Looking for help reading .dmp files

[ctshirk]

Was wondering if anyone would help me or read these files and tell what is wrong.
https://onedrive.live.com/?id=8C03BF2641D96573%211297&cid=8C03BF2641D96573

 

[ctshirk]

well, the file was loaded in the minidump so it was found. it was a 2016 date on the file. maybe some other issue with it.

In AutoRuns what does it mean when the driver is highlighted in red and yellow?

Quote: "Yellow entries are references in your registry usually to files that no longer exist on the system. Under the Image path column it will probably say 'File not found'."

Quote: "Pink and 'Not Verified' does not necessarily mean the fils(s) are malicious - it just means that Autoruns can't understand the software signature on the file(s), or the authors may not have a software signature at all (more sloppiness)."

Source: https://answers.microsoft.com/en-us/windows/forum/windows_xp-performance/autorun-says-the-following/5bf4355a-b78b-40c4-bbd6-e02b5551e92f

I have a few red drivers
fcbd.bat C:\programData\Microsoft\windows\starmenu\starup
/Microsoft\Windows\Helloface\FODCleanupTask C:\windows\system32\winbioplugins\facefoduninstaller.exe
/Microsoft\Windows\NetTrace\GathNetworkinfo C:\windows\system32\gathernetworkinfo.vbs
I also everything under is unknow
HKLM\System\Current\ControlSet\Control\SessionManager\KnownDlls

 

[johnbl]

the first entry looks like a bat file for the far cry uninstaller. i would remove the entry if you don't have the software installed.


the second one is a normal microsoft script, it has been there since windows 7. Seems to get run when new builds come out. (last run on my machine 9-14-2018)

the third one is also normal, I have the same entries on my machine. I just ignore them. I have removed them before but then just come back later after some new build comes back.

well, the file was loaded in the minidump so it was found. it was a 2016 date on the file. maybe some other issue with it.

In AutoRuns what does it mean when the driver is highlighted in red and yellow?

Quote: "Yellow entries are references in your registry usually to files that no longer exist on the system. Under the Image path column it will probably say 'File not found'."

Quote: "Pink and 'Not Verified' does not necessarily mean the fils(s) are malicious - it just means that Autoruns can't understand the software signature on the file(s), or the authors may not have a software signature at all (more sloppiness)."

Source: https://answers.microsoft.com/en-us/windows/forum/windows_xp-performance/autorun-says-the-following/5bf4355a-b78b-40c4-bbd6-e02b5551e92f

I have a few red drivers
fcbd.bat C:\programData\Microsoft\windows\starmenu\starup
/Microsoft\Windows\Helloface\FODCleanupTask C:\windows\system32\winbioplugins\facefoduninstaller.exe
/Microsoft\Windows\NetTrace\GathNetworkinfo C:\windows\system32\gathernetworkinfo.vbs
I also everything under is unknow
HKLM\System\Current\ControlSet\Control\SessionManager\KnownDlls

 

[gardenman]

well, the file was loaded in the minidump so it was found. it was a 2016 date on the file. maybe some other issue with it.

Sorry, I was just answering his question about the colors in Autoruns. I'm not sure which file he was talking about that was highlighted in yellow (missing) or pink (unknown). If it's in the dump file... I would assume it's valid and being loaded.

I also have the FOD one, it looks like it's a part of "Windows Hello Face". Mine is unchecked meaning it's not being loaded.

I also have the gathernetworkinfo.vbs and it is checked.

 

[johnbl]

ya, you are correct about the hello face. I did not notice the second line.

well, the file was loaded in the minidump so it was found. it was a 2016 date on the file. maybe some other issue with it.

Sorry, I was just answering his question about the colors in Autoruns. I'm not sure which file he was talking about that was highlighted in yellow (missing) or pink (unknown). If it's in the dump file... I would assume it's valid and being loaded.

I also have the FOD one, it looks like it's a part of "Windows Hello Face". Mine is unchecked meaning it's not being loaded.

I also have the gathernetworkinfo.vbs and it is checked.

 

[ctshirk]

well, the file was loaded in the minidump so it was found. it was a 2016 date on the file. maybe some other issue with it.

In AutoRuns what does it mean when the driver is highlighted in red and yellow?

Quote: "Yellow entries are references in your registry usually to files that no longer exist on the system. Under the Image path column it will probably say 'File not found'."

Quote: "Pink and 'Not Verified' does not necessarily mean the fils(s) are malicious - it just means that Autoruns can't understand the software signature on the file(s), or the authors may not have a software signature at all (more sloppiness)."

Source: https://answers.microsoft.com/en-us/windows/forum/windows_xp-performance/autorun-says-the-following/5bf4355a-b78b-40c4-bbd6-e02b5551e92f

For some reason today it notified me that i have driver issues with the Logitech Gaming Virtual Bus Enumerator and Intel(R) Extreme Tuning Utility Device drivers, but so far i have yet to have any BSOD but my google chrome was randomly closing out by itself but i got that taken care of. No real issue for the last few days, but im going to give a few more before giving my finale report.

 

[ctshirk]

ya, you are correct about the hello face. I did not notice the second line.

well, the file was loaded in the minidump so it was found. it was a 2016 date on the file. maybe some other issue with it.

Sorry, I was just answering his question about the colors in Autoruns. I'm not sure which file he was talking about that was highlighted in yellow (missing) or pink (unknown). If it's in the dump file... I would assume it's valid and being loaded.

I also have the FOD one, it looks like it's a part of "Windows Hello Face". Mine is unchecked meaning it's not being loaded.

I also have the gathernetworkinfo.vbs and it is checked.

BSOD death again just as i left so i didn't get a chance to see what the error was for. dmp. is shared

 

[johnbl]

last bugcheck was in Multimedia Class Scheduler Service
Image path: \SystemRoot\system32\drivers\mmcss.sys
File version: 10.0.17134.12

check for driver updates (new motherboard audio update 11-2-2018
lan driver on the same date.

intel chipset driver update from 6-27-2018
https://us.msi.com/Motherboard/support/Z97S-SLI-Krait-Edition#down-driver&Win10%2064

can not tell what caused the problem with a minidump

 

[ctshirk]

last bugcheck was in Multimedia Class Scheduler Service
Image path: \SystemRoot\system32\drivers\mmcss.sys
File version: 10.0.17134.12

check for driver updates (new motherboard audio update 11-2-2018
lan driver on the same date.

intel chipset driver update from 6-27-2018
https://us.msi.com/Motherboard/support/Z97S-SLI-Krait-Edition#down-driver&Win10%2064

can not tell what caused the problem with a minidump

This would be the second time that i downloaded this. Wonder if there was a issue with the installation?

 

[ctshirk]

After re-installing the chipset driver update seem to make it stop BSOD. Noted i still have yet to re-install Logitech Gaming Virtual Bus Enumerator and Intel(R) Extreme Tuning Utility Device drivers