Skylake build multiple BSOD

[misplacedsocks]

@ionbasa as requested new topic for the issues I'm seeing.

 

OS - Windows 8.1, 8, 7, Vista ? Windows 8.1 Pro

· x86 (32-bit) or x64 ? 64 bit

· What OS was originaly installed on the system? Windows 8.1 Pro

· Is the OS an OEM version (came pre-installed on system) or full retail version (YOU purchased it from a retailer)? Full retail version (MSDNAA)

· Age of system (hardware) 1 week

· Age of OS installation - have you re-installed the OS? 1 week - Yes 4 days ago

· CPU model 6700k

· Video Card model Palit Jetstream 980Ti 

· MotherBoard - (if NOT a laptop) Asus Z170-A

· Power Supply - brand & wattage (if laptop, skip this) Corsair RM750i 750W

· System Manufacturer Custom

· Exact model number (if OEM or laptop) N/A

· Laptop or Desktop Desktop

 

Other relevant specs:

 

RAM : Corsair 32GB (4x8GB) Vengeance LPX DDR4 Black 2666Mhz C16

Peripherals attached : Wireless Keyboard + Mouse receiver, Xbox 360 Controller receiver

Storage : 1x Samsung 850 EVO 1Tb

 

It's worth saying that I've run into the same spontaneous restarts before under Windows 7 and Windows 10 too, so I don't think it's tied to the software side of things. No overclocks aside from the XMP1 present on RAM (So it's running at 2666MHz instead of 2133MHz, but the system is just as unstable without the XMP preset on.) The restarts sometimes occur before the system has even gone through the "create new user / welcome to your PC" wizard at the start, so it may be deeper set than software but once again I'm all ears.

 

As before, the system BSODs show a mix of MEMORY_MANAGEMENT, SYSTEM_SERVICE_EXCEPTION, KMODE_EXCEPTION_NOT_HANDLED, DPC_WATCHDOG_VIOLATION, IRQL_NOT_LESS_OR_EQUAL and most recently PAGEFAULT_IN_NONPAGED_AREA.

 

Drivers are all direct from ASUS (Found at https://www.asus.com/Motherboards/Z170-A/helpdesk_download/ ). NVidia Driver is 355.60.

I've run the system for a while without the GPU in (Using the onboard graphics). Still unstable without it in so I imagine the GPU itself isn't bad.

 

Bios did have an update available (On the ASUS site). That's been flashed but alas no change in stability.

 

I've run Memtest86+ on the RAM in the system both on individual sticks and also on the 32GB set in total, no issues found after about 12 hours of runtime. I'm happy to leave it to do this overnight if you think it's the issue.

 

Files as requested in the sticky can be found below:

 

https://dl.dropboxusercontent.com/u/27439435/BSOD/Z170-A%20BSOD.7z

 

Any thoughts? I've exhausted what I can think of. Once again thanks for your time

 

[RezidentSeagull]

You've probably already done this, but have you checked the power supply? Faulty power supplies can seemingly cause all sorts of random issues with a system. If you haven't already, maybe swap out the current power supply with a reliable older one, at least to rule it out as the problem-maker?

 

My other suggestion is to boot Windows in Safe Mode. If reboots don't seem to occur, it might be a driver issue that's causing the BSODs, in which case you should reinstall your drivers one by one. Maybe make a System Restore point before you start replacing drivers, if possible.

[awesomes8wc3]

I'm looking at your dumps, seem to be a driver thing. Try uninstalling the ASUS and Samsung Rapid Disk shit, most of the debug info points back/could be related to this..

[oKaGe]

I have the exact same problem but with a 6600k and an asrock gaming K6

 

haven't been able to fix it yet, so I'll take the RMA route, at least for the CPU... i'll let you know if that fixes it

[misplacedsocks]

@RezidentSeagull I thought that or the RAM might've been an issue despite the clean result from MEMTEST, I've RMA'd both (This has actually been an ongoing saga since the start of August, just the last week is when I've had all the parts here to put back together). I'll see if I can't get a hold of a spare PSU off a friend or something for temporary use to isolate it properly.

 

@awesomes8wc3 I've turned off the Samsung Rapid Mode driver. I'll let you know if it behaves any better. I will say that I've only installed it this time round as I figured it'd do no harm, the issue did exhibit itself in past installs (Under Win7 and Win10 too). Do you know which ASUS stuff you have in mind? All the drivers installed are the manufacturer provided ones on their site (So Realtek/Intel/ASMedia etc). The only ASUS bit of software is the AI Suite thing (Which is handy to take a look at the temperatures/voltages/fan speeds, but isn't necessary. I don't think that's what's causing it but if you think it'll help I can uninstall that too)

 

@oKaGe let me know how that goes! I ended up sending back my PSU, RAM, CPU and Mobo to the place I bought it from so they could test it the way I had and see if they could reproduce the problem. I ended up getting a swapped/new Mobo and CPU, but the issues are still the same sadly. Actually it was seeing @zzenigmaxzz's thread that made me think it might not just be me putting it together wrong or something.

[ionbasa]

I'm looking at your dumps, seem to be a driver thing. Try uninstalling the ASUS and Samsung Rapid Disk shit, most of the debug info points back/could be related to this..

+1. I wont be able to fully look at dumps until after work, but I took a quick look in WinDBG and I agree with that the Samsung Rapid Disk driver is being problematic,

[ionbasa]

So, found some time while on my work break to take a look at the dump files. You've got a lot of them, so they're all in the spoiler tags below:

 

First of all, it seems that there are some Windows' components that are failing. Along with "atkexComSvc" which is the ASUS Com Service, this most likely relates to Ai Suite or any fancy software that your motherboard came with, Uninstall these ASUS tools. Also, uninstall Samsung Rapid Disk.

 

Chrome crashed due to a memory corruption, as a matter of fact, there are quite a few memory issues happening.

 

You also crashed while playing pillars of eternity. This was related to a NTFS file system error, probably due to Samsung's Rapid Start Bullsh*t driver.

 

So, Uninstall any and all ASUS utilities. Uninstall Samsung Rapid Start. Next, perform a repair-install of Windows 8.1 by following the instructions here: http://www.eightforums.com/tutorials/26095-repair-install-windows-8-a.html

Settings and windows files will be reset. Your programs and documents will remain intact. 

 

Once that is done, go ahead and run a Memory test with Memtest86+ for at least 6 hours. Follow this guide if you need help: http://www.sevenforums.com/tutorials/105647-ram-test-memtest86.html

 

Post back once you have done all those steps.

Windows 8 Kernel Version 9600 MP (8 procs) Free x64Product: WinNt, suite: TerminalServer SingleUserTSBuilt by: 9600.17936.amd64fre.winblue_ltsb.150715-0840Machine Name:Kernel base = 0xfffff803`7727c000 PsLoadedModuleList = 0xfffff803`775517b0Debug session time: Tue Aug 25 11:45:42.566 2015 (UTC - 4:00)System Uptime: 0 days 0:00:04.218********************************************************************************                                                                             **                        Bugcheck Analysis                                    **                                                                             ********************************************************************************WINLOGON_FATAL_ERROR (c000021a)The Winlogon process terminated unexpectedly.Arguments:Arg1: ffffc001d90a9660, String that identifies the problem.Arg2: ffffffffc0000102, Error Code.Arg3: 0000000000000000Arg4: 00000072eedf0758Debugging Details:----------------------- ETW minidump data unavailable-----TRIAGER: Could not open triage file : e:\dump_analysis\program\triage\modclass.ini, error 2ERROR_CODE: (NTSTATUS) 0xc000021a - {Fatal System Error}  The %hs system process terminated unexpectedly with a status of 0x%08x (0x%08x 0x%08x).  The system has been shut down.EXCEPTION_CODE: (NTSTATUS) 0xc000021a - {Fatal System Error}  The %hs system process terminated unexpectedly with a status of 0x%08x (0x%08x 0x%08x).  The system has been shut down.EXCEPTION_PARAMETER1:  ffffc001d90a9660EXCEPTION_PARAMETER2:  ffffffffc0000102EXCEPTION_PARAMETER3:  0000000000000000EXCEPTION_PARAMETER4: 72eedf0758ADDITIONAL_DEBUG_TEXT:  initial session process orBUGCHECK_STR:  0xc000021a_c0000102CUSTOMER_CRASH_COUNT:  1DEFAULT_BUCKET_ID:  WIN8_DRIVER_FAULTPROCESS_NAME:  smss.exeCURRENT_IRQL:  0LAST_CONTROL_TRANSFER:  from fffff80377603991 to fffff803773cb9a0STACK_TEXT:  ffffd000`20d9f5b8 fffff803`77603991 : 00000000`0000004c 00000000`c000021a ffffd000`218112f8 ffffe000`b37fb860 : nt!KeBugCheckExffffd000`20d9f5c0 fffff803`775fd4ea : ffffe000`b068bb00 ffffd000`20d9f6d9 00000000`00000000 00000000`00000002 : nt!PopGracefulShutdown+0x2c9ffffd000`20d9f600 fffff803`773d71b3 : ffffe000`b068b880 00000000`00000000 00000000`c0000004 ffffd000`20d9f800 : nt! ?? ::OKHAJAOM::`string'+0x269affffd000`20d9f740 fffff803`773cf620 : fffff803`778130e3 00000000`00000001 ffffd000`20d9f958 00000000`c0000004 : nt!KiSystemServiceCopyEnd+0x13ffffd000`20d9f8d8 fffff803`778130e3 : 00000000`00000001 ffffd000`20d9f958 00000000`c0000004 ffffd000`207bb180 : nt!KiServiceLinkageffffd000`20d9f8e0 fffff803`777495ef : 00000000`00000000 00000000`00000000 ffffd000`207bb180 ffffe000`b068b9c0 : nt! ?? ::NNGAKEGL::`string'+0x703c3ffffd000`20d9f9a0 fffff803`7735a622 : fffff803`7735a568 00000000`00000000 00000000`00000002 00000000`00000000 : nt!PopPolicyWorkerAction+0x63ffffd000`20d9fa10 fffff803`773011cf : fffff803`00000002 ffffe000`b068b880 fffff803`775382a0 ffffc001`d8694d40 : nt!PopPolicyWorkerThread+0xbaffffd000`20d9fa50 fffff803`7737a0a8 : ffffd000`2050c3c0 ffffe000`b068b880 00000000`00000080 ffffe000`b068b880 : nt!ExpWorkerThread+0x69fffffd000`20d9fb00 fffff803`773d1fc6 : ffffd000`20500180 ffffe000`b068b880 ffffd000`2050c3c0 00000000`00000000 : nt!PspSystemThreadStartup+0x58ffffd000`20d9fb60 00000000`00000000 : ffffd000`20da0000 ffffd000`20d99000 00000000`00000000 00000000`00000000 : nt!KiStartSystemThread+0x16STACK_COMMAND:  kbFOLLOWUP_IP: nt! ?? ::OKHAJAOM::`string'+269afffff803`775fd4ea cc              int     3SYMBOL_STACK_INDEX:  2SYMBOL_NAME:  nt! ?? ::OKHAJAOM::`string'+269aFOLLOWUP_NAME:  MachineOwnerMODULE_NAME: ntIMAGE_NAME:  ntkrnlmp.exeDEBUG_FLR_IMAGE_TIMESTAMP:  55a68c66FAILURE_BUCKET_ID:  X64_0xc000021a_c0000102_nt!_??_::OKHAJAOM::_string_+269aBUCKET_ID:  X64_0xc000021a_c0000102_nt!_??_::OKHAJAOM::_string_+269aFollowup: MachineOwner 

