Need help analyzing BSOD f4 (CRITICAL_OBJECT_TERMINATION)

Toggle sidebar Toggle sidebar
C

Cliffman

Honorable
Jul 9, 2013
6
0
10,510
Hi there folks,

Unfortunately, I've started getting blue screens lately. Not too frequently but frequently enough to get me worried. They don't seem to have the same trigger and my BSOD knowledge is pretty limited so I'm having trouble finding the root cause of the problem.

The last one that happened occurred tonight, right as I plugged my cell phone to a USB drive. Since this was my third BSOD this year, I figured it was time to look into this.

I downloaded BlueScreenViewer and saw that I've had quite a few BSODs since I built this PC. I've gathered my latest kernel-dump and all my mini-dumps in this dropbox folder and I recall that I got some BSODs before 2014 when I was running the ASUS 4-way optimization tools, which I reset after giving up on. Anything after that is a mystery to me, which is why I've saved the dumps in the link above. I've looked up the last three ones, which have been code F4, which seems to be CRITICAL_OBJECT_TERMINATION and BluewScreenView is pointing at ntoskrnl.exe as the causing driver but that doesn't really tell me anything.

Is there anyone here with a little more experience than me who can point me in the right direction? What could this be? What can I look for? Where do I go from here?

Any help is appreciated and if there is any information I can give to make this easier, please let me know and I'll be glad to append it.

Here's some info on my system:

OS Name: Microsoft Windows 7 Professional
Version: 6.1.7601 Service Pack 1 Build 7601
System Manufacturer: ASUS
System Model: All Series
System Type: x64-based PC
Processor: Intel(R) Core(TM) i7-4770K CPU @ 3.50GHz, 3501 Mhz, 4 Core(s), 8 Logical Processor(s)
BIOS Version/Date: American Megatrends Inc. 2003, 2014-05-27
SMBIOS Version: 2.7


Might-be-relevant info: I switched memory cards just a few months ago. Just to be on the safe side after buying them, I remember I ran memcheck with no errors found. I have been having problems with my screen lately (random black flickering form time to time) but that doesn't seem to be related to this issue and I'm contacting my retailer to have the monitor changed.
 
Solution
J
The bugcheck indicates that a critical component of windows was modified in memory and windows detected the change and shutdown the system.
This can be caused by Malware or system memory corruption.
I would do a Malwarebytes scan, then a rootkit scan, then run the system file checker. (sfc.exe /scannow)
if none of these finds anything, I would remove as many of the asus drivers as I could (some corrupt system memory)
then update the USB 3.0 device drivers and the CPU chipset drivers (directly from intel : https://downloadcenter.intel.com/Detail_Desc.aspx?DwnldID=20775 )

your motherboard has updates for the old drivers
http://www.asus.com/us/Motherboards/Z87PRO/HelpDesk_Download/
(update the USB, chipset, Bluetooth,... drivers from...
Sort by date Sort by votes
J

johnbl

Polypheme
Nov 4, 2012
10,072
185
67,090
The bugcheck indicates that a critical component of windows was modified in memory and windows detected the change and shutdown the system.
This can be caused by Malware or system memory corruption.
I would do a Malwarebytes scan, then a rootkit scan, then run the system file checker. (sfc.exe /scannow)
if none of these finds anything, I would remove as many of the asus drivers as I could (some corrupt system memory)
then update the USB 3.0 device drivers and the CPU chipset drivers (directly from intel : https://downloadcenter.intel.com/Detail_Desc.aspx?DwnldID=20775 )

your motherboard has updates for the old drivers
http://www.asus.com/us/Motherboards/Z87PRO/HelpDesk_Download/
(update the USB, chipset, Bluetooth,... drivers from here)

This will give your USB devices a chance to work correctly, (you should also look for driver updates for your USB devices)

you could also run memtest86 (but I would expect you actually have a driver issue that is corrupting your system memory)

well for starters, it looks like you have a watcom HID router driver failing to load on a USB port
and you have Atheros adapter disabled.

you have old
ASMedia Technology ASMFUD-Win32 - 107x Upper Filter Driver Most likely an ASMedia USB 3.0 controller drivers
\SystemRoot\SysWow64\drivers\asmtufdriver.sys Fri Sep 28 03:55:29 2012
you should get a update that is for your motherboard.

