Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

BFE service BSOD after win 7 to win 10 upgrade


  • Please log in to reply
5 replies to this topic

#1 wolfer201

wolfer201

  • Members
  • 2 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:07:31 AM

Posted 17 April 2016 - 10:56 PM

Im getting a bad_pool_header BSOD after I upgraded to windows 10. It will usually happen within a minute of booting.  I used the media creation tool to upgrade after GWX was failing (should have been my first sign of trouble). 

 

By guess and check work in selective startup I've isolated the service that is triggering the bluescreen to be the Base Filtering Engine. Blue screen does not happen if that service is disabled. I also attempted to keep that service enabled and disable all dependent services. That configuration still results in a BSOD.  Ive attached my SysnativeFileCollectionApp and Perfmon zips. Not sure how to attack this, any help is appreciated. There are alot of critical services dependent on BFE so I dont want to just leave it disabled. 

 

Here are my system specs:

· OS - Windows 10 x64
· What was original installed OS on system? Win 7
· Is the OS an OEM version? OEM key, clean install by me
· Age of system (hardware): a few years
· Age of OS installation - have you re-installed the OS? at least 2 years
· CPU: i7
· Video Card: Nvidia GTS450 (removed while troubleshooting)
· MotherBoard - Factory Dell optiplex 990 motherboard
· Power Supply - Thermaltake 430W

· System Manufacturer: Dell
· Exact model number Optiplex 990
· Laptop or Desktop? Desktop

Attached Files


Edited by wolfer201, 18 April 2016 - 09:57 PM.


BC AdBot (Login to Remove)

 


#2 DarwinJones

DarwinJones

  • Members
  • 3 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:10:31 PM

Posted 17 April 2016 - 11:36 PM

I almost have the problem a week ago after changing my win 8 to win 10. After searching for answer over the web I decided to go back to win 8. Maybe I'll go back to win 10 when I have my new desktop but not on my laptop, No technical reason just something I think the right thing to do.



#3 usasma

usasma

    Still visually handicapped (avatar is memory developed by my Dad


  • BSOD Kernel Dump Expert
  • 25,090 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Southeastern CT, USA
  • Local time:10:31 AM

Posted 19 April 2016 - 05:31 PM

perfmon shows that the SonicWALL Virtual NIC is disabled.

Please uninstall this device and it's software.

If needed, please download a fresh copy and reinstall it AFTER we're finished troubleshooting.

 

Your UEFI/BIOS (version A06) dates from 2011.  Please check at the manufacturer's website to see if there are any UEFI/BIOS updates available for your system.  If you are able to install the update through Windows (without booting from an external drive), then go ahead and update it.  WARNING - if the computer might shut down during this procedure, please don't do it, as this may physically damage the computer and prevent it from booting.

Only 4 Windows Update hotfixes installed.  Most build 10586 (TH2/1511) systems have more than this.  Please visit Windows Update and get ALL available Windows Updates.
The actual number is not important.  Rather it's important that you checked manually, installed any available updates, and didn't experience any errors when checking or updating.

It also appears that you have Agile VPN installed.

Please uninstall this device and it's software.

 

Daemon Tools (and Alcohol % software) are known to cause BSOD's on some Windows systems (mostly due to the sptd.sys driver, although I have seen both dtsoftbus01.sys and dtscsibus.sys blamed on several occasions).

Please un-install the program, then use the following free tool to ensure that the troublesome sptd.sys driver is removed from your system (pick the 32 or 64 bit system depending on your system's configuration):  New link (15 Aug 2012):  http://www.duplexsecure.com/downloads (pick the appropriate version for your system and select "Un-install" when you run it).
Alternate link:  http://www.disc-tools.com/download/sptd
Manual procedure here:  http://daemonpro-help.com/en/problems_and_solutions/registry_and_sptd_problems.html
NOTE:  The uninstaller may not find the SPTD.sys driver.  Don't worry about it, just let us know in your post.

Memory dumps are still running.

I'll post the results later on (am headed out to dinner now).

Will post no later than early tomorrow  AM (UTC-5)
 


My browser caused a flood of traffic, sio my IP address was banned. Hope to fix it soon. Will get back to posting as soon as Im able.

- John  (my website: http://www.carrona.org/ )**If you need a more detailed explanation, please ask for it. I have the Knack. **  If I haven't replied in 48 hours, please send me a message. My eye problems have recently increased and I'm having difficult reading posts. (23 Nov 2017)FYI - I am completely blind in the right eye and ~30% blind in the left eye.<p>If the eye problems get worse suddenly, I may not be able to respond.If that's the case and help is needed, please PM a staff member for assistance.

