Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Was Freezing, Experienced first BSOD today. :'(


  • Please log in to reply
5 replies to this topic

#1 Nominal

Nominal

  • Members
  • 4 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:Northern California
  • Local time:02:06 AM

Posted 07 May 2017 - 03:58 PM

Hi there,
 
Wish I could remember my old login, please forgive the super noobish account.
 
 
OS:
Windows 10 Pro x64
 
What was original installed OS on system?
This. XD
· Age of system (hardware)
Various. GPU/Memory/SSD/PSU 2-3 years? Couple older HDDs. CPU, motherboard new. 
· Age of OS installation - have you re-installed the OS?
About two weeks? I had some other hardware issues and reformatted with new CPU/motherboard.
 
· CPU
Core i5-7600K, not overclocked (though running turbo), Arctic Freezer 120 Liquid Cooler.
 
· Video Card
EVGA Geforce 970 FTW
 
· MotherBoard - (if NOT a laptop)
Asus Z270F
 
MEMORY:
Crucial Ballistix Sport 32GB DDR4 PC4-19200 (4x 8GB)
 
· Power Supply - brand & wattage (skip if laptop)
Seasonic 1050W
 
· System Manufacturer
Me
 
· Laptop or Desktop?
Desktop
 
***
We had some rolling blackouts awhile back and my old motherboard/CPU combo... well. I wasn't really sure what happened, but anytime I plugged in a USB device I'd get a BSOD and would have to reinstall windows. Grasping, I picked up a Gigabyte board, which wouldn't post, so picked up the Asus Z970F and the Core i5-7600K to replace my Asus X99-A and i7-5820K.
 
My system seems to run PRETTY stable now, save for random freezing. Some days I won't freeze, others I'll freeze up to 5x. I didn't have a BSOD until this morning. The BSOD indicated APC Index Mismatch. 
 
Random observations:
Had some issue with my screen flickering on my primary Crossover 2795QHD display (I run two) following the blackout. Since my display has flickered I want to say twice? In the last couple of months, granted, and powered off and back on once. I checked the powerbrick and connections and everything seemed fine, though I can't say whether wiggling the cables and checking it affected it in any way. 
 
I think I'm experiencing some DNS issues, some sites occasionally won't load in Chrome requiring a refresh.
 
For a minute I thought freezes were exclusively happening when I was watching videos, but it'd happen while on Youtube or watching something with Windows Media Classic, and being really frank I spend a LOT of time running video in the background. I've frozen when not watching videos since I thought this might be related. :/a
 
I have some weird power issues in my room... like if I print while running my space heater my heater will shut down. I have my system on an APC battery backup now, but I picked that up after the rolling blackouts/USB issue. That said voltages seem within normal ranges consistently when monitoring my system.
 
I've run Memtest (at least 4 passes) and Prime95 (few hours) without any errors. Tried doing musical RAM swap. Ran Asus PC Diagnostics Tool. Tried underclocking my memory, changed core management from synchronized to auto, cleared CMOS. Running monitoring software, the system doesn't appear to be overheating. I've tried different BIOS builds. Updated all drivers to current... I experience freezes with a fresh install of Win10, though I think Windows Update snuck in there before I started.  I swapped PSUs with my roommate for an EVGA Supernova 750(?) and nothing changed. 
 
Ran all the malware/virus scans I could conceive of. 
 
Apologies for the wall of text, don't want to miss anything that might be useful. Any ideas would be so immensely appreciated!
 
Attached File  Perfmon.zip   189.72KB   1 downloads
Attached File  SysnativeFileCollectionApp.zip   591.38KB   8 downloads


BC AdBot (Login to Remove)

 


#2 usasma

usasma

    Still visually handicapped (avatar is memory developed by my Dad


  • BSOD Kernel Dump Expert
  • 25,089 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Southeastern CT, USA
  • Local time:05:06 AM

Posted 09 May 2017 - 06:40 AM

Power fluctuations can be just as bad as outages. 

If you must use a space heater, I would strongly suggest that you put it on a different circuit from the computer hardware.

You should keep the power supply to the computer as stable as possible - as this can cause problems such as you describe.

 

When it freezes, does it recover on it's own - or do you have to shut it down in order to recover?

 

From what I've seen (I've looked at the reports already), this seems to be a hardware/compatibility/low-level driver issue.

Let's start with the software stuff and see what happens.............

