BSODs after upgrade from 8.1 to 10

toastpaint · Jul 27, 2016

Intermittent BSODs before AND after upgrade from 8.1 to 10

Hi All,

· OS - Windows 10, 8.1, 8, 7, Vista ?
Windows 10 Pro
· x86 (32-bit) or x64 ?
x64
· What was original installed OS on system?
Windows 8.1 Pro
· Is the OS an OEM version (came pre-installed on system) or full retail version (YOU purchased it from retailer)?
TechNet
· Age of system (hardware)
3 years old.
· Age of OS installation - have you re-installed the OS?
1.5 years old (I think)
· CPU
Core i7-2700K
· Video Card
NVIDIA GeForce GTX 750Ti
· MotherBoard - (if NOT a laptop)
Intel DP67BG
· Power Supply - brand & wattage (if laptop, skip this one)
Thermaltake 875W
· System Manufacturer
DIY

Sorry for this but I am getting this error when running the SysnativeBSODCollectionApp -

Code:

Thu 28/07/2016 11:52:01.44


 * * *   H E L L O   from    jcgriff2   * * *
 * * *   H E L L O   from    jcgriff2   * * *
 * * *   H E L L O   from    jcgriff2   * * *




username                        Jack
Windows OS                      Windows_NT
Computer Name                   YOUWANTTHEJAJ
PC Brand


Processor Architecture          AMD64
Processor                       Intel64 Family 6 Model 42 Stepping 7, GenuineIntel
Number of Proc's                8




Find: '[': No such file or directory


*********************************************************************


 This program is not supported on versions of Windows prior to Vista


*********************************************************************


Press any key to continue . . .

View attachment BSOD2016.zip

This zip file contains the two minidumps I have which have errors KMODE_EXCEPTION_NOT_HANDLED and INVALID_MDL_RANGE respectively. I have also noticed during most BSODs that netio.sys shows up.

This issue seems to occur every morning, and was happening prior to my upgrade to 10. What's weird is that as long as I get my computer started, it will be fine until I next shut it down. (but the power supply switch stays on)
The next morning I go to boot it up, and by the time I login it will BSOD. Then the machine will reset and not boot, even not POST sometimes. I will then turn off the power supply and leave it for five minutes, and this MAY fix the issue. This took at least 5 attempts this morning, so it is getting much worse.

I have reseated my RAM, reseated the cables to my HDDs and reseated by Video Card. I am concerned this is the motherboard, but I want to narrow it down as most of the components are fairly new and meet my needs.

My apologies again that I can't get the CollectionApp to work - if there is a workaround I should use, or you would like me to gather further info manually, I am more than happy to.

Thankyou for your help on this matter.

toastpaint · Jul 27, 2016

Doing the Driver Verifier steps now...

toastpaint · Jul 27, 2016

So Verifier is running...will leave it going for at least 24 hours.

Code:

Time Stamp: 07/28/2016 12:46:48.437


Verifier Flags: 0x0002892b


  Standard Flags:


    [X] 0x00000001 Special pool.
    [X] 0x00000002 Force IRQL checking.
    [X] 0x00000008 Pool tracking.
    [ ] 0x00000010 I/O verification.
    [X] 0x00000020 Deadlock detection.
    [ ] 0x00000080 DMA checking.
    [X] 0x00000100 Security checks.
    [X] 0x00000800 Miscellaneous checks.
    [X] 0x00020000 DDI compliance checking.


  Additional Flags:


    [ ] 0x00000004 Randomized low resources simulation.
    [ ] 0x00000200 Force pending I/O requests.
    [ ] 0x00000400 IRP logging.
    [ ] 0x00002000 Invariant MDL checking for stack.
    [ ] 0x00004000 Invariant MDL checking for driver.
    [X] 0x00008000 Power framework delay fuzzing.
    [ ] 0x00010000 Port/miniport interface checking.
    [ ] 0x00040000 Systematic low resources simulation.
    [ ] 0x00080000 DDI compliance checking (additional).
    [ ] 0x00200000 NDIS/WIFI verification.
    [ ] 0x00800000 Kernel synchronization delay fuzzing.
    [ ] 0x01000000 VM switch verification.
    [ ] 0x02000000 Code integrity checks.


    [X] Indicates flag is enabled.


