ntoskrnl.exe BSOD randomly

[x BlueRobot]

tcpip.sys is usually related to network drivers, are they updated?

 

[moieu]

As far as I know, yes. The realtek one right? I remember updating that. I can do it again just to be sure if you'd like.

EDIT: I reinstalled it, turns out there was a new driver for it that I must've not installed. That may fix those blue screens. I'm going to run driver verifier again and see if any drivers are still causing bsods.

EDIT2: Alright just did driver verifier, nvlddmkm.sys was causing a blue screen, which is my Nvidia card I think. I'm going to reinstall those drivers then run it again to see if it's fixed.

EDIT3: Didn't fix it, I did a clean reinstall but still getting the errors, bsods are attatched.

EDIT4: Just got another bsod, this time it said something about ntfs.sys, attaching the dump file.

EDIT5: Ran an sfc /scannow about 3 times, they all said there were problems they couldn't fix. Attaching the text file.

 

[x BlueRobot]

2013-12-01 01:31:59, Info                  CSI    00000280 [SR] Cannot repair member file [l:22{11}]"C_28593.NLS" of Microsoft-Windows-International-CodePage-28593, Version = 6.1.7600.16385, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, file is missing
2013-12-01 01:31:59, Info                  CSI    00000281 [SR] Cannot repair member file [l:22{11}]"C_28593.NLS" of Microsoft-Windows-International-CodePage-28593, Version = 6.1.7600.16385, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, file is missing
2013-12-01 01:31:59, Info                  CSI    00000282 [SR] This component was referenced by [l:202{101}]"Microsoft-Windows-Foundation-Package~31bf3856ad364e35~amd64~~6.1.7601.17514.WindowsFoundationDelivery"

2013-12-01 01:33:12, Info                  CSI    00000300 [SR] Cannot repair member file [l:22{11}]"C_28593.NLS" of Microsoft-Windows-International-CodePage-28593, Version = 6.1.7600.16385, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, file is missing
2013-12-01 01:33:12, Info                  CSI    00000302 [SR] Repairing corrupted file [ml:520{260},l:72{36}]"\??\C:\Windows\Web\Wallpaper\Windows"\[l:16{8}]"img0.jpg" from store
2013-12-01 01:33:12, Info                  CSI    00000304 [SR] Cannot repair member file [l:22{11}]"C_28593.NLS" of Microsoft-Windows-International-CodePage-28593, Version = 6.1.7600.16385, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, file is missing
2013-12-01 01:33:12, Info                  CSI    00000305 [SR] This component was referenced by [l:202{101}]"Microsoft-Windows-Foundation-Package~31bf3856ad364e35~amd64~~6.1.7601.17514.WindowsFoundationDelivery"
2013-12-01 01:33:12, Info                  CSI    00000307 [SR] Repair complete
2013-12-01 01:33:12, Info                  CSI    00000308 [SR] Committing transaction
2013-12-01 01:33:12, Info                  CSI    0000030c [SR] Verify and Repair Transaction completed. All files and registry keys listed in this transaction  have been successfully repaired

2013-12-01 01:37:47, Info                  CSI    00000582 [SR] Cannot repair member file [l:22{11}]"C_28593.NLS" of Microsoft-Windows-International-CodePage-28593, Version = 6.1.7600.16385, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, file is missing
2013-12-01 01:37:47, Info                  CSI    00000583 [SR] Cannot repair member file [l:22{11}]"C_28593.NLS" of Microsoft-Windows-International-CodePage-28593, Version = 6.1.7600.16385, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, file is missing
2013-12-01 01:37:47, Info                  CSI    00000584 [SR] This component was referenced by [l:202{101}]"Microsoft-Windows-Foundation-Package~31bf3856ad364e35~amd64~~6.1.7601.17514.WindowsFoundationDelivery"

2013-12-01 01:38:14, Info                  CSI    00000602 [SR] Cannot repair member file [l:22{11}]"C_28593.NLS" of Microsoft-Windows-International-CodePage-28593, Version = 6.1.7600.16385, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, file is missing
2013-12-01 01:38:14, Info                  CSI    00000603 [SR] Cannot repair member file [l:22{11}]"C_28593.NLS" of Microsoft-Windows-International-CodePage-28593, Version = 6.1.7600.16385, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, file is missing
2013-12-01 01:38:14, Info                  CSI    00000604 [SR] This component was referenced by [l:202{101}]"Microsoft-Windows-Foundation-Package~31bf3856ad364e35~amd64~~6.1.7601.17514.WindowsFoundationDelivery"
2013-12-01 01:38:14, Info                  CSI    00000606 [SR] Repair complete
2013-12-01 01:38:14, Info                  CSI    00000607 [SR] Committing transaction
2013-12-01 01:38:14, Info                  CSI    0000060b [SR] Verify and Repair Transaction completed. All files and registry keys listed in this transaction  have been successfully repaired

