Windows 8 and 8.1 Forums


BSOD Windows 8 ntoskrnl.exe

  1. #1


    Florida
    Posts : 12
    Windows 8.1 Pro 64-bit

    BSOD Windows 8 ntoskrnl.exe


    Hi I've been having BSODs for about a month now. Typical ntoskrnl.exe, I've memtested, HDD tested, driver verified, scanned for viruses and malware, updated all my windows updates, ran furmark, ran several sfc /scannows, and I've gotten no leads. BUT just today I got this little error on the bottom right saying my NVIDIA driver crashed because of a memory problem and that it was restarting. Like I've said, I've ran driver verifier with no bsods, memtest no errors, etc. I really think it's my GPU but I don't have the money to just buy a new GPU without knowing for sure that it's the GPU and not just drivers or something. I get several game crashes and tabs on google chrome will crash sometimes also, I think that may be caused by my GPU? I don't know what else would cause it. On a recent bsod hall.dll was another service that had caused the bsod, according to the bsod viewer. I'm attaching my zip from the dm log collector. Thanks guys!

      My System SpecsSystem Spec

  2. #2


    Posts : 2,480
    Windows 10 Pro x64


    Code:
    ASACPI.sys Fri Nov 2 02:54:34 2012 (509327DA)  
    Asus ATK0110 ACPI Utility (a known BSOD maker in Win7  and Win8). Also a part of many Asus utilities (Win8 versions available from  Windows Update as an Optional Update - but check Asus first!) 
    http://www.carrona.org/drivers/driver.php?id=ASACPI.sys 
    
    RTCore64.sys Mon  Mar 11 06:32:06 2013 (513D6C56) 
    RivaTuner/EVGA Precision/MSI  Afterburner (known BSOD issues w/Win7) 
    http://www.carrona.org/drivers/driver.php?id=RTCore64.sys 
    
    agp440.sys Thu Aug 22 13:39:35  2013 (5215F877) 
    Intel AGP Bus Filter 
    http://www.carrona.org/drivers/driver.php?id=agp440.sys 
    
    nv_agp.sys Thu Aug 22 13:39:38 2013  (5215F87A) 
    NVIDIA nForce AGP Bus Filter 
    http://www.carrona.org/drivers/driver.php?id=nv_agp.sys 
    
    tap0901.sys Thu Aug 22 14:40:01  2013 (521606A1) 
    TAP-Win32 Adapter V9 or[br]OpenVPN driver or COMODO 
    http://www.carrona.org/drivers/driver.php?id=tap0901.sys 
    
    Rt64win7.sys Tue Jun 17 13:59:14  2014 (53A02D92) 
    Realtek RTL8168D/8111D Family PCI-E Gigabit Ethernet NIC  
    http://www.carrona.org/drivers/driver.php?id=Rt64win7.sys 
    
    nvhda64v.sys Mon Jul 21 16:17:53  2014 (53CD2111) 
    nVidia HDMI Audio Device (nForce chipset driver) 
    http://www.carrona.org/drivers/driver.php?id=nvhda64v.sys 
    
    nvvad64v.sys Thu Sep 25 17:39:23  2014 (5424372B) 
    NVIDIA Virtual Audio Driver 
    http://www.carrona.org/drivers/driver.php?id=nvvad64v.sys 
    
    NvStreamKms.sys Sat Nov 1 00:04:56 2014 (54541598)  
    nVidia Streaming Kernel service - may cause BSOD in  Win8.1 systems (found in May 2014). Date/TimeStamp: Tue Apr 29 20:59:44 2014  (53604B00) MAY NOT BE A PROBLEM, this is a tenative posting - Appears that  April 29 driver is a problem, July 2014 drivers seem OK 
    http://www.carrona.org/drivers/driver.php?id=NvStreamKms.sys 
    
    nvlddmkm.sys Wed Nov 12  21:51:31 2014 (5463C853) 
    nVidia Video drivers 
    http://www.carrona.org/drivers/driver.php?id=nvlddmkm.sys 
    
    
    