 

Your UEFI/BIOS (version 0906) dates from 2017.  Please check at the manufacturer's website to see if there are any UEFI/BIOS updates available for your system.  This is just in case there has been a more recent update.
FYI - W8 and W10 communicate more with the UEFI/BIOS than previous versions of Windows, so it's important to ensure that the UEFI/BIOS is kept up to date (and that outdated UEFI/BIOS' may be the cause of some compatibility issues).

Although you appear to have a reasonable number of Windows Update hotfixes for this version of your OS, please double check for any new Windows Updates.  It only takes one update to cause a problem, so it's essential that you have all of them.  The actual number is not important.  Rather it's important that you checked manually, installed any available updates, and didn't experience any errors when checking or updating.

Although you've tried another PSU, I have to wonder about other equipment that's attached/installed on this system.

And, I also have to wonder about other things connected to the current circuit that the system is on.

Finally, I have to wonder about the stability of your electrical supply.

 

2 older drivers that showed up in the lone dump file:

 

CAM_V3.sys                  Sat Jul 26 09:29:37 2008 (488B26C1)
CAM 3 Advanced PC monitoring software by NZXT [br] The CAM_V3.sys driver dates from 2008 and may not be compatible w/W10.  I've seen a couple of these recently (As of late 2016/early 2017 ) and believe that this might be a sign that these are no longer compatible w/W10. [br]  [br] This driver likely belongs to the CAM software from NZXT - so please uninstall it and see if that stops the BSOD's [br]  [br] FYI - this program also uses the WinRing library drivers - which have also been known to cause BSOD's on some Windows systems.
http://www.carrona.org/drivers/driver.php?id=CAM_V3.sys
 
tap0901.sys                 Thu Aug 22 08:40:01 2013 (521606A1)
TAP-Win32 Adapter V9 or[br]OpenVPN driver or COMODO http://openvpn.net/index.php/open-source/downloads.html or http://forums.comodo.com/index.php?action=dlattach;topic=17220.0;attach=17692  Requires registration
http://www.carrona.org/drivers/driver.php?id=tap0901.sys

Please uninstall the CAM_V3 software.
Also, as the TAP device doesn't seem to be used, please uninstall it.  If it's needed, feel free to install the latest, W10 compatible version AFTER uninstalling it.

 

Uninstall MalwareBytes and then update it to the latest available version if you wish to keep it (older versions had a weakness in one of the drivers that would occasionally spit out BSOD's).
The version with the fix is available from here:  https://forums.malwarebytes.com/topic/198624-malwarebytes-306-cu4-latest-version/
It was released on 29 March 2017.

 

If none of this helps, please run Driver Verifier according to these instructions:  http://www.carrona.org/verifier.html

 

Analysis:
The following is for information purposes only. The following information contains the relevant information from the blue screen analysis:
**************************Sun May  7 15:05:48.949 2017 (UTC - 4:00)**************************
Loading Dump File [C:\Users\john\SysnativeBSODApps\050717-7750-01.dmp]
Windows 10 Kernel Version 15063 MP (4 procs) Free x64
Built by: 15063.0.amd64fre.rs2_release.170317-1834
System Uptime:0 days 11:03:38.638
Probably caused by :ntkrnlmp.exe ( nt!KiSystemServiceExitPico+194 )
BugCheck 1, {7fff1c295434, 0, 380000, ffff8d8061582b00}
BugCheck Info: APC_INDEX_MISMATCH (1)
Arguments:
Arg1: 00007fff1c295434, Address of system call function or worker routine
Arg2: 0000000000000000, Thread->ApcStateIndex
Arg3: 0000000000380000, (Thread->SpecialApcDisable << 16) | Thread->KernelApcDisable
Arg4: ffff8d8061582b00, Call type (0 - system call, 1 - worker routine)
BUGCHECK_STR:  0x1
DEFAULT_BUCKET_ID:  WIN8_DRIVER_FAULT
PROCESS_NAME:  SpeechRuntime.exe
FAILURE_BUCKET_ID: 0x1_SysCallNum_4_nt!KiSystemServiceExitPico
CPUID:        "Intel® Core™ i5-7600K CPU @ 3.80GHz"
MaxSpeed:     3800
CurrentSpeed: 3792
  BIOS Version                  0906
  BIOS Release Date             03/22/2017
  Manufacturer                  System manufacturer
  Baseboard Manufacturer        ASUSTeK COMPUTER INC.
  Product Name                  System Product Name
  Baseboard Product             STRIX Z270F GAMING
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``


