Windows 8 and 8.1 Forums


Windows 8 crash and restart after sleep or upon reboot

  1. #1


    Posts : 12
    Windows 8.1

    Windows 8 crash and restart after sleep or upon reboot


    Hi there,

    I have recently acquired a brand new PC, running windows 8 (details below), and have a recurring problem: after the computer goes into sleep mode mode, it crashes upon resuming, i.e. I get the message telling me there was an error and it needs to restart. I have had a variety of associated messsges accompanythig. I have since disabled sleep altogether. However, this mornig upon turning the PC on, it was forced to retart 3 times with the following errors:

    ATTEMPTED_EXECUTE_OF_NOEXECUTE_MEMORY

    KMODE_EXCEPTION_NOT_HANDLED

    PAGE_FAULT_IN_NONPAGE_AREA

    I have also had:

    DRIVE_CORRUPTED_EXPOOL

    I have updated my graphics driver just in case (since there is a flickering warped image on the side of the screen for a couple of seconds when the machine first boots up). Without success. I have tried looking at the dmp files with the debugger but without successfully identifying a driver. I am thinking now a clean Win8 install is the only way. Once the PC is running, it's fine and hasn't crashed mid-programme. It's only reboot/resume.

    Here're my system details:

    full dxdiag: https://skydrive.live.com/redir?resi...NGdyocmW8LN6Wo
    Crash dumps: https://skydrive.live.com/redir?resi...P5aIfkazHgekHs

    Operating System: Windows 8 64-bit (6.2, Build 9200) (9200.win8_gdr.130108-1504)
    Language: English (Regional Setting: English)
    System Manufacturer: Gigabyte Technology Co., Ltd.
    System Model: To be filled by O.E.M.
    BIOS: BIOS Date: 10/24/12 09:45:15 Ver: 04.06.05
    Processor: Intel(R) Core(TM) i5-3570K CPU @ 3.40GHz (4 CPUs), ~3.8GHz
    Memory: 8192MB RAM
    Available OS Memory: 8152MB RAM
    Page File: 1557MB used, 14786MB available
    Windows Dir: C:\Windows
    DirectX Version: DirectX 11
    DX Setup Parameters: Not found
    User DPI Setting: Using System DPI
    System DPI Setting: 96 DPI (100 percent)
    DWM DPI Scaling: Disabled
    xDiag Version: 6.02.9200.16384 64bit Unicode

      My System SpecsSystem Spec

  2. #2


    Posts : 5,139
    Win8.1Pro - Finally!!!


    Please provide this information so we can provide a complete analysis: Blue Screen of Death (BSOD) Posting Instructions

    Out of 10 memory dumps there were 7 different BSOD error codes. The differing error codes are usually symptomatic of a lower level problem within the system. They are usually caused by one of these things:
    - borked (broken) hardware (several different procedures used to isolate the problem device)
    - BIOS issues (check for updates at the motherboard manufacturer's website)
    - overclocking - You'll know if you're overclocking or not. If uncertain we can suggest things to check.
    - compatibility issues (3rd party hardware/drivers)
    - low-level driver problems
    - or even malware (scanned for when we ask for hardware diagnostics from Initial Hardware Diagnostics or Hardware Diagnostics ).

    Razer Lachesis.sys driver dates from 2007 - known BSOD cause. Please update to the latest, Win8 compatible driver from the Razer website. If no driver is available - uninstall the software and physically remove the device from your system for testing.

    Western Digital software (wdcsam64.sys) dates from 2008 and is a known BSOD cause. Please uninstall it.

    Please update these older drivers. Links are included to assist in looking up the source of the drivers. If unable to find an update, please remove (un-install) the program responsible for that driver. DO NOT manually delete/rename the driver as it may make the system unbootable! :

    HECIx64.sys Wed Nov 9 19:52:25 2011 (4EBB2049)
    Intel Management Engine Interface
    http://www.carrona.org/drivers/driver.php?id=HECIx64.sys

    If this doesn't stop the BSOD's, please start with these free hardware diagnostics: Hardware Diagnostics

