Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Fresh Install Win10 - Fails to boot first time, eventviewer: 0xc0000001


  • Please log in to reply
21 replies to this topic

#1 RedArr0w

RedArr0w

  • Members
  • 25 posts
  • OFFLINE
  •  
  • Local time:11:39 AM

Posted 08 October 2017 - 09:39 AM

Hello,

 

I recently have done a full fresh install onto a new Intel 6 M.2 SSD Drive, with Windows 10.

 

After shuting down cleanly one evening say, two days after the install was done that morning I started the PC and it got past the BIOS screen then, displayed nothing but blank screens. Then it proccceded to reboot it's self, in which ccase was successful this time and booted into Windows 10.

 

After checking the Event Viewer, I've noticed I had a 0xc0000001 BSOD without ever actually seeing the Blue Screen at boot.

 

Hence why I am now seeing assistance regarding this BSOD on this forum.

Here is my Speccy Report:

http://speccy.piriform.com/results/X1bGJRN7l7J5rlabXngoAEt

 

And please also find attached my Sysnative File Collection file.

 

Many thanks for taking the time to help me!

 

Regards,

 

Calvin.

Attached Files



BC AdBot (Login to Remove)

 


m

#2 usasma

usasma

    Still visually handicapped (avatar is memory developed by my Dad


  • BSOD Kernel Dump Expert
  • 24,685 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:Southeastern CT, USA
  • Local time:06:39 AM

Posted 08 October 2017 - 03:58 PM

Unseen BSOD's aren't all that unusual (but BSOD's are actually sort of rare).  Most people don't check the Event Viewer, so they don't even know they happened.

 

Your UEFI/BIOS (version V1.13) dates from 2016.  Please check at the manufacturer's website to see if there are any UEFI/BIOS updates available for your system.  This is just in case there has been a more recent update.
FYI - W8 and W10 communicate more with the UEFI/BIOS than previous versions of Windows, so it's important to ensure that the UEFI/BIOS is kept up to date (and that outdated UEFI/BIOS' may be the cause of some compatibility issues).

Although you appear to have a reasonable number of Windows Update hotfixes for this version of your OS, please double check for any new Windows Updates.  It only takes one update to cause a problem, so it's essential that you have all of them.  The actual number is not important.  Rather it's important that you checked manually, installed any available updates, and didn't experience any errors when checking or updating.

You have 4 hard drives.  What is the make/model/wattage and age of your Power Supply?
The purpose of this question is to get you to evaluate your PSU.
- PSU's tend to get less efficient with age
- adding components over time may decrease the ability of the PSU to support the entire system (Maybe remove some stuff to see if that helps?)
- while you can measure the output of a PSU with a multimeter, the readings may change dramatically when the PSU is put under load.  PSU testing instructions (by dc3) here:  https://www.bleepingcomputer.com/forums/t/654994/pc-is-crashingfreezing-up-multiple-times-daily/page-2#entry4341756
- there's a free PSU test in the OCCT program at http://www.ocbase.com/

The drivers for this device aren't installed:

 

H100iGTX Cooler    USB\VID_1B1C&PID_0C03\7289_1.0    The drivers for this device are not installed.

Please download and install the latest, W10 compatible drivers for this device.

 

With only 1 memory dump to work with, there's not much evidence of why this happened.
Please run Driver Verifier according to these instructions (and hopefully it'll tell us more):  http://www.carrona.org/verifier.html

 

Analysis:
The following is for information purposes only.
The following information contains the relevant information from the blue screen analysis:
**************************Sun Oct  8 10:14:44.422 2017 (UTC - 4:00)**************************
Loading Dump File [C:\Users\john\SysnativeBSODApps\100817-5156-01.dmp]
Windows 10 Kernel Version 15063 MP (8 procs) Free x64
Built by: 15063.0.amd64fre.rs2_release.170317-1834
System Uptime:2 days 5:31:59.402
Probably caused by :memory_corruption ( nt!MiDeleteSubsectionPages+57f )
BugCheck C2, {50, ffffd986ff75f000, 6ff75f, 100000000000}
BugCheck Info: BAD_POOL_CALLER (c2)
Arguments:
Arg1: 0000000000000050, Attempt to free a non-allocated paged pool address
Arg2: ffffd986ff75f000, Starting address
Arg3: 00000000006ff75f, Start offset in pages from beginning of paged pool
Arg4: 0000100000000000, Size in bytes of paged pool
BUGCHECK_STR:  0xc2_50
PROCESS_NAME:  System
FAILURE_BUCKET_ID: 0xc2_50_nt!MiDeleteSubsectionPages
CPUID:        "Intel® Core™ i7-4790K CPU @ 4.00GHz"
MaxSpeed:     4000
CurrentSpeed: 4000
  BIOS Version                  V1.13
  BIOS Release Date             02/16/2016
  Manufacturer                  MSI
  Product Name                  MS-7917
  Baseboard Product             Z97 GAMING 5 (MS-7917)
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``


3rd Party Drivers:
The following is for information purposes only.
My recommendations were given above. The drivers that follow belong to software or devices that were not developed by Microsoft.  You can find links to the driver information and where to update the drivers in the section after the code box:

**************************Sun Oct  8 10:14:44.422 2017 (UTC - 4:00)**************************
dump_stornvme.sys           Tue Mar 13 03:19:09 2001 (3AADC9ED)
hiber_stornvme.sys          Tue Mar 13 03:19:09 2001 (3AADC9ED)
XtuAcpiDriver.sys           Thu Feb 26 07:51:57 2015 (54EF16ED)
lgcoretemp.sys              Tue Jun  9 12:52:10 2015 (557719BA)
TeeDriverW8x64.sys          Tue Jul  7 13:43:32 2015 (559C0FC4)
kldisk.sys                  Fri Dec 25 02:47:51 2015 (567CF4A7)
kl1.sys                     Fri Apr  1 10:20:28 2016 (56FE83AC)
kltap.sys                   Mon May 16 17:04:28 2016 (573A35DC)
LGVirHid.sys                Mon Jun 13 14:47:03 2016 (575EFFA7)
LGJoyXlCore.sys             Mon Jun 13 14:47:06 2016 (575EFFAA)
LGBusEnum.sys               Mon Jun 13 14:47:08 2016 (575EFFAC)
e2xw10x64.sys               Wed Sep 14 16:52:26 2016 (57D9B88A)
klim6.sys                   Fri Sep 30 09:35:20 2016 (57EE6A18)
klwfp.sys                   Tue Nov 29 05:32:02 2016 (583D5922)
klmouflt.sys                Wed Nov 30 02:58:40 2016 (583E86B0)
klbackupdisk.sys            Wed Dec  7 04:11:58 2016 (5847D25E)
cm_km.sys                   Thu Dec 15 02:43:48 2016 (585249B4)
klkbdflt.sys                Tue Dec 20 17:06:18 2016 (5859AB5A)
klbackupflt.sys             Fri Dec 23 06:35:00 2016 (585D0BE4)
klupd_klif_kimul.sys        Mon Feb  6 06:09:33 2017 (5898596D)
klpd.sys                    Fri Mar 24 09:44:30 2017 (58D522BE)
klwtp.sys                   Fri Mar 24 09:45:50 2017 (58D5230E)
klhk.sys                    Tue Mar 28 08:43:13 2017 (58DA5A61)
klupd_klif_arkmon.sys       Thu Mar 30 10:41:32 2017 (58DD191C)
klupd_klif_mark.sys         Thu Mar 30 10:46:51 2017 (58DD1A5B)
klupd_klif_klark.sys        Thu Mar 30 10:51:16 2017 (58DD1B64)
klupd_klif_klbg.sys         Thu Mar 30 10:51:17 2017 (58DD1B65)
ssdevfactory.sys            Mon May  8 12:03:55 2017 (591096EB)
nvhda64v.sys                Tue May 16 09:02:27 2017 (591AF863)
nvvad64v.sys                Sun May 28 19:04:45 2017 (592B578D)
kneps.sys                   Wed Jun  7 05:54:05 2017 (5937CD3D)
klflt.sys                   Wed Jul 19 08:00:58 2017 (596F49FA)
klids.sys                   Fri Jul 28 05:32:39 2017 (597B04B7)
klif.sys                    Fri Aug 11 12:04:35 2017 (598DD593)
nvlddmkm.sys                Sat Sep 16 12:54:01 2017 (59BD5729)
intelppm.sys                ***** Invalid 2007 Invalid 2007 Invalid


dump_stornvme.sys - this driver hasn't been added to the DRT as of this run. Please search Google/Bing for the driver if additional information is needed.
hiber_stornvme.sys - this driver hasn't been added to the DRT as of this run. Please search Google/Bing for the driver if additional information is needed.
http://www.carrona.org/drivers/driver.php?id=XtuAcpiDriver.sys
http://www.carrona.org/drivers/driver.php?id=lgcoretemp.sys
http://www.carrona.org/drivers/driver.php?id=TeeDriverW8x64.sys
http://www.carrona.org/drivers/driver.php?id=kldisk.sys
http://www.carrona.org/drivers/driver.php?id=kl1.sys
kltap.sys - this driver hasn't been added to the DRT as of this run. Please search Google/Bing for the driver if additional information is needed.
http://www.carrona.org/drivers/driver.php?id=LGVirHid.sys
http://www.carrona.org/drivers/driver.php?id=LGJoyXlCore.sys
http://www.carrona.org/drivers/driver.php?id=LGBusEnum.sys
http://www.carrona.org/drivers/driver.php?id=e2xw10x64.sys
http://www.carrona.org/drivers/driver.php?id=klim6.sys
http://www.carrona.org/drivers/driver.php?id=klwfp.sys
http://www.carrona.org/drivers/driver.php?id=klmouflt.sys
http://www.carrona.org/drivers/driver.php?id=klbackupdisk.sys
http://www.carrona.org/drivers/driver.php?id=cm_km.sys
http://www.carrona.org/drivers/driver.php?id=klkbdflt.sys
http://www.carrona.org/drivers/driver.php?id=klbackupflt.sys
klupd_klif_kimul.sys - this driver hasn't been added to the DRT as of this run. Please search Google/Bing for the driver if additional information is needed.
http://www.carrona.org/drivers/driver.php?id=klpd.sys
http://www.carrona.org/drivers/driver.php?id=klwtp.sys
http://www.carrona.org/drivers/driver.php?id=klhk.sys
klupd_klif_arkmon.sys - this driver hasn't been added to the DRT as of this run. Please search Google/Bing for the driver if additional information is needed.
klupd_klif_mark.sys - this driver hasn't been added to the DRT as of this run. Please search Google/Bing for the driver if additional information is needed.
klupd_klif_klark.sys - this driver hasn't been added to the DRT as of this run. Please search Google/Bing for the driver if additional information is needed.
klupd_klif_klbg.sys - this driver hasn't been added to the DRT as of this run. Please search Google/Bing for the driver if additional information is needed.
http://www.carrona.org/drivers/driver.php?id=ssdevfactory.sys
http://www.carrona.org/drivers/driver.php?id=nvhda64v.sys
http://www.carrona.org/drivers/driver.php?id=nvvad64v.sys
http://www.carrona.org/drivers/driver.php?id=kneps.sys
http://www.carrona.org/drivers/driver.php?id=klflt.sys
klids.sys - this driver hasn't been added to the DRT as of this run. Please search Google/Bing for the driver if additional information is needed.
http://www.carrona.org/drivers/driver.php?id=klif.sys
http://www.carrona.org/drivers/driver.php?id=nvlddmkm.sys
http://www.carrona.org/drivers/driver.php?id=intelppm.sys