  Verifier Statistics Summary


    Raise IRQLs:                               8922241
    Acquire Spin Locks:                        6287422
    Synchronize Executions:                       4085
    Trims:                                       52081


    Pool Allocations Attempted:               13508885
    Pool Allocations Succeeded:               13508885
    Pool Allocations Succeeded SpecialPool:   13508885
    Pool Allocations With No Tag:                    2
    Pool Allocations Not Tracked:                 8103
    Pool Allocations Failed:                         0
    Pool Allocations Failed Deliberately:            0


  Driver Verification List


    MODULE: pxhlpa64.sys (load: 1 / unload: 0)


      Pool Allocation Statistics: ( NonPaged / Paged )


        Current Pool Allocations:  (        0 /        0 )
        Current Pool Bytes:        (        0 /        0 )
        Peak Pool Allocations:     (        1 /        0 )
        Peak Pool Bytes:           (       20 /        0 )
        Contiguous Memory Bytes:              0
        Peak Contiguous Memory Bytes:         0


    MODULE: pwdrvio.sys (load: 1 / unload: 0)


      Pool Allocation Statistics: ( NonPaged / Paged )


        Current Pool Allocations:  (        0 /        0 )
        Current Pool Bytes:        (        0 /        0 )
        Peak Pool Allocations:     (        0 /        0 )
        Peak Pool Bytes:           (        0 /        0 )
        Contiguous Memory Bytes:              0
        Peak Contiguous Memory Bytes:         0


    MODULE: vboxnetlwf.sys (load: 1 / unload: 0)


      Pool Allocation Statistics: ( NonPaged / Paged )


        Current Pool Allocations:  (        9 /        0 )
        Current Pool Bytes:        (     1958 /        0 )
        Peak Pool Allocations:     (        9 /        1 )
        Peak Pool Bytes:           (     1958 /       47 )
        Contiguous Memory Bytes:              0
        Peak Contiguous Memory Bytes:         0


    MODULE: ndis.sys (load: 1 / unload: 0)


      Pool Allocation Statistics: ( NonPaged / Paged )


        Current Pool Allocations:  (     2821 /      205 )
        Current Pool Bytes:        (  1236041 /    23330 )
        Peak Pool Allocations:     (     3082 /      207 )
        Peak Pool Bytes:           (  1341741 /    24326 )
        Contiguous Memory Bytes:              0
        Peak Contiguous Memory Bytes:         0


    MODULE: vboxnetadp6.sys (load: 1 / unload: 0)


      Pool Allocation Statistics: ( NonPaged / Paged )


        Current Pool Allocations:  (        4 /        0 )
        Current Pool Bytes:        (      192 /        0 )
        Peak Pool Allocations:     (        4 /        0 )
        Peak Pool Bytes:           (      192 /        0 )
        Contiguous Memory Bytes:              0
        Peak Contiguous Memory Bytes:         0


    MODULE: veracrypt.sys (load: 1 / unload: 0)


      Pool Allocation Statistics: ( NonPaged / Paged )


        Current Pool Allocations:  (        0 /        0 )
        Current Pool Bytes:        (        0 /        0 )
        Peak Pool Allocations:     (        1 /        0 )
        Peak Pool Bytes:           (    17536 /        0 )
        Contiguous Memory Bytes:              0
        Peak Contiguous Memory Bytes:         0


    MODULE: vboxusbmon.sys (load: 1 / unload: 0)


      Pool Allocation Statistics: ( NonPaged / Paged )


        Current Pool Allocations:  (        0 /        0 )
        Current Pool Bytes:        (        0 /        0 )
        Peak Pool Allocations:     (        0 /        0 )
        Peak Pool Bytes:           (        0 /        0 )
        Contiguous Memory Bytes:              0
        Peak Contiguous Memory Bytes:         0


    MODULE: vboxdrv.sys (load: 1 / unload: 0)


      Pool Allocation Statistics: ( NonPaged / Paged )


        Current Pool Allocations:  (      323 /        0 )
        Current Pool Bytes:        (   197894 /        0 )
        Peak Pool Allocations:     (      323 /        0 )
        Peak Pool Bytes:           (   198566 /        0 )
        Contiguous Memory Bytes:           4096
        Peak Contiguous Memory Bytes:      4096


    MODULE: hwinfo64a.sys (load: 1 / unload: 0)


      Pool Allocation Statistics: ( NonPaged / Paged )


        Current Pool Allocations:  (        0 /        0 )
        Current Pool Bytes:        (        0 /        0 )
        Peak Pool Allocations:     (        0 /        0 )
        Peak Pool Bytes:           (        0 /        0 )
        Contiguous Memory Bytes:              0
        Peak Contiguous Memory Bytes:         0


    MODULE: avkmgr.sys (load: 1 / unload: 0)


      Pool Allocation Statistics: ( NonPaged / Paged )


