Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

weird pixelated blue screen on boot up today


  • Please log in to reply
28 replies to this topic

#1 Dragonlady24

Dragonlady24

  • Members
  • 703 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:Fox Lake,WI
  • Local time:04:12 PM

Posted 16 May 2015 - 02:36 PM

Hello I have been having minor issues with my windows 8.1 pc lately. Today had me worried a bit as when I turned on my Lenovo H515 I had a pixelated blue screen error. I promptly turned off my screen thinking maybe it was that and when I turned it back on the computer had rebooted itself. I haven't installed any new programs recently but I did install updates 3 days ago and updated Flash player on Thursday this week. 

 

 

This was yesterday after i shut the computer down normally. But i was away from the machine after doing the normal shutdown.

 
The previous system shutdown at 2:48:33 PM on ‎5/‎15/‎2015 was unexpected.
 
 
This was the error for today 5/16 2:12 pm right after i turned on the computer. 
 
The computer has rebooted from a bugcheck.  The bugcheck was: 0x00000019 (0x0000000000000020, 0xffffc0019e61f9a0, 0xffffc0019e61faf0, 0x0000000005150208). A dump was saved in: C:\WINDOWS\MEMORY.DMP. Report Id: 051615-32250-01.
 
 

 

 



BC AdBot (Login to Remove)

 


m

#2 Dragonlady24

Dragonlady24
  • Topic Starter

  • Members
  • 703 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:Fox Lake,WI
  • Local time:04:12 PM

Posted 17 May 2015 - 10:22 AM

Update

I ran mini toolbox and got thre last 10 events. Hopefully this helps.

MiniToolBox by Farbar Version: 11-05-2015 01
Ran by Jody (administrator) on 17-05-2015 at 10:20:50
Running from "C:\Users\Jody\Downloads"
Microsoft Windows 8.1 (X64)
Model: 10125 Manufacturer: LENOVO
Boot Mode: Normal
***************************************************************************

========================= Event log errors: ===============================

Application errors:
==================
Error: (05/16/2015 09:03:10 PM) (Source: Application Hang) (User: )
Description: The program wwahost.exe version 6.3.9600.17415 stopped interacting with Windows and was closed. To see if more information about the problem is available, check the problem history in the Action Center control panel.

Process ID: 1130

Start Time: 01d09044e1c16dac

Termination Time: 4294967295

Application Path: C:\WINDOWS\syswow64\wwahost.exe

Report Id: d8ef1f29-fc38-11e4-8009-7427eac87674

Faulting package full name: Microsoft.SkypeApp_3.1.0.1007_x86__kzf8qxf38zg5c

Faulting package-relative application ID: App

Error: (05/16/2015 08:48:10 PM) (Source: Application Hang) (User: )
Description: The program wwahost.exe version 6.3.9600.17415 stopped interacting with Windows and was closed. To see if more information about the problem is available, check the problem history in the Action Center control panel.

Process ID: 10d0

Start Time: 01d09042c960d79e

Termination Time: 4294967295

Application Path: C:\WINDOWS\syswow64\wwahost.exe

Report Id: c091983a-fc36-11e4-8009-7427eac87674

Faulting package full name: Microsoft.SkypeApp_3.1.0.1007_x86__kzf8qxf38zg5c

Faulting package-relative application ID: App

Error: (05/16/2015 03:17:59 PM) (Source: Application Hang) (User: )
Description: The program wwahost.exe version 6.3.9600.17415 stopped interacting with Windows and was closed. To see if more information about the problem is available, check the problem history in the Action Center control panel.

