BSOD points to NTOSKRNL.EXE

blueelvis · Nov 8, 2014

Hi Pharcyde ^_^,

I am sorry for the delayed response. I am out of town and have been busy for the whole day. I have analysed your dump files and below has been provided an analysis of the same for informative purposes :-

Code:

1: kd> .trap 0xffffd0002027e530
NOTE: The trap frame does not contain all registers.
Some register values may be zeroed or incorrect.
rax=0000000000000000 rbx=0000000000000000 rcx=ffffe0010efbd958
rdx=ffffe0010efbd958 rsi=0000000000000000 rdi=0000000000000000
rip=fffff8014d691d3b rsp=ffffd0002027e6c0 rbp=0000000000000001
 r8=ffffe0010efbd958  r9=0000000000000010 r10=ffffd0002027e9d0
r11=ffffd0002027ea88 r12=0000000000000000 r13=0000000000000000
r14=0000000000000000 r15=0000000000000000
iopl=0         nv up ei pl nz na pe nc
[COLOR=#FF0000]nt!KeRemoveQueueEx[/COLOR]+0x3db:
fffff801`4d691d3b 81277fffffff    and     dword ptr [rdi],0FFFFFF7Fh ds:00000000`00000000=????????

We see that an And gate operation was applied on RDI which is Zero (Or maybe the Dump file has not saved the information) and the hex value.
Furthermore, the WINDBG has blamed the Hardware as the possible cause. Furthermore, the function highlighted in RED cannot have a NULL value which we are getting.

I would suggest you to run the below Hardware Diagnostics -
Hardware Diagnostics

Also, see if you can find there is an update to the BIOS. Report back the temperatures of the system components as well while running Prime95.

-Pranav

PHaRcYDe · Nov 9, 2014

Update

I ran a couple verifier passes, one with third party drivers enabled and one with Windows drivers enabled. The third party drivers passed, Windows did not. Correct me if I'm wrong but doesn't a driver Verfier failure on Windows drivers normally point to a hardware failure? I will be performing the hardware diagnostics tests again just to make sure there's nothing I missed before. In the meantime if you wouldn't mind taking a look at the latest dump, I would appreciate it.

MEMORY

usasma · Nov 11, 2014

blueelvis is out of town. I'll provide some suggestions until he returns.

As there are other indicators that this might be hardware (from blueelvis' post), it is probably hardware.
FYI - if you set Driver Verifier to crash on 3rd party drivers - and it doesn't, then it's most likely hardware. Windows problems are less likely, but still are possible.

This leads to the question, should I fix Windows - or should I test hardware?
Well, do whichever is easiest for you.
FWIW - if it still BSOD's after a clean, updated Windows install - then it's likely to be hardware.
Also, just to muddy things up a bit, things that look like hardware errors can actually be due to malfunctioning low-level drivers - so it's still possible (but, IMO, that's less likely than Windows problems) that 3rd party drivers could be causing this

I prefer running the hardware tests first - simply because hardware is more likely.
BUT, the hardware tests don't test ALL hardware - so it's possible that you can do all the hardware tests, then reinstall Windows - and still get BSOD's.

So, let's see the results of the hardware tests and we'll discuss where to go from there.

FWIW - the memory dump shows networking involvement in the Driver Verifier Enabled memory dump. As such, that's where our efforts will focus initially. I have VirtualBox installed and have seen many problems with it's networking drivers. I'd suggest uninstalling that for starters.

Due to memory limitations, I can't run all of my scripts on the large memory dump that you uploaded. Please zip up and upload the contents of the C:\Windows\Minidump folder (you may have to copy it to your desktop in order to zip it up).

Here's the analysis of the memory dump (I also ran !analyze -v and lmtsmn commands)

Code:

Microsoft (R) Windows Debugger Version 6.3.9600.16384 AMD64
Copyright (c) Microsoft Corporation. All rights reserved.


Loading Dump File [C:\Users\John\Downloads\MEMORY.DMP]
Kernel Bitmap Dump File: Only kernel address space is available


************* Symbol Path validation summary **************
Response                         Time (ms)     Location
Deferred                                       SRV*c:\symbols*http://msdl.microsoft.com/download/symbols
Deferred                                       srv*c:\SymcachePublic*http://ctxsym.citrix.com/symbolsad/symbols
Symbol search path is: SRV*c:\symbols*http://msdl.microsoft.com/download/symbols;srv*c:\SymcachePublic*http://ctxsym.citrix.com/symbolsad/symbols
Executable search path is: 
Windows 8 Kernel Version 9600 MP (8 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 9600.17328.amd64fre.winblue_r3.140827-1500
Machine Name:
Kernel base = 0xfffff800`3161b000 PsLoadedModuleList = 0xfffff800`318f1370
Debug session time: Sun Nov  9 02:24:24.885 2014 (UTC - 5:00)
System Uptime: 0 days 0:00:07.709
Loading Kernel Symbols
...............................................................
...............................................
Loading User Symbols