    Analysis:
    The following is for informational purposes only.
    Code:
    **************************Tue Apr  2 08:10:41.442 2013 (UTC - 4:00)**************************
    Loading Dump File [C:\Users\Owner\SysnativeBSODApps\040213-3453-02.dmp]
    Windows 8 Kernel Version 9200 MP (4 procs) Free x64
    Built by: 9200.16496.amd64fre.win8_gdr.130108-1504
    System Uptime:0 days 0:00:20.079
    *** WARNING: Unable to verify timestamp for atikmdag.sys
    *** ERROR: Module load completed but symbols could not be loaded for atikmdag.sys
    Probably caused by :atikmdag.sys ( atikmdag+91601 )
    BugCheck 50, {fffffa0008451990, 1, fffff88003b4c601, 2}
    BugCheck Info: PAGE_FAULT_IN_NONPAGED_AREA (50)
    Arguments: 
    Arg1: fffffa0008451990, memory referenced.
    Arg2: 0000000000000001, value 0 = read operation, 1 = write operation.
    Arg3: fffff88003b4c601, If non-zero, the instruction address which referenced the bad memory
        address.
    Arg4: 0000000000000002, (reserved)
    BUGCHECK_STR:  AV
    DEFAULT_BUCKET_ID:  WIN8_DRIVER_FAULT
    PROCESS_NAME:  System
    FAILURE_BUCKET_ID: AV_atikmdag+91601
    CPUID:        "Intel(R) Core(TM) i5-3570K CPU @ 3.40GHz"
    MaxSpeed:     3400
    CurrentSpeed: 3403
      BIOS Version                  F16
      BIOS Release Date             10/24/2012
      Manufacturer                  Gigabyte Technology Co., Ltd.
      Product Name                  To be filled by O.E.M.
    ииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииии``
    **************************Tue Apr  2 08:09:59.357 2013 (UTC - 4:00)**************************
    Loading Dump File [C:\Users\Owner\SysnativeBSODApps\040213-3953-01.dmp]
    Windows 8 Kernel Version 9200 MP (4 procs) Free x64
    Built by: 9200.16496.amd64fre.win8_gdr.130108-1504
    System Uptime:0 days 0:00:29.993
    Probably caused by :ntkrnlmp.exe ( nt! ?? ::FNODOBFM::`string'+689c )
    BugCheck 1E, {ffffffffc0000005, fffff802c75bc65e, 0, ffffffffffffffff}
    BugCheck Info: KMODE_EXCEPTION_NOT_HANDLED (1e)
    Arguments: 
    Arg1: ffffffffc0000005, The exception code that was not handled
    Arg2: fffff802c75bc65e, The address that the exception occurred at
    Arg3: 0000000000000000, Parameter 0 of the exception
    Arg4: ffffffffffffffff, Parameter 1 of the exception
    BUGCHECK_STR:  0x1E_c0000005_R
    PROCESS_NAME:  LiveComm.exe
    FAILURE_BUCKET_ID: 0x1E_c0000005_R_nt!_??_::FNODOBFM::_string_
    CPUID:        "Intel(R) Core(TM) i5-3570K CPU @ 3.40GHz"
    MaxSpeed:     3400
    CurrentSpeed: 3403
      BIOS Version                  F16
      BIOS Release Date             10/24/2012
      Manufacturer                  Gigabyte Technology Co., Ltd.
      Product Name                  To be filled by O.E.M.
    ииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииии``
    **************************Tue Apr  2 08:09:07.481 2013 (UTC - 4:00)**************************
    Loading Dump File [C:\Users\Owner\SysnativeBSODApps\040213-3453-01.dmp]
    Windows 8 Kernel Version 9200 MP (4 procs) Free x64
    Built by: 9200.16496.amd64fre.win8_gdr.130108-1504
    System Uptime:0 days 13:52:58.640
    Probably caused by :win32k.sys ( win32k!EngCopyBits+a06 )
    BugCheck FC, {fffff88005241a99, 8000000113ffc963, fffff88005241890, 2}
    BugCheck Info: ATTEMPTED_EXECUTE_OF_NOEXECUTE_MEMORY (fc)
    Arguments: 
    Arg1: fffff88005241a99, Virtual address for the attempted execute.
    Arg2: 8000000113ffc963, PTE contents.
    Arg3: fffff88005241890, (reserved)
    Arg4: 0000000000000002, (reserved)
    BUGCHECK_STR:  0xFC
    DEFAULT_BUCKET_ID:  WIN8_DRIVER_FAULT
    PROCESS_NAME:  WWAHost.exe
    FAILURE_BUCKET_ID: 0xFC_win32k!EngCopyBits
    CPUID:        "Intel(R) Core(TM) i5-3570K CPU @ 3.40GHz"
    MaxSpeed:     3400
    CurrentSpeed: 3403
      BIOS Version                  F16
      BIOS Release Date             10/24/2012
      Manufacturer                  Gigabyte Technology Co., Ltd.
      Product Name                  To be filled by O.E.M.
    ииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииии``
    **************************Sun Mar 31 07:42:44.974 2013 (UTC - 4:00)**************************
    Loading Dump File [C:\Users\Owner\SysnativeBSODApps\033113-5406-01.dmp]
    Windows 8 Kernel Version 9200 MP (4 procs) Free x64
    Built by: 9200.16496.amd64fre.win8_gdr.130108-1504
    System Uptime:0 days 5:05:51.604
    Probably caused by :memory_corruption ( nt!MiDemoteCombinedPte+3d )
    BugCheck 1000007E, {ffffffffc0000005, fffff801f3b3079d, fffff88002b6a618, fffff88002b69e50}
    BugCheck Info: SYSTEM_THREAD_EXCEPTION_NOT_HANDLED_M (1000007e)
    Arguments: 
    Arg1: ffffffffc0000005, The exception code that was not handled
    Arg2: fffff801f3b3079d, The address that the exception occurred at
    Arg3: fffff88002b6a618, Exception Record Address
    Arg4: fffff88002b69e50, Context Record Address
    PROCESS_NAME:  AvastUI.exe
    BUGCHECK_STR:  AV
    DEFAULT_BUCKET_ID:  WIN8_DRIVER_FAULT
    FAILURE_BUCKET_ID: AV_nt!MiDemoteCombinedPte
    CPUID:        "Intel(R) Core(TM) i5-3570K CPU @ 3.40GHz"
    MaxSpeed:     3400
    CurrentSpeed: 3403
      BIOS Version                  F16
      BIOS Release Date             10/24/2012
      Manufacturer                  Gigabyte Technology Co., Ltd.
      Product Name                  To be filled by O.E.M.
    ииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииии``
    **************************Sun Mar 31 02:36:27.566 2013 (UTC - 4:00)**************************
    Loading Dump File [C:\Users\Owner\SysnativeBSODApps\033113-3859-01.dmp]
    Windows 8 Kernel Version 9200 MP (4 procs) Free x64
    Built by: 9200.16496.amd64fre.win8_gdr.130108-1504
    System Uptime:0 days 0:00:47.203
    Probably caused by :ntkrnlmp.exe ( nt! ?? ::FNODOBFM::`string'+33462 )
    BugCheck 1A, {41201, fffff6800006e848, 8e60000374f5a867, fffffa8009f5e600}
    BugCheck Info: MEMORY_MANAGEMENT (1a)
    Arguments: 
    Arg1: 0000000000041201, The subtype of the bugcheck.
    Arg2: fffff6800006e848
    Arg3: 8e60000374f5a867
    Arg4: fffffa8009f5e600
    BUGCHECK_STR:  0x1a_41201
    PROCESS_NAME:  firefox.exe
    FAILURE_BUCKET_ID: 0x1a_41201_nt!_??_::FNODOBFM::_string_
    CPUID:        "Intel(R) Core(TM) i5-3570K CPU @ 3.40GHz"
    MaxSpeed:     3400
    CurrentSpeed: 3403
      BIOS Version                  F16
      BIOS Release Date             10/24/2012
      Manufacturer                  Gigabyte Technology Co., Ltd.
      Product Name                  To be filled by O.E.M.
    ииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииии``
    **************************Sun Mar 31 02:35:12.001 2013 (UTC - 4:00)**************************
    Loading Dump File [C:\Users\Owner\SysnativeBSODApps\033113-3421-01.dmp]
    Windows 8 Kernel Version 9200 MP (4 procs) Free x64
    Built by: 9200.16496.amd64fre.win8_gdr.130108-1504
    System Uptime:0 days 2:47:12.630
    Probably caused by :memory_corruption ( nt!MiCaptureAndResetWorkingSetAccessBits+d3 )
    BugCheck 50, {fffff6806322a8f0, 0, fffff80335d935e3, 2}
    BugCheck Info: PAGE_FAULT_IN_NONPAGED_AREA (50)
    Arguments: 
    Arg1: fffff6806322a8f0, memory referenced.
    Arg2: 0000000000000000, value 0 = read operation, 1 = write operation.
    Arg3: fffff80335d935e3, If non-zero, the instruction address which referenced the bad memory
        address.
    Arg4: 0000000000000002, (reserved)
    BUGCHECK_STR:  AV
    DEFAULT_BUCKET_ID:  WIN8_DRIVER_FAULT
    PROCESS_NAME:  svchost.exe
    FAILURE_BUCKET_ID: AV_nt!MiCaptureAndResetWorkingSetAccessBits
    CPUID:        "Intel(R) Core(TM) i5-3570K CPU @ 3.40GHz"
    MaxSpeed:     3400
    CurrentSpeed: 3403
      BIOS Version                  F16
      BIOS Release Date             10/24/2012
      Manufacturer                  Gigabyte Technology Co., Ltd.
      Product Name                  To be filled by O.E.M.
    ииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииии``
    **************************Sat Mar 30 21:59:43.491 2013 (UTC - 4:00)**************************
    Loading Dump File [C:\Users\Owner\SysnativeBSODApps\033113-4218-01.dmp]
    Windows 8 Kernel Version 9200 MP (4 procs) Free x64
    Built by: 9200.16496.amd64fre.win8_gdr.130108-1504
    System Uptime:0 days 12:30:24.102
    Probably caused by :memory_corruption ( nt!MiDeletePfnList+128 )
    BugCheck 50, {fffffa801b53cab8, 0, fffff802560c9438, 2}
    BugCheck Info: PAGE_FAULT_IN_NONPAGED_AREA (50)
    Arguments: 
    Arg1: fffffa801b53cab8, memory referenced.
    Arg2: 0000000000000000, value 0 = read operation, 1 = write operation.
    Arg3: fffff802560c9438, If non-zero, the instruction address which referenced the bad memory
        address.
    Arg4: 0000000000000002, (reserved)
    BUGCHECK_STR:  AV
    DEFAULT_BUCKET_ID:  WIN8_DRIVER_FAULT
    PROCESS_NAME:  WWAHost.exe
    FAILURE_BUCKET_ID: AV_nt!MiDeletePfnList
    CPUID:        "Intel(R) Core(TM) i5-3570K CPU @ 3.40GHz"
    MaxSpeed:     3400
    CurrentSpeed: 3403
      BIOS Version                  F16
      BIOS Release Date             10/24/2012
      Manufacturer                  Gigabyte Technology Co., Ltd.
      Product Name                  To be filled by O.E.M.
    ииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииии``
    **************************Sat Mar 30 09:28:53.048 2013 (UTC - 4:00)**************************
    Loading Dump File [C:\Users\Owner\SysnativeBSODApps\033013-3984-01.dmp]
    Windows 8 Kernel Version 9200 MP (4 procs) Free x64
    Built by: 9200.16496.amd64fre.win8_gdr.130108-1504
    System Uptime:0 days 0:01:01.685
    Probably caused by :memory_corruption ( nt!MiBadShareCount+4b )
    BugCheck 4E, {99, 361f39, 0, 0}
    BugCheck Info: PFN_LIST_CORRUPT (4e)
    Arguments: 
    Arg1: 0000000000000099, A PTE or PFN is corrupt
    Arg2: 0000000000361f39, page frame number
    Arg3: 0000000000000000, current page state
    Arg4: 0000000000000000, 0
    BUGCHECK_STR:  0x4E_99
    PROCESS_NAME:  explorer.exe
    FAILURE_BUCKET_ID: 0x4E_99_nt!MiBadShareCount
    CPUID:        "Intel(R) Core(TM) i5-3570K CPU @ 3.40GHz"
    MaxSpeed:     3400
    CurrentSpeed: 3403
      BIOS Version                  F16
      BIOS Release Date             10/24/2012
      Manufacturer                  Gigabyte Technology Co., Ltd.
      Product Name                  To be filled by O.E.M.
    ииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииии``
    **************************Fri Mar 29 01:48:56.235 2013 (UTC - 4:00)**************************
    Loading Dump File [C:\Users\Owner\SysnativeBSODApps\032913-3265-01.dmp]
    Windows 8 Kernel Version 9200 MP (4 procs) Free x64
    Built by: 9200.16384.amd64fre.win8_rtm.120725-1247
    System Uptime:0 days 0:01:01.872
    Probably caused by :ntkrnlmp.exe ( nt!NtSetSystemPowerState+878 )
    BugCheck C000021A, {fffff8a000ab3080, 0, ffffffffc0000001, 5569a607c0}
    BugCheck Info: WINLOGON_FATAL_ERROR (c000021a)
    Arguments: 
    Arg1: fffff8a000ab3080, String that identifies the problem.
    Arg2: 0000000000000000, Error Code.
    Arg3: ffffffffc0000001
    Arg4: 0000005569a607c0
    Arg2: 0000000000000000, Error Code.
    BUGCHECK_STR:  0xc000021a_0
    PROCESS_NAME:  smss.exe
    FAILURE_BUCKET_ID: 0xc000021a_0_nt!NtSetSystemPowerState
    CPUID:        "Intel(R) Core(TM) i5-3570K CPU @ 3.40GHz"
    MaxSpeed:     3400
    CurrentSpeed: 3403
      BIOS Version                  F16
      BIOS Release Date             10/24/2012
      Manufacturer                  Gigabyte Technology Co., Ltd.
      Product Name                  To be filled by O.E.M.
    ииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииии``
    **************************Fri Mar 29 01:46:05.359 2013 (UTC - 4:00)**************************
    Loading Dump File [C:\Users\Owner\SysnativeBSODApps\032913-3515-01.dmp]
    Windows 8 Kernel Version 9200 MP (4 procs) Free x64
    Built by: 9200.16384.amd64fre.win8_rtm.120725-1247
    System Uptime:0 days 13:08:33.539
    Probably caused by :memory_corruption ( nt!MiBadShareCount+4b )
    BugCheck 4E, {99, 34b980, 0, 0}
    BugCheck Info: PFN_LIST_CORRUPT (4e)
    Arguments: 
    Arg1: 0000000000000099, A PTE or PFN is corrupt
    Arg2: 000000000034b980, page frame number
    Arg3: 0000000000000000, current page state
    Arg4: 0000000000000000, 0
    BUGCHECK_STR:  0x4E_99
    PROCESS_NAME:  svchost.exe
    FAILURE_BUCKET_ID: 0x4E_99_nt!MiBadShareCount
    CPUID:        "Intel(R) Core(TM) i5-3570K CPU @ 3.40GHz"
    MaxSpeed:     3400
    CurrentSpeed: 3403
      BIOS Version                  F16
      BIOS Release Date             10/24/2012
      Manufacturer                  Gigabyte Technology Co., Ltd.
      Product Name                  To be filled by O.E.M.
    ииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииии``
    
