Question BSOD - 0xffffffffc0000005, 0xfffff8037501538d on Windows 11 ?

Status
Not open for further replies.
Dec 26, 2022
7
0
10
BSOD 0xffffffffc0000005, 0xfffff8037501538d

freshly installed win11 22h2 22621.963
Collected various reports and attached to the archive.
https://files.catbox.moe/5o40mk.zip

The error can appear at any time, even while surfing in the browser.
I checked RAM and searched for errors. All windows updates are installed. All drivers are updated via SnappyDriver

Errors in log file.
Drivers vbox from the portable virtualbox v7

Code:
Log name: System
Source: Service Control Manager
Date: 12/22/2022 20:47:43
Event code: 7001
Task Category: None
Level:Error
Keywords:Classic
User: N/A
Computer: User
Description:
The "NcaSvc" service is dependent on the "iphlpsvc" service, which failed to start due to an error
The specified service could not be started because either it itself or all related devices are disabled.
Xml events: event>
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="49152">7001</EventID>
    <Version>0</Version>
    <Level>2</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2022-12-22T17:47:43.2904764Z" />
    <EventRecordID>11384</EventRecordID>
    <Correlation />
    <Execution ProcessID="564" ThreadID="696" />
    <Channel>System</Channel>
    <Computer>User</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1">NcaSvc</Data>
    <Data Name="param2">iphlpsvc</Data>
    <Data Name="param3">%%1058</Data>

Code:
Log name: System
Source: Service Control Manager
Date: 12/22/2022 20:47:43
Event code: 7001
Task Category: None
Level:Error
Keywords:Classic
User: N/A
Computer: User
Description:
The "jhi_service" service is dependent on the "iphlpsvc" service, which failed to start due to an error
The specified service could not be started because either it itself or all related devices are disabled.
Xml events: event>
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="49152">7001</EventID>
    <Version>0</Version>
    <Level>2</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2022-12-22T17:47:43.5496402Z" />
    <EventRecordID>11385</EventRecordID>
    <Correlation />
    <Execution ProcessID="564" ThreadID="3136" />
    <Channel>System</Channel>
    <Computer>User</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1">jhi_service</Data>
    <Data Name="param2">iphlpsvc</Data>
    <Data Name="param3">%%1058</Data>
    <Binary>6A00680069005F0073006500720076006900630065000000</Binary>

Code:
Log name: System
Source: Service Control Manager
Date: 12/22/2022 20:47:43
Event code: 7000
Task Category: None
Level:Error
Keywords:Classic
User:N/A
Computer: User
Description:
Failed to start the "VBoxUSBMon" service due to an error.
The system cannot find the specified path.
Xml events: event>
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="49152">7000</EventID>
    <Version>0</Version>
    <Level>2</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2022-12-22T17:47:43.5762267Z" />
    <EventRecordID>11386</EventRecordID>
    <Correlation />
    <Execution ProcessID="564" ThreadID="3332" />
    <Channel>System</Channel>
    <Computer>User</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1">VBoxUSBMon</Data>
    <Data Name="param2">%%3</Data>
    <Binary>560042006F0078005500530042004D006F006E000000</Binary>
  </EventData>

Code:
Log name: System
Source: Service Control Manager
Date: 12/22/2022 20:47:43
Event code: 7000
Task Category: None
Level:Error
Keywords:Classic
User:N/A
Computer: User
Description:
Failed to start the "VBoxSup" service due to an error.
The system cannot find the specified path.
Xml events: event>
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="49152">7000</EventID>
    <Version>0</Version>
    <Level>2</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2022-12-22T17:47:43.5762267Z" />
    <EventRecordID>11387</EventRecordID>
    <Correlation />
    <Execution ProcessID="564" ThreadID="3304" />
    <Channel>System</Channel>
    <Computer>User</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1">VBoxSup</Data>
    <Data Name="param2">%%3</Data>
    <Binary>560042006F0078005300750070000000</Binary>
  </EventData>
 

Colif

Win 11 Master
Moderator
All drivers are updated via SnappyDriver
programs like that aren't always accurate, can make things worse

Conversion of dump

Report - click run as fiddle to read


File: 122222-8484-01.dmp (Dec 23 2022 - 02:36:18)
BugCheck: [KMODE_EXCEPTION_NOT_HANDLED (1E)]
Probably caused by: memory_corruption (Process: System)
Uptime: 0 Day(s), 2 Hour(s), 35 Min(s), and 00 Sec(s)

is this windows 11 pro? I ask as bitlocker was running

try updating magician, I assume you running an ssd in RAPID mode?

