Windows 8 BSOD - SYSTEM_THREAD_EXCEPTION_NOT_HANDLED - ndu.sys

Discussion in 'Windows 8 Blue Screen of Death (BSOD)' started by kashmir, Aug 18, 2012.

  1. kashmir

    kashmir New Member

    Joined:
    Aug 18, 2012
    Messages:
    4
    Likes Received:
    0
    I installed Windows 8 yesterday, It was great, until it started random crashing. It crashed 5 times with same error (I think). The error is: Windows 8 BSOD - SYSTEM_THREAD_EXCEPTION_NOT_HANDLED - ndu.sys.

    For crash report from W8 File Collector see the attached file.


    What can cause it and how can I fix it?
    Thanks in advance
     

    Attached Files:

    • W8.zip
      File size:
      955.8 KB
      Views:
      1,181
  2. usasma

    usasma Fantastic Member
    Microsoft Community Contributor

    Joined:
    Mar 22, 2010
    Messages:
    3,048
    Likes Received:
    83
    You have a disabled wired networking connection. Is this deliberate? If so, why?

    ndu.sys is a Windows networking driver. Please update both your wired and wireless networking drivers.

    Please un-install ISODrive - it had occasional problems in Win7. Feel free to reinstall it once the system has been re-stabilized

    Please un-install Riva Tuner (it may also be EVGA Precision or MSI Afterburner) as it is known to cause BSOD's in Win7 systems.

    WinRing software (from RealTemp) dates from 2008. Please un-install it.

    If the above steps don't stop the BSOD's, please zip up and upload any new memory dumps with your next post - and we'll see what we can figure out from there.

    The following info is just FYI, I've already addressed the issues that I saw in the above paragraphs

    - Further info on BSOD error messages available at: http://www.carrona.org/bsodindx.html
    - Info on how to troubleshoot BSOD's (DRAFT): http://www.carrona.org/userbsod.html
    - How I do it: http://www.carrona.org/howidoit.html

