Hello,
I purchased parts to build a computer with my son back in March. Here is the build list:
LIANLI 205 MESH TG RGB ATX BLACK
MSI PRO Z690-A WIFI ATX D4
INTEL INTEL I5-12600K BOXIPSG 2TB PREMIUM QLC SATA SSD
SAMSUNG E 1TB 970EVO+NVME M.2 SSD
G.SKILL 32G 2X16 D4 3200 CL16 RJ
COOLMAST HYPER 212 RGB BLK COOL V2
EVGA 850 GT 80+G FM ATX PSU
ASUS DUAL RTX3060 V2 OC
INTEL INTEL I5-12600K BOX
MICROSOFT WIN PRO FPP USB FLASH
About a week after putting it together and installing Windows 11, the PC would randomly reboot showing a blue screen before shutting down that shows Stop code: WHEA Uncorrectable Error. There does not seem to be a pattern to pinpoint when this will happen. Sometimes it will run a week with no issues. It happens randomly while playing a game, surfing the net, or just browsing through Windows Explorer. When it happens I notice that everything on the screen freezes for a second or two (can't move mouse) and then the blue screen flashes followed by reboot. The Windows system logs only show a generic error that basically says Windows crashed and is not very helpful. Sometimes the PC will boot to the login screen after restarting but sometimes it will restart multiple times in a row and go to the recovery screen. All the latest drivers have been installed or reinstalled. Some of the steps I’ve taken to this point include:
Mini Crash Dump:
Microsoft (R) Windows Debugger Version 10.0.22621.1 X86
Copyright (c) Microsoft Corporation. All rights reserved.
Mini Kernel Dump File: Only registers and stack trace are available
Symbol search path is: srv*
Executable search path is:
Windows 10 Kernel Version 19041 MP (16 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS
Machine Name:
Kernel base = 0xfffff806
Debug session time: Mon Sep 19 19:11:19.031 2022 (UTC - 4:00)
System Uptime: 0 days 0:51:26.667
Loading Kernel Symbols
...............................................................
................................................................
................................................................
...........
Loading User Symbols
Loading unloaded module list
..............................
For analysis of this file, run !analyze -v
12: kd> !analyze -v
***
DRIVER_VERIFIER_DETECTED_VIOLATION (c4)
A device driver attempting to corrupt the system has been caught. This is
because the driver was specified in the registry as being suspect (by the
administrator) and the kernel has enabled substantial checking of this driver.
If the driver attempts to corrupt the system, BugChecks 0xC4, 0xC1 and 0xA will
be among the most commonly seen crashes.
Arguments:
Arg1: 0000000000000062, A driver has forgotten to free its pool allocations prior to unloading.
Arg2: ffffd883088e33c8, name of the driver having the issue.
Arg3: ffffd883226d0950, verifier internal structure with driver information.
Arg4: 000000000000046e, total # of (paged+nonpaged) allocations that weren't freed.
Type !verifier 3 drivername.sys for info on the allocations
that were leaked that caused the bugcheck.
Debugging Details:
------------------
KEY_VALUES_STRING: 1
Key : Analysis.CPU.mSec
Value: 4499
Key : Analysis.DebugAnalysisManager
Value: Create
Key : Analysis.Elapsed.mSec
Value: 6614
Key : Analysis.Init.CPU.mSec
Value: 18718
Key : Analysis.Init.Elapsed.mSec
Value: 372097
Key : Analysis.Memory.CommitPeak.Mb
Value: 135
FILE_IN_CAB: 091922-18750-01.dmp
DUMP_FILE_ATTRIBUTES: 0x8
Kernel Generated Triage Dump
BUGCHECK_CODE: c4
BUGCHECK_P1: 62
BUGCHECK_P2: ffffd883088e33c8
BUGCHECK_P3: ffffd883226d0950
BUGCHECK_P4: 46e
IMAGE_NAME: SYMEFASI64.SYS
MODULE_NAME: SYMEFASI64
FAULTING_MODULE: fffff806afb90000 SYMEFASI64
VERIFIER_DRIVER_ENTRY: dt nt!_MI_VERIFIER_DRIVER_ENTRY ffffd883226d0950
Symbol nt!_MI_VERIFIER_DRIVER_ENTRY not found.