3rd Party Drivers:
The following is for information purposes only. My recommendations were given above. The drivers that follow belong to software or devices that were not developed by Microsoft.  You can find links to the driver information and where to update the drivers in the section after the code box:

**************************Sun May  7 15:05:48.949 2017 (UTC - 4:00)**************************
CAM_V3.sys                  Sat Jul 26 09:29:37 2008 (488B26C1)
AsIO.sys                    Wed Aug 22 05:54:47 2012 (5034AC67)
tap0901.sys                 Thu Aug 22 08:40:01 2013 (521606A1)
VXInput.sys                 Wed Aug 13 00:04:50 2014 (53EAE3E2)
e1i63x64.sys                Fri Mar  4 16:46:29 2016 (56DA0235)
TeeDriverW8x64.sys          Wed Aug 31 18:45:52 2016 (57C75E20)
ssdevfactory.sys            Wed Oct 19 17:04:31 2016 (5807DFDF)
RTKVHD64.sys                Tue Nov 22 05:34:09 2016 (58341F21)
cpuz141_x64.sys             Tue Nov 22 08:20:59 2016 (5834463B)
nvhda64v.sys                Wed Feb  8 07:32:14 2017 (589B0FCE)
nvlddmkm.sys                Thu Feb 23 02:38:50 2017 (58AE918A)
MBAMSwissArmy.sys           Wed Mar 15 15:00:41 2017 (58C98F59)
intelppm.sys                ***** Invalid 2007 Invalid 2007 Invalid
SleepStudyHelper.sys        ***** Invalid 2023 Invalid 2023 Invalid


http://www.carrona.org/drivers/driver.php?id=CAM_V3.sys
http://www.carrona.org/drivers/driver.php?id=AsIO.sys
http://www.carrona.org/drivers/driver.php?id=tap0901.sys
VXInput.sys - this driver hasn't been added to the DRT as of this run. Please search Google/Bing for the driver if additional information is needed.
http://www.carrona.org/drivers/driver.php?id=e1i63x64.sys
http://www.carrona.org/drivers/driver.php?id=TeeDriverW8x64.sys
http://www.carrona.org/drivers/driver.php?id=ssdevfactory.sys
http://www.carrona.org/drivers/driver.php?id=RTKVHD64.sys
cpuz141_x64.sys - this driver hasn't been added to the DRT as of this run. Please search Google/Bing for the driver if additional information is needed.
http://www.carrona.org/drivers/driver.php?id=nvhda64v.sys
http://www.carrona.org/drivers/driver.php?id=nvlddmkm.sys
http://www.carrona.org/drivers/driver.php?id=MBAMSwissArmy.sys
http://www.carrona.org/drivers/driver.php?id=intelppm.sys
SleepStudyHelper.sys - this driver hasn't been added to the DRT as of this run. Please search Google/Bing for the driver if additional information is needed.

 
My browser caused a flood of traffic, sio my IP address was banned. Hope to fix it soon. Will get back to posting as soon as Im able.

- John  (my website: http://www.carrona.org/ )**If you need a more detailed explanation, please ask for it. I have the Knack. **  If I haven't replied in 48 hours, please send me a message. My eye problems have recently increased and I'm having difficult reading posts. (23 Nov 2017)FYI - I am completely blind in the right eye and ~30% blind in the left eye.<p>If the eye problems get worse suddenly, I may not be able to respond.If that's the case and help is needed, please PM a staff member for assistance.

#3 Nominal

Nominal
  • Topic Starter

  • Members
  • 4 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:Northern California
  • Local time:02:06 AM

Posted 01 June 2017 - 09:31 PM

Thank you so much for your response, it took me awhile to get back to this, had a family emergency + extreme case of Murphy's Law. :(

 

I uninstalled Cam and MWBytes to no avail. BSODs seem more frequent (weird). Can't pinpoint anything specific I'm doing apart from my now superstitious belief that if my roommate is playing my PS4 in the room my rig won't BSOD. Running the verifier, Windows would almost immediately BSOD upon loading (immediately after BIOS).

 

MEMORY.dmp is here: https://www.dropbox.com/s/o6x8a5qnv89tshp/MEMORY.zip?dl=0

 

...weird posting that link since my Googling seemed to indicate cbfs6.sys could be from Dropbox..? Think I'll close that for posterity... 



