Frequent Random Crashes

usasma · Sep 24, 2014

I apologize for not responding to your 04 August post - I must've missed the notification!

Please run these reports again: http://www.eightforums.com/bsod-cra...e-screen-death-bsod-posting-instructions.html Please use Option 1 as it provides Event Viewer logs.

Also, Please do the following:
- open Event Viewer (run eventvwr.msc from the "Run" dialog))
- expand the Custom Views category (left click on the > next to the words "Custom Views")
- right click on Administrative Events
- select "Save all Events in Custom View as..."
- save the file as Admin.evtx
- zip up the file (right click on it, select "Send to", select "Compressed (zipped) folder")
- upload it with your next post (if it's too big, then upload it to a free file-hosting service and post a link here).

Aftershockjr · Sep 24, 2014

No problem

Thankfully nothing happened to my computer today. I followed option 1, both files are attached.

Thanks

usasma · Sep 25, 2014

No new memory dumps in the uploaded files.
That's a good thing (I hope!).

I'll be evaluating this as if it's a new case.
If I ask for things that you've already done, please let me know

Your BIOS dates from 2010. Please check at the manufacturer's website to see if there are any BIOS updates available for your system. Also check the readme file to see if they apply to the problems that you are having. Please be advised that flashing the BIOS is a very unforgiving process - and one mistake can physically damage your motherboard. If possible, use the "inside Windows" flash mechanism (if your OEM provides one).

There is a possibility that the system isn't compatible w/Win8 If this is the case, the way to make the system stable would be to revert to Win7 or earlier.

Only 164 Windows Updates installed. Most systems have 180 to 190 or more. Please visit Windows Update and get ALL available updates (it may take several trips to get them all).

This device has a problem in Device Manager:

Microsoft PS/2 Mouse ACPI\PNP0F03\4&DC382E&0 This device is not present, is not working properly, or does not have all its drivers installed.

If you are using a USB mouse, this error is safe to ignore.

I'm uncertain about your GameBooster program. The version that I'm familiar with (Razer GameBooster) is a known cause of BSOD's in some Windows systems - so I'd suggest that you uninstall it.

Try this:

Code:
Then please run the following DISM commands to see if there's any problems with the system (from an elevated (Run as administrator) Command Prompt). Press Enter after each one:

Code:

Dism /Online /Cleanup-Image /ScanHealth

Code:

Dism /Online /Cleanup-Image /CheckHealth

Code:

Dism /Online /Cleanup-Image /RestoreHealth

FYI - I have repaired systems using the last command even though problems weren't found with the first 2 - so I suggest running them all.

From this article: Repair a Windows Image

You can also run sfc.exe /scannow from an elevated (Run as administrator) Command Prompt to check for further corruption.

If that doesn't help, then I'm about out of ideas.
I'd have to suggest posting over in the General Support - Windows 8 Forums for further ideas

Aftershockjr · Sep 25, 2014

Yeah, it seems the computer doesn't get a chance to create a memory dump cause computer either freezes or the display turns off (at least that's how I think memory dumps work

)

I'll read through the readme files to check for any BIOS updates that mention this problem, I don't remember seeing it last time though.

Mouse is indeed a USB mouse though I might as well try and fix this.

I actually thought I uninstalled gameBooster ages ago, and then thought I uninstalled gameBooster before uploading the files yesterday (through revo Uninstaller). Either way it was uninstalled yesterday and maybe that's why I didn't have any problems turning on the computer today? (that's what I hope at least!)

I ran the commands as well. Appreciate your help.

Aftershockjr · Sep 29, 2014

Hmm, I just got a BSOD (first in a long time) and it looks like it is a new one. I know you said you are out of ideas but hopefully this BSOD leads to something (rather than black screens with no dump files).

Dump file is attached, "dxgkrnl.sys".

Thanks

Edit: I also should add that this occurred about an hour after start up (rather than within 10 minutes) and was just watching a video.

usasma · Sep 30, 2014

You still have the EgisTech/MyWinLocker stuff in the dump files (with the 2009 drivers)
The Egis Tech MyWinLocker program is still installed on your system.
Please try these things to get rid of it:
- uninstall it using the builtin uninstaller. This should be present in your Control Panel...Programs and Features...Uninstall a program

How to Uninstall
Select the MyWinLocker icon in the Control Panel to uninstall. Uninstalling MyWinLocker will prevent you from accessing your encrypted files and files in the Yo-Safe. It is strongly recommended that you decrypt all files and remove your files from the Yo-Safe before proceeding.

