu Jul 18 13:45:34 2013 (51E7A426)
QIOMem.sys              Tue Aug  6 11:45:40 2013 (5200948C)
klmouflt.sys            Thu Aug  8 18:39:08 2013 (52039874)
intelppm.sys            Thu Aug 22 14:16:35 2013 (5215CFEB)
Smb_driver_Intel.sys    Thu Aug 22 22:32:05 2013 (5216440D)
iaStorA.sys             Thu Aug 29 03:43:22 2013 (521E7602)
dump_iaStorA.sys        Thu Aug 29 03:43:22 2013 (521E7602)
uxstyle.sys             Mon Sep 23 16:49:02 2013 (524023A6)
iwdbus.sys              Fri Sep 27 03:08:04 2013 (5244A93C)
athwbx.sys              Thu Oct 17 15:16:01 2013 (525FB1D9)
igdkmd64.sys            Tue Oct 29 03:27:02 2013 (526EDDAE)
tosrfec.sys             Thu Oct 31 08:50:55 2013 (5271CC97)
kl1.sys                 Thu Feb 20 14:28:38 2014 (5305C3BE)
klim6.sys               Tue Feb 25 14:38:42 2014 (530C5D9A)
klwfp.sys               Wed Mar 19 18:30:11 2014 (532994DB)
kneps.sys               Wed Mar 26 18:34:31 2014 (5332D05F)
nvvad64v.sys            Fri Mar 28 19:02:06 2014 (533579D6)
klkbdflt.sys            Fri Mar 28 19:20:45 2014 (53357E35)
klhk.sys                Thu Apr 10 18:54:25 2014 (53469B89)
nvpciflt.sys            Tue May 20 04:30:22 2014 (537A8D06)
nvlddmkm.sys            Tue May 20 04:38:44 2014 (537A8EFC)
NvStreamKms.sys         Thu May 22 22:13:14 2014 (537E2922)
mozy.sys                Fri May 30 01:44:54 2014 (5387953E)
klflt.sys               Fri May 30 22:38:43 2014 (5388BB1B)
klif.sys                Mon Jun 23 17:12:40 2014 (53A812B0)

Please remove your WinCDEmu virtual CDROM - Bazis Inc.
Please update your OpenVPN software.
Please remove TrueCrypt while we are troubleshooting.
Remove your Mozy Backup software.
Please remove Kasperskyusing this **TOOL**.

Let me know how it goes ^_^.

Noc · Aug 2, 2014

Thanks for the reply, blueelvis.

First, had another BSOD last night. Minidump attached.

Please follow the steps one by one and checking for BSOD's :-

Please remove your WinCDEmu virtual CDROM - Bazis Inc.

Please update your OpenVPN software.

Please remove TrueCrypt while we are troubleshooting.

Remove your Mozy Backup software.

Please remove Kaspersky using this **TOOL**.

B-b-but I like those programs …

(J/k!)

Due to the random nature of the BSODs (I can go for days without crashing, though that’s rare), waiting to see if the BSODs cease after removing/altering those programs one at a time would be highly impractical. Also, I can’t remove TrueCrypt or I won’t be able to open my system at all (the HDD is encrypted). I can only remove it (which would require completely decrypting the drive, which I’d rather avoid) if there’s strong evidence that TC, specifically, is causing issues.

I’ve updated my OpenVPN TAP-windows driver to v9.9.2 and am now uninstalling uninstalling WinCDEmu, Mozy and Kaspersky (using the tool you linked). Since the BSODs began before any of those were installed on my machine, I doubt this will fix anything, but if it makes troubleshooting easier, then *shrugs*. (I hope not to go too long without Mozy, though – several times now, it’s saved my butt by allowing me to recover files that had been corrupted due to BSODs.)

