Blue screen

[Scoobzilla]

Having blue screens no matter what i do have changed motherboards done memory test and mem86 test all passed switched my hard drives had them tested every thing passes. the  blue screen is always caused by ntoskrnl.exe ntoskrnl.exe+3f5e40 i need help i have taken in to multiple pc repair places and they tell me everything passes no problems.  specs asrock b550 steel legend g.skill trident z 32g 288 pin ddr4 amd ryzen 5 3600x evga 750 evga power supply geforce rtx 2070 super ultra 860 evo 1 tb

[dean_5234]

Just now, Scoobzilla said:

Having blue screens no matter what i do have changed motherboards done memory test and mem86 test all passed switched my hard drives had them tested every thing passes. the  blue screen is always caused by ntoskrnl.exe ntoskrnl.exe+3f5e40 i need help i have taken in to multiple pc repair places and they tell me everything passes no problems.

need full specs.

[Scoobzilla]

5 minutes ago, davemc said:

need full specs.

put specs in

 

[dean_5234]

1 minute ago, Scoobzilla said:

put specs in

 

Do you have a way to individually test each component?

[Scoobzilla]

i have tested the ram and hard drives but cant test cpu or gpu 

 

[Radium_Angel]

4 minutes ago, Scoobzilla said:

i have tested the ram and hard drives but cant test cpu or gpu 

 

Post the crash dump files here, I can deconstruct them and pinpoint what's going on

[Scoobzilla]

041621-6328-01.dmp    4/16/2021 10:53:30 PM    DRIVER_IRQL_NOT_LESS_OR_EQUAL    0x000000d1    fffff803`01010000    00000000`000000ff    00000000`00000090    fffff803`01010000    ntoskrnl.exe    ntoskrnl.exe+3f5e40                    x64    ntoskrnl.exe+3f5e40                    C:\Windows\Minidump\041621-6328-01.dmp    12    15    19041    1,080,260    4/16/2021 10:54:14 PM    
 

is this what you wanted ?

[Radium_Angel]

that *.dmp file, upload it here as an actual file I can download

[Radium_Angel]

in fact, upload all you find.

[Scoobzilla]

Log Name:      System
Source:        Microsoft-Windows-Kernel-Power
Date:          4/16/2021 11:51:14 PM
Event ID:      41
Task Category: (63)
Level:         Critical
Keywords:      (70368744177664),(2)
User:          SYSTEM
Computer:      DESKTOP-OHJ9IIH
Description:
The system has rebooted without cleanly shutting down first. This error could be caused if the system stopped responding, crashed, or lost power unexpectedly.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Microsoft-Windows-Kernel-Power" Guid="{331c3b3a-2005-44c2-ac5e-77220c37d6b4}" />
    <EventID>41</EventID>
    <Version>8</Version>
    <Level>1</Level>
    <Task>63</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8000400000000002</Keywords>
    <TimeCreated SystemTime="2021-04-17T04:51:14.8367429Z" />
    <EventRecordID>25487</EventRecordID>
    <Correlation />
    <Execution ProcessID="4" ThreadID="8" />
    <Channel>System</Channel>
    <Computer>DESKTOP-OHJ9IIH</Computer>
    <Security UserID="S-1-5-18" />
  </System>
  <EventData>
    <Data Name="BugcheckCode">0</Data>
    <Data Name="BugcheckParameter1">0x0</Data>
    <Data Name="BugcheckParameter2">0x0</Data>
    <Data Name="BugcheckParameter3">0x0</Data>
    <Data Name="BugcheckParameter4">0x0</Data>
    <Data Name="SleepInProgress">0</Data>
    <Data Name="PowerButtonTimestamp">0</Data>
    <Data Name="BootAppStatus">0</Data>
    <Data Name="Checkpoint">0</Data>
    <Data Name="ConnectedStandbyInProgress">false</Data>
    <Data Name="SystemSleepTransitionsToOn">0</Data>
    <Data Name="CsEntryScenarioInstanceId">0</Data>
    <Data Name="BugcheckInfoFromEFI">false</Data>
    <Data Name="CheckpointStatus">0</Data>
    <Data Name="CsEntryScenarioInstanceIdV2">0</Data>
    <Data Name="LongPowerButtonPressDetected">false</Data>
  </EventData>
</Event>

[Radium_Angel]

no, the actual .dmp file, attach it to your next post, I need to download the file.