- if that doesn't work, then try installing a freshly downloaded copy, setting it up, and then uninstalling it using the Control Panel...Programs and Features...Uninstall a program
- if that doesn't work, post back and I'll provide some instructions on how to manually remove the drivers.

Analysis:
The following is for informational purposes only.

Code:

[FONT=lucida console]**************************Mon Sep 29 22:02:41.610 2014 (UTC - 4:00)**************************
Loading Dump File [C:\Users\John\SysnativeBSODApps\093014-19546-01.dmp]
Windows 8 Kernel Version 9200 MP (8 procs) Free x64
Built by: [B]9200[/B].16912.amd64fre.win8_gdr.140502-1507
System Uptime:[B]0 days 1:35:33.291[/B]
*** WARNING: Unable to verify timestamp for win32k.sys
*** ERROR: Module load completed but symbols could not be loaded for win32k.sys
Probably caused by :[B]memory_corruption[/B]
BugCheck [B]D1, {c79ba78, 6, 0, fffff8800425f7e4}[/B]
BugCheck Info: [URL="http://www.carrona.org/bsodindx.html#0x000000D1"]DRIVER_IRQL_NOT_LESS_OR_EQUAL (d1)[/URL]
Arguments: 
Arg1: 000000000c79ba78, memory referenced
Arg2: 0000000000000006, IRQL
Arg3: 0000000000000000, value 0 = read operation, 1 = write operation
Arg4: fffff8800425f7e4, address which referenced memory
BUGCHECK_STR:  AV
DEFAULT_BUCKET_ID:  CODE_CORRUPTION
PROCESS_NAME:  System
FAILURE_BUCKET_ID: [B]MEMORY_CORRUPTION_ONE_BIT[/B]
CPUID:        "Intel(R) Core(TM) i7 CPU         870  @ 2.93GHz"
MaxSpeed:     2930
CurrentSpeed: [B]2926[/B]
  BIOS Version                  P01-A3        
  BIOS Release Date             05/17/2010
  Manufacturer                  Acer
  Product Name                  Aspire M5910
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
[/FONT]

3rd Party Drivers:
The following is for information purposes only.
Any drivers in red should be updated or removed from your system. And should have been discussed in the body of my post.

Code:

[FONT=lucida console]**************************Mon Sep 29 22:02:41.610 2014 (UTC - 4:00)**************************
[COLOR=RED][B]mwlPSDFilter.sys    Tue Jun  2 06:07:30 2009 (4A24F9E2)[/B][/COLOR]
[COLOR=RED][B]mwlPSDNServ.sys     Tue Jun  2 06:07:39 2009 (4A24F9EB)[/B][/COLOR]
[COLOR=RED][B]mwlPSDVDisk.sys     Tue Jun  2 06:15:29 2009 (4A24FBC1)[/B][/COLOR]
RtsUStor.sys        Wed Aug 29 05:48:15 2012 (503DE55F)
[DEL]intelppm.sys        Mon Nov  5 22:55:02 2012 (50988A16)
[/DEL]speedfan.sys        Sat Dec 29 15:59:35 2012 (50DF59B7)
Rt630x64.sys        Thu Aug 15 02:23:59 2013 (520C73FF)


nvhda64v.sys        Thu Nov 28 08:38:09 2013 (52974741)
RTKVHD64.sys        Wed Mar 19 04:01:43 2014 (53294EE7)
nvvad64v.sys        Fri Mar 28 09:32:06 2014 (533579D6)
[DEL]dump_iaStorA.sys    Fri May  2 19:06:56 2014 (53642510)
[/DEL]iaStorA.sys         Fri May  2 19:06:56 2014 (53642510)
nvlddmkm.sys        Wed Jul  2 13:42:02 2014 (53B4446A)
NvStreamKms.sys     Fri Jul 25 07:35:56 2014 (53D2411C)
[/FONT]

Aftershockjr · Sep 30, 2014

Hmm, I thought I removed it with the uninstaller you showed me (Post 17). It's still not view able in the control panel, so I re installed the program and uninstalled it as you said. Is there a way to check if it's actually gone this time?