Loading unloaded module list
...
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck C4, {9100e, fffff801e4b63d90, ffffcf81ef854f20, ffffcf81ef854f98}

Probably caused by : ndis.sys ( ndis!ndisMInvokeOidRequest+2263c )

Followup: MachineOwner
---------

0: kd> !analyze -v
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

DRIVER_VERIFIER_DETECTED_VIOLATION (c4)
A device driver attempting to corrupt the system has been caught.  This is
because the driver was specified in the registry as being suspect (by the
administrator) and the kernel has enabled substantial checking of this driver.
If the driver attempts to corrupt the system, bugchecks 0xC4, 0xC1 and 0xA will
be among the most commonly seen crashes.
Arguments:
Arg1: 000000000009100e, ID of the 'NdisOidDoubleRequest' rule that was violated.
Arg2: fffff801e4b63d90, A pointer to the string describing the violated rule condition.
Arg3: ffffcf81ef854f20, Address of internal rule state (second argument to !ruleinfo).
Arg4: ffffcf81ef854f98, Address of supplemental states (third argument to !ruleinfo).

Debugging Details:
------------------


DV_VIOLATED_CONDITION:  Double OID request detected at MiniportOidRequest.

DV_MSDN_LINK: http://go.microsoft.com/fwlink/?LinkId=287231

DV_RULE_INFO: 0x9100E

BUGCHECK_STR:  0xc4_NdisOidDoubleRequest_XDV

IMAGE_NAME:  ndis.sys

DEBUG_FLR_IMAGE_TIMESTAMP:  5390592f

MODULE_NAME: ndis

FAULTING_MODULE: fffff801e4b4c000 VerifierExt

DEFAULT_BUCKET_ID:  WIN8_DRIVER_FAULT

PROCESS_NAME:  System

CURRENT_IRQL:  2

ANALYSIS_VERSION: 6.3.9600.16384 (debuggers(dbg).130821-1623) amd64fre

LAST_CONTROL_TRANSFER:  from fffff801e4b5e487 to fffff8003176a1a0

STACK_TEXT:  
ffffd001`32e25f08 fffff801`e4b5e487 : 00000000`000000c4 00000000`0009100e fffff801`e4b63d90 ffffcf81`ef854f20 : nt!KeBugCheckEx
ffffd001`32e25f10 fffff801`e4b4dae0 : ffffcf81`ef854f20 00000000`00000000 ffffd001`32e264b0 fffff800`3191b180 : VerifierExt!SLIC_StatefulAbort+0x22b
ffffd001`32e26000 fffff801`e59306e8 : ffffe000`b39ce1a0 ffffd001`32e264b0 ffffcf81`ef99eba0 00000000`00000000 : VerifierExt!XdvNdisMiniportOidRequestHandler_wrapper+0x4a4
ffffd001`32e26070 fffff801`e58823a3 : ffffe000`b39ce1a0 ffffd001`32e26129 ffffd001`32e264b0 00000000`00000000 : ndis!ndisMInvokeOidRequest+0x2263c
ffffd001`32e260b0 fffff801`e5883324 : 00000000`00000000 ffffe000`b39ce1a0 ffffd001`32e264f8 00000000`00000000 : ndis!ndisMDoOidRequest+0x39b
ffffd001`32e26190 fffff801`e5887e8a : fffff801`e587d0f0 ffffd001`32e264b0 ffffcf81`f59c6f00 fffff801`e4b54a17 : ndis!ndisQueueOidRequest+0x4c4
ffffd001`32e26330 fffff801`e5887fc9 : 00000000`00000001 ffffcf81`f59c6fe0 ffffe000`b39ce1a0 fffff801`e5937a26 : ndis!ndisQuerySetMiniportEx+0x10e
ffffd001`32e26390 fffff801`e5937ab9 : 00000000`00000000 ffffe000`b39ce1a0 00000000`00000008 ffffd001`32e266a0 : ndis!ndisQuerySetMiniport+0x19
ffffd001`32e263d0 fffff801`e5919ab4 : 00000000`0000004b ffffd001`32e26540 ffffd001`32e264a8 00000000`00000001 : ndis!ndisQueryCustomGuids+0x1a4bd