I would also remove as many of the old ASUS utilities as you can. (unless you really need them)
\SystemRoot\SysWow64\drivers\AiChargerPlus.sys Wed Apr 18 18:17:35 2012
C:\Program Files (x86)\ASUSTek Computer Inc\Disk Unlocker\ASFLTDrv64.sys Thu Sep 16 01:30:49 2010
SystemRoot\SysWow64\drivers\AsIO.sys Wed Aug 22 02:54:47 2012
\SystemRoot\SysWow64\drivers\AsUpIO.sys Mon Aug 02 19:47:59 2010
\SystemRoot\SysWow64\drivers\ASUSFILTER.sys Tue Sep 20 08:46:33 2011
ASUS Kernel Mode Driver ?Asus Smart Doctor/iTracker 2 Asus GPU Tweak and GPU Tweak Streaming
C:\Windows\system32\drivers\IOMap64.sys Thu Feb 04 17:55:34 2010 (just not a good idea)

you also have Intel(R) USB 3.0 Hub Driver from 2012 that should be updated.




your Bluetooth drivers are pretty old (2012) I would look for an update from the motherboard website
Note: internal error log on the bluetooth driver showed problems 0xc00000bb(STATUS_NOT_SUPPORTED)
most likely because of the old driver.


 
Upvote 1 Downvote
Solution
C

Cliffman

Honorable
Jul 9, 2013
6
0
10,510
Hi Johnbl! Thanks a lot for your suggestions and helpful information. I've run a Malwarebytes and rootkit scan and the first one quarantined a couple of files, while the rootkit didn't find any issues. The system file checker didn't find any issues either and I'm about to start taking care of the drivers.

Do you have a good tip on how I could have better overview of my drivers and how old they are? Up until now I've only been aware of the Windows Device Manager, but I find it clunky and difficult to get a good overview of my devices and drivers in it. Do you have any tips? Also, how/where in the dump-files did you find that stuff about my drivers? I want to learn! :)

Again, thank you very much for your help. It's very appreciated!
 
Upvote 0 Downvote
J

johnbl

Polypheme
Nov 4, 2012
10,072
185
67,090
while in windows you can start cmd.exe as an admin
then run the command
driverquery.exe and it will list the drivers and info (use driverquery.exe /? for more info)

you can use pnputil.exe command to delete or add drivers, I use this sometimes when the plug and play keeps re installing a old driver before I get a chance to install the correct one. (or you have to disable PNP)

when looking at a memory dump with the windows standalone debugger you can use this command
to dump a list of drivers in alphabetical order
lmiftsm

you can use this command to have the debugger check the image in the memory dump against the microsoft copy stored on a server (if you have your symbols pointed to the microsoft symbol server)
!for_each_module !chkimg @#ModuleName

the command will look at each driver and compare it to the microsoft version. Corrupted drivers will be flagged with errors.
All third party drivers will be marked as a error because microsoft will not have a copy to compare with.

!sysinfo smbios

is also useful, you can see the BIOS info, the CPU info and what memory chips are in use. It is also useful to see if the system is overclocked. It will display voltages but often they are not correct.

USB problems are pretty easy to detect if you change your memory dump from a mini dump to a full or kernel dump
then you can use the !usbanalyze or the !usb3kd.usb_tree command. The !pnptriage command is very useful for finding hung device installs which tends to happen a lot for USB ethernet devices
 
Upvote 0 Downvote
You must log in or register to reply here.

TRENDING THREADS

Latest posts

Moderators online

Share this page

COMPANY
RESOURCES
FOLLOW
Top Bottom