Thanks

usasma · Oct 1, 2014

Easiest way is to wait and see if it BSOD's again.

Aftershockjr · Oct 17, 2014

Hi again,

I finally seem to be getting more BSOD's that actually produce a dump file (rather than being stuck at 0% collection), would you mind taking a look at these?

Thanks

usasma · Oct 19, 2014

Stupid Windows! It shut my system down while I was posting (it had to install updates - and I'd postponed it as long as it would let me!).

Let's see if I can pickup where I was.

This looks like a low-level problem to me. In addition to the varying types of a memory dumps (which usually indicate a low-level problem), there are also very few 3rd party drivers in the memory dump. This is also usually an indicator that this may be a low-level problem - but it could also be a Windows problem (I think that it's much less likely tho' - as long as Windows is fully updated). The most likely causes are hardware, Windows Updates, or the outdated BIOS (IMO).

One thing that I noticed is that your intelppm.sys driver dates from 2012. The current version of this driver is dated from mid 2013 (I noticed it because the most current version dates from just before Win8.1 was released) I'm uncertain if the date is for a Win8.1 driver - or if it applies to Win8 systems also (most of the BSOD analysis that I do is for Win8.1). I'll try to locate a Win8 system at work today, then will update it and will check the version of the intelppm.sys driver there.

I would also suggest that you update your Realtek card reader and Realtek networking drivers to a more recent version (if available).

If the Acer website doesn't have a more recent version, try the Realtek site here:
Networking: Realtek
Card Reader: Realtek

Additionally, the Acer website shows a later version of the BIOS for your system (P01-A4). I'd suggest installing that also. Be very, very careful when updating the BIOS, as doing it incorrectly can harm the system (here's the exact quote: "Upgrading your system BIOS incorrectly could harm your Acer Product. Please proceed with caution.")

Analysis:
The following is for informational purposes only.

Code:

