Random BSOD Windows 10

[DisUsrNameIsAlrdyTkn]

Hello.

I am getting BSOD at different times. For example around a minute after I log into Windows, when I try to install a program, or when I use the program. Or also on any random time. Not sure if it's caused by this, but it started happening after win 10 update on 11.7. (day/month) (KB4025342). I've tried to uninstall the update, but that still gave me BSOD. I don't know what to do, please help. Tell me what information you need to determine the cause and how to obtain it and I will provide it to you. Thanks

 

[RARRAF]

And here's my pc specs:
CPU:
Motherboard:
RAM:
GPU:
HDD:
PSU make and age:
OS:
HWINFO from here https://www.hwinfo.com/download.php

 

[DisUsrNameIsAlrdyTkn]

And here's my pc specs:
CPU:
Motherboard:
RAM:
GPU:
HDD:
PSU make and age:
OS:
HWINFO from here https://www.hwinfo.com/download.php

Thanks for reply,

http://imgur.com/a/yElzZ here are screenshots. (First time I tried to run it, it gave me BSOD)

http://imgur.com/a/iHeZ2 Also, here are screenshots from WhoCrashed, if thats any useful.

And another also, I tried to update my GPU drivers, but installation 2x resulted in BSOD.

 

[johnbl]

the first parameter of the bugcheck is the error code. yours was 0xc0000005
when you get this error code you should run memtest86 to confirm your memory timings are ok.This error code means a bad memory address was given to a driver. I looked at the memory address in the bugcheck and it looks like a properly formed memory address but it could have corrupted bits. in general, memory address that start with 0xff are kernel memory addresses and have a good chance to be valid. (or are not clearly corrupted )

run the memtest86 to confirm the memory timings, it it is ok, then you should put your memory dump on a public server like Microsoft onedrive, share the files for public access and post a link.

 

[DisUsrNameIsAlrdyTkn]

the first parameter of the bugcheck is the error code. yours was 0xc0000005
when you get this error code you should run memtest86 to confirm your memory timings are ok.This error code means a bad memory address was given to a driver. I looked at the memory address in the bugcheck and it looks like a properly formed memory address but it could have corrupted bits. in general, memory address that start with 0xff are kernel memory addresses and have a good chance to be valid. (or are not clearly corrupted )

run the memtest86 to confirm the memory timings, it it is ok, then you should put your memory dump on a public server like Microsoft onedrive, share the files for public access and post a link.

Thanks for your reply,

if I'm correct, this memory test requires me to boot it from USB. Is this very necessary? I've run windows memory diagnostics earlier today, found nothing.

 

[johnbl]

the Microsoft test is fast but crude and will not find the type of errors the memtest86 will find.
basically since the memory address looked like a valid memory address it might just have a single bit flipped. Memtest86 has a series of tests for this scenario. the public generally does not know what the Microsoft test actually tests for.
you can run the memtest from cd or USB image loader so that windows is not involved in the test. just the BIOS timing settings and the machines hardware. No windows drivers involved.

the first parameter of the bugcheck is the error code. yours was 0xc0000005
when you get this error code you should run memtest86 to confirm your memory timings are ok.This error code means a bad memory address was given to a driver. I looked at the memory address in the bugcheck and it looks like a properly formed memory address but it could have corrupted bits. in general, memory address that start with 0xff are kernel memory addresses and have a good chance to be valid. (or are not clearly corrupted )

run the memtest86 to confirm the memory timings, it it is ok, then you should put your memory dump on a public server like Microsoft onedrive, share the files for public access and post a link.

Thanks for your reply,

if I'm correct, this memory test requires me to boot it from USB. Is this very necessary? I've run windows memory diagnostics earlier today, found nothing.

