Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

BSOD ntoskrnl.exe


  • Please log in to reply
10 replies to this topic

#1 Xirw

Xirw

  • Members
  • 105 posts
  • OFFLINE
  •  
  • Local time:11:20 PM

Posted 15 November 2013 - 01:23 AM

I reformatted my computer yesterday but today after everything was complete I ran a scan of Hitman Pro (I know im not infected, I just use it everynight before I shut down my pc) and before it ended I got a BSOD.

 

I used the application whocrashed and it gave more info:

 

On Fri 11/15/2013 5:48:20 AM GMT your computer crashed
crash dump file: C:\Windows\Minidump\111513-18751-01.dmp
This was probably caused by the following module: ntoskrnl.exe (nt+0x75BC0)
Bugcheck code: 0x50 (0xFFFFF8A015314000, 0x0, 0xFFFFF80002ECE6FB, 0x0)
Error: PAGE_FAULT_IN_NONPAGED_AREA
file path: C:\Windows\system32\ntoskrnl.exe
product: Microsoft® Windows® Operating System
company: Microsoft Corporation
description: NT Kernel & System
Bug check description: This indicates that invalid system memory has been referenced.
This appears to be a typical software driver bug and is not likely to be caused by a hardware problem.
The crash took place in the Windows kernel. Possibly this problem is caused by another driver that cannot be identified at this time.

 

 

 

I also attached the DMP file as well. I would apprieciate it if anyone can assist me to this error.

 

 

 

Edit: I cant attach the DMP file.


Edited by tg1489, 15 November 2013 - 01:24 AM.


BC AdBot (Login to Remove)

 


#2 davnel

davnel

  • Members
  • 590 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Montana
  • Local time:09:20 PM

Posted 15 November 2013 - 02:12 AM

I know this is probably a dumb question, but a format implies a complete reinstall of Windows (7?). Most motherboard drivers are picked up by the installer, but a few, like video, audio, and the NIC drivers have to be loaded separately. Did they get installed?
.

#3 Xirw

Xirw
  • Topic Starter

  • Members
  • 105 posts
  • OFFLINE
  •  
  • Local time:11:20 PM

Posted 15 November 2013 - 02:17 AM

Yes I reinstalled Windows and used the CD to reinstall the drivers as well. I just want to make sure I don't have any faulty drivers, do you or anybody know of a way to check? Or is Repairing Windows a safe option to use when I use my recovery CD?


Edited by tg1489, 15 November 2013 - 02:18 AM.


#4 jhayz

jhayz

  • BC Advisor
  • 6,922 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:11:20 AM

Posted 15 November 2013 - 02:40 AM

In reference to the BSOD bugcheck : http://www.carrona.org/bsodindx.html#0x00000050

Usual causes:  Defective hardware (particularly memory - but not just RAM), Faulty system service, Antivirus,  Device driver, NTFS corruption, BIOS.

 

If there are latest created minidumps under C:\Windows\Minidump folder, please post the latest dmp logs (atleast 5) by :

Note : If dmp logs from minidump folder is not allowed due to security or admin permission problem, disable UAC control temporarily or see this link.

> Highlight (holding ctrl key) and choosing the dmp logs by hitting enter or left mouse click.
> Right-click and choose send to desktop.
> When on desktop, highlight all dmp logs and right-click and send to compressed zipped folder.
> Upload and share the link by registering here https://www.box.com/
* minidumps log sample 010613 - 16676 -01.dmp -> 01 is for month - 06 for day - 13 is for year.

 

Download SecurityCheck.exe from Here

. Run SecurityCheck and follow the instruction from inside the code box.
. When the scan is finished, a notepad will automatically open as check.txt
   Please copy and paste the contents here on your next reply.

 

Download Speccy and then install the program.  To post and publish a snapshot of your PC.
. In the Menu bar, click File -> Publish Snapshot
. Click Yes > then Copy to Clipboard
. On your next reply, right-click on a empty space and click Paste on reply box then click Post.

 

Download MiniToolBox and run the program. Select
List Last 10 Event Viewers, List Installed Programs and List Users, Partitions and Memory Size then click Go.
A notepad will open then copy-paste the report on your next reply.

