Recurring BSOD while idle. Bug Check Code 0xc000021a

[kghastie]

Hi, I am getting a recurring BSOD. I have fairly recently installed a new, external drive and updated some drivers from the Gigabyte and Intel sites. The BSODs happen a few weeks apart, so trying to undo one driver update at a time, etc..., would take months/years to do. I realize I may have to fall back to that. However, I'd like to see if there are obvious signs from the minidumps or from anything else that could point to a specific driver or issue.

I've attached the BSOD zip file with the last 3 dumps, and I await further instructions.

Thanks in advance,

kghastie

View attachment 57773

 

[Firearm2112]

I have been experiencing this error too. Run Memtest 86 to look for memory errors. 8 cycles are recommended

 

[kghastie]

Yep, I have a long, strange history with Memtest with the original memory I had installed. I was hoping we wouldn't get to that point in the discussion yet When I first built this machine in 2010, I did extensive memory testing. In a bizarre, unsolved mystery, every time I did a cold boot (from Windows only, not Ubuntu or direct from MemTest), I would pass Memtest. Every time I did a reboot into Memtest, I would fail, usually within a couple of minutes, but sometimes only after several hours. This was repeatable and consistent, and the only way to pass MemTest was to reboot from something non-Windows, or to turn off/on the PSU.

I tried removing/replacing every single part, down to the PSU, with the exception of the Mobo and CPU (which I think I reseated), but nothing fixed my issue. Seems like there is a decent chance I have a bad mobo, which at this point I will live with, rather than rebuild the whole dang thing from scratch with a new mobo that will have its own set of compatibility issues with the rest of the hardware, which is 4-5 yrs old at this point.

I have these periodic failures, which up til now have just been a pain (when I was on Win 7, I would just get a glitch where a bunch of services would crash and restart, including my UI Theme service, so I would see a visual change, but after 60 secs everything was back to normal. But these pretty, Win 8 pale BSODs are new and I suspect are aggravated by something I have done recently.

I did upgrade RAM recently, so it's possible that if I test now I will get Memtest errors due to the actual memory being faulty. Can't rule that out, but it's hard to prove that that's the case, since Memtest has always failed for me (maybe I can try some cold boot testing with the new memory, since it should fail that if it's actually faulty).

 

[kghastie]

BTW, I might as well include the events for each of the three occurrences (2/9/15, 1/30/15, 1/20/15), including the post-reboot bugcheck event and the last set of Administrative Events that appeared to have occurred leading up to the reboot (which never actually reboots but hangs on the new, pale, Windows 8 BSOD until I discover it and manually reboot; hence the time gap).

FWIW I have removed the WatchESPN and TouchMail (DaVincisGarageLLC) Metro apps from the system, although I suspect that they are side effects, and that their failures are just a downhill cascade from the rpcss.dll failure (the very first event listed each time).

If there are other useful pieces of information, please let me know.

[SIZE=2][FONT=courier new]**** 2/9/15 ****

2/9/2015 7:55:02 PM    Error    1001    BugCheck
The computer has rebooted from a bugcheck.  The bugcheck was: 0xc000021a (0xffffc0004a190180, 0x0000000000000000, 0x0000000000000000, 0x0000000000000000). A dump was saved in: C:\WINDOWS\Minidump\020915-14687-01.dmp. Report Id: 020915-14687-01.

2/9/2015 6:38:20 PM    Error    5973    Apps    (5973)
Activation of app daVincisGarageLLC.LarryBooBoo_526xyj0r2d3h2!TouchMail failed with error: Unknown HResult Error code: 0xc0000005 See the Microsoft-Windows-TWinUI/Operational log for additional information.

2/9/2015 6:38:16 PM    Error    7031    Service Control Manager
The Remote Procedure Call (RPC) service terminated unexpectedly.  It has done this 1 time(s).  The following corrective action will be taken in 60000 milliseconds: Reboot the machine.

2/9/2015 6:38:16 PM    Error    7031    Service Control Manager
The RPC Endpoint Mapper service terminated unexpectedly.  It has done this 1 time(s).  The following corrective action will be taken in 120000 milliseconds: Restart the service.