        Current Pool Allocations:  (        0 /        0 )
        Current Pool Bytes:        (        0 /        0 )
        Peak Pool Allocations:     (        0 /        0 )
        Peak Pool Bytes:           (        0 /        0 )
        Contiguous Memory Bytes:              0
        Peak Contiguous Memory Bytes:         0


    MODULE: avipbb.sys (load: 1 / unload: 0)


      Pool Allocation Statistics: ( NonPaged / Paged )


        Current Pool Allocations:  (        4 /     7159 )
        Current Pool Bytes:        (     4190 /   958848 )
        Peak Pool Allocations:     (        7 /     8075 )
        Peak Pool Bytes:           (     9814 /  2069194 )
        Contiguous Memory Bytes:              0
        Peak Contiguous Memory Bytes:         0


    MODULE: windrvr6.sys (load: 1 / unload: 0)


      Pool Allocation Statistics: ( NonPaged / Paged )


        Current Pool Allocations:  (       17 /        0 )
        Current Pool Bytes:        (   125441 /        0 )
        Peak Pool Allocations:     (       18 /        0 )
        Peak Pool Bytes:           (   126469 /        0 )
        Contiguous Memory Bytes:              0
        Peak Contiguous Memory Bytes:         0


    MODULE: tap0901.sys (load: 1 / unload: 0)


      Pool Allocation Statistics: ( NonPaged / Paged )


        Current Pool Allocations:  (        1 /        1 )
        Current Pool Bytes:        (     1480 /       39 )
        Peak Pool Allocations:     (        1 /        1 )
        Peak Pool Bytes:           (     1480 /       39 )
        Contiguous Memory Bytes:              0
        Peak Contiguous Memory Bytes:         0


    MODULE: nvlddmkm.sys (load: 1 / unload: 0)


      Pool Allocation Statistics: ( NonPaged / Paged )


        Current Pool Allocations:  (    15029 /      297 )
        Current Pool Bytes:        (  9197933 /  2055969 )
        Peak Pool Allocations:     (    16637 /      312 )
        Peak Pool Bytes:           (  9648211 /  2437628 )
        Contiguous Memory Bytes:         241664
        Peak Contiguous Memory Bytes:    241664


    MODULE: hecix64.sys (load: 1 / unload: 0)


      Pool Allocation Statistics: ( NonPaged / Paged )


        Current Pool Allocations:  (        4 /        1 )
        Current Pool Bytes:        (      362 /      110 )
        Peak Pool Allocations:     (        4 /        1 )
        Peak Pool Bytes:           (      362 /      110 )
        Contiguous Memory Bytes:              0
        Peak Contiguous Memory Bytes:         0


    MODULE: e1c64x64.sys (load: 1 / unload: 0)


      Pool Allocation Statistics: ( NonPaged / Paged )


        Current Pool Allocations:  (     1069 /        0 )
        Current Pool Bytes:        (   448813 /        0 )
        Peak Pool Allocations:     (     1069 /        0 )
        Peak Pool Bytes:           (   448813 /        0 )
        Contiguous Memory Bytes:              0
        Peak Contiguous Memory Bytes:         0


    MODULE: athwnx.sys (load: 1 / unload: 0)


      Pool Allocation Statistics: ( NonPaged / Paged )


        Current Pool Allocations:  (     1066 /        0 )
        Current Pool Bytes:        (  2544898 /        0 )
        Peak Pool Allocations:     (     1094 /        1 )
        Peak Pool Bytes:           (  2574090 /       17 )
        Contiguous Memory Bytes:              0
        Peak Contiguous Memory Bytes:         0


    MODULE: nvvad64v.sys (load: 1 / unload: 0)


      Pool Allocation Statistics: ( NonPaged / Paged )


        Current Pool Allocations:  (        2 /        0 )
        Current Pool Bytes:        (      400 /        0 )
        Peak Pool Allocations:     (        2 /        1 )
        Peak Pool Bytes:           (      400 /       20 )
        Contiguous Memory Bytes:              0
        Peak Contiguous Memory Bytes:         0


    MODULE: nvhda64v.sys (load: 1 / unload: 0)


      Pool Allocation Statistics: ( NonPaged / Paged )


        Current Pool Allocations:  (       33 /       12 )
        Current Pool Bytes:        (    24792 /     7536 )
        Peak Pool Allocations:     (       34 /       13 )
        Peak Pool Bytes:           (    25816 /     8064 )
        Contiguous Memory Bytes:              0
        Peak Contiguous Memory Bytes:         0


    MODULE: ksaud.sys (load: 2 / unload: 1)


      Pool Allocation Statistics: ( NonPaged / Paged )


