BSOD on cold start

starage · Oct 12, 2013

Hi all,

I'm wondering if any of you experts might have an idea why I'm experiencing BSOD on cold start. I had issues with Windows7 but experience the same after upgrading to Win8 Pro.
Do you think a more general issue like insufficient power could be reason for those issues?

Thanks in advance,
starage

usasma · Oct 13, 2013

What is the make/model/wattage and age of your Power Supply?
What equipment in installed in your case?

Your BIOS dates from 210. Please check at the manufacturer's website to see if there are any BIOS updates available for your system. Also check the readme file to see if they apply to the problems that you are having. Please be advised that flashing the BIOS is a very unforgiving process - and one mistake can physically damage your motherboard.

SSD's were temperamental when they first came out, but their reliability has improved greatly over the last year or two. There are 2 things that MUST be checked on systems with BSOD's and SSD's:

1) That the SSD firmware is the latest available for the SSD. I usually can't see this info in the reports, so I rely on you to check it.
2) That the storage controller drivers on the motherboard are the most recent. They must date from late 2012 or later. This is ALL controllers, not just the one that the SSD is attached to. If involved these should be visible in the memory dump - but it doesn't hurt to check manually.

Out of 7 memory dumps there were 7 different BSOD error codes. The differing error codes are usually symptomatic of a lower level problem within the system. They are usually caused by one of these things:
- borked (broken) hardware (several different procedures used to isolate the problem device)
- BIOS issues (check for updates at the motherboard manufacturer's website)
- overclocking/overheating - You'll know if you're overclocking or not. If uncertain we can suggest things to check.
- compatibility issues (3rd party hardware/drivers)
- low-level driver problems
- or even malware (scanned for when we ask for hardware diagnostics from Initial Hardware Diagnostics or Hardware Diagnostics ).

You can get a head start on the hardware diagnostics if you'd like - they are located here: Hardware Diagnostics
Start with the hard drive test as there's a lot of NTFS.sys drivers (file system on the hard drive) in the stack text.

This driver may be a virus: pxtoqpow.sys Please perform a couple of these free online scans (in case your current protection is compromised): Free Online AntiMalware Resources
If it does turn out to be a virus, you may want to post over in our Security Forums for more expert assistance in removing it and repairing the damage it may have caused: System Security - Windows 8 Forums

Please update these older drivers. Links are included to assist in looking up the source of the drivers. If unable to find an update, please remove (un-install) the program responsible for that driver. DO NOT manually delete/rename the driver as it may make the system unbootable! :

Rt630x64.sys Wed Oct 19 08:12:55 2011 (4E9EBEC7)
Realtek PCI/PCIe Adapters
http://www.carrona.org/drivers/driver.php?id=Rt630x64.sys

If all of this doesn't stop the BSOD's, please run these free hardware diagnostics: Hardware Diagnostics. Let us know the results and we can move on from there.

Analysis:
The following is for informational purposes only.

Code:

[FONT=lucida console]**************************Fri Oct 11 08:12:45.362 2013 (UTC - 4:00)**************************
Loading Dump File [C:\Users\John\SysnativeBSODApps\101113-13968-01.dmp]
Windows 8 Kernel Version 9200 MP (4 procs) Free x64
Built by: [B]9200[/B].16628.amd64fre.win8_gdr.130531-1504
System Uptime:[B]0 days 4:12:30.991[/B]
Probably caused by :[B]memory_corruption ( nt!MiBadShareCount+4b )[/B]
BugCheck [B]4E, {99, 2e05, 2, c00011000115714}[/B]
BugCheck Info: [URL="http://www.carrona.org/bsodindx.html#0x0000004E"]PFN_LIST_CORRUPT (4e)[/URL]
Arguments: 
Arg1: 0000000000000099, A PTE or PFN is corrupt
Arg2: 0000000000002e05, page frame number
Arg3: 0000000000000002, current page state
Arg4: 0c00011000115714, 0
BUGCHECK_STR:  0x4E_99
PROCESS_NAME:  backgroundTask
FAILURE_BUCKET_ID: [B]0x4E_99_nt!MiBadShareCount[/B]
CPUID:        "Intel(R) Core(TM) i5 CPU         750  @ 2.67GHz"
MaxSpeed:     2670
CurrentSpeed: [B]2678[/B]
  BIOS Version                  P2.60
  BIOS Release Date             08/20/2010
  Manufacturer                  To Be Filled By O.E.M.
  Product Name                  To Be Filled By O.E.M.
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
**************************Fri Oct 11 03:59:33.656 2013 (UTC - 4:00)**************************
Loading Dump File [C:\Users\John\SysnativeBSODApps\101113-13796-01.dmp]
Windows 8 Kernel Version 9200 MP (4 procs) Free x64
Built by: [B]9200[/B].16628.amd64fre.win8_gdr.130531-1504
System Uptime:[B]0 days 3:13:12.144[/B]
Probably caused by :[B]memory_corruption ( nt!MiAgeWorkingSet+24c )[/B]
BugCheck [B]A, {fffff683fb6ad288, 0, 0, fffff8005a4933bc}[/B]
BugCheck Info: [URL="http://www.carrona.org/bsodindx.html#0x0000000A"]IRQL_NOT_LESS_OR_EQUAL (a)[/URL]
Arguments: 
Arg1: fffff683fb6ad288, memory referenced
Arg2: 0000000000000000, IRQL
Arg3: 0000000000000000, bitfield :
    bit 0 : value 0 = read operation, 1 = write operation
    bit 3 : value 0 = not an execute operation, 1 = execute operation (only on chips which support this level of status)
Arg4: fffff8005a4933bc, address which referenced memory
BUGCHECK_STR:  AV
DEFAULT_BUCKET_ID:  WIN8_DRIVER_FAULT
PROCESS_NAME:  svchost.exe
FAILURE_BUCKET_ID: [B]AV_nt!MiAgeWorkingSet[/B]
CPUID:        "Intel(R) Core(TM) i5 CPU         750  @ 2.67GHz"
MaxSpeed:     2670
CurrentSpeed: [B]2678[/B]
  BIOS Version                  P2.60
  BIOS Release Date             08/20/2010
  Manufacturer                  To Be Filled By O.E.M.
  Product Name                  To Be Filled By O.E.M.
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
**************************Wed Oct  9 02:58:36.036 2013 (UTC - 4:00)**************************
Loading Dump File [C:\Users\John\SysnativeBSODApps\101113-26390-01.dmp]
Windows 8 Kernel Version 9200 MP (4 procs) Free x64
Built by: [B]9200[/B].16628.amd64fre.win8_gdr.130531-1504
System Uptime:[B]0 days 12:20:30.137[/B]
*** ERROR: Module load completed but symbols could not be loaded for Ntfs.sys
Probably caused by :[B]ntkrnlmp.exe ( nt!KiFastFailDispatch+d0 )[/B]
BugCheck [B]139, {3, fffff88009efe570, fffff88009efe4c8, 0}[/B]
BugCheck Info: [URL="http://www.carrona.org/bsodindx.html#0x00000139"]KERNEL_SECURITY_CHECK_FAILURE (139)[/URL]
Arguments: 
Arg1: 0000000000000003, A LIST_ENTRY has been corrupted (i.e. double remove).
Arg2: fffff88009efe570, Address of the trap frame for the exception that caused the bugcheck
Arg3: fffff88009efe4c8, Address of the exception record for the exception that caused the bugcheck
Arg4: 0000000000000000, Reserved
BUGCHECK_STR:  0x139
DEFAULT_BUCKET_ID:  LIST_ENTRY_CORRUPT
PROCESS_NAME:  System
FAILURE_BUCKET_ID: [B]0x139_3_nt!KiFastFailDispatch[/B]
CPUID:        "Intel(R) Core(TM) i5 CPU         750  @ 2.67GHz"
MaxSpeed:     2670
CurrentSpeed: [B]2678[/B]
  BIOS Version                  P2.60
  BIOS Release Date             08/20/2010
  Manufacturer                  To Be Filled By O.E.M.
  Product Name                  To Be Filled By O.E.M.
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
**************************Mon Oct  7 15:54:35.207 2013 (UTC - 4:00)**************************
Loading Dump File [C:\Users\John\SysnativeBSODApps\100813-14812-01.dmp]
Windows 8 Kernel Version 9200 MP (4 procs) Free x64
Built by: [B]9200[/B].16628.amd64fre.win8_gdr.130531-1504
System Uptime:[B]0 days 0:46:30.891[/B]
*** ERROR: Module load completed but symbols could not be loaded for Ntfs.sys
Probably caused by :[B]ntkrnlmp.exe ( nt! ?? ::FNODOBFM::`string'+2ae97 )[/B]
BugCheck [B]DE, {2, fffff8a0115efe18, fffff8a0115efe11, 3db528c0}[/B]
