Random BSOD ntoskrnl.exe or ntkrnlmp.exe

Hello

Recently I have been experiencing random BSOD. I have tried uninstalling recently installed software and running diagnostic on hard drive and memory with no luck.  I have the mini dump and memory dump but when I open using WinDbg it does not give me much information. I think there may be an error with my set up.

Symbol search path is: *** Invalid ***

Unable to load image \SystemRoot\system32\ntoskrnl.exe, Win32 error 0n2

I have attached the dumps here. If anyone can fix my problem I will be very grateful.  

dumps can be downloaded here

mini dump: https://onedrive.live.com/redir?resid=6E2A6FF7DD2216AD%21172 

memory dump: https://onedrive.live.com/redir?resid=6E2A6FF7DD2216AD%21173

Many Thanks

May 11th, 2015 1:27pm

These crashes were related to memory corruption (probably caused by a driver). 

Please run these two tests to verify your memory and find which driver is causing the problem.  Please run verifier first.  You do not need to run memtest yet unless you want to.


If you are over-clocking anything reset to default before running these tests. In other words STOP!!!  If you do not know what this means you probably are not

1-Driver verifier (for complete directions see our wiki here)
2-Memtest. (You can read more about running memtest here)


Free Windows Admin Tool Kit Click here and download it now
May 11th, 2015 1:32pm

I am not over-clocking anything. 

I set up Driver verifier and got stuck in a crash loop (I got BSOD as windows started loading)

here is the dmp file: https://onedrive.live.com/redir?resid=6E2A6FF7DD2216AD%21174

Her is MSinfo: https://onedrive.live.com/redir?resid=6E2A6FF7DD2216AD%21175

Do you need any more information from me?

Thanks

May 11th, 2015 2:08pm

Aw

These were Related to the uvhid.sys HID mini driver for Unified Virtual HID from Microsoft Corp.  Since it is part of the OS I would start by running a system file check & DISM

Please run a system file check (SFC) & DISM if you are on win 8 or higher
All instructions are in our Wiki article below...
Should you have any questions please ask us.

System file check (SFC) Scan and Repair System Files

Free Windows Admin Tool Kit Click here and download it now
May 11th, 2015 9:46pm

Hi, Thank you for your help.

I have run a system file check as instructed. Details below.

Microsoft Windows [Version 6.1.7601]
Copyright (c) 2009 Microsoft Corporation.  All rights reserved.

C:\Windows\system32>sfc /scannow

Beginning system scan.  This process will take some time.

Beginning verification phase of system scan.
Verification 100% complete.

Windows Resource Protection did not find any integrity violations.
May 12th, 2015 6:37am

AW

What HID (human interface device) do you have?  These are things like game controllers, fingerprint readers, etc

Free Windows Admin Tool Kit Click here and download it now
May 12th, 2015 8:36am

Hi. 

Apart from mouse (Gigabyte  M6800) and keyboard (microsoft wired 600) I have a Xbox 360 Wireless Gaming Receiver and wired Xbox 360 controller. 

That is all.

I just had another BSOD it normally happens 1-2 times a day when I do an action (click mouse or keyboard button)

Thanks



May 12th, 2015 5:49pm

Hi,

The 0xC9 bug check only occur when Driver Verifier has been instructed to monitor one or more drivers. If you did not intend to use Driver Verifier, you should deactivate it. You might consider removing the driver which caused this problem as well.

For information, please refer to this article:

Bug Check 0xC9: DRIVER_VERIFIER_IOMANAGER_VIOLATION

https://msdn.microsoft.com/en-us/library/windows/hardware/ff560205(v=vs.85).aspx

Free Windows Admin Tool Kit Click here and download it now
May 15th, 2015 3:59am

Uninstall BitDefender and install Microsoft Security Essentials.

Uninstall Tools for Bitdefender Products.

http://www.bitdefender.com/uninstall/

Microsoft Security Essentials

http://windows.microsoft.com/en-US/windows/security-essentials-download

WARNING: Whitespace at end of path element
Symbol search path is: SRV*c:\symbols*http://msdl.microsoft.com/download/symbols 
Executable search path is: 
Windows 7 Kernel Version 7601 (Service Pack 1) MP (8 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 7601.18798.amd64fre.win7sp1_gdr.150316-1654
Machine Name:
Kernel base = 0xfffff800`03457000 PsLoadedModuleList = 0xfffff800`0369c890
Debug session time: Mon May 11 11:16:48.101 2015 (UTC - 4:00)
System Uptime: 0 days 0:14:35.973
Loading Kernel Symbols
...............................................................
................................................................
..........................................
Loading User Symbols
Loading unloaded module list
.......
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck 4A, {77b7dc4a, 2, 0, fffff88009dc8b60}

Probably caused by : ntkrnlmp.exe ( nt!KiSystemServiceExit+245 )

Followup: MachineOwner
---------

6: kd> !analyze -v
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

IRQL_GT_ZERO_AT_SYSTEM_SERVICE (4a)
Returning to usermode from a system call at an IRQL > PASSIVE_LEVEL.
Arguments:
Arg1: 0000000077b7dc4a, Address of system function (system call routine)
Arg2: 0000000000000002, Current IRQL
Arg3: 0000000000000000, 0
Arg4: fffff88009dc8b60, 0

Debugging Details:
------------------


PROCESS_NAME:  vsserv.exe

BUGCHECK_STR:  RAISED_IRQL_FAULT

FAULTING_IP: 
+3032656230343732
00000000`77b7dc4a ??              ???

CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT

CURRENT_IRQL:  2

LAST_CONTROL_TRANSFER:  from fffff800034c8fe9 to fffff800034c9a40

STACK_TEXT:  
fffff880`09dc8928 fffff800`034c8fe9 : 00000000`0000004a 00000000`77b7dc4a 00000000`00000002 00000000`00000000 : nt!KeBugCheckEx
fffff880`09dc8930 fffff800`034c8f20 : 00000000`00000c7c fffff880`09dc8b60 00000000`00000000 fffff800`037b36db : nt!KiBugCheckDispatch+0x69
fffff880`09dc8a70 00000000`77b7dc4a : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSystemServiceExit+0x245
00000000`2647f538 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x77b7dc4a


STACK_COMMAND:  kb

FOLLOWUP_IP: 
nt!KiSystemServiceExit+245
fffff800`034c8f20 4883ec50        sub     rsp,50h

SYMBOL_STACK_INDEX:  2

SYMBOL_NAME:  nt!KiSystemServiceExit+245

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: nt

IMAGE_NAME:  ntkrnlmp.exe

DEBUG_FLR_IMAGE_TIMESTAMP:  5507a73c

FAILURE_BUCKET_ID:  X64_RAISED_IRQL_FAULT_vsserv.exe_nt!KiSystemServiceExit+245

BUCKET_ID:  X64_RAISED_IRQL_FAULT_vsserv.exe_nt!KiSystemServiceExit+245

Followup: MachineOwner
---------

What is the vsserv.exe process?

http://www.google.com/url?sa=t&rct=j&q=&esrc=s&source=web&cd=1&cad=rja&uact=8&sqi=2&ved=0CB4QFjAA&url=http%3A%2F%2Fwww.bitdefender.com%2Fsupport%2Fwhat-is-the-vsserv-exe-process-1116.html&ei=vJJWVafNK_eUsQT9o4DABA&usg=AFQjCNFqaokrN7GLIyMFEvIDdw8HKtfKXQ&bvm=bv.93564037,d.eXY

May 15th, 2015 8:46pm

This topic is archived. No further replies will be accepted.

Other recent topics Other recent topics