 

[DisUsrNameIsAlrdyTkn]

the Microsoft test is fast but crude and will not find the type of errors the memtest86 will find.
basically since the memory address looked like a valid memory address it might just have a single bit flipped. Memtest86 has a series of tests for this scenario. the public generally does not know what the Microsoft test actually tests for.
you can run the memtest from cd or USB image loader so that windows is not involved in the test. just the BIOS timing settings and the machines hardware. No windows drivers involved.

the first parameter of the bugcheck is the error code. yours was 0xc0000005
when you get this error code you should run memtest86 to confirm your memory timings are ok.This error code means a bad memory address was given to a driver. I looked at the memory address in the bugcheck and it looks like a properly formed memory address but it could have corrupted bits. in general, memory address that start with 0xff are kernel memory addresses and have a good chance to be valid. (or are not clearly corrupted )

run the memtest86 to confirm the memory timings, it it is ok, then you should put your memory dump on a public server like Microsoft onedrive, share the files for public access and post a link.

Thanks for your reply,

if I'm correct, this memory test requires me to boot it from USB. Is this very necessary? I've run windows memory diagnostics earlier today, found nothing.

Alright, I will do that then. I'll come with results later today or tommorow tho, because I want to do this later.

 

[DisUsrNameIsAlrdyTkn]

the Microsoft test is fast but crude and will not find the type of errors the memtest86 will find.
basically since the memory address looked like a valid memory address it might just have a single bit flipped. Memtest86 has a series of tests for this scenario. the public generally does not know what the Microsoft test actually tests for.
you can run the memtest from cd or USB image loader so that windows is not involved in the test. just the BIOS timing settings and the machines hardware. No windows drivers involved.

the first parameter of the bugcheck is the error code. yours was 0xc0000005
when you get this error code you should run memtest86 to confirm your memory timings are ok.This error code means a bad memory address was given to a driver. I looked at the memory address in the bugcheck and it looks like a properly formed memory address but it could have corrupted bits. in general, memory address that start with 0xff are kernel memory addresses and have a good chance to be valid. (or are not clearly corrupted )

run the memtest86 to confirm the memory timings, it it is ok, then you should put your memory dump on a public server like Microsoft onedrive, share the files for public access and post a link.

Thanks for your reply,

if I'm correct, this memory test requires me to boot it from USB. Is this very necessary? I've run windows memory diagnostics earlier today, found nothing.

Ok so I've run memtest86 and no errors were detected. Here is my latest minidump file http://www.mediafire.com/file/ij822cacca4akzk/071517-25000-01.dmp

 

[johnbl]

the source of the bugcheck started in usermode but I can not tell what service with a mini dump. I would guess maybe the below might help.

try to see if updating this driver helps.

Realtek USB 2.0 Card Reader driver
http://www.realtek.com.tw/downloads/downloadsView.aspx?Langid=1&PNid=15&PFid=25&Level=4&Conn=3&DownTypeID=3&GetDown=false

I could not read the date of your driver because all of the driver dates were corrupted in the memory dump.
older versions of the driver corrupt data in memory.

- looks like you also have a activation key server installed on your machine, you should run a Malwarebytes scan then attempt to confirm all of your windows files have not been modified.
run powershell then run
dism.exe /online /cleanup-image /restorehealth
this will connect compare your files with the ones on a windows update server and repair any modified files.


you also had a older version of a network driver:
Qualcomm Atheros AR8151 PCI-E Gigabit Ethernet Controller (NDIS 6.30)
L1C63x64.sys from 2013 you should look for a update from your motherboard vendors website.

machine info:
BIOS Version 79CN49WW(V3.08)
BIOS Starting Address Segment e000
BIOS Release Date 08/06/2014
SKUNumber LENOVO_MT_20238
Family IDEAPAD
Manufacturer LENOVO
Chassis Type Notebook
Version Lenovo G510
Processor Version Intel(R) Core(TM) i3-4000M CPU @ 2.40GHz
Processor Voltage 88h - 0.8V
External Clock 100MHz
Max Speed 2400MHz
Current Speed 2400MHz

 

[DisUsrNameIsAlrdyTkn]

the source of the bugcheck started in usermode but I can not tell what service with a mini dump. I would guess maybe the below might help.

try to see if updating this driver helps.