Windows 8 Kernel Version 9600 MP (8 procs) Free x64Product: WinNt, suite: TerminalServer SingleUserTSBuilt by: 9600.17936.amd64fre.winblue_ltsb.150715-0840Machine Name:Kernel base = 0xfffff800`36872000 PsLoadedModuleList = 0xfffff800`36b477b0Debug session time: Tue Aug 25 12:16:28.501 2015 (UTC - 4:00)System Uptime: 0 days 0:27:33.162********************************************************************************                                                                             **                        Bugcheck Analysis                                    **                                                                             ********************************************************************************KMODE_EXCEPTION_NOT_HANDLED (1e)This is a very common bugcheck.  Usually the exception address pinpointsthe driver/function that caused the problem.  Always note this addressas well as the link date of the driver/image that contains this address.Arguments:Arg1: ffffffffc0000005, The exception code that was not handledArg2: fffff800ece35a40, The address that the exception occurred atArg3: ffffd00113726dd8, Parameter 0 of the exceptionArg4: ffffd001137265e0, Parameter 1 of the exceptionDebugging Details:------------------TRIAGER: Could not open triage file : e:\dump_analysis\program\triage\modclass.ini, error 2EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at "0x%08lx" referenced memory at "0x%08lx". The memory could not be "%s".FAULTING_IP: NETIO!NetioInitializeNetBufferListAndFirstNetBufferContext+2b200fffff800`ece35a40 f7818800000000000004 test dword ptr [rcx+88h],4000000hEXCEPTION_PARAMETER1:  ffffd00113726dd8EXCEPTION_PARAMETER2:  ffffd001137265e0WRITE_ADDRESS: fffff80036b351c0: Unable to get special pool infofffff80036b351c0: Unable to get special pool infounable to get nt!MmNonPagedPoolStartunable to get nt!MmSizeOfNonPagedPoolInBytes ffffd001137265e0 ERROR_CODE: (NTSTATUS) 0xc0000005 - The instruction at "0x%08lx" referenced memory at "0x%08lx". The memory could not be "%s".BUGCHECK_STR:  0x1e_c0000005CUSTOMER_CRASH_COUNT:  1DEFAULT_BUCKET_ID:  WIN8_DRIVER_FAULTPROCESS_NAME:  SystemCURRENT_IRQL:  2EXCEPTION_RECORD:  ffffe00133bf5010 -- (.exr 0xffffe00133bf5010)Cannot read Exception record @ ffffe00133bf5010LAST_CONTROL_TRANSFER:  from fffff80036a4f19b to fffff800369c19a0CONTEXT:  00888b810a740400 -- (.cxr 0x888b810a740400)Unable to read context, Win32 error 0n30STACK_TEXT:  ffffd001`13725db8 fffff800`36a4f19b : 00000000`0000001e ffffffff`c0000005 fffff800`ece35a40 ffffd001`13726dd8 : nt!KeBugCheckExffffd001`13725dc0 fffff800`369d2a06 : 00000000`00000051 ffffe001`2e082c70 00000000`00000000 ffffe001`2e9235b0 : nt!KiFatalFilter+0x1fffffd001`13725e00 fffff800`369b0a86 : 00000000`00000000 00000000`00000001 00000000`00000007 ffffe001`2e082c70 : nt! ?? ::FNODOBFM::`string'+0xb46ffffd001`13725e40 fffff800`369c8eed : 00000000`00000000 ffffd001`13725fe0 ffffd001`13726dd8 ffffd001`13725fe0 : nt!_C_specific_handler+0x86ffffd001`13725eb0 fffff800`368dfcbd : 00000000`00000001 fffff800`36872000 ffffd001`13726d00 fffff800`00000000 : nt!RtlpExecuteHandlerForException+0xdffffd001`13725ee0 fffff800`368e407e : ffffd001`13726dd8 ffffd001`13726ae0 ffffd001`13726dd8 00000000`00000000 : nt!RtlDispatchException+0x1a5ffffd001`137265b0 fffff800`369cd5c2 : ffffe001`33bf5010 ffffe001`339d7490 00000000`00000000 fffff800`ed2fff76 : nt!KiDispatchException+0x646ffffd001`13726ca0 fffff800`369cbafe : 00000000`00000ac4 fffff800`ed30bb01 ffffe001`33977519 00000000`00000001 : nt!KiExceptionDispatch+0xc2ffffd001`13726e80 fffff800`ece35a40 : ffffe001`339759e0 ffffe001`33bf5010 00000000`00000000 00000000`00000001 : nt!KiGeneralProtectionFault+0xfeffffd001`13727010 fffff800`ed2ff8ca : 00000000`00000000 00000000`00000000 ffffe001`33af1228 ffffe001`31294158 : NETIO!NetioInitializeNetBufferListAndFirstNetBufferContext+0x2b200ffffd001`13727040 fffff800`ed2ffdd3 : ffffe001`33bf5010 ffffd001`137271a0 00000000`00000002 fffff800`efde0000 : tcpip!FlpValidateNetBufferListChain+0x29affffd001`13727140 fffff800`3692cfa3 : 00000000`00000001 00000000`00000000 ffffe001`312a4010 ffffd001`13721000 : tcpip!FlReceiveNetBufferListChainCalloutRoutine+0xa3ffffd001`13727270 fffff800`ed300076 : fffff800`ed2ffd30 ffffd001`13727390 00000000`00000010 00000000`00000801 : nt!KeExpandKernelStackAndCalloutInternal+0xf3ffffd001`13727360 fffff800`ed0c4a53 : 00000000`00000000 ffffd001`13727441 00000000`00000000 fffff800`ed2dd550 : tcpip!FlReceiveNetBufferListChain+0xb6ffffd001`137273e0 fffff800`ed0c4e7f : 00000000`00000001 00000000`00000000 00000000`00000000 00000000`00000001 : ndis!ndisMIndicateNetBufferListsToOpen+0x123ffffd001`137274a0 fffff800`ed0c56b2 : ffffe001`33d761a0 00000000`00000001 fffff800`ed0d1540 00000000`00000000 : ndis!ndisMTopReceiveNetBufferLists+0x22fffffd001`13727530 fffff800`ef13ccce : 00000000`00000000 00000000`00000000 ffffe001`338d9e80 ffffe001`33975950 : ndis!NdisMIndicateReceiveNetBufferLists+0x732ffffd001`13727720 00000000`00000000 : 00000000`00000000 ffffe001`338d9e80 ffffe001`33975950 00000000`00000801 : e1d64x64+0x15cceFOLLOWUP_IP: NETIO!NetioInitializeNetBufferListAndFirstNetBufferContext+2b200fffff800`ece35a40 f7818800000000000004 test dword ptr [rcx+88h],4000000hSYMBOL_STACK_INDEX:  9SYMBOL_NAME:  NETIO!NetioInitializeNetBufferListAndFirstNetBufferContext+2b200FOLLOWUP_NAME:  MachineOwnerMODULE_NAME: NETIOIMAGE_NAME:  NETIO.SYSDEBUG_FLR_IMAGE_TIMESTAMP:  546029c5STACK_COMMAND:  .cxr 0x888b810a740400 ; kbFAILURE_BUCKET_ID:  X64_0x1e_c0000005_NETIO!NetioInitializeNetBufferListAndFirstNetBufferContext+2b200BUCKET_ID:  X64_0x1e_c0000005_NETIO!NetioInitializeNetBufferListAndFirstNetBufferContext+2b200Followup: MachineOwner 

Windows 8 Kernel Version 9600 MP (8 procs) Free x64Product: WinNt, suite: TerminalServer SingleUserTSBuilt by: 9600.17936.amd64fre.winblue_ltsb.150715-0840Machine Name:Kernel base = 0xfffff803`f5688000 PsLoadedModuleList = 0xfffff803`f595d7b0Debug session time: Tue Aug 25 13:26:30.103 2015 (UTC - 4:00)System Uptime: 0 days 1:09:35.764********************************************************************************                                                                             **                        Bugcheck Analysis                                    **                                                                             ********************************************************************************CRITICAL_PROCESS_DIED (ef)        A critical system process diedArguments:Arg1: ffffe0018b24c080, Process objectArg2: 0000000000000000Arg3: 0000000000000000Arg4: 0000000000000000Debugging Details:------------------TRIAGER: Could not open triage file : e:\dump_analysis\program\triage\modclass.ini, error 2PROCESS_OBJECT: ffffe0018b24c080CUSTOMER_CRASH_COUNT:  1DEFAULT_BUCKET_ID:  WIN8_DRIVER_FAULTBUGCHECK_STR:  0xEFPROCESS_NAME:  wininit.exeCURRENT_IRQL:  0LAST_CONTROL_TRANSFER:  from fffff803f5c9a160 to fffff803f57d79a0STACK_TEXT:  ffffd001`3790d728 fffff803`f5c9a160 : 00000000`000000ef ffffe001`8b24c080 00000000`00000000 00000000`00000000 : nt!KeBugCheckExffffd001`3790d730 fffff803`f5bcfa02 : ffffe001`8b24c080 ffffe001`8b376c60 00000000`00000001 00000000`80000002 : nt!PspCatchCriticalBreak+0xa4ffffd001`3790d770 fffff803`f5a6dea5 : ffffe001`8b24c080 ffffe001`8b376c60 ffffe001`8b24c080 ffffe001`8b24c080 : nt! ?? ::NNGAKEGL::`string'+0x20ce2ffffd001`3790d7d0 fffff803`f5a6dc32 : ffffffff`ffffffff ffffe001`8b24c080 ffffe001`8b24c080 ffffe001`8b376880 : nt!PspTerminateProcess+0xe5ffffd001`3790d810 fffff803`f57e31b3 : ffffe001`8b24c080 ffffe001`8b376880 ffffd001`3790d900 ffffd001`3790ea00 : nt!NtTerminateProcess+0x9effffd001`3790d880 fffff803`f57db620 : fffff803`f580521b ffffd001`3790e7d0 ffffd001`3790e7d0 ffffd001`3790ea00 : nt!KiSystemServiceCopyEnd+0x13ffffd001`3790da18 fffff803`f580521b : ffffd001`3790e7d0 ffffd001`3790e7d0 ffffd001`3790ea00 ffffd001`3790e2b0 : nt!KiServiceLinkageffffd001`3790da20 fffff803`f56f9a14 : 00000000`0010000f ffffd001`3790e2b0 ffffd001`3790e2b8 00000000`00000001 : nt! ?? ::FNODOBFM::`string'+0x1d35bffffd001`3790e280 fffff803`f57d82db : 00000049`cea800b0 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiRaiseException+0x1a4ffffd001`3790e8c0 fffff803`f57e31b3 : 00000000`00000008 00000000`00000000 00000000`00000001 00000000`00000000 : nt!NtRaiseException+0x7bffffd001`3790ea00 00007ffa`a573c4e0 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSystemServiceCopyEnd+0x1300000049`cea8edc0 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x7ffa`a573c4e0STACK_COMMAND:  kbFOLLOWUP_IP: nt!PspCatchCriticalBreak+a4fffff803`f5c9a160 cc              int     3SYMBOL_STACK_INDEX:  1SYMBOL_NAME:  nt!PspCatchCriticalBreak+a4FOLLOWUP_NAME:  MachineOwnerMODULE_NAME: ntIMAGE_NAME:  ntkrnlmp.exeDEBUG_FLR_IMAGE_TIMESTAMP:  55a68c66FAILURE_BUCKET_ID:  X64_0xEF_nt!PspCatchCriticalBreak+a4BUCKET_ID:  X64_0xEF_nt!PspCatchCriticalBreak+a4Followup: MachineOwner 

