bsod FROM NTOSKRNL.EXE

CHRISTHEGREEK

Reputable
Jun 24, 2014
28
0
4,530
hi i am getting again and again bsod caused by ntoskrnl.exe .No hardware problems all drivers updated but it keeps. im using lenovo g505 and windows 8. HELP ME PLEASE I DONT WANT TO SPEND MONEY FIXING IT!
 
Solution
update: here is info on the malware on your machine
http://www.herdprotect.com/2635ac50-5488-40bf-9bfd-accb158f8f3fw64.sys-996e8d90f9a8bcfba34c4f5be6bb0af22d27bb73.aspx

It will plug into the web browser and display context-based advertisements by overwriting existing ads or by inserting new ones on various web pages. It is part of the Yontoo branded browser-extension.


--------------------------
it looks like you have a driver that is messing around with other drivers
the driver is _2635ac50_5488_40bf_9bfd_accb158f8f3f_w64.sys
I would expect that it is a virus/malware and you will want to remove it and see if your issue is resolved.

the file is loaded from here...

CHRISTHEGREEK

Reputable
Jun 24, 2014
28
0
4,530


hi thank you for taking the time to answer me.but this for windows xp and i cant understand how this will help.sorry if i made you angry . plz give another solution if u want to help!
 
you will need to locate your memory dump file and post it up to a cloud server like microsoft skydrive or google docs. The memory dump file will indicate what caused the failure so that a solution can be recommended. the file indicated for the failure ntoskrnl.exe is the key windows file used by all the drivers. Generally it indicated that the file (ntoskrnl.exe) detected a programming mistake in one of the drivers attempting to access its functions. You have to get the name of that driver to fix your problem.

you might want to use google to help you find out how to locate and copy your memory dump file, then post it and I will try and take a quick look.

your solution will be to update the indicated driver from the website of your machines manufacturer. You just need to know what driver to update

 
again, not the correct file. you would need to upload the actual memory.dmp file.
it will have a filename with a .dmp file type and will be pretty large. (it is a copy of the drivers and some driver data that was actually in the memory of your machine at the time of the crash)
 
update: here is info on the malware on your machine
http://www.herdprotect.com/2635ac50-5488-40bf-9bfd-accb158f8f3fw64.sys-996e8d90f9a8bcfba34c4f5be6bb0af22d27bb73.aspx

It will plug into the web browser and display context-based advertisements by overwriting existing ads or by inserting new ones on various web pages. It is part of the Yontoo branded browser-extension.


--------------------------
it looks like you have a driver that is messing around with other drivers
the driver is _2635ac50_5488_40bf_9bfd_accb158f8f3f_w64.sys
I would expect that it is a virus/malware and you will want to remove it and see if your issue is resolved.

the file is loaded from here:
\SystemRoot\system32\drivers\{2635ac50-5488-40bf-9bfd-accb158f8f3f}w64.sys

file date was jan 30 2014

I would disable your current virus scanner and run malwarebytes (it will remove fake search providers even if you gave them permission to run on your machine by mistake)


notes:
Manufacturer LENOVO
Product Name 20240
Version Lenovo G505
BIOS Version 82CN24WW(V2.04)
BIOS Release Date 11/05/2013
running McAfee antivirus currnetly




 
Solution
first crash was really corrupted and could not be used.

the second crash looks like a bug in a device driver. this is only a guess but you have a very large number of bluetooth drivers on your system, I would disable them (or the ones you can) and see if your system starts working.

btath_a2dp.sys Mon Jan 21 01:42:31 2013
btath_avdt.sys Mon Jan 21 01:19:11 2013
btath_bus.sys Mon Jan 21 01:18:42 2013
btath_flt.sys Mon Jan 21 01:42:22 2013
btath_hcrp.sys Tue Dec 18 01:54:54 2012
btath_lwflt.sys Thu Nov 01 22:35:44 2012
btath_rcp.sys Tue Dec 18 01:54:50 2012
btfilter.sys Mon Jan 21 01:19:45 2013
BthEnum.sys Tue Jan 08 19:58:34 2013
BthLEEnum.sys Wed Jul 25 19:25:02 2012
bthpan.sys Wed Jul 25 19:23:42 2012
bthport.sys Thu Feb 28 20:55:37 2013
BTHUSB.sys Tue Jan 08 19:59:16 2013


you might also want to look for a updated file for
LhdX64.sys Mon Jan 11 07:06:58 2010

- just based on the date it is pretty old. it is a lenovo developed disk driver and a bug in it would explain why the last
crash dump could not be read by the windows debugger. it is very old, look for a update from lenovo.

- you have a few other files to look at but that is a start.
-you may also be able to find proper updates for the drivers.

basically, there is a bug in a driver that is corrupting low level areas of windows memory reserved memory area.

you might also want to confirm that your actual physical memory is good by running memtest86.

- you have had many bugchecks, you will want to confirm that your files have not become corrupted because of them.

run cmd.exe as a admin (windows key +x+ type A)
run the system file checker
sfc.exe /scannow <- this will check the microsoft core files for corruption and fix them if it can.

if the tool finds corruption that it can not fix, then you run the dism.exe command

dism.exe /online /cleanup-image /restorehealth

this command will check for corruption of core windows files and get new ones from a trusted online source to fix any corrupted versions. (useful if a virus corrupts the hidden backup copy of the file)





 
well what I see is that LhdX64.sys is a hard drive driver so I guess ...Lenovo Storage Quick Test for Windows
like I asked is the hard drive proprietary in some way to require this??

well I guess start with that cause I googled that LhdX64.sys and it seems like its a common issue with Lenovo and I guess this guy got a up date driver to resolve [??]
http://social.technet.microsoft.com/Forums/windows/en-US/6dde37c5-7e33-4780-9c4d-9f37a9b01b55/bsod-dpcwatchdogviolation?forum=w8itprogeneral

I tried to look stuf up for you but in the end this been the help from Lenovo

Well I was trying to get any information from Lenovo Support about this driver, unfortunalty I got only 1 link from some Comunity Moderator Malware scan of lhdx64.sys (Disk Driver) ab35ce3335ba8bc7b49fc9c81b1e6a852fe853b0 - herdProtect
I didnt get any information how to update it or remove or with what application it is installing. I was thinking about uninstalling all drivers and check if this one is still the part of a system, anyway I had 1 more bsod a few days ago so maybe good thing is to do some experiment uninstall all, then install 1 by 1 (maybe I'll be able to discover what is installing this one driver) and after this just format c:
 

CHRISTHEGREEK

Reputable
Jun 24, 2014
28
0
4,530



reinstalling windows 8 or installing windows 7 can fix the issue?