BSODs on new build at random and while playing Skyrim

[evanps]

I just finished my new build a few days ago and it was running great until yesterday with virtu mvp. Around the time the BSODs started I had installed itunes as well as some windows updates for the integrated intel hd graphics. Doing a system restore seemed to resolve the issue as skyrim ran ok without BSOD following the restore. Since everything seemed to be fine I ran the updates again and got another BSOD. I've ran memcheck and the windows memory check with no error, ran scannow and checkdisk without incident. I've tried several methods prior to the restore and am at a loss at this point. Anyway here's the whocrashed report and I'll attach the associated .dmp file. any help would be much appreciated, I realize I could return to the restore point but I want to get to the bottom of the issue.

windows version: Windows 7 Service Pack 1, 6.1, build: 7601
windows dir: C:\Windows
CPU: GenuineIntel Intel(R) Core(TM) i5-2500K CPU @ 3.30GHz Intel586, level: 6
4 logical processors, active mask: 15
RAM: 8469958656 total
VM: 2147352576, free: 1950453760

--------------------------------------------------------------------------------
Crash Dump Analysis
--------------------------------------------------------------------------------
Crash dump directory: C:\Windows\Minidump
Crash dumps are enabled on your computer.

On Thu 5/31/2012 9:58:15 PM GMT your computer crashed
crash dump file: C:\Windows\Minidump\053112-23774-01.dmp
This was probably caused by the following module: ntoskrnl.exe (nt+0x7F1C0)
Bugcheck code: 0x50 (0xFFFFDA800C35BEE8, 0x0, 0xFFFFF80002FCB15C, 0x7)
Error: PAGE_FAULT_IN_NONPAGED_AREA
file path: C:\Windows\system32\ntoskrnl.exe
product: Microsoft® Windows® Operating System
company: Microsoft Corporation
description: NT Kernel & System
Bug check description: This indicates that invalid system memory has been referenced.
This appears to be a typical software driver bug and is not likely to be caused by a hardware problem.
The crash took place in the Windows kernel. Possibly this problem is caused by another driver which cannot be identified at this time.

On Thu 5/31/2012 9:58:15 PM GMT your computer crashed
crash dump file: C:\Windows\memory.dmp
This was probably caused by the following module: ntkrnlmp.exe (nt!KeBugCheckEx+0x0)
Bugcheck code: 0x50 (0xFFFFDA800C35BEE8, 0x0, 0xFFFFF80002FCB15C, 0x7)
Error: PAGE_FAULT_IN_NONPAGED_AREA
Bug check description: This indicates that invalid system memory has been referenced.
This appears to be a typical software driver bug and is not likely to be caused by a hardware problem.
The crash took place in the Windows kernel. Possibly this problem is caused by another driver which cannot be identified at this time.

 

[JMH]

We do need the DMP file as it contains the only record of the sequence of events leading up to the crash, what drivers were loaded, and what was responsible.
Please attach the DMP files to your next post not to post one.

If you are overclocking STOP

You may be able to get the DMP files without crashing by booting into safe mode (F8) with networking.

To enable us to assist you with your computer's BSOD symptoms, upload the contents of your "\Windows\Minidump" folder. If empty (or non existent) please look in the following folders. C:\windows (the dmp should be called memory.dmp), and C:\windows\LiveKernelReports\Watchdog.

The procedure:

* Copy the contents of \Windows\Minidump to another (temporary) location somewhere on your machine.
* Zip up the copy.
* Attach the ZIP archive to your post using the "paperclip" (file attachments) button.
*If the files are too large please upload them to a file sharing service like "Rapidshare" and put a link to them in your reply.

To ensure minidumps are enabled:

* Go to Start, in the Search Box type: sysdm.cpl, press Enter.
* Under the Advanced tab, click on the Startup and Recovery Settings... button.
* Ensure that Automatically restart is unchecked.
* Under the Write Debugging Information header select Small memory dump (256 kB) in the dropdown box (the 256kb varies).
* Ensure that the Small Dump Directory is listed as %systemroot%\Minidump.
* OK your way out.
* Reboot if changes have been made.

 

[evanps]

sorry bout that, thought I had it attached. I only had 1 dump file available... looking at it with blue screen viewer it looks likes ntoskrnl.exe may be to blame but I can't seem to find any straightforward answers regarding this file

 

[writhziden]

You can't find anything straight forward because that is an operating system file that often shows up in crashes due to the fact that it is one of the main processes for Windows to run. If that file were the actual cause, Windows would not run at all; it is usually blamed due to hardware problems with system or due to an underlying driver conflict. Blue Screen Viewer often blames OS processes and misses the true cause, which is why we use WinDbg.

