Solved BSOD playing RIFT, error 0x0000001a Caused by ntoskrnl.exe

[Golden]

OK. I'll see if I can get another opinion.

 

[p40whk]

Thanks Golden,

I really do appreciate the time you've spent trying to help me here. I should have a new SSD on Friday and will start another clean install of the OS on it this weekend. I plan to only install the programs/drivers I use on a regular basis in hopes that it is the SSD I currently have causing my issues.

In lieu of that, I've already replaced my power supply, and graphics card. I may opt to upgrade the processor next.

One thing I haven't mentioned is that I had a house fire a couple of months ago. My computer was not running but there was quite a bit of soot on it externally. I took it apart and used Electro-Contact cleaner to clean everything (it's a chemical specifically designed to clean electronics). I was having BSODs prior to this so I didn't think it an issue but as these problems keep increasing I'm suspect of the hardware now.

 

[essenbe]

p40whk, May I suggest that when you do the clean install, to install Windows, your Chipset driver, Graphics driver using this tutorial, on a clean install start with step 9 http://www.sevenforums.com/tutorials/327414-nvidia-drivers-avoid-problems.html , your Lan/WiFi drivers,
Microsoft Security Essentials (Microsoft Security Essentials - Microsoft Windows) and nothing else. Run all the important and recommended updates except the graphics driver and use it that way for long enough to see if you have a BSOD. Nothing there will cause a BSOD. It will help us determine if you have a software or hardware problem. If you have a BSOD please upload the DM log again. If you do not have a BSOD after a thorough testing, install 1 program at a time and test afterwards, then another program. This will take much longer, but it will enable you to determine what your problem is. If you start having the BSOD problem again, you will know which program it is, and maybe can help with that.

I realize this is a much longer and harder way to do an install, but it is the best way to determine what the problem is. We can hope the problem is only the hard drive, but better safe than sorry. If you have any questions, don't hesitate to ask.

 

[p40whk]

I realize this is a much longer and harder way to do an install, but it is the best way to determine what the problem is. We can hope the problem is only the hard drive, but better safe than sorry. If you have any questions, don't hesitate to ask.

Thank you! I've not seen those instructions for installing the Nvidia drivers so I'll follow those. As for this way taking longer, I'd rather get the issue solved than deal with the frustration of not knowing what's causing it.

 

[essenbe]

Great. Hopefully it is just the hard drive throwing errors, but this way we should know for sure.

 

[p40whk]

Since I will have to do a clean install of the OS as well as install a new SSD I figured it was time to go ahead and upgrade my Mobo and processor since Microcenter had a great deal on a bundle.

I have a question regarding the drivers to install. Since many of the BSODs I've been getting are tied into drivers I am wondering what's actually needed and what is just fluff.

Should I install from the CD that comes with the Mobo or download them from the Mobo manufacturer's website?

I'm installing an ASRock Z97 Extreme6 and they list the following drivers and utilities on their website for download. Some of these look like duplicates such as the LAN and USB drivers (different mfr.)

Do you install all of these? Are some not even needed? Below is the list from the ASRock site:

Drivers

Realtek high definition audio driver
INF driver
Intel Management Engine driver ver:10.0.0.1204
Intel Management Engine driver ver:10.0.31.1000_5M
Intel Rapid Start driver
Intel Smart Connect driver
Realtek Lan driver
Lan driver
AppCharger
SATA Floppy Image
ASMedia SATA3 Driver
Intel Rapid Storage Technology driver and utility
ASMedia USB 3.0 driver
Intel USB 3.0 driver
VGA driver

Utilities

ASRock 3TB+ Unlocker Utility
A-Tuning utility
Intel Rapid Start Utility
Intel Smart Connect Utility
APP Shop
OrbwebME
ASRock XFast LAN Utility

I really only want to install what's needed and I don't even know what some of these are. If you could provide some guidance I would appreciate it.

Thanks

 

[Golden]

Utilities

ASRock 3TB+ Unlocker Utility
A-Tuning utility
Intel Rapid Start Utility
Intel Smart Connect Utility
APP Shop
OrbwebME
ASRock XFast LAN Utility

Don't install any of the utilities - we have seen a spate of BSOD's caused by the extra's that accompany the motherboard installation DVD.

Install the others initially, and any that Windows Updates offers, until you have a nice stable system. Then we can look at updates.

Steve has a lot of experience with the AzRock stuff, so lets see if he agrees or has other advice.

 

[essenbe]

p40whk, Honestly it really depends on what you are doing and how you are going to set up your system.