#4 usasma

usasma

    Still visually handicapped (avatar is memory developed by my Dad


  • BSOD Kernel Dump Expert
  • 25,090 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Southeastern CT, USA
  • Local time:10:31 AM

Posted 20 April 2016 - 04:23 AM

6 of the 23 memory dumps imply problems with dnelwf64.sys (in the stack text) - a driver related to your CItrix VPN client.

Please uninstall it.

If needed, feel free to download a fresh copy of the latest, W10 compatible version for your system and install it AFTER we're finished troubleshooting.

 

The W10 Fall Update (Threshold 2)- which you have installed - was released on November 15, 2015

If you'll look at the list towards the bottom of the page, you have many drivers that date from well before that date.

I have serious concerns about the compatibility of these older drivers and would strongly suggest that you update ALL of them to the latest, W10 compatible versions.

 

If that doesn't fix things, please run Driver Verifier according to these instructions:  http://www.carrona.org/verifier.html

 

 

 

Analysis:
The following is for informational purposes only.
**************************Sun Apr 17 23:31:13.202 2016 (UTC - 4:00)**************************
Loading Dump File [C:\Users\John\SysnativeBSODApps\041716-3562-01.dmp]
Windows 10 Kernel Version 10586 MP (8 procs) Free x64
Built by: 10586.212.amd64fre.th2_release_sec.160328-1908
System Uptime: 0 days 0:00:39.881
Probably caused by : Pool_Corruption ( nt!ExFreePool+be8 )
BugCheck 19, {d, ffffe00078c0d732, 64522d24d5632d6b, 2d24d5632d6bbd9c}
BugCheck Info: BAD_POOL_HEADER (19)
Arguments:
Arg1: 000000000000000d,
Arg2: ffffe00078c0d732
Arg3: 64522d24d5632d6b
Arg4: 2d24d5632d6bbd9c
BUGCHECK_STR:  0x19_d
PROCESS_NAME:  chrome.exe
FAILURE_BUCKET_ID:  0x19_d_nt!ExFreePool
CPUID:        "Intel® Core™ i7-2600 CPU @ 3.40GHz"
MaxSpeed:     3400
CurrentSpeed: 3392
  BIOS Version                  A06
  BIOS Release Date             07/25/2011
  Manufacturer                  Dell Inc.
  Product Name                  OptiPlex 990
  Baseboard Product             06D7TR
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
The rest of the memory dump summaries are hidden in the Spoiler tag below.  Click on "Show" to reveal them.

