BSOD Seemingly At Random, error KMODE_EXCEPTION_NOT_HANDLED

[k4nc3r]

Well, I have to admit I've been away from PC's for about the last decade and I decided to get back into PC Gaming. It's been pretty daunting, and I'm still getting back into the swing of things (I've been using a Mac for about the last ten years.) The build I've done has seen its share of troubles, the newest being a constant, seemingly random BSOD. Sometimes I can be up and running for about a half hour playing a game or just listening to music, other times it BSOD's right after boot up. I can't seem to make it past an hour or so and there never seems to be a logic behind the crash as I'm not doing anything very intensive. All drivers should be up to date, I had to bring it in for repair because of a dead power supply and the tech there updated all drivers, but the problem could still be in that area based on the crash report. If anyone could lend a hand that'd be great and if I've left anything out just let me know and I'll provide as much info as possible. Thanks!

Here's the report from WhoCrased:

On Fri 4/5/2013 12:09:37 AM GMT your computer crashed
crash dump file: C:\Windows\Minidump\040413-19999-01.dmp
This was probably caused by the following module: ntoskrnl.exe (nt+0x75C40)
Bugcheck code: 0x1E (0xFFFFFFFFC0000005, 0xFFFFF800032A44FE, 0x0, 0xFFFFFFFFFFFFFFFF)
Error: KMODE_EXCEPTION_NOT_HANDLED
file path: C:\Windows\system32\ntoskrnl.exe
product: Microsoft® Windows® Operating System
company: Microsoft Corporation
description: NT Kernel & System
Bug check description: This indicates that a kernel-mode program generated an exception which the error handler did not catch.
This appears to be a typical software driver bug and is not likely to be caused by a hardware problem.
The crash took place in the Windows kernel. Possibly this problem is caused by another driver that cannot be identified at this time.

Here's my Build

PC/Desktop
Custom Build
Windows 7 Home 64 Bit
Inet i5 3570K
Gigabyte Z77X-UD4H
Corsair Vengeance 8GB 1600 DDR3
EVGA GeForce GTX580
WD 1TB SATA 6 GB/s 7200 RPM
Corsair CX750
CoolerMaster HAF X
Razer BlackWidow
Logitech Gaming Mouse
Cable Internet
Antivirus
Norton
Browser
Chrome

 

[Arc]

Your BSOD is caused by Norton Internet Security.

*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck 4E, {99, 215a8a, 6, 100000000000001}

*** WARNING: Unable to verify timestamp for [URL="http://www.carrona.org/drivers/driver.php?id=IDSvia64.sys"]IDSvia64.sys[/URL]
*** ERROR: Module load completed but symbols could not be loaded for [URL="http://www.carrona.org/drivers/driver.php?id=IDSvia64.sys"]IDSvia64.sys[/URL]
Probably caused by : [URL="http://www.carrona.org/drivers/driver.php?id=IDSvia64.sys"]IDSvia64.sys[/URL] ( IDSvia64+3d250 )

Followup: MachineOwner
---------

Description here ..... Driver Reference Table - IDSvia64.sys

Uninstall Norton and all Symentec products using Norton Removal tool. Use Microsoft Security Essentials as your antivirus with windows inbuilt firewall, and free MBAM as the on demand scanner.
Download, install and update those, and then run full system scans with both of them, one by one.

Moreover, AVG exists there, and making the system crash on itself.

fffff880`0374e418  fffff880`049dbe34Unable to load image \SystemRoot\system32\DRIVERS\[URL="http://www.sevenforums.com/AVG%20IDS%20Application%20Activity%20Monitor%20Driver"]avgidsdrivera.sys,[/URL] Win32 error 0n2
*** WARNING: Unable to verify timestamp for [URL="http://www.sevenforums.com/AVG%20IDS%20Application%20Activity%20Monitor%20Driver"]avgidsdrivera.sys[/URL]
*** ERROR: Module load completed but symbols could not be loaded for [URL="http://www.sevenforums.com/AVG%20IDS%20Application%20Activity%20Monitor%20Driver"]avgidsdrivera.sys[/URL]
 avgidsdrivera+0x24e34

It might be a leftover of an earlier AVG installation? Uninstall AVG using AVG Remover.