    3rd Party Drivers:
    The following is for information purposes only.
    Any drivers in red should be updated or removed from your system. And should have been discussed in the body of my post.
    Code:
    **************************Tue Apr  2 08:10:41.442 2013 (UTC - 4:00)**************************
    HECIx64.sys                 Wed Nov  9 19:52:25 2011 (4EBB2049)
    L1C63x64.sys                Wed Feb 15 01:55:09 2012 (4F3B56CD)
    athrx.sys                   Wed Mar 21 23:26:22 2012 (4F6A9BDE)
    dump_storahci.sys           Wed Jul 25 22:30:35 2012 (5010ABCB)
    SaiU1703.sys                Thu Sep 20 06:03:52 2012 (505AEA08)
    SaiK1703.sys                Thu Sep 20 06:03:56 2012 (505AEA0C)
    SaiK8020.sys                Mon Oct 15 05:23:11 2012 (507BD5FF)
    intelppm.sys                Mon Nov  5 22:55:02 2012 (50988A16)
    AtihdW86.sys                Wed Dec 12 12:20:30 2012 (50C8BCDE)
    atikmpag.sys                Wed Dec 19 14:32:55 2012 (50D21667)
    atikmdag.sys                Wed Dec 19 15:38:55 2012 (50D225DF)
    SaiBus.sys                  Thu Jan 31 12:50:38 2013 (510AAEEE)
    SaiMini.sys                 Thu Jan 31 12:50:38 2013 (510AAEEE)
    ииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииии``
    **************************Sun Mar 31 07:42:44.974 2013 (UTC - 4:00)**************************
    wdcsam64.sys                Wed Apr 16 04:39:08 2008 (4805BB2C)
    hiber_storahci.sys          Wed Jul 25 22:30:35 2012 (5010ABCB)
    aswRvrt.sys                 Wed Mar  6 18:21:43 2013 (5137CF87)
    aswFsBlk.SYS                Wed Mar  6 18:22:01 2013 (5137CF99)
    aswMonFlt.sys               Wed Mar  6 18:22:08 2013 (5137CFA0)
    aswTdi.SYS                  Wed Mar  6 18:22:10 2013 (5137CFA2)
    aswrdr2.sys                 Wed Mar  6 18:22:24 2013 (5137CFB0)
    aswSP.SYS                   Wed Mar  6 18:23:05 2013 (5137CFD9)
    aswSnx.SYS                  Wed Mar  6 18:23:10 2013 (5137CFDE)
    ииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииии``
    **************************Sat Mar 30 21:59:43.491 2013 (UTC - 4:00)**************************
    intelppm.sys                Wed Jul 25 22:26:48 2012 (5010AAE8)
    ииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииии``
    **************************Fri Mar 29 01:46:05.359 2013 (UTC - 4:00)**************************
    Lachesis.sys                Fri Aug 17 03:48:44 2007 (46C552DC)
    