I would definitely download them from Asrock's Web Site for your board
You will need

Realtek high definition audio driver
INF driver
Intel Management Engine driver ver:10.0.0.1204
Intel Management Engine driver ver:10.0.31.1000_5M - Although I am not familiar wit 2 IME's It is most likely different versions of the same driver, just install the latest version.
Realtek Lan driver
Lan driver
ASMedia SATA3 Driver
Intel Rapid Storage Technology driver and utility - This one is debatable, Golden will probably advise against it.
ASMedia USB 3.0 driver
Intel USB 3.0 driver

Those are all you will probably need. After you do the install and updates, go to device manager and look for any yellow triangles, right click it and select properties. If it needs a driver, go to the web site and download it, but you really shouldn't. Make sure when you do the install, you have only the SSD you want to install Windows on connected. Any other drives, you can remove just 1 cable from it. You will do better if your SSD with Windows is connected to sata port 0 or 1.

The Asrock Utilities cause a lot of people problems or don't work right, others it does not hurt at all. If you are just looking for a good stable set up I would suggest not installing them at all. If you have any questions, I will be happy to help. Also, be sure not to install any of their 'free' software such as Dameon Tools or any of that stuff.

 

[p40whk]

Well,

Got the new motherboard, processor, SSD installed following all the directions you guys provided. Was running fine then I installed Firefox. Was trying to import my old bookmarks when I had a BSOD.

Attached is the DM Log:

 

[essenbe]

It's still saying hard drive.

*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************
Use !analyze -v to get detailed debugging information.
BugCheck 24, {1904fb, fffff88003554748, fffff88003553fa0, fffff88001237c25}
Probably caused by : [COLOR=red]Ntfs.sys[/COLOR] ( Ntfs!NtfsAcquireExclusiveFcb+65 )
Followup: MachineOwner

That's the file system on the hard drive. It's a Windows update but that's still the file system. Later in the dump it says the graphics driver, but I think that is a victim of the BSOD. Let me show you. It's the same as the other as I recall, this is not the blame, but it shows the sequence leading up to the crash. There arte several dozen references just like this.

fffff880`035548d0  fffff8a0`0c8a0a90
fffff880`035548d8  fffff880`01230343 [COLOR=red]Ntfs!NtfsPrepareFcbForRemoval+0x53[/COLOR]
fffff880`035548e0  fffff8a0`0c8a0ac0
fffff880`035548e8  fffff8a0`0c8a0bc0
fffff880`035548f0  00000000`00000000
fffff880`035548f8  fffff880`03554a12
fffff880`03554900  fffffa80`0e69f100
fffff880`03554908  fffff880`012b4a3c[COLOR=red] Ntfs!NtfsTeardownStructures+0[/COLOR]xdc
fffff880`03554910  fffff8a0`0c8a0a90
fffff880`03554918  fffff800`03030280 [COLOR=red]nt!ExWorkerQueue
[/COLOR]fffff880`03554920  fffff880`03554a12
fffff880`03554928  fffffa80`0e155800
fffff880`03554930  fffffa80`0e155800
fffff880`03554938  fffff880`012363a4 [COLOR=red]Ntfs!NtfsCleanupIrpContext+0x164
[/COLOR]fffff880`03554940  fffff880`03554a12
fffff880`03554948  fffffa80`0f62d4c0
fffff880`03554950  00000000`00000000
fffff880`03554958  fffff880`01237c25 [COLOR=red]Ntfs!NtfsAcquireExclusiveFcb+0[/COLOR]x65
fffff880`03554960  00000000`00000010
fffff880`03554968  00000000`00010216
fffff880`03554970  fffff880`03554980
fffff880`03554978  00000000`00000018
fffff880`03554980  fffff880`03554af8
fffff880`03554988  fffff880`012387b4[COLOR=red] Ntfs!NtfsExtendedCompleteRequestInternal[/COLOR]+0xd4

That's just a small sequence.

 

[p40whk]

How can I have a brand new hard drive be bad unless there's something corrupting it with my install? I've pretty much replaced all of my hardware except the memory and Memtest86+ didn't show anything wrong with that.

The above BSOD happened when I was changing the attributes to show the hidden folders on my old SSD (the one that tested bad). I was trying to restore my bookmarks. Do you think that accessing that SSD may have caused the BSOD?

Edit: I just ran driver verifier again and couldn't get past the flying window screen. Attached is the latest DM Log:

 

[essenbe]

It's a possibility. When you get through transferring everything, disconnect the old hard drive, run this
open an elevated command prompt ( click start, type cmd in the search box, right click on the cmd entry and select run as administrator) in the black box that opens, copy/paste sfc /scannow. If you decide to type it, notice the space between the sfc and the /. It is a system file checker which will scan your system files and attempt to correct any missing or corrupt files. What we want are the results to say windows found no integrity violations. If it says files were found but could not be repaired, close the box, reboot and run it again, after opening the administrative command prompt. You may have to reboot and run it three times for it to repair all system files. If it can't repair them after 3 reboots, let us know.

And see what happens.

