Windows 8 and 8.1 Forums


BSOD ntoskrnl.exe/hal.ll (0x0000003b)

  1. #1


    Posts : 12
    Windows 8.1

    BSOD ntoskrnl.exe/hal.dll (0x0000003b)


    Hello everyone, I've been placed with this problem for a very. VERY long time. I can't ever seem to fix this problem. I always have the ntoskrnl.exe/hall.dll, (with ntoskrnl.exe being more prominent). I've been posting uncountable threads on the Microsoft Forums, but I could never fix the problem. It mostly happens when I play games and I am convinced it is my graphics card's fault. I will list what I have done.

    -Driver Verifier. (Crashed with dxgmms1.sys)
    -Chkdsk /f /r
    -Sfc /scannow
    -Memtest86
    -Uninstalled every antivirus I had and made me use Windows Defender.
    -Lowered graphics.

    I can never seem to solve this problem and I think it might be the hardware
    (Edit: I deleted aosdriver2.sys and will see if the problem continues)

    All the DMP files of it crashing:

    https://onedrive.live.com/redir?resi...nt=file%2c.rar

    https://onedrive.live.com/redir?resi...nt=file%2c.rar

    https://onedrive.live.com/redir?resi...nt=file%2c.rar

    https://onedrive.live.com/redir?resi...nt=file%2c.rar

    https://onedrive.live.com/redir?resi...nt=file%2c.rar

    Please reply ASAP... I really am getting annoyed by this
    Thanks in advance
    -blahblah52500

    (Edit2: I used the SFTool to put it in so don't use the websites link)
    Last edited by blahblah52500; 28 Jun 2014 at 09:26.

      My System SpecsSystem Spec

  2. #2


    India
    Posts : 2,097
    Windows 8.1 Industry Pro B-)


    Hi BlahBlah & Welcome to the forums ^_^,

    Below has been provided an analysis of your dump files for informative purposes :-
    Code:
    **************************Wed Jun 25 06:24:44.793 2014 (UTC + 5:30)**************************
    Probably caused by : ntkrnlmp.exe ( nt!KxWaitForLockOwnerShip+12 )
     
    BugCheck 3B, {c0000005, fffff800e1d1ec02, ffffd000acfe4730, 0}
    BugCheck Info: SYSTEM_SERVICE_EXCEPTION (3b)
     
    BUGCHECK_STR:  0x3B
     
    DEFAULT_BUCKET_ID:  WIN8_DRIVER_FAULT
     
    PROCESS_NAME:  BLR.exe
     
    FAILURE_BUCKET_ID:  0x3B_nt!KxWaitForLockOwnerShip
     
      BIOS Version                  1903
     
      BIOS Release Date             07/11/2013
     
      Manufacturer                  To be filled by O.E.M.
     
      Product Name                  To be filled by O.E.M.
     
    ииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииии``
    **************************Wed Jun 25 06:13:26.642 2014 (UTC + 5:30)**************************
    *** ERROR: Module load completed but symbols could not be loaded for Ntfs.sys
     
    Probably caused by : ntkrnlmp.exe ( nt!KxWaitForLockOwnerShipWithIrql+14 )
     
    BugCheck 1000007E, {ffffffffc0000005, fffff802e1adcc1c, ffffd0017f37ed98, ffffd0017f37e5a0}
    BugCheck Info: SYSTEM_THREAD_EXCEPTION_NOT_HANDLED_M (1000007e)
     
    PROCESS_NAME:  System
     
    BUGCHECK_STR:  AV
     
    DEFAULT_BUCKET_ID:  WIN8_DRIVER_FAULT
     
    FAILURE_BUCKET_ID:  AV_nt!KxWaitForLockOwnerShipWithIrql
     
      BIOS Version                  1903
     
      BIOS Release Date             07/11/2013
     
      Manufacturer                  To be filled by O.E.M.
     
      Product Name                  To be filled by O.E.M.
     
    ииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииии``
    **************************Wed Jun 25 06:11:22.367 2014 (UTC + 5:30)**************************
    Probably caused by : ntkrnlmp.exe ( nt!KxWaitForLockOwnerShip+12 )
     
    BugCheck 3B, {c0000005, fffff802ca8b2c02, ffffd00023306d90, 0}
    BugCheck Info: SYSTEM_SERVICE_EXCEPTION (3b)
     
    BUGCHECK_STR:  0x3B
     
    DEFAULT_BUCKET_ID:  WIN8_DRIVER_FAULT
     
    PROCESS_NAME:  MsMpEng.exe
     
    FAILURE_BUCKET_ID:  0x3B_nt!KxWaitForLockOwnerShip
     
      BIOS Version                  1903
     
      BIOS Release Date             07/11/2013
     
      Manufacturer                  To be filled by O.E.M.
     
      Product Name                  To be filled by O.E.M.
     
    ииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииии``
    **************************Tue Jun 24 08:14:45.438 2014 (UTC + 5:30)**************************
    Probably caused by : ntkrnlmp.exe ( nt!WheaReportHwError+63 )
     
    BugCheck A, {ffffe000f1f9a4a8, f, 0, fffff8010d9c765b}
    BugCheck Info: IRQL_NOT_LESS_OR_EQUAL (a)
     
    BUGCHECK_STR:  AV
     
    DEFAULT_BUCKET_ID:  WIN8_DRIVER_FAULT
     
    FAILURE_BUCKET_ID:  AV_nt!WheaReportHwError
     
    ииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииии``
    **************************Mon Jun 23 03:41:01.094 2014 (UTC + 5:30)**************************
    Probably caused by : dxgmms1.sys ( dxgmms1!VIDMM_GLOBAL::ReferenceDmaBuffer+1a28e )
     
    BugCheck D1, {fffff80032ccbe7e, 2, 8, fffff80032ccbe7e}
    BugCheck Info: DRIVER_IRQL_NOT_LESS_OR_EQUAL (d1)
     
    BUGCHECK_STR:  AV
     
    DEFAULT_BUCKET_ID:  VERIFIER_ENABLED_VISTA_MINIDUMP
     
    PROCESS_NAME:  watch_dogs.exe
     
    FAILURE_BUCKET_ID:  AV_VRF_CODE_AV_PAGED_IP_dxgmms1!VIDMM_GLOBAL::ReferenceDmaBuffer
     
      BIOS Version                  1903
     
      BIOS Release Date             07/11/2013
     
      Manufacturer                  To be filled by O.E.M.
     
      Product Name                  To be filled by O.E.M.
     
    ииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииии``
    Below is a list of 3rd party drivers which are installed over your system :-
    Code:
    **************************Wed Jun 25 06:24:44.793 2014 (UTC + 5:30)**************************
    SASKUTIL64.SYS              Wed Jul 13 02:30:01 2011 (4E1CB5D1)
    SASDIFSV64.SYS              Fri Jul 22 04:33:00 2011 (4E28B024)
    PxHlpa64.sys                Mon Oct 17 19:59:34 2011 (4E9C3BCE)
    GEARAspiWDM.sys             Fri May  4 01:26:17 2012 (4FA2E2E1)
    Rt630x64.sys                Fri May 10 15:29:08 2013 (518CC4EC)
    dump_storahci.sys           Thu Aug 22 17:10:39 2013 (5215F8B7)
    mbam.sys                    Wed Oct 30 21:41:45 2013 (52712FC1)
    AODDriver2.sys              Tue Feb 11 16:36:52 2014 (52FA044C)
    usbfilter.sys               Mon Feb 17 11:53:43 2014 (5301AAEF)
    AMDACPKSL.SYS               Wed Mar 12 05:19:44 2014 (531FA118)
    AtihdWB6.sys                Wed Mar 12 05:20:02 2014 (531FA12A)
    atikmpag.sys                Fri May 23 06:41:53 2014 (537EA059)
    atikmdag.sys                Fri May 23 07:16:07 2014 (537EA85F)
    ииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииии``
    **************************Wed Jun 25 06:11:22.367 2014 (UTC + 5:30)**************************
    xhunter1.sys                Fri May 30 00:44:21 2014 (5387870D)
    ииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииии``
    **************************Tue Jun 24 08:14:45.438 2014 (UTC + 5:30)**************************
    hiber_storport.sys          Thu Aug 22 17:10:18 2013 (5215F8A2)
    xusb22.sys                  Tue Mar 18 13:48:41 2014 (53280161)
    X6va019                     Thu May  8 10:20:08 2014 (536B0D00)
    http://www.carrona.org/drivers/driver.php?id=SASKUTIL64.SYS
    http://www.carrona.org/drivers/driver.php?id=SASDIFSV64.SYS
    http://www.carrona.org/drivers/driver.php?id=PxHlpa64.sys
    http://www.carrona.org/drivers/driver.php?id=GEARAspiWDM.sys
    http://www.carrona.org/drivers/driver.php?id=Rt630x64.sys
    http://www.carrona.org/drivers/driver.php?id=dump_storahci.sys
    http://www.carrona.org/drivers/driver.php?id=mbam.sys
    http://www.carrona.org/drivers/driver.php?id=AODDriver2.sys
    http://www.carrona.org/drivers/driver.php?id=usbfilter.sys
    http://www.carrona.org/drivers/driver.php?id=AMDACPKSL.SYS
    http://www.carrona.org/drivers/driver.php?id=AtihdWB6.sys
    http://www.carrona.org/drivers/driver.php?id=atikmpag.sys
    http://www.carrona.org/drivers/driver.php?id=atikmdag.sys
    http://www.carrona.org/drivers/driver.php?id=xhunter1.sys
    http://www.carrona.org/drivers/driver.php?id=hiber_storport.sys
    http://www.carrona.org/drivers/driver.php?id=xusb22.sys
    X6va019 - this driver hasn't been added to the DRT as of this run. Please search Google/Bing for the driver if additional information is needed.