 
 

- John  (my website: http://www.carrona.org/ )
**If you need a more detailed explanation, please ask for it. I have the Knack. **  If I haven't replied in 48 hours, please send me a message.

 

My eye problems have lessened and I'm able to post/respond without too much difficulty. (05 Sep 2017)
FYI - I am completely blind in the right eye and ~30% blind in the left eye.

If the eye problems come on suddenly, I may not be able to respond.
If that's the case and help is needed, please PM a staff member for assistance.


#3 RedArr0w

RedArr0w
  • Topic Starter

  • Members
  • 25 posts
  • OFFLINE
  •  
  • Local time:11:39 AM

Posted 09 October 2017 - 01:09 AM

Hi there Usasma!

 

Many thanks again for taking the time to help me with my BSOD issue.

 

I have proceeded to updated my BIOS - It is now the lastest version: 1.D0

 

The PSU I have is a: "Corsair 750 Watt HX750i Fully Modular ATX PSU" which I purchased with all the other components on 21 December 2015. -Do you feel i should still run the voltage tests you suggested below?

 

Regarding the Missing Driver for my CPU AIO Cooler -I downloaded and installed the latest drivers/software available on their website however one of the drivers it uses isn't verified by Windows see following link: http://forum.corsair.com/v3/showthread.php?t=169312&page=4

 

I shall follow the Driver Verifier tomorrow as it's too late (7am!) for me to do this now lol.

 

Cheers,

 

Calvin. :)

 

 



#4 RedArr0w

RedArr0w
  • Topic Starter

  • Members
  • 25 posts
  • OFFLINE
  •  
  • Local time:11:39 AM

Posted 09 October 2017 - 05:43 PM

Hello Usasma,

 

I have followed the Driver Verifier Instructions on the link you provided and It worked. (Well, it made my PC have a bsod on a driver and had to boot safe mode and delete the driver verifier settings to stop it bsod'ing)

 

I will upload the memory dump to google drive as it's too large to attach to this post, and edit when I have a Link for you.

 

 

Here is the memory dump file:

https://drive.google.com/file/d/0BzEFuTADaw_lSHJmS0JyYnlhX1E/view?usp=sharing

 

I believe on the BSOD it said it failed on driver: K1l

 

Or something along those lines.. don't quote me on that, as I didn't take the time to write it down before it restarted.

 

 

How would you like me to proceed?

 

Regards,

Calvin.


Edited by RedArr0w, 09 October 2017 - 05:50 PM.


#5 usasma

usasma

    Still visually handicapped (avatar is memory developed by my Dad


  • BSOD Kernel Dump Expert
  • 24,685 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:Southeastern CT, USA
  • Local time:06:39 AM

Posted 09 October 2017 - 07:40 PM

Uninstall Kaspersky and see if that helps.
While testing, use Windows Defender and the Windows firewall.

 

EDIT:  Having difficulty downloading the memory dump.

Please set your system for Minidumps (much smaller than the MEMORY.DMP file):  http://www.carrona.org/setmini.html
More info on dump file options here: http://support.microsoft.com/kb/254649
 


Edited by usasma, 09 October 2017 - 07:46 PM.

- John  (my website: http://www.carrona.org/ )
**If you need a more detailed explanation, please ask for it. I have the Knack. **  If I haven't replied in 48 hours, please send me a message.

 

My eye problems have lessened and I'm able to post/respond without too much difficulty. (05 Sep 2017)
FYI - I am completely blind in the right eye and ~30% blind in the left eye.

If the eye problems come on suddenly, I may not be able to respond.
If that's the case and help is needed, please PM a staff member for assistance.


