[Win8.1 x64] Multiple BSODs

Fractal · May 21, 2017

· OS - 8.1
· x64
· What was original installed OS on system? Windows 10
· Age of system (hardware) -1 year
· Age of OS installation - 7 months

· CPU - Intel i7 6700HQ
· Video Card - nVidia GTX 960M 4 GB GDDR5

· System Manufacturer - MSI
· Exact model number - GP62 6QF LEOPARD PRO
Laptop

writhziden · May 22, 2017

Start by removing MSI Dragon Center, Dragon Gaming Center, and MSI Afterburner. Afterburner is a known BSOD cause for Windows 7, 8, 8.1, and 10. Dragon Center and/or Dragon Gaming Center drivers are showing up in your Driver Verifier crashes.

Code:

**************************Wed May 10 04:23:31.327 2017 (UTC - 6:00)************************** 
Loading Dump File [C:\Users\hatea\AppData\Local\Temp\SysnativeBSODApps\FRACTAL\051017-7796-01.dmp] 

Windows 8.1 Kernel Version 9600 MP (8 procs) Free x64 

Built by: [B]9600[/B].18589.amd64fre.winblue_ltsb.170204-0600 

System Uptime:[B]0 days 2:57:20.860[/B] 

*** WARNING: Unable to verify timestamp for winio64.sys 

*** ERROR: Module load completed but symbols could not be loaded for winio64.sys 

Probably caused by :[B]winio64.sys ( winio64+1527 )[/B] 

BugCheck [B]C4, {f6, 5a8, ffffe00071feb080, fffff80193c19527}[/B] 
BugCheck Info: [url=http://www.carrona.org/bsodindx.html#0x000000C4]DRIVER_VERIFIER_DETECTED_VIOLATION (c4)[/url] 

DRIVER_VERIFIER_DETECTED_VIOLATION (c4) 

Arguments: 
Arg1: 00000000000000f6, Referencing user handle as KernelMode. 
Arg2: 00000000000005a8, Handle value being referenced. 
Arg3: ffffe00071feb080, Address of the current process. 
Arg4: fffff80193c19527, Address inside the driver that is performing the incorrect reference. 
BUGCHECK_STR: 0xc4_f6 

PROCESS_NAME: Dragon Center. 

FAILURE_BUCKET_ID: [B]0xc4_f6_winio64!unknown_function[/B] 

CPUID: "Intel(R) Core(TM) i7-6700HQ CPU @ 2.60GHz" 

MaxSpeed: 2600 

CurrentSpeed: [B]2592[/B] 

BIOS Version E16J5IMS.119 

BIOS Release Date 02/15/2017 

Manufacturer Micro-Star International Co., Ltd. 

Product Name GP62 6QF 

Baseboard Product MS-16J5 

¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``

Fractal · May 22, 2017

writhziden said:

Start by removing MSI Dragon Center, Dragon Gaming Center, and MSI Afterburner. Afterburner is a known BSOD cause for Windows 7, 8, 8.1, and 10. Dragon Center and/or Dragon Gaming Center drivers are showing up in your Driver Verifier crashes.

Code:

**************************Wed May 10 04:23:31.327 2017 (UTC - 6:00)************************** 
Loading Dump File [C:\Users\hatea\AppData\Local\Temp\SysnativeBSODApps\FRACTAL\051017-7796-01.dmp] 

Windows 8.1 Kernel Version 9600 MP (8 procs) Free x64 

Built by: [B]9600[/B].18589.amd64fre.winblue_ltsb.170204-0600 

System Uptime:[B]0 days 2:57:20.860[/B] 

*** WARNING: Unable to verify timestamp for winio64.sys 

*** ERROR: Module load completed but symbols could not be loaded for winio64.sys 

Probably caused by :[B]winio64.sys ( winio64+1527 )[/B] 

BugCheck [B]C4, {f6, 5a8, ffffe00071feb080, fffff80193c19527}[/B] 
BugCheck Info: [URL="http://www.carrona.org/bsodindx.html#0x000000C4"]DRIVER_VERIFIER_DETECTED_VIOLATION (c4)[/URL] 

DRIVER_VERIFIER_DETECTED_VIOLATION (c4) 

Arguments: 
Arg1: 00000000000000f6, Referencing user handle as KernelMode. 
Arg2: 00000000000005a8, Handle value being referenced. 
Arg3: ffffe00071feb080, Address of the current process. 
Arg4: fffff80193c19527, Address inside the driver that is performing the incorrect reference. 
BUGCHECK_STR: 0xc4_f6 

PROCESS_NAME: Dragon Center. 

