BSOD, Memory Management + Kmode Exception Not Handled

[n3rv]

Hi guys. Recently I have been getting a few BSODs. I have attached the requested .zip file of the most recent crashes (some previous ones have been wiped for disk clean-ups and reformatting etc.). Thanks in advance for any help. The only things I can think of that made the problem happen are the installation of Sandboxie and/or updating my Intel Graphics card for another program. I put my specs on my profile and the rest of my story is below in case it also helps:

I have since un-installed everything from the time I have been getting these BSODs, reformatted, updated the BIOS and a few drivers, and I still get them... although less frequently and they change a bit in type. The other things I get are appcrashes, originally with explorer.exe, and more recently with firefox, and a few other programs (it could be more frequent when I use more RAM / have more windows and Flash Player open, but also appears pretty random in some other instances).

I have tried repairing Windows but I am having errors backing up, just about managed to keep installing Windows Updates after reformatting, and I can't create a repair disk as I have no drive to do so. When I downloaded another repair disk and booted it via USB I got a few more issues like "Startup Repair Offline".

sfc /scannow also found errors but was unable to fix. I also ran a memtest86 and it had 65535+ errors before I had to stop it because it was running for many hours. I have just completed the first year with my laptop but the good news is I have a 2 year warranty. Bad news is I don't know what to tell them is the exact problem if I can't fix it. WhoCrashed.exe is telling me recent crashes "appear to be a typical software driver bug and is not likely to be caused by a hardware problem" and they are "not often because of faulty RAM modules", which is what I would assume to be the problem if I couldn't fix it.

I'm not really sure what to do now. Thanks again in advance if anyone can help in any way.

 

[Arc]

Hi n3rv.

Free up the startup. Windows does not need any other program to auto start with it, but the auto start programs often conflicts and causes various problems including BSODs.

1. Click on the Start button
2. Type “msconfig (without quotes), click the resulting link. It will open the System Configuration window.
3. Select the “Startup” tab.
4. Deselect all items other than the antivirus.
5. Apply > OK
6. Accept then restart.

Test your RAM modules for possible errors.
How to Test and Diagnose RAM Issues with Memtest86+
Run memtest for at least 8 passes, preferably overnight.

If it start showing errors/red lines, stop testing. A single error is enough to determine that something is going bad there.

If memtest shows no error, enable Driver Verifier to monitor the drivers.
Driver Verifier - Enable and Disable
Run Driver Verifier for 24 hours or the occurrence of the next crash, whichever is earlier.

   Information

Why Driver Verifier:
It puts a stress on the drivers, ans so it makes the unstable drivers crash. Hopefully the driver that crashes is recorded in the memory dump.

How Can we know that DV is enabled:
It will make the system bit of slow, laggy.

   Warning

Before enabling DV, make it sure that you have earlier System restore points made in your computer. You can check it easily by using CCleaner looking at Tools > System Restore.

If there is no points, make a System Restore Point manually before enabling DV.

   Tip

• If you fail to get on the Desktop because of DV, Boot into Advanced Boot Options > Safe mode. Disable DV there. Now boot normally again, and try following the instruction of enabling DV again.
• If you cannot boot in Safe mode too, do a System Restore to a point you made earlier.

Let us know the results, with the subsequent crash dumps, if any.
_______________________________________________________________________________________

BugCheck 1E, {ffffffffc0000005, fffff800030d1dac, 1, 3d0}

Probably caused by : ntkrnlmp.exe ( nt! ?? ::FNODOBFM::`string'+487ed )

Followup: MachineOwner
-----------------------------------------------------------------------------
BugCheck 1A, {41287, 5105, 0, 0}

Probably caused by : ntkrnlmp.exe ( nt! ?? ::FNODOBFM::`string'+454f5 )

Followup: MachineOwner
---------

 

[n3rv]

Hi n3rv.

Free up the startup. Windows does not need any other program to auto start with it, but the auto start programs often conflicts and causes various problems including BSODs.

1. Click on the Start button
2. Type “msconfig (without quotes), click the resulting link. It will open the System Configuration window.
3. Select the “Startup” tab.
4. Deselect all items other than the antivirus.
5. Apply > OK
6. Accept then restart.

Test your RAM modules for possible errors.
How to Test and Diagnose RAM Issues with Memtest86+
Run memtest for at least 8 passes, preferably overnight.

If it start showing errors/red lines, stop testing. A single error is enough to determine that something is going bad there.

Hello Arc,

I freed up the startup, then ran Memtest86+. It had errors immediately:

I stopped there as requested. I have attached a file of one of the BSODs I experienced after my last post as well in case this helps in any way ([FONT=Segoe UI, Arial][FONT=Segoe UI, Arial]BAD_POOL_HEADER)[/FONT][/FONT].

