Windows 8 Windows 8 BSOD - ntoskrnl.exe error.

iJeax

New Member
Joined
Apr 13, 2013
Messages
2
Happens at random times. I ran the windows debugger and it says it's probably caused by ntoskrnl.exe. I followed the instructions and got everything that's needed for you guys to diagnose the problem. Looking forward to your helpful replies, thanks!
 

Attachments

Solution
Sorry for the delay in responding. There just aren't that many people who do BSOD analysis, so at times we get a bit overwhelmed!

Only 36 Windows Updates installed. Most systems have 47 - 57 or more. Please visit Windows Update and get ALL available updates (it may take several trips to get them all).

You have a D-Link DWA-130 Wireless N USB Adapter
Sorry for the delay in responding. There just aren't that many people who do BSOD analysis, so at times we get a bit overwhelmed!

Only 36 Windows Updates installed. Most systems have 47 - 57 or more. Please visit Windows Update and get ALL available updates (it may take several trips to get them all).

You have a D-Link DWA-130 Wireless N USB Adapter

Daemon Tools (and Alcohol % software) are known to cause BSOD's on some Windows systems (mostly due to the sptd.sys driver, although I have seen dtsoftbus01.sys blamed on several occasions).

Please un-install Gigabyte ET6 (EasyTune6) as it is known to cause BSOD's on some Windows systems.
Also un-install Gigabyte EasySaver as it's known to also cause BSOD's

Please update these older drivers. Links are included to assist in looking up the source of the drivers. If unable to find an update, please remove (un-install) the program responsible for that driver. DO NOT manually delete/rename the driver as it may make the system unbootable! :

nusb3hub.sys Thu Nov 18 20:34:24 2010 (4CE5D420)
NEC Electronics USB 3.0 Host Controller Driver (previous BSOD issues with 2010 and earlier versions)
Link Removed

nusb3xhc.sys Thu Nov 18 20:34:25 2010 (4CE5D421)
NEC Electronics USB 3.0 Host Controller Driver (previous BSOD issues with 2010 and earlier versions)
Link Removed

mv91cons.sys Mon Nov 22 02:02:46 2010 (4CEA1596)
Marvell 91xx Confige Device Driver for 6G SATA Controller
Link Removed

AppleCharger.sys Mon Jan 10 04:57:29 2011 (4D2AD809)
GIGABYTE On/Off Charge driver. See here for details - Link Removed [br] May cause BSOD on Win7/8 systems - uninstall to test (haven't seen recently (15Jan2013))
Link Removed

Rt64win7.sys Thu Jan 13 06:57:19 2011 (4D2EE89F)
Realtek RTL8168D/8111D Family PCI-E Gigabit Ethernet NIC
Link Removed

iaStor.sys Wed Feb 9 16:05:32 2011 (4D53019C)
Intel Storage drivers
Link Removed

RTKVHD64.sys Fri Feb 11 05:16:05 2011 (4D550C65)
Realtek High Definition Audio Function Driver
Link Removed

Rt630x64.sys Wed Oct 19 08:12:55 2011 (4E9EBEC7)
Realtek PCI/PCIe Adapters
Link Removed



