Blue Screen of Death Windows 8.1

TheLegendaryJames

Honorable
Dec 2, 2013
9
0
10,510
I'm on Windows 8.1. So recently Iv'e gotten three BSODS and I have no idea how to fix it. The first one I let slide, and about two weeks later I got one yesterday and today. There is only a dump file for yesterday's crash. The first one I got was when I left my computer to get something to eat and than when I came back it was on this screen: https://plus.google.com/u/0/photos/113848622281282244947/albums/5979015398703843073/5979015398662127410?pid=5979015398662127410&oid=113848622281282244947, so technically I don't even know if I got the BSOD the first time, but I'm pretty sure I did. The second blue screen I got flashed quickly and just rebooted my computer automatically.The blue screen I got today was very quick, it flashed on my monitor and than brought me to this screen again: https://plus.google.com/u/0/photos/113848622281282244947/albums/5979015398703843073/5979015398662127410?pid=5979015398662127410&oid=113848622281282244947
I'm thinking the only reason it created a .dmp file yesterday was because it didn't bring me to that black screen. Restarting just takes me back to that black screen so I have to do a full power down. When I boot it back up it seems to take a little longer than usual, but generally boots up back pretty quick. These blue screens are completely random. I know a lot of people have said they only get bug check code when they play games, but for me it's random. Although it does seem like it happens when I have multiple apps open and running. Just to clear things up I don't have viruses and I'm not overclocking anything (my GPU is factory overclocked). Reinstalling Windows or loading a restore point is not an option for me. I recently just installed Windows and had to redownload over 50 games so I'm definetly not going to let my ISP **** me again. And yes I did use BlueScreenView to open my .dmp file instead of Microsoft's crappy 1st party crap. Every time Microsoft comes in to try to make their own software they just make everything a big hassle and just sucks. Look at Games for Windows Live for example.

==================================================
Dump File : 020914-28937-01.dmp
Crash Time : 2/9/2014 11:13:02 PM
Bug Check String :
Bug Check Code : 0xa0000001
Parameter 1 : 00000000`00000005
Parameter 2 : 00000000`00000000
Parameter 3 : 00000000`00000000
Parameter 4 : 00000000`00000000
Caused By Driver : atikmdag.sys
Caused By Address : atikmdag.sys+277ce
File Description :
Product Name :
Company :
File Version :
Processor : x64
Crash Address : ntoskrnl.exe+14dca0
Stack Address 1 :
Stack Address 2 :
Stack Address 3 :
Computer Name :
Full Path : C:\WINDOWS\Minidump\020914-28937-01.dmp
Processors Count : 8
Major Version : 15
Minor Version : 9600
Dump File Size : 285,184
Dump File Time : 2/9/2014 11:14:14 PM
==================================================

SPECS:
CPU: AMD FX-8320 (with stock cooler)
MOBO: ASUS M5A97
RAM: G.Skill Sniper Series 8GB (2 x 4GB) 240-Pin DDR3 SDRAM DDR3 1866 (PC3 14900) Desktop Memory
PSU: Corsair CX600
GPU: PowerColor AX7790 1GBD5-DHV2/OC Radeon HD 7790
Hard Drive: WD Blue 1 TB Desktop Memory 3.5, 7200 RPM, SATA 6 Gb/s, 64 MB Cache
Disk Drive (like it matters, but for the heck of it): LG DVD Optical Drive UH12NS30

 
Solution
-I use windows defender for the virus detection and the fact that if it breaks on even 1% of the machines Microsoft gets 100,000 automated bug reports. (it make me laugh).

-I use the malwarebytes because they call malware what it is and ask you if you want it removed.

- if someone would make a malware program to remove known buggy device drivers the machines would be much more stable. Microsoft does get the bug report, reports the error to the device driver maker but don't give the fix to microsoft to install. You have to figure it out, find the maker of the driver and install the newer version.
The software in drivers are by default under copyright law and be distributed with out permission. This will prevent microsoft from...
Dump file would suggest a Graphics card/driver problem, but you'd need another BSOD or two with similar results to confirm. The inability to find your OS is a bit more of a worry, Presumably it's booting eventually after a hard power-off.
1st try re-installing your Graphics driver.
Check your Hard drive for errors.
http://www.seagate.com/support/external-hard-drives/desktop-hard-drives/freeagent-pro-classic/seatools-win-master/
or http://support.wdc.com/product/download.asp?groupid=606&sid=3
as it's a WD (Seatools pretty universal)
Try running with just one stick of RAM and in different slots, open lots of progs to stress your RAM to see if the problem occurs more frequently.

