Solved BSOD ntoskrnl.exe 0x0000001e

[Booter4429]

Hey,

I need help with this, any help will help.


Thanks,

 

[x BlueRobot]

[COLOR="Red"]BugCheck 1E[/COLOR], {[COLOR="SeaGreen"]ffffffffc0000005[/COLOR], fffff800032b0e45, 0, ffffffffffffffff}

Probably caused by : ntkrnlmp.exe ( nt!KeStackAttachProcess+115 )

Usual causes:  Device driver, hardware, System service, compatibility, Remote control programs, memory, BIOS

The kernel has detected an illegal processor instruction, which couldn't be handled by the exception handler since no routines for the error exist.

0: kd> [COLOR="seagreen"]!error ffffffffc0000005[/COLOR]
Error code: (NTSTATUS) 0xc0000005 (3221225477) - The instruction at 0x%08lx referenced memory at 0x%08lx. The memory could not be %s.

There seems to be some memory access violations, this is usually due to poorly written drivers referencing invalid addresses.

>>Upload MSINFO32<<

1. Start rb:
2. Type: msinfo32
3. File, Save
4. Place file in a zipped folder
5. Upload in next post using - http://www.sevenforums.com/tutorials/9733-screenshots-files-upload-post-seven-forums.html

This file will show which programs you have installed, to see what drivers may be potentially causing issues.

 

[Booter4429]

System Info:

Intel Core i3 CPU @2.27GHz
RAM: 4GB
64 - bit OS

 

[x BlueRobot]

I've posted, just in case you missed it.

 

[Booter4429]

Here you go.

 

[x BlueRobot]

Remove:

Start Menu\Programs\Driver Performer

Windows 7 doesn't require these driver monitoring and automatic updating programs, which often install instable drivers which cause more problems, as well as, the malware which is often also bundled in. The best method to update drivers using the device's installation wizard (from manufacturer's website) or through Device Manager.

Remove:

Start Menu\Programs\McAfee

McAfee is known to cause BSODs in Windows 7, it's best to remove this program using the McAfee Removal Tool, and then install and run full scans with these proven alternatives which work with Windows 7.

Install and perform full scans with:

• Malwarebytes : Free anti-malware download
• Microsoft Security Essentials | Protect against viruses, spyware, and other malware

   Information

Remember to install the free version of Malwarebytes not the free trail; untick the free trial box during installation. MSE is the most lightweight and compatible with the Windows 7 operating system

You can also view this thread for a complete free and lightweight security protection combination:

• http://www.sevenforums.com/system-security/206705-good-free-system-security-combination.html

 

[Booter4429]

Did that and just got a BSOD. Here it is.

 

[x BlueRobot]

[COLOR="Red"]BugCheck 1E[/COLOR], {ffffffffc0000005, fffffa8004fb4690, 0, 7fffffa8000}

Probably caused by : ntkrnlmp.exe ( nt! ?? ::FNODOBFM::`string'+487ed )

What were the results of the requested scans?

Run some hard-drive diagnostics and follow these steps:

• Hard Drive Diagnostic Procedure

Find your hard-drive manufacturer and run their tests.

Additional Tests:

• SeaTools for DOS | Seagate
• CrystalDiskInfo - Software - Crystal Dew World

Post a screenshot of Crystal Disk Info summary:

• http://www.sevenforums.com/tutorials/9733-screenshots-files-upload-post-seven-forums.html

If you have an SSD, make sure the following are up to date:

• SSD firmware
• BIOS Version
• Chipset Drivers
• Hard disk controller drivers/SATA drivers
• If you have a Marvell IDE ATA/ATAPI device, make sure the drivers are up to date from the Intel site or Marvell site and not from your motherboard/vendor support site.

Check for any file system errors and bad sectors using Option #2 of:

• http://www.sevenforums.com/tutorials/433-disk-check.html

Use this command with Disk Check:

chkdsk C: /f /r

 

[Booter4429]

I think this is what you wanted??? I hope. And here is the BSOD Dump.


thanks

 

[x BlueRobot]

For Crystal Disk Info, click on the Caution, and then move all the sliders to the left, then press Apply and then Exit.

It's the same Stop 0x1E.

What were the results of MSE and Malwarebytes?

Have you completed any of the hard-drive scans?

 

[Booter4429]

I will do the Crystal Disk info when I get home. Malwarebytes and MSN did not find anything. I did do hard drive check with seagate and a chkdsk. All of that was fine.

 

[x BlueRobot]

Okay good, and post the results of chkdsk using this tutorial - http://www.sevenforums.com/tutorials/96938-check-disk-chkdsk-read-event-viewer-log.html

 

[Booter4429]

Here is the chkdsk log.

 

[x BlueRobot]

Has the Crystal Disk Info Caution changed to Good now?

There doesn't seem to be hard-drive or file system corruption which is a positive.

Run Driver Verifier to scan for any corrupted drivers which may be causing problems, this program works by running various stress tests on drivers, in order to produce a BSOD which will locate the driver; run for least 24 hours:

• http://www.sevenforums.com/tutorials/101379-driver-verifier-enable-disable.html

   Information

Additional Help - http://www.sevenforums.com/crash-lo...-driver-verifier-identify-issues-drivers.html

 

[Booter4429]

Can't even get into windows...... Here are some dumps.

 

[x BlueRobot]

[COLOR="Red"]BugCheck C9[/COLOR], {4, fffffa8005984c20, 0, 0}

*** WARNING: Unable to verify timestamp for kdcom.dll
*** ERROR: Module load completed but symbols could not be loaded for kdcom.dll
Probably caused by : [COLOR="red"]kdcom.dll[/COLOR] ( kdcom+1bb3 )

Driver Verifier has detected that a driver has been violation I/O calls. The interesting thing is that, kdcom.dll is a Windows file for the Kernel Debugger, which is most likely not to be accurate.

Are you able to boot into Safe Mode, and disable Driver Verifier from there?

 

[Booter4429]

Yes, doone

 

[x BlueRobot]

Okay good, now boot into Windows normally, and then use this tutorial to scan for any corrupted Windows files, it seems there is more of a driver related issue, with Driver Verifier finding I/O violations.

Scan for any missing, modified or corrupted protected Windows files with:

• http://www.sevenforums.com/tutorials/1538-sfc-scannow-command-system-file-checker.html

Scan for any malware (more in depth scan):

• http://www.sevenforums.com/tutorials/166445-windows-defender-offline.html
• Anti-rootkit utility TDSSKiller

 

[Booter4429]

Can I do this in Safe mode? I can't get in to windows.

 

[Booter4429]

TDSSKILL didn't find anything
Scannow didn't find anything
Can't run defender in safe mode.