Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Windows 10 crash dump file help


  • Please log in to reply
8 replies to this topic

#1 amn70

amn70

  • Members
  • 23 posts
  • OFFLINE
  •  
  • Local time:06:38 AM

Posted 08 March 2016 - 11:16 PM

Just did clean WIndows 10 64 bit install on a Dell Inspiron 545S with 7GB of RAM and Intel Core 2 Duo E7500. Machine originally came with Win7 Home 32 bit Edition. It actually came with 6GB but threw another Kingston 1 gig chip in that I had. The original chips were pair of 2GB Elpida brand chips along with a 2GB Kingston chip in the 3rd slot. Thought it was odd that Dell used 2 different brands of ram during manufacture. So I put my 1 gig Kingston chip in 4th slot. It spontaneously reboots at random and usually does not record anything about why in the event viewer however a couple of times thankfully it did.  Just figured I would post the dump file info to get some opinions. BTW, ran one pass on Memtest386 and there were no errors. Have not run a test overnight which I plan to do tnite. 

 

Thanks in advance,

Adam

 

 

 

==================================================
Dump File         : 030816-21531-01.dmp
Crash Time        : 3/8/2016 10:08:38 PM
Bug Check String  : KMODE_EXCEPTION_NOT_HANDLED
Bug Check Code    : 0x0000001e
Parameter 1       : ffffffff`c0000005
Parameter 2       : fffff801`04cb3010
Parameter 3       : 00000000`00000000
Parameter 4       : ffffffff`ffffffff
Caused By Driver  : ntoskrnl.exe
Caused By Address : ntoskrnl.exe+142450
File Description  : 
Product Name      : 
Company           : 
File Version      : 
Processor         : x64
Crash Address     : ntoskrnl.exe+142450
Stack Address 1   : 
Stack Address 2   : 
Stack Address 3   : 
Computer Name     : 
Full Path         : C:\Windows\Minidump\030816-21531-01.dmp
Processors Count  : 2
Major Version     : 15
Minor Version     : 10586
Dump File Size    : 295,324
Dump File Time    : 3/8/2016 10:10:27 PM
==================================================
 
==================================================
Dump File         : 030816-24203-01.dmp
Crash Time        : 3/8/2016 12:25:24 AM
Bug Check String  : MEMORY_MANAGEMENT
Bug Check Code    : 0x0000001a
Parameter 1       : 00000000`00005003
Parameter 2       : fffff799`40000000
Parameter 3       : 00000000`00001901
Parameter 4       : 000000c7`30403202
Caused By Driver  : ntoskrnl.exe
Caused By Address : ntoskrnl.exe+141f80
File Description  : 
Product Name      : 
Company           : 
File Version      : 
Processor         : x64
Crash Address     : ntoskrnl.exe+141f80
Stack Address 1   : 
Stack Address 2   : 
Stack Address 3   : 
Computer Name     : 
Full Path         : C:\Windows\Minidump\030816-24203-01.dmp
Processors Count  : 2
Major Version     : 15
Minor Version     : 10586
Dump File Size    : 295,420
Dump File Time    : 3/8/2016 12:27:05 AM
==================================================

Edited by amn70, 08 March 2016 - 11:18 PM.


BC AdBot (Login to Remove)

 


#2 usasma

usasma

    Still visually handicapped (avatar is memory developed by my Dad


  • BSOD Kernel Dump Expert
  • 25,091 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Southeastern CT, USA
  • Local time:07:38 AM

Posted 09 March 2016 - 09:12 AM

FYI - here's the pinned topic that contains info about waiting for a response:  http://www.eightforums.com/bsod-crashes-debugging/48165-have-you-been-waiting-response.html

Please run these free hardware diagnostics: 

 


My browser caused a flood of traffic, sio my IP address was banned. Hope to fix it soon. Will get back to posting as soon as Im able.

- John  (my website: http://www.carrona.org/ )**If you need a more detailed explanation, please ask for it. I have the Knack. **  If I haven't replied in 48 hours, please send me a message. My eye problems have recently increased and I'm having difficult reading posts. (23 Nov 2017)FYI - I am completely blind in the right eye and ~30% blind in the left eye.<p>If the eye problems get worse suddenly, I may not be able to respond.If that's the case and help is needed, please PM a staff member for assistance.

#3 amn70

amn70
  • Topic Starter

  • Members
  • 23 posts
  • OFFLINE
  •  
  • Local time:06:38 AM

Posted 10 March 2016 - 12:13 AM

Just to update on where things stand. I removed both Kingston chips last night and ran Memtest386 overnight. By morning it had done 9 passes with no errors. Started wondering if one the Kingston chips no longer installed was somehow responsible so left them out and used the computer all day today. Everything was fine all day but about 11:30pm, just a short time ago it happened again. Here is the dump file it generated. Oh and just wanted to mention I am running a add-on video card, an Nvidia GeForce 210 with the latest drivers directly from Nvidia. Doubt its related but figured I should mention it.

