Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Bsod - Driver Corrupted Expool & Driver Overran Stack Buffer


  • Please log in to reply
1 reply to this topic

#1 GGPS90

GGPS90

  • Members
  • 1 posts
  • OFFLINE
  •  
  • Local time:05:19 AM

Posted 17 January 2017 - 01:34 AM

Hello,

 

I've been getting a few different BSOD since I've started to do 3D rendering using 3DS MAX. Most common errors are DRIVER_CORRUPTED_EXPOOL & DRIVER_OVERRAN_STACK_BUFFER. 

Here are 6 recent dump files I've uploaded, can anyone please help me identify the problem. Thank you.

DUMP FILES:
https://1drv.ms/f/s!AjWUmvzIdGqihVRA_hRFdl8y_jBV


Intel Core i5 4670K @ 3.40GHz
16.0GB Dual-Channel DDR3 @ 800MHz
3071MB NVIDIA GeForce GTX 780 Ti
MSI Z87-G43 GAMING

Attached Files



BC AdBot (Login to Remove)

 


#2 usasma

usasma

    Still visually handicapped (avatar is memory developed by my Dad


  • BSOD Kernel Dump Expert
  • 25,090 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Southeastern CT, USA
  • Local time:09:19 PM

Posted 20 January 2017 - 10:12 AM

Please run this report collecting tool so that we can provide a complete analysis: (from the pinned topic at the top of the forum)   http://www.bleepingcomputer.com/forums/t/576314/blue-screen-of-death-bsod-posting-instructions-windows-10-81-8-7-vista/
FYI - I don't often use the Perfmon report, so if it doesn't work please just let me know.
NOTE:  On problem systems it can take up to 20 minutes for the log files to complete.  Please be patient and let it run.

If you still have problems with it running, there's an alternate tool here (direct download link):  https://github.com/blueelvis/BSOD-Inspector/releases/download/1.0.5/BSODInspector-1.0.5.exe

NOTE:
Please zip up the (.ZIP) files - do not use .RAR, .7z or other compression utilities. 
.ZIP is the type file that can be uploaded to the forums.

 

Nothing real certain in the memory dumps.
Quite a few "FAILURE_BUCKET_ID:  MEMORY_CORRUPTION_LARGE" errors - which sometimes is suggestive of a hardware problem.

Please run ALL of these free diagnostics:  http://www.carrona.org/hwdiag.html

Please finish ALL of them and let us know the results.

 

Several instances of NTIOLib_X64.sys (a known BSOD cause) in the dump files.

Search your system for this driver and uninstall the programs that each is associated with (most often these are MSI custom programs installed on the system).

 

Beyond this I have these 5 suggestions:
1.  Get ALL available Windows Updates.  It may take several trips to get them all
2.  Get ALL available, compatible updates for your system from the manufacturer's website (to include BIOS/UEFI).
3.  Get ALL available, compatible updates for the programs and any additional hardware installed on your computer from the developer's website
4.  Start with these free hardware diagnostics:  http://www.carrona.org/hwdiag.html
5.  If ALL of the hardware tests pass, then run Driver Verifier according to these instructions:  http://www.carrona.org/verifier.html

