BSOD Windows 8 ntoskrnl.exe

[Mysers Briggs]

Can we try Driver Verifier as it is looking towards a misbehaving driver.

What is Driver Verifier?

Driver Verifier monitors Windows kernel-mode drivers, graphics drivers, and even 3rd party drivers to detect illegal function calls or actions that might corrupt the system. Driver Verifier can subject the Windows drivers to a variety of stresses and tests to find improper behavior.

Essentially, if there's a 3rd party driver believed to be causing the issues at hand, enabling Driver Verifier will help us see which specific driver is causing the problem.

Before enabling Driver Verifier, it is recommended to create a System Restore Point:

Vista - START | type rstrui - create a restore point
Windows 7 - START | type create | select "Create a Restore Point"

How to enable Driver Verifier:

Start > type "verifier" without the quotes > Select the following options -

1. Select - "Create custom settings (for code developers)"
2. Select - "Select individual settings from a full list"
3. Check the following boxes -
- Special Pool
- Pool Tracking
- Force IRQL Checking
- Deadlock Detection
- Security Checks (Windows 7 & 8/8.1)
- DDI compliance checking (Windows 8/8.1)
- Miscellaneous Checks
4. Select - "Select driver names from a list"
5. Click on the "Provider" tab. This will sort all of the drivers by the provider.
6. Check EVERY box that is NOT provided by Microsoft / Microsoft Corporation.
7. Click on Finish.
8. Restart.

Important information regarding Driver Verifier:

- If Driver Verifier finds a violation, the system will BSOD. To expand on this a bit more for the interested, specifically what Driver Verifier actually does is it looks for any driver making illegal function calls, causing memory leaks, etc. When and/if this happens, system corruption occurs if allowed to continue. When Driver Verifier is enabled per my instructions above, it is monitoring all 3rd party drivers (as we have it set that way) and when it catches a driver attempting to do this, it will quickly flag that driver as being a troublemaker, and bring down the system safely before any corruption can occur.

- After enabling Driver Verifier and restarting the system, depending on the culprit, if for example the driver is on start-up, you may not be able to get back into normal Windows because Driver Verifier will detect it in violation almost straight away, and as stated above, that will cause / force a BSOD.

If this happens, do not panic, do the following:

- Boot into Safe Mode by repeatedly tapping the F8 key during boot-up.

- Once in Safe Mode - Start > Search > type "cmd" without the quotes.

- To turn off Driver Verifier, type in cmd "verifier /reset" without the quotes.
Restart and boot into normal Windows.

If your OS became corrupt or you cannot boot into Windows after disabling verifier via Safe Mode:

- Boot into Safe Mode by repeatedly tapping the F8 key during boot-up.

- Once in Safe Mode - Start > type "system restore" without the quotes.

- Choose the restore point you created earlier.

-- Note that Safe Mode for Windows 8/8.1 is a bit different, and you may need to try different methods: 5 Ways to Boot into Safe Mode in Windows 8 & Windows 8.1

How long should I keep Driver Verifier enabled for?

I recommend keeping it enabled for at least 24 hours. If you don't BSOD by then, disable Driver Verifier. I will usually say whether or not I'd like for you to keep it enabled any longer.

My system BSOD'd with Driver Verifier enabled, where can I find the crash dumps?

- If you have the system set to generate Small Memory Dumps, they will be located in %systemroot%\Minidump.

- If you have the system set to generate Kernel-Memory Dumps, it will be located in %systemroot% and labeled MEMORY.DMP.

 

[softwaremaniac]

Please do try that and when your system crashes, upload a new dump file for us to analyze.

 

[roekori]

View attachment 55677

I didn't get any crashes running driver verifier, but everything was noticeably laggier, like games and such. I do have some more dump files from recent crashes though.

 

[softwaremaniac]

That's normal DV behaviour. Also, I see you have a Razer device plugged in, please detach it (or them, if several), and remove the drivers. I'd recommend testing with different manufacturer, just to eliminate Razer as the cause.

