Frequent BSODs ntoskrnl.exe

caked1393

Honorable
Nov 24, 2013
14
0
10,510
hi guys, I've been having frequent BSODs lately with the IRQL not equal or less error. Previously I've also had Attempted to write to read only memory errors too. Honestly quite stumped because I've already tried a fresh wipe and install of Windows 10.
i am running a phenom ii x6 1055t system with 8 gb of 1333mhz RAM which is pretty old so i'm not sure if it has anything to do with that. Though I haven't really had much trouble up until recently. I am not overclocking anything in my system either. Could this also be due to a windows update? however as I've mentioned i've already done a fresh install with an older version of windows.

anyway attached here is the dmp from the latest BSOD
https://drive.google.com/file/d/1zpJFkW-oIEbzID2WHwBVxJDnNO2wWCwE/view?usp=sharing

UPDATE: ran windows memory diagnostic tool - no errors detected

UPDATE: ATTEMPTED_WRITE_TO_READONLY_MEMORY dmp: https://drive.google.com/file/d/1zGWwM1F4hei1wTO9O2K8E_2L5KSkX2qx/view?usp=sharing
 
Solution
steam was running, it tried to free up virtual memory but could not get a lock. (something else was using the memory)

if your wireless driver is for a usb device, you might put the device on a usb 2 port and see if it helps
(it took 9 hours to hit the bug) best to update the wireless driver and the motherboard USB 3 drivers.

you should also apply all of the windows updates to get to a current build.
if you got the disk from any place other than a Microsoft server, I would wipe the install, download the current windows build and reinstall then update the motherboard drivers. just in case you have a root kit installed.

otherwise, I would turn off virtual memory, to delete the hidden c:\pagefile.sys then reboot and turn on virtual...
steam was running, it tried to free up virtual memory but could not get a lock. (something else was using the memory)

if your wireless driver is for a usb device, you might put the device on a usb 2 port and see if it helps
(it took 9 hours to hit the bug) best to update the wireless driver and the motherboard USB 3 drivers.

you should also apply all of the windows updates to get to a current build.
if you got the disk from any place other than a Microsoft server, I would wipe the install, download the current windows build and reinstall then update the motherboard drivers. just in case you have a root kit installed.

otherwise, I would turn off virtual memory, to delete the hidden c:\pagefile.sys then reboot and turn on virtual memory again. (helps get rid of malware hidden in the pagefile)

------------
well you have a old windows 10 build 16299.15 you need to apply the updates.

it does not look like you have applied the motherboard USB 3 drivers from the motherboard vendor
https://www.gigabyte.com/Motherboard/GA-970A-DS3P-rev-10#support-dl

looks like you have a add on wireless card
Driver for Qualcomm Atheros Extensible Wireless LAN (CB42/CB43/MB42/MB43) Network Adapter device driver

you have a strange driver loaded d423232a-d82
(no idea what it would be, could be malware? or some program that uses it as a serial number for copy protection)

I don't see the motherboard LAN driver as being installed.



\SystemRoot\System32\drivers\athwnx.sys Tue Mar 1 00:39:03 2016
 
Solution

caked1393

Honorable
Nov 24, 2013
14
0
10,510


my only device for wifi is a pcie tplink network adapter.
as of writing this, i've already updated to the latest version but i still get BSODs. here's the latest dmp: https://drive.google.com/file/d/1zGWwM1F4hei1wTO9O2K8E_2L5KSkX2qx/view?usp=sharing

as for that mystery driver, I have no clue what it is... is there a way to remove it? i've already scanned the system with bitdefender/avast/malwarebytes but no malware has been detected so far.

currently downloading drivers for usb 3 and wireless card. will let you know if it helps.
 
looks like 2 key windows drivers have been modified
win32k.sys
win32kbase.sys

you might download a current version of windows directly from Microsoft and do a clean install
https://www.microsoft.com/en-us/software-download/windows10

you could also run cmd.exe or powershell as an admin and run
dism.exe /online /cleanup-image /restorehealth

then see if you can apply all of the windows updates.
sometimes malware will disable the dism.exe command to prevent you from fixing the modified windows files