Process ID: f48

Start Time: 01d09014af9ad2d8

Termination Time: 4294967295

Application Path: C:\WINDOWS\syswow64\wwahost.exe

Report Id: a3dd6fc1-fc08-11e4-8009-7427eac87674

Faulting package full name: Microsoft.SkypeApp_3.1.0.1007_x86__kzf8qxf38zg5c

Faulting package-relative application ID: App

Error: (05/16/2015 02:44:19 PM) (Source: Perflib) (User: )
Description: .NETFrameworkC:\WINDOWS\system32\mscoree.dll8

Error: (05/14/2015 03:02:06 PM) (Source: MsiInstaller) (User: ZEN)
Description: Product: Adobe Reader XI (11.0.10) - Update '{AC76BA86-7AD7-0000-2550-7A8C40011011}' could not be installed. Error code 1625. Windows Installer can create logs to help troubleshoot issues with installing software packages. Use the following link for instructions on turning on logging support: http://go.microsoft.com/fwlink/?LinkId=23127

Error: (05/12/2015 06:13:42 PM) (Source: Perflib) (User: )
Description: .NETFrameworkC:\WINDOWS\system32\mscoree.dll8

Error: (05/12/2015 01:48:15 PM) (Source: Application Hang) (User: )
Description: The program wwahost.exe version 6.3.9600.17415 stopped interacting with Windows and was closed. To see if more information about the problem is available, check the problem history in the Action Center control panel.

Process ID: a2c

Start Time: 01d08ce379f2f0d3

Termination Time: 4294967295

Application Path: C:\WINDOWS\syswow64\wwahost.exe

Report Id: 6ec77b3e-f8d7-11e4-8007-7427eac87674

Faulting package full name: Microsoft.SkypeApp_3.1.0.1007_x86__kzf8qxf38zg5c

Faulting package-relative application ID: App

Error: (05/12/2015 11:54:32 AM) (Source: Desktop Window Manager) (User: )
Description: The Desktop Window Manager has encountered a fatal error (0x8898008d)

Error: (05/10/2015 04:50:42 PM) (Source: Application Error) (User: )
Description: Faulting application name: WINWORD.EXE, version: 15.0.4709.1000, time stamp: 0x54fe8bbc
Faulting module name: ntdll.dll, version: 6.3.9600.17736, time stamp: 0x550f42c2
Exception code: 0xc0000374
Fault offset: 0x000e5624
Faulting process id: 0x1a60
Faulting application start time: 0xWINWORD.EXE0
Faulting application path: WINWORD.EXE1
Faulting module path: WINWORD.EXE2
Report Id: WINWORD.EXE3
Faulting package full name: WINWORD.EXE4
Faulting package-relative application ID: WINWORD.EXE5

Error: (05/08/2015 01:56:23 PM) (Source: Application Hang) (User: )
Description: The program wwahost.exe version 6.3.9600.17415 stopped interacting with Windows and was closed. To see if more information about the problem is available, check the problem history in the Action Center control panel.

Process ID: f2c

Start Time: 01d089bff0bcdcd2

Termination Time: 4294967295

Application Path: C:\WINDOWS\syswow64\wwahost.exe

Report Id: e6896dc4-f5b3-11e4-8007-7427eac87674

Faulting package full name: Microsoft.SkypeApp_3.1.0.1007_x86__kzf8qxf38zg5c

Faulting package-relative application ID: App


System errors:
=============
Error: (05/16/2015 09:06:06 PM) (Source: DCOM) (User: ZEN)
Description: {D63B10C5-BB46-4990-A94F-E40B9D520160}

Error: (05/16/2015 02:12:41 PM) (Source: BugCheck) (User: )
Description: 0x00000019 (0x0000000000000020, 0xffffc0019e61f9a0, 0xffffc0019e61faf0, 0x0000000005150208)C:\WINDOWS\MEMORY.DMP051615-32250-01

Error: (05/16/2015 02:12:37 PM) (Source: Service Control Manager) (User: )
Description: The AppEx Networks Accelerator LWF service failed to start due to the following error:
%%31

Error: (05/16/2015 02:12:37 PM) (Source: APXACC) (User: )
Description: The NDIS6 LWF initialization has failed. (0xC0000001)

Error: (05/16/2015 02:12:02 PM) (Source: Microsoft-Windows-Kernel-Boot) (User: NT AUTHORITY)
Description: 32212254731143952

Error: (05/16/2015 02:12:34 PM) (Source: EventLog) (User: )
Description: The previous system shutdown at 2:48:33 PM on ‎5/‎15/‎2015 was unexpected.