    Debug session time: Thu  Dec 11 18:39:10.335 2014 (UTC + 1:00) 
    Loading Dump File  [C:\Users\Mihael\SysnativeBSODApps\121114-25500-01.dmp] 
    Built by:  9600.17041.amd64fre.winblue_gdr.140305-1710 
    System Uptime: 1 days  10:40:16.346 
    Probably caused by : memory_corruption ( nt!MiAgeWorkingSet+2cb  ) 
    BugCheck 50, {fffff6800066e548, 0, fffff803fd69058b, 2} 
    BugCheck Info:  PAGE_FAULT_IN_NONPAGED_AREA  (50) 
    Bugcheck code 00000050 
    Arguments: 
    Arg1: fffff6800066e548,  memory referenced. 
    Arg2: 0000000000000000, value 0 = read operation, 1 =  write operation. 
    Arg3: fffff803fd69058b, If non-zero, the instruction  address which referenced the bad memory 
    address. 
    Arg4: 0000000000000002,  (reserved) 
    BUGCHECK_STR: AV 
    DEFAULT_BUCKET_ID: WIN8_DRIVER_FAULT  
    PROCESS_NAME: Wow-64.exe 
    FAILURE_BUCKET_ID: AV_nt!MiAgeWorkingSet  
    BiosVersion = 0801 
    BiosReleaseDate = 12/21/2011 
    SystemManufacturer =  ASUSTeK Computer INC. 
    SystemProductName = CM1630  
    ииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииии``  
    Debug session time: Wed Dec 10 07:52:32.001 2014 (UTC + 1:00) 
    Loading  Dump File [C:\Users\Mihael\SysnativeBSODApps\121014-24546-01.dmp] 
    Built by:  9600.16422.amd64fre.winblue_gdr.131006-1505 
    System Uptime: 1 days  0:37:09.418 
    Probably caused by : win32k.sys (  win32k!NtDCompositionDiscardFrame+10e ) 
    BugCheck 3B, {c0000005,  fffff802ab0ddc9d, ffffd0002bc59160, 0} 
    BugCheck Info: SYSTEM_SERVICE_EXCEPTION  (3b) 
    Bugcheck code 0000003B 
    Arguments: 
    Arg1: 00000000c0000005,  Exception code that caused the bugcheck 
    Arg2: fffff802ab0ddc9d, Address of  the instruction which caused the bugcheck 
    Arg3: ffffd0002bc59160, Address of  the context record for the exception that caused the bugcheck 
    Arg4:  0000000000000000, zero. 
    BUGCHECK_STR: 0x3B 
    DEFAULT_BUCKET_ID:  WIN8_DRIVER_FAULT 
    PROCESS_NAME: dwm.exe 
    FAILURE_BUCKET_ID:  0x3B_win32k!NtDCompositionDiscardFrame 
    BiosVersion = 0801  
    BiosReleaseDate = 12/21/2011 
    SystemManufacturer = ASUSTeK Computer INC.  
    SystemProductName = CM1630  
    ииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииии``  
    Debug session time: Mon Dec 8 19:29:42.191 2014 (UTC + 1:00) 
    Loading  Dump File [C:\Users\Mihael\SysnativeBSODApps\120814-31890-01.dmp] 
    ***  WARNING: Unable to verify timestamp for ntoskrnl.exe 
    *** ERROR: Module load  completed but symbols could not be loaded for ntoskrnl.exe 
    Built by:  9600.16422.amd64fre.winblue_gdr.131006-1505 
    System Uptime: 1 days  21:48:06.659 
    Probably caused by : memory_corruption (  nt!MiEmptyWorkingSetHelper+19 ) 
    BugCheck A, {fffff6e0000d8950, 0, 0,  fffff8027fb65151} 
    BugCheck Info: IRQL_NOT_LESS_OR_EQUAL  (a) 
    Bugcheck code 0000000A 
    Arguments: 
    Arg1: fffff6e0000d8950,  memory referenced 
    Arg2: 0000000000000000, IRQL 
    Arg3: 0000000000000000,  bitfield : 
    bit 0 : value 0 = read operation, 1 = write operation 
    bit 3 :  value 0 = not an execute operation, 1 = execute operation (only on chips which  support this level of status) 
    Arg4: fffff8027fb65151, address which  referenced memory 
    BUGCHECK_STR: AV 
    DEFAULT_BUCKET_ID:  VERIFIER_ENABLED_VISTA_MINIDUMP 
    PROCESS_NAME: System 
    FAILURE_BUCKET_ID:  AV_VRF_nt!MiEmptyWorkingSetHelper 
    BiosVersion = 0801 
    BiosReleaseDate =  12/21/2011 
