[doomdude1]

Hey there,

 

So while I'm waiting for a proper card I'm using an Intel HD 4000 on my system. Now, everything was fine until yesterday when I managed to get a BSOD where it said that ntoskrnl.exe and tcpip.sys gave me a "kmode exception not handled" crash. It occured while I was trying to load Victoria 2. Now, after I restarted the system it worked normally, but the game was running much more poorly and in fact throughout my system every performance went down by some 10-20%.

 

I tried updating my drivers from my manufacturer and from Intel, scanning for viruses, cleaning and repairing my registry, repairing all Intel software related and generally doing any maintenance I could think of, all to no avail. I've attached the crash file along with the most recent dxdiag I ran. The site wouldn't let me post the .mdmp file directly so I had to zip it.

Attached Files

•  DxDiag2.txt   18.84KB   225 downloads
•  041116-4976-01.rar   21.92KB   206 downloads

[Advertisements]

   doomdude1,

 

We dont use RAR here so please upload your dump/s using the method below;

 

1. Copy any dmp files from C:\Windows\Minidump onto the desktop.

2. Select all of them, right-click on one, and click on Send To> New Compressed (zipped) Folder.

3. Upload the zip folder using the Attach button, bottom left of the dialogue input box 

 

I tried updating my drivers from my manufacturer and from Intel, scanning for viruses, cleaning and repairing my registry,

 

 

Unless you are an advanced user the registry should be left well alone, it is far too easy to hose the whole OS with one wrong mouse click.

 

Tip

To ensure that you receive notification of any reply to your thread please click on the Follow this topic tab, top right corner above your OP.

 

[phillpower2]

   doomdude1,

 

We dont use RAR here so please upload your dump/s using the method below;

 

1. Copy any dmp files from C:\Windows\Minidump onto the desktop.

2. Select all of them, right-click on one, and click on Send To> New Compressed (zipped) Folder.

3. Upload the zip folder using the Attach button, bottom left of the dialogue input box 

 

I tried updating my drivers from my manufacturer and from Intel, scanning for viruses, cleaning and repairing my registry,

 

 

Unless you are an advanced user the registry should be left well alone, it is far too easy to hose the whole OS with one wrong mouse click.

 

Tip

To ensure that you receive notification of any reply to your thread please click on the Follow this topic tab, top right corner above your OP.

 

[doomdude1]

Alrighty, here's the .zip file of the log

Attached Files

•  041116-4976-01.zip   24.93KB   174 downloads

[phillpower2]

Please see info below that I have highlighted in red;

 

Windows 7 Kernel Version 7601 (Service Pack 1) MP (4 procs) Free x64

Product: WinNt, suite: TerminalServer SingleUserTS

Built by: 7601.19160.amd64fre.win7sp1_gdr.160211-0600

Machine Name:

Kernel base = 0xfffff800`02c61000 PsLoadedModuleList = 0xfffff800`02ea8730

Debug session time: Mon Apr 11 09:04:57.245 2016 (UTC - 4:00)

System Uptime: 1 days 2:02:02.462

*******************************************************************************

*                                                                             *

*                        Bugcheck Analysis                                    *

*                                                                             *

*******************************************************************************

 

KMODE_EXCEPTION_NOT_HANDLED (1e)

This is a very common bugcheck.  Usually the exception address pinpoints

the driver/function that caused the problem.  Always note this address

as well as the link date of the driver/image that contains this address.

Arguments:

Arg1: 0000000000000000, The exception code that was not handled

Arg2: 0000000000000000, The address that the exception occurred at

Arg3: 0000000000000000, Parameter 0 of the exception

Arg4: 0000000000000000, Parameter 1 of the exception

 

Debugging Details:

------------------

 

TRIAGER: Could not open triage file : e:\dump_analysis\program\triage\modclass.ini, error 2

 

EXCEPTION_CODE: (Win32) 0 (0) - The operation completed successfully.

 

FAULTING_IP: 

+0

00000000`00000000 ??              ???