Error: (05/14/2015 02:00:43 PM) (Source: Service Control Manager) (User: )
Description: The AppEx Networks Accelerator LWF service failed to start due to the following error:
%%31

Error: (05/14/2015 02:00:43 PM) (Source: APXACC) (User: )
Description: The NDIS6 LWF initialization has failed. (0xC0000001)

Error: (05/13/2015 07:05:56 PM) (Source: Service Control Manager) (User: )
Description: The Steam Client Service service failed to start due to the following error:
%%1053

Error: (05/13/2015 07:05:56 PM) (Source: Service Control Manager) (User: )
Description: A timeout was reached (30000 milliseconds) while waiting for the Steam Client Service service to connect.


Microsoft Office Sessions:
=========================
Error: (05/16/2015 09:03:10 PM) (Source: Application Hang)(User: )
Description: wwahost.exe6.3.9600.17415113001d09044e1c16dac4294967295C:\WINDOWS\syswow64\wwahost.exed8ef1f29-fc38-11e4-8009-7427eac87674Microsoft.SkypeApp_3.1.0.1007_x86__kzf8qxf38zg5cApp

Error: (05/16/2015 08:48:10 PM) (Source: Application Hang)(User: )
Description: wwahost.exe6.3.9600.1741510d001d09042c960d79e4294967295C:\WINDOWS\syswow64\wwahost.exec091983a-fc36-11e4-8009-7427eac87674Microsoft.SkypeApp_3.1.0.1007_x86__kzf8qxf38zg5cApp

Error: (05/16/2015 03:17:59 PM) (Source: Application Hang)(User: )
Description: wwahost.exe6.3.9600.17415f4801d09014af9ad2d84294967295C:\WINDOWS\syswow64\wwahost.exea3dd6fc1-fc08-11e4-8009-7427eac87674Microsoft.SkypeApp_3.1.0.1007_x86__kzf8qxf38zg5cApp

Error: (05/16/2015 02:44:19 PM) (Source: Perflib)(User: )
Description: .NETFrameworkC:\WINDOWS\system32\mscoree.dll8

Error: (05/14/2015 03:02:06 PM) (Source: MsiInstaller)(User: ZEN)
Description: Adobe Reader XI (11.0.10){AC76BA86-7AD7-0000-2550-7A8C40011011}1625(NULL)(NULL)(NULL)

Error: (05/12/2015 06:13:42 PM) (Source: Perflib)(User: )
Description: .NETFrameworkC:\WINDOWS\system32\mscoree.dll8

Error: (05/12/2015 01:48:15 PM) (Source: Application Hang)(User: )
Description: wwahost.exe6.3.9600.17415a2c01d08ce379f2f0d34294967295C:\WINDOWS\syswow64\wwahost.exe6ec77b3e-f8d7-11e4-8007-7427eac87674Microsoft.SkypeApp_3.1.0.1007_x86__kzf8qxf38zg5cApp

Error: (05/12/2015 11:54:32 AM) (Source: Desktop Window Manager)(User: )
Description: 0x8898008d

Error: (05/10/2015 04:50:42 PM) (Source: Application Error)(User: )
Description: WINWORD.EXE15.0.4709.100054fe8bbcntdll.dll6.3.9600.17736550f42c2c0000374000e56241a6001d08b669ef34b6bC:\Program Files\Microsoft Office 15\Root\Office15\WINWORD.EXEC:\WINDOWS\SYSTEM32\ntdll.dll9a03724c-f75e-11e4-8007-7427eac87674

Error: (05/08/2015 01:56:23 PM) (Source: Application Hang)(User: )
Description: wwahost.exe6.3.9600.17415f2c01d089bff0bcdcd24294967295C:\WINDOWS\syswow64\wwahost.exee6896dc4-f5b3-11e4-8007-7427eac87674Microsoft.SkypeApp_3.1.0.1007_x86__kzf8qxf38zg5cApp


CodeIntegrity Errors:
===================================
Date: 2015-04-23 15:46:38.916
Description: Code Integrity determined that a process (\Device\HarddiskVolume5\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume5\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.