#6 RedArr0w

RedArr0w
  • Topic Starter

  • Members
  • 25 posts
  • OFFLINE
  •  
  • Local time:11:39 AM

Posted 10 October 2017 - 05:46 AM

Morning!

 

I have uninstall Kaspersky and also the Kaspersky Secure connection.

 

 

Regarding the dump I checked the google drive link and it downloaded fine for me....

 

when you go to the link I provided you should see the following button at the top right of you screen:

 

KvYawf-iSFi70ftS9ADFkA.png

 

 

Then it should download fine. I have enabled the smaller Minidumps files as you asked, should the BSOD happen again.

 

Hope you will have no issues downloading my previous dump file, if you still do let me know and I'll go through that Verifier process again to try and generate the minidump this time for you.

 

thank you again for all your help Usasma, I do really appreciate you taking the time out of your day to help me with this! :)

 

Regards,

Calvin


Edited by RedArr0w, 10 October 2017 - 05:51 AM.


#7 RedArr0w

RedArr0w
  • Topic Starter

  • Members
  • 25 posts
  • OFFLINE
  •  
  • Local time:11:39 AM

Posted 11 October 2017 - 05:56 AM

Hello,

 

This morning when I turned my PC on, I had another 'hidden' bsod with BugCheck: 0x0000003b

 

I have attached the minidump to this post should you require the 'smaller' dump file.

 

Hope all is well.

 

Regards,

 

Calvin.

Attached Files



#8 usasma

usasma

    Still visually handicapped (avatar is memory developed by my Dad


  • BSOD Kernel Dump Expert
  • 24,685 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:Southeastern CT, USA
  • Local time:06:39 AM

Posted 11 October 2017 - 06:20 AM

The large memory dump is the full copy of the memory dump uploaded with the Sysnative report (100817-5156-01.dmp)

As such, I won't post an analysis of it (as it's the same as the one I posted earlier.
This is not a Driver Verifier enabled memory dump.

 

The next minidump that you attached is very similar to the previous one.
And it shows a lot of Kaspersky drivers.
Please uninstall Kaspersky and leave it uninstalled while testing.

 

 

Analysis:
The following is for information purposes only.
The following information contains the relevant information from the blue screen analysis:
**************************Wed Oct 11 06:48:34.562 2017 (UTC - 4:00)**************************
Loading Dump File [C:\Users\john\SysnativeBSODApps\101117-5656-01.dmp]
Windows 10 Kernel Version 15063 MP (8 procs) Free x64
System Uptime:1 days 12:09:26.981
Probably caused by :win32kfull.sys ( win32kfull!FHOBJ::bScanLists+53 )
BugCheck 3B, {c0000005, fffff904a426fd13, ffffb7816b119090, 0}
BugCheck Info: SYSTEM_SERVICE_EXCEPTION (3b)
Arguments:
Arg1: 00000000c0000005, Exception code that caused the bugcheck
Arg2: fffff904a426fd13, Address of the instruction which caused the bugcheck
Arg3: ffffb7816b119090, Address of the context record for the exception that caused the bugcheck
Arg4: 0000000000000000, zero.
BUGCHECK_STR:  0x3B
DEFAULT_BUCKET_ID:  WIN8_DRIVER_FAULT
PROCESS_NAME:  MSI_LiveUpdate
FAILURE_BUCKET_ID: 0x3B_win32kfull!FHOBJ::bScanLists
CPUID:        "Intel® Core™ i7-4790K CPU @ 4.00GHz"
MaxSpeed:     4000
CurrentSpeed: 4000
  BIOS Version                  V1.13
  BIOS Release Date             02/16/2016
  Manufacturer                  MSI
  Product Name                  MS-7917
  Baseboard Product             Z97 GAMING 5 (MS-7917)
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``

3rd Party Drivers:
The following is for information purposes only.
My recommendations were given above. The drivers that follow belong to software or devices that were not developed by Microsoft.  You can find links to the driver information and where to update the drivers in the section after the code box:

**************************Wed Oct 11 06:48:34.562 2017 (UTC - 4:00)**************************
MpKsldb271572.sys           Mon Feb 27 20:54:41 1989 (2409FBE1)
dump_stornvme.sys           Tue Mar 13 03:19:09 2001 (3AADC9ED)
hiber_stornvme.sys          Tue Mar 13 03:19:09 2001 (3AADC9ED)
MBfilt64.sys                Thu Jul 30 23:40:32 2009 (4A7267B0)
hiber_storport.sys          Wed Aug 28 09:02:36 2013 (521DF4EC)
XtuAcpiDriver.sys           Thu Feb 26 07:51:57 2015 (54EF16ED)
lgcoretemp.sys              Tue Jun  9 12:52:10 2015 (557719BA)
TeeDriverW8x64.sys          Tue Jul  7 13:43:32 2015 (559C0FC4)
e22w10x64.sys               Fri Aug 28 17:05:38 2015 (55E0CD22)
kldisk.sys                  Fri Dec 25 02:47:51 2015 (567CF4A7)
bwcW10x64.sys               Fri Jan 22 17:08:51 2016 (56A2A873)
kl1.sys                     Fri Apr  1 10:20:28 2016 (56FE83AC)
LGVirHid.sys                Mon Jun 13 14:47:03 2016 (575EFFA7)
LGJoyXlCore.sys             Mon Jun 13 14:47:06 2016 (575EFFAA)
LGBusEnum.sys               Mon Jun 13 14:47:08 2016 (575EFFAC)
klwfp.sys                   Tue Nov 29 05:32:02 2016 (583D5922)
klmouflt.sys                Wed Nov 30 02:58:40 2016 (583E86B0)
RTKVHD64.sys                Tue Dec  6 06:23:15 2016 (58469FA3)
klbackupdisk.sys            Wed Dec  7 04:11:58 2016 (5847D25E)
cm_km.sys                   Thu Dec 15 02:43:48 2016 (585249B4)
klkbdflt.sys                Tue Dec 20 17:06:18 2016 (5859AB5A)
klbackupflt.sys             Fri Dec 23 06:35:00 2016 (585D0BE4)
klpd.sys                    Fri Mar 24 09:44:30 2017 (58D522BE)
klhk.sys                    Tue Mar 28 08:43:13 2017 (58DA5A61)
klupd_klif_arkmon.sys       Thu Mar 30 10:41:32 2017 (58DD191C)
klupd_klif_mark.sys         Thu Mar 30 10:46:51 2017 (58DD1A5B)
klupd_klif_klark.sys        Thu Mar 30 10:51:16 2017 (58DD1B64)
klupd_klif_klbg.sys         Thu Mar 30 10:51:17 2017 (58DD1B65)
ssdevfactory.sys            Mon May  8 12:03:55 2017 (591096EB)
nvhda64v.sys                Tue May 16 09:02:27 2017 (591AF863)
nvvad64v.sys                Sun May 28 19:04:45 2017 (592B578D)
kneps.sys                   Wed Jun  7 05:54:05 2017 (5937CD3D)
klflt.sys                   Wed Jul 19 08:00:58 2017 (596F49FA)
klif.sys                    Fri Aug 11 12:04:35 2017 (598DD593)
nvlddmkm.sys                Sat Sep 16 12:54:01 2017 (59BD5729)
intelppm.sys                ***** Invalid 2007 Invalid 2007 Invalid


MpKsldb271572.sys - this driver hasn't been added to the DRT as of this run. Please search Google/Bing for the driver if additional information is needed.
dump_stornvme.sys - this driver hasn't been added to the DRT as of this run. Please search Google/Bing for the driver if additional information is needed.
hiber_stornvme.sys - this driver hasn't been added to the DRT as of this run. Please search Google/Bing for the driver if additional information is needed.
http://www.carrona.org/drivers/driver.php?id=MBfilt64.sys
http://www.carrona.org/drivers/driver.php?id=hiber_storport.sys
http://www.carrona.org/drivers/driver.php?id=XtuAcpiDriver.sys
http://www.carrona.org/drivers/driver.php?id=lgcoretemp.sys
http://www.carrona.org/drivers/driver.php?id=TeeDriverW8x64.sys
e22w10x64.sys - this driver hasn't been added to the DRT as of this run. Please search Google/Bing for the driver if additional information is needed.
http://www.carrona.org/drivers/driver.php?id=kldisk.sys
http://www.carrona.org/drivers/driver.php?id=bwcW10x64.sys
http://www.carrona.org/drivers/driver.php?id=kl1.sys
http://www.carrona.org/drivers/driver.php?id=LGVirHid.sys
http://www.carrona.org/drivers/driver.php?id=LGJoyXlCore.sys
http://www.carrona.org/drivers/driver.php?id=LGBusEnum.sys
http://www.carrona.org/drivers/driver.php?id=klwfp.sys
http://www.carrona.org/drivers/driver.php?id=klmouflt.sys
http://www.carrona.org/drivers/driver.php?id=RTKVHD64.sys
http://www.carrona.org/drivers/driver.php?id=klbackupdisk.sys
http://www.carrona.org/drivers/driver.php?id=cm_km.sys
http://www.carrona.org/drivers/driver.php?id=klkbdflt.sys
http://www.carrona.org/drivers/driver.php?id=klbackupflt.sys
http://www.carrona.org/drivers/driver.php?id=klpd.sys
http://www.carrona.org/drivers/driver.php?id=klhk.sys
klupd_klif_arkmon.sys - this driver hasn't been added to the DRT as of this run. Please search Google/Bing for the driver if additional information is needed.
klupd_klif_mark.sys - this driver hasn't been added to the DRT as of this run. Please search Google/Bing for the driver if additional information is needed.
klupd_klif_klark.sys - this driver hasn't been added to the DRT as of this run. Please search Google/Bing for the driver if additional information is needed.
klupd_klif_klbg.sys - this driver hasn't been added to the DRT as of this run. Please search Google/Bing for the driver if additional information is needed.
http://www.carrona.org/drivers/driver.php?id=ssdevfactory.sys
http://www.carrona.org/drivers/driver.php?id=nvhda64v.sys
http://www.carrona.org/drivers/driver.php?id=nvvad64v.sys
http://www.carrona.org/drivers/driver.php?id=kneps.sys
http://www.carrona.org/drivers/driver.php?id=klflt.sys
http://www.carrona.org/drivers/driver.php?id=klif.sys
http://www.carrona.org/drivers/driver.php?id=nvlddmkm.sys
http://www.carrona.org/drivers/driver.php?id=intelppm.sys

 

- John  (my website: http://www.carrona.org/ )
**If you need a more detailed explanation, please ask for it. I have the Knack. **  If I haven't replied in 48 hours, please send me a message.

