In general, there's 2 ways to try to fix BSOD's.
The first is to fix one thing at a time and see if that helps.
The second is to fix all the things that might be wrong with the system.
The second way is faster than the first way - and that's why I use it.
As for reinstalling the stuff, don't worry about it.
I asked about it because I wasn't certain that you had removed it or not.
The location of the drivers isn't all that important, although the drivers not being in the drivers directory does suggest that it's the MSI Command utilities stuff that's causing it.
I'm glad you got a laugh out of my system specs. I have system problems just like most people, and putting them in the specs helps to show that problems can exist everywhere!
I had no other clue about the Audials software (other than it's age). I'm glad that you recognized that they all belonged to the same software - that makes their presence a lot more significant. Also, it's freezing your computer is a significant find in our analysis. FYI - often when fixing BSOD's we'll get black screen errors or freezes after we stop the BSOD's. This is usually indicative of a problem that's not just caused by one thing alone (for example, it could be that the Audials software is especially unstable with the Afterburner type drivers - thereby causing multiple problems).
FWIW - I prefer to remove (uninstall) the software rather than update it.
That way you can see if it stops the problems immediately.
Then, later on, if you want the software back, you can install a fresh copy and see if it causes any problems then.
The Audials memory dumps are different from the other memory dumps. In short, the others are from BSOD errors that occur in the kernel memory space, while the Audials dump is from application crashes in the user memory space. As such, these are interpreted differently (and use different commands than the kernel space dumps).
I analyze kernel space dumps. I'm not very adept at analyzing user space dumps - but I sometimes can gain a few clues from them (if available). In general the 2 are separate, but there are limited ways for user mode process' to communicate with kernel mode device drivers (you'll see people saying that user mode stuff can't cause a BSOD - and this is why).
The clue that I saw in this one was:
06390000 063f9000 DownloadManager DownloadManager.dll Mon Oct 07 08:55:19 2013 (52525AD7)
What this meant to me is that 1) it was very close to the crash itself (in the stack text), and 2) that it involves the network (download manager). And in post #17 I saw that there was network involvement in the verifier enabled crashes. While this isn't a definite conclusion, it does give us reason to remove the Audials software (temporarily) in order to see if it stops the freezes/BSOD's.
Now, verifier isn't a tool to be used at all times. It's specifically designed to stress problem drivers. It is conceivable that a properly working driver can react badly to the stress that Driver Verifier places on them. As such, I don't suggest using it until you have a problem that calls for it's use. It won't cause any harm, it just may lead you onto a path that's not related to the problem that you're experiencing (the BSOD's that happen when verifier isn't running).
I'll work first with your WinDbg analysis of the last memory dump.
First, please note that this isn't a Driver Verifier Enabled memory dump. Since verifier was running when it happened, there's a couple of possibilities here. Basically it's either a driver problem or a hardware problem - but we're not sure about either.
The memory dump shows that it can't get symbols for bwcW8x64.sys
This is a 3rd party (non-Microsoft) driver, so that's not unusual
But what is unusual is that it's a driver involved in networking - and it's mentioned in the memory dump.
The first time it's mentioned is that the debugger can't find symbols for it. This isn't a definite blame, but it's being shown in the dump so there must be some sort of involvement.
The second time it's mentioned is in the very next line where it's being blamed as the probably cause.
The ntstatus error code (0xc0000409) is for a buffer overrun - and the BSOD error itself is:
KERNEL_SECURITY_CHECK_FAILURE (139)
A kernel component has corrupted a critical data structure. The corruption
could potentially allow a malicious user to gain control of this machine.
I can't recall if you've done the suggested anti-malware checks - but if not, please try several of these free scanners:
Free Online AntiMalware Resources (the list is older so some of them may not work w/Win8).
Then, please replace the bwcW8x64.sys driver. To do this:
- download (but do not install) a fresh copy of the latest, Win8.1 compatible version of the Killer Bandwidth Control Filter Driver.
It's in the lan_bigfoot_8.1.0.23_1.1.44.1048 package_0x54907e58_w81700.zip package (under LAN driver at the download site)
- uninstall the current Killer drivers (and then verify that the bwcW8x64.sys driver has been removed - it's dated 13 August of 2014)
- then install the freshly downloaded drivers (and verify that the bwcW8x64.sys driver has been installed - it'll be dated from June 27 of 2014) Please note that this driver is older than the one currently on your system - so the newer one may have been removed, or it there may be a newer version in one of the other MSI downloads.
- monitor for further BSOD's
Here's the analysis that I did. It's essentially the same thing as yours is:
Analysis:
The following is for informational purposes only.
Code:
[font=lucida console]**************************Mon Dec 29 09:43:20.686 2014 (UTC - 5:00)**************************
Loading Dump File [C:\Users\John\SysnativeBSODApps\122914-58562-01.dmp]
Windows 8 Kernel Version 9600 MP (8 procs) Free x64
Built by: [B]9600[/B].17476.amd64fre.winblue_r5.141029-1500
System Uptime:[B]0 days 0:08:05.512[/B]
*** WARNING: Unable to verify timestamp for bwcW8x64.sys
*** ERROR: Module load completed but symbols could not be loaded for bwcW8x64.sys
Probably caused by :[B]bwcW8x64.sys ( bwcW8x64+3968 )[/B]
BugCheck [B]139, {3, ffffd000259e4e90, ffffd000259e4de8, 0}[/B]
BugCheck Info: [url=http://www.carrona.org/bsodindx.html#0x00000139]KERNEL_SECURITY_CHECK_FAILURE (139)[/url]
Arguments:
Arg1: 0000000000000003, A LIST_ENTRY has been corrupted (i.e. double remove).
Arg2: ffffd000259e4e90, Address of the trap frame for the exception that caused the bugcheck
Arg3: ffffd000259e4de8, Address of the exception record for the exception that caused the bugcheck
Arg4: 0000000000000000, Reserved
BUGCHECK_STR: 0x139
DEFAULT_BUCKET_ID: LIST_ENTRY_CORRUPT
PROCESS_NAME: 360sd.exe
FAILURE_BUCKET_ID: [B]0x139_3_bwcW8x64+3968[/B]
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
[/font]
3rd Party Drivers:
The following is for information purposes only.
Any drivers in red should be updated or removed from your system. And should have been discussed in the body of my post.
Code:
[font=lucida console]**************************Mon Dec 29 09:43:20.686 2014 (UTC - 5:00)**************************
[COLOR=RED][B]MBfilt64.sys Thu Jul 30 23:40:32 2009 (4A7267B0)[/B][/COLOR]
[COLOR=RED][B]LGBusEnum.sys Mon Nov 23 20:36:48 2009 (4B0B38B0)[/B][/COLOR]
[COLOR=RED][B]winio64.sys Fri Jun 4 00:08:03 2010 (4C087C23)[/B][/COLOR]
GEARAspiWDM.sys Thu May 3 15:56:17 2012 (4FA2E2E1)
tbhsd.sys Tue Oct 9 18:01:42 2012 (50749EC6)
rsvcdwdr.sys Tue Oct 9 18:36:49 2012 (5074A701)
[COLOR=RED][B]RTCore64.sys Mon Mar 11 01:32:06 2013 (513D6C56)[/B][/COLOR]
intelppm.sys Thu Aug 22 04:46:35 2013 (5215CFEB)
RrNetCapFilterDriver.sys Fri Nov 1 11:51:24 2013 (5273CDFC)
TeeDriverx64.sys Wed Nov 27 12:56:32 2013 (52963250)
360Box64.sys Fri Nov 29 01:51:33 2013 (52983975)
RtsPer.sys Fri Feb 21 02:35:56 2014 (530701DC)
SAlphaPS264.sys Wed Mar 5 10:00:39 2014 (53173C17)
[COLOR=RED][B]e22w8x64.sys Wed Mar 26 11:58:37 2014 (5332F92D)[/B][/COLOR]
360AntiHacker64.sys Sun Apr 20 23:48:04 2014 (535494F4)
360AvFlt.sys Tue Apr 22 23:54:35 2014 (5357397B)
360Camera64.sys Mon Apr 28 07:39:27 2014 (535E3DEF)
360FsFlt.sys Wed May 7 05:34:14 2014 (5369FE16)
SteelBus64.sys Tue May 27 12:42:05 2014 (5384C05D)
iwdbus.sys Tue Jun 17 17:54:22 2014 (53A0B90E)
nvhda64v.sys Mon Jul 21 10:17:53 2014 (53CD2111)
Qcamainx64.sys Fri Aug 8 02:04:41 2014 (53E46879)
btfilter.sys Fri Aug 8 02:17:53 2014 (53E46B91)
bwcW8x64.sys Wed Aug 13 12:58:49 2014 (53EB9949)
iaStorA.sys Fri Aug 22 17:26:36 2014 (53F7B58C)
dump_iaStorA.sys Fri Aug 22 17:26:36 2014 (53F7B58C)
RTKVHD64.sys Tue Sep 16 06:44:17 2014 (54181481)
SynTP.sys Thu Oct 9 01:07:46 2014 (54361822)
Smb_driver_Intel.sys Thu Oct 9 01:12:24 2014 (54361938)
nvvad64v.sys Thu Nov 20 10:33:54 2014 (546E09E2)
nvlddmkm.sys Thu Nov 20 18:01:23 2014 (546E72C3)
nvvadarm.sys Thu Nov 20 18:16:18 2014 (546E7642)
[COLOR=RED][B]NvStreamKms.sys Sat Nov 22 02:46:45 2014 (54703F65)[/B][/COLOR]
[/font]
http://www.carrona.org/drivers/driver.php?id=MBfilt64.sys
http://www.carrona.org/drivers/driver.php?id=LGBusEnum.sys
http://www.carrona.org/drivers/driver.php?id=winio64.sys
http://www.carrona.org/drivers/driver.php?id=GEARAspiWDM.sys
http://www.carrona.org/drivers/driver.php?id=tbhsd.sys
rsvcdwdr.sys - this driver hasn't been added to the DRT as of this run. Please search Google/Bing for the driver if additional information is needed.
http://www.carrona.org/drivers/driver.php?id=RTCore64.sys
http://www.carrona.org/drivers/driver.php?id=intelppm.sys
RrNetCapFilterDriver.sys - this driver hasn't been added to the DRT as of this run. Please search Google/Bing for the driver if additional information is needed.
http://www.carrona.org/drivers/driver.php?id=TeeDriverx64.sys
http://www.carrona.org/drivers/driver.php?id=360Box64.sys
http://www.carrona.org/drivers/driver.php?id=RtsPer.sys
SAlphaPS264.sys - this driver hasn't been added to the DRT as of this run. Please search Google/Bing for the driver if additional information is needed.
http://www.carrona.org/drivers/driver.php?id=e22w8x64.sys
http://www.carrona.org/drivers/driver.php?id=360AntiHacker64.sys
http://www.carrona.org/drivers/driver.php?id=360AvFlt.sys
http://www.carrona.org/drivers/driver.php?id=360Camera64.sys
http://www.carrona.org/drivers/driver.php?id=360FsFlt.sys
http://www.carrona.org/drivers/driver.php?id=SteelBus64.sys
http://www.carrona.org/drivers/driver.php?id=iwdbus.sys
http://www.carrona.org/drivers/driver.php?id=nvhda64v.sys
Qcamainx64.sys - this driver hasn't been added to the DRT as of this run. Please search Google/Bing for the driver if additional information is needed.
http://www.carrona.org/drivers/driver.php?id=btfilter.sys
http://www.carrona.org/drivers/driver.php?id=bwcW8x64.sys
http://www.carrona.org/drivers/driver.php?id=iaStorA.sys
http://www.carrona.org/drivers/driver.php?id=dump_iaStorA.sys
http://www.carrona.org/drivers/driver.php?id=RTKVHD64.sys
http://www.carrona.org/drivers/driver.php?id=SynTP.sys
http://www.carrona.org/drivers/driver.php?id=Smb_driver_Intel.sys
http://www.carrona.org/drivers/driver.php?id=nvvad64v.sys
http://www.carrona.org/drivers/driver.php?id=nvlddmkm.sys
nvvadarm.sys - this driver hasn't been added to the DRT as of this run. Please search Google/Bing for the driver if additional information is needed.
http://www.carrona.org/drivers/driver.php?id=NvStreamKms.sys