Windows 8 Kernel Version 9600 MP (8 procs) Free x64Product: WinNt, suite: TerminalServer SingleUserTSBuilt by: 9600.17936.amd64fre.winblue_ltsb.150715-0840Machine Name:Kernel base = 0xfffff800`7347a000 PsLoadedModuleList = 0xfffff800`7374f7b0Debug session time: Tue Aug 25 14:00:29.726 2015 (UTC - 4:00)System Uptime: 0 days 0:33:03.388********************************************************************************                                                                             **                        Bugcheck Analysis                                    **                                                                             ********************************************************************************IRQL_NOT_LESS_OR_EQUAL (a)An attempt was made to access a pageable (or completely invalid) address at aninterrupt request level (IRQL) that is too high.  This is usuallycaused by drivers using improper addresses.If a kernel debugger is available get the stack backtrace.Arguments:Arg1: 0000000000000010, memory referencedArg2: 0000000000000002, IRQLArg3: 0000000000000001, bitfield :	bit 0 : value 0 = read operation, 1 = write operation	bit 3 : value 0 = not an execute operation, 1 = execute operation (only on chips which support this level of status)Arg4: fffff800734c794b, address which referenced memoryDebugging Details:------------------TRIAGER: Could not open triage file : e:\dump_analysis\program\triage\modclass.ini, error 2WRITE_ADDRESS: fffff8007373d1c0: Unable to get special pool infofffff8007373d1c0: Unable to get special pool infounable to get nt!MmNonPagedPoolStartunable to get nt!MmSizeOfNonPagedPoolInBytes 0000000000000010 CURRENT_IRQL:  2FAULTING_IP: nt!MiRevertValidPte+26bfffff800`734c794b f00fba6e1000    lock bts dword ptr [rsi+10h],0CUSTOMER_CRASH_COUNT:  1DEFAULT_BUCKET_ID:  WIN8_DRIVER_FAULTBUGCHECK_STR:  AVPROCESS_NAME:  atkexComSvc.exTRAP_FRAME:  ffffd000225c7290 -- (.trap 0xffffd000225c7290)NOTE: The trap frame does not contain all registers.Some register values may be zeroed or incorrect.rax=0000000000000002 rbx=0000000000000000 rcx=0020000000000000rdx=fffff68000015388 rsi=0000000000000000 rdi=0000000000000000rip=fffff800734c794b rsp=ffffd000225c7420 rbp=0000000002a71000 r8=fffffa8005b92d50  r9=0000000000000000 r10=0000000fffffffffr11=ffffd000225c74e0 r12=0000000000000000 r13=0000000000000000r14=0000000000000000 r15=0000000000000000iopl=0         nv up ei pl nz na pe ncnt!MiRevertValidPte+0x26b:fffff800`734c794b f00fba6e1000    lock bts dword ptr [rsi+10h],0 ds:00000000`00000010=????????Resetting default scopeLAST_CONTROL_TRANSFER:  from fffff800735d54e9 to fffff800735c99a0STACK_TEXT:  ffffd000`225c7148 fffff800`735d54e9 : 00000000`0000000a 00000000`00000010 00000000`00000002 00000000`00000001 : nt!KeBugCheckExffffd000`225c7150 fffff800`735d3d3a : 00000000`00000001 00000000`00000000 ffffe001`72ba4900 00000000`003bb951 : nt!KiBugCheckDispatch+0x69ffffd000`225c7290 fffff800`734c794b : ffff0000`00000000 ffffe001`7b443d98 00000000`00000001 00000000`000007c6 : nt!KiPageFault+0x23affffd000`225c7420 fffff800`73530c60 : fffff680`00015388 fc600001`e8647025 ffffe001`7b4438c0 00000000`001e8647 : nt!MiRevertValidPte+0x26bffffd000`225c7470 fffff800`738a4ad0 : ffffe001`c9b23d48 ffffe001`c9b23d48 ffffe001`c99d5a00 ffffe001`c99d5a00 : nt!MiSetReadOnlyOnSectionView+0x284ffffd000`225c75f0 fffff800`73895a41 : ffffd000`225c7730 ffffc001`74c42860 ffffc001`74c42850 ffffc001`74c42860 : nt!MmSecureVirtualMemoryAgainstWrites+0x174ffffd000`225c76b0 fffff800`73838ec4 : ffffd000`225c7920 00000000`00000001 00000000`00000000 ffffffff`ffffffff : nt!AlpcpReceiveView+0xe5ffffd000`225c7770 fffff800`7381d450 : 00000000`00000048 00000000`c0000000 00000000`00bce888 00000000`00000000 : nt!AlpcpReceiveMessage+0xaa4ffffd000`225c78c0 fffff800`735d51b3 : ffffe001`c9ac1080 ffffd000`225c7a80 ffffd000`225c79a8 00000000`0114ff20 : nt!NtAlpcSendWaitReceivePort+0xf0ffffd000`225c7990 00007fff`bad61a5a : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSystemServiceCopyEnd+0x1300000000`00bce818 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x7fff`bad61a5aSTACK_COMMAND:  kbFOLLOWUP_IP: nt!MiRevertValidPte+26bfffff800`734c794b f00fba6e1000    lock bts dword ptr [rsi+10h],0SYMBOL_STACK_INDEX:  3SYMBOL_NAME:  nt!MiRevertValidPte+26bFOLLOWUP_NAME:  MachineOwnerMODULE_NAME: ntDEBUG_FLR_IMAGE_TIMESTAMP:  55a68c66IMAGE_NAME:  memory_corruptionFAILURE_BUCKET_ID:  X64_AV_nt!MiRevertValidPte+26bBUCKET_ID:  X64_AV_nt!MiRevertValidPte+26bFollowup: MachineOwner 

Windows 8 Kernel Version 9600 MP (8 procs) Free x64Product: WinNt, suite: TerminalServer SingleUserTSBuilt by: 9600.17936.amd64fre.winblue_ltsb.150715-0840Machine Name:Kernel base = 0xfffff801`70871000 PsLoadedModuleList = 0xfffff801`70b467b0Debug session time: Tue Aug 25 11:37:41.356 2015 (UTC - 4:00)System Uptime: 0 days 0:03:03.015********************************************************************************                                                                             **                        Bugcheck Analysis                                    **                                                                             ********************************************************************************CACHE_MANAGER (34)    See the comment for FAT_FILE_SYSTEM (0x23)Arguments:Arg1: 0000000000051157Arg2: ffffd000b17715c8Arg3: ffffd000b1770dd0Arg4: fffff80170984f63Debugging Details:------------------TRIAGER: Could not open triage file : e:\dump_analysis\program\triage\modclass.ini, error 2EXCEPTION_RECORD:  ffffd000b17715c8 -- (.exr 0xffffd000b17715c8)ExceptionAddress: fffff80170984f63 (nt!CcDeleteBcbs+0x0000000000000037)   ExceptionCode: c0000005 (Access violation)  ExceptionFlags: 00000000NumberParameters: 2   Parameter[0]: 0000000000000000   Parameter[1]: ffffffffffffffffAttempt to read from address ffffffffffffffffCONTEXT:  ffffd000b1770dd0 -- (.cxr 0xffffd000b1770dd0)rax=ffefe0018651acb0 rbx=ffefe0018651aca0 rcx=00000000000002fdrdx=0000000000000000 rsi=ffefe0018651acb0 rdi=ffffe0018651aca0rip=fffff80170984f63 rsp=ffffd000b1771800 rbp=0000000000000000 r8=0000000000000001  r9=ffffe001864f2f00 r10=ffffe00186524b08r11=ffffe001875aa860 r12=ffffe0018651ad00 r13=0000000000000000r14=ffffe0018651acb0 r15=0000000000000000iopl=0         nv up ei pl zr na po nccs=0010  ss=0018  ds=002b  es=002b  fs=0053  gs=002b             efl=00010246nt!CcDeleteBcbs+0x37:fffff801`70984f63 488b30          mov     rsi,qword ptr [rax] ds:002b:ffefe001`8651acb0=????????????????Resetting default scopeCUSTOMER_CRASH_COUNT:  1DEFAULT_BUCKET_ID:  WIN8_DRIVER_FAULTPROCESS_NAME:  SystemCURRENT_IRQL:  0ERROR_CODE: (NTSTATUS) 0xc0000005 - The instruction at "0x%08lx" referenced memory at "0x%08lx". The memory could not be "%s".EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at "0x%08lx" referenced memory at "0x%08lx". The memory could not be "%s".EXCEPTION_PARAMETER1:  0000000000000000EXCEPTION_PARAMETER2:  ffffffffffffffffREAD_ADDRESS: fffff80170b341c0: Unable to get special pool infofffff80170b341c0: Unable to get special pool infounable to get nt!MmNonPagedPoolStartunable to get nt!MmSizeOfNonPagedPoolInBytes ffffffffffffffff FOLLOWUP_IP: nt!CcDeleteBcbs+37fffff801`70984f63 488b30          mov     rsi,qword ptr [rax]FAULTING_IP: nt!CcDeleteBcbs+37fffff801`70984f63 488b30          mov     rsi,qword ptr [rax]BUGCHECK_STR:  0x34LAST_CONTROL_TRANSFER:  from fffff8017089cfb5 to fffff80170984f63STACK_TEXT:  ffffd000`b1771800 fffff801`7089cfb5 : ffffe001`8651ad00 00000000`00000001 ffffe001`864f2f20 ffffe001`8651aca0 : nt!CcDeleteBcbs+0x37ffffd000`b1771840 fffff801`708a092c : ffffe001`8651aca0 00000000`00000001 00000000`00000000 ffffe001`8651aca0 : nt!CcDeleteSharedCacheMap+0x211ffffd000`b1771870 fffff801`708a24d5 : ffffe001`8394a150 00000000`00000000 fffff801`00000000 00000000`000008bb : nt!CcWriteBehindInternal+0x330ffffd000`b1771900 fffff801`708a20a5 : 00000000`00000000 ffffe001`2d08e880 ffffe001`2c09ac30 00000000`00000000 : nt!CcWriteBehind+0x95ffffd000`b17719a0 fffff801`708f61cf : fffff801`70c40e00 ffffe001`2d08e900 fffff801`70b55940 00000000`00000000 : nt!CcWorkerThread+0x22dffffd000`b1771a50 fffff801`7096f0a8 : ffffd000`b0f0c3c0 ffffe001`2d08e880 00000000`00000080 ffffe001`2d08e880 : nt!ExpWorkerThread+0x69fffffd000`b1771b00 fffff801`709c6fc6 : ffffd000`b0f00180 ffffe001`2d08e880 ffffd000`b0f0c3c0 00000000`00000000 : nt!PspSystemThreadStartup+0x58ffffd000`b1771b60 00000000`00000000 : ffffd000`b1772000 ffffd000`b176b000 00000000`00000000 00000000`00000000 : nt!KiStartSystemThread+0x16SYMBOL_STACK_INDEX:  0SYMBOL_NAME:  nt!CcDeleteBcbs+37FOLLOWUP_NAME:  MachineOwnerMODULE_NAME: ntIMAGE_NAME:  ntkrnlmp.exeDEBUG_FLR_IMAGE_TIMESTAMP:  55a68c66STACK_COMMAND:  .cxr 0xffffd000b1770dd0 ; kbFAILURE_BUCKET_ID:  X64_0x34_nt!CcDeleteBcbs+37BUCKET_ID:  X64_0x34_nt!CcDeleteBcbs+37Followup: MachineOwner 