You have only one HDD .... so RAID setup is not needed there. Marvell's drivers are poor, often problematic. Though it is already determined that it is norton that is causing the Ntfs.sys error there, better you get rid of Marvell, too.
Uninstall it ..... Marvell 91xx driver. then follow Drivers - Clean Left over Files after Uninstalling to remove the leftover, if any.

Update the drivers of your Razer products ..... http://www.razersupport.com/index.php?_m=downloads&_a=view

Start Menu\Programs\Razer\Razer BlackWidow 
Start Menu\Programs\Razer\Razer Synapse 2.0

Let us know the results.

 

[k4nc3r]

Arc,

Thanks a ton for the quick reply! I removed Norton and AVG (didn't realize I hadn't gotten rid of it), also got rid of the Marvell driver as well. Though eventually I do want to get a second HDD, what would I have to do so that it doesn't cause a problem down the road when I want the second one?

The only downside is that I tried updating the razer blackwidow and not it doesn't work any more. I've tried troubleshooting and I just can't get it working. Apparently it's common with that brand so I'm going to return it.

Everything seems to be working fine and I haven't had a BSOD since I did what you said. Thank you so much for the help, can't say how nice it is to have help on these issues. Saved me money time and a headache.

 

[Arc]

Arc,

Thanks a ton for the quick reply! I removed Norton and AVG (didn't realize I hadn't gotten rid of it), also got rid of the Marvell driver as well. Though eventually I do want to get a second HDD, what would I have to do so that it doesn't cause a problem down the road when I want the second one?

Nothing special is to be done .... just plug the SATA and power in, tighten the HDD screws, that's all

The only downside is that I tried updating the razer blackwidow and not it doesn't work any more. I've tried troubleshooting and I just can't get it working. Apparently it's common with that brand so I'm going to return it.

You may try to roll back the driver.
Device Manager - Roll Back Driver

Everything seems to be working fine and I haven't had a BSOD since I did what you said. Thank you so much for the help, can't say how nice it is to have help on these issues. Saved me money time and a headache.

Good to know
Now observe what happens there. If you find that the issue is over, mark this thread as solved. If there are more BSODs, execute the diag tool again

 

[k4nc3r]

Just wanetd to say thanks again for the quick help. Unfortunately I'm having some issues again. I was recently playing BioShock after a few days worth of no BSOD's when all of sudden it starts happening again. It looked like one of the issues was AVG, which I had purchased after having problems with Norton BSODing my computer. I've uninstalled that, though it would be nice to have it back, but it still is BSODing after the uninstall. I'm at a loss here, so any help would be great. Here's the new grab all. Thanks again

 

[Arc]

Intel rapid storage is failing here.

fffff880`08e561c8  fffff880`0128325bUnable to load image \SystemRoot\system32\DRIVERS\iaStor.sys, Win32 error 0n2
*** WARNING: Unable to verify timestamp for iaStor.sys
*** ERROR: Module load completed but symbols could not be loaded for iaStor.sys
 iaStor+0x2e25b

Download and install this particular version of Intel Rapid Storage Driver:

• Version: 11.2.0.1006
• Date: 06/07/2012

Also, as a caution, Test your RAM modules for possible errors.
How to Test and Diagnose RAM Issues with Memtest86+
Run memtest for at least 8 passes, preferably overnight.


Let us know the results.

 

[k4nc3r]

Ok, sorry to constantly annoy here but I've run into another series of BSOD's. I installed that verison of the driver and it kept BSODing. I did the memory test, and there were no issues. After that it was nearly a week of smooth sailing. I played games that really taxed my system and had no problems so I thought I was out of the woods. Then I try to turn my computer off last night and it BSOD'd me. So it seems to be a pattern of it being okay for about a week and then it starts crashing. It's entirely possible that I didn't analyze the memory correctly, I'm still a newb really. I'm at a loss as usual. Here's the WhoCrash Log and a new grab. Thanks again!

