[SOLVED] BSOD Help

[KingLouis]

Hi,
For the past month or so I've been getting 3-5 bsods a day with usually a few hours in between(or as little as 30min). Event viewer shows a critical event from Kernel-Power saying "The system has rebooted without cleanly shutting down first. This error could be caused if the system stopped responding, crashed, or lost power unexpectedly." That event is followed by an error event from volmgr saying "Dump file creation failed due to error during dump creation." However, finder shows that MEMORY.DMP had been modified at the time of the crash. I've tried using driverbooster to update my drivers but that hasn't solved the issue. I also manually made sure my Nvidia drivers were up to date. I just changed the dump file type to mini-dump; I'll upload it the next time I get a bsod(If it generates).
Specs:
Windows 10 Version 1803
Processor: Intel(R) Core(TM) i7-7700K CPU @ 4.20GHz 4.20GHz
Installed memory (RAM): 48.0 GB
System type: 64-bit Operating System, x64-based processor
Motherboard: ASUS ROG STRIX Z270E
GPU: GeForce GTX 1080 8GB

Any help would be appreciated. Thanks. (MEMORY.DMP is 1.6gb and it's not letting me compress it so I cant upload it. I'll upload the next minidump)

 

[Colif]

no dump files... that doesn't help fix it. See if any of these apply - https://support.microsoft.com/en-au/help/130536/windows-does-not-save-memory-dump-file-after-a-crash

Shouldn't use Driver booster, 3rd party driver updaters often suggest the wrong drivers. I know as DB did it to me twice before I learned my lesson

can you download and run driver view - all it will do is show what drivers are currently running.
go into view tab and change it to hide all Microsoft drivers, that will make list much shorter
can you take a screenshot showing all the columns from (and including) driver name all the way to Creation date
Upload to an image sharing website and show a link here
http://www.nirsoft.net/utils/driverview.html

since you can't get dumps. need to use that to see what might be to blame.

What BSOD are they? can you remember the codes? as there are something like 280 codes so I don't know them all. Mostly only see the same onces.

 

[KingLouis]

no dump files... that doesn't help fix it. See if any of these apply - https://support.microsoft.com/en-au/help/130536/windows-does-not-save-memory-dump-file-after-a-crash

Shouldn't use Driver booster, 3rd party driver updaters often suggest the wrong drivers. I know as DB did it to me twice before I learned my lesson

can you download and run driver view - all it will do is show what drivers are currently running.
go into view tab and change it to hide all Microsoft drivers, that will make list much shorter
can you take a screenshot showing all the columns from (and including) driver name all the way to Creation date
Upload to an image sharing website and show a link here
http://www.nirsoft.net/utils/driverview.html

since you can't get dumps. need to use that to see what might be to blame.

What BSOD are they? can you remember the codes? as there are something like 280 codes so I don't know them all. Mostly only see the same onces.

The code changes a lot. The most frequent one I see is system service exemption. I have several windows full of drivers so I just copied it into pastebin to save some time. I hope it readable otherwise I can get the screenshots. https://pastebin.com/VvFc6gq8

 

[Colif]

go into view tab and change it to hide all Microsoft drivers, that will make list much shorter

Try doing that and take a screenshot, not a copy/paste of all the columns

Also, see if this helps with bsod
right click start button
choose powershell (admin)
type SFC /scannow and press enter
once its completed, copy/paste this command into same window:
Repair-WindowsImage -Online -RestoreHealth and press enter
SFC fixes system files, second command cleans image files, re run SFC if it failed to fix all files and restart PC

 

[KingLouis]

Try doing that and take a screenshot, not a copy/paste of all the columns

Also, see if this helps with bsod
right click start button
choose powershell (admin)
type SFC /scannow and press enter
once its completed, copy/paste this command into same window:
Repair-WindowsImage -Online -RestoreHealth and press enter
SFC fixes system files, second command cleans image files, re run SFC if it failed to fix all files and restart PC

Ah sorry didnt see that part https://prnt.sc/p6etrb
I've done the sfc scan thing before and it hasn't helped. Ill try it again a few times though.

 

[Colif]

nice yours shows dates, I often ask for them and get 4 dates... not useful

impressive, oldest driver is the sound drivers from 2016.... it doesn't make it a simple matter of replacing 1 driver, I can't tell which it might be.

Sometimes Atheros WIFI drivers can cause BSOD but you seem to have latest.