Windows 8 Kernel Version 9600 MP (8 procs) Free x64Product: WinNt, suite: TerminalServer SingleUserTSBuilt by: 9600.17041.amd64fre.winblue_gdr.140305-1710Machine Name:Kernel base = 0xfffff800`a8680000 PsLoadedModuleList = 0xfffff800`a894a2d0Debug session time: Tue Aug 25 03:37:19.085 2015 (UTC - 4:00)System Uptime: 0 days 0:37:06.112********************************************************************************                                                                             **                        Bugcheck Analysis                                    **                                                                             ********************************************************************************KMODE_EXCEPTION_NOT_HANDLED (1e)This is a very common bugcheck.  Usually the exception address pinpointsthe driver/function that caused the problem.  Always note this addressas well as the link date of the driver/image that contains this address.Arguments:Arg1: ffffffffc0000005, The exception code that was not handledArg2: fffff8017c6b1315, The address that the exception occurred atArg3: 0000000000000000, Parameter 0 of the exceptionArg4: ffffffffffffffff, Parameter 1 of the exceptionDebugging Details:------------------TRIAGER: Could not open triage file : e:\dump_analysis\program\triage\modclass.ini, error 2EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at "0x%08lx" referenced memory at "0x%08lx". The memory could not be "%s".FAULTING_IP: SamsungRapidDiskFltr+11315fffff801`7c6b1315 488b4808        mov     rcx,qword ptr [rax+8]EXCEPTION_PARAMETER1:  0000000000000000EXCEPTION_PARAMETER2:  ffffffffffffffffREAD_ADDRESS: fffff800a8937ce0: Unable to get special pool infofffff800a8937ce0: Unable to get special pool infounable to get nt!MmNonPagedPoolStartunable to get nt!MmSizeOfNonPagedPoolInBytes ffffffffffffffff ERROR_CODE: (NTSTATUS) 0xc0000005 - The instruction at "0x%08lx" referenced memory at "0x%08lx". The memory could not be "%s".BUGCHECK_STR:  0x1e_c0000005CUSTOMER_CRASH_COUNT:  1DEFAULT_BUCKET_ID:  WIN8_DRIVER_FAULTPROCESS_NAME:  SystemCURRENT_IRQL:  1LAST_CONTROL_TRANSFER:  from fffff800a881ed47 to fffff800a87d3fa0CONTEXT:  8b49084a89481189 -- (.cxr 0x8b49084a89481189)Unable to read context, Win32 error 0n30STACK_TEXT:  ffffd000`22a76b18 fffff800`a881ed47 : 00000000`0000001e ffffffff`c0000005 fffff801`7c6b1315 00000000`00000000 : nt!KeBugCheckExffffd000`22a76b20 fffff800`a87dfbc2 : 00000000`00000000 fffff801`7c6a881c 00000000`000004f0 00000000`00000078 : nt! ?? ::FNODOBFM::`string'+0x3a897ffffd000`22a77210 fffff800`a87de0fe : ffffe001`54045980 fffff800`a8923300 00000000`00000000 00000000`00000000 : nt!KiExceptionDispatch+0xc2ffffd000`22a773f0 fffff801`7c6b1315 : ffffe001`5dc24a10 00000000`00020000 00000000`00000000 ffffe001`a7c83a00 : nt!KiGeneralProtectionFault+0xfeffffd000`22a77580 ffffe001`5dc24a10 : 00000000`00020000 00000000`00000000 ffffe001`a7c83a00 00000000`00000002 : SamsungRapidDiskFltr+0x11315ffffd000`22a77588 00000000`00020000 : 00000000`00000000 ffffe001`a7c83a00 00000000`00000002 fffff801`7c6b3a93 : 0xffffe001`5dc24a10ffffd000`22a77590 00000000`00000000 : ffffe001`a7c83a00 00000000`00000002 fffff801`7c6b3a93 00000000`00000100 : 0x20000FOLLOWUP_IP: SamsungRapidDiskFltr+11315fffff801`7c6b1315 488b4808        mov     rcx,qword ptr [rax+8]SYMBOL_STACK_INDEX:  4SYMBOL_NAME:  SamsungRapidDiskFltr+11315FOLLOWUP_NAME:  MachineOwnerMODULE_NAME: SamsungRapidDiskFltrIMAGE_NAME:  SamsungRapidDiskFltr.sysDEBUG_FLR_IMAGE_TIMESTAMP:  54d1f7e2STACK_COMMAND:  .cxr 0x8b49084a89481189 ; kbFAILURE_BUCKET_ID:  X64_0x1e_c0000005_SamsungRapidDiskFltr+11315BUCKET_ID:  X64_0x1e_c0000005_SamsungRapidDiskFltr+11315Followup: MachineOwner 

Windows 8 Kernel Version 9600 MP (8 procs) Free x64Product: WinNt, suite: TerminalServer SingleUserTSBuilt by: 9600.17936.amd64fre.winblue_ltsb.150715-0840Machine Name:Kernel base = 0xfffff802`0961e000 PsLoadedModuleList = 0xfffff802`098f37b0Debug session time: Wed Aug 26 15:55:06.571 2015 (UTC - 4:00)System Uptime: 0 days 3:40:46.228********************************************************************************                                                                             **                        Bugcheck Analysis                                    **                                                                             ********************************************************************************SYSTEM_SERVICE_EXCEPTION (3b)An exception happened while executing a system service routine.Arguments:Arg1: 00000000c0000005, Exception code that caused the bugcheckArg2: fffff80209a47d83, Address of the instruction which caused the bugcheckArg3: ffffd00023815bf0, Address of the context record for the exception that caused the bugcheckArg4: 0000000000000000, zero.Debugging Details:------------------TRIAGER: Could not open triage file : e:\dump_analysis\program\triage\modclass.ini, error 2EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at "0x%08lx" referenced memory at "0x%08lx". The memory could not be "%s".FAULTING_IP: nt!MiMapViewOfImageSection+d7fffff802`09a47d83 8a4128          mov     al,byte ptr [rcx+28h]CONTEXT:  ffffd00023815bf0 -- (.cxr 0xffffd00023815bf0)rax=0000000077300006 rbx=0000000000000002 rcx=fffee0005b7fc920rdx=000000008000d014 rsi=ffffc000a4e81210 rdi=0000000000000000rip=fffff80209a47d83 rsp=ffffd00023816620 rbp=ffffd000238166f9 r8=ffffc000a4ea02c0  r9=ffffc000a4ea0308 r10=ffffe000579a8080r11=ffffe0005b7fc800 r12=ffffe0005b7fc800 r13=0000000000000000r14=ffffd00023816920 r15=ffffe000579a8080iopl=0         nv up ei ng nz na pe nccs=0010  ss=0018  ds=002b  es=002b  fs=0053  gs=002b             efl=00010282nt!MiMapViewOfImageSection+0xd7:fffff802`09a47d83 8a4128          mov     al,byte ptr [rcx+28h] ds:002b:fffee000`5b7fc948=??Resetting default scopeCUSTOMER_CRASH_COUNT:  1DEFAULT_BUCKET_ID:  WIN8_DRIVER_FAULTBUGCHECK_STR:  0x3BPROCESS_NAME:  chrome.exeCURRENT_IRQL:  0LAST_CONTROL_TRANSFER:  from fffff802099c0b3d to fffff80209a47d83STACK_TEXT:  ffffd000`23816620 fffff802`099c0b3d : 00000000`00000400 00000000`00000001 00000000`00800000 ffffd000`23816920 : nt!MiMapViewOfImageSection+0xd7ffffd000`23816730 fffff802`09a8d80d : 00000000`00000000 ffffd000`00000008 ffffe000`56af5080 ffffc000`a4f06f01 : nt!MiMapViewOfSection+0x371ffffd000`238168b0 fffff802`097791b3 : 00000000`00000178 ffffe000`57f85080 00000000`0066e3e8 00000000`0066e508 : nt!NtMapViewOfSection+0x2bdffffd000`23816990 00007ffd`adf0145a : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSystemServiceCopyEnd+0x1300000000`0066e3c8 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x7ffd`adf0145aFOLLOWUP_IP: nt!MiMapViewOfImageSection+d7fffff802`09a47d83 8a4128          mov     al,byte ptr [rcx+28h]SYMBOL_STACK_INDEX:  0SYMBOL_NAME:  nt!MiMapViewOfImageSection+d7FOLLOWUP_NAME:  MachineOwnerMODULE_NAME: ntDEBUG_FLR_IMAGE_TIMESTAMP:  55a68c66STACK_COMMAND:  .cxr 0xffffd00023815bf0 ; kbIMAGE_NAME:  memory_corruptionFAILURE_BUCKET_ID:  X64_0x3B_nt!MiMapViewOfImageSection+d7BUCKET_ID:  X64_0x3B_nt!MiMapViewOfImageSection+d7 