 

 


Tekken
 


#5 Xirw

Xirw
  • Topic Starter

  • Members
  • 105 posts
  • OFFLINE
  •  
  • Local time:11:20 PM

Posted 15 November 2013 - 02:56 AM

Thanks for your reply. There was only one dmp file hope thats not a problem

https://app.box.com/s/1fsy10ckdi37ummgfja6

Results of screen317's Security Check version 0.99.73
Windows 7 Service Pack 1 x64 (UAC is disabled!)
Internet Explorer 10
``````````````Antivirus/Firewall Check:``````````````
Windows Security Center service is not running! This report may not be accurate!
Bitdefender Antivirus
Antivirus up to date!
`````````Anti-malware/Other Utilities Check:`````````
MVPS Hosts File
SpywareBlaster 5.0
Secunia PSI (3.0.0.9015)
HostsMan 4.1.96
VirusTotal Uploader 2.0
Malwarebytes Anti-Malware version 1.75.0.1300
Adobe Flash Player 10 Flash Player out of Date!
Mozilla Firefox (25.0)
````````Process Check: objlist.exe by Laurent````````
Tony Documents Antivirus Tools SecurityCheck.exe
Anti-Exploit mbae.exe
Bitdefender Bitdefender vsserv.exe
Bitdefender Bitdefender updatesrv.exe
Bitdefender Bitdefender bdagent.exe
Bitdefender Bitdefender pmbxag.exe
Bitdefender Bitdefender antispam32 bdapppassmgr.exe
Bitdefender Bitdefender SafeBox safeboxservice.exe
Bitdefender Bitdefender downloader.exe
`````````````````System Health check`````````````````
Total Fragmentation on Drive C: 4%
````````````````````End of Log``````````````````````


Here is the Speccy link: http://speccy.piriform.com/results/0niJRiNWrUnmcd4SAor80TI



MiniToolBox by Farbar Version: 13-07-2013
Ran by Tony (administrator) on 15-11-2013 at 02:55:18
Running from "C:\Users\Tony\Documents\Antivirus Tools"
Microsoft Windows 7 Ultimate Service Pack 1 (X64)
Boot Mode: Normal
***************************************************************************

========================= Event log errors: ===============================

Application errors:
==================
Error: (11/14/2013 04:48:33 PM) (Source: Microsoft-Windows-CAPI2) (User: )
Description: Cryptographic Services failed while processing the OnIdentity() call in the System Writer Object.


Details:
AddLegacyDriverFiles: Unable to back up image of binary VMware kbd.

System Error:
The system cannot find the file specified.
.

Error: (11/14/2013 03:29:40 PM) (Source: MsiInstaller) (User: CosmosII)
Description: Product: TSR Workshop -- Error 4153. SlimDX Runtime .NET 2.0 mandatory prerequisite was not correctly installed.

Error: (11/14/2013 02:16:00 PM) (Source: Steam Client Service) (User: )
Description: Error: Failed to poke open firewall

Error: (11/14/2013 11:31:52 AM) (Source: Application Error) (User: )
Description: Faulting application name: nvSCPAPISvr.exe, version: 7.17.13.3165, time stamp: 0x52677ceb
Faulting module name: unknown, version: 0.0.0.0, time stamp: 0x00000000
Exception code: 0xc0000005
Fault offset: 0x74926a64
Faulting process id: 0x4ec
Faulting application start time: 0xnvSCPAPISvr.exe0
Faulting application path: nvSCPAPISvr.exe1
Faulting module path: nvSCPAPISvr.exe2
Report Id: nvSCPAPISvr.exe3

Error: (11/14/2013 01:50:38 AM) (Source: SideBySide) (User: )
Description: Activation context generation failed for "Microsoft.VC80.MFC,processorArchitecture="amd64",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50727.4053"1".
Dependent Assembly Microsoft.VC80.MFC,processorArchitecture="amd64",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50727.4053" could not be found.
Please use sxstrace.exe for detailed diagnosis.

Error: (11/14/2013 01:49:29 AM) (Source: SideBySide) (User: )
Description: Activation context generation failed for "Microsoft.VC80.ATL,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50727.4053"1".
Dependent Assembly Microsoft.VC80.ATL,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50727.4053" could not be found.
Please use sxstrace.exe for detailed diagnosis.

Error: (11/14/2013 01:49:29 AM) (Source: SideBySide) (User: )
Description: Activation context generation failed for "Microsoft.VC80.ATL,processorArchitecture="amd64",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50727.4053"1".
Dependent Assembly Microsoft.VC80.ATL,processorArchitecture="amd64",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50727.4053" could not be found.
Please use sxstrace.exe for detailed diagnosis.

Error: (11/14/2013 01:49:29 AM) (Source: SideBySide) (User: )
Description: Activation context generation failed for "Microsoft.VC80.MFC,processorArchitecture="amd64",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50727.4053"1".
