Solved New PC - BSOD appears randomly

[Anzi]

New PC - BSOD caused by ntoskrnl.exe

Hey!

I get bsod every now and then. Sometimes it comes when play I games and sometimes I'm just chatting with friends on skype and surfing in the net. First everything freezes up then I get black screen and after that the BSOD appears.

Is Windows 7 . . .
- x86 (32-bit) or x64 ? X64
- the original installed OS on the system? Windows 7 X64 Ultimate
- an OEM or full retail version? Full retail

- What is the age of system (hardware)? Everything was bought in August 2011 expect my 500gb hd may be few years old. I'm not sure.

- What is the age of OS installation (have you re-installed the OS?) It was installed in August 2011.


Here's what WhoCrashed says about my BSOD:

crash dump file: C:\Windows\Minidump\010812-15818-01.dmp
uptime: 06:12:51
This was probably caused by the following module: ntoskrnl.exe (nt+0x7CC40)
Bugcheck code: 0xF4 (0x3, 0xFFFFFA8004CE0B30, 0xFFFFFA8004CE0E10, 0xFFFFF800031818B0)
Error: CRITICAL_OBJECT_TERMINATION
file path: C:\Windows\system32\ntoskrnl.exe
product: Microsoft® Windows® Operating System
company: Microsoft Corporation
description: NT Kernel & System
Bug check description: This indicates that a process or thread crucial to system operation has unexpectedly exited or been terminated.
This appears to be a typical software driver bug and is not likely to be caused by a hardware problem.
The crash took place in the Windows kernel. Possibly this problem is caused by another driver which cannot be identified at this time.

 

[writhziden]

First thing to check is whether you are overclocking your graphics card without being aware of it. Check Catalyst Control Center or Vision Engine Control Center and go through each feature to make sure you have no overclocking occurring.

 

[writhziden]

If the above method does not resolve your problem follow the next steps. Report back after each step whether it resolves your problem or if tests find problems with your system.

1. Please remove Daemon Tools, as it uses a driver called dtsoftbus01.sys that is known to cause BSODs.
   
   I prefer TotalMounter as my CD/DVD virtualization software as it allows me to burn images to a virtual CD/DVD if I just want an ISO file instead of a disc, and it is free.
   
   Many use MagicISO - Convert BIN to ISO, Create, Edit, Burn, Extract ISO file, ISO/BIN converter/extractor/editor as well, which is also free.
   
   
2. If you continue to have crashes after uninstalling Daemon Tools, run hard disk diagnostics such as CrystalDiskInfo - Software - Crystal Dew World or those provided at HD Diagnostic
   
   
3. If the hard disks come up clean, run http://www.sevenforums.com/tutorials/433-disk-check.html with both boxes checked for all drives.
   
   
4. If the hard disk checks do not resolve crashes, run http://www.sevenforums.com/tutorials/1538-sfc-scannow-command-system-file-checker.html You may have to run up to three times to fix all corruption.
   
   
5. Also, update all drivers possible by following the steps in http://www.sevenforums.com/tutorials/43216-installing-updating-drivers-7-a.html and checking Driver Reference for drivers and Drivers and Downloads for drivers' manufacturers.
   
   
6. Run the boot version of Memtest86+ paying close attention to Parts 2 and 3 of the tutorial. Also, in case Memtest86+ misses anything and comes up with no errors, run the extended version of the Windows Memory Diagnostics Tool for at least five passes. These you may want to run overnight since they take a long time to complete.
   
   
7. If all of the above have come back clean, and you still have crashes, it is likely an underlying driver that is causing compatibility issues. Run Driver Verifier as follows.
   
   a. Backup your system and user files
   b. Create a system restore point
   c. If you do not have a Windows 7 DVD, Create a system repair disc
   d. Run Driver Verifier​
   
   If Windows cannot start in normal mode with driver verifier running, start in safe mode. If it cannot start in safe mode or normal mode, restore the system restore point using http://www.sevenforums.com/tutorials/700-system-restore.html OPTION TWO.
   
   Thanks to zigzag3143 for contributing to the above steps in 7.
   If you are unable to start Windows with all drivers being verified or if the blue screen crashes fail to create .dmp files, run them in groups of 5 or 10 until you find a group that causes blue screen crashes and stores the blue screen .dmp files.

Remember to keep us updated as you proceed with each step. Good luck!

 

[Anzi]

I turned AMD Overdrive off in Vision Engine control and I've uninstalled Daemon Tools and installed TotalMounter.

 

[Anzi]

I've done 1. 2. and 3. I haven't got any BSODS after uninstalling Daemon Tools but my windows has frozen up couple of times but I didn't get BSOD.

 

[writhziden]

I've done 1. 2. and 3. I haven't got any BSODS after uninstalling Daemon Tools but my windows has frozen up couple of times but I didn't get BSOD.