    SystemManufacturer = ASUSTeK Computer INC. 
    SystemProductName  = CM1630  
    ииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииии``  
    Debug session time: Sat Dec 6 21:40:58.723 2014 (UTC + 1:00) 
    Loading  Dump File [C:\Users\Mihael\SysnativeBSODApps\120614-15578-01.dmp] 
    ***  WARNING: Unable to verify timestamp for ntoskrnl.exe 
    *** ERROR: Module load  completed but symbols could not be loaded for ntoskrnl.exe 
    Built by:  9600.16422.amd64fre.winblue_gdr.131006-1505 
    System Uptime: 0 days  2:05:34.562 
    Probably caused by : memory_corruption ( nt!MiBadShareCount+4b )  
    BugCheck 4E, {99, 103ff3, 2, e00010000103fed} 
    BugCheck Info: PFN_LIST_CORRUPT (4e)  
    Bugcheck code 0000004E 
    Arguments: 
    Arg1: 0000000000000099, A PTE or  PFN is corrupt 
    Arg2: 0000000000103ff3, page frame number 
    Arg3:  0000000000000002, current page state 
    Arg4: 0e00010000103fed, 0  
    BUGCHECK_STR: 0x4E_99 
    PROCESS_NAME: steamwebhelper  
    FAILURE_BUCKET_ID: 0x4E_99_VRF_nt!MiBadShareCount 
    BiosVersion = 0801  
    BiosReleaseDate = 12/21/2011 
    SystemManufacturer = ASUSTeK Computer INC.  
    SystemProductName = CM1630  
    ииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииии``  
    Debug session time: Sat Dec 6 19:34:46.636 2014 (UTC + 1:00) 
    Loading  Dump File [C:\Users\Mihael\SysnativeBSODApps\120614-16203-01.dmp] 
    ***  WARNING: Unable to verify timestamp for ntoskrnl.exe 
    *** ERROR: Module load  completed but symbols could not be loaded for ntoskrnl.exe 
    Built by:  9600.16422.amd64fre.winblue_gdr.131006-1505 
    System Uptime: 0 days  4:53:23.178 
    Probably caused by : memory_corruption ( nt!MiSystemFault+27d )  
    BugCheck 50, {ffffe00014d3e460, 0, fffff80108ae284d, 2} 
    BugCheck Info:  PAGE_FAULT_IN_NONPAGED_AREA  (50) 
    Bugcheck code 00000050 
    Arguments: 
    Arg1: ffffe00014d3e460,  memory referenced. 
    Arg2: 0000000000000000, value 0 = read operation, 1 =  write operation. 
    Arg3: fffff80108ae284d, If non-zero, the instruction  address which referenced the bad memory 
    address. 
    Arg4: 0000000000000002,  (reserved) 
    BUGCHECK_STR: AV 
    DEFAULT_BUCKET_ID:  VERIFIER_ENABLED_VISTA_MINIDUMP 
    PROCESS_NAME: chrome.exe  
    FAILURE_BUCKET_ID: AV_VRF_nt!MiSystemFault 
    BiosVersion = 0801  
    BiosReleaseDate = 12/21/2011 
    SystemManufacturer = ASUSTeK Computer INC.  
    SystemProductName = CM1630  
    ииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииии``  
    Debug session time: Sat Dec 6 08:16:36.664 2014 (UTC + 1:00) 
    Loading  Dump File [C:\Users\Mihael\SysnativeBSODApps\120614-22671-01.dmp] 
    ***  WARNING: Unable to verify timestamp for ntoskrnl.exe 
    *** ERROR: Module load  completed but symbols could not be loaded for ntoskrnl.exe 
    Built by:  9600.16422.amd64fre.winblue_gdr.131006-1505 
    System Uptime: 0 days  12:43:14.164 
    Probably caused by : ntkrnlmp.exe (  nt!ExpInterlockedPushEntrySList+1c ) 
    BugCheck 24, {b500190637,  ffffd000213e55c8, ffffd000213e4dd0, fffff800c355896c} 
    BugCheck Info: NTFS_FILE_SYSTEM (24)  
    Bugcheck code 00000024 
    Arguments: 
    Arg1: 000000b500190637 
    Arg2:  ffffd000213e55c8 
    Arg3: ffffd000213e4dd0 
    Arg4: fffff800c355896c  
    PROCESS_NAME: System 
    BUGCHECK_STR: 0x24 
    DEFAULT_BUCKET_ID:  WIN8_DRIVER_FAULT 
    FAILURE_BUCKET_ID: 0x24_nt!ExpInterlockedPushEntrySList  
