Multiple Blue Screen Errors

[Snobbigs]

Hello,

I had a HP x360 spectre for just over a year and updated to Windows 10 a few months ago. I consistently get blue screen error messages that tend to get worse after 30 minutes of use and Windows Updates run.

I restored back to factory settings and did the option to remove personal files a few times and it did not resolve. I attempted component checks and cannot find an error there either.

Most recent blue screen errors messages are Irql_not_less_or_equal, system service exception, whea uncorrectable error, and Kernel Security Check Failure.

I also attempted to fix using one of the advanced options on boot and received Windows 10 Automatic Repair Couldn’t Repair Your Pc.

What is the best practice/flow to restore, update, and ensure there is not software or driver issues? I am not sure on how to dump the logs.

Thanks,.

 

[Colif]

1. Can you download and run who crashed - it will give us a glimpse of the errors you getting and might help us solve them

Copy/paste summary in here and I see what I can do

2. Can you follow option one here: http://www.tenforums.com/tutorials/5560-bsod-minidump-configure-create-windows-10-a.html
and then do this step below: Small memory dumps - Have Windows Create a Small Memory Dump (Minidump) on BSOD

that creates a file in c windows/minidump
copy that file to documents
upload the copy from documents to a cloud server and share the link here and someone with right software to read them will help you fix it

 

[Snobbigs]

Hi Colif,

https://www.dropbox.com/sh/f7tli8at1kpr2it/AAA2-fqo8UFCdzLNhfbjChWsa?dl=0

Here is the link to the logs that I managed to grab through several restarts and crashes.

I attempted Windows support and they wanted to remote access but safe mode with networking wasnt allow me to connect via WiFi and click their link.

I hope this helps as I can only stay on the laptop in safe mode and not do much in terms of online activity.

 

[Snobbigs]

System Information (local)
--------------------------------------------------------------------------------

Computer name: DESKTOP-6TICSKS
Windows version: Windows 10 , 10.0, build: 10240
Windows dir: C:\WINDOWS
Hardware: HP Spectre x360 Convertible, HP, 804F
CPU: GenuineIntel Intel(R) Core(TM) i7-6500U CPU @ 2.50GHz Intel586, level: 6
4 logical processors, active mask: 15
RAM: 8490643456 bytes total




--------------------------------------------------------------------------------
Crash Dump Analysis
--------------------------------------------------------------------------------

Crash dump directory: C:\WINDOWS\Minidump

Crash dumps are enabled on your computer.

On Tue 5/30/2017 2:49:40 PM your computer crashed
crash dump file: C:\WINDOWS\Minidump\053017-4718-01.dmp
This was probably caused by the following module: ntoskrnl.exe (nt+0x14E240)
Bugcheck code: 0x139 (0x3, 0xFFFFD00051F5CA40, 0xFFFFD00051F5C998, 0x0)
Error: KERNEL_SECURITY_CHECK_FAILURE
file path: C:\WINDOWS\system32\ntoskrnl.exe
product: Microsoft® Windows® Operating System
company: Microsoft Corporation
description: NT Kernel & System
Bug check description: The kernel has detected the corruption of a critical data structure.
The crash took place in the Windows kernel. Possibly this problem is caused by another driver that cannot be identified at this time.



On Tue 5/30/2017 2:48:43 PM your computer crashed
crash dump file: C:\WINDOWS\Minidump\053017-4328-01.dmp
This was probably caused by the following module: ntoskrnl.exe (nt+0x14E240)
Bugcheck code: 0x3B (0xC0000005, 0xFFFFF8015E0D1B05, 0xFFFFD00023950DC0, 0x0)
Error: SYSTEM_SERVICE_EXCEPTION
file path: C:\WINDOWS\system32\ntoskrnl.exe
product: Microsoft® Windows® Operating System
company: Microsoft Corporation
description: NT Kernel & System
Bug check description: This indicates that an exception happened while executing a routine that transitions from non-privileged code to privileged code.
This appears to be a typical software driver bug and is not likely to be caused by a hardware problem.
The crash took place in the Windows kernel. Possibly this problem is caused by another driver that cannot be identified at this time.