Windows 8 Kernel Version 9600 MP (8 procs) Free x64Product: WinNt, suite: TerminalServer SingleUserTSBuilt by: 9600.17936.amd64fre.winblue_ltsb.150715-0840Machine Name:Kernel base = 0xfffff801`95c04000 PsLoadedModuleList = 0xfffff801`95ed97b0Debug session time: Wed Aug 26 15:59:39.262 2015 (UTC - 4:00)System Uptime: 0 days 0:04:05.919********************************************************************************                                                                             **                        Bugcheck Analysis                                    **                                                                             ********************************************************************************NTFS_FILE_SYSTEM (24)    If you see NtfsExceptionFilter on the stack then the 2nd and 3rd    parameters are the exception record and context record. Do a .cxr    on the 3rd parameter and then kb to obtain a more informative stack    trace.Arguments:Arg1: 000000b500190645Arg2: ffffd000217ef5d8Arg3: ffffd000217eede0Arg4: fffff80195ceb960Debugging Details:------------------TRIAGER: Could not open triage file : e:\dump_analysis\program\triage\modclass.ini, error 2EXCEPTION_RECORD:  ffffd000217ef5d8 -- (.exr 0xffffd000217ef5d8)ExceptionAddress: fffff80195ceb960 (nt!KxWaitForLockOwnerShipWithIrql+0x0000000000000014)   ExceptionCode: c0000005 (Access violation)  ExceptionFlags: 00000000NumberParameters: 2   Parameter[0]: 0000000000000000   Parameter[1]: ffffffffffffffffAttempt to read from address ffffffffffffffffCONTEXT:  ffffd000217eede0 -- (.cxr 0xffffd000217eede0)rax=0000000000000000 rbx=0000000000000000 rcx=ffffd000217ef860rdx=0010000000000000 rsi=ffffe0010f06a080 rdi=ffffd000217ef860rip=fffff80195ceb960 rsp=ffffd000217ef810 rbp=ffffd000217ef880 r8=ffffd000217ef8b0  r9=ffffe00115760180 r10=0000000000000004r11=ffffd000217ef988 r12=0000000000000000 r13=ffffe00163a4ad38r14=0000000000000001 r15=0000000000000000iopl=0         nv up di pl zr na po nccs=0010  ss=0018  ds=002b  es=002b  fs=0053  gs=002b             efl=00010046nt!KxWaitForLockOwnerShipWithIrql+0x14:fffff801`95ceb960 48890a          mov     qword ptr [rdx],rcx ds:002b:00100000`00000000=????????????????Resetting default scopeCUSTOMER_CRASH_COUNT:  1DEFAULT_BUCKET_ID:  WIN8_DRIVER_FAULTPROCESS_NAME:  PillarsOfEternCURRENT_IRQL:  0ERROR_CODE: (NTSTATUS) 0xc0000005 - The instruction at "0x%08lx" referenced memory at "0x%08lx". The memory could not be "%s".EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at "0x%08lx" referenced memory at "0x%08lx". The memory could not be "%s".EXCEPTION_PARAMETER1:  0000000000000000EXCEPTION_PARAMETER2:  ffffffffffffffffREAD_ADDRESS: fffff80195ec71c0: Unable to get special pool infofffff80195ec71c0: Unable to get special pool infounable to get nt!MmNonPagedPoolStartunable to get nt!MmSizeOfNonPagedPoolInBytes ffffffffffffffff FOLLOWUP_IP: Ntfs!NtfsCommonQueryInformation+1f8fffff800`031ead68 c644244101      mov     byte ptr [rsp+41h],1FAULTING_IP: nt!KxWaitForLockOwnerShipWithIrql+14fffff801`95ceb960 48890a          mov     qword ptr [rdx],rcxBUGCHECK_STR:  0x24LAST_CONTROL_TRANSFER:  from fffff80195c9f781 to fffff80195ceb960STACK_TEXT:  ffffd000`217ef810 fffff801`95c9f781 : ffffe001`6460a290 ffffe001`10317c80 00000000`00000060 00000000`20206f49 : nt!KxWaitForLockOwnerShipWithIrql+0x14ffffd000`217ef840 fffff800`031ead68 : 00000000`00000002 ffffc000`22823e50 ffffc000`22823c30 ffffe001`10204440 : nt!ExAcquireResourceSharedLite+0x351ffffd000`217ef8b0 fffff800`031f4f83 : ffffd000`217efa30 ffffe001`63a4a950 00000000`0000000c ffffe001`0000000c : Ntfs!NtfsCommonQueryInformation+0x1f8ffffd000`217ef990 fffff800`031f518a : ffffd000`217efa30 ffffe001`63a4a950 ffffe001`63a4a950 00000000`00000000 : Ntfs!NtfsFsdDispatchSwitch+0xd3ffffd000`217efa10 fffff800`02830b2a : ffffe001`63a4a950 ffffe001`15760030 00000000`00000000 ffffe001`0f0d72a0 : Ntfs!NtfsFsdDispatchWait+0x47ffffd000`217efc60 fffff800`02830bcd : 00000000`00000000 fffff801`95ea3b5b ffffd000`217efd90 ffffe001`1577d010 : fltmgr!FltpQueryInformationFile+0x11affffd000`217efcf0 fffff800`0282d882 : ffffd000`217eff30 fffff800`02801a3d ffffe001`1577d108 ffffe001`0eb9b200 : fltmgr!QueryStandardLinkInformation+0x4dffffd000`217efd70 fffff800`02806814 : ffffe001`1577d010 ffffe001`63a71c70 00000000`00000000 ffffe001`6463ca68 : fltmgr!FltpSetStreamListStandardInformationFlags+0x7affffd000`217efdf0 fffff800`0280810a : ffffe001`6463ca60 00000000`00000000 00000000`00000000 ffffe001`6463ca64 : fltmgr!FltpGetFileNameInformation+0x204ffffd000`217efe80 fffff800`028659c4 : ffffe001`63a71c70 ffffc000`228d3740 ffffd000`217eff70 ffffd000`217f0098 : fltmgr!FltGetFileNameInformation+0x14affffd000`217eff10 fffff800`02864a01 : ffffd000`217f0098 00000000`00000000 ffffe001`1576a800 00000000`00002723 : fileinfo!FIStreamGetInfo+0xa4ffffd000`217effa0 fffff800`028039d7 : 00000000`00000000 ffffc000`00000001 00000000`00f800dc ffffc000`00000000 : fileinfo!FIPostCreateCallback+0x1f1ffffd000`217f0050 fffff800`0280414d : ffffe001`63f9b900 00000000`00000000 00000000`00060000 00000000`00000000 : fltmgr!FltpPerformPostCallbacks+0x2d7ffffd000`217f0120 fffff800`02802bc1 : ffffe001`0f027b80 ffffe001`0f027b98 ffffe001`63f9ba30 ffffe001`0f027b80 : fltmgr!FltpPassThroughCompletionWorker+0x7dffffd000`217f0190 fffff800`0282b349 : ffffd000`217f0270 ffffe001`0f027b80 ffffe001`63f9b600 ffffe001`135f7920 : fltmgr!FltpLegacyProcessingAfterPreCallbacksCompleted+0x371ffffd000`217f0230 fffff801`95fbbb41 : 00000000`00000000 00000000`00000045 00000000`00000000 ffffd000`00000040 : fltmgr!FltpCreate+0x339ffffd000`217f02e0 fffff801`960a9854 : 00000000`00000000 00000000`00000000 00000000`00000000 ffffe001`1337dc70 : nt!IopParseDevice+0x6c1ffffd000`217f0500 fffff801`95fc86a3 : 00000000`00000000 ffffd000`217f06a8 00000000`00000040 ffffe001`0ec38c60 : nt!ObpLookupObjectName+0x784ffffd000`217f0630 fffff801`960780bd : fffff801`00000001 00000000`018ce0c8 00000000`018cfdb0 00000000`018ce960 : nt!ObOpenObjectByName+0x1e3ffffd000`217f0760 fffff801`95d5f1b3 : 00000000`00000000 00000000`00000000 ffffe001`0f06a080 00000000`019cee38 : nt!NtQueryAttributesFile+0x141ffffd000`217f0a00 00007ffa`9cf215aa : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSystemServiceCopyEnd+0x1300000000`018ce088 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x7ffa`9cf215aaSYMBOL_STACK_INDEX:  2SYMBOL_NAME:  Ntfs!NtfsCommonQueryInformation+1f8FOLLOWUP_NAME:  MachineOwnerMODULE_NAME: NtfsIMAGE_NAME:  Ntfs.sysDEBUG_FLR_IMAGE_TIMESTAMP:  54387b6bSTACK_COMMAND:  .cxr 0xffffd000217eede0 ; kbFAILURE_BUCKET_ID:  X64_0x24_Ntfs!NtfsCommonQueryInformation+1f8BUCKET_ID:  X64_0x24_Ntfs!NtfsCommonQueryInformation+1f8 

Windows 8 Kernel Version 9600 MP (8 procs) Free x64Product: WinNt, suite: TerminalServer SingleUserTSBuilt by: 9600.17936.amd64fre.winblue_ltsb.150715-0840Machine Name:Kernel base = 0xfffff800`68e0a000 PsLoadedModuleList = 0xfffff800`690df7b0Debug session time: Wed Aug 26 12:13:53.383 2015 (UTC - 4:00)System Uptime: 0 days 0:06:18.040********************************************************************************                                                                             **                        Bugcheck Analysis                                    **                                                                             ********************************************************************************DPC_WATCHDOG_VIOLATION (133)The DPC watchdog detected a prolonged run time at an IRQL of DISPATCH_LEVELor above.Arguments:Arg1: 0000000000000001, The system cumulatively spent an extended period of time at	DISPATCH_LEVEL or above. The offending component can usually be	identified with a stack trace.Arg2: 0000000000001e00, The watchdog period.Arg3: 0000000000000000Arg4: 0000000000000000Debugging Details:------------------CUSTOMER_CRASH_COUNT:  1DEFAULT_BUCKET_ID:  WIN8_DRIVER_FAULTBUGCHECK_STR:  0x133PROCESS_NAME:  SystemCURRENT_IRQL:  dLAST_CONTROL_TRANSFER:  from 0000000000000000 to fffff80068f599a0STACK_TEXT:  ffffd002`029bac88 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KeBugCheckExSTACK_COMMAND:  kbSYMBOL_NAME:  ANALYSIS_INCONCLUSIVEFOLLOWUP_NAME:  MachineOwnerMODULE_NAME: Unknown_ModuleIMAGE_NAME:  Unknown_ImageDEBUG_FLR_IMAGE_TIMESTAMP:  0BUCKET_ID:  ZEROED_STACKFollowup: MachineOwner 

Windows 8 Kernel Version 9600 MP (8 procs) Free x64Product: WinNt, suite: TerminalServer SingleUserTSBuilt by: 9600.17936.amd64fre.winblue_ltsb.150715-0840Machine Name:Kernel base = 0xfffff803`c500d000 PsLoadedModuleList = 0xfffff803`c52e27b0Debug session time: Wed Aug 26 12:07:09.785 2015 (UTC - 4:00)System Uptime: 0 days 0:53:08.443********************************************************************************                                                                             **                        Bugcheck Analysis                                    **                                                                             ********************************************************************************NTFS_FILE_SYSTEM (24)    If you see NtfsExceptionFilter on the stack then the 2nd and 3rd    parameters are the exception record and context record. Do a .cxr    on the 3rd parameter and then kb to obtain a more informative stack    trace.Arguments:Arg1: 000000b500190645Arg2: ffffd000268c9258Arg3: ffffd000268c8a60Arg4: fffff803c50f1a8bDebugging Details:------------------TRIAGER: Could not open triage file : e:\dump_analysis\program\triage\modclass.ini, error 2EXCEPTION_RECORD:  ffffd000268c9258 -- (.exr 0xffffd000268c9258)ExceptionAddress: fffff803c50f1a8b (nt!RtlDeleteNoSplay+0x000000000000007b)   ExceptionCode: c0000005 (Access violation)  ExceptionFlags: 00000000NumberParameters: 2   Parameter[0]: 0000000000000000   Parameter[1]: ffffffffffffffffAttempt to read from address ffffffffffffffffCONTEXT:  ffffd000268c8a60 -- (.cxr 0xffffd000268c8a60)rax=ffffc000f7bf9878 rbx=ffffc000f7bf9878 rcx=0002000000000000rdx=ffffe000a49c75a0 rsi=ffffc000f7ca3c38 rdi=ffffe000a49c75a0rip=fffff803c50f1a8b rsp=ffffd000268c9490 rbp=ffffffffffffffff r8=ffffffffffffffff  r9=ffffffffffffffff r10=ffffc000f7c60820r11=ffffd000268c9550 r12=0000000000000000 r13=0000000000000000r14=ffffe000a49c75a0 r15=ffffe0004bc0d7f8iopl=0         nv up ei pl zr na po nccs=0010  ss=0018  ds=002b  es=002b  fs=0053  gs=002b             efl=00010246nt!RtlDeleteNoSplay+0x7b:fffff803`c50f1a8b 488909          mov     qword ptr [rcx],rcx ds:002b:00020000`00000000=????????????????Resetting default scopeCUSTOMER_CRASH_COUNT:  1DEFAULT_BUCKET_ID:  WIN8_DRIVER_FAULTPROCESS_NAME:  SystemCURRENT_IRQL:  0ERROR_CODE: (NTSTATUS) 0xc0000005 - The instruction at "0x%08lx" referenced memory at "0x%08lx". The memory could not be "%s".EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at "0x%08lx" referenced memory at "0x%08lx". The memory could not be "%s".EXCEPTION_PARAMETER1:  0000000000000000EXCEPTION_PARAMETER2:  ffffffffffffffffREAD_ADDRESS: fffff803c52d01c0: Unable to get special pool infofffff803c52d01c0: Unable to get special pool infounable to get nt!MmNonPagedPoolStartunable to get nt!MmSizeOfNonPagedPoolInBytes ffffffffffffffff FOLLOWUP_IP: Ntfs!NtfsDeleteScb+399fffff800`80d338c9 488b03          mov     rax,qword ptr [rbx]FAULTING_IP: nt!RtlDeleteNoSplay+7bfffff803`c50f1a8b 488909          mov     qword ptr [rcx],rcxBUGCHECK_STR:  0x24LAST_CONTROL_TRANSFER:  from fffff80080ad996a to fffff803c50f1a8bSTACK_TEXT:  ffffd000`268c9490 fffff800`80ad996a : ffffc000`f7bf9878 fffff803`c505fd7a 00000000`00000120 ffffe000`6c734d46 : nt!RtlDeleteNoSplay+0x7bffffd000`268c94c0 fffff800`80b00852 : ffffffff`ffffffff ffffe000`a49c75a0 ffffe000`a49c7b30 ffffc000`f7c95c58 : fltmgr!TreeUnlinkMulti+0x13dffffd000`268c9510 fffff800`80b01b92 : ffffe000`a49c7598 00000000`00000705 ffffffff`ffffffff ffffe000`51f87010 : fltmgr!FltpDeleteContextList+0x42ffffd000`268c9540 fffff800`80b01b26 : ffffe000`a49c7550 00000000`00000705 00000000`00000702 00000000`00000705 : fltmgr!CleanupStreamListCtrl+0x4affffd000`268c9580 fffff803`c540cd27 : 00000000`00000000 fffff803`c50af0a1 ffffc000`f7c97510 00000000`00000700 : fltmgr!DeleteStreamListCtrlCallback+0x92ffffd000`268c95c0 fffff800`80d338c9 : ffffc000`f7c60820 ffffe000`a49c7558 ffffe000`51f84180 00000000`00000706 : nt!FsRtlTeardownPerStreamContexts+0x53ffffd000`268c9630 fffff800`80d28c39 : 00000000`01010705 00000000`a1b2b400 00000000`00000000 00000000`00000000 : Ntfs!NtfsDeleteScb+0x399ffffd000`268c96e0 fffff800`80c837d4 : ffffe000`4cae10c0 ffffc000`f7c60820 00000000`00000001 ffffc000`f7c60720 : Ntfs!NtfsRemoveScb+0x99ffffd000`268c9720 fffff800`80d2c170 : ffffc000`f7c606f0 ffffd000`268c9940 ffffc000`f7c606f0 ffffd000`268c9800 : Ntfs!NtfsPrepareFcbForRemoval+0x54ffffd000`268c9750 fffff800`80c8aa20 : ffffe000`4bc0d7f8 ffffc000`f7c606f0 ffffc000`f7c60ac0 ffffc000`f7c606f0 : Ntfs!NtfsTeardownStructures+0x90ffffd000`268c97d0 fffff800`80d4e334 : ffffd000`268c9978 ffffd000`268c9940 ffffc000`f7c606f0 ffffc000`f7c606f0 : Ntfs!NtfsDecrementCloseCounts+0xd4ffffd000`268c9810 fffff800`80d34421 : ffffe000`4bc0d7f8 ffffc000`f7c60820 ffffc000`f7c606f0 ffffe000`51f84180 : Ntfs!NtfsCommonClose+0x3a4ffffd000`268c98e0 fffff803`c50921cf : fffff803`c5497034 fffff800`80d34580 fffff800`80cd3ce8 00000000`00000000 : Ntfs!NtfsFspCloseInternal+0x1a1ffffd000`268c9a50 fffff803`c510b0a8 : 0000000a`4fff3860 ffffe000`50600040 00000000`00000080 ffffe000`50600040 : nt!ExpWorkerThread+0x69fffffd000`268c9b00 fffff803`c5162fc6 : ffffd001`9c8bb180 ffffe000`50600040 ffffe000`50640080 00000000`00000001 : nt!PspSystemThreadStartup+0x58ffffd000`268c9b60 00000000`00000000 : ffffd000`268ca000 ffffd000`268c3000 00000000`00000000 00000000`00000000 : nt!KiStartSystemThread+0x16SYMBOL_STACK_INDEX:  6SYMBOL_NAME:  Ntfs!NtfsDeleteScb+399FOLLOWUP_NAME:  MachineOwnerMODULE_NAME: NtfsIMAGE_NAME:  Ntfs.sysDEBUG_FLR_IMAGE_TIMESTAMP:  54387b6bSTACK_COMMAND:  .cxr 0xffffd000268c8a60 ; kbFAILURE_BUCKET_ID:  X64_0x24_Ntfs!NtfsDeleteScb+399BUCKET_ID:  X64_0x24_Ntfs!NtfsDeleteScb+399Followup: MachineOwner 