Date: 2015-04-23 15:46:38.322
Description: Code Integrity determined that a process (\Device\HarddiskVolume5\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume5\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.

Date: 2015-04-23 15:46:37.765
Description: Code Integrity determined that a process (\Device\HarddiskVolume5\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume5\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.

Date: 2015-04-23 15:46:35.406
Description: Code Integrity determined that a process (\Device\HarddiskVolume5\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume5\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.

Date: 2015-04-23 15:46:34.789
Description: Code Integrity determined that a process (\Device\HarddiskVolume5\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume5\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.

Date: 2015-04-23 15:46:34.103
Description: Code Integrity determined that a process (\Device\HarddiskVolume5\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume5\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.

Date: 2015-04-23 15:46:33.500
Description: Code Integrity determined that a process (\Device\HarddiskVolume5\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume5\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.

Date: 2015-04-23 15:46:32.903
Description: Code Integrity determined that a process (\Device\HarddiskVolume5\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume5\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.

Date: 2015-04-23 15:46:32.195
Description: Code Integrity determined that a process (\Device\HarddiskVolume5\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume5\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.

Date: 2015-04-23 15:46:31.377
Description: Code Integrity determined that a process (\Device\HarddiskVolume5\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume5\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.

#3 0xFFFF

0xFFFF

  • BSOD Kernel Dump Expert
  • 19 posts
  • OFFLINE
  •  
  • Gender:Not Telling
  • Location:Minkowski Space
  • Local time:11:12 PM

Posted 19 May 2015 - 04:27 PM

Could you please upload the dump files? They're usually located in the following directory:

 

C:\Windows\Minidump


#4 Dragonlady24

Dragonlady24
  • Topic Starter

  • Members
  • 703 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:Fox Lake,WI
  • Local time:04:12 PM

Posted 20 May 2015 - 06:29 PM

Thank you for your reply. Here are the requested files. I cannot get the minidump files to upload is there another way?

Edited by Dragonlady24, 20 May 2015 - 06:31 PM.


#5 usasma

usasma

    Still visually handicapped (avatar is memory developed by my Dad


  • BSOD Kernel Dump Expert
  • 25,074 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:Southeastern CT, USA
  • Local time:05:12 PM

Posted 21 May 2015 - 06:39 AM

Try zipping them up and then posting them.

If you still cannot upload them - then upload them to a free file-hosting service (such as OneDrive or DropBox) and put a link to them here.

Also, it may help to provide this info (which will also, automatically include the dump files):  http://www.bleepingcomputer.com/forums/t/576314/blue-screen-of-death-bsod-posting-instructions-windows-10-81-8-7-vista/


My browser caused a flood of traffic, sio my IP address was banned. Hope to fix it soon. Will get back to posting as soon as Im able.

- John  (my website: http://www.carrona.org/ )**If you need a more detailed explanation, please ask for it. I have the Knack. **  If I haven't replied in 48 hours, please send me a message. My eye problems have recently increased and I'm having difficult reading posts. (23 Nov 2017)FYI - I am completely blind in the right eye and ~30% blind in the left eye.<p>If the eye problems get worse suddenly, I may not be able to respond.If that's the case and help is needed, please PM a staff member for assistance.

#6 Dragonlady24

Dragonlady24
  • Topic Starter

  • Members
  • 703 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:Fox Lake,WI
  • Local time:04:12 PM

Posted 21 May 2015 - 08:30 PM

Here you go, My max file upload capacity was full.

Attached Files



#7 usasma

usasma

    Still visually handicapped (avatar is memory developed by my Dad


  • BSOD Kernel Dump Expert
  • 25,074 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:Southeastern CT, USA
  • Local time:05:12 PM

Posted 22 May 2015 - 04:33 AM

Unfortunately, the upload is just a ahortcut to the minidump file.

Please follow the directions from here ( http://www.bleepingcomputer.com/forums/t/576314/blue-screen-of-death-bsod-posting-instructions-windows-10-81-8-7-vista/ )\

and then upload them to free file-hosting service (such as OneDrive or DropBox) and then post a link to them here.


