Question PC is riddled with different BSODs ?

[johnbl]

people are just doing a hard reset on the laptops. the equivalent for a desktop is to just turn off the power. it will force a full reboot.
it would be better to turn off virtual memory to delete the pagefile then doing a full reboot and turn on virtual memory to create a new pagefile.sys.

i was looking at a memory.dmp file. it includes a lot more debug info and internal logs. it generally shows a lot of errors the people do not notice. deleting the pagefile helps since often some of the problems take a long time to actually cause windows to fail.
note: you can make a registry setting to make windows delete the pagefile on shutdown. this helps for some slow memory leaks, also if you do not do this and you fix the problem the leaks will still be there and will be misleading if someone looks at the memory.dmp file. just fyi

hardware installs that do not complete can have strange system symptoms. Cases where windows plug and play detect that some driver is needed for the hardware, tries to install but can not complete, the installer exits, then the whole process starts over again in a endless loop (every second or so). there are conditions that can hang cpu cores and bugcheck the system.

usb can be very screwy with old drivers and updated usb standards updates.

I think the reason people use the disconnect the charger and hold down the power button is because of windows plug and play.
they do not know they should: start cmd.exe as an admin then run
net.exe stop "plug and play"

before they try to update or modify certain drivers. if they don't do this then they uninstall a driver, windows plug and play detects that it needs the driver and reinstalls it 1 second later and they are back to where they started.

windows control panel device manager has a poor User interface, it does not show the version of the drivers when you install. all the drivers for one hardware device might look identical but they are actually different. when you run the driver installer, the new driver is place on the machine but often is not selected as the new driver. I have seen people update intel network drivers without the new driver being selected as the default driver. I generally have people use the pnputil.exe to delete the old .inf files

 

[johnbl]

looked at a second memory dump dated 10/14/24
looks like a problem with totalcmd64.exe
you should remove the program and retest.

edit: looks like the same dump file (internal debug session time was:
Tue Sep 17 16:53:00.983 2024 )

edit: just assumed it was a new file but yes it was the one I looked at before

 

[Sierrus]

looked at a second memory dump dated 10/14/24
looks like a problem with totalcmd64.exe
you should remove the program and retest.

edit: looks like the same dump file (internal debug session time was:
Tue Sep 17 16:53:00.983 2024 )

edit: just assumed it was a new file but yes it was the one I looked at before

There actually was a new Memory.dmp file Windows made October 11th, here it is if you wanted to give that a look as well.
https://www.mediafire.com/file/qwc0lt950wnocn1/MEMORY.7z/file

In the mean time I changed some BIOS settings related to power savings that I could find (ErP mode, HPET, and disabled onboard LAN) and then I activated highest performance mode in power options and made sure no USB device is allowed to go to sleep so we'll see where it goes from here, I guess? There's a lot of BIOS options that I straight up just don't understand even when I Google them but I think most are related to overclocking. I believe I enabled/disabled everything that might be the cause of issues? If there's any specific option you want me to take a look at lemme know.

Right now the most fullproof plan of triggering a BSOD might be yet another Windows reinstallation with drivers so I'll give that a go as well, and this time I'm avoiding Gigabyte for the most part and I'll try to get Realtek's Ethernet drivers directly. My BIOS actually says there's a 2.5Gb driver on it from 2019, that might also be a problem. 🤷‍♂️

 

[johnbl]

the second memory dump showed that something wrote to the windows registry, the system did a lazy write, later windows tried to flush the data to disk and the data was corrupted.

a lazy write is just sent to the disk but not confirmed as being actually place on the disk. IE it can still be in the disk cache.
windows can not shut down until the cache is flushed to disk. this operation failed and caused the bugcheck.

generally, you would update the drive firmware and hope for a fix. otherwise you would go into disk management and turn off lazy write option for the drive.

Note: this memory dump had a bunch of overclock drivers running and a flash tool running. you want to disable these. since they often do things that are no longer allowed. Windows also reported that your hal.dll has been modified

many vendors have tools that insert files into the operating system from the bios. these cause a lot of problems and I generally don't look at systems that have this running.