    I have highlighted a driver in RED in the above driver list named as "xhunter1.sys". Now, this driver belong to the Themida Protection. You can read about how the themida protection works over here :-
    Oreans Technology : Software Security Defined.

    Now, this piece of protection is generally used in Anti-Piracy measures to determine if a game is hacked or not. If you are using a pirated version of a game, please uninstall the games immediately and buy games from legit sources. So, this protection generally gives the user a Blue Screen once it detects that a game has been HACKED. Please stop using any cheats and stop using software like CheatEngine etc.

    Now about the remaining highlighted drivers in black. Please remove the below software :-
    1. Sonic CD/DVD driver (Used by many other CD/DVD Programs as well)
    2. AODDriver2.sys

    Furthermore, could you please run this ESET Online Scanner? :-
    ESET Online Scanner:


    Note: You can use either Internet Explorer or Mozilla FireFox for this scan. You will however need to disable your current installed Anti-Virus, how to do so can be read here.


    Vista/Windows 7 users: You will need to to right-click on the either the IE or FF icon in the Start Menu or Quick Launch Bar on the Taskbar and select Run as Administrator from the context menu.

    • Please go here to run the scan.
      Note: If using Mozilla Firefox you will need to download esetsmartinstaller_enu.exe when prompted then double click on it to install.
      All of the below instructions are compatible with either Internet Explorer or Mozilla FireFox.
      [/*]
    • Select the option YES, I accept the Terms of Use then click on: [img=http://i280.photobucket.com/albums/kk173/Dakeyras_album2/EOLS2.gif][/*]
    • When prompted allow the Add-On/Active X to install.[/*]
    • Make sure that the option Remove found threats is NOT checked, and the option Scan archives is checked.[/*]
    • Now click on Advanced Settings and select the following:

      • Scan for potentially unwanted applications[/*]
      • Scan for potentially unsafe applications[/*]
      • Enable Anti-Stealth Technology[/*]


      [/*]
    • Now click on: [img=http://i280.photobucket.com/albums/kk173/Dakeyras_album2/EOLS3.gif][/*]
    • The virus signature database... will begin to download. Be patient this make take some time depending on the speed of your Internet Connection.[/*]
    • When completed the Online Scan will begin automatically.[/*]
    • Do not touch either the Mouse or keyboard during the scan otherwise it may stall.[/*]
    • When completed select Uninstall application on close if you so wish, make sure you copy the logfile first![/*]
    • Now click on: [img=http://i280.photobucket.com/albums/kk173/Dakeyras_album2/EOLS4.gif][/*]
    • Use notepad to open the logfile located at C:\Program Files\ESET\EsetOnlineScanner\log.txt.[/*]
    • Copy and paste that log as a reply to this topic.[/*]


    Note: Do not forget to re-enable your Anti-Virus application after running the above scan!


