Fresh 8.1 Enterprise install, 0x000000e3 and 0x100000b8

stan1415

New Member
Messages
5
Trying Windows 8.1 Enterprise x64 on a new Lenovo X240 laptop at work. Fresh install with some applications loaded from MDT. I'm getting RESOURCE_NOT_OWNED - 0x000000e3 and ATTEMPTED_SWITCH_FROM_DPC - 0x100000b8 when I attempt to wake the laptop from sleep mode. All drivers loaded from Lenovo using the Lenovo Update and Drivers utility. SF Diagnostic tool results attached. Please let me know if more info is needed.

Thanks,
Stan
 

My Computer

System One

  • OS
    Windows 8.1
hmm like do u have a backup of ur previous files if possible?
if ur trying for a fresh install did u try installing it from the boot menu?
 

My Computer

System One

  • OS
    Windows 8.1 Pro Update 1
    Computer type
    PC/Desktop
    System Manufacturer/Model
    Dell
    CPU
    Inspiron 530S
    Motherboard
    64Bit X64 based Processor
    Memory
    4.5GB Ram
    Graphics Card(s)
    1GB - XFX ONE ATI Radeon HD 5450 - Plus Edition
    Sound Card
    Inbuilt
    Monitor(s) Displays
    Dell Monitor
    Screen Resolution
    1440*900
    Hard Drives
    1*Seagate 150gb + 1*Seagate 320gb
    Cooling
    3 x fans
    Keyboard
    Dell Analog
    Mouse
    Dell USB Mouse
    Internet Speed
    1Mbps, 100kbps Download Speed
    Browser
    Firefox
    Antivirus
    Kaspersky, Norton, Avast, Bitdefender, but Switched off
Thanks for the reply.

The computer is new out of the box, Windows 7 was preinstalled. I formatted the drive to install 8.1.

I did a full fresh install using Microsoft Deployment Toolkit (MDT). It's the same as installing from boot media, just done over the network.

I'm only getting the BSOD's intermittently when trying to wake the laptop from sleep. Otherwise the computer performs fine.
 

My Computer

System One

  • OS
    Windows 8.1
All your dumpfiles have a Probably caused by : nvkflt.sys ( nvkflt+5692 ).
Code:
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************
Use !analyze -v to get detailed debugging information.
BugCheck E3, {ffffe000004cb9d0, ffffe00007e19080, ffffe000001fd7d0, 3}
*** WARNING: Unable to verify timestamp for nvkflt.sys
*** ERROR: Module load completed but symbols could not be loaded for nvkflt.sys
Probably caused by : [COLOR=#ff0000]nvkflt.sys ( nvkflt+5692 )[/COLOR]
Followup: MachineOwner
---------
0: kd> !analyze -v
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************
RESOURCE_NOT_OWNED (e3)
A thread tried to release a resource it did not own.
Arguments:
Arg1: ffffe000004cb9d0, Address of resource
Arg2: ffffe00007e19080, Address of thread
Arg3: ffffe000001fd7d0, Address of owner table if there is one
Arg4: 0000000000000003
Debugging Details:
------------------

CUSTOMER_CRASH_COUNT:  1
DEFAULT_BUCKET_ID:  WIN8_DRIVER_FAULT
BUGCHECK_STR:  0xE3
PROCESS_NAME:  csrss.exe
CURRENT_IRQL:  0
ANALYSIS_VERSION: 6.3.9600.16384 (debuggers(dbg).130821-1623) amd64fre
LAST_CONTROL_TRANSFER:  from fffff80095d7deed to fffff80095d51ca0
STACK_TEXT:  
ffffd000`25abbbd8 fffff800`95d7deed : 00000000`000000e3 ffffe000`004cb9d0 ffffe000`07e19080 ffffe000`001fd7d0 : nt!KeBugCheckEx
ffffd000`25abbbe0 fffff800`02554692 : ffffe000`ffffff02 ffffd000`25abbf08 ffffe000`ffffffff 00000000`00000000 : nt! ?? ::FNODOBFM::`string'+0x1bd4d
ffffd000`25abbc70 ffffe000`ffffff02 : ffffd000`25abbf08 ffffe000`ffffffff 00000000`00000000 fffff800`025545c6 : nvkflt+0x5692
ffffd000`25abbc78 ffffd000`25abbf08 : ffffe000`ffffffff 00000000`00000000 fffff800`025545c6 fffff800`00000000 : 0xffffe000`ffffff02
ffffd000`25abbc80 ffffe000`ffffffff : 00000000`00000000 fffff800`025545c6 fffff800`00000000 ffffe000`05222000 : 0xffffd000`25abbf08
ffffd000`25abbc88 00000000`00000000 : fffff800`025545c6 fffff800`00000000 ffffe000`05222000 ffffe000`004cb010 : 0xffffe000`ffffffff

