Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Constant Random BSODs with Windows 10


  • Please log in to reply
1 reply to this topic

#1 DangeRuss

DangeRuss

  • Members
  • 1 posts
  • OFFLINE
  •  
  • Local time:06:40 AM

Posted 22 November 2017 - 09:11 AM

Hello all,

 

I've tried to fix this issue on my own, but I'm running out of ideas. I updated the drivers and the bios. I'm checked the memory and run SFC. I even swapped to different physical ram (dropped it from 64 GB to 32 GB), but nothing seems to work. 

 

I've attached the Sysnative File Collection and here is the Speccy report: http://speccy.piriform.com/results/eVIHWU0knkjVsKJYRMiE1IK

 

Please let me know if you need more information to help diagnose my problem.

 

Thank you in advance,

-Russ

Attached Files



BC AdBot (Login to Remove)

 


#2 usasma

usasma

    Still visually handicapped (avatar is memory developed by my Dad


  • BSOD Kernel Dump Expert
  • 25,091 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Southeastern CT, USA
  • Local time:07:40 AM

Posted 23 November 2017 - 09:05 AM

Your UEFI/BIOS (version N1UET41W (1.15 )) dates from October of 2017.  Please check at the manufacturer's website to see if there are any UEFI/BIOS updates available for your system.  This is just in case there has been a more recent update.
FYI - W8 and W10 communicate more with the UEFI/BIOS than previous versions of Windows, so it's important to ensure that the UEFI/BIOS is kept up to date (and that outdated UEFI/BIOS' may be the cause of some compatibility issues).

Only 1 Windows Update hotfixes installed.  Most build 16299 (1709/Fall Creators Update) systems have more than this.  Please visit Windows Update and get ALL available Windows Updates.
The actual number is not important.  Rather it's important that you checked manually, installed any available updates, and didn't experience any errors when checking or updating.

This device is disabled in Device Manager:

 

Cisco AnyConnect Secure Mobility Client Virtual Miniport Adapter for Windows x64    ROOT\NET\0000    This device is disabled.

Please re-enable the device and then uninstall the Cisco AnyConnect software.
If the software is needed - please either:

- reinstall a fresh copy when needed, or

- uninstall the current copy (after re-enabling it), then install a freshly downloaded copy of the latest W10 compatible versoin.

 

Please uninstall the CrowdStrike Falcon Sensor.  It's blamed in 2 of the memory dumps.

 

Please uninstall the program associated with the Virtual Serial Bus Enumerator (Eltima Software) as it's drivers date from 2008 (well before W10 was released).

Please uninstall the program associated with the BIOS Update Driver from Intel Corporation as it's drivers date from 2009 (well before W10 was released).

Please uninstall the program associated with the Intelligent Management Bus Driver from Intel Corporation as it's drivers date from 2009.

 

Then wait and see if this stops the BSOD's. 
If it doesn't, please post back for further suggestions.

 

