Windows 8 and 8.1 Forums


Random BSOD on every 2nd/3rd boot - possibly Truecrypt?

  1. #1


    Posts : 13
    Windows 8.1 Core

    Random BSOD on every 2nd/3rd boot - possibly Truecrypt?


    Hi all,

    I get a random BSOD when I boot my HP Pavilion 15-e073sa notebook.

    It's only on boot up, and only every 2 or 3 boots it gives me a REFERENCE_BY_POINTER and reboots, usually with no problem.

    Any help would be appreciated, thanks!

      My System SpecsSystem Spec

  2. #2


    Posts : 5,139
    Win8.1Pro - Finally!!!


    Only 11 Windows Updates installed. Most systems have 60 or more. Please visit Windows Update and get ALL available updates (it may take several trips to get them all).

    This device has problems in Device Manager:
    Not Available ACPI\ASD0001\2&DABA3FF&2 The drivers for this device are not installed.
    This is most likely an AMD Adaptive S4 driver (part of the graphics driver package for your system) Use the HP Support Assistant software to download/install the appropriate graphics drivers for your system.

    I'd start by suspecting the Comodo firewall. Although there's no direct evidence implicating the firewall, it's similar to several prolbems that I seem to remember. So, the test would be to uninstall the Comodo firewall and enable the Windows firewall to see if the BSOD's stop. If not, then feel free to reinstall it AFTER the system has been stabilized.

    Please uninstall TrueCrypt. Recently they posted that their product isn't secure: TrueCrypt

    Please uninstall the Cyberlink software as it's drivers date from 2011.

    If this doesn't stop the BSOD's, then run these free diagnostics (start with the hard drive and memory tests): Hardware Diagnostics

    Analysis:
    The following is for informational purposes only.
    Code:
    **************************Mon Jun  9 06:04:01.240 2014 (UTC - 4:00)**************************
    Loading Dump File [C:\Users\John\SysnativeBSODApps\060914-28140-01.dmp]
    Windows 8 Kernel Version 9600 MP (4 procs) Free x64
    Built by: 9600.17085.amd64fre.winblue_gdr.140330-1035
    System Uptime:12 days 16:15:29.266
    *** ERROR: Module load completed but symbols could not be loaded for Ntfs.sys
    Probably caused by :ntkrnlmp.exe ( nt! ?? ::FNODOBFM::`string'+273aa )
    BugCheck 18, {0, ffffe00108793300, 6, ffffffffffffffff}
    BugCheck Info: REFERENCE_BY_POINTER (18)
    Arguments: 
    Arg1: 0000000000000000, Object type of the object whose reference count is being lowered
    Arg2: ffffe00108793300, Object whose reference count is being lowered
    Arg3: 0000000000000006, Reserved
    Arg4: ffffffffffffffff, Reserved
        The reference count of an object is illegal for the current state of the object.
        Each time a driver uses a pointer to an object the driver calls a kernel routine
        to increment the reference count of the object. When the driver is done with the
        pointer the driver calls another kernel routine to decrement the reference count.
        Drivers must match calls to the increment and decrement routines. This bugcheck
        can occur because an object's reference count goes to zero while there are still
        open handles to the object, in which case the fourth parameter indicates the number
        of opened handles. It may also occur when the object?s reference count drops below zero
        whether or not there are open handles to the object, and in that case the fourth parameter
        contains the actual value of the pointer references count.
    BUGCHECK_STR:  0x18
    DEFAULT_BUCKET_ID:  WIN8_DRIVER_FAULT
    PROCESS_NAME:  wmpnetwk.exe
    FAILURE_BUCKET_ID: 0x18_nt!_??_::FNODOBFM::_string_
      BIOS Version                  F.31
      BIOS Release Date             12/04/2013
      Manufacturer                  Hewlett-Packard
      Product Name                  HP Pavilion 15 Notebook PC
    ииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииии``
    **************************Tue May 27 08:17:59.110 2014 (UTC - 4:00)**************************
    Loading Dump File [C:\Users\John\SysnativeBSODApps\052714-42281-01.dmp]
    Windows 8 Kernel Version 9600 MP (4 procs) Free x64
    Built by: 9600.17085.amd64fre.winblue_gdr.140330-1035
    System Uptime:12 days 12:23:04.459
    *** ERROR: Module load completed but symbols could not be loaded for Ntfs.sys
    Probably caused by :ntkrnlmp.exe ( nt! ?? ::FNODOBFM::`string'+273aa )
    BugCheck 18, {0, ffffe0012d18a080, 6, ffffffffffffffff}
    BugCheck Info: REFERENCE_BY_POINTER (18)
    Arguments: 
    Arg1: 0000000000000000, Object type of the object whose reference count is being lowered
    Arg2: ffffe0012d18a080, Object whose reference count is being lowered
    Arg3: 0000000000000006, Reserved
    Arg4: ffffffffffffffff, Reserved
        The reference count of an object is illegal for the current state of the object.
        Each time a driver uses a pointer to an object the driver calls a kernel routine
        to increment the reference count of the object. When the driver is done with the
        pointer the driver calls another kernel routine to decrement the reference count.
        Drivers must match calls to the increment and decrement routines. This bugcheck
        can occur because an object's reference count goes to zero while there are still
        open handles to the object, in which case the fourth parameter indicates the number
        of opened handles. It may also occur when the object?s reference count drops below zero
        whether or not there are open handles to the object, and in that case the fourth parameter
        contains the actual value of the pointer references count.
    BUGCHECK_STR:  0x18
    DEFAULT_BUCKET_ID:  WIN8_DRIVER_FAULT
    PROCESS_NAME:  wmpnetwk.exe
    FAILURE_BUCKET_ID: 0x18_nt!_??_::FNODOBFM::_string_
      BIOS Version                  F.31
      BIOS Release Date             12/04/2013
      Manufacturer                  Hewlett-Packard
      Product Name                  HP Pavilion 15 Notebook PC
    ииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииии``
    