Alright, I will take a look at your files again and see if anything stands out that might be causing freezing... Unfortunately, I cannot translate Finnish... Two things you can do:

1. Check Event Viewer logs for reoccurring errors (Start Menu -> type "eventvwr" without quotes into the Search programs and files and hit enter -> Expand Custom Views -> Administrative Events). Search for the errors with Google and try to find a solution.
2. http://www.sevenforums.com/tutorial...ation-conflicts-performing-clean-startup.html.

 

[Anzi]

Got another bsod =(. I was surfing normally when suddently chrome froze and after few minutes BSOD.

I checked the Event Viewer but there weren't any reoccuring errors.

 

[writhziden]

Did disk check come up with any errors when you ran it before? You can find the logs with the steps in http://www.sevenforums.com/tutorials/96938-check-disk-chkdsk-read-event-viewer-log.html

If there were any errors, you will want to run it again until no errors exist.

 

[Anzi]

I checked the logs for any errors but none was found. Now I removed one of my 2gb memoryblocks to see if the BSODS are caused by 'em.

 

[writhziden]

I checked the logs for any errors but none was found. Now I removed one of my 2gb memoryblocks to see if the BSODS are caused by 'em.

Alright, run for a few days (or until another crash) and post back whether your system is stable or not after removing the module.

 

[Anzi]

Ok I did the SFC /scannow command twice and there were some errors which were fixed. I checked the error log and almost every error was caused by Internet Explorer or Media player.

 

[writhziden]

If you run sfc /scannow at this time, does it come back with no integrity violations?

 

[Anzi]

I did SFC /scannow four times yesterday. The first time there were errors which were fixed. The last three times there were some errors which couldn't be fixed. Today I did the scan twice and the first time there were errors which were fixed and the second time there were errors which couldn't be fixed.

By the way, I contacted a another Support here at the forums about my BSOD logs so he could check 'em because he speaks Finnish so he understands them.

 

[writhziden]

You will need to look at OPTION THREE of http://www.sevenforums.com/tutorials/1538-sfc-scannow-command-system-file-checker.html to determine which files need to be replaced manually and follow the tip there.

 

[Anzi]

I did as instucted here
A process or thread crucial to system operation has unexpectedly exited or been terminated.

So I opened my PC and changed my SSD to SATA 1 from SATA 3 and 500gb hd to SATA 2 from SATA 1.

I also put my other 2gb RAM block back.

 

[writhziden]

Did the steps in that link make the system stable?

 

[Anzi]

No =( Got another BSOD when I tried to shutdown my PC. This time it's another BSOD. "Invalid kernel handle" 0x93

 

[Anzi]

According to this INVALID_KERNEL_HANDLE
I have a faulty driver which is causing this error. Should I use some progam like Driver Genius to check for new drivers or what?

 

[writhziden]

Loading Dump File [C:\Users\Mike\Downloads\BSODDmpFiles\Anzi\Windows_NT6_BSOD_jcgriff2\011812-15756-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available

Symbol search path is: SRV*c:\users\mike\documents\symbols*http://msdl.microsoft.com/download/symbols
Executable search path is: 
Windows 7 Kernel Version 7601 (Service Pack 1) MP (4 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 7601.17640.amd64fre.win7sp1_gdr.110622-1506
Machine Name:
Kernel base = 0xfffff800`0300f000 PsLoadedModuleList = 0xfffff800`03254670
Debug session time: Wed Jan 18 10:47:01.478 2012 (UTC - 7:00)
System Uptime: 0 days 2:34:27.649
Loading Kernel Symbols
...............................................................
................................................................
.........................................
Loading User Symbols
Loading unloaded module list
......................................
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck 93, {554, fffff8a000001940, fffff8a0016ee550, 1}

Unable to load image avgntflt.sys, Win32 error 0n2
*** WARNING: Unable to verify timestamp for avgntflt.sys
*** ERROR: Module load completed but symbols could not be loaded for avgntflt.sys
Probably caused by : avgntflt.sys ( avgntflt+804b )

Followup: MachineOwner
---------

2: kd> !analyze -v
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

INVALID_KERNEL_HANDLE (93)
This message occurs if kernel code (server, redirector, other driver, etc.)
attempts to close a handle that is not a valid handle.
Arguments:
Arg1: 0000000000000554, The handle that NtClose was called with.
Arg2: fffff8a000001940, 
Arg3: fffff8a0016ee550
Arg4: 0000000000000001