Analysis:
The following is for informational purposes only.
Code:
[font=lucida console]**************************Sat Apr 13 04:59:34.611 2013 (UTC - 4:00)**************************
Loading Dump File [C:\Users\Owner\SysnativeBSODApps\041313-18250-01.dmp]
Windows 8 Kernel Version 9200 MP (8 procs) Free x64
Built by: [B]9200[/B].16551.amd64fre.win8_gdr.130306-1502
System Uptime:[B]0 days 6:26:44.256[/B]
Probably caused by :[B]ntkrnlmp.exe ( nt! ?? ::FNODOBFM::`string'+371e2 )[/B]
BugCheck [B]1A, {41793, fffff680784fe3c8, 7a, 79}[/B]
BugCheck Info: [B]Link Removed[/B]
Arguments: 
Arg1: 0000000000041793, The subtype of the bugcheck.
Arg2: fffff680784fe3c8
Arg3: 000000000000007a
Arg4: 0000000000000079
BUGCHECK_STR:  0x1a_41793
PROCESS_NAME:  MsMpEng.exe
FAILURE_BUCKET_ID: [B]0x1a_41793_nt!_??_::FNODOBFM::_string_[/B]
CPUID:        "Intel(R) Core(TM) i7-2700K CPU @ 3.50GHz"
MaxSpeed:     3500
CurrentSpeed: [B]3492[/B]
  BIOS Version                  F10
  BIOS Release Date             02/21/2012
  Manufacturer                  Gigabyte Technology Co., Ltd.
  Product Name                  Z68X-UD5-B3
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
**************************Fri Apr 12 17:20:03.179 2013 (UTC - 4:00)**************************
Loading Dump File [C:\Users\Owner\SysnativeBSODApps\041213-17578-01.dmp]
Windows 8 Kernel Version 9200 MP (8 procs) Free x64
Built by: [B]9200[/B].16551.amd64fre.win8_gdr.130306-1502
System Uptime:[B]1 days 16:30:20.823[/B]
Probably caused by :[B]ntkrnlmp.exe ( nt! ?? ::FNODOBFM::`string'+36ca8 )[/B]
BugCheck [B]1A, {403, fffff68073b57000, d170000000ee5825, fffff68000000002}[/B]
BugCheck Info: [B]Link Removed[/B]
Arguments: 
Arg1: 0000000000000403, The subtype of the bugcheck.
Arg2: fffff68073b57000
Arg3: d170000000ee5825
Arg4: fffff68000000002
BUGCHECK_STR:  0x1a_403
PROCESS_NAME:  TrustedInstall
FAILURE_BUCKET_ID: [B]0x1a_403_nt!_??_::FNODOBFM::_string_[/B]
CPUID:        "Intel(R) Core(TM) i7-2700K CPU @ 3.50GHz"
MaxSpeed:     3500
CurrentSpeed: [B]3492[/B]
  BIOS Version                  F10
  BIOS Release Date             02/21/2012
  Manufacturer                  Gigabyte Technology Co., Ltd.
  Product Name                  Z68X-UD5-B3
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
**************************Thu Apr 11 00:48:47.794 2013 (UTC - 4:00)**************************
Loading Dump File [C:\Users\Owner\SysnativeBSODApps\041013-22046-01.dmp]
Windows 8 Kernel Version 9200 MP (8 procs) Free x64
Built by: [B]9200[/B].16551.amd64fre.win8_gdr.130306-1502
System Uptime:[B]0 days 2:11:48.435[/B]
Probably caused by :[B]ntkrnlmp.exe ( nt!KiPageFault+260 )[/B]
BugCheck [B]D1, {fffff8038906ff46, 2, 8, fffff8038906ff46}[/B]
BugCheck Info: [B]Link Removed[/B]
Arguments: 
Arg1: fffff8038906ff46, memory referenced
Arg2: 0000000000000002, IRQL
Arg3: 0000000000000008, value 0 = read operation, 1 = write operation
Arg4: fffff8038906ff46, address which referenced memory
BUGCHECK_STR:  AV
DEFAULT_BUCKET_ID:  WIN8_DRIVER_FAULT
PROCESS_NAME:  MOM.exe
FAILURE_BUCKET_ID: [B]AV_CODE_AV_BAD_IP_nt!KiPageFault[/B]
CPUID:        "Intel(R) Core(TM) i7-2700K CPU @ 3.50GHz"
MaxSpeed:     3500
CurrentSpeed: [B]3492[/B]
  BIOS Version                  F10
  BIOS Release Date             02/21/2012
  Manufacturer                  Gigabyte Technology Co., Ltd.
  Product Name                  Z68X-UD5-B3
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
**************************Wed Apr 10 16:40:50.077 2013 (UTC - 4:00)**************************
Loading Dump File [C:\Users\Owner\SysnativeBSODApps\041013-15515-01.dmp]
Windows 8 Kernel Version 9200 MP (8 procs) Free x64
Built by: [B]9200[/B].16384.amd64fre.win8_rtm.120725-1247
System Uptime:[B]0 days 1:55:00.718[/B]
Probably caused by :[B]ntkrnlmp.exe ( nt! ?? ::FNODOBFM::`string'+13c00 )[/B]
BugCheck [B]133, {1, 780, 0, 0}[/B]
BugCheck Info: [B]Link Removed[/B]
Arguments: 
Arg1: 0000000000000001, The system cumulatively spent an extended period of time at
    DISPATCH_LEVEL or above. The offending component can usually be
    identified with a stack trace.
Arg2: 0000000000000780, The watchdog period.
Arg3: 0000000000000000
Arg4: 0000000000000000
BUGCHECK_STR:  0x133
DEFAULT_BUCKET_ID:  WIN8_DRIVER_FAULT
PROCESS_NAME:  System
FAILURE_BUCKET_ID: [B]0x133_ISR_nt!_??_::FNODOBFM::_string_[/B]
CPUID:        "Intel(R) Core(TM) i7-2700K CPU @ 3.50GHz"
MaxSpeed:     3500
CurrentSpeed: [B]3492[/B]
  BIOS Version                  F10
  BIOS Release Date             02/21/2012
  Manufacturer                  Gigabyte Technology Co., Ltd.
  Product Name                  Z68X-UD5-B3
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
**************************Tue Apr  9 23:23:47.012 2013 (UTC - 4:00)**************************
Loading Dump File [C:\Users\Owner\SysnativeBSODApps\040913-19828-01.dmp]
Windows 8 Kernel Version 9200 MP (8 procs) Free x64
Built by: [B]9200[/B].16384.amd64fre.win8_rtm.120725-1247
System Uptime:[B]0 days 2:17:18.653[/B]
*** ERROR: Module load completed but symbols could not be loaded for atikmdag.sys
Probably caused by :[B]atikmdag.sys ( atikmdag+a2965 )[/B]
BugCheck [B]1000007E, {ffffffffc0000005, fffff88006b8a965, fffff8800810d1e8, fffff8800810ca20}[/B]
BugCheck Info: [B]Link Removed[/B]
Arguments: 
Arg1: ffffffffc0000005, The exception code that was not handled
Arg2: fffff88006b8a965, The address that the exception occurred at
Arg3: fffff8800810d1e8, Exception Record Address
Arg4: fffff8800810ca20, Context Record Address
PROCESS_NAME:  System
BUGCHECK_STR:  AV
FAILURE_BUCKET_ID: [B]AV_atikmdag+a2965[/B]
CPUID:        "Intel(R) Core(TM) i7-2700K CPU @ 3.50GHz"
MaxSpeed:     3500
CurrentSpeed: [B]3492[/B]
  BIOS Version                  F10
  BIOS Release Date             02/21/2012
  Manufacturer                  Gigabyte Technology Co., Ltd.
  Product Name                  Z68X-UD5-B3
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
[/font]