ffffd001`32e26440 fffff801`e59202d6 : ffffd001`00000001 00000000`00000000 ffffe000`b39ce1a0 00000000`00000000 : ndis!ndisQuerySupportedGuidToOidList+0x188
ffffd001`32e265e0 fffff801`e5918cfb : ffffe000`b39ce050 fffff800`00000000 ffffcf81`f5624ed8 ffffcf81`00002000 : ndis!ndisWmiRegister+0x92
ffffd001`32e26640 fffff800`31c91911 : ffffcf81`00000000 ffffcf81`f56249d0 ffffe000`b39ce050 00000000`00000002 : ndis!ndisWMIDispatch+0x19f
ffffd001`32e266a0 fffff800`31cadec9 : ffffcf81`f56249d0 ffffcf81`ef692de0 00000000`00000002 ffffcf81`f59a0f40 : nt!IovCallDriver+0x3cd
ffffd001`32e266f0 fffff800`31c91911 : ffffcf81`ef692f30 ffffcf81`f56249d0 fffff800`31cadec9 ffffcf81`f56249d0 : nt!ViFilterDispatchGeneric+0xd1
ffffd001`32e26730 fffff801`e4a0c076 : 00000000`00000008 ffffcf81`f5624ed8 ffffcf81`ef846f30 ffffcf81`f5982f40 : nt!IovCallDriver+0x3cd
ffffd001`32e26780 fffff801`e4a06a18 : ffffcf81`f56249d0 ffffd001`32e26800 ffffcf81`f56249d0 fffff800`31a13394 : Wdf01000!FxWmiIrpHandler::Dispatch+0x236
ffffd001`32e26810 fffff800`31c91911 : ffffcf81`f5984fe0 00000000`00000002 00000000`00000013 ffffcf81`f5624913 : Wdf01000!FxDevice::DispatchWithLock+0x7d8
ffffd001`32e268f0 fffff800`31cadec9 : ffffcf81`f56249d0 ffffcf81`ef896de0 00000000`00000002 ffffcf81`f5984f40 : nt!IovCallDriver+0x3cd
ffffd001`32e26940 fffff800`31c91911 : ffffcf81`ef896f30 ffffcf81`f56249d0 ffffcf81`ef896de0 fffff800`316ae914 : nt!ViFilterDispatchGeneric+0xd1
ffffd001`32e26980 fffff800`31a13394 : ffffcf81`f5624908 ffffcf81`f56249d0 ffffe000`b39ce050 ffffcf81`f58fef40 : nt!IovCallDriver+0x3cd
ffffd001`32e269d0 fffff800`31a714ae : ffffcf81`f56249d0 00000000`00002000 ffffe000`b3f43000 ffffe000`b3f430ac : nt!WmipForwardWmiIrp+0x140
ffffd001`32e26a50 fffff800`319b68c9 : 00000000`c0000010 00000000`00002000 00000000`00000000 fffff800`318ca200 : nt!WmipSendWmiIrp+0xa2
ffffd001`32e26ab0 fffff800`319b677f : ffffcf81`ef02cfe0 ffffd001`32e26bd0 fffff800`318c7e78 ffffcf81`f0d7efc0 : nt!WmipRegisterOrUpdateDS+0x111
ffffd001`32e26b10 fffff800`3168a5e3 : fffff800`319b66f0 00000000`00000000 ffffd001`32e26bd0 ffffcf81`e8f36f00 : nt!WmipRegistrationWorker+0x8f
ffffd001`32e26b50 fffff800`31719e70 : ffffcf81`e4d46880 ffffcf81`e8f42880 ffffcf81`e8f42880 ffffcf81`e4ddc900 : nt!ExpWorkerThread+0x293
ffffd001`32e26c00 fffff800`317707c6 : ffffd001`37443180 ffffcf81`e8f42880 ffffcf81`e4d46880 45454545`45454545 : nt!PspSystemThreadStartup+0x58
ffffd001`32e26c60 00000000`00000000 : ffffd001`32e27000 ffffd001`32e21000 00000000`00000000 00000000`00000000 : nt!KiStartSystemThread+0x16


STACK_COMMAND:  kb

FOLLOWUP_IP: 
ndis!ndisMInvokeOidRequest+2263c
fffff801`e59306e8 90              nop

SYMBOL_STACK_INDEX:  3

SYMBOL_NAME:  ndis!ndisMInvokeOidRequest+2263c

FOLLOWUP_NAME:  MachineOwner

IMAGE_VERSION:  6.3.9600.17199

BUCKET_ID_FUNC_OFFSET:  2263c

FAILURE_BUCKET_ID:  0xc4_NdisOidDoubleRequest_XDV_VRFK_ndis!ndisMInvokeOidRequest

BUCKET_ID:  0xc4_NdisOidDoubleRequest_XDV_VRFK_ndis!ndisMInvokeOidRequest

ANALYSIS_SOURCE:  KM

FAILURE_ID_HASH_STRING:  km:0xc4_ndisoiddoublerequest_xdv_vrfk_ndis!ndisminvokeoidrequest

