Solved BSOD while watching video (not porn!).

[Ray2003]

I've been getting these ntoskrnl.exe and ntkrnlmp.exe problems lately. Can someone help? I've followed all the BSOD instructions for option 2 and have uploaded the SF Diagnostic zip file. I ran WhoCrashed again just now, and somehow the dump files for the ntkrnlmp.exe have disappeared, though I am not imagining it since the ntkrnlmp.exe was what caused my computer to crash this morning. Instead, I have two new dump files that say swdumon.sys caused the crash, but I've since deleted the programs associated with the swdumon.sys file (SlimWare Utilities). Anyways, any help would be sincerely appreciated!

 

[Thedoctor44]

You are having pool corruption with driver verifier enabled, the driver cannot be identified so you should enable Special Pool in Driver Verifier.
Follow these instructions.

http://www.sevenforums.com/tutorials/101379-driver-verifier-enable-disable.html

When you get to step 3 click Select individual settings from a full list.
The select Special Pool.

Post back the results.

I will say Driver Verifier can render the system unbootable so I recommend creating a restore point before hand, follow these instructions.

http://www.sevenforums.com/tutorials/697-system-restore-point-create.html

Post back any new dump files after special pool has been enabled.

 

[Ray2003]

Okay, I've followed the instructions, including the modification on Step 3 (Steps 4 and beyond, I just followed whatever instructions there were originally). So far, no BSODs so we'll see . . .

 

[Thedoctor44]

How long has it been running for?
It might take a while.

 

[Ray2003]

It's just been one day. Next time the computer crashes, I'll post the dump file. Thanks for your help so far.

 

[Ray2003]

Hi, Thedoctor44, my computer crashed again. I've attached the minidump file specified in the WhoCrashed program here (do you also need the [FONT=Segoe UI, Arial]memory.dmp file [it's 600+ megabytes large][/FONT]?), and here is what WhoCrashed told me about the crash:

[FONT=Segoe UI, Arial]On Sat 5/17/2014 3:17:43 PM GMT your computer crashed
crash dump file: C:\Windows\Minidump\051714-44241-01.dmp
This was probably caused by the following module: [FONT=Segoe UI, Arial]ntoskrnl.exe[/FONT] (nt+0x75BC0)
Bugcheck code: 0x1A (0x41284, 0x63E52001, 0x0, 0xFFFFF70001080000)
Error: [FONT=Segoe UI, Arial]MEMORY_MANAGEMENT[/FONT]
file path: C:\Windows\system32\ntoskrnl.exe
product: [FONT=Segoe UI, Arial]Microsoft® Windows® Operating System[/FONT]
company: [FONT=Segoe UI, Arial]Microsoft Corporation[/FONT]
description: NT Kernel & System
Bug check description: This indicates that a severe memory management error occurred.
This might be a case of memory corruption. More often memory corruption happens because of software errors in buggy drivers, not because of faulty RAM modules.
The crash took place in the Windows kernel. Possibly this problem is caused by another driver which cannot be identified at this time.
[/FONT]

[FONT=Segoe UI, Arial]On Sat 5/17/2014 3:17:43 PM GMT your computer crashed
crash dump file: C:\Windows\memory.dmp
This was probably caused by the following module: [FONT=Segoe UI, Arial]ntkrnlmp.exe[/FONT] (nt!KeBugCheckEx+0x0)
Bugcheck code: 0x1A (0x41284, 0x63E52001, 0x0, 0xFFFFF70001080000)
Error: [FONT=Segoe UI, Arial]MEMORY_MANAGEMENT[/FONT]
Bug check description: This indicates that a severe memory management error occurred.
This might be a case of memory corruption. More often memory corruption happens because of software errors in buggy drivers, not because of faulty RAM modules.
The crash took place in the Windows kernel. Possibly this problem is caused by another driver which cannot be identified at this time.
[/FONT]

 

[Thedoctor44]

Upload the memory.dmp file to OneDrive then post the link.

 

[Ray2003]

Okay, here it is:

https://onedrive.live.com/?cid=9183E0F542F4D665&id=9183E0F542F4D665!118

 

[Thedoctor44]

That's a minidump file. It needs to be the memory.dmp file.