On Tue 4/16/2013 10:54:02 AM GMT your computer crashed
crash dump file: C:\Windows\Minidump\041613-15724-01.dmp
This was probably caused by the following module: ntoskrnl.exe (nt+0x75C00)
Bugcheck code: 0x4E (0x99, 0x215A8A, 0x6, 0x100000000000001)
Error: PFN_LIST_CORRUPT
file path: C:\Windows\system32\ntoskrnl.exe
product: Microsoft® Windows® Operating System
company: Microsoft Corporation
description: NT Kernel & System
Bug check description: This indicates that the page frame number (PFN) list is corrupted.
This appears to be a typical software driver bug and is not likely to be caused by a hardware problem. This might be a case of memory corruption. More often memory corruption happens because of software errors in buggy drivers, not because of faulty RAM modules.
The crash took place in the Windows kernel. Possibly this problem is caused by another driver that cannot be identified at this time.

 

[Arc]

Your crash dumps are not showing any finite probable cause. In such a situation, it is better to enable Driver Verifier to monitor the drivers.
Driver Verifier - Enable and Disable
Run Driver Verifier for 24 hours or the occurrence of the next crash, whichever is earlier.

   Information

Why Driver Verifier:
It puts a stress on the drivers, ans so it makes the unstable drivers crash. Hopefully the driver that crashes is recorded in the memory dump.

How Can we know that DV is enabled:
It will make the system bit of slow, laggy.

   Warning

Before enabling DV, make it sure that you have earlier System restore points made in your computer. You can check it easily by using CCleaner looking at Tools > System Restore.

If there is no points, make a System Restore Point manually before enabling DV.

   Tip

• If you fail to get on the Desktop because of DV, Boot into Advanced Boot Options > Safe mode. Disable DV there. Now boot normally again, and try following the instruction of enabling DV again.
• If you cannot boot in Safe mode too, do a System Restore to a point you made earlier.

Let us know the results, with the subsequent crash dumps, if any.

 

[k4nc3r]

I wasn't able to run driver verifier, but it crashed it crashed immediately and over and over when I got home today. Basically within a minute of start up it BSOD's. Here's the WhoCrashed message and also the newest dump files. It looks like its back to the old system service exception again. I'm 8 days away from the date that I can set up call tags without restocking fees for any hardware I've purchased so I'm a bit anxious to get this solved, or atleast understand it better. I appreciate all the help, it's really been huge to have this resource so kudos to all :}

On Wed 4/17/2013 9:57:24 PM GMT your computer crashed
crash dump file: C:\Windows\Minidump\041713-78452-01.dmp
This was probably caused by the following module: ntoskrnl.exe (nt+0x75C00)
Bugcheck code: 0x3B (0xC0000005, 0xFFFFF80003541173, 0xFFFFF88006798DA0, 0x0)
Error: SYSTEM_SERVICE_EXCEPTION
file path: C:\Windows\system32\ntoskrnl.exe
product: Microsoft® Windows® Operating System
company: Microsoft Corporation
description: NT Kernel & System
Bug check description: This indicates that an exception happened while executing a routine that transitions from non-privileged code to privileged code.
This appears to be a typical software driver bug and is not likely to be caused by a hardware problem.
The crash took place in the Windows kernel. Possibly this problem is caused by another driver that cannot be identified at this time.

 

[Arc]

Scan your HDD using WD Support / Downloads / SATA & SAS / WD VelociRaptor.

Also post a screenshot of the HDD using CrystalDiskInfo - Software - Crystal Dew World

 

[k4nc3r]

Sorry for the delay on my response there. Velicoraptor says everything is fine with the HDD. Here's a screenshot of the CrystalDiskInfo. Thank you again sir

 

[Arc]

Good.

Apparently we have nothing more to do right now but waiting for another BSOD.