My browser caused a flood of traffic, sio my IP address was banned. Hope to fix it soon. Will get back to posting as soon as Im able.

- John  (my website: http://www.carrona.org/ )**If you need a more detailed explanation, please ask for it. I have the Knack. **  If I haven't replied in 48 hours, please send me a message. My eye problems have recently increased and I'm having difficult reading posts. (23 Nov 2017)FYI - I am completely blind in the right eye and ~30% blind in the left eye.<p>If the eye problems get worse suddenly, I may not be able to respond.If that's the case and help is needed, please PM a staff member for assistance.

#8 Dragonlady24

Dragonlady24
  • Topic Starter

  • Members
  • 703 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:Fox Lake,WI
  • Local time:04:12 PM

Posted 23 May 2015 - 07:33 PM

https://onedrive.live.com/?cid=15ef601198be565c

Here is the link to my onedrive to see the sysnative file.

#9 Jared44

Jared44

  • BSOD Kernel Dump Expert
  • 205 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Dronfield
  • Local time:10:12 PM

Posted 24 May 2015 - 07:56 AM

You haven't shared it, we need to be able to see it.



#10 Dragonlady24

Dragonlady24
  • Topic Starter

  • Members
  • 703 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:Fox Lake,WI
  • Local time:04:12 PM

Posted 24 May 2015 - 12:15 PM

https://onedrive.live.com/redir?resid=15EF601198BE565C!16759&authkey=!AOtINxOhUcE7g40&ithint=file%2czip

here you are.

#11 usasma

usasma

    Still visually handicapped (avatar is memory developed by my Dad


  • BSOD Kernel Dump Expert
  • 25,074 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:Southeastern CT, USA
  • Local time:05:12 PM

Posted 24 May 2015 - 04:30 PM

Got it!  Only one recent memory dump - the other 2 are from September of 2014

 

BIOS dates from 2013, please update it from the Lenovo support website.  Use the inside Windows installer (if available).

 

This device is disabled.  Is this deliberate?  If so, why?

 

Qualcomm Atheros AR9485 Wireless Network Adapter    PCI\VEN_168C&DEV_0032&SUBSYS_311817AA&REV_01\4&1B96513B&0&0015    This device is disabled.

 

I've also noted a couple of times that dump files weren't collected.  Please start by running these free hardware diagnostics:  http://www.carrona.org/hwdiag.html

Start with the hard drive diagnostics.  As this is Windows 8, it'll be easier to run the SeaTools for Windows test (which, it seems, you already have installed):  http://www.seagate.com/support/downloads/item/seatools-win-master/

Test ALL available hard drives and let us know the results

 

There isn't much info available from the dump file.  As it has very few 3rd party drivers, I'd start by suspecting a hardware problem.  Complete these free hardware diagnostics.  If you can't boot for the MemTest86+ disk, then run the Prime95 test in place of the memory diagnostic.

 

Here's the info that has been extracted from the dump file:

Debug session time: Sat May 16 15:11:28.572 2015 (UTC - 4:00)
Loading Dump File [C:\Users\John\SysnativeBSODApps\051615-32250-01.dmp]
Built by: 9600.17736.amd64fre.winblue_r9.150322-1500
System Uptime: 2 days 0:13:06.548
Probably caused by : ntkrnlmp.exe ( nt!ExAllocatePoolWithTag+1204 )
BugCheck 19, {20, ffffc0019e61f9a0, ffffc0019e61faf0, 5150208}
BugCheck Info: BAD_POOL_HEADER (19)
Bugcheck code 00000019
Arguments:
Arg1: 0000000000000020, a pool block header size is corrupt.
Arg2: ffffc0019e61f9a0, The pool entry we were looking for within the page.
Arg3: ffffc0019e61faf0, The next pool entry.
Arg4: 0000000005150208, (reserved)
BUGCHECK_STR:  0x19_20
PROCESS_NAME:  System
FAILURE_BUCKET_ID:  0x19_20_nt!ExAllocatePoolWithTag
BiosVersion = I9KT25AUS
BiosReleaseDate = 07/26/2013
SystemManufacturer = LENOVO
SystemProductName = 10125
BaseBoardProduct = Kabini CRB
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``