STACK_COMMAND:  kb
FOLLOWUP_IP: 
nvkflt+5692
fffff800`02554692 ??              ???
SYMBOL_STACK_INDEX:  2
SYMBOL_NAME:  nvkflt+5692
FOLLOWUP_NAME:  MachineOwner
MODULE_NAME: nvkflt
IMAGE_NAME:  [COLOR=#ff0000]nvkflt.sys[/COLOR]
DEBUG_FLR_IMAGE_TIMESTAMP:  521fbfa3
FAILURE_BUCKET_ID:  0xE3_nvkflt+5692
BUCKET_ID:  0xE3_nvkflt+5692
ANALYSIS_SOURCE:  KM
FAILURE_ID_HASH_STRING:  km:0xe3_nvkflt+5692
FAILURE_ID_HASH:  {1a1e5c4b-605b-be09-ae40-eb1d954b9c25}
Followup: MachineOwner]
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************
Use !analyze -v to get detailed debugging information.
BugCheck 100000B8, {ffffe0000881b080, ffffd000201d9240, 0, 0}
*** WARNING: Unable to verify timestamp for nvkflt.sys
*** ERROR: Module load completed but symbols could not be loaded for nvkflt.sys
*** WARNING: Unable to verify timestamp for win32k.sys
*** ERROR: Module load completed but symbols could not be loaded for win32k.sys
Probably caused by : [COLOR=#ff0000]nvkflt.sys ( nvkflt+2c6a7 )[/COLOR]
Followup: MachineOwner
---------
1: kd> !analyze -v
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************
ATTEMPTED_SWITCH_FROM_DPC (b8)
A wait operation, attach process, or yield was attempted from a DPC routine.
This is an illegal operation and the stack track will lead to the offending
code and original DPC routine.
Arguments:
Arg1: ffffe0000881b080, Original thread which is the cause of the failure
Arg2: ffffd000201d9240, New thread
Arg3: 0000000000000000, Stack address of the original thread
Arg4: 0000000000000000
Debugging Details:
------------------

FAULTING_THREAD:  ffffe0000881b080
CUSTOMER_CRASH_COUNT:  1
DEFAULT_BUCKET_ID:  WIN8_DRIVER_FAULT
BUGCHECK_STR:  0xB8
PROCESS_NAME:  svchost.exe
CURRENT_IRQL:  2
ANALYSIS_VERSION: 6.3.9600.16384 (debuggers(dbg).130821-1623) amd64fre
DPC_STACK_BASE:  FFFFD00020785FB0
LAST_CONTROL_TRANSFER:  from fffff8034031c90e to fffff803403c8b36
STACK_TEXT:  
ffffd000`20785310 fffff803`4031c90e : ffffd000`201cd180 ffffe000`0881b080 00000000`fffffffe 00000000`fffffffe : nt!KiSwapContext+0x76
ffffd000`20785450 fffff803`4031c3a7 : ffffe000`0881b080 00000000`00000000 00000000`00000000 ffffe000`004b8a30 : nt!KiSwapThread+0x14e
ffffd000`207854f0 fffff803`40319af2 : 00000000`00000001 00000000`00000001 ffffd000`0000002d ffffe000`06fd6120 : nt!KiCommitThreadWait+0x127
ffffd000`20785550 fffff803`402ec119 : ffffe000`004b89d0 ffffe000`06fd6120 00000000`00000200 fffff803`00000002 : nt!ExpWaitForResource+0x282
ffffd000`20785610 fffff800`021d76a7 : 00000000`00000002 00000000`00000000 ffffe000`004b8010 00000000`00000000 : nt!ExAcquireResourceSharedLite+0x409
ffffd000`20785680 00000000`00000002 : 00000000`00000000 ffffe000`004b8010 00000000`00000000 fffff800`021d7604 : nvkflt+0x2c6a7
ffffd000`20785688 00000000`00000000 : ffffe000`004b8010 00000000`00000000 fffff800`021d7604 ffffe000`00000000 : 0x2

