Looking for a BSOD solution for ntoskrnl.exe
- Thread starter ToHunga
- Start date
Hello and welcome to Sysnative,
Unfortunately, no dumps are listed in the attached folder. We need the dumps as they are the only record of events leading up to the BSOD. To stop them being deleted when/if you have more crashes, don't use CCleaner or any temporary file cleaners until troubleshooting is finished as they can delete dump files.
Check in C:\Windows\Minidump for any files. If you find files in that folder, please zip them up and upload them. If not,
To ensure dumps are set up for future dumps, follow these steps.
When you have your next BSOD, Windows will create the relevant dump files. Run the BSOD collection app from the posting instructions once you have had some more BSOD's.
If you have any questions, feel free to ask
Stephen
Unfortunately, no dumps are listed in the attached folder. We need the dumps as they are the only record of events leading up to the BSOD. To stop them being deleted when/if you have more crashes, don't use CCleaner or any temporary file cleaners until troubleshooting is finished as they can delete dump files.
Check in C:\Windows\Minidump for any files. If you find files in that folder, please zip them up and upload them. If not,
To ensure dumps are set up for future dumps, follow these steps.
- Click Start, right-click Computer -> Properties.
- Click Advanced system settings, and then click the Advanced tab.
- Click Settings under the Writing debugging information area, and then make sure Kernel Memory Dump is selected.
When you have your next BSOD, Windows will create the relevant dump files. Run the BSOD collection app from the posting instructions once you have had some more BSOD's.
If you have any questions, feel free to ask
Stephen
Hi again,
Unfortunately, only one dump has been included which makes debugging more difficult. However, I still have an idea from that one dump.
The dump points to ntoskrnl.exe, as you rightly said. This is the OS itself and very unlikely to cause a BSOD. Normally, this would indicate a hardware fault but I decided to dig deeper.
Upon looking at the stack trace for the dump, I managed to work out that it is your Norton 360 Internet Security that caused your one BSOD. Therefore, I recommend you uninstall Norton and install the free Microsoft Security Essentials. This will offer just as good protection, if not better, and is less likely to contribute to a BSOD.
If you're interested, this is part of the stack trace that revealed all:
Stephen
Unfortunately, only one dump has been included which makes debugging more difficult. However, I still have an idea from that one dump.
The dump points to ntoskrnl.exe, as you rightly said. This is the OS itself and very unlikely to cause a BSOD. Normally, this would indicate a hardware fault but I decided to dig deeper.
Upon looking at the stack trace for the dump, I managed to work out that it is your Norton 360 Internet Security that caused your one BSOD. Therefore, I recommend you uninstall Norton and install the free Microsoft Security Essentials. This will offer just as good protection, if not better, and is less likely to contribute to a BSOD.
If you're interested, this is part of the stack trace that revealed all:
Code:
fffff880`071d3020 00000000`00020000
[COLOR=#ff0000]fffff880`071d3028 fffff880`047a7ab8Unable to load image \??\C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys, Win32 error 0n2
*** WARNING: Unable to verify timestamp for EraserUtilRebootDrv.sys
*** ERROR: Module load completed but symbols could not be loaded for EraserUtilRebootDrv.sys
EraserUtilRebootDrv+0x2ab8[/COLOR]
fffff880`071d3030 001a0004`1001001c
fffff880`071d3038 80000000`00000020
fffff880`071d3040 50244c8b`48fffffd
fffff880`071d3048 ffed17c0`e8cc3348
fffff880`071d3050 5b8b4960`245c8d4c
fffff880`071d3058 738b4940`6b8b4938
fffff880`071d3060 00000000`00000000
fffff880`071d3068 00000000`00000000
fffff880`071d3070 00000000`04005171
fffff880`071d3078 fffffa80`08637000
fffff880`071d3080 00000000`00000000
fffff880`071d3088 00000000`00000000
fffff880`071d3090 00000000`00000000
fffff880`071d3098 00000000`00000000
fffff880`071d30a0 00000000`00000000
fffff880`071d30a8 00000000`00000000
fffff880`071d30b0 00000000`00000000
fffff880`071d30b8 00000000`00000000
fffff880`071d30c0 00000000`00000000
fffff880`071d30c8 00000000`00000000
fffff880`071d30d0 00000000`00000000
fffff880`071d30d8 00000000`00000000
fffff880`071d30e0 00000000`00000000
fffff880`071d30e8 00000000`00000000
fffff880`071d30f0 00000000`00000000
fffff880`071d30f8 00000000`00000000
fffff880`071d3100 00000000`00000000
fffff880`071d3108 00000000`00000000
fffff880`071d3110 00000000`00000000
fffff880`071d3118 00000000`00000000
fffff880`071d3120 00000000`00000000
fffff880`071d3128 00000000`00000000
