[SOLVED] Bsod Ntoskrnl EXE

alexpaling · Jun 9, 2020

I recently upgraded my old PC.
New Spec is:
3900x
x570 Gaming Plus
corsair vengeance lpx 16gb 3600mhz
Sabrent Rocket 4.0 1TB NVMe
RM850i (works with old PC setup)
GTX 1080 (works with old PC setup)

I am repeatidly getting BSODs or reset crashes which all point to Ntoskrnl and ntkrnlmp which report a number of errors:
STATUS_SYSTEM_PROCESS_TERMINATED
MEMORY_MANAGEMENT
STATUS_SYSTEM_PROCESS_TERMINATED
FAULTY_HARDWARE_CORRUPTED_PAGE

I have reinstalled windows on both drives several times to no avail. I have run memtests on ram using memtest86 with 4 passes no issue. I have run prime95 for hours without any issue.

But when playing COD it regularly crashes but less strenuous games has no effect. However random windows crashes can also happen when just sat in windows. Any help is much appreciated as I am at my wits end!

Crash logs in link: https://gofile.io/d/c3a6vK

Colif · Jun 9, 2020

@gardenman if you look, only 1 of the dumps is a memory dump, so try the smaller one.
He will convert dumps for us, see if it does show anything.
Ntoskrnl and ntkrnlmp are both aprts of windows kernel. They get blamed for almost all errors as they do so much.
windows kernel handles all driver requests, power management, and memory management. It sits between Hardware and Applications. It got blamed but its not the cause

Prime95 tests CPU/Memory
Memtest tests memory (obviously)
So can say ram is okay physically but is the ram on here - https://www.msi.com/Motherboard/support/MPG-X570-GAMING-PLUS#support-mem-19
Ryzens might not work well if ram hasn't been tested.
You can use this as a 2nd opinion - https://www.corsair.com/us/en/memoryfinder

One other thought, would be to test the ssd as well. As Windows sees storage as memory as well. This might help - https://www.sabrent.com/download/rocket-control-panel/

alexpaling · Jun 9, 2020

Colif said:
@gardenman if you look, only 1 of the dumps is a memory dump, so try the smaller one.
He will convert dumps for us, see if it does show anything.
Ntoskrnl and ntkrnlmp are both aprts of windows kernel. They get blamed for almost all errors as they do so much.
windows kernel handles all driver requests, power management, and memory management. It sits between Hardware and Applications. It got blamed but its not the cause

Prime95 tests CPU/Memory
Memtest tests memory (obviously)
So can say ram is okay physically but is the ram on here - https://www.msi.com/Motherboard/support/MPG-X570-GAMING-PLUS#support-mem-19
Ryzens might not work well if ram hasn't been tested.
You can use this as a 2nd opinion - https://www.corsair.com/us/en/memoryfinder

One other thought, would be to test the ssd as well. As Windows sees storage as memory as well. This might help - https://www.sabrent.com/download/rocket-control-panel/

Many thanks for your quick reply!
I have been through the compatibility og the RAM and it is fine. I have also swapped from 2 sticks to 1 to see if there is an issue with syncing between the sticks.

The sabrent control panel shows 100% health but under SMART details is shows an error log code of 590. Not sure if this doesnt matter - asked sabrent customer support and waiting a reply.

Will let you know if one ram stick causes issues!

gardenman · Jun 9, 2020

Hi, I ran the dump files through the debugger and got the following information: https://pulvinateplace.htmlpasta.com/

File information:	060820-12765-01.dmp (Jun 8 2020 - 15:27:36)
Bugcheck:	STATUS_SYSTEM_PROCESS_TERMINATED (C000021A)
Probably caused by:	memory_corruption (Process: smss.exe)
Uptime:	0 Day(s), 0 Hour(s), 00 Min(s), and 06 Sec(s)

File information:	060820-12671-01.dmp (Jun 8 2020 - 10:51:52)
Bugcheck:	STATUS_SYSTEM_PROCESS_TERMINATED (C000021A)
Probably caused by:	memory_corruption (Process: smss.exe)
Uptime:	0 Day(s), 0 Hour(s), 00 Min(s), and 06 Sec(s)