[Scoobzilla]

2 minutes ago, Radium_Angel said:

no, the actual .dmp file, attach it to your next post, I need to download the file.

how do i find the dump file sorry

 

[Radium_Angel]

12 minutes ago, Scoobzilla said:

 C:\Windows\Minidump\041621-6328-01.dmp

 

1 minute ago, Scoobzilla said:

how do i find the dump file sorry

 

There. There might even be multiple .dmp files in that location, attach all you find to your next post

[Scoobzilla]

1 minute ago, Radium_Angel said:

 

There. There might even be multiple .dmp files in that location, attach all you find to your next post

but how do i find it?  like what folder

[Radium_Angel]

1 minute ago, Scoobzilla said:

but how do i find it?  like what folder

C:\Windows\Minidump\041621-6328-01.dmp

 

The C:\Windows\Minidump folder.

[Scoobzilla]

it keeps saying i dont have permission to open the file when im the admin

 

[Scoobzilla]

041621-6328-01.dmp041621-6421-01.dmp041621-7015-01.dmp

[Radium_Angel]

2 minutes ago, Scoobzilla said:

041621-6328-01.dmp 1.03 MB · 0 downloads 041621-6421-01.dmp 1.3 MB · 0 downloads 041621-7015-01.dmp 1.07 MB · 0 downloads

Alright, give me some minutes to look these over, I'll tell you what's going on with your system.

[Scoobzilla]

16 minutes ago, Radium_Angel said:

Alright, give me some minutes to look these over, I'll tell you what's going on with your system.

any luck?

[Radium_Angel]

Ok, I"m going to post some relevant details from the crash dump, then at the end I'm going to post my thoughts on how to fix this.

____

DRIVER_IRQL_NOT_LESS_OR_EQUAL (d1)
An attempt was made to access a pageable (or completely invalid) address at an
interrupt request level (IRQL) that is too high.  This is usually
caused by drivers using improper addresses.
If kernel debugger is available get stack backtrace.
Arguments:
Arg1: fffff80301010000, memory referenced
Arg2: 00000000000000ff, IRQL
Arg3: 0000000000000090, value 0 = read operation, 1 = write operation
Arg4: fffff80301010000, address which referenced memory

BUGCHECK_CODE:  d1

BUGCHECK_P1: fffff80301010000

BUGCHECK_P2: ff

BUGCHECK_P3: 90

BUGCHECK_P4: fffff80301010000

PROCESS_NAME:  System

IMAGE_NAME:  ntkrnlmp.exe
FAILURE_BUCKET_ID:  DISABLED_INTERRUPT_FAULT_CODE_AV_BAD_IP_nt!KiPageFault

______

SYSTEM_SERVICE_EXCEPTION (3b)
An exception happened while executing a system service routine.
Arguments:
Arg1: 00000000c0000005, Exception code that caused the bugcheck
Arg2: fffff80415c63f89, Address of the instruction which caused the bugcheck
Arg3: ffff8588f4459670, Address of the context record for the exception that caused the bugcheck
Arg4: 0000000000000000, zero.

BUGCHECK_CODE:  3b

BUGCHECK_P1: c0000005

BUGCHECK_P2: fffff80415c63f89

BUGCHECK_P3: ffff8588f4459670

BUGCHECK_P4: 0
PROCESS_NAME:  dwm.exe

SYMBOL_NAME:  win32kbase!rimConvertUserToKernelEventHandle+88

MODULE_NAME: win32kbase

IMAGE_NAME:  win32kbase.sys

IMAGE_VERSION:  10.0.19041.928

STACK_COMMAND:  .cxr 0xffff8588f4459670 ; kb

BUCKET_ID_FUNC_OFFSET:  88

FAILURE_BUCKET_ID:  0x3B_c0000005_win32kbase!rimConvertUserToKernelEventHandle
________

