Blue Screen of Death caused by ndisrd.sys

Question

Hi,

I'm experiencing frequent BSOD crashes that appear to be caused by ndisrd.sys Please see the debug analysis below:

DRIVER_VERIFIER_DETECTED_VIOLATION (c4)

A device driver attempting to corrupt the system has been caught.  This is

because the driver was specified in the registry as being suspect (by the

administrator) and the kernel has enabled substantial checking of this driver.

If the driver attempts to corrupt the system, bugchecks 0xC4, 0xC1 and 0xA will

be among the most commonly seen crashes.

Arguments:

Arg1: 0000000000000040, Acquiring a spinlock at IRQL < DISPATCH_LEVEL.

Arg2: 0000000000000000, Current IRQL

Arg3: fffff980050f4c60, Spinlock address

Arg4: 0000000000000000

Debugging Details:

---

*** ERROR: Module load completed but symbols could not be loaded for mssmbios.sys

*** WARNING: Unable to verify timestamp for ndisrd.sys

*** ERROR: Module load completed but symbols could not be loaded for ndisrd.sys

BUGCHECK_STR:  0xc4_40

CURRENT_IRQL:  0

CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  VERIFIER_ENABLED_VISTA_MINIDUMP

PROCESS_NAME:  NetSvcHelp.exe

LAST_CONTROL_TRANSFER:  from fffff8000396b3dc to fffff800034dcc40

STACK_TEXT: 

fffff8800bf59688 fffff8000396b3dc : 00000000000000c4 0000000000000040 0000000000000000 fffff980050f4c60 : nt!KeBugCheckEx

fffff8800bf59690 fffff8000397c1af : 0000000000000002 fffffa800ca00f28 0000000000000000 fffff8000397958b : nt!VerifierBugCheckIfAppropriate+0x3c

fffff8800bf596d0 fffff88004228716 : fffff8800bf597c0 fffff980050f4c10 fffffa8010f71ef0 fffff8800bf59798 : nt!VerifierKeAcquireSpinLockAtDpcLevel+0xa0

fffff8800bf59730 fffff8800bf597c0 : fffff980050f4c10 fffffa8010f71ef0 fffff8800bf59798 0000000000000000 : ndisrd+0x2716

fffff8800bf59738 fffff980050f4c10 : fffffa8010f71ef0 fffff8800bf59798 0000000000000000 fffff88004229b99 : 0xfffff880`0bf597c0

fffff8800bf59740 fffffa8010f71ef0 : fffff8800bf59798 0000000000000000 fffff88004229b99 0000000000010001 : 0xfffff980`050f4c10

fffff8800bf59748 fffff8800bf59798 : 0000000000000000 fffff88004229b99 0000000000010001 fffffa800f8861c0 : 0xfffffa80`10f71ef0

fffff8800bf59750 0000000000000000 : fffff88004229b99 0000000000010001 fffffa800f8861c0 0000000000000001 : 0xfffff880`0bf59798

STACK_COMMAND:  kb

FOLLOWUP_IP:

ndisrd+2716

fffff880`04228716 ??              ???

SYMBOL_STACK_INDEX:  3

SYMBOL_NAME:  ndisrd+2716

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: ndisrd

IMAGE_NAME:  ndisrd.sys

DEBUG_FLR_IMAGE_TIMESTAMP:  4fc6df85

FAILURE_BUCKET_ID:  X64_0xc4_40_VRF_ndisrd+2716

BUCKET_ID:  X64_0xc4_40_VRF_ndisrd+2716

Followup: MachineOwner

---

2: kd> lmvm ndisrd

start             end                 module name

fffff88004226000 fffff88004230000   ndisrd   T (no symbols)          

    Loaded symbol image file: ndisrd.sys

    Image path: \SystemRoot\system32\DRIVERS\ndisrd.sys

    Image name: ndisrd.sys

    Timestamp:        Thu May 31 04:03:33 2012 (4FC6DF85)

    CheckSum:         0000A7D8

    ImageSize:        0000A000

    Translations:     0000.04b0 0000.04e4 0409.04b0 0409.04e4

I have checked the memory in my PC and performed other health checks such as Virus/Malware Detection and nothing untoward has been found.

Please let me know if you require any further information.

Many thanks,

James Klech

Answer 1

Hi James,

You are Welcome.

I am glad to hear that the issue is resolved!

Your efforts to resolve this issue is very much appreciated and the issue could be caused due to the driver conflicting with the system hardware.

Thanks for sharing your information about how you had fixed the issue.

In future if you come across any issues regarding Windows, please feel free to post your query here on Microsoft Community, we will be more than happy to assist you.

Answer 2

Hi,

Many thanks for your assistance in resolving this issue. I performed a complete reinstall of the Operating System with just the minimal external devices/hardware attached. While installing the Drivers from the ASUS Motherboard Disk I made sure that the Realtek Semi-Conductor driver wasn't installed as this appeared to be causing the issue according to the debug analysis. I have not had any BSOD issues since.

Have you any idea why this driver was causing the failure?

Thanks again, your assistance was much appreciated.

James

Answer 3

Hi James,

---

Thank you for posting your question in Microsoft Community.

From the issue descriptions, it seems that you are receiving frequent Blue Screen of Death caused by ndisrd.sys with “DRIVER_VERIFIER_DETECTED_VIOLATION (c4)”.

I can imagine the inconvenience you have experienced. I will help you in fixing the issue.

I would suggest you to remove all the external devices except keyboard and mouse and check if it helps.

I would also suggest you to follow the steps in the below link based on the error that you have received.

It also has an article for resolving blue screen errors in Windows 7 and follow the steps in the below link.

Bug Check 0xC4: DRIVER_VERIFIER_DETECTED_VIOLATION (Windows Debuggers):

http://msdn.microsoft.com/en-us/library/windows/hardware/ff560187(v=vs.85).aspx

**Note:**When you perform a system restore to a previous state, the programs and updates installed thereafter will be removed.

---

Important: While performing chkdsk on the hard drive if any bad sectors are found on the hard drive when chkdsk tries to repair that sector if any data available on that might be lost.

Warning: Before you perform a reinstall of Windows 7, you should be prepared for a worst case scenario that results in your existing data on your computer being deleted. This data includes personal data, settings, hardware driver information, and software programs. If a worst case scenario occurs, you may have to reinstall all programs. Make sure that you back up personal data to disks or to other external storage devices before you reinstall the operating system.

I hope the above information helps you.

Your reply is very important for us to ensure a proper resolution.

In future if you come across any issues regarding Windows, please feel free to post your query here on Microsoft Community, we will be more than happy to assist you.