Random BSODs on custom built PC

[nikhilnh]

Hi All,
Last year I upgraded my PC. I upgraded everything except the case, optical drives and the graphics card. After the upgrade I did a clean install of the OS. Ever since the upgrade I have been getting random BSODs. I don't get them on a daily basis, however there are about 6-8 BSODs per month. About 50-70 % of these occurs when I try to wake up the PC from the sleep state. The rest are random, they occur while browsing the web or while working on MS office documents. I am not much of a gamer. However, I do play some games once in a while for about 1 hr a day. I haven't received any blue screens while playing the games. I have been monitoring the CPU temperature using Hardware Monitor program. The idle CPU temperature is around 35 C and the temp when CPU is loaded reachs about 50 C.

The last couple of BSOD's were related to DirectX ( dxgkrnl.sys / dxgmms1.sys). Hence I upgraded my graphics card from the old Nvidia GTS 250 to GTX 750 hoping that graphics card upgrade / change would stop the blue screens. However after the upgrade I got two more BSOD's (DRIVER_POWER_STATE_FAILURE) both related to iusb3hub.sys. I have upgraded the Intel USB3 driver from the Gigabyte website and I have also upgraded the motherboard BIOS. I have checked the RAM by running MEMTEST for 12+ hrs and windows memory diagnostic tools. No problem was reported by either of these utilities.

I have tried to troubleshoot as much as possible, however I haven't found a solution. This issue seems to be beyond my understanding. Any help in finding the cause of these BSOD's will be greatly appreciated.

Thanks,
Nikhil

 

[nikhilnh]

Can anybody help me with this ?

 

[Shimshom]

Was looking at what services you have running and there are many non Windows services you can stop and either disable or use in manual mode. For example you're using Comodo yet still have Window built-in firewall running and you should disable it by going start, run, type services.msc and scroll down to Windows Firewall double click it stop the service and disable it. Also while I'm making a least what I think you should disable or set as manual I also noticed you have the Nvidia services running for your card but also the following service:

SERVICE_NAME: igfxCUIService1.0.0.0
DISPLAY_NAME: Intel(R) HD Graphics Control Panel Service
TYPE : 10 WIN32_OWN_PROCESS
STATE : 4 RUNNING

Which you should put on manual and see if it helps. I'll try to suggest later what else you don't really need running such as the Adobe and Google update services unless you're using whatever that needs it

 

[nikhilnh]

Was looking at what services you have running and there are many non Windows services you can stop and either disable or use in manual mode. For example you're using Comodo yet still have Window built-in firewall running and you should disable it by going start, run, type services.msc and scroll down to Windows Firewall double click it stop the service and disable it. Also while I'm making a least what I think you should disable or set as manual I also noticed you have the Nvidia services running for your card but also the following service:

SERVICE_NAME: igfxCUIService1.0.0.0
DISPLAY_NAME: Intel(R) HD Graphics Control Panel Service
TYPE : 10 WIN32_OWN_PROCESS
STATE : 4 RUNNING

Which you should put on manual and see if it helps. I'll try to suggest later what else you don't really need running such as the Adobe and Google update services unless you're using whatever that needs it

Thanks for the tip. I'll disable the service for Intel Graphics , as I certainly don't need it. I have Windows firewall as that's the only firewall I have. I don't have Comodo firewall, I just have the Comodo antivirus.

BTW I just got another BSOD (SYSTEM_SERVICE_EXCEPTION (3b) ) , while trying to wake the computer up from sleep.

 

[derekimo]

You should run the tool and upload new info after getting new BSOD's.

You have no updates installed either, you should have a couple hundred.

Hotfix(s):                 N/A

It has been like that for almost a year, is there some reason you haven't installed any updates?

Product ID:                00426-066-2351656-86414
Original Install Date:     11/14/2013, 11:00:08 PM
System Boot Time:          11/6/2014, 6:14:04 PM
System Manufacturer:       Gigabyte Technology Co., Ltd.

You appear to have a retail product key so I doubt you have anything to worry about with activation or is there another problem?