Dependent Assembly Microsoft.VC80.MFC,processorArchitecture="amd64",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50727.4053" could not be found.
Please use sxstrace.exe for detailed diagnosis.

Error: (11/14/2013 01:49:29 AM) (Source: SideBySide) (User: )
Description: Activation context generation failed for "Microsoft.VC80.ATL,processorArchitecture="amd64",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50727.4053"1".
Dependent Assembly Microsoft.VC80.ATL,processorArchitecture="amd64",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50727.4053" could not be found.
Please use sxstrace.exe for detailed diagnosis.

Error: (11/14/2013 01:49:29 AM) (Source: SideBySide) (User: )
Description: Activation context generation failed for "Microsoft.VC80.ATL,processorArchitecture="amd64",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50727.4053"1".
Dependent Assembly Microsoft.VC80.ATL,processorArchitecture="amd64",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50727.4053" could not be found.
Please use sxstrace.exe for detailed diagnosis.


System errors:
=============
Error: (11/15/2013 02:24:40 AM) (Source: VDS Basic Provider) (User: )
Description: Unexpected failure. Error code: 490@01010004

Error: (11/15/2013 01:09:03 AM) (Source: mbamchameleon) (User: )
Description: \Device\HarddiskVolume8\PROGRAM FILES\BITDEFENDER\BITDEFENDER SAFEBOX\SAFEBOXSERVICE.EXE

Error: (11/15/2013 01:09:03 AM) (Source: mbamchameleon) (User: )
Description: \Device\HarddiskVolume8\PROGRAM FILES\BITDEFENDER\BITDEFENDER\ANTISPAM32\BDAPPPASSMGR.EXE

Error: (11/15/2013 01:09:03 AM) (Source: mbamchameleon) (User: )
Description: \Device\HarddiskVolume8\PROGRAM FILES\BITDEFENDER\BITDEFENDER\PMBXAG.EXE

Error: (11/15/2013 01:09:03 AM) (Source: mbamchameleon) (User: )
Description: \Device\HarddiskVolume8\PROGRAM FILES\BITDEFENDER\BITDEFENDER\BDAGENT.EXE

Error: (11/15/2013 01:09:03 AM) (Source: mbamchameleon) (User: )
Description: \Device\HarddiskVolume8\PROGRAM FILES\BITDEFENDER\BITDEFENDER\UPDATESRV.EXE

Error: (11/15/2013 01:09:03 AM) (Source: mbamchameleon) (User: )
Description: \Device\HarddiskVolume8\PROGRAM FILES\BITDEFENDER\BITDEFENDER\VSSERV.EXE

Error: (11/15/2013 01:04:16 AM) (Source: mbamchameleon) (User: )
Description: \Device\HarddiskVolume8\PROGRAM FILES\BITDEFENDER\BITDEFENDER\DOWNLOADER.EXE

Error: (11/15/2013 01:04:16 AM) (Source: mbamchameleon) (User: )
Description: \??\C:\Program Files\Bitdefender\Bitdefender\downloader.exe

Error: (11/15/2013 01:04:01 AM) (Source: mbamchameleon) (User: )
Description: C000000D


Microsoft Office Sessions:
=========================
Error: (11/14/2013 04:48:33 PM) (Source: Microsoft-Windows-CAPI2)(User: )
Description:
Details:
AddLegacyDriverFiles: Unable to back up image of binary VMware kbd.

System Error:
The system cannot find the file specified.

Error: (11/14/2013 03:29:40 PM) (Source: MsiInstaller)(User: CosmosII)
Description: Product: TSR Workshop -- Error 4153. SlimDX Runtime .NET 2.0 mandatory prerequisite was not correctly installed.(NULL)(NULL)(NULL)(NULL)(NULL)

Error: (11/14/2013 02:16:00 PM) (Source: Steam Client Service)(User: )
Description: Failed to poke open firewall

Error: (11/14/2013 11:31:52 AM) (Source: Application Error)(User: )
Description: nvSCPAPISvr.exe7.17.13.316552677cebunknown0.0.0.000000000c000000574926a644ec01cee156d7f74b8eC:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exeunknown44220cac-4d4a-11e3-92bc-000272383d01

Error: (11/14/2013 01:50:38 AM) (Source: SideBySide)(User: )
Description: Microsoft.VC80.MFC,processorArchitecture="amd64",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50727.4053"C:\Program Files (x86)\Bluetooth Suite\adminservice.exe

Error: (11/14/2013 01:49:29 AM) (Source: SideBySide)(User: )
Description: Microsoft.VC80.ATL,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50727.4053"C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll

Error: (11/14/2013 01:49:29 AM) (Source: SideBySide)(User: )
Description: Microsoft.VC80.ATL,processorArchitecture="amd64",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50727.4053"C:\Program Files (x86)\Bluetooth Suite\ObjPush.dll

Error: (11/14/2013 01:49:29 AM) (Source: SideBySide)(User: )
Description: Microsoft.VC80.MFC,processorArchitecture="amd64",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50727.4053"C:\Program Files (x86)\Bluetooth Suite\skypeagent.dll

Error: (11/14/2013 01:49:29 AM) (Source: SideBySide)(User: )
