Windows 8 BSOD - SYSTEM_THREAD_EXCEPTION_NOT_HANDLED - ndu.sys

**kashmir** · 08-18-2012

I installed Windows 8 yesterday, It was great, until it started random crashing. It crashed 5 times with same error (I think). The error is: Windows 8 BSOD - SYSTEM_THREAD_EXCEPTION_NOT_HANDLED - ndu.sys.

For crash report from W8 File Collector see the attached file.

What can cause it and how can I fix it?
Thanks in advance

**usasma** · 08-18-2012

You have a disabled wired networking connection. Is this deliberate? If so, why?

ndu.sys is a Windows networking driver. Please update both your wired and wireless networking drivers.

Please un-install ISODrive - it had occasional problems in Win7. Feel free to reinstall it once the system has been re-stabilized

Please un-install Riva Tuner (it may also be EVGA Precision or MSI Afterburner) as it is known to cause BSOD's in Win7 systems.

WinRing software (from RealTemp) dates from 2008. Please un-install it.

If the above steps don't stop the BSOD's, please zip up and upload any new memory dumps with your next post - and we'll see what we can figure out from there.

The following info is just FYI, I've already addressed the issues that I saw in the above paragraphs

- Further info on BSOD error messages available at: http://www.carrona.org/bsodindx.html
- Info on how to troubleshoot BSOD's (DRAFT): http://www.carrona.org/userbsod.html
- How I do it: http://www.carrona.org/howidoit.html

Analysis:

The following is for information purposes only.

Code:

**************************Fri Aug 17 11:31:22.749 2012 (UTC - 4:00)**************************
Loading Dump File [C:\Users\John\_jcgriff2_\dbug\__Kernel__\081712-13546-01.dmp]
*** WARNING: Unable to verify timestamp for ntoskrnl.exe
*** ERROR: Module load completed but symbols could not be loaded for ntoskrnl.exe
Built by: 9200.16384.amd64fre.win8_rtm.120725-1247
System Uptime:0 days 0:08:42.417
*** WARNING: Unable to verify timestamp for ntoskrnl.exe
*** ERROR: Module load completed but symbols could not be loaded for ntoskrnl.exe
*** WARNING: Unable to verify timestamp for Ndu.sys
*** ERROR: Module load completed but symbols could not be loaded for Ndu.sys
BugCheck Code: BugCheck 1000007E, {ffffffffc0000005, fffff88017fe4d20, fffff88002f50868, fffff88002f500a0}
*** WARNING: Unable to verify timestamp for tcpip.sys
*** ERROR: Module load completed but symbols could not be loaded for tcpip.sys
Probably caused by :Ndu.sys ( Ndu+3d20 )
BugCheck Info: SYSTEM_THREAD_EXCEPTION_NOT_HANDLED_M (1000007e)
DEFAULT_BUCKET_ID:  WIN8_DRIVER_FAULT
BUGCHECK_STR:  AV
CPUID:        "Intel(R) Core(TM)2 Quad CPU    Q9400  @ 2.66GHz"
MaxSpeed:     2660
CurrentSpeed:3400
  BIOS Version                  F2
  BIOS Release Date             09/25/2008
  Manufacturer                  Gigabyte Technology Co., Ltd.
  Product Name                  EP45-DS3LR
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
**************************Fri Aug 17 10:59:53.464 2012 (UTC - 4:00)**************************
Loading Dump File [C:\Users\John\_jcgriff2_\dbug\__Kernel__\081712-19437-01.dmp]
*** WARNING: Unable to verify timestamp for ntoskrnl.exe
*** ERROR: Module load completed but symbols could not be loaded for ntoskrnl.exe
Built by: 9200.16384.amd64fre.win8_rtm.120725-1247
System Uptime:0 days 0:56:09.135
*** WARNING: Unable to verify timestamp for ntoskrnl.exe
*** ERROR: Module load completed but symbols could not be loaded for ntoskrnl.exe
*** WARNING: Unable to verify timestamp for Ndu.sys
*** ERROR: Module load completed but symbols could not be loaded for Ndu.sys
BugCheck Code: BugCheck 1000007E, {ffffffffc0000005, fffff88018569d20, fffff8801ad8f868, fffff8801ad8f0a0}
*** WARNING: Unable to verify timestamp for tcpip.sys
*** ERROR: Module load completed but symbols could not be loaded for tcpip.sys
Probably caused by :Ndu.sys ( Ndu+3d20 )
BugCheck Info: SYSTEM_THREAD_EXCEPTION_NOT_HANDLED_M (1000007e)
DEFAULT_BUCKET_ID:  WIN8_DRIVER_FAULT
BUGCHECK_STR:  AV
CPUID:        "Intel(R) Core(TM)2 Quad CPU    Q9400  @ 2.66GHz"
MaxSpeed:     2660
CurrentSpeed:3400
  BIOS Version                  F2
  BIOS Release Date             09/25/2008
  Manufacturer                  Gigabyte Technology Co., Ltd.
  Product Name                  EP45-DS3LR
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
**************************Fri Aug 17 09:16:09.422 2012 (UTC - 4:00)**************************
Loading Dump File [C:\Users\John\_jcgriff2_\dbug\__Kernel__\081712-14578-01.dmp]
*** WARNING: Unable to verify timestamp for ntoskrnl.exe
*** ERROR: Module load completed but symbols could not be loaded for ntoskrnl.exe
Built by: 9200.16384.amd64fre.win8_rtm.120725-1247
System Uptime:0 days 0:04:41.092
*** WARNING: Unable to verify timestamp for ntoskrnl.exe
*** ERROR: Module load completed but symbols could not be loaded for ntoskrnl.exe
*** WARNING: Unable to verify timestamp for Ndu.sys
*** ERROR: Module load completed but symbols could not be loaded for Ndu.sys
BugCheck Code: BugCheck 1000007E, {ffffffffc0000005, fffff88018133d20, fffff88000ffa868, fffff88000ffa0a0}
*** WARNING: Unable to verify timestamp for tcpip.sys
*** ERROR: Module load completed but symbols could not be loaded for tcpip.sys
Probably caused by :Ndu.sys ( Ndu+3d20 )
BugCheck Info: SYSTEM_THREAD_EXCEPTION_NOT_HANDLED_M (1000007e)
DEFAULT_BUCKET_ID:  WIN8_DRIVER_FAULT
BUGCHECK_STR:  AV
CPUID:        "Intel(R) Core(TM)2 Quad CPU    Q9400  @ 2.66GHz"
MaxSpeed:     2660
CurrentSpeed:3400
  BIOS Version                  F2
  BIOS Release Date             09/25/2008
  Manufacturer                  Gigabyte Technology Co., Ltd.
  Product Name                  EP45-DS3LR
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
**************************Fri Aug 17 09:10:43.307 2012 (UTC - 4:00)**************************
Loading Dump File [C:\Users\John\_jcgriff2_\dbug\__Kernel__\081712-24859-01.dmp]
*** WARNING: Unable to verify timestamp for ntoskrnl.exe
*** ERROR: Module load completed but symbols could not be loaded for ntoskrnl.exe
Built by: 9200.16384.amd64fre.win8_rtm.120725-1247
System Uptime:0 days 0:15:48.974
*** WARNING: Unable to verify timestamp for ntoskrnl.exe
*** ERROR: Module load completed but symbols could not be loaded for ntoskrnl.exe
*** WARNING: Unable to verify timestamp for Ndu.sys
*** ERROR: Module load completed but symbols could not be loaded for Ndu.sys
BugCheck Code: BugCheck 1000007E, {ffffffffc0000005, fffff88017e03d20, fffff88002b1d868, fffff88002b1d0a0}
*** WARNING: Unable to verify timestamp for tcpip.sys
*** ERROR: Module load completed but symbols could not be loaded for tcpip.sys
Probably caused by :Ndu.sys ( Ndu+3d20 )
BugCheck Info: SYSTEM_THREAD_EXCEPTION_NOT_HANDLED_M (1000007e)
DEFAULT_BUCKET_ID:  WIN8_DRIVER_FAULT
BUGCHECK_STR:  AV
CPUID:        "Intel(R) Core(TM)2 Quad CPU    Q9400  @ 2.66GHz"
MaxSpeed:     2660
CurrentSpeed:3400
  BIOS Version                  F2
  BIOS Release Date             09/25/2008
  Manufacturer                  Gigabyte Technology Co., Ltd.
  Product Name                  EP45-DS3LR
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
**************************Fri Aug 17 08:35:29.186 2012 (UTC - 4:00)**************************
Loading Dump File [C:\Users\John\_jcgriff2_\dbug\__Kernel__\081712-36656-01.dmp]
*** WARNING: Unable to verify timestamp for ntoskrnl.exe
*** ERROR: Module load completed but symbols could not be loaded for ntoskrnl.exe
Built by: 9200.16384.amd64fre.win8_rtm.120725-1247
System Uptime:0 days 0:55:11.581
*** WARNING: Unable to verify timestamp for ntoskrnl.exe
*** ERROR: Module load completed but symbols could not be loaded for ntoskrnl.exe
*** WARNING: Unable to verify timestamp for Ndu.sys
*** ERROR: Module load completed but symbols could not be loaded for Ndu.sys
BugCheck Code: BugCheck 1000007E, {ffffffffc0000005, fffff88019743d20, fffff88002b16868, fffff88002b160a0}
Probably caused by :Ndu.sys ( Ndu+3d20 )
BugCheck Info: SYSTEM_THREAD_EXCEPTION_NOT_HANDLED_M (1000007e)
DEFAULT_BUCKET_ID:  WIN8_DRIVER_FAULT
BUGCHECK_STR:  AV
CPUID:        "Intel(R) Core(TM)2 Quad CPU    Q9400  @ 2.66GHz"
MaxSpeed:     2660
CurrentSpeed:3400
  BIOS Version                  F2
  BIOS Release Date             09/25/2008
  Manufacturer                  Gigabyte Technology Co., Ltd.
  Product Name                  EP45-DS3LR
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``