        Current Pool Allocations:  (      598 /       14 )
        Current Pool Bytes:        (  3519047 /     2920 )
        Peak Pool Allocations:     (      600 /       14 )
        Peak Pool Bytes:           (  3519589 /     2920 )
        Contiguous Memory Bytes:              0
        Peak Contiguous Memory Bytes:         0


    MODULE: dump_storahci.sys (load: 2 / unload: 1)


      Pool Allocation Statistics: ( NonPaged / Paged )


        Current Pool Allocations:  (        0 /        0 )
        Current Pool Bytes:        (        0 /        0 )
        Peak Pool Allocations:     (        0 /        0 )
        Peak Pool Bytes:           (        0 /        0 )
        Contiguous Memory Bytes:              0
        Peak Contiguous Memory Bytes:         0


    MODULE: atmfd.dll (load: 1 / unload: 0)


      Pool Allocation Statistics: ( NonPaged / Paged )


        Current Pool Allocations:  (        0 /        0 )
        Current Pool Bytes:        (        0 /        0 )
        Peak Pool Allocations:     (        0 /        0 )
        Peak Pool Bytes:           (        0 /        0 )
        Contiguous Memory Bytes:              0
        Peak Contiguous Memory Bytes:         0


    MODULE: avgntflt.sys (load: 1 / unload: 0)


      Pool Allocation Statistics: ( NonPaged / Paged )


        Current Pool Allocations:  (        5 /    78435 )
        Current Pool Bytes:        (     8312 /  5146878 )
        Peak Pool Allocations:     (        6 /    78449 )
        Peak Pool Bytes:           (    12424 /  5421326 )
        Contiguous Memory Bytes:              0
        Peak Contiguous Memory Bytes:         0


    MODULE: avnetflt.sys (load: 1 / unload: 0)


      Pool Allocation Statistics: ( NonPaged / Paged )


        Current Pool Allocations:  (       30 /        0 )
        Current Pool Bytes:        (    10270 /        0 )
        Peak Pool Allocations:     (      229 /        1 )
        Peak Pool Bytes:           (    68084 /      344 )
        Contiguous Memory Bytes:              0
        Peak Contiguous Memory Bytes:         0


    MODULE: rzpnk.sys (load: 1 / unload: 0)


      Pool Allocation Statistics: ( NonPaged / Paged )


        Current Pool Allocations:  (        1 /        0 )
        Current Pool Bytes:        (    41296 /        0 )
        Peak Pool Allocations:     (       13 /        0 )
        Peak Pool Bytes:           (    65766 /        0 )
        Contiguous Memory Bytes:              0
        Peak Contiguous Memory Bytes:         0


    MODULE: npf.sys (load: 1 / unload: 0)


      Pool Allocation Statistics: ( NonPaged / Paged )


        Current Pool Allocations:  (       11 /        1 )
        Current Pool Bytes:        (     1210 /     4112 )
        Peak Pool Allocations:     (       11 /        2 )
        Peak Pool Bytes:           (     1210 /     4220 )
        Contiguous Memory Bytes:              0
        Peak Contiguous Memory Bytes:         0


    MODULE: rzpmgrk.sys (load: 1 / unload: 0)


      Pool Allocation Statistics: ( NonPaged / Paged )


        Current Pool Allocations:  (        0 /        0 )
        Current Pool Bytes:        (        0 /        0 )
        Peak Pool Allocations:     (       29 /        0 )
        Peak Pool Bytes:           (    56794 /        0 )
        Contiguous Memory Bytes:              0
        Peak Contiguous Memory Bytes:         0


    MODULE: nvstreamkms.sys (load: 1 / unload: 0)


      Pool Allocation Statistics: ( NonPaged / Paged )


        Current Pool Allocations:  (        0 /        0 )
        Current Pool Bytes:        (        0 /        0 )
        Peak Pool Allocations:     (        0 /        0 )
        Peak Pool Bytes:           (        0 /        0 )
        Contiguous Memory Bytes:              0
        Peak Contiguous Memory Bytes:         0


    MODULE: rzdaendpt.sys (load: 1 / unload: 0)


      Pool Allocation Statistics: ( NonPaged / Paged )


        Current Pool Allocations:  (        0 /        0 )
        Current Pool Bytes:        (        0 /        0 )
        Peak Pool Allocations:     (        0 /        0 )
        Peak Pool Bytes:           (        0 /        0 )
        Contiguous Memory Bytes:              0
        Peak Contiguous Memory Bytes:         0


    MODULE: rzvkeyboard.sys (load: 1 / unload: 0)


      Pool Allocation Statistics: ( NonPaged / Paged )


