Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Laptop BSOD's about once daily - please help


  • Please log in to reply
4 replies to this topic

#1 philipk

philipk

  • Members
  • 19 posts
  • OFFLINE
  •  
  • Local time:06:44 PM

Posted 04 October 2016 - 03:53 PM

My Lenovo X1 Carbon running Win 10 Pro Blue Screens about once a day or so. I tried updating the video drivers - finally even installing the latest drivers from the Intel web site with no improvement. For what it is worth, I am running Luma mesh WiFi routers. I read somewhere that certain WiFi router chips cause BSODs.

 

sfc /scannow indicates no problems.

 

I am attaching the SysnativeFileCollectionApp.zip file. But when I run perfmon /report in an elevated cmd window, the app says collecting data for 60 sec. However, it never completes, So I cannot attach that file. If there is a to fix that or an alternate way to get that output, please let me know.

 

Below is the info requested:

 

 

OS - Windows 8.1, 8, 7, Vista ? - Windows 10 Pro (with Anniversary Update - version 1607/Build 14393.222)
· x86 (32-bit) or x64 ?
· What was original installed OS on system? - Windows 8.1, I believe
· Is the OS an OEM version (came pre-installed on system) or full retail version (YOU purchased it from retailer)? - preinstalled then updated to Windows 10
· Age of system (hardware) - 2 years
· Age of OS installation - have you re-installed the OS? - Not sure of age of upgrade, but it is now Anniversary update
· CPU - i5 4300U @1.9GHz/2.49GHz
· Video Card - Built In Intel HD Graphics 4400
· MotherBoard - (if NOT a laptop) - N/A
· Power Supply - brand & wattage (skip if laptop) - N/A
· System Manufacturer - Lenovo
· Exact model number (if laptop, check label on bottom) 20A7-CT01
· Laptop or Desktop? - Laptop (2yr old X1 Carbon with 4 Gb RAM)

 

Any help is appreciated. I'd really like to fix this issue.

 

 Thanks so much in advance.

 

Phil

 

Attached Files



BC AdBot (Login to Remove)

 


#2 usasma

usasma

    Still visually handicapped (avatar is memory developed by my Dad


  • BSOD Kernel Dump Expert
  • 25,091 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Southeastern CT, USA
  • Local time:06:44 PM

Posted 04 October 2016 - 05:37 PM

Your UEFI/BIOS (version GRET48WW (1.25 )) dates from 2016.  Please check at the manufacturer's website to see if there are any UEFI/BIOS updates available for your system.  This is just in case there has been a more recent update.
FYI - W8 and W10 communicate more with the UEFI/BIOS than previous versions of Windows, so it's important to ensure that the UEFI/BIOS is kept up to date (and that outdated UEFI/BIOS' may be the cause of some compatibility issues).

Although you appear to have a reasonable number of Windows Update hotfixes for this version of your OS, please double check for any new Windows Updates.  It only takes one update to cause a problem, so it's essential that you have all of them.  The actual number is not important.  Rather it's important that you checked manually, installed any available updates, and didn't experience any errors when checking or updating.

You only have 453 MB of available Physical Memory (RAM).
Please get more memory if the system is able to handle it.
While waiting to upgrade the memory, please:
- only use one program at a time
- go through your startup items and stop those that aren't essential from loading with Windows

 

Total Physical Memory:     4,003 MB
Available Physical Memory: 453 MB
Virtual Memory: Max Size:  7,587 MB
Virtual Memory: Available: 1,373 MB
Virtual Memory: In Use:    6,214 MB

The WER section of the MSINFO32 report is suggestive of a networking cause for your BSOD's

Please try updating your wired/wireless/and bluetooth drivers to the latest available, W10 compatible version.