You have drivers installed that are newer than whats on Asus website which is typical for them.

did you set PC up for minidumps? I know you said you would upload one, but unless its set up, it will just add to memory.dmp

here is how if you haven't - Can you follow option one on the following link - here - and then do this step below: Small memory dumps - Have Windows Create a Small Memory Dump (Minidump) on BSOD - that creates a file in c windows/minidump after the next BSOD

copy that file to documents

upload the copy from documents to a file sharing web site, and share the link in your thread so we can help fix the problem

 

[Colif]

You have two types of wifi drivers on PC, Broadcomm & Atheros ones. - bet that was Driver booster

Your PC has Atheros chipset as I looked up the driver version on website (Asus label their drivers with an Asus tag which makes it difficult)

I don't know what other drivers it has gotten wrong. I think easiest way to fix it would be to reinstall win 10 and not use Driver Booster.

 

[KingLouis]

I think I have 2 wifi drivers because I have a seperate network card in addition to my motherboard? In my wifi settings it lets me connect from 2 different places. And yes I've configured it to do minidumps. A bsod hasnt happened yet.

 

[KingLouis]

Also, the online restore failed. Heres a screenshot https://prnt.sc/p6fkv4

edit: ran it a few more times and its the same error

 

[Colif]

well, i wasn't expecting 2 wifi cards.

can you right click start
choose run...
type winver and press enter
current version is 1903

if you have 1903, you can do the source command to correct error found above
Download a copy of the win 10 iso from Here - create ISO by telling it you want to make DVD - and then mount that ISO in file explorer (see Here) and then copy paste the below command into command prompt (admin)



DISM /Online /Cleanup-Image /RestoreHealth /source:WIM:X:\Sources\Install.wim:1 /LimitAccess

Where "X" is the drive letter where the ISO is located. Simply change the "X" to the correct drive letter

then re run SFC /scannow and restart PC

If you aren't on 1903, we can't run that command as the ISO file used has to match the version installed. You would be best trying to update windows. as an update will fix these files.

 

[KingLouis]

well, i wasn't expecting 2 wifi cards.

can you right click start
choose run...
type winver and press enter
current version is 1903

if you have 1903, you can do the source command to correct error found above
Download a copy of the win 10 iso from Here - create ISO by telling it you want to make DVD - and then mount that ISO in file explorer (see Here) and then copy paste the below command into command prompt (admin)



DISM /Online /Cleanup-Image /RestoreHealth /source:WIM:X:\Sources\Install.wim:1 /LimitAccess

Where "X" is the drive letter where the ISO is located. Simply change the "X" to the correct drive letter

then re run SFC /scannow and restart PC

If you aren't on 1903, we can't run that command as the ISO file used has to match the version installed. You would be best trying to update windows. as an update will fix these files.

Winver says Im on 1803 but windows update in settings says "You're up to date"? Is there a way to manually update it?

 

[Colif]

click on 1st link here and download upgrade assistant, it should help you upgrade

https://www.microsoft.com/en-au/software-download/windows10

2nd link is media creation tool, can use it to make a win 10 installer.

 

[KingLouis]

click on 1st link here and download upgrade assistant, it should help you upgrade

https://www.microsoft.com/en-au/software-download/windows10

2nd link is media creation tool, can use it to make a win 10 installer.

Got a nice little visit from a bsod during the update. Heres the minidump https://www.dropbox.com/s/lcoiqffjeya1w6p/091519-7125-01.dmp?dl=0

Ill try updating again.

 

[Colif]

might be faster to make a Installer USB
then you can run update off it and not need to keep downloading the files as much.

Are any of the BSOD codes WHEA errrors? without dumps its hard to call, I have sent dumps to a friend who will convert them for us.

 

[KingLouis]

might be faster to make a Installer USB
then you can run update off it and not need to keep downloading the files as much.

Are any of the BSOD codes WHEA errrors? without dumps its hard to call, I have sent dumps to a friend who will convert them for us.

No Ive never seen whea before. This last one was a system service exception.

 

[Colif]

Thats good, Don't want WHEA errors.

You might be best making installer on a working PC and use it to update current one.

to use USB to update, open file explorer, navigate to USB and run setup.exe. one of the choices is update PC.

 

[KingLouis]

Got another bsod while updating. Something about cache this time. Didnt generate a minidump file for some reason. There arent any critical events in event viewer but theres an error around the time of the crash saying "Crash dump initialization failed!"