Below is the new dump. Seems the same as the earlier ones although the Bug Check String is now IRQL_NOT_LESS_OR_EQUAL.
 

 

==================================================
Dump File         : 030916-18578-01.dmp
Crash Time        : 3/9/2016 11:46:25 PM
Bug Check String  : IRQL_NOT_LESS_OR_EQUAL
Bug Check Code    : 0x0000000a
Parameter 1       : ffffe000`d1167738
Parameter 2       : 00000000`00000002
Parameter 3       : 00000000`00000000
Parameter 4       : fffff803`7d048ea2
Caused By Driver  : ntoskrnl.exe
Caused By Address : ntoskrnl.exe+142760
File Description  : 
Product Name      : 
Company           : 
File Version      : 
Processor         : x64
Crash Address     : ntoskrnl.exe+142760
Stack Address 1   : 
Stack Address 2   : 
Stack Address 3   : 
Computer Name     : 
Full Path         : C:\Windows\Minidump\030916-18578-01.dmp
Processors Count  : 2
Major Version     : 15
Minor Version     : 10586
Dump File Size    : 294,532
Dump File Time    : 3/9/2016 11:47:24 PM
==================================================

Edited by amn70, 10 March 2016 - 12:14 AM.


#4 usasma

usasma

    Still visually handicapped (avatar is memory developed by my Dad


  • BSOD Kernel Dump Expert
  • 25,091 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Southeastern CT, USA
  • Local time:07:38 AM

Posted 11 March 2016 - 05:48 AM

Sorry for forgetting the link for the hardware diagnostics.  Here it is:  http://www.carrona.org/hwdiag.html

Also, I'm sorry for not completely responding to your initial post - but I was headed out of town shortly after posting that.

 

Please run this report collecting tool so that we can provide a complete analysis:  http://omgdebugging.com/bsod-inspector/
When done a Notepad document will open with the name of the file and it's location. (By default it'll be a .zip file located on your Desktop)
Simply upload the .zip file with your next post and we'll move on from there.

If it doesn't work for you, then please try this:  http://www.bleepingcomputer.com/forums/t/576314/blue-screen-of-death-bsod-posting-instructions-windows-10-81-8-7-vista/



 


My browser caused a flood of traffic, sio my IP address was banned. Hope to fix it soon. Will get back to posting as soon as Im able.

- John  (my website: http://www.carrona.org/ )**If you need a more detailed explanation, please ask for it. I have the Knack. **  If I haven't replied in 48 hours, please send me a message. My eye problems have recently increased and I'm having difficult reading posts. (23 Nov 2017)FYI - I am completely blind in the right eye and ~30% blind in the left eye.<p>If the eye problems get worse suddenly, I may not be able to respond.If that's the case and help is needed, please PM a staff member for assistance.

#5 amn70

amn70
  • Topic Starter

  • Members
  • 23 posts
  • OFFLINE
  •  
  • Local time:06:38 AM

Posted 11 March 2016 - 08:52 PM

Sorry for forgetting the link for the hardware diagnostics.  Here it is:  http://www.carrona.org/hwdiag.html

Also, I'm sorry for not completely responding to your initial post - but I was headed out of town shortly after posting that.

 

Please run this report collecting tool so that we can provide a complete analysis:  http://omgdebugging.com/bsod-inspector/
When done a Notepad document will open with the name of the file and it's location. (By default it'll be a .zip file located on your Desktop)
Simply upload the .zip file with your next post and we'll move on from there.

If it doesn't work for you, then please try this:  http://www.bleepingcomputer.com/forums/t/576314/blue-screen-of-death-bsod-posting-instructions-windows-10-81-8-7-vista/

 

 

 

Ok, below is the link to zip containing the info from the BSOD Inspector. A couple of other things I want to mention. First of all the machine remained stable all day yesterday but this evening I had one freeze up where I had to restart the machine. No error message of any kind recorded. Screen just froze. Shortly after I rebooted and got back up an running the machine spontanously rebooted. In either case no errors in event viewer other than an error saying the machine did not shut down correctly. Also no dump files generated in either case either. Wanted to also mention that I ran BurnInTest the other day and everything passed with no errors. Not sure what you want me to run with the Carrona stuff as there were multiple programs there all of which seemed to run tests similar to what BurnInTest runs.

 

BSOD Inspector file

https://drive.google.com/file/d/0ByPCu87VpeOZd1l1R0x3OUg2NUU/view?usp=sharing



 



#6 usasma

usasma

    Still visually handicapped (avatar is memory developed by my Dad


  • BSOD Kernel Dump Expert
  • 25,091 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Southeastern CT, USA
  • Local time:07:38 AM

Posted 13 March 2016 - 03:00 PM

The Carrona stuff is mine - I own that website.

I have worked with those tests for a long time, and I am comfortable with my understanding of what they do/don't do.

I don't know what the BurnInTest does and don't have the time to investigate each of the different tests that are available all over the web.

From it's title, BurnInTest appears to be a stress test - while the diagnostics that I suggest are a combination of diagnostics and stress tests.