2013-12-01 01:49:21, Info                  CSI    00000881 [SR] Cannot repair member file [l:22{11}]"C_28593.NLS" of Microsoft-Windows-International-CodePage-28593, Version = 6.1.7600.16385, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, file is missing
2013-12-01 01:49:21, Info                  CSI    00000882 [SR] Cannot repair member file [l:22{11}]"C_28593.NLS" of Microsoft-Windows-International-CodePage-28593, Version = 6.1.7600.16385, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, file is missing
2013-12-01 01:49:21, Info                  CSI    00000883 [SR] This component was referenced by [l:202{101}]"Microsoft-Windows-Foundation-Package~31bf3856ad364e35~amd64~~6.1.7601.17514.WindowsFoundationDelivery"

2013-12-01 01:49:48, Info                  CSI    00000901 [SR] Cannot repair member file [l:22{11}]"C_28593.NLS" of Microsoft-Windows-International-CodePage-28593, Version = 6.1.7600.16385, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, file is missing
2013-12-01 01:49:48, Info                  CSI    00000902 [SR] Cannot repair member file [l:22{11}]"C_28593.NLS" of Microsoft-Windows-International-CodePage-28593, Version = 6.1.7600.16385, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, file is missing
2013-12-01 01:49:48, Info                  CSI    00000903 [SR] This component was referenced by [l:202{101}]"Microsoft-Windows-Foundation-Package~31bf3856ad364e35~amd64~~6.1.7601.17514.WindowsFoundationDelivery"
2013-12-01 01:49:48, Info                  CSI    00000905 [SR] Repair complete
2013-12-01 01:49:48, Info                  CSI    00000906 [SR] Committing transaction
2013-12-01 01:49:48, Info                  CSI    0000090a [SR] Verify and Repair Transaction completed. All files and registry keys listed in this transaction  have been successfully repaired

I've listed all the errors from the .CBS log, I'll PM one of the Windows Update experts to create a repair script for you.

 

[x BlueRobot]

Run some hard-drive diagnostics and follow these steps:

• Hard Drive Diagnostic Procedure

Find your hard-drive manufacturer and run their tests.

Additional Tests:

• SeaTools for DOS | Seagate
• CrystalDiskInfo - Software - Crystal Dew World

Post a screenshot of Crystal Disk Info summary:

• http://www.sevenforums.com/tutorials/9733-screenshots-files-upload-post-seven-forums.html

If you have an SSD, make sure the following are up to date:

• SSD firmware
• BIOS Version
• Chipset Drivers
• Hard disk controller drivers/SATA drivers
• If you have a Marvell IDE ATA/ATAPI device, make sure the drivers are up to date from the Intel site or Marvell site and not from your motherboard/vendor support site.

Check for any file system errors and bad sectors using Option #2 of:

• http://www.sevenforums.com/tutorials/433-disk-check.html

Use this command with Disk Check:

chkdsk C: /f /r

Note: Do not run the hard drive tests for any SSDs, visit the SSD support page for the appropriate testing tools.

 

[moieu]

Alright, here is a screenshot, I'm going to do the chkdsk, and then tomorrow scan the hdd tomorrow.

 

[x BlueRobot]

Your hard drive seems to a little warm for a desktop in my opinion, my HDD temperature 30*C at the moment, and I have a laptop with the smallest side vent possible.

 

[moieu]

Ah alright, well haven't had any bsods for the past two days.

 

[moieu]

Another blue screen.