 

Interestingly, the memory dumps all contain some drivers from MalwareBytes.
Are you by chance using the Rootkit scanner when you scan?  If so, please:

- try updating your version of MalwareBytes

- or disabling the rootkit scan

 

If that doesn't stop the BSOD's, then please run Driver Verifier according to these instructions:  http://www.carrona.org/verifier.html

 

Analysis:
The following is for information purposes only. The following information contains the relevant information from the blue screen analysis:
**************************Tue Oct  4 15:17:14.085 2016 (UTC - 4:00)**************************
Loading Dump File [C:\Users\john\SysnativeBSODApps\100416-8203-01.dmp]
Windows 10 Kernel Version 14393 MP (4 procs) Free x64
Built by: 14393.206.amd64fre.rs1_release.160915-0644
System Uptime:0 days 21:42:23.792
*** WARNING: Unable to verify timestamp for mwac.sys
*** ERROR: Module load completed but symbols could not be loaded for mwac.sys
Probably caused by :NETIO.SYS ( NETIO! ?? ::FNODOBFM::`string'+9d98 )
BugCheck C2, {7, 0, 0, ffffb7868de93268}
BugCheck Info: BAD_POOL_CALLER (c2)
Arguments:
Arg1: 0000000000000007, Attempt to free pool which was already freed
Arg2: 0000000000000000, Pool tag value from the pool header
Arg3: 0000000000000000, Contents of the first 4 bytes of the pool header
Arg4: ffffb7868de93268, Address of the block of pool being deallocated
BUGCHECK_STR:  0xc2_7_NDnd
PROCESS_NAME:  mbamservice.exe
FAILURE_BUCKET_ID: 0xc2_7_NDnd_NETIO!_??_::FNODOBFM::_string_
CPUID:        "Intel® Core™ i5-4300U CPU @ 1.90GHz"
MaxSpeed:     1900
CurrentSpeed: 2494
 
Processor may be overclocked!
Expected Frequency:   1900
Actual Frequency:     2494
Overclock Ratio:      1.31263
 
  Manufacturer                  LENOVO
  Product Name                  20A7CTO1WW
  BIOS Version                  GRET48WW (1.25 )
  BIOS Release Date             04/08/2016
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
**************************Mon Oct  3 17:29:18.402 2016 (UTC - 4:00)**************************
Loading Dump File [C:\Users\john\SysnativeBSODApps\100316-8281-01.dmp]
Windows 10 Kernel Version 14393 MP (4 procs) Free x64
Built by: 14393.187.amd64fre.rs1_release_inmarket.160906-1818
System Uptime:3 days 14:43:48.308
*** ERROR: Module load completed but symbols could not be loaded for tcpip.sys
*** WARNING: Unable to verify timestamp for mfewfpk.sys
*** ERROR: Module load completed but symbols could not be loaded for mfewfpk.sys
*** WARNING: Unable to verify timestamp for win32k.sys
*** ERROR: Module load completed but symbols could not be loaded for win32k.sys
Probably caused by :memory_corruption
BugCheck C2, {7, 0, 6c006c, ffffbd8ae9d3df88}
BugCheck Info: BAD_POOL_CALLER (c2)
Arguments:
Arg1: 0000000000000007, Attempt to free pool which was already freed
Arg2: 0000000000000000, Pool tag value from the pool header
Arg3: 00000000006c006c, Contents of the first 4 bytes of the pool header
Arg4: ffffbd8ae9d3df88, Address of the block of pool being deallocated
BUGCHECK_STR:  0xc2_7_NDnd
PROCESS_NAME:  System
FAILURE_BUCKET_ID: MEMORY_CORRUPTION_LARGE
CPUID:        "Intel® Core™ i5-4300U CPU @ 1.90GHz"
MaxSpeed:     1900
CurrentSpeed: 2494
 
Processor may be overclocked!
Expected Frequency:   1900
Actual Frequency:     2494
Overclock Ratio:      1.31263
 