FAILURE_BUCKET_ID: [B]0xc4_f6_winio64!unknown_function[/B] 

CPUID: "Intel(R) Core(TM) i7-6700HQ CPU @ 2.60GHz" 

MaxSpeed: 2600 

CurrentSpeed: [B]2592[/B] 

BIOS Version E16J5IMS.119 

BIOS Release Date 02/15/2017 

Manufacturer Micro-Star International Co., Ltd. 

Product Name GP62 6QF 

Baseboard Product MS-16J5 

¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``

These were detected only when I ran driver Verifier for Violation. What about other BSODs when I have disabled Driver Verifier like SYSTEM_SERVICE_EXCEPTION. Can you comment on the 2 latest BSODs? Thanks! I have attached the image so that you can see the TimeStamp and name of which ones are latest!

writhziden · May 23, 2017

Unfortunately, the latest .dmps had symbols that the debugger was unable to load. I am not sure if the .dmps themselves were corrupted or if the symbols repository on Microsoft's side has some issues (the Microsoft symbols have been hit and miss since the Windows 10 Creators Update for some reason).

The 3B BugCheck may suggest an issue with your display adapter drivers, the adapter itself, or a hardware configuration issue due to using software like MSI Afterburner, MSI Dragon Center, and/or MSI Dragon Gaming Center. I still think it is worth taking the step of removing the MSI software to test.

Fractal · May 30, 2017

View attachment 053017-7203-01.zipNEW BSOD MEMORY CORRUPTION while running Firefox! BSOD appeared but I was nnot able to read the message as the screen was teared and pixelated when BSOD Screen was shown!

writhziden · May 30, 2017

winio64.sys Thu Jun 3 22:08:03 2010 (4C087C23)
Nuvoton Technology Corporation PCIeBridge
Part of MSI Dragon Gaming Center also None at Nuvoton Tech
http://www.carrona.org/drivers/driver.php?id=winio64.sys

NTIOLib_X64.sys Tue Apr 12 01:04:16 2016 (570C9DF0)
MSI Afterburner driver (known BSOD issues with Windows) Also found to be a part of MSI Live Update 5, MSI Super Charger & MSI Smart Utilities.

Recently (Nov 2014) there have been numerous instances of this driver in memory dumps. Analysis reveals that they are scattered throughout the filesystem by the installed MSI command utilities. For now I suggest uninstalling them all. MSI Global - The best gaming gear maker in the world
Driver Reference Table - NTIOLib_X64.sys

RTCore64.sys Fri Sep 30 06:03:17 2016 (57EE5485)
RivaTuner/EVGA Precision/MSI Afterburner (known BSOD issues w/Windows) RivaTuner
Driver Reference Table - RTCore64.sys

Fractal · May 30, 2017

Can you show me how you reach to the conclusion from the memory dump? I am also trying to learn!

writhziden · May 30, 2017

Fractal said:
Can you show me how you reach to the conclusion from the memory dump? I am also trying to learn!

The conclusion was from the drivers that were active at the time of the crash.

Given that ntoskrnl.exe is missing symbols, it's possible that your system is corrupted. Open an elevated command prompt (Run as administrator) and run

Code:

 sfc /scannow

3rd Party Drivers:

The following is for information purposes only. My recommendations were given above. The drivers that follow belong to software or devices that were not developed by Microsoft. Any drivers in red should be updated/replaced/removed. You can find links to the driver information and where to update the drivers in the section after the code box:
pwdrvio.sys Mon Jun 15 19:43:45 2009 (4A36F8D1)
MiniTool Partition Wizard Best Free Partition Manager for Windows | MiniTool Partition Free
http://www.carrona.org/drivers/driver.php?id=pwdrvio.sys

winio64.sys Thu Jun 3 22:08:03 2010 (4C087C23)
Nuvoton Technology Corporation PCIeBridge
Part of MSI Dragoon Gaming Center also None at Nuvoton Tech
http://www.carrona.org/drivers/driver.php?id=winio64.sys

t_mouse.sys Sun Dec 2 23:19:30 2012 (50BC4472)
iBall Advanced Mouse driver http://www.iball.co.in/Download.aspx
http://www.carrona.org/drivers/driver.php?id=t_mouse.sys

psi_mf_amd64.sys Thu Feb 7 02:28:21 2013 (511373B5)
Secunia Personal Software Inspector driver https://secunia.com/vulnerability_scanning/personal/
http://www.carrona.org/drivers/driver.php?id=psi_mf_amd64.sys

intelppm.sys Thu Aug 22 02:46:35 2013 (5215CFEB)
Intel Processor driver http://downloadcenter.intel.com/Default.aspx also at
http://www.carrona.org/drivers/driver.php?id=intelppm.sys

txwifinat64.sys Wed Oct 22 03:24:35 2014 (544777D3)

txwifinat64.sys - this driver hasn't been added to the DRT as of this run. Please search Google/Bing for the driver if additional information is needed.

HWiNFO64A.SYS Tue Mar 31 03:51:32 2015 (551A6E24)
HWiNFO32 Kernel Driver http://www.hwinfo.com/download32.html
http://www.carrona.org/drivers/driver.php?id=HWiNFO64A.SYS

LGJoyXlCore.sys Fri Apr 24 15:20:57 2015 (553AB3B9)
Logitech Gaming Software driver http://support.logitech.com/en_gb/software/lgs
http://www.carrona.org/drivers/driver.php?id=LGJoyXlCore.sys

LGBusEnum.sys Fri Apr 24 15:21:00 2015 (553AB3BC)
Logitech Keyboard http://www.logitech.com/en-us/support-downloads/downloads
http://www.carrona.org/drivers/driver.php?id=LGBusEnum.sys

lgcoretemp.sys Tue Jun 9 10:52:10 2015 (557719BA)
Logitech Gaming Software driver http://support.logitech.com/en_gb/software/lgs
http://www.carrona.org/drivers/driver.php?id=lgcoretemp.sys

iwdbus.sys Thu Nov 5 16:10:07 2015 (563BE1CF)
Intel WIDI Bus Enumerator driver
Related to Intel Widi - Wireless Display http://downloadcenter.intel.com/SearchResult.aspx?lang=eng&keyword="widi"
http://www.carrona.org/drivers/driver.php?id=iwdbus.sys

e2xw8x64.sys Tue Jan 26 16:57:45 2016 (56A807F9)

e2xw8x64.sys - this driver hasn't been added to the DRT as of this run. Please search Google/Bing for the driver if additional information is needed.

NTIOLib_X64.sys Tue Apr 12 01:04:16 2016 (570C9DF0)
MSI Afterburner driver (known BSOD issues with Windows) Also found to be a part of MSI Live Update 5, MSI Super Charger & MSI Smart Utilities.

Recently (Nov 2014) there have been numerous instances of this driver in memory dumps. Analysis reveals that they are scattered throughout the filesystem by the installed MSI command utilities. For now I suggest uninstalling them all. http://event.msi.com/vga/afterburner/download.htm
http://www.carrona.org/drivers/driver.php?id=NTIOLib_X64.sys

tap0901.sys Thu Apr 21 03:10:05 2016 (571898ED)
TAP-Win32 Adapter V9 or
OpenVPN driver or COMODO http://openvpn.net/index.php/open-source/downloads.html or http://forums.comodo.com/index.php?action=dlattach;topic=17220.0;attach=17692 Requires registration
http://www.carrona.org/drivers/driver.php?id=tap0901.sys

SynTP.sys Tue Jun 7 20:49:01 2016 (5757879D)
Synaptic Touch Pad Driver http://www.synaptics.com/en/drivers.php
Thanks MasterChief!!!
http://www.carrona.org/drivers/driver.php?id=SynTP.sys