#4 usasma

usasma

    Still visually handicapped (avatar is memory developed by my Dad


  • BSOD Kernel Dump Expert
  • 25,089 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Southeastern CT, USA
  • Local time:05:06 AM

Posted 02 June 2017 - 06:24 AM

I don't see anything that relates cbfs6.sys to Dropbox.  Could you please provide a link to it?

My research suggests that this (cbfs6.sys) is the driver for the Callback File System from Eldos - and it's a part of the SFTP Net Drive Free program from them:  http://www.shouldiremoveit.com/SFTP-Net-Drive-Free-46804-program.aspx

Please uninstall it.  If unable to locate it, please post back and I'll make some suggestions for manually getting rid of it.

 

Analysis:
The following is for information purposes only. The following information contains the relevant information from the blue screen analysis:
**************************Thu Jun  1 21:20:41.133 2017 (UTC - 4:00)**************************
Loading Dump File [C:\Users\john\SysnativeBSODApps\MEMORY.DMP]
Windows 10 Kernel Version 15063 MP (4 procs) Free x64
Built by: 15063.0.amd64fre.rs2_release.170317-1834
System Uptime:0 days 0:00:02.851
*** ERROR: Module load completed but symbols could not be loaded for cbfs6.sys
Probably caused by :ntoskrnl.wrong.symbols.exe ( nt_wrong_symbols!591FD902889000 )
BugCheck C4, {2000, fffff80b5658d7c3, 0, 73466243}
BugCheck Info: DRIVER_VERIFIER_DETECTED_VIOLATION (c4)
DRIVER_VERIFIER_DETECTED_VIOLATION (c4)
Arguments:
Arg1: 0000000000002000, Code Integrity Issue: The caller specified an executable pool type. (Expected: NonPagedPoolNx)
Arg2: fffff80b5658d7c3, The address in the driver's code where the error was detected.
Arg3: 0000000000000000, Pool Type.
Arg4: 0000000073466243, Pool Tag (if provided).
BUGCHECK_STR:  591FD902
PROCESS_NAME:  ntoskrnl.wrong.symbols.exe
FAILURE_BUCKET_ID: WRONG_SYMBOLS_X64_10.0.15063.332_(WinBuild.160101.0800)_TIMESTAMP_170520-054954_591FD902_nt_wrong_symbols!591FD902889000
CPUID:        "Intel® Core™ i5-7600K CPU @ 3.80GHz"
MaxSpeed:     3800
CurrentSpeed: 3792
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``


3rd Party Drivers:
The following is for information purposes only. My recommendations were given above. The drivers that follow belong to software or devices that were not developed by Microsoft.  You can find links to the driver information and where to update the drivers in the section after the code box:

**************************Thu Jun  1 21:20:41.133 2017 (UTC - 4:00)**************************
cbfs6.sys                   Wed Sep 21 08:42:02 2016 (57E2801A)
SleepStudyHelper.sys        ***** Invalid 2026 Invalid 2026 Invalid


cbfs6.sys - this driver hasn't been added to the DRT as of this run. Please search Google/Bing for the driver if additional information is needed.
SleepStudyHelper.sys - this driver hasn't been added to the DRT as of this run. Please search Google/Bing for the driver if additional information is needed.

 
My browser caused a flood of traffic, sio my IP address was banned. Hope to fix it soon. Will get back to posting as soon as Im able.

- John  (my website: http://www.carrona.org/ )**If you need a more detailed explanation, please ask for it. I have the Knack. **  If I haven't replied in 48 hours, please send me a message. My eye problems have recently increased and I'm having difficult reading posts. (23 Nov 2017)FYI - I am completely blind in the right eye and ~30% blind in the left eye.<p>If the eye problems get worse suddenly, I may not be able to respond.If that's the case and help is needed, please PM a staff member for assistance.

#5 Nominal

Nominal
  • Topic Starter

  • Members
  • 4 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:Northern California
  • Local time:02:06 AM

Posted 02 June 2017 - 11:23 AM

I can't find SFTP, nor what originally what made me deduce it was related to Dropbox, however according to this thread:
 
 
It looks unrelated to Dropbox, though looks like anything with virtual disks may be suspect? 


#6 usasma

usasma

    Still visually handicapped (avatar is memory developed by my Dad


  • BSOD Kernel Dump Expert
  • 25,089 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Southeastern CT, USA
  • Local time:05:06 AM

Posted 03 June 2017 - 06:49 AM

Anything that has need to write to a file system can be suspect.

- virtual disks

- encryption software (?Intuit Data protect?)

- sync software (?Polar FlowSync?)