  Manufacturer                  LENOVO
  Product Name                  20A7CTO1WW
  BIOS Version                  GRET48WW (1.25 )
  BIOS Release Date             04/08/2016
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
**************************Fri Sep 30 02:44:33.927 2016 (UTC - 4:00)**************************
Loading Dump File [C:\Users\john\SysnativeBSODApps\093016-7906-01.dmp]
Windows 10 Kernel Version 14393 MP (4 procs) Free x64
Built by: 14393.187.amd64fre.rs1_release_inmarket.160906-1818
System Uptime:0 days 16:23:42.810
*** ERROR: Module load completed but symbols could not be loaded for tcpip.sys
*** WARNING: Unable to verify timestamp for mfewfpk.sys
*** ERROR: Module load completed but symbols could not be loaded for mfewfpk.sys
Probably caused by :memory_corruption
BugCheck C2, {7, 3ca9fc52, 9cd56ace, ffff8484bddc7418}
BugCheck Info: BAD_POOL_CALLER (c2)
Arguments:
Arg1: 0000000000000007, Attempt to free pool which was already freed
Arg2: 000000003ca9fc52, Pool tag value from the pool header
Arg3: 000000009cd56ace, Contents of the first 4 bytes of the pool header
Arg4: ffff8484bddc7418, Address of the block of pool being deallocated
BUGCHECK_STR:  0xc2_7_NDnd
PROCESS_NAME:  McSvHost.exe
FAILURE_BUCKET_ID: MEMORY_CORRUPTION_LARGE
CPUID:        "Intel® Core™ i5-4300U CPU @ 1.90GHz"
MaxSpeed:     1900
CurrentSpeed: 2494
 
Processor may be overclocked!
Expected Frequency:   1900
Actual Frequency:     2494
Overclock Ratio:      1.31263
 
  Manufacturer                  LENOVO
  Product Name                  20A7CTO1WW
  BIOS Version                  GRET48WW (1.25 )
  BIOS Release Date             04/08/2016
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
The rest of the memory dump summaries are hidden in the Spoiler tag below.  Click on "Show" to reveal them.

Spoiler




3rd Party Drivers:
The following is for information purposes only. My recommendations were given above. The drivers that follow belong to software or devices that were not developed by Microsoft.  You can find links to the driver information and where to update the drivers in the section after the code box:

**************************Tue Oct  4 15:17:14.085 2016 (UTC - 4:00)**************************
iwdbus.sys                   Wed Jul 24 21:06:12 2013 (51F07A04)
iaStorA.sys                  Fri Nov 15 14:59:34 2013 (52867D26)
rtsuvc.sys                   Fri Nov 29 13:06:49 2013 (5298D7B9)
semav6msr64.sys              Fri Jan 24 14:22:40 2014 (52E2BD80)
LnvHIDHW.sys                 Mon Apr  7 03:37:52 2014 (534255D0)
mwac.sys                     Tue Jun 17 22:07:00 2014 (53A0F444)
IntelPcc.sys                 Thu Sep  4 19:05:04 2014 (5408F020)
iaLPSSi_I2C.sys              Tue Feb 24 10:52:07 2015 (54EC9E27)
point64.sys                  Thu Apr  9 11:20:56 2015 (552698D8)
CPLMACPI.sys                 Wed May 27 04:19:17 2015 (55657E05)
TeeDriverW8x64.sys           Mon Jun 29 13:22:00 2015 (55917EB8)
MBAMSwissArmy.sys            Wed Jul 29 00:26:01 2015 (55B855D9)
e1d65x64.sys                 Wed Jul 29 03:36:47 2015 (55B8828F)
RTKVHD64.sys                 Wed Jul 29 07:59:49 2015 (55B8C035)
mbam.sys                     Tue Aug 11 13:35:19 2015 (55CA3257)
ApsHM64.sys                  Sun Sep 20 07:06:53 2015 (55FE934D)
Apsx64.sys                   Sun Sep 20 07:09:33 2015 (55FE93ED)
dc3d.sys                     Fri Nov  6 14:14:22 2015 (563CFC0E)
mbae64.sys                   Wed Jan 27 11:54:02 2016 (56A8F62A)
mbamchameleon.sys            Wed Jan 27 18:48:35 2016 (56A95753)
smi.sys                      Thu Feb 25 05:11:10 2016 (56CED33E)
SynTP.sys                    Thu Apr 14 21:46:43 2016 (57104803)
Smb_driver_Intel.sys         Thu Apr 14 21:47:17 2016 (57104825)
Netwbw02.sys                 Sun Apr 17 10:09:53 2016 (57139931)
mfencbdc.sys                 Tue Apr 19 05:15:44 2016 (5715F740)
mfehidk.sys                  Fri Apr 22 11:57:19 2016 (571A49DF)
mfewfpk.sys                  Fri Apr 22 11:57:37 2016 (571A49F1)
mfeavfk.sys                  Fri Apr 22 11:59:02 2016 (571A4A46)
mfefirek.sys                 Fri Apr 22 12:00:07 2016 (571A4A87)
cfwids.sys                   Fri Apr 22 12:00:39 2016 (571A4AA7)
mfeaack.sys                  Fri Apr 22 12:03:01 2016 (571A4B35)
igdkmd64.sys                 Fri Apr 22 16:37:26 2016 (571A8B86)
ibtusb.sys                   Mon May 23 13:22:44 2016 (57433C64)
Tppwr64v.sys                 Tue Jun 21 06:14:54 2016 (5769139E)
WirelessKeyboardFilter.sys   Sat Jun 25 03:13:14 2016 (576E2F0A)
ibmpmdrv.sys                 Mon Jul 11 22:21:31 2016 (5784542B)
intelppm.sys                 Fri Jul 15 22:10:43 2016 (578997A3)
intelide.sys                 Fri Jul 15 22:29:13 2016 (57899BF9)
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
**************************Wed Sep 21 04:47:31.676 2016 (UTC - 4:00)**************************
Tppwr64v.sys                 Thu Mar 31 00:16:47 2016 (56FCA4AF)
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
**************************Fri Sep  9 05:59:32.202 2016 (UTC - 4:00)**************************
ibtusb.sys                   Mon Jul 13 12:52:34 2015 (55A3ECD2)


