BSOD (ntoskrnl.exe)

HDYves · 30 May 2011

Hello everybody!

During the past weeks I seem to be getting at least one BSOD per day related to ntoskrnl.exe (Almost all of them while gaming). I tried to debug it myself using windbg and bluescreenview but maybe I was doing something wrong as I can't pinpoint what is causing the system to BSOD.
I have attached the output from the BSOD Dump & System File Collection app as described in one of the tutorial threads.
Additionally, I let memtest run over night but no errors were found.

Thank you all in advance for your help!

Please let me know if you need more information to help me solve this.

Below are my system specs:
OS : Microsoft Windows 7 Ultimate // Version 6.1.7601 Service Pack 1 Build 7601
CPU: i7-2600k @ 4.3 GHz ( 43 x 100)
MB: p8p67 Pro (1606 Bios)
RAM: 8GB (4 x 2GB Kingston)
GPU: GTX 460 1GB

Dave76 · 30 May 2011

Welcome to Seven Forums.

The dump files point to:
STOP 0x0000003B: SYSTEM_SERVICE_EXCEPTION
Usual causes: System service, Device driver, graphics driver, ?memory
The listed cause is memory_corruption.

Run memtest86+, leave all the RAM cards installed and run it for a full 7 passes, this will take several hours, best to run it overnight.
If you get any errors, you can stop the test,

RAM - Test with Memtest86+

Code:

 
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************
SYSTEM_SERVICE_EXCEPTION (3b)
An exception happened while executing a system service routine.
Arguments:
Arg1: 00000000c0000005, Exception code that caused the bugcheck
Arg2: fffff80003407f9c, Address of the instruction which caused the bugcheck
Arg3: fffff8800c191f10, Address of the context record for the exception that caused the bugcheck
Arg4: 0000000000000000, zero.
Debugging Details:
------------------
 
EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced memory at 0x%08lx. The memory could not be %s.
FAULTING_IP: 
nt!ExFreePoolWithTag+20c
fffff800`03407f9c 8c10            mov     word ptr [rax],ss
CONTEXT:  fffff8800c191f10 -- (.cxr 0xfffff8800c191f10)
rax=00000000000002a0 rbx=fffffa800a99b7d0 rcx=0000000000001d10
rdx=fffff880009cf180 rsi=0000000000000002 rdi=0000000000000000
rip=fffff80003407f9c rsp=fffff8800c1928f8 rbp=0000000000000000
 r8=000000000000e880  r9=0000000000000080 r10=fffff8000325c000
r11=00000000000005d0 r12=0000000000000008 r13=fffffa800a99b7e0
r14=0000000000000000 r15=fffff80003463340
iopl=2         nv up di pl zr na pe cy
cs=0010  ss=0018  ds=002b  es=002b  fs=0053  gs=002b             efl=00016143
nt!ExFreePoolWithTag+0x20c:
fffff800`03407f9c 8c10            mov     word ptr [rax],ss ds:002b:00000000`000002a0=????????
Resetting default scope
CUSTOMER_CRASH_COUNT:  1
DEFAULT_BUCKET_ID:  CODE_CORRUPTION
BUGCHECK_STR:  0x3B
PROCESS_NAME:  APB.exe
CURRENT_IRQL:  0
LAST_CONTROL_TRANSFER:  from 0000000000000000 to fffff80003407f9c
STACK_TEXT:  
fffff880`0c1928f8 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!ExFreePoolWithTag+0x20c
 
CHKIMG_EXTENSION: !chkimg -lo 50 -d !nt
    fffff80003407f9b - nt!ExFreePoolWithTag+20b
 [ 8d:9d ]
1 error : !nt (fffff80003407f9b)
MODULE_NAME: memory_corruption
IMAGE_NAME:  memory_corruption
FOLLOWUP_NAME:  memory_corruption
DEBUG_FLR_IMAGE_TIMESTAMP:  0
MEMORY_CORRUPTOR:  ONE_BIT
STACK_COMMAND:  .cxr 0xfffff8800c191f10 ; kb
FAILURE_BUCKET_ID:  X64_MEMORY_CORRUPTION_ONE_BIT
BUCKET_ID:  X64_MEMORY_CORRUPTION_ONE_BIT
Followup: memory_corruption
---------

STOP 0x00000050: PAGE_FAULT_IN_NONPAGED_AREA
Usual causes: Defective hardware (particularly memory - but not just RAM), Faulty system service, Antivirus, Device driver, NTFS corruption, BIOS
This indicates that invalid system memory has been referenced.

Code:

 
Event[2163]:
  Log Name: System
  Source: Microsoft-Windows-WER-SystemErrorReporting
  Date: 2011-05-25T22:41:37.000
  Event ID: 1001
  Task: N/A
  Level: Error
  Opcode: N/A
  Keyword: Classic
  User: N/A
  User Name: N/A
  Computer: YVES
  Description: 
The computer has rebooted from a bugcheck.  The bugcheck was: 0x00000050 (0xfffff6f450096228, 0x0000000000000000, 0xfffff8000327c31b, 0x0000000000000005). A dump was saved in: C:\Windows\MEMORY.DMP. Report Id: 052511-23150-01.