Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

irql_not_less_or_equal stop screen every 30 minutes


  • Please log in to reply
9 replies to this topic

#1 TomJones98

TomJones98

  • Members
  • 12 posts
  • OFFLINE
  •  
  • Local time:06:09 AM

Posted 16 December 2015 - 09:44 AM

Link to minidumps and computer specs - https://onedrive.live.com/redir?resid=7A622E0A519852BA!112&authkey=!APBQoKPW0h82Qbc&ithint=folder%2cdmp2

 

Link to other relevant things that may prove helpfull - https://onedrive.live.com/redir?resid=7A622E0A519852BA!283&authkey=!AD9M94GsqT7T8RI&ithint=folder%2cevtx1

 

These errors have been going on for months now, I originally ignored them but they became more frequent up to the point where my computer gets the irql_not_less_or_equal stop screen every half hour or so.

I have updated my drivers and unplugged all USB devices and the crashes still persist.

I have also ran MemTest86 and got no errors so I do not believe the stop screens are caused by memory (although I know that what the error message suggests).

I have posted on other forums but have got little to no help, I appreciate any effort to help smile.png?v=0 - Tom



BC AdBot (Login to Remove)

 


#2 usasma

usasma

    Still visually handicapped (avatar is memory developed by my Dad


  • BSOD Kernel Dump Expert
  • 25,091 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Southeastern CT, USA
  • Local time:02:09 AM

Posted 16 December 2015 - 10:35 AM

I'd like to see this report also:

 

systeminfo:
Please open an elevated (Run as administrator) Command Prompt and type (or copy/paste) "systeminfo.exe >%USERPROFILE%\Desktop\systeminfo.txt" (without the quotes) and press Enter.  Then navigate to Desktop to retrieve the syteminfo.txt file.  If you have difficulties with making this work, please post back.  Then zip up the .txt file and upload/attach the .zip file with your next post.

 

Your UEFI/BIOS (version F5) dates from 2014.  Please check at the manufacturer's website to see if there are any UEFI/BIOS updates available for your system.  If you are able to install the update through Windows (without booting from an external drive), then go ahead and update it.  WARNING - if the computer might shut down during this procedure, please don't do it, as this may physically damage the computer and prevent it from booting.

There are several ApphelpHardBlock errors in the WER section of MSINFO32.
I suspect that this means that you have incompatible software installed.
The ApphelpHardBlock message means that an incompatible program has been blocked, but it does not specify which program it is.
Please check your older software for compatibility with this version of Windows.

Many Windows Update failures in the WER section of the MSINFO32 report.

Please be sure that you have ALL available Windows Updates.

If receiving errors, please post back for further assistance

 

There are BSOD's listed in the WER section that show corrupted system files.
Is this a legitmate installation of Windows?  Have you checked your activation status?

Is it possible that the system is infected?  Have you scanned for malware?

 

If all of this doesn't stop the BSOD's, please run Driver Verifier according to these instructions:  http://www.carrona.org/verifier.html

 

 

Analysis:
The following is for informational purposes only.
**************************Wed Dec 16 07:40:24.696 2015 (UTC - 5:00)**************************
Loading Dump File [C:\Users\John\SysnativeBSODApps\121615-19046-01.dmp]
Windows 10 Kernel Version 10240 MP (4 procs) Free x64
Built by: 10240.16590.amd64fre.th1_st1.151104-1714
System Uptime: 0 days 0:16:26.339
Probably caused by : win32kfull.sys ( win32kfull!memcpy+af )
BugCheck A, {0, 2, 1, fffff803638b5e41}
BugCheck Info: IRQL_NOT_LESS_OR_EQUAL (a)
Arguments:
Arg1: 0000000000000000, memory referenced
Arg2: 0000000000000002, IRQL
Arg3: 0000000000000001, bitfield :
    bit 0 : value 0 = read operation, 1 = write operation
    bit 3 : value 0 = not an execute operation, 1 = execute operation (only on chips which support this level of status)
Arg4: fffff803638b5e41, address which referenced memory
BUGCHECK_STR:  AV
DEFAULT_BUCKET_ID:  WIN8_DRIVER_FAULT
PROCESS_NAME:  Steam.exe
FAILURE_BUCKET_ID:  AV_win32kfull!memcpy
CPUID:        "Intel® Core™ i5-4440 CPU @ 3.10GHz"
MaxSpeed:     3100
CurrentSpeed: 3100
  BIOS Version                  F5
  BIOS Release Date             05/30/2014
  Manufacturer                  Gigabyte Technology Co., Ltd.
  Product Name                  Z97P-D3
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
The rest of the memory dump summaries are hidden in the Spoiler tag below.  Click on "Show" to reveal them.

Spoiler



3rd Party Drivers:
The following is for information purposes only.
Any drivers in RED should be updated or removed from your system. And should have been discussed in the body of my post.
**************************Wed Dec 16 07:40:24.696 2015 (UTC - 5:00)**************************
HWiNFO64A.SYS               Sun Nov 23 11:24:07 2014 (54720A27)
XtuAcpiDriver.sys           Thu Feb 26 07:51:57 2015 (54EF16ED)
iaStorA.sys                 Wed Jun  3 05:38:57 2015 (556ECB31)
AtihdWT6.sys                Tue Jul  7 21:28:10 2015 (559C7CAA)
intelppm.sys                Thu Jul  9 23:12:59 2015 (559F383B)
igdkmd64.sys                Fri Jul 17 20:27:57 2015 (55A99D8D)
rt640x64.sys                Thu Jul 23 04:53:50 2015 (55B0AB9E)
IntcDAud.sys                Thu Aug 20 08:16:13 2015 (55D5C50D)
atikmpag.sys                Fri Aug 21 21:45:00 2015 (55D7D41C)
atikmdag.sys                Fri Aug 21 22:10:03 2015 (55D7D9FB)
TeeDriverW8x64.sys          Mon Aug 31 15:49:07 2015 (55E4AFB3)
RTKVHD64.sys                Tue Oct 13 07:24:57 2015 (561CEA09)
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
**************************Wed Dec 16 06:15:50.258 2015 (UTC - 5:00)**************************
TeeDriverx64.sys            Tue Sep 23 16:01:14 2014 (5421D18A)
rt640x64.sys                Wed Apr  1 10:34:31 2015 (551C01F7)
RTKVHD64.sys                Thu Jun 18 06:45:05 2015 (5582A131)
IntcDAud.sys                Fri Jul 10 07:58:41 2015 (559FB371)
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
**************************Sat Dec 12 16:38:42.096 2015 (UTC - 5:00)**************************
IntcDAud.sys                Fri Feb 21 08:50:26 2014 (530759A2)
mwac.sys                    Tue Jun 17 22:07:00 2014 (53A0F444)
ccSetx64.sys                Mon Aug 18 15:33:11 2014 (53F254F7)
SRTSPX64.SYS                Tue Aug 26 02:36:42 2014 (53FC2AFA)
SYMEVENT64x86.SYS           Mon Jan 19 17:43:56 2015 (54BD88AC)
Ironx64.SYS                 Mon May  4 19:51:42 2015 (5548060E)
SYMEFASI64.SYS              Thu May  7 05:44:15 2015 (554B33EF)
SYMNETS.SYS                 Fri May  8 18:20:49 2015 (554D36C1)
SRTSP64.SYS                 Sun Jun 14 03:19:20 2015 (557D2AF8)
TeeDriverW8x64.sys          Tue Jul  7 13:43:32 2015 (559C0FC4)
MBAMSwissArmy.sys           Wed Jul 29 00:26:01 2015 (55B855D9)
mbam.sys                    Tue Aug 11 13:35:19 2015 (55CA3257)
BHDrvx64.sys                Fri Sep 25 21:17:16 2015 (5605F21C)
IDSvia64.sys                Mon Oct 12 22:00:26 2015 (561C65BA)
EX64.SYS                    Tue Oct 13 22:01:49 2015 (561DB78D)
ENG64.SYS                   Tue Oct 13 22:06:35 2015 (561DB8AB)
eeCtrl64.sys                Fri Nov  6 21:29:47 2015 (563D621B)
EraserUtilRebootDrv.sys     Fri Nov  6 21:29:47 2015 (563D621B)
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
**************************Sat Dec 12 13:49:06.795 2015 (UTC - 5:00)**************************
SRTSP64.SYS                 Mon May 11 12:53:58 2015 (5550DEA6)
http://www.carrona.org/drivers/driver.php?id=HWiNFO64A.SYS
XtuAcpiDriver.sys - this driver hasn't been added to the DRT as of this run. Please search Google/Bing for the driver if additional information is needed.
http://www.carrona.org/drivers/driver.php?id=iaStorA.sys
http://www.carrona.org/drivers/driver.php?id=AtihdWT6.sys
http://www.carrona.org/drivers/driver.php?id=intelppm.sys
http://www.carrona.org/drivers/driver.php?id=igdkmd64.sys
http://www.carrona.org/drivers/driver.php?id=rt640x64.sys
http://www.carrona.org/drivers/driver.php?id=IntcDAud.sys
http://www.carrona.org/drivers/driver.php?id=atikmpag.sys
http://www.carrona.org/drivers/driver.php?id=atikmdag.sys
http://www.carrona.org/drivers/driver.php?id=TeeDriverW8x64.sys
http://www.carrona.org/drivers/driver.php?id=RTKVHD64.sys
http://www.carrona.org/drivers/driver.php?id=TeeDriverx64.sys
http://www.carrona.org/drivers/driver.php?id=rt640x64.sys
http://www.carrona.org/drivers/driver.php?id=RTKVHD64.sys
http://www.carrona.org/drivers/driver.php?id=IntcDAud.sys
http://www.carrona.org/drivers/driver.php?id=IntcDAud.sys
http://www.carrona.org/drivers/driver.php?id=mwac.sys
http://www.carrona.org/drivers/driver.php?id=ccSetx64.sys
http://www.carrona.org/drivers/driver.php?id=SRTSPX64.SYS
http://www.carrona.org/drivers/driver.php?id=SYMEVENT64x86.SYS
http://www.carrona.org/drivers/driver.php?id=Ironx64.SYS
http://www.carrona.org/drivers/driver.php?id=SYMEFASI64.SYS
http://www.carrona.org/drivers/driver.php?id=SYMNETS.SYS
http://www.carrona.org/drivers/driver.php?id=SRTSP64.SYS
http://www.carrona.org/drivers/driver.php?id=TeeDriverW8x64.sys
http://www.carrona.org/drivers/driver.php?id=MBAMSwissArmy.sys
http://www.carrona.org/drivers/driver.php?id=mbam.sys
http://www.carrona.org/drivers/driver.php?id=BHDrvx64.sys
http://www.carrona.org/drivers/driver.php?id=IDSvia64.sys
http://www.carrona.org/drivers/driver.php?id=EX64.SYS
http://www.carrona.org/drivers/driver.php?id=ENG64.SYS
http://www.carrona.org/drivers/driver.php?id=eeCtrl64.sys
http://www.carrona.org/drivers/driver.php?id=EraserUtilRebootDrv.sys
http://www.carrona.org/drivers/driver.php?id=SRTSP64.SYS
 


My browser caused a flood of traffic, sio my IP address was banned. Hope to fix it soon. Will get back to posting as soon as Im able.

- John  (my website: http://www.carrona.org/ )**If you need a more detailed explanation, please ask for it. I have the Knack. **  If I haven't replied in 48 hours, please send me a message. My eye problems have recently increased and I'm having difficult reading posts. (23 Nov 2017)FYI - I am completely blind in the right eye and ~30% blind in the left eye.<p>If the eye problems get worse suddenly, I may not be able to respond.If that's the case and help is needed, please PM a staff member for assistance.

#3 TomJones98

TomJones98
  • Topic Starter

  • Members
  • 12 posts
  • OFFLINE
  •  
  • Local time:06:09 AM

Posted 16 December 2015 - 11:10 AM

 

There are several ApphelpHardBlock errors in the WER section of MSINFO32.
I suspect that this means that you have incompatible software installed.
The ApphelpHardBlock message means that an incompatible program has been blocked, but it does not specify which program it is.
Please check your older software for compatibility with this version of Windows.
 

 

I don't feel safe updating my BIOS as of now so I will skip that step.

 

About the incompatible software installed, I only just reinstalled Windows in hope that it would fix the issue 2 days go, wiping my computer of all files and programs installed. I have only installed Google Chrome, Skype, Steam and Gyazo(gyazo is a screen shot software) which I can't believe that those big name softwares are not compatible with Windows 10 yet, which is strange...

 

https://onedrive.live.com/redir?resid=7A622E0A519852BA!594&authkey=!ANOdokWDgKu82xA&ithint=folder%2cpng - (unable to add file to response so this will have to do) this shows the system info you were after.. aswel as a error I get when I troubleshoot.. I believe that this may be the cause of the Windows Update failures you found. I was aware of the update fails while I was using windows 7 but after updating to windows 10 I assumed they stopped, apparently not.

 

Yes my version of Windows is legitimate. As I mentioned earlier I tried to reinstall Windows completely - I would have thought this would correct the corrupted files? I have scanned for malware and found something but it was only from a driver updater I was trying (uninstalled now). It could be a possibility my system is infected - previously I had an issue in Windows 7 OS where a virus/malware etc had crashed my computer and apon reboot all files were hidden and shortcuts for everyone were deleted. I never really new the full extent of the damage caused so maybe there is still remains of that. Just thought it was worth mentioning in case it is relevant.



#4 usasma

usasma

    Still visually handicapped (avatar is memory developed by my Dad


  • BSOD Kernel Dump Expert
  • 25,091 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Southeastern CT, USA
  • Local time:02:09 AM

Posted 17 December 2015 - 06:14 AM

I'd also like to see the MSINFO32 report:

 

MSINFO32:
Please go to Start and type in "msinfo32.exe" (without the quotes) and press Enter
Save the report as an .nfo file, then zip up the .nfo file and upload/attach the .zip file with your next post.
Also, save a copy as a .txt file and include it also (it's much more difficult to read, but we have greater success in getting the info from it).

If you're having difficulties with the format, please open an elevated (Run as administrator) Command Prompt and type (or copy/paste) "msinfo32 /nfo %USERPROFILE%\Desktop\TEST.NFO" (without the quotes) and press Enter.  Then navigate to Desktop to retrieve the TEST.NFO file.  If you have difficulties with making this work, please post back.  Then zip up the .nfo file and upload/attach the .zip file with your next post.

 

 

 

Analysis:
The following is for informational purposes only.
**************************Wed Dec 16 14:11:58.273 2015 (UTC - 5:00)**************************
Loading Dump File [C:\Users\John\SysnativeBSODApps\121615-19656-01.dmp]
Windows 10 Kernel Version 10586 MP (4 procs) Free x64
Built by: 10586.17.amd64fre.th2_release.151121-2308
System Uptime: 0 days 0:14:21.915
Probably caused by : ntkrnlmp.exe ( nt!KxWaitForLockOwnerShip+14 )
BugCheck A, {fffffffff, 2, 1, fffff800e3ea56e4}
BugCheck Info: IRQL_NOT_LESS_OR_EQUAL (a)
Arguments:
Arg1: 0000000fffffffff, memory referenced
Arg2: 0000000000000002, IRQL
Arg3: 0000000000000001, bitfield :
    bit 0 : value 0 = read operation, 1 = write operation
    bit 3 : value 0 = not an execute operation, 1 = execute operation (only on chips which support this level of status)
Arg4: fffff800e3ea56e4, address which referenced memory
BUGCHECK_STR:  AV
DEFAULT_BUCKET_ID:  WIN8_DRIVER_FAULT
PROCESS_NAME:  MsMpEng.exe
FAILURE_BUCKET_ID:  AV_nt!KxWaitForLockOwnerShip
CPUID:        "Intel® Core™ i5-4440 CPU @ 3.10GHz"
MaxSpeed:     3100
CurrentSpeed: 3100
  BIOS Version                  F5
  BIOS Release Date             05/30/2014
  Manufacturer                  Gigabyte Technology Co., Ltd.
  Product Name                  Z97P-D3

¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``

 

Just a hunch on my part - but I suspect a hardware problem.

Please start with these free hardware diagnostics:  http://www.carrona.org/hwdiag.html

Let us know the results and we'll move on from there.

While waiting for a reply (if the hardware tests all pass) please run Driver Verifier according to these instructions:  http://www.carrona.org/verifier.html


3rd Party Drivers:
The following is for information purposes only.
Any drivers in RED should be updated or removed from your system. And should have been discussed in the body of my post.
**************************Wed Dec 16 14:11:58.273 2015 (UTC - 5:00)**************************
TeeDriverx64.sys            Tue Sep 23 16:01:14 2014 (5421D18A)
HWiNFO64A.SYS               Sun Nov 23 11:24:07 2014 (54720A27)
RTKVHD64.sys                Thu Jun 18 06:45:05 2015 (5582A131)
AtihdWT6.sys                Tue Jul  7 21:28:10 2015 (559C7CAA)
IntcDAud.sys                Fri Jul 10 07:58:41 2015 (559FB371)
igdkmd64.sys                Fri Jul 17 20:27:57 2015 (55A99D8D)
mbam.sys                    Tue Aug 11 13:35:19 2015 (55CA3257)
atikmpag.sys                Fri Aug 21 21:45:00 2015 (55D7D41C)
atikmdag.sys                Fri Aug 21 22:10:03 2015 (55D7D9FB)
rt640x64.sys                Wed Oct  7 11:03:55 2015 (5615345B)
intelppm.sys                Thu Oct 29 22:09:51 2015 (5632D16F)
http://www.carrona.org/drivers/driver.php?id=TeeDriverx64.sys
http://www.carrona.org/drivers/driver.php?id=HWiNFO64A.SYS
http://www.carrona.org/drivers/driver.php?id=RTKVHD64.sys
http://www.carrona.org/drivers/driver.php?id=AtihdWT6.sys
http://www.carrona.org/drivers/driver.php?id=IntcDAud.sys
http://www.carrona.org/drivers/driver.php?id=igdkmd64.sys
http://www.carrona.org/drivers/driver.php?id=mbam.sys
http://www.carrona.org/drivers/driver.php?id=atikmpag.sys
http://www.carrona.org/drivers/driver.php?id=atikmdag.sys
http://www.carrona.org/drivers/driver.php?id=rt640x64.sys
http://www.carrona.org/drivers/driver.php?id=intelppm.sys
 


My browser caused a flood of traffic, sio my IP address was banned. Hope to fix it soon. Will get back to posting as soon as Im able.

- John  (my website: http://www.carrona.org/ )**If you need a more detailed explanation, please ask for it. I have the Knack. **  If I haven't replied in 48 hours, please send me a message. My eye problems have recently increased and I'm having difficult reading posts. (23 Nov 2017)FYI - I am completely blind in the right eye and ~30% blind in the left eye.<p>If the eye problems get worse suddenly, I may not be able to respond.If that's the case and help is needed, please PM a staff member for assistance.

#5 TomJones98

TomJones98
  • Topic Starter

  • Members
  • 12 posts
  • OFFLINE
  •  
  • Local time:06:09 AM

Posted 17 December 2015 - 12:24 PM

https://gyazo.com/c6b86789006c74479e6c0d31dadf7d65 - I was wondering if this could help? It shows what caused the crashes, the cause is the same for both crashes.


 

https://onedrive.live.com/?id=7A622E0A519852BA%21594&cid=7A622E0A519852BA system infro is also found in this one driver, along with a report of the bluescreenviewer that is in the screenshot I showed.

 

I am writing this before I perform the hardware/driver scans



#6 TomJones98

TomJones98
  • Topic Starter

  • Members
  • 12 posts
  • OFFLINE
  •  
  • Local time:06:09 AM

Posted 17 December 2015 - 01:09 PM

I tried to run driver verifier and just got 'Driver_violation_detected_violation' in an endless loop of BSOD's. Got out of the loop, I also tried to use the hardware diagnostic yet I couldn't find one provided by Samsung for my Samsung hd103sj hard drive and the link you sent me required burning to a disk, which I don't have and neither do I have a disk tray on my PC



#7 usasma

usasma

    Still visually handicapped (avatar is memory developed by my Dad


  • BSOD Kernel Dump Expert
  • 25,091 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Southeastern CT, USA
  • Local time:02:09 AM

Posted 19 December 2015 - 05:27 AM

Driver Verifier is supposed to cause BSOD's

Were you able to see what driver it blamed?

Please zip up and upload the contents of the C:\Windows\Minidump folder and upload them with your next post.

If unable to zip them where they are - copy them to your Desktop and zip them there.

 

The Gyazo link shows a report from BlueScreenView by Nir Sofer (owner of NirSoft)

It blames ntoskrnl.exe, but there's no information to show which BSOD's these were (no dates or memory dump names).

These are similar to the one's that I posted in my previous post.

 

ntoskrnl.exe is the kernel (core) of the operating system.

Windows has numerous safety features, protections, and error correcting mechanisms in place for critical system files.

Also, if there was a problem with the kernel, your system would likely be experiencing many more serious problems other than just the occasional BSOD

Normally we figure that a 3rd party driver has corrupted the memory space owned by ntoskrnl.exe - and that's why it was blamed.  And the best tool for figuring out which 3rd party driver is Driver Verifier.

 

The OneDrive link says that there's nothing there.

 

You can run a different hard drive test (such as Seagate Seatools)

If you can't make it bootable, try the Seagate Seatools for Windows.  It's free from here:  http://www.seagate.com/support/downloads/item/seatools-win-master/


Edited by usasma, 19 December 2015 - 05:29 AM.

My browser caused a flood of traffic, sio my IP address was banned. Hope to fix it soon. Will get back to posting as soon as Im able.

- John  (my website: http://www.carrona.org/ )**If you need a more detailed explanation, please ask for it. I have the Knack. **  If I haven't replied in 48 hours, please send me a message. My eye problems have recently increased and I'm having difficult reading posts. (23 Nov 2017)FYI - I am completely blind in the right eye and ~30% blind in the left eye.<p>If the eye problems get worse suddenly, I may not be able to respond.If that's the case and help is needed, please PM a staff member for assistance.

#8 TomJones98

TomJones98
  • Topic Starter

  • Members
  • 12 posts
  • OFFLINE
  •  
  • Local time:06:09 AM

Posted 19 December 2015 - 08:37 AM

Driver Verifier is supposed to cause BSOD's

Were you able to see what driver it blamed?

Please zip up and upload the contents of the C:\Windows\Minidump folder and upload them with your next post.

If unable to zip them where they are - copy them to your Desktop and zip them there.

 

The Gyazo link shows a report from BlueScreenView by Nir Sofer (owner of NirSoft)

It blames ntoskrnl.exe, but there's no information to show which BSOD's these were (no dates or memory dump names).

These are similar to the one's that I posted in my previous post.

 

ntoskrnl.exe is the kernel (core) of the operating system.

Windows has numerous safety features, protections, and error correcting mechanisms in place for critical system files.

Also, if there was a problem with the kernel, your system would likely be experiencing many more serious problems other than just the occasional BSOD

Normally we figure that a 3rd party driver has corrupted the memory space owned by ntoskrnl.exe - and that's why it was blamed.  And the best tool for figuring out which 3rd party driver is Driver Verifier.

 

The OneDrive link says that there's nothing there.

 

You can run a different hard drive test (such as Seagate Seatools)

If you can't make it bootable, try the Seagate Seatools for Windows.  It's free from here:  http://www.seagate.com/support/downloads/item/seatools-win-master/

When I run verifier, I get a bsod before I can actually get into safe mode, because f8 is nolonger an option to boot up into safemode too the only option I have is to restore to a previous time



#9 TomJones98

TomJones98
  • Topic Starter

  • Members
  • 12 posts
  • OFFLINE
  •  
  • Local time:06:09 AM

Posted 19 December 2015 - 12:22 PM

Driver Verifier is supposed to cause BSOD's

Were you able to see what driver it blamed?

Please zip up and upload the contents of the C:\Windows\Minidump folder and upload them with your next post.

If unable to zip them where they are - copy them to your Desktop and zip them there.

 

I believe that this is the minidump created from the identifier - https://onedrive.live.com/redir?resid=7A622E0A519852BA!697&authkey=!AAv_I3JwA3uu4xQ&ithint=folder%2crar 

 

(might have to highlight the link)



#10 usasma

usasma

    Still visually handicapped (avatar is memory developed by my Dad


  • BSOD Kernel Dump Expert
  • 25,091 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Southeastern CT, USA
  • Local time:02:09 AM

Posted 20 December 2015 - 07:54 PM

The memory dump blames IntcDAud.sys - a driver for your Intel Graphics Media Accelerator HD Driver

Please:

- download a fresh copy of the Intel graphics drivers (and Intel audio drivers if available) for your system's audio

- uninstall the current Intel graphics and Intel audio (if available)

- then install the freshly downloaded drivers.

- monitor for further BSOD's.

 

Good luck!

 

Analysis:
The following is for informational purposes only.
**************************Sat Dec 19 19:21:33.349 2015 (UTC - 5:00)**************************
Loading Dump File [C:\Users\John\SysnativeBSODApps\122015-25625-01.dmp]
Windows 10 Kernel Version 10586 MP (4 procs) Free x64
Built by: 10586.17.amd64fre.th2_release.151121-2308
System Uptime: 0 days 0:00:14.029
*** WARNING: Unable to verify timestamp for IntcDAud.sys
*** ERROR: Module load completed but symbols could not be loaded for IntcDAud.sys
Probably caused by : IntcDAud.sys ( IntcDAud+1f5fe )
BugCheck C4, {2000, fffff800e906f5fe, 0, 20437a41}
BugCheck Info: DRIVER_VERIFIER_DETECTED_VIOLATION (c4)
DRIVER_VERIFIER_DETECTED_VIOLATION (c4)
Arguments:
Arg1: 0000000000002000, Code Integrity Issue: The caller specified an executable pool type. (Expected: NonPagedPoolNx)
Arg2: fffff800e906f5fe, The address in the driver's code where the error was detected.
Arg3: 0000000000000000, Pool Type.
Arg4: 0000000020437a41, Pool Tag (if provided).
BUGCHECK_STR:  0xc4_2000
PROCESS_NAME:  System
FAILURE_BUCKET_ID:  0xc4_2000_VRF_IntcDAud!Unknown_Function
CPUID:        "Intel® Core™ i5-4440 CPU @ 3.10GHz"
MaxSpeed:     3100
CurrentSpeed: 3100
  BIOS Version                  F5
  BIOS Release Date             05/30/2014
  Manufacturer                  Gigabyte Technology Co., Ltd.
  Product Name                  Z97P-D3
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``


3rd Party Drivers:
The following is for information purposes only.
Any drivers in RED should be updated or removed from your system. And should have been discussed in the body of my post.
**************************Sat Dec 19 19:21:33.349 2015 (UTC - 5:00)**************************
HWiNFO64A.SYS               Sun Nov 23 11:24:07 2014 (54720A27)
iaStorA.sys                 Wed Jun  3 05:38:57 2015 (556ECB31)
IntcDAud.sys                Thu Aug 20 08:16:13 2015 (55D5C50D)
igdkmd64.sys                Mon Aug 24 16:32:07 2015 (55DB7F47)
TeeDriverW8x64.sys          Mon Aug 31 15:49:07 2015 (55E4AFB3)
AtihdWT6.sys                Fri Sep 18 06:08:20 2015 (55FBE294)
rt640x64.sys                Thu Oct  1 06:34:33 2015 (560D0C39)
RTKVHD64.sys                Fri Oct 23 03:25:56 2015 (5629E104)
intelppm.sys                Thu Oct 29 22:09:51 2015 (5632D16F)
atikmpag.sys                Wed Nov  4 16:16:43 2015 (563A75BB)
atikmdag.sys                Wed Nov  4 16:39:32 2015 (563A7B14)
http://www.carrona.org/drivers/driver.php?id=HWiNFO64A.SYS
http://www.carrona.org/drivers/driver.php?id=iaStorA.sys
http://www.carrona.org/drivers/driver.php?id=IntcDAud.sys
http://www.carrona.org/drivers/driver.php?id=igdkmd64.sys
http://www.carrona.org/drivers/driver.php?id=TeeDriverW8x64.sys
http://www.carrona.org/drivers/driver.php?id=AtihdWT6.sys
http://www.carrona.org/drivers/driver.php?id=rt640x64.sys
http://www.carrona.org/drivers/driver.php?id=RTKVHD64.sys
http://www.carrona.org/drivers/driver.php?id=intelppm.sys
http://www.carrona.org/drivers/driver.php?id=atikmpag.sys
http://www.carrona.org/drivers/driver.php?id=atikmdag.sys
 


My browser caused a flood of traffic, sio my IP address was banned. Hope to fix it soon. Will get back to posting as soon as Im able.

- John  (my website: http://www.carrona.org/ )**If you need a more detailed explanation, please ask for it. I have the Knack. **  If I haven't replied in 48 hours, please send me a message. My eye problems have recently increased and I'm having difficult reading posts. (23 Nov 2017)FYI - I am completely blind in the right eye and ~30% blind in the left eye.<p>If the eye problems get worse suddenly, I may not be able to respond.If that's the case and help is needed, please PM a staff member for assistance.




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users