 

[gardenman]

Hi, I ran the dump file through the debugger and got the following information: https://pste.eu/p/dpMh.html

File information:	091519-7125-01.dmp (Sep 15 2019 - 13:55:17)
Bugcheck:	SYSTEM_SERVICE_EXCEPTION (3B)
Probably caused by:	ntkrnlmp.exe (Process: SetupHost.exe)
Uptime:	0 Day(s), 0 Hour(s), 06 Min(s), and 20 Sec(s)

BIOS info was not included in the dump file. This can sometimes mean an outdated BIOS is being used. This doesn't mean you should update just yet if one is available.

This information can be used by others to help you. I can't help you with this. Someone else will post with more information. Please wait for additional answers. Good luck.

 

[Colif]

awful lot of Kaspersky drivers on there, wish it didn't need so many
Time travel

Oct 02 2034	klkbdflt.sys	Kaspersky Keyboard Device Filter https://www.kaspersky.com/
Mar 14 2035	kneps.sys	Kaspersky KNEPS Power https://www.kaspersky.com/
Nov 08 2035	klbackupflt.sys	Kaspersky Backup File Filter https://www.kaspersky.com/

Oldest drivers are from Corsair link (USB drivers) - Kaspersky claims to have drivers from 1975 but they are lying. Just like the ones above, they aren't real dates.

Do you know what BIOS version you have installed on motherboard?
current one is 1302

you can check by looking in system information screen in win 10. it should tell you under the line about what Processor you have

this shows how to update - https://dlcdnets.asus.com/pub/ASUS/mb/LGA1151/STRIX_Z270E_GAMING/E12349_Z270E_GAMING_BIOS_EM_WEB.pdf

 

[KingLouis]

awful lot of Kaspersky drivers on there, wish it didn't need so many
Time travel

Oct 02 2034	klkbdflt.sys	Kaspersky Keyboard Device Filter https://www.kaspersky.com/
Mar 14 2035	kneps.sys	Kaspersky KNEPS Power https://www.kaspersky.com/
Nov 08 2035	klbackupflt.sys	Kaspersky Backup File Filter https://www.kaspersky.com/

Oldest drivers are from Corsair link (USB drivers) - Kaspersky claims to have drivers from 1975 but they are lying. Just like the ones above, they aren't real dates.

Do you know what BIOS version you have installed on motherboard?
current one is 1302

you can check by looking in system information screen in win 10. it should tell you under the line about what Processor you have

this shows how to update - https://dlcdnets.asus.com/pub/ASUS/mb/LGA1151/STRIX_Z270E_GAMING/E12349_Z270E_GAMING_BIOS_EM_WEB.pdf

0901 from 1/25/2017
Also, not sure if it's relevant but I tried updating 3 times yesterday and they all failed because of bsods so Im still on 1803

 

[Colif]

Update the bios, you not as far back as I feared (release version) but you close (2nd bios released). You only need the top one and if you use EZ update 3 in the bios, it can connect to internet and grab newest for you (used to have to put them on USB) and install it.

BIOS could fix BSOD.

Or you may need to think about a clean install. At least knowing is better than being totally forced into it. You can copy anything off the boot drive you need to keep and make sure you don't lose anything.

I think clean install at least fixes windows and will force PC to get new drivers. Then we know none are wrong, I can help find new drivers instead of using driver booster. It might fix 2 things in 1 hit, normally I try to avoid clean installs to fix BSOD but it might be easiest way for you.

 

[KingLouis]

Got 5 more bsods in quick succession while trying to update bios. Was trying to update over the internet but that seems to not be working so ill try using a flashdrive. Minidumps here:
https://www.dropbox.com/s/391inlxarj6yjdp/091619-5375-01.dmp?dl=0
https://www.dropbox.com/s/mms29aab0g9fjlh/091619-5984-01.dmp?dl=0
https://www.dropbox.com/s/hdlg084jaqbumrd/091619-6203-01.dmp?dl=0
https://www.dropbox.com/s/eo0op5wiy4qahvh/091619-6250-01.dmp?dl=0
https://www.dropbox.com/s/e8mgy8eyqtnxj1i/091619-6296-01.dmp?dl=0

Apologies for the slow replies. Ive been busy with school.

Update: Successfully updated bios to 1302.

