BSOD on windows login screen because of "wdnisdrv.sys"

[onlythefreshness]

The issue I've been battling with is that when I log into windows on my machine is the PC with BSOD with either:
"IRQL Not Less or Equal"
"System service exception"
or
"Bad Pool Error and Special Pool Detected Memory Corruption"

Most of the BSOD with say "wdnisdrv.sys" not working or something like that on the bottom after the error code. I understand that it can be a wide range of things to cause it to happen but I feel like i've narrowed it down to a few things.

dump files of the PC: https://www.filehosting.org/file/details/757919/Dumps.zip

I looked at t he dump files myself and most of them just say the the problem is most likely from "wdnisdrv.sys"

The build:

MSA7BL-M Plus USB3 Rev 1
GTX 1050 Ti
FX- 4300
2x4 Gb brandless RAM
600w EVGA

I'm not sure if its the RAM or not, I've tried using one stick at a time and alternating, using different channels for the RAM on the MOBO (1,3 2,4) and I still the same few results.

I think its a driver issue for the most part, some kind of process that starts kicking in at login.

For back story, the damn thing is a pre-built and apparently from day one has been doing this. Best Buy basically said they didn't care it came like this unless i fork up $200.

I got a fresh install on windows 10 Home on here and its still doing the same thing.
The iso used for the install was from window's website and the internet didn't disconnect so I don't believe it to be a corrupted install.

The system gets to the desktop and functions only in safe mode and does work with "Safe mode with networking", other than that it just crashes on login.

Also what the hell is wdnisdrv.sys?

 

[Colif]

Windows Defender Antivirus Network Inspection System Driver (WdNisDrv) - thats unusual, can't say I seen that crash before. Probably explains why safe mode with networking doesn't work.

Try running memtest86 on your ram sticks, 1 stick at a time, up to 8 passes. The only error count you want is 0, any higher means stick is likely cause of the BSOD. remove/replace any ram sticks that get errors

Try this in safe mode
right click start button
choose powershell (admin)
type SFC /scannow and press enter
once its completed, copy/paste this command into same window:
Repair-WindowsImage -Online -RestoreHealth and press enter
SFC fixes system files, second command cleans image files, re run SFC if it failed to fix all files and restart PC

that will possibly fix it if its just windows.

I can't read dumps but will ask a friend to convert dump files for me.

 

[onlythefreshness]

Windows Defender Antivirus Network Inspection System Driver (WdNisDrv) - thats unusual, can't say I seen that crash before. Probably explains why safe mode with networking doesn't work.

Try running memtest86 on your ram sticks, 1 stick at a time, up to 8 passes. The only error count you want is 0, any higher means stick is likely cause of the BSOD. remove/replace any ram sticks that get errors

Try this in safe mode
right click start button
choose powershell (admin)
type SFC /scannow and press enter
once its completed, copy/paste this command into same window:
Repair-WindowsImage -Online -RestoreHealth and press enter
SFC fixes system files, second command cleans image files, re run SFC if it failed to fix all files and restart PC

that will possibly fix it if its just windows.

I can't read dumps but will ask a friend to convert dump files for me.

Okay I'll give those a try. Also I meant Safe mode with networking DOES work. I just started up the PC in question and it will get to the desktop but only with the internet is disconnected.

 

[Colif]

try running the SFC/other command on desktop

Since defender is crashing, I assume you don't have another anti virus?

its possibly your lan drivers, on another PC go and download the latest from here - http://www.realtek.com.tw/Downloads/downloadsView.aspx?Conn=4&DownTypeID=3&Langid=1&Level=5&PFid=5&PNid=13 - and install them on PC.
Might also want to download https://www.bitdefender.com.au/solutions/free.html and run it to confirm PC is clean

 

[johnbl]

you should put your memory dump on a different file share service like Microsoft onedrive.
they are asking for email address and I don't want to get spam.

be sure to update your network drivers from your motherboard vendors website.

 

[Colif]

you should put your memory dump on a different file share service like Microsoft onedrive.
they are asking for email address and I don't want to get spam.

be sure to update your network drivers from your motherboard vendors website.

minor problem using LAN drivers from makers web site, the only ones there are for Win 7 - https://www.asus.com/au/Motherboards/M5A78L-M-PLUS-USB3/HelpDesk_Download/

Its why I used the realtek link since I saw the LAN on board is realtek and they at least still support the hardware with drivers.

fair call on the dump file source.

 

[onlythefreshness]

you should put your memory dump on a different file share service like Microsoft onedrive.
they are asking for email address and I don't want to get spam.

be sure to update your network drivers from your motherboard vendors website.

Here is a link to those minidumps, hosted on onedrive!

https://1drv.ms/f/s!Ai4L8qED-7lrgP5dS7F6crIgP5bbog

Okay I will try that. Thank you guys, will update in a few!

 

[Colif]

Only 3 drivers loaded at time of crash

Nov 01 2012 - ASACPI.sys - Asus Advanced Configuration and Power Interface http://www.asus.com/
Jun 03 2016 - RTKVHD64.sys - Realtek Audio Driver system driver http://www.realtek.com.tw/
Oct 05 2016 - rt640x64.sys - Realtek NICDRV 8169 PCIe GBE Family Controller driver http://www.realtek.com.tw/

Still looks like LAN drivers, all 3 dumps show NisSrv.exe crashed. It is part of windows Defender anti malware, so if drivers don't fix, run a malwarescan with either malwarebytes or bitdefender.

 

[johnbl]

verifier found a bug in a network call, you will want to update the network driver:

update Realtek NICDRV 8169 PCIe GBE Family Controller driver
\SystemRoot\System32\drivers\rt640x64.sys Wed Oct 5 06:32:55 2016
from here:
http://www.realtek.com.tw/downloads/downloadsView.aspx?Langid=1&PNid=13&PFid=5&Level=5&Conn=4&DownTypeID=3&GetDown=false

you will also want to update the motherboard audio driver from the motherboard vendors website.

(for reasons not related to this bugcheck)


when done testing you will also need to turn off the verifier functions by running

verifier.exe /reset

(or you machine will run slowly until you do)