2/9/2015 6:38:15 PM    Error    5973    Apps    (5973)
Activation of app microsoft.windowscommunicationsapps_8wekyb3d8bbwe!ppleae38af2e007f4358a809ac99a64a67c1 failed with error: The remote procedure call failed. See the Microsoft-Windows-TWinUI/Operational log for additional information.

2/9/2015 6:38:15 PM    Error    5973    Apps    (5973)
Activation of app microsoft.windowscommunicationsapps_8wekyb3d8bbwe!ppleae38af2e007f4358a809ac99a64a67c1 failed with error: The remote procedure call failed. See the Microsoft-Windows-TWinUI/Operational log for additional information.

2/9/2015 6:38:15 PM    Error    5973    Apps    (5973)
Activation of app ESPNInc.WatchESPN_hpt16c9c0eesj!App failed with error: The remote procedure call failed. See the Microsoft-Windows-TWinUI/Operational log for additional information.

2/9/2015 6:38:15 PM    Error    1000    Application Error    (100)
Faulting application name: svchost.exe_RpcSs, version: 6.3.9600.17415, time stamp: 0x54504177
Faulting module name: rpcss.dll, version: 6.3.9600.17415, time stamp: 0x5450409b
Exception code: 0xc0000005
Fault offset: 0x00000000000351ff
Faulting process id: 0x360
Faulting application start time: 0x01d03c94163aacea
Faulting application path: C:\WINDOWS\system32\svchost.exe
Faulting module path: c:\windows\system32\rpcss.dll
Report Id: b79e432f-b0b4-11e4-beab-6cf049e0cfc7
Faulting package full name:
Faulting package-relative application ID:

**** 1/20/15 ****

1/20/2015 8:41:22 PM    Error    1001    BugCheck
The computer has rebooted from a bugcheck.  The bugcheck was: 0xc000021a (0xffffc000da4dd2e0, 0x0000000000000000, 0x0000000000000000, 0x0000000000000000). A dump was saved in: C:\WINDOWS\MEMORY.DMP. Report Id: 012015-12640-01.

1/20/2015 8:35:11 PM    Error    7031    Service Control Manager
The Remote Procedure Call (RPC) service terminated unexpectedly.  It has done this 1 time(s).  The following corrective action will be taken in 60000 milliseconds: Reboot the machine.

1/20/2015 8:35:11 PM    Error    7031    Service Control Manager
The RPC Endpoint Mapper service terminated unexpectedly.  It has done this 1 time(s).  The following corrective action will be taken in 120000 milliseconds: Restart the service.

1/20/2015 8:35:11 PM    Error    5973    Apps    (5973)
Activation of app Facebook.Facebook_8xx8rvfyw5nnt!App failed with error: The remote procedure call failed. See the Microsoft-Windows-TWinUI/Operational log for additional information.

1/20/2015 8:35:11 PM    Error    5973    Apps    (5973)
Activation of app daVincisGarageLLC.LarryBooBoo_526xyj0r2d3h2!TouchMail failed with error: The remote procedure call failed. See the Microsoft-Windows-TWinUI/Operational log for additional information.

1/20/2015 8:35:11 PM    Error    5973    Apps    (5973)
Activation of app ESPNInc.WatchESPN_hpt16c9c0eesj!App failed with error: The remote procedure call failed. See the Microsoft-Windows-TWinUI/Operational log for additional information.

1/20/2015 8:35:11 PM    Error    1000    Application Error
Faulting application name: svchost.exe_RpcSs, version: 6.3.9600.17415, time stamp: 0x54504177
Faulting module name: rpcss.dll, version: 6.3.9600.17415, time stamp: 0x5450409b
Exception code: 0xc0000005
Fault offset: 0x00000000000351af
Faulting process id: 0x348
Faulting application start time: 0x01d0329f91165274
Faulting application path: C:\WINDOWS\system32\svchost.exe
Faulting module path: c:\windows\system32\rpcss.dll
Report Id: bcc7d904-a10d-11e4-bea4-6cf049e0cfc7
Faulting package full name:
Faulting package-relative application ID:

**** 1/30/15 ****

1/30/2015 8:53:13 AM    Error    1001    BugCheck
The computer has rebooted from a bugcheck.  The bugcheck was: 0xc000021a (0xffffc00086aa8830, 0x0000000000000000, 0x0000000000000000, 0x0000000000000000). A dump was saved in: C:\WINDOWS\Minidump\013015-14609-01.dmp. Report Id: 013015-14609-01.

