Windows 10 BSOD with bugcheck 0xc8

[JupiterMoon]

This gives the IRQL_UNEXPECTED_VALUE which is usually caused by a driver. But I don't know which driver.

Data from Event:

Log Name: System
Source: Microsoft-Windows-Kernel-Power
Date: 6/21/2018 8:25:30 PM
Event ID: 41
Task Category: (63)
Level: Critical
Keywords: (70368744177664),(2)
User: SYSTEM
Computer: Zekrom
Description:
The system has rebooted without cleanly shutting down first. This error could be caused if the system stopped responding, crashed, or lost power unexpectedly.
Event Xml:
<Event xmlns="Link Removed">
<System>
<Provider Name="Microsoft-Windows-Kernel-Power" Guid="{331C3B3A-2005-44C2-AC5E-77220C37D6B4}" />
<EventID>41</EventID>
<Version>6</Version>
<Level>1</Level>
<Task>63</Task>
<Opcode>0</Opcode>
<Keywords>0x8000400000000002</Keywords>
<TimeCreated SystemTime="2018-06-22T00:25:30.175952600Z" />
<EventRecordID>2781</EventRecordID>
<Correlation />
<Execution ProcessID="4" ThreadID="8" />
<Channel>System</Channel>
<Computer>Zekrom</Computer>
<Security UserID="S-1-5-18" />
</System>
<EventData>
<Data Name="BugcheckCode">200</Data>
<Data Name="BugcheckParameter1">0x20002</Data>
<Data Name="BugcheckParameter2">0xfffff80f47aa1010</Data>
<Data Name="BugcheckParameter3">0xfffffe8143757460</Data>
<Data Name="BugcheckParameter4">0x0</Data>
<Data Name="SleepInProgress">0</Data>
<Data Name="PowerButtonTimestamp">0</Data>
<Data Name="BootAppStatus">0</Data>
<Data Name="Checkpoint">0</Data>
<Data Name="ConnectedStandbyInProgress">false</Data>
<Data Name="SystemSleepTransitionsToOn">3</Data>
<Data Name="CsEntryScenarioInstanceId">0</Data>
<Data Name="BugcheckInfoFromEFI">false</Data>
<Data Name="CheckpointStatus">0</Data>
</EventData>
</Event>

This event seems relevant too?

Log Name: System
Source: Microsoft-Windows-WER-SystemErrorReporting
Date: 6/21/2018 8:25:56 PM
Event ID: 1001
Task Category: None
Level: Error
Keywords: Classic
User: N/A
Computer: Zekrom
Description:
The computer has rebooted from a bugcheck. The bugcheck was: 0x000000c8 (0x0000000000020002, 0xfffff80f47aa1010, 0xfffffe8143757460, 0x0000000000000000). A dump was saved in: C:\WINDOWS\MEMORY.DMP. Report Id: 3892e736-e707-4598-ab2d-e69b721606b3.
Event Xml:
<Event xmlns="Link Removed">
<System>
<Provider Name="Microsoft-Windows-WER-SystemErrorReporting" Guid="{ABCE23E7-DE45-4366-8631-84FA6C525952}" EventSourceName="BugCheck" />
<EventID Qualifiers="16384">1001</EventID>
<Version>0</Version>
<Level>2</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2018-06-22T00:25:56.229714100Z" />
<EventRecordID>2829</EventRecordID>
<Correlation />
<Execution ProcessID="0" ThreadID="0" />
<Channel>System</Channel>
<Computer>Zekrom</Computer>
<Security />
</System>
<EventData>
<Data Name="param1">0x000000c8 (0x0000000000020002, 0xfffff80f47aa1010, 0xfffffe8143757460, 0x0000000000000000)</Data>
<Data Name="param2">C:\WINDOWS\MEMORY.DMP</Data>
<Data Name="param3">3892e736-e707-4598-ab2d-e69b721606b3</Data>
</EventData>
</Event>

But I could not find the Dump file on my disk... For some reason both times this has happened have been while accessing paypal and on the paypal login site.
Also, my computer sometimes uses all of its 16GB of RAM when I'm just browsing the internet and I was worried I may have a memory leak in one of my drivers or something? Could that be related? Thanks

 

[kemical]

Did you change the boot order via your bios so that usb is first?

You then use the recovery options to boot into safe mode.

Once in safe mode turn the verifier off.

 

[kemical]

I'll check back in an hour or so.