Realtek USB 2.0 Card Reader driver
http://www.realtek.com.tw/downloads/downloadsView.aspx?Langid=1&PNid=15&PFid=25&Level=4&Conn=3&DownTypeID=3&GetDown=false

I could not read the date of your driver because all of the driver dates were corrupted in the memory dump.
older versions of the driver corrupt data in memory.

- looks like you also have a activation key server installed on your machine, you should run a Malwarebytes scan then attempt to confirm all of your windows files have not been modified.
run powershell then run
dism.exe /online /cleanup-image /restorehealth
this will connect compare your files with the ones on a windows update server and repair any modified files.


you also had a older version of a network driver:
Qualcomm Atheros AR8151 PCI-E Gigabit Ethernet Controller (NDIS 6.30)
L1C63x64.sys from 2013 you should look for a update from your motherboard vendors website.

machine info:
BIOS Version 79CN49WW(V3.08)
BIOS Starting Address Segment e000
BIOS Release Date 08/06/2014
SKUNumber LENOVO_MT_20238
Family IDEAPAD
Manufacturer LENOVO
Chassis Type Notebook
Version Lenovo G510
Processor Version Intel(R) Core(TM) i3-4000M CPU @ 2.40GHz
Processor Voltage 88h - 0.8V
External Clock 100MHz
Max Speed 2400MHz
Current Speed 2400MHz

Alright:

1. I have tried to update Realtek USB 2.0 Card Reader driver but it didn't work.

2. I have tried *several* times to install/run Malwarebytes but - After installation the program actualy started but right after that got BSOD. After my computer has restared again I couldn't run Malwarebytes, giving me this message -

3. I ran powershell with your command anyway, it ended up like this -

nothing changed.

4.

you also had a older version of a network driver:
Qualcomm Atheros AR8151 PCI-E Gigabit Ethernet Controller (NDIS 6.30)
L1C63x64.sys from 2013 you should look for a update from your motherboard vendors website.

I went on this page with two download buttons. First one gave me this application, saying I think that ALL of my drivers are outdated, clicking on Download in the app wanted me to buy their app. No thanks.

Second button had me download something from suspicious website (all in chinese ?), so I didn't proceed with that.

5. My friend recommended me this application. It removes my GPU drivers (I did that in safe mode) and then I should be abled to install them (?). It didn't work, while installing drivers I got BSOD.

Here are all my latest minidumps, if you want.

 

[RARRAF]

Download the latest drivers for your GPU place them on your desktop get Display Driver Uninstaller from here
http://www.guru3d.com/files-details/display-driver-uninstaller-download.html
remove everything after restarting it will probably be 640x480 not great instal your AMD/NVIDIA drivers and hopefully should fix your problem

 

[DisUsrNameIsAlrdyTkn]

Download the latest drivers for your GPU place them on your desktop get Display Driver Uninstaller from here
http://www.guru3d.com/files-details/display-driver-uninstaller-download.html
remove everything after restarting it will probably be 640x480 not great instal your AMD/NVIDIA drivers and hopefully should fix your problem

So I have done the DDU again, and downloaded AMD autodetection tool from here.

Next happened this:

note: Following images are edited into english from my language, so you understand them.

So I ran the installer I downloaded, everything ok so far:

Next I see this screen. I choose "Custom installation"

After it has finished downloading, I get this screen. I ticked only the drivers and continued with installation.

Then I get this screen. This was the last thing I saw before it got BSOD.

