BSOD PC idle, multiple times, BCCode c5, Locale ID 1033

[jay100384]

Unfortunately, I haven't seen the actual blue screen so I don't know the exact code it displays. The only reason I know a BSOD happened is when I come back to my PC and it's at the login screen and then upon logging in the Windows has recovered message pops up.

Here are the details in the Windows has recovered screen:

BCCode: c5
BCP1: 0000000100000000
BCP2: 0000000000000002
BCP3: 0
BCP4: FFFFF80003C099BC

OS Version: 6_1_7601

I have uploaded the .zip file with all relevant (automatically generated) files.

It could very well be a power issue because my PC is plugged into an UPS. I'm fairly certain I need to buy/install new batteries in it, but that "shouldn't" matter as long as it's plugged into a wall. Or, it could be my power supply has become faulty.

I haven't had time to read through all of the event logs to figure out where the exact problem is due to work and my 3mo old son.

Any assistance is greatly appreciated.

If you require more information, please let me know.

 

[axe0]

Please uninstall everything of Nvidia using Display Driver Uninstaller and install new drivers from Nvidia. Be sure the clean install box is checked and only install the Graphics driver and the PhysX driver.
View attachment 383013

*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck C5, {100000000, 2, 0, fffff80003c099bc}

[COLOR="red"]*** WARNING: Unable to verify timestamp for nvlddmkm.sys
*** ERROR: Module load completed but symbols could not be loaded for nvlddmkm.sys[/COLOR]
Probably caused by : Pool_Corruption ( nt!ExDeferredFreePool+100 )

Followup:     Pool_corruption

1: kd> lmvm nvlddmkm
Browse full module list
start             end                 module name
fffff880`11090000 fffff880`11c9a000   nvlddmkm T (no symbols)           
    Loaded symbol image file: nvlddmkm.sys
    Image path: \SystemRoot\system32\DRIVERS\nvlddmkm.sys
    Image name: nvlddmkm.sys
    Browse all global symbols  functions  data
    Timestamp:        [COLOR="Red"]Wed Dec 16 15:13:02 2015[/COLOR] (5671716E)
    CheckSum:         00BD14EC
    ImageSize:        00C0A000
    Translations:     0000.04b0 0000.04e4 0409.04b0 0409.04e4

 

[jay100384]

Axe0 I have remove all of nVidia's drivers and reinstalled per your instructions.

I will let you know if this fixed the issue tomorrow at the latest. Remember, most of these happened while I was away from the computer. The last one was around midnight last night/this morning.

Stand by.

 

[jay100384]

New BSOD at idle

Well, it seems I'm no longer getting the C5 BCCode, but now I am getting a different one.

BCCode: 19 (I think, I accidentally closed it before I could grab everything).
Same 1033 Locale ID.

Attached new logs as well.

Thanks for the help.

 

[axe0]

Diagnostic Test

 DRIVER VERIFIER

   Warning

Please make a backup of your important files and get your rescue media or create one.
Please create a restore point.

Please follow this tutorial to run driver verifier.

Driver verifier stresses your drivers and will crash your pc if any driver fails due to a violation.

Driver verifier should be performed for a max of 48 hours, or when you have a bluescreen, whatever comes first.

If driver verifier has found a violation and you can't get back into windows normally, try to boot into safe mode and reset in safe mode driver verifier, or in the troubleshooting options open command prompt and type verifier /reset.

   Note

Your system will act very sluggishly while driver verifier is enabled, this is normal as your drivers will be being subjected to heavy testing in order to make them crash.

 

[jay100384]

Axe0,

I already ran verifier.exe and I got another BSOD, but all it said was IRQL_NOT_LESS_OR_EQUAL then rebooted in safe mode to turn it off.

Uploaded new dmp files. Maybe they will narrow it down a little.

Is there a way to view these dump files myself to eliminate these corrupt or bad drivers as I BSOD each time I run verifier?

Thanks.

 

[axe0]

Says this anything to you?

Start Menu\Programs\ClamWin Antivirus	Public:Start Menu\Programs\ClamWin Antivirus	Public
Start Menu\Programs\Symantec Endpoint Protection	Public:Start Menu\Programs\Symantec Endpoint Protection	Public

Try to update your Creative audio drivers.
Do you disable all other audio devices when using your SB Tactic3D?
Driver Reference Table - UHSfiltv.sys

2: kd> lmvm UHSfiltv
Browse full module list
start             end                 module name
fffff880`068a1000 fffff880`068af000   UHSfiltv T (no symbols)           
    Loaded symbol image file: UHSfiltv.sys
    Image path: \SystemRoot\system32\drivers\UHSfiltv.sys
    Image name: UHSfiltv.sys
    Browse all global symbols  functions  data
    Timestamp:        [COLOR="Red"]Fri May 31 10:41:30 2013[/COLOR] (51A8623A)
    CheckSum:         0000C4B3
    ImageSize:        0000E000
    Translations:     0000.04b0 0000.04e4 0409.04b0 0409.04e4

 

[jay100384]

ClamWin is an on demand scanner while Symantec is an active scanner. Usually ClamWin will move files to a quarantine folder and Symantec will pick pick it up with its active scan/threat protection to take credit for finding it, then allow you to delete which ever bad file ClamWin found.

I know if you have two active scanner AV's they will detect each other and throw warnings everywhere. Neither throw warnings about the other.

I will update creative drivers now and try verifier again.

No I do not disable other drivers. Usually my voice chat runs through the headset and game sound or music runs through the surround sound speakers.

 

[jay100384]

Ran Verifier again and got another BSOD.

Dump files attached.

Cheers.

 

[axe0]

I know if you have two active scanner AV's they will detect each other and throw warnings everywhere. Neither throw warnings about the other.