Will post again if/when a new BSOD occurs. Thanks again.

blueelvis · Aug 2, 2014

Hi,

You could just update the drivers and then check for the BSOD's. Don't remove TrueCrypt if you have encrypted your Hard Drive. Furthermore the latest dump does not reveal much information

Could you please run Memtest using this guide for no shorter than atleast 8 passes :-
RAM - Test with Memtest86+ - Windows 7 Help Forums

If you still did not find any problems with the Memtest then run Driver Verifier according to this guide and let it crash for few times and then create a freshly generated SF Diagnostic ZIP File so that it includes the Driver Verifier Enabled Dump files :-
Using Driver Verifier to identify issues with Drivers - Windows 7 Help Forums

Noc · Aug 2, 2014

@blueelvis —

I’ve already updated all drivers I could. Toshiba’s driver support page is a bit wonky – there’s a section for Win8 drivers and two subsections for Win8.1 (upgrade vs. clean install) and their recommendations seem to conflict at times, and some drivers don’t even install at all (nothing happens post-extraction). I’ve thought of using a third-party app like Driver Detective or something to scan for updates, but I’m not sold on their reliability (plus very few are free).

The PC repair place I mentioned above also ran Memtest86+ and gave my hardware a clean bill of health. I’ll try running Driver Verifier first until it crashes a few times and I can upload the new SF Diagnostic ZIP. I’ll then be leaving for a few days, which should give me time to run Memtest86+ for at least eight passes (since it takes approx. 5 hours per pass on my machine – 16 GB will do that …).

blueelvis · Aug 2, 2014

Don't use any 3rd party software for downloading drivers. I myself stick to the rule of downloading the updates through either Windows Update/OEM/Driver CD.

Yea then try Driver Verifier and let me know how it goes ^_^.

Noc · Aug 3, 2014

All right, after some finagling around, I’ve completed the Driver Verifier run. Here’s the quick rundown:

• Enabled Verifier with these settings, then rebooted.
• 2 immediate BSODs upon startup, both blamed on uxstyle.sys. Disabled Verifier in Safe Mode, rebooted, uninstalled UxStyle. Re-enabled Verifier and rebooted.
• 3 BSODs at the login screen, all with “DRIVER_IRQL_NOT_LESS_OR_EQUAL” for “L1C63x64.sys”. Safe Mode, disabled Verifier, rebooted.

Apparently, something to do with my Ethernet adapter?

I just checked my laptop’s Toshiba drivers support page and got derp in return: In the “Win8.1 (Clean Installation)” section, no mention of the Atheros Ethernet driver, nor any other LAN driver, apparently. And in the “Win8.1 (Upgrade Installation)” section, it says to “se Windows 8.1 inbox version”, which I don’t even understand and almost certainly don’t have. I’m currently using the Win8(.0) driver (v2.1.0.13).

New SF Diagnostic Tool ZIP attached. (There are a couple new, non-Verifier-caused minidumps in there as well.)

blueelvis · Aug 3, 2014

Hi Noc,

I analyzed your dump files and according to the Driver Verifier it is your Atheros Ethernet driver and it is old too. Even on my Toshiba Laptop, on installing the Windows 8.1 , I got an immediate BSOD related to networking drivers but was able to fix it on updating the drivers. Visit this link and download the Windows 8.1 drivers for your Ethernet card and see if it fixes your problem or not :-

Driver Reference Table - L1C63x64.sys

Let me know how it goes ^_^. If still facing problems then run Driver Verifier again and check what driver is causing the problems.

Noc · Aug 3, 2014

Dang, you’ve given me more help in 24 hours than I’d received after a week over at SevenForums. Whatever you’re taking, keep it up!

I eventually found an update for my Atheros LAN driver and updated it to v2.1.0.21. (Funny story: Updating via Device Manager, which has never once worked in the history of the tiny fraction of all time that is my life, actually updated it from v2.1.0.13 to v2.1.0.16 beforehand. Huh.) Now waiting and seeing …

I’d say that if I don’t update, it means the problem has been fixed, but I’ve learned my lesson about jinxing myself I swear.

blueelvis · Aug 3, 2014

Noc said:
Dang, you’ve given me more help in 24 hours than I’d received after a week over at SevenForums. Whatever you’re taking, keep it up!

I eventually found an update for my Atheros LAN driver and updated it to v2.1.0.21. (Funny story: Updating via Device Manager, which has never once worked in the history of the tiny fraction of all time that is my life, actually updated it from v2.1.0.13 to v2.1.0.16 beforehand. Huh.) Now waiting and seeing …

I’d say that if I don’t update, it means the problem has been fixed, but I’ve learned my lesson about jinxing myself I swear.