 

My questions for you are what tests does the BurnInTest duplicate?  Are the testing algorithms the same?

For example, MemTest86+ tests RAM.  But so does Prime95's Blend test.
And memory (RAM) can pass one and then fail the other - does BurnInTest offer those options and does it run the same tests?

 

On to the analysis.......

 

Your UEFI/BIOS (version A12) dates from 2009.  Please check at the manufacturer's website to see if there are any UEFI/BIOS updates available for your system.  If you are able to install the update through Windows (without booting from an external drive), then go ahead and update it.  WARNING - if the computer might shut down during this procedure, please don't do it, as this may physically damage the computer and prevent it from booting.

Only 5 Windows Update hotfixes installed.  Most build 10586 (TH2/1511) systems have more than this.  Please visit Windows Update and get ALL available Windows Updates.
Also, there's a lot of recent Windows Update failures in the WER section of the MSINFO32 report.

 

Out of 5 memory dumps there were 5 different BSOD  (aka STOP or BugCheck) error codes.  The differing error codes are usually symptomatic of a lower level problem within the system. They are usually caused by one of these things (the list is not in any sort of order):
- borked (broken) hardware (several different procedures used to isolate the problem device)
- BIOS issues (check for updates at the motherboard manufacturer's website)
- overclocking/overheating - You'll know if you're overclocking or not. If uncertain we can suggest things to check.
- dirt/dust/hair/fur/crud inside the case.  Blow out the case/vents with canned air (DO NOT use an air compressor or vacuum as they can cause damage to the system)
- missing Windows Updates
- compatibility issues (3rd party hardware/drivers), older systems, or even pirated systems
- low-level driver problems
- or even malware (scanned for when we ask for hardware diagnostics from http://www.carrona.org/initdiag.html or http://www.carrona.org/hwdiag.html ).

Please get a head start on the hardware diagnostics - they are located here:  http://www.carrona.org/hwdiag.html

Your Brother drivers date from 2006 and likely aren't compatible w/W10.
Please uninstall the Brother software and see if that stops the BSOD's

If you wish to reinstall it, please visit the Brother website and download the latest, W10 compatible drivers for your Brother device.

 

Post back with the results of the hardware diagnostics and we'll move on from there.

 