    Analysis:
    The following is for information purposes only.
    Code:
    [font=lucida console]**************************Fri Aug 17 11:31:22.749 2012 (UTC - 4:00)**************************
    Loading Dump File [C:\Users\John\_jcgriff2_\dbug\__Kernel__\081712-13546-01.dmp]
    *** WARNING: Unable to verify timestamp for ntoskrnl.exe
    *** ERROR: Module load completed but symbols could not be loaded for ntoskrnl.exe
    Built by: [B]9200[/B].16384.amd64fre.win8_rtm.120725-1247
    System Uptime:[B]0 days 0:08:42.417[/B]
    *** WARNING: Unable to verify timestamp for ntoskrnl.exe
    *** ERROR: Module load completed but symbols could not be loaded for ntoskrnl.exe
    *** WARNING: Unable to verify timestamp for Ndu.sys
    *** ERROR: Module load completed but symbols could not be loaded for Ndu.sys
    BugCheck Code: [B]BugCheck 1000007E, {ffffffffc0000005, fffff88017fe4d20, fffff88002f50868, fffff88002f500a0}[/B]
    *** WARNING: Unable to verify timestamp for tcpip.sys
    *** ERROR: Module load completed but symbols could not be loaded for tcpip.sys
    Probably caused by :[B]Ndu.sys ( Ndu+3d20 )[/B]
    BugCheck Info: [B]SYSTEM_THREAD_EXCEPTION_NOT_HANDLED_M (1000007e)[/B]
    DEFAULT_BUCKET_ID:  WIN8_DRIVER_FAULT
    BUGCHECK_STR:  AV
    CPUID:        "Intel(R) Core(TM)2 Quad CPU    Q9400  @ 2.66GHz"
    MaxSpeed:     2660
    CurrentSpeed:[B]3400[/B]
      BIOS Version                  F2
      BIOS Release Date             09/25/2008
      Manufacturer                  Gigabyte Technology Co., Ltd.
      Product Name                  EP45-DS3LR
    ¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
    **************************Fri Aug 17 10:59:53.464 2012 (UTC - 4:00)**************************
    Loading Dump File [C:\Users\John\_jcgriff2_\dbug\__Kernel__\081712-19437-01.dmp]
    *** WARNING: Unable to verify timestamp for ntoskrnl.exe
    *** ERROR: Module load completed but symbols could not be loaded for ntoskrnl.exe
    Built by: [B]9200[/B].16384.amd64fre.win8_rtm.120725-1247
    System Uptime:[B]0 days 0:56:09.135[/B]
    *** WARNING: Unable to verify timestamp for ntoskrnl.exe
    *** ERROR: Module load completed but symbols could not be loaded for ntoskrnl.exe
    *** WARNING: Unable to verify timestamp for Ndu.sys
    *** ERROR: Module load completed but symbols could not be loaded for Ndu.sys
    BugCheck Code: [B]BugCheck 1000007E, {ffffffffc0000005, fffff88018569d20, fffff8801ad8f868, fffff8801ad8f0a0}[/B]
    *** WARNING: Unable to verify timestamp for tcpip.sys
    *** ERROR: Module load completed but symbols could not be loaded for tcpip.sys
    Probably caused by :[B]Ndu.sys ( Ndu+3d20 )[/B]
    BugCheck Info: [B]SYSTEM_THREAD_EXCEPTION_NOT_HANDLED_M (1000007e)[/B]
    DEFAULT_BUCKET_ID:  WIN8_DRIVER_FAULT
    BUGCHECK_STR:  AV
    CPUID:        "Intel(R) Core(TM)2 Quad CPU    Q9400  @ 2.66GHz"
    MaxSpeed:     2660
    CurrentSpeed:[B]3400[/B]
      BIOS Version                  F2
      BIOS Release Date             09/25/2008
      Manufacturer                  Gigabyte Technology Co., Ltd.
      Product Name                  EP45-DS3LR
    ¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
    **************************Fri Aug 17 09:16:09.422 2012 (UTC - 4:00)**************************
    Loading Dump File [C:\Users\John\_jcgriff2_\dbug\__Kernel__\081712-14578-01.dmp]
    *** WARNING: Unable to verify timestamp for ntoskrnl.exe
    *** ERROR: Module load completed but symbols could not be loaded for ntoskrnl.exe
    Built by: [B]9200[/B].16384.amd64fre.win8_rtm.120725-1247
    System Uptime:[B]0 days 0:04:41.092[/B]
    *** WARNING: Unable to verify timestamp for ntoskrnl.exe
    *** ERROR: Module load completed but symbols could not be loaded for ntoskrnl.exe
    *** WARNING: Unable to verify timestamp for Ndu.sys
    *** ERROR: Module load completed but symbols could not be loaded for Ndu.sys
    BugCheck Code: [B]BugCheck 1000007E, {ffffffffc0000005, fffff88018133d20, fffff88000ffa868, fffff88000ffa0a0}[/B]
    *** WARNING: Unable to verify timestamp for tcpip.sys
    *** ERROR: Module load completed but symbols could not be loaded for tcpip.sys
    Probably caused by :[B]Ndu.sys ( Ndu+3d20 )[/B]
    BugCheck Info: [B]SYSTEM_THREAD_EXCEPTION_NOT_HANDLED_M (1000007e)[/B]
    DEFAULT_BUCKET_ID:  WIN8_DRIVER_FAULT
    BUGCHECK_STR:  AV
    CPUID:        "Intel(R) Core(TM)2 Quad CPU    Q9400  @ 2.66GHz"
    MaxSpeed:     2660
    CurrentSpeed:[B]3400[/B]
      BIOS Version                  F2
      BIOS Release Date             09/25/2008
      Manufacturer                  Gigabyte Technology Co., Ltd.
      Product Name                  EP45-DS3LR
    ¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
    **************************Fri Aug 17 09:10:43.307 2012 (UTC - 4:00)**************************
    Loading Dump File [C:\Users\John\_jcgriff2_\dbug\__Kernel__\081712-24859-01.dmp]
    *** WARNING: Unable to verify timestamp for ntoskrnl.exe
    *** ERROR: Module load completed but symbols could not be loaded for ntoskrnl.exe
    Built by: [B]9200[/B].16384.amd64fre.win8_rtm.120725-1247
    System Uptime:[B]0 days 0:15:48.974[/B]
    *** WARNING: Unable to verify timestamp for ntoskrnl.exe
    *** ERROR: Module load completed but symbols could not be loaded for ntoskrnl.exe
    *** WARNING: Unable to verify timestamp for Ndu.sys
    *** ERROR: Module load completed but symbols could not be loaded for Ndu.sys
    BugCheck Code: [B]BugCheck 1000007E, {ffffffffc0000005, fffff88017e03d20, fffff88002b1d868, fffff88002b1d0a0}[/B]
    *** WARNING: Unable to verify timestamp for tcpip.sys
    *** ERROR: Module load completed but symbols could not be loaded for tcpip.sys
    Probably caused by :[B]Ndu.sys ( Ndu+3d20 )[/B]
    BugCheck Info: [B]SYSTEM_THREAD_EXCEPTION_NOT_HANDLED_M (1000007e)[/B]
    DEFAULT_BUCKET_ID:  WIN8_DRIVER_FAULT
    BUGCHECK_STR:  AV
    CPUID:        "Intel(R) Core(TM)2 Quad CPU    Q9400  @ 2.66GHz"
    MaxSpeed:     2660
    CurrentSpeed:[B]3400[/B]
      BIOS Version                  F2
      BIOS Release Date             09/25/2008
      Manufacturer                  Gigabyte Technology Co., Ltd.
      Product Name                  EP45-DS3LR
    ¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
    **************************Fri Aug 17 08:35:29.186 2012 (UTC - 4:00)**************************
    Loading Dump File [C:\Users\John\_jcgriff2_\dbug\__Kernel__\081712-36656-01.dmp]
    *** WARNING: Unable to verify timestamp for ntoskrnl.exe
    *** ERROR: Module load completed but symbols could not be loaded for ntoskrnl.exe
    Built by: [B]9200[/B].16384.amd64fre.win8_rtm.120725-1247
    System Uptime:[B]0 days 0:55:11.581[/B]
    *** WARNING: Unable to verify timestamp for ntoskrnl.exe
    *** ERROR: Module load completed but symbols could not be loaded for ntoskrnl.exe
    *** WARNING: Unable to verify timestamp for Ndu.sys
    *** ERROR: Module load completed but symbols could not be loaded for Ndu.sys
    BugCheck Code: [B]BugCheck 1000007E, {ffffffffc0000005, fffff88019743d20, fffff88002b16868, fffff88002b160a0}[/B]
    Probably caused by :[B]Ndu.sys ( Ndu+3d20 )[/B]
    BugCheck Info: [B]SYSTEM_THREAD_EXCEPTION_NOT_HANDLED_M (1000007e)[/B]
    DEFAULT_BUCKET_ID:  WIN8_DRIVER_FAULT
    BUGCHECK_STR:  AV
    CPUID:        "Intel(R) Core(TM)2 Quad CPU    Q9400  @ 2.66GHz"
    MaxSpeed:     2660
    CurrentSpeed:[B]3400[/B]
      BIOS Version                  F2
      BIOS Release Date             09/25/2008
      Manufacturer                  Gigabyte Technology Co., Ltd.
      Product Name                  EP45-DS3LR
    ¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
    [/font]