3rd Party Drivers:

The following is for information purposes only. Any drivers in red should be updated.

Code:

**************************Fri Aug 17 11:31:22.749 2012 (UTC - 4:00)**************************
WinRing0x64.sys   Sat Jul 26 09:29:37 2008 (488B26C1)
RTCore64.sys      Tue Sep  6 08:24:50 2011 (4E661112)
Rt630x64.sys      Wed Oct 19 08:12:55 2011 (4E9EBEC7)
athrx.sys         Wed Mar 21 23:26:22 2012 (4F6A9BDE)
aswFsBlk.SYS      Tue Jul  3 12:13:12 2012 (4FF31A18)
aswMonFlt.sys     Tue Jul  3 12:13:24 2012 (4FF31A24)
aswrdr2.sys       Tue Jul  3 12:13:43 2012 (4FF31A37)
AtihdW86.sys      Tue Jul 17 03:34:09 2012 (50051571)
intelppm.sys      Wed Jul 25 22:26:48 2012 (5010AAE8)
tm.sys            Wed Jul 25 22:29:01 2012 (5010AB6D)
atikmpag.sys      Fri Jul 27 21:14:47 2012 (50133D07)
atikmdag.sys      Fri Jul 27 21:48:09 2012 (501344D9)
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
**************************Fri Aug 17 10:59:53.464 2012 (UTC - 4:00)**************************
ISODrv64.sys      Thu Jan 28 22:39:02 2010 (4B625856)

**usasma** · 08-18-2012

I posted a longer post with lot's of links.
It'll show up after a moderator approves it.
Un-install:
- RealTemp
- Riva Tuner (also known as EVGA Precision or MSI Afterburner)
- ISODrive

**kashmir** · 08-18-2012

Thanks for replying

I have disabled Wired Networking, because I thought that it could be related, I also have WiFi adapter, so connecting to internet is not a problem.
Before uninstalling I enabled a driver verifier, as guys from other forums suggested. On the next boot I got a BSOD because of RTCore64.sys. I booted from safe mode and removed software as you suggested.

Now I have uninstalled MSI Afterburner/RealTemp/UltraISO... Driver verifier is still enabled, no BSODs on boot.

Hope that was a problem. Time will show.
But the bad thing is that I was controlling my VGA fan speed with MSI afterburner, because default fan speed controller sucks and VGA gets hot.

If I'm not mistaken EVGA Precision uses just the same drivers to control fan speed, so right now I have no alternatives...

**kashmir** · 08-18-2012

Thank You!
I'll let you know in a day or two if i get BSODs or not.

**usasma** · 08-18-2012

Make sure to turn off Driver Verifier - otherwise any little glitches will cause the system to BSOD.

EVGA Precision, RivaTuner, and MSI Afterburner all use the same software - so stay away from it.
My kids use the Catalyst Control Center software for their fans - but I've seen that cause problems also.

**kashmir** · 08-22-2012

Hello Again

So 3 days have passed and do you want to know how many BSODs I experienced? - NONE!

BTW, UltraISO is back - no problems.
MSI Afterburner/Realtemp got replaced with SpeedFan - With correct configuration it can control GPU fan speed as well as MSI Afterburner (adding it to startup is another story, because it needs administrator privileges, so moving shortcut to Startup folder didn't work. I've added Speedfan to startup with Task Scheduler).

The only thing I'm lacking right now is in game on-screen-display, but I can live with that.

Thank You.

Thread: Windows 8 BSOD - SYSTEM_THREAD_EXCEPTION_NOT_HANDLED - ndu.sys

LinkBack

Thread Tools

Search Thread