FAILURE_ID_HASH:  {d2993a43-5e2c-c89d-4707-5290dd419644}

Followup: MachineOwner
---------

0: kd> lmtsmn
start             end                 module name
fffff801`e4cac000 fffff801`e4d36000   ACPI     ACPI.sys     Sat Feb 22 07:13:57 2014 (53089485)
fffff801`e4bc0000 fffff801`e4bd8000   acpiex   acpiex.sys   Thu Aug 22 07:37:47 2013 (5215F80B)
fffff801`e5400000 fffff801`e5492000   afd      afd.sys      Thu May 29 23:03:01 2014 (5387F4E5)
fffff801`e67b6000 fffff801`e67cd000   ahcache  ahcache.sys  Thu Aug 22 07:39:54 2013 (5215F88A)
fffff801`e65a7000 fffff801`e65b9000   BasicDisplay BasicDisplay.sys Thu Aug 22 07:39:31 2013 (5215F873)
fffff801`e636e000 fffff801`e637c000   BasicRender BasicRender.sys Sat Feb 22 07:14:02 2014 (5308948A)
fffff801`e78f6000 fffff801`e8122000   bcmwl63a bcmwl63a.sys Sat Jun 01 00:59:47 2013 (51A97FC3)
fffff801`e6366000 fffff801`e636e000   Beep     Beep.SYS     Thu Aug 22 07:40:24 2013 (5215F8A8)
fffff801`e49de000 fffff801`e49e8000   BOOTVID  BOOTVID.dll  Thu Aug 22 07:40:26 2013 (5215F8AA)
fffff801`e632f000 fffff801`e635d000   cdrom    cdrom.sys    Thu Aug 22 04:46:35 2013 (5215CFEB)
fffff801`e4800000 fffff801`e4888000   CI       CI.dll       Sat Feb 22 07:12:12 2014 (5308941C)
fffff801`e573c000 fffff801`e5791000   CLASSPNP CLASSPNP.SYS Wed Apr 09 02:53:25 2014 (5344EE65)
fffff801`e4946000 fffff801`e49a7000   CLFS     CLFS.SYS     Wed Mar 19 04:12:20 2014 (53295164)
fffff801`e4d40000 fffff801`e4dcb000   cng      cng.sys      Wed Sep 03 21:53:19 2014 (5407C60F)
fffff801`e67cd000 fffff801`e67dc000   CompositeBus CompositeBus.sys Thu Aug 22 07:38:48 2013 (5215F848)
fffff801`e5791000 fffff801`e57a6000   crashdmp crashdmp.sys Thu Aug 22 07:40:03 2013 (5215F893)
fffff801`e66cc000 fffff801`e675a000   csc      csc.sys      Thu Aug 22 07:38:00 2013 (5215F818)
fffff801`e8296000 fffff801`e839c000   cthda    cthda.sys    Wed Jul 03 03:45:44 2013 (51D3D6A8)
fffff801`e812f000 fffff801`e813c000   cthdb    cthdb.sys    Mon Dec 09 00:40:06 2013 (52A557B6)
fffff801`e6780000 fffff801`e67a6000   dfsc     dfsc.sys     Thu Mar 06 04:22:50 2014 (53183E6A)
fffff801`e59e0000 fffff801`e59fc000   disk     disk.sys     Thu Aug 22 07:39:47 2013 (5215F883)
fffff801`e8183000 fffff801`e819f000   drmk     drmk.sys     Thu Aug 22 07:39:24 2013 (5215F86C)
fffff801`e59d4000 fffff801`e59e0000   dump_diskdump dump_diskdump.sys Thu Aug 22 07:40:18 2013 (5215F8A2)
fffff801`e6319000 fffff801`e632f000   dump_dumpfve dump_dumpfve.sys Sat Feb 22 07:14:48 2014 (530894B8)
fffff801`e605f000 fffff801`e6319000   dump_iaStorA dump_iaStorA.sys Thu Aug 01 21:39:52 2013 (51FB0DE8)
fffff801`e6414000 fffff801`e6595000   dxgkrnl  dxgkrnl.sys  Thu Jun 12 18:32:12 2014 (539A2A6C)
fffff801`e637c000 fffff801`e63dd000   dxgmms1  dxgmms1.sys  Thu Mar 06 04:22:14 2014 (53183E46)
fffff801`e766d000 fffff801`e76e1000   e1i63x64 e1i63x64.sys Wed Mar 20 03:37:29 2013 (51496739)
fffff801`e53a5000 fffff801`e53bf000   EhStorClass EhStorClass.sys Thu Aug 22 07:38:15 2013 (5215F827)
fffff801`e505c000 fffff801`e5072000   fileinfo fileinfo.sys Sat Feb 22 07:13:10 2014 (53089456)
fffff801`e5000000 fffff801`e505c000   fltmgr   fltmgr.sys   Sun Apr 06 10:10:42 2014 (53416062)
fffff801`e56e2000 fffff801`e56ed000   Fs_Rec   Fs_Rec.sys   Thu Aug 22 04:46:33 2013 (5215CFE9)
fffff801`e5a00000 fffff801`e5a95000   fvevol   fvevol.sys   Mon Apr 07 18:25:31 2014 (534325DB)
fffff801`e5d28000 fffff801`e5d94000   fwpkclnt fwpkclnt.sys Sun Sep 07 21:51:02 2014 (540D0B86)
fffff800`31db1000 fffff800`31e21000   hal      hal.dll      Sun Jun 01 18:49:12 2014 (538BADE8)
fffff801`e7562000 fffff801`e757b000   HDAudBus HDAudBus.sys Thu Jul 24 07:45:39 2014 (53D0F1E3)