        Current Pool Allocations:  (        0 /        0 )
        Current Pool Bytes:        (        0 /        0 )
        Peak Pool Allocations:     (        1 /        0 )
        Peak Pool Bytes:           (      134 /        0 )
        Contiguous Memory Bytes:              0
        Peak Contiguous Memory Bytes:         0


    MODULE: rzudd.sys (load: 1 / unload: 0)


      Pool Allocation Statistics: ( NonPaged / Paged )


        Current Pool Allocations:  (        0 /        0 )
        Current Pool Bytes:        (        0 /        0 )
        Peak Pool Allocations:     (        0 /        0 )
        Peak Pool Bytes:           (        0 /        0 )
        Contiguous Memory Bytes:              0
        Peak Contiguous Memory Bytes:         0


    MODULE: cpuz138_x64.sys (load: 0 / unload: 0)

toastpaint · Jul 28, 2016

Still haven't had any BSODs, and I ran an sfc /scannow while I was out which succeeded with no errors.

Is there any workaround for the Sysnative app not working? (won't surprise me if it's a 1D-10T error)

toastpaint · Jul 31, 2016

Okay, so, I had a BSOD this morning.

Here's the analysis from OSR:

Code:

[COLOR=#000000]Crash Dump Analysis provided by OSR Open Systems Resources, Inc. (http://www.osr.com)[/COLOR]Online Crash Dump Analysis Service
See http://www.osronline.com for more information
Windows 8 Kernel Version 10586 MP (8 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 10586.494.amd64fre.th2_release_sec.160630-1736
Machine Name:
Kernel base = 0xfffff803`dcc86000 PsLoadedModuleList = 0xfffff803`dcf63cf0
Debug session time: Sat Jul 30 19:10:52.621 2016 (UTC - 4:00)
System Uptime: 0 days 0:08:42.331
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

PAGE_FAULT_IN_NONPAGED_AREA (50)
Invalid system memory was referenced.  This cannot be protected by try-except,
it must be protected by a Probe.  Typically the address is just plain bad or it
is pointing at freed memory.
Arguments:
Arg1: ffffc00156d3a119, memory referenced.
Arg2: 0000000000000000, value 0 = read operation, 1 = write operation.
Arg3: fffff803dcd4e882, If non-zero, the instruction address which referenced the bad memory
	address.
Arg4: 0000000000000002, (reserved)

Debugging Details:
------------------


Could not read faulting driver name
TRIAGER: Could not open triage file : e:\dump_analysis\program\triage\modclass.ini, error 2

OVERLAPPED_MODULE: Address regions for 'peauth' and 'dump_storpor' overlap

READ_ADDRESS: unable to get nt!MmSpecialPoolStart
unable to get nt!MmSpecialPoolEnd
unable to get nt!MmPagedPoolEnd
unable to get nt!MmNonPagedPoolStart
unable to get nt!MmSizeOfNonPagedPoolInBytes
 ffffc00156d3a119 

FAULTING_IP: 
nt!SeAccessCheckWithHint+272
fffff803`dcd4e882 410fb64101      movzx   eax,byte ptr [r9+1]

MM_INTERNAL_CODE:  2

CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  VERIFIER_ENABLED_VISTA_MINIDUMP

BUGCHECK_STR:  AV

PROCESS_NAME:  chrome.exe

CURRENT_IRQL:  0

TRAP_FRAME:  ffffd000271bd160 -- (.trap 0xffffd000271bd160)
NOTE: The trap frame does not contain all registers.
Some register values may be zeroed or incorrect.
rax=00000000f5000080 rbx=0000000000000000 rcx=ffffc0005dd56060
rdx=0000000000000001 rsi=0000000000000000 rdi=0000000000000000
rip=fffff803dcd4e882 rsp=ffffd000271bd2f0 rbp=ffffd000271bd410
 r8=0000000000008000  r9=ffffc00156d3a118 r10=0000000000000001
r11=ffffd000271bd4e0 r12=0000000000000000 r13=0000000000000000
r14=0000000000000000 r15=0000000000000000
iopl=0         nv up ei ng nz na po nc
nt!SeAccessCheckWithHint+0x272:
fffff803`dcd4e882 410fb64101      movzx   eax,byte ptr [r9+1] ds:ffffc001`56d3a119=??
Resetting default scope