Your crash points to memory problems or driver conflicts.

• If you are overclocking any hardware, please stop.
  
  
• Run the boot version of Memtest86+ paying close attention to Parts 2 and 3 of the tutorial. Also, in case Memtest86+ misses anything and comes up with no errors, run the extended version of the Windows Memory Diagnostics Tool for at least five passes. These you may want to run overnight since they take a long time to complete (run them an hour before bed each of the next two nights and check before going to sleep that they are still running).
  
     Warning

  Before you proceed with the following, answer these two questions: Are you still under warranty? Does your warranty allow you to open up the machine to check hardware? If you are unsure of the answers to these questions, contact your system manufacturer. :warn:WARNING: The steps that follow can void your warranty!!!
  
  For Part 3: If You Have Errors: If you swap any memory components, follow these steps for ESD safety:
  1. Shut down and turn off your computer.
  2. Unplug all power supplies to the computer (AC Power then battery for laptops, AC power for desktops)
  3. Hold down the power button for 30 seconds to close the circuit and ensure all power drains from components.
  4. Make sure you are grounded by using proper grounding techniques, i.e. work on an anti-static workbench, anti-static desk, or an anti-static pad. Hold something metallic while touching it to the anti-static surface, or use an anti-static wristband to attach to the anti-static material while working. If you do not have an anti-static workbench, desk, or pad, you can use your computer tower/case by finding a metal hold in it, such as a drive bay.
  Once these steps have been followed, it is safe to remove and replace components within your computer.
  
  
• An underlying driver may be incompatible\conflicting with your system. Run Driver Verifier to find any issues. To run Driver Verifier, do the following:
  
  a. Backup your system and user files
  b. Create a system restore point
  c. If you do not have a Windows 7 DVD, Create a system repair disc
  d. In Windows 7:

  • Click the Start Menu
  • Type verifier in Search programs and files (do not hit enter)
  • Right click verifier and click Run as administrator
  • Put a tick in Create custom settings (for code developers) and click next
  • Put a tick in Select individual settings from a full list and click next
  • Set up the individual settings as in the image and click next
    View attachment 214610
  • Put a tick in Select driver names from a list
  • Put a tick next to all non-Microsoft drivers.
  • Click Finish.
  • Restart your computer.

  
  If Windows cannot start in normal mode with driver verifier running, start in safe mode. If it cannot start in safe mode or normal mode, restore the system restore point using http://www.sevenforums.com/tutorials/700-system-restore.html OPTION TWO.
  
  Thanks to zigzag3143 for contributing to the Verifier steps.
  If you are unable to start Windows with all drivers being verified or if the blue screen crashes fail to create .dmp files, run them in groups of 5 or 10 until you find a group that causes blue screen crashes and stores the blue screen .dmp files.​
  The idea with Verifier is to cause the system to crash, so do the things you normally do that cause crashes. After you have a few crashes, upload the crash reports for us to take a look and try to find patterns.
  
  When you are ready to disable Verifier: Start Menu -> All Programs -> Accessories -> Right click Command Prompt -> Run as administrator -> Type the following command and then Enter:
  verifier /reset​
  -> Restart your computer.

 

[evanps]

As I mentioned I've ran both memory tests as suggested as well as the disk and file checking utilities. I'm attaching the dump files created after using verifier to induce some crashes. Thanks for being patient!!

 

[writhziden]

Which memchecks did you run. For how long? How many passes? More information would be great!

On the lines of more information: Please follow the http://www.sevenforums.com/crashes-debugging/96879-blue-screen-death-bsod-posting-instructions.html to provide us with your full crash reports.

 

[evanps]

Which memchecks did you run. For how long? How many passes? More information would be great!

On the lines of more information: Please follow the http://www.sevenforums.com/crashes-debugging/96879-blue-screen-death-bsod-posting-instructions.html to provide us with your full crash reports.

After my last post I did a system restore because I was getting bsod while browsing and attempting to post to the forum. I'm sure this would affect the win_nt6 and system health reports mentioned in the steps u provided??

 

[writhziden]

Most likely. When you are able to provide that information, let us know.


Crashes still indicate memory/drivers as the likely causes...


There was also a network related crash; it may be related to antivirus software or an old or corrupted network adapter driver. Hard to say without the full crash reports.

Mionet driver/WinpkFilter high performance packet filtering framework was blamed in one crash.

 

[evanps]

Most likely. When you are able to provide that information, let us know.


Crashes still indicate memory/drivers as the likely causes...


