Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

URGENT! BSOD errors, can't reset PC, sometimes lose control of admin privileges


  • Please log in to reply
3 replies to this topic

#1 daggoth

daggoth

  • Members
  • 35 posts
  • OFFLINE
  •  
  • Local time:08:16 AM

Posted 10 October 2016 - 04:32 AM

Hello! Recently I have been getting all kinds of BSOD's (SYSTEM_THREAD_EXCEPTION_NOT_HANDLED, DRIVER_IRQL_NOT_LESS_OR_EQUAL, KMODE_EXCEPTION_NOT_HANDLED, CRITICAL_PROCESS_DIED) and i can't reset my pc as it will give me an error at %8 each time. Sometimes the screen goes black and i get the error box "The sign-in process couldn't display secuirty and sign-in options when CTRL+ALT+DEL is pressed." when i try to open task manager. 

It appears that right before the crash ntoskrnl.exe is taking up huge amounts of CPU resource.

 

· OS - Windows 10
· x64 
· What was original installed OS on system? Windows 10
· Is the OS an OEM version (came pre-installed on system) or full retail version (YOU purchased it from retailer)? Full retail
· Age of system (hardware) 1 year
· Age of OS installation - have you re-installed the OS? December 2015, haven't re-installed but did a reset once.

· CPU - Intel Core i5
· Video Card - Nvidia Geforce GTX 970
· MotherBoard - Gigabyte

· System Manufacturer - Gigabyte

· Laptop or Desktop? Desktop

Attached Files


Edited by daggoth, 10 October 2016 - 06:36 AM.


BC AdBot (Login to Remove)

 


#2 usasma

usasma

    Still visually handicapped (avatar is memory developed by my Dad


  • BSOD Kernel Dump Expert
  • 25,091 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Southeastern CT, USA
  • Local time:01:16 AM

Posted 11 October 2016 - 07:23 AM

Unfortunately it appears that the system has pirated software.
Please get a legitimate copy installed and we'll be glad to help.

Here's suggestions on how to ensure that your version is legitimate:  http://windows.microsoft.com/en-us/windows/genuine

Please be aware that we may not be able to fix it (as the hacks that were done to activate it will cause the OS to behave differently than we expect it to). If that's the case, our efforts to help may just waste your time. Secondly, the forum rules prohibit assisting with pirated software - so the topic would be closed if that is the case.

As a courtesy, I will offer an analysis of your issues using the reports you provided.
I will not answer any questions about the analysis until the system is made legitimate.
If you do make it legitimate, please submit a new set of reports for us to check.

Just FYI, sometimes the owner won't know about this.  So here's 2 scenarios that might ring a bell:
- if they had a "friend" help with the computer - and the "friend" installed a pirated copy.
- or they used a copy that they had from another OEM computer.  The OEM license is tied to the hardware that it came from - so you can't just use it on another system (that means that it's pirated).

And here's the analysis:

 

 

Your UEFI/BIOS (version F2) dates from 2015.  Please check at the manufacturer's website to see if there are any UEFI/BIOS updates available for your system.  This is just in case there has been a more recent update.
FYI - W8 and W10 communicate more with the UEFI/BIOS than previous versions of Windows, so it's important to ensure that the UEFI/BIOS is kept up to date (and that outdated UEFI/BIOS' may be the cause of some compatibility issues).

No Windows Update hotfixes installed.  Most build 10586 (TH2/1511) systems have more than this (12 to 15 or so).  Please visit Windows Update and get ALL available Windows Updates.
The actual number is not important.  Rather it's important that you checked manually, installed any available updates, and didn't experience any errors when checking or updating.

 

Beyond this I have these 5 suggestions:
1.  Get ALL available Windows Updates.  It may take several trips to get them all
2.  Get ALL available, compatible updates for your system from the manufacturer's website (to include BIOS/UEFI).
3.  Get ALL available, compatible updates for the programs and any additional hardware installed on your computer from the developer's website
4.  Start with these free hardware diagnostics:  http://www.carrona.org/hwdiag.html
5.  If all of the hardware tests pass, then run Driver Verifier according to these instructions:  http://www.carrona.org/verifier.html

 