BLACKBOXBSD: 1 (!blackboxbsd)
BLACKBOXNTFS: 1 (!blackboxntfs)
BLACKBOXPNP: 1 (!blackboxpnp)
BLACKBOXWINLOGON: 1
CUSTOMER_CRASH_COUNT: 1
PROCESS_NAME: services.exe
STACK_TEXT:
ffff8185
ffff8185
ffff8185
ffff8185
ffff8185
ffff8185
ffff8185
ffff8185
ffff8185
ffff8185
ffff8185
ffff8185
ffff8185
ffff8185
ffff8185
ffff8185
ffff8185
ffff8185
0000006c
STACK_COMMAND: .cxr; .ecxr ; kb
FAILURE_BUCKET_ID: 0xc4_62_LEAKED_POOL_IMAGE_SYMEFASI64.SYS
OSPLATFORM_TYPE: x64
OSNAME: Windows 10
FAILURE_ID_HASH: {bd777d82-c1b7-071a-f998-319d64c05b94}
Followup: MachineOwner
Thank You
I purchased parts to build a computer with my son back in March. Here is the build list:
LIANLI 205 MESH TG RGB ATX BLACK
MSI PRO Z690-A WIFI ATX D4
INTEL INTEL I5-12600K BOXIPSG 2TB PREMIUM QLC SATA SSD
SAMSUNG E 1TB 970EVO+NVME M.2 SSD
G.SKILL 32G 2X16 D4 3200 CL16 RJ
COOLMAST HYPER 212 RGB BLK COOL V2
EVGA 850 GT 80+G FM ATX PSU
ASUS DUAL RTX3060 V2 OC
INTEL INTEL I5-12600K BOX
MICROSOFT WIN PRO FPP USB FLASH
About a week after putting it together and installing Windows 11, the PC would randomly reboot showing a blue screen before shutting down that shows Stop code: WHEA Uncorrectable Error. There does not seem to be a pattern to pinpoint when this will happen. Sometimes it will run a week with no issues. It happens randomly while playing a game, surfing the net, or just browsing through Windows Explorer. When it happens I notice that everything on the screen freezes for a second or two (can't move mouse) and then the blue screen flashes followed by reboot. The Windows system logs only show a generic error that basically says Windows crashed and is not very helpful. Sometimes the PC will boot to the login screen after restarting but sometimes it will restart multiple times in a row and go to the recovery screen. All the latest drivers have been installed or reinstalled. Some of the steps I’ve taken to this point include:
- Reinstalled Windows 11
- Uninstalled and clean install of Nvidia drivers
- Wiped M2 and installed Windows 10 instead
- Removed GPU and used onboard (still randomly crashed)
- Remove one memory stick at a time (still crashed)
- Try each memory chip in the first slot (still crashed)
Mini Crash Dump:
Microsoft (R) Windows Debugger Version 10.0.22621.1 X86
Copyright (c) Microsoft Corporation. All rights reserved.
Mini Kernel Dump File: Only registers and stack trace are available
Symbol search path is: srv*
Executable search path is:
Windows 10 Kernel Version 19041 MP (16 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS
Machine Name:
Kernel base = 0xfffff806
53a07000 PsLoadedModuleList = 0xfffff806
54631290Debug session time: Mon Sep 19 19:11:19.031 2022 (UTC - 4:00)
System Uptime: 0 days 0:51:26.667
Loading Kernel Symbols
...............................................................
................................................................
................................................................
...........
Loading User Symbols
Loading unloaded module list
..............................
For analysis of this file, run !analyze -v
12: kd> !analyze -v
***
- *
- Bugcheck Analysis *
- *
DRIVER_VERIFIER_DETECTED_VIOLATION (c4)
A device driver attempting to corrupt the system has been caught. This is
because the driver was specified in the registry as being suspect (by the
administrator) and the kernel has enabled substantial checking of this driver.
If the driver attempts to corrupt the system, BugChecks 0xC4, 0xC1 and 0xA will
be among the most commonly seen crashes.
Arguments:
Arg1: 0000000000000062, A driver has forgotten to free its pool allocations prior to unloading.
Arg2: ffffd883088e33c8, name of the driver having the issue.
Arg3: ffffd883226d0950, verifier internal structure with driver information.
Arg4: 000000000000046e, total # of (paged+nonpaged) allocations that weren't freed.
Type !verifier 3 drivername.sys for info on the allocations
that were leaked that caused the bugcheck.
Debugging Details:
------------------
KEY_VALUES_STRING: 1
Key : Analysis.CPU.mSec
Value: 4499
Key : Analysis.DebugAnalysisManager
Value: Create
Key : Analysis.Elapsed.mSec
Value: 6614
Key : Analysis.Init.CPU.mSec
Value: 18718
Key : Analysis.Init.Elapsed.mSec
Value: 372097
Key : Analysis.Memory.CommitPeak.Mb
Value: 135
FILE_IN_CAB: 091922-18750-01.dmp
DUMP_FILE_ATTRIBUTES: 0x8
Kernel Generated Triage Dump
BUGCHECK_CODE: c4
BUGCHECK_P1: 62
BUGCHECK_P2: ffffd883088e33c8
BUGCHECK_P3: ffffd883226d0950
BUGCHECK_P4: 46e
IMAGE_NAME: SYMEFASI64.SYS
MODULE_NAME: SYMEFASI64
FAULTING_MODULE: fffff806afb90000 SYMEFASI64
VERIFIER_DRIVER_ENTRY: dt nt!_MI_VERIFIER_DRIVER_ENTRY ffffd883226d0950
Symbol nt!_MI_VERIFIER_DRIVER_ENTRY not found.
