Question ntoskrnl.exe BSODs after wake and power on

[andrewpauloosemore]

I first noticed that I was getting BSODs about a month ago. I put my PC into hibernation in the evening and wake it in the morning, getting a BSOD within an hour after wake up. This also happens if I click shutdown and turn it back on. It doesn't happen after I've had a BSOD and I've had to force shut down.

What I can see from BlueScreen View is its always ntoskrnl.exe causing the BSOD and sometimes paired with something. At first it was Droidcam.sys so I uninstalled droid cam, then it was VBaudio so I uninstalled that as well (Neither I desperately needed). Both of these i'd found from running Driver Verifier however, normal BSOD dmps didn't tell me this.

I've updated all drivers I can find, chipset and BIOS
ran Memtest86, came out clean
ran the windows memory check tool, came out clean
ran chkdsk on my boot drive, also came out clean
also ran SFC /scannow all is healthy

I've also seen fltmgr.sys linked with ntoskrnl but don't have that dmp
Last driver verifier run I ran gave me crashes due to Asio2.sys but refused to create a dmp

Minidumps: https://drive.google.com/drive/folders/12apRuWRYli2QlGjcTiNgAo12HVqNXqz_?usp=sharing
System: http://speccy.piriform.com/results/xcINhzj1HCOOLAcIXwDGLMq

 

[Colif]

I can't read dumps but I have sent the link to a friend who will convert them.
NTOSKRNL = windows kernel. It handles all driver requests, power management, and memory management. It sits between Hardware and Applications. It got blamed because it did crash, but its not the cause

speccy printouts really give too much info about windows... just me complaining

filter manager is responsible for making sure that all the file that is stored in a user’s hard drive stay in their respective locations. I see it a lot. mostly in memory related errors as most of those are actions either writing too or from storage. Could still mean its a driver.

try running this on both hdd - - https://support.wdc.com/downloads.aspx?p=3&lang=en

I generally don't suggest Driver verifer as it can cause boot loops and more problems than you had already. It would be great if Microsoft got its driver testing software right.

 

[andrewpauloosemore]

Thanks for your reply, I've ran the diagnostics tool on my HDD and it passed. My SSD cant be scanned so I got the SSD version of the tool (WD SSD Dashboard) and tested it using that, it also passed.

 

[gardenman]

Hi, I ran the dump files through the debugger and got the following information: https://pastebin.com/WRCkQ4xA

Spoiler

File information:	072420-10109-01.dmp (Jul 24 2020 - 12:08:20)
Bugcheck:	PAGE_FAULT_IN_NONPAGED_AREA (50)
Probably caused by:	memory_corruption (Process: Medal.exe)
Uptime:	0 Day(s), 4 Hour(s), 32 Min(s), and 05 Sec(s)

File information:	072320-8546-01.dmp (Jul 23 2020 - 08:11:42)
Bugcheck:	DRIVER_VERIFIER_DETECTED_VIOLATION (C4)
Probably caused by:	memory_corruption (Process: System)
Uptime:	0 Day(s), 0 Hour(s), 00 Min(s), and 06 Sec(s)

File information:	072320-10656-01.dmp (Jul 23 2020 - 09:19:29)
Bugcheck:	DRIVER_VERIFIER_DETECTED_VIOLATION (C4)
Probably caused by:	memory_corruption (Process: System)
Uptime:	0 Day(s), 0 Hour(s), 00 Min(s), and 06 Sec(s)

File information:	072220-10671-01.dmp (Jul 22 2020 - 07:31:42)
Bugcheck:	IRQL_NOT_LESS_OR_EQUAL (A)
Probably caused by:	memory_corruption (Process: System)
Uptime:	1 Day(s), 0 Hour(s), 16 Min(s), and 15 Sec(s)

File information:	072120-11187-01.dmp (Jul 21 2020 - 07:13:32)
Bugcheck:	IRQL_NOT_LESS_OR_EQUAL (A)
Probably caused by:	memory_corruption (Process: System)
Uptime:	0 Day(s), 21 Hour(s), 27 Min(s), and 08 Sec(s)

File information:	The BSOD that just happened.dmp (Jul 25 2020 - 13:29:08)
Bugcheck:	SYSTEM_SERVICE_EXCEPTION (3B)
Probably caused by:	memory_corruption (Process: MedalEncoder.exe)
Uptime:	0 Day(s), 20 Hour(s), 44 Min(s), and 40 Sec(s)

Possible Motherboard page: https://www.asus.com/us/Motherboards/ROG-STRIX-B350-F-GAMING/
You have the latest BIOS already installed, version 5406.

This information can be used by others to help you. Someone else will post with more information. Please wait for additional answers. Good luck.

 

[Colif]

driver verifer seeing the system as cause? that is not normal.

Ryzen 5 3600
Asus ROG STRIX B350-F GAMING
16gb Corsair CMW16GX4M2C3200C16
Radeon RX 580
1tb ssd WDC
2tb hdd WDC

Now is that ram on the motherboard memory listing? As mismatched ram might explain some of the errors, Ryzen system fairly picky about the ram it is matched with.

now if error 2 & 3 were caused by a driver, the only ones running at time are

Mar 19 2015 - amd_sata.sys - AMD SATA Controller AHCI Device driver http://support.amd.com/
Mar 19 2015 - amd_xata.sys - AMD Stor Filter driver http://support.amd.com/
Nov 20 2019 - mbamswissarmy.sys - MalwareBytes Anti-Malware system driver https://www.malwarebytes.com/
Jan 16 2020 - amdkmpfd.sys - AMD Kernel Miniport Filter driver
Mar 06 2020 - amdpsp.sys - Advanced Micro Devices, Inc http://support.amd.com/
Jun 29 2020 - vgk.sys - Vanguard Anti-Cheat driver

now I know AMD don't suggest using their Sata drivers - https://www.amd.com/en/support/kb/faq/pa-250 and to remove them and use the windows ones, not sure if that would cause this.

 

[andrewpauloosemore]

Error 2 and 3 were from running driver verifier, doesn't it only crash once it runs into an issue? (I can see why you don't recommend it if so) vgk.sys was listed as causing them in Bluescreen View so I uninstalled the program that used it, I didn't need it.

The RAM i'm using is rated at 3200mhz, it was running at 2666mhz until I started getting BSODs so I tried turning on XMP to run it at 3200mhz like the CPUs memory specification, didn't change much. Both sticks are from 1 kit. From what I can find they are compatible. I've tried switching their slots but the PC wouldn't boot so I guess it was ultimately just a re-seat.

Ill try changing the Sata drivers. I tried what it said on the page but none of the drivers let me roll back.

Thanks

 

[Colif]

hmm, i must have been blind yesterday
*** ERROR: Module load completed but symbols could not be loaded for vgk.sys
thats in both 2 & 3, I just overlooked it and looked at stack text where its not mentioned at all.

Strange Vanguard anti cheat is cause. It would have come with a game you installed so you sure you don't need it?

 

[andrewpauloosemore]

It was with Valorant which I got to play with a friend but we ended up not playing, I wasn't too big into it. I've uninstalled Valorant which to my knowledge has gotten rid of the anti cheat as well, however this hasn't stopped the BSODs.

Yesterday I got a BSOD after a fresh boot (I've now turned off fast start up, we shall see if it does better today)
This is its dmp: https://drive.google.com/file/d/1RlDPJXQHolUXPCG-e_csLl6k5V22pZzG/view?usp=sharing
I let it get to 100% before powering off, I dont know why its listing so little..

 

[Colif]

The only 2 drivers on PC that are old enough to likely be affected by Fast Startup are the 2 oldest AMD drivers.

You could see if they show on Autoruns and stop them there since you can't uninstall them. It would at least test if they are cause - https://docs.microsoft.com/en-us/sysinternals/downloads/autoruns

 

[andrewpauloosemore]

amd_sata.sys and amd_xata.sys dont show up in Autoruns. However my PC hasn't crashed this boot, so a fresh boot with fast start turned off does change stuff (this might be a fluke so we can see tomorrow)

 

[gardenman]

I ran the dump file through the debugger and got the following information: https://pastebin.com/mGV5cK4Z

File information:	072720-9906-01.dmp (Jul 27 2020 - 07:57:52)
Bugcheck:	BugCheck FFFFFFFF
Probably caused by:	memory_corruption (Process: System)
Uptime:	0 Day(s), 0 Hour(s), 31 Min(s), and 36 Sec(s)

Comment: Rare unknown bugcheck.

This information can be used by others to help you. Someone else will post with more information. Please wait for additional answers. Good luck.

 

[Colif]

Ryzen 5 3600
Asus ROG STRIX B350-F GAMING
16gb Corsair CMW16GX4M2C3200C16
Radeon RX 580
1tb ssd WDC
2tb hdd WDC

So, what else is in PC? What PSU?

Getting rare unknown BSOD and having the errors constantly blaming something else makes me think its not software.

How many times did you run memtest on each stick?

 

[andrewpauloosemore]

Had another crash this morning from a fresh boot.
PSU is a Corsair VS550
I have a wireless network card: ASUS PCE AC56
Corsair RGB controllers for fans (if those could even affect it)

Ive ran Memtest86 twice with both sticks having a chance being in slot 1. Both times I ran the default 13 tests, 4 passes and both times they came out clean, no errors. The one I just ran took 3 hours 10 mins.

 

[Colif]

Can you run this for me - it creates a zip file so if you can upload it to same place as the dumps, I see if it shows me anything - https://www.sysnative.com/forums/pages/bsodcollectionapp/

you have lots of drivers running so it might be any of them
Aug 22 2012 - AsIO.sys - ASUS Input Output driver http://www.asus.com/
Mar 19 2015 - amd_sata.sys - AMD SATA Controller AHCI Device driver http://support.amd.com/
Mar 19 2015 - amd_xata.sys - AMD Stor Filter driver http://support.amd.com/
Mar 31 2015 - HWiNFO64A.SYS - HWiNFO AMD64 Kernel driver https://www.hwinfo.com/
Mar 14 2016 - amdgpio3.sys - AMD GPIO Controller Driver from Advanced Micro Devices http://support.amd.com/
Aug 02 2017 - Oculus_ViGEmBus.sys - Oculus Virtual Gamepad Emulation Bus driver
Feb 12 2018 - msio64.sys - MSI Gaming App driver
Mar 26 2019 - RTKVHD64.sys - Realtek Audio System driver https://www.realtek.com/en/
Apr 09 2019 - AsIO2.sys - Asus Input Output driver
Apr 22 2019 - GLCKIO2.sys - ASUS RGB driver
Apr 22 2019 - OCULUSUD.sys - Oculus VR Headset driver
Apr 25 2019 - mbae64.sys - Malwarebytes driver https://www.malwarebytes.com/
Jun 06 2019 - IUProcessFilter.sys - IObit Uninstaller driver (IObit Information Technology)
Sep 05 2019 - e1r65x64.sys - Intel(R) Gigabit Adapter NDIS 6.x driver https://downloadcenter.intel.com/
Oct 14 2019 - ene.sys - (Ptolemy Tech Co.) or ASUS RGB driver or Gigabyte RGB driver
Nov 06 2019 - IUFileFilter.sys - IObit Uninstaller driver (IObit)
Nov 06 2019 - IURegistryFilter.sys - IObit Uninstaller driver (IObit Information Technology)
Nov 15 2019 - AtihdWT6.sys - AMD High Definition Audio Function driver http://support.amd.com/
Nov 20 2019 - mbamswissarmy.sys - MalwareBytes Anti-Malware system driver https://www.malwarebytes.com/
Nov 27 2019 - teVirtualMIDI64.sys - teVirtualMIDI - Virtual MIDI driver (Tobias Erichsen)
Dec 05 2019 - cpuz149_x64.sys - CPUID driver
Jan 14 2020 - amdgpio2.sys - AMD GPIO Controller Driver from Advanced Micro Devices http://support.amd.com/
Jan 16 2020 - amdkmpfd.sys - AMD Kernel Miniport Filter driver
Feb 10 2020 - bcmwl63a.sys - Broadcom 802 11 Network Adapter Wireless driver http://www.broadcom.com/support/
Feb 14 2020 - CorsairLLAccess64.sys - CORSAIR iCUE Software driver
Mar 06 2020 - amdpsp.sys - Advanced Micro Devices, Inc http://support.amd.com/
Mar 26 2020 - amdxe.sys - AMD Link Xinput Emulation driver
Apr 10 2020 - AMDPCIDev.sys - Advanced Micro Devices PCI Device driver
May 07 2020 - CorsairGamingAudio64.sys - Corsair Gaming Audio 64-bit driver
May 28 2020 - oculusvad.sys - Oculus VAD driver
Jun 04 2020 - MbamChameleon.sys - Malwarebytes Anti-Malware Chameleon driver https://www.malwarebytes.com/
Jun 09 2020 - amdlog.sys - AMD LOG driver
Jun 10 2020 - amdkmdag.sys - AMD Graphics driver
Jun 22 2020 - mwac.sys - Malwarebytes Web Access Control http://www.malwarebytes.org/
Jun 30 2020 - CorsairVBusDriver.sys - Corsair Virtual Device driver (Corsair Utility Engine) http://www.corsair.com/
Jun 30 2020 - CorsairVHidDriver.sys - Corsair Virtual Device driver (Corsair Utility Engine) http://www.corsair.com/
Jul 07 2020 - mbam.sys - Malwarebytes Anti-Malware https://www.malwarebytes.com/
Jul 17 2020 - farflt.sys - Malwarebytes Anti-RansomWare SDK http://www.malwarebytes.org/

 

[andrewpauloosemore]

Ive ran the collection app, the file has been uploaded to the same drive as the mini dumps

https://drive.google.com/file/d/1o29juSX1-h_meBrLtmiFd09j0lXaI7xV/view?usp=sharing

 

[andrewpauloosemore]

Im going away for 2 weeks, when I come back ill try anything anyone can suggest. Thanks for all the help so far.

 

[andrewpauloosemore]

I have returned at long last and am still getting blue screens

 

[Colif]

Can you share the dumps for the new BSOD and we see if they show anything.

I haven't been around as much myself, my GPU stopped working in my PC last week making it difficult to answer questions. I am almost back now