Seemingly random BSODs for the last few weeks/months

Wightpants · 23 Dec 2015

Hello,

I've been getting an increasing number of BSODs recently. I haven't been able to spot any pattern in what triggers them, sometimes it can happen when I am afk with nothing of note running, sometimes when using something more demanding such as games. The error messages I get do not seem to be consistent. Sometimes it points to a driver or file such as ntfs.sys, or other. Sometimes a 'crucial thread' has stopped or it's just an unknown error.

I have run chkdsk and memory tests without finding a problem, but it still persists. I'd much appreciate some help in finding out what is behind it all. I've considered upgrading to Win 10 to see if that solves it, but I don't want to upgrade a broken system just to encounter more problems.

Thanks in advance,
Wightpants.

**axe0** · 24 Dec 2015

Remove ASUS software, it is known for causing bluescreens.

Warning

Programs that claim to update your drivers install either the wrong or corrupted drivers.
If you have installed any driver with DriverFinder and SlimDrivers, please remove them as it may cause trouble.

If you are using a program like Ccleaner please stop using it while troubleshooting.
This because programs like Ccleaner remove dump files that are needed to troubleshoot.
Or configure Ccleaner to not remove dump files:

Note

IT IS HIGHLY RECOMMENDED TO TEST EVERY HARD DRIVE!

Diagnostics Test

HDD TEST

Run SeaTools to check the integrity of your HDD. SeaTools for DOS and Windows - How to Use - Windows 7 Help Forums

Note

Do not run SeaTools on an SSD as the results will be invalid.

Run chkdsk
Disk Check - Windows 7 Help Forums

Run HDTune to

scan for errors, no quick scan but full scan
check the health,
benchmark.

It may take some time, but please take the time you need to perform it properly.
Let me know what the results are

of the error scan,
make a screenshot of the health of every hard drive and post the screenshots,
post screenshots with the benchmark of the
- transfer rate,
- access time,
- burst rate,
- cpu usage.

Input/Output errors, meaning the data can't be read from the hard drive(s)

Code:

CRITICAL_OBJECT_TERMINATION (f4)
A process or thread crucial to system operation has unexpectedly exited or been
terminated.
Several processes and threads are necessary for the operation of the
system; when they are terminated (for any reason), the system can no
longer function.
Arguments:
Arg1: 0000000000000003, Process
Arg2: fffffa8008071b10, Terminating object
Arg3: fffffa8008071df0, Process image file name
Arg4: fffff80002fc86d0, Explanatory message (ascii)

Debugging Details:
------------------

----- ETW minidump data unavailable-----

PROCESS_OBJECT: fffffa8008071b10

IMAGE_NAME:  csrss.exe

DEBUG_FLR_IMAGE_TIMESTAMP:  0

MODULE_NAME: csrss

FAULTING_MODULE: 0000000000000000 

PROCESS_NAME:  csrss.exe

EXCEPTION_CODE: (NTSTATUS) 0xc0000006 - The instruction at 0x%p referenced memory at 0x%p. The required data was not placed into memory because of an I/O error status of 0x%x.