Analysis:
The following is for information purposes only. The following information contains the relevant information from the blue screen analysis:
**************************Mon Oct 10 05:17:05.509 2016 (UTC - 4:00)**************************
Loading Dump File [C:\Users\john\SysnativeBSODApps\101016-4593-01.dmp]
Windows 10 Kernel Version 10586 MP (4 procs) Free x64
Built by: 10586.589.amd64fre.th2_release.160906-1759
System Uptime:0 days 0:12:35.122
*** ERROR: Module load completed but symbols could not be loaded for NTFS.sys
Probably caused by :NTFS.sys ( NTFS+d371d )
BugCheck 1E, {ffffffffc0000005, fffff8008d8d371d, ffffd0002056d2e8, ffffd0002056cb00}
BugCheck Info: KMODE_EXCEPTION_NOT_HANDLED (1e)
Arguments:
Arg1: ffffffffc0000005, The exception code that was not handled
Arg2: fffff8008d8d371d, The address that the exception occurred at
Arg3: ffffd0002056d2e8, Parameter 0 of the exception
Arg4: ffffd0002056cb00, Parameter 1 of the exception
BUGCHECK_STR:  0x1E_c0000005
PROCESS_NAME:  wininit.exe
FAILURE_BUCKET_ID: 0x1E_c0000005_NTFS!unknown_function
CPUID:        "Intel® Core™ i5-6600 CPU @ 3.30GHz"
MaxSpeed:     3300
CurrentSpeed: 3312
  BIOS Version                  F2
  BIOS Release Date             07/24/2015
  Manufacturer                  Gigabyte Technology Co., Ltd.
  Product Name                  Z170X-Gaming 3
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
**************************Mon Oct 10 05:02:14.759 2016 (UTC - 4:00)**************************
Loading Dump File [C:\Users\john\SysnativeBSODApps\101016-3390-01.dmp]
Windows 10 Kernel Version 10586 MP (4 procs) Free x64
Built by: 10586.589.amd64fre.th2_release.160906-1759
System Uptime:0 days 0:01:00.385
*** WARNING: Unable to verify timestamp for win32kbase.sys
*** ERROR: Module load completed but symbols could not be loaded for win32kbase.sys
Probably caused by :win32kbase.sys ( win32kbase+26422 )
BugCheck 3B, {c0000005, fffff96123db6422, ffffd000c8d1deb0, 0}
BugCheck Info: SYSTEM_SERVICE_EXCEPTION (3b)
Arguments:
Arg1: 00000000c0000005, Exception code that caused the bugcheck
Arg2: fffff96123db6422, Address of the instruction which caused the bugcheck
Arg3: ffffd000c8d1deb0, Address of the context record for the exception that caused the bugcheck
Arg4: 0000000000000000, zero.
BUGCHECK_STR:  0x3B
DEFAULT_BUCKET_ID:  WIN8_DRIVER_FAULT
PROCESS_NAME:  dwm.exe
FAILURE_BUCKET_ID: 0x3B_win32kbase!unknown_function
CPUID:        "Intel® Core™ i5-6600 CPU @ 3.30GHz"
MaxSpeed:     3300
CurrentSpeed: 3312
  BIOS Version                  F2
  BIOS Release Date             07/24/2015
  Manufacturer                  Gigabyte Technology Co., Ltd.
  Product Name                  Z170X-Gaming 3
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
**************************Mon Oct 10 04:56:02.258 2016 (UTC - 4:00)**************************
Loading Dump File [C:\Users\john\SysnativeBSODApps\101016-3937-01.dmp]
Windows 10 Kernel Version 10586 MP (4 procs) Free x64
Built by: 10586.589.amd64fre.th2_release.160906-1759
System Uptime:0 days 0:00:27.872
*** WARNING: Unable to verify timestamp for win32kfull.sys
*** ERROR: Module load completed but symbols could not be loaded for win32kfull.sys
Probably caused by :win32kfull.sys ( win32kfull+e030e )
BugCheck 3B, {c0000005, fffff800a03c4157, ffffd00023863050, 0}
BugCheck Info: SYSTEM_SERVICE_EXCEPTION (3b)
Arguments:
Arg1: 00000000c0000005, Exception code that caused the bugcheck
Arg2: fffff800a03c4157, Address of the instruction which caused the bugcheck
Arg3: ffffd00023863050, Address of the context record for the exception that caused the bugcheck
Arg4: 0000000000000000, zero.
BUGCHECK_STR:  0x3B
DEFAULT_BUCKET_ID:  WIN8_DRIVER_FAULT
PROCESS_NAME:  LoLPatcherUx.e
FAILURE_BUCKET_ID: 0x3B_win32kfull!unknown_function
CPUID:        "Intel® Core™ i5-6600 CPU @ 3.30GHz"
MaxSpeed:     3300
CurrentSpeed: 3312
  BIOS Version                  F2
  BIOS Release Date             07/24/2015
  Manufacturer                  Gigabyte Technology Co., Ltd.
  Product Name                  Z170X-Gaming 3
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
The rest of the memory dump summaries are hidden in the Spoiler tag below.  Click on "Show" to reveal them.