http://www.carrona.org/drivers/driver.php?id=iwdbus.sys
http://www.carrona.org/drivers/driver.php?id=iaStorA.sys
http://www.carrona.org/drivers/driver.php?id=rtsuvc.sys
http://www.carrona.org/drivers/driver.php?id=semav6msr64.sys
http://www.carrona.org/drivers/driver.php?id=LnvHIDHW.sys
http://www.carrona.org/drivers/driver.php?id=mwac.sys
http://www.carrona.org/drivers/driver.php?id=IntelPcc.sys
http://www.carrona.org/drivers/driver.php?id=iaLPSSi_I2C.sys
http://www.carrona.org/drivers/driver.php?id=point64.sys
CPLMACPI.sys - this driver hasn't been added to the DRT as of this run. Please search Google/Bing for the driver if additional information is needed.
http://www.carrona.org/drivers/driver.php?id=TeeDriverW8x64.sys
http://www.carrona.org/drivers/driver.php?id=MBAMSwissArmy.sys
http://www.carrona.org/drivers/driver.php?id=e1d65x64.sys
http://www.carrona.org/drivers/driver.php?id=RTKVHD64.sys
http://www.carrona.org/drivers/driver.php?id=mbam.sys
http://www.carrona.org/drivers/driver.php?id=ApsHM64.sys
http://www.carrona.org/drivers/driver.php?id=Apsx64.sys
http://www.carrona.org/drivers/driver.php?id=dc3d.sys
http://www.carrona.org/drivers/driver.php?id=mbae64.sys
http://www.carrona.org/drivers/driver.php?id=mbamchameleon.sys
http://www.carrona.org/drivers/driver.php?id=smi.sys
http://www.carrona.org/drivers/driver.php?id=SynTP.sys
http://www.carrona.org/drivers/driver.php?id=Smb_driver_Intel.sys
http://www.carrona.org/drivers/driver.php?id=Netwbw02.sys
http://www.carrona.org/drivers/driver.php?id=mfencbdc.sys
http://www.carrona.org/drivers/driver.php?id=mfehidk.sys
http://www.carrona.org/drivers/driver.php?id=mfewfpk.sys
http://www.carrona.org/drivers/driver.php?id=mfeavfk.sys
http://www.carrona.org/drivers/driver.php?id=mfefirek.sys
http://www.carrona.org/drivers/driver.php?id=cfwids.sys
http://www.carrona.org/drivers/driver.php?id=mfeaack.sys
http://www.carrona.org/drivers/driver.php?id=igdkmd64.sys
http://www.carrona.org/drivers/driver.php?id=ibtusb.sys
http://www.carrona.org/drivers/driver.php?id=Tppwr64v.sys
WirelessKeyboardFilter.sys - this driver hasn't been added to the DRT as of this run. Please search Google/Bing for the driver if additional information is needed.
http://www.carrona.org/drivers/driver.php?id=ibmpmdrv.sys
http://www.carrona.org/drivers/driver.php?id=intelppm.sys
http://www.carrona.org/drivers/driver.php?id=intelide.sys
http://www.carrona.org/drivers/driver.php?id=Tppwr64v.sys
http://www.carrona.org/drivers/driver.php?id=ibtusb.sys