    http://www.carrona.org/drivers/driver.php?id=HECIx64.sys
    http://www.carrona.org/drivers/driver.php?id=L1C63x64.sys
    http://www.carrona.org/drivers/driver.php?id=athrx.sys
    http://www.carrona.org/drivers/driver.php?id=dump_storahci.sys
    SaiU1703.sys - this driver hasn't been added to the DRT as of this run. Please search Google/Bing for the driver if additional information is needed.
    SaiK1703.sys - this driver hasn't been added to the DRT as of this run. Please search Google/Bing for the driver if additional information is needed.
    http://www.carrona.org/drivers/driver.php?id=SaiK8020.sys
    http://www.carrona.org/drivers/driver.php?id=intelppm.sys
    http://www.carrona.org/drivers/driver.php?id=AtihdW86.sys
    http://www.carrona.org/drivers/driver.php?id=atikmpag.sys
    http://www.carrona.org/drivers/driver.php?id=atikmdag.sys
    http://www.carrona.org/drivers/driver.php?id=SaiBus.sys
    http://www.carrona.org/drivers/driver.php?id=SaiMini.sys
    http://www.carrona.org/drivers/driver.php?id=wdcsam64.sys
    http://www.carrona.org/drivers/driver.php?id=hiber_storahci.sys
    aswRvrt.sys - this driver hasn't been added to the DRT as of this run. Please search Google/Bing for the driver if additional information is needed.
    http://www.carrona.org/drivers/driver.php?id=aswFsBlk.SYS
    http://www.carrona.org/drivers/driver.php?id=aswMonFlt.sys
    http://www.carrona.org/drivers/driver.php?id=aswTdi.SYS
    aswrdr2.sys - this driver hasn't been added to the DRT as of this run. Please search Google/Bing for the driver if additional information is needed.
    http://www.carrona.org/drivers/driver.php?id=aswSP.SYS
    http://www.carrona.org/drivers/driver.php?id=aswSnx.SYS
    http://www.carrona.org/drivers/driver.php?id=intelppm.sys
    http://www.carrona.org/drivers/driver.php?id=Lachesis.sys
      My System SpecsSystem Spec

  3. #3


    Posts : 12
    Windows 8.1


    Thank you so much for information thus far, and I apologise for missing the posting guidelines. I will make a start on your suggestions right. In the mean time, here is the file from SF Diagnostic Tool

    https://skydrive.live.com/redir?resi...FmTqvws0SpduTo
      My System SpecsSystem Spec

  4. #4


    Posts : 5,139
    Win8.1Pro - Finally!!!