Windows 8 Kernel Version 9600 MP (8 procs) Free x64Product: WinNt, suite: TerminalServer SingleUserTSBuilt by: 9600.17936.amd64fre.winblue_ltsb.150715-0840Machine Name:Kernel base = 0xfffff800`59677000 PsLoadedModuleList = 0xfffff800`5994c7b0Debug session time: Thu Aug 27 13:17:09.704 2015 (UTC - 4:00)System Uptime: 0 days 0:01:24.361********************************************************************************                                                                             **                        Bugcheck Analysis                                    **                                                                             ********************************************************************************MEMORY_MANAGEMENT (1a)    # Any other values for parameter 1 must be individually examined.Arguments:Arg1: 0000000000041792, The subtype of the bugcheck.Arg2: fffff6801ccad8f8Arg3: 0002000000000000Arg4: 0000000000000000Debugging Details:------------------TRIAGER: Could not open triage file : e:\dump_analysis\program\triage\modclass.ini, error 2BUGCHECK_STR:  0x1a_41792CUSTOMER_CRASH_COUNT:  1DEFAULT_BUCKET_ID:  WIN8_DRIVER_FAULTPROCESS_NAME:  svchost.exeCURRENT_IRQL:  0LAST_CONTROL_TRANSFER:  from fffff800597e8456 to fffff800597c69a0STACK_TEXT:  ffffd001`454b41b8 fffff800`597e8456 : 00000000`0000001a 00000000`00041792 fffff680`1ccad8f8 00020000`00000000 : nt!KeBugCheckExffffd001`454b41c0 fffff800`596bc43a : ffffffff`ffff0000 00000000`00000006 00000000`00000000 ffffe001`00000000 : nt! ?? ::FNODOBFM::`string'+0x11596ffffd001`454b4450 fffff800`596bad29 : ffffe001`fc104b80 00000000`00000010 00000000`00000000 00000000`00000000 : nt!MiDeleteVad+0xbcaffffd001`454b4550 fffff800`597d21b3 : 00000000`00010002 ffffd001`454b4830 00000000`00000000 00000000`00000028 : nt!NtFreeVirtualMemory+0x879ffffd001`454b46b0 fffff800`597ca620 : fffff800`59b0b32b 00000000`00000001 00000000`00000000 ffffe001`fc144040 : nt!KiSystemServiceCopyEnd+0x13ffffd001`454b4848 fffff800`59b0b32b : 00000000`00000001 00000000`00000000 ffffe001`fc144040 00000000`00000000 : nt!KiServiceLinkageffffd001`454b4850 fffff800`59a8c9b7 : 00000039`95ac0000 00000000`00000000 ffffe001`fbf9d520 ffffe001`fbf9d520 : nt!RtlFreeUserStack+0x27ffffd001`454b4880 fffff800`59a5f7a7 : ffffffff`00000000 ffffe001`fc144040 ffffe001`fc144001 00000000`00000000 : nt!PspExitThread+0x32fffffd001`454b4990 fffff800`59a5f744 : ffffe001`fc144040 ffffe001`fc144040 00007ff9`e18b10d0 00007ff7`d4f78000 : nt!PspTerminateThreadByPointer+0x47ffffd001`454b49c0 fffff800`597d21b3 : ffffe001`fc144040 ffffd001`454b4a80 00000000`00000010 00000000`00000000 : nt!NtTerminateThread+0x40ffffd001`454b4a00 00007ff9`e286170a : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSystemServiceCopyEnd+0x1300000039`95b3f9f8 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x7ff9`e286170aSTACK_COMMAND:  kbFOLLOWUP_IP: nt! ?? ::FNODOBFM::`string'+11596fffff800`597e8456 cc              int     3SYMBOL_STACK_INDEX:  1SYMBOL_NAME:  nt! ?? ::FNODOBFM::`string'+11596FOLLOWUP_NAME:  MachineOwnerMODULE_NAME: ntIMAGE_NAME:  ntkrnlmp.exeDEBUG_FLR_IMAGE_TIMESTAMP:  55a68c66FAILURE_BUCKET_ID:  X64_0x1a_41792_nt!_??_::FNODOBFM::_string_+11596BUCKET_ID:  X64_0x1a_41792_nt!_??_::FNODOBFM::_string_+11596Followup: MachineOwner 

Windows 8 Kernel Version 9600 MP (8 procs) Free x64Product: WinNt, suite: TerminalServer SingleUserTSBuilt by: 9600.17936.amd64fre.winblue_ltsb.150715-0840Machine Name:Kernel base = 0xfffff802`b9271000 PsLoadedModuleList = 0xfffff802`b95467b0Debug session time: Thu Aug 27 13:14:17.294 2015 (UTC - 4:00)System Uptime: 0 days 0:02:10.951********************************************************************************                                                                             **                        Bugcheck Analysis                                    **                                                                             ********************************************************************************SYSTEM_SERVICE_EXCEPTION (3b)An exception happened while executing a system service routine.Arguments:Arg1: 00000000c0000005, Exception code that caused the bugcheckArg2: fffff80069774697, Address of the instruction which caused the bugcheckArg3: ffffd00022256800, Address of the context record for the exception that caused the bugcheckArg4: 0000000000000000, zero.Debugging Details:------------------TRIAGER: Could not open triage file : e:\dump_analysis\program\triage\modclass.ini, error 2EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at "0x%08lx" referenced memory at "0x%08lx". The memory could not be "%s".FAULTING_IP: cng!_DetermineFunctionInterface+1d7fffff800`69774697 488b11          mov     rdx,qword ptr [rcx]CONTEXT:  ffffd00022256800 -- (.cxr 0xffffd00022256800)rax=ffffe00053e0f170 rbx=ffffe00053ec5940 rcx=ff7fe00053ec5860rdx=ffffe00053ec58b8 rsi=0000000000000009 rdi=0000000000000002rip=fffff80069774697 rsp=ffffd00022257230 rbp=0000000000000009 r8=0000000000000003  r9=ffffe0005ab08770 r10=ffffe0005ab08772r11=fffffffff93bcb70 r12=0000000000000000 r13=ffffe00052918470r14=ffffd00022257388 r15=ffffe00053ec5930iopl=0         nv up ei ng nz na po nccs=0010  ss=0018  ds=002b  es=002b  fs=0053  gs=002b             efl=00010286cng!_DetermineFunctionInterface+0x1d7:fffff800`69774697 488b11          mov     rdx,qword ptr [rcx] ds:002b:ff7fe000`53ec5860=????????????????Resetting default scopeCUSTOMER_CRASH_COUNT:  1DEFAULT_BUCKET_ID:  WIN8_DRIVER_FAULTBUGCHECK_STR:  0x3BPROCESS_NAME:  MsMpEng.exeCURRENT_IRQL:  0LAST_CONTROL_TRANSFER:  from fffff800697734bb to fffff80069774697STACK_TEXT:  ffffd000`22257230 fffff800`697734bb : fffff800`697ea500 fffff800`697ea470 00000000`00010004 ffffd000`22257344 : cng!_DetermineFunctionInterface+0x1d7ffffd000`222572d0 fffff800`6977395a : 00000000`00020000 ffffd000`22257560 ffffd000`22bab480 fffff580`10804320 : cng!BCryptResolveProviders+0x1a3ffffd000`222574f0 fffff800`6976e4c3 : 00000000`00000008 00000000`00000008 ffff0d2c`8e37ea89 ffffd000`22bab480 : cng!ResolutionFunctionIoHandler+0xcaffffd000`22257570 fffff800`6976e1dc : 00000000`00000000 ffffd000`22bab480 ffffe000`00000000 ffffd000`22257698 : cng!ConfigIoHandler+0xafffffd000`222575b0 fffff800`6a2e4262 : 00000000`c00000bb 00000000`00000038 ffffe000`5b400d70 00000000`00000000 : cng!CngDeviceControl+0x21cffffd000`22257600 fffff800`6a2e40ff : ffffe000`5b400d70 00000000`00000000 00000000`00390402 ffffe000`00000000 : ksecdd!KsecDeviceControl+0xa2ffffd000`22257680 fffff802`b962a140 : ffffe000`59b1f7f0 ffffd000`00000008 00000000`00000002 ffffd000`22257741 : ksecdd!KsecDispatch+0x9fffffd000`222576c0 fffff802`b971521d : 00000000`00000008 ffffe000`59b1f7f0 00000000`00000008 00000000`00000008 : nt!IopSynchronousServiceTail+0x160ffffd000`22257790 fffff802`b96e054a : ffffe000`58b16010 00000000`00000000 00000000`00000000 00000000`00000000 : nt!IopXxxControlFile+0xd2dffffd000`22257920 fffff802`b93cc1b3 : fffff6fb`7dbed7f8 fffff6fb`7dafff90 fffff6fb`5fff2720 fffff6bf`fe4e4398 : nt!NtDeviceIoControlFile+0x56ffffd000`22257990 00007ffc`9ff9124a : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSystemServiceCopyEnd+0x13000000a1`69b4f418 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x7ffc`9ff9124aFOLLOWUP_IP: cng!_DetermineFunctionInterface+1d7fffff800`69774697 488b11          mov     rdx,qword ptr [rcx]SYMBOL_STACK_INDEX:  0SYMBOL_NAME:  cng!_DetermineFunctionInterface+1d7FOLLOWUP_NAME:  MachineOwnerMODULE_NAME: cngIMAGE_NAME:  cng.sysDEBUG_FLR_IMAGE_TIMESTAMP:  55187b0dSTACK_COMMAND:  .cxr 0xffffd00022256800 ; kbFAILURE_BUCKET_ID:  X64_0x3B_cng!_DetermineFunctionInterface+1d7BUCKET_ID:  X64_0x3B_cng!_DetermineFunctionInterface+1d7Followup: MachineOwner 