IRQL_NOT_LESS_OR_EQUAL (a)
An attempt was made to access a pageable (or completely invalid) address at an
interrupt request level (IRQL) that is too high.  This is usually
caused by drivers using improper addresses.
If a kernel debugger is available get the stack backtrace.
Arguments:
Arg1: ffff8a935fee59d8, memory referenced
Arg2: 00000000000000ff, IRQL
Arg3: 00000000000000c6, bitfield :
    bit 0 : value 0 = read operation, 1 = write operation
    bit 3 : value 0 = not an execute operation, 1 = execute operation (only on chips which support this level of status)
Arg4: fffff8016df61585, address which referenced memory

BUGCHECK_CODE:  a

BUGCHECK_P1: ffff8a935fee59d8

BUGCHECK_P2: ff

BUGCHECK_P3: c6

BUGCHECK_P4: fffff8016df61585
PROCESS_NAME:  System

IMAGE_NAME:  ntkrnlmp.exe

FAILURE_BUCKET_ID:  AV_CODE_AV_nt!PpmIdleUpdateConcurrency

______

 

Ok, you have a mess on your hands.

None of these crashes are related to each other, except the system is falling over.

So, here's what you need to do: (in this order, more or less)

 

(1) Disable XMP and turn off any OverClocking you are doing.

(2) Update all drivers to latest. And I don't just mean GPU either. Chipset, NIC, CPU, BIOS, all of them

(3) Ensure your RAM is on the QVL (Qualified Vendor List) for your mobo.

(4) If you are still having issues, nuke your OS and start fresh.

 

Report back.

 

 

[Scoobzilla]

29 minutes ago, Radium_Angel said:

Ok, I"m going to post some relevant details from the crash dump, then at the end I'm going to post my thoughts on how to fix this.

____

DRIVER_IRQL_NOT_LESS_OR_EQUAL (d1)
An attempt was made to access a pageable (or completely invalid) address at an
interrupt request level (IRQL) that is too high.  This is usually
caused by drivers using improper addresses.
If kernel debugger is available get stack backtrace.
Arguments:
Arg1: fffff80301010000, memory referenced
Arg2: 00000000000000ff, IRQL
Arg3: 0000000000000090, value 0 = read operation, 1 = write operation
Arg4: fffff80301010000, address which referenced memory

BUGCHECK_CODE:  d1

BUGCHECK_P1: fffff80301010000

BUGCHECK_P2: ff

BUGCHECK_P3: 90

BUGCHECK_P4: fffff80301010000

PROCESS_NAME:  System

IMAGE_NAME:  ntkrnlmp.exe
FAILURE_BUCKET_ID:  DISABLED_INTERRUPT_FAULT_CODE_AV_BAD_IP_nt!KiPageFault

______

SYSTEM_SERVICE_EXCEPTION (3b)
An exception happened while executing a system service routine.
Arguments:
Arg1: 00000000c0000005, Exception code that caused the bugcheck
Arg2: fffff80415c63f89, Address of the instruction which caused the bugcheck
Arg3: ffff8588f4459670, Address of the context record for the exception that caused the bugcheck
Arg4: 0000000000000000, zero.

BUGCHECK_CODE:  3b

BUGCHECK_P1: c0000005

BUGCHECK_P2: fffff80415c63f89

BUGCHECK_P3: ffff8588f4459670

BUGCHECK_P4: 0
PROCESS_NAME:  dwm.exe

SYMBOL_NAME:  win32kbase!rimConvertUserToKernelEventHandle+88

MODULE_NAME: win32kbase

IMAGE_NAME:  win32kbase.sys

IMAGE_VERSION:  10.0.19041.928

STACK_COMMAND:  .cxr 0xffff8588f4459670 ; kb

BUCKET_ID_FUNC_OFFSET:  88

FAILURE_BUCKET_ID:  0x3B_c0000005_win32kbase!rimConvertUserToKernelEventHandle
________