You probably don't need this
Sep 09 2015cfosspeed6.syscFosSpeed driver (cFos Software)

I wonder what this is
Jul 17 20200patchDriver64.sys
you have a number of unknowns
Feb 19 2021Jula.sys
Feb 19 2021JulaWDM.sys

have you run an anti virus scan or malwarebytes?
 
Dec 26, 2022
7
0
10
is this windows 11 pro? I ask as bitlocker was running
Yes. win11 PRO 22h2 22621.963

cFosSpeed
0patchDriver64.sys
I uninstalled these programs and drivers.
BSOD keeps showing up from time to time

The latest driver for the audio card

have you run an anti virus scan or malwarebytes?
Yes. No problems were found.
All files and programs were transferred from windows 10, there were no problems with BSOD and windows, and there were no viruses in the system.

try updating magician, I assume you running an ssd in RAPID mode?

The latest version of magician and the latest ssd firmware is installed.
No. Yes, the RAPID function is enabled in the settings. in Windows 10 there was no problem with this


------

latest version of the dump
https://files.catbox.moe/0leoxp.dmp
 
Last edited:
stack looked messed up. the raw stack had a call to
cng!MSCryptDecrypt

cryptology next generation
I guess it would be related to the software you installed on drive d:
D:\Tools\Total Commander\soft\security\veracrypt\veracrypt-x64.sys Sat Feb 19 08:50:45 2022

strange to have driver installed to drive w:
W:\App\VirtualBox\VBoxDDR0.r0 Wed Nov 16 07:34:39 2022

(redirected network drive?)
 
Dec 26, 2022
7
0
10
stack looked messed up. the raw stack had a call to
cng!MSCryptDecrypt

cryptology next generation
I guess it would be related to the software you installed on drive d:
D:\Tools\Total Commander\soft\security\veracrypt\veracrypt-x64.sys Sat Feb 19 08:50:45 2022

strange to have driver installed to drive w:
W:\App\VirtualBox\VBoxDDR0.r0 Wed Nov 16 07:34:39 2022

(redirected network drive?)

This is veracrypt 1.26 volume encryption. Mounts the volume to the W drive.
From this volume on the W drive runs virtualbox 7.0.4 portable

I need these programs to work. How do I get rid of the bsod?
I didn't have this problem on windows 10
 
This is veracrypt 1.26 volume encryption. Mounts the volume to the W drive.
From this volume on the W drive runs virtualbox 7.0.4 portable

I need these programs to work. How do I get rid of the bsod?
I didn't have this problem on windows 10
You would look for updates for your software that is calling the microsoft encryption application interface and also apply any microsoft updates you can find. Since microsoft should push out updates the assumption would be the problem is on the app side. I would look into if this a known issue/bug with your encryption. if you get this same bugcheck/raw stack over and over again it would most likely just be a bug.
 
Dec 26, 2022
7
0
10
You would look for updates for your software that is calling the microsoft encryption application interface and also apply any microsoft updates you can find. Since microsoft should push out updates the assumption would be the problem is on the app side. I would look into if this a known issue/bug with your encryption. if you get this same bugcheck/raw stack over and over again it would most likely just be a bug.
I am using the latest version of windows 11 with all the updates, also all the drivers in the system are updated. The latest version of veracrypt and the latest version of virtualbox are installed.
Error numbers are the same every time
BSOD 0xffffffffffffc0000005, 0xfffffff8037501538d


upd.
BSOD appears even without veracrypt and virtualbox running.

new dump
https://files.catbox.moe/2rfagk.zip
 
Last edited:
I am using the latest version of windows 11 with all the updates, also all the drivers in the system are updated. The latest version of veracrypt and the latest version of virtualbox are installed.
Error numbers are the same every time
BSOD 0xffffffffffffc0000005, 0xfffffff8037501538d


upd.
BSOD appears even without veracrypt and virtualbox running.

new dump
https://files.catbox.moe/2rfagk.zip

BSOD 0xffffffffffffc0000005, 0xfffffff8037501538d
0xffffffffffffc0000005 just means an access violation occurred this just means the data in the memory location was wrong for the function that was called.