BLACKBOXBSD: 1 (!blackboxbsd)
BLACKBOXNTFS: 1 (!blackboxntfs)
BLACKBOXPNP: 1 (!blackboxpnp)
BLACKBOXWINLOGON: 1
CUSTOMER_CRASH_COUNT: 1
PROCESS_NAME: services.exe
STACK_TEXT:
ffff8185
eeb571b8 fffff806
543d5e24 : 00000000000000c4 00000000
00000062 ffffd883088e33c8 ffffd883
226d0950 : nt!KeBugCheckExffff8185
eeb571c0 fffff806
543e5159 : ffffd883226d0950 ffff8185
eeb572b0 ffffd883088e3240 ffffd883
5e69e820 : nt!VerifierBugCheckIfAppropriate+0xe0ffff8185
eeb57200 fffff806
53e92e24 : ffffd883226d0950 ffffd883
088e32e0 0000000000000001 ffffd883
5e69e800 : nt!VfPoolCheckForLeaks+0x49ffff8185
eeb57240 fffff806
543c74f2 : 0000000000203000 ffffd883
088e3240 fffff80654623c00 fffff806
54623c00 : nt!VfTargetDriversRemove+0x11afd8ffff8185
eeb572c0 fffff806
540c672b : ffffd883088e3240 ffff8185
eeb573f0 0000000000000001 00000000
ffffffff : nt!VfDriverUnloadImage+0x3effff8185
eeb572f0 fffff806
5416ab31 : 0000000000000000 00000000
ffffffff fffff09500000001 ffff8f84
6e5b1f40 : nt!MiUnloadSystemImage+0x2ebffff8185
eeb57490 fffff806
5416aa5e : ffffd8831cdcaa60 ffff8185
eeb577c0 0000000000000000 ffff8185
eeb57930 : nt!MmUnloadSystemImage+0x41ffff8185
eeb574c0 fffff806
540190d0 : ffffd8831cdcaa60 ffff8185
eeb577c0 ffffd8831cdcaa60 fffff806
540992ff : nt!IopDeleteDriver+0x4effff8185
eeb57510 fffff806
53c15c07 : 0000000000000000 00000000
00000000 ffff8185eeb577c0 ffffd883
1cdcaa90 : nt!ObpRemoveObjectRoutine+0x80ffff8185
eeb57570 fffff806
53c15b2e : ffffd8831cdcaa90 ffff8185
eeb57930 ffffd8831cdcaa60 00000000
000a0000 : nt!ObfDereferenceObjectWithTag+0xc7ffff8185
eeb575b0 fffff806
54163cf4 : ffffd8831cdcaa90 ffff8185
eeb577c0 ffff8185eeb57930 00000000
c0000001 : nt!HalPutDmaAdapter+0xeffff8185
eeb575e0 fffff806
5429fc9b : ffffd88315049080 00000000
00000000 ffff8f8565738f01 ffffd883
1cdcaa90 : nt!IopUnloadDriver+0x250ffff8185
eeb57710 fffff806
53e119b5 : ffffd88315049080 ffff8185
eeb577c0 0000006c4bb7e580 ffff8185
eeb577d0 : nt!NtUnloadDriver+0xbffff8185
eeb57740 fffff806
53e03e30 : fffff80654247634 ffffd883
15049080 0000006c4bb7e4a8 0000006c
4bb7e4f9 : nt!KiSystemServiceCopyEnd+0x25ffff8185
eeb578d8 fffff806
54247634 : ffffd88315049080 0000006c
4bb7e4a8 0000006c4bb7e4f9 fffff806
5429fc90 : nt!KiServiceLinkageffff8185
eeb578e0 fffff806
5429fc9b : ffffd88315049080 00000000
00050246 ffff8185eeb57a00 00000000
00000018 : nt!IopUnloadDriver+0xe3b90ffff8185
eeb57a10 fffff806
53e119b5 : ffffd88315049000 ffffd882
fa1d1aa0 ffff8185eeb57ac0 00000000
00000000 : nt!NtUnloadDriver+0xbffff8185
eeb57a40 00007ffb
504708b4 : 0000000000000000 00000000
00000000 0000000000000000 00000000
00000000 : nt!KiSystemServiceCopyEnd+0x250000006c
4bb7e558 00000000
00000000 : 0000000000000000 00000000
00000000 0000000000000000 00000000
00000000 : 0x00007ffb`504708b4STACK_COMMAND: .cxr; .ecxr ; kb
FAILURE_BUCKET_ID: 0xc4_62_LEAKED_POOL_IMAGE_SYMEFASI64.SYS
OSPLATFORM_TYPE: x64
OSNAME: Windows 10
FAILURE_ID_HASH: {bd777d82-c1b7-071a-f998-319d64c05b94}
Followup: MachineOwner
Thank You