fffff801`e7600000 fffff801`e7666000   HdAudio  HdAudio.sys  Thu Aug 22 07:38:19 2013 (5215F82B)
fffff801`e6832000 fffff801`e6845000   HECIx64  HECIx64.sys  Mon Jul 02 18:14:58 2012 (4FF21D62)
fffff801`e50eb000 fffff801`e53a5000   iaStorA  iaStorA.sys  Thu Aug 01 21:39:52 2013 (51FB0DE8)
fffff801`e59c5000 fffff801`e59d4000   intelpep intelpep.sys Sat Nov 09 03:45:55 2013 (527DF643)
fffff801`e7800000 fffff801`e781e000   intelppm intelppm.sys Thu Aug 22 04:46:35 2013 (5215CFEB)
fffff800`3096b000 fffff800`30974000   kd       kd.dll       Thu Aug 22 07:40:43 2013 (5215F8BB)
fffff801`e67dc000 fffff801`e67e7000   kdnic    kdnic.sys    Thu Aug 22 07:38:26 2013 (5215F832)
fffff801`e819f000 fffff801`e81ed000   ks       ks.sys       Fri Jul 04 08:58:59 2014 (53B6A513)
fffff801`e56b6000 fffff801`e56d2000   ksecdd   ksecdd.sys   Sat Sep 21 03:59:44 2013 (523D51F0)
fffff801`e5995000 fffff801`e59c5000   ksecpkg  ksecpkg.sys  Wed Sep 03 21:52:55 2014 (5407C5F7)
fffff801`e81ed000 fffff801`e81f2300   ksthunk  ksthunk.sys  Thu Aug 22 07:39:31 2013 (5215F873)
fffff801`e48d2000 fffff801`e4938000   mcupdate_GenuineIntel mcupdate_GenuineIntel.dll Thu Aug 22 07:40:16 2013 (5215F8A0)
fffff801`e4f39000 fffff801`e4f54000   mountmgr mountmgr.sys Thu Aug 22 07:40:04 2013 (5215F894)
fffff801`e65cd000 fffff801`e65d9000   Msfs     Msfs.SYS     Thu Aug 22 07:40:24 2013 (5215F8A8)
fffff801`e4dd6000 fffff801`e4de0000   msisadrv msisadrv.sys Thu Aug 22 07:39:03 2013 (5215F857)
fffff801`e4aef000 fffff801`e4b4c000   msrpc    msrpc.sys    Thu Aug 22 07:39:22 2013 (5215F86A)
fffff801`e6774000 fffff801`e6780000   mssmbios mssmbios.sys Thu Aug 22 07:39:41 2013 (5215F87D)
fffff801`e5a95000 fffff801`e5aac000   mup      mup.sys      Thu Aug 22 07:40:28 2013 (5215F8AC)
fffff801`e587d000 fffff801`e5995000   ndis     ndis.sys     Thu Jun 05 07:49:03 2014 (5390592F)
fffff801`e782b000 fffff801`e7836000   NdisVirtualBus NdisVirtualBus.sys Thu Aug 22 07:36:25 2013 (5215F7B9)
fffff801`e604c000 fffff801`e605d000   netbios  netbios.sys  Thu Aug 22 07:38:58 2013 (5215F852)
fffff801`e6000000 fffff801`e604c000   netbt    netbt.sys    Thu Aug 22 07:37:01 2013 (5215F7DD)
fffff801`e5800000 fffff801`e5878000   NETIO    NETIO.SYS    Tue Sep 09 04:35:50 2014 (540EBBE6)
fffff801`e65b9000 fffff801`e65cd000   Npfs     Npfs.SYS     Thu Aug 22 07:40:25 2013 (5215F8A9)
fffff801`e6768000 fffff801`e6774000   npsvctrig npsvctrig.sys Thu Aug 22 07:38:22 2013 (5215F82E)
fffff801`e675a000 fffff801`e6768000   nsiproxy nsiproxy.sys Thu Aug 22 07:36:34 2013 (5215F7C2)
fffff800`3161b000 fffff800`31db1000   nt       ntkrnlmp.exe Wed Aug 27 19:52:14 2014 (53FE6F2E)
fffff801`e54c0000 fffff801`e56b6000   Ntfs     Ntfs.sys     Thu Jul 24 03:30:36 2014 (53D0B61C)
fffff801`e635d000 fffff801`e6366000   Null     Null.SYS     Thu Aug 22 07:40:24 2013 (5215F8A8)
fffff801`e78b9000 fffff801`e78ed000   nvhda64v nvhda64v.sys Mon Jul 21 10:17:53 2014 (53CD2111)
fffff801`e6886000 fffff801`e7562000   nvlddmkm nvlddmkm.sys Wed Oct 29 21:01:05 2014 (54518DD1)
fffff801`e781e000 fffff801`e782b000   nvvad64v nvvad64v.sys Thu Sep 04 13:10:48 2014 (54089D18)
fffff801`e5492000 fffff801`e54bc000   pacer    pacer.sys    Thu Aug 22 07:36:06 2013 (5215F7A6)
fffff801`e4c71000 fffff801`e4c89000   partmgr  partmgr.sys  Thu Aug 22 07:40:20 2013 (5215F8A4)
fffff801`e4c00000 fffff801`e4c48000   pci      pci.sys      Thu Jul 24 07:45:24 2014 (53D0F1D4)
fffff801`e56d2000 fffff801`e56e2000   pcw      pcw.sys      Thu Aug 22 04:46:34 2013 (5215CFEA)
fffff801`e4c55000 fffff801`e4c71000   pdc      pdc.sys      Fri Nov 01 00:58:42 2013 (52733502)