 

[Ray2003]

Damn, I don't know what is wrong with me! Here it is:

https://onedrive.live.com/?cid=9183E0F542F4D665&id=9183E0F542F4D665!118

 

[Thedoctor44]

Your Intel Storage Technology Driver is being flagged.
Update it here as it's out of date.

http://downloadcenter.intel.com/Default.aspx

I see it looping a few times..

fffff880`08573850  fffff880`04384398 dump_[COLOR="Red"]iaStor+0x141398[/COLOR]
fffff880`08573858  fffff880`04300f90 dump_[COLOR="red"]iaStor+0xbdf90[/COLOR]
fffff880`08573860  00000000`00000001
fffff880`08573868  00000000`00000001
fffff880`08573870  00000000`00000200
fffff880`08573878  fffff880`04246bfe dump_[COLOR="red"]iaStor+0x3bfe[/COLOR]
fffff880`08573880  00000000`00000001
fffff880`08573888  fffff880`043390a8 dump_[COLOR="Red"]iaStor+0xf60a8[/COLOR]
fffff880`08573890  fffff880`04372801 dump_[COLOR="red"]iaStor+0x12f801[/COLOR]
fffff880`08573898  fffff880`04300fd0 dump_[COLOR="red"]iaStor+0xbdfd0[/COLOR]
fffff880`085738a0  fffff880`085738b0
fffff880`085738a8  fffff880`08573a30
fffff880`085738b0  fffffa80`00000001
fffff880`085738b8  fffff880`04300fd0 dump_[COLOR="red"]iaStor+0xbdfd0[/COLOR]

I looked at the time stamp and it's outdated so an update should help.

fffff880`01043000 fffff880`01197000   iaStor     (deferred)             
    Image path: \SystemRoot\system32\DRIVERS\iaStor.sys
    Image name: iaStor.sys
    Timestamp:        [COLOR="Red"]Sat Nov 06 07:44:52 2010[/COLOR] (4CD50774)
    CheckSum:         0007413F
    ImageSize:        00154000
    Translations:     0000.04b0 0000.04e4 0409.04b0 0409.04e4

I think the main source of your issues is your Nvidia driver.
It's looping as well, it's also outdated.
Update it from www.geforce.co.uk
Here's some good instructions that I recommend you follow.

http://www.sevenforums.com/tutorial...-problems.html?filter[2]=Hardware and Drivers

fffff880`08571748  fffff880`0682fcb7 [COLOR="red"]nvlddmkm+0x1d6cb7[/COLOR]
fffff880`08571750  fffffa80`03bfa000
fffff880`08571758  00000000`00000100
fffff880`08571760  fffff880`08571810
fffff880`08571768  00000000`00000000
fffff880`08571770  fffff880`085717a0
fffff880`08571778  fffff880`0682fe13 [COLOR="red"]nvlddmkm+0x1d6e13[/COLOR]
fffff880`08571780  00000000`00000000
fffff880`08571788  00000000`00000100
fffff880`08571790  fffff880`085719f0
fffff880`08571798  00000000`00000000
fffff880`085717a0  fffff880`08571800
fffff880`085717a8  fffff880`0682fcb7 [COLOR="red"]nvlddmkm+0x1d6cb7[/COLOR]
fffff880`085717b0  fffff980`0ce44fd0
fffff880`085717b8  fffffa80`0475a060
fffff880`085717c0  00000000`00000100
fffff880`085717c8  00000000`00000000
fffff880`085717d0  fffff880`08571800
fffff880`085717d8  fffff880`0680e0d7 [COLOR="red"]nvlddmkm+0x1b50d7[/COLOR]
fffff880`085717e0  fffff980`0397a920
fffff880`085717e8  fffffa80`03bfa000
fffff880`085717f0  fffff880`085718a0
fffff880`085717f8  00000000`00000640
fffff880`08571800  fffff880`08571830
fffff880`08571808  fffff880`0682fe13 [COLOR="Red"]nvlddmkm+0x1d6e13[/COLOR]
fffff880`08571810  00000000`00000000
fffff880`08571818  00000000`00000100
fffff880`08571820  fffff880`085719f0
fffff880`08571828  00000000`00000000
fffff880`08571830  fffff880`08571890
fffff880`08571838  fffff880`06864178 [COLOR="red"]nvlddmkm+0x20b178[/COLOR]

fffff880`06659000 fffff880`07100000   nvlddmkm   (export symbols)       nvlddmkm.sys
    Loaded symbol image file: nvlddmkm.sys
    Image path: \SystemRoot\system32\DRIVERS\nvlddmkm.sys
    Image name: nvlddmkm.sys
    Timestamp:        [COLOR="red"]Fri Jan 18 13:22:15 2013[/COLOR] (50F94C87)
    CheckSum:         00A92B69
    ImageSize:        00AA7000
    Translations:     0000.04b0 0000.04e4 0409.04b0 0409.04e4