 

[JupiterMoon]

These are my options when booting from my flash drive, these or turning it off

 

[JupiterMoon]

Also I'm confused because I trying to learn more about the verifier, and it says it works while the user profile is loaded? Mine made me restart my computer, and it shows the windows loading screen and then a blue screen when a driver is detected?

 

[kemical]

You should see a heading for change start up settings but you don't have one.

Your definitely sure your booting from the usb as that looks like the generic recovery screen.

In any case try clicking on command prompt and then type:
bcdedit /set {default} safeboot minimal
Here's a guide to help
How to Force Windows To Restart in Safe Mode

Once or if you get back into safe mode turn the verifier off by following the guide I posted above.

 

[JupiterMoon]

yeah, I had two usb options and set them first. Actually the partition 1 may have been the one I had to use?
I managed to get the startup settings when it tried to fix the offending driver and failed, and am on my computer now
I found the log files, even though it was in C: not E: like the earlier window said. Also, the last edit time is four hours in the future?

 

[JupiterMoon]

hopefully this will help

 

[JupiterMoon]

I ended up updating my chipset drivers again because my MSI update tool said the ones from that link were out of date

 

[kemical]

*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck C4, {2000, fffff80b8fcb3679, 0, 6452644e}

*** WARNING: Unable to verify timestamp for ndisrfl.sys
*** ERROR: Module load completed but symbols could not be loaded for ndisrfl.sys
Probably caused by : ndisrfl.sys ( ndisrfl+3679 )

Followup:     MachineOwner

Heh,
same driver again.

You could try uninstalling it totally and see if windows has a better driver.

Also try testing your RAM as i saw something which may indicate yours is faulty.

Use the windows memory test:

• Click Start, type mdsched.exe in the Search box, and then press Enter.
• Choose whether to restart the computer and run the tool immediately or schedule the tool to run at the next restart.
• Windows Memory Diagnostics runs automatically after the computer restarts and performs a standard memory test automatically. If you want to perform fewer or more tests, press F1, use the Up and Down arrow keys to set the Test Mix as Basic, Standard, or Extended, and then press F10 to apply the desired settings and resume testing.
• When testing is completed, the computer restarts automatically. You’ll see the test results when you log on.

Run Diagnostics to Check Your System for Memory Problems

 

[JupiterMoon]

I looked at the driver and think I will just uninstall it, my device is a desktop and not a touchscreen.

Intel® Technology Access exposes the 2-in-1 sensor and display setting detection to the browser applications using web services. The 2-in-1 sensor determines the mode of a device (for example: tablet mode or clamshell mode). The Display settings detect and get the screen resolution and orientation values.

It also exposes the Microsoft Windows 8.x* COM sensors accelerometer, ambient light, compass, inclinometer & orientation.

I am about to start the memory problem checker now.

 

[JupiterMoon]

I went to uninstall it and I got a fatal error, I tried again and got the same error. Just an error, no BSOD but I need it gone because I don't have an applicable machine and it is causing problems... I don't know how to make sense of the logs though

 

[kemical]

Why send the dump file?

Did you bsod again?

As for the driver, I'd try installing the latest version but this time right click it and run as admin. As to why it's causing you so many issues is unclear and as I said earlier please run your memory tester.

Why send the Intel logs? Where did you get them from and when did they appear?

 

[JupiterMoon]

Oh, I didn't mean to send that sorry. I clicked it by accident and thought I pressed delete but did not.
They appeared when the uninstallation failed

 

[kemical]

No worries..

Any news on the memory test and installing said driver as admin?

 

[JupiterMoon]

I ran the memory tester on default settings, no issues were found. Should I run it again and change the settings? Or is it good, and my memory is fine?

 

[JupiterMoon]

Also the website that had been crashing (PayPal login) allowed me to log in and do stuff now without issues so it was Intel Technology Access! Awesome, thank you for all the help!!!

 

[kemical]

Your very welcome Jupiter and your memory sounds fine.

Tell me though, what did you do with the offending driver? Replace it, uninstall it or run as admin as I suggested above? (I only ask as it's helpful for others as well as myself )

 

[JupiterMoon]

I ended up uninstalling it, but only because I found the software package to be unnecessary. It's not intended for use with non-touchscreen desktops.
I would have ran it as an admin, but I decided I don't want the software. I consider it bloatware if I don't need it. Sorry for not following your recommendation, though.

 

[kemical]

Gotcha... Thanks for posting back and i hope all goes well with the machine.

Please post back if issues should arise again.