BugCheck Info: [URL="http://www.carrona.org/bsodindx.html#0x000000DE"]POOL_CORRUPTION_IN_FILE_AREA (de)[/URL]
Arguments: 
Arg1: 0000000000000002
Arg2: fffff8a0115efe18
Arg3: fffff8a0115efe11
Arg4: 000000003db528c0
BUGCHECK_STR:  0xDE
DEFAULT_BUCKET_ID:  WIN8_DRIVER_FAULT
PROCESS_NAME:  wermgr.exe
FAILURE_BUCKET_ID: [B]0xDE_nt!_??_::FNODOBFM::_string_[/B]
CPUID:        "Intel(R) Core(TM) i5 CPU         750  @ 2.67GHz"
MaxSpeed:     2670
CurrentSpeed: [B]2678[/B]
  BIOS Version                  P2.60
  BIOS Release Date             08/20/2010
  Manufacturer                  To Be Filled By O.E.M.
  Product Name                  To Be Filled By O.E.M.
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
**************************Mon Oct  7 14:08:29.911 2013 (UTC - 4:00)**************************
Loading Dump File [C:\Users\John\SysnativeBSODApps\100713-14437-01.dmp]
Windows 8 Kernel Version 9200 MP (4 procs) Free x64
Built by: [B]9200[/B].16628.amd64fre.win8_gdr.130531-1504
System Uptime:[B]1 days 0:41:59.544[/B]
Probably caused by :[B]ntkrnlmp.exe ( nt! ?? ::FNODOBFM::`string'+36d1b )[/B]
BugCheck [B]1A, {41792, fffff6801f0747d8, 1000, 0}[/B]
BugCheck Info: [URL="http://www.carrona.org/bsodindx.html#0x0000001A"]MEMORY_MANAGEMENT (1a)[/URL]
Arguments: 
Arg1: 0000000000041792, A corrupt PTE has been detected. Parameter 2 contains the address of
    the PTE. Parameters 3/4 contain the low/high parts of the PTE.
Arg2: fffff6801f0747d8
Arg3: 0000000000001000
Arg4: 0000000000000000
BUGCHECK_STR:  0x1a_41792
PROCESS_NAME:  svchost.exe
FAILURE_BUCKET_ID: [B]0x1a_41792_nt!_??_::FNODOBFM::_string_[/B]
CPUID:        "Intel(R) Core(TM) i5 CPU         750  @ 2.67GHz"
MaxSpeed:     2670
CurrentSpeed: [B]2678[/B]
  BIOS Version                  P2.60
  BIOS Release Date             08/20/2010
  Manufacturer                  To Be Filled By O.E.M.
  Product Name                  To Be Filled By O.E.M.
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
**************************Sun Oct  6 13:25:49.983 2013 (UTC - 4:00)**************************
Loading Dump File [C:\Users\John\SysnativeBSODApps\100613-43187-01.dmp]
Windows 8 Kernel Version 9200 MP (4 procs) Free x64
Built by: [B]9200[/B].16628.amd64fre.win8_gdr.130531-1504
System Uptime:[B]0 days 1:30:15.666[/B]
*** ERROR: Module load completed but symbols could not be loaded for Ntfs.sys
*** ERROR: Module load completed but symbols could not be loaded for fileinfo.sys
Probably caused by :[B]fileinfo.sys ( fileinfo+87bc )[/B]
BugCheck [B]24, {b50019060b, fffff88006c371e8, fffff88006c36a20, fffff80190754954}[/B]
BugCheck Info: [URL="http://www.carrona.org/bsodindx.html#0x00000024"]NTFS_FILE_SYSTEM (24)[/URL]
Arguments: 
Arg1: 000000b50019060b
Arg2: fffff88006c371e8
Arg3: fffff88006c36a20
Arg4: fffff80190754954
PROCESS_NAME:  System
BUGCHECK_STR:  0x24
DEFAULT_BUCKET_ID:  WIN8_DRIVER_FAULT
FAILURE_BUCKET_ID: [B]0x24_fileinfo+87bc[/B]
CPUID:        "Intel(R) Core(TM) i5 CPU         750  @ 2.67GHz"
MaxSpeed:     2670
CurrentSpeed: [B]2678[/B]
  BIOS Version                  P2.60
  BIOS Release Date             08/20/2010
  Manufacturer                  To Be Filled By O.E.M.
  Product Name                  To Be Filled By O.E.M.
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
**************************Sun Oct  6 11:54:58.339 2013 (UTC - 4:00)**************************
Loading Dump File [C:\Users\John\SysnativeBSODApps\100613-15515-01.dmp]
Windows 8 Kernel Version 9200 MP (4 procs) Free x64
Built by: [B]9200[/B].16628.amd64fre.win8_gdr.130531-1504
System Uptime:[B]3 days 11:04:09.805[/B]
Probably caused by :[B]Pool_Corruption ( nt!ExFreePool+3ec )[/B]
BugCheck [B]19, {3, fffff8a0140f9d00, fffff8a0140f8d00, fffff8a0140f9d00}[/B]
BugCheck Info: [URL="http://www.carrona.org/bsodindx.html#0x00000019"]BAD_POOL_HEADER (19)[/URL]
Arguments: 
Arg1: 0000000000000003, the pool freelist is corrupt.
Arg2: fffff8a0140f9d00, the pool entry being checked.
Arg3: fffff8a0140f8d00, the read back flink freelist value (should be the same as 2).
Arg4: fffff8a0140f9d00, the read back blink freelist value (should be the same as 2).
BUGCHECK_STR:  0x19_3
PROCESS_NAME:  services.exe
FAILURE_BUCKET_ID: [B]0x19_3_nt!ExFreePool[/B]
CPUID:        "Intel(R) Core(TM) i5 CPU         750  @ 2.67GHz"
MaxSpeed:     2670
CurrentSpeed: [B]2678[/B]
  BIOS Version                  P2.60
  BIOS Release Date             08/20/2010
  Manufacturer                  To Be Filled By O.E.M.
  Product Name                  To Be Filled By O.E.M.
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
[/FONT]

