Solved BSOD returning from sleep mode, error 0x000000c1

tifightbst · Sep 29, 2014

Hello,

So I've been working with a computer I've put together for a couple of months now, and I haven't been able to figure out what exactly is causing various BSODs. They mostly happen when coming out of sleep mode. The crashes would generally happen once every couple of days. One time I did get it to crash while running the driver Verifier application while copying files from one folder to another. I've been whittling the components left in the machine down, and I'm down to just a hard drive and dvd-drive as extra components at this point. The only configuration I have left to try is to switch to a different hard drive and only run that.

The errors would generally have to do with various "Pool header" issues. I've tried running memtest overnight and it'd get though 6-8 passes easily each overnight session. I've done that a couple of times. I also have run chkdsk to see if there were any issues on the hard drives, but those have come up without issues too. So since I'm not seeing any hardware issues, I'm thinking that this is just a driver issue. I have updated whatever drivers I could see that looked out of date and I make sure that I have the latest Windows Updates. I've tried to keep the software installed on the machine to a minimum after I did a complete reinstallation of Windows 8.1.

So I'm hoping maybe someone can see something in the crash logs that I cannot. Thanks for any assistance.

blueelvis · Oct 1, 2014

Hi TifightBST & Welcome to the forums ^_^,

I have analysed your dump files and below has been provided an analysis of the dump files for informative purposes :-

Code:

**************************Sat Sep 27 04:31:22.141 2014 (UTC + 5:30)**************************
Loading Dump File [C:\SysnativeBSODApps\092614-37421-01.dmp]
 
Windows 8 Kernel Version 9600 MP (4 procs) Free x64
 
Built by: 9600.17085.amd64fre.winblue_gdr.140330-1035
 
System Uptime: 0 days 18:46:47.808
 
Probably caused by : fileinfo.sys ( fileinfo!FIPfFileFSOpPostSetInformation+1796 )
 
BugCheck C1, {ffffcf820aaacfe0, ffffcf820aaac625, 5fc018, 32}
BugCheck Info: [url=http://www.carrona.org/bsodindx.html#0x000000C1]SPECIAL_POOL_DETECTED_MEMORY_CORRUPTION (c1)[/url]
 
Arguments: 
Arg1: ffffcf820aaacfe0, address trying to free
Arg2: ffffcf820aaac625, address where one bit is corrupted
Arg3: 00000000005fc018, (reserved)
Arg4: 0000000000000032, caller is freeing an address where nearby bytes within the same page have a single bit error
BUGCHECK_STR:  0xC1_32
 
PROCESS_NAME:  explorer.exe
 
FAILURE_BUCKET_ID:  0xC1_32_VRF_fileinfo!FIPfFileFSOpPostSetInformation
 
CPUID:        "Intel(R) Core(TM) i5-4670K CPU @ 3.40GHz"
 
MaxSpeed:     3400
 
CurrentSpeed: 3400
 
  BIOS Version                  F6
 
  BIOS Release Date             05/29/2014
 
  Manufacturer                  Gigabyte Technology Co., Ltd.
 
  Product Name                  Z97X-SOC Force
 
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
**************************Fri Sep 26 09:43:28.979 2014 (UTC + 5:30)**************************
Loading Dump File [C:\SysnativeBSODApps\092614-31109-01.dmp]
 
Windows 8 Kernel Version 9600 MP (4 procs) Free x64
 
Built by: 9600.17085.amd64fre.winblue_gdr.140330-1035
 
System Uptime: 0 days 1:50:38.646
 
Probably caused by : WdFilter.sys ( WdFilter!MpIsThisPrefetchOperation+41 )
 
BugCheck 3B, {c0000005, fffff801c7b6fe2b, ffffd00021203610, 0}
BugCheck Info: [url=http://www.carrona.org/bsodindx.html#0x0000003B]SYSTEM_SERVICE_EXCEPTION (3b)[/url]
 
Arguments: 
Arg1: 00000000c0000005, Exception code that caused the bugcheck
Arg2: fffff801c7b6fe2b, Address of the instruction which caused the bugcheck
Arg3: ffffd00021203610, Address of the context record for the exception that caused the bugcheck
Arg4: 0000000000000000, zero.
BUGCHECK_STR:  0x3B
 
DEFAULT_BUCKET_ID:  VERIFIER_ENABLED_VISTA_MINIDUMP
 
PROCESS_NAME:  MediaMallServe
 
FAILURE_BUCKET_ID:  0x3B_VRF_WdFilter!MpIsThisPrefetchOperation
 
CPUID:        "Intel(R) Core(TM) i5-4670K CPU @ 3.40GHz"
 
MaxSpeed:     3400
 
CurrentSpeed: 3400
 
  BIOS Version                  F6
 
  BIOS Release Date             05/29/2014
 
  Manufacturer                  Gigabyte Technology Co., Ltd.
 