Analysis:
The following is for information purposes only. The following information contains the relevant information from the blue screen analysis:
**************************Mon Jan 16 15:05:30.763 2017 (UTC - 5:00)**************************
Loading Dump File [C:\Users\john\SysnativeBSODApps\011717-5218-01.dmp]
Windows 10 Kernel Version 14393 MP (4 procs) Free x64
Built by: 14393.693.amd64fre.rs1_release.161220-1747
System Uptime:0 days 0:44:43.423
*** WARNING: Unable to verify timestamp for win32k.sys
*** ERROR: Module load completed but symbols could not be loaded for win32k.sys
Probably caused by :memory_corruption
BugCheck C5, {100000000, 2, 0, fffff802c10d3850}
BugCheck Info: DRIVER_CORRUPTED_EXPOOL (c5)
Arguments:
Arg1: 0000000100000000, memory referenced
Arg2: 0000000000000002, IRQL
Arg3: 0000000000000000, value 0 = read operation, 1 = write operation
Arg4: fffff802c10d3850, address which referenced memory
BUGCHECK_STR:  0xC5_2
PROCESS_NAME:  MemCompression
FAILURE_BUCKET_ID: MEMORY_CORRUPTION_LARGE
CPUID:        "Intel® Core™ i5-4670K CPU @ 3.40GHz"
MaxSpeed:     3400
CurrentSpeed: 3400
  BIOS Version                  V10.0
  BIOS Release Date             07/29/2013
  Manufacturer                  MSI
  Product Name                  MS-7816
  Baseboard Product             Z87-G43 GAMING (MS-7816)
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
**************************Mon Jan 16 14:20:22.644 2017 (UTC - 5:00)**************************
Loading Dump File [C:\Users\john\SysnativeBSODApps\011617-5765-01.dmp]
Windows 10 Kernel Version 14393 MP (4 procs) Free x64
Built by: 14393.693.amd64fre.rs1_release.161220-1747
System Uptime:0 days 1:02:28.304
*** ERROR: Module load completed but symbols could not be loaded for HTTP.sys
*** WARNING: Unable to verify timestamp for win32k.sys
*** ERROR: Module load completed but symbols could not be loaded for win32k.sys
Probably caused by :memory_corruption
BugCheck C5, {100000000, 2, 0, fffff801a6ed3850}
BugCheck Info: DRIVER_CORRUPTED_EXPOOL (c5)
Arguments:
Arg1: 0000000100000000, memory referenced
Arg2: 0000000000000002, IRQL
Arg3: 0000000000000000, value 0 = read operation, 1 = write operation
Arg4: fffff801a6ed3850, address which referenced memory
BUGCHECK_STR:  0xC5_2
PROCESS_NAME:  System
FAILURE_BUCKET_ID: MEMORY_CORRUPTION_LARGE
CPUID:        "Intel® Core™ i5-4670K CPU @ 3.40GHz"
MaxSpeed:     3400
CurrentSpeed: 3400
  BIOS Version                  V10.0
  BIOS Release Date             07/29/2013
  Manufacturer                  MSI
  Product Name                  MS-7816
  Baseboard Product             Z87-G43 GAMING (MS-7816)
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
**************************Mon Jan 16 13:17:29.097 2017 (UTC - 5:00)**************************
Loading Dump File [C:\Users\john\SysnativeBSODApps\011617-10375-01.dmp]
Windows 10 Kernel Version 14393 MP (4 procs) Free x64
Built by: 14393.693.amd64fre.rs1_release.161220-1747
System Uptime:0 days 5:26:51.759
*** WARNING: Unable to verify timestamp for nvlddmkm.sys
*** ERROR: Module load completed but symbols could not be loaded for nvlddmkm.sys
*** WARNING: Unable to verify timestamp for win32k.sys
*** ERROR: Module load completed but symbols could not be loaded for win32k.sys
Probably caused by :memory_corruption
BugCheck C5, {100000008, 2, 0, fffff8011605805d}
BugCheck Info: DRIVER_CORRUPTED_EXPOOL (c5)
Arguments:
Arg1: 0000000100000008, memory referenced
Arg2: 0000000000000002, IRQL
Arg3: 0000000000000000, value 0 = read operation, 1 = write operation
Arg4: fffff8011605805d, address which referenced memory
BUGCHECK_STR:  0xC5_2
PROCESS_NAME:  MSIAfterburner.exe
FAILURE_BUCKET_ID: MEMORY_CORRUPTION_LARGE
CPUID:        "Intel® Core™ i5-4670K CPU @ 3.40GHz"
MaxSpeed:     3400
CurrentSpeed: 3400
  BIOS Version                  V10.0
  BIOS Release Date             07/29/2013
  Manufacturer                  MSI
  Product Name                  MS-7816
  Baseboard Product             Z87-G43 GAMING (MS-7816)
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
The rest of the memory dump summaries are hidden in the Spoiler tag below.  Click on "Show" to reveal them.