Analysis:
The following is for informational purposes only.
**************************Thu Mar 10 00:46:25.071 2016 (UTC - 4:00)**************************
Loading Dump File [C:\Users\John\SysnativeBSODApps\030916-18578-01.dmp]
Windows 10 Kernel Version 10586 MP (2 procs) Free x64
Built by: 10586.162.amd64fre.th2_release_sec.160223-1728
System Uptime: 0 days 0:07:58.808
Probably caused by : memory_corruption ( nt!MiIdentifyPfn+1e2 )
BugCheck A, {ffffe000d1167738, 2, 0, fffff8037d048ea2}
BugCheck Info: IRQL_NOT_LESS_OR_EQUAL (a)
Arguments:
Arg1: ffffe000d1167738, memory referenced
Arg2: 0000000000000002, IRQL
Arg3: 0000000000000000, bitfield :
    bit 0 : value 0 = read operation, 1 = write operation
    bit 3 : value 0 = not an execute operation, 1 = execute operation (only on chips which support this level of status)
Arg4: fffff8037d048ea2, address which referenced memory
BUGCHECK_STR:  AV
DEFAULT_BUCKET_ID:  WIN8_DRIVER_FAULT
PROCESS_NAME:  svchost.exe
FAILURE_BUCKET_ID:  AV_nt!MiIdentifyPfn
CPUID:        "Intel® Core™2 Duo CPU     E7500  @ 2.93GHz"
MaxSpeed:     2930
CurrentSpeed: 2926
  BIOS Version                  A11
  BIOS Release Date             09/07/2009
  Manufacturer                  Dell Inc.
  Product Name                  Inspiron 545s
  Baseboard Product             0T287N
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
**************************Thu Mar 10 00:10:35.506 2016 (UTC - 4:00)**************************
Loading Dump File [C:\Users\John\SysnativeBSODApps\030916-17671-01.dmp]
Windows 10 Kernel Version 10586 MP (2 procs) Free x64
Built by: 10586.162.amd64fre.th2_release_sec.160223-1728
System Uptime: 0 days 6:32:26.245
Probably caused by : Pool_Corruption ( nt!ExDeferredFreePool+a0 )
BugCheck C5, {60000000, 2, 0, fffff80378c36840}
BugCheck Info: DRIVER_CORRUPTED_EXPOOL (c5)
Arguments:
Arg1: 0000000060000000, memory referenced
Arg2: 0000000000000002, IRQL
Arg3: 0000000000000000, value 0 = read operation, 1 = write operation
Arg4: fffff80378c36840, address which referenced memory
BUGCHECK_STR:  0xC5_2
PROCESS_NAME:  chrome.exe
FAILURE_BUCKET_ID:  0xC5_2_nt!ExDeferredFreePool
CPUID:        "Intel® Core™2 Duo CPU     E7500  @ 2.93GHz"
MaxSpeed:     2930
CurrentSpeed: 2926
  BIOS Version                  A11
  BIOS Release Date             09/07/2009
  Manufacturer                  Dell Inc.
  Product Name                  Inspiron 545s
  Baseboard Product             0T287N
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
**************************Wed Mar  9 12:44:20.540 2016 (UTC - 4:00)**************************
Loading Dump File [C:\Users\John\SysnativeBSODApps\030916-18593-01.dmp]
Windows 10 Kernel Version 10586 MP (2 procs) Free x64
Built by: 10586.122.amd64fre.th2_release_inmarket.160222-1549
System Uptime: 0 days 1:19:04.277
Probably caused by : memory_corruption ( nt!MmQueryVirtualMemory+21b )
BugCheck 3B, {c0000005, fffff8016cdf3f2b, ffffd0009281ffb0, 0}
BugCheck Info: SYSTEM_SERVICE_EXCEPTION (3b)
Arguments:
Arg1: 00000000c0000005, Exception code that caused the bugcheck
Arg2: fffff8016cdf3f2b, Address of the instruction which caused the bugcheck
Arg3: ffffd0009281ffb0, Address of the context record for the exception that caused the bugcheck
Arg4: 0000000000000000, zero.
BUGCHECK_STR:  0x3B
DEFAULT_BUCKET_ID:  WIN8_DRIVER_FAULT
PROCESS_NAME:  SearchUI.exe
FAILURE_BUCKET_ID:  0x3B_nt!MmQueryVirtualMemory
CPUID:        "Intel® Core™2 Duo CPU     E7500  @ 2.93GHz"
MaxSpeed:     2930
CurrentSpeed: 2926
  BIOS Version                  A11
  BIOS Release Date             09/07/2009
  Manufacturer                  Dell Inc.
  Product Name                  Inspiron 545s
  Baseboard Product             0T287N
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
**************************Tue Mar  8 23:08:38.141 2016 (UTC - 4:00)**************************
Loading Dump File [C:\Users\John\SysnativeBSODApps\030816-21531-01.dmp]
Windows 10 Kernel Version 10586 MP (2 procs) Free x64
Built by: 10586.122.amd64fre.th2_release_inmarket.160222-1549
System Uptime: 0 days 1:00:51.907
*** WARNING: Unable to verify timestamp for win32kfull.sys
*** ERROR: Module load completed but symbols could not be loaded for win32kfull.sys
Probably caused by : win32kfull.sys ( win32kfull+c1eff )
BugCheck 1E, {ffffffffc0000005, fffff80104cb3010, 0, ffffffffffffffff}
BugCheck Info: KMODE_EXCEPTION_NOT_HANDLED (1e)
Arguments:
Arg1: ffffffffc0000005, The exception code that was not handled
Arg2: fffff80104cb3010, The address that the exception occurred at
Arg3: 0000000000000000, Parameter 0 of the exception
Arg4: ffffffffffffffff, Parameter 1 of the exception
BUGCHECK_STR:  0x1E_c0000005_R
PROCESS_NAME:  explorer.exe
FAILURE_BUCKET_ID:  0x1E_c0000005_R_win32kfull!Unknown_Function
CPUID:        "Intel® Core™2 Duo CPU     E7500  @ 2.93GHz"
MaxSpeed:     2930
CurrentSpeed: 2926
  BIOS Version                  A11
  BIOS Release Date             09/07/2009
  Manufacturer                  Dell Inc.
  Product Name                  Inspiron 545s
  Baseboard Product             0T287N
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
**************************Tue Mar  8 01:25:24.557 2016 (UTC - 4:00)**************************
Loading Dump File [C:\Users\John\SysnativeBSODApps\030816-24203-01.dmp]
Windows 10 Kernel Version 10586 MP (2 procs) Free x64
Built by: 10586.0.amd64fre.th2_release.151029-1700
System Uptime: 0 days 4:35:16.323
*** WARNING: Unable to verify timestamp for win32k.sys
*** ERROR: Module load completed but symbols could not be loaded for win32k.sys
Probably caused by : ntkrnlmp.exe ( nt! ?? ::FNODOBFM::`string'+1e46a )
BugCheck 1A, {5003, fffff79940000000, 1901, c730403202}
BugCheck Info: MEMORY_MANAGEMENT (1a)
Arguments:
Arg1: 0000000000005003, The subtype of the bugcheck.
Arg2: fffff79940000000
Arg3: 0000000000001901
Arg4: 000000c730403202
BUGCHECK_STR:  0x1a_5003
PROCESS_NAME:  TiWorker.exe
FAILURE_BUCKET_ID:  0x1a_5003_nt!_??_::FNODOBFM::_string_
CPUID:        "Intel® Core™2 Duo CPU     E7500  @ 2.93GHz"
MaxSpeed:     2930
CurrentSpeed: 2926
  BIOS Version                  A11
  BIOS Release Date             09/07/2009
  Manufacturer                  Dell Inc.
  Product Name                  Inspiron 545s
  Baseboard Product             0T287N
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``