    Also, are you this same guy over here?
    ntoskrnl.exe+1500a0 BSoD crash? - Microsoft Community

      My System SpecsSystem Spec

  3. #3


    Posts : 12
    Windows 8.1


    Thanks for the really.REALLY in depth reply.

    1 . About the links in red. I do usually use Cheat Engine to hack games but even when I don't hack it still crashes (e.g BF3, Alliance of Valliant Arms)
    2. I didnt find a log in the ESET Scanner, but I clicked LIST OF THREATS and copied to a txt file (if thats what you're talking about)
    3. Yes I am the same guy.
      My System SpecsSystem Spec

  4. #4


    India
    Posts : 2,097
    Windows 8.1 Industry Pro B-)


    Quote Originally Posted by blahblah52500 View Post
    Thanks for the really.REALLY in depth reply.

    1 . About the links in red. I do usually use Cheat Engine to hack games but even when I don't hack it still crashes (e.g BF3, Alliance of Valliant Arms)
    2. I didnt find a log in the ESET Scanner, but I clicked LIST OF THREATS and copied to a txt file (if thats what you're talking about)
    3. Yes I am the same guy.
    I am extremely sorry for not replying, this just seems to skipped out of my mind .
    Anyways, I have analyzed your log file from ESET, there are potential unwanted applications in that. Furthermore, could you please remove the following software?

    1. CheatEngine
    2. Xbox 360 Emulator (I found this just on a simple **Google search**. Furthermore, the setup file itself contains multiple threats.)
    3. Please remove this file of the above Xbox 360 Emulator file located over here :- "C:\Users\blahb_000\Downloads\XeMu360_Setup.exe" .

    Also, could you try doing a manual full search on your PC for the "xhunter1.sys" and report back where you found that?

    Furthermore, have you removed the software asked in my previous post?
      My System SpecsSystem Spec

  5. #5


    Posts : 12
    Windows 8.1


    Thanks so much for continuing this topic . On to the reply.

    I've removed the Emulator and CheatEngine but I still can't find the xhunter1.sys when I search my computer. I don't really know if the xhunter1.sys is hidden... but I've searched all over my Local Disk C: but cannot find anything. Looked through (Search This PC) and shows nothing....

    Please reply soon!

    -Felix
      My System SpecsSystem Spec

  6. #6


    India
    Posts : 2,097
    Windows 8.1 Industry Pro B-)


    Quote Originally Posted by blahblah52500 View Post
    Thanks so much for continuing this topic . On to the reply.

    I've removed the Emulator and CheatEngine but I still can't find the xhunter1.sys when I search my computer. I don't really know if the xhunter1.sys is hidden... but I've searched all over my Local Disk C: but cannot find anything. Looked through (Search This PC) and shows nothing....

    Please reply soon!

    -Felix
    Hi Felix!

    I really look to resolve your issue as it is very interesting and would be the first time a case like this has opened before me :P
    Anyways, please enable hidden files by following the guide :-

    Please set your system to show all files.
    Click Start, open My Computer, select the Tools menu and click Folder Options.
    Select the View Tab. Under the Hidden files and folders heading, select Show hidden files and folders.
    Uncheck: Hide file extensions for known file types
    Uncheck the Hide protected operating system files (recommended) option.
    Click Yes to confirm.

    Once, you have enabled the hidden files, see if you can find the driver over here :- "C:\windows\xhunter1.sys".
    Also, can you see anything named similarly as "WellBia" or "Xigncode" or something in Korean in your Add/Remove Programs list? If you have other partitions installed over your machine, then search them as well with the above keywords and for the drivers. Let me know, if you are still not able to find it or not.
      My System SpecsSystem Spec

  7. #7


    Posts : 12
    Windows 8.1


    Fixed the folder options, but still doesn't find xhunter1.sys. I do have xIGNCode in a GAME (Alliance of Valliant Arms) , but doesn't show up in my Programs list.
      My System SpecsSystem Spec

  8. #8


    India
    Posts : 2,097
    Windows 8.1 Industry Pro B-)


    Quote Originally Posted by blahblah52500 View Post
    Fixed the folder options, but still doesn't find xhunter1.sys. I do have xIGNCode in a GAME (Alliance of Valliant Arms) , but doesn't show up in my Programs list.
    I guess that is the problem that Xigncode. I read some threads regarding this technology and people have written that even having a vpn installed on the system would make it crash as the Xigncode detects it and says possible hack. Also, I have found a thread which seemed legit so could you please give it a try whether the problem gets solved or not?