 

[nikhilnh]

I guess you are talking about Windows updates. I do install them as and when I get the update notifications. It's strange that the updates don't show up. I have attached a screen shot showing the installed updates and they date back all the way up to 11/14/2013.

The other strange thing is , if I try to look at the update history, I get a message saying that I haven't tried to install any updates. However, when I click on Installed updates I see the updates installed.

 

[derekimo]

Yes, I was talking about windows updates.

That is strange, you obviously have multiple problems going on.

I'll see if some other eyes can shed some light on this, meanwhile run the tool again and upload the info like you did in the first post.

 

[nikhilnh]

Attached is the updated file obtained after running dmlogcolletor.exe. This has three additional BSOD's which occurred since I started the thread. All the 3 Blue screens occurred when I tried to wake the computer from sleep.

 

[derekimo]

Of the latest dumps, only one has any info on it,

One part is blaming Comodo,

Unable to load image \SystemRoot\system32\DRIVERS\cmdguard.sys, Win32 error 0n2
*** WARNING: Unable to verify timestamp for cmdguard.sys
*** ERROR: Module load completed but symbols could not be loaded for cmdguard.sys
 cmdguard+0x1f02

Try getting rid of that.

The other part is blaming the Intel storage driver,

Unable to load image \SystemRoot\system32\DRIVERS\iaStorA.sys, Win32 error 0n2
*** WARNING: Unable to verify timestamp for iaStorA.sys
*** ERROR: Module load completed but symbols could not be loaded for iaStorA.sys
 iaStorA+0x7bb2d

It's not that old,

Loaded symbol image file: iaStorA.sys
    Image path: \SystemRoot\system32\DRIVERS\iaStorA.sys
    Image name: iaStorA.sys
    Timestamp:        [COLOR="Red"]Thu Aug 01 18:39:52 2013[/COLOR] (51FB0DE8)
    CheckSum:         000AC609
    ImageSize:        002BA000
    Translations:     0000.04b0 0000.04e4 0409.04b0 0409.04e4

But it is a problematic driver, try removing it,

Remove Intel Rapid Storage Technology applications.

1. Uninstall it from Control Panel > Programs and Features.
2. Uninstall the driver from device manager:
- Right click on "my computer" icon and click "manage" on the context menu.
- In the "Computer Management" window that opens:
- Select "Device Manager" in the left pane, It will list all the existing devices.
- Expand "IDE ATA/ATAPI controllers" by clicking on the triangle in front of it.
- Select one Intel device item under it, right click, then uninstall.
- Repeat the process for all Intel items under "IDE ATA/ATAPI controllers"
3. Now restart the computer.
4. Once booted, Windows will auto configure the appropriate native system driver.

See how that works.

 

[nikhilnh]

Thanks Derek. I need to get another Anti-Virus software before I remove Comodo.

I'll remove Intel Storage driver. If I remove the Intel Rapid Storage driver, will Windows take care of it's functions ?

 

[derekimo]

We always suggest Microsoft Security Essentials - Microsoft Windows when an AV is being flagged.

Also,

Please perform the following:

1. Download and save this tool to your desktop:
http://go.microsoft.com/fwlink/?linkid=52012

2. Run the tool, and then click Copy - ignore any errors if they appear

3. Use CTRL+V to paste the unedited results of the tool here in your next reply.

 

[nikhilnh]

Here's the output from the diagnostic tool

Diagnostic Report (1.9.0027.0):
-----------------------------------------
Windows Validation Data-->

Validation Code: 0
Cached Online Validation Code: 0x0
Windows Product Key: *****-*****-8YQ4R-829JP-977M7
Windows Product Key Hash: tAYIsBkU4GeGfcWN5kqlwVhFIhc=
Windows Product ID: 00426-066-2351656-86414
Windows Product ID Type: 5
Windows License Type: Retail
Windows OS version: 6.1.7601.2.00010100.1.0.001
ID: {15C8A051-4FC7-4F81-9B48-F3A58BCDB73C}(3)
Is Admin: Yes
TestCab: 0x0
LegitcheckControl ActiveX: N/A, hr = 0x80070002
Signed By: N/A, hr = 0x80070002
Product Name: Windows 7 Ultimate
Architecture: 0x00000009
Build lab: 7601.win7sp1_gdr.140303-2144
TTS Error: 
Validation Diagnostic: 
Resolution Status: N/A