[FONT=lucida console]**************************Fri Oct 17 07:08:33.180 2014 (UTC - 4:00)**************************
Loading Dump File [C:\Users\John\SysnativeBSODApps\101714-19406-01.dmp]
Windows 8 Kernel Version 9200 MP (8 procs) Free x64
Built by: [B]9200[/B].16912.amd64fre.win8_gdr.140502-1507
System Uptime:[B]0 days 0:10:15.861[/B]
*** WARNING: Unable to verify timestamp for CLASSPNP.SYS
*** ERROR: Module load completed but symbols could not be loaded for CLASSPNP.SYS
*** WARNING: Unable to verify timestamp for win32k.sys
*** ERROR: Module load completed but symbols could not be loaded for win32k.sys
Probably caused by :[B]memory_corruption[/B]
BugCheck [B]1E, {ffffffffc000001d, fffff8800173f48f, fffffa800d8e5b00, 0}[/B]
BugCheck Info: [URL="http://www.carrona.org/bsodindx.html#0x0000001E"]KMODE_EXCEPTION_NOT_HANDLED (1e)[/URL]
Arguments: 
Arg1: ffffffffc000001d, The exception code that was not handled
Arg2: fffff8800173f48f, The address that the exception occurred at
Arg3: fffffa800d8e5b00, Parameter 0 of the exception
Arg4: 0000000000000000, Parameter 1 of the exception
BUGCHECK_STR:  0x1E_c000001d
PROCESS_NAME:  dwm.exe
FAILURE_BUCKET_ID: [B]MEMORY_CORRUPTION_ONE_BIT[/B]
CPUID:        "Intel(R) Core(TM) i7 CPU         870  @ 2.93GHz"
MaxSpeed:     2930
CurrentSpeed: [B]2926[/B]
  BIOS Version                  P01-A3        
  BIOS Release Date             05/17/2010
  Manufacturer                  Acer
  Product Name                  Aspire M5910
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
**************************Tue Oct 14 07:27:43.653 2014 (UTC - 4:00)**************************
Loading Dump File [C:\Users\John\SysnativeBSODApps\101414-18205-01.dmp]
Windows 8 Kernel Version 9200 MP (8 procs) Free x64
Built by: [B]9200[/B].16912.amd64fre.win8_gdr.140502-1507
System Uptime:[B]0 days 0:23:20.334[/B]
*** WARNING: Unable to verify timestamp for nvlddmkm.sys
*** ERROR: Module load completed but symbols could not be loaded for nvlddmkm.sys
*** WARNING: Unable to verify timestamp for win32k.sys
*** ERROR: Module load completed but symbols could not be loaded for win32k.sys
Probably caused by :[B]memory_corruption[/B]
BugCheck [B]1E, {ffffffffc000001d, fffff8800422cb60, fffff880019f0f00, 6}[/B]
BugCheck Info: [URL="http://www.carrona.org/bsodindx.html#0x0000001E"]KMODE_EXCEPTION_NOT_HANDLED (1e)[/URL]
Arguments: 
Arg1: ffffffffc000001d, The exception code that was not handled
Arg2: fffff8800422cb60, The address that the exception occurred at
Arg3: fffff880019f0f00, Parameter 0 of the exception
Arg4: 0000000000000006, Parameter 1 of the exception
BUGCHECK_STR:  0x1E_c000001d
PROCESS_NAME:  System
FAILURE_BUCKET_ID: [B]MEMORY_CORRUPTION_ONE_BIT[/B]
CPUID:        "Intel(R) Core(TM) i7 CPU         870  @ 2.93GHz"
MaxSpeed:     2930
CurrentSpeed: [B]2926[/B]
  BIOS Version                  P01-A3        
  BIOS Release Date             05/17/2010
  Manufacturer                  Acer
  Product Name                  Aspire M5910
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
**************************Tue Oct 14 07:01:09.658 2014 (UTC - 4:00)**************************
Loading Dump File [C:\Users\John\SysnativeBSODApps\101414-23306-01.dmp]
Windows 8 Kernel Version 9200 MP (8 procs) Free x64
Built by: [B]9200[/B].16912.amd64fre.win8_gdr.140502-1507
System Uptime:[B]0 days 0:21:03.339[/B]
Probably caused by :[B]ntkrnlmp.exe ( nt! ?? ::FNODOBFM::`string'+33f5a )[/B]
BugCheck [B]FC, {fffff8800a606b98, 80000001a8110963, fffff8800a606210, 2}[/B]
BugCheck Info: [URL="http://www.carrona.org/bsodindx.html#0x000000FC"]ATTEMPTED_EXECUTE_OF_NOEXECUTE_MEMORY (fc)[/URL]
Arguments: 
Arg1: fffff8800a606b98, Virtual address for the attempted execute.
Arg2: 80000001a8110963, PTE contents.
Arg3: fffff8800a606210, (reserved)
Arg4: 0000000000000002, (reserved)
BUGCHECK_STR:  0xFC
DEFAULT_BUCKET_ID:  WIN8_DRIVER_FAULT
PROCESS_NAME:  League of Lege
FAILURE_BUCKET_ID: [B]0xFC_nt!_??_::FNODOBFM::_string_[/B]
CPUID:        "Intel(R) Core(TM) i7 CPU         870  @ 2.93GHz"
MaxSpeed:     2930
CurrentSpeed: [B]2926[/B]
  BIOS Version                  P01-A3        
  BIOS Release Date             05/17/2010
  Manufacturer                  Acer
  Product Name                  Aspire M5910
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
**************************Tue Oct 14 06:33:52.485 2014 (UTC - 4:00)**************************
Loading Dump File [C:\Users\John\SysnativeBSODApps\101414-25818-01.dmp]
Windows 8 Kernel Version 9200 MP (8 procs) Free x64
Built by: [B]9200[/B].16912.amd64fre.win8_gdr.140502-1507
System Uptime:[B]0 days 1:01:44.166[/B]
*** WARNING: Unable to verify timestamp for win32k.sys
*** ERROR: Module load completed but symbols could not be loaded for win32k.sys
Probably caused by :[B]memory_corruption[/B]
BugCheck [B]1E, {ffffffffc000001d, fffff8035d58cba8, fffffa800d6d9b00, 2}[/B]
BugCheck Info: [URL="http://www.carrona.org/bsodindx.html#0x0000001E"]KMODE_EXCEPTION_NOT_HANDLED (1e)[/URL]
Arguments: 
Arg1: ffffffffc000001d, The exception code that was not handled
Arg2: fffff8035d58cba8, The address that the exception occurred at
Arg3: fffffa800d6d9b00, Parameter 0 of the exception
Arg4: 0000000000000002, Parameter 1 of the exception
BUGCHECK_STR:  0x1E_c000001d
PROCESS_NAME:  svchost.exe
FAILURE_BUCKET_ID: [B]MEMORY_CORRUPTION_STRIDE[/B]
CPUID:        "Intel(R) Core(TM) i7 CPU         870  @ 2.93GHz"
MaxSpeed:     2930
CurrentSpeed: [B]2926[/B]
  BIOS Version                  P01-A3        
  BIOS Release Date             05/17/2010
  Manufacturer                  Acer
  Product Name                  Aspire M5910
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
**************************Fri Oct 10 06:38:37.427 2014 (UTC - 4:00)**************************
Loading Dump File [C:\Users\John\SysnativeBSODApps\101014-17908-01.dmp]
Windows 8 Kernel Version 9200 MP (8 procs) Free x64
Built by: [B]9200[/B].16912.amd64fre.win8_gdr.140502-1507
System Uptime:[B]0 days 0:07:47.108[/B]
*** ERROR: Module load completed but symbols could not be loaded for mssmbios.sys
*** ERROR: Module load completed but symbols could not be loaded for Ntfs.sys
Probably caused by :[B]ntkrnlmp.exe ( nt!KiFastFailDispatch+d0 )[/B]
BugCheck [B]139, {3, fffff88003b25650, fffff88003b255a8, 0}[/B]
BugCheck Info: [URL="http://www.carrona.org/bsodindx.html#0x00000139"]KERNEL_SECURITY_CHECK_FAILURE (139)[/URL]
Arguments: 
Arg1: 0000000000000003, A LIST_ENTRY has been corrupted (i.e. double remove).
Arg2: fffff88003b25650, Address of the trap frame for the exception that caused the bugcheck
Arg3: fffff88003b255a8, Address of the exception record for the exception that caused the bugcheck
Arg4: 0000000000000000, Reserved
BUGCHECK_STR:  0x139
DEFAULT_BUCKET_ID:  LIST_ENTRY_CORRUPT
PROCESS_NAME:  chrome.exe
FAILURE_BUCKET_ID: [B]0x139_3_nt!KiFastFailDispatch[/B]
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
[/FONT]