    [Outdated] XINGCODE BYPASS for INJECTORS - MPGH - MultiPlayer Game Hacking & Cheats

    By the way, you could also try uninstalling Alliance Of Valiant Arms to see if it solves the problem or not.
      My System SpecsSystem Spec

  9. #9


    Posts : 12
    Windows 8.1


    I'm not sure Alliance of Valiant Arms is the problem because AVA when Xigncode detects a hack, it just shuts down the game. It hasn't really BSOD'ed much for the game tho. Plus the Xigncode only runs when I play AVA so I'm not sure if it will solve the problem.

    If that were to solve the problem I probably will have more of it later. I still play a lot of high end games and I'm going to buy a lot more. I just want to know I didn't waste my money on something that doesn't work. I will uninstall AVA and try the games. I will post back to you later.

    Thanks,
    Felix

    Edit: It still crashes . Here is the BF3 DMP
    Last edited by blahblah52500; 07 Jul 2014 at 08:50.
      My System SpecsSystem Spec

  10. #10


    India
    Posts : 2,097
    Windows 8.1 Industry Pro B-)


    I see that you have still not removed/dealt with the software I asked you to in my first post. Please uninstall the below software and see if the problem still occurs or not :-
    1. Avira using this **TOOL**
    2. MalwareBytes using this **TOOL**
    3. SuperAntiSpyware using this **TOOL**

    If the problem still does not solve, please follow this guide and enable the Driver Verifier and post back the dump files :-

    Using Driver Verifier to identify issues with Drivers - Windows 7 Help Forums

    Please read the entire guide carefully.

    This time, the dxgmms is blamed which is the DirectX driver for Windows. You could try using the OEM drivers for your graphics card and see if the problems occur or not.
      My System SpecsSystem Spec

Page 1 of 3 123 LastLast
BSOD ntoskrnl.exe/hal.ll (0x0000003b)
Related Threads
Dear Sir/Madam I am having trouble with my new notebook (Windows 8.1, 64bit), on which I keep getting BSOD errors. I tried solving the problem myself but I can't find any solution that eliminates the BSOD. Today I got a BSOD on startup saying: BSOD SYSTEM_SERVICE_EXCEPTION. BlueScreenView...
BSOD Win 8.1 x64 (ntoskrnl.exe) in BSOD Crashes and Debugging
hello I need help to solve this problem. tried just about everything! has become a mystery to me - And I am grateful to any assist ;)
Random BSOD Issues 0x0000003b in BSOD Crashes and Debugging
Hi all, Sorry to be annoying again, recently in the past day or two, I have had a stream of BSOD, all with random numbers, I have attached a log to this post below. Can anyone, please enlighten me up on this? It is really getting on my nerves, I really can't work out the cause. Thanks...
Solved BSOD 0x0000003B in various games in BSOD Crashes and Debugging
Hi, i recently had my power supply die and had to get a new one. Thee new one arrived two days ago and everything seemed to be running fine until i got a BSOD while playing a game and has continued to happen with a few different games. The games include CS:GO, BF4, and dark souls 2. It seems to My...
I've had BSODS since last year. The laptop has been for three RMA's with PC Specialist, in the last one they said they did a full rebuild of the system. The BIOS has been updated, RAM replaced, I've done clean reinstalls of Windows in the past. I had it back for 10 days and then yesterday it...
Solved BSOD with ntoskrnl.exe in BSOD Crashes and Debugging
Hi! :) For a couple of weeks now I'm using Windows 8.1 (upgraded from a Win 8 installation). Everything went fine until yesterday when I got my first BSOD on Win 8.1. Today it happened again. The causes seem to be the same but I hope for your analysis and help! Thanks in advance :)
BSOD - Ntoskrnl.exe in BSOD Crashes and Debugging
Hi, I have been experiencing shutdowns which I am not sure of the reason behind. I have hibernate and sleep disabled. The computer crashes andshutdown on its own. This is only happening when getting into sleep mode. It will never happen If I am working on the laptop no matter for how long. I...
Eight Forums Android App Eight Forums IOS App Follow us on Facebook