Hi Noc ^_^,

There are great people over at SevenForums. I just started my journey over EightForums but I regularly read the guides over there. Thanks for your kind words

It works sometimes and sometimes not so always try that first.

Looking forward to your update.

Noc · Aug 3, 2014

Oh, I meant nothing against anyone at SF; just that it was a bit frustrating to wait for days for a reply when my only computer doesn’t work.

Speaking of which – guess who just had another BSOD? This guy. Uploaded the new minidump and I’ll try running another few rounds of Driver Verifier tomorrow. For now, I’m all patienced out with this thing until I’ve had some sleep.

EDIT: I should probably mention – I tried running “sfc /scannow” in an elevated command prompt a couple days ago and it told me that it was unable to fix some corrupted system files. I tried to restore them via “dism /online /cleanup-image /restorehealth”, but received the error “the remote procedure call failed”. (I’m pretty new to all this bugchecking stuff.)

blueelvis · Aug 3, 2014

Hi NOC ^_^,

I have analyzed your dump files and below is the stack text (Function calls which occurred) :-

Code:

STACK_TEXT:  
ffffd001`d6cf3508 fffff802`58b67ae9 : 00000000`0000000a ffffd001`f6cf38d8 00000000`00000002 00000000`00000000 : nt!KeBugCheckEx
ffffd001`d6cf3510 fffff802`58b6633a : 00000000`00000000 972197b2`c1aa8a9c 00000000`00000000 ffffd001`d6cf3650 : nt!KiBugCheckDispatch+0x69
ffffd001`d6cf3650 fffff800`2ccbdda9 : 00000961`00000100 00000961`00000000 00000064`00000021 00000000`00000000 : nt!KiPageFault+0x23a
ffffd001`d6cf37e0 fffff800`2ccbc5c6 : ffffd001`00000000 00000000`00000001 00000000`00000080 ffffd001`d6cc7ba4 : [B][U]cng!SymCrypt[COLOR=#ff0000]Sha512[/COLOR]AppendBlocks_ull+0x1599
[/U][/B]ffffd001`d6cf39b0 fffff800`2ccbc7c3 : 00000000`00000000 ffffd001`d6cc7ba4 00000000`00000080 fffff802`58a08000 : [B][U]cng!SymCrypt[COLOR=#ff0000]Sha512[/COLOR]Append+0xbe
[/U][/B]ffffd001`d6cf39f0 fffff800`2ccbc6e2 : 00000000`00000000 ffffd001`d6cc2180 00000000`00000001 00000000`00000000 : [B][U]cng!EntropyPoolAdd+0x63
[/U][/B]ffffd001`d6cf3a90 fffff802`58b0ea33 : ffffd001`d6cc2180 00000000`00000f44 00000000`00000000 00000000`00400a02 : [B][U]cng!EntropyProvideData+0x102
[/U][/B]ffffd001`d6cf3b80 fffff802`58a621e0 : ffffd001`d6cc4f00 fffff802`58a08000 fffff802`58cb3580 ffffe001`f1710f44 : nt!KiEntropyDpcRoutine+0x37
ffffd001`d6cf3bb0 fffff802`58a613fb : 00000000`00000004 00000000`00000001 ffffd001`d6cc2180 ffffd001`00000f45 : nt!KiExecuteAllDpcs+0x1b0
ffffd001`d6cf3d00 fffff802`58b5f0d5 : 00000000`00000000 ffffd001`d6cc2180 ffffe001`ee600700 0000003f`ec04c358 : nt!KiRetireDpcList+0xdb
ffffd001`d6cf3fb0 fffff802`58b5eed9 : 0000003e`ea5fae00 fffff802`58b5eeaf 00000000`0000b4c4 00000000`0000000a : nt!KxRetireDpcList+0x5
ffffd001`d3c2cac0 fffff802`58b61145 : ffffe001`f5073880 fffff802`58b5d887 ffffe001`f5073880 00000000`00000000 : nt!KiDispatchInterruptContinue
ffffd001`d3c2caf0 fffff802`58b5d887 : ffffe001`f5073880 00000000`00000000 00000000`00000601 ffffd001`d3c2cb00 : nt!KiDpcInterruptBypass+0x25
ffffd001`d3c2cb00 00007ff8`82c5d1c3 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiInterruptDispatchLBControl+0x197
0000003e`ea5fae50 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x00007ff8`82c5d1c3