Windows 8 Kernel Version 9600 MP (8 procs) Free x64Product: WinNt, suite: TerminalServer SingleUserTSBuilt by: 9600.17936.amd64fre.winblue_ltsb.150715-0840Machine Name:Kernel base = 0xfffff802`8961c000 PsLoadedModuleList = 0xfffff802`898f17b0Debug session time: Thu Aug 27 13:11:40.058 2015 (UTC - 4:00)System Uptime: 0 days 0:44:46.716********************************************************************************                                                                             **                        Bugcheck Analysis                                    **                                                                             ********************************************************************************KMODE_EXCEPTION_NOT_HANDLED (1e)This is a very common bugcheck.  Usually the exception address pinpointsthe driver/function that caused the problem.  Always note this addressas well as the link date of the driver/image that contains this address.Arguments:Arg1: ffffffffc0000005, The exception code that was not handledArg2: fffff802896a4705, The address that the exception occurred atArg3: 0000000000000000, Parameter 0 of the exceptionArg4: ffffffffffffffff, Parameter 1 of the exceptionDebugging Details:------------------TRIAGER: Could not open triage file : e:\dump_analysis\program\triage\modclass.ini, error 2EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at "0x%08lx" referenced memory at "0x%08lx". The memory could not be "%s".FAULTING_IP: nt!KiCommitThreadWait+145fffff802`896a4705 c3              retEXCEPTION_PARAMETER1:  0000000000000000EXCEPTION_PARAMETER2:  ffffffffffffffffREAD_ADDRESS: fffff802898df1c0: Unable to get special pool infofffff802898df1c0: Unable to get special pool infounable to get nt!MmNonPagedPoolStartunable to get nt!MmSizeOfNonPagedPoolInBytes ffffffffffffffff ERROR_CODE: (NTSTATUS) 0xc0000005 - The instruction at "0x%08lx" referenced memory at "0x%08lx". The memory could not be "%s".BUGCHECK_STR:  0x1e_c0000005CUSTOMER_CRASH_COUNT:  1DEFAULT_BUCKET_ID:  WIN8_DRIVER_FAULTPROCESS_NAME:  SystemCURRENT_IRQL:  0LAST_CONTROL_TRANSFER:  from fffff80289799141 to fffff8028976b9a0CONTEXT:  e9400000800e8141 -- (.cxr 0xe9400000800e8141)Unable to read context, Win32 error 0n30STACK_TEXT:  ffffd001`8e891f48 fffff802`89799141 : 00000000`0000001e ffffffff`c0000005 fffff802`896a4705 00000000`00000000 : nt!KeBugCheckExffffd001`8e891f50 fffff802`897775c2 : 00000000`00000000 fffff802`89db269a 00000000`00000000 00000000`00000000 : nt! ?? ::FNODOBFM::`string'+0x1d281ffffd001`8e892640 fffff802`89775afe : 00000000`00000000 00000000`00000000 ffffd001`8db40180 ffffe001`35c57570 : nt!KiExceptionDispatch+0xc2ffffd001`8e892820 fffff802`896a4705 : ffbff802`896a42b5 ffffe001`35c57300 ffffd001`8db40180 ffffe001`2e886a01 : nt!KiGeneralProtectionFault+0xfeffffd001`8e8929b8 ffbff802`896a42b5 : ffffe001`35c57300 ffffd001`8db40180 ffffe001`2e886a01 ffffe001`2e886078 : nt!KiCommitThreadWait+0x145ffffd001`8e8929c0 ffffe001`35c57300 : ffffd001`8db40180 ffffe001`2e886a01 ffffe001`2e886078 00000000`00000004 : 0xffbff802`896a42b5ffffd001`8e8929c8 ffffd001`8db40180 : ffffe001`2e886a01 ffffe001`2e886078 00000000`00000004 00000000`00000001 : 0xffffe001`35c57300ffffd001`8e8929d0 ffffe001`2e886a01 : ffffe001`2e886078 00000000`00000004 00000000`00000001 00000000`00000001 : 0xffffd001`8db40180ffffd001`8e8929d8 ffffe001`2e886078 : 00000000`00000004 00000000`00000001 00000000`00000001 00000000`00000000 : 0xffffe001`2e886a01ffffd001`8e8929e0 00000000`00000004 : 00000000`00000001 00000000`00000001 00000000`00000000 00000000`ff224c00 : 0xffffe001`2e886078ffffd001`8e8929e8 00000000`00000001 : 00000000`00000001 00000000`00000000 00000000`ff224c00 fffff802`8967065c : 0x4ffffd001`8e8929f0 00000000`00000001 : 00000000`00000000 00000000`ff224c00 fffff802`8967065c 00000000`00000010 : 0x1ffffd001`8e8929f8 00000000`00000000 : 00000000`ff224c00 fffff802`8967065c 00000000`00000010 00000000`00000297 : 0x1FOLLOWUP_IP: nt!KiCommitThreadWait+145fffff802`896a4705 c3              retSYMBOL_STACK_INDEX:  4SYMBOL_NAME:  nt!KiCommitThreadWait+145FOLLOWUP_NAME:  MachineOwnerMODULE_NAME: ntIMAGE_NAME:  ntkrnlmp.exeDEBUG_FLR_IMAGE_TIMESTAMP:  55a68c66STACK_COMMAND:  .cxr 0xe9400000800e8141 ; kbFAILURE_BUCKET_ID:  X64_0x1e_c0000005_nt!KiCommitThreadWait+145BUCKET_ID:  X64_0x1e_c0000005_nt!KiCommitThreadWait+145Followup: MachineOwner 

Windows 8 Kernel Version 9600 MP (8 procs) Free x64Product: WinNt, suite: TerminalServer SingleUserTSBuilt by: 9600.17936.amd64fre.winblue_ltsb.150715-0840Machine Name:Kernel base = 0xfffff803`9d615000 PsLoadedModuleList = 0xfffff803`9d8ea7b0Debug session time: Thu Aug 27 12:25:56.438 2015 (UTC - 4:00)System Uptime: 0 days 1:10:04.096********************************************************************************                                                                             **                        Bugcheck Analysis                                    **                                                                             ********************************************************************************SYSTEM_SERVICE_EXCEPTION (3b)An exception happened while executing a system service routine.Arguments:Arg1: 00000000c0000005, Exception code that caused the bugcheckArg2: fffff8039d6ac1e1, Address of the instruction which caused the bugcheckArg3: ffffd00022ba3970, Address of the context record for the exception that caused the bugcheckArg4: 0000000000000000, zero.Debugging Details:------------------TRIAGER: Could not open triage file : e:\dump_analysis\program\triage\modclass.ini, error 2EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at "0x%08lx" referenced memory at "0x%08lx". The memory could not be "%s".FAULTING_IP: nt!MmUnlockPages+11fffff803`9d6ac1e1 440fb7690a      movzx   r13d,word ptr [rcx+0Ah]CONTEXT:  ffffd00022ba3970 -- (.cxr 0xffffd00022ba3970)rax=0000000000000001 rbx=ffffe000cca0f980 rcx=0008000000000000rdx=ffffe000c32e1cc8 rsi=0000000000000000 rdi=0008000000000000rip=fffff8039d6ac1e1 rsp=ffffd00022ba43a0 rbp=ffffd00022ba4540 r8=000000000000dcc8  r9=fffff8039d615000 r10=0000000000000585r11=ffffe000c32d4000 r12=00000000a000000c r13=0000000000000002r14=0000000000060800 r15=00000000a0000003iopl=0         nv up ei ng nz na po nccs=0010  ss=0018  ds=002b  es=002b  fs=0053  gs=002b             efl=00010286nt!MmUnlockPages+0x11:fffff803`9d6ac1e1 440fb7690a      movzx   r13d,word ptr [rcx+0Ah] ds:002b:00080000`0000000a=????Resetting default scopeCUSTOMER_CRASH_COUNT:  1DEFAULT_BUCKET_ID:  WIN8_DRIVER_FAULTBUGCHECK_STR:  0x3BPROCESS_NAME:  NvBackend.exeCURRENT_IRQL:  0DEVICE_OBJECT: 0000000000000004LAST_CONTROL_TRANSFER:  from fffff8039d6a3748 to fffff8039d6ac1e1STACK_TEXT:  ffffd000`22ba43a0 fffff803`9d6a3748 : ffffe000`cca0f980 00000000`00000000 ffffe000`cca0fa53 ffffd000`22ba4570 : nt!MmUnlockPages+0x11ffffd000`22ba4440 fffff800`bdee1ab2 : ffffe000`cca0f980 ffffd000`22ba4602 ffffe000`c35f1c00 00000000`0000000d : nt!IopfCompleteRequest+0x4f8ffffd000`22ba4580 fffff800`bc693b1e : ffffe000`c35f1d28 ffffe000`c35f1d28 ffffe000`cbb6a9f0 00000000`00000000 : Npfs!NpFsdFileSystemControl+0x102ffffd000`22ba45c0 fffff800`bc6bc831 : ffffd000`22ba4680 ffffe000`c9afacc0 ffffe000`c35f1d28 ffffe000`c35f1c10 : fltmgr!FltpLegacyProcessingAfterPreCallbacksCompleted+0x2ceffffd000`22ba4660 fffff803`9d9ce140 : 00000000`00000002 ffffd000`22ba4741 ffffe000`cc5297b0 0000000c`001f0003 : fltmgr!FltpFsControl+0x111ffffd000`22ba46c0 fffff803`9dab921d : 00000000`00000004 00000000`00000000 ffffe000`cc5297b0 00000000`00000000 : nt!IopSynchronousServiceTail+0x160ffffd000`22ba4790 fffff803`9d9abbb2 : ffffd000`22ba4938 00000000`00000340 00000000`00000001 00000000`00000000 : nt!IopXxxControlFile+0xd2dffffd000`22ba4920 fffff803`9d7701b3 : ffffe000`cc520880 00000000`001f0003 00000000`02c0e6b8 00000000`00000000 : nt!NtFsControlFile+0x56ffffd000`22ba4990 00000000`77d92352 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSystemServiceCopyEnd+0x1300000000`02c0efb8 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x77d92352FOLLOWUP_IP: Npfs!NpFsdFileSystemControl+102fffff800`bdee1ab2 488d442420      lea     rax,[rsp+20h]SYMBOL_STACK_INDEX:  2SYMBOL_NAME:  Npfs!NpFsdFileSystemControl+102FOLLOWUP_NAME:  MachineOwnerMODULE_NAME: NpfsIMAGE_NAME:  Npfs.SYSDEBUG_FLR_IMAGE_TIMESTAMP:  5215f8a9STACK_COMMAND:  .cxr 0xffffd00022ba3970 ; kbFAILURE_BUCKET_ID:  X64_0x3B_Npfs!NpFsdFileSystemControl+102BUCKET_ID:  X64_0x3B_Npfs!NpFsdFileSystemControl+102Followup: MachineOwner 

