Windows 10: Multiple BSODs caused by ntkrnlmp.exe in Windows 10

  1.    10 May 2017 #1

    Multiple BSODs caused by ntkrnlmp.exe in Windows 10


    Hi there,
    I have recently bought a new Gigabyte P15f v7 laptop (specs found at P15F v7 | Laptop - GIGABYTE
    ).

    I upgraded it with another 8GB of Kingston DDR4-2400Mhz KVR24S17S8/8 memory and a Samsung 960 EVO 250GB SSD.
    I have been having multiple BSODs at mostly random times. Some seemed to occur around the time I would disconnect from my WiFi connection in order to reconnect. I was doing this because I would suddenly loose internet connection on my home WiFi (this wasn't happening on other connected devices). This led me to believe it was a WiFi related issue, however after updating the WiFi drivers (and others like chipset, bluetooth, IDE ATA/ATAPI and graphics etc...) I am still experiencing the BSODs.
    I used WinDbg to try find the issue. Most of the time the driver causing the crash is ntkrnlmp.exe and I often get a DPC_WATCHDOG_VIOLATION code on the BSOD screen. I did notice for one dump file in WinDbg that avgntflt.sys caused the crash. After uninstalling Avira antivirus I have not received this problem again, but the ntkrnlmp.exe problems still occur.
    I have now used verifier to try identify the problem. I receive a BSOD right after boot before the Windows login screen. WinDbg again identifies ntkrnlmp.exe as the cause. I attach the report you guys ask for in the sticky


    Please help! Thanks in advance
      My ComputerSystem Spec


  2. Posts : 2,867
    64bit Win 10 Pro ver 1709 Build 16299.64
       12 May 2017 #2

    Hi and welcome to TenForums

    If you take the new memory stick out do you still get the BSOD? I ask because the new one is not a matched pair with the original and this is a known cause of BSOD with many motherboards.
      My ComputersSystem Spec

  3.    12 May 2017 #3

    Hi

    Yeah I know they're not perfectly matched. Unfortunately when I got the new 8GB there wasn't the exact same Kingston model around, so I specifically got another module of Kingston with the same latency and speed rating.

    When I take it out and run verifier, I still get BSOD on boot just before the login screen. Also tried with only the new stick of RAM in and the same thing happens. Seems its not RAM matching....
      My ComputerSystem Spec


  4. Posts : 2,867
    64bit Win 10 Pro ver 1709 Build 16299.64
       12 May 2017 #4

    OK, it was important to check that aspect before digging deeper. Thanks for verifying and running the test with both new and old sticks of RAM. At the moment I'm not able to find anything else that will help.
      My ComputersSystem Spec

  5.    12 May 2017 #5

    Dam....
    Thanks for your help. Really hope you or someone else can find something
      My ComputerSystem Spec


  6. Posts : 5,345
    Windows 10 Pro X64 16299.19
       13 May 2017 #6

    The latest (5/9 3:23PM) dump indicates a problem with MBAMChameleon.sys.
    Code:
    ffffad01`975a3078  fffff80f`c959c671Unable to load image MBAMChameleon.sys, Win32 error 0n2
    *** WARNING: Unable to verify timestamp for MBAMChameleon.sys
    *** ERROR: Module load completed but symbols could not be loaded for MBAMChameleon.sys
     MBAMChameleon+0xc671
    Driver Description: Malwarebytes Chameleon Protection Driver
    Driver Update Site: https://www.malwarebytes.org/chameleon/

    Uninstall Malwarebytes Chameleon and see if that resolves your problem. If it does, you can see if the 3.1.33.0 version makes any difference. If not, leave it uninstalled.
      My ComputersSystem Spec

  7.    14 May 2017 #7

    Thanks for the response.

    Interestingly, Malwarebytes didn't appear in the installed programs list. This made me think something was a bit weird with the installation and it therefore could be causing the issues. I removed it by running the uninstall exe manually, followed by a run of CCleaner.