 

[x BlueRobot]

[COLOR=Red]BugCheck A[/COLOR], {fffff6800018e9e0, 0, 0, fffff80002a525d7}

Probably caused by : [COLOR=Red]memory_corruption[/COLOR] ( nt!MiDeleteAddressesInWorkingSet+11b )

3: kd> knL
 # Child-SP          RetAddr           Call Site
00 fffff880`08c11ec8 fffff800`02a82169 nt!KeBugCheckEx
01 fffff880`08c11ed0 fffff800`02a80de0 nt!KiBugCheckDispatch+0x69
02 fffff880`08c12010 fffff800`02a525d7 nt!KiPageFault+0x260
03 fffff880`08c121a0 fffff800`02a53892 nt!MiDeleteAddressesInWorkingSet+0x11b
04 fffff880`08c12a50 fffff800`02d5715a nt!MmCleanProcessAddressSpace+0x96
05 fffff880`08c12aa0 fffff800`02d3b6b8 nt!PspExitThread+0x56a
06 fffff880`08c12ba0 fffff800`02a81e53 nt!NtTerminateProcess+0x138
07 fffff880`08c12c20 00000000`778d157a nt!KiSystemServiceCopyEnd+0x13
08 00000000`0042f8f8 00000000`00000000 0x778d157a

The call stack doesn't reveal much information, apart from general clean up routines when terminating a process and it's threads.

I've sent a message to someone should hopefully be able to sort that file corruption issue.

How were the HDD tests?

 

[NoelDP]

(Sorry about the delay)

I've uploaded a file - miuaa.zip - to my SkyDrive at Noel's SkyDrive
Please download and save it.
Right-click on the saved file and select Extract all...
Change the target to C:\ and click on Extract
Close all windows (it would be a good idea to print these instructions!)
Now reboot to the Repair Environment - as soon as the machine restarts, start tapping F8 - this should bring up the Advanced Boot Menu, at the top of which should be the option 'Repair my Computer'
Pick that
You'll have to log in with your username and password.
Pick the option to use a Command Prompt
At the prompt type
DIR C:\miuaa
hit the enter key - if you get a 'Not Found' error try
DIR D:\miuaa
or
DIR E:\miuaa

The drive letter in use when you find the folder will need to be substituted (for<drive>) into the following command...

XCOPY <drive>:\miuaa <drive>:\windows\winsxs /y /i /s /v /h

(e.g. XCOPY P:\wfire P:\windows\winsxs /y /i /s /v /h )

run the command (it should take almost no time)and when the prompt returns, type
EXIT
and hit the Enter key to exit Command Prompt - reboot to Normal Mode Windows.
Now run SFC /SCANNOW in an Elevated Command Prompt
then reboot and upload the new CBS.log file to your reply
Also run a new MGADiag report, and post the result.

 

[moieu]

Did the chkdsk, and the short and long tests for Seagate tools. All of them passed.

 

[moieu]

Another bsod.

 

[ICIT2LOL]

Just a suggestion M try this http://www.sevenforums.com/tutorials/86648-psu-jump-start.html

then reseat every RAM stick GPU and leads you can.
Not having read all the way through have you done a memtest? If not
http://www.sevenforums.com/tutorials/105647-ram-test-memtest86.html
you will need to make a bootable disk set the BIOS to boot from the optical and let run for at least 8 passes unless errors come up straight away.

The volts on the PSU leads etc should be within 0.5v of the stated 12v 3.3v and 5v when you do the PSU check

Blue Robot mentioned temps on the HDD what are the temps on the CPU and GPU?? use Speccy
Speccy - Download

 

[moieu]

Here is the speccy info. I already ran a memtest with full passes, I just reseated everything as well. But I can't do the psu test at the moment. Also I ran driver verifier, and this is the blue screen I got. And after getting the blue screen, I unchecked that driver and re ran driver verifier, and I got no blue screens. I know this is nvidia, and I have the latest drivers and I've already tried reinstalling them. So I have no idea how to fix it.

 

[ICIT2LOL]

Well will await the PSU test Moieu they are more O f a problem than a lot of people think.

Abit more info now I am on my main machine Voltage Rails - Power Supply 101: A Reference Of Specifications

 

[moieu]

New bsod

 

[ICIT2LOL]

Mate I cannot advise nay more than I did last post just what PSU do you have in the machine?

 

[moieu]

I think I stated it before in the previous post..its a corsair cx something.

 

[ICIT2LOL]

Yep about half way back a 500 I think maybe on the borderline for what you are using. You need to calculate the power required for the system using one of the calculating guides try this
eXtreme Power Supply Calculator

see what it comes up with for a total and remember to concentrate on the 12v requirements. Plus I still think you should test that PSU.

 

[moieu]

Just used that website you showed me, it says my recommended psu wattage is 391.