IntelHaxm.sys Sat Jun 11 19:31:48 2016 (575CBB84)
Intel® Hardware Accelerated Execution Manager (involved in Android app emulation) https://software.intel.com/en-us/android/articles/intel-hardware-accelerated-execution-manager
http://www.carrona.org/drivers/driver.php?id=IntelHaxm.sys

iusb3adp.sys Thu Jun 16 03:49:11 2016 (57627617)
Intel(R) USB 3.0 Host Controller Adaptation Driver http://downloadcenter.intel.com/Default.aspx
http://www.carrona.org/drivers/driver.php?id=iusb3adp.sys

RTCore64.sys Fri Sep 30 06:03:17 2016 (57EE5485)
RivaTuner/EVGA Precision/MSI Afterburner (known BSOD issues w/Win7) http://www.guru3d.com/category/rivatuner/
http://www.carrona.org/drivers/driver.php?id=RTCore64.sys

idmwfp.sys Mon Oct 10 10:14:56 2016 (57FBBE80)
Internet Download Manager http://www.internetdownloadmanager.com/
http://www.carrona.org/drivers/driver.php?id=idmwfp.sys

ibtusb.sys Mon Nov 14 17:32:44 2016 (582A57AC)
Intel(R) Wireless Bluetooth(R) Filter Driver https://downloadcenter.intel.com/default.aspx?iid=gg_support-EN_01+home_downloadctr
http://www.carrona.org/drivers/driver.php?id=ibtusb.sys

TeeDriverW8x64.sys Wed Nov 16 12:50:53 2016 (582CB89D)
Intel Management Engine Interface (MEI) driver OEM or http://downloadcenter.intel.com

Installation instructions - https://www.sysnative.com/forums/wi...00f081f-source-file-not-found.html#post144391
http://www.carrona.org/drivers/driver.php?id=TeeDriverW8x64.sys

VBoxNetAdp6.sys Mon Nov 21 09:44:34 2016 (58332472)
Oracle VirtualBox NDIS 6.0 Host-Only Network Adapter Driver http://www.virtualbox.org/wiki/Downloads
http://www.carrona.org/drivers/driver.php?id=VBoxNetAdp6.sys

VBoxNetLwf.sys Mon Nov 21 09:44:34 2016 (58332472)
Oracle VirtualBox NDIS 6.0 Lightweight Filter Driver http://www.virtualbox.org/wiki/Downloads
http://www.carrona.org/drivers/driver.php?id=VBoxNetLwf.sys

VBoxUSBMon.sys Mon Nov 21 09:44:34 2016 (58332472)
VirtualBox USB driver http://www.virtualbox.org/wiki/Downloads
http://www.carrona.org/drivers/driver.php?id=VBoxUSBMon.sys

VBoxDrv.sys Mon Nov 21 09:45:08 2016 (58332494)
VirtualBox http://www.virtualbox.org/wiki/Downloads
http://www.carrona.org/drivers/driver.php?id=VBoxDrv.sys

IntcDAud.sys Thu Dec 1 03:15:06 2016 (583FF82A)
Intel Graphics Media Accelerator HD Driver http://downloadcenter.intel.com/
http://www.carrona.org/drivers/driver.php?id=IntcDAud.sys

RTKVHD64.sys Wed Jan 25 02:57:06 2017 (58887672)
Realtek High Definition Audio Function Driver http://www.realtek.com.tw/downloads/downloadsView.aspx?Langid=1&PNid=8&PFid=14&Level=3&Conn=2
http://www.carrona.org/drivers/driver.php?id=RTKVHD64.sys

Netwbw04.sys Mon Jan 30 11:59:07 2017 (588F8CFB)

Netwbw04.sys - this driver hasn't been added to the DRT as of this run. Please search Google/Bing for the driver if additional information is needed.