  Product Name                  Z97X-SOC Force
 
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
**************************Fri Sep 26 07:08:10.500 2014 (UTC + 5:30)**************************
Loading Dump File [C:\SysnativeBSODApps\092514-20765-01.dmp]
 
Windows 8 Kernel Version 9600 MP (4 procs) Free x64
 
Built by: 9600.17085.amd64fre.winblue_gdr.140330-1035
 
System Uptime: 0 days 2:26:47.136
 
Probably caused by : ntkrnlmp.exe ( nt!ExFreePoolWithTag+cd9 )
 
BugCheck 19, {e, ffffc0019d8f7180, 40dd333514e93c83, 40dd7b3514e93c83}
BugCheck Info: [url=http://www.carrona.org/bsodindx.html#0x00000019]BAD_POOL_HEADER (19)[/url]
 
Arguments: 
Arg1: 000000000000000e, 
Arg2: ffffc0019d8f7180
Arg3: 40dd333514e93c83
Arg4: 40dd7b3514e93c83
BUGCHECK_STR:  0x19_e
 
PROCESS_NAME:  RtkNGUI64.exe
 
FAILURE_BUCKET_ID:  0x19_e_nt!ExFreePoolWithTag
 
CPUID:        "Intel(R) Core(TM) i5-4670K CPU @ 3.40GHz"
 
MaxSpeed:     3400
 
CurrentSpeed: 3400
 
  BIOS Version                  F6
 
  BIOS Release Date             05/29/2014
 
  Manufacturer                  Gigabyte Technology Co., Ltd.
 
  Product Name                  Z97X-SOC Force
 
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``

Below is a list of 3rd party drivers present on the system :-

Code:

**************************Sat Sep 27 04:31:22.141 2014 (UTC + 5:30)**************************
[COLOR=#FF0000][B][U]wdcsam64.sys                Wed Apr 16 14:09:08 2008 (4805BB2C)
[/U][/B][/COLOR]povrtdev.sys                Wed Feb 24 16:21:44 2010 (4B8504C0)
vmci.sys                    Tue May  1 06:44:27 2012 (4F9F38F3)
GEARAspiWDM.sys             Fri May  4 01:26:17 2012 (4FA2E2E1)
VMNET.SYS                   Sun Jul  8 13:28:34 2012 (4FF93DAA)
vmnetadapter.sys            Sun Jul  8 13:28:35 2012 (4FF93DAB)
vmnetbridge.sys             Sun Jul  8 13:29:19 2012 (4FF93DD7)
vsock.sys                   Wed Aug 22 02:40:15 2012 (5033F937)
hcmon.sys                   Fri Oct 12 05:45:27 2012 (5077611F)
bwcW8x64.sys                Wed Feb 13 22:55:48 2013 (511BCC9C)
vmnetuserif.sys             Tue Feb 26 14:26:15 2013 (512C78AF)
VMkbd.sys                   Tue Feb 26 14:58:37 2013 (512C8045)
vmx86.sys                   Tue Feb 26 15:48:21 2013 (512C8BED)
e22w8x64.sys                Thu Mar 21 02:54:01 2013 (514A28F1)
intelppm.sys                Thu Aug 22 14:16:35 2013 (5215CFEB)
TeeDriverx64.sys            Thu Mar 13 23:51:52 2014 (5321F740)
iwdbus.sys                  Fri Mar 14 03:29:14 2014 (53222A32)
igdkmd64.sys                Mon Mar 31 10:48:10 2014 (5338FA92)
dump_iaStorA.sys            Fri Apr  4 04:30:05 2014 (533DE7F5)
iaStorA.sys                 Fri Apr  4 04:30:05 2014 (533DE7F5)
RTKVHD64.sys                Wed May 28 17:47:12 2014 (5385D3C8)
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
**************************Fri Sep 26 09:43:28.979 2014 (UTC + 5:30)**************************
usbaapl64.sys               Wed Nov 28 05:08:02 2012 (50B54EDA)

tifightbst · Oct 2, 2014

Thanks BlueElvis for identifying a known problematic driver. The only thing Western Digital that I have is an external drive I've been using for storage and transferring between refreshes of the computer. I'm guessing that this driver came about when installing some of its automated backup software I've used before. I didn't have anything installed from Western Digital when I posted and there were no services I could find for them either. So I'm guessing an uninstallation didn't clean it up properly. So I uninstalled the external drive, removed that driver file, and plugged in the drive again. The drive itself doesn't install that file when first plugged in as it's working fine and the driver hasn't come back. So hopefully I'll be able to go a couple of weeks without a crash.

blueelvis · Oct 5, 2014

Hi Tifightbst ^_^,

Thanks for your kind words

Yes, the driver file comes from the installation of the Western Digital Software.

