I've built a PC this September. And was getting random BSODs staring that time. Till that time I've reinstalled my Windows a couple of times. Nothing changed. I'm getting these BSODs from time to time.
I currently use my PC only for gaming or random browsing, leisure stuff, not mission critical. But it really started to bug me.
I was able to analyze last dump with windbg, but I could only guess what could go wrong. If anyone are more proficient in this, that would very cool, to help me out here.
my pc parts:
My OS: Windows 10 LTSB
Previously I installed all drivers from ASUS site, and I think it messed up my bluetooth driver, and I was getting BSODs back then every time I want to restart or just power off my computer.
So this time I just didn't install any of drivers, just keep checking on updated in Device Manager.
I'm looking at this in Device Manager, the questions mark under some devices, is that okay?
I'm thinking here, if everything works, why should I update any drivers.
my current list of BSODs:
anazyle -v output:
uploaded a bunch of minidumps starting from 09/20, when installed windows 10:
https://drive.google.com/drive/folders/0B07lGQ9a3UWVNGtaWUFzMVRHbTg?usp=sharing
I currently use my PC only for gaming or random browsing, leisure stuff, not mission critical. But it really started to bug me.
I was able to analyze last dump with windbg, but I could only guess what could go wrong. If anyone are more proficient in this, that would very cool, to help me out here.
my pc parts:
CPU: Intel - Core i7-7700 3.6GHz Quad-Core Processor
CPU Cooler: Noctua - NH-U14S 55.0 CFM CPU Cooler
Motherboard: Asus - STRIX B250I GAMING Mini ITX LGA1151 Motherboard
Memory: G.Skill - NT Series 16GB (2 x 8GB) DDR4-2400 Memory
Storage: Western Digital - Blue 500GB M.2-2280 Solid State Drive
Storage: Western Digital - Black 512GB M.2-2280 Solid State Drive
Video Card: MSI - GeForce GTX 1080 8GB GAMING X 8G Video Card
Case: Fractal Design - Node 304 Mini ITX Tower Case
Power Supply: SeaSonic - FOCUS Plus Gold 550W 80+ Gold Certified Fully-Modular ATX Power Supply
Mouse: Logitech - MX Master Bluetooth Wireless Laser Mouse
CPU Cooler: Noctua - NH-U14S 55.0 CFM CPU Cooler
Motherboard: Asus - STRIX B250I GAMING Mini ITX LGA1151 Motherboard
Memory: G.Skill - NT Series 16GB (2 x 8GB) DDR4-2400 Memory
Storage: Western Digital - Blue 500GB M.2-2280 Solid State Drive
Storage: Western Digital - Black 512GB M.2-2280 Solid State Drive
Video Card: MSI - GeForce GTX 1080 8GB GAMING X 8G Video Card
Case: Fractal Design - Node 304 Mini ITX Tower Case
Power Supply: SeaSonic - FOCUS Plus Gold 550W 80+ Gold Certified Fully-Modular ATX Power Supply
Mouse: Logitech - MX Master Bluetooth Wireless Laser Mouse
My OS: Windows 10 LTSB
Previously I installed all drivers from ASUS site, and I think it messed up my bluetooth driver, and I was getting BSODs back then every time I want to restart or just power off my computer.
So this time I just didn't install any of drivers, just keep checking on updated in Device Manager.
I'm looking at this in Device Manager, the questions mark under some devices, is that okay?
I'm thinking here, if everything works, why should I update any drivers.
my current list of BSODs:
anazyle -v output:
Microsoft (R) Windows Debugger Version 10.0.15063.468 AMD64
Copyright (c) Microsoft Corporation. All rights reserved.
Loading Dump File [C:\Windows\Minidump\100717-5265-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available
Symbol search path is: srv*
Executable search path is:
Windows 10 Kernel Version 14393 MP (8 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 14393.1715.amd64fre.rs1_release_inmarket.170906-1810
Machine Name:
Kernel base = 0xfffff802`65c0b000 PsLoadedModuleList = 0xfffff802`65f09040
Debug session time: Sat Oct 7 19:52:57.061 2017 (UTC + 3:00)
System Uptime: 0 days 2:16:18.713
Loading Kernel Symbols
.
Press ctrl-c (cdb, kd, ntsd) or ctrl-break (windbg) to abort symbol loads that take too long.
Run !sym noisy before .reload to track down problems loading symbols.
..............................................................
................................................................
..................................................
Loading User Symbols
Loading unloaded module list
..................................................
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
Use !analyze -v to get detailed debugging information.
BugCheck A, {ffffed99c6b12208, 2, 1, fffff80265c84a3c}
*** ERROR: Module load completed but symbols could not be loaded for NTFS.sys
Probably caused by : ntkrnlmp.exe ( nt!RemoveListHeadPte+a0 )
Followup: MachineOwner
---------
5: kd> !analyze -v
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
IRQL_NOT_LESS_OR_EQUAL (a)
An attempt was made to access a pageable (or completely invalid) address at an
interrupt request level (IRQL) that is too high. This is usually
caused by drivers using improper addresses.
If a kernel debugger is available get the stack backtrace.
Arguments:
Arg1: ffffed99c6b12208, memory referenced
Arg2: 0000000000000002, IRQL
Arg3: 0000000000000001, bitfield :
bit 0 : value 0 = read operation, 1 = write operation
bit 3 : value 0 = not an execute operation, 1 = execute operation (only on chips which support this level of status)
Arg4: fffff80265c84a3c, address which referenced memory
Debugging Details:
------------------
DUMP_CLASS: 1
DUMP_QUALIFIER: 400
BUILD_VERSION_STRING: 10.0.14393.1715 (rs1_release_inmarket.170906-1810)
SYSTEM_MANUFACTURER: System manufacturer
SYSTEM_PRODUCT_NAME: System Product Name
SYSTEM_SKU: SKU
SYSTEM_VERSION: System Version
BIOS_VENDOR: American Megatrends Inc.
BIOS_VERSION: 0809
BIOS_DATE: 07/07/2017
BASEBOARD_MANUFACTURER: ASUSTeK COMPUTER INC.
BASEBOARD_PRODUCT: STRIX B250I GAMING
BASEBOARD_VERSION: Rev X.0x
DUMP_TYPE: 2
DUMP_FILE_ATTRIBUTES: 0x8
Kernel Generated Triage Dump
BUGCHECK_P1: ffffed99c6b12208
BUGCHECK_P2: 2
BUGCHECK_P3: 1
BUGCHECK_P4: fffff80265c84a3c
WRITE_ADDRESS: fffff80265faa338: Unable to get MiVisibleState
Unable to get NonPagedPoolStart
Unable to get NonPagedPoolEnd
Unable to get PagedPoolStart
Unable to get PagedPoolEnd
ffffed99c6b12208
CURRENT_IRQL: 2
FAULTING_IP:
nt!RemoveListHeadPte+a0
fffff802`65c84a3c 4a8944d308 mov qword ptr [rbx+r10*8+8],rax
CPU_COUNT: 8
CPU_MHZ: e10
CPU_VENDOR: GenuineIntel
CPU_FAMILY: 6
CPU_MODEL: 9e
CPU_STEPPING: 9
CPU_MICROCODE: 6,9e,9,0 (F,M,S,R) SIG: 5E'00000000 (cache) 5E'00000000 (init)
CUSTOMER_CRASH_COUNT: 1
DEFAULT_BUCKET_ID: WIN8_DRIVER_FAULT
BUGCHECK_STR: AV
PROCESS_NAME: WerFault.exe
ANALYSIS_SESSION_HOST: PC
ANALYSIS_SESSION_