iaStorA.sys Fri Mar 17 08:32:24 2017 (58CBF378)
Intel RST (Rapid Storage Technology) driver http://downloadcenter.intel.com/Default.aspx XP
http://www.carrona.org/drivers/driver.php?id=iaStorA.sys

igdkmd64.sys Fri Apr 21 10:17:08 2017 (58FA3084)
Intel Graphics driver http://downloadcenter.intel.com/Default.aspx
http://www.carrona.org/drivers/driver.php?id=igdkmd64.sys

nvlddmkm.sys Mon May 1 13:58:03 2017 (5907934B)
nVidia Video drivers http://www.nvidia.com/Download/index.aspx
Get from OEM for laptops
http://www.carrona.org/drivers/driver.php?id=nvlddmkm.sys

RfeCoW8X64.sys Wed May 17 12:45:23 2017 (591C9A43)

RfeCoW8X64.sys - this driver hasn't been added to the DRT as of this run. Please search Google/Bing for the driver if additional information is needed.

Analysis:

The following is for information purposes only. The following information contains the relevant information from the blue screen analysis:

Code:

**************************Tue May 30 12:10:23.497 2017 (UTC - 6:00)**************************
Loading Dump File [C:\Users\hatea\AppData\Local\Temp\SysnativeBSODApps\FRACTAL (2)\053017-7203-01.dmp]
 
*** WARNING: Unable to verify timestamp for ntoskrnl.exe
 
*** ERROR: Module load completed but symbols could not be loaded for ntoskrnl.exe
 
Windows 8.1 Kernel Version 9600 MP (8 procs) Free x64
 
System Uptime:[B]3 days 3:53:07.555[/B]
 
Probably caused by :[B]memory_corruption ( nt!MiRevertValidPte+26b )[/B]
 
BugCheck [B]A, {10, 2, 1, fffff801264eacab}[/B]
BugCheck Info: [url=http://www.carrona.org/bsodindx.html#0x0000000A]IRQL_NOT_LESS_OR_EQUAL (a)[/url]
 
Arguments: 
Arg1: 0000000000000010, memory referenced
Arg2: 0000000000000002, IRQL
Arg3: 0000000000000001, bitfield :
	bit 0 : value 0 = read operation, 1 = write operation
	bit 3 : value 0 = not an execute operation, 1 = execute operation (only on chips which support this level of status)
Arg4: fffff801264eacab, address which referenced memory
BUGCHECK_STR:  AV
 
DEFAULT_BUCKET_ID:  WIN8_DRIVER_FAULT
 
PROCESS_NAME:  firefox.exe
 
FAILURE_BUCKET_ID: [B]AV_nt!MiRevertValidPte[/B]
 
CPUID:        "Intel(R) Core(TM) i7-6700HQ CPU @ 2.60GHz"
 
MaxSpeed:     2600
 
CurrentSpeed: [B]2592[/B]
 
  BIOS Version                  E16J5IMS.119
 
  BIOS Release Date             02/15/2017
 
  Manufacturer                  Micro-Star International Co., Ltd.
 
  Product Name                  GP62 6QF
 
  Baseboard Product             MS-16J5
 
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``

Fractal · May 30, 2017

> The conclusion was from the drivers that were active at the time of the crash.

What is the WinDBG command for that?

writhziden · May 30, 2017

lmtsmn

Fractal · May 31, 2017

t_mouse.sys is my MSI Mouse Driver! I have checked it! There is no update too!

Fractal · May 31, 2017

intelppm.sys is related to my Processor. How would I update that? I haven't specifically installed any driver for that! There is no driver for that too on Intel's Website!

writhziden · Jun 1, 2017

Fractal said:
intelppm.sys is related to my Processor. How would I update that? I haven't specifically installed any driver for that! There is no driver for that too on Intel's Website!

Sorry, intelppm shouldn't be in the list. That driver is almost always behind the current Windows build for some reason. It's typically excluded from my analysis, but my analysis defaults were reset due to misplacing/losing my personal settings file earlier this year.

[Win8.1 x64] Multiple BSODs

Fractal

Member

writhziden

Administrator, .NET/UWP Developer

Fractal

Member

writhziden

Administrator, .NET/UWP Developer

Fractal

Member

writhziden

Administrator, .NET/UWP Developer

Fractal

Member

writhziden

Administrator, .NET/UWP Developer

Fractal

Member

writhziden

Administrator, .NET/UWP Developer

Fractal

Member

Fractal

Member

writhziden

Administrator, .NET/UWP Developer