On Tue 5/30/2017 2:39:49 PM your computer crashed
crash dump file: C:\WINDOWS\Minidump\053017-3218-01.dmp
This was probably caused by the following module: ntoskrnl.exe (nt+0x14E240)
Bugcheck code: 0xA (0x0, 0x2, 0x1, 0xFFFFF801404C6FE6)
Error: IRQL_NOT_LESS_OR_EQUAL
file path: C:\WINDOWS\system32\ntoskrnl.exe
product: Microsoft® Windows® Operating System
company: Microsoft Corporation
description: NT Kernel & System
Bug check description: This indicates that Microsoft Windows or a kernel-mode driver accessed paged memory at DISPATCH_LEVEL or above.
This appears to be a typical software driver bug and is not likely to be caused by a hardware problem.
The crash took place in the Windows kernel. Possibly this problem is caused by another driver that cannot be identified at this time.



On Mon 5/29/2017 3:44:15 PM your computer crashed
crash dump file: C:\WINDOWS\memory.dmp
This was probably caused by the following module: ntkrnlmp.exe (nt!KeBugCheckEx+0x0)
Bugcheck code: 0xFC (0x1400DAE30, 0x7E9000014A9C1025, 0x14F6C0, 0x80000005)
Error: ATTEMPTED_EXECUTE_OF_NOEXECUTE_MEMORY
Bug check description: This indicates that an attempt was made to execute non-executable memory.
This might be a case of memory corruption. More often memory corruption happens because of software errors in buggy drivers, not because of faulty RAM modules. There is a possibility this problem was caused by a virus or other malware.
The crash took place in the Windows kernel. Possibly this problem is caused by another driver that cannot be identified at this time.



On Mon 5/29/2017 3:40:15 PM your computer crashed
crash dump file: C:\WINDOWS\Minidump\052917-5625-01.dmp
This was probably caused by the following module: ntoskrnl.exe (nt+0x14E240)
Bugcheck code: 0x139 (0x3, 0xFFFFD00022912400, 0xFFFFD00022912358, 0x0)
Error: KERNEL_SECURITY_CHECK_FAILURE
file path: C:\WINDOWS\system32\ntoskrnl.exe
product: Microsoft® Windows® Operating System
company: Microsoft Corporation
description: NT Kernel & System
Bug check description: The kernel has detected the corruption of a critical data structure.
The crash took place in the Windows kernel. Possibly this problem is caused by another driver that cannot be identified at this time.





--------------------------------------------------------------------------------
Conclusion
--------------------------------------------------------------------------------

11 crash dumps have been found and analyzed. Only 5 are included in this report. No offending third party drivers have been found. Connsider using WhoCrashed Professional which offers more detailed analysis using symbol resolution. Also configuring your system to produce a full memory dump may help you.

 

[gardenman]

Hi, I've ran the dump files through the MS Debugger and came up with the following: https://pastebin.com/shes3F5K

I cannot help you with these. Wait for Colif or someone else to reply. Good luck.

 

[Colif]

Seem to have more than those errors

Kmode exception not handled: caused by SynTPEnh.exe which is related to the Synaptics Touchpad drivers
WHEA error: GCACHEL2_ERR_ERR (Proc 2 Bank 6)
KERNEL_SECURITY_CHECK_FAILURE: blames dwm.exe but that is the desktop windows manager so I doubt it.
KERNEL_SECURITY_CHECK_FAILURE: blaming Edge
WHEA Error: GCACHEL2_ERR_ERR (Proc 2 Bank 7)
KERNEL_SECURITY_CHECK_FAILURE: Blames Edge
IRQ error: blaming DWM.exe again & win32kfull - I wonder if this is GPU drivers
IRQ error: blaming msoobe.exe - this is the program that activates windows, also mentions win32kfull.sys again
SYSTEM_SERVICE_EXCEPTION: Mentions winlogin.exe and the windows kernel
KERNEL_SECURITY_CHECK_FAILURE: mentions Tabtip.exe. The process known as Touch Keyboard and Handwriting Panel or Tablet PC Input Panel Accessory or Microsoft Tablet PC

looks like you need to update drivers for Touchpad as I think that is what fixes 1st and last error
you might want to run Intel processor diagnostic tool on the CPU as two of the errors appear to relate to processor
I assume this is a legit copy of win 10 as its strange to see the activation process in there