 

[roekori]

I literally JUST got my razer deathadder yesterday, I never had a razer program since. :x

 

[softwaremaniac]

Disable drivers in red and update your nvidia drivers

[COLOR=red][B]LGVirHid.sys Tue Nov 24 02:36:48 2009  (4B0B38B0)[/B][/COLOR] 
Logitech Gamepanel Virtual HID Device Driver 
[URL="http://www.carrona.org/drivers/driver.php?id=LGVirHid.sys"]http://www.carrona.org/drivers/driver.php?id=[B][COLOR=blue]LGVirHid.sys[/COLOR][/B][/URL] 

[COLOR=red][B]LGBusEnum.sys  Tue Nov 24 02:36:48 2009 (4B0B38B0)[/B][/COLOR] 
Logitech Keyboard 
[URL="http://www.carrona.org/drivers/driver.php?id=LGBusEnum.sys"]http://www.carrona.org/drivers/driver.php?id=[B][COLOR=blue]LGBusEnum.sys[/COLOR][/B][/URL] 

[COLOR=red][B]ASACPI.sys  Fri Nov 2 02:54:34 2012 (509327DA)[/B][/COLOR] 
Asus ATK0110 ACPI Utility (a  known [COLOR=red]BSOD[/COLOR] maker in Win7 and Win8). Also a part of many  Asus utilities (Win8 versions available from Windows Update as an Optional  Update - but check Asus first!) 
[URL="http://www.carrona.org/drivers/driver.php?id=ASACPI.sys"]http://www.carrona.org/drivers/driver.php?id=[B][COLOR=blue]ASACPI.sys[/COLOR][/B][/URL] 

ladfGSCamd64.sys Mon Apr 15  20:39:12 2013 (516C4950) 
Driver for the Logitech GSeries Headset 
[URL="http://www.carrona.org/drivers/driver.php?id=ladfGSCamd64.sys"]http://www.carrona.org/drivers/driver.php?id=[B][COLOR=blue]ladfGSCamd64.sys[/COLOR][/B][/URL] 

ladfGSRamd64.sys Mon Apr 15  20:39:15 2013 (516C4953) 
Driver for the Logitech GSeries Headset 
[URL="http://www.carrona.org/drivers/driver.php?id=ladfGSRamd64.sys"]http://www.carrona.org/drivers/driver.php?id=[B][COLOR=blue]ladfGSRamd64.sys[/COLOR][/B][/URL] 

tap0901.sys Thu Aug 22  14:40:01 2013 (521606A1) 
TAP-Win32 Adapter V9 or[br]OpenVPN driver or COMODO  
[URL="http://www.carrona.org/drivers/driver.php?id=tap0901.sys"]http://www.carrona.org/drivers/driver.php?id=[B][COLOR=blue]tap0901.sys[/COLOR][/B][/URL] 

rzpmgrk.sys Thu Apr 17 21:36:12  2014 (53502D2C) 

[COLOR=#777777][COLOR=#4b0082]rzpmgrk.sys[/COLOR] - this driver hasn't been added to the DRT as  of this run. Please search Google/Bing for the driver if additional information  is needed.[/COLOR] 

Rt64win7.sys Tue Jun 17 13:59:14 2014 (53A02D92)  
Realtek RTL8168D/8111D Family PCI-E Gigabit Ethernet NIC 
[URL="http://www.carrona.org/drivers/driver.php?id=Rt64win7.sys"]http://www.carrona.org/drivers/driver.php?id=[B][COLOR=blue]Rt64win7.sys[/COLOR][/B][/URL] 

rzendpt.sys Fri Sep 5 05:22:07  2014 (54092C5F) 
Razer RzEndPt driver 
[URL="http://www.carrona.org/drivers/driver.php?id=rzendpt.sys"]http://www.carrona.org/drivers/driver.php?id=[B][COLOR=blue]rzendpt.sys[/COLOR][/B][/URL] 

rzudd.sys Fri Sep 5 05:22:11 2014  (54092C63) 
Razer Rzudd Engine Driver 
[URL="http://www.carrona.org/drivers/driver.php?id=rzudd.sys"]http://www.carrona.org/drivers/driver.php?id=[B][COLOR=blue]rzudd.sys[/COLOR][/B][/URL] 

X6va028 Fri Sep 19 04:28:13 2014  (541B94BD) 