Do you see that highlighted text in the Stack(Scroll towards right)? CNG refers to the next generation Kernel Cryptography Library of Windows. So, I would say 80% that the TrueCrypt is causing this. But before that please make sure you remove the software I asked previously (Especially Kaspersky first before proceeding)

Also, see if there is presence of "SymCrypt.dll" in your system. Report back the folder path in which you found it. I would advise you to decrypt your entire computer (Is the laptop used at home or is it a corporate laptop?) and then uninstall TrueCrypt.

Let me know how it goes ^_^.

Noc · Aug 3, 2014

I had reinstalled the previously uninstalled software (Mozy, Kaspersky, WinCDEmu) when I thought I had fixed the issue. Of course, it couldn’t be that easy … Uninstalling them (again) now, and then I’ll start decrypting my machine. (It’s my home and only machine, but after previous experiences, I try to keep my things encrypted and protected at all times for security reasons. Speaking of which, if you have any recommendation for really strong hard drive encryption programs, please let me know. :geek:

)

Windows Search – which I don’t think is that good on Win8.1 – didn’t find any “SymCrypt.dll”, and I never installed anything by Symantec that I know of.

blueelvis · Aug 4, 2014

Noc said:
I had reinstalled the previously uninstalled software (Mozy, Kaspersky, WinCDEmu) when I thought I had fixed the issue. Of course, it couldn’t be that easy … Uninstalling them (again) now, and then I’ll start decrypting my machine. (It’s my home and only machine, but after previous experiences, I try to keep my things encrypted and protected at all times for security reasons. Speaking of which, if you have any recommendation for really strong hard drive encryption programs, please let me know. )

Windows Search – which I don’t think is that good on Win8.1 – didn’t find any “SymCrypt.dll”, and I never installed anything by Symantec that I know of.

Hi NOC,

I just asked my senior friend and he advised me to ask you to Uninstall TrueCrypt as it is dangerous. You could migrate to Bitlocker for security reasons using this guide :-
TrueCrypt

Noc · Aug 4, 2014

All right, back for more. (Fun story: Just had a BSOD whilst writing this post. Thank gawd for EF’s autosave feature.)

I just asked my senior friend and he advised me to ask you to Uninstall TrueCrypt as it is dangerous. You could migrate to Bitlocker for security reasons

Do you mean that TrueCrypt is “dangerous” for the system or because it offers poor security? BitLocker looks neat, but I try to avoid any closed-source encryption software. I plan to migrate to DiskCryptor, but only once all current issues have been fixed.

Anyhow, on to why we’re here. Here’s the rundown:

• Finished completely decrypting system.
• Uninstalled TrueCrypt.
• Enabled Driver Verifier with previously mentioned settings.
• Immediately got two crashes during startup: “DRIVER_IRQL_NOT_LESS_OR_EQUAL” for “L1C63x64.sys”.
• Booted into Safe Mode and disabled Verifier.
• On a whim, I then booted into Safe Mode with Networking and tried running “Dism /Online /Cleanup-Image /RestoreHealth”. Failed with error “0x800f0906”.
• Then tried “sfc /scannow”, which just said it was unable to fix some corrupted files. CBS log attached.
• I then ran Windows Update and installed one minor Toshiba update.
• And then I had the above-mentioned BSOD whilst typing this up. Created & attached a new SF Diagnostic ZIP.

As I mentioned, when I leave for a few days later, I’ll run Memtest86+ during my absence, which should ensure at least 8 passes.