Analysis:
The following is for information purposes only.
The following information contains the relevant information from the blue screen analysis:
**************************Wed Nov 22 07:35:00.778 2017 (UTC - 5:00)**************************
Loading Dump File [C:\Users\john\SysnativeBSODApps\112217-9437-01.dmp]
Windows 10 Kernel Version 16299 MP (8 procs) Free x64
System Uptime:0 days 10:44:02.993
Probably caused by :ntkrnlmp.exe ( nt!ObpCreateHandle+473 )
BugCheck 3B, {c0000005, fffff80229930d13, fffff888854a6a80, 0}
BugCheck Info: SYSTEM_SERVICE_EXCEPTION (3b)
Arguments:
Arg1: 00000000c0000005, Exception code that caused the bugcheck
Arg2: fffff80229930d13, Address of the instruction which caused the bugcheck
Arg3: fffff888854a6a80, Address of the context record for the exception that caused the bugcheck
Arg4: 0000000000000000, zero.
BUGCHECK_STR:  0x3B
DEFAULT_BUCKET_ID:  WIN8_DRIVER_FAULT
PROCESS_NAME:  svchost.exe
FAILURE_BUCKET_ID: 0x3B_nt!ObpCreateHandle
CPUID:        "Intel® Core™ i7-7820HQ CPU @ 2.90GHz"
MaxSpeed:     2900
CurrentSpeed: 2904
  BIOS Version                  N1UET41W (1.15 )
  BIOS Release Date             10/20/2017
  Manufacturer                  LENOVO
  Product Name                  20HJS1SN00
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
**************************Tue Nov 21 20:50:32.025 2017 (UTC - 5:00)**************************
Loading Dump File [C:\Users\john\SysnativeBSODApps\112117-9312-01.dmp]
Windows 10 Kernel Version 16299 MP (8 procs) Free x64
System Uptime:0 days 3:59:15.905
Probably caused by :memory_corruption
BugCheck 3B, {c0000005, fffff8020ba9b589, ffff9a0827286d10, 0}
BugCheck Info: SYSTEM_SERVICE_EXCEPTION (3b)
Arguments:
Arg1: 00000000c0000005, Exception code that caused the bugcheck
Arg2: fffff8020ba9b589, Address of the instruction which caused the bugcheck
Arg3: ffff9a0827286d10, Address of the context record for the exception that caused the bugcheck
Arg4: 0000000000000000, zero.
BUGCHECK_STR:  0x3B
DEFAULT_BUCKET_ID:  CODE_CORRUPTION
PROCESS_NAME:  SavService.exe
FAILURE_BUCKET_ID: MEMORY_CORRUPTION_LARGE
CPUID:        "Intel® Core™ i7-7820HQ CPU @ 2.90GHz"
MaxSpeed:     2900
CurrentSpeed: 2904
  BIOS Version                  N1UET41W (1.15 )
  BIOS Release Date             10/20/2017
  Manufacturer                  LENOVO
  Product Name                  20HJS1SN00
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
**************************Tue Nov 21 16:23:46.801 2017 (UTC - 5:00)**************************
Loading Dump File [C:\Users\john\SysnativeBSODApps\112117-30890-01.dmp]
Windows 10 Kernel Version 16299 MP (8 procs) Free x64
System Uptime:0 days 0:59:04.522
*** WARNING: Unable to verify timestamp for nvlddmkm.sys
*** ERROR: Module load completed but symbols could not be loaded for nvlddmkm.sys
Probably caused by :nvlddmkm.sys ( nvlddmkm+c954a )
BugCheck C1, {ffff938d4c8c0fb0, ffff938d4c8c09a8, 334050, 23}
BugCheck Info: SPECIAL_POOL_DETECTED_MEMORY_CORRUPTION (c1)
Arguments:
Arg1: ffff938d4c8c0fb0, address trying to free
Arg2: ffff938d4c8c09a8, address where bits are corrupted
Arg3: 0000000000334050, (reserved)
Arg4: 0000000000000023, caller is freeing an address where nearby bytes within the same page have been corrupted
BUGCHECK_STR:  0xC1_23
PROCESS_NAME:  csrss.exe
FAILURE_BUCKET_ID: 0xC1_23_nvlddmkm!unknown_function
CPUID:        "Intel® Core™ i7-7820HQ CPU @ 2.90GHz"
MaxSpeed:     2900
CurrentSpeed: 2904
  BIOS Version                  N1UET41W (1.15 )
  BIOS Release Date             10/20/2017
  Manufacturer                  LENOVO
  Product Name                  20HJS1SN00
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
**************************Tue Nov 21 15:24:16.300 2017 (UTC - 5:00)**************************
Loading Dump File [C:\Users\john\SysnativeBSODApps\112117-29312-01.dmp]
Windows 10 Kernel Version 16299 MP (8 procs) Free x64
System Uptime:0 days 2:17:08.271
*** WARNING: Unable to verify timestamp for csagent.sys
*** ERROR: Module load completed but symbols could not be loaded for csagent.sys
Probably caused by :csagent.sys ( csagent+9c771 )
BugCheck C1, {ffffe68397bf8fb0, ffffe68397bf8998, b3c048, 23}
BugCheck Info: SPECIAL_POOL_DETECTED_MEMORY_CORRUPTION (c1)
Arguments:
Arg1: ffffe68397bf8fb0, address trying to free
Arg2: ffffe68397bf8998, address where bits are corrupted
Arg3: 0000000000b3c048, (reserved)
Arg4: 0000000000000023, caller is freeing an address where nearby bytes within the same page have been corrupted
BUGCHECK_STR:  0xC1_23
PROCESS_NAME:  WmiPrvSE.exe
FAILURE_BUCKET_ID: 0xC1_23_csagent!unknown_function
CPUID:        "Intel® Core™ i7-7820HQ CPU @ 2.90GHz"
MaxSpeed:     2900
CurrentSpeed: 2904
  BIOS Version                  N1UET41W (1.15 )
  BIOS Release Date             10/20/2017
  Manufacturer                  LENOVO
  Product Name                  20HJS1SN00
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
**************************Tue Nov 21 13:06:41.923 2017 (UTC - 5:00)**************************
Loading Dump File [C:\Users\john\SysnativeBSODApps\112117-34250-01.dmp]
Windows 10 Kernel Version 16299 MP (8 procs) Free x64
System Uptime:0 days 0:41:44.755
*** WARNING: Unable to verify timestamp for csagent.sys
*** ERROR: Module load completed but symbols could not be loaded for csagent.sys
Probably caused by :csagent.sys ( csagent+94aea )
BugCheck C1, {ffffff08dd6fcfd0, ffffff08dd6fc998, f94030, 23}
BugCheck Info: SPECIAL_POOL_DETECTED_MEMORY_CORRUPTION (c1)
Arguments:
Arg1: ffffff08dd6fcfd0, address trying to free
Arg2: ffffff08dd6fc998, address where bits are corrupted
Arg3: 0000000000f94030, (reserved)
Arg4: 0000000000000023, caller is freeing an address where nearby bytes within the same page have been corrupted
BUGCHECK_STR:  0xC1_23
PROCESS_NAME:  chrome.exe
FAILURE_BUCKET_ID: 0xC1_23_csagent!unknown_function
CPUID:        "Intel® Core™ i7-7820HQ CPU @ 2.90GHz"
MaxSpeed:     2900
CurrentSpeed: 2904
  BIOS Version                  N1UET41W (1.15 )
  BIOS Release Date             10/20/2017
  Manufacturer                  LENOVO
  Product Name                  20HJS1SN00
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``


