[SOLVED] Random BSOD 3-7 times a day - mini dumps - Help!

[nigelfreeney]

Windows 10 21H1
Motherboard Z170-WS
32GB Ram Corsair Vengeance LPX DDR4 2666 C16 2x16GB
OS and program partitions on an Intel 750 series 1.2TB NVME drive
GPU Nvidia GTX 1060-6GB
Sandisk Ultra II 960GB
Toshiba X300 6TB
Corsair Force MP510 m.2 SSD 4TB
WD Red 4TB

I am getting multiple BSODs daily on an ASUS Z170-WS based system. I have tried using Whocrashed to pinpoint the issue but it is constantly throwing in the same generic error i.e.:

crash dump file: C:\WINDOWS\Minidump\071321-13031-01.dmp
uptime: 01:47:32
This was probably caused by the following module: ntkrnlmp.exe (nt!PspCatchCriticalBreak+0x10E)
Bugcheck code: 0xEF (0xFFFFB7024BC05140, 0x0, 0x0, 0x0)
Error: CRITICAL_PROCESS_DIED
Bug check description: This indicates that a critical system process died.
There is a possibility this problem was caused by a virus or other malware.
The crash took place in the Windows kernel. Possibly this problem is caused by another driver that cannot be identified at this time.

I have replaced the graphics card and the PSU. I have moved the graphics card to a different slot and reseated both memory modules. I have gone into the BIOS and set the CPU and memory to its default speed. I have used DDU to remove the Nvidia graphics drivers and have installed the latest non-dch drivers. I have used Driver Easy to check and install all the latest drivers. Device Manager shows no issues.

I back-up daily. At one point I had a stable system but every time I tried to update any of the drivers it would make the system unstable. I was able to put the system back to a stable backup as the system and program drives are separate from the data drives. This worked for a while but now even that doesn't work.

I have three mini dumps from today can anyone help?
https://drive.google.com/file/d/1ocUQg-tUVHC126IAyKnL0qImnYrNFktK/view?usp=sharing (Dump File 1 13th July 2021 11:04)
https://drive.google.com/file/d/1cSGFpKdqbrncQpYcL3x7XaY_IGQlyqis/view?usp=sharing (Dump file 2 13th July 2021 09:16)
https://drive.google.com/file/d/1lNqg2O6agVvqd1DAlVy1B1w-C3-7L6Ul/view?usp=sharing (DumpFile 3 13th July 2021 08:28)

 

[Colif]

right click start button
choose powershell (admin)
type SFC /scannow and press enter

once its completed, copy/paste this command into same window:

Repair-WindowsImage -Online -RestoreHealth and press enter

SFC fixes system files, second command cleans image files, re run SFC if it failed to fix all files and restart PC

unlikely to fix it but worth a try, Critical process died is a windows system error. There are a number of files that if they crash, windows has no choice but to follow. Currently we don't know what file that was as whocrashed just showing what crashed, not why.

I will ask a friend to convert the dumps for me. He may be asleep now.

 

[nigelfreeney]

right click start button
choose powershell (admin)
type SFC /scannow and press enter

once its completed, copy/paste this command into same window:

Repair-WindowsImage -Online -RestoreHealth and press enter

SFC fixes system files, second command cleans image files, re run SFC if it failed to fix all files and restart PC

unlikely to fix it but worth a try, Critical process died is a windows system error. There are a number of files that if they crash, windows has no choice but to follow. Currently we don't know what file that was as whocrashed just showing what crashed, not why.

I will ask a friend to convert the dumps for me. He may be asleep now.

Thanks for the offer of converting the dumps.

I forgot to mention that I had already run SFC /scannow
and DISM /Online /Cleanup-Image /RestoreHealth

I should probably do a chkdsk on each disk and Memtest for the memory. I'm trying to complete a 3.4TB backup so I will try and fit those tasks in after that - provided it doesn't BOSD in the middle again!

 

[Colif]

chkdsk could help, I have seen this error be caused by storage drives before.

who crashed just blames the kernel. it almost always shows the kernel as it did crash but hopefully dump shows what process caused the crashes.

 

[nigelfreeney]

I have performed chkdsk on all partitions and all cleared without any issues

 

[gardenman]

All minidump files have been removed. Please upload to one of the more popular servers such as Google Drive or Microsoft OneDrive or Dropbox, etc.

 

[nigelfreeney]

All minidump files have been removed. Please upload to one of the more popular servers such as Google Drive or Microsoft OneDrive or Dropbox, etc.

The links in my original post had not been removed.

I have changed them to links on Google Drive, which is what I think you needed me to do.

Thanks

 

[nigelfreeney]

I have three more mini dump files:
https://drive.google.com/file/d/1_vOtJX8fxUQWjqfeRHVIEJoMvvMZcpP4/view?usp=sharing (13th July 2021 19:06)
https://drive.google.com/file/d/1ZkkZmTIiHS_teRwV3qG44IWLWk42InLu/view?usp=sharing (14th July 2021 05:08)
https://drive.google.com/file/d/1o-IYntIVhgI-zFkhBts6aHXTLzhbLmqD/view?usp=sharing (14th July 2021 09:48)

 

[gardenman]

The links in my original post had not been removed.