STACK_COMMAND:  .thread 0xffffe0000881b080 ; kb
FOLLOWUP_IP: 
nvkflt+2c6a7
fffff800`021d76a7 ??              ???
SYMBOL_STACK_INDEX:  5
SYMBOL_NAME:  nvkflt+2c6a7
FOLLOWUP_NAME:  MachineOwner
MODULE_NAME: nvkflt
IMAGE_NAME:  [COLOR=#ff0000]nvkflt.sys[/COLOR]
DEBUG_FLR_IMAGE_TIMESTAMP:  521fbfa3
FAILURE_BUCKET_ID:  0xB8_nvkflt+2c6a7
BUCKET_ID:  0xB8_nvkflt+2c6a7
ANALYSIS_SOURCE:  KM
FAILURE_ID_HASH_STRING:  km:0xb8_nvkflt+2c6a7
FAILURE_ID_HASH:  {0f4c174b-0b59-0271-93c4-efcc732a1e52}
Followup: MachineOwne

The nvkflt.sys belongs to :
Driver Description: NVIDIA Graphics filter driver

According to the driverlist taken from your dumpfiles, your driver is from Thu Aug 29 23:39:47 2013
Please update it to the latest driver from Drivers and software - ThinkPad X240 this one is from 03 Mar 2014.

[DEL]If the problem stays, please download the latest driver from Nvdia.
Driver Update Site: Drivers - Download NVIDIA Drivers.[/DEL]

Please check and update on the above Thinkpad page all your other drivers to the latest Windows 8.1 drivers for your system.
 
Last edited:

My Computer

System One

  • OS
    windows 8.1
    Computer type
    PC/Desktop
    System Manufacturer/Model
    self build
    CPU
    Intel(R) Core(TM) i5 CPU 750 @ 2.67GHz
    Motherboard
    Asrock P55 Pro
    Memory
    DDR3 Team--Elite-1333 8 gb
    Graphics Card(s)
    Sapphire R9 280x
    Sound Card
    Realtek Alc 855
    Monitor(s) Displays
    Acer V233H
    Screen Resolution
    1920 x 1020
    Hard Drives
    Samsung evo 850 SSd
    Seagate ST 320 gb
    Samsung HD 750 gb
    Seagate ST 3000gb
    PSU
    OCZ Stealth 600 watt
    Case
    Antec 300
    Mouse
    Speedlink Ledos and Nexus
Huh, the X240 has an integrated Intel HD Graphics 4400 chip. I wonder why there would even be any NVidia software running. I have no Nvidia software loaded in add/remove programs.
 

My Computer

System One

  • OS
    Windows 8.1
I have the following items listed in the registry under "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\"

nv_agp
nvkflt
nvlddmkm
nvpciflt
nvraid
nvstor
NvStUSB

I wonder if it's safe to delete these entries. I can back up the key and delete them. I don't see another mechanism to remove them.
 

My Computer

System One

  • OS
    Windows 8.1
Huh, the X240 has an integrated Intel HD Graphics 4400 chip. I wonder why there would even be any NVidia software running. I have no Nvidia software loaded in add/remove programs.