 

EXCEPTION_PARAMETER1:  0000000000000000

 

EXCEPTION_PARAMETER2:  0000000000000000

 

ERROR_CODE: (NTSTATUS) 0 - STATUS_WAIT_0

 

BUGCHECK_STR:  0x1e_0

 

DEFAULT_BUCKET_ID:  WIN7_DRIVER_FAULT

 

PROCESS_NAME:  System

 

CURRENT_IRQL:  2

 

EXCEPTION_RECORD:  fffff80000b9a7b8 -- (.exr 0xfffff80000b9a7b8)

ExceptionAddress: fffff8800125b8c8 (iaStorA+0x00000000000078c8)

   ExceptionCode: c0000005 (Access violation)

  ExceptionFlags: 00000000

NumberParameters: 2

   Parameter[0]: 0000000000000000

   Parameter[1]: ffffffffffffffff

Attempt to read from address ffffffffffffffff

 

TRAP_FRAME:  fffff80000b9a860 -- (.trap 0xfffff80000b9a860)

NOTE: The trap frame does not contain all registers.

Some register values may be zeroed or incorrect.

rax=7f107f107f037f04 rbx=0000000000000000 rcx=fffffa800c719e00

rdx=fffff80000b9a9d0 rsi=0000000000000000 rdi=0000000000000000

rip=fffff8800125b8c8 rsp=fffff80000b9a9f8 rbp=fffffa800ca89010

 r8=fffff80000b9a9d0  r9=0000000000000000 r10=fffffa800ca89010

r11=0000000000000002 r12=0000000000000000 r13=0000000000000000

r14=0000000000000000 r15=0000000000000000

iopl=0         nv up ei pl nz na pe nc

iaStorA+0x78c8:

fffff880`0125b8c8 ??              ???

Resetting default scope

 

LAST_CONTROL_TRANSFER:  from fffff80002ccca7e to fffff80002cd5050

 

STACK_TEXT:  

fffff800`00b99898 fffff800`02ccca7e : fffff880`01b6d9a0 fffff880`01a5c1c7 fffff800`00b9a010 fffff800`02d000d0 : nt!KeBugCheck

fffff800`00b998a0 fffff800`02cffd9d : fffff800`02ee929c fffff800`02e209ec fffff800`02c61000 fffff800`00b9a7b8 : nt!KiKernelCalloutExceptionHandler+0xe

fffff800`00b998d0 fffff800`02cfeb75 : fffff800`02e28e6c fffff800`00b99948 fffff800`00b9a7b8 fffff800`02c61000 : nt!RtlpExecuteHandlerForException+0xd

fffff800`00b99900 fffff800`02d0fb31 : fffff800`00b9a7b8 fffff800`00b9a010 fffff800`00000000 00000000`00000000 : nt!RtlDispatchException+0x415

fffff800`00b99fe0 fffff800`02cd4702 : fffff800`00b9a7b8 fffffa80`0c719e00 fffff800`00b9a860 fffffa80`0ca89202 : nt!KiDispatchException+0x135

fffff800`00b9a680 fffff800`02cd300a : fffffa80`112671e0 fffffa80`11126000 00000000`00000000 fffffa80`112671e0 : nt!KiExceptionDispatch+0xc2

fffff800`00b9a860 fffff880`0125b8c8 : fffff880`01259ba1 ffffffff`ffffffff fffff800`00b94080 fffffa80`0ca4f450 : nt!KiGeneralProtectionFault+0x10a

fffff800`00b9a9f8 fffff880`01259ba1 : ffffffff`ffffffff fffff800`00b94080 fffffa80`0ca4f450 fffff880`0151235b : iaStorA+0x78c8

fffff800`00b9aa00 ffffffff`ffffffff : fffff800`00b94080 fffffa80`0ca4f450 fffff880`0151235b fffffa80`0cab1008 : iaStorA+0x5ba1

fffff800`00b9aa08 fffff800`00b94080 : fffffa80`0ca4f450 fffff880`0151235b fffffa80`0cab1008 00000000`00000000 : 0xffffffff`ffffffff

fffff800`00b9aa10 fffffa80`0ca4f450 : fffff880`0151235b fffffa80`0cab1008 00000000`00000000 00000000`00000001 : 0xfffff800`00b94080

fffff800`00b9aa18 fffff880`0151235b : fffffa80`0cab1008 00000000`00000000 00000000`00000001 fffff880`012c8110 : 0xfffffa80`0ca4f450

fffff800`00b9aa20 fffffa80`0ca89201 : fffff800`02cd0f16 fffffa80`0ca85018 fffff800`00b94000 00000000`00000001 : storport! ?? ::FNODOBFM::`string'+0xa02

fffff800`00b9aaa0 fffff800`02cd0f16 : fffffa80`0ca85018 fffff800`00b94000 00000000`00000001 00000000`00000002 : 0xfffffa80`0ca89201

fffff800`00b9aaa8 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiInterruptDispatch+0x1a6

 

 

STACK_COMMAND:  kb

 

FOLLOWUP_IP: 

iaStorA+78c8

fffff880`0125b8c8 ??              ???