    We've seen a number of BSOD issues with SSD's. Here's the information that I've compiled so far:
    There's not a whole bunch available to test SSD's. The "easiest" test is to remove the SSD, install a platter-based hard drive, install Windows and test for stability that way.

    Here's some suggestions:
    - Update the SSD's firmware to the latest available version (VERY IMPORTANT!!!)
    - Update the motherboard controllers drivers to the latest available version from the controller manufacturer (NOT the mobo manufacturer unless you can't find any on the controller manufacturer's website). Be sure to update ALL controllers on the motherboard! I STRONGLY suggest not using controller drivers older than mid-2012 with SSD's.
    - Slow the memory (RAM) down to the next slower speed (I've only seen one person who claimed that this worked for them).
    - Use any manufacturer's utilities that you may have. If you don't have any, then try this free one (I haven't used it myself): Crystal Dew World
    ....NOTE: Recently (Nov 2011) we had BSOD issues with the Marvell 91xx controller and an SSD. You may have to switch controllers also.
    - Replace the SSD with a platter based hard drive and see if that stops the BSOD's. If it does, then it's likely that there's a problem with the SSD OR an incompatibility with your system.
    06 Dec 2011 - This post tends to confirm issues with certain SSD chipsets and certain controllers - [SOLVED] cant find the cause of BSOD F4 - Tech Support Forum
    05 Jan 2013 - very interesting post about difficulties with the Marvell controllers even when not connected to the SSD drives: https://www.eightforums.com/bsod-cra...tml#post169956
    27 Feb 2013 - I'm starting to see much better reliability with SSD's using current (mid-2012 and later) storage drivers. I have withdrawn my objections to using these devices in everyday systems.
    Please note the dump_storahci.sys driver in the last memory dump, and the hiber_storahci.sys driver in the one before that. They are both built from the storahci.sys driver - which makes the storage sub-system a suspect in the last 2 crashes (which includes the motherboard storage controller(s) and the SSD)
      My System SpecsSystem Spec

  5. #5


    Posts : 12
    Windows 8.1


    Ok, so i followed your advice and deleted/updated relevant drivers, ran a memtest (all clear) and a full scan for malware (clear. Also removed Avast entirely, for now). And after performing several restarts and resumes from sleep, there doesn't seem to be any problem!

    Thank you ever so mcuh for your very useful, and swift, help! It's immensley appreciated!
      My System SpecsSystem Spec

  6. #6


    Posts : 5,139
    Win8.1Pro - Finally!!!


    I'm glad to have been of help.
    Thanks for the kind words!
      My System SpecsSystem Spec

  7. #7


    Posts : 12
    Windows 8.1


    And just when everything was going so well... I have been experiencing some more random BSODs. I re-ran the memtest (all clear) and malware scan (all clear), as well as drive diagnostics for my western digital (HDD) and samsung (SSD) devices, both of which passed. I also went and checked that the BIOS was up to date and it is.

    SF Files here: http://sdrv.ms/ZyQ9nX

    I'm not terribly techy minded but I had a look at MEMORY.DMP in the debugger after setting the computer to do a complete memory dump upon failure, and came up with a memory_corruption error from this:

    Code:
    Microsoft (R) Windows Debugger Version 6.2.9200.16384 X86
    Copyright (c) Microsoft Corporation. All rights reserved.
    
    
    
    
    Loading Dump File [C:\Windows\MEMORY.DMP]
    Kernel Bitmap Dump File: Full address space is available
    
    
    Symbol search path is: srv*
    Executable search path is: srv*
    Windows 8 Kernel Version 9200 MP (4 procs) Free x64
    Product: WinNt, suite: TerminalServer SingleUserTS Personal
    Built by: 9200.16496.amd64fre.win8_gdr.130108-1504
    Machine Name:
    Kernel base = 0xfffff801`96872000 PsLoadedModuleList = 0xfffff801`96b3ba80
    Debug session time: Tue Apr  9 07:27:23.310 2013 (UTC + 1:00)
    System Uptime: 0 days 0:07:15.946
    Loading Kernel Symbols
    ...............................................................
    ................................................................
    ..........................
    Loading User Symbols
    PEB is paged out (Peb.Ldr = 00000000`7f6ec018).  Type ".hh dbgerr001" for details
    Loading unloaded module list
    ........
    *******************************************************************************
    *                                                                             *
    *                        Bugcheck Analysis                                    *
    *                                                                             *
    *******************************************************************************
    
    
    Use !analyze -v to get detailed debugging information.
    