3rd Party Drivers:
The following is for information purposes only.
My recommendations were given above. The drivers that follow belong to software or devices that were not developed by Microsoft.  You can find links to the driver information and where to update the drivers in the section after the code box:

**************************Wed Nov 22 07:35:00.778 2017 (UTC - 5:00)**************************
dump_stornvme.sys                             Mon May  2 10:05:32 1983 (1913DDAC)
evsbc.sys                                     Mon May 19 09:01:30 2008 (48317A2A)
imbdrv.sys                                    Wed Feb 25 09:38:38 2009 (49A557EE)
flashud.sys                                   Fri Mar  6 04:57:27 2009 (49B0F387)
intelppm.sys                                  Thu Sep 22 06:43:11 2011 (4E7B113F)
XtuAcpiDriver.sys                             Thu Feb 26 07:51:57 2015 (54EF16ED)
swi_callout.sys                               Fri May 20 05:18:15 2016 (573ED657)
FeKern.sys                                    Fri Jul  8 16:53:55 2016 (578012E3)
sntp.sys                                      Fri Oct 14 10:42:03 2016 (5800EEBB)
SophosED.sys                                  Fri Oct 28 12:57:44 2016 (58138388)
TeeDriverW8x64.sys                            Wed Nov 16 14:50:53 2016 (582CB89D)
e1d65x64.sys                                  Sun Nov 27 08:08:35 2016 (583ADAD3)
iaStorA.sys                                   Fri Dec 30 07:25:28 2016 (58665238)
RtsPer.sys                                    Tue Apr 11 22:26:13 2017 (58ED9045)
SynTP.sys                                     Sat Apr 15 03:14:04 2017 (58F1C83C)
Smb_driver_Intel.sys                          Sat Apr 15 03:15:18 2017 (58F1C886)
Netwtw04.sys                                  Sun Jun  4 04:07:26 2017 (5933BFBE)
iaLPSS2i_I2C.sys                              Wed Jun 14 00:00:59 2017 (5940B4FB)
iaLPSS2i_GPIO2.sys                            Wed Jun 14 00:01:22 2017 (5940B512)
ibtusb.sys                                    Wed Jun 21 16:10:30 2017 (594AD2B6)
SPUVCbv64.sys                                 Fri Jul 21 04:26:54 2017 (5971BACE)
ibmpmdrv.sys                                  Mon Jul 31 07:45:12 2017 (597F1848)
RTKVHD64.sys                                  Tue Aug  1 06:05:51 2017 (5980527F)
IntcDAud.sys                                  Mon Sep 11 08:11:17 2017 (59B67D65)
rtwlanu.sys                                   Thu Sep 21 05:08:27 2017 (59C3818B)
savonaccess.sys                               Tue Sep 26 08:59:48 2017 (59CA4F44)
igdkmd64.sys                                  Tue Oct 17 21:39:02 2017 (59E6B0B6)
VBoxDrv.sys                                   Wed Oct 18 01:25:39 2017 (59E6E5D3)
VBoxNetAdp6.sys                               Wed Oct 18 01:25:39 2017 (59E6E5D3)
VBoxNetLwf.sys                                Wed Oct 18 01:25:39 2017 (59E6E5D3)
VBoxUSBMon.sys                                Wed Oct 18 01:25:39 2017 (59E6E5D3)
cspcm2.sys                                    Fri Oct 20 14:50:14 2017 (59EA4566)
csagent.sys                                   Fri Oct 20 14:50:53 2017 (59EA458D)
SynaSmi.sys                                   Fri Oct 27 02:18:10 2017 (59F2CFA2)
nvlddmkm.sys                                  Mon Oct 30 17:46:59 2017 (59F79DD3)
OSFM-00000032.BIN                             Tue Nov 14 22:10:04 2017 (5A0BB00C)
bthl2cap.sys                                  ***** Invalid 1980 Invalid 1980 Invalid
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
**************************Tue Nov 21 16:23:46.801 2017 (UTC - 5:00)**************************
VBoxDDR0.r0                                   Wed Oct 18 01:25:39 2017 (59E6E5D3)
VMMR0.r0                                      Wed Oct 18 01:25:42 2017 (59E6E5D6)