    3rd Party Drivers:
    The following is for information purposes only. Any drivers in red should be updated.
    Code:
    [font=lucida console]**************************Fri Aug 17 11:31:22.749 2012 (UTC - 4:00)**************************
    [COLOR=RED][B]WinRing0x64.sys   Sat Jul 26 09:29:37 2008 (488B26C1)[/B][/COLOR]
    RTCore64.sys      Tue Sep  6 08:24:50 2011 (4E661112)
    Rt630x64.sys      Wed Oct 19 08:12:55 2011 (4E9EBEC7)
    athrx.sys         Wed Mar 21 23:26:22 2012 (4F6A9BDE)
    aswFsBlk.SYS      Tue Jul  3 12:13:12 2012 (4FF31A18)
    aswMonFlt.sys     Tue Jul  3 12:13:24 2012 (4FF31A24)
    aswrdr2.sys       Tue Jul  3 12:13:43 2012 (4FF31A37)
    AtihdW86.sys      Tue Jul 17 03:34:09 2012 (50051571)
    intelppm.sys      Wed Jul 25 22:26:48 2012 (5010AAE8)
    tm.sys            Wed Jul 25 22:29:01 2012 (5010AB6D)
    atikmpag.sys      Fri Jul 27 21:14:47 2012 (50133D07)
    atikmdag.sys      Fri Jul 27 21:48:09 2012 (501344D9)
    ¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
    **************************Fri Aug 17 10:59:53.464 2012 (UTC - 4:00)**************************
    ISODrv64.sys      Thu Jan 28 22:39:02 2010 (4B625856)
    [/font]
    http://www.carrona.org/drivers/driver.php?id=WinRing0x64.sys
    http://www.carrona.org/drivers/driver.php?id=RTCore64.sys
    http://www.carrona.org/drivers/driver.php?id=Rt630x64.sys
    http://www.carrona.org/drivers/driver.php?id=athrx.sys
    http://www.carrona.org/drivers/driver.php?id=aswFsBlk.SYS
    http://www.carrona.org/drivers/driver.php?id=aswMonFlt.sys
    http://www.carrona.org/drivers/driver.php?id=aswrdr2.sys
    AtihdW86.sys - this driver hasn't been added to the DRT as of this run. Please search Google/Bing for the driver if additional information is needed.
    http://www.carrona.org/drivers/driver.php?id=intelppm.sys
    tm.sys - this driver hasn't been added to the DRT as of this run. Please search Google/Bing for the driver if additional information is needed.
    http://www.carrona.org/drivers/driver.php?id=atikmpag.sys
    http://www.carrona.org/drivers/driver.php?id=atikmdag.sys
    http://www.carrona.org/drivers/driver.php?id=ISODrv64.sys