Noc · Aug 4, 2014

Leaving just now, had another BSOD. Minidump attached. Thanks for everything so far, blueelvis.

blueelvis · Aug 5, 2014

Hi NOC,

I have analyzed your latest dump files and below has been provided an analysis of the same :-

Code:

**************************Tue Aug  5 01:25:12.582 2014 (UTC + 5:30)**************************
Probably caused by : ntkrnlmp.exe ( nt!KiFastFailDispatch+d0 )
 
BugCheck 139, {3, ffffd001931c65c0, ffffd001931c6518, 0}
BugCheck Info: [url=http://www.carrona.org/bsodindx.html#0x00000139]KERNEL_SECURITY_CHECK_FAILURE (139)[/url]
 
BUGCHECK_STR:  0x139
 
DEFAULT_BUCKET_ID:  LIST_ENTRY_CORRUPT
 
PROCESS_NAME:  audiodg.exe
 
FAILURE_BUCKET_ID:  0x139_3_nt!KiFastFailDispatch
 
MaxSpeed:     2400
 
CurrentSpeed: 2394
 
  BIOS Version                  1.50
 
  BIOS Release Date             04/18/2014
 
  Manufacturer                  TOSHIBA
 
  Product Name                  Satellite P70-A
 
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
**************************Tue Aug  5 00:06:09.659 2014 (UTC + 5:30)**************************
*** WARNING: Unable to verify timestamp for L1C63x64.sys
 
*** ERROR: Module load completed but symbols could not be loaded for L1C63x64.sys
 
Probably caused by : L1C63x64.sys ( L1C63x64+7101 )
 
BugCheck D1, {ffffcf81f5444e80, 2, 0, fffff80158435101}
BugCheck Info: [url=http://www.carrona.org/bsodindx.html#0x000000D1]DRIVER_IRQL_NOT_LESS_OR_EQUAL (d1)[/url]
 
BUGCHECK_STR:  AV
 
DEFAULT_BUCKET_ID:  WIN8_DRIVER_FAULT
 
PROCESS_NAME:  svchost.exe
 
FAILURE_BUCKET_ID:  AV_L1C63x64+7101
 
MaxSpeed:     2400
 
CurrentSpeed: 2394
 
  BIOS Version                  1.50
 
  BIOS Release Date             04/18/2014
 
  Manufacturer                  TOSHIBA
 
  Product Name                  Satellite P70-A
 
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
**************************Mon Aug  4 00:20:56.035 2014 (UTC + 5:30)**************************
Probably caused by : Pool_Corruption ( nt!ExDeferredFreePool+1ce )
 
BugCheck 3B, {c0000005, fffff8026c1211de, ffffd000aa536460, 0}
BugCheck Info: [url=http://www.carrona.org/bsodindx.html#0x0000003B]SYSTEM_SERVICE_EXCEPTION (3b)[/url]
 
BUGCHECK_STR:  0x3B
 
DEFAULT_BUCKET_ID:  WIN8_DRIVER_FAULT
 
PROCESS_NAME:  dwm.exe
 
FAILURE_BUCKET_ID:  0x3B_nt!ExDeferredFreePool
 
MaxSpeed:     2400
 
CurrentSpeed: 2394
 
  BIOS Version                  1.50
 
  BIOS Release Date             04/18/2014
 
  Manufacturer                  TOSHIBA
 
  Product Name                  Satellite P70-A
 
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
**************************Sun Aug  3 17:29:32.942 2014 (UTC + 5:30)**************************
Probably caused by : memory_corruption
 
BugCheck D1, {ffffd001f6cf38d8, 2, 0, fffff8002ccbdda9}
BugCheck Info: [url=http://www.carrona.org/bsodindx.html#0x000000D1]DRIVER_IRQL_NOT_LESS_OR_EQUAL (d1)[/url]
 
BUGCHECK_STR:  AV
 
DEFAULT_BUCKET_ID:  CODE_CORRUPTION
 
PROCESS_NAME:  svchost.exe
 
FAILURE_BUCKET_ID:  MEMORY_CORRUPTION_ONE_BIT
 
MaxSpeed:     2400
 
CurrentSpeed: 2394
 
  BIOS Version                  1.50
 
  BIOS Release Date             04/18/2014
 
  Manufacturer                  TOSHIBA
 
  Product Name                  Satellite P70-A
 
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
**************************Sun Aug  3 14:04:53.288 2014 (UTC + 5:30)**************************
*** WARNING: Unable to verify timestamp for L1C63x64.sys
 
*** ERROR: Module load completed but symbols could not be loaded for L1C63x64.sys
 
Probably caused by : L1C63x64.sys ( L1C63x64+6f2f )
 