Spoiler



3rd Party Drivers:
The following is for information purposes only.
**************************Sun Apr 17 23:31:13.202 2016 (UTC - 4:00)**************************
SSPORT.sys                   Thu Aug 11 19:07:32 2005 (42FBDA34)
WmXlCore.sys                 Tue Apr 27 16:09:26 2010 (4BD74476)
WmBEnum.sys                  Tue Apr 27 16:10:19 2010 (4BD744AB)
tapoas.sys                   Sun Jul 11 20:31:59 2010 (4C3A627F)
dokan.sys                    Mon Jan 10 07:49:29 2011 (4D2B0059)
dnelwf64.sys                 Thu Jul 28 02:36:44 2011 (4E31037C)
SWIPsec.sys                  Tue Apr  3 16:24:42 2012 (4F7B5C8A)
HECIx64.sys                  Fri Oct 26 13:01:03 2012 (508AC1CF)
ElbyCDIO.sys                 Mon Mar  4 04:21:51 2013 (513467AF)
VClone.sys                   Sun Mar 10 20:49:12 2013 (513D2A08)
dtsoftbus01.sys              Thu Jun 20 03:22:51 2013 (51C2ADCB)
NxDrv.sys                    Tue Jun 10 21:57:33 2014 (5397B78D)
e1c65x64.sys                 Sun Feb 15 08:39:57 2015 (54E0A1AD)
iaStorAV.sys                 Thu Feb 19 07:08:39 2015 (54E5D247)
igdkmd64.sys                 Tue May 26 23:53:18 2015 (55653FAE)
intelppm.sys                 Thu Oct 29 22:09:51 2015 (5632D16F)
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
**************************Sun Apr 17 23:20:34.766 2016 (UTC - 4:00)**************************
WmVirHid.sys                 Tue Apr 27 16:08:53 2010 (4BD74455)
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
**************************Sun Apr 17 14:22:11.889 2016 (UTC - 4:00)**************************
AtihdWT6.sys                 Mon May 25 21:21:51 2015 (5563CAAF)
atikmpag.sys                 Wed Nov  4 16:16:43 2015 (563A75BB)
atikmdag.sys                 Wed Nov  4 16:39:32 2015 (563A7B14)
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
**************************Sun Apr 17 13:47:03.697 2016 (UTC - 4:00)**************************
nvlddmkm.sys                 Thu Nov  5 09:35:23 2015 (563B692B)
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
**************************Sun Apr 17 12:20:14.519 2016 (UTC - 4:00)**************************
LVPr2M64.sys                 Wed Oct  7 04:26:50 2009 (4ACC50CA)
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
**************************Sun Apr 17 12:04:59.502 2016 (UTC - 4:00)**************************
tap0901.sys                  Tue Oct 20 17:00:21 2009 (4ADE24E5)
btath_bus.sys                Thu Jun 24 02:17:43 2010 (4C22F887)
vstor2-mntapi10-shared.sys   Tue Jul 12 12:35:21 2011 (4E1C77C9)
vmci.sys                     Mon Apr 30 21:14:27 2012 (4F9F38F3)
vsock.sys                    Mon Apr 30 21:15:24 2012 (4F9F392C)
VMNET.SYS                    Sun Jul  8 03:58:34 2012 (4FF93DAA)
vmnetadapter.sys             Sun Jul  8 03:58:35 2012 (4FF93DAB)
vmnetbridge.sys              Sun Jul  8 03:59:19 2012 (4FF93DD7)
vmnetuserif.sys              Wed Aug 15 16:31:54 2012 (502C073A)
vmx86.sys                    Wed Aug 15 18:05:11 2012 (502C1D17)
hcmon.sys                    Mon Aug  5 21:10:44 2013 (52004D14)
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
**************************Sun Apr 17 12:00:10.356 2016 (UTC - 4:00)**************************
lvsels64.sys                 Wed Oct  7 04:27:19 2009 (4ACC50E7)
lvpopf64.sys                 Wed Oct  7 04:27:20 2009 (4ACC50E8)
lvrs64.sys                   Wed Oct  7 04:27:59 2009 (4ACC510F)
lvuvc64.sys                  Wed Oct  7 04:28:44 2009 (4ACC513C)
BthA2DP.sys                  Thu Oct 29 22:38:05 2015 (5632D80D)
BthHfAud.sys                 Thu Oct 29 22:42:20 2015 (5632D90C)
btfilter.sys                 Wed Dec  9 02:44:11 2015 (5667DBCB)
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
**************************Sun Apr 17 11:50:11.478 2016 (UTC - 4:00)**************************
nvvad64v.sys                 Thu Nov 20 10:33:54 2014 (546E09E2)
NvStreamKms.sys              Tue Mar 17 02:19:52 2015 (5507C788)
nvhda64v.sys                 Thu Apr 16 15:03:16 2015 (55300774)
nvlddmkm.sys                 Thu Aug  6 19:16:04 2015 (55C3EAB4)
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
**************************Sun Apr 17 11:30:03.746 2016 (UTC - 4:00)**************************
btfilter.sys                 Thu Apr 24 23:01:52 2014 (5359D020)

 

