BSOD while Patching ArcheAge, caused by driver ntoskrl.exe

Time to enable Driver Verifier.

Code:

*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

PAGE_FAULT_IN_NONPAGED_AREA (50)
Invalid system memory was referenced.  This cannot be protected by try-except,
it must be protected by a Probe.  Typically the address is just plain bad or it
is pointing at freed memory.
Arguments:
Arg1: fffff9010c90a090, memory referenced.
Arg2: 0000000000000000, value 0 = read operation, 1 = write operation.
Arg3: fffff9600014717e, If non-zero, the instruction address which referenced the bad memory
    address.
Arg4: 0000000000000005, (reserved)

Debugging Details:
------------------


Could not read faulting driver name

Diagnostic Test

 DRIVER VERIFIER

Driver Verifier will stress your drivers and cause BSODs if any fail. Follow this tutorial to enable/disable it. Driver Verifier - Enable and Disable

Enable Driver Verifier but only enable these options:

• Standard settings and IRP logging step 3.
• Don't enable Force Pending I/O Requests

   Warning

Make a System Restore point before enabling Driver Verifier.

   Note

Your system will act very sluggishly while DV is enabled, this is normal as your drivers will be being subjected to heavy testing in order to make them crash.

Post any resulting dump files.

Probably best to, the drivers will be going under intense scrutiny so the PC will be extremely sluggish anyway.

Unfortunately the only dump file in those logs is the same one as from yesterday. Can you run again with Driver Verifier enabled and post up any subsequent logs.

Sounds good. Hang in there, we'll find the culprit.

OK there are a few different STOPS registering here, 0x50 and 0x1A are pointing towards hardware. A STOP 0xA has revealed a driver though, your Intel USB 3.0 eXtensible Host Controller.

   Note

You can now disable Driver Veirfier.

Code:

*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck A, {210, 2, 0, fffff80002c5fd4e}

*** WARNING: Unable to verify timestamp for iusb3xhc.sys
*** ERROR: Module load completed but symbols could not be loaded for iusb3xhc.sys
Probably caused by : iusb3xhc.sys ( iusb3xhc+5dcfe )

Followup: MachineOwner
---------

0: kd> lmvm iusb3xhc
start             end                 module name
fffff880`030f5000 fffff880`031ba000   iusb3xhc T (no symbols)           
    Loaded symbol image file: iusb3xhc.sys
    Image path: \SystemRoot\system32\DRIVERS\iusb3xhc.sys
    Image name: iusb3xhc.sys
    Timestamp:        Fri Feb 22 12:33:45 2013 (512765A9)
    CheckSum:         000C185A
    ImageSize:        000C5000
    Translations:     0000.04b0 0000.04e4 0409.04b0 0409.04e4

You can see the highlighted driver date in the code above, and it looks like it could do with updating. I've scanned the ASUS download page for your motherboard and the strange thing is all of the drivers offered pre-date the one you have installed. Do you know where you installed that driver from?

Startup Programs

 REMOVE STARTUP PROGRAMS

Can you remove the following programs from your Startup.

Code:

SpybotSD TeaTimer    C:\Program Files (x86)\Spybot - Search & Destroy\TeaTimer.exe                                                  Skype                "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized                  
  CCleaner Monitoring  "C:\Program Files\CCleaner\CCleaner64.exe" /MONITOR                                         Momiji\Hikari                 
  EADM                 "C:\Program Files (x86)\Origin\Origin.exe" -AutoStart                                       Momiji\Hikari                 
  ShadowPlay           C:\Windows\system32\rundll32.exe C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart  Public                        

Do you use nVidia Streaming at all? If so, disable it.

Code:

FAULTING_IP: 
ndis!memcpy+204
fffff880`0188bf64 488b040a        mov     rax,qword ptr [rdx+rcx]

CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  VERIFIER_ENABLED_VISTA_MINIDUMP

BUGCHECK_STR:  0xD1

PROCESS_NAME:  NvStreamNetwor

System File Checker

 SFC /SCANNOW

Open an elevated command prompt, copy and paste in sfc /scannow and hit enter.