 

My eye problems have lessened and I'm able to post/respond without too much difficulty. (05 Sep 2017)
FYI - I am completely blind in the right eye and ~30% blind in the left eye.

If the eye problems come on suddenly, I may not be able to respond.
If that's the case and help is needed, please PM a staff member for assistance.


#9 RedArr0w

RedArr0w
  • Topic Starter

  • Members
  • 25 posts
  • OFFLINE
  •  
  • Local time:11:39 AM

Posted 11 October 2017 - 05:23 PM

Oh!

 

My mistake then, I must have selected the wrong dump file when uploading... 

 

You mention that my last BSOD contained alot of references to Kaspersky Drivers again, but how can this be? I have uninstalled it when you first asked me to.

 

This is a screenshot of my 'Programs and Features' window:

 

TgoG09T2Q4GEviocpC_fxQ.png

 

No kaspersky there... unless maybe the Drivers were 'left behind' from when I removed it before? 

 

What would you like me to do about these Kaspersky drivers?

 

Many thanks,

 

Calvin.

 

 



#10 usasma

usasma

    Still visually handicapped (avatar is memory developed by my Dad


  • BSOD Kernel Dump Expert
  • 24,685 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:Southeastern CT, USA
  • Local time:06:39 AM

Posted 12 October 2017 - 06:20 AM

The MEMORY.dmp is overwritten each time a memory dump is created.  The minidumps are numbered differently (with a date and the amount of time since the last boot - as I recall) and aren't overwritten.

 

The memory dump with the Kaspersky drivers dates from 11 Oct.  The time was 06:48 - but that tends to be a bit confusing, not on local time, and I generally don't pay attention to that.

How it happened - I have no idea.  But, as the drivers seem to still be there, you'll have to remove them (DO NOT DELETE THEM - it may render the system unbootable!!!)

Just run the free Kaspersky removal tool ( link here thanks to BlueElvis:  http://www.carrona.org/avuninst.html#K )

If anything is left on the system from Kaspersky, this'll remove it.


- John  (my website: http://www.carrona.org/ )
**If you need a more detailed explanation, please ask for it. I have the Knack. **  If I haven't replied in 48 hours, please send me a message.

 

My eye problems have lessened and I'm able to post/respond without too much difficulty. (05 Sep 2017)
FYI - I am completely blind in the right eye and ~30% blind in the left eye.

If the eye problems come on suddenly, I may not be able to respond.
If that's the case and help is needed, please PM a staff member for assistance.


#11 RedArr0w

RedArr0w
  • Topic Starter

  • Members
  • 25 posts
  • OFFLINE
  •  
  • Local time:11:39 AM

Posted 12 October 2017 - 05:27 PM

Hi,

 

So I was in the middle of downloading the Kaspersky Remover Tool, when all of a sudden my mouse got really laggy and then I got another BSOD!

 

This time, It actually went into the BSOD screen and displayed an error code like: SYSTEM_SERVICE_EXCEPTION

 

Attached is the minidump that was created (I double checked to make sure it is the right this time lol)

 

I am re-downloading the Kaspersky Remover tool now, and will run this to get rid of the left overs.

 

I certainly will be contacting Kaspersky to get a refund, if it's their software that's causing these BSOD's... as I'm not using the license if it's not installed! :(

 

Thanks for your continued support, usasma.

 

Regards,

 

Calvin.

Attached Files



#12 usasma

usasma

    Still visually handicapped (avatar is memory developed by my Dad


  • BSOD Kernel Dump Expert
  • 24,685 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:Southeastern CT, USA
  • Local time:06:39 AM

Posted 13 October 2017 - 12:16 PM

There are no remnants of Kaspersky in this memory dump - yet the system still has BSOD'd

Please run Driver Verifier according to these instructions:  http://www.carrona.org/verifier.html

 

Please be sure to try and note if the BSOD mentions a driver (a filename that ends in .sys).

If it does, please remember that in case the system doesn't capture the memory dump fully/correctly.

 

Analysis:
The following is for information purposes only.
The following information contains the relevant information from the blue screen analysis:
**************************Thu Oct 12 18:19:32.738 2017 (UTC - 4:00)**************************
Loading Dump File [C:\Users\john\SysnativeBSODApps\101217-6406-01.dmp]
Windows 10 Kernel Version 15063 MP (8 procs) Free x64
System Uptime:1 days 0:05:24.384
Probably caused by :ntkrnlmp.exe ( nt!HvpMapEntryGetBlockAddress+f )
BugCheck 3B, {c0000005, fffff8018946a7cf, ffffe6818abc7e00, 0}
BugCheck Info: SYSTEM_SERVICE_EXCEPTION (3b)
Arguments:
Arg1: 00000000c0000005, Exception code that caused the bugcheck
Arg2: fffff8018946a7cf, Address of the instruction which caused the bugcheck
Arg3: ffffe6818abc7e00, Address of the context record for the exception that caused the bugcheck
Arg4: 0000000000000000, zero.
BUGCHECK_STR:  0x3B
DEFAULT_BUCKET_ID:  WIN8_DRIVER_FAULT
FAILURE_BUCKET_ID: 0x3B_nt!HvpMapEntryGetBlockAddress
CPUID:        "Intel® Core™ i7-4790K CPU @ 4.00GHz"
MaxSpeed:     4000
CurrentSpeed: 4000
  BIOS Version                  V1.13
  BIOS Release Date             02/16/2016
  Manufacturer                  MSI
  Product Name                  MS-7917
  Baseboard Product             Z97 GAMING 5 (MS-7917)
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``