BUGCHECK_STR:  0xF4_IOERR

CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  WIN7_DRIVER_FAULT

CURRENT_IRQL:  0

ANALYSIS_VERSION: 6.3.9600.17336 (debuggers(dbg).150226-1500) amd64fre

STACK_TEXT:  
fffff880`0813e0e8 fffff800`03057082 : 00000000`000000f4 00000000`00000003 fffffa80`08071b10 fffffa80`08071df0 : nt!KeBugCheckEx
fffff880`0813e0f0 fffff800`02f7cd7b : ffffffff`ffffffff fffffa80`07aecb50 fffffa80`08071b10 fffffa80`08071b10 : nt!PspCatchCriticalBreak+0x92
fffff880`0813e130 fffff800`02f79904 : ffffffff`ffffffff 00000000`00000001 fffffa80`08071b10 00000000`00000008 : nt! ?? ::NNGAKEGL::`string'+0x29c66
fffff880`0813e180 fffff800`02cbfed3 : fffffa80`08071b10 fffff800`c0000006 fffffa80`07aecb50 00000000`02850f40 : nt!NtTerminateProcess+0xf4
fffff880`0813e200 fffff800`02cbc490 : fffff800`02d41bf9 fffff880`0813eb78 fffff880`0813e8d0 fffff880`0813ec20 : nt!KiSystemServiceCopyEnd+0x13
fffff880`0813e398 fffff800`02d41bf9 : fffff880`0813eb78 fffff880`0813e8d0 fffff880`0813ec20 000007fe`fd68a088 : nt!KiServiceLinkage
fffff880`0813e3a0 fffff800`02cc02c2 : fffff880`0813eb78 00000000`02890000 fffff880`0813ec20 000007fe`fd68eec8 : nt! ?? ::FNODOBFM::`string'+0x48154
fffff880`0813ea40 fffff800`02cbee3a : 00000000`00000000 000007fe`fd67d8f4 00000000`77a74201 00000000`02890000 : nt!KiExceptionDispatch+0xc2
fffff880`0813ec20 00000000`779689b5 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiPageFault+0x23a
00000000`02851500 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x779689b5


STACK_COMMAND:  kb

FOLLOWUP_NAME:  MachineOwner

IMAGE_VERSION:  

FAILURE_BUCKET_ID:  X64_0xF4_IOERR_IMAGE_csrss.exe

BUCKET_ID:  X64_0xF4_IOERR_IMAGE_csrss.exe

ANALYSIS_SOURCE:  KM

FAILURE_ID_HASH_STRING:  km:x64_0xf4_ioerr_image_csrss.exe

FAILURE_ID_HASH:  {183378f4-a174-8cab-8ad7-e5d860a58439}

Followup: MachineOwner

NTFS corruption
NTFS is a File System driver.
Driver Reference Table - Ntfs.sys

Code:

CHKIMG_EXTENSION: !chkimg -lo 50 -d !Ntfs
    fffff8800133a000-fffff8800133a02a  43 bytes - Ntfs! ?? ::NNGAKEGL::`string'+61c8
	[ 5d c3 90 90 53 55 41 55:49 00 59 00 48 00 64 00 ]
    fffff8800133a02c-fffff8800133a036  11 bytes - Ntfs! ?? ::NNGAKEGL::`string'+61f9 (+0x2c)
	[ e8 af c2 f1 ff 45 33 ed:56 00 58 00 67 00 68 00 ]
    fffff8800133a038 - Ntfs! ?? ::NNGAKEGL::`string'+6205 (+0x0c)
	[ 01:68 ]
    fffff8800133a03a-fffff8800133a050  23 bytes - Ntfs! ?? ::NNGAKEGL::`string'+6207 (+0x02)
	[ 00 eb 00 48 83 c4 50 41:30 00 6e 00 6c 00 51 00 ]
    fffff8800133a052-fffff8800133a064  19 bytes - Ntfs! ?? ::NNGAKEGL::`string'+622b (+0x18)
	[ 48 83 c4 50 5d c3 55 48:6a 00 4a 00 4f 00 31 00 ]
    fffff8800133a066-fffff8800133a06a  5 bytes - Ntfs! ?? ::NNGAKEGL::`string'+624f (+0x14)
	[ 00 48 8b 8d 80:43 00 38 00 4d ]
    fffff8800133a06c - Ntfs! ?? ::NNGAKEGL::`string'+6255 (+0x06)
	[ 00:41 ]
    fffff8800133a06e-fffff8800133a088  27 bytes - Ntfs! ?? ::NNGAKEGL::`string'+6257 (+0x02)
	[ e8 cd 54 fc ff eb 00 48:77 00 46 00 35 00 67 00 ]
    fffff8800133a08a-fffff8800133a092  9 bytes - Ntfs! ?? ::NNGAKEGL::`string'+627f (+0x1c)
	[ 00 48 8b d1 48 8b 8d 80:71 00 75 00 5a 00 30 00 ]
    fffff8800133a094-fffff8800133a09a  7 bytes - Ntfs! ?? ::NNGAKEGL::`string'+6289 (+0x0a)
	[ 00 e8 96 61 f2 ff eb:73 00 4f 00 6f 00 6f ]
    fffff8800133a09c-fffff8800133a0b0  21 bytes - Ntfs! ?? ::NNGAKEGL::`string'+6291 (+0x08)
	[ 48 83 c4 50 5d c3 90 90:36 00 78 00 31 00 65 00 ]
    fffff8800133a0b2-fffff8800133a0b6  5 bytes - Ntfs! ?? ::NNGAKEGL::`string'+62af (+0x16)
	[ 00 48 8b 8d 80:51 00 45 00 73 ]
    fffff8800133a0b8 - Ntfs! ?? ::NNGAKEGL::`string'+62b5 (+0x06)
	[ 00:36 ]
    fffff8800133a0ba-fffff8800133a0d4  27 bytes - Ntfs! ?? ::NNGAKEGL::`string'+62b7 (+0x02)
	[ e8 81 54 fc ff eb 00 48:42 00 2b 00 71 00 74 00 ]
    fffff8800133a0d6-fffff8800133a0dc  7 bytes - Ntfs! ?? ::NNGAKEGL::`string'+62df (+0x1c)
	[ 00 e8 64 66 f3 ff eb:43 00 51 00 39 00 72 ]
    fffff8800133a0de-fffff8800133a0f0  19 bytes - Ntfs! ?? ::NNGAKEGL::`string'+62e7 (+0x08)
	[ 48 83 c4 50 5d c3 55 48:63 00 52 00 5a 00 35 00 ]
    fffff8800133a0f2-fffff8800133a0f8  7 bytes - Ntfs! ?? ::NNGAKEGL::`string'+62ff (+0x14)
	[ 00 e8 48 66 f3 ff eb:68 00 76 00 4a 00 68 ]
    fffff8800133a0fa-fffff8800133a10e  21 bytes - Ntfs! ?? ::NNGAKEGL::`string'+6307 (+0x08)
	[ 48 83 c4 50 5d c3 55 56:30 00 6e 00 6c 00 34 00 ]
    fffff8800133a110-fffff8800133a114  5 bytes - Ntfs! ?? ::NNGAKEGL::`string'+6321 (+0x16)
	[ 00 48 8b bd 80:46 00 45 00 6c ]
    fffff8800133a116 - Ntfs! ?? ::NNGAKEGL::`string'+6327 (+0x06)
	[ 00:33 ]
    fffff8800133a118-fffff8800133a132  27 bytes - Ntfs! ?? ::NNGAKEGL::`string'+6329 (+0x02)
	[ 48 8b cf e8 20 54 fc ff:6b 00 41 00 69 00 46 00 ]
    fffff8800133a134-fffff8800133a13c  9 bytes - Ntfs! ?? ::NNGAKEGL::`string'+6345 (+0x1c)
	[ 48 8b cf e8 24 88 f9 ff:75 00 48 00 6a 00 65 00 ]
    fffff8800133a13e-fffff8800133a156  25 bytes - Ntfs! ?? ::NNGAKEGL::`string'+634f (+0x0a)
	[ 48 83 c4 50 5f 5e 5d c3:67 00 38 00 54 00 43 00 ]
    fffff8800133a158-fffff8800133a166  15 bytes - Ntfs! ?? ::NNGAKEGL::`string'+6371 (+0x1a)
	[ 00 83 78 10 00 7d 12 80:61 00 6d 00 6f 00 35 00 ]
    fffff8800133a168 - Ntfs! ?? ::NNGAKEGL::`string'+6381 (+0x10)
	[ 80:6c ]