 

[k4nc3r]

I dig the avatar btw. Ok, so it crashed when I got home after work today. Just listening to Spotify. The night previous I figured I'd run memtest for shits and giggles, no errors again. Do you think somethings wrong with the motherboard? Or is just some funky driver causing these problems? Not sure if the WhoCrashed is even needed but:

On Tue 4/23/2013 10:52:39 PM GMT your computer crashed
crash dump file: C:\Windows\Minidump\042313-18049-01.dmp
This was probably caused by the following module: ntoskrnl.exe (nt+0x75C00)
Bugcheck code: 0x3B (0xC0000005, 0xFFFFF8000353B173, 0xFFFFF88008E34DA0, 0x0)
Error: SYSTEM_SERVICE_EXCEPTION
file path: C:\Windows\system32\ntoskrnl.exe
product: Microsoft® Windows® Operating System
company: Microsoft Corporation
description: NT Kernel & System
Bug check description: This indicates that an exception happened while executing a routine that transitions from non-privileged code to privileged code.
This appears to be a typical software driver bug and is not likely to be caused by a hardware problem.
The crash took place in the Windows kernel. Possibly this problem is caused by another driver that cannot be identified at this time.


thanks again man

 

[Arc]

I am totally in the same opinion with you. it is some other driver, which is not coming in the front. I hope it is not a failing motherboard.

If possible, plan to start it afresh? http://www.sevenforums.com/tutorials/219487-clean-reinstall-factory-oem-windows-7-a.html

 

[VistaKing]

has the OP ran a memory test ?

FOLLOWUP_IP: 
nt!MiRelinkStandbyPage+e3
fffff800`0353b173 0fb64a1b        movzx   ecx,byte ptr [rdx+1Bh]

SYMBOL_STACK_INDEX:  0

SYMBOL_NAME:  nt!MiRelinkStandbyPage+e3

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: nt

DEBUG_FLR_IMAGE_TIMESTAMP:  5147d9c6

STACK_COMMAND:  .cxr 0xfffff88008e34da0 ; kb

IMAGE_NAME:  [COLOR="Red"]memory_corruption[/COLOR]

FAILURE_BUCKET_ID:  X64_0x3B_nt!MiRelinkStandbyPage+e3

BUCKET_ID:  X64_0x3B_nt!MiRelinkStandbyPage+e3

Followup: MachineOwner

I located adware on your PC .... SearchProtect . Please Run Malwarebytes from your PC. Update it first before you scan the PC.

Also would like for you to run AdwCleaner

Download link : AdwCleaner Download

:ar: Click on Download Now button

:ar: Save to the Desktop

:ar: Right-click on AdwCleaner.exe choose Run as administrator

:ar: Click the Search button ( See image above )

:ar: Upload the AdwCleaner[Sn].txt log in your reply

   Note

AdwCleaner[Sn].txt is located in the C:\ Drive

Also Run Rogue Killer

Run RogueKiller

RogueKiller Download (Download RogueKiller (Official website))

:ar: Click on 64 bits (x64) :

:ar: Save to the Desktop.

:ar: Close all windows and browsers

:ar: Right click RogueKiller choose Run as Administrator

Press: SCAN button

Provide the RKreport.txt (Mode: Scan) in your reply.

 

[k4nc3r]

has the OP ran a memory test ?

Hey Vista, Yes I've done two nights so far with memtest86. I'm going to run malware bytes, that could be from AVG and Norton having been the cause of some original BSOD's so I basically have no antivirus except the Microsoft one... I have until tomorrow to RMA my motherboard without charge, so hopefully there's a way to see if this is a hardware issue or just a driver causing these problems. Been driving me nuts tbh. Thanks so much for your help, dunno where I'd be with these forums.

And I'll go ahead and do the clean re-install of windows 7, its such a new build that there isn't terribly much on here anyway.

 

[k4nc3r]

Well, I went ahead and re-installed windows and it BSOD'd within about 20 minutes. Really not sure what is wrong with this build. Here's the newest grab. I didn't download whocrashed, not sure if you guys need it. Thanks

 

[k4nc3r]

I am totally in the same opinion with you. it is some other driver, which is not coming in the front. I hope it is not a failing motherboard.

If possible, plan to start it afresh? http://www.sevenforums.com/tutorials/219487-clean-reinstall-factory-oem-windows-7-a.html

I did a reinstall and still the same issue. Here's the last dump file

 

[VistaKing]

k4nc3r

There is no dmp file in the latest zip file.

 

[k4nc3r]

k4nc3r

There is no dmp file in the latest zip file.

This is odd, I can't seem to get the .dmp to grab with SF_Diagnostic. Possibly when I reinstalled windows I didn't do something correctly.. When I try to manually grab the .dmp file, its 500 some megs and that doesn't seem right. Any help?