LAST_CONTROL_TRANSFER:  from fffff803dce0dd3f to fffff803dcdc8940

STACK_TEXT:  
ffffd000`271bcf08 fffff803`dce0dd3f : 00000000`00000050 ffffc001`56d3a119 00000000`00000000 ffffd000`271bd160 : nt!KeBugCheckEx
ffffd000`271bcf10 fffff803`dcd23621 : 00000000`00000000 00000000`ffffffff ffffd000`271bd160 ffffd000`271bd150 : nt! ?? ::FNODOBFM::`string'+0x36a3f
ffffd000`271bd000 fffff803`dcdd1bbc : ffffa48a`734ce706 fffff6fb`7dbedc00 00000000`00000000 fffff803`dcf818b8 : nt!MmAccessFault+0x5f1
ffffd000`271bd160 fffff803`dcd4e882 : ffffd000`271bd410 ffffc000`61d3a098 ffffd000`271bd568 00000000`00076080 : nt!KiPageFault+0x13c
ffffd000`271bd2f0 fffff803`dcd4e602 : ffffc000`802c39b0 ffffe001`00000000 ffffd000`271bd4c8 00000000`00000001 : nt!SeAccessCheckWithHint+0x272
ffffd000`271bd4a0 fffff803`dd12a036 : ffffc000`802c3902 00000000`00076080 ffffe001`c7d56b10 fffff803`00000000 : nt!SeAccessCheck+0x62
ffffd000`271bd510 fffff803`dd125f1d : 00000000`ffffffff ffffc000`5c57d258 ffffd000`271bd659 ffffe001`c7d56b10 : nt!CmpCheckKeyBodyAccess+0x176
ffffd000`271bd5b0 fffff803`dd129666 : ffffe001`00000000 ffffd000`0007b070 ffffe001`c7d56b10 00000000`00000001 : nt!CmpDoOpen+0x40d
ffffd000`271bd6a0 fffff803`dd134e32 : fffff803`dcc86000 fffff803`dcc86000 ffffc000`00020000 ffffd000`271bdba0 : nt!CmpParseKey+0x1616
ffffd000`271bd9b0 fffff803`dd1360dc : ffffe001`c7d56b00 ffffd000`271bdba0 ffffc000`00000040 ffffe001`c6119b20 : nt!ObpLookupObjectName+0x992
ffffd000`271bdb30 fffff803`dd0c8986 : 00020019`00000001 ffffe001`c6119b20 00000000`006bcac8 00000000`00000000 : nt!ObOpenObjectByNameEx+0x1ec
ffffd000`271bdc50 fffff803`dd0c86d3 : 00000000`00000000 00000000`00000042 00000000`006bfda0 00000000`6d2d0000 : nt!CmOpenKey+0x2a6
ffffd000`271bde00 fffff803`dcdd31a3 : ffffe001`cb4b6540 ffffd000`00000010 fffff901`41c1d860 00000000`00000000 : nt!NtOpenKeyEx+0xf
ffffd000`271bde40 00007ffe`ea5772b4 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSystemServiceCopyEnd+0x13
00000000`006bca88 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x7ffe`ea5772b4


STACK_COMMAND:  kb

FOLLOWUP_IP: 
nt!SeAccessCheckWithHint+272
fffff803`dcd4e882 410fb64101      movzx   eax,byte ptr [r9+1]

SYMBOL_STACK_INDEX:  4

SYMBOL_NAME:  nt!SeAccessCheckWithHint+272

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: nt

IMAGE_NAME:  ntkrnlmp.exe

DEBUG_FLR_IMAGE_TIMESTAMP:  5775e2f5

FAILURE_BUCKET_ID:  X64_AV_VRF_nt!SeAccessCheckWithHint+272

BUCKET_ID:  X64_AV_VRF_nt!SeAccessCheckWithHint+272

Followup: MachineOwner
---------

I can't see anything in there referring to any specific drivers - it happened just as I clicked Chrome. I'm currently running Version 52.0.2743.82 m (can't remember whether that's a branch other than stable, but it's not the alpha branch)

xilolee · Jul 31, 2016

Hi jackwebster. :smile9:

I've just updated chrome (normal version): Version 52.0.2743.82 m

You can also provide these informations:

Retrieve System Information, using speccy
1. Download Speccy portable - actual version 1.29.714 (click), unzip/decompress it and put it on your desktop.
2. When the program opens, it will retrieve some information regarding your system.
3. Once it's done, select the File menu and choose Publish snapshot. Answer Yes to the confirmation message.
4. On the next screen that comes up, choose the Copy to Clipboard button and paste this link in your next reply.
5. (Or attach the log here, if you prefer to not publish it for some reason)
System information log
You should run only one of the following commands, the one you prefer.

