Solved Several BSOD crashes

turboman · Dec 24, 2012

Had a number of crashes 2 days ago. Yesterday was OK.

Today I had a crash with a text driver_overran_stack_buffer.
I ran the SF Diagonistic Tool but while running that, there was another crash with a text memory_management.

Here is the result (file turboman1) of the first crash (Tool did not run completely as it was stopped by the second crash)
Here is the result (file turboman2) of the second crash (Tool ran completely)

Thanks in advance for some help.

turboman · Dec 24, 2012

I got another crash. For the sake of completeness, I just post the result of the SF Diagnostic Tool of the latest crash (file turboman3).
I am driven to the wall. Hope to get some help soon. Thanks.

usasma · Dec 25, 2012

We've seen a number of BSOD issues with SSD's. Here's the information that I've compiled so far:

There's not a whole bunch available to test SSD's. The "easiest" test is to remove the SSD, install a platter-based hard drive, install Windows and test for stability that way.

Here's some suggestions:
- Update the SSD's firmware to the latest available version (VERY IMPORTANT!!!)
- Update the motherboard controllers drivers to the latest available version from the controller manufacturer (NOT the mobo manufacturer unless you can't find any on the controller manufacturer's website)
- Slow the memory (RAM) down to the next slower speed (I've only seen one person who claimed that this worked for them).
- Use any manufacturer's utilities that you may have. If you don't have any, then try this free one (I haven't used it myself): Crystal Dew World
- Update chipset and storage controller drivers to the latest available from the manufacturer of the device (not the manufacturer of the motherboard). Be sure to update ALL controllers on the motherboard!
....NOTE: Recently (Nov 2011) we had BSOD issues with the Marvell 91xx controller and an SSD. You may have to switch controllers also.
- Replace the SSD with a platter based hard drive and see if that stops the BSOD's. If it does, then it's likely that there's a problem with the SSD OR an incompatibility with your system.
It's my opinion that SSD's aren't reliable enough (with current hardware) to be used on a system that needs to work reliably. Until I see reliability I will not recommend, nor will I use, SSD's for critical applications.
06 Dec 2011 - This post tends to confirm issues with certain SSD chipsets and certain controllers - [SOLVED] cant find the cause of BSOD F4 - Tech Support Forum
29 May 2012 - The frequency of BSOD's with SSD's seems to have been decreasing over the last several months. It may be approaching time to re-evaluate my stand on their suitability for use in production systems.
10 Nov 2012 - I'm seeing an upswing in SSD errors - but most appear due to older storage controller drivers. I strongly suggest NOT using storage controller drivers that don't date from 2012 (if none are available, don't connect an SSD to that controller)

One of the memory dumps is a Stack Overrun - which is sometimes caused by malware. Please scan your system for malware. There's a list of free scans here: Free Online AntiMalware Resources I'm unsure which are Win8 compatible - but the bootable disks will work on any Windows OS.

Please uninstall the program (Corsair Link2) that uses this driver:
WinRing0x64.sys Sat Jul 26 09:29:37 2008 (488B26C1)
many different programs that center around the using of the WinRing libraries (found in Real Temp directory in this topic: Randomly Reoccurring BSOD - ntoskrnl.exe - Windows 7 Forums )
http://www.carrona.org/drivers/driver.php?id=WinRing0x64.sys

Please update these older drivers. Links are included to assist in looking up the source of the drivers. If unable to find an update, please remove (un-install) the program responsible for that driver. DO NOT manually delete/rename the driver as it may make the system unbootable! :

ASUSFILTER.sys Tue Sep 20 11:46:33 2011 (4E78B559)
ASUS USB Hub filter driver
http://www.carrona.org/drivers/driver.php?id=ASUSFILTER.sys

Analysis:
The following is for informational purposes only.

Code:

[FONT=lucida console]**************************Mon Dec 24 22:54:29.042 2012 (UTC - 5:00)**************************
Loading Dump File [C:\Users\John\_jcgriff2_\dbug\__Kernel__\122512-6796-01.dmp]
Windows 8 Kernel Version 9200 MP (4 procs) Free x64
Built by: [B]9200[/B].16461.amd64fre.win8_gdr.121119-1606
System Uptime:[B]0 days 0:03:12.676[/B]
Probably caused by :[B]ntkrnlmp.exe ( nt! ?? ::FNODOBFM::`string'+35d9c )[/B]
BugCheck [B]1A, {41793, fffff683ff44a180, 1, 0}[/B]
BugCheck Info: [URL="http://www.carrona.org/bsodindx.html#0x0000001A"]MEMORY_MANAGEMENT (1a)[/URL]
Arguments: 
Arg1: 0000000000041793, The subtype of the bugcheck.
Arg2: fffff683ff44a180
Arg3: 0000000000000001
Arg4: 0000000000000000
BUGCHECK_STR:  0x1a_41793
PROCESS_NAME: [B]svchost.exe[/B]
FAILURE_BUCKET_ID: [B]0x1a_41793_nt!_??_::FNODOBFM::_string_[/B]
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
**************************Mon Dec 24 19:36:02.746 2012 (UTC - 5:00)**************************
Loading Dump File [C:\Users\John\_jcgriff2_\dbug\__Kernel__\122512-7296-01.dmp]
Windows 8 Kernel Version 9200 MP (4 procs) Free x64
Built by: [B]9200[/B].16461.amd64fre.win8_gdr.121119-1606
System Uptime:[B]0 days 0:02:00.380[/B]
Probably caused by :[B]ntkrnlmp.exe ( nt! ?? ::FNODOBFM::`string'+35d9c )[/B]
BugCheck [B]1A, {41793, fffff68000027390, 73, 72}[/B]
BugCheck Info: [URL="http://www.carrona.org/bsodindx.html#0x0000001A"]MEMORY_MANAGEMENT (1a)[/URL]
Arguments: 
Arg1: 0000000000041793, The subtype of the bugcheck.
Arg2: fffff68000027390
Arg3: 0000000000000073
Arg4: 0000000000000072
BUGCHECK_STR:  0x1a_41793
PROCESS_NAME: [B]msinfo32.exe[/B]
FAILURE_BUCKET_ID: [B]0x1a_41793_nt!_??_::FNODOBFM::_string_[/B]
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
**************************Mon Dec 24 19:33:36.593 2012 (UTC - 5:00)**************************
Loading Dump File [C:\Users\John\_jcgriff2_\dbug\__Kernel__\122512-6687-01.dmp]
Windows 8 Kernel Version 9200 MP (4 procs) Free x64
Built by: [B]9200[/B].16461.amd64fre.win8_gdr.121119-1606
System Uptime:[B]0 days 13:36:30.028[/B]
Probably caused by :[B]ntkrnlmp.exe ( nt!_report_gsfailure+25 )[/B]
BugCheck [B]F7, {f4e06014097d, f4e0f314097d, ffff0b1f0cebf682, 0}[/B]
BugCheck Info: [URL="http://www.carrona.org/bsodindx.html#0x000000F7"]DRIVER_OVERRAN_STACK_BUFFER (f7)[/URL]
Arguments: 
Arg1: 0000f4e06014097d, Actual security check cookie from the stack
Arg2: 0000f4e0f314097d, Expected security check cookie
Arg3: ffff0b1f0cebf682, Complement of the expected security check cookie
Arg4: 0000000000000000, zero
BUGCHECK_STR:  0xF7
DEFAULT_BUCKET_ID:  GS_FALSE_POSITIVE_MISSING_GSFRAME
PROCESS_NAME: [B]RuntimeBroker.[/B]
FAILURE_BUCKET_ID: [B]0xF7_MISSING_GSFRAME_nt!_report_gsfailure[/B]
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
[/FONT]

3rd Party Drivers:
The following is for information purposes only.
Any drivers in red should be updated or removed from your system. And should have been discussed in the body of my post.

Code:

[FONT=lucida console]**************************Mon Dec 24 22:54:29.042 2012 (UTC - 5:00)**************************
[COLOR=RED][B]WinRing0x64.sys             Sat Jul 26 09:29:37 2008 (488B26C1)[/B][/COLOR]
[COLOR=RED][B]ASUSFILTER.sys              Tue Sep 20 11:46:33 2011 (4E78B559)[/B][/COLOR]
asahci64.sys                Thu Jan  5 00:08:19 2012 (4F053043)
RTKVHD64.sys                Tue Jun 12 06:02:32 2012 (4FD713B8)
HECIx64.sys                 Mon Jul  2 18:14:58 2012 (4FF21D62)
e1c63x64.sys                Thu Jul 12 17:46:10 2012 (4FFF45A2)
irstrtdv.sys                Thu Jul 12 19:58:02 2012 (4FFF648A)
asmtxhci.sys                Mon Aug 20 08:28:15 2012 (50322D5F)
asmthub3.sys                Mon Aug 20 08:28:29 2012 (50322D6D)
AsIO.sys                    Wed Aug 22 05:54:47 2012 (5034AC67)
iaStorA.sys                 Sat Sep  1 21:01:24 2012 (5042AFE4)
dump_iaStorA.sys            Sat Sep  1 21:01:24 2012 (5042AFE4)
igdkmd64.sys                Wed Sep 26 15:49:04 2012 (50635C30)
intelppm.sys                Mon Nov  5 22:55:02 2012 (50988A16)
[/FONT]

turboman · Dec 25, 2012

Wow John. That is a strong analysis. Thanks a lot.I will need some time to understand this and work on it to correct the problems.Thanks again.

turboman · Dec 25, 2012

hello John

I have now done the following:
- Updated new firmware for my Samsung SSD 840 PRO. That firmware came out about a week ago.
- Malware: I recovered an image I made of my SSD from 3 weeks ago, when had finished building my PC and with all software freshly installed. At that time, no problems so that should take care of the malware.
- Uninstall Corsair Link: I uninstalled all Corsair software.

Last item: asusfilter.sys. I uninstalled all Asus software in the Control Panel.
However afterwards, I checked the drive and asusfilter.sys was still found in 3 locations. However the Asus software is uninstalled in the Control Panel.
What do I do now? Leave it as it is? Or delete manually from the drive?
In the task manager, I also saw following processes and services associated with Asus still running:
Asus Fan Control Service
Asus System Control Service
Asus HM Com Service
Asus Com Service

Any advice? Thanks for the help!

usasma · Dec 26, 2012

The best thing to do is to wait and see.
If the BSOD's return, then we'll do some more - but in many cases this'll fix it.

Solved Several BSOD crashes

turboman

Member

My Computer

System One

turboman

Member

My Computer

System One

usasma

Mr. Cranky Pants

My Computer

System One

turboman

Member

My Computer

System One

turboman

Member

My Computer

System One

usasma

Mr. Cranky Pants

My Computer

System One