3rd Party Drivers:
The following is for information purposes only.
Any drivers in red should be updated or removed from your system. And should have been discussed in the body of my post.
Code:
[font=lucida console]**************************Sat Apr 13 04:59:34.611 2013 (UTC - 4:00)**************************
[B]GVTDrv64.sys                Tue Sep  5 03:10:02 2006 (44FD22CA)[/B]
[B]gdrv.sys                    Thu Mar 12 23:22:29 2009 (49B9D175)[/B]
[B]nusb3hub.sys                Thu Nov 18 20:34:24 2010 (4CE5D420)[/B]
[B]nusb3xhc.sys                Thu Nov 18 20:34:25 2010 (4CE5D421)[/B]
[B]mv91cons.sys                Mon Nov 22 02:02:46 2010 (4CEA1596)[/B]
[B]AppleCharger.sys            Mon Jan 10 04:57:29 2011 (4D2AD809)[/B]
[B]Rt64win7.sys                Thu Jan 13 06:57:19 2011 (4D2EE89F)[/B]
[B]iaStor.sys                  Wed Feb  9 16:05:32 2011 (4D53019C)[/B]
[B]RTKVHD64.sys                Fri Feb 11 05:16:05 2011 (4D550C65)[/B]
[B]dtsoftbus01.sys             Fri Jan 13 08:45:46 2012 (4F10358A)[/B]
RTL8192su.sys               Tue May 22 07:26:59 2012 (4FBB7803)
HECIx64.sys                 Mon Jul  2 18:14:58 2012 (4FF21D62)
intelppm.sys                Wed Jul 25 22:26:48 2012 (5010AAE8)
AtihdW86.sys                Wed Dec 12 12:20:30 2012 (50C8BCDE)
atikmpag.sys                Wed Dec 19 14:32:55 2012 (50D21667)
atikmdag.sys                Wed Dec 19 15:38:55 2012 (50D225DF)
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
**************************Fri Apr 12 17:20:03.179 2013 (UTC - 4:00)**************************
[B]Rt630x64.sys                Wed Oct 19 08:12:55 2011 (4E9EBEC7)[/B]
dump_storahci.sys           Wed Jul 25 22:30:35 2012 (5010ABCB)
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
**************************Wed Apr 10 16:40:50.077 2013 (UTC - 4:00)**************************
HECIx64.sys                 Tue Oct 19 19:33:43 2010 (4CBE2AD7)
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
**************************Tue Apr  9 23:23:47.012 2013 (UTC - 4:00)**************************
atikmpag.sys                Thu Sep 27 21:12:52 2012 (5064F994)
atikmdag.sys                Thu Sep 27 22:14:57 2012 (50650821)
[/font]
Link Removed
Link Removed
Link Removed
Link Removed
Link Removed
Link Removed
Link Removed
Link Removed
Link Removed
Link Removed
Link Removed
Link Removed
Link Removed
Link Removed
Link Removed
Link Removed
Link Removed
Link Removed
Link Removed
Link Removed
Link Removed
 
Solution