    3rd Party Drivers:
    The following is for information purposes only.
    Any drivers in red should be updated or removed from your system. And should have been discussed in the body of my post.
    Code:
    **************************Mon Jun  9 06:04:01.240 2014 (UTC - 4:00)**************************
    truecrypt.sys                Sun Sep  5 10:23:16 2010 (4C83A7D4)
    CLVirtualDrive.sys           Mon Dec 26 08:26:47 2011 (4EF87617)
    usbfilter.sys                Tue Aug 28 21:27:12 2012 (503D6FF0)
    WirelessButtonDriver64.sys   Wed Aug 29 23:11:29 2012 (503ED9E1)
    uimx64.sys                   Thu Nov 22 07:07:52 2012 (50AE1598)
    UimFIO.SYS                   Thu Nov 22 07:07:54 2012 (50AE159A)
    Uim_IMx64.sys                Thu Nov 22 07:07:58 2012 (50AE159E)
    uim_vimx64.sys               Thu Nov 22 07:08:04 2012 (50AE15A4)
    SynTP.sys                    Tue Feb  5 22:26:11 2013 (5111CD53)
    AtihdW86.sys                 Thu Feb 14 17:11:12 2013 (511D6100)
    Accelerometer.sys            Tue Feb 26 15:08:10 2013 (512D162A)
    hpdskflt.sys                 Tue Feb 26 15:08:12 2013 (512D162C)
    RTKVHD64.sys                 Thu Mar  7 05:31:01 2013 (51386C65)
    easytthr.sys                 Mon Mar 11 10:50:55 2013 (513DEF4F)
    RtsP2Stor.sys                Thu Jul  4 22:59:40 2013 (51D6369C)
    amdxata.sys                  Mon Jul  8 18:45:00 2013 (51DB40EC)
    amdsata.sys                  Mon Jul  8 18:54:38 2013 (51DB432E)
    Rt630x64.sys                 Thu Aug 15 02:23:59 2013 (520C73FF)
    VBoxNetFlt.sys               Fri Sep  6 08:25:36 2013 (5229C9C0)
    VBoxUSBMon.sys               Fri Sep  6 08:25:36 2013 (5229C9C0)
    VBoxNetAdp.sys               Fri Sep  6 08:25:36 2013 (5229C9C0)
    VBoxDrv.sys                  Fri Sep  6 08:26:49 2013 (5229CA09)
    atikmpag.sys                 Fri Dec  6 15:21:45 2013 (52A231D9)
    atikmdag.sys                 Fri Dec  6 16:19:43 2013 (52A23F6F)
    ssudbus.sys                  Thu Jan  2 04:51:22 2014 (52C5369A)
    ssudmdm.sys                  Thu Jan  2 04:51:26 2014 (52C5369E)
    rtwlane.sys                  Thu Jan  9 21:50:07 2014 (52CF5FDF)
    cmdhlp.sys                   Wed Apr 16 16:31:47 2014 (534EE8B3)
    inspect.sys                  Wed Apr 16 16:31:47 2014 (534EE8B3)
    cmderd.sys                   Wed Apr 16 16:31:57 2014 (534EE8BD)
    cmdguard.sys                 Wed Apr 16 16:32:12 2014 (534EE8CC)
    