EDIT: I keep getting more BSODs after posting this but cannot .zip them all and post them in time before crashing again so I have put some of them in text format here:

[FONT=Segoe UI, Arial]Crash Dump Analysis [/FONT][FONT=Segoe UI, Arial]
[/FONT][FONT=Segoe UI, Arial]On Mon 25/11/2013 03:42:20 GMT your computer crashed
crash dump file: C:\Windows\memory.dmp
This was probably caused by the following module: [FONT=Segoe UI, Arial]ntfs.sys[/FONT] (Ntfs+0x1F15)
Bugcheck code: 0x24 (0xC08A5, 0x0, 0x0, 0x0)
Error: [FONT=Segoe UI, Arial]NTFS_FILE_SYSTEM[/FONT]
file path: C:\Windows\system32\drivers\ntfs.sys
product: [FONT=Segoe UI, Arial]Microsoft® Windows® Operating System[/FONT]
company: [FONT=Segoe UI, Arial]Microsoft Corporation[/FONT]
description: NT File System Driver
Bug check description: This indicates a problem occurred in the NTFS file system.
The crash took place in a standard Microsoft module. Your system configuration may be incorrect. Possibly this problem is caused by another driver on your system that cannot be identified at this time.


[/FONT]
[FONT=Segoe UI, Arial]On Mon 25/11/2013 03:34:58 GMT your computer crashed
crash dump file: C:\Windows\Minidump\112513-8954-01.dmp
This was probably caused by the following module: [FONT=Segoe UI, Arial]ntoskrnl.exe[/FONT] (nt+0x75BC0)
Bugcheck code: 0xA (0x0, 0x2, 0x0, 0xFFFFF8000310AC24)
Error: [FONT=Segoe UI, Arial]IRQL_NOT_LESS_OR_EQUAL[/FONT]
file path: C:\Windows\system32\ntoskrnl.exe
product: [FONT=Segoe UI, Arial]Microsoft® Windows® Operating System[/FONT]
company: [FONT=Segoe UI, Arial]Microsoft Corporation[/FONT]
description: NT Kernel & System
Bug check description: This indicates that Microsoft Windows or a kernel-mode driver accessed paged memory at DISPATCH_LEVEL or above.
This appears to be a typical software driver bug and is not likely to be caused by a hardware problem.
The crash took place in the Windows kernel. Possibly this problem is caused by another driver that cannot be identified at this time. [/FONT]

 

[Arc]

Now follow the "Part 3: If You Have Errors:" of How to Test and Diagnose RAM Issues with Memtest86+

Errors/red lines means one or more RAM is faulty. But the fault may occur due to a faulty DIMM slot, too, which is a motherboard component. Using memtest86+, you can discriminate between a faulty RAM and a faulty motherboard.

How? Say you have two RAM sticks and two DIMM slots. You obtained errors at the test with all RAM sticks installed. Now, remove all the sticks but one. Test it in all the available slots, one by one. Continue the same procedure for all the available sticks.
How to make the inference that is it a RAM issue or it is a motherboard issue? Suppose you have got the result like that:

test|Slot1|Slot2
RAM1| Error | Error
RAM2|Good|Good

It is a RAM, a bad RAM.

But if you have got a result like that:

test|Slot1|Slot2
RAM1| Error |Good
RAM2| Error |Good

It is a motherboard issue. The particular slot is bad.

Otherwise, you can use a new RAM kit.

 

[n3rv]

Now follow the "Part 3: If You Have Errors:" of How to Test and Diagnose RAM Issues with Memtest86+

Errors/red lines means one or more RAM is faulty. But the fault may occur due to a faulty DIMM slot, too, which is a motherboard component. Using memtest86+, you can discriminate between a faulty RAM and a faulty motherboard.

How? Say you have two RAM sticks and two DIMM slots. You obtained errors at the test with all RAM sticks installed. Now, remove all the sticks but one. Test it in all the available slots, one by one. Continue the same procedure for all the available sticks.
How to make the inference that is it a RAM issue or it is a motherboard issue? Suppose you have got the result like that:

test|Slot1|Slot2
RAM1| Error | Error
RAM2|Good|Good

It is a RAM, a bad RAM.

But if you have got a result like that:

test|Slot1|Slot2
RAM1| Error |Good
RAM2| Error |Good

It is a motherboard issue. The particular slot is bad.

Otherwise, you can use a new RAM kit.

Thanks for the reply but can I ask you, before I do this, is this definitely a hardware issue now? The reason I ask is that my laptop is still under warranty and I do not want to take it apart just yet.

The other thing is that if it is definitely a hardware issue due to faulty RAM/DIMM Slot/Motherboard, could it have been caused by any software I installed? For example, Sandboxie, which is isolation/virtualisation software.

Or was the hardware likely to be faulty regardless of this?

 

[Arc]

If the hardware is under warranty, produce the memtest picture to the vendor. They will replace it.

It is faulty RAM, no software can operate when you are running memtest by booting from it.