 
My browser caused a flood of traffic, sio my IP address was banned. Hope to fix it soon. Will get back to posting as soon as Im able.

- John  (my website: http://www.carrona.org/ )**If you need a more detailed explanation, please ask for it. I have the Knack. **  If I haven't replied in 48 hours, please send me a message. My eye problems have recently increased and I'm having difficult reading posts. (23 Nov 2017)FYI - I am completely blind in the right eye and ~30% blind in the left eye.<p>If the eye problems get worse suddenly, I may not be able to respond.If that's the case and help is needed, please PM a staff member for assistance.

#3 philipk

philipk
  • Topic Starter

  • Members
  • 19 posts
  • OFFLINE
  •  
  • Local time:06:44 PM

Posted 05 October 2016 - 07:05 AM

I am running the x64 version - I forgot to include that in the info above.

 

Phil



#4 philipk

philipk
  • Topic Starter

  • Members
  • 19 posts
  • OFFLINE
  •  
  • Local time:06:44 PM

Posted 05 October 2016 - 07:41 AM

John,

 

My note above on 64 bit version crossed as yours appeared.

 

Thanks so much for the review and suggestions. I will review and get to them as quickly as I can. I'm going to the Mets-Giants game today (Let's Go Mets!) and have commitments the next few days.

 

On a very quick read here are a few initial items.

 

1. There is, indeed, a new BIOS/UEFI - Version 1.26. I came out a month ago. I will install it.

2. Sadly there is no way to add memory. Getting a unit with only 4 gig was a mistake. At the time I assumed I could add more - you can't.

3. I will check on Malwarebytes. I have a paid licensed version of it and usually it keeps itself up to date. So Malwarebytes is providing realtime monitoring. That's why the drivers are loaded. I am not using the scan for rootkits option.

4. I did update the network drivers earlier. I will check to be sure I have the latest. If the manufacture has later ones than Lenovo, should I try those?

​5. I'll check the Bluetooth drivers.

6. I'll remove startup items not needed to help with memory usage.

7. I started Verifier last evening and it is running now. No BSOD yet.

 

Thanks again for your help. I'll report back after further review of your suggestions and making changes.

BTW - what town in SE CT are you in? I am in Stamford.

 

Phil



#5 usasma

usasma

    Still visually handicapped (avatar is memory developed by my Dad


  • BSOD Kernel Dump Expert
  • 25,091 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Southeastern CT, USA
  • Local time:06:44 PM

Posted 06 October 2016 - 05:10 AM

I would stick with the Lenovo drivers - just in case they've modified them beyond what was originally provided to them.

 

I live in Montvile (actually it's Uncasville) - we're about 3 miles from the Mohegan Sun Casino


Edited by usasma, 06 October 2016 - 05:11 AM.

My browser caused a flood of traffic, sio my IP address was banned. Hope to fix it soon. Will get back to posting as soon as Im able.

- John  (my website: http://www.carrona.org/ )**If you need a more detailed explanation, please ask for it. I have the Knack. **  If I haven't replied in 48 hours, please send me a message. My eye problems have recently increased and I'm having difficult reading posts. (23 Nov 2017)FYI - I am completely blind in the right eye and ~30% blind in the left eye.<p>If the eye problems get worse suddenly, I may not be able to respond.If that's the case and help is needed, please PM a staff member for assistance.




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users