1/30/2015 8:50:38 AM    Error    7031    Service Control Manager
The Remote Procedure Call (RPC) service terminated unexpectedly.  It has done this 1 time(s). The following corrective action will be taken in 60000 milliseconds: Reboot the machine.

1/30/2015 8:50:38 AM    Error    7031    Service Control Manager
The RPC Endpoint Mapper service terminated unexpectedly.  It has done this 1 time(s).  The following corrective action will be taken in 120000 milliseconds: Restart the service.

1/30/2015 8:50:38 AM    Error    5973    Apps    (5973)
Activation of app daVincisGarageLLC.LarryBooBoo_526xyj0r2d3h2!TouchMail failed with error: The remote procedure call failed. See the Microsoft-Windows-TWinUI/Operational log for additional information.

1/30/2015 8:50:38 AM    Error    1000    Application Error    (100)
Faulting application name: svchost.exe_RpcSs, version: 6.3.9600.17415, time stamp: 0x54504177
Faulting module name: rpcss.dll, version: 6.3.9600.17415, time stamp: 0x5450409b
Exception code: 0xc0000005
Fault offset: 0x000000000001c37e
Faulting process id: 0x338
Faulting application start time: 0x01d0368c72bc6a51
Faulting application path: C:\WINDOWS\system32\svchost.exe
Faulting module path: c:\windows\system32\rpcss.dll
Report Id: f83a9026-a886-11e4-beaa-6cf049e0cfc7
Faulting package full name:
Faulting package-relative application ID:[/FONT][/SIZE]

 

[kghastie]

Also, checking the Application Logs in EventViewer (instead of just Admin Events), I did see two other Informational events for this most recent one. Here they are:

Information    2/9/2015 6:38:16 PM    Windows Error Reporting    1001    None

Fault bucket , type 0
Event Name: APPCRASH
Response: Not available
Cab Id: 0

Problem signature:
P1: svchost.exe_RpcSs
P2: 6.3.9600.17415
P3: 54504177
P4: rpcss.dll
P5: 6.3.9600.17415
P6: 5450409b
P7: c0000005
P8: 00000000000351ff
P9:
P10:

Attached files:
C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\WER7650.tmp.appcompat.txt
C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\WER7661.tmp.WERInternalMetadata.xml
C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_svchost.exe_RpcS_580a85bbe9b40fa8793909991af17a75050fb6_c1c5299b_cab_62ff766f\memory.hdmp
C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_svchost.exe_RpcS_580a85bbe9b40fa8793909991af17a75050fb6_c1c5299b_cab_62ff766f\triagedump.dmp

These files may be available here:
C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_svchost.exe_RpcS_580a85bbe9b40fa8793909991af17a75050fb6_c1c5299b_cab_62ff766f

Analysis symbol:
Rechecking for solution: 0
Report Id: b79e432f-b0b4-11e4-beab-6cf049e0cfc7
Report Status: 32770
Hashed bucket:

Information    2/9/2015 6:38:16 PM    Windows Error Reporting    1001    None

Fault bucket , type 0
Event Name: APPCRASH
Response: Not available
Cab Id: 0

Problem signature:
P1: svchost.exe_RpcSs
P2: 6.3.9600.17415
P3: 54504177
P4: rpcss.dll
P5: 6.3.9600.17415
P6: 5450409b
P7: c0000005
P8: 00000000000351ff
P9:
P10:

Attached files:
C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\WER7650.tmp.appcompat.txt
C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\WER7661.tmp.WERInternalMetadata.xml
C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_svchost.exe_RpcS_580a85bbe9b40fa8793909991af17a75050fb6_c1c5299b_cab_62ff766f\memory.hdmp
C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_svchost.exe_RpcS_580a85bbe9b40fa8793909991af17a75050fb6_c1c5299b_cab_62ff766f\triagedump.dmp

These files may be available here:
C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_svchost.exe_RpcS_580a85bbe9b40fa8793909991af17a75050fb6_c1c5299b_cab_62ff766f

Analysis symbol:
Rechecking for solution: 0
Report Id: b79e432f-b0b4-11e4-beab-6cf049e0cfc7
Report Status: 4
Hashed bucket: