Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

BSOD with Kmode_Exception


  • Please log in to reply
3 replies to this topic

#1 lomaca42

lomaca42

  • Members
  • 3 posts
  • OFFLINE
  •  
  • Local time:08:30 AM

Posted 28 September 2016 - 04:22 AM

Here is the zipfile hope you can make some sense of it. My computers crashes about every third day so it's not too bad but annoying

Mostly it's Kmode_exception or Memory management sometimes IRQL_Not_Less_or_equal.

thanks in advance.

 

Zip file deleted, checked with MS and I'm genuine, your help is no longer needed, 

Thank you for your effort.


Edited by lomaca42, 28 September 2016 - 12:33 PM.


BC AdBot (Login to Remove)

 


#2 usasma

usasma

    Still visually handicapped (avatar is memory developed by my Dad


  • BSOD Kernel Dump Expert
  • 25,091 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Southeastern CT, USA
  • Local time:05:30 PM

Posted 28 September 2016 - 08:55 AM

Unfortunately it appears that the system has pirated software.
Please get a legitimate copy installed and we'll be glad to help.

Here's suggestions on how to ensure that your version is legitimate:  http://windows.microsoft.com/en-us/windows/genuine

Please be aware that we may not be able to fix it (as the hacks that were done to activate it will cause the OS to behave differently than we expect it to). If that's the case, our efforts to help may just waste your time. Secondly, the forum rules prohibit assisting with pirated software - so the topic would be closed if that is the case.

As a courtesy, I will offer an analysis of your issues using the reports you provided.
I will not answer any questions about the analysis until the system is made legitimate.
If you do make it legitimate, please submit a new set of reports for us to check.

Just FYI, sometimes the owner won't know about this.  So here's 2 scenarios that might ring a bell:
- if they had a "friend" help with the computer - and the "friend" installed a pirated copy.
- or they used a copy that they had from another OEM computer.  The OEM license is tied to the hardware that it came from - so you can't just use it on another system (that means that it's pirated).

And here's the analysis:

 

 

Your UEFI/BIOS (version P1.80) dates from 2014.  Please check at the manufacturer's website to see if there are any UEFI/BIOS updates available for your system.  If you are able to install the update through Windows (without booting from an external drive), then go ahead and update it.  WARNING - if the computer might shut down during this procedure, please don't do it, as this may physically damage the computer and prevent it from booting.
FYI - W8 and W10 communicate more with the UEFI/BIOS than previous versions of Windows, so it's important to ensure that the UEFI/BIOS is kept up to date (and that outdated UEFI/BIOS' may be the cause of some compatibility issues).

Although you appear to have a reasonable number of Windows Update hotfixes for this version of your OS, please double check for any new Windows Updates.  It only takes one update to cause a problem, so it's essential that you have all of them.  The actual number is not important.  Rather it's important that you checked manually, installed any available updates, and didn't experience any errors when checking or updating.

 

You have 3 hard drives.  I mention this to draw attention to your power supply.  If it's weak, older, or you have a lot of stuff drawing power - it can cause BSOD's

 

In the past, HotSpotShield had a history of causing BSOD's.  I have not seen any recently (in the last couple of years).
Please uninstall it to test it.

 

AMD OverDrive (AODDriver2.sys) is either a stand-alone application, or a component of the AMD VISION Engine Control Center.  This driver is known to cause BSOD's on some Windows systems.

NOTE:  these symptoms were from the previous release of OverDrive.  The new release uses the same driver name, but is dated from 4 November 2013.

Please un-install all AMD/ATI video stuff from Control Panel...Programs...Un-install a program.
Please note that I stated "video stuff", as some integrated processors may have the graphics chip built in (which may involve the chipset software).
Then, download (but DO NOT install) a fresh copy of the ATI drivers from http://www.amd.com (in the upper right corner of the page)
Use this procedure to install the DRIVER ONLYhttp://www.sysnative.com/forums/showthread.php/668-ATI-video-cards-DRIVER-ONLY-installation-procedure

If the device (AODDriver or AODDriver4.01) remains a problem, open Device Manager, select the "View" item.
Then select "Show hidden devices" and scroll down to the Non-Plug and Play Drivers section.
Locate the AODDriver entry, right click on it and select "Un-install".  Reboot for changes to take affect.

Sometimes the entry will remain in Device Manager even though you've removed it.  So, open up Device Manager and check for the AODDriver4.2.0 (it may have another number).  Right click on it and select "Uninstall".  If it asks to remove software, put a check in the box.  Then click on OK.


Sometimes the driver remains and continues to cause BSOD's.  If this is the case for you, post back and we'll give further instructions for safely removing it.

If overclocking, please stop. Remove the overclock and return the system to stock/standard values while we're troubleshooting. Once the system is stable again, feel free to resume the overclocking.


Out of 50 memory dumps there were 11 different BSOD  (aka STOP or BugCheck) error codes.  The differing error codes are usually symptomatic of a lower level problem within the system. They are usually caused by one of these things (the list is not in any sort of order):
- borked (broken) hardware (several different procedures used to isolate the problem device)
- BIOS issues (check for updates at the motherboard manufacturer's website)
- overclocking/overheating - You'll know if you're overclocking or not. If uncertain we can suggest things to check.
- dirt/dust/hair/fur/crud inside the case.  Blow out the case/vents with canned air (DO NOT use an air compressor or vacuum as they can cause damage to the system)
- missing Windows Updates
- compatibility issues (3rd party hardware/drivers), older systems, or even pirated systems
- low-level driver problems
- or even malware (scanned for when we ask for hardware diagnostics from http://www.carrona.org/initdiag.html or http://www.carrona.org/hwdiag.html ).

Please get a head start on the hardware diagnostics - they are located here:  http://www.carrona.org/hwdiag.html

Analysis:
The following is for information purposes only. The following information contains the relevant information from the blue screen analysis:
**************************Wed Sep 28 01:43:31.750 2016 (UTC - 4:00)**************************
Loading Dump File [C:\Users\john\SysnativeBSODApps\092816-27390-01.dmp]
Windows 10 Kernel Version 10586 MP (8 procs) Free x64
Built by: 10586.589.amd64fre.th2_release.160906-1759
System Uptime:0 days 10:48:12.287
Probably caused by :ntkrnlmp.exe ( nt! ?? ::FNODOBFM::`string'+4c8e2 )
BugCheck 1E, {ffffffffc0000005, fffff801229ce9da, 0, ffffffffffffffff}
BugCheck Info: KMODE_EXCEPTION_NOT_HANDLED (1e)
Arguments:
Arg1: ffffffffc0000005, The exception code that was not handled
Arg2: fffff801229ce9da, The address that the exception occurred at
Arg3: 0000000000000000, Parameter 0 of the exception
Arg4: ffffffffffffffff, Parameter 1 of the exception
BUGCHECK_STR:  0x1E_c0000005_R
PROCESS_NAME:  System
FAILURE_BUCKET_ID: 0x1E_c0000005_R_nt!_??_::FNODOBFM::_string_
  BIOS Version                  P1.80
  BIOS Release Date             10/24/2014
  Manufacturer                  To Be Filled By O.E.M.
  Baseboard Manufacturer        ASRock
  Product Name                  To Be Filled By O.E.M.
  Baseboard Product             970 Pro3 R2.0
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
**************************Mon Sep 26 05:21:56.627 2016 (UTC - 4:00)**************************
Loading Dump File [C:\Users\john\SysnativeBSODApps\092616-30609-01.dmp]
Windows 10 Kernel Version 10586 MP (8 procs) Free x64
Built by: 10586.589.amd64fre.th2_release.160906-1759
System Uptime:0 days 2:08:58.698
*** WARNING: Unable to verify timestamp for atikmdag.sys
*** ERROR: Module load completed but symbols could not be loaded for atikmdag.sys
*** WARNING: Unable to verify timestamp for win32k.sys
*** ERROR: Module load completed but symbols could not be loaded for win32k.sys
Probably caused by :atikmdag.sys ( atikmdag+43b01 )
BugCheck 1E, {ffffffffc0000005, fffff8038773ead1, 0, ffffffffffffffff}
BugCheck Info: KMODE_EXCEPTION_NOT_HANDLED (1e)
Arguments:
Arg1: ffffffffc0000005, The exception code that was not handled
Arg2: fffff8038773ead1, The address that the exception occurred at
Arg3: 0000000000000000, Parameter 0 of the exception
Arg4: ffffffffffffffff, Parameter 1 of the exception
BUGCHECK_STR:  0x1E_c0000005_R
PROCESS_NAME:  System
FAILURE_BUCKET_ID: 0x1E_c0000005_R_atikmdag!unknown_function
  BIOS Version                  P1.80
  BIOS Release Date             10/24/2014
  Manufacturer                  To Be Filled By O.E.M.
  Baseboard Manufacturer        ASRock
  Product Name                  To Be Filled By O.E.M.
  Baseboard Product             970 Pro3 R2.0
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
**************************Mon Sep 26 03:06:44.351 2016 (UTC - 4:00)**************************
Loading Dump File [C:\Users\john\SysnativeBSODApps\092616-51843-01.dmp]
Windows 10 Kernel Version 10586 MP (8 procs) Free x64
Built by: 10586.589.amd64fre.th2_release.160906-1759
System Uptime:3 days 21:19:40.412
Probably caused by :ntkrnlmp.exe ( nt! ?? ::FNODOBFM::`string'+37dee )
BugCheck 1A, {403, fffff68000039400, fd00000259fdb867, fffff680001adec8}
BugCheck Info: MEMORY_MANAGEMENT (1a)
Arguments:
Arg1: 0000000000000403, The subtype of the bugcheck.
Arg2: fffff68000039400
Arg3: fd00000259fdb867
Arg4: fffff680001adec8
BUGCHECK_STR:  0x1a_403
PROCESS_NAME:  EditPadLite7.e
FAILURE_BUCKET_ID: 0x1a_403_nt!_??_::FNODOBFM::_string_
  BIOS Version                  P1.80
  BIOS Release Date             10/24/2014
  Manufacturer                  To Be Filled By O.E.M.
  Baseboard Manufacturer        ASRock
  Product Name                  To Be Filled By O.E.M.
  Baseboard Product             970 Pro3 R2.0
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
The rest of the memory dump summaries are hidden in the Spoiler tag below.  Click on "Show" to reveal them.
Spoiler




3rd Party Drivers:
The following is for information purposes only. My recommendations were given above. The drivers that follow belong to software or devices that were not developed by Microsoft.  You can find links to the driver information and where to update the drivers in the section after the code box:
**************************Wed Sep 28 01:43:31.750 2016 (UTC - 4:00)**************************
lmimirr.sys                 Tue Apr 10 18:32:45 2007 (461C108D)
dfmirage.sys                Fri Jan 11 16:04:26 2008 (4787D9DA)
LMIRfsDriver.sys            Mon Jul 14 12:26:56 2008 (487B7E50)
TVMonitor.sys               Thu Nov 25 06:07:00 2010 (4CEE4354)
AsrAppCharger.sys           Tue May 10 04:28:46 2011 (4DC8F73E)
usbfilter.sys               Tue Jun 19 07:07:40 2012 (4FE05D7C)
amd_sata.sys                Mon Jul 23 14:34:48 2012 (500D9948)
amd_xata.sys                Mon Jul 23 14:34:52 2012 (500D994C)
lvrs64.sys                  Mon Oct 22 22:11:24 2012 (5085FCCC)
lvuvc64.sys                 Mon Oct 22 22:12:08 2012 (5085FCF8)
ambakdrv.sys                Tue Dec 25 03:46:35 2012 (50D967EB)
ammntdrv.sys                Tue Dec 25 03:46:37 2012 (50D967ED)
amwrtdrv.sys                Tue Dec 25 03:46:38 2012 (50D967EE)
RaInfo.sys                  Fri Jan 11 07:19:28 2013 (50F00350)
RTKVHD64.sys                Tue Jul 30 08:06:46 2013 (51F7AC56)
WinDivert.sys               Mon Dec  2 22:46:09 2013 (529D5401)
AODDriver2.sys              Tue Feb 11 06:06:52 2014 (52FA044C)
mwac.sys                    Tue Jun 17 22:07:00 2014 (53A0F444)
MBAMSwissArmy.sys           Wed Jul 29 00:26:01 2015 (55B855D9)
mbam.sys                    Tue Aug 11 13:35:19 2015 (55CA3257)
cnnctfy4.sys                Tue Sep  1 17:19:12 2015 (55E61650)
rt640x64.sys                Wed Oct  7 11:03:55 2015 (5615345B)
taphss6.sys                 Mon Oct 12 16:51:19 2015 (561C1D47)
cfywlan2.sys                Thu Oct 22 12:07:44 2015 (562909D0)
dc3d.sys                    Fri Nov  6 14:14:22 2015 (563CFC0E)
nvlddmkm.sys                Fri Jan 29 04:02:12 2016 (56AB2A94)
AtihdWT6.sys                Wed Apr 20 21:30:52 2016 (57182D4C)
tap0901.sys                 Thu Apr 21 05:10:05 2016 (571898ED)
atikmpag.sys                Mon Jul 18 16:32:52 2016 (578D3CF4)
amdacpksd.sys               Mon Jul 18 16:50:52 2016 (578D412C)
atikmdag.sys                Mon Jul 18 17:41:41 2016 (578D4D15)
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
**************************Sat Sep 17 21:46:40.833 2016 (UTC - 4:00)**************************
tap0901.sys                 Wed Nov  5 08:16:32 2014 (545A2330)
rtwlanu.sys                 Wed Oct 28 23:50:05 2015 (5631976D)
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
**************************Thu Sep  8 17:44:56.183 2016 (UTC - 4:00)**************************
tap0901.sys                 Thu Aug 22 08:40:01 2013 (521606A1)
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
**************************Mon Sep  5 08:21:10.168 2016 (UTC - 4:00)**************************
hiber_amd_sata.sys          Mon Jul 23 14:34:48 2012 (500D9948)
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
**************************Thu Aug  4 01:31:05.688 2016 (UTC - 4:00)**************************
atikmpag.sys                Mon Mar 21 09:45:33 2016 (56EFFAFD)
amdacpksd.sys               Mon Mar 21 09:55:25 2016 (56EFFD4D)
AtihdWT6.sys                Mon Mar 21 09:57:06 2016 (56EFFDB2)
atikmdag.sys                Mon Mar 21 10:19:43 2016 (56F002FF)
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
**************************Sun Jul 31 01:45:22.272 2016 (UTC - 4:00)**************************
MpKsl5229c2d3.sys           Tue May 19 21:50:37 2015 (555BE86D)
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
**************************Wed Jul 13 17:11:50.188 2016 (UTC - 4:00)**************************
athwnx.sys                  Sun Apr 26 22:56:55 2015 (553DA577)