 

[RARRAF]

well not knowing what system you are talking about does not help I know you have an i3 4000 with integrated GPU from intel but apart from that anybody's guess
And here's my pc specs:
CPU:
Motherboard:
RAM:
GPU:
HDD:
PSU make and age:
OS:
HWINFO from here https://www.hwinfo.com/download.php

 

[DisUsrNameIsAlrdyTkn]

well not knowing what system you are talking about does not help I know you have an i3 4000 with integrated GPU from intel but apart from that anybody's guess
And here's my pc specs:
CPU:
Motherboard:
RAM:
GPU:
HDD:
PSU make and age:
OS:
HWINFO from here https://www.hwinfo.com/download.php

I have already posted my specs. It's here http://imgur.com/a/yElzZ (there are 2 images in this album)

 

[RARRAF]

what is wrong with you an i3 4000m tells me nothing about your machine I will not post anything unless I have details

 

[DisUsrNameIsAlrdyTkn]

what is wrong with you an i3 4000m tells me nothing about your machine I will not post anything unless I have details

Are you trolling? Or what information can't you find there? It says right there:

System summary of Lenovo G510
CPU: i3-4000M @ 2,4 GHz
GPU: (other than the integrated one) AMD Radeon R7 265M 1 GB
Memory Modules: Ramaxel Technology RMT3170ME68F9F1600 4 GB 800 MHz
RAM: 8 GB DDR3 SRAM 8 x 99,8 MHz
OS: Win 10 Home (x64)
Motherboard: LENOVO INVALID (?)
Chipset: Intel HM86 (Lynx Point)

(I literaly rewrote this from that image.)

And you can see it if you hover over my profile picture too.

 

[RARRAF]

good luck

 

[DisUsrNameIsAlrdyTkn]

good luck

enlighten me. what information is missing there?

 

[DisUsrNameIsAlrdyTkn]

Well, if someone else has an idea, I'm still up to suggestions.

 

[Colif]

You shouldn't use 3rd party driver finders as they often get the wrong files. Especially when you have a Lenova and can go here and click update your system and web site will find drivers for you - http://pcsupport.lenovo.com/au/en/products/laptops-and-netbooks/lenovo-g-series-laptops/lenovo-g510-notebook

if you still getting the same errors, show us dmp files and someone will look through them.

DISM didn't help, did you also run SFC /scannow?

 

[DisUsrNameIsAlrdyTkn]

You shouldn't use 3rd party driver finders as they often get the wrong files. Especially when you have a Lenova and can go here and click update your system and web site will find drivers for you - http://pcsupport.lenovo.com/au/en/products/laptops-and-netbooks/lenovo-g-series-laptops/lenovo-g510-notebook

if you still getting the same errors, show us dmp files and someone will look through them.

DISM didn't help, did you also run SFC /scannow?

Thanks for reply,

Here are all my latest minidumps, I hope I'm uploading the right ones but only other .dmp file there has 500 MB and I can't upload that much.

I went on the Lenovo site and I did everything as instructed and it seems I have all newest drivers

No, DISM didn't help and I ran sfc /scannow, also didn't help.

 

[johnbl]

looks like you have a keyserver running and some driver called:
MpKsl2c91ce0c.sys Tue May 19 18:50:37 2015
also
MpKsl7f57a8e.sys

the keyserver tends to indicate pirate software and the two unknown drivers are also suspect

 

[DisUsrNameIsAlrdyTkn]

looks like you have a keyserver running and some driver called:
MpKsl2c91ce0c.sys Tue May 19 18:50:37 2015
also
MpKsl7f57a8e.sys

the keyserver tends to indicate pirate software and the two unknown drivers are also suspect

Ok thanks,
what do you suggest then? How can I find the keyserver or those unknown drivers? And how to delete/repair them? (and yea I admit I have a pirated program, but I also used the same exact version before with no troubles tho)

 

[johnbl]

you might go into bios and disable some of your realtek hardware. some of their old drivers would corrupt memory
Realtek UVC webcam Driver (thinking about this and the card reader) just to see if they are the cause of the problem.
(generally, running verifier.exe debug functions would cause a bugcheck with these drivers if they are out of date)
you might try to google the driver name, I have also seen some programs use unique driver names as cheap copy protection. For the most part if the driver name can not be found on google, you do not want it.

these might be old Microsoft defender files that did not install correctly, or they could be malware that tries to look like old Microsoft defender files. try and google just the first part of the file name.