BugCheck D1, {ffffcf80c867cdd0, 2, 0, fffff80145806f2f}
BugCheck Info: [url=http://www.carrona.org/bsodindx.html#0x000000D1]DRIVER_IRQL_NOT_LESS_OR_EQUAL (d1)[/url]
 
BUGCHECK_STR:  AV
 
DEFAULT_BUCKET_ID:  WIN8_DRIVER_FAULT
 
PROCESS_NAME:  svchost.exe
 
FAILURE_BUCKET_ID:  AV_L1C63x64+6f2f
 
MaxSpeed:     2400
 
CurrentSpeed: 2394
 
  BIOS Version                  1.50
 
  BIOS Release Date             04/18/2014
 
  Manufacturer                  TOSHIBA
 
  Product Name                  Satellite P70-A
 
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
**************************Sun Aug  3 14:01:10.884 2014 (UTC + 5:30)**************************
*** WARNING: Unable to verify timestamp for L1C63x64.sys
 
*** ERROR: Module load completed but symbols could not be loaded for L1C63x64.sys
 
Probably caused by : L1C63x64.sys ( L1C63x64+6f2f )
 
BugCheck D1, {ffffcf80e5df4dd0, 2, 0, fffff8009bc71f2f}
BugCheck Info: [url=http://www.carrona.org/bsodindx.html#0x000000D1]DRIVER_IRQL_NOT_LESS_OR_EQUAL (d1)[/url]
 
BUGCHECK_STR:  AV
 
DEFAULT_BUCKET_ID:  WIN8_DRIVER_FAULT
 
PROCESS_NAME:  nvstreamsvc.ex
 
FAILURE_BUCKET_ID:  AV_L1C63x64+6f2f
 
MaxSpeed:     2400
 
CurrentSpeed: 2394
 
  BIOS Version                  1.50
 
  BIOS Release Date             04/18/2014
 
  Manufacturer                  TOSHIBA
 
  Product Name                  Satellite P70-A
 
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
**************************Sun Aug  3 09:54:31.751 2014 (UTC + 5:30)**************************
*** WARNING: Unable to verify timestamp for uxstyle.sys
 
*** ERROR: Module load completed but symbols could not be loaded for uxstyle.sys
 
Probably caused by : uxstyle.sys ( uxstyle+1a0f )
 
BugCheck D6, {ffffcf8163645000, 0, fffff80137ff1a0f, 0}
BugCheck Info: [url=http://www.carrona.org/bsodindx.html#0x000000D6]DRIVER_PAGE_FAULT_BEYOND_END_OF_ALLOCATION (d6)[/url]
 
BUGCHECK_STR:  0xD6
 
DEFAULT_BUCKET_ID:  WIN8_DRIVER_FAULT
 
PROCESS_NAME:  System
 
FAILURE_BUCKET_ID:  0xD6_uxstyle+1a0f
 
MaxSpeed:     2400
 
CurrentSpeed: 2394
 
  BIOS Version                  1.50
 
  BIOS Release Date             04/18/2014
 
  Manufacturer                  TOSHIBA
 
  Product Name                  Satellite P70-A
 
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
**************************Sun Aug  3 09:50:36.702 2014 (UTC + 5:30)**************************
Probably caused by : ntkrnlmp.exe ( nt! ?? ::FNODOBFM::`string'+26fae )
 
BugCheck 4E, {2, 3615c6, 45f5ff, fffe}
BugCheck Info: [url=http://www.carrona.org/bsodindx.html#0x0000004E]PFN_LIST_CORRUPT (4e)[/url]
 
BUGCHECK_STR:  0x4E_2
 
PROCESS_NAME:  System
 
FAILURE_BUCKET_ID:  0x4E_2_nt!_??_::FNODOBFM::_string_
 
MaxSpeed:     2400
 
CurrentSpeed: 2394
 
  BIOS Version                  1.50
 
  BIOS Release Date             04/18/2014
 
  Manufacturer                  TOSHIBA
 
  Product Name                  Satellite P70-A
 
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
**************************Sun Aug  3 03:01:36.566 2014 (UTC + 5:30)**************************
Probably caused by : memory_corruption
 