3rd Party Drivers:
The following is for information purposes only.
**************************Thu Mar 10 00:46:25.071 2016 (UTC - 4:00)**************************
BrSerId.sys                 Sun Aug  6 21:51:11 2006 (44D69C8F)
BrUsbSer.sys                Wed Aug  9 08:11:02 2006 (44D9D0D6)
lvbflt64.sys                Mon Oct 22 22:10:38 2012 (5085FC9E)
lvrs64.sys                  Mon Oct 22 22:11:24 2012 (5085FCCC)
lvuvc64.sys                 Mon Oct 22 22:12:08 2012 (5085FCF8)
nvhda64v.sys                Thu Nov 28 08:38:09 2013 (52974741)
rt640x64.sys                Wed Oct  7 11:03:55 2015 (5615345B)
nvlddmkm.sys                Tue Oct 13 11:43:56 2015 (561D26BC)
intelppm.sys                Thu Oct 29 22:09:51 2015 (5632D16F)
eudskacs.sys                Wed Dec  9 16:51:42 2015 (5668A26E)
eubakup.sys                 Wed Dec  9 16:51:48 2015 (5668A274)
EUBKMON.sys                 Wed Dec  9 16:52:08 2015 (5668A288)
EuFdDisk.sys                Wed Dec  9 16:52:13 2015 (5668A28D)

 

http://www.carrona.org/drivers/driver.php?id=BrSerId.sys
http://www.carrona.org/drivers/driver.php?id=BrUsbSer.sys
http://www.carrona.org/drivers/driver.php?id=lvbflt64.sys
http://www.carrona.org/drivers/driver.php?id=lvrs64.sys
http://www.carrona.org/drivers/driver.php?id=lvuvc64.sys
http://www.carrona.org/drivers/driver.php?id=nvhda64v.sys
http://www.carrona.org/drivers/driver.php?id=rt640x64.sys
http://www.carrona.org/drivers/driver.php?id=nvlddmkm.sys
http://www.carrona.org/drivers/driver.php?id=intelppm.sys
http://www.carrona.org/drivers/driver.php?id=eudskacs.sys
http://www.carrona.org/drivers/driver.php?id=eubakup.sys
http://www.carrona.org/drivers/driver.php?id=EUBKMON.sys
http://www.carrona.org/drivers/driver.php?id=EuFdDisk.sys


 


My browser caused a flood of traffic, sio my IP address was banned. Hope to fix it soon. Will get back to posting as soon as Im able.

- John  (my website: http://www.carrona.org/ )**If you need a more detailed explanation, please ask for it. I have the Knack. **  If I haven't replied in 48 hours, please send me a message. My eye problems have recently increased and I'm having difficult reading posts. (23 Nov 2017)FYI - I am completely blind in the right eye and ~30% blind in the left eye.<p>If the eye problems get worse suddenly, I may not be able to respond.If that's the case and help is needed, please PM a staff member for assistance.

#7 amn70

amn70
  • Topic Starter

  • Members
  • 23 posts
  • OFFLINE
  •  
  • Local time:06:38 AM

Posted 15 March 2016 - 03:37 PM

I still have to get around to running the Caronna stuff but figured I should mention one other thing. On a couple of occasions when the machine spontaneously reboots it fails to reboot and instead comes up with Recovery Windows with an boot error as shown in the link below. Only solution for me to get back to Windows is to boot to the Windows 10 installer that have on a bootable flash drive and run Repair and run Startup Repair which quickly fixes it and I can then return to Windows.
https://drive.google.com/file/d/0ByPCu87VpeOZRlVwb1o0WXZuY0k/view?usp=sharing

 

Also these reboots and even the BSOD's occur even if the computer is just sitting idle when I am not sitting at it.

 

 

The Carrona stuff is mine - I own that website.

I have worked with those tests for a long time, and I am comfortable with my understanding of what they do/don't do.

I don't know what the BurnInTest does and don't have the time to investigate each of the different tests that are available all over the web.

From it's title, BurnInTest appears to be a stress test - while the diagnostics that I suggest are a combination of diagnostics and stress tests.

 

My questions for you are what tests does the BurnInTest duplicate?  Are the testing algorithms the same?

For example, MemTest86+ tests RAM.  But so does Prime95's Blend test.
And memory (RAM) can pass one and then fail the other - does BurnInTest offer those options and does it run the same tests?

 

On to the analysis.......

 

Your UEFI/BIOS (version A12) dates from 2009.  Please check at the manufacturer's website to see if there are any UEFI/BIOS updates available for your system.  If you are able to install the update through Windows (without booting from an external drive), then go ahead and update it.  WARNING - if the computer might shut down during this procedure, please don't do it, as this may physically damage the computer and prevent it from booting.

Only 5 Windows Update hotfixes installed.  Most build 10586 (TH2/1511) systems have more than this.  Please visit Windows Update and get ALL available Windows Updates.
Also, there's a lot of recent Windows Update failures in the WER section of the MSINFO32 report.