Spoiler




3rd Party Drivers:
The following is for information purposes only. My recommendations were given above. The drivers that follow belong to software or devices that were not developed by Microsoft.  You can find links to the driver information and where to update the drivers in the section after the code box:

**************************Mon Oct 10 05:17:05.509 2016 (UTC - 4:00)**************************
MBfilt64.sys                Thu Jul 30 23:40:32 2009 (4A7267B0)
nvvad64v.sys                Thu Sep  4 13:10:48 2014 (54089D18)
NvStreamKms.sys             Thu Oct  2 21:39:09 2014 (542DFE3D)
e22w10x64.sys               Mon Apr 27 15:36:50 2015 (553E8FD2)
iaStorA.sys                 Wed Jun  3 05:38:57 2015 (556ECB31)
RTKVHD64.sys                Tue Jul  7 07:13:02 2015 (559BB43E)
TeeDriverW8x64.sys          Tue Jul 28 13:35:42 2015 (55B7BD6E)
MBAMSwissArmy.sys           Wed Jul 29 00:26:01 2015 (55B855D9)
bwcW10x64.sys               Thu Jul 30 13:11:32 2015 (55BA5AC4)
intelppm.sys                Thu Oct 29 22:09:51 2015 (5632D16F)
nvhda64v.sys                Tue May 10 04:59:01 2016 (5731A2D5)
nvlddmkm.sys                Mon Aug  1 08:00:42 2016 (579F39EA)
sshid.sys                   Mon Aug 22 14:24:21 2016 (57BB4355)
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
**************************Mon Oct 10 05:02:14.759 2016 (UTC - 4:00)**************************
SiSRaid2.sys                Wed Sep 24 14:28:20 2008 (48DA86C4)
sisraid4.sys                Wed Oct  1 17:56:04 2008 (48E3F1F4)
iaStorV.sys                 Mon Apr 11 14:48:16 2011 (4DA34CF0)
stexstor.sys                Mon Nov 26 19:02:51 2012 (50B4032B)
amdsbs.sys                  Tue Dec 11 16:21:44 2012 (50C7A3E8)
vstxraid.sys                Mon Jan 21 14:00:28 2013 (50FD904C)
bxvbda.sys                  Mon Feb  4 14:47:18 2013 (51101046)
lsi_sss.sys                 Fri Mar 15 19:39:38 2013 (5143B13A)
HpSAMD.sys                  Tue Mar 26 17:36:54 2013 (515214F6)
megasr.sys                  Mon Jun  3 18:02:39 2013 (51AD127F)
nvraid.sys                  Mon Apr 21 14:28:42 2014 (5355635A)
nvstor.sys                  Mon Apr 21 14:34:03 2014 (5355649B)
vsmraid.sys                 Tue Apr 22 15:21:41 2014 (5356C145)
mvumis.sys                  Fri May 23 16:39:04 2014 (537FB1E8)
evbda.sys                   Mon Jan 12 05:29:16 2015 (54B3A1FC)
percsas3i.sys               Wed Feb  4 17:52:41 2015 (54D2A2B9)
percsas2i.sys               Thu Feb  5 17:51:05 2015 (54D3F3D9)
iaStorAV.sys                Thu Feb 19 07:08:39 2015 (54E5D247)
megasas.sys                 Wed Mar  4 21:36:29 2015 (54F7C12D)
lsi_sas.sys                 Wed Mar 25 15:36:48 2015 (55130E50)
lsi_sas2i.sys               Wed Apr  8 16:58:43 2015 (55259683)
lsi_sas3i.sys               Thu Apr  9 14:07:43 2015 (5526BFEF)
arcsas.sys                  Thu Apr  9 15:12:07 2015 (5526CF07)
ADP80XX.SYS                 Thu Apr  9 16:49:48 2015 (5526E5EC)
amdxata.sys                 Thu Apr 30 20:55:35 2015 (5542CF07)
amdsata.sys                 Thu May 14 08:14:52 2015 (555491BC)
3ware.sys                   Mon May 18 18:28:03 2015 (555A6773)
intelide.sys                Thu Oct 29 22:09:42 2015 (5632D166)
nv_agp.sys                  Thu Oct 29 22:39:06 2015 (5632D84A)
agp440.sys                  Thu Oct 29 22:39:51 2015 (5632D877)
hvsocket.sys                Thu Oct 29 22:46:55 2015 (5632DA1F)
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
**************************Sun Oct  9 16:00:02.573 2016 (UTC - 4:00)**************************
nvhda64v.sys                Mon Jul 21 10:17:53 2014 (53CD2111)
nvlddmkm.sys                Thu Oct 16 08:31:28 2014 (543FBAA0)
nvvadarm.sys                Thu Oct 16 08:49:45 2014 (543FBEE9)
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
**************************Sun Oct  9 14:12:00.213 2016 (UTC - 4:00)**************************
kbtoc.sys                   Tue Aug 11 13:35:18 2015 (55CA3256)