Debugging Details:
------------------


CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT

BUGCHECK_STR:  0x93

PROCESS_NAME:  avguard.exe

CURRENT_IRQL:  0

LAST_CONTROL_TRANSFER:  from fffff800032e33b3 to fffff8000308bc40

STACK_TEXT:  
fffff880`097e83e8 fffff800`032e33b3 : 00000000`00000093 00000000`00000554 fffff8a0`00001940 fffff8a0`016ee550 : nt!KeBugCheckEx
fffff880`097e83f0 fffff800`0336a8ca : 00000000`00000000 00000000`00000000 fffffa80`046129f0 00000000`00000000 : nt! ?? ::NNGAKEGL::`string'+0x21481
fffff880`097e84c0 fffff800`0308aed3 : ffffffff`80000554 fffffa80`05660060 fffff880`097e8808 00000000`00000008 : nt!NtSetInformationFile+0x188
fffff880`097e85e0 fffff800`03087470 : fffff800`03519792 00000000`00000000 fffff800`03148803 fffffa80`03967088 : nt!KiSystemServiceCopyEnd+0x13
fffff880`097e87e8 fffff800`03519792 : 00000000`00000000 fffff800`03148803 fffffa80`03967088 fffff880`00000009 : nt!KiServiceLinkage
fffff880`097e87f0 fffff880`06fc104b : ffffffff`80000554 00000000`00000010 ffffffff`80000554 00000000`ffffffff : nt!VfZwSetInformationFile+0x62
fffff880`097e8830 ffffffff`80000554 : 00000000`00000010 ffffffff`80000554 00000000`ffffffff fffffa80`0000000e : avgntflt+0x804b
fffff880`097e8838 00000000`00000010 : ffffffff`80000554 00000000`ffffffff fffffa80`0000000e fffff800`0352b293 : 0xffffffff`80000554
fffff880`097e8840 ffffffff`80000554 : 00000000`ffffffff fffffa80`0000000e fffff800`0352b293 00000000`00004098 : 0x10
fffff880`097e8848 00000000`ffffffff : fffffa80`0000000e fffff800`0352b293 00000000`00004098 00000000`00000001 : 0xffffffff`80000554
fffff880`097e8850 fffffa80`0000000e : fffff800`0352b293 00000000`00004098 00000000`00000001 00000000`00000000 : 0xffffffff
fffff880`097e8858 fffff800`0352b293 : 00000000`00004098 00000000`00000001 00000000`00000000 00000000`00000001 : 0xfffffa80`0000000e
fffff880`097e8860 fffff880`06fc077c : fffff980`29f60ff0 00000000`00000010 00000000`00004098 fffff980`2bc0aee0 : nt!VerifierKeLeaveCriticalRegion+0xc3
fffff880`097e88a0 fffff980`29f60ff0 : 00000000`00000010 00000000`00004098 fffff980`2bc0aee0 ffffffff`80000554 : avgntflt+0x777c
fffff880`097e88a8 00000000`00000010 : 00000000`00004098 fffff980`2bc0aee0 ffffffff`80000554 00000000`00004098 : 0xfffff980`29f60ff0
fffff880`097e88b0 00000000`00004098 : fffff980`2bc0aee0 ffffffff`80000554 00000000`00004098 00000000`caba0094 : 0x10
fffff880`097e88b8 fffff980`2bc0aee0 : ffffffff`80000554 00000000`00004098 00000000`caba0094 fffff880`06fc123e : 0x4098
fffff880`097e88c0 ffffffff`80000554 : 00000000`00004098 00000000`caba0094 fffff880`06fc123e ffffffff`80000554 : 0xfffff980`2bc0aee0
fffff880`097e88c8 00000000`00004098 : 00000000`caba0094 fffff880`06fc123e ffffffff`80000554 00000000`00000000 : 0xffffffff`80000554
fffff880`097e88d0 00000000`caba0094 : fffff880`06fc123e ffffffff`80000554 00000000`00000000 fffff980`27864ff0 : 0x4098
fffff880`097e88d8 fffff880`06fc123e : ffffffff`80000554 00000000`00000000 fffff980`27864ff0 00000000`00000000 : 0xcaba0094
fffff880`097e88e0 ffffffff`80000554 : 00000000`00000000 fffff980`27864ff0 00000000`00000000 fffff980`2bc0af18 : avgntflt+0x823e
fffff880`097e88e8 00000000`00000000 : fffff980`27864ff0 00000000`00000000 fffff980`2bc0af18 00000000`00000000 : 0xffffffff`80000554


STACK_COMMAND:  kb

FOLLOWUP_IP: 
avgntflt+804b
fffff880`06fc104b ??              ???

SYMBOL_STACK_INDEX:  6

SYMBOL_NAME:  avgntflt+804b

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: avgntflt

IMAGE_NAME:  avgntflt.sys

DEBUG_FLR_IMAGE_TIMESTAMP:  4ddfb624

FAILURE_BUCKET_ID:  X64_0x93_avgntflt+804b

BUCKET_ID:  X64_0x93_avgntflt+804b

Followup: MachineOwner
---------

Caused by Avira. Remove Avira using Uninstall a program in Control Panel, clean up after with Avira registry cleaner, and replace with Microsoft Security Essentials - Free Antivirus for Windows to run with Windows firewall turned on.

 

[Anzi]

Ah you were slightly faster than me! I just debugged my both dumps. The first one is caused by csrss.exe and this newer one is caused by avira like you said and I've already uninstalled Avira and installed Security Essentials.

I googled that csrss.exe and seems like it's part of Microsofts kernel so dead end there. I really was hopin that the error would have been some program.

Could Avira be the reason for my first BSODS?