BugCheck 1E, {ffffffffc000001d, fffff800afe8a509, ffffe0001906b080, 8000}
BugCheck Info: [url=http://www.carrona.org/bsodindx.html#0x0000001E]KMODE_EXCEPTION_NOT_HANDLED (1e)[/url]
 
BUGCHECK_STR:  0x1E_c000001d
 
PROCESS_NAME:  firefox.exe
 
FAILURE_BUCKET_ID:  MEMORY_CORRUPTION_ONE_BIT
 
MaxSpeed:     2400
 
CurrentSpeed: 2394
 
  BIOS Version                  1.50
 
  BIOS Release Date             04/18/2014
 
  Manufacturer                  TOSHIBA
 
  Product Name                  Satellite P70-A
 
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
**************************Sat Aug  2 13:37:15.846 2014 (UTC + 5:30)**************************
Probably caused by : ntkrnlmp.exe ( nt!ExFreePoolWithTag+124f )
 
BugCheck 19, {20, ffffe0018e2422e0, ffffe0018e242310, 4030003}
BugCheck Info: [url=http://www.carrona.org/bsodindx.html#0x00000019]BAD_POOL_HEADER (19)[/url]
 
BUGCHECK_STR:  0x19_20
 
PROCESS_NAME:  plugin-contain
 
FAILURE_BUCKET_ID:  0x19_20_nt!ExFreePoolWithTag
 
MaxSpeed:     2400
 
CurrentSpeed: 2394
 
  BIOS Version                  1.50
 
  BIOS Release Date             04/18/2014
 
  Manufacturer                  TOSHIBA
 
  Product Name                  Satellite P70-A
 
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
**************************Sat Aug  2 09:50:21.885 2014 (UTC + 5:30)**************************
Probably caused by : memory_corruption
 
BugCheck 50, {ffffffffffffffc3, 1, fffff80356e6efa9, 0}
BugCheck Info: [url=http://www.carrona.org/bsodindx.html#0x00000050]PAGE_FAULT_IN_NONPAGED_AREA (50)[/url]
 
BUGCHECK_STR:  AV
 
DEFAULT_BUCKET_ID:  CODE_CORRUPTION
 
PROCESS_NAME:  explorer.exe
 
FAILURE_BUCKET_ID:  MEMORY_CORRUPTION_ONE_BIT
 
MaxSpeed:     2400
 
CurrentSpeed: 2394
 
  BIOS Version                  1.50
 
  BIOS Release Date             04/18/2014
 
  Manufacturer                  TOSHIBA
 
  Product Name                  Satellite P70-A
 
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
**************************Sat Aug  2 09:37:07.776 2014 (UTC + 5:30)**************************
Probably caused by : ntkrnlmp.exe ( nt! ?? ::OKHAJAOM::`string'+b69 )
 
BugCheck C000021A, {ffffc0011576cc50, 0, 0, 0}
BugCheck Info: [url=http://www.carrona.org/bsodindx.html#Example]WINLOGON_FATAL_ERROR (c000021a)[/url]
 
Arg2: 0000000000000000, Error Code.
 
BUGCHECK_STR:  0xc000021a_RPC_Terminated
 
PROCESS_NAME:  services.exe
 
FAILURE_BUCKET_ID:  0xc000021a_RPC_Terminated_nt!_??_::OKHAJAOM::_string_
 
MaxSpeed:     2400
 
CurrentSpeed: 2394
 
  BIOS Version                  1.50
 
  BIOS Release Date             04/18/2014
 
  Manufacturer                  TOSHIBA
 
  Product Name                  Satellite P70-A
 
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``

As you can see from the dump files, some dumps blame the Memory Corruption, some blame your Atheros LAN Driver. Download the latest version for your card from this **site**.

Do you get the BSOD if you remove your Ethernet cable and disable Networking? Please download all the latest drivers from Toshiba as most of your drivers are outdated. You have still not removed Kaspersky according to the Dumps. Please do remove it using this **TOOL**.

Let me know how it goes, this should solve the Driver Verifier blaming your Ethernet Drivers. Regarding, the TrueCrypt, he did not mention about the safety but I can say that Bitlocker is nice itself.