http://www.carrona.org/drivers/driver.php?id=MBfilt64.sys
http://www.carrona.org/drivers/driver.php?id=nvvad64v.sys
http://www.carrona.org/drivers/driver.php?id=NvStreamKms.sys
e22w10x64.sys - this driver hasn't been added to the DRT as of this run. Please search Google/Bing for the driver if additional information is needed.
http://www.carrona.org/drivers/driver.php?id=iaStorA.sys
http://www.carrona.org/drivers/driver.php?id=RTKVHD64.sys
http://www.carrona.org/drivers/driver.php?id=TeeDriverW8x64.sys
http://www.carrona.org/drivers/driver.php?id=MBAMSwissArmy.sys
http://www.carrona.org/drivers/driver.php?id=bwcW10x64.sys
http://www.carrona.org/drivers/driver.php?id=intelppm.sys
http://www.carrona.org/drivers/driver.php?id=nvhda64v.sys
http://www.carrona.org/drivers/driver.php?id=nvlddmkm.sys
http://www.carrona.org/drivers/driver.php?id=sshid.sys
http://www.carrona.org/drivers/driver.php?id=SiSRaid2.sys
http://www.carrona.org/drivers/driver.php?id=sisraid4.sys
http://www.carrona.org/drivers/driver.php?id=iaStorV.sys
http://www.carrona.org/drivers/driver.php?id=stexstor.sys
http://www.carrona.org/drivers/driver.php?id=amdsbs.sys
http://www.carrona.org/drivers/driver.php?id=vstxraid.sys
http://www.carrona.org/drivers/driver.php?id=bxvbda.sys
http://www.carrona.org/drivers/driver.php?id=lsi_sss.sys
http://www.carrona.org/drivers/driver.php?id=HpSAMD.sys
http://www.carrona.org/drivers/driver.php?id=megasr.sys
http://www.carrona.org/drivers/driver.php?id=nvraid.sys
http://www.carrona.org/drivers/driver.php?id=nvstor.sys
http://www.carrona.org/drivers/driver.php?id=vsmraid.sys
http://www.carrona.org/drivers/driver.php?id=mvumis.sys
http://www.carrona.org/drivers/driver.php?id=evbda.sys
percsas3i.sys - this driver hasn't been added to the DRT as of this run. Please search Google/Bing for the driver if additional information is needed.
percsas2i.sys - this driver hasn't been added to the DRT as of this run. Please search Google/Bing for the driver if additional information is needed.
http://www.carrona.org/drivers/driver.php?id=iaStorAV.sys
http://www.carrona.org/drivers/driver.php?id=megasas.sys
http://www.carrona.org/drivers/driver.php?id=lsi_sas.sys
lsi_sas2i.sys - this driver hasn't been added to the DRT as of this run. Please search Google/Bing for the driver if additional information is needed.
lsi_sas3i.sys - this driver hasn't been added to the DRT as of this run. Please search Google/Bing for the driver if additional information is needed.
http://www.carrona.org/drivers/driver.php?id=arcsas.sys
http://www.carrona.org/drivers/driver.php?id=ADP80XX.SYS
http://www.carrona.org/drivers/driver.php?id=amdxata.sys
http://www.carrona.org/drivers/driver.php?id=amdsata.sys
http://www.carrona.org/drivers/driver.php?id=3ware.sys
http://www.carrona.org/drivers/driver.php?id=intelide.sys
http://www.carrona.org/drivers/driver.php?id=nv_agp.sys
http://www.carrona.org/drivers/driver.php?id=agp440.sys
hvsocket.sys - this driver hasn't been added to the DRT as of this run. Please search Google/Bing for the driver if additional information is needed.
http://www.carrona.org/drivers/driver.php?id=nvhda64v.sys
http://www.carrona.org/drivers/driver.php?id=nvlddmkm.sys
http://www.carrona.org/drivers/driver.php?id=nvvadarm.sys
kbtoc.sys - this driver hasn't been added to the DRT as of this run. Please search Google/Bing for the driver if additional information is needed.