File information:	060820-12531-01.dmp (Jun 8 2020 - 08:59:13)
Bugcheck:	STATUS_SYSTEM_PROCESS_TERMINATED (C000021A)
Probably caused by:	memory_corruption (Process: smss.exe)
Uptime:	0 Day(s), 0 Hour(s), 00 Min(s), and 06 Sec(s)

File information:	060820-11515-01.dmp (Jun 8 2020 - 07:41:09)
Bugcheck:	FAULTY_HARDWARE_CORRUPTED_PAGE (12B)
Probably caused by:	memory_corruption (Process: MemCompression)
Uptime:	0 Day(s), 0 Hour(s), 54 Min(s), and 17 Sec(s)

File information:	060820-11515-02.dmp (Jun 8 2020 - 14:37:27)
Bugcheck:	MEMORY_MANAGEMENT (1A)
Probably caused by:	memory_corruption (Process: MemCompression)
Uptime:	0 Day(s), 0 Hour(s), 54 Min(s), and 34 Sec(s)

File information:	MEMORY.DMP (Jun 8 2020 - 15:27:36)
Bugcheck:	STATUS_SYSTEM_PROCESS_TERMINATED (C000021A)
Probably caused by:	memory_corruption (Process: smss.exe)
Uptime:	0 Day(s), 0 Hour(s), 00 Min(s), and 06 Sec(s)

Comments:

The memory.dmp was small enough for me to download.
smss.exe was loaded as a driver. I've never seen that before. I added it to the Microsoft driver list.

Possible Motherboard page: https://www.msi.com/Motherboard/MPG-X570-GAMING-PLUS
You have the latest BIOS already installed.

This information can be used by others to help you. Someone else will post with more information. Please wait for additional answers. Good luck.

Colif · Jun 9, 2020

hardly ever see Status System Process Terminated error and you got it 4 times

The STOP 0xC000021A error occurs when either Winlogon.exe or Csrss.exe fails. When the Windows NT kernel detects that either of these processes has stopped, it stops the system and raises the STOP 0xC000021A error.

smss.exe is the user client in windows 10. If it crashes, windows has no choice but to crash. PC can't run without a client. You can't use it without a client.

right click start button
choose powershell (admin)
type SFC /scannow and press enter
once its completed, copy/paste this command into same window:
Repair-WindowsImage -Online -RestoreHealth and press enter
SFC fixes system files, second command cleans image files, re run SFC if it failed to fix all files and restart PC

Not sure about Faulty Hardware Corrupted Page. I don't see any interactions with drives, its all virtual memory operations (win 10 tricks all applications into thinking they have some massive amount of memory and its up to windows memory management to make it work).

memory management was an operation where it read info off drive, then processed it and then read more info from drive again and the info it received didn't match what it was expecting (I could be wrong about last part) and it threw the error.

Perhaps that sabrent code is a clue to that. I can't find anything on it.

alexpaling · Jun 9, 2020

Colif said:
hardly ever see Status System Process Terminated error and you got it 4 times

smss.exe is the user client in windows 10. If it crashes, windows has no choice but to crash. PC can't run without a client. You can't use it without a client.

right click start button
choose powershell (admin)
type SFC /scannow and press enter
once its completed, copy/paste this command into same window:
Repair-WindowsImage -Online -RestoreHealth and press enter
SFC fixes system files, second command cleans image files, re run SFC if it failed to fix all files and restart PC

Not sure about Faulty Hardware Corrupted Page. I don't see any interactions with drives, its all virtual memory operations (win 10 tricks all applications into thinking they have some massive amount of memory and its up to windows memory management to make it work).

memory management was an operation where it read info off drive, then processed it and then read more info from drive again and the info it received didn't match what it was expecting (I could be wrong about last part) and it threw the error.

Perhaps that sabrent code is a clue to that. I can't find anything on it.