3rd Party Drivers:
The following is for information purposes only.
My recommendations were given above. The drivers that follow belong to software or devices that were not developed by Microsoft.  You can find links to the driver information and where to update the drivers in the section after the code box:

**************************Thu Oct 12 18:19:32.738 2017 (UTC - 4:00)**************************
MpKsl8d125383.sys           Mon Feb 27 20:54:41 1989 (2409FBE1)
dump_stornvme.sys           Tue Mar 13 03:19:09 2001 (3AADC9ED)
MBfilt64.sys                Thu Jul 30 23:40:32 2009 (4A7267B0)
XtuAcpiDriver.sys           Thu Feb 26 07:51:57 2015 (54EF16ED)
lgcoretemp.sys              Tue Jun  9 12:52:10 2015 (557719BA)
TeeDriverW8x64.sys          Tue Jul  7 13:43:32 2015 (559C0FC4)
e22w10x64.sys               Fri Aug 28 17:05:38 2015 (55E0CD22)
bwcW10x64.sys               Fri Jan 22 17:08:51 2016 (56A2A873)
LGVirHid.sys                Mon Jun 13 14:47:03 2016 (575EFFA7)
LGJoyXlCore.sys             Mon Jun 13 14:47:06 2016 (575EFFAA)
LGBusEnum.sys               Mon Jun 13 14:47:08 2016 (575EFFAC)
RTKVHD64.sys                Tue Dec  6 06:23:15 2016 (58469FA3)
ssdevfactory.sys            Mon May  8 12:03:55 2017 (591096EB)
nvhda64v.sys                Tue May 16 09:02:27 2017 (591AF863)
nvvad64v.sys                Sun May 28 19:04:45 2017 (592B578D)
nvlddmkm.sys                Sat Sep 16 12:54:01 2017 (59BD5729)
intelppm.sys                ***** Invalid 2007 Invalid 2007 Invalid


MpKsl8d125383.sys - this driver hasn't been added to the DRT as of this run. Please search Google/Bing for the driver if additional information is needed.
dump_stornvme.sys - this driver hasn't been added to the DRT as of this run. Please search Google/Bing for the driver if additional information is needed.
http://www.carrona.org/drivers/driver.php?id=MBfilt64.sys
http://www.carrona.org/drivers/driver.php?id=XtuAcpiDriver.sys
http://www.carrona.org/drivers/driver.php?id=lgcoretemp.sys
http://www.carrona.org/drivers/driver.php?id=TeeDriverW8x64.sys
e22w10x64.sys - this driver hasn't been added to the DRT as of this run. Please search Google/Bing for the driver if additional information is needed.
http://www.carrona.org/drivers/driver.php?id=bwcW10x64.sys
http://www.carrona.org/drivers/driver.php?id=LGVirHid.sys
http://www.carrona.org/drivers/driver.php?id=LGJoyXlCore.sys
http://www.carrona.org/drivers/driver.php?id=LGBusEnum.sys
http://www.carrona.org/drivers/driver.php?id=RTKVHD64.sys
http://www.carrona.org/drivers/driver.php?id=ssdevfactory.sys
http://www.carrona.org/drivers/driver.php?id=nvhda64v.sys
http://www.carrona.org/drivers/driver.php?id=nvvad64v.sys
http://www.carrona.org/drivers/driver.php?id=nvlddmkm.sys
http://www.carrona.org/drivers/driver.php?id=intelppm.sys
 

- John  (my website: http://www.carrona.org/ )
**If you need a more detailed explanation, please ask for it. I have the Knack. **  If I haven't replied in 48 hours, please send me a message.

 

My eye problems have lessened and I'm able to post/respond without too much difficulty. (05 Sep 2017)
FYI - I am completely blind in the right eye and ~30% blind in the left eye.

If the eye problems come on suddenly, I may not be able to respond.
If that's the case and help is needed, please PM a staff member for assistance.


#13 RedArr0w

RedArr0w
  • Topic Starter

  • Members
  • 25 posts
  • OFFLINE
  •  
  • Local time:11:39 AM

Posted 13 October 2017 - 06:43 PM

Hello,

 

I did as you asked and did Driver Verifier again. 

 

As soon as it reboot, I received a BSOD with Error code: "DRIVER VERIFIER DETECTED VIOLATION"

 

Attached you'll find the Minidump for this BSOD.

 

Looking forward to your response.