- backup software

and other stuff (but I'm just guessing here so this list is by no means complete).

 

 

First, please check in C:\Windows\System32\drivers for the cbfs6.sys driver.

Right click on it, select Properties, then select the Details tab and see if that gives you any more info on it.

Also, search the system for cbfs6 files (search for cbfs6, not for cbfs6.sys - that'll widen the search a bit and may give more information) and let us know the different locations that you find them in.

Next, please re-run and then resubmit the Sysnative reports - the cbfs6.sys driver doesn't appear in the reports that I checked.

 

After looking at those things, I'll post a detailed list of things to do to try and stop this driver from loading.

Here's what it'll look like (you can get started on steps 1 - 3):

1)   Create a Restore Point using System Restore
2)   Create a Repair disc (Recovery Drive in Win8.1/10):
Win 7 - Go to Start...All Programs...Maintenance...Create a System Repair Disc
Win 8 - Press "WIN" and "R" to open the Run dialog...type "RECDISC" (without the quotes) and press ENTER
Win 8.1 - Go to the Start Screen and type in "recoverydrive" (one word, without the quotes).  That will start the recovery drive process.  You will need a USB drive of at least 512 mB - and all data will be erased off of it.  If copying the recovery partition the drive size will be much, much larger (16 - 32 gB drive required).
Win 10 - Go to Start (press the "Win" key) and type in "recoverydrive" (one word, without the quotes).  That will start the recovery drive process.  You will need a USB drive of at least 512 mB - and all data will be erased off of it.  If copying the recovery partition the drive size will be much, much larger (16 - 32 gB drive required).
3)   Test the System Repair disc/Recovery Drive to make sure that you can get to the System Restore entry when you boot from the disk/drive (you may also want to try actually using System Restore to make sure that it works)
4)   Download this free program (http://technet.microsoft.com/en-us/sysinternals/bb963902.aspx) and use it to disable any instances of XXXXXXXX.sys that are starting (or any other XXXXXXXX entries) (DO NOT DELETE - only disable by removing the checkmark in the left hand column)
5)   Check in Device Manager (to include showing hidden devices from the View menu item) and ensure that any instances of XXXXXXXX.sys (or any other XXXXXXXX entries) are "Uninstalled" (DO NOT DISABLE THESE).
6)   Check in the Services applet (services.msc) to be sure any instances of XXXXXXXX.sys or any other XXXXXXXX entries are disabled.
7)   EXPERIMENTAL STEP (only try if you're certain of your abilities - I have not tried this step myself).  Search the registry (use regedit.exe) to locate any entries that have the driver name (XXXXXXXX.sys) or the program name (XXXXXXXX).  Delete these keys (it's advisable to back them up first - but you've also backed up the entire registry when creating a System Restore point in step 1.  Alternatively, you can set the values in these keys to DISABLED (but the "how" of this is beyond the scope of this guide).
8)   Go to C:\Windows\System32\drivers and rename the XXXXXXXX.sys driver to XXXXXXXX.BAD (search the hard drive for it if it's not in C:\Windows\System32\drivers). (search the hard drive for it if it's not in C:\Windows\System32\drivers).

Also search the system to see if there are any other instances of the XXXXXXXX.sys driver in other locations - and rename them to XXXXXXXX.BAD also.
9)   Test to be sure that the device is working OK and that any BSOD's/errors have stopped.


In the event that the system doesn't boot:

1)   Boot from the System Repair disc/Recovery Drive and use the Command Prompt option to rename XXXXXXXX.BAD to XXXXXXXX.sys

ren C:\Windows\System32\drivers\XXXXXXXX.BAD C:\Windows\System32\drivers\XXXXXXXX.sys
2)   Boot from the System Repair disc/Recovery Drive and use the System Restore option to restore the system to a point before the changes were made.

Good luck!

Edited by usasma, 03 June 2017 - 06:55 AM.

My browser caused a flood of traffic, sio my IP address was banned. Hope to fix it soon. Will get back to posting as soon as Im able.

- John  (my website: http://www.carrona.org/ )**If you need a more detailed explanation, please ask for it. I have the Knack. **  If I haven't replied in 48 hours, please send me a message. My eye problems have recently increased and I'm having difficult reading posts. (23 Nov 2017)FYI - I am completely blind in the right eye and ~30% blind in the left eye.<p>If the eye problems get worse suddenly, I may not be able to respond.If that's the case and help is needed, please PM a staff member for assistance.




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users