    
    BugCheck 4E, {99, 317a19, 0, 0}
    
    
    Probably caused by : memory_corruption ( nt!MiBadShareCount+4b )
    
    
    Followup: MachineOwner
    ---------
    
    
    1: kd> !analyze -v
    *******************************************************************************
    *                                                                             *
    *                        Bugcheck Analysis                                    *
    *                                                                             *
    *******************************************************************************
    
    
    PFN_LIST_CORRUPT (4e)
    Typically caused by drivers passing bad memory descriptor lists (ie: calling
    MmUnlockPages twice with the same list, etc).  If a kernel debugger is
    available get the stack trace.
    Arguments:
    Arg1: 0000000000000099, A PTE or PFN is corrupt
    Arg2: 0000000000317a19, page frame number
    Arg3: 0000000000000000, current page state
    Arg4: 0000000000000000, 0
    
    
    Debugging Details:
    ------------------
    
    
    
    
    BUGCHECK_STR:  0x4E_99
    
    
    DEFAULT_BUCKET_ID:  WIN8_DRIVER_FAULT
    
    
    PROCESS_NAME:  chrome.exe
    
    
    CURRENT_IRQL:  2
    
    
    LAST_CONTROL_TRANSFER:  from fffff801969f9983 to fffff801968ec040
    
    
    STACK_TEXT:  
    fffff880`0a484d48 fffff801`969f9983 : 00000000`0000004e 00000000`00000099 00000000`00317a19 00000000`00000000 : nt!KeBugCheckEx
    fffff880`0a484d50 fffff801`968c38ce : 00000000`00000002 fffffa80`00000000 2fe00001`352cc005 00000000`00000000 : nt!MiBadShareCount+0x4b
    fffff880`0a484d90 fffff801`968c1029 : fffffa80`091ac940 fffff880`012db600 fffff880`0000623a 00000001`00000005 : nt!MiDeletePfnList+0x5c3
    fffff880`0a484e70 fffff801`968c98dd : fffffa80`091ac940 fffff8a0`0000006c fffff8a0`00000050 fffff801`00002cdf : nt!MiDeleteAddressesInWorkingSet+0x39a
    fffff880`0a485740 fffff801`96c9503c : fffff8a0`03c34060 fffff880`0a485988 fffffa80`07a7a9c0 00000000`00000000 : nt!MiBeginProcessClean+0xbd
    fffff880`0a485780 fffff801`96c9c908 : fffff8a0`03c34060 fffff880`0a485988 00000000`00000001 00000000`00000001 : nt!MmCleanProcessAddressSpace+0x4c
    fffff880`0a4857f0 fffff801`96c96974 : fffffa80`40010004 00000000`00000001 00000000`7f57b000 00000000`78457350 : nt!PspExitThread+0x668
    fffff880`0a485910 fffff801`9694df01 : fffffa80`0967d9d0 fffff801`96cb8536 fffffa80`0967d9d0 fffffa80`0967d9d0 : nt!PsExitSpecialApc+0x1d
    fffff880`0a485940 fffff801`9694e230 : 00000000`0564e5a0 fffff880`0a4859c0 fffff801`96c963e8 00000000`00000001 : nt!KiDeliverApc+0x2cf
    fffff880`0a4859c0 fffff801`968eb0fa : fffffa80`07a7a9c0 fffffa80`07a7a9c0 fffff880`0a485b80 00000000`76eef430 : nt!KiInitiateUserApc+0x70
    fffff880`0a485b00 000007f8`cf34309a : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSystemServiceExit+0x9f
    00000000`0564e578 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x000007f8`cf34309a
    
    
    
    
    STACK_COMMAND:  kb
    
    
    FOLLOWUP_IP: 
    nt!MiBadShareCount+4b
    fffff801`969f9983 cc              int     3
    
    
    SYMBOL_STACK_INDEX:  1
    
    
    SYMBOL_NAME:  nt!MiBadShareCount+4b
    
    
    FOLLOWUP_NAME:  MachineOwner
    
    
    MODULE_NAME: nt
    
    
    DEBUG_FLR_IMAGE_TIMESTAMP:  50ecec77
    
    
    IMAGE_NAME:  memory_corruption
    
    
    BUCKET_ID_FUNC_OFFSET:  4b
    
    
    FAILURE_BUCKET_ID:  0x4E_99_nt!MiBadShareCount
    
    
    BUCKET_ID:  0x4E_99_nt!MiBadShareCount
    
    
    Followup: MachineOwner


    Any ideas?
    Last edited by BeardyNerd; 09 Apr 2013 at 03:25. Reason: additional info (BIOS)
      My System SpecsSystem Spec

  8. #8


    Posts : 5,139
    Win8.1Pro - Finally!!!


    Please remove the Gigabyte Easy Saver utility. Also, if installed, please remove the Gigabyte EasyTune utility. Both are known to cause BSOD's in some Windows systems.

    If that doesn't stop the BSOD's, then we're going to have to start looking at the hardware.
    I have to wonder about the drives/storage controllers simply because they're involved in most of the memory dumps in some way or another.
    Start with these additional hardware diagnostics: Additional Hardware Diagnostics