[COLOR=#777777][COLOR=#4b0082]X6va028[/COLOR] - this  driver hasn't been added to the DRT as of this run. Please search Google/Bing  for the driver if additional information is needed.[/COLOR] 

nvhda64v.sys  Thu Oct 9 19:02:27 2014 (5436BFA3) 
nVidia HDMI Audio Device (nForce chipset  driver) 
[URL="http://www.carrona.org/drivers/driver.php?id=nvhda64v.sys"]http://www.carrona.org/drivers/driver.php?id=[B][COLOR=blue]nvhda64v.sys[/COLOR][/B][/URL] 

rzpnk.sys Fri Oct 17 21:38:10  2014 (54417022) 
Razer Overlay Support 
[URL="http://www.carrona.org/drivers/driver.php?id=rzpnk.sys"]http://www.carrona.org/drivers/driver.php?id=[B][COLOR=blue]rzpnk.sys[/COLOR][/B][/URL] 

nvvad64v.sys Thu Nov 20 16:33:54  2014 (546E09E2) 
NVIDIA Virtual Audio Driver 
[URL="http://www.carrona.org/drivers/driver.php?id=nvvad64v.sys"]http://www.carrona.org/drivers/driver.php?id=[B][COLOR=blue]nvvad64v.sys[/COLOR][/B][/URL] 

[COLOR=red][B]NvStreamKms.sys Sat Nov 22 08:46:45 2014 (54703F65)[/B][/COLOR]  
nVidia Streaming Kernel service - may cause [COLOR=red]BSOD[/COLOR] in  Win8.1 systems (found in May 2014). Date/TimeStamp: Tue Apr 29 20:59:44 2014  (53604B00) [B]MAY NOT BE A PROBLEM, this is a tenative posting - Appears that  April 29 driver is a problem, July 2014 drivers seem OK[/B] 
[URL="http://www.carrona.org/drivers/driver.php?id=NvStreamKms.sys"]http://www.carrona.org/drivers/driver.php?id=[B][COLOR=blue]NvStreamKms.sys[/COLOR][/B][/URL] 

nvlddmkm.sys Sat Dec 13  07:53:17 2014 (548BE25D) 
nVidia Video drivers 
[URL="http://www.carrona.org/drivers/driver.php?id=nvlddmkm.sys"]http://www.carrona.org/drivers/driver.php?id=[B][COLOR=blue]nvlddmkm.sys[/COLOR][/B][/URL] 