 

SYMBOL_STACK_INDEX:  7

 

SYMBOL_NAME:  iaStorA+78c8

 

FOLLOWUP_NAME:  MachineOwner

 

MODULE_NAME: iaStorA

 

IMAGE_NAME:  iaStorA.sys

 

DEBUG_FLR_IMAGE_TIMESTAMP:  51fb0de8

 

FAILURE_BUCKET_ID:  X64_0x1e_0_iaStorA+78c8

 

BUCKET_ID:  X64_0x1e_0_iaStorA+78c8

 

The above may not explain or by correcting it resolve the sudden drop in performance, the first two items marked in red tell us nothing but the third points towards the Intel Matrix Storage Manager driver, make sure that you have the latest drivers for the device, see here and additionally check for any firmware updates for your SSD.

 

Please ensure that you always create a new restore point before updating/installing any new drivers or install new software.

[phillpower2]

Not heard back from you doomdude1, do you still require assistance or is the issue now resolved, an update would be appreciated.

[doomdude1]

Sorry, was away from home.

 

I checked the drivers and ran the Intel processor/GPU checker utility, everything is up to date and there are no hardware issues with either.

 

Also, it seems that another game (Crusader Kings 2, running on the same engine I assume) is having trouble operating with the same issue, yet I've had no bluescreen when loading it or anything similar.

Edited by doomdude1, 18 April 2016 - 04:17 AM.

[phillpower2]

No worries, just checking that you were still around. 

 

As said I`m not sure that the crash and performance drop are related, we should check your CPU usage to see if anything is hogging resources;

 

Download Process Explorer which you can obtain from here

Save it to your desktop then run it (Vista or Win7 - right click and Run as Administrator).  

View, Select Column, check Verified Signer, OK

Options, Verify Image Signatures

 

Click twice on the CPU column header to arrange things by CPU usage, this will put the services with the highest CPU usage at the top of the log. 

 

Give it a minute or so while things settle down.

 

Grab a screenshot and attach it to your next reply for us please;

 

To capture and post a screenshot;

 

Click on the ALT key + PRT SCR key..its on the top row..right hand side..now click on start...all programs...accessories...paint....left click in the white area ...press CTRL + V...click on file...click on save...save it to your desktop...name it something related to the screen your capturing... BE SURE TO SAVE IT AS A .JPG ...otherwise it may be to big to upload... Click on the More Reply Options tab then after typing in any response you have... click on browse...desktop...find the screenshot..select it and click on the upload button...then on the lower left...after it says upload successful...click on add reply like you normally would.

 

 

Screenshot instructions are provided to assist those that may read this topic but are not yet aware of the “how to”.

[doomdude1]

Here's the process explorer image

Attached Thumbnails

• 

[phillpower2]

Nothing untoward there and the results are in fact very good.

 

Lets see if anything is running on start up that needs not be, if this shows nothing it may suggest that this is hardware as opposed to software related;

 

From the link run and then post an Autoruns log for us, see here  

 

1: Extract the Autoruns Zip file contents to a folder.

2: Double-click the "Autoruns.exe".

3: Click on the "Everything" tab

4: Go to File then to Export As or Save in some versions.

5: Save AutoRuns.txt file to known location like your Desktop > when you click on File > Save you will then get the option to Save as type, click the drop down tab, change it to Text and then click the Save button.

6: Attach to your next reply.

 

Tutorial here

[doomdude1]

Here we go, the autorun log

Attached Files

•  autorun log.txt   45.7KB   286 downloads

[doomdude1]

Also, don't know if it helps or not, but video playback through browsers acts incredibly strangely. It's very, very slow to load and often unresponsive until I repeatedly reset the page. I tried updating Flash player and whatnot, but it didn't help.