Here's the 3rd party drivers that were in the memory dump:

RTKVHD64.sys                Tue Mar 19 02:49:22 2013 (51480A72)
Rt630x64.sys                Fri May 10 05:59:08 2013 (518CC4EC)
RtsUVStor.sys               Fri Jun 15 01:43:06 2012 (4FDACB6A)
amd_sata.sys                Fri Nov 30 04:00:42 2012 (50B875BA)
amd_xata.sys                Fri Nov 30 04:00:46 2012 (50B875BE)
atikmdag.sys                Mon Sep 15 18:21:08 2014 (54176654)
atikmpag.sys                Mon Sep 15 17:59:06 2014 (5417612A)
hiber_amd_sata.sys          Fri Nov 30 04:00:42 2012 (50B875BA)
lvrs64.sys                  Mon Oct 22 22:11:24 2012 (5085FCCC)
usbfilter.sys               Tue Aug 28 21:27:12 2012 (503D6FF0)





These are the reference links for the drivers listed above (in case you have to look for new drivers):
http://www.carrona.org/drivers/driver.php?id=RTKVHD64.sys
http://www.carrona.org/drivers/driver.php?id=Rt630x64.sys
http://www.carrona.org/drivers/driver.php?id=RtsUVStor.sys
http://www.carrona.org/drivers/driver.php?id=amd_sata.sys
http://www.carrona.org/drivers/driver.php?id=amd_xata.sys
http://www.carrona.org/drivers/driver.php?id=atikmdag.sys
http://www.carrona.org/drivers/driver.php?id=atikmpag.sys
hiber_amd_sata.sys - this driver hasn't been added to the DRT as of this run. Please search Google/Bing for the driver if additional information is needed.
http://www.carrona.org/drivers/driver.php?id=lvrs64.sys
http://www.carrona.org/drivers/driver.php?id=usbfilter.sys
 


My browser caused a flood of traffic, sio my IP address was banned. Hope to fix it soon. Will get back to posting as soon as Im able.

- John  (my website: http://www.carrona.org/ )**If you need a more detailed explanation, please ask for it. I have the Knack. **  If I haven't replied in 48 hours, please send me a message. My eye problems have recently increased and I'm having difficult reading posts. (23 Nov 2017)FYI - I am completely blind in the right eye and ~30% blind in the left eye.<p>If the eye problems get worse suddenly, I may not be able to respond.If that's the case and help is needed, please PM a staff member for assistance.

#12 Dragonlady24

Dragonlady24
  • Topic Starter

  • Members
  • 703 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:Fox Lake,WI
  • Local time:04:12 PM

Posted 24 May 2015 - 07:12 PM

I already did a hard drive check. It passed. As for why my wireless driver is disabled. It is because I am connected via the modem since I do not get signal where I am at. I am in an older house and the modem is kept where my room mates computer is that is 4 rooms away. I suspect that I the video card that came with my lenovo pc may be bad that is the only issue I can think of.

#13 Dragonlady24

Dragonlady24
  • Topic Starter

  • Members
  • 703 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:Fox Lake,WI
  • Local time:04:12 PM

Posted 24 May 2015 - 07:16 PM

--------------- SeaTools for Windows v1.4.0.2 ---------------
5/16/2015 2:59:54 PM
Model Number: ST500DM002-1BD142
Serial Number: S2AJT058
Firmware Revision: KC65
Long Generic - Started 5/16/2015 2:59:53 PM
Long Generic - Pass 5/16/2015 4:21:27 PM

#14 Jared44

Jared44

  • BSOD Kernel Dump Expert
  • 205 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Dronfield
  • Local time:10:12 PM

Posted 24 May 2015 - 07:25 PM

No 3rd party drivers present doesn't necessarily mean it's hardware related.