UPDATE

I have fresh installed windows 10 again and installed the latest Windows updates, followed by and chipset drivers and then I went to Event viewer and without anything, else installed errors are occurring around C: I then ran a chkdsk which found errors. I restarted to run chkdsk and now windows wont boot - went to repair and windows is unable to repair the error. This pattern has happened before and it seems like I only have so many restarts before windows become corrupt.

As this is around the 4th time this setup has corrupted Windows I am thinking it must be a hardware issue? Should I remove the sabrent NVMe drive and try it with my old Samsung SSD?

I wont reinstall again until you provide feedback. I can access command prompt still but unable to access windows.

Thanks for all your help!

Colif · Jun 10, 2020

Are you getting BSOD or just seeing errors in event viewer?
If only event viewer, that is normal. Every PC on earth gets errors in event viewer, most of them can be ignored

alexpaling · Jun 10, 2020

Colif said:
Are you getting BSOD or just seeing errors in event viewer?
If only event viewer, that is normal. Every PC on earth gets errors in event viewer, most of them can be ignored

BSOD and event viewer.
The fresh install of Windows has corrupted after 4 boots and won't load now.

Colif · Jun 10, 2020

alexpaling said:
The sabrent control panel shows 100% health but under SMART details is shows an error log code of 590. Not sure if this doesnt matter - asked sabrent customer support and waiting a reply.

did you get a reply on this? It sounds to me like drive is problem as installs don't go bad that fast (or at all).

Try installing to ssd as if same happens, its not the nvme at least

alexpaling · Jun 10, 2020

Colif said:
did you get a reply on this? It sounds to me like drive is problem as installs don't go bad that fast (or at all).

Try installing to ssd as if same happens, its not the nvme at least

Right I will do that next.

I looked on amazon reviews for the Sabrent drive under 1 star and some of the complaints were similar to my issues.

I will let you know how it goes!

alexpaling · Jun 11, 2020

UPDATE!!

So completely removed the rocket drive and installed the OS on my Samsung SSD.

I also created a new windows 10 install USB from windows.

Once windows was installed I updated windows and all was fine apart from windows fails to install initially:

2020-06 Cumulative Update for Windows 10 Version 2004 for x64-based Systems (KB4557957)

I then go to sfc /scannow and it throws up the error:

Windows Resource Protection found corrupt files but was unable to fix some of them.
For online repairs, details are included in the CBS log file located at
windir\Logs\CBS\CBS.log. For example C:\Windows\Logs\CBS\CBS.log. For offline
repairs, details are included in the log file provided by the /OFFLOGFILE flag.

Because of this error I then run DISM commands which also fail to complete:

error: 0x800f081fthe source files could not be found.use the "source" option to specify the location of the files that are required to restore the feature. for more information on specifying a source location, see https://go.microsoft.com/fwlink/?linkid=243077.the dism log file can be found at c:\windows\logs\dism\dism.log

I have then followed the article ( https://www.wintips.org/fix-dism-0x800f081f-error-in-windows-10-8/ ) and when I get to step 2 point 7 it fails to build the install.wsm file due to corrupt files.

Now during all of this I have had several crashes - please find attached the new files to analyse. I am not at my wits end and with windows corrupting regularly I still feel it has to be the hardware. Either RAM/SSD/MB/PROCESSOR. I have run health check on SSD and it is 100% and works perfectly on my old machine. So this leaves RAM/MB/PROCESSOR.

I am going to buy replacement hardware and return some to troubleshoot. Advice on the order of replacement would be much appreciated. E.g. buy new ram test then try MB, etc

DMP files in link below:
https://ufile.io/iosfr757

Colif · Jun 11, 2020

i would have got you to do this

Download a copy of the win 10 iso from Here - create ISO by telling it you want to make DVD - and then mount that ISO in file explorer (see Here) and then copy paste the below command into command prompt (admin)

DISM /Online /Cleanup-Image /RestoreHealth /source:WIM:X:\Sources\Install.wim:1 /LimitAccess

Where "X" is the drive letter where the ISO is located. Simply change the "X" to the correct drive letter

but you shouldn't need to do that on clean install.

