Mazdem's BSOD hell

Mazdem · Sep 12, 2013

First time running a raid setup and one of my drives went straight to hell. I rebuilt the raid with another hard drive. Everything seemed fine for awhile but for the last two weeks I've been randomly receiving blue screens without consistent reasons in the visible portion of the report.

usasma · Sep 13, 2013

Run hard drive diagnostics on ALL of the drives in the RAID array: Hard Drive Diagnostic Procedure
What is the make/model/wattage and age of your Power Supply?

Gigabyte's EasyTune6 (ET6) and EasySaver are known to cause BSOD's on some Windows systems. Please uninstall both of these programs from your system.

Out of 6 memory dumps there were 4 different BSOD error codes. The differing error codes are usually symptomatic of a lower level problem within the system. They are usually caused by one of these things:
- borked (broken) hardware (several different procedures used to isolate the problem device)
- BIOS issues (check for updates at the motherboard manufacturer's website)
- overclocking/overheating - You'll know if you're overclocking or not. If uncertain we can suggest things to check.
- compatibility issues (3rd party hardware/drivers)
- low-level driver problems
- or even malware (scanned for when we ask for hardware diagnostics from Initial Hardware Diagnostics or Hardware Diagnostics ).

You can get a head start on the hardware diagnostics if you'd like - they are located here: Hardware Diagnostics

Please update these older drivers. Links are included to assist in looking up the source of the drivers. If unable to find an update, please remove (un-install) the program responsible for that driver. DO NOT manually delete/rename the driver as it may make the system unbootable! :

teamviewervpn.sys Thu Dec 13 04:22:09 2007 (4760F9C1)
TeamViewerVPN Network Adapter
http://www.carrona.org/drivers/driver.php?id=teamviewervpn.sys

LGBusEnum.sys Mon Nov 23 20:36:48 2009 (4B0B38B0)
Logitech Keyboard
http://www.carrona.org/drivers/driver.php?id=LGBusEnum.sys

LGVirHid.sys Mon Nov 23 20:36:48 2009 (4B0B38B0)
Logitech Gamepanel Virtual HID Device Driver
http://www.carrona.org/drivers/driver.php?id=LGVirHid.sys

ElbyCDIO.sys Thu Dec 16 17:58:13 2010 (4D0A9985)
CDRTools/ElbyCDIO/DVD Region Killer/VirtualCloneDrive (elby CloneDVD™ 2)/AnyDVD
http://www.carrona.org/drivers/driver.php?id=ElbyCDIO.sys

VClone.sys Sat Jan 15 11:21:04 2011 (4D31C970)
VirtualCloneCD Driver by Elaborate Bytes AG
http://www.carrona.org/drivers/driver.php?id=VClone.sys

NETwNe64.sys Tue Dec 6 12:48:39 2011 (4EDE5577)
Intel® Wireless WiFi Link Adapter driver
http://www.carrona.org/drivers/driver.php?id=NETwNe64.sys

AppleCharger.sys Wed Oct 24 20:51:02 2012 (50888CF6)
GIGABYTE On/Off Charge driver. See here for details - GIGABYTE ON/OFF Charge [br] May cause BSOD on Win7/8 systems - uninstall to test (haven't seen recently (15Jan2013))
http://www.carrona.org/drivers/driver.php?id=AppleCharger.sys

Analysis:
The following is for informational purposes only.

Code:

[FONT=lucida console]**************************Thu Sep 12 21:25:21.331 2013 (UTC - 4:00)**************************
Loading Dump File [C:\Users\John\SysnativeBSODApps\091213-56093-01.dmp]
Windows 8 Kernel Version 9200 MP (8 procs) Free x64
Built by: [B]9200[/B].16628.amd64fre.win8_gdr.130531-1504
System Uptime:[B]0 days 1:10:12.983[/B]
*** ERROR: Module load completed but symbols could not be loaded for Ntfs.sys
*** ERROR: Module load completed but symbols could not be loaded for mssmbios.sys
*** ERROR: Module load completed but symbols could not be loaded for fileinfo.sys
Probably caused by :[B]fileinfo.sys ( fileinfo+89a5 )[/B]
BugCheck [B]24, {b50019060b, fffff880031c7298, fffff880031c6ad0, fffff88000b6e9a5}[/B]
BugCheck Info: [URL="http://www.carrona.org/bsodindx.html#0x00000024"]NTFS_FILE_SYSTEM (24)[/URL]
Arguments: 
Arg1: 000000b50019060b
Arg2: fffff880031c7298
Arg3: fffff880031c6ad0
Arg4: fffff88000b6e9a5
PROCESS_NAME:  System
BUGCHECK_STR:  0x24
DEFAULT_BUCKET_ID:  WIN8_DRIVER_FAULT
FAILURE_BUCKET_ID: [B]0x24_fileinfo+89a5[/B]
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
**************************Tue Sep 10 01:37:34.585 2013 (UTC - 4:00)**************************
Loading Dump File [C:\Users\John\SysnativeBSODApps\091013-30156-01.dmp]
Windows 8 Kernel Version 9200 MP (8 procs) Free x64
Built by: [B]9200[/B].16628.amd64fre.win8_gdr.130531-1504
System Uptime:[B]0 days 1:42:08.237[/B]
Probably caused by :[B]ntkrnlmp.exe ( nt! ?? ::FNODOBFM::`string'+36d1b )[/B]
BugCheck [B]1A, {41792, fffff68000060510, 20000000000000, 0}[/B]
BugCheck Info: [URL="http://www.carrona.org/bsodindx.html#0x0000001A"]MEMORY_MANAGEMENT (1a)[/URL]
Arguments: 
Arg1: 0000000000041792, A corrupt PTE has been detected. Parameter 2 contains the address of
    the PTE. Parameters 3/4 contain the low/high parts of the PTE.
Arg2: fffff68000060510
Arg3: 0020000000000000
Arg4: 0000000000000000
BUGCHECK_STR:  0x1a_41792
PROCESS_NAME:  wmplayer.exe
FAILURE_BUCKET_ID: [B]0x1a_41792_nt!_??_::FNODOBFM::_string_[/B]
CPUID:        "Intel(R) Core(TM) i7-3770K CPU @ 3.50GHz"
MaxSpeed:     3500
CurrentSpeed: [B]3503[/B]
  BIOS Version                  F2
  BIOS Release Date             08/23/2012
  Manufacturer                  Gigabyte Technology Co., Ltd.
  Product Name                  To be filled by O.E.M.
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
**************************Mon Sep  9 21:21:27.742 2013 (UTC - 4:00)**************************
Loading Dump File [C:\Users\John\SysnativeBSODApps\090913-22421-01.dmp]
Windows 8 Kernel Version 9200 MP (8 procs) Free x64
Built by: [B]9200[/B].16628.amd64fre.win8_gdr.130531-1504
System Uptime:[B]3 days 1:34:46.393[/B]
Probably caused by :[B]ntkrnlmp.exe ( nt!KiCommitThreadWait+291 )[/B]
BugCheck [B]1E, {ffffffffc0000005, fffff801b170c821, 0, ffffffffffffffff}[/B]
BugCheck Info: [URL="http://www.carrona.org/bsodindx.html#0x0000001E"]KMODE_EXCEPTION_NOT_HANDLED (1e)[/URL]
Arguments: 
Arg1: ffffffffc0000005, The exception code that was not handled
Arg2: fffff801b170c821, The address that the exception occurred at
Arg3: 0000000000000000, Parameter 0 of the exception
Arg4: ffffffffffffffff, Parameter 1 of the exception
BUGCHECK_STR:  0x1E_c0000005_R
PROCESS_NAME:  services.exe
FAILURE_BUCKET_ID: [B]0x1E_c0000005_R_nt!KiCommitThreadWait[/B]
CPUID:        "Intel(R) Core(TM) i7-3770K CPU @ 3.50GHz"
MaxSpeed:     3500
CurrentSpeed: [B]3503[/B]
  BIOS Version                  F2
  BIOS Release Date             08/23/2012
  Manufacturer                  Gigabyte Technology Co., Ltd.
  Product Name                  To be filled by O.E.M.
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