Vista WgaER Data-->
ThreatID(s): N/A, hr = 0x80070002
Version: N/A, hr = 0x80070002

Windows XP Notifications Data-->
Cached Result: N/A, hr = 0x80070002
File Exists: No
Version: N/A, hr = 0x80070002
WgaTray.exe Signed By: N/A, hr = 0x80070002
WgaLogon.dll Signed By: N/A, hr = 0x80070002

OGA Notifications Data-->
Cached Result: N/A, hr = 0x80070002
Version: N/A, hr = 0x80070002
OGAExec.exe Signed By: N/A, hr = 0x80070002
OGAAddin.dll Signed By: N/A, hr = 0x80070002

OGA Data-->
Office Status: 109 N/A
OGA Version: N/A, 0x80070002
Signed By: N/A, hr = 0x80070002
Office Diagnostics: 025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3

Browser Data-->
Proxy settings: N/A
User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)
Default Browser: J:\Program Files\firefox.exe
Download signed ActiveX controls: Prompt
Download unsigned ActiveX controls: Disabled
Run ActiveX controls and plug-ins: Allowed
Initialize and script ActiveX controls not marked as safe: Disabled
Allow scripting of Internet Explorer Webbrowser control: Disabled
Active scripting: Allowed
Script ActiveX controls marked as safe for scripting: Allowed

File Scan Data-->

Other data-->
Office Details: <GenuineResults><MachineData><UGUID>{15C8A051-4FC7-4F81-9B48-F3A58BCDB73C}</UGUID><Version>1.9.0027.0</Version><OS>6.1.7601.2.00010100.1.0.001</OS><Architecture>x64</Architecture><PKey>*****-*****-*****-*****-977M7</PKey><PID>00426-066-2351656-86414</PID><PIDType>5</PIDType><SID>S-1-5-21-3965402107-4252357544-2412418791</SID><SYSTEM><Manufacturer>Gigabyte Technology Co., Ltd.</Manufacturer><Model>Z87X-UD4H</Model></SYSTEM><BIOS><Manufacturer>American Megatrends Inc.</Manufacturer><Version>F8</Version><SMBIOSVersion major="2" minor="7"/><Date>20140120000000.000000+000</Date></BIOS><HWID>60973C07018400F4</HWID><UserLCID>0409</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>Eastern Standard Time(GMT-05:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM/><GANotification/></MachineData><Software><Office><Result>109</Result><Products/><Applications/></Office></Software></GenuineResults>  

Spsys.log Content: 0x80070002

Licensing Data-->
Software licensing service version: 6.1.7601.17514

Name: Windows(R) 7, Ultimate edition
Description: Windows Operating System - Windows(R) 7, RETAIL channel
Activation ID: a0cde89c-3304-4157-b61c-c8ad785d1fad
Application ID: 55c92734-d682-4d71-983e-d6ec3f16059f
Extended PID: 00426-00172-066-235165-00-1033-7601.0000-3332013
Installation ID: 005786032184378912110543357765365240321402608835234016
Processor Certificate URL: [URL]http://go.microsoft.com/fwlink/?LinkID=88338[/URL]
Machine Certificate URL: [URL]http://go.microsoft.com/fwlink/?LinkID=88339[/URL]
Use License URL: [URL]http://go.microsoft.com/fwlink/?LinkID=88341[/URL]
Product Key Certificate URL: [URL]http://go.microsoft.com/fwlink/?LinkID=88340[/URL]
Partial Product Key: 977M7
License Status: Licensed
Remaining Windows rearm count: 4
Trusted time: 11/11/2014 7:25:42 AM

Windows Activation Technologies-->
HrOffline: 0x00000000
HrOnline: 0x00000000
HealthStatus: 0x0000000000000000
Event Time Stamp: 8:14:2014 06:01
ActiveX: Registered, Version: 7.1.7600.16395
Admin Service: Registered, Version: 7.1.7600.16395
HealthStatus Bitmask Output:


HWID Data-->
HWID Hash Current: OAAAAAIAAwABAAIAAAADAAAAAgABAAEAHKKcdnCi8PbuFuj2XNlI3mDVxN7a417wFDF++BUVyPY=

OEM Activation 1.0 Data-->
N/A

OEM Activation 2.0 Data-->
BIOS valid for OA 2.0: yes, but no SLIC table
Windows marker version: N/A
OEMID and OEMTableID Consistent: N/A
BIOS Information: 
  ACPI Table Name    OEMID Value    OEMTableID Value
  APIC            ALASKA        A M I
  FACP            ALASKA        A M I
  HPET            ALASKA        A M I
  MCFG                    
  FPDT            ALASKA        A M I
  SSDT            PmRef        Cpu0Ist
  SSDT            PmRef        Cpu0Ist
  SSDT            PmRef        Cpu0Ist
  SSDT            PmRef        Cpu0Ist
  DMAR            INTEL         HSW 
  MATS            ALASKA        A M I

 

[NoelDP]

The installed Product Key is an MSDN-type Key - only valid as part of a subscription to one of the MS services.
Are/were you a subscriber? If not, then the install must be classed as counterfeit. Where did you get this product from?
As far as I can see, the Key hasn't cropped up anywhere else (yet).

 

[nikhilnh]

My brother has a subscription to MSDN and he gave me the PC, as he wasn't using it anymore. I upgraded the same PC last year.

I know the tool checks for the legitimacy of the Windows installation. If the installation was counterfeit, I wouldn't have pasted the output of the tool in the first place.

 

[NoelDP]

Technically it's not 'kosher' - but it's family, and the rules can stretch a little I think.
That removes on possible source of problems anyhow - the potential use of hacks to get around activation requirements/problems.
I'll back out now, and leave you to Derek's tender mercies

 

[nikhilnh]

We always suggest Microsoft Security Essentials - Microsoft Windows when an AV is being flagged.

Also,

Please perform the following:

1. Download and save this tool to your desktop:
http://go.microsoft.com/fwlink/?linkid=52012

2. Run the tool, and then click Copy - ignore any errors if they appear

3. Use CTRL+V to paste the unedited results of the tool here in your next reply.

I'll uninstall Comodo and Intel Storage Driver and let you know how it goes.

 

[nikhilnh]

Got another BSOD after uninstalling COMODO and Intel Storage driver. This time the offending driver seemed like Ntfs.sys. I have attached the update log files.

This time the BSOD happened while watching some online video using Firefox.

 

[Arc]

Hi nikhilnh.

Free up the startup. Windows does not need any other program to auto start with it, but the auto start programs often conflicts and causes various problems including BSODs.

1. Click on the Start button
2. Type “msconfig (without quotes), click the resulting link. It will open the System Configuration window.
3. Select the “Startup” tab.
4. Deselect all items other than the antivirus.
5. Apply > OK
6. Accept then restart.

Test your RAM modules for possible errors.

How to Test and Diagnose RAM Issues with Memtest86+
​

Run memtest86+ for at least 8 consecutive passes.

If it start showing errors/red lines, stop testing. A single error is enough to determine that something is going bad there.

Make it sure that your SSD is running with the latest firmware.

How to Upgrade Crucial SSD Firmware | StorageReview.com - Storage Reviews
​

Let us know the results.
_____________________________________________

BugCheck 24, {1904fb, fffff8800b93dac8, fffff8800b93d320, fffff880016b46c7}

Probably caused by : Ntfs.sys ( Ntfs!NtfsFindPrefixHashEntry+1fe )

Followup: MachineOwner
---------

 

[nikhilnh]

I ran Memtest86+ for 8 consecutive passes ( took about 20 hrs), didn't get an errors. I have also updated the SSD firmware & reduced the programs during startup. I'll update if I get any more BSOD's.

 

[nikhilnh]

Another BSOD (PAGE_FAULT_IN_NONPAGED_AREA) after slightly more than a week. This time I was using Chrome to browse the net. I have attached the updated log files.