It shouldn't be CPU if it passes Prime.
It shouldn't be ram if it passes Prime & Memtest. I would run memtest another round to be sure.
2 different SSD not likely to cause similar problem...
Did you use a different USB (clutching at straws time)
only things left are Mb & PSU

alexpaling · Jun 11, 2020

Colif said:
i would have got you to do this

Download a copy of the win 10 iso from Here - create ISO by telling it you want to make DVD - and then mount that ISO in file explorer (see Here) and then copy paste the below command into command prompt (admin)

DISM /Online /Cleanup-Image /RestoreHealth /source:WIM:X:\Sources\Install.wim:1 /LimitAccess

Where "X" is the drive letter where the ISO is located. Simply change the "X" to the correct drive letter

but you shouldn't need to do that on clean install.

It shouldn't be CPU if it passes Prime.
It shouldn't be ram if it passes Prime & Memtest. I would run memtest another round to be sure.
2 different SSD not likely to cause similar problem...
Did you use a different USB (clutching at straws time)
only things left are Mb & PSU

Hi once again.
install.wim doesn't exist on the mounted drive. Its Install.esd. I tried to convert the .esd file to .wim but the

alexpaling · Jun 11, 2020

alexpaling said:
Hi once again.
install.wim doesn't exist on the mounted drive. Its Install.esd. I tried to convert the .esd file to .wim but the

command Export-WindowsImage -SourceImagePath D:\sources\install.esd -SourceIndex 1 -DestinationImagePath C:\export.wim -CheckIntegrity

created the file and then when I run it using:

C:\Windows\system32>DISM /Online /Cleanup-Image /RestoreHealth /source:WIM:C:\export.wim:1 /LimitAccess

I am still getting the following error:

Image Version: 10.0.19041.329
[==========================100.0%==========================]
Error: 0x800f081f
The source files could not be found.
Use the "Source" option to specify the location of the files that are required to restore the feature. For more information on specifying a source location, see https://go.microsoft.com/fwlink/?LinkId=243077.
The DISM log file can be found at C:\Windows\Logs\DISM\dism.log

Colif · Jun 11, 2020

Build 2004 had a known issue with DISM, I don't know if its fixed.

You shouldn't need to run it right after an install so something is still wrong.

gardenman · Jun 11, 2020

I ran the dump files through the debugger and got the following information: https://stockinglessqueen.htmlpasta.com/

File information:	061120-6000-01.dmp (Jun 11 2020 - 05:03:14)
Bugcheck:	DRIVER_IRQL_NOT_LESS_OR_EQUAL (D1)
Probably caused by:	memory_corruption (Process: System)
Uptime:	0 Day(s), 0 Hour(s), 02 Min(s), and 08 Sec(s)

File information:	061120-5109-01.dmp (Jun 10 2020 - 23:46:07)
Bugcheck:	CRITICAL_STRUCTURE_CORRUPTION (109)
Probably caused by:	Unknown_Image (Process: System)
Uptime:	0 Day(s), 0 Hour(s), 04 Min(s), and 17 Sec(s)

File information:	061120-5000-01.dmp (Jun 10 2020 - 23:41:18)
Bugcheck:	MEMORY_MANAGEMENT (1A)
Probably caused by:	memory_corruption (Process: TextInputHost.)
Uptime:	0 Day(s), 7 Hour(s), 56 Min(s), and 02 Sec(s)

File information:	061020-5375-01.dmp (Jun 10 2020 - 13:27:02)
Bugcheck:	KERNEL_SECURITY_CHECK_FAILURE (139)
Probably caused by:	memory_corruption (Process: System)
Uptime:	0 Day(s), 0 Hour(s), 58 Min(s), and 00 Sec(s)

File information:	061020-5000-01.dmp (Jun 10 2020 - 15:37:34)
Bugcheck:	STATUS_SYSTEM_PROCESS_TERMINATED (C000021A)
Probably caused by:	memory_corruption (Process: smss.exe)
Uptime:	0 Day(s), 0 Hour(s), 00 Min(s), and 05 Sec(s)

File information:	MEMORY.DMP (Jun 11 2020 - 05:03:14)
Bugcheck:	DRIVER_IRQL_NOT_LESS_OR_EQUAL (D1)
Probably caused by:	memory_corruption (Process: System)
Uptime:	0 Day(s), 0 Hour(s), 02 Min(s), and 08 Sec(s)

This information can be used by others to help you. Someone else will post with more information. Please wait for additional answers. Good luck.

