BSOD Windows 8.1

O

onephenom

Contributor
Joined
Sep 1, 2014
Posts
46
Hello! I've had blue screen problems for awhile now, and I really am frustrated and don't know what to do. I'm not terribly computer literate but I know how to follow directions. Let me know if I am missing anything... thanks in advance for your help! You are helping a very frustrated heavy pc user. :)


OS - Windows 8.1, 8, 7, Vista ? 8.1
· x86 (32-bit) or x64 ? x64
· What was original installed OS on system? windows 8, later updated to 8.1
· Is the OS an OEM version? No, full retail.
· Age of system ~4 months
· Age of OS installation - ~4 months, no reinstall yet.

· CPU
· Video Card- GeForce GTX 650 Ti GPU
· MotherBoard - asus m5a97 LE r2.0
· Power Supply - HighPower Astro GD 600W, 80+ Gold, Single +12 Rails, SLI/Cross Fire ready, Full Module, Active PFC Power Supply


· System Manufacturer -home build

· Desktop


View attachment Echo.zip.zip
 
Hi,

SYSTEM_SERVICE_EXCEPTION (3b)

This indicates that an exception happened while executing a routine that transitions from non-privileged code to privileged code.

Code: 
BugCheck 3B, {c0000005, [COLOR=#0000cd]fffff801228e3396[/COLOR], ffffd000216edc40, 0}

Code: 
6: kd> ln fffff801228e3396
(fffff801`228e2f70)   [COLOR=#ff0000]fltmgr!FltpPerformPreCallbacks+0x426[/COLOR]   |  (fffff801`228e3940)   fltmgr!FltpHandlePreCallbackReturnStatus

The exception (violation) occurred in fltmgr!FltpPerformPreCallbacks+0x426.

Code: 
6: kd> k
Child-SP          RetAddr           Call Site
ffffd000`216ed388 fffff801`6a969ae9 nt!KeBugCheckEx
ffffd000`216ed390 fffff801`6a9693fc nt!KiBugCheckDispatch+0x69
ffffd000`216ed4d0 fffff801`6a9654ed nt!KiSystemServiceHandler+0x7c
ffffd000`216ed510 fffff801`6a8ef105 nt!RtlpExecuteHandlerForException+0xd
ffffd000`216ed540 fffff801`6a8edfbf nt!RtlDispatchException+0x1a5
ffffd000`216edc10 fffff801`6a969bc2 nt!KiDispatchException+0x61f
ffffd000`216ee300 fffff801`6a968314 nt!KiExceptionDispatch+0xc2
ffffd000`216ee4e0 fffff801`228e3396 [COLOR=#0000cd]nt!KiPageFault+0x214[/COLOR]
ffffd000`216ee670 fffff801`228e6c73 [COLOR=#ff0000]fltmgr!FltpPerformPreCallbacks+0x426[/COLOR]
ffffd000`216ee780 fffff801`2290d3ff [COLOR=#008000]fltmgr!FltpPassThroughFastIo+0x73[/COLOR]
ffffd000`216ee7e0 fffff801`6ac0199b [COLOR=#008080]fltmgr!FltpFastIoRead+0x14f[/COLOR]
ffffd000`216ee890 fffff801`6a9697b3 [COLOR=#ff8c00]nt!NtReadFile+0x44b[/COLOR]
ffffd000`216eea10 00000000`77652772 nt!KiSystemServiceCopyEnd+0x13
00000000`2d98ef18 00000000`00000000 0x77652772

A lot of I/O stuff going on in the stack (read open file, fast IO read, etc), and we hit a pagefault with fltmgr!FltpPerformPreCallbacks+0x426 (as noted above where the violation occurred). We definitely have something causing conflicts with the file system.


After some checking, you have two antivirus suites installed (bad news).

One of the biggest problems as far as antiviruses go in terms of conflicts, is if there is more than one antivirus or anti-malware software installed on the system. In the most basic example, I will use AVG and avast! (because that's what you have installed). Let's say you have both installed and running, this is not a good scenario at all. Why? Most/if not all modern day antivirus software are allowed direct access (come and go, whenever they want) to the kernel because an antivirus installs interceptors of system events within the kernel code, which passes intercepted data to the antivirus engine for analysis. This data is network packets, files, and other various critical data.

Remove and replace avast! and AVG with Windows 8's built-in Windows Defender for temporary troubleshooting purposes as it's very likely causing conflicts:

AVG removal - http://www.avg.com/us-en/utilities

avast! removal - avast! Uninstall Utility | Download aswClear for avast! Removal

Windows Defender (how to turn on after removal)

1. Navigate to Control Panel (with icons). You can do this by hitting Start > Search > Control Panel. Once in Control Panel, change the drop-down from Category to Large and/or Small icons.