    Analysis:
    The following is for informational purposes only.
    Code:
    **************************Tue Apr  9 02:27:23.310 2013 (UTC - 4:00)**************************
    Loading Dump File [C:\Users\Owner\SysnativeBSODApps\040913-3765-01.dmp]
    Windows 8 Kernel Version 9200 MP (4 procs) Free x64
    Built by: 9200.16496.amd64fre.win8_gdr.130108-1504
    System Uptime:0 days 0:07:15.946
    Probably caused by :memory_corruption ( nt!MiBadShareCount+4b )
    BugCheck 4E, {99, 317a19, 0, 0}
    BugCheck Info: PFN_LIST_CORRUPT (4e)
    Arguments: 
    Arg1: 0000000000000099, A PTE or PFN is corrupt
    Arg2: 0000000000317a19, page frame number
    Arg3: 0000000000000000, current page state
    Arg4: 0000000000000000, 0
    BUGCHECK_STR:  0x4E_99
    PROCESS_NAME:  chrome.exe
    FAILURE_BUCKET_ID: 0x4E_99_nt!MiBadShareCount
    CPUID:        "Intel(R) Core(TM) i5-3570K CPU @ 3.40GHz"
    MaxSpeed:     3400
    CurrentSpeed: 3403
      BIOS Version                  F16
      BIOS Release Date             10/24/2012
      Manufacturer                  Gigabyte Technology Co., Ltd.
      Product Name                  To be filled by O.E.M.
    ииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииии``
    **************************Tue Apr  9 02:18:50.101 2013 (UTC - 4:00)**************************
    Loading Dump File [C:\Users\Owner\SysnativeBSODApps\040913-3750-01.dmp]
    Windows 8 Kernel Version 9200 MP (4 procs) Free x64
    Built by: 9200.16496.amd64fre.win8_gdr.130108-1504
    System Uptime:1 days 22:51:36.720
    Probably caused by :memory_corruption ( nt!MiAgeWorkingSet+244 )
    BugCheck 50, {fffff68001375850, 0, fffff8025e0b2be3, 2}
    BugCheck Info: PAGE_FAULT_IN_NONPAGED_AREA (50)
    Arguments: 
    Arg1: fffff68001375850, memory referenced.
    Arg2: 0000000000000000, value 0 = read operation, 1 = write operation.
    Arg3: fffff8025e0b2be3, If non-zero, the instruction address which referenced the bad memory
        address.
    Arg4: 0000000000000002, (reserved)
    BUGCHECK_STR:  AV
    DEFAULT_BUCKET_ID:  WIN8_DRIVER_FAULT
    PROCESS_NAME:  UNS.exe
    FAILURE_BUCKET_ID: AV_nt!MiAgeWorkingSet
    CPUID:        "Intel(R) Core(TM) i5-3570K CPU @ 3.40GHz"
    MaxSpeed:     3400
    CurrentSpeed: 3403
      BIOS Version                  F16
      BIOS Release Date             10/24/2012
      Manufacturer                  Gigabyte Technology Co., Ltd.
      Product Name                  To be filled by O.E.M.
    ииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииии``
    **************************Sun Apr  7 02:36:58.327 2013 (UTC - 4:00)**************************
    Loading Dump File [C:\Users\Owner\SysnativeBSODApps\040713-3984-01.dmp]
    Windows 8 Kernel Version 9200 MP (4 procs) Free x64
    Built by: 9200.16496.amd64fre.win8_gdr.130108-1504
    System Uptime:0 days 0:01:07.963
    Probably caused by :ntkrnlmp.exe ( nt! ?? ::FNODOBFM::`string'+13cdc )
    BugCheck 133, {1, 780, 0, 0}
    BugCheck Info: DPC_WATCHDOG_VIOLATION (133)
    Arguments: 
    Arg1: 0000000000000001, The system cumulatively spent an extended period of time at
        DISPATCH_LEVEL or above. The offending component can usually be
        identified with a stack trace.
    Arg2: 0000000000000780, The watchdog period.
    Arg3: 0000000000000000
    Arg4: 0000000000000000
    BUGCHECK_STR:  0x133
    DEFAULT_BUCKET_ID:  WIN8_DRIVER_FAULT
    PROCESS_NAME:  Samsung Magici
    FAILURE_BUCKET_ID: 0x133_ISR_nt!_??_::FNODOBFM::_string_
    CPUID:        "Intel(R) Core(TM) i5-3570K CPU @ 3.40GHz"
    MaxSpeed:     3400
    CurrentSpeed: 3403
      BIOS Version                  F16
      BIOS Release Date             10/24/2012
      Manufacturer                  Gigabyte Technology Co., Ltd.
      Product Name                  To be filled by O.E.M.
    ииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииии``
    **************************Sun Apr  7 02:34:34.675 2013 (UTC - 4:00)**************************
    Loading Dump File [C:\Users\Owner\SysnativeBSODApps\040713-3828-01.dmp]
    Windows 8 Kernel Version 9200 MP (4 procs) Free x64
    Built by: 9200.16496.amd64fre.win8_gdr.130108-1504
    System Uptime:0 days 22:38:48.757
    *** ERROR: Module load completed but symbols could not be loaded for Ntfs.sys
    Probably caused by :ntkrnlmp.exe ( nt!KiFastFailDispatch+d0 )
    BugCheck 139, {3, fffff8800ebbb5e0, fffff8800ebbb538, 0}
    BugCheck Info: KERNEL_SECURITY_CHECK_FAILURE (139)
    Arguments: 
    Arg1: 0000000000000003, A LIST_ENTRY has been corrupted (i.e. double remove).
    Arg2: fffff8800ebbb5e0, Address of the trap frame for the exception that caused the bugcheck
    Arg3: fffff8800ebbb538, Address of the exception record for the exception that caused the bugcheck
    Arg4: 0000000000000000, Reserved
    BUGCHECK_STR:  0x139
    DEFAULT_BUCKET_ID:  LIST_ENTRY_CORRUPT
    PROCESS_NAME:  System
    FAILURE_BUCKET_ID: 0x139_3_nt!KiFastFailDispatch
    CPUID:        "Intel(R) Core(TM) i5-3570K CPU @ 3.40GHz"
    MaxSpeed:     3400
    CurrentSpeed: 3403
      BIOS Version                  F16
      BIOS Release Date             10/24/2012
      Manufacturer                  Gigabyte Technology Co., Ltd.
      Product Name                  To be filled by O.E.M.
    ииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииии``
    
    3rd Party Drivers:
    The following is for information purposes only.
    Any drivers in red should be updated or removed from your system. And should have been discussed in the body of my post.
    Code:
    **************************Tue Apr  9 02:27:23.310 2013 (UTC - 4:00)**************************
    gdrv.sys                    Thu Mar 12 23:22:29 2009 (49B9D175)
    athrx.sys                   Wed Mar 21 23:26:22 2012 (4F6A9BDE)
    L1C63x64.sys                Thu Jun 14 01:57:40 2012 (4FD97D54)
    dump_storahci.sys           Wed Jul 25 22:30:35 2012 (5010ABCB)
    SaiU1703.sys                Thu Sep 20 06:03:52 2012 (505AEA08)
    SaiK1703.sys                Thu Sep 20 06:03:56 2012 (505AEA0C)
    SaiK8020.sys                Mon Oct 15 05:23:11 2012 (507BD5FF)
    intelppm.sys                Mon Nov  5 22:55:02 2012 (50988A16)
    AtihdW86.sys                Wed Dec 12 12:20:30 2012 (50C8BCDE)
    HECIx64.sys                 Mon Dec 17 14:32:21 2012 (50CF7345)
    atikmpag.sys                Wed Dec 19 14:32:55 2012 (50D21667)
    atikmdag.sys                Wed Dec 19 15:38:55 2012 (50D225DF)
    SaiBus.sys                  Thu Jan 31 12:50:38 2013 (510AAEEE)
    SaiMini.sys                 Thu Jan 31 12:50:38 2013 (510AAEEE)
    ииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииии``
    **************************Sun Apr  7 02:36:58.327 2013 (UTC - 4:00)**************************
    magdrvamd64.sys             Wed Jan 30 09:15:19 2013 (51092AF7)
    ииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииии``
    **************************Sun Apr  7 02:34:34.675 2013 (UTC - 4:00)**************************
    hiber_storahci.sys          Wed Jul 25 22:30:35 2012 (5010ABCB)
    