 

[p40whk]

Thanks Essenbe,

I removed the old drive and ran sfc /scannow. I got "Windows Resource Protection did not find any integrity violations." If I need to access the old drive I'll use a docking station but it's out of the computer for now.

I'll start to slowly replace the programs I had previously and report back if I get any more BSODs. Something tells me though, if I do then the only thing left is my memory.

 

[essenbe]

What do you have installed right now? Can you list everything you have installed? Also check your System specs. I think you have an Asrock board and not an Asus. Do not overclock anything. Set you BIOS to optimized defaults. Do not install any of the Asrock Utilities, or Programs like Dameon Tools.Run all the Important and recommended tools except the graphics card updates, do not run them. Again, please give me a list of everything you have installed. You can go to add/remove programs in Control Panel and post a screenshot (http://www.sevenforums.com/tutorials/9733-screenshots-files-upload-post-seven-forums.html) even if it takes 2 or 3 screenshots. Also can you tell me what you are planning to install?

 

[p40whk]

Ok, Sorry for the late replay, been away from my computer.

I had another BSOD after removing the old SSD Attached is the DM Log. This one happened while downloading a game (Large File). I left the computer and went out for a bit.

As far as what I have installed, I've attached screen prints of my system.

I have an ASRock Z97 Extreme6 Motherboard
Intel i7-4790K CPU
Gigabyte GTX970 Gaming GPU (4gb)
16gb (4X4) Kingston HyperX Memory
I have a USB 3.0 pci Expansion card (not sure what brand)
There's also an SD card reader installed as well as an internal add-on USB card
XFX 850 gold power supply
Corsair h100 liquid CPU cooler
2 Western digital hard drives and 1 Samsung 850 Pro SSD 512gb (brand new)
Corsair K70 keyboard
Razor Deathadder Mouse
Razor Orbweaver gaming keypad

That's most of it but I did attach a Speccy report that lists everything in my system.

Almost all hardware is less than a 6 months old with the exception of the optical and western digital hard drives.

 

[essenbe]

p40whk, I looked through your files as well as I could. I'm going to ask some questions and make some observations as well as ask you to run a few tests you have already run.

1. Do you/did you ever have Norton installed? If you have it installed uninstall it. If you don't please run the Norton Uninstaller. You have some drivers from Norton still on your system. https://support.norton.com/sp/en/us/home/current/solutions/kb20080710133834EN_EndUserProfile_en_us

2. Please run a full scan with MSE and run these
Scan with Kaspersky TDSSKiller:
Anti-rootkit utility TDSSKiller

ESET online scanner:
Free Virus Scan | Online Virus Scanner from ESET

3. This is not that out of date, but the scan picked this up as a cause of the BSOD. Please see if Asrock's Web Site for your board has an updated driver

Rt64win7
start             end                 module name
fffff880`04a20000 fffff880`04b07000   Rt64win7 T (no symbols)           
    Loaded symbol image file: Rt64win7.sys
    Image path: \SystemRoot\system32\DRIVERS\Rt64win7.sys
    Image name: Rt64win7.sys
    Timestamp:        Thu May 08 04:27:02 2014 (536B4DE6)
    CheckSum:         000E7862
    ImageSize:        000E7000
    Translations:     0000.04b0 0000.04e4 0409.04b0 0409.04e4

That is your Realtek RTL8168D/8111D Family PCI-E Gigabit Ethernet NIC

4. You had a lot of tcpip, NTFS and NETIO errors in your log. They were not shown as the cause of the BSOD, but errors leading up to it. So, I'm going to ask you to run Check Disk and Seatools again. I also want you to see some other errors leading up to the crash, which were not listed as the cause, but errors. I find no reason for them, which is why I am asking you to run the Virus scans, sfc /scannow and Memyest86+ again. There is no reason I can find for this.