fffff801`e813c000 fffff801`e8183000   portcls  portcls.sys  Sat Feb 22 07:11:25 2014 (530893ED)
fffff801`e49c9000 fffff801`e49de000   PSHED    PSHED.dll    Sat Sep 14 09:57:19 2013 (52346B3F)
fffff801`e665c000 fffff801`e66cc000   rdbss    rdbss.sys    Tue Dec 17 02:21:22 2013 (52AFFB72)
fffff801`e7838000 fffff801`e7843000   rdpbus   rdpbus.sys   Thu Aug 22 07:38:52 2013 (5215F84C)
fffff801`e5db9000 fffff801`e5dff000   rdyboost rdyboost.sys Sat Feb 22 07:13:40 2014 (53089474)
fffff801`e4e5c000 fffff801`e4ec5000   spaceport spaceport.sys Thu Jul 24 07:45:14 2014 (53D0F1CA)
fffff801`e4f54000 fffff801`e4f71000   storahci storahci.sys Thu Aug 22 07:40:39 2013 (5215F8B7)
fffff801`e4f71000 fffff801`e4fd0000   storport storport.sys Tue May 13 03:58:22 2014 (5371D09E)
fffff801`e7836000 fffff801`e7837600   swenum   swenum.sys   Thu Aug 22 07:39:29 2013 (5215F871)
fffff801`e5ab7000 fffff801`e5d28000   tcpip    tcpip.sys    Sun Sep 07 21:52:24 2014 (540D0BD8)
fffff801`e6400000 fffff801`e640e000   TDI      TDI.SYS      Thu Aug 22 07:39:01 2013 (5215F855)
fffff801`e65d9000 fffff801`e65f9000   tdx      tdx.sys      Thu Aug 22 07:36:34 2013 (5215F7C2)
fffff801`e49a7000 fffff801`e49c9000   tm       tm.sys       Thu Aug 22 07:39:33 2013 (5215F875)
fffff801`e6800000 fffff801`e6832000   ucx01000 ucx01000.sys Sat Feb 22 07:11:33 2014 (530893F5)
fffff801`e67e7000 fffff801`e67f8000   umbus    umbus.sys    Thu Aug 22 07:38:59 2013 (5215F853)
fffff801`e78ad000 fffff801`e78b9000   USBD     USBD.SYS     Sat May 31 02:31:17 2014 (53897735)
fffff801`e76e1000 fffff801`e76f9000   usbehci  usbehci.sys  Sat May 31 02:29:54 2014 (538976E2)
fffff801`e7843000 fffff801`e78ad000   usbhub   usbhub.sys   Thu Jul 24 07:45:29 2014 (53D0F1D9)
fffff801`e7768000 fffff801`e77e0000   UsbHub3  UsbHub3.sys  Thu Jul 24 07:43:31 2014 (53D0F163)
fffff801`e76f9000 fffff801`e7768000   USBPORT  USBPORT.SYS  Sat May 31 02:30:25 2014 (53897701)
fffff801`e757b000 fffff801`e75d0000   USBXHCI  USBXHCI.SYS  Sat Feb 22 07:11:27 2014 (530893EF)
fffff801`e4c48000 fffff801`e4c55000   vdrvroot vdrvroot.sys Thu Aug 22 07:38:49 2013 (5215F849)
fffff801`e4b4c000 fffff801`e4bc0000   VerifierExt VerifierExt.sys Sat Sep 14 07:40:56 2013 (52344B48)
fffff801`e4ec5000 fffff801`e4eda000   volmgr   volmgr.sys   Thu Aug 22 07:39:53 2013 (5215F889)
fffff801`e4eda000 fffff801`e4f39000   volmgrx  volmgrx.sys  Thu Aug 22 07:40:23 2013 (5215F8A7)
fffff801`e56ed000 fffff801`e573c000   volsnap  volsnap.sys  Wed Jun 18 18:41:28 2014 (53A21598)
fffff801`e8122000 fffff801`e812f000   vwifibus vwifibus.sys Thu Aug 22 07:39:00 2013 (5215F854)
fffff801`e63dd000 fffff801`e63f5000   vwififlt vwififlt.sys Wed Apr 30 02:43:46 2014 (53609BA2)
fffff801`e6595000 fffff801`e65a7000   watchdog watchdog.sys Sat Feb 22 07:14:39 2014 (530894AF)
fffff801`e4a00000 fffff801`e4acf000   Wdf01000 Wdf01000.sys Thu Aug 22 07:38:56 2013 (5215F850)
fffff801`e509d000 fffff801`e50e0000   WdFilter WdFilter.sys Fri Mar 21 15:54:18 2014 (532C98EA)
fffff801`e4acf000 fffff801`e4ae0000   WDFLDR   WDFLDR.SYS   Thu Aug 22 07:39:03 2013 (5215F857)
fffff801`e4938000 fffff801`e4946000   werkernel werkernel.sys Thu Aug 22 07:40:24 2013 (5215F8A8)
fffff801`e5d94000 fffff801`e5db9000   wfplwfs  wfplwfs.sys  Sat Mar 08 04:22:45 2014 (531AE165)
fffff801`e81f3000 fffff801`e81fd000   wmiacpi  wmiacpi.sys  Thu Aug 22 07:40:04 2013 (5215F894)
fffff801`e4d36000 fffff801`e4d40000   WMILIB   WMILIB.SYS   Thu Aug 22 07:40:23 2013 (5215F8A7)
fffff801`e5072000 fffff801`e509d000   Wof      Wof.sys      Thu Mar 13 04:27:29 2014 (53216BF1)
fffff801`e4bd8000 fffff801`e4be3000   WppRecorder WppRecorder.sys Thu Aug 22 07:39:40 2013 (5215F87C)