    I ran verifier which then resulted in BSODs on startup again. Seems it wasn't the problem, unless there are still malwarebytes drivers hanging arund somehow from an incomplete uninstall? I attach my latest dump, hopefully it will help.
      My ComputerSystem Spec


  8. Posts : 5,345
    Windows 10 Pro X64 16299.19
       14 May 2017 #8

    That dump shows a problem with Malwarebytes anti-malware mbae64.sys.
    Code:
    BugCheck C4, {2006, ffffd4036ea32a28, fffff803921b01b0, ffffb001a83c9638}
    Unable to load image mbae64.sys, Win32 error 0n2
    *** ERROR: Module load completed but symbols could not be loaded for mbae64.sys
    Code:
    DRIVER_VERIFIER_DETECTED_VIOLATION (c4)
    A device driver attempting to corrupt the system has been caught.  This is
    because the driver was specified in the registry as being suspect (by the
    administrator) and the kernel has enabled substantial checking of this driver.
    If the driver attempts to corrupt the system, bugchecks 0xC4, 0xC1 and 0xA will
    be among the most commonly seen crashes.
    Arguments:
    Arg1: 0000000000002006, subclass of driver violation.
    Arg2: ffffd4036ea32a28
    Arg3: fffff803921b01b0
    Arg4: ffffb001a83c9638
    If Malwarebytes is installed, uninstall it for now: MBAM Clean Removal Process
      My ComputersSystem Spec

  9.    15 May 2017 #9

    Thanks for that analysis.

    Seems it was the problem and if I just used BlueScreenView instead of WinDbg I would have seen it as well!!
    Anyway, I had some trouble removing Malwarebytes completely. Turns out there's a newer version of the removal tool that did the trick including removing mbae64.sys.

    After running verifier again MBfilt64.sys was causing crashes! Another Malwarebytes driver that wasn't removed. I manually removed it in safe mode from C:\Windows\System32\drivers. Verifier then didn't crash before start-up as usual. Seemed the problem was fixed. However about 15 seconds after logging in it would crash. What's weird is that no dump files have been saved for the 3 or 4 times I did this.

    Any suggestions?
      My ComputerSystem Spec


  10. Posts : 12
    windows 10 ver 1703 ( os 15063.296 )
       15 May 2017 #10

    hi when you remove the new added ram problem exist again ?
      My ComputerSystem Spec


 

Related Threads
I've always had issues with BSOD's with this computer however the last 6 months or so I have had no issues. I had a single crash 4 days ago, and then nothing until today in which I have had 3 crashes and a freeze. The erros are either Page fault...
Hi I am having multiple BSODs with the IRQL_NOT_LESS_OR_EQUAL message. I believe the dump files are pointing towards ntkrnlmp.exe but I don't have a lot of experience with dump files. I was wondering if anyone would take a look at the files?...
ntkrnlmp.exe caused BSOD in BSOD Crashes and Debugging
Hi there, I started to get BSOD yesterday. They all happening whild I playing online game, yester day i got 2, both shows ATTEMPTED_WRITE_TO_READONLY_MEMORY And today I got one with DRIVER_OVERRAN_STACK_BUFFER and another one with...
Multiple BSODs caused by ntoskrnl.exe+142760 in BSOD Crashes and Debugging
This problem has been happening since I built this computer 6 months ago. I've tried changing the motherboard, the memory, and the power supply, and have reinstalled windows many times. I suspect I'll have enough parts for a second computer by...
Hi Guys, When booting Windows 10 I am presented with a BSOD, when using the debugging tools to look at the dump files this error is coming out all the time. Any ideas? - Probably caused by : ntkrnlmp.exe ( nt! ?? ::FNODOBFM::`string'+225b0 )...
Our Sites
Site Links
About Us
Windows 10 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 10" and related materials are trademarks of Microsoft Corp.

Designer Media Ltd
All times are GMT -5. The time now is 00:37.
Find Us