    http://www.carrona.org/drivers/driver.php?id=truecrypt.sys
    http://www.carrona.org/drivers/driver.php?id=CLVirtualDrive.sys
    http://www.carrona.org/drivers/driver.php?id=usbfilter.sys
    http://www.carrona.org/drivers/driver.php?id=WirelessButtonDriver64.sys
    http://www.carrona.org/drivers/driver.php?id=uimx64.sys
    http://www.carrona.org/drivers/driver.php?id=UimFIO.SYS
    http://www.carrona.org/drivers/driver.php?id=Uim_IMx64.sys
    http://www.carrona.org/drivers/driver.php?id=uim_vimx64.sys
    http://www.carrona.org/drivers/driver.php?id=SynTP.sys
    http://www.carrona.org/drivers/driver.php?id=AtihdW86.sys
    http://www.carrona.org/drivers/driver.php?id=Accelerometer.sys
    http://www.carrona.org/drivers/driver.php?id=hpdskflt.sys
    http://www.carrona.org/drivers/driver.php?id=RTKVHD64.sys
    http://www.carrona.org/drivers/driver.php?id=easytthr.sys
    http://www.carrona.org/drivers/driver.php?id=RtsP2Stor.sys
    http://www.carrona.org/drivers/driver.php?id=amdxata.sys
    http://www.carrona.org/drivers/driver.php?id=amdsata.sys
    http://www.carrona.org/drivers/driver.php?id=Rt630x64.sys
    http://www.carrona.org/drivers/driver.php?id=VBoxNetFlt.sys
    http://www.carrona.org/drivers/driver.php?id=VBoxUSBMon.sys
    http://www.carrona.org/drivers/driver.php?id=VBoxNetAdp.sys
    http://www.carrona.org/drivers/driver.php?id=VBoxDrv.sys
    http://www.carrona.org/drivers/driver.php?id=atikmpag.sys
    http://www.carrona.org/drivers/driver.php?id=atikmdag.sys
    http://www.carrona.org/drivers/driver.php?id=ssudbus.sys
    http://www.carrona.org/drivers/driver.php?id=ssudmdm.sys
    http://www.carrona.org/drivers/driver.php?id=rtwlane.sys
    http://www.carrona.org/drivers/driver.php?id=cmdhlp.sys
    http://www.carrona.org/drivers/driver.php?id=inspect.sys
    http://www.carrona.org/drivers/driver.php?id=cmderd.sys
    http://www.carrona.org/drivers/driver.php?id=cmdguard.sys
      My System SpecsSystem Spec

  3. #3


    Posts : 13
    Windows 8.1 Core


    Thank you usasma!

    I'll go through your list of recommendations.
    However, I don't know why you think I only have 11 win updates - I am fastidious with keeping everything up to date.
    Attachment 45727
    I have 95 Windows updates, 41 Office updates, 1 Silverlight, and 2 C++ giving 139 updates in total.

    Thank you for your advice. Maybe I will start with Truecrypt before Comodo, but either way I'll be testing my system for a while.
    I'll report back in the near future.
    Thanks again and have a good day
    D
      My System SpecsSystem Spec

  4. #4


    Posts : 5,139
    Win8.1Pro - Finally!!!


    I looked at the systeminformation.txt report that you uploaded.
    The actual number isn't important. What is important is that you have checked and are sure that you have ALL updates (which you obviously have done).

    Don't forget to update the video drivers to fix that problem device in Device Manager!

    Good luck!
      My System SpecsSystem Spec

Random BSOD on every 2nd/3rd boot - possibly Truecrypt?
Related Threads
Solved BSOD possibly due to corrupted memory drivers in BSOD Crashes and Debugging
I asked my question on micorsoft community but they answered a few times then simply stopped answering, all I was told is that it maybe possibly due to corrupted memory drivers. I either get the BSOD with the DPC_Watchdog_Violation error or my laptop just freezes and a constant buzzing sound...
More info here: True mystery of the disappearing TrueCrypt disk encryption software | Naked Security I know TrueCrypt was never officially supported on Windows 8 but I'm sure some folks on here use it... if so it may be time to stop. Seems like a shame though. :( Edit: I also note that...
Hello, When I connect my USB 3.0 External Toshiba HDD my laptop will give a BSOD after a while, sometimes immediately or an hour or several hours, even if I have disconnected the External HDD. The only way to avoid it is to reboot the laptop and not connect the HDD again. Windows 8.1 by the way....
Can't defrag a Truecrypt 'Drive' in Performance & Maintenance
Greetings all.. I don't know if this was the case on Win8, but I've updated my box to Win8.1. I have a 250Gb Truecrypt file as my 'Documents stash' which I mount as a separate drive. On Win 7 I could defrag this but on 8.1 the drive is greyed out not giving me chance to defrag it. Can...
getting random BSOD. now cannot boot at all in BSOD Crashes and Debugging
getting all kinds of BSOD since a few days ago. the first time it happened was when i was installing a AMD GPU driver half way. after that i rolled back to a stable driver thinking that was the one causing it but it only kept happening again. i started getting errors like memory management,...
Random BSOD on Windows 8 boot in BSOD Crashes and Debugging
Hello, I am running Windows 8 installed on a corsair SSD but I also have a PCIe RAID controler (Raidcore RC5252-08). My BSOD only happens when Windows is starting after the pc was powered off. After a BSOD, the system restart itself and windows boot normally. I suspect the Raid controler...
Eight Forums Android App Eight Forums IOS App Follow us on Facebook