MEMORY_MANAGEMENT BSOD when playing older games? (module: nt_wrong_symbols.sys)

SoulOfDerp

Honorable
Jun 7, 2017
92
1
10,535
TLDR: I got BSOD when I play older games, Dark Souls 1 and Xcom 1 EU. Stop Codes being SYSTEM_THREAD_EXCEPTION_NOT_HANDLED (only happened once) and MEMORY_MANAGEMENT (like 10 times already). Mini DMP files here.

In case the longer story helps, this only happens on games that are moded? or older? Which is Dark Souls 1 (which I do item randomizer mod), xcom 1 EU (with Long War mod), and Xcom 2 (with quite a lot of random mods). Xcom 2 or any other game never Blue Screen without mods. So I dont know if its mods or games being older. I played and streamed Subnautica, Overwatch or some newer games (without mods tough) and never had BSOD.


WhoCrashed report shows (older DMP files was gone for some reason):

On Sat 17/3/2018 12:15:43 AM your computer crashed or a problem was reported
crash dump file: C:\WINDOWS\Minidump\031718-6359-01.dmp
This was probably caused by the following module: hardware.sys (hardware)
Bugcheck code: 0x1A (0x41792, 0xFFFFFE005D249000, 0x2, 0x0)
Error: MEMORY_MANAGEMENT
Bug check description: This indicates that a severe memory management error occurred. A corrupted PTE has been detected.
This might be a case of memory corruption. This may be because of a hardware issue such as faulty RAM, overheating (thermal issue) or because of a buggy driver. This problem might also be caused because of overheating (thermal issue).
A third party driver was identified as the probable root cause of this system error. It is suggested you look for an update for the following driver: hardware.sys .
Google query: hardware.sys MEMORY_MANAGEMENT

On Fri 16/3/2018 9:46:42 PM your computer crashed or a problem was reported
crash dump file: C:\WINDOWS\Minidump\031618-6296-01.dmp
This was probably caused by the following module: nt_wrong_symbols.sys (nt_wrong_symbols)
Bugcheck code: 0x1A (0x41793, 0xFFFFAB0000028000, 0x1, 0x0)
Error: MEMORY_MANAGEMENT
Bug check description: This indicates that a severe memory management error occurred.
This might be a case of memory corruption. This may be because of a hardware issue such as faulty RAM, overheating (thermal issue) or because of a buggy driver. This problem might also be caused because of overheating (thermal issue).
A third party driver was identified as the probable root cause of this system error. It is suggested you look for an update for the following driver: nt_wrong_symbols.sys .
Google query: nt_wrong_symbols.sys MEMORY_MANAGEMENT

What I have tried:
- Using Display Driver uninstaller to uninstall and reinstall the newest Display Driver
- Revert to older Display Driver
- Windows update
- BIOS updated to newest version
- Memtest shows nothing wrong
- Pulling my hairs out


So what gives? My spec is here:

WD Blue WD10EZEX 1TB 7200rpm 64MB 3.5 Inch HDD
Samsung 960 EVO Series - 250GB PCIe NVMe - M.2 SSD
Antec NeoEco II Series NEO-ECO2-550 80Plus Bronze 550W PSU
MSI GeForce® GTX 1070 GAMING X 8GB GDDR5
Corsair VENGEANCE® LED 16GB (2 x 8GB) DDR4 3000MHz C15 - White LED
AMD RYZEN R7 1700 3.7GHz 16M L3 8 Core 16 Thread 65W AM4
Gigabyte GA-AB350M-Gaming 3 AM4 M.ATX
WIN10




EDIT: it seems to be harddrive related. It stopped happening when I move every steam game and every game out of a suspected hard disc.
 
Corrupted page table entry detected
Generally you would update the chipset driver and any 3rd party sata driver or storage driver.

I would also turn off virtual memory to delete the hidden pagefile.sys reboot and turn it back on to create a new one.

You should also do a malwarebytes scan.

Check for firmware updates for solid state drives.

You could also change the Sata drive port/controller combination by moving the data cable (for standard Sata drives)
 


 
Actually how much virtual memory should I set to (initial size and Max)? Should I tick "Automatically manage paging file size for all drives"?


Also can a faulty hard disk (or a quite old external hard disk) cause this BSOD? Even when the games are not installed in the external hard disk?
 
note: with a Ryzen CPU it is important that you update the bios and chipsets for the motherboard as well as apply the windows updates.

cpu's get micro code fixes for logic errors. These fixes will be applied to the BIOS and motherboard drivers. And windows will attempt a fix when it loads the CPU specific DLL when windows boots.
Often windows will have fixes before the motherboard vendor puts out a bios update.


I would just let the system handle the page file size unless I was running out of space.
I would set to about 1 gb and let it expand if it needs to.

yes old drives can cause errors like this. Windows tries to load programs into standby memory in case you want to run them. if you have lots of ram it will be loading lots of stuff just in case you want to use it. you can download and run rammap64.exe and delete the list of programs being loaded in to standby memory. (look under the "empty" menu item
on my system with 24GB RAM I find that games I have not run in 5 months were being loaded into standby RAM just in case I was going to run them.



 


Does chipset means CPU? Or something else? I think I updated both Ryzen 1700 drivers and the motherboard drivers, does that cover chipset driver? Also I am not sure what 3rd party sata driver or storage driver means, does that mean my portable harddisk or something else for my motherboard?

So for now has been a 3 hours section without BSOD. I really hope it works... thank you for your help.
 
did you look on the Gigabyte web site for your motherboard? The latest chipset driver is Version 17.4 dated Feb 12th 2018. BIOS is F22b dated Feb 13th 2018.

See here

If you look in utilities there is a program called Gigabyte App Centre. If you install and run this, it will check motherboard has latest drivers.

3rd party is likely to be an external hdd, or any external device that has its own drivers.
 
generally a CPU from intel or AMD will come with a set of support chips that provide functions that are not integrated into the CPU. For example SATA controller. Then there are other vendors of sata controllers that can be added to the motherboard in addition to the one supported directly by the CPU. These are 3rd party vendors. these provide a second SATA controller for the motherboard but also require a driver from the 3rd party company. in general, third party companies do not provide updates to Microsoft for their drivers and you have to get it from the motherboard vendor. Most often this is because only the motherboard vendor knows what implementation options were used when the chip was selected for the motherboard. Also, the motherboard vendor has to update the BIOS to initialize the electronics for the third party chips.

that being said, often the sata controller directly supported by the CPU will have fewer bugs since they automatically get updated by windows update and windows error reporting system will report the errors back to Microsoft so they can be fixed and then Microsoft will push out the fix via the windows update. for third party drivers Microsoft will tell the vendor there is a bug but does not receive a fix to push out to the machine. This means the user has to figure out the problem and find the fix by going to the motherboard vendor or the chip vendors website.
 


Umm.......Looks like I need your help again 🙁 I just get another BSOD. This time its SYSTEM_THREAD_EXCEPTION_NOT_HANDLED_M. This stop code appeared once out of the 10-15 times of MEMORY_MANAGEMENT before. Not sure if related.

On Sat 24/3/2018 3:12:51 AM your computer crashed or a problem was reported
crash dump file: C:\WINDOWS\Minidump\032418-6734-01.dmp
This was probably caused by the following module: nt_wrong_symbols.sys (nt_wrong_symbols)
Bugcheck code: 0x1000007E (0xFFFFFFFFC0000005, 0xFFFFF8020DAF72A0, 0xFFFFBF0F20B92B78, 0xFFFFBF0F20B923C0)
Error: SYSTEM_THREAD_EXCEPTION_NOT_HANDLED_M
Bug check description: This indicates that a system thread generated an exception which the error handler did not catch.
This appears to be a typical software driver bug and is not likely to be caused by a hardware problem.
A third party driver was identified as the probable root cause of this system error. It is suggested you look for an update for the following driver: nt_wrong_symbols.sys .
Google query: nt_wrong_symbols.sys SYSTEM_THREAD_EXCEPTION_NOT_HANDLED_M


Mini DMP file here.
 
if this windows install is from another machine you might want to do a complete reinstall of windows
-----------
I would start by removing the old nxt software driver and the overclocking driver.
it is pretty strange to have a intel cpu overclocking driver installed when you have a
AMD Ryzen 7 1700 Eight-Core Processor

but I could not rule out that it is from your 2015 bitdefender driver
\SystemRoot\system32\DRIVERS\bdvedisk.sys Mon Nov 23 03:38:07 2015

--------------

2: kd> !error 0x1000007E
Error code: (NTSTATUS) 0x1000007e (268435582) - The specified module could not be found.

bugcheck shows a bad memory addrees being used.

remove overclocking utility:
C:\Program Files (x86)\Intel\Intel(R) Extreme Tuning Utility\Drivers\IocDriver\64bit\iocbios2.sys Fri Sep 15 03:22:21 2017 (remove)

the bugcheck looks like some kind of problem in virtual memory

this driver is unexpected: (because of the old driver date, remove the driver)
C:\Program Files (x86)\NZXT\CAM\CAM_V3.sys Sat Jul 26 06:29:37 2008
http://www.carrona.org/drivers/driver.php?id=CAM_V3.sys

this driver also can cause corruption problems
\SystemRoot\System32\drivers\ScpVBus.sys Sun May 5 14:31:26 2013
(will not pass verifier tests)

 


Sorry I dont know too much about and advanced software/hardware stuff. So I have no idea what nxt software drivers.

2015 bitdefender driver - This is used by Bitdefender 2018 so I cannot remove it...

Error code: (NTSTATUS) 0x1000007e (268435582) - What should I do with this?

Intel(R) Extreme Tuning Utility - I have no idea why it is installed. Its not even in the software list in the control panel. So all I can do is disable it in the service tab in task manager. Even then I still cannot delete the file.

CAM_V3.sys - I removed the program. I just want a software to monitor my hardware.... 🙁 do you have any suggestion on this?

ScpVBus.sys - It is used by The XNA Framework Redistributable. From google it said it provides the necessary runtime components to execute a game on Windows that was developed using Microsoft XNA Game Studio 4.0. Should I remove it anyway?
 
well, CAM 3.5.80 is out, so perhaps try it if you have hardware it supports - https://camwebapp.com/

ScpVBus.sys = Scarlet.Crush Productions Scp Dual Shock 3 Virtual Bus Driver

Wait, how.. why is there Intel(R) Extreme Tuning Utility on an AMD Ryzen Board?

That doesn't belong on this PC. The only Intel I have seen on AMD boards are for lan chips, and those on your board are Realtek. I would run something like revo uninstaller and remove it if you don't have it installed.




Now I understand why John said that... did you move the win 10 hdd from another PC? it would sure explain why a driver used to overclock Intel chips is on an AMD PC. If you didn't, it being there is bizarre.
 


Hmm... I bought this PC and they installed Windows for me before delivering... so I dont know.

Revo uninstaller doesnt seems to detect the Intel(R) Extreme Tuning Utility. But after a few restarts after disabling the service, iocbios2.sys is removed.

For ScpVBus.sys, I still cannot find a way to remove it.

And I replaced CAM with MSI Afterburner.
 


My PC must really hate me or really hate having a thermometer. Or just doesnt like me playing some of the games. Since both BSOD only happens in some games. Like when I can play Overwatch for 20 hours straight and it wont even blue screen.

I have seen that link you gave too, but I do not have SCP DSx Service in my service tab, and if I go to the CMD part it just shows "The specified service does not exist as an installed service." And in the Device Manager I dont even have libusbK USB Devices.
 


Ok, it had been a few days of Blue Screen free sections, but I just get another BSOD.............dump file here. Every time I thought I did it....... it just happens when I least expected............

On Thu 29/3/2018 12:39:25 AM your computer crashed or a problem was reported
crash dump file: C:\WINDOWS\Minidump\032918-6625-01.dmp
This was probably caused by the following module: nt_wrong_symbols.sys (nt_wrong_symbols)
Bugcheck code: 0x1000007E (0xFFFFFFFFC0000005, 0xFFFFF8031A8F62A0, 0xFFFF858E76792B78, 0xFFFF858E767923C0)
Error: SYSTEM_THREAD_EXCEPTION_NOT_HANDLED_M
Bug check description: This indicates that a system thread generated an exception which the error handler did not catch.
This appears to be a typical software driver bug and is not likely to be caused by a hardware problem.
A third party driver was identified as the probable root cause of this system error. It is suggested you look for an update for the following driver: nt_wrong_symbols.sys .
Google query: nt_wrong_symbols.sys SYSTEM_THREAD_EXCEPTION_NOT_HANDLED_M
 
i can't say I have ever seen nt_wrong_symbols.sys before, its a new one on me. I believe its part of windows but not sure what it does.it might also just be an error in whocrashed since i can't read the dump files myself. I normally get someone to translate them but John can read them, and was following/helping you out.

try running memtest86 on your ram, 1 stick at a time. Any errors are too many, the only score you want to see is 0. It creates a bootable USB so can run outside of windows - if you already tested ram, don't again, I just wasn't sure.

One fix I found for it is reinstall the Nvidia drivers - http://www.tomshardware.com/faq/id-2767677/perform-clean-install-video-card-drivers.html
 


I did ran memtest, but with both RAM installed. Do I need to do it again? Clean install of Display driver was also done when I was trying to fix the MEMORY_MANAGEMENT stop code.......

I mean I still have a few drivers above I have no idea how to remove, so that may also be that. But I just cant find a way to remove those.....

And the thing is that I used to have MEMORY_MANAGEMENT stop code, during 10-20 times of those one SYSTEM_THREAD_EXCEPTION_NOT_HANDLED was there.

And now, MEMORY_MANAGEMENT was gone and its all SYSTEM_THREAD_EXCEPTION_NOT_HANDLED. It also seems to happen a lot less then MEMORY_MANAGEMENT. Since MEMORY_MANAGEMENT appeared every single game section for me. And SYSTEM_THREAD_EXCEPTION_NOT_HANDLED only happens once a few days.

But the annoying thing is that since it takes days to appear now, I can never know if the fixes actually works.....
 
generally helps to run 1 stick at a time, as if you do find any errors, you can identify which stick is the cause.

I will ask a friend to convert dump files so i can see if they blame same sys file.

Only way to know if BSOD are gone is when you don't get them anymore.
 
Hi, I ran the dump files through the debugger and got the following information: https://pste.eu/p/iBzT.html

File: 032918-6625-01.dmp (Mar 28 2018 - 12:39:25)
BugCheck: [SYSTEM_THREAD_EXCEPTION_NOT_HANDLED_M (1000007E)]
Probably caused by: memory_corruption (Process: SearchFilterHost.exe)
Uptime: 0 Day(s), 5 Hour(s), 13 Min(s), and 21 Sec(s)

File: 031718-6359-01.dmp (Mar 16 2018 - 12:15:43)
BugCheck: [MEMORY_MANAGEMENT (1A)]
Probably caused by: memory_corruption (Process: chrome.exe)
Uptime: 0 Day(s), 2 Hour(s), 28 Min(s), and 15 Sec(s)

File: 031618-6296-01.dmp (Mar 16 2018 - 09:46:42)
BugCheck: [MEMORY_MANAGEMENT (1A)]
Probably caused by: memory_corruption (Process: Steam.exe)
Uptime: 0 Day(s), 1 Hour(s), 32 Min(s), and 09 Sec(s)

The overclocking driver "IOCBios2.sys" was found on your system. Remove the Intel Extreme Tuning Utility which installs this file while we are trying to fix your BSOD problems.

The overclocking driver "RTCore64.sys" was found on your system. Remove the software (MSI Afterburner) which installs this file while we are trying to fix your BSOD problems.

Remove all overclocks. Sometimes there will be multiple copies of these files, be sure to remove all of the corresponding software.

Motherboard: https://www.gigabyte.com/us/Motherboard/GA-AB350M-Gaming-3-rev-1x#kf
If the above page is correct, there are BIOS updates for your system. You have version F20c installed. Note: Updating your BIOS can be risky. Never try it when you might lose power (lightning storms, recent power outages, etc).

I can't help you with this. Wait for additional replies. Good luck.
 


I cannot remove Intel Extreme Tuning Utility since its not "installed" in my system and the only thing I can do is disable that in "service".

MSI Afterburner - Oh man..... all I want is monitor my hardware..... and it seems every single one of them can cause BSOD....

And I did not do any overclocks, as far as I can remember. And I updated MB/GPU/Window/BIOS multiple times lol, but I will try updating these too. At this rate I am going to run into a power outage sooner or later during my BIOS update since I am doing it once a week or so 😛
 
sorry, that text is auto, I asked him to look at the dumps as that nt_wrong_symbols.sys does appear to be a bug in who crashed. I should told him i said Afterburner is okay. Leave msi afterburner for now. It was installed after the fact

Odd, dump still showing you on F20c, I already suggested you go to F22.

Have you tried disabling it in service? I can't work out why intel extreme tuning would be on an AMD board? Its not a common find

I don't suppose you have an Intel ssd? I already checked there is nothing made by Intel on motherboard

try updating the LAN drivers - http://www.realtek.com.tw/Downloads/downloadsView.aspx?Conn=4&DownTypeID=3&Langid=1&Level=5&PFid=5&PNid=13 - i would guess it is lan drivers given it crashed in 2 web based applications.
 


I am going to check again for the BIOS, at least I thought I updated to F22. My SSD is Samsung 960 EVO Series - 250GB PCIe NVMe - M.2 SSD.

Can the 2 BSOD be related or is it possible its not related at all? Because it seemed MEMORY_MANAGEMENT was the main thing and after we "fixed" that now only SYSTEM_THREAD_EXCEPTION_NOT_HANDLED appeared.

Will also update LAN driver when I get home. It is strange that it never happened to Overwatch, or Subnautica. Or maybe the game got lucky.

Also, is it possible for my external HDD or Mouse cause the problem? They are not that new. I tried installing the driver for the external HDD and not allowing the mouse program to run after logging in but BSOD still happens.