AVG is also causing issues, please remove it completely and replace it with MSE and Malwarebytes.

   Tip

Don't enable the free trial of malwarebytes pro

fffff880`0856d190  fffff880`02ee28a0*** ERROR: Module load completed but symbols could not be loaded for [COLOR="red"]avgidsdrivera.sys[/COLOR]
[COLOR="red"] avgidsdrivera+0x138a0[/COLOR]
fffff880`0856d198  fffffa80`0780e2d8
fffff880`0856d1a0  fffff800`0390c32e nt!ExFreePoolSanityChecks+0x4e
fffff880`0856d1a8  fffff980`170eae90
fffff880`0856d1b0  00000000`00000002
fffff880`0856d1b8  fffffa80`053dade0
fffff880`0856d1c0  00000000`00000072
fffff880`0856d1c8  00000000`00000000
fffff880`0856d1d0  00000000`00000000
fffff880`0856d1d8  fffff980`2131afe0
fffff880`0856d1e0  fffff800`039249ff nt!VerifierExFreePoolWithTag+0x2f
fffff880`0856d1e8  fffffa80`053dade0
fffff880`0856d1f0  00000000`00000a08
fffff880`0856d1f8  00000000`000002d8
fffff880`0856d200  00000000`00001130
fffff880`0856d208  fffff980`170eae90
fffff880`0856d210  fffff880`02eee0a7 [COLOR="red"]avgidsdrivera+0x1f0a7[/COLOR]
fffff880`0856d218  fffff980`170eae90
fffff880`0856d220  00000000`00001130
fffff880`0856d228  00000000`000002d8
fffff880`0856d230  fffff880`05691360
fffff880`0856d238  00000000`00000000
fffff880`0856d240  00000000`00000072
fffff880`0856d248  00000000`00000000
fffff880`0856d250  00000000`00000008
fffff880`0856d258  00000000`00000008
fffff880`0856d260  fffff880`02ede2d5 [COLOR="red"]avgidsdrivera+0xf2d5[/COLOR]
fffff880`0856d268  00000000`00000000
fffff880`0856d270  00000000`00001130
fffff880`0856d278  fffff880`056913b8
fffff880`0856d280  00000000`00000a08
fffff880`0856d288  fffff880`05691320
fffff880`0856d290  00000000`00000072
fffff880`0856d298  00005f3d`00000000
fffff880`0856d2a0  00004f18`00000c18
fffff880`0856d2a8  00000000`01c9c380
fffff880`0856d2b0  ffffffff`00000000
fffff880`0856d2b8  fffff880`05691540
fffff880`0856d2c0  fffffa80`047d50c0
fffff880`0856d2c8  00000000`10000004
fffff880`0856d2d0  fffff880`01b032bc*** ERROR: Module load completed but symbols could not be loaded for [COLOR="red"]avgmfx64.sys[/COLOR]
 [COLOR="red"]avgmfx64+0x52bc[/COLOR]

 

[Ray2003]

Thanks a bunch for the suggestions. I've followed them all. Hopefully, this will work!

BTW, is there any way for me to donate some dough for these services, either to the Sevenforums or, I don't know, you personally? The service here has been exceptional!

 

[Thedoctor44]

No problem

As far as I know we don't take donations.
I don't want your money though, I do this in my spare time, I cannot accept your money because I don't feel as though it's right taking money off people.

Anymore issues let us know

 

[Thedoctor44]

Once you feel the problem has been resolved mark the thread as solved.

 

[Ray2003]

Thanks. Let's give it a couple of days or even a week before I consider it resolved (i.e., if there aren't any new surprises during this time!).