 

Out of 5 memory dumps there were 5 different BSOD  (aka STOP or BugCheck) error codes.  The differing error codes are usually symptomatic of a lower level problem within the system. They are usually caused by one of these things (the list is not in any sort of order):
- borked (broken) hardware (several different procedures used to isolate the problem device)
- BIOS issues (check for updates at the motherboard manufacturer's website)
- overclocking/overheating - You'll know if you're overclocking or not. If uncertain we can suggest things to check.
- dirt/dust/hair/fur/crud inside the case.  Blow out the case/vents with canned air (DO NOT use an air compressor or vacuum as they can cause damage to the system)
- missing Windows Updates
- compatibility issues (3rd party hardware/drivers), older systems, or even pirated systems
- low-level driver problems
- or even malware (scanned for when we ask for hardware diagnostics from http://www.carrona.org/initdiag.html or http://www.carrona.org/hwdiag.html ).

Please get a head start on the hardware diagnostics - they are located here:  http://www.carrona.org/hwdiag.html

Your Brother drivers date from 2006 and likely aren't compatible w/W10.
Please uninstall the Brother software and see if that stops the BSOD's

If you wish to reinstall it, please visit the Brother website and download the latest, W10 compatible drivers for your Brother device.

 

Post back with the results of the hardware diagnostics and we'll move on from there.

 

Analysis:
The following is for informational purposes only.
**************************Thu Mar 10 00:46:25.071 2016 (UTC - 4:00)**************************
Loading Dump File [C:\Users\John\SysnativeBSODApps\030916-18578-01.dmp]
Windows 10 Kernel Version 10586 MP (2 procs) Free x64
Built by: 10586.162.amd64fre.th2_release_sec.160223-1728
System Uptime: 0 days 0:07:58.808
Probably caused by : memory_corruption ( nt!MiIdentifyPfn+1e2 )
BugCheck A, {ffffe000d1167738, 2, 0, fffff8037d048ea2}
BugCheck Info: IRQL_NOT_LESS_OR_EQUAL (a)
Arguments:
Arg1: ffffe000d1167738, memory referenced
Arg2: 0000000000000002, IRQL
Arg3: 0000000000000000, bitfield :
    bit 0 : value 0 = read operation, 1 = write operation
    bit 3 : value 0 = not an execute operation, 1 = execute operation (only on chips which support this level of status)
Arg4: fffff8037d048ea2, address which referenced memory
BUGCHECK_STR:  AV
DEFAULT_BUCKET_ID:  WIN8_DRIVER_FAULT
PROCESS_NAME:  svchost.exe
FAILURE_BUCKET_ID:  AV_nt!MiIdentifyPfn
CPUID:        "Intel® Core™2 Duo CPU     E7500  @ 2.93GHz"
MaxSpeed:     2930
CurrentSpeed: 2926
  BIOS Version                  A11
  BIOS Release Date             09/07/2009
  Manufacturer                  Dell Inc.
  Product Name                  Inspiron 545s
  Baseboard Product             0T287N
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
**************************Thu Mar 10 00:10:35.506 2016 (UTC - 4:00)**************************
Loading Dump File [C:\Users\John\SysnativeBSODApps\030916-17671-01.dmp]
Windows 10 Kernel Version 10586 MP (2 procs) Free x64
Built by: 10586.162.amd64fre.th2_release_sec.160223-1728
System Uptime: 0 days 6:32:26.245
Probably caused by : Pool_Corruption ( nt!ExDeferredFreePool+a0 )
BugCheck C5, {60000000, 2, 0, fffff80378c36840}
BugCheck Info: DRIVER_CORRUPTED_EXPOOL (c5)
Arguments:
Arg1: 0000000060000000, memory referenced
Arg2: 0000000000000002, IRQL
Arg3: 0000000000000000, value 0 = read operation, 1 = write operation
Arg4: fffff80378c36840, address which referenced memory
BUGCHECK_STR:  0xC5_2
PROCESS_NAME:  chrome.exe
FAILURE_BUCKET_ID:  0xC5_2_nt!ExDeferredFreePool
CPUID:        "Intel® Core™2 Duo CPU     E7500  @ 2.93GHz"
MaxSpeed:     2930
CurrentSpeed: 2926
  BIOS Version                  A11
  BIOS Release Date             09/07/2009
  Manufacturer                  Dell Inc.
  Product Name                  Inspiron 545s
  Baseboard Product             0T287N
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
**************************Wed Mar  9 12:44:20.540 2016 (UTC - 4:00)**************************
Loading Dump File [C:\Users\John\SysnativeBSODApps\030916-18593-01.dmp]
Windows 10 Kernel Version 10586 MP (2 procs) Free x64
Built by: 10586.122.amd64fre.th2_release_inmarket.160222-1549
System Uptime: 0 days 1:19:04.277
Probably caused by : memory_corruption ( nt!MmQueryVirtualMemory+21b )
BugCheck 3B, {c0000005, fffff8016cdf3f2b, ffffd0009281ffb0, 0}
BugCheck Info: SYSTEM_SERVICE_EXCEPTION (3b)
Arguments:
Arg1: 00000000c0000005, Exception code that caused the bugcheck
Arg2: fffff8016cdf3f2b, Address of the instruction which caused the bugcheck
Arg3: ffffd0009281ffb0, Address of the context record for the exception that caused the bugcheck
Arg4: 0000000000000000, zero.
BUGCHECK_STR:  0x3B
DEFAULT_BUCKET_ID:  WIN8_DRIVER_FAULT
PROCESS_NAME:  SearchUI.exe
FAILURE_BUCKET_ID:  0x3B_nt!MmQueryVirtualMemory
CPUID:        "Intel® Core™2 Duo CPU     E7500  @ 2.93GHz"
MaxSpeed:     2930
CurrentSpeed: 2926
  BIOS Version                  A11
  BIOS Release Date             09/07/2009
  Manufacturer                  Dell Inc.
  Product Name                  Inspiron 545s
  Baseboard Product             0T287N
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
**************************Tue Mar  8 23:08:38.141 2016 (UTC - 4:00)**************************
Loading Dump File [C:\Users\John\SysnativeBSODApps\030816-21531-01.dmp]
Windows 10 Kernel Version 10586 MP (2 procs) Free x64
Built by: 10586.122.amd64fre.th2_release_inmarket.160222-1549
System Uptime: 0 days 1:00:51.907
*** WARNING: Unable to verify timestamp for win32kfull.sys
*** ERROR: Module load completed but symbols could not be loaded for win32kfull.sys
Probably caused by : win32kfull.sys ( win32kfull+c1eff )
BugCheck 1E, {ffffffffc0000005, fffff80104cb3010, 0, ffffffffffffffff}
BugCheck Info: KMODE_EXCEPTION_NOT_HANDLED (1e)
Arguments:
Arg1: ffffffffc0000005, The exception code that was not handled
Arg2: fffff80104cb3010, The address that the exception occurred at
Arg3: 0000000000000000, Parameter 0 of the exception
Arg4: ffffffffffffffff, Parameter 1 of the exception
BUGCHECK_STR:  0x1E_c0000005_R
PROCESS_NAME:  explorer.exe
FAILURE_BUCKET_ID:  0x1E_c0000005_R_win32kfull!Unknown_Function
CPUID:        "Intel® Core™2 Duo CPU     E7500  @ 2.93GHz"
MaxSpeed:     2930
CurrentSpeed: 2926
  BIOS Version                  A11
  BIOS Release Date             09/07/2009
  Manufacturer                  Dell Inc.
  Product Name                  Inspiron 545s
  Baseboard Product             0T287N
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
**************************Tue Mar  8 01:25:24.557 2016 (UTC - 4:00)**************************
Loading Dump File [C:\Users\John\SysnativeBSODApps\030816-24203-01.dmp]
Windows 10 Kernel Version 10586 MP (2 procs) Free x64
Built by: 10586.0.amd64fre.th2_release.151029-1700
System Uptime: 0 days 4:35:16.323
*** WARNING: Unable to verify timestamp for win32k.sys
*** ERROR: Module load completed but symbols could not be loaded for win32k.sys
Probably caused by : ntkrnlmp.exe ( nt! ?? ::FNODOBFM::`string'+1e46a )
BugCheck 1A, {5003, fffff79940000000, 1901, c730403202}
BugCheck Info: MEMORY_MANAGEMENT (1a)
Arguments:
Arg1: 0000000000005003, The subtype of the bugcheck.
Arg2: fffff79940000000
Arg3: 0000000000001901
Arg4: 000000c730403202
BUGCHECK_STR:  0x1a_5003
PROCESS_NAME:  TiWorker.exe
FAILURE_BUCKET_ID:  0x1a_5003_nt!_??_::FNODOBFM::_string_
CPUID:        "Intel® Core™2 Duo CPU     E7500  @ 2.93GHz"
MaxSpeed:     2930
CurrentSpeed: 2926
  BIOS Version                  A11
  BIOS Release Date             09/07/2009
  Manufacturer                  Dell Inc.
  Product Name                  Inspiron 545s
  Baseboard Product             0T287N
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``


