BSOD caused by ntsokrnl.exe, usually in any game, files attatched

[alextigerw]

Hello,

Experiencing some BSOD's caused by ntsokrnl.exe usually when in any game (normal laptop operation is stable). Recently upgraded my RAM from 4GB to 8GB of 2x4GB Ballistix sticks from Crucial (used their system scanner etc). I've tried re-seating the RAM and swapping the two sticks around, doing seemed to slightly reduce the likelihood of getting BSOD. Tried running driver verifier with settings recommended from Google research (and on this site), which only found only found cfmd.sys. Have run chkdsk /f which came up all clear, Data Life Guard for HDD came up all clear, also have run SFC /scannow which also came up all good. I haven't run memtest yet, as I understand this is quite time consuming and wanted to post my BSOD dumps here to see if anyone found something I haven't seen . Also haven't tried using just 1 RAM stick at a time to see if the results can be repeated. (BSOD's can be regularly triggered when playing War Thunder for example).

Have endeavoured to get all drivers up to date from the Fujitsu site, BIOS is also the most recent version. I only updated the BIOS recently, so could this be an issue? Considered rolling back BIOS update but I don't like messing with the BIOS too much.

Also, I can't disable Memory caching / Shadowing from BIOS (Pheonix) as the option is not there to do so (something that is apparently common with OEM machines).

This is actually the second lot of RAM i've received from Crucial as the first 2x4GB kit contained a faulty stick, and this is the replacement set.

Somewhat embarrassing since I study IT at uni and this one has me stumped.

System specs

Fujitsu Lifebook A544
Windows 7 OEM
500GB HDD
8GB RAM (2x4GB) Crucial Ballistix
Intel HD 4600 integrated graphics

Hopefully I've followed your BSOD posting instructions correctly and the .zip file has attached as intended.

Thanks in advance

Alex

 

[axe0]

Hi alextigerw,

Welcome to the 7forums

Please uninstall Comodo and replace it with MSE.
https://forums.comodo.com/install-setup-configuration-faq-cis-b141.0/-t71897.0.html
NOTE: I don't know what version you are using, make sure to check the CIS version the tool supports.

// Dump 1
fffff880`0b5de1a8  fffff880`0455886fUnable to load image \SystemRoot\system32\DRIVERS\cmdguard.sys, Win32 error 0n2
*** WARNING: Unable to verify timestamp for cmdguard.sys
*** ERROR: Module load completed but symbols could not be loaded for cmdguard.sys
 cmdguard+0x4886f

// Dump 2
fffff880`072ad9d0  fffff880`0471059cUnable to load image \SystemRoot\system32\DRIVERS\CFRMD.sys, Win32 error 0n2
*** WARNING: Unable to verify timestamp for CFRMD.sys
*** ERROR: Module load completed but symbols could not be loaded for CFRMD.sys
 CFRMD+0x459c

// Dump 3
fffff880`0ab5c2c8  fffff880`0473ead5Unable to load image \SystemRoot\system32\DRIVERS\cmdguard.sys, Win32 error 0n2
*** WARNING: Unable to verify timestamp for cmdguard.sys
*** ERROR: Module load completed but symbols could not be loaded for cmdguard.sys
 cmdguard+0x25ad5

 

[alextigerw]

Ok will do, while i'm doing that, is there anything you'll need after thats done?

 

[axe0]

Feedback from your side about how your system is

 

[alextigerw]

Ok, so CIS is gone, cleanup tool worked as intended, no errors etc. MSE installed and updated, no problems there. PC is a alot faster as well now, I've noticed. Any specific you're looking for? I can run War Thunder to try and trigger a BSOD again if you like? Unsure how long that will take, sometimes happens when the game first loads, or can take several games to trigger.

 

[axe0]

As already said I only need feedback from your side if the problem is gone.
If not, simply run the tool again and upload a new zip.

 

[alextigerw]

So I had another BSOD, still playing a game (although in another game this time). Ran the tool again and have attached the .zip. This time is caused by Ntfs.sys. Most of these BSODs seem to be a different driver every time now? You think it could be something up with my new RAM?

 

[axe0]

This is a 0x24 which usually is focused on the file system or hard drive.

Please check HP for updates for the Intel Rapid Storage drivers

fffff880`0ba10da8  fffff880`018a1f9eUnable to load image \SystemRoot\system32\drivers\iaStorF.sys, Win32 error 0n2
*** WARNING: Unable to verify timestamp for iaStorF.sys
*** ERROR: Module load completed but symbols could not be loaded for iaStorF.sys
 iaStorF+0x1f9e

0: kd> lmvm iastorf
start             end                 module name
fffff880`018a0000 fffff880`018ab000   iaStorF  T (no symbols)           
    Loaded symbol image file: iaStorF.sys
    Image path: \SystemRoot\system32\drivers\iaStorF.sys
    Image name: iaStorF.sys
    Timestamp:        [COLOR="Red"]Thu Aug 29 00:13:24 2013[/COLOR] (521E7604)
    CheckSum:         0000893A
    ImageSize:        0000B000
    Translations:     0000.04b0 0000.04e4 0409.04b0 0409.04e4

 

[alextigerw]

ok thanks again, ill update it and post another dump should I get another BSOD, otherwise I'll let you know if everything has fixed itself

 

[alextigerw]

Ok I have updated that particular driver, but I've had another bsod, the .zip is attached. This time I was just watching a video, no games or anything.

 

[axe0]

Please remove Comodo Geekbuddy.

Please check HP for driver updates for everything, network drivers, audio drivers, graphics drivers and Realtek USB card reader drivers.

Please update following drivers/software
Driver Reference Table - FUJ02B1.sys
Driver Reference Table - FUJ02E3.sys
Driver Reference Table - FBIOSDRV.sys
Driver Reference Table - npf.sys

Diagnostics Test

 HDD TEST

Run SeaTools to check the integrity of your HDD. SeaTools for DOS and Windows - How to Use - Windows 7 Help Forums
Run following tests

1. Short Drive Self Test
2. Short generic
3. Long generic

If the short generic fails, no need for the long generic.

   Note

Do not run SeaTools on an SSD as the results will be invalid.

Run chkdsk
Disk Check - Windows 7 Help Forums

Run HDTune to

• scan for errors, no quick scan but full scan
• check the health,
• benchmark.

It may take some time, but please take the time you need to perform it properly.
Let me know what the results are

• of the error scan,
• make a screenshot of the health of every hard drive and post the screenshots,
• post screenshots with the benchmark of the
  • transfer rate,
  • access time,
  • burst rate,
  • cpu usage.