I've never seen that, >1 AV's only cause problems like freezes or access errors.

If you are using a program like Ccleaner please stop using it while troubleshooting.
This because programs like Ccleaner remove dump files that are needed to troubleshoot.
Or configure Ccleaner to not remove dump files:

I suggest that you try disabling all other audio devices as a test when the SB Tactic3D is connected.

2: kd> lmvm UHSfiltv
Browse full module list
start             end                 module name
fffff880`06963000 fffff880`06971000   UHSfiltv T (no symbols)           
    Loaded symbol image file: UHSfiltv.sys
    Image path: \SystemRoot\system32\drivers\UHSfiltv.sys
    Image name: UHSfiltv.sys
    Browse all global symbols  functions  data
    Timestamp:        [COLOR="Red"]Fri May 31 10:41:30 2013[/COLOR] (51A8623A)
    CheckSum:         0000C4B3
    ImageSize:        0000E000
    Translations:     0000.04b0 0000.04e4 0409.04b0 0409.04e4

 

[jay100384]

Strange. I just updated the creative drivers and disabled other devices and ran verifier before the last post. I've been taking out logs that have been uploaded because you had addressed those past issues.

When I get home I'll check if I received another BSOD.

 

[axe0]

Then I suggest that you disable verifier.

 

[jay100384]

I deleted the settings for verifier. This disables it correct?

Another BSOD sometime last night/this morning.

Problem Event Name: BlueScreen
OS Version: 6.1.7601.2.1.0.256.1
Locale ID: 1033

Additional information about the problem:
BCCode: c5
BCP1: 0000000100000000
BCP2: 0000000000000002
BCP3: 0000000000000000
BCP4: FFFFF80003C149BC
OS Version: 6_1_7601
Service Pack: 1_0
Product: 256_1

I've attached the files again as well.

Thank you.

 

[axe0]

Please remove all peripheral but mouse and keyboard and switch the mouse and keyboard from port.

5: kd> k
 # Child-SP          RetAddr           Call Site
00 fffff880`032b78d8 fffff800`03adb969 nt!KeBugCheckEx
01 fffff880`032b78e0 fffff800`03ada5e0 nt!KiBugCheckDispatch+0x69
02 fffff880`032b7a20 fffff800`03c149bc nt!KiPageFault+0x260
03 fffff880`032b7bb0 fffff800`03c134f1 nt!ExDeferredFreePool+0x100
04 fffff880`032b7c40 fffff800`03a23865 nt!ExFreePoolWithTag+0x411
05 fffff880`032b7cf0 fffff880`112a007b hal!HalPutScatterGatherList+0x115
06 fffff880`032b7d50 fffff880`112a0b0f [COLOR="red"]USBPORT[/COLOR]!USBPORT_Core_iCompleteDoneTransfer+0x45f
07 fffff880`032b7e30 fffff880`1129e66f [COLOR="red"]USBPORT[/COLOR]!USBPORT_Core_iIrpCsqCompleteDoneTransfer+0x3a7
08 fffff880`032b7e90 fffff880`1128ff89 [COLOR="red"]USBPORT[/COLOR]!USBPORT_Core_UsbIocDpc_Worker+0xf3
09 fffff880`032b7ed0 fffff800`03ae706c [COLOR="Red"]USBPORT[/COLOR]!USBPORT_Xdpc_Worker+0x1d9
0a fffff880`032b7f00 fffff800`03adf505 nt!KiRetireDpcList+0x1bc
0b fffff880`032b7fb0 fffff800`03adf31c nt!KyRetireDpcList+0x5
0c fffff880`16cb64c0 00000000`00000000 nt!KiDispatchInterruptContinue

 

[jay100384]

Found a USB controller driver out of date. Installed, ran verifier and so the 24 hour test begins.

More to follow. (though I hope not).

 

[jay100384]

Received a black screen when I came back to my PC.

Restarted and had two blue screens.

One was:

BCCode: A
BCP1: FFFFF8A00D675190
BCP2: 0000000000000002
BCP3: 0000000000000000
BCP4: FFFFF80003AC64F0

Attached files.

Thank you.

 

[axe0]

Disable driver verifier and remove all peripheral except for mouse and keyboard, you can disable driver verifier by resetting the settings.

3rd suggestion, reinstall/repair/remove Symantec and VMware.

*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck 1000007E, {ffffffffc0000005, fffff88000fc6c30, fffff88003383fa8, fffff88003383800}

[COLOR="Red"]*** WARNING: Unable to verify timestamp for SYMEVENT64x86.SYS
*** ERROR: Module load completed but symbols could not be loaded for SYMEVENT64x86.SYS[/COLOR] // Symantec driver
Probably caused by : mountmgr.sys ( mountmgr!memmove+2c0 )

Followup:     MachineOwner


*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck A, {fffff8a00d675190, 2, 0, fffff80003ac64f0}

Probably caused by : [COLOR="red"]USBPORT[/COLOR].SYS ( USBPORT!USBPORT_Core_iMapTransfer+24a )

Followup:     MachineOwner


*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck A, {fffff980670d2fa0, 2, 1, fffff80003b98ea8}

[COLOR="red"]*** WARNING: Unable to verify timestamp for hcmon.sys
*** ERROR: Module load completed but symbols could not be loaded for hcmon.sys[/COLOR] // VMware driver
Probably caused by : hcmon.sys ( hcmon+6855 )

Followup:     MachineOwner

 

[jay100384]

Just so you know, only the mouse and keyboard were attached using the last verifier run/BSOD.

I will install the newest versions of both Symantec and VMWare and get back to you.

EDIT: Actually I removed VMWare Player since I rarely use it.

 

[axe0]

Are the mouse and keyboard also switched from ports?

 

[jay100384]

They were when I ran the verifier last time, yes.