Noc · Aug 6, 2014

I think some of those dumps may old ones. I’ve uninstalled Kaspersky completely using the KAVRemover tool and updated my LAN driver as mentioned in this thread. I’ll see if I can find more updates, but as I’ve said, I’ve already installed all updates and drivers from the Toshiba website. (EDIT: Also, that Toshiba site you link is the US site (I think?), which doesn’t include the specific drivers for my specific Satellite P70-A model (PSPLPC-01Y007), which is Canadian.)

Also, Memtest86 was interrupted before it could complete, so I’ll have to start it over again the next time I leave for a few days (I’m here now as an exception).

EDIT #2: Forgot to answer this:

Do you get the BSOD if you remove your Ethernet cable and disable Networking?

Do you mean somehow turning networking off whilst not in Safe Mode? How would I do that?

blueelvis · Aug 8, 2014

Noc said:
I think some of those dumps may old ones. I’ve uninstalled Kaspersky completely using the KAVRemover tool and updated my LAN driver as mentioned in this thread. I’ll see if I can find more updates, but as I’ve said, I’ve already installed all updates and drivers from the Toshiba website. (EDIT: Also, that Toshiba site you link is the US site (I think?), which doesn’t include the specific drivers for my specific Satellite P70-A model (PSPLPC-01Y007), which is Canadian.)

Also, Memtest86 was interrupted before it could complete, so I’ll have to start it over again the next time I leave for a few days (I’m here now as an exception).

EDIT #2: Forgot to answer this:

Do you get the BSOD if you remove your Ethernet cable and disable Networking?

Click to expand...

Do you mean somehow turning networking off whilst not in Safe Mode? How would I do that?

Sorry for the late reply.

Yes, I mean that you unplug the Ethernet Cable or simply don't use the Internet Connection for a while. This could be done by Disabling the Network Adapter and then checking the system for stability. Please complete the Memtest and post back the results.

Also, if the crashes continue then I would need your latest Dump file.

Noc · Aug 8, 2014

Don’t worry about replying late; I’m still waiting for a single answer over at Bleeping Computer after a week. ;-)

I’m not sure what you mean by “checking the system for stability” – do you mean a specific tool? Tomorrow, when I’m not falling asleep in my chair, I’ll disable my network adapters and then run Driver Verifier to see if it changes anything.

Meanwhile, I’ve been busy. Here’s the low-down:

Suffered a couple random BSODs.
Rolled back the Atheros LAN Driver from v2.1.0.21 [07/16/2013] (which I had downloaded from the Atheros website) to v2.1.0.16 [04/01/2013] (which is the updated version available through Device Manager).
Enabled Driver Verifier and restarted. Got immediate BSODs on startup: DRIVER_IRQL_NOT_LESS_OR_EQUAL for L1C63x64.sys.
Tried to revert back to v2.1.0.13 [12/14/2012], instead the installer somehow gave me v2.1.0.1 [11/19/2012]. It seemed to work; took longer for a BSOD to happen, and it was for “tcpip.sys”.
I tried to fix my Windows component store corruption again, and for the first time, “DISM /RestoreHealth” actually worked.
So did “sfc /scannow”, which fixed some corrupted files.
Meanwhile, went back to Atheros LAN Driver v2.1.0.16. Driver Verifier made it crash again.
Finally, I installed v2.1.0.13. However, Verifier still makes it crash like the others, even though it’s the version recommended by my Toshiba support page (for Win8.0, anyway). Figure that one out …

New SF Diagnostic ZIP attached with today’s and yesterday’s minidumps.

Thanks again for all your help.

Frequent BSODs on Win8.1 laptop, different error codes

Member

My Computer

OMG Debugger!

My Computer

Member

My Computer

OMG Debugger!

My Computer

Member

My Computer

OMG Debugger!

My Computer

Member

My Computer

OMG Debugger!

My Computer

Member

My Computer

OMG Debugger!

My Computer

Member

My Computer

OMG Debugger!

My Computer

Member

My Computer

OMG Debugger!

My Computer

Member

My Computer

Member

My Computer

OMG Debugger!

My Computer

Member

My Computer

OMG Debugger!

My Computer

Member

My Computer