IRQL_NOT_LESS_OR_EQUAL (a)
An attempt was made to access a pageable (or completely invalid) address at an
interrupt request level (IRQL) that is too high.  This is usually
caused by drivers using improper addresses.
If a kernel debugger is available get the stack backtrace.
Arguments:
Arg1: ffff8a935fee59d8, memory referenced
Arg2: 00000000000000ff, IRQL
Arg3: 00000000000000c6, bitfield :
    bit 0 : value 0 = read operation, 1 = write operation
    bit 3 : value 0 = not an execute operation, 1 = execute operation (only on chips which support this level of status)
Arg4: fffff8016df61585, address which referenced memory

BUGCHECK_CODE:  a

BUGCHECK_P1: ffff8a935fee59d8

BUGCHECK_P2: ff

BUGCHECK_P3: c6

BUGCHECK_P4: fffff8016df61585
PROCESS_NAME:  System

IMAGE_NAME:  ntkrnlmp.exe

FAILURE_BUCKET_ID:  AV_CODE_AV_nt!PpmIdleUpdateConcurrency

______

 

Ok, you have a mess on your hands.

None of these crashes are related to each other, except the system is falling over.

So, here's what you need to do: (in this order, more or less)

 

(1) Disable XMP and turn off any OverClocking you are doing.

(2) Update all drivers to latest. And I don't just mean GPU either. Chipset, NIC, CPU, BIOS, all of them

(3) Ensure your RAM is on the QVL (Qualified Vendor List) for your mobo.

(4) If you are still having issues, nuke your OS and start fresh.

 

Report back.

 

 

does my 3466 ram work with my moba and my  ryzen 5 3600x because my  cpu bios nic gpu and chipset are all updated 

 

[Radium_Angel]

5 hours ago, Scoobzilla said:

does my 3466 ram work with my moba and my  ryzen 5 3600x because my  cpu bios nic gpu and chipset are all updated 

 

That's a weird speed. Personally I hate g.skill RAM, it's (in my experience) really poor quality, but if your mobo lists it on the QVL, then if it checks out with MemTest, then it should be good to go

[Iain-IT-Consultant]

FYI

 

I have the same issue on a Lenovo ThinkCentre M900, started blue screening with (ntoskrnl.exe+3f5e40) on the 17th, the last updates were installed on the 15th and the machine had several restarts in between the 15th and the 17th without crashing.

 

Win 10 version    10.0.19042 Build 19042 which is the latest build.

 

 

 

[Iain-IT-Consultant]

Do you have Adobe Flash Player installed?  try-removing it.

 

MS released a KB to remove Adobe Flash Player but I noticed that it was still installed..

 

 

[PlakaMan]

On 4/17/2021 at 12:32 PM, Scoobzilla said:

Having blue screens no matter what i do have changed motherboards done memory test and mem86 test all passed switched my hard drives had them tested every thing passes. the  blue screen is always caused by ntoskrnl.exe ntoskrnl.exe+3f5e40 i need help i have taken in to multiple pc repair places and they tell me everything passes no problems.  specs asrock b550 steel legend g.skill trident z 32g 288 pin ddr4 amd ryzen 5 3600x evga 750 evga power supply geforce rtx 2070 super ultra 860 evo 1 tb

Any solution to this? I'm having the same problem. BSOD caused by ntoskrnl.exe+3f5e40. ALWAYS the same driver. 

I tried changing my RAM as well. And all tests came out no problems too. I've had this issue for two years now. 

Also already tried reinstalling windows, updating drivers (ALL OF THEM), turning off XMP or any overclocking, RAM is in compatibility list.
I don't have Adobe Flash Player too.

Funny thing is it doesn't BSOD when I'm playing a game or running a game in the background. Weird. Man, I'm losing my mind here. 

Specs: 
Motherboard: Gigabyte X570 Gaming X
CPU: Ryzen 3700x 
GPU: Gigabyte 5700XT 
RAM: Trident Z Neo 3600Mhz CL18 
SSD: Adata XPG SX8200 1TB
Windows version: Windows 10 20H2 19042.928

I've also attached my dump files. PLEASE HELP me

050221-7875-01.dmp 050121-8390-01.dmp 050121-8406-01.dmp 050221-7687-01.dmp 050221-7718-01.dmp