0xfffffff8037501538d this is just a memory location that made the call. windows will load drivers at different locations in memory with each boot so it is not very useful other than I can tell it is in the correct range for a kernel driver.

I looked at the new dump and it shows a corrupted stack again (zeroed out)
but this time only generic kernel functions to try to run something. I did not see any call that would identify any subsystem that is having problems.

Last time it did show a encryption/decryption call but you never know if the program caused the problem or if it is the victim of some other driver.

It looks like you have 28 custom drivers installed (non microsoft)
------------
generally, finding a raw stack with a call that can be identified is very useful since most of the time a driver will corrupt its own data (except for malware)
You should provide each dump until you get the problem fixed. drivers have access to other drivers data space and can corrupt other drivers data. most often the data that is stored next to that drivers data.
generally to find this type of problem you have to run verifier.exe test, this will force the operating system to check all of the driver calls for common errors. It will put all the driver data in special pool for error checking and will call a bugcheck when a error is detected.

before doing this you want to make sure you know how to get into safe mode to turn verifier off via verifier.exe /reset command. You might even want to turn off fast boot to give you more time to get into safe mode.

I mention this because some systems bugcheck during the boot process due to old drivers that have known issues. (old drivers are not coded for the new rules that verifier checks for and you have to exclude each driver that fails until you can boot correctly) The process can be painful. IE start to boot, bucheck in 1 second, go into safe mode turn off verifier, reboot, look at bugcheck figure out what driver caused the problem, add a exclude for that driver in verifier and retest. Then the next driver fails but you get further into the boot process. Repeat until you can boot up and log in. Then the real testing begins that will help you find the source of the problem. painful process.

before you start this you should remove any driver you really do not need.
you should update every driver you can since your only fix is to update a driver anyway.

you have a lot of suspect drivers, you can download autoruns64 from microsoft
find the menu item to show non microsoft drivers, look at the list and you can unclick drivers to prevent from loading if they are not needed.
Like your copy of pwdrvio.sys Mon Jun 15 18:43:45 2009
(old driver are more likely to fail testing)

this bugcheck took 22 mins so verifier might find the problem quickly.

you might also start cmd.exe as an admin then run
dism.exe /online /cleanup-image /restorehealth

this might fix problems where windows drivers have been modified.
you might also disable the system virtual memory, reboot and turn it back on to delete your old pagefile.sys and create a new one. fixes certain problems where the corruption comes from modification in the drivers stored image in the pagefile.sys. (malware attacks and programs that hook functions)

also update your intel drivers from Intel® Driver & Support Assistant
oem drivers directly from intel are not updated via windows update.
only the intel drivers that intel gives to microsoft are updated by windows update. Intel gives microsoft generic versions of drivers and keeps the custom versions on their website. The two versions have the same name so it gets confusing why one system will update by windows and another will not.
 
Dec 26, 2022
7
0
10
I suspect that the problem was caused by the audio card driver julia 1.3
1.21 works fine
https://download.esi-audio.com/?w=esi&p=6&g=1&l=en


this might fix problems where windows drivers have been modified.
you might also disable the system virtual memory, reboot and turn it back on to delete your old pagefile.sys and create a new one. fixes certain problems where the corruption comes from modification in the drivers stored image in the pagefile.sys. (malware attacks and programs that hook functions)

also update your intel drivers from Intel® Driver & Support Assistant
oem drivers directly from intel are not updated via windows update.
only the intel drivers that intel gives to microsoft are updated by windows update. Intel gives microsoft generic versions of drivers and keeps the custom versions on their website. The two versions have the same name so it gets confusing why one system will update by windows and another will not.