[phillpower2]

Best Answer

Disable (not delete) all of the following (MBAM only if it is the free version and not Pro) see To Disable or Delete? info here for "how to"

 

+ "SunJavaUpdateSched" "Java Update Scheduler" "Oracle Corporation" "c:\program files (x86)\common files\java\java update\jusched.exe" "21.3.2016 7:57" ""

+ "CCleaner Monitoring" "CCleaner" "Piriform Ltd" "c:\program files\ccleaner\ccleaner64.exe" "11.3.2016 22:26" ""

+ "DAEMON Tools Lite Automount" "DAEMON Tools Lite" "Disc Soft Ltd" "c:\program files\daemon tools lite\dtagent.exe" "1.3.2016 11:25" ""

+ "Gyazo" "Gyazo Station" "Nota Inc." "c:\program files (x86)\gyazo\gystation.exe" "17.2.2016 7:41" ""

+ "Google Chrome" "Google Chrome Installer" "Google Inc." "c:\program files (x86)\google\chrome\application\49.0.2623.112\installer\chrmstp.exe" "6.4.2016 1:26" ""

+ "WinRAR" "WinRAR shell extension" "Alexander Roshal" "c:\program files\winrar\rarext.dll" "3.2.2016 21:38" ""

+ "WinRAR32" "WinRAR shell extension" "Alexander Roshal" "c:\program files\winrar\rarext32.dll" "3.2.2016 21:38" ""

+ "MBAMShlExt" "Malwarebytes Anti-Malware" "Malwarebytes" "c:\program files (x86)\malwarebytes anti-malware\mbamext.dll"

+ "{C52AF81D-F7A0-4AAB-8E87-F80A60CCD396}" "" "Apache Software Foundation" "c:\program files (x86)\openoffice 

+ "{C52AF81D-F7A0-4AAB-8E87-F80A60CCD396}" "" "Apache Software Foundation" "c:\program files (x86)\openoffice 

+ "MBAMShlExt" "Malwarebytes Anti-Malware" "Malwarebytes" "c:\program files (x86)\malwarebytes anti-malware\mbamext.dll"

+ "RUShellExt" "Revo Uninstaller Pro Extension" "VS Revo Group" "c:\program files\vs revo group\revo uninstaller pro\ruext.dll" "7.12.2012 13:55" ""

+ "WinRAR" "WinRAR shell extension" "Alexander Roshal" "c:\program files\winrar\rarext.dll" "3.2.2016 21:38" ""

+ "WinRAR32" "WinRAR shell extension" "Alexander Roshal" "c:\program files\winrar\rarext32.dll" "3.2.2016 21:38" ""

+ "WinRAR" "WinRAR shell extension" "Alexander Roshal" "c:\program files\winrar\rarext.dll" "3.2.2016 21:38" ""

+ "WinRAR32" "WinRAR shell extension" "Alexander Roshal" "c:\program files\winrar\rarext32.dll" "3.2.2016 21:38" ""

+ "Java™ Plug-In 2 SSV Helper" "Java™ Platform SE binary" "Oracle Corporation" "c:\program files (x86)\java\jre1.8.0_77\bin\jp2ssv.dll" "21.3.2016 7:38" ""

+ "Java™ Plug-In SSV Helper" "Java™ Platform SE binary" "Oracle Corporation" "c:\program files (x86)\java\jre1.8.0_77\bin\ssv.dll"

+ "\CCleanerSkipUAC" "CCleaner" "Piriform Ltd" "c:\program files\ccleaner\ccleaner.exe" "11.3.2016 22:21" ""

+ "\GoogleUpdateTaskMachineCore" "Google Installer" "Google Inc." "c:\program files (x86)\google\update\googleupdate.exe" "9.1.2016 

+ "\GoogleUpdateTaskMachineUA" "Google Installer" "Google Inc." "c:\program files (x86)\google\update\googleupdate.exe" "9.1.2016 

+ "\GyazoUpdateTaskMachine" "Gyazo Auto Update Machine" "" "c:\program files (x86)\gyazo\gyazoupdate.exe" "10.11.2008 11:40" ""

+ "\GyazoUpdateTaskMachineDaily" "Gyazo Auto Update Machine" "" "c:\program files (x86)\gyazo\gyazoupdate.exe" "10.11.2008 11:40"

+ "Disc Soft Lite Bus Service" "Disc Soft Bus Service" "Disc Soft Ltd" "c:\program files\daemon tools lite\discsoftbusservice.exe" "1.3.2016 