Read More:

The first command is longer than the following ones, but it should always work. Hence, in case of errors with the other two commands, try the first one.
Obviously, YourWinAccountFolder should be substituted with your Win Account Folder name.
The following commands should be run from an elevated command prompt.
How to open an elevated command prompt in ALL windows versions: click (or right-click) on Windows Start, click in the searchbox (or click Search, or start to type directly), type CMD, press and hold CTRL and SHIFT keys (on your keyboard), press enter (on your keyboard), release all the keys, click yes to UAC window (if you disabled UAC, this shouldn't appear)
Code:
```
msinfo32 /nfo "c:\users\YourWinAccountFolder\desktop\MsInfo.nfo"
or
msinfo32 /nfo "c:\users\%username%\desktop\MsInfo.nfo"
or
msinfo32 /nfo "%userprofile%\desktop\MsInfo.nfo"
```
(Then upload it here)

toastpaint · Aug 2, 2016

Hi xilolee,

Thanks for the reply.

Here's the Speccy link: http://speccy.piriform.com/results/xJLKvnQCzkO0cxgPyFLvhi7

Here's the NFO: View attachment MsInfo.zip

Still running driver verifier...things are a little sluggish but I'm unsure whether it's that or the upgrade.

Thanks for your help!

axe0 · Aug 2, 2016

Hi jackwebster :)

Please check the following programs for updates

Code:

Start Menu\Programs\[COLOR="#FF0000"]MiniTool Partition Wizard Free 9.1[/COLOR]	Public:Start Menu\Programs\MiniTool Partition Wizard Free 9.1	Public
Start Menu\Programs\[COLOR="#FF0000"]TAP-Windows	[/COLOR]Public:Start Menu\Programs\TAP-Windows	Public
Start Menu\Programs\[COLOR="#FF0000"]Creative\Sound Blaster X-Fi Surround 5.1 Pro[/COLOR]	Public:Start Menu\Programs\Creative\Sound Blaster X-Fi Surround 5.1 Pro	Public

Please check Intel for BIOS & chipset driver updates.

I have also noticed during most BSODs that netio.sys shows up.

That could be due to a problem with Avira, a quick look in the 0x1E dump shows Avira may be causing problems.
I would suggest to uninstall it and use Windows Defender as alternative while troubleshooting.
How do I uninstall my Avira Antivirus product?

Could you upload the dump from post #5 please, it was caused by driver verifier where I would like to have a better look at it.

Still running driver verifier...things are a little sluggish but I'm unsure whether it's that or the upgrade.

Most likely due to driver verifier, though how heavy it is depends on the settings selected.

What I would recommend is to cleanup your partitions that have less than 10-15% free space, this is because it may cause problems sometimes with Windows not being able to perform background stuff.
15% is to be on the safe side, 10% is meant for hard drives that are very large.
Could you please check if your Samsung SSD firmware is up to date.

toastpaint · Aug 2, 2016

Thanks again - here's that dump! View attachment 073116-15140-01.zip

axe0 · Aug 2, 2016

If I'm correct there is a small bit change in what memory address was requested compared to what memory address was provided, with driver verifier not catching any driver it is very likely a hardware problem. I can't say what hardware part could be a suspect, I believe that part usually is best done with a kernel dump, but I could take a guess.

I would recommend to run following hardware tests
https://www.sysnative.com/forums/hardware-tutorials/3909-test-ram-memtest86.html
https://www.sysnative.com/forums/hardware-tutorials/4072-hard-drive-hdd-diagnostics.html

xilolee · Aug 3, 2016

Let's try to get other reports; run the folllowing commands from an elevated command prompt:

Read More:

dxdiag /dontskip /whql:on /t c:\users\%username%\desktop\DXDIAG report.txt

(echo UNSIGNED DRIVERS && (driverquery /si /fo table |find /v /i "true") && echo\ && echo\ && echo SIGNED DRIVERS && echo\ && (driverquery /si /fo table |find /i "true") && echo\ && echo\ && echo DRIVERS IN OTHER FOLDERS ^(NON IN C:\WINDOWS\SYSTEM32^) && echo\ && (driverquery /fo table /v |find /v /i "system32") && echo\ && echo\ && echo DRIVERS IN C:\WINDOWS\SYSTEM32 && echo\ && (driverquery /fo table /v|find /i "system32") && echo\ && echo PATH ENVIRONMENT VARIABLE && echo\ && path && echo\ && echo HOSTS CONTENT && echo\ && type c:\windows\system32\drivers\etc\hosts) > "c:\users\%username%\desktop\Drivers - path - hosts.txt"

Then, attach/upload the files here...

(Those commands worked on my system: windows 10 home x64)

Jared · Aug 4, 2016

axe0 said:
If I'm correct there is a small bit change in what memory address was requested compared to what memory address was provided, with driver verifier not catching any driver it is very likely a hardware problem. I can't say what hardware part could be a suspect, I believe that part usually is best done with a kernel dump, but I could take a guess.