http://www.carrona.org/drivers/driver.php?id=lmimirr.sys
http://www.carrona.org/drivers/driver.php?id=dfmirage.sys
http://www.carrona.org/drivers/driver.php?id=LMIRfsDriver.sys
http://www.carrona.org/drivers/driver.php?id=TVMonitor.sys
http://www.carrona.org/drivers/driver.php?id=AsrAppCharger.sys
http://www.carrona.org/drivers/driver.php?id=usbfilter.sys
http://www.carrona.org/drivers/driver.php?id=amd_sata.sys
http://www.carrona.org/drivers/driver.php?id=amd_xata.sys
http://www.carrona.org/drivers/driver.php?id=lvrs64.sys
http://www.carrona.org/drivers/driver.php?id=lvuvc64.sys
http://www.carrona.org/drivers/driver.php?id=ambakdrv.sys
http://www.carrona.org/drivers/driver.php?id=ammntdrv.sys
http://www.carrona.org/drivers/driver.php?id=amwrtdrv.sys
http://www.carrona.org/drivers/driver.php?id=RaInfo.sys
http://www.carrona.org/drivers/driver.php?id=RTKVHD64.sys
http://www.carrona.org/drivers/driver.php?id=WinDivert.sys
http://www.carrona.org/drivers/driver.php?id=AODDriver2.sys
http://www.carrona.org/drivers/driver.php?id=mwac.sys
http://www.carrona.org/drivers/driver.php?id=MBAMSwissArmy.sys
http://www.carrona.org/drivers/driver.php?id=mbam.sys
cnnctfy4.sys - this driver hasn't been added to the DRT as of this run. Please search Google/Bing for the driver if additional information is needed.
http://www.carrona.org/drivers/driver.php?id=rt640x64.sys
http://www.carrona.org/drivers/driver.php?id=taphss6.sys
cfywlan2.sys - this driver hasn't been added to the DRT as of this run. Please search Google/Bing for the driver if additional information is needed.
http://www.carrona.org/drivers/driver.php?id=dc3d.sys
http://www.carrona.org/drivers/driver.php?id=nvlddmkm.sys
http://www.carrona.org/drivers/driver.php?id=AtihdWT6.sys
http://www.carrona.org/drivers/driver.php?id=tap0901.sys
http://www.carrona.org/drivers/driver.php?id=atikmpag.sys
http://www.carrona.org/drivers/driver.php?id=amdacpksd.sys
http://www.carrona.org/drivers/driver.php?id=atikmdag.sys
http://www.carrona.org/drivers/driver.php?id=tap0901.sys
http://www.carrona.org/drivers/driver.php?id=rtwlanu.sys
http://www.carrona.org/drivers/driver.php?id=tap0901.sys
http://www.carrona.org/drivers/driver.php?id=hiber_amd_sata.sys
http://www.carrona.org/drivers/driver.php?id=atikmpag.sys
http://www.carrona.org/drivers/driver.php?id=amdacpksd.sys
http://www.carrona.org/drivers/driver.php?id=AtihdWT6.sys
http://www.carrona.org/drivers/driver.php?id=atikmdag.sys
MpKsl5229c2d3.sys - this driver hasn't been added to the DRT as of this run. Please search Google/Bing for the driver if additional information is needed.
http://www.carrona.org/drivers/driver.php?id=athwnx.sys
 