+ "gupdate" "Keeps your Google software up to date. If this service is disabled or stopped, your Google software will not be kept up to date, meaning security vulnerabilities that may arise cannot be fixed and features may not work. This service uninstalls itself when there is no Google software using it." "Google Inc." "c:\program files (x86)\google\update\googleupdate.exe" "9.1.2016 14:08" ""

+ "gupdatem" "Keeps your Google software up to date. If this service is disabled or stopped, your Google software will not be kept up to date, meaning security vulnerabilities that may arise cannot be fixed and features may not work. This service uninstalls itself when there is no Google software using it." "Google Inc." "c:\program files (x86)\google\update\googleupdate.exe" "9.1.2016 14:08" ""

client\socketheciserver.exe" "27.8.2013 14:32" ""

+ "MBAMScheduler" "Malwarebytes Anti-Malware scheduler" "Malwarebytes" "c:\program files (x86)\malwarebytes anti-malware\mbamscheduler.exe" "29.1.2016 3:39" ""

+ "MBAMService" "Malwarebytes Anti-Malware service" "Malwarebytes" "c:\program files (x86)\malwarebytes anti-ve 

+ "dtlitescsibus" "DAEMON Tools Lite Virtual SCSI Bus Driver" "Disc Soft Ltd" "c:\windows\system32\drivers\dtlitescsibus.sys" "24.9.2015 

+ "dtliteusbbus" "DAEMON Tools Lite Virtual USB Bus Driver" "Disc Soft Ltd" "c:\windows\system32\drivers\dtliteusbbus.sys" "28.12.2015 

+ "MBAMProtector" "Malwarebytes Anti-Malware" "Malwarebytes" "c:\windows\system32\drivers\mbam.sys" "11.8.2015 19:35" ""

+ "MBAMSwissArmy" "Malwarebytes Anti-Malware" "Malwarebytes" "c:\windows\system32\drivers\mbamswissarmy.sys" "29.7.2015 6:26"

+ "MBAMWebAccessControl" "Malwarebytes Web Access Control" "Malwarebytes Corporation" "c:\windows\system32\drivers\mwac.sys"

+ "ql40xx" "QLogic iSCSI Storport Miniport Driver" "QLogic Corporation" "c:\windows\system32\drivers\ql40xx.sys" "19.5.2009 3:18" ""

+ "Revoflt" "Revo Uninstaller Filter driver" "VS Revo Group" "c:\windows\system32\drivers\revoflt.sys" "30.12.2009 11:19" ""

 

I don`t see any anti virus protection installed, not a good idea when connecting to the Internet and especially when you have Java installed which is deemed a security weakness, uninstall it if you do not use it, always disable it if you do need it/when it is not in use and always make sure that you have the latest version.

 

Download and run TFC - Temp File Cleaner by OldTimer

 

Let us know how the computer behaves after you have done the above, including the internet bahaviour.

[doomdude1]

Alright, I ran the thing and disabled all the various doodads, there isn't any noticeable change in performance.

[phillpower2]

You should have seen some improvement in performance and especially with the computer booting up quicker, the fact that nothing has changed leaves three possibilities, tired hardware, low storage space on the HDD or malware infection**.

 

Download then run Speccy (free) and post the resultant url for us, details here,  this will provide us with information about your computer hardware + any software that you have installed that may explain the present issue/s. 

 

 

**

** I don`t see any anti virus protection installed, not a good idea when connecting to the Internet and especially when you have Java installed which is deemed a security weakness, uninstall it if you do not use it, always disable it if you do need it/when it is not in use and always make sure that you have the latest version.

 

[doomdude1]

 

You should have seen some improvement in performance and especially with the computer booting up quicker, the fact that nothing has changed leaves three possibilities, tired hardware, low storage space on the HDD or malware infection**.

 

Download then run Speccy (free) and post the resultant url for us, details here,  this will provide us with information about your computer hardware + any software that you have installed that may explain the present issue/s. 

 

 

**

** I don`t see any anti virus protection installed, not a good idea when connecting to the Internet and especially when you have Java installed which is deemed a security weakness, uninstall it if you do not use it, always disable it if you do need it/when it is not in use and always make sure that you have the latest version.

 

 

Actually, upon further testing Crusader Kings II is now able to run with expected performance, it wasn't able to do that prior to axing these programs. I've ran several scans and I am pretty certain that I have no malicious software on my machine. Booting time has never been an issue due to me using an SSD drive for my OS.