2. Among the list of icons, find and click Action Center.

3. Assuming the removal of your prior antivirus software went properly, you will notice for both Spyware and unwated software protection (important) and Virus protection (important), it'll have a button labeled Turn on now. Click this button (it doesn't matter which, as Windows Defender serves as both in Windows 8/8.1).

Regards,

Patrick
 
Thanks Patrick! I appreciate your help. I've got them both uninstalled and Windows Defender running. What should I do now? Run the troubleshooting programs from before again?

Thanks

Nathan
 
My pleasure.

Nope, now you just go a few days and let me know if you've crashed or not. If not, consider it solved.

Regards,

Patrick
 
Well if only. Worked great for a day, then I got 2 blue screens back to back, first one was about a memory_noexception something, and the second one was a clock watchdog timeout blue screen. argh! what to do now?
 
I'll need a kernel-dump. Kernel-dumps are located at C:\Windows and named MEMORY.DMP. If there is nothing there, you may need to enable generation of them - Creating a Kernel-Mode Dump File (Windows Debuggers).

Do note that you'll need to upload it 3rd party (Mediafire, Onedrive, etc) and paste the link here as it'll be too large to locally upload to Sysnative.

Regards,

Patrick
 
It will not let me upload the DMP file, because I do not have permission, even though I am an administrator and the only account on this computer. I can make it let me go in and change the permissions, everything is set to "Allow" but I still can't upload it anywhere because I do not have permission and need to contact an admin.
 
Please try the following:

1. Right click on the file or directory that is giving you permission issues.

2. Right click and select 'Properties'.

3. Once inside Properties, select the 'Security' tab.

4. Once inside the Security tab, select the 'Advanced' option at the bottom.

5. Once at the 'Advanced Security Dialog' window, click on the 'Owner' tab.

6. This is where you can see the current owner (Trusted Installer).

7. If you'd like to take ownership of said file or directory, click 'Edit'. UAC will ask you for permission, say yes. Afterwards, highlight the username in the 'Change owner' window that you'd like to assign as the new owner for said file or directory. Click 'OK' to finish.

8. Afterwards, in the 'Advanced Security Settings' window, you now see that the owner has changed to whomever you specified. Click 'OK' to exit this window, and then select 'OK' once more to finish.

9. Follow step 1 through 4 again to open the 'Properties' window for the file or directory once again.

10. Once inside the 'Properties' window once again, click the 'Edit' button and say yes to UAC.

11. Highlight the Administrators in the 'Group or user names' box. If the user ID or group that you want to manage the permissions for said file or directory does not exist, click 'Add' and type in the user name that you'd like to have full control in regards to the file or directory.

12. Once inside the Permissions for Administrators (or the user name you chose), select 'Full Control' under the 'Allow' column. Click 'OK' to finish.

Regards,

Patrick
 
Thanks.

CLOCK_WATCHDOG_TIMEOUT (101)

This indicates that an expected clock interrupt on a secondary processor, in a multi-processor system, was not received within the allocated interval.

Code: 
5: kd> k
Child-SP          RetAddr           Call Site
ffffd000`ea0ab200 fffff800`e0a6a791 nt!MiFlushTbList+0x300
ffffd000`ea0ab340 fffff800`e0b0c376 nt!MmFreeSpecialPool+0x2dd
ffffd000`ea0ab490 fffff800`48af32b4 nt!ExFreePoolWithTag+0x1096
ffffd000`ea0ab560 fffff800`e0ee1130 VerifierExt!ExFreePoolWithTag_wrapper+0x10
*** ERROR: Symbol file could not be found.  Defaulted to export symbols for nvlddmkm.sys - 
ffffd000`ea0ab590 fffff800`4a12fb31 [COLOR=#0000cd]nt!VerifierExFreePoolWithTag+0x44[/COLOR]
ffffd000`ea0ab5c0 fffff800`4a27b6de [COLOR=#ff0000]nvlddmkm+0xdab31[/COLOR]
ffffd000`ea0ab5f0 fffff800`4a30238e [COLOR=#ff0000]nvlddmkm+0x2266de[/COLOR]
ffffd000`ea0ab620 fffff800`4a302daa [COLOR=#ff0000]nvlddmkm+0x2ad38e[/COLOR]
ffffd000`ea0ab660 fffff800`4a51f9bf [COLOR=#ff0000]nvlddmkm+0x2addaa[/COLOR]
ffffd000`ea0ab6a0 fffff800`4a1f71c0 [COLOR=#ff0000]nvlddmkm+0x4ca9bf[/COLOR]
ffffd000`ea0ab6d0 fffff800`e08d01e0 [COLOR=#ff0000]nvlddmkm+0x1a21c0[/COLOR]
ffffd000`ea0ab7e0 fffff800`e08cf3fb nt!KiExecuteAllDpcs+0x1b0
ffffd000`ea0ab930 fffff800`e09cdaea nt!KiRetireDpcList+0xdb
ffffd000`ea0abbe0 00000000`00000000 nt!KiIdleLoop+0x5a