     
    #2 usasma, Aug 18, 2012
    Last edited by a moderator: Aug 18, 2012
    1 person likes this.
  3. usasma

    usasma Fantastic Member
    Microsoft Community Contributor

    Joined:
    Mar 22, 2010
    Messages:
    3,048
    Likes Received:
    83
    I posted a longer post with lot's of links.
    It'll show up after a moderator approves it.
    Un-install:
    - RealTemp
    - Riva Tuner (also known as EVGA Precision or MSI Afterburner)
    - ISODrive
     
    1 person likes this.
  4. kashmir

    kashmir New Member

    Joined:
    Aug 18, 2012
    Messages:
    4
    Likes Received:
    0
    Thanks for replying

    I have disabled Wired Networking, because I thought that it could be related, I also have WiFi adapter, so connecting to internet is not a problem.
    Before uninstalling I enabled a driver verifier, as guys from other forums suggested. On the next boot I got a BSOD because of RTCore64.sys. I booted from safe mode and removed software as you suggested.


    Now I have uninstalled MSI Afterburner/RealTemp/UltraISO... Driver verifier is still enabled, no BSODs on boot.

    Hope that was a problem. Time will show.
    But the bad thing is that I was controlling my VGA fan speed with MSI afterburner, because default fan speed controller sucks and VGA gets hot.

    If I'm not mistaken EVGA Precision uses just the same drivers to control fan speed, so right now I have no alternatives...
     
  5. kashmir

    kashmir New Member

    Joined:
    Aug 18, 2012
    Messages:
    4
    Likes Received:
    0
    Thank You!
    I'll let you know in a day or two if i get BSODs or not.
     
  6. usasma

    usasma Fantastic Member
    Microsoft Community Contributor

    Joined:
    Mar 22, 2010
    Messages:
    3,048
    Likes Received:
    83
    Make sure to turn off Driver Verifier - otherwise any little glitches will cause the system to BSOD.

    EVGA Precision, RivaTuner, and MSI Afterburner all use the same software - so stay away from it.
    My kids use the Catalyst Control Center software for their fans - but I've seen that cause problems also.
     
  7. kashmir

    kashmir New Member

    Joined:
    Aug 18, 2012
    Messages:
    4
    Likes Received:
    0
    Hello Again

    So 3 days have passed and do you want to know how many BSODs I experienced? - NONE!

    BTW, UltraISO is back - no problems.
    MSI Afterburner/Realtemp got replaced with SpeedFan - With correct configuration it can control GPU fan speed as well as MSI Afterburner (adding it to startup is another story, because it needs administrator privileges, so moving shortcut to Startup folder didn't work. I've added Speedfan to startup with Task Scheduler).

    The only thing I'm lacking right now is in game on-screen-display, but I can live with that.

    Thank You.
     
    #7 kashmir, Aug 22, 2012
    Last edited by a moderator: Aug 22, 2012

Share This Page

Loading...