I will look at the bugcheck to see if you have any locks or pending installed or high non paged pool memory
--------------------------

looks like the system had 167 commits that were never confirmed from the storage

storage Class Devices

Usage Legend: B = Boot, P = Paging, D = Dump, H = Hiber, R = Removable

FDO # Device ID Usage UP DN FL
-------------------------------------------------------------------------------
ffffcf89cfad10a0 [1,2] 1 KINGSTON SNV2S250G BPD ? ? 3
ffffcf89cfac00a0 [1,2] 0 TOSHIBA HDWD130 ? ? 2
ffffcf89cfae20a0 [1,2] 2 KINGSTON SNV2S500G B ? ? 3


you might look for a firmware update for the kingston device
https://www.kingston.com/en/support/technical/products/snv2s
(just trying to find out why the registry did not flush to disk)

 

[Sierrus]

...I legit have no idea what any of that means, sorry. So now it's the C: drive, I guess? I have no idea what "overclock drivers" and "flash tool" I even have. Flash tool I'm assuming is USB, which is what I'm installing the Windows from at the time of the BSODs. I'm legitimately not overclocking anything apart from XMP for RAM. By "tools that insert files into the OS" I again have no clue what this is. Gigabyte's control center I guess? 🤷‍♂️ That memory dump file was from pretty much the absolute freshest Windows installation with barely any drivers and like 0 programs installed. As for drive firmwares, there aren't any if you mean the Kingston drives I'm installing the Windows on. The Kingston drive manager is reporting 0 issues with either of the NVMEs.

 

[johnbl]

ok, here are some of the software that was running:
amdvbflash.exe
Gv.exe
RGBFusion.exe
EasyTuneEngine
GigabyteDownlo
GCC.exe

drivers:
C:\Windows\system32\AMDRyzenMasterDriver.sys Sun Apr 28 21:52:50 2024
SystemRoot\System32\drivers\AmdTools64.sys Tue May 26 23:45:35 2020
C:\Windows\system32\drivers\gdrv3.sys Mon Jul 29 22:50:48 2024
\SystemRoot\system32\DRIVERS\mtkbtfilterx.sys Wed Mar 23 07:18:48 2022
C:\Windows\system32\drivers\MsIo64.sys Sun Dec 10 22:39:57 2023
C:\Program Files (x86)\GIGABYTE\RGBFusion\GVCIDrv64.sys Fri Dec 6 01:42:17 2019
C:\Windows\system32\drivers\gdrv3.sys Mon Jul 29 22:50:48 2024
C:\Windows\system32\drivers\CtiIo64.sys Mon Jul 8 19:39:19 2024
\SystemRoot\System32\drivers\AmdTools64.sys Tue May 26 23:45:35 2020

 

[johnbl]

ok, here are some of the software that was running:
amdvbflash.exe
Gv.exe
RGBFusion.exe
EasyTuneEngine
GigabyteDownlo
GCC.exe

drivers:
C:\Windows\system32\AMDRyzenMasterDriver.sys Sun Apr 28 21:52:50 2024
SystemRoot\System32\drivers\AmdTools64.sys Tue May 26 23:45:35 2020
C:\Windows\system32\drivers\gdrv3.sys Mon Jul 29 22:50:48 2024
\SystemRoot\system32\DRIVERS\mtkbtfilterx.sys Wed Mar 23 07:18:48 2022
C:\Windows\system32\drivers\MsIo64.sys Sun Dec 10 22:39:57 2023
C:\Program Files (x86)\GIGABYTE\RGBFusion\GVCIDrv64.sys Fri Dec 6 01:42:17 2019
C:\Windows\system32\drivers\gdrv3.sys Mon Jul 29 22:50:48 2024
C:\Windows\system32\drivers\CtiIo64.sys Mon Jul 8 19:39:19 2024
\SystemRoot\System32\drivers\AmdTools64.sys Tue May 26 23:45:35 2020

you would have to look up each item and see if you want it.
for example mtkbtfilterx.sys looks like MediaTek Bluetooth driver

gdvr3.sys is likely the driver for gigabyte control center

i would use the tool if you need it to update bios but then uninstall or disable them after the changes are made.