XXXXX


My browser caused a flood of traffic, sio my IP address was banned. Hope to fix it soon. Will get back to posting as soon as Im able.

- John  (my website: http://www.carrona.org/ )**If you need a more detailed explanation, please ask for it. I have the Knack. **  If I haven't replied in 48 hours, please send me a message. My eye problems have recently increased and I'm having difficult reading posts. (23 Nov 2017)FYI - I am completely blind in the right eye and ~30% blind in the left eye.<p>If the eye problems get worse suddenly, I may not be able to respond.If that's the case and help is needed, please PM a staff member for assistance.

#3 lomaca42

lomaca42
  • Topic Starter

  • Members
  • 3 posts
  • OFFLINE
  •  
  • Local time:08:30 AM

Posted 28 September 2016 - 11:18 AM

"Unfortunately it appears that the system has pirated software.

 

Please get a legitimate copy installed and we'll be glad to help."

 

I'm sorry but for a lack of a stronger word, I call nonsense on that.

 

I have legit Microsoft software on all my machines, including on this one. And I can prove it with invoices and validation/registration  The only difference is that this one I built myself from different parts not from a vendor like Dell or such.

I used a couple of secondhand HDs but they were thoroughly wiped and reformatted before put into use. 

 

I'm afraid if you came to this conclusion from your analysis, then I have no faith in that analysis.

I appreciate your time and willingness to help.

 

Thank you very much.

Regards

 

PS I contacted MS and queried my activation on this machine and it is legit, I have 3 licences BTW as I have other computers. I deleted the zip file I sent to you. 


Edited by lomaca42, 28 September 2016 - 12:31 PM.


#4 lomaca42

lomaca42
  • Topic Starter

  • Members
  • 3 posts
  • OFFLINE
  •  
  • Local time:08:30 AM

Posted 28 September 2016 - 01:54 PM

PPS

Contacted MS support and they are helping me online.

Seems that I have effectively had no updates for the last 8 months because my Update/restart time was set at 3AM when the comp was never on.

The tech suggested an update/restart and the update is running now with multiple restarts. It's over 2 hours now and still 50%.

 

Hopefully this will sort my problem.

 

Pirated software, indeed!

I feel insulted, why I even pay for useful shareware for God's sake.

This was posted on my Acer lappy the main machine just ticked over to 52%.






0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users