Also, the function that was broken in kernel nt!rtlgetrvalistiteratorstate
does not show up in many bugchecks and does not fail very often so I would suspect it is being targeted by malware from 2015 and your system was updated and the malware does not work any more.

I would just do a clean re install of the OS just so I would not have to deal with the bugchecks. (if disabling the realtek devices in bios and removing the drivers does not prevent the bugcheck)

looks like you have a keyserver running and some driver called:
MpKsl2c91ce0c.sys Tue May 19 18:50:37 2015
also
MpKsl7f57a8e.sys

the keyserver tends to indicate pirate software and the two unknown drivers are also suspect

Ok thanks,
what do you suggest then? (and yea I admit I have a pirated program, but I also used the same exact version before with no troubles tho)

 

[DisUsrNameIsAlrdyTkn]

you might go into bios and disable some of your realtek hardware. some of their old drivers would corrupt memory
Realtek UVC webcam Driver (thinking about this and the card reader) just to see if they are the cause of the problem.
(generally, running verifier.exe debug functions would cause a bugcheck with these drivers if they are out of date)
you might try to google the driver name, I have also seen some programs use unique driver names as cheap copy protection. For the most part if the driver name can not be found on google, you do not want it.

these might be old Microsoft defender files that did not install correctly, or they could be malware that tries to look like old Microsoft defender files. try and google just the first part of the file name.

Also, the function that was broken in kernel nt!rtlgetrvalistiteratorstate
does not show up in many bugchecks and does not fail very often so I would suspect it is being targeted by malware from 2015 and your system was updated and the malware does not work any more.

I would just do a clean re install of the OS just so I would not have to deal with the bugchecks. (if disabling the realtek devices in bios and removing the drivers does not prevent the bugcheck)

looks like you have a keyserver running and some driver called:
MpKsl2c91ce0c.sys Tue May 19 18:50:37 2015
also
MpKsl7f57a8e.sys

the keyserver tends to indicate pirate software and the two unknown drivers are also suspect

Ok thanks,
what do you suggest then? (and yea I admit I have a pirated program, but I also used the same exact version before with no troubles tho)

Thank you johnbl and other guys for being patient here with me and all the good advice. I have done clean install of Windows now and drivers have updated automaticaly. Just a quick assistence with the drivers here,

These are in updates history in windows settings:

Realtek - Image - 8/28/2015 12:00:00 AM - 6.3.9600.11103
Successfully installed

Lenovo - System - 9/27/2016 12:00:00 AM - 15.10.28.170
Successfully installed

Intel - Other hardware - Intel(R) Management Engine Interface
Successfully installed

ELAN driver update for ELAN Input Device
Successfully installed

Intel Corporation - Display - 3/8/2017 12:00:00 AM - 20.19.15.4624
Successfully installed

Intel Corporation driver update for Intel(R) HD Graphics 4600
Successfully installed

Advanced Micro Devices, Inc. driver update for AMD Radeon R7 M265 Series
Successfully installed

Advanced Micro Devices, Inc. - Graphics Adapter WDDM1.1, Graphics Adapter WDDM1.3, Graphics Adapter WDDM2.0 - AMD Radeon R7 M265
Successfully installed

Realtek Semiconduct Corp. - Other hardware - Realtek USB 2.0 Card Reader
Successfully installed

Intel Corporation - Display - 3/8/2017 12:00:00 AM - 20.19.15.4624
Unsuccessfully installed

Qualcomm Atheros Communications - Bluetooth Controller - Qualcomm Atheros AR3012 Bluetooth 4.0
Successfully installed

Intel - Other hardware - Intel(R) 8 Series/C220 Series SMBus Controller - 8C22
Successfully installed

Conexant driver update for Conexant SmartAudio HD
Successfully installed

Should I worry? Or do something here?

Please let me know! Thanks!!