    BiosVersion = 0801 
    BiosReleaseDate = 12/21/2011 
    SystemManufacturer =  ASUSTeK Computer INC. 
    SystemProductName = CM1630  
    ииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииии``  
    Debug session time: Fri Dec 5 19:32:36.346 2014 (UTC + 1:00) 
    Loading  Dump File [C:\Users\Mihael\SysnativeBSODApps\120514-24312-01.dmp] 
    ***  WARNING: Unable to verify timestamp for ntoskrnl.exe 
    *** ERROR: Module load  completed but symbols could not be loaded for ntoskrnl.exe 
    Built by:  9600.16422.amd64fre.winblue_gdr.131006-1505 
    System Uptime: 0 days  12:28:01.798 
    Probably caused by : memory_corruption (  nt!MiDemoteCombinedPte+42 ) 
    BugCheck 1000007E, {ffffffffc0000005,  fffff80134128686, ffffd000207a9638, ffffd000207a8e40} 
    BugCheck Info: SYSTEM_THREAD_EXCEPTION_NOT_HANDLED_M  (1000007e) 
    Bugcheck code 1000007E 
    Arguments: 
    Arg1:  ffffffffc0000005, The exception code that was not handled 
    Arg2:  fffff80134128686, The address that the exception occurred at 
    Arg3:  ffffd000207a9638, Exception Record Address 
    Arg4: ffffd000207a8e40, Context  Record Address 
    PROCESS_NAME: steamwebhelper 
    BUGCHECK_STR: AV  
    DEFAULT_BUCKET_ID: WIN8_DRIVER_FAULT 
    FAILURE_BUCKET_ID:  AV_nt!MiDemoteCombinedPte 
    BiosVersion = 0801 
    BiosReleaseDate =  12/21/2011 
    SystemManufacturer = ASUSTeK Computer INC. 
    SystemProductName  = CM1630  
    ииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииии``  
    Debug session time: Thu Dec 4 09:23:13.887 2014 (UTC + 1:00) 
    Loading  Dump File [C:\Users\Mihael\SysnativeBSODApps\120414-33171-01.dmp] 
    Built by:  9600.16384.amd64fre.winblue_rtm.130821-1623 
    System Uptime: 0 days  0:32:43.627 
    Probably caused by : ntkrnlmp.exe ( nt! ??  ::FNODOBFM::`string'+b949 ) 
    BugCheck 18, {ffffe000001e3f20,  ffffe00000cad2d0, 1, 1} 
    BugCheck Info: REFERENCE_BY_POINTER  (18) 
    Bugcheck code 00000018 
    Arguments: 
    Arg1: ffffe000001e3f20,  Object type of the object whose reference count is being lowered 
    Arg2:  ffffe00000cad2d0, Object whose reference count is being lowered 
    Arg3:  0000000000000001, Reserved 
    Arg4: 0000000000000001, Reserved 
    The  reference count of an object is illegal for the current state of the object.  
    Each time a driver uses a pointer to an object the driver calls a kernel  routine 
    to increment the reference count of the object. When the driver is  done with the 
    pointer the driver calls another kernel routine to decrement  the reference count. 
    Drivers must match calls to the increment and decrement  routines. This bugcheck 
    can occur because an object's reference count goes  to zero while there are still 
    open handles to the object, in which case the  fourth parameter indicates the number 
    of opened handles. It may also occur  when the object?s reference count drops below zero 
    whether or not there are  open handles to the object, and in that case the fourth parameter 
    contains  the actual value of the pointer references count. 
    BUGCHECK_STR: 0x18  
    DEFAULT_BUCKET_ID: WIN8_DRIVER_FAULT 
    PROCESS_NAME: SearchIndexer.  
    FAILURE_BUCKET_ID: 0x18_CORRUPT_REF_COUNT_nt!_??_::FNODOBFM::_string_  
    BiosVersion = 0801 
    BiosReleaseDate = 12/21/2011 
    SystemManufacturer =  ASUSTeK Computer INC. 
    SystemProductName = CM1630  
    ииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииии``  
    