Colif · Jun 12, 2020

I checked your ram against MSI site, it is there (or one very close to it is, CMK16GX4M2B3600C18 is there and its virtually same as yours, just a B instead of a D.

there are no ways to test a Motherboard. You test everything else and once they all been shown to be fine, it can only be MB. Not very scientific.

PSU
the paper clip method - https://forums.tomshardware.com/threads/what-is-the-paperclip-method-of-testing-a-psu.1336402/
or multimeter,
or in the BIOS to check the +3.3V, +5V, and +12V. - https://www.lifewire.com/power-supply-voltage-tolerances-2624583

MB/PSU 2 hardest parts to test. Simplest way is normally get a shop to test it out and find the bad parts.

Unlikely the problems caused by windows/drivers, not after 3 installs in such a short time.

alexpaling · Jun 15, 2020

Ok so I went all out and started by sending back / purchasing new parts:
3900x (from last setup)
x570 taichi (new)
CMK16GXM2D3600C18 - Vengance LPX 3600mhz (a new pair)
RM850x (new)
Samsung EVO 970 (new)
GTX 1080 (old)

So apart from the PSU and GPU I have completely new parts. I have installed a new version of Windows 10 which corrupted immeditaely. I believe this is now down to NVIDIA control panel replacing a windows file which causes sfc /scannow to fail. I then downloaded ISO, mounted it and ran:

alexpaling · Jun 15, 2020

alexpaling said:
Ok so I went all out and started by sending back / purchasing new parts:
3900x (from last setup)
x570 taichi (new)
CMK16GXM2D3600C18 - Vengance LPX 3600mhz (a new pair)
RM850x (new)
Samsung EVO 970 (new)
GTX 1080 (old)

So apart from the PSU and GPU I have completely new parts. I have installed a new version of Windows 10 which corrupted immeditaely. I believe this is now down to NVIDIA control panel replacing a windows file which causes sfc /scannow to fail. I then downloaded ISO, mounted it and ran:

DISM /Online /Cleanup-Image /RestoreHealth /source:WIM:X:\Sources\Install.wim:1 /LimitAccess

Which ran and was successful. I have installed monitoring software which tells me that my hardware is operating within acceptable temperatures. That is motherboard, PSU and GPU although SB temps are sometimes close to 80C but I added another fan and moved the GPU to another slot and the temp is now around 60C. CPU is 54C idel and MB is 38C. My 1080 when running a game can get upto 85C.

So after all of this I am still getting kernel errors! I am literally unable to understand why! If I am not playing a game it crashes very infrequently. However, If I load up COD and am about to start a game it will freeze. My primary gaming screen will freeze and my secondary screen will go black. After 10 seconds the computer will restart, It is possible to play several games without crashing but it is unpredictable.

I have rerun memtest86+ with no errors, both prime95 and heavyload with no errors (however heavyload occassionally causes a blue loading wheel while the system catches up).

I will include the crash logs below... Could it be the GPU? What can I do to test it? Other games dont seem to crash (rocket league, ec) and heavyload doesnt crash the GPU either even when its running at 80% load for hours.

HELP!!! PLEASE!!

https://easyupload.io/oebv3g

Colif · Jun 15, 2020

where do you get the nvidia drivers from? I would have run windows update as i believe the version of the drivers installed by it shouldn't create any problems for SFC

shame you can't run 3900X without a GPU

it looks like its like GPU since everything else is new

Only real tests for GPU are benchmarks - don't run at same time.
https://geeks3d.com/furmark/

https://benchmark.unigine.com/heaven
and really, only way they tell you anything is if you bsod during them. and that crash blames GPU

alexpaling · Jun 15, 2020

So windows automatically install nvidia control panel and then I install geforce experience to install the latest 1080 drivers. Is this correct?

Yes it is a new PSU.

And I have only just managed to get the latest windows update to successfully install. Just ran sfc /scannow and....
Windows Resource Protection found corrupt files but was unable to fix some of them.
For online repairs, details are included in the CBS log file located at
windir\Logs\CBS\CBS.log. For example C:\Windows\Logs\CBS\CBS.log.

Should i post the cbs log file?

Colif · Jun 15, 2020

Windows update will have a Nvidia driver for your card, you don't need to run Geforce experience after as having the latest Nvidia drivers on a 1080 could be cause.

upload the cbs log to a file sharing site and show link here, I don't actually know how to read it but I will look through it, I have seen them before.

alexpaling · Jun 15, 2020

Colif said:
Windows update will have a Nvidia driver for your card, you don't need to run Geforce experience after as having the latest Nvidia drivers on a 1080 could be cause.

upload the cbs log to a file sharing site and show link here, I don't actually know how to read it but I will look through it, I have seen them before.

https://gofile.io/d/XaQR29

Colif · Jun 15, 2020

Thing is, if this is a brand new install, it shouldn't be corrupting so fast.

I see if anyone else has any thoughts.

gardenman · Jun 15, 2020

Hi, I ran the dump file(s) through the debugger and got the following information:https://phonemicsouthchinatiger.htmlpasta.com/

File information:	061520-6984-01.dmp (Jun 15 2020 - 07:49:10)
Bugcheck:	KERNEL_SECURITY_CHECK_FAILURE (139)
Probably caused by:	memory_corruption (Process: System)
Uptime:	0 Day(s), 0 Hour(s), 23 Min(s), and 28 Sec(s)

File information:	061520-6937-01.dmp (Jun 15 2020 - 06:15:33)
Bugcheck:	FAULTY_HARDWARE_CORRUPTED_PAGE (12B)
Probably caused by:	memory_corruption (Process: MemCompression)
Uptime:	0 Day(s), 0 Hour(s), 16 Min(s), and 31 Sec(s)

File information:	061520-6828-01.dmp (Jun 15 2020 - 05:30:33)
Bugcheck:	KERNEL_SECURITY_CHECK_FAILURE (139)
Probably caused by:	memory_corruption (Process: System)
Uptime:	0 Day(s), 0 Hour(s), 05 Min(s), and 35 Sec(s)

File information:	061520-6812-01.dmp (Jun 15 2020 - 05:23:08)
Bugcheck:	STATUS_SYSTEM_PROCESS_TERMINATED (C000021A)
Probably caused by:	memory_corruption (Process: smss.exe)
Uptime:	0 Day(s), 0 Hour(s), 00 Min(s), and 06 Sec(s)

File information:	061520-5593-01.dmp (Jun 15 2020 - 05:40:59)
Bugcheck:	FAULTY_HARDWARE_CORRUPTED_PAGE (12B)
Probably caused by:	memory_corruption (Process: MemCompression)
Uptime:	0 Day(s), 0 Hour(s), 09 Min(s), and 14 Sec(s)

File information:	MEMORY.DMP (Jun 15 2020 - 07:49:10)
Bugcheck:	KERNEL_SECURITY_CHECK_FAILURE (139)
Probably caused by:	memory_corruption (Process: System)
Uptime:	0 Day(s), 0 Hour(s), 23 Min(s), and 28 Sec(s)

Possible Motherboard page: https://www.asrock.com/mb/amd/x570 taichi/

This information can be used by others to help you. Someone else will post with more information. Please wait for additional answers. Good luck.

[SOLVED] Bsod Ntoskrnl EXE

Win 11 Master

Splendid

Win 11 Master

Win 11 Master

Win 11 Master

Win 11 Master

Win 11 Master

Splendid

Win 11 Master

Win 11 Master

Win 11 Master

Win 11 Master

Splendid

Share this page