3rd Party Drivers:
The following is for information purposes only.
Any drivers in red should be updated or removed from your system. And should have been discussed in the body of my post.

Code:

[FONT=lucida console]**************************Fri Oct 17 07:08:33.180 2014 (UTC - 4:00)**************************
RtsUStor.sys        Wed Aug 29 05:48:15 2012 (503DE55F)
intelppm.sys        Mon Nov  5 22:55:02 2012 (50988A16)
speedfan.sys        Sat Dec 29 15:59:35 2012 (50DF59B7)
Rt630x64.sys        Thu Aug 15 02:23:59 2013 (520C73FF)
RTKVHD64.sys        Wed Mar 19 04:01:43 2014 (53294EE7)
dump_iaStorA.sys    Fri May  2 19:06:56 2014 (53642510)
iaStorA.sys         Fri May  2 19:06:56 2014 (53642510)
nvhda64v.sys        Mon Jul 21 10:17:53 2014 (53CD2111)
nvvad64v.sys        Thu Sep  4 13:10:48 2014 (54089D18)
nvlddmkm.sys        Sat Sep 13 15:59:50 2014 (5414A236)
NvStreamKms.sys     Thu Oct  2 21:39:09 2014 (542DFE3D)
[/FONT]

Frequent Random Crashes

Mr. Cranky Pants

My Computer

New Member

My Computer

Mr. Cranky Pants

My Computer

New Member

My Computer

New Member

My Computer

Mr. Cranky Pants

My Computer

New Member

My Computer

Mr. Cranky Pants

My Computer

New Member

My Computer

Mr. Cranky Pants

My Computer