ky.sys kmode exception not handled

Question

Win 8.1 is crashing every day now.

Answer 1

Thanks!

Most if not all of the bug checks are of the KMODE_EXCEPTION_NOT_HANDLED (1e) bug check.

This indicates that a kernel-mode program generated an exception which the error handler did not catch.

0: kd> ln 8c9c9b5d

(8c9c998e)   ks!CBaseUnknown::NonDelegatedRelease+0x1cf  |  (8c9c9d51)   ks!CBaseUnknown::NonDelegatedAddRef

The exception occurred in ks!CBaseUnknown::NonDelegatedRelease+0x1cf.

----------------------------

1. Remove and replace Trusteer with Windows Defender ASAP as it is very likely causing these crashes.

Windows Defender (how to turn on after removal) -http://www.eightforums.com/tutorials/21962-windows-defender-turn-off-windows-8-a.html

2.

0: kd> lmvm pfc

start    end        module name

8cc30000 8cc32460   pfc        (deferred)             

    Image path: \SystemRoot\system32\drivers\pfc.sys

    Image name: pfc.sys

    Timestamp:        Mon Feb 25 02:35:19 2002

Padus ASPI Shell or Adobe Audition (most likely associated with an older CD/DVD burning program). It's a driver dated from 2002, way!!! too old to function with the OS. Please uninstall as well ASAP!

Regards,

Patrick

Answer 2

You can try uninstalling the drivers for your CD/DVD via DevMan and then reinstalling.

Regards,

Patrick

Answer 3

Hi Patrick,

Thanks for the help.

I removed Trusteer which was my Bank Security system......

also pfc.sys which was dated 2002.

Unfortunately this has dissed my two DVD drives

and I don't know how to pick them up again.

Device manager states that drivers are ok & up to date.

Google search said something to do with registry....

Answer 4

Hi Patrick, Thanks for that.

Onedrive link is;

https://onedrive.live.com/redir?resid=84E5C0E3F62CB2B6%211220

Regards

Answer 5

Hi,

In order to assist you, we will need the .DMP files to analyze what exactly occurred at the time of the crash, etc.

If you don't know where .DMP files are located, here's how to get to them:

1. Navigate to the %systemroot%\Minidump folder.

2. Copy any and all DMP files in the Minidump folder to your Desktop and then zip up these files.

3. Upload the zip containing the .DMP files to Onedrive or a hosting site of your choice and paste in your reply. Preferred sites: Onedrive, Mediafire, Dropbox, etc. Nothing with wait-timers, download managers, etc.

4 (optional): The type of .DMP files located in the Minidump folder are known as Small Memory Dumps. In %systemroot% there will be what is known as a Kernel-Dump (if your system is set to generate). It is labeled MEMORY.DMP. The difference between Small Memory Dumps and Kernel-Dumps in the simplest definition is a Kernel-Dump contains much more information at the time of the crash, therefore allowing further debugging of your issue. If your upload speed permits it, and you aren't going against any strict bandwidth and/or usage caps, etc, the Kernel-Dump is the best choice. Do note that Kernel-Dumps are much larger in size due to containing much more info, which is why I mentioned upload speed, etc.

If you are going to use Onedrive but don't know how to upload to it, please visit the following:

Upload photos and files to Onedrive.

After doing that, to learn how to share the link to the file if you are unaware, please visit the following link - Share files and folders and change permissions and view 'Get a link'.

Please note that any "cleaner" programs such as TuneUpUtilities, CCleaner, etc, by default will delete .DMP files upon use. With this said, if you've run such software, you will need to allow the system to crash once again to generate a crash dump.

If your computer is not generating .DMP files, please do the following:

1. Start > type %systemroot% which should show the Windows folder, click on it. Once inside that folder, ensure there is a Minidump folder created. If not, CTRL-SHIFT-N to make a New Folder and name it Minidump.

2. Windows key + Pause key. This should bring up System. Click Advanced System Settings on the left > Advanced > Performance > Settings > Advanced > Ensure there's a check-mark for 'Automatically manage paging file size for all drives'.

3. Windows key + Pause key. This should bring up System. Click Advanced System Settings on the left > Advanced > Startup and Recovery > Settings > System Failure > ensure there is a check mark next to 'Write an event to the system log'.

Ensure Small Memory Dump is selected and ensure the path is %systemroot%\Minidump.

4. Double check that the WERS is ENABLED:

Start > Search > type services.msc > Under the name tab, find Windows Error Reporting Service > If the status of the service is not Started then right click it and select Start. Also ensure that under Startup Type it is set to Automatic rather than Manual. You can do this by right clicking it, selecting properties, and under General selecting startup type to 'Automatic', and then click Apply.

If you cannot get into normal mode to do any of this, please do this via Safe Mode.

Regards,

Patrick