Random ntoskrnl.exe BSODs if I am not currently at the computer

Fadakar · 09 Sep 2012

So over the past 3 days my computer has blue screened about 5 times, yet I'm never there to witness it, it always crashes if I leave it alone for 10 minutes to go get food or finish up something around the house. Last time it crashed I decided I'd stop using my computer and watch it to see what may have caused it, and what I noticed was that all of my PC's services started crashing one by one until the BSOD, sometimes the audio service will crash will I'm currently using the PC.

I used WhoCrashed which says the error is CRITICAL OBJECT TERMINATION, bugcheck 0xF4 (0x3, 0xFFFFFA800B4E0B30, 0xFFFFFA800B4E0E10, 0xFFFFF80002F77720)

It's not hardware related, just drivers. I recently got a new HDD so I formatted and did everything exactly how I used to, I honestly have no idea which driver could be at fault.

My diagnostic files are located here.

If you guys need any more information I'll be here. :P

EDIT: I forgot to add, I don't know if this is related, but if I attempt launching services.msc, my entire computer hangs until it crashes 10 minutes later.

Arc · 09 Sep 2012

Welcome aboard!

Three of your dumps show this:

Code:

  .....
  *******************************************************************************
  *                                                                             *
  *                        Bugcheck Analysis                                    *
  *                                                                             *
  *******************************************************************************
   
  Use !analyze -v to get detailed debugging information.
   
  BugCheck F4, {3, fffffa800b4e49e0, fffffa800b4e4cc0, fffff80002f75720}
   
  Probably caused by : csrss.exe
   
  Followup: MachineOwner
  ---------

We may start with SFC /SCANNOW Command - System File Checker here.

But one dump shows this.

Code:

  
......
  *******************************************************************************
  *                                                                             *
  *                        Bugcheck Analysis                                    *
  *                                                                             *
  *******************************************************************************
   
  Use !analyze -v to get detailed debugging information.
   
  BugCheck C000021A, {fffff8a00fdcb320, ffffffffc0000006, 77804e8f, d2da50}
   
  Probably caused by : ntkrnlmp.exe ( nt!ExpSystemErrorHandler2+5e1 )
   
  Followup: MachineOwner
  ---------
   
  3: kd> !analyze -v
  *******************************************************************************
  *                                                                             *
  *                        Bugcheck Analysis                                    *
  *                                                                             *
  *******************************************************************************
   
  WINLOGON_FATAL_ERROR (c000021a)
  The Winlogon process terminated unexpectedly.
  Arguments:
  Arg1: fffff8a00fdcb320, String that identifies the problem.
  Arg2: ffffffffc0000006, Error Code.
  Arg3: 0000000077804e8f
  Arg4: 0000000000d2da50
   
  Debugging Details:
  ------------------
   
   
  ERROR_CODE: (NTSTATUS) 0xc000021a - {Fatal System Error}  The %hs system process terminated unexpectedly with a status of 0x%08x (0x%08x 0x%08x).  The system has been shut down.
   
  EXCEPTION_CODE: (NTSTATUS) 0xc000021a - {Fatal System Error}  The %hs system process terminated unexpectedly with a status of 0x%08x (0x%08x 0x%08x).  The system has been shut down.
   
  EXCEPTION_PARAMETER1:  fffff8a00fdcb320
   
  EXCEPTION_PARAMETER2:  ffffffffc0000006
   
  EXCEPTION_PARAMETER3:  0000000077804e8f
   
  EXCEPTION_PARAMETER4: d2da50
   
  ADDITIONAL_DEBUG_TEXT:  Windows SubSystem
   
  BUGCHECK_STR:  0xc000021a_csrss.exe_c0000006
   
  CUSTOMER_CRASH_COUNT:  1
   
  DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT
   
  PROCESS_NAME:  csrss.exe
   
  CURRENT_IRQL:  0
   
  LAST_CONTROL_TRANSFER:  from fffff8000312ad6e to fffff80002cce040

Usual causes of BugCheck C000021A: User-mode device driver, system service, or third-party application, Mismatched system files.

First let us see the user mode device drivers.
Audio:
AMD High Definition Audio Device : needs to be updated
Bluetooth Audio Device (Manufacturer: Atheros Communications) needs to be updated
Display: ATI Radeon HD 5800 Series : seems to be up to date
Network:
Intel(R) 82579V Gigabit Network Connection : needs to be updated
Bluetooth Device (Personal Area Network) Adapter Type Ethernet 802.3 : must be updated.

Within your system services, dont allow the Bluetooth and the Catalyst Control Center to run.

Among the third program, I am not seeing anything that bad other than Catalyst Control Center and Asus AI Suite II. Better you remove these.

Another thing: Enabling Driver Verifier sometimes are very helpful. You may take a chance, too!
Driver Verifier - Enable and Disable

Post back with results.