 

TheLegendaryJames

Honorable
Dec 2, 2013
9
0
10,510


So I ran quite a few programs to diagnose my computer. I ran a WD hard drive checker, sfc/ scannow which I guess "fixed issues", updated all of my drivers, updated Windows, updated my BIOS, ran error checker, ran memtest86 all night long (about 7 hours), ran the Microsoft version of memtest (forgot what its called) and no errors were detected. After all of that Iv'e had two more blue screens since then. One of them was only recorded in a log, the other led to that black screen I was talking about. Here is the crash report:
==================================================
Dump File : 021414-27609-01.dmp
Crash Time : 2/14/2014 11:20:57 PM
Bug Check String : MEMORY_MANAGEMENT
Bug Check Code : 0x0000001a
Parameter 1 : 00000000`00005100
Parameter 2 : fffff6e8`00103200
Parameter 3 : 00000000`00000001
Parameter 4 : 80000000`002f4963
Caused By Driver : fltmgr.sys
Caused By Address : fltmgr.sys+51e8
File Description :
Product Name :
Company :
File Version :
Processor : x64
Crash Address : ntoskrnl.exe+14dca0
Stack Address 1 :
Stack Address 2 :
Stack Address 3 :
Computer Name :
Full Path : C:\WINDOWS\Minidump\021414-27609-01.dmp
Processors Count : 8
Major Version : 15
Minor Version : 9600
Dump File Size : 280,592
Dump File Time : 2/14/2014 11:22:49 PM
==================================================

Since the previous log was different this is leading me to believe that Windows is really screwed up and my hardware is fine. I also want to know what happens when you unplug a SATA 6GB/s cable from your computer from your hard drive. Would it bring you to that black screen? If that's the case maybe than maybe my SATA 6GB/s cable is broken or something on my motherboard. I really have no idea. What do you guys think?
 
- the windows memory manager uses a table to keep track of what files are loaded into memory and where. (map from your pagefile on your drive to actual physical memory addresses in your RAM) It went to use a location that should be free but found that it was in use and called a bugcheck because it can not trust its own internal tables. (something changed the data in memory, most often a driver may have corrupted memory or malware got caught making changes, or several other common errors)

- I would also update my graphics driver (it is listed as the cause) and go to the device manager and disable any high definition audio devices that I am not using. (graphics card supports sound via its display port and HDMI cable)

- and I know this sounds stupid, but you might also want to turn off any special screen saver you have running.
I looked a system that was having problems and it was caused by windows asking the video card for a buffer inside of video memory and the graphics card driver did not let it have the memory. Locked up the computer just for a stupid screen saver background change.

At this point I would scan for malware using malwarebytes, check for kernel corruption using the system file checker
sfc.exe /scannow

if that finds a error but can not fix it then run this"
dism.exe /check-image /online /restorehealth (this will get a new copy of a certain files if your backup copy is corrupted)
 
SATA drives are 'Hot Swappable', means you can connect/disconnect without fear of harm. Follow Johnbl's advice on updating your Graphics driver etc., even consider trying another card if you have access to one, in case there is a problem with the Video RAM
The second minidump mentions File System Manager (fltmgr.sys which controls correct writing of data to the Hard Drive, which presumably includes the Pagefile, If that file is corrupt (fltmgr.sys) you'll see more similar BSODs, and may need something like DLL Suite (http://www.dllsuite.net/features) to fix it.
Sometimes re-seating the GPU can work wonders, too...
 

TheLegendaryJames

Honorable
Dec 2, 2013
9
0
10,510
Get ready to facepalm because I totally feel like a tard for this. Okay so dumb enough, I put in all my faith for Windows Defender to protect my computer. Probably not much of a newsflash for you guys, but Windows Defender sucks cause it doesn't even detect a lot of viruses out there. I ran Windows Defender just before I started this thread and no viruses were detected. I just recently ran Malwarebytes and I had 14 viruses that were detected. I haven't had a blue screen since so I'm thinking that was the problem. I will return if the problem turns out to be different. And I thought SATA was only hot swappable if the OS is on a different drive. Here is the Malwarebytes log if anybody's curious:

Malwarebytes Anti-Malware (Trial) 1.75.0.1300
www.malwarebytes.org

Database version: v2014.02.15.09

Windows 8 x64 NTFS
Internet Explorer 11.0.9600.16518
James :: JAMES-PC [administrator]

Protection: Enabled

2/15/2014 4:50:39 PM
mbam-log-2014-02-15 (16-50-39).txt

Scan type: Full scan (C:\|)
Scan options enabled: Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken | PUP | PUM
Scan options disabled: P2P
Objects scanned: 591877
Time elapsed: 1 hour(s), 31 minute(s), 31 second(s)

Memory Processes Detected: 0
(No malicious items detected)

Memory Modules Detected: 0
(No malicious items detected)

Registry Keys Detected: 9
HKCR\CLSID\{67BD9EEB-AA06-4329-A940-D250019300C9} (PUP.Optional.SoftwareUpdater) -> Quarantined and deleted successfully.
HKCR\TypeLib\{A0EE0278-2986-4E5A-884E-A3BF0357E476} (PUP.Optional.SoftwareUpdater) -> Quarantined and deleted successfully.
HKCR\Interface\{9EDC0C90-2B5B-4512-953E-35767BAD5C67} (PUP.Optional.SoftwareUpdater) -> Quarantined and deleted successfully.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{99C91FC5-DB5B-4AA0-BB70-5D89C5A4DF96} (PUP.Optional.SoftwareUpdater) -> Quarantined and deleted successfully.
HKCR\Updater.AmiUpd.1 (PUP.Optional.SoftwareUpdater) -> Quarantined and deleted successfully.
HKCR\Updater.AmiUpd (PUP.Optional.SoftwareUpdater) -> Quarantined and deleted successfully.
HKCR\Typelib\{DCABB943-792E-44C4-9029-ECBEE6265AF9} (PUP.Optional.OutBrowse) -> Quarantined and deleted successfully.
HKCR\Interface\{3408AC0D-510E-4808-8F7B-6B70B1F88534} (PUP.Optional.OutBrowse) -> Quarantined and deleted successfully.
HKCU\SOFTWARE\Trymedia Systems (Adware.TryMedia) -> Quarantined and deleted successfully.