There was also a network related crash; it may be related to antivirus software or an old or corrupted network adapter driver. Hard to say without the full crash reports.

I really appreciate your help, I got frustrated and didn't consider the logs I would need for a full diagnosis before I did the system restore. I seem to be stable now and will re-update in a few. I bsods return I will return with the info needed. On a side note I ran windbg myself and of course the system restore removed log files and reg entries that wouldnt allow wndbg to get all the info but it mentioned ndsird.sys as probable issue. Any ideas on this driver?

 

[writhziden]

See my previous post. I edited it with info about that driver belonging to MioNet.

 

[evanps]

See my previous post. I edited it with info about that driver belonging to MioNet.

just saw it, that's related to a remote connection driver I had installed to fix a flagged device in my device manager. It's related to intel management engine. This time around I've simple disabled the device as I don't need the feature and will reinstall other updates and drivers. I have a strong suspicion this is the issue as the bsods started around the time I installed the IME driver.

 

[writhziden]

Could very well be. Verifier enabled crashes help quite a bit with narrowing down driver related crashes.

Also I am glad to help, and the system restore is a good troubleshooting step as is disabling that driver. Let us know in a few days whether it resolved the problem or not.

 

[evanps]

Could very well be. Verifier enabled crashes help quite a bit with narrowing down driver related crashes.

Also I am glad to help, and the system restore is a good troubleshooting step as is disabling that driver. Let us know in a few days whether it resolved the problem or not.

Will for sure let you know. lol this is annoying but the diagnosing/repairing is almost enjoyable, its the puzzle lover in me

 

[writhziden]

I'm also a puzzle lover. That is why I am a blue screen analyst.

 

[evanps]

hey writh, back again. Ran most of the day yesterday without any bsod while gaming or otherwise. Noticed today that my system had restarted because of bsod while setting idle and then a few hrs later after waking it from sleep mode. I'll attach everything as per the instructions. Everything seems a heck of a lot more stable now but I'd like to completely resolve these. Thank you!

 

[writhziden]

Problem Devices:

PCI Simple Communications Controller	PCI\VEN_8086&DEV_1E3A&SUBSYS_84CA1043&REV_04\3&11583659&0&B0	This device is disabled.

Is the above intentional? If so, please explain. Sometimes disabling devices can cause problems (especially if it was unintentional) and sometimes it can resolve problems, so if you did so to resolve a problem, it is understandable. It would help to know what that problem was, though. -Thanks


Inconclusive, but possibly hardware related. Run some hardware checks.

• If you are overclocking any hardware, please stop.
  
  
• Monitor temperatures during the following tests.
  
  Use the following programs to monitor the temperatures.​
  • Real Temp is a good CPU temperature monitor.
  • Speccy - System Information - Free Download will monitor all hardware temperatures.
  • HWiNFO, HWiNFO32 & HWiNFO64 - Hardware Information and Analysis Tools can be inaccurate for CPU temperatures, but is a good program for GPU temperature monitoring.
  • Use FurMark: VGA Stress Test, Graphics Card and GPU Stability Test, Burn-in Test, OpenGL Benchmark and GPU Temperature | oZone3D.Net to test the graphics card GPU. Let it run until the GPU temperatures even out or until the GPU temperatures reach a dangerous level (you can find the max temperature for your card on either the nVidia or AMD sites; if you are not sure, ask us). The goal is to get a steady temperature, find out if the GPU is overheating, or to see if there are any artifacts present in the test itself: look for strange pixelated patterns on the screen or colors that do not look like they belong. Then use the |MG| Video Memory Stress Test 1.7.116 Download to test your graphics card memory. Let the memory test run for at least seven passes; the more the better.
    
    
  • Run http://www.sevenforums.com/tutorials/100352-hardware-stress-test-prime95.html to determine any hardware problems. Run all three tests for a few hours each. If you get errors, stop the test and post back here.
    
    
  • Follow the steps for doing CPU stress test using IntelBurnTest

 

[evanps]

As for the disabled pci controller, that's the one related to Intel's Management Engine that I had mentioned earlier on. My system has been way more stable with it disabled and I don't really need it so I'm gonna leave it off. I'll run some of the programs you mentioned, I actually have Furmark and 3DMark11 and prob the Prime95 download somewhere. Thanks again! I know I still had a couple BSODs but I still feel like things are much better with my system.

 

[writhziden]

Ah, okay. I do recall that now. Looks like you have all the tools. Let us know how the tests went once you finish.

It may also help if you provide your temperatures during idle and then during the stress tests when you report back.