Blue Screen, KMODE EXCEPTION NOT HANDLED (ndis.sys)

kidkic

Reputable
Jan 25, 2015
8
0
4,510
Hi.
I've a new computer that I've put together, Been a mac user for the last 10 years so feeling like a rookie.

Sometimes (havn't figured out when it happens) I get a blue screen with error KMODE EXCEPTION NOT HANDLED (ndis.sys) then computer restarts.

I've setup a Raid that after a message like this got destroyed, 6TB down the drain. :(

I've found a dump file but cannot figure out what's wrong.
https://dl.dropboxusercontent.com/u/27479515/forums/020715-15843-01.dmp

Also exported hardware information on the computer
https://dl.dropboxusercontent.com/u/27479515/forums/computertech.htm

Some help or guidance and I would be super happy.
Thanks
 
Solution
suspect drivers: (you have 4 copies of MSI afterburner running, I would remove all of them)
(most likely cause of your problem)
C:\Program Files (x86)\MSI\ECO Center\NTIOLib_X64.sys Sun Jan 05 22:15:54 2014
C:\MSI\Smart Utilities\NTIOLib_X64.sys Mon Mar 17 03:24:03 2014
C:\Program Files (x86)\MSI\Super Charger\NTIOLib_X64.sys Thu Oct 25 03:27:58 2012
C:\Program Files (x86)\MSI\Live Update\NTIOLib_X64.sys Tue Oct 19 23:45:49 2010
C:\Program Files (x86)\MSI\Fast Boot\NTIOLib_X64.sys Thu Oct 25 18:46:44 2012

I would also remove this driver:
SystemRoot\System32\drivers\AcpiCtlDrv.sys Tue Jul 17 10:07:16 2012
Intel(R) Extreme Tuning Utility Performance Tuning Acpi Control Driver

suspect driver:
MiniTool Partition Wizard...
suspect drivers: (you have 4 copies of MSI afterburner running, I would remove all of them)
(most likely cause of your problem)
C:\Program Files (x86)\MSI\ECO Center\NTIOLib_X64.sys Sun Jan 05 22:15:54 2014
C:\MSI\Smart Utilities\NTIOLib_X64.sys Mon Mar 17 03:24:03 2014
C:\Program Files (x86)\MSI\Super Charger\NTIOLib_X64.sys Thu Oct 25 03:27:58 2012
C:\Program Files (x86)\MSI\Live Update\NTIOLib_X64.sys Tue Oct 19 23:45:49 2010
C:\Program Files (x86)\MSI\Fast Boot\NTIOLib_X64.sys Thu Oct 25 18:46:44 2012

I would also remove this driver:
SystemRoot\System32\drivers\AcpiCtlDrv.sys Tue Jul 17 10:07:16 2012
Intel(R) Extreme Tuning Utility Performance Tuning Acpi Control Driver

suspect driver:
MiniTool Partition Wizard
http://www.partitionwizard.com/free-partition-manager.html
\SystemRoot\system32\pwdrvio.sys Mon Jun 15 18:43:45 2009

---------------
looked like the stack was corrupted, this could be caused by the driver itself (killer network driver)
or by another driver or malware.

I would:
-update the network driver from the MSI website
- scan the computer for corrupted windows core files
(start cmd.exe as an admin, then run: sfc.exe /scannow)
if it can not repair corruption, then run this command:
dism.exe /online /cleanup-image /restorehealth
- scan the computer for malware using malwarebytes

if you continue to get bugchecks, you would also want to run memtest86 to confirm that your memory works as expected.

-------------
most direct cause for a bugcheck in ndis.sys will be a outdated network driver.
(wireless ethernet or wired ethernet or sometimes a bluetooth driver)
I will look at the memory dump and see if the driver is named.

the driver was named:
Image path: \SystemRoot\system32\DRIVERS\bwcW8x64.sys
Timestamp: Thu Apr 10 08:40:24 2014
Killer Bandwidth Control Filter Driver

Manufacturer MSI
Product Z97 GAMING 7 (MS-7916)
Version 1.0

I would go to the msi website and look for a update for the killer ethernet card.

 
Solution

kidkic

Reputable
Jan 25, 2015
8
0
4,510
Thanks for a really good answer. Spent yesterday with your suggestions. Uninstalled software, removed driver, run malwarebytes and ran memtest. Memtest was successful.
I had the lastest network drivers from MSI so I uninstalled the drivers and Killer network application, then reinstalled drivers only.

To early to tell if it's working but will be back in touch and pick as solution if nothing happens the next 24h.

Super thanks johnbl

---------------------------

Now have run the computer with torrent and MMO at the same time for a couple of hours with no crash. Looks like it's working.

Super thanks johnbl, super thanks =)