Unloaded modules:
fffff801`e67a6000 fffff801`e67b6000   dam.sys 
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  00010000
fffff801`e4dcb000 fffff801`e4dd6000   WdBoot.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  0000B000
fffff801`e59d4000 fffff801`e59e0000   hwpolicy.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  0000C000

PHaRcYDe · Nov 11, 2014

Update

Here's the minidump file you requested. For some reason it appears as an invalid file when adding it to the uploader, I have provided a mediafire link instead. I'll continue to test the hardware when I have more time on my home PC.

110914-5343-01

usasma · Nov 12, 2014

You can't upload .dmp files here - the workaround is to zip them up (as a .zip file), then they'll upload
But it's no problem using mediafire - as they'll let me download without forcing me to login :0)

Here's the analysis of the minidump.
Please note the drivers below that date from before the release of Windows 8.1 (17 Oct 2013) - check to see that each and every one is compatible w/Windows 8.1 (at the manufacturer's website). If not, you must either remove the device and it's software - or locate a Windows 8.1 compatible update on the web. Removing some drivers may make the system unstable - so if you're unable to find updates, post back for info on the one's that can/cannot be safely removed.

The drivers that are [DEL]struckout[/DEL] don't have updates available (AFAIK).
DO NOT delete them, just leave them be.

Analysis:
The following is for informational purposes only.