Registry Values Detected: 0
(No malicious items detected)

Registry Data Items Detected: 0
(No malicious items detected)

Folders Detected: 0
(No malicious items detected)

Files Detected: 5
C:\Users\James\AppData\Local\SwvUpdater\Updater.exe (PUP.Optional.SoftwareUpdater) -> Quarantined and deleted successfully.
C:\Users\James\AppData\Local\Temp\DM1392436932.exe (PUP.Optional.OutBrowse) -> Quarantined and deleted successfully.
C:\Users\James\AppData\Local\Google\Chrome\User Data\Default\File System\002\t\00\00000000 (PUP.Optional.OneClickDownloader.A) -> Quarantined and deleted successfully.
C:\Users\James\AppData\Local\Google\Chrome\User Data\Default\File System\002\t\00\00000001 (PUP.Optional.OneClickDownloader.A) -> Quarantined and deleted successfully.
C:\Windows\Tasks\AmiUpdXp.job (PUP.Software.Updater) -> Quarantined and deleted successfully.

(end)
 
I use the Microsoft product and do a scan with Malwarebytes once a week.
the Microsoft product does catch real viruses but will not remove certain programs where the user gave permission to let them run.
(these programs often have there own license agreements the the user did not bother to read, you should read some. they basically say we the malware provide can do what ever we want to your machine and anything we find on the machine. You give us full rights in exchange to for the use of our free game. You also agree that you will never sue us. Later a virus scanner removes the software and the malware company files a lawsuit claiming damages.

I like malwarebytes, it gives you the option to remove them anyway.

Also, Microsoft has been sued for anti trust and lost. Virus scanning is a touchy issue for them, for example if you install another virus scanner, the microsoft scanner will shut it self down. This is fine but some antivirus programs will install trial versions and when you uninstall them they leave a piece behind to prevent the free microsoft scanner from running. (nice way to prevent you from going to a competing product)

 
PUPs of that ilk don't usually cause problems like BSODs, they tend towards the spyware end of the spectrum, but as well to get rid of them. Disappointing that Defender missed them, I've been advocating M'soft's Antivirus use as it appears to be unobtrusive and doesn't slow the machine appreciably. No use if it can't do it's job!
Correct, it would not be a great idea to disconnect the drive with your OS installed on it, thought you meant data drives...
 

TheLegendaryJames

Honorable
Dec 2, 2013
9
0
10,510
Well, I actually remember really liking MSE/Defender a while ago because it wasn't a resource whore, easy to use, and it has removed viruses from my computer before. It's totally a shame that it doesn't detect all threats, but johnbl's explanation does make a lot of sense. I am not too surprised that I did have viruses though. From all the torrents and crap (yeah I know I probably shouldn't) I download I'm surprised I don't have more. If there is anything about computers that I am the most uneducated about it would probably be about viruses. Which brings up a question I have just for curiosity. If I download a torrent that is completely virus free and I download it is there still a chance that I could get a virus or would it only get one if I seeded? I never really believed that you should have to pay for an antivirus program anyway which is partially why I never really bothered. If it's a good idea I think i'll just stick with Defender and Malwarebytes. And in a way I hope those viruses were the cause of my BSODS because if they weren't I'm going to still be stumped on why I get them. (P.S I do have all my drivers updated (including video card) and the latest BIOS version)
 
-I use windows defender for the virus detection and the fact that if it breaks on even 1% of the machines Microsoft gets 100,000 automated bug reports. (it make me laugh).

-I use the malwarebytes because they call malware what it is and ask you if you want it removed.

- if someone would make a malware program to remove known buggy device drivers the machines would be much more stable. Microsoft does get the bug report, reports the error to the device driver maker but don't give the fix to microsoft to install. You have to figure it out, find the maker of the driver and install the newer version.
The software in drivers are by default under copyright law and be distributed with out permission. This will prevent microsoft from picking up the fixed drivers and handing it out with windows update. The vendors complain that they don't want microsoft to test their drivers and they certainly don't want to pay microsoft to test the drivers.
This year microsoft has dropped charging a fee when a OEM gives them a driver. This reduces the OEM stated concern as to why they refuse to give the driver to microsoft. (it still leaves the unmentioned concern: the OEM
fear that bug fixes to their drivers can block the sale of new hardware when the OS gets updated. if you don't have a driver for your old hardware you will buy new hardware( it drives new sales for them))



 
Solution