fffff880`071d3130 00000000`00000000
fffff880`071d3138 00000000`00000000
fffff880`071d3140 00000000`00000000
fffff880`071d3148 00000000`00000000
fffff880`071d3150 00000000`00000000
fffff880`071d3158 00000000`00000000
fffff880`071d3160 00000000`00000000
fffff880`071d3168 00000000`00000000
fffff880`071d3170 00000000`00000000
fffff880`071d3178 00000000`00000000
fffff880`071d3180 00000000`00000000
fffff880`071d3188 00000000`00000000
fffff880`071d3190 00000000`00000000
fffff880`071d3198 00000000`00000000
fffff880`071d31a0 00000000`00000000
fffff880`071d31a8 00000000`00000000
fffff880`071d31b0 00000000`00000000
fffff880`071d31b8 00000000`00000000
fffff880`071d31c0 00000000`00000000
fffff880`071d31c8 00000000`00000000
fffff880`071d31d0 00000000`00000000
fffff880`071d31d8 00000000`00000000
fffff880`071d31e0 00000000`00000000
fffff880`071d31e8 00000000`00000000
fffff880`071d31f0 00000000`00000000
fffff880`071d31f8 00000000`00000000
fffff880`071d3200 00000000`00000000
fffff880`071d3208 00000000`00000000
fffff880`071d3210 00000000`00000000
fffff880`071d3218 00000000`00000000
fffff880`071d3220 00000000`00000000
fffff880`071d3228 00000000`00000000
fffff880`071d3230 00000000`00000000
fffff880`071d3238 00000000`00000000
fffff880`071d3240 00000000`00000000
fffff880`071d3248 00000000`00000000
fffff880`071d3250 00000000`00000000
fffff880`071d3258 00000000`00000000
fffff880`071d3260 00000000`00000000
fffff880`071d3268 00000000`00000000
fffff880`071d3270 00000000`00000000
fffff880`071d3278 00000000`00000000
fffff880`071d3280 00000000`00000000
fffff880`071d3288 00000000`00000000
fffff880`071d3290 00000000`00000000
fffff880`071d3298 00000000`00000000
fffff880`071d32a0 00000000`00000000
fffff880`071d32a8 00000000`00000000
fffff880`071d32b0 00000000`00000000
fffff880`071d32b8 00000000`00000000
fffff880`071d32c0 00000000`00000000
fffff880`071d32c8 00000000`00000000
fffff880`071d32d0 00000000`00000000
fffff880`071d32d8 00000000`00000000
fffff880`071d32e0 00000000`00000000
fffff880`071d32e8 00000000`00000000
fffff880`071d32f0 00000000`00000000
fffff880`071d32f8 00000000`00000000
fffff880`071d3300 00000000`00000000
fffff880`071d3308 00000000`00000000
fffff880`071d3310 00000000`00000000
fffff880`071d3318 00000000`00000000
fffff880`071d3320 00000000`00000000
fffff880`071d3328 00000000`00000000
fffff880`071d3330 00000000`00000000
fffff880`071d3338 00000000`00000000
fffff880`071d3340 00000000`00000000
fffff880`071d3348 00000000`00000000
fffff880`071d3350 00000000`00000000
[COLOR=#ff0000]fffff880`071d3358 fffff880`04bb32e0Unable to load image \??\C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_6.0.0.145\Definitions\BASHDefs\20120905.001\BHDrvx64.sys, Win32 error 0n2
*** WARNING: Unable to verify timestamp for BHDrvx64.sys
*** ERROR: Module load completed but symbols could not be loaded for BHDrvx64.sys
BHDrvx64+0x1372e0[/COLOR]
fffff880`071d3360 fffff880`071d33b8
fffff880`071d3368 fffffa80`08670c00
fffff880`071d3370 fffff880`071d3430
fffff880`071d3378 fffff880`071d3380
fffff880`071d3380 00000000`00000000
fffff880`071d3388 fffff880`04aa8e99 BHDrvx64+0x2ce99
fffff880`071d3390 fffff8a0`01523820
fffff880`071d3398 00000000`00000000
fffff880`071d33a0 00000000`000001d8
fffff880`071d33a8 fffff800`030def8f nt!KeWaitForSingleObject+0x19f
fffff880`071d33b0 00000000`00000003
[COLOR=#ff0000]fffff880`071d33b8 fffff880`02ea69f0Unable to load image \??\C:\Windows\system32\Drivers\SYMEVENT64x86.SYS, Win32 error 0n2
*** WARNING: Unable to verify timestamp for SYMEVENT64x86.SYS
*** ERROR: Module load completed but symbols could not be loaded for SYMEVENT64x86.SYS[/COLOR]
SYMEVENT64x86+0x269f0
fffff880`071d33c0 fffff8a0`001f76e0
fffff880`071d33c8 fffffa80`0866f828
fffff880`071d33d0 fffff880`071d3538
fffff880`071d33d8 fffff880`009ea180
fffff880`071d33e0 fffffa80`08670b50
fffff880`071d33e8 00000000`00000000
fffff880`071d33f0 fffff880`071d2810
fffff880`071d33f8 00000000`00000000
fffff880`071d3400 00000000`00000000
fffff880`071d3408 fffff880`071d3620
fffff880`071d3410 fffffa80`0869fc60
fffff880`071d3418 fffff800`030d82c4 nt!KeBugCheckEx+0x104
fffff880`071d3420 fffff8a0`001f76e0
fffff880`071d3428 00000000`00000001
fffff880`071d3430 fffff8a0`002ad4d0
fffff880`071d3438 fffff800`0307ea30 nt! ?? ::FNODOBFM::`string'+0x43804
fffff880`071d3440 fffff800`030ed174 nt!IopCompleteRequest+0xc64
fffff880`071d3448 00000000`00000000
fffff880`071d3450 00000000`00000286
fffff880`071d3458 fffff800`030d7769 nt!KiBugCheckDispatch+0x69
fffff880`071d3460 00000000`0000000a
fffff880`071d3468 00000000`00000000
fffff880`071d3470 00000000`00000002
fffff880`071d3478 00000000`00000000
fffff880`071d3480 fffff800`030ed174 nt!IopCompleteRequest+0xc64
fffff880`071d3488 fffff880`071d3500
fffff880`071d3490 00000000`00000000Stephen
Has Sysnative Forums helped you? Please consider donating to help us support the site!