If that's your server, it's probably not configured correctly to allow the downloading of .dmp files. For me it says:
Server Error:
404 - File or directory not found.
The resource you are looking for might have been removed, had its name changed, or is temporarily unavailable.
for all 3 of the original links. Anyway it's not important now that you uploaded to Google Drive.

I ran the dump files through the debugger and got the following information: https://jsfiddle.net/gcuoq83s/show This link is for anyone wanting to help. You do not have to view it. It is safe to "run the fiddle" as the page asks.

Spoiler: Dump File Results

File information:	071421-29312-01.dmp (Jul 14 2021 - 00:07:12)
Bugcheck:	CRITICAL_PROCESS_DIED (EF)
Probably caused by:	ntkrnlmp.exe (Process: svchost.exe)
Uptime:	0 Day(s), 0 Hour(s), 59 Min(s), and 49 Sec(s)

File information:	071421-14406-01.dmp (Jul 14 2021 - 04:47:50)
Bugcheck:	CRITICAL_PROCESS_DIED (EF)
Probably caused by:	ntkrnlmp.exe (Process: svchost.exe)
Uptime:	0 Day(s), 4 Hour(s), 40 Min(s), and 08 Sec(s)

File information:	071321-18203-01.dmp (Jul 13 2021 - 14:05:39)
Bugcheck:	KERNEL_DATA_INPAGE_ERROR (7A)
Probably caused by:	ntkrnlmp.exe (Process: System)
Uptime:	0 Day(s), 8 Hour(s), 00 Min(s), and 52 Sec(s)

File information:	071321-16203-01.dmp (Jul 13 2021 - 03:27:51)
Bugcheck:	CRITICAL_PROCESS_DIED (EF)
Probably caused by:	ntkrnlmp.exe (Process: csrss.exe)
Uptime:	0 Day(s), 11 Hour(s), 11 Min(s), and 34 Sec(s)

File information:	071321-13828-01.dmp (Jul 13 2021 - 04:16:15)
Bugcheck:	CRITICAL_PROCESS_DIED (EF)
Probably caused by:	ntkrnlmp.exe (Process: svchost.exe)
Uptime:	0 Day(s), 0 Hour(s), 47 Min(s), and 55 Sec(s)

File information:	071321-13031-01.dmp (Jul 13 2021 - 06:04:17)
Bugcheck:	CRITICAL_PROCESS_DIED (EF)
Probably caused by:	ntkrnlmp.exe (Process: csrss.exe)
Uptime:	0 Day(s), 1 Hour(s), 47 Min(s), and 32 Sec(s)

Comment: The GPU tweaking driver "iomap64.sys" was found on your system. (AI Suite or GPU Tweak 2)

Possible Motherboard page: https://www.asus.com/us/supportonly/z170ws/helpdesk_knowledge/
There is a BIOS update available for your system. You are using version 3204 and the latest is version 3602. Wait for additional information before deciding to update or not. Important: Verify that I have linked to the correct motherboard. Updating your BIOS can be risky. Never try it when you might lose power (lightning storms, recent power outages, etc).

This information can be used by others to help you. Someone else will post with more information. Please wait for additional answers. Good luck.

 

[Colif]

i did look and the previous links do show 404 now... but anyway, it doesn't matter. We here to fix BSOD

crash 3 happened on the page file which I assume is on the Intel 1.2tb drive

try running this on drive - https://downloadcenter.intel.com/download/30557/Intel-Memory-and-Storage-Tool-GUI-

one "fix"" is to recreate the page file
go settings/system/about
click Advanced system settings
on Advanced tab, click settings under Performance
on next popup, click Advanced tab
Under Virtual memory, click Change

clear box next to Automatically manage paging file size for all drives
this will ungrey out text.
Click No paging file and click set
exit out of these menus and restart PC.

retrace all those steps and tick the box next to Automatically manage paging file size for all drives
that will recreate it on a different area of nvme

Some of your drivers are really old

Feb 24 2010	povrtdev.sys
Aug 02 2010	AsUpIO.sys	ASUS Update Input Output driver http://www.asus.com/
Oct 26 2010	ElRawDsk.sys
Dec 26 2011	CLVirtualDrive.sys	CyberLink Virtual Drive Device driver https://www.cyberlink.com
Apr 18 2012	AiChargerPlus.sys	Asus Charger driver
Apr 24 2012	PxHlpa64.sys	Sonic CD/DVD driver
Aug 22 2012	AsIO.sys	ASUS Input Output driver http://www.asus.com/
Oct 22 2012	lvrs64.sys	Logitech Kernel Audio Improvement Filter Driver http://support.logitech.com/
Sep 23 2013	CLBStor.SYS
Sep 23 2013	CLBUDF.SYS
Feb 11 2014	rawdsk3.sys	Eldos Raw Disk driver http://www.eldos.com/
Nov 05 2014	CLVirtualBus01.sys
Mar 27 2015	RsFx0153.sys
Jun 03 2015	KBFilter.sys
Oct 06 2015	AndroidAFDx64.sys	ASUS AI Charger driver (ASUSTeK)

