Solved BSOD memory management during gaming

[smkozuch]

new BSOD and minidump file

 

[Boozad]

Diagnostic Test

 DRIVER VERIFIER

Driver Verifier will stress your drivers and cause BSODs if any fail. Follow this tutorial to enable/disable it. http://www.sevenforums.com/tutorials/101379-driver-verifier-enable-disable.html

Enable Driver Verifier but only enable these options:

• Standard settings and IRP logging step 3.
• Don't enable Force Pending I/O Requests

   Warning

Make a System Restore point before enabling Driver Verifier.

   Note

Your system will act very sluggishly while DV is enabled, this is normal as your drivers will be being subjected to heavy testing in order to make them crash.

Post any resulting dump files.

 

[smkozuch]

Ran it for almost 24hrs and had no BSOD. Should I run it until it BSOD or a certain time frame.

 

[Boozad]

Give it another 24 hours at the most, if it doesn't BSOD in that time then disable it and we'll go from there.

 

[smkozuch]

Turned off driver verifier and about 1hr later I got another BSOD.

 

[Boozad]

Excellent, we have a culprit or three.

One

 REALTEK GIGABIT ETHERNET DRIVER

Your Realtek RTL8168D/8111D Family Gigabit Ethernet Controller driver is causing issues. Check for an updated version here.

fffff880`0296cf88  fffff880`04890d53Unable to load image \SystemRoot\system32\DRIVERS\Rt64win7.sys, Win32 error 0n2
[COLOR=Red][B]*** WARNING: Unable to verify timestamp for Rt64win7.sys
*** ERROR: Module load completed but symbols could not be loaded for Rt64win7.sys[/B][/COLOR]
 Rt64win7+0x7d53

0: kd> lmvm Rt64win7
start             end                 module name
fffff880`04889000 fffff880`04971000   Rt64win7 T (no symbols)           
    Loaded symbol image file: Rt64win7.sys
    Image path: \SystemRoot\system32\DRIVERS\Rt64win7.sys
    Image name: Rt64win7.sys
    Timestamp:        [COLOR=Red][B]Tue Jun 17 12:59:14 2014[/B][/COLOR] (53A02D92)
    CheckSum:         000F561E
    ImageSize:        000E8000
    Translations:     0000.04b0 0000.04e4 0409.04b0 0409.04e4

Two

 ATI DRIVER

Your ATI driver has been flagged. Check for the lates version here.

   Note

When installing choose 'Advanced' or 'Custom' (whichever option is available, just not Express) and uncheck everything except the video driver.

fffff880`0296c798  fffff880`1323f947Unable to load image \SystemRoot\system32\DRIVERS\atikmdag.sys, Win32 error 0n2
[COLOR=Red][B]*** WARNING: Unable to verify timestamp for atikmdag.sys
*** ERROR: Module load completed but symbols could not be loaded for atikmdag.sys[/B][/COLOR]
 atikmdag+0x181947

0: kd> lmvm atikmdag
start             end                 module name
fffff880`130be000 fffff880`14342000   atikmdag T (no symbols)           
    Loaded symbol image file: atikmdag.sys
    Image path: \SystemRoot\system32\DRIVERS\atikmdag.sys
    Image name: atikmdag.sys
    Timestamp:        [COLOR=Red][B]Fri Nov 21 02:30:27 2014[/B][/COLOR] (546EA3C3)
    CheckSum:         0121F198
    ImageSize:        01284000
    Translations:     0000.04b0 0000.04e4 0409.04b0 0409.04e4

Three

 AVAST

Avast is causing issues. Uninstall Avast and install MS Security Essentials and MalwareBytes.

   Note

Make sure you uncheck the 'Enable Free Trial' box when installing.

fffff880`0296c608  fffff880`069d2fd8Unable to load image \SystemRoot\system32\drivers\aswMonFlt.sys, Win32 error 0n2
[COLOR=Red][B]*** WARNING: Unable to verify timestamp for aswMonFlt.sys
*** ERROR: Module load completed but symbols could not be loaded for aswMonFlt.sys[/B][/COLOR]
 aswMonFlt+0x1fd8

 

[smkozuch]

I just finished updating those drivers and removed avast. I the ati/realtek drivers were already recently updated back in december but I did it again just to be sure. I will post any more BSOD I get since I've had this problem for at least a year now since I got this computer.

Thank you for your time.

 

[Boozad]

You're welcome.

Did you buy the PC brand new or was it pre-owned?

 

[smkozuch]

I had it custom build from cyberpower pc. Had problems with BSOD and they replaced the harddrive and cpu. They however weren't able to reproduce the BSOD and my warranty ran out so been working on it since then doing various other tests.

 

[Boozad]

Not the best customer service there. Let us know how you get on, we'll be here to help.

 

[smkozuch]

New BSOD added.

 

[smkozuch]

Another BSOD added

 

[Boozad]

smkozuch I apologise for missing your last post, I've been pretty busy lately and somehow let it slip through the cracks. In future when you have new BSODs could you run the log collector and upload the whole logs instead of just the dump please? It just helps give a clearer picture of what's happening.

Onto your dumps. The first one you posted was down to your ATI driver again:

fffff880`03f79f18  fffff880`13062920Unable to load image \SystemRoot\system32\DRIVERS\atikmdag.sys, Win32 error 0n2
[COLOR=Red]*** WARNING: Unable to verify timestamp for atikmdag.sys
*** ERROR: Module load completed but symbols could not be loaded for atikmdag.sys[/COLOR]
 atikmdag+0x3b920

3: kd> lmvm atikmdag
start             end                 module name
fffff880`13027000 fffff880`142ab000   atikmdag T (no symbols)           
    Loaded symbol image file: atikmdag.sys
    Image path: \SystemRoot\system32\DRIVERS\atikmdag.sys
    Image name: atikmdag.sys
    Timestamp:        [COLOR=Red]Fri Nov 21 02:30:27 2014[/COLOR] (546EA3C3)
    CheckSum:         0121F198
    ImageSize:        01284000
    Translations:     0000.04b0 0000.04e4 0409.04b0 0409.04e4

It may be worth trying an earlier driver here, if there are still problems we may need to look at the card itself. Download an earlier version of the driver from here then download and run DDU to clean your system of all traces of the current driver. Follow http://www.sevenforums.com/tutorials/367109-display-driver-uninstaller-how-use.html for instructions on how to use DDU if needed.

Secondly Windows Anti-Malware Protection System is being blamed.

fffff880`09a40ad8  fffff800`03acae80 nt!KiSystemCall64
fffff880`09a40ae0  fffff880`0111f3c2
[COLOR=Red]*** WARNING: Unable to verify timestamp for MpFilter.sys
*** ERROR: Module load completed but symbols could not be loaded for MpFilter.sys[/COLOR]
 MpFilter+0x23c2

Do you have this enabled?

 

[smkozuch]

I have it sent to default when I downloaded microsoft security essentials. Using DDU to cleanup anything I might have missed. Also how do I run log collector? I have BSOD set you complete memory dump if thats what you mean. Also how would I then upload it as?

 

[smkozuch]

Closing this since I am going to Army Basic and will have no access to my computer for at least the next 4-6 months. Thank you for your time and help.