    fffff8800133a16a-fffff8800133a192  41 bytes - Ntfs! ?? ::NNGAKEGL::`string'+6383 (+0x02)
	[ 00 44 09 78 08 eb 00 48:6a 00 49 00 50 00 33 00 ]
    fffff8800133a194 - Ntfs! ?? ::NNGAKEGL::`string'+63b9 (+0x2a)
	[ 00:59 ]
    fffff8800133a196-fffff8800133a1a6  17 bytes - Ntfs! ?? ::NNGAKEGL::`string'+63bb (+0x02)
	[ 48 85 c9 74 11 ff 15 ef:42 00 67 00 53 00 46 00 ]
    fffff8800133a1a8 - Ntfs! ?? ::NNGAKEGL::`string'+63cd (+0x12)
	[ 00:4d ]
    fffff8800133a1aa-fffff8800133a1b0  7 bytes - Ntfs! ?? ::NNGAKEGL::`string'+63cf (+0x02)
	[ eb 02 33 f6 48 8b 8d:32 00 56 00 58 00 67 ]
    fffff8800133a1b2 - Ntfs! ?? ::NNGAKEGL::`string'+63d7 (+0x08)
	[ 01:68 ]
    fffff8800133a1b4-fffff8800133a1c6  19 bytes - Ntfs! ?? ::NNGAKEGL::`string'+63d9 (+0x02)
	[ 00 48 85 c9 74 08 33 d2:76 00 4a 00 68 00 30 00 ]
    fffff8800133a1c8-fffff8800133a1da  19 bytes - Ntfs! ?? ::NNGAKEGL::`string'+63ed (+0x14)
	[ 00 48 85 c9 74 0f 33 d2:63 00 59 00 7a 00 2b 00 ]
    fffff8800133a1dc-fffff8800133a1e0  5 bytes - Ntfs! ?? ::NNGAKEGL::`string'+6401 (+0x14)
	[ 00 48 8b 8d 88:55 00 58 00 69 ]
    fffff8800133a1e2 - Ntfs! ?? ::NNGAKEGL::`string'+6407 (+0x06)
	[ 00:64 ]
    fffff8800133a1e4-fffff8800133a20a  39 bytes - Ntfs! ?? ::NNGAKEGL::`string'+6409 (+0x02)
	[ 48 85 c9 74 08 33 d2 ff:69 00 30 00 55 00 2b 00 ]
    fffff8800133a20c - Ntfs! ?? ::NNGAKEGL::`string'+6431 (+0x28)
	[ 00:6f ]
    fffff8800133a20e-fffff8800133a224  23 bytes - Ntfs! ?? ::NNGAKEGL::`string'+6433 (+0x02)
	[ 48 8b cb e8 3a 17 fe ff:78 00 74 00 4f 00 37 00 ]
    fffff8800133a226-fffff8800133a22c  7 bytes - Ntfs! ?? ::NNGAKEGL::`string'+644b (+0x18)
	[ 00 4c 8b e6 41 bf 08:4b 00 39 00 39 00 61 ]
    fffff8800133a22e - Ntfs! ?? ::NNGAKEGL::`string'+6453 (+0x08)
	[ 00:2b ]
    fffff8800133a230-fffff8800133a236  7 bytes - Ntfs! ?? ::NNGAKEGL::`string'+6455 (+0x02)
	[ 4a 8b 8c 25 80 01 00:6b 00 46 00 68 00 47 ]
    fffff8800133a238-fffff8800133a248  17 bytes - Ntfs! ?? ::NNGAKEGL::`string'+645d (+0x08)
	[ 48 85 c9 74 0e ff 15 4d:42 00 4b 00 61 00 6e 00 ]
    fffff8800133a24a-fffff8800133a250  7 bytes - Ntfs! ?? ::NNGAKEGL::`string'+646f (+0x12)
	[ 00 4e 8b b4 25 f0 01:46 00 42 00 5a 00 52 ]
    fffff8800133a252-fffff8800133a276  37 bytes - Ntfs! ?? ::NNGAKEGL::`string'+6477 (+0x08)
	[ 00 4d 85 f6 74 21 41 f6:47 00 4d 00 49 00 4c 00 ]
    fffff8800133a278-fffff8800133a288  17 bytes - Ntfs! ?? ::NNGAKEGL::`string'+649d (+0x26)
	[ 00 49 83 c4 08 49 83 ef:6f 00 32 00 69 00 55 00 ]
    fffff8800133a28a-fffff8800133a290  7 bytes - Ntfs! ?? ::NNGAKEGL::`string'+64af (+0x12)
	[ 48 85 c0 0f 84 6f 03:54 00 48 00 4a 00 46 ]
    fffff8800133a292-fffff8800133a298  7 bytes - Ntfs! ?? ::NNGAKEGL::`string'+64b7 (+0x08)
	[ 00 48 8d b8 50 01 00:42 00 53 00 43 00 34 ]
    fffff8800133a29a-fffff8800133a2a3  10 bytes - Ntfs! ?? ::NNGAKEGL::`string'+64bf (+0x08)
	[ 48 89 7d 70 4c 39 7f 28:7a 00 61 00 30 00 32 00 ]
    fffff8800133a2a5-fffff8800133a302  94 bytes - Ntfs! ?? ::NNGAKEGL::`string'+64ca (+0x0b)
	[ 8b 47 28 48 8b 48 70 48:00 63 00 49 00 50 00 5a ]
    fffff8800133a304-fffff8800133a334  49 bytes - Ntfs! ?? ::NNGAKEGL::`string'+6529 (+0x5f)
	[ 74 2a 48 8b 47 38 48 8b:76 00 69 00 68 00 78 00 ]
WARNING: !chkimg output was truncated to 50 lines. Invoke !chkimg without '-lo [num_lines]' to view  entire output.
3807 errors : !Ntfs (fffff8800133a000-fffff8800133afff)