fffff880`03128ca8  fffff800`02ed4aa0 nt!ExpInterlockedPopEntrySList
fffff880`03128cb0  fffff880`01687d60 tcpip!TcpPartitionGetNextExpirationTick
fffff880`03128cb8  fffff800`02e67000 nt!KiSelectNextThread <PERF> (nt+0x0)
fffff880`03128cc0  fffff800`030e9598 nt!BBTBuffer <PERF> (nt+0x282598)
fffff880`03128cc8  fffff880`014a0000 ndis!IsPM62Supported <PERF> (ndis+0x0)
fffff880`03128cd0  fffff880`01507270 ndis!__PchSym_+0x360
fffff880`03128cd8  fffff880`01592000 NETIO!PtpSwapWithSuccessor <PERF> (NETIO+0x0)
fffff880`03128ce0  fffff880`015e1330 NETIO!WPP_MAIN_CB <PERF> (NETIO+0x4f330)
fffff880`03128ce8  fffff880`01600000 tcpip!UdpCleanupEndpoint <PERF> (tcpip+0x0)
fffff880`03128cf0  fffff880`017a5d80 tcpip!LowMemoryEvent <PERF> (tcpip+0x1a5d80)
fffff880`03128cf8  fffff880`01600000 tcpip!UdpCleanupEndpoint <PERF> (tcpip+0x0)
fffff880`03128d00  fffff880`017a785c tcpip!LowMemoryEvent <PERF> (tcpip+0x1a785c)
fffff880`03128d08  fffff880`01600000 tcpip!UdpCleanupEndpoint <PERF> (tcpip+0x0)
fffff880`03128d10  fffff880`017a5a38 [COLOR=red]tcpip!LowMemoryEvent[/COLOR] <PERF> (tcpip+0x1a5a38)
fffff880`03128d18  fffff880`01600000 tcpip!UdpCleanupEndpoint <PERF> (tcpip+0x0)
fffff880`03128d20  fffff880`017a55b8 [COLOR=red]tcpip!LowMemoryEvent[/COLOR] <PERF> (tcpip+0x1a55b8)
fffff880`03128d28  fffff880`01600000 tcpip!UdpCleanupEndpoint <PERF> (tcpip+0x0)
fffff880`03128d30  fffff880`017a557c [COLOR=red]tcpip!LowMemoryEvent[/COLOR] <PERF> (tcpip+0x1a557c)
fffff880`03128d38  fffff880`01600000 tcpip!UdpCleanupEndpoint <PERF> (tcpip+0x0)
fffff880`03128d40  fffff880`017a54a4 [COLOR=red]tcpip!LowMemoryEvent[/COLOR] <PERF> (tcpip+0x1a54a4)
fffff880`03128d48  fffff880`01600000 tcpip!UdpCleanupEndpoint <PERF> (tcpip+0x0)
fffff880`03128d50  fffff880`017a5378 [COLOR=red]tcpip!LowMemoryEvent[/COLOR] <PERF> (tcpip+0x1a5378)
fffff880`03128d58  fffff880`01600000 tcpip!UdpCleanupEndpoint <PERF> (tcpip+0x0)
fffff880`03128d60  fffff880`017a5318 [COLOR=red]tcpip!LowMemoryEvent[/COLOR] <PERF> (tcpip+0x1a5318)
fffff880`03128d68  fffff880`01600000 tcpip!UdpCleanupEndpoint <PERF> (tcpip+0x0)
fffff880`03128d70  fffff880`017a52ac [COLOR=red]tcpip!LowMemoryEvent[/COLOR] <PERF> (tcpip+0x1a52ac)
fffff880`03128d78  fffff880`031295a8
fffff880`03128d80  fffff800`02ed4ac6 nt!ExpInterlockedPopEntrySListFault16+0x1

That's just one small section of the dump.

Check with me tomorrow morning and I will try to see what I can find out about that. It seems to be linked to the TCPIP, but there is no reason you should have low memory, and it may have to do with The Realtek NIC or even your Router.
Please submit a new post in the morning, mostly to make sure I don't forget.

Also, I am assuming that Glyph is a game. Is that correct? In Device Manager you have a yellow triangle (meaning it is not working) for a USB Controller. Do you know what that is about? I am not asking you to uninstall it, but just be aware that Razor drivers do cause a lot of people problems. I haven't mentioned it because they never showed up in any dump files so far, just be aware of it.

 

[essenbe]

It seems something is messing up your Network connectivity, have any ideas? I don't recall anything like VMware or Vbox. Do you have any Asrock Utilities installed or any network accelerators or anything of that nature?

We'll hold off on memtest for right now.

I'm sure I have asked this, but are you overclocking anything? If you are set everything back to default levels.

 

[p40whk]

Not sure what the issue is with my network but I am temporarily in an apartment while my house is renovated so this is not my typical network.

The Ethernet Driver did have an update so I installed that.

I did not install Norton as I hate that program so not sure how it's on my system?

I did run a full scan with MSE and nothing was found

Ran Seatools on the SSD and one of the other hard drives and both short and Long tests passed.

I was running Seatools long test on my big (1tb) hard drive when I had another BSOD. Unfortunately ESET was at 91% so now I'm running it again. I closed Firefox while ESET was running not realizing it's tied to ESET so that may have caused the issue. The DM log is attached.

I'm running ESET by itself now hopefully it will get through the complete scan. The previous scan had found 7 infected files (unwanted programs) by the time it had gotten to 91%

There is a BIOS update for my board as of 12/17 so I'll update that after ESET finishes

I'm out of town starting tonight for a week so I may just start Memtest and let it run.

No overclocking at all, everything is set to default.

 

[p40whk]

ESET finished and I've attached the text file of what it found.

 

[essenbe]

I;m not a security expert, but I don't think there is anything there that is a serious problem. They have all been quarantined and most were PUPs (Potentially unwanted programs),