Windows 8 Kernel Version 9600 MP (8 procs) Free x64Product: WinNt, suite: TerminalServer SingleUserTSBuilt by: 9600.17936.amd64fre.winblue_ltsb.150715-0840Machine Name:Kernel base = 0xfffff800`8fa0f000 PsLoadedModuleList = 0xfffff800`8fce47b0Debug session time: Fri Aug 28 04:21:05.323 2015 (UTC - 4:00)System Uptime: 0 days 0:17:27.981********************************************************************************                                                                             **                        Bugcheck Analysis                                    **                                                                             ********************************************************************************PAGE_FAULT_IN_NONPAGED_AREA (50)Invalid system memory was referenced.  This cannot be protected by try-except,it must be protected by a Probe.  Typically the address is just plain bad or itis pointing at freed memory.Arguments:Arg1: ffffd00121787538, memory referenced.Arg2: 0000000000000001, value 0 = read operation, 1 = write operation.Arg3: fffff8009bc645f4, If non-zero, the instruction address which referenced the bad memory	address.Arg4: 0000000000000002, (reserved)Debugging Details:------------------Could not read faulting driver nameTRIAGER: Could not open triage file : e:\dump_analysis\program\triage\modclass.ini, error 2WRITE_ADDRESS: fffff8008fcd21c0: Unable to get special pool infofffff8008fcd21c0: Unable to get special pool infounable to get nt!MmNonPagedPoolStartunable to get nt!MmSizeOfNonPagedPoolInBytes ffffd00121787538 FAULTING_IP: CI!Gvab2ddd+70fffff800`9bc645f4 4e891418        mov     qword ptr [rax+r11],r10MM_INTERNAL_CODE:  2CUSTOMER_CRASH_COUNT:  1DEFAULT_BUCKET_ID:  WIN8_DRIVER_FAULTBUGCHECK_STR:  AVPROCESS_NAME:  svchost.exeCURRENT_IRQL:  0TRAP_FRAME:  ffffd00021787230 -- (.trap 0xffffd00021787230)NOTE: The trap frame does not contain all registers.Some register values may be zeroed or incorrect.rax=00000000fffffff8 rbx=0000000000000000 rcx=fffff8009bc73000rdx=0000000000990163 rsi=0000000000000000 rdi=0000000000000000rip=fffff8009bc645f4 rsp=ffffd000217873c8 rbp=ffffd00021787530 r8=00000000000019ce  r9=0000000000774e95 r10=0000000059d559b7r11=ffffd00021787540 r12=0000000000000000 r13=0000000000000000r14=0000000000000000 r15=0000000000000000iopl=0         nv up ei ng nz na pe cyCI!Gvab2ddd+0x70:fffff800`9bc645f4 4e891418        mov     qword ptr [rax+r11],r10 ds:ffffd001`21787538=????????????????Resetting default scopeLAST_CONTROL_TRANSFER:  from fffff8008fb72df9 to fffff8008fb5e9a0STACK_TEXT:  ffffd000`21786fc8 fffff800`8fb72df9 : 00000000`00000050 ffffd001`21787538 00000000`00000001 ffffd000`21787230 : nt!KeBugCheckExffffd000`21786fd0 fffff800`8fa62509 : 00000000`00000001 ffffe001`0bc108c0 ffffd000`21787230 ffffe001`00000002 : nt! ?? ::FNODOBFM::`string'+0x3f39ffffd000`21787070 fffff800`8fb68c2f : 00000000`00000001 ffffd000`217873f0 ffffc000`8bf16900 ffffc000`8bf169c0 : nt!MmAccessFault+0x769ffffd000`21787230 fffff800`9bc645f4 : fffff800`9bc6fd49 ffffd000`217873f0 ffffd000`21787530 00000000`00000000 : nt!KiPageFault+0x12fffffd000`217873c8 fffff800`9bc6fd49 : ffffd000`217873f0 ffffd000`21787530 00000000`00000000 f1979dad`0c6c4652 : CI!Gvab2ddd+0x70ffffd000`217873d0 fffff800`9bc6ffa7 : 00000000`00000000 00000000`000105fe 00000000`00000005 fffff800`9ce563eb : CI!Gvb3afc4+0x166ffffd000`21787740 fffff800`9bc0ba96 : c11b999c`187b4d0e 00000000`000105fe 00000000`00000cb4 00000000`00000005 : CI!peauthvbn_StoreParameter+0x3fffffd000`21787790 fffff800`9bc32a36 : 00000000`00000000 00000000`00000000 00000000`00000cb4 00000000`00000000 : CI!PEAuthStoreParameter+0x5affffd000`217877c0 fffff800`9bc32c98 : 00000000`00000cb4 fffff800`8fcfbe78 00000000`00000001 00000000`00000001 : CI!I_PEUpdatePEHashBucket+0x11effffd000`21787800 fffff800`8fe24618 : ffffe001`0bc108c0 ffffe001`0bc108c0 00000000`00000001 ffffe001`0bc108c0 : CI!I_PEProcessNotify+0x28ffffd000`21787830 fffff800`8fe24bb7 : 00007ff7`6bf7e000 ffffd000`217878c0 00000000`00000000 ffffe001`135cfe40 : nt!PspExitProcess+0x150ffffd000`21787880 fffff800`8fdf4c91 : 00000000`c000004b 00000000`00000000 ffffe001`0bc108c0 ffffe001`0bc0e880 : nt!PspExitThread+0x52fffffd000`21787990 fffff800`8fb6a1b3 : ffffe001`0bc108c0 ffffe001`0bc0e880 ffffd000`21787a80 00000000`00000001 : nt!NtTerminateProcess+0xfdffffd000`21787a00 00007ffd`2c82149a : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSystemServiceCopyEnd+0x1300000030`2e3af5c8 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x7ffd`2c82149aSTACK_COMMAND:  kbFOLLOWUP_IP: CI!Gvab2ddd+70fffff800`9bc645f4 4e891418        mov     qword ptr [rax+r11],r10SYMBOL_STACK_INDEX:  4SYMBOL_NAME:  CI!Gvab2ddd+70FOLLOWUP_NAME:  MachineOwnerMODULE_NAME: CIIMAGE_NAME:  CI.dllDEBUG_FLR_IMAGE_TIMESTAMP:  548276b0FAILURE_BUCKET_ID:  X64_AV_CI!Gvab2ddd+70BUCKET_ID:  X64_AV_CI!Gvab2ddd+70Followup: MachineOwner 

[misplacedsocks]

@ionbasa

 

Tried running a repair install, which wouldn't happen (Kept saying it couldn't do it and dumped me back at my pre-existing install). There's nothing important on the machine yet anyway so I decided to do a clean install of 8.1 again.

 

I ran into a few BSODs during the installer too! NTFS_FILE_SYSTEM, BAD_POOL_HEADER and CRITICAL_STRUCTURE_CORRUPTION.

 

Eventually managed to get it installed, but it's now chain BSODing within seconds of trying to log in. I've managed to dig out a few more .dmp files in safe mode in the interim via the tool suggested.

 

They can be found here : https://dl.dropboxusercontent.com/u/27439435/bsod/SysnativeFileCollectionApp%20-%20Z170A.zip

 

Running into similar issues again, but not always the same. NTFS_FILE_SYSTEM, IRQL_NOT_LESS_OR_EQUAL, MEMORY_MANAGEMENT, DRIVER_OVERRAN_STACK_BUFFER, DRIVER_IRQL_NOT_LESS_OR_EQUAL, KMODE_EXCEPTION_NOT_HANDLED and most recently UNEXPECTED_KERNEL_MODE_TRAP.

 

At this point there's not much installed, just the drivers and a few other apps (Chrome and Dropbox).

 

I'm going to leave it running memtest overnight. I'll update if there's anything peculiar that comes out of that in the morning.

 

Once again many thanks for all your help so far

[ionbasa]

@ionbasa

 

Tried running a repair install, which wouldn't happen (Kept saying it couldn't do it and dumped me back at my pre-existing install). There's nothing important on the machine yet anyway so I decided to do a clean install of 8.1 again.

 

I ran into a few BSODs during the installer too! NTFS_FILE_SYSTEM, BAD_POOL_HEADER and CRITICAL_STRUCTURE_CORRUPTION.

 

Eventually managed to get it installed, but it's now chain BSODing within seconds of trying to log in. I've managed to dig out a few more .dmp files in safe mode in the interim via the tool suggested.

 

They can be found here : https://dl.dropboxusercontent.com/u/27439435/bsod/SysnativeFileCollectionApp%20-%20Z170A.zip

 

Running into similar issues again, but not always the same. NTFS_FILE_SYSTEM, IRQL_NOT_LESS_OR_EQUAL, MEMORY_MANAGEMENT, DRIVER_OVERRAN_STACK_BUFFER, DRIVER_IRQL_NOT_LESS_OR_EQUAL, KMODE_EXCEPTION_NOT_HANDLED and most recently UNEXPECTED_KERNEL_MODE_TRAP.

 

At this point there's not much installed, just the drivers and a few other apps (Chrome and Dropbox).

 

I'm going to leave it running memtest overnight. I'll update if there's anything peculiar that comes out of that in the morning.

 

Once again many thanks for all your help so far

 Can you provide a hash of the Windows install ISO? Also, you're running your sata controller in AHCI mode? I find it quite peculiar that you're getting these weird issues.

 

Are you willing to install Windows 10 and seeing if the same issues occur? I have a feeling there might be something going on with compatibility on older OSes and the new Intel chipsets.

[misplacedsocks]

Sure, the iso is the multiple editions ISO

 

en-gb_windows_8_1_x64_dvd_2707421.iso

 

The SHA1 for it is 42458E48CECEBAB8BF5D58220478FDA42B0D2990 on my drive, which matches the one on 

 

https://msdn.microsoft.com/en-us/subscriptions/securedownloads/#searchTerm=windows%208.1&ProductFamilyId=0&Languages=en&ProductFamilyIds=524&PageSize=10&PageIndex=3&FileId=0

 

and http://www.eightforums.com/installation-setup/33164-how-download-windows-8-1-iso-64.html too.

 

The controller is in AHCI mode definitely, confirmed in BIOS a moment ago.

 

Memtest did throw up something interesting last night, see the attached file (Or here : http://i.imgur.com/z8LLTcz.jpg ). (Ignore the odd wallpaper choice, rented accommodation in the UK...)

 

Loads of errors at the end of pass 2. But I was under the assumption that 32Gb of Ram = 32768Mb. 34000+ would be out of the addressable range no?

 

I'm going to clean and reseat the RAM sticks but it looks like there's an RMA coming up either way.

 

 

I've tried Win10 in the past and seen the same issues, I guess there's no harm done in putting it back on but it looks more and more like a hardware issue don't you think?

 

Many thanks for your ongoing help

[ionbasa]

Sure, the iso is the multiple editions ISO

 

en-gb_windows_8_1_x64_dvd_2707421.iso

 

The SHA1 for it is 42458E48CECEBAB8BF5D58220478FDA42B0D2990 on my drive, which matches the one on 

 

https://msdn.microsoft.com/en-us/subscriptions/securedownloads/#searchTerm=windows%208.1&ProductFamilyId=0&Languages=en&ProductFamilyIds=524&PageSize=10&PageIndex=3&FileId=0

 

and http://www.eightforums.com/installation-setup/33164-how-download-windows-8-1-iso-64.html too.

 

The controller is in AHCI mode definitely, confirmed in BIOS a moment ago.

 

Memtest did throw up something interesting last night, see the attached file (Or here : http://i.imgur.com/z8LLTcz.jpg ). (Ignore the odd wallpaper choice, rented accommodation in the UK...)

 

Loads of errors at the end of pass 2. But I was under the assumption that 32Gb of Ram = 32768Mb. 34000+ would be out of the addressable range no?

 

I'm going to clean and reseat the RAM sticks but it looks like there's an RMA coming up either way.

 

 

I've tried Win10 in the past and seen the same issues, I guess there's no harm done in putting it back on but it looks more and more like a hardware issue don't you think?

 

Many thanks for your ongoing help

Yup. Bad RAM.

 

Actually. Memtest86+ failed at those addresses probably because the RAM said it was available (when it clearly isn't).

[misplacedsocks]

Not to re-open this, one RAM RMA later, everything seems to be stable touch wood. Big thanks to @ionbasa for all your help in isolating the issue and pointing out the right things to try out.