Wightpants · 27 Dec 2015

Ok, thanks for all that!

I have installed a few drivers with SlimDrivers in an attempt to fix the problem, it was already happening before that though. I've tried to restore the drivers to what they were before, but it doesn't appear to restore them.

I have 2x OCZ Vertex2 SSDs which contain the OS, apps and games. I also have 2x WD HDDs (2TB + 3TB) which are used for storing docs, music, video, etc. I'll try troubleshooting those over the next few days and let you know how I get on.

Thanks again,
Wightpants.

Wightpants · 27 Dec 2015

Ok, I've got HD Tune up and running. The first thing I tried to do was run a full test on the system SSD. It immediately came up with 100% errors and I started getting popups about various drivers closing down, then the PC rebooted itself! I have run full tests again on both SSDs but haven't been able to replicate this. The tests complete with 0% errors. I am still suffering BSODs though.

I will try to run tests on the HDDs over the next few days. For now I am posting the health status of each drive and an updated dump zip.

Wightpants · 29 Dec 2015

I ran the error test on the 2tb HDD with 0% errors.

Yesterday I tried booting up into safe mode just to see if that would help. The PC stayed stable all day until I switched it off in the evening to watch tv. I booted back into safe mode later on and within a few minutes got a BSOD. I'm not sure if that will help shed any light on the problem, but I have uploaded the latest dump files.

**axe0** · 29 Dec 2015

That it is in safe mode means drivers from hardware or the hardware has been damaged.

Warning

Programs that claim to update your drivers install either the wrong or corrupted drivers.
If you have installed any driver with DriverFinder and SlimDrivers, please remove them as it may cause trouble.

Wightpants · 29 Dec 2015

Hmm, I'm tempted to just do a fresh install of Win 10 and see if it works. Should quickly find out if it's the HW or drivers. But it could be a nightmare to sort out if it turns out to be the HW...

**axe0** · 29 Dec 2015

I wouldn't install Windows 10 yet

Wightpants · 02 Jan 2016

I've done the benchmark tests on all four drives. Lots of BSODs today, so I've included updated dump files.

**axe0** · 02 Jan 2016

Please run Live Linux: Download - Linux Mint or Zorin OS - Download or The leading OS for PC, tablet, phone and cloud | Ubuntu
They're different versions of Live Linux, but don't install it. You can boot from the CD/USB you create with the ISO and use them just to try them out. They run out of ram and we can use them to tell if it is a memory problem. The OS installed is not loaded and not used, so it takes that out of the equation.
You can run it as long as you want.