Spoiler



3rd Party Drivers:
The following is for information purposes only. My recommendations were given above. The drivers that follow belong to software or devices that were not developed by Microsoft.  You can find links to the driver information and where to update the drivers in the section after the code box:

**************************Mon Jan 16 15:05:30.763 2017 (UTC - 5:00)**************************
MBfilt64.sys                Thu Jul 30 23:40:32 2009 (4A7267B0)
dfx12x64.sys                Tue Aug 28 15:10:34 2012 (503D17AA)
NTIOLib_X64.sys             Thu Oct 25 06:27:58 2012 (5089142E)
NTIOLib_X64.sys             Thu Oct 25 21:46:44 2012 (5089EB84)
ISCTD64.sys                 Tue Nov 27 14:52:34 2012 (50B51A02)
HECIx64.sys                 Mon Dec 17 14:32:21 2012 (50CF7345)
WibuKey64.sys               Fri Oct 18 14:27:08 2013 (52617D7C)
e22w8x64.sys                Wed Mar 26 11:58:37 2014 (5332F92D)
XtuAcpiDriver.sys           Thu Feb 26 07:51:57 2015 (54EF16ED)
RTCore64.sys                Fri Apr 24 03:01:47 2015 (5539EA5B)
cpuz139_x64.sys             Wed Jan 27 04:18:15 2016 (56A88B57)
RTKVHD64.sys                Tue Jun 21 08:10:42 2016 (57692EC2)
intelppm.sys                Fri Jul 15 22:10:43 2016 (578997A3)
xusb22.sys                  Fri Jul 15 22:28:13 2016 (57899BBD)
nvhda64v.sys                Thu Sep 29 09:25:06 2016 (57ED1632)
nvvad64v.sys                Tue Oct  4 03:20:09 2016 (57F35829)
nvlddmkm.sys                Thu Nov 24 14:04:44 2016 (583739CC)


http://www.carrona.org/drivers/driver.php?id=MBfilt64.sys
dfx12x64.sys - this driver hasn't been added to the DRT as of this run. Please search Google/Bing for the driver if additional information is needed.
http://www.carrona.org/drivers/driver.php?id=NTIOLib_X64.sys
http://www.carrona.org/drivers/driver.php?id=NTIOLib_X64.sys
http://www.carrona.org/drivers/driver.php?id=ISCTD64.sys
http://www.carrona.org/drivers/driver.php?id=HECIx64.sys
http://www.carrona.org/drivers/driver.php?id=WibuKey64.sys
http://www.carrona.org/drivers/driver.php?id=e22w8x64.sys
http://www.carrona.org/drivers/driver.php?id=XtuAcpiDriver.sys
http://www.carrona.org/drivers/driver.php?id=RTCore64.sys
http://www.carrona.org/drivers/driver.php?id=cpuz139_x64.sys
http://www.carrona.org/drivers/driver.php?id=RTKVHD64.sys
http://www.carrona.org/drivers/driver.php?id=intelppm.sys
http://www.carrona.org/drivers/driver.php?id=xusb22.sys
http://www.carrona.org/drivers/driver.php?id=nvhda64v.sys
http://www.carrona.org/drivers/driver.php?id=nvvad64v.sys
http://www.carrona.org/drivers/driver.php?id=nvlddmkm.sys

 
My browser caused a flood of traffic, sio my IP address was banned. Hope to fix it soon. Will get back to posting as soon as Im able.

- John  (my website: http://www.carrona.org/ )**If you need a more detailed explanation, please ask for it. I have the Knack. **  If I haven't replied in 48 hours, please send me a message. My eye problems have recently increased and I'm having difficult reading posts. (23 Nov 2017)FYI - I am completely blind in the right eye and ~30% blind in the left eye.<p>If the eye problems get worse suddenly, I may not be able to respond.If that's the case and help is needed, please PM a staff member for assistance.




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users