I would recommend to run following hardware tests
https://www.sysnative.com/forums/hardware-tutorials/3909-test-ram-memtest86.html
https://www.sysnative.com/forums/hardware-tutorials/4072-hard-drive-hdd-diagnostics.html

I can't see any kind of bit flip in this dump, not really sure where you're finding that.

With regards to the first two dump files, make sure you enable Invariant MDL checking for driver and NDIS/WIFI verification.

As for the others, memtest would be a good start.

toastpaint · Aug 4, 2016

xilolee said:
Then, attach/upload the files here...

Thanks again xilolee - here they are:

View attachment Drivers - path - hosts.txt
View attachment DXDIAG report.txt

I'm about to head out for a bit, I'll run memtest now.

xilolee · Aug 5, 2016

I reordered your path; you can set it from Control Panel\System and Security\System - advanced system settings, environment variables:

c:\cygwin\bin;C:\Go\bin;C:\HashiCorp\Vagrant\bin;C:\Program Files (x86)\GNU\GnuPG\pub;C:\Program Files (x86)\Nmap;C:\Program Files (x86)\NVIDIA Corporation\PhysX\Common;C:\Program Files (x86)\Skype\Phone\;C:\Program Files (x86)\Windows Kits\8.1\Windows Performance Toolkit\;C:\Program Files\Calibre2\;C:\Program Files\Git\cmd;C:\Program Files\Microsoft DNX\Dnvm\;C:\Program Files\Microsoft SQL Server\110\Tools\Binn\;C:\Program Files\Microsoft SQL Server\120\Tools\Binn\;C:\Program Files\Microsoft\Web Platform Installer\;C:\Program Files\nodejs\;C:\Program Files\OpenVPN\bin;c:\Program Files\Oracle\VirtualBox;C:\ProgramData\chocolatey\bin;C:\ProgramData\Oracle\Java\javapath;C:\Python27\;C:\Python27\Scripts;C:\Ruby21-x64\bin;C:\Users\Jack\.babun;C:\Users\Jack\.dnx\bin;C:\Users\Jack\AppData\Local\atom\bin;C:\Users\Jack\AppData\Roaming\npm;C:\WinAVR-20100110\bin;C:\Windows;C:\Windows\system32;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;F:\MATLAB\R2016a\bin;F:\MATLAB\R2016a\runtime\win64

You can also check if you need all those paths, and remove the unnecessary ones:

Read More:

xilolee · Aug 5, 2016

dxdiag says:

Sound Tab 1: The file ksaud.sys is not digitally signed, which means that it has not been tested by Microsoft's Windows Hardware Quality Labs (WHQL). You may be able to get a WHQL logo'd driver from the hardware manufacturer.
Sound Tab 2: The file ksaud.sys is not digitally signed, which means that it has not been tested by Microsoft's Windows Hardware Quality Labs (WHQL). You may be able to get a WHQL logo'd driver from the hardware manufacturer.

Sound Blaster X-Fi Surround 5.1 Pro Software Pack per Windows 10 (click)

Release date: August 25th 2015
Filename: XFXA_PCDRV_L11_1_02_0062.exe

axe0 · Aug 10, 2016

Jared said:
I can't see any kind of bit flip in this dump, not really sure where you're finding that.

My bad, I forgot that a single change in an address is a complete different address.

I meant something more like this
'If I'm correct there is a small difference in what memory address was requested compared to what memory address was provided'

BSODs after upgrade from 8.1 to 10

toastpaint

Member

toastpaint

Member

toastpaint

Member

toastpaint

Member

toastpaint

Member

xilolee

Moderator

toastpaint

Member

axe0

Administrator,
BSOD Academy Instructor,
Security Analyst

toastpaint

Member

axe0

Administrator,
BSOD Academy Instructor,
Security Analyst

xilolee

Moderator

Jared

Sysnative Staff, BSOD Kernel Dump Expert

toastpaint

Member

xilolee

Moderator

xilolee

Moderator

axe0

Administrator,
BSOD Academy Instructor,
Security Analyst

BSODs after upgrade from 8.1 to 10

Member

Member

Member

Member

Member

Moderator

Member

Administrator, BSOD Academy Instructor, Security Analyst

Member

Administrator, BSOD Academy Instructor, Security Analyst

Moderator

Sysnative Staff, BSOD Kernel Dump Expert

Member

Moderator

Moderator

Administrator, BSOD Academy Instructor, Security Analyst

Administrator,
BSOD Academy Instructor,
Security Analyst

Administrator,
BSOD Academy Instructor,
Security Analyst

Administrator,
BSOD Academy Instructor,
Security Analyst