1: kd> .bugcheck
Bugcheck code 00000019
Arguments 00000000`00000020 ffffc001`9e61f9a0 ffffc001`9e61faf0 00000000`05150208

1: kd> k
Child-SP          RetAddr           Call Site
ffffd001`1a846578 fffff802`a7cba0f4 nt!KeBugCheckEx //Pool corrupt
ffffd001`1a846580 fffff800`e3a2cd43 nt!ExAllocatePoolWithTag+0x1204 //Free pool
ffffd001`1a846670 fffff800`e3a2c612 fltmgr!FltReleaseFileNameInformation+0xc3 //Release file allocations
ffffd001`1a8466b0 fffff800`e3a024c0 fltmgr!FltpRemoveAllNamesCachedForFileObject+0x1c2
ffffd001`1a846730 fffff800`e3a035ac fltmgr!FltpPerformPreCallbacks+0x720
ffffd001`1a846840 fffff800`e3a015ce fltmgr!FltpPassThroughInternal+0x8c
ffffd001`1a846870 fffff800`e3a010aa fltmgr!FltpPassThrough+0x2be
ffffd001`1a846920 fffff802`a7e3beb4 fltmgr!FltpDispatch+0x9a
ffffd001`1a846980 fffff802`a7e42944 nt!IopDeleteFile+0x128
ffffd001`1a846a00 fffff802`a7a6801f nt!ObpRemoveObjectRoutine+0x64
ffffd001`1a846a60 fffff802`a7dbe0d2 nt!ObfDereferenceObject+0x8f
ffffd001`1a846aa0 fffff802`a7b2efb4 nt!MiSegmentDelete+0x11e
ffffd001`1a846ae0 fffff802`a7b4d601 nt!MiProcessDereferenceList+0x100
ffffd001`1a846b70 fffff802`a7b1536c nt!MiDereferenceSegmentThread+0xd9
ffffd001`1a846c00 fffff802`a7b6c2c6 nt!PspSystemThreadStartup+0x58
ffffd001`1a846c60 00000000`00000000 nt!KiStartSystemThread+0x16

1: kd> !pool ffffc0019e61f9a0
Pool page ffffc0019e61f9a0 region is Unknown
 ffffc0019e61f000 size:  510 previous size:    0  (Allocated)  Ntff
 ffffc0019e61f510 size:   30 previous size:  510  (Allocated)  Ntf0
 ffffc0019e61f540 size:   50 previous size:   30  (Allocated)  IoNm
 ffffc0019e61f590 size:  180 previous size:   50  (Allocated)  NtFs
 ffffc0019e61f710 size:   a0 previous size:  180  (Allocated)  CMSc
 ffffc0019e61f7b0 size:   90 previous size:   a0  (Allocated)  FSim
 ffffc0019e61f840 size:   20 previous size:   90  (Allocated)  APL_
 ffffc0019e61f860 size:   c0 previous size:   20  (Allocated)  NtFs
 ffffc0019e61f920 size:   80 previous size:   c0  (Allocated)  Strg
*ffffc0019e61f9a0 size:  150 previous size:   80  (Free ) *FMfn
		Pooltag FMfn : NAME_CACHE_NODE structure, Binary : fltmgr.sys

ffffc0019e61faf0 doesn't look like a valid small pool allocation, checking to see
if the entire page is actually part of a large page allocation...

GetUlongFromAddress: unable to read from fffff802a7cced20
Unable to get pool big page table. Check for valid symbols.
ffffc0019e61faf0 is not valid pool. Checking for freed (or corrupt) pool
Bad previous allocation size @ffffc0019e61faf0, last size was 15

1: kd> dt _NAME_CACHE_NODE ffffc0019e61f9a0
fltmgr!_NAME_CACHE_NODE
   +0x000 Type             : _FLT_TYPE
   +0x008 ProvidingInstance : 0x67eb275d`13b98c98 _FLT_INSTANCE
   +0x010 CreationTime     : _LARGE_INTEGER 0x136f204
   +0x018 TreeLink         : _TREE_NODE
   +0x050 NameInfo         : _FLT_FILE_NAME_INFORMATION
   +0x0c8 UseCount         : 0n0

1: kd> !fltkd.instance 67eb275d`13b98c98

Could not read field "Base.Flags" of FltMgr!_FLT_INSTANCE from address: 67eb275d13b98c98

As with most 0x19s and minidumps, there isn't much to find.