In case of any further problems please do post back and I will take a look at it ^_^

tifightbst · Oct 6, 2014

So apparently a day after I last posted I had another crash, but didn't notice it until I checked my event logs today. This one is a FLTMGR_FILE_SYSTEM error and it looks like its identified fileinfo.sys and fltmgr.sys as the source.

blueelvis · Oct 9, 2014

Hi TifightBST ^_^,

Unfortunately, the latest dump file is not attached

Could you please turn on the Driver Verifier using this **GUIDE** and see if it generates a Dump file or not?

Let the driver verifier crash the system few times and then re-run the SF Diagnostic Tool and upload the latest SF Diagnostic Zip FILE.

Let me know how it goes ^_^

tifightbst · Oct 19, 2014

I've had it crash twice more over the past week while running verifier, so I hope this one has helpful information in figuring out what's going on here. thanks again for the help!

blueelvis · Oct 20, 2014

Hi Tifightbst ^_^,

Sadly, the dump files are not revealing. They are all saying that a bad pointer is being used

I would suggest you to run the Memtest using this **GUIDE**.

Till then, could you please upload a ZIPPED copy of the Complete Memory Dump located at "C:\Windows\Memory.DMP". Upload a ZIPPED copy of the dump to file hoster like Mediafire and then post back the link. I need to analyse it before I could say something certain.

Let me know how it goes ^_^

tifightbst · Oct 20, 2014

That's strange that it doesn't include the dump files as I followed the same steps as I did the first time. I've attached the zip of just the minidump files. The big memory.dmp file has been zipped and is available at https://www.dropbox.com/s/drlqlm63vrbc3tm/tifightbst_livingroom-pc_MEMORY_DMP.zip?dl=0

As for the MemTest, I've run it a couple of times overnight, and I usually go 6-8 passes without any issues each time.

blueelvis · Oct 25, 2014

tifightbst said:
That's strange that it doesn't include the dump files as I followed the same steps as I did the first time. I've attached the zip of just the minidump files. The big memory.dmp file has been zipped and is available at https://www.dropbox.com/s/drlqlm63vrbc3tm/tifightbst_livingroom-pc_MEMORY_DMP.zip?dl=0

As for the MemTest, I've run it a couple of times overnight, and I usually go 6-8 passes without any issues each time.

Hi Tifightbst ^_^,

I am extremely sorry for the delay in replying. I have asked friends for helping me out on this one and I am awaiting their response. So, kindly be patient.

-Pranav

EDIT :- In the mean time, kindly run these Harddrive Diagnostics over **HERE** and report back with the results.

tifightbst · Oct 28, 2014

I've run the hard drive tests that come from Seagate as that is what I have as my main drive right now, and those aren't reporting any issues. There's seemingly likely something wrong with the hard drive though as I continue to get BSODs that searching on the error looks like hard drive issues. I've attached the minidump files for the latest two crashes and here are links to the larger Memory.dmp files.

https://www.dropbox.com/s/fqs7z803t4ucs4a/tifightbst_livingroom-pc_MEMORY_DMP_10_28_2014.zip?dl=0
https://www.dropbox.com/s/mxergl7loc7db3k/tifightbst_livingroompc_Memory_dmp_10_28_2014_2.zip?dl=0

And don't worry about any delays. I'm here because I've been pulling my hair out over this issue plenty as I've tried seemingly everything so far to find the cause. The only thing left I'd try doing is to install a fresh copy of Windows on the SSD drive I wanted to use as a system drive originally and leave my large Seagate drive that I wanted for storage completely unplugged from the system to see if that eliminates the issues. I'm hoping it's some driver issue or software configuration that I just need to do rather than the possibility of a bad drive.

tifightbst · Dec 16, 2014

After more crashes in the weeks after my last post, I got myself a cheap motherboard over the Thanksgiving sale time, and I've been going about 3 weeks now without a crash. So I think it's safe to say it's either some physical issue with the motherboard or some driver issue from that company. I will probably just write it off as a loss than try investigating more time and money in the issue. Thanks for all your assistance though in trying to help find the issue!

EDIT: For anyone wondering, the old board was a Gigabyte GA-Z97X-SOC FORCE and the new one is an MSI B85-G41 PC Mate. I've had both my SSD and regular harddrives and my graphics card running on the MSI board the whole time.

blueelvis · Dec 16, 2014

Thanks for letting us know about the solution which worked for you ^-^

Solved BSOD returning from sleep mode, error 0x000000c1

New Member

My Computer

OMG Debugger!

My Computer

New Member

My Computer

OMG Debugger!

My Computer

New Member

My Computer

OMG Debugger!

My Computer

New Member

My Computer

OMG Debugger!

My Computer

New Member

My Computer

OMG Debugger!

My Computer

New Member

My Computer

New Member

My Computer

OMG Debugger!

My Computer