http://www.carrona.org/drivers/driver.php?id=SSPORT.sys
http://www.carrona.org/drivers/driver.php?id=WmXlCore.sys
http://www.carrona.org/drivers/driver.php?id=WmBEnum.sys
http://www.carrona.org/drivers/driver.php?id=tapoas.sys
http://www.carrona.org/drivers/driver.php?id=dokan.sys
http://www.carrona.org/drivers/driver.php?id=dnelwf64.sys
http://www.carrona.org/drivers/driver.php?id=SWIPsec.sys
http://www.carrona.org/drivers/driver.php?id=HECIx64.sys
http://www.carrona.org/drivers/driver.php?id=ElbyCDIO.sys
http://www.carrona.org/drivers/driver.php?id=VClone.sys
http://www.carrona.org/drivers/driver.php?id=dtsoftbus01.sys
http://www.carrona.org/drivers/driver.php?id=NxDrv.sys
e1c65x64.sys - this driver hasn't been added to the DRT as of this run. Please search Google/Bing for the driver if additional information is needed.
http://www.carrona.org/drivers/driver.php?id=iaStorAV.sys
http://www.carrona.org/drivers/driver.php?id=igdkmd64.sys
http://www.carrona.org/drivers/driver.php?id=intelppm.sys
http://www.carrona.org/drivers/driver.php?id=WmVirHid.sys
http://www.carrona.org/drivers/driver.php?id=AtihdWT6.sys
http://www.carrona.org/drivers/driver.php?id=atikmpag.sys
http://www.carrona.org/drivers/driver.php?id=atikmdag.sys
http://www.carrona.org/drivers/driver.php?id=nvlddmkm.sys
http://www.carrona.org/drivers/driver.php?id=LVPr2M64.sys
http://www.carrona.org/drivers/driver.php?id=tap0901.sys
http://www.carrona.org/drivers/driver.php?id=btath_bus.sys
http://www.carrona.org/drivers/driver.php?id=vstor2-mntapi10-shared.sys
http://www.carrona.org/drivers/driver.php?id=vmci.sys
http://www.carrona.org/drivers/driver.php?id=vsock.sys
http://www.carrona.org/drivers/driver.php?id=VMNET.SYS
http://www.carrona.org/drivers/driver.php?id=vmnetadapter.sys
http://www.carrona.org/drivers/driver.php?id=vmnetbridge.sys
http://www.carrona.org/drivers/driver.php?id=vmnetuserif.sys
http://www.carrona.org/drivers/driver.php?id=vmx86.sys
http://www.carrona.org/drivers/driver.php?id=hcmon.sys
lvsels64.sys - this driver hasn't been added to the DRT as of this run. Please search Google/Bing for the driver if additional information is needed.
http://www.carrona.org/drivers/driver.php?id=lvpopf64.sys
http://www.carrona.org/drivers/driver.php?id=lvrs64.sys
http://www.carrona.org/drivers/driver.php?id=lvuvc64.sys
http://www.carrona.org/drivers/driver.php?id=BthA2DP.sys
http://www.carrona.org/drivers/driver.php?id=BthHfAud.sys
http://www.carrona.org/drivers/driver.php?id=btfilter.sys
http://www.carrona.org/drivers/driver.php?id=nvvad64v.sys
http://www.carrona.org/drivers/driver.php?id=NvStreamKms.sys
http://www.carrona.org/drivers/driver.php?id=nvhda64v.sys
http://www.carrona.org/drivers/driver.php?id=nvlddmkm.sys
http://www.carrona.org/drivers/driver.php?id=btfilter.sys
 


My browser caused a flood of traffic, sio my IP address was banned. Hope to fix it soon. Will get back to posting as soon as Im able.

- John  (my website: http://www.carrona.org/ )**If you need a more detailed explanation, please ask for it. I have the Knack. **  If I haven't replied in 48 hours, please send me a message. My eye problems have recently increased and I'm having difficult reading posts. (23 Nov 2017)FYI - I am completely blind in the right eye and ~30% blind in the left eye.<p>If the eye problems get worse suddenly, I may not be able to respond.If that's the case and help is needed, please PM a staff member for assistance.

#5 wolfer201

wolfer201
  • Topic Starter

  • Members
  • 2 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:07:31 AM

Posted 24 April 2016 - 10:52 PM

Updated bios to A19, updated drivers (the ones I could, dell didn't release any win 10 supported ones so most are win 8), removed daemon tools and sonicwall vpn. Everything seems to be working fine now. Thanks for the help!



#6 usasma

usasma

    Still visually handicapped (avatar is memory developed by my Dad


  • BSOD Kernel Dump Expert
  • 25,090 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Southeastern CT, USA
  • Local time:10:31 AM

Posted 25 April 2016 - 05:05 AM

Glad to hear it, thanks for letting us know!


My browser caused a flood of traffic, sio my IP address was banned. Hope to fix it soon. Will get back to posting as soon as Im able.

- John  (my website: http://www.carrona.org/ )**If you need a more detailed explanation, please ask for it. I have the Knack. **  If I haven't replied in 48 hours, please send me a message. My eye problems have recently increased and I'm having difficult reading posts. (23 Nov 2017)FYI - I am completely blind in the right eye and ~30% blind in the left eye.<p>If the eye problems get worse suddenly, I may not be able to respond.If that's the case and help is needed, please PM a staff member for assistance.




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users