 

[gardenman]

I ran the dump files through the debugger and got the following information: https://pste.eu/p/zC1N.html

Spoiler

File information:	091619-6296-01.dmp (Sep 16 2019 - 21:01:11)
Bugcheck:	KERNEL_SECURITY_CHECK_FAILURE (139)
Probably caused by:	memory_corruption (Process: svchost.exe)
Uptime:	0 Day(s), 0 Hour(s), 00 Min(s), and 26 Sec(s)

File information:	091619-6250-01.dmp (Sep 16 2019 - 21:12:00)
Bugcheck:	ATTEMPTED_EXECUTE_OF_NOEXECUTE_MEMORY (FC)
Probably caused by:	memory_corruption (Process: svchost.exe)
Uptime:	0 Day(s), 0 Hour(s), 00 Min(s), and 34 Sec(s)

File information:	091619-6203-01.dmp (Sep 16 2019 - 20:52:01)
Bugcheck:	SYSTEM_SERVICE_EXCEPTION (3B)
Probably caused by:	memory_corruption (Process: Spotify.exe)
Uptime:	1 Day(s), 2 Hour(s), 23 Min(s), and 23 Sec(s)

File information:	091619-5984-01.dmp (Sep 16 2019 - 21:15:48)
Bugcheck:	IRQL_NOT_LESS_OR_EQUAL (A)
Probably caused by:	memory_corruption (Process: chrome.exe)
Uptime:	0 Day(s), 0 Hour(s), 00 Min(s), and 29 Sec(s)

File information:	091619-5375-01.dmp (Sep 16 2019 - 21:14:45)
Bugcheck:	STATUS_SYSTEM_PROCESS_TERMINATED (C000021A)
Probably caused by:	ntkrnlmp.exe (Process: csrss.exe)
Uptime:	0 Day(s), 0 Hour(s), 00 Min(s), and 12 Sec(s)

This information can be used by others to help you. I can't help you with this. Someone else will post with more information. Please wait for additional answers. Good luck.

 

[Colif]

csrss.exe = the client your user runs on. Up time of 12 seconds, that was a fat crash - only 1 crash happened after PC had been up longer than 30 minutes.

can you uninstall kaspersky and just use windows defender until we figure out the cause?

can you run this and instead of getting Nvidia drivers from Nvidia, run windows update instead - https://forums.tomshardware.com/faq...n-install-of-your-video-card-drivers.2402269/

top error mentions ahcache - Application Compatibility Cache file - only fixes I find for this are DISM again...

I can't identify causes of the other 3. Two of them aren't normal errors I see.

Try running memtest86 on each of your ram sticks, one stick at a time, up to 4 passes. Only error count you want is 0, any higher could be cause of the BSOD. Remove/replace ram sticks with errors. - I don't think its ram but better safe than sorry.


there is one thing I overlooked. You could run driver verifer and see what drivers it thinks are at fault
See the 2nd post in this thread - https://forums.tomshardware.com/thr...nclude-in-blue-screen-of-death-posts.3468965/ - it will crash, that is its job.... crash bad drivers. Upload dunp file and show link here.

 

[KingLouis]

csrss.exe = the client your user runs on. Up time of 12 seconds, that was a fat crash - only 1 crash happened after PC had been up longer than 30 minutes.

can you uninstall kaspersky and just use windows defender until we figure out the cause?

can you run this and instead of getting Nvidia drivers from Nvidia, run windows update instead - https://forums.tomshardware.com/faq...n-install-of-your-video-card-drivers.2402269/

top error mentions ahcache - Application Compatibility Cache file - only fixes I find for this are DISM again...

I can't identify causes of the other 3. Two of them aren't normal errors I see.

Try running memtest86 on each of your ram sticks, one stick at a time, up to 4 passes. Only error count you want is 0, any higher could be cause of the BSOD. Remove/replace ram sticks with errors. - I don't think its ram but better safe than sorry.


there is one thing I overlooked. You could run driver verifer and see what drivers it thinks are at fault
See the 2nd post in this thread - https://forums.tomshardware.com/thr...nclude-in-blue-screen-of-death-posts.3468965/ - it will crash, that is its job.... crash bad drivers. Upload dunp file and show link here.

Struggling a bit with uninstalling kaspersky. Ill try again and everything else when I get home from school. Also, I'm not sure if I mentioned this or not but I never successfully updated windows.