    
    
    
    --- E O J --- 2014 Dec 13 18:49:07 PM _88-dbug Copyright  2012 Sysnative Forums 
    --- E O J --- 2014 Dec 13 18:49:07 PM _88-dbug  Copyright 2012 Sysnative Forums 
    --- E O J --- 2014 Dec 13 18:49:07 PM  _88-dbug Copyright 2012 Sysnative Forums
    Redo the http://www.sevenforums.com/tutorials...e-checker.html
    http://www.sevenforums.com/tutorials...memtest86.html and
    http://www.sevenforums.com/tutorials...isk-check.html
    Take a screenshot of the Health Tab in HD Tune. Update drivers in red.
    But first of all try just disabling the Nvidia Streaming Kernel Services in Services.
      My System SpecsSystem Spec

  3. #3


    Florida
    Posts : 12
    Windows 8.1 Pro 64-bit


    Attachment 55281Attachment 55282
    I disabled the NVIDIA Streamer Service, I'm going to uninstall MSI Afterburner because I don't need it. I don't know how to get rid of the other driver though, I don't know what program it's connected to. I don't have the latest BIOS so I'm updating that right now, I don't know if that will fix it. Also I'll redo all the other tests.

    UPDATE: I wasn't able to update my BIOS. I use the Asus EZ Flash, and after formatting a USB stick to FAT32 and putting the ROM file on it, I still couldn't select the USB from the directory when I load Asus EZ Flash, not a very big deal, I will try to burn it to a CD and see if it will work tomorrow.
    Last edited by roekori; 14 Dec 2014 at 20:11.
      My System SpecsSystem Spec

  4. #4


    Posts : 2,480
    Windows 10 Pro x64


    Backup your data immediately. Your Hard driver might fail. Test your RAM, please.
      My System SpecsSystem Spec

  5. #5


    Florida
    Posts : 12
    Windows 8.1 Pro 64-bit


    My hard drive is at risk of failure? So it is most likely my hard drive causing my problems?
      My System SpecsSystem Spec

  6. #6


    Posts : 2,480
    Windows 10 Pro x64


    Yes. I don't know if it is yet. That's why I've asked you to test your RAM. That's my suspicion.
      My System SpecsSystem Spec

  7. #7


    Florida
    Posts : 12
    Windows 8.1 Pro 64-bit


    I can tomorrow night, I'm not home at the moment. I have ran memtest before and it came back positive.
      My System SpecsSystem Spec

  8. #8


    Harrisonburg, Va.
    Posts : 10,488
    Windows 8.1.1 Pro with Media Center


    That's why I've asked you to test your RAM
    Attachment 55290
      My System SpecsSystem Spec

  9. #9


    Posts : 2,480
    Windows 10 Pro x64
      My System SpecsSystem Spec

  10. #10


    This looks more like bad RAM to me; I would suggest you test your RAM with memtest86 for no less than 8 passes.

    Code:
    2: kd> knL
     # Child-SP          RetAddr           Call Site
    00 ffffd000`2c2924e8 fffff803`fd7a024a nt!KeBugCheckEx //BSOD
    01 ffffd000`2c2924f0 fffff803`fd6829c9 nt! ?? ::FNODOBFM::`string'+0x20d9a
    02 ffffd000`2c292590 fffff803`fd77922f nt!MmAccessFault+0x7a9 //Generates an access fault
    03 ffffd000`2c2926d0 fffff803`fd69058b nt!KiPageFault+0x12f //Accessed invalid memory
    04 ffffd000`2c292860 fffff803`fd6a3fa5 nt!MiAgeWorkingSet+0x2cb //Configure the working set
    05 ffffd000`2c292b70 fffff803`fd6a3bba nt!MiTrimOrAgeWorkingSet+0xc1 //Cut the working set as the process is likely to be idle
    06 ffffd000`2c292bb0 fffff803`fd6deb92 nt!MiProcessWorkingSets+0x1a6 //Memory Internal working set routines
    07 ffffd000`2c292ca0 fffff803`fd75581e nt!MmWorkingSetManager+0x4a //Transfers control to the working set manager
    08 ffffd000`2c292cd0 fffff803`fd6ea794 nt!KeBalanceSetManager+0x11e //Kernel undocumented routine
    09 ffffd000`2c292d40 fffff803`fd7755c6 nt!PspSystemThreadStartup+0x58
    0a ffffd000`2c292da0 00000000`00000000 nt!KiStartSystemThread+0x16
    Because the error is related to working ste corruption, I'm confident this is RAM failure.

    Code:
    2: kd> dt nt!_MMWSLE fffff58010804000
       +0x000 u1               : <unnamed-tag>
    Memory read error fffff58010804000
    This result is most likely related to the context not being saved in a minidump, although it still seems corrupt.
      My System SpecsSystem Spec

Page 1 of 3 123 LastLast
BSOD Windows 8 ntoskrnl.exe
Related Threads
Please can someone help me as to why I am getting so many bsod's
Hi all, I have had two BSOD so far of the ntoskrnl.exe variety. I have had the HDD tested, driver verified, scanned for viruses and malware, updated all my windows updates, and still here with no idea of whats going on. Please see attached for my Mem dumps. Much appreciated if anyone could...
Been getting a lot of BSOD messages recently on my very new Windows 8.1 machine (both hardware and software), a lot of them are not creating dumps. Mainly related to ntoskrnl.exe but a number of crashes related to possible driver issues. Have run/tried the following: Malwarebytes - Not a...
Solved BSOD halmacpi.dll and ntoskrnl.exe WINDOWS 8 in BSOD Crashes and Debugging
Hello, in 2014 i had 7 BSOD's all happened when i was browsing the web. I did looked in google about halmacpi.dll and ntoskrnl.exe and did as some people suggested. I've run my antivirus and checked HDD, both programs passed the test. Strange is that blue screen in header have big smiley face...
Solved windows 8 bsod ntoskrnl.exe+7a040 in BSOD Crashes and Debugging
Hi all, This is my first post here, so greeting to you folks. Anyway, my problem is that I recently installed Windows 8 Pro on my Acer Aspire One netbook 722 with AMD processor. And I got a BSOD today. I uploaded my dmp file to mediafire 021613-24913-01.dmp I have no idea how to proceed...
Windows 8 ntoskrnl.exe BSoD in BSOD Crashes and Debugging
Hello, my machine is bluescreening about every 15 - 20 minutes. I am pretty certain its a driver issue as I have been running in safe mode for a couple of days now but I have no idea how to interpret the crashdumps. Whocrash keeps mentioning ntoskrnl.exe. Anyway I have posted the PCHF tool...
Windows 8 BSOD - Ntoskrnl.exe? in BSOD Crashes and Debugging
I recently installed Windows 8 RTM and am having tons of BSOD's. The machine is still mostly usable, though, as the errors seem to be occurring randomly. Generally, it boots fine, and plays games/other strenuous things fine. Usually the BSOD's occur when idle or when browsing in Chrome. Before I...
Eight Forums Android App Eight Forums IOS App Follow us on Facebook