This was done by

Intel® Driver & Support Assistant - no new driver versions found.
 

Endre

Reputable
BSOD 0xffffffffc0000005, 0xfffff8037501538d

freshly installed win11 22h2 22621.963
Collected various reports and attached to the archive.
https://files.catbox.moe/5o40mk.zip

The error can appear at any time, even while surfing in the browser.
I checked RAM and searched for errors. All windows updates are installed. All drivers are updated via SnappyDriver

Errors in log file.
Drivers vbox from the portable virtualbox v7

Code:
Log name: System
Source: Service Control Manager
Date: 12/22/2022 20:47:43
Event code: 7001
Task Category: None
Level:Error
Keywords:Classic
User: N/A
Computer: User
Description:
The "NcaSvc" service is dependent on the "iphlpsvc" service, which failed to start due to an error
The specified service could not be started because either it itself or all related devices are disabled.
Xml events: event>
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="49152">7001</EventID>
    <Version>0</Version>
    <Level>2</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2022-12-22T17:47:43.2904764Z" />
    <EventRecordID>11384</EventRecordID>
    <Correlation />
    <Execution ProcessID="564" ThreadID="696" />
    <Channel>System</Channel>
    <Computer>User</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1">NcaSvc</Data>
    <Data Name="param2">iphlpsvc</Data>
    <Data Name="param3">%%1058</Data>

Code:
Log name: System
Source: Service Control Manager
Date: 12/22/2022 20:47:43
Event code: 7001
Task Category: None
Level:Error
Keywords:Classic
User: N/A
Computer: User
Description:
The "jhi_service" service is dependent on the "iphlpsvc" service, which failed to start due to an error
The specified service could not be started because either it itself or all related devices are disabled.
Xml events: event>
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="49152">7001</EventID>
    <Version>0</Version>
    <Level>2</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2022-12-22T17:47:43.5496402Z" />
    <EventRecordID>11385</EventRecordID>
    <Correlation />
    <Execution ProcessID="564" ThreadID="3136" />
    <Channel>System</Channel>
    <Computer>User</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1">jhi_service</Data>
    <Data Name="param2">iphlpsvc</Data>
    <Data Name="param3">%%1058</Data>
    <Binary>6A00680069005F0073006500720076006900630065000000</Binary>

Code:
Log name: System
Source: Service Control Manager
Date: 12/22/2022 20:47:43
Event code: 7000
Task Category: None
Level:Error
Keywords:Classic
User:N/A
Computer: User
Description:
Failed to start the "VBoxUSBMon" service due to an error.
The system cannot find the specified path.
Xml events: event>
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="49152">7000</EventID>
    <Version>0</Version>
    <Level>2</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2022-12-22T17:47:43.5762267Z" />
    <EventRecordID>11386</EventRecordID>
    <Correlation />
    <Execution ProcessID="564" ThreadID="3332" />
    <Channel>System</Channel>
    <Computer>User</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1">VBoxUSBMon</Data>
    <Data Name="param2">%%3</Data>
    <Binary>560042006F0078005500530042004D006F006E000000</Binary>
  </EventData>

Code:
Log name: System
Source: Service Control Manager
Date: 12/22/2022 20:47:43
Event code: 7000
Task Category: None
Level:Error
Keywords:Classic
User:N/A
Computer: User
Description:
Failed to start the "VBoxSup" service due to an error.
The system cannot find the specified path.
Xml events: event>
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="49152">7000</EventID>
    <Version>0</Version>
    <Level>2</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2022-12-22T17:47:43.5762267Z" />
    <EventRecordID>11387</EventRecordID>
    <Correlation />
    <Execution ProcessID="564" ThreadID="3304" />
    <Channel>System</Channel>
    <Computer>User</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1">VBoxSup</Data>
    <Data Name="param2">%%3</Data>
    <Binary>560042006F0078005300750070000000</Binary>
  </EventData>

Hello!

SnappyDriver?
Why do you need that for?
Downloading drivers manually from the official websites of the manufacturers is safer!

(Just my opinion)
 
  • Like
Reactions: Dark Lord of Tech
Status
Not open for further replies.