 

[Sierrus]

So yeah, Kingston definitely doesn't have firmware updates.

As for the running software, I only know RGB Fusion, GCC and the Gigabyte one. I only use them since I was trying to get drivers from Gigabyte and then change the RGB from the orange it was always defaulting to. I can get the drivers manually next time but it usually ends up with the same results.

amdvbflash is apparently a BIOS flash for the GPU? I have no clue why that's on since I never turned that on myself. Same with the AMD-related drivers, I don't install those myself, either Windows does or the MB does and I have no say in that. Unless I'm ok to manually uninstall those myself.

 

[johnbl]

lazy write: the drive lies and tells windows that it has saved the data to disk when it receives the data in the disk RAM buffers. This often works fine because the data gets flushed to disk a second or two later. it is ok as long as the power does not go out during that short timing windows. If there is a bug
then it causes a lot of problems. windows can require that the drive firmware confirm that data was written to the actual disk, it tells the firmware to flush the RAM cache to disk. in your case the object was set to a invalid value (zeror) and the system bugchecked. the problem can be in the drive firmware, the microsoft drivers, or some program messing with the system.

normally, when I see a memory dump with errors indicated in your last one, I would tell people to see if they can get a firmware update for the drive.
if that fails then I assume it is a bug in the current firmware of the device and have them disable the drives lazy writes. see something like this:

Enable or Disable Disk Write Caching in Windows 11/10

Disk Write Caching or Cache is disabled? Learn how to turn on or turn off Disk Write Caching. Helpful if you get Windows Delayed Write Failed Error.

www.thewindowsclub.com

not sure it will apply to the nvme drive.
with updated windows and new specs the problem might be in microsoft driver. like this one:
https://hothardware.com/news/windows-11-24h2-wd-ssd-bsod

 

[Sierrus]

Alrighty, I disabled write caching for every drive and will do that from now on if I reinstall Windows again (probably will tomorrow). It honestly wouldn't surprise me some micro corruption occurred on the drives since it coincides with the BSOD errors I was having related to cache and memory. 🤷‍♂️ If you have any more suggestions what I can modify I'm all ears. Thank you VERY much for looking into this so thoroughly!

 

[johnbl]

Alrighty, I disabled write caching for every drive and will do that from now on if I reinstall Windows again (probably will tomorrow). It honestly wouldn't surprise me some micro corruption occurred on the drives since it coincides with the BSOD errors I was having related to cache and memory. 🤷‍♂️ If you have any more suggestions what I can modify I'm all ears. Thank you VERY much for looking into this so thoroughly!

I would not reinstall, just uninstall software that you are done with.
you can use microsoft autoruns and just disable or remove drivers.
generally, you would uninstall, then make sure your version of windows is good by running the various microsoft utilities.
sfc.exe /scannow
and the
dism.exe command
something like start cmd.exe as an admin and run
dism.exe /online /cleanup-image /restorehealth
(it have been a while you might have to google for the exact command)

after these are ok, and you still get a bugcheck. you would turn on special debugging to force a bugcheck faster. generally using verifier.exe flags

you will also want to do a malware scan since the debugger complained about a modified hal.dll in both bugchecks. (sometimes 3rd party utilities make changes to files)

I would also google "how to force windows to delete the pagefile.sys on system shutdown" and set the registry values. This help for when programs modify windows components in the copy in the pagefile.sys. it will take longer to boot since each start up will load the file from the disk rather than just loading the pagefile.sys. it also helps to dump malware that infect the pagefile.sys

in this last case, windows should refuse to shutdown since it never confirmed that the registry setting got flushed to disk. it would normally just hang on shutdown.
there is a registry setting to tell you what is going on.
google for "how to enable verbose startup and shutdown logging"
and make the registry settings. At least you will have an idea why the system is hanging. (with this enabled window will report to the screen what is waiting for)
my second guess if it is not a firmware bug would be a bug in one of the gigabyte tools. Something that wrote to the registry and did not unlock it so the system could shutdown.