**************************Fri Sep  6 19:45:40.950 2013 (UTC - 4:00)**************************
Loading Dump File [C:\Users\John\SysnativeBSODApps\090613-18062-01.dmp]
Windows 8 Kernel Version 9200 MP (8 procs) Free x64
Built by: [B]9200[/B].16628.amd64fre.win8_gdr.130531-1504
System Uptime:[B]0 days 22:37:45.602[/B]
Probably caused by :[B]ntkrnlmp.exe ( nt!RtlSubtreePredecessor+9 )[/B]
BugCheck [B]3B, {c0000005, fffff80270f74ac1, fffff8800e956b70, 0}[/B]
BugCheck Info: [URL="http://www.carrona.org/bsodindx.html#0x0000003B"]SYSTEM_SERVICE_EXCEPTION (3b)[/URL]
Arguments: 
Arg1: 00000000c0000005, Exception code that caused the bugcheck
Arg2: fffff80270f74ac1, Address of the instruction which caused the bugcheck
Arg3: fffff8800e956b70, Address of the context record for the exception that caused the bugcheck
Arg4: 0000000000000000, zero.
BUGCHECK_STR:  0x3B
DEFAULT_BUCKET_ID:  WIN8_DRIVER_FAULT
PROCESS_NAME:  ccSvcHst.exe
FAILURE_BUCKET_ID: [B]0x3B_nt!RtlSubtreePredecessor[/B]
CPUID:        "Intel(R) Core(TM) i7-3770K CPU @ 3.50GHz"
MaxSpeed:     3500
CurrentSpeed: [B]3503[/B]
  BIOS Version                  F2
  BIOS Release Date             08/23/2012
  Manufacturer                  Gigabyte Technology Co., Ltd.
  Product Name                  To be filled by O.E.M.
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
**************************Sun Sep  1 13:08:24.695 2013 (UTC - 4:00)**************************
Loading Dump File [C:\Users\John\SysnativeBSODApps\090113-18968-01.dmp]
Windows 8 Kernel Version 9200 MP (8 procs) Free x64
Built by: [B]9200[/B].16628.amd64fre.win8_gdr.130531-1504
System Uptime:[B]1 days 15:38:57.346[/B]
Probably caused by :[B]win32k.sys ( win32k!EngDeleteClip+5f1d3 )[/B]
BugCheck [B]1A, {41792, fffff68000040ca0, 1000000000000, 0}[/B]
BugCheck Info: [URL="http://www.carrona.org/bsodindx.html#0x0000001A"]MEMORY_MANAGEMENT (1a)[/URL]
Arguments: 
Arg1: 0000000000041792, A corrupt PTE has been detected. Parameter 2 contains the address of
    the PTE. Parameters 3/4 contain the low/high parts of the PTE.
Arg2: fffff68000040ca0
Arg3: 0001000000000000
Arg4: 0000000000000000
BUGCHECK_STR:  0x1a_41792
PROCESS_NAME:  chrome.exe
FAILURE_BUCKET_ID: [B]0x1a_41792_win32k!EngDeleteClip[/B]
CPUID:        "Intel(R) Core(TM) i7-3770K CPU @ 3.50GHz"
MaxSpeed:     3500
CurrentSpeed: [B]3503[/B]
  BIOS Version                  F2
  BIOS Release Date             08/23/2012
  Manufacturer                  Gigabyte Technology Co., Ltd.
  Product Name                  To be filled by O.E.M.
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
**************************Fri Aug 30 03:46:25.519 2013 (UTC - 4:00)**************************
Loading Dump File [C:\Users\John\SysnativeBSODApps\083013-16796-01.dmp]
Windows 8 Kernel Version 9200 MP (8 procs) Free x64
Built by: [B]9200[/B].16628.amd64fre.win8_gdr.130531-1504
System Uptime:[B]1 days 6:12:13.302[/B]
Probably caused by :[B]ntkrnlmp.exe ( nt! ?? ::FNODOBFM::`string'+36d3a )[/B]
BugCheck [B]1A, {41793, fffff680000b67b0, 9, 8}[/B]
BugCheck Info: [URL="http://www.carrona.org/bsodindx.html#0x0000001A"]MEMORY_MANAGEMENT (1a)[/URL]
Arguments: 
Arg1: 0000000000041793, The subtype of the bugcheck.
Arg2: fffff680000b67b0
Arg3: 0000000000000009
Arg4: 0000000000000008
BUGCHECK_STR:  0x1a_41793
PROCESS_NAME:  ccSvcHst.exe
FAILURE_BUCKET_ID: [B]0x1a_41793_nt!_??_::FNODOBFM::_string_[/B]
CPUID:        "Intel(R) Core(TM) i7-3770K CPU @ 3.50GHz"
MaxSpeed:     3500
CurrentSpeed: [B]3503[/B]
  BIOS Version                  F2
  BIOS Release Date             08/23/2012
  Manufacturer                  Gigabyte Technology Co., Ltd.
  Product Name                  To be filled by O.E.M.
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
[/FONT]