Description: Microsoft.VC80.ATL,processorArchitecture="amd64",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50727.4053"C:\Program Files (x86)\Bluetooth Suite\filetransfer.dll

Error: (11/14/2013 01:49:29 AM) (Source: SideBySide)(User: )
Description: Microsoft.VC80.ATL,processorArchitecture="amd64",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50727.4053"C:\Program Files (x86)\Bluetooth Suite\BtContextMenu.dll


CodeIntegrity Errors:
===================================
Date: 2013-11-14 14:08:09.333
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume3\RivaTuner\RivaTuner64.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

Date: 2013-11-14 14:08:09.287
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume3\RivaTuner\RivaTuner64.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

Date: 2013-11-14 14:08:08.195
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume3\RivaTuner\RivaTuner64.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

Date: 2013-11-14 14:08:08.148
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume3\RivaTuner\RivaTuner64.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

Date: 2013-11-14 14:08:07.087
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume3\RivaTuner\RivaTuner64.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

Date: 2013-11-14 14:08:07.040
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume3\RivaTuner\RivaTuner64.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

Date: 2013-11-14 14:08:05.979
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume3\RivaTuner\RivaTuner64.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

Date: 2013-11-14 14:08:05.933
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume3\RivaTuner\RivaTuner64.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

Date: 2013-11-14 14:08:04.170
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume3\RivaTuner\RivaTuner64.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

Date: 2013-11-14 14:08:04.123
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume3\RivaTuner\RivaTuner64.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.


**** End of log ****



#6 davnel

davnel

  • Members
  • 590 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Montana
  • Local time:09:20 PM

Posted 15 November 2013 - 05:27 AM

Looks like you need to go through the error list and fix the driver issues.
Also, you have a warning on the Hitachi drive - don't know why.

That, by the way, is one heck of a system!
.

Edited by davnel, 15 November 2013 - 05:29 AM.


#7 jhayz

jhayz

  • BC Advisor
  • 6,922 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:11:20 AM

Posted 15 November 2013 - 06:00 AM

The only BSOD process name identified is Hitman Pro X64. Since its a newly installed Windows and a one time BSOD, I would cease on using the particular software. Check also for updated driver and or BIOS versions on your motherboard support site. Did you happen to have installed also the graphics cards WHQL drivers by NVidia support site? Is Bitdefender a paid version or trial/free?

 

Sabertooth X79 Windows 7 drivers

GTX 690 WHQL drivers

 

That, by the way, is one heck of a system!

 

And rarely do I see this kind of setups :lol:


Edited by jhayz, 15 November 2013 - 06:04 AM.

Tekken
 


#8 davnel

davnel

  • Members
  • 590 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Montana
  • Local time:09:20 PM

Posted 15 November 2013 - 06:25 AM

I'll say! He's got over $900 in CPU/MOBO alone. Fun!
And I thought I was doing well with a Z77/i7-3770/32GB system.
.

#9 Xirw

Xirw
  • Topic Starter

  • Members
  • 105 posts
  • OFFLINE
  •  
  • Local time:11:20 PM

Posted 15 November 2013 - 11:37 AM

Thanks for the compliments and help guys. @davnel thanks for letting me know about the hitachi. Its my oldest drive and if there is something wrong or its failing I'll probably replace it soon. @jhayz Yeah I'll try and update my drivers and see what happens but I tried running Hitman multiple times today to see if their were any problems but there wasn't. You guys can close this topic if you want since everything seems to be alright. Once again thank you

#10 jhayz

jhayz

  • BC Advisor
  • 6,922 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:11:20 AM

Posted 15 November 2013 - 09:40 PM

You're Welcome. :thumbup2:


Tekken
 


#11 davnel

davnel

  • Members
  • 590 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Montana
  • Local time:09:20 PM

Posted 15 November 2013 - 10:21 PM

Coitainly! Glad to help.  :cowboy:






0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users