Code:

[FONT=lucida console]**************************Sun Nov  9 02:24:24.885 2014 (UTC - 5:00)**************************
Loading Dump File [C:\Users\John\SysnativeBSODApps\110914-5343-01.dmp]
Windows 8 Kernel Version 9600 MP (8 procs) Free x64
Built by: [B]9600[/B].17328.amd64fre.winblue_r3.140827-1500
System Uptime:[B]0 days 0:00:07.709[/B]
Probably caused by :[B]ndis.sys ( ndis!ndisMInvokeOidRequest+2263c )[/B]
BugCheck [B]C4, {9100e, fffff801e4b63d90, ffffcf81ef854f20, ffffcf81ef854f98}[/B]
BugCheck Info: [URL="http://www.carrona.org/bsodindx.html#0x000000C4"]DRIVER_VERIFIER_DETECTED_VIOLATION (c4)[/URL]
DRIVER_VERIFIER_DETECTED_VIOLATION (c4)
Arguments: 
Arg1: 000000000009100e, ID of the 'NdisOidDoubleRequest' rule that was violated.
Arg2: fffff801e4b63d90, A pointer to the string describing the violated rule condition.
Arg3: ffffcf81ef854f20, Address of internal rule state (second argument to !ruleinfo).
Arg4: ffffcf81ef854f98, Address of supplemental states (third argument to !ruleinfo).
BUGCHECK_STR:  0xc4_NdisOidDoubleRequest_XDV
PROCESS_NAME:  System
FAILURE_BUCKET_ID: [B]0xc4_NdisOidDoubleRequest_XDV_VRFK_ndis!ndisMInvokeOidRequest[/B]
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
[/FONT]

3rd Party Drivers:
The following is for information purposes only.
Any drivers in red should be updated or removed from your system. And should have been discussed in the body of my post.

Code:

[FONT=lucida console]**************************Sun Nov  9 02:24:24.885 2014 (UTC - 5:00)**************************
HECIx64.sys                 Mon Jul  2 18:14:58 2012 (4FF21D62) - Intel Management Engine Interface
e1i63x64.sys                Wed Mar 20 03:37:29 2013 (51496739) - Intel Gigabit Ethernet driver
bcmwl63a.sys                Sat Jun  1 00:59:47 2013 (51A97FC3) - Broadcom 802.11 Network Adapter wireless driver
cthda.sys                   Wed Jul  3 03:45:44 2013 (51D3D6A8) - Creative Sound Blaster HDAudio driver
[DEL]dump_iaStorA.sys            Thu Aug  1 21:39:52 2013 (51FB0DE8)
[/DEL]iaStorA.sys                 Thu Aug  1 21:39:52 2013 (51FB0DE8) - Intel Rapid Storage Technology driver
[DEL]intelppm.sys                Thu Aug 22 04:46:35 2013 (5215CFEB)
[/DEL]cthdb.sys                   Mon Dec  9 00:40:06 2013 (52A557B6) - Creative Sound Blaster HDAudio driver
[B]
.....This is where Windows 8.1 was released.....[/B]

nvhda64v.sys                Mon Jul 21 10:17:53 2014 (53CD2111)
nvvad64v.sys                Thu Sep  4 13:10:48 2014 (54089D18)
nvlddmkm.sys                Wed Oct 29 21:01:05 2014 (54518DD1)
[/FONT]

PHaRcYDe · Nov 12, 2014

In terms of updating and removing there's really not much I can do. I have removed Intel Rapid Storage so that should take care of the Intel Management Engine Interface. The last time I updated my Broadcom Network Adapter, it put a driver on my computer that that Usama told me to remove. I have the latest Creative Sound Blaster drivers on my computer, packaged dated Jan 2014. If the drivers are old then that, it's on their end.

Hardware diagnostics are showing all 3 of my drivers are performing as intended. Prime95 is crashing due to one core on my CPU running hotter. I know the diagnostics stated that it has issues with a temperature over 60c. Memtest and GPU stress are fine.

blueelvis · Nov 12, 2014

PHaRcYDe said:
In terms of updating and removing there's really not much I can do. I have removed Intel Rapid Storage so that should take care of the Intel Management Engine Interface. The last time I updated my Broadcom Network Adapter, it put a driver on my computer that that Usama told me to remove. I have the latest Creative Sound Blaster drivers on my computer, packaged dated Jan 2014. If the drivers are old then that, it's on their end.

Hardware diagnostics are showing all 3 of my drivers are performing as intended. Prime95 is crashing due to one core on my CPU running hotter. I know the diagnostics stated that it has issues with a temperature over 60c. Memtest and GPU stress are fine.

Thanks usasma for helping.

@Pharcyde - You need to work out on the temperatures. This would be the reason because Driver Verifier was blaming the Microsoft Drivers. Let us know how it goes ^_^

BSOD points to NTOSKRNL.EXE

blueelvis

OMG Debugger!

My Computer

System One

PHaRcYDe

New Member

My Computer

System One

usasma

Mr. Cranky Pants

My Computer

System One

PHaRcYDe

New Member

My Computer

System One

usasma

Mr. Cranky Pants

My Computer

System One

PHaRcYDe

New Member

My Computer

System One

blueelvis

OMG Debugger!

My Computer

System One