3rd Party Drivers:
The following is for information purposes only.
Any drivers in red should be updated or removed from your system. And should have been discussed in the body of my post.

Code:

[FONT=lucida console]**************************Fri Oct 11 08:12:45.362 2013 (UTC - 4:00)**************************
[COLOR=RED][B]Rt630x64.sys                Wed Oct 19 08:12:55 2011 (4E9EBEC7)[/B][/COLOR]
intelppm.sys                Mon Nov  5 22:55:02 2012 (50988A16)
atikmpag.sys                Fri Nov 16 14:39:13 2012 (50A69661)
atikmdag.sys                Fri Nov 16 15:18:02 2012 (50A69F7A)
klpd.sys                    Fri Apr 12 07:34:45 2013 (5167F155)
klwfp.sys                   Tue May  7 09:56:12 2013 (518907FC)
klflt.sys                   Fri May 31 14:59:40 2013 (51A8F31C)
kneps.sys                   Thu Jun  6 09:37:07 2013 (51B09083)
kl1.sys                     Tue Jun 25 04:25:20 2013 (51C953F0)
klim6.sys                   Thu Jul 11 03:53:56 2013 (51DE6494)
klmouflt.sys                Thu Aug  8 09:09:08 2013 (52039874)
klif.sys                    Mon Sep  9 11:42:10 2013 (522DEC52)
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
**************************Fri Oct 11 03:59:33.656 2013 (UTC - 4:00)**************************
klkbdflt.sys                Thu Aug  8 09:08:54 2013 (52039866)
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
**************************Mon Oct  7 15:54:35.207 2013 (UTC - 4:00)**************************
pxtoqpow.sys                Mon Mar  4 07:34:41 2013 (513494E1)
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
**************************Mon Oct  7 14:08:29.911 2013 (UTC - 4:00)**************************
atikmpag.sys                Mon Jun 18 16:41:29 2012 (4FDF9279)
atikmdag.sys                Mon Jun 18 17:21:01 2012 (4FDF9BBD)
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
**************************Sun Oct  6 11:54:58.339 2013 (UTC - 4:00)**************************
bxvbda.sys                  Mon Jul 23 19:30:50 2012 (500DDEAA)
evbda.sys                   Tue Jul 24 08:22:19 2012 (500E937B)
[/FONT]

BSOD on cold start

starage

New Member

My Computer

System One

usasma

Mr. Cranky Pants

My Computer

System One