Yes, the x 240 has only the Intel HD graphics on board.

But as you can see on the (now) included BSOD analyzes the nvkflt.sys driver is blamed

Could you look/check if nvkflt.sys driver is on your computer in the system32/drivers folder.

if it exist try to uninstall any Nvdia leftovers with REVOuninstaller.

And if this fails you could use Display Driver Uninstaller (DDU) / Cleaner made for Display Drivers.(NVIDIA/AMD) https://forums.geforce.com/default/...er-uninstaller-ddu-v9-8-2-released-11-30-13-/
Please read carefully the instructions.
 

My Computer

System One

  • OS
    windows 8.1
    Computer type
    PC/Desktop
    System Manufacturer/Model
    self build
    CPU
    Intel(R) Core(TM) i5 CPU 750 @ 2.67GHz
    Motherboard
    Asrock P55 Pro
    Memory
    DDR3 Team--Elite-1333 8 gb
    Graphics Card(s)
    Sapphire R9 280x
    Sound Card
    Realtek Alc 855
    Monitor(s) Displays
    Acer V233H
    Screen Resolution
    1920 x 1020
    Hard Drives
    Samsung evo 850 SSd
    Seagate ST 320 gb
    Samsung HD 750 gb
    Seagate ST 3000gb
    PSU
    OCZ Stealth 600 watt
    Case
    Antec 300
    Mouse
    Speedlink Ledos and Nexus
I have the following items listed in the registry under "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\"

nv_agp
nvkflt
nvlddmkm
nvpciflt
nvraid
nvstor
NvStUSB

I wonder if it's safe to delete these entries. I can back up the key and delete them. I don't see another mechanism to remove them.

The upper 4 are related to Nvdia Graphics, but the other are Nvdia raid driver, Nvdia, storage driver and NVIDIA Stereoscopic 3D USB driver

According to Usasma (our BSOD expert) DO NOT manually delete/rename the driver as it may make the system unbootable!
 

My Computer

System One

  • OS
    windows 8.1
    Computer type
    PC/Desktop
    System Manufacturer/Model
    self build
    CPU
    Intel(R) Core(TM) i5 CPU 750 @ 2.67GHz
    Motherboard
    Asrock P55 Pro
    Memory
    DDR3 Team--Elite-1333 8 gb
    Graphics Card(s)
    Sapphire R9 280x
    Sound Card
    Realtek Alc 855
    Monitor(s) Displays
    Acer V233H
    Screen Resolution
    1920 x 1020
    Hard Drives
    Samsung evo 850 SSd
    Seagate ST 320 gb
    Samsung HD 750 gb
    Seagate ST 3000gb
    PSU
    OCZ Stealth 600 watt
    Case
    Antec 300
    Mouse
    Speedlink Ledos and Nexus
Did you have or used the Nvdia 3d Vision Glasses usb Kit and could this device automaticcaly installed the Nvdia drivers?

Or as you pushed the installation over the network probably from your work , could this device be installed/used at your work and this way installed the Nvdia drivers.
 

My Computer

System One

  • OS
    windows 8.1
    Computer type
    PC/Desktop
    System Manufacturer/Model
    self build
    CPU
    Intel(R) Core(TM) i5 CPU 750 @ 2.67GHz
    Motherboard
    Asrock P55 Pro
    Memory
    DDR3 Team--Elite-1333 8 gb
    Graphics Card(s)
    Sapphire R9 280x
    Sound Card
    Realtek Alc 855
    Monitor(s) Displays
    Acer V233H
    Screen Resolution
    1920 x 1020
    Hard Drives
    Samsung evo 850 SSd
    Seagate ST 320 gb
    Samsung HD 750 gb
    Seagate ST 3000gb
    PSU
    OCZ Stealth 600 watt
    Case
    Antec 300
    Mouse
    Speedlink Ledos and Nexus
Thanks for the replies all. I used DDU earlier in the day, haven't had much time to use the machine. I will test and report later.
 

My Computer

System One

  • OS
    Windows 8.1
Back
Top