 

Regards,

 

Calvin.

Attached Files



#14 usasma

usasma

    Still visually handicapped (avatar is memory developed by my Dad


  • BSOD Kernel Dump Expert
  • 24,685 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:Southeastern CT, USA
  • Local time:06:39 AM

Posted 14 October 2017 - 07:05 AM

Very strange looking memory dump!  I'd say that it was a hardware problem if it didn't cite a 3rd party driver, but in this case I'm unsure.

The dump blames bwcW10x64.sys - a driver for your Killer Bandwidth Control Filter.

Please:

- download a fresh copy of the Killer software for your system.

- uninstall the current Killer software from your system and reboot

- install the freshly downloaded Killer software

- monitor for further BSOD's

 

If the system continues to BSOD, please run Driver Verifier again.
We'll be looking to see if it still blames the Killer software.
If it does, then we'll have to start wondering about a hardware issue with the networking devices.

If it doesn't blame the Killer software, then we'll still wonder about hardware - but, in this case, it could be almost anything on the system

 

I'm concerned about the dump_stornvme.sys driver as it dates from 2001.

This complicates the analysis as it may be that the stornvme.sys driver on your system may be incompatible with W10 (but this is just a theory of mine right now - with not real supporting evidence)

The dump_ prefix means that Windows created this copy of the stornvme.sys driver for use in case of a crash.

Unfortunately, with some versions of W10, the drivers will display bad dates in the dump files.

Please go to C:\Windows\System32\drivers and locate stornvme.sys

- right click on it and select "Properties"

- then note the dates for "Created", "Modified", and "Accessed" in the General tab

- then click on the Details tab and check the date there.

Please let us know what you find (FYI - my system shows all of the dates being from 2017)

 

Analysis:
The following is for information purposes only.
The following information contains the relevant information from the blue screen analysis:
**************************Fri Oct 13 19:36:34.927 2017 (UTC - 4:00)**************************
Loading Dump File [C:\Users\john\SysnativeBSODApps\101417-5312-01.dmp]
Windows 10 Kernel Version 15063 MP (8 procs) Free x64
System Uptime:0 days 0:00:01.617
*** WARNING: Unable to verify timestamp for bwcW10x64.sys
*** ERROR: Module load completed but symbols could not be loaded for bwcW10x64.sys
Probably caused by :bwcW10x64.sys ( bwcW10x64+9130 )
BugCheck C4, {2000, fffff80d8f8e9130, 0, 4f4e4558}
BugCheck Info: DRIVER_VERIFIER_DETECTED_VIOLATION (c4)
DRIVER_VERIFIER_DETECTED_VIOLATION (c4)
Arguments:
Arg1: 0000000000002000, Code Integrity Issue: The caller specified an executable pool type. (Expected: NonPagedPoolNx)
Arg2: fffff80d8f8e9130, The address in the driver's code where the error was detected.
Arg3: 0000000000000000, Pool Type.
Arg4: 000000004f4e4558, Pool Tag (if provided).
BUGCHECK_STR:  0xc4_2000
FAILURE_BUCKET_ID: 0xc4_2000_bwcW10x64!unknown_function
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``


3rd Party Drivers:
The following is for information purposes only.
My recommendations were given above. The drivers that follow belong to software or devices that were not developed by Microsoft.  You can find links to the driver information and where to update the drivers in the section after the code box:

**************************Fri Oct 13 19:36:34.927 2017 (UTC - 4:00)**************************
dump_stornvme.sys           Tue Mar 13 03:19:09 2001 (3AADC9ED)
bwcW10x64.sys               Fri Jan 22 17:08:51 2016 (56A2A873)


dump_stornvme.sys - this driver hasn't been added to the DRT as of this run. Please search Google/Bing for the driver if additional information is needed.
http://www.carrona.org/drivers/driver.php?id=bwcW10x64.sys
 

- John  (my website: http://www.carrona.org/ )
**If you need a more detailed explanation, please ask for it. I have the Knack. **  If I haven't replied in 48 hours, please send me a message.

 

My eye problems have lessened and I'm able to post/respond without too much difficulty. (05 Sep 2017)
FYI - I am completely blind in the right eye and ~30% blind in the left eye.

If the eye problems come on suddenly, I may not be able to respond.
If that's the case and help is needed, please PM a staff member for assistance.


#15 RedArr0w

RedArr0w
  • Topic Starter

  • Members
  • 25 posts
  • OFFLINE
  •  
  • Local time:11:39 AM

Posted 14 October 2017 - 09:16 PM

Hi,

 

I did as you asked and reinstalled the Killer Networking Software and then rebooted and installed a fresh copy of it.

 

Then I did a Driver Verifier and reboot and got a BSOD for "DRIVER VERIFIER DETECTED VIOLATION" attached is the minidump file.

 

Regarding the stornvme.sys driver see below:

 

sZePQw0sTOuqxEMqNvfBAg.pngW7uM8-bJTTWLkgZhxQfl3w.png

 

It is dated 18th March 2017.

 

Thanks for your help so far! :)

 

Regards,

 

Calvin.

Attached Files


Edited by RedArr0w, 14 October 2017 - 09:16 PM.





0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users