1. Ensure you have the latest video card drivers. If you are already on the latest video card drivers, uninstall and install a version or a few versions behind the latest to ensure it's not a latest driver only issue. If you have already experimented with the latest video card driver and many previous versions, please give the beta driver for your card a try.

2. Navigate to services.msc and disable the nVidia Streaming Service, and then restart the computer.

3. AODDriver2.sys is listed and loaded in your modules list which is AMD Overdrive; also in EasyTune6 for Gigabyte motherboard. Known BSOD issues in Win7 & 8.

Please uninstall either software ASAP! If you cannot find either software to uninstall, or it's not installed, please navigate to the following filepath:

C:\Program Files\ATI Technologies\ATI.ACE\Fuel\amd64\AODDriver2.sys and rename AODDriver2.sys to AODDriver.2old and then Restart.

Regards,

Patrick
 
Alright, I will check these things. Thanks a lot Patrick! I will keep you updated. So far I have done steps 2 and 3. The software (GeForce Experience) for my video card driver isn't very helpful, so later I will manually change the driver if I continue to have issues. I think step 3 is the issue though; I originally had a gigabyte mobo, and swapped it for my current one, so that would explain where that came from.
 
I'm going crazy. Worked for a couple days.... now today I had 3 blue screens AGAIN. I'm getting so frustrated with this. First one; system service exception, 2nd one system thread exception no handled, 3rd one a clock watchdog timeout again. -_-
 
Uploading now. Computer has blue screened several more times since my post yesterday, I hope it will stay on long enough to upload the file to onedrive.
 
Thanks, sorry for the late reply. I have been sick.

SYSTEM_THREAD_EXCEPTION_NOT_HANDLED_M (1000007e)

This indicates that a system thread generated an exception which the error handler did not catch.

Code: 
BugCheck 7E, {[COLOR=#4b0082]ffffffffc0000005[/COLOR], fffff800a3ab0c02, [COLOR=#ff0000]ffffd001e612ed98[/COLOR], ffffd001e612e5a0}

Access violation occurred.

Code: 
5: kd> .exr 0xffffd001e612ed98
ExceptionAddress: fffff800a3ab0c02 ([COLOR=#ff0000]nt!KxWaitForLockOwnerShip+0x0000000000000012[/COLOR])
   ExceptionCode: [COLOR=#4b0082]c0000005 (Access violation)[/COLOR]

The violation occurred in nt!KxWaitForLockOwnerShip+0x0000000000000012.

Verifier was enabled however it's failing to flag anything aside from FileInfo which a component of Windows.

IMO, at this point, it's a hardware problem. Considering we've seen problems with fltmgr earlier, and now FileInfo, possibly hard drive.

Chkdsk (there are various ways to run Chkdsk):

Method 1:

Start > Search bar > Type cmd (right click run as admin to execute Elevated CMD)

Elevated CMD should now be opened, type the following:

chkdsk x: /r

x implies your drive letter, so if your hard drive in question is letter c, it would be:

chkdsk c: /r

Restart system and let chkdsk run.

Method 2:


Open the "Computer" window
Right-click on the drive in question
Select the "Tools" tab
In the Error-checking area, click <Check Now>.

If you'd like to get a log file that contains the chkdsk results, do the following:

Press Windows Key + R and type powershell.exe in the run box

Paste the following command and press enter afterwards:

get-winevent -FilterHashTable @{logname="Application"; id="1001"}| ?{$_.providername –match "wininit"} | fl timecreated, message | out-file Desktop\CHKDSKResults.txt

This will output a .txt file on your Desktop containing the results of the chkdsk.

If chkdsk turns out okay, run Seatools -

SeaTools | Seagate

You can run it via Windows or DOS. Do note that the only difference is simply the environment you're running it in. In Windows, if you are having what you believe to be driver related issues that may cause conflicts or a false positive, it may be a wise decision to choose the most minimal testing environment (DOS). I always recommend running Seatools in DOS if absolutely possible. 234234234

-- Run all tests EXCEPT: Fix All and anything Advanced.


Also, do you happen to have an SSD?

Regards,

Patrick
 

Has Sysnative Forums helped you? Please consider donating to help us support the site!

Back
Top