Debug session time: Thu  Dec 25 07:02:54.574 2014 (UTC + 1:00) 
Loading Dump File  [C:\Users\Mihael\SysnativeBSODApps\122514-24421-01.dmp] 
Built by:  9600.17041.amd64fre.winblue_gdr.140305-1710 
System Uptime: 0 days  1:28:56.344 
Probably caused by : ntkrnlmp.exe ( nt!KiFastFailDispatch+d0 )  
BugCheck 139, {3, ffffd0002067fa20, ffffd0002067f978, 0} 
BugCheck Info:  [URL="http://www.carrona.org/bsodindx.html#0x00000139"]KERNEL_SECURITY_CHECK_FAILURE  (139)[/URL] 
Bugcheck code 00000139 
Arguments: 
Arg1: 0000000000000003,  A LIST_ENTRY has been corrupted (i.e. double remove). 
Arg2:  ffffd0002067fa20, Address of the trap frame for the exception that caused the  bugcheck 
Arg3: ffffd0002067f978, Address of the exception record for the  exception that caused the bugcheck 
Arg4: 0000000000000000, Reserved  
BUGCHECK_STR: 0x139 
DEFAULT_BUCKET_ID: LIST_ENTRY_CORRUPT  
PROCESS_NAME: System 
FAILURE_BUCKET_ID: 0x139_3_nt!KiFastFailDispatch  
BiosVersion = 0801 
BiosReleaseDate = 12/21/2011 
SystemManufacturer =  ASUSTeK Computer INC. 
SystemProductName = CM1630  
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``  
Debug session time: Mon Dec 22 09:19:07.543 2014 (UTC + 1:00) 
Loading  Dump File [C:\Users\Mihael\SysnativeBSODApps\122214-16296-01.dmp] 
Built by:  9600.17041.amd64fre.winblue_gdr.140305-1710 
System Uptime: 0 days  2:48:32.324 
Probably caused by : ntkrnlmp.exe ( nt! ??  ::FNODOBFM::`string'+1acf1 ) 
BugCheck 1A, {41284, 50a5000, 1bc5,  fffff58010804000} 
BugCheck Info: [URL="http://www.carrona.org/bsodindx.html#0x0000001A"]MEMORY_MANAGEMENT  (1a)[/URL] 
Bugcheck code 0000001A 
Arguments: 
Arg1: 0000000000041284, A  PTE or the working set list is corrupt. 
Arg2: 00000000050a5000 
Arg3:  0000000000001bc5 
Arg4: fffff58010804000 
BUGCHECK_STR: 0x1a_41284  
PROCESS_NAME: chrome.exe 
FAILURE_BUCKET_ID:  0x1a_41284_nt!_??_::FNODOBFM::_string_ 
BiosVersion = 0801  
BiosReleaseDate = 12/21/2011 
SystemManufacturer = ASUSTeK Computer INC.  
SystemProductName = CM1630  
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``  
Debug session time: Sat Dec 20 19:29:52.309 2014 (UTC + 1:00) 
Loading  Dump File [C:\Users\Mihael\SysnativeBSODApps\122014-17906-01.dmp] 
Built by:  9600.17041.amd64fre.winblue_gdr.140305-1710 
System Uptime: 0 days  6:07:42.362 
Probably caused by : dxgmms1.sys ( dxgmms1!operator delete+11 )  
BugCheck C2, {7, 1200, 30001, ffffe001a05956b0} 
BugCheck Info: [URL="http://www.carrona.org/bsodindx.html#0x000000C2"]BAD_POOL_CALLER (c2)[/URL]  
Bugcheck code 000000c2 
Arguments: 
Arg1: 0000000000000007, Attempt to  free pool which was already freed 
Arg2: 0000000000001200, (reserved)  
Arg3: 0000000000030001, Memory contents of the pool block 
Arg4:  ffffe001a05956b0, Address of the block of pool being deallocated  
BUGCHECK_STR: 0xc2_7_ViMm 
PROCESS_NAME: Wow-64.exe  
FAILURE_BUCKET_ID: 0xc2_7_ViMm_dxgmms1!operator_delete 
BiosVersion =  0801 
BiosReleaseDate = 12/21/2011 
SystemManufacturer = ASUSTeK Computer  INC. 
SystemProductName = CM1630  
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``  
Debug session time: Sat Dec 20 13:21:31.044 2014 (UTC + 1:00) 
Loading  Dump File [C:\Users\Mihael\SysnativeBSODApps\122014-16343-01.dmp] 
Built by:  9600.17041.amd64fre.winblue_gdr.140305-1710 
System Uptime: 1 days  7:47:22.173 
Probably caused by : memory_corruption (  nt!MiDemoteCombinedPte+42 ) 
BugCheck 1000007E, {ffffffffc0000005,  fffff8025f99b2a6, ffffd001a6a7f538, ffffd001a6a7ed40} 
BugCheck Info: [URL="http://www.carrona.org/bsodindx.html#0x1000007E"]SYSTEM_THREAD_EXCEPTION_NOT_HANDLED_M  (1000007e)[/URL] 
Bugcheck code 1000007E 
Arguments: 
Arg1:  ffffffffc0000005, The exception code that was not handled 
Arg2:  fffff8025f99b2a6, The address that the exception occurred at 
Arg3:  ffffd001a6a7f538, Exception Record Address 
Arg4: ffffd001a6a7ed40, Context  Record Address 
PROCESS_NAME: Wow-64.exe 
BUGCHECK_STR: AV  
DEFAULT_BUCKET_ID: WIN8_DRIVER_FAULT 
FAILURE_BUCKET_ID:  AV_nt!MiDemoteCombinedPte 
BiosVersion = 0801 
BiosReleaseDate =  12/21/2011 
SystemManufacturer = ASUSTeK Computer INC. 
SystemProductName  = CM1630  
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``  




--- E O J --- 2014 Dec 25 19:15:18 PM _88-dbug Copyright  2012 Sysnative Forums 
--- E O J --- 2014 Dec 25 19:15:18 PM _88-dbug  Copyright 2012 Sysnative Forums 
--- E O J --- 2014 Dec 25 19:15:18 PM  _88-dbug Copyright 2012 Sysnative Forums

 

[roekori]

How exactly do I disable the drivers?

 

[softwaremaniac]

Uninstall Logitech software for starters.