Can you provide a Kernel memory dump if there is one?

It's located in C:\Windows\MEMORY.dmp

 

If not, Driver Verifier is the best alternative.

 

What is Driver Verifier?

Driver Verifier monitors Windows kernel-mode drivers, graphics drivers, and even 3rd party drivers to detect illegal function calls or actions that might corrupt the system. Driver Verifier can subject the Windows drivers to a variety of stresses and tests to find improper behavior.

Essentially, if there's a 3rd party driver believed to be causing the issues at hand, enabling Driver Verifier will help us see which specific driver is causing the problem.

Before enabling Driver Verifier, it is recommended to create a System Restore Point:

Vista - START | type rstrui - create a restore point
Windows 7 - START | type create | select "Create a Restore Point"

How to enable Driver Verifier:

Start > type "verifier" without the quotes > Select the following options -

1. Select - "Create custom settings (for code developers)"
2. Select - "Select individual settings from a full list"
3. Check the following boxes -
- Special Pool
- Pool Tracking
- Force IRQL Checking
- Deadlock Detection
- Security Checks (Windows 7 & 8/8.1)
- DDI compliance checking (Windows 8/8.1)
- Miscellaneous Checks
4. Select - "Select driver names from a list"
5. Click on the "Provider" tab. This will sort all of the drivers by the provider.
6. Check EVERY box that is NOT provided by Microsoft / Microsoft Corporation.
7. Click on Finish.
8. Restart.

Important information regarding Driver Verifier:

- If Driver Verifier finds a violation, the system will BSOD. To expand on this a bit more for the interested, specifically what Driver Verifier actually does is it looks for any driver making illegal function calls, causing memory leaks, etc. When and/if this happens, system corruption occurs if allowed to continue. When Driver Verifier is enabled per my instructions above, it is monitoring all 3rd party drivers (as we have it set that way) and when it catches a driver attempting to do this, it will quickly flag that driver as being a troublemaker, and bring down the system safely before any corruption can occur.

- After enabling Driver Verifier and restarting the system, depending on the culprit, if for example the driver is on start-up, you may not be able to get back into normal Windows because Driver Verifier will detect it in violation almost straight away, and as stated above, that will cause / force a BSOD.

If this happens, do not panic, do the following:

- Boot into Safe Mode by repeatedly tapping the F8 key during boot-up.

- Once in Safe Mode - Start > Search > type "cmd" without the quotes.

- To turn off Driver Verifier, type in cmd "verifier /reset" without the quotes.
 Restart and boot into normal Windows.

If your OS became corrupt or you cannot boot into Windows after disabling verifier via Safe Mode:

- Boot into Safe Mode by repeatedly tapping the F8 key during boot-up.

- Once in Safe Mode - Start > type "system restore" without the quotes.

- Choose the restore point you created earlier.

-- Note that Safe Mode for Windows 8/8.1 is a bit different, and you may need to try different methods: 5 Ways to Boot into Safe Mode in Windows 8 & Windows 8.1

How long should I keep Driver Verifier enabled for?

I recommend keeping it enabled for at least 24 hours. If you don't BSOD by then, disable Driver Verifier. I will usually say whether or not I'd like for you to keep it enabled any longer.

My system BSOD'd with Driver Verifier enabled, where can I find the crash dumps?

- If you have the system set to generate Small Memory Dumps, they will be located in %systemroot%\Minidump.

- If you have the system set to generate Kernel-Memory Dumps, it will be located in %systemroot%[B] and labeled [B]MEMORY.DMP.



#15 Dragonlady24

Dragonlady24
  • Topic Starter

  • Members
  • 703 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:Fox Lake,WI
  • Local time:04:12 PM

Posted 24 May 2015 - 07:57 PM

Is it alright if I upload a copy of memory.dmp to onedrive for viewing or do i need the actual file?

Edited by Dragonlady24, 24 May 2015 - 08:01 PM.





0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users