dump_stornvme.sys - this driver hasn't been added to the DRT as of this run. Please search Google/Bing for the driver if additional information is needed.
http://www.carrona.org/drivers/driver.php?id=evsbc.sys
imbdrv.sys - this driver hasn't been added to the DRT as of this run. Please search Google/Bing for the driver if additional information is needed.
http://www.carrona.org/drivers/driver.php?id=flashud.sys
http://www.carrona.org/drivers/driver.php?id=intelppm.sys
http://www.carrona.org/drivers/driver.php?id=XtuAcpiDriver.sys
http://www.carrona.org/drivers/driver.php?id=swi_callout.sys
FeKern.sys - this driver hasn't been added to the DRT as of this run. Please search Google/Bing for the driver if additional information is needed.
sntp.sys - this driver hasn't been added to the DRT as of this run. Please search Google/Bing for the driver if additional information is needed.
SophosED.sys - this driver hasn't been added to the DRT as of this run. Please search Google/Bing for the driver if additional information is needed.
http://www.carrona.org/drivers/driver.php?id=TeeDriverW8x64.sys
http://www.carrona.org/drivers/driver.php?id=e1d65x64.sys
http://www.carrona.org/drivers/driver.php?id=iaStorA.sys
http://www.carrona.org/drivers/driver.php?id=RtsPer.sys
http://www.carrona.org/drivers/driver.php?id=SynTP.sys
http://www.carrona.org/drivers/driver.php?id=Smb_driver_Intel.sys
Netwtw04.sys - this driver hasn't been added to the DRT as of this run. Please search Google/Bing for the driver if additional information is needed.
http://www.carrona.org/drivers/driver.php?id=iaLPSS2i_I2C.sys
iaLPSS2i_GPIO2.sys - this driver hasn't been added to the DRT as of this run. Please search Google/Bing for the driver if additional information is needed.
http://www.carrona.org/drivers/driver.php?id=ibtusb.sys
SPUVCbv64.sys - this driver hasn't been added to the DRT as of this run. Please search Google/Bing for the driver if additional information is needed.
http://www.carrona.org/drivers/driver.php?id=ibmpmdrv.sys
http://www.carrona.org/drivers/driver.php?id=RTKVHD64.sys
http://www.carrona.org/drivers/driver.php?id=IntcDAud.sys
http://www.carrona.org/drivers/driver.php?id=rtwlanu.sys
http://www.carrona.org/drivers/driver.php?id=savonaccess.sys
http://www.carrona.org/drivers/driver.php?id=igdkmd64.sys
http://www.carrona.org/drivers/driver.php?id=VBoxDrv.sys
http://www.carrona.org/drivers/driver.php?id=VBoxNetAdp6.sys
http://www.carrona.org/drivers/driver.php?id=VBoxNetLwf.sys
http://www.carrona.org/drivers/driver.php?id=VBoxUSBMon.sys
cspcm2.sys - this driver hasn't been added to the DRT as of this run. Please search Google/Bing for the driver if additional information is needed.
csagent.sys - this driver hasn't been added to the DRT as of this run. Please search Google/Bing for the driver if additional information is needed.
SynaSmi.sys - this driver hasn't been added to the DRT as of this run. Please search Google/Bing for the driver if additional information is needed.
http://www.carrona.org/drivers/driver.php?id=nvlddmkm.sys
OSFM-00000032.BIN - this driver hasn't been added to the DRT as of this run. Please search Google/Bing for the driver if additional information is needed.
bthl2cap.sys - this driver hasn't been added to the DRT as of this run. Please search Google/Bing for the driver if additional information is needed.
http://www.carrona.org/drivers/driver.php?id=VBoxDDR0.r0
http://www.carrona.org/drivers/driver.php?id=VMMR0.r0
 
My browser caused a flood of traffic, sio my IP address was banned. Hope to fix it soon. Will get back to posting as soon as Im able.

- John  (my website: http://www.carrona.org/ )**If you need a more detailed explanation, please ask for it. I have the Knack. **  If I haven't replied in 48 hours, please send me a message. My eye problems have recently increased and I'm having difficult reading posts. (23 Nov 2017)FYI - I am completely blind in the right eye and ~30% blind in the left eye.<p>If the eye problems get worse suddenly, I may not be able to respond.If that's the case and help is needed, please PM a staff member for assistance.




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users