    http://www.carrona.org/drivers/driver.php?id=gdrv.sys
    http://www.carrona.org/drivers/driver.php?id=athrx.sys
    http://www.carrona.org/drivers/driver.php?id=L1C63x64.sys
    http://www.carrona.org/drivers/driver.php?id=dump_storahci.sys
    SaiU1703.sys - this driver hasn't been added to the DRT as of this run. Please search Google/Bing for the driver if additional information is needed.
    SaiK1703.sys - this driver hasn't been added to the DRT as of this run. Please search Google/Bing for the driver if additional information is needed.
    http://www.carrona.org/drivers/driver.php?id=SaiK8020.sys
    http://www.carrona.org/drivers/driver.php?id=intelppm.sys
    http://www.carrona.org/drivers/driver.php?id=AtihdW86.sys
    http://www.carrona.org/drivers/driver.php?id=HECIx64.sys
    http://www.carrona.org/drivers/driver.php?id=atikmpag.sys
    http://www.carrona.org/drivers/driver.php?id=atikmdag.sys
    http://www.carrona.org/drivers/driver.php?id=SaiBus.sys
    http://www.carrona.org/drivers/driver.php?id=SaiMini.sys
    magdrvamd64.sys - this driver hasn't been added to the DRT as of this run. Please search Google/Bing for the driver if additional information is needed.
    http://www.carrona.org/drivers/driver.php?id=hiber_storahci.sys
      My System SpecsSystem Spec

  9. #9


    Posts : 12
    Windows 8.1


    Thanks for the info yet again! How do I go about removing the Gigabyte Easy Save Utility? I cannot seem to find it on my C drive at all (I cannot even locate a gigabyte folder anywhere despite having hidden files/folders displayed).
      My System SpecsSystem Spec

  10. #10


    Posts : 5,139
    Win8.1Pro - Finally!!!


    To safely remove the gdrv.sys driver:
    1) Create a Restore Point using System Restore
    2) Create a Repair disc:
    Win8 - Press "WIN" and "R" to open the Run dialog...type "RECDISC" (without the quotes) and press ENTER
    3) Test the System Repair disc to make sure that you can get to the System Restore entry when you boot from the disk (you may also want to try actually using System Restore to make sure that it works)
    4) Download this free program (Autoruns for Windows) and use it to disable any instances of gdrv.sys that are starting (or any other Gigabyte Easy Saver entries) (DO NOT DELETE - only disabled by removing the checkmark in the left hand column)
    5) Check in Device Manager (to include showing hidden devices from the View menu item) and ensure that any instances of gdrv.sys (or any other Gigabyte Easy Saver entries) are "Uninstalled" (DO NOT DISABLE THESE).
    6) Check in the Services applet (services.msc) to be sure any instances of gdrv.sys or any other Gigabyte Easy Saver entries are disabled.
    7) Go to C:\Windows and rename the gdrv.sys driver to gdrv.BAD If it's not there, also check in C:\Windows\System32\drivers
    Code:
    1: kd> lm vm gdrv
    start             end                 module name
    fffff880`08573000 fffff880`0857c000   gdrv       (deferred)             
        Image path: \??\C:\Windows\gdrv.sys
        Image name: gdrv.sys
        Timestamp:        Thu Mar 12 23:22:29 2009 (49B9D175)
        CheckSum:         000105CE
        ImageSize:        00009000
        Translations:     0000.04b0 0000.04e4 0409.04b0 0409.04e4

    In the event that the system doesn't boot:

    1) Boot from the System Repair disc and use the Command Prompt option to rename gdrv.BAD to gdrv.sys
    2) Boot from the System Repair disc and use the System Restore option to restore the system to a point before the changes were made.

    Good luck!
      My System SpecsSystem Spec

Page 1 of 2 12 LastLast
Windows 8 crash and restart after sleep or upon reboot
Related Threads
Solved Crash and reboot when playing certain games in BSOD Crashes and Debugging
I usually get random crashes to desktop and BSOD's/reboots when playing Elite Dangerous. I have all updated drivers... Any help is appreciated. I hope I captured all the dump files correctly. If not I can change the settings and create some new ones. 55946
crash/reboot while unattended in BSOD Crashes and Debugging
I used to get these crashes while the computer was not being used (e.g., a year ago) and thought the problem had gone away. It happened last night while the somputer was unattended. Firefox was open with a few tabs. Some Word (2010) documents were open. uTorrent may have been running but I'm...
Windows 8.1 crash when waking from sleep in BSOD Crashes and Debugging
I had a problem a few months ago on Windows 8.1 I was unable to solve so I reinstalled windows 8 and was able to put my computer to sleep and wake again. Upon re-updating to Windows 8.1 I once again have the problem of a crash when trying to come out of sleep. I tried Windows 8.1 again because...
Win 8.1 Crash/Reboot - REGISTRY_ERROR (51) in BSOD Crashes and Debugging
Sony VAIO laptop running Win 8.1 Started crashing/rebooting at approx. 15 minute intervals yesterday Appears to be Registry related Full details in attached zip file Windbg info posted below Input appreciated *******************************************************************************...
Solved Crash/Reboot During Sleep in BSOD Crashes and Debugging
I've noticed an issue with my system rebooting when I leave it sleeping for too long, usually overnight. Applications are typically still open when I tell it to sleep (come on, that's why I sleep instead of shut down), but it has happened even when none are running (none from Metro either)....
Fix Windows 8 Explorer Crash / Restart Loop - Softpedia
Eight Forums Android App Eight Forums IOS App Follow us on Facebook