XXXXX
My browser caused a flood of traffic, sio my IP address was banned. Hope to fix it soon. Will get back to posting as soon as Im able.

- John  (my website: http://www.carrona.org/ )**If you need a more detailed explanation, please ask for it. I have the Knack. **  If I haven't replied in 48 hours, please send me a message. My eye problems have recently increased and I'm having difficult reading posts. (23 Nov 2017)FYI - I am completely blind in the right eye and ~30% blind in the left eye.<p>If the eye problems get worse suddenly, I may not be able to respond.If that's the case and help is needed, please PM a staff member for assistance.

#3 daggoth

daggoth
  • Topic Starter

  • Members
  • 35 posts
  • OFFLINE
  •  
  • Local time:08:16 AM

Posted 20 October 2016 - 11:30 AM

Hello again. Thanks for your response. 

 

I have formatted my pc with a new version of windows 10 pro. Also tried several of the things you said.

-Removed and reinstalled my Geforce drivers, and when that didn't work I rolled back to last year's version which ran without problems. This didn't solve the BSOD errors.

 

-Tried to update windows over and over, it didn't find as many or they installed right after the format while being very discreet. In the history it showed 7 main updates (windows defender and a few major updates). Maybe the major updates contained many. 

 

-I have updated my motherboard BIOS. Didn't solve the problem.

 

-After getting a few "MEMORY MANAGEMENT" BSOD's I have ran (and still running for 5 hours) Memtest and now I'm looking at 85000 errors and the scan isn't even finished. I am currently logged from my backup PC. Can I assume right away that one of my RAM modules is the source of my problem or it still can be something else? I still have my warranty on every hardware piece (It's an assembly PC but obtained every piece from the same store) but I don't want to bring the whole PC to my provider without knowing which part is faulty. Especially if the problem might be caused by something that can be considered user fault like misplaced hardware / loose contact during assembly.



#4 usasma

usasma

    Still visually handicapped (avatar is memory developed by my Dad


  • BSOD Kernel Dump Expert
  • 25,091 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Southeastern CT, USA
  • Local time:01:16 AM

Posted 22 October 2016 - 07:09 PM

Run the MemTest on each stick individually in the first slot.

You don't have to wait long, just until it starts spitting errors (if it doesn't spit errors, wait for 3 passes to complete).

Once you've tested all sticks in the first slot, test one of the sticks that passed in all of the other slots (to test to make sure that all the slots are good).


My browser caused a flood of traffic, sio my IP address was banned. Hope to fix it soon. Will get back to posting as soon as Im able.

- John  (my website: http://www.carrona.org/ )**If you need a more detailed explanation, please ask for it. I have the Knack. **  If I haven't replied in 48 hours, please send me a message. My eye problems have recently increased and I'm having difficult reading posts. (23 Nov 2017)FYI - I am completely blind in the right eye and ~30% blind in the left eye.<p>If the eye problems get worse suddenly, I may not be able to respond.If that's the case and help is needed, please PM a staff member for assistance.




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users