3rd Party Drivers:
The following is for information purposes only.
**************************Thu Mar 10 00:46:25.071 2016 (UTC - 4:00)**************************
BrSerId.sys                 Sun Aug  6 21:51:11 2006 (44D69C8F)
BrUsbSer.sys                Wed Aug  9 08:11:02 2006 (44D9D0D6)
lvbflt64.sys                Mon Oct 22 22:10:38 2012 (5085FC9E)
lvrs64.sys                  Mon Oct 22 22:11:24 2012 (5085FCCC)
lvuvc64.sys                 Mon Oct 22 22:12:08 2012 (5085FCF8)
nvhda64v.sys                Thu Nov 28 08:38:09 2013 (52974741)
rt640x64.sys                Wed Oct  7 11:03:55 2015 (5615345B)
nvlddmkm.sys                Tue Oct 13 11:43:56 2015 (561D26BC)
intelppm.sys                Thu Oct 29 22:09:51 2015 (5632D16F)
eudskacs.sys                Wed Dec  9 16:51:42 2015 (5668A26E)
eubakup.sys                 Wed Dec  9 16:51:48 2015 (5668A274)
EUBKMON.sys                 Wed Dec  9 16:52:08 2015 (5668A288)
EuFdDisk.sys                Wed Dec  9 16:52:13 2015 (5668A28D)

 

http://www.carrona.org/drivers/driver.php?id=BrSerId.sys
http://www.carrona.org/drivers/driver.php?id=BrUsbSer.sys
http://www.carrona.org/drivers/driver.php?id=lvbflt64.sys
http://www.carrona.org/drivers/driver.php?id=lvrs64.sys
http://www.carrona.org/drivers/driver.php?id=lvuvc64.sys
http://www.carrona.org/drivers/driver.php?id=nvhda64v.sys
http://www.carrona.org/drivers/driver.php?id=rt640x64.sys
http://www.carrona.org/drivers/driver.php?id=nvlddmkm.sys
http://www.carrona.org/drivers/driver.php?id=intelppm.sys
http://www.carrona.org/drivers/driver.php?id=eudskacs.sys
http://www.carrona.org/drivers/driver.php?id=eubakup.sys
http://www.carrona.org/drivers/driver.php?id=EUBKMON.sys
http://www.carrona.org/drivers/driver.php?id=EuFdDisk.sys


 



#8 usasma

usasma

    Still visually handicapped (avatar is memory developed by my Dad


  • BSOD Kernel Dump Expert
  • 25,091 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Southeastern CT, USA
  • Local time:07:38 AM

Posted 16 March 2016 - 04:48 AM

The error that you provided a screenshot for is a BCD error (Boot Configuration Data).

It's a database that the system uses to start the computer.  It tells it where to boot from and what things to do/offer during the boot.

The 0xc000014c is:

//
// MessageId: STATUS_REGISTRY_CORRUPT
//
// MessageText:
//
// {The Registry Is Corrupt}
// The structure of one of the files that contains Registry data is corrupt, or the image of the file in memory is corrupt, or the file could not be recovered because the alternate copy or log was absent or corrupt.
//
#define STATUS_REGISTRY_CORRUPT          ((NTSTATUS)0xC000014CL)

As this happens, and then is repairable - it seems that something is causing the corruption.

It's reasonable to assume that this may be related to the BSOD, but the ultimate test will be if it returns after the BSOD is stopped.

 

Post back with the results of the diagnostics and we'll move on from there.


My browser caused a flood of traffic, sio my IP address was banned. Hope to fix it soon. Will get back to posting as soon as Im able.

- John  (my website: http://www.carrona.org/ )**If you need a more detailed explanation, please ask for it. I have the Knack. **  If I haven't replied in 48 hours, please send me a message. My eye problems have recently increased and I'm having difficult reading posts. (23 Nov 2017)FYI - I am completely blind in the right eye and ~30% blind in the left eye.<p>If the eye problems get worse suddenly, I may not be able to respond.If that's the case and help is needed, please PM a staff member for assistance.

#9 usasma

usasma

    Still visually handicapped (avatar is memory developed by my Dad


  • BSOD Kernel Dump Expert
  • 25,091 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Southeastern CT, USA
  • Local time:07:38 AM

Posted 16 March 2016 - 04:50 AM

Just a thought, but the next time that you get the BCD error, please run this report immediately after the system boots:

 

Please do the following:
- open Event Viewer (run eventvwr.msc from the "Run" dialog)
- expand the Custom Views category (left click on the > next to the words "Custom Views")
- right click on the "Administrative Events" heading
- select "Save all Events in Custom View as..."
- save the file as Admin.evtx
- zip up the file (right click on it, select "Send to", select "Compressed (zipped) folder")
- upload it with your next post (if it's too big, then upload it to a free file-hosting service and post a link here).

FYI - If we're looking for Event ID 41 errors (unexplained shutdowns), there's more info on that here:  http://support.microsoft.com/kb/2028504

While waiting for a reply, please monitor your temps with this free utility:  http://www.cpuid.com/softwares/hwmonitor.html

 


My browser caused a flood of traffic, sio my IP address was banned. Hope to fix it soon. Will get back to posting as soon as Im able.

- John  (my website: http://www.carrona.org/ )**If you need a more detailed explanation, please ask for it. I have the Knack. **  If I haven't replied in 48 hours, please send me a message. My eye problems have recently increased and I'm having difficult reading posts. (23 Nov 2017)FYI - I am completely blind in the right eye and ~30% blind in the left eye.<p>If the eye problems get worse suddenly, I may not be able to respond.If that's the case and help is needed, please PM a staff member for assistance.




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users