3rd Party Drivers:
The following is for information purposes only.
Any drivers in red should be updated or removed from your system. And should have been discussed in the body of my post.

Code:

[FONT=lucida console]**************************Thu Sep 12 21:25:21.331 2013 (UTC - 4:00)**************************
[COLOR=RED][B]teamviewervpn.sys           Thu Dec 13 04:22:09 2007 (4760F9C1)[/B][/COLOR]
[COLOR=RED][B]LGBusEnum.sys               Mon Nov 23 20:36:48 2009 (4B0B38B0)[/B][/COLOR]
[COLOR=RED][B]LGVirHid.sys                Mon Nov 23 20:36:48 2009 (4B0B38B0)[/B][/COLOR]
[COLOR=RED][B]ElbyCDIO.sys                Thu Dec 16 17:58:13 2010 (4D0A9985)[/B][/COLOR]
[COLOR=RED][B]VClone.sys                  Sat Jan 15 11:21:04 2011 (4D31C970)[/B][/COLOR]
[COLOR=RED][B]NETwNe64.sys                Tue Dec  6 12:48:39 2011 (4EDE5577)[/B][/COLOR]
Rt630x64.sys                Tue Jun 12 09:37:53 2012 (4FD74631)
RTKVHD64.sys                Tue Jun 19 04:50:56 2012 (4FE03D70)
Ironx64.SYS                 Mon Jul 23 20:34:50 2012 (500DEDAA)
xusb22.sys                  Wed Jul 25 22:26:57 2012 (5010AAF1)
ccSetx64.sys                Thu Aug 16 17:18:11 2012 (502D6393)
SYMEVENT64x86.SYS           Wed Aug 22 01:33:18 2012 (50346F1E)
dump_iaStorA.sys            Sat Sep  1 21:01:24 2012 (5042AFE4)
iaStorA.sys                 Sat Sep  1 21:01:24 2012 (5042AFE4)
[COLOR=RED][B]AppleCharger.sys            Wed Oct 24 20:51:02 2012 (50888CF6)[/B][/COLOR]
intelppm.sys                Mon Nov  5 22:55:02 2012 (50988A16)
HECIx64.sys                 Mon Dec 17 14:32:21 2012 (50CF7345)
LGSHidFilt.Sys              Thu Jan 17 15:15:00 2013 (50F85BC4)
SYMEFA64.SYS                Fri Jan 18 19:31:37 2013 (50F9E969)
SRTSPX64.SYS                Fri Jan 25 16:30:05 2013 (5102F95D)
nvhda64v.sys                Mon Feb 25 00:27:35 2013 (512AF647)
SYMNETS.SYS                 Tue Apr  9 19:24:13 2013 (5164A31D)
SRTSP64.SYS                 Mon Apr 22 18:26:52 2013 (5175B92C)
SYMDS64.SYS                 Thu Apr 25 19:19:47 2013 (5179BA13)
nvlddmkm.sys                Fri Jun 21 05:06:16 2013 (51C41788)
IDSvia64.sys                Thu Jul 25 20:11:40 2013 (51F1BEBC)
nvvad64v.sys                Tue Aug 20 07:29:10 2013 (52135306)
EraserUtilRebootDrv.sys     Wed Aug 21 17:36:34 2013 (521532E2)
eeCtrl64.sys                Wed Aug 21 17:36:34 2013 (521532E2)
EX64.SYS                    Thu Aug 22 16:36:51 2013 (52167663)
ENG64.SYS                   Thu Aug 22 16:38:20 2013 (521676BC)
BHDrvx64.sys                Mon Aug 26 20:23:41 2013 (521BF18D)
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
**************************Tue Sep 10 01:37:34.585 2013 (UTC - 4:00)**************************
usbaapl64.sys               Tue Nov 27 18:38:02 2012 (50B54EDA)
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
**************************Mon Sep  9 21:21:27.742 2013 (UTC - 4:00)**************************
nvvad64v.sys                Tue May 14 11:27:24 2013 (519257DC)
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
**************************Fri Sep  6 19:45:40.950 2013 (UTC - 4:00)**************************
BHDrvx64.sys                Mon May 20 16:47:31 2013 (519A8BE3)
[/FONT]

Mazdem · Sep 15, 2013

Uninstalled, updated and/or replaced the drivers and associated installations as recommended.
Ran a malware utility as recommended. Result : Pass
Ran a hard drive diagnostic utility to completion as recommended. Result: Pass
Ran a bootable memory test. Result: Failure within the first test. A complete disaster. Linked below. I'm going to get it replaced tomorrow.
View attachment 27825

usasma · Sep 16, 2013

Although I'm sad about the memory errors, I'm glad that you found it early on.
If replacing the bad memory doesn't stop the BSOD's, please post back and we'll work on it further.
Good luck!

Mazdem's BSOD hell

Mazdem

New Member

My Computer

System One

usasma

Mr. Cranky Pants

My Computer

System One

Mazdem

New Member

My Computer

System One

usasma

Mr. Cranky Pants

My Computer

System One