basically anything older than 2015 is possible cause of bsod.
povrtdev.sys = PlayOn Virtual Audio Device
ElRawDsk.sys - Eldos Rawdisk
CLBStor.SYS - Cyberlink storage Helper Driver
CLBUDF.SYS - Cyberlink Instaburn
CLVirtualBus01.sys - Cyberlink
RsFx0153.sys - appears to be part of windows. random (shouldn't be in list)
KBFilter.sys - Trend micro Keyboard encryption? this seems out of place on a PC with Symantec installed.

Did you install all the utilities on the Asus website?
If you don't use them all, take them off.

Clearly you have a DVD drive as some of thats pretty useless without an optical drive.

 

[nigelfreeney]

i did look and the previous links do show 404 now... but anyway, it doesn't matter. We here to fix BSOD

crash 3 happened on the page file which I assume is on the Intel 1.2tb drive

try running this on drive - https://downloadcenter.intel.com/download/30557/Intel-Memory-and-Storage-Tool-GUI-

one "fix"" is to recreate the page file
go settings/system/about
click Advanced system settings
on Advanced tab, click settings under Performance
on next popup, click Advanced tab
Under Virtual memory, click Change

clear box next to Automatically manage paging file size for all drives
this will ungrey out text.
Click No paging file and click set
exit out of these menus and restart PC.

retrace all those steps and tick the box next to Automatically manage paging file size for all drives
that will recreate it on a different area of nvme

Some of your drivers are really old

Feb 24 2010	povrtdev.sys
Aug 02 2010	AsUpIO.sys	ASUS Update Input Output driver http://www.asus.com/
Oct 26 2010	ElRawDsk.sys
Dec 26 2011	CLVirtualDrive.sys	CyberLink Virtual Drive Device driver https://www.cyberlink.com
Apr 18 2012	AiChargerPlus.sys	Asus Charger driver
Apr 24 2012	PxHlpa64.sys	Sonic CD/DVD driver
Aug 22 2012	AsIO.sys	ASUS Input Output driver http://www.asus.com/
Oct 22 2012	lvrs64.sys	Logitech Kernel Audio Improvement Filter Driver http://support.logitech.com/
Sep 23 2013	CLBStor.SYS
Sep 23 2013	CLBUDF.SYS
Feb 11 2014	rawdsk3.sys	Eldos Raw Disk driver http://www.eldos.com/
Nov 05 2014	CLVirtualBus01.sys
Mar 27 2015	RsFx0153.sys
Jun 03 2015	KBFilter.sys
Oct 06 2015	AndroidAFDx64.sys	ASUS AI Charger driver (ASUSTeK)

basically anything older than 2015 is possible cause of bsod.
povrtdev.sys = PlayOn Virtual Audio Device
ElRawDsk.sys - Eldos Rawdisk
CLBStor.SYS - Cyberlink storage Helper Driver
CLBUDF.SYS - Cyberlink Instaburn
CLVirtualBus01.sys - Cyberlink
RsFx0153.sys - appears to be part of windows. random (shouldn't be in list)
KBFilter.sys - Trend micro Keyboard encryption? this seems out of place on a PC with Symantec installed.

Did you install all the utilities on the Asus website?
If you don't use them all, take them off.

Clearly you have a DVD drive as some of thats pretty useless without an optical drive.

HI Colif,

Thanks for the feedback. I think the first thing I am going to do is remove the ASUS AISuite3 - it's caused issues in the past.

I was surprised to see that there have been a couple of BIOS updates - I had given up checking as the board design is now 5-6 years old. If that fixes the problem then I be productive again. I will also look at the other items you flagged. I'll let you know if AISuite was the immediate culprit.

 

[Colif]

AI Suite can be a problem, yes. Though I hadn't seen it cause these, its always possible.

it could be any of the older drivers.

I don't see Z170 as old as my last PC had a Z97 in it, and it doesn't feel that old to me. I guess it is though.

 

[nigelfreeney]

Possible Motherboard page: https://www.asus.com/us/supportonly/z170ws/helpdesk_knowledge/
There is a BIOS update available for your system. You are using version 3204 and the latest is version 3602. Wait for additional information before deciding to update or not. Important: Verify that I have linked to the correct motherboard. Updating your BIOS can be risky. Never try it when you might lose power (lightning storms, recent power outages, etc).

I applied the BIOS update and no more BSODs for the last 48 hours.

The description of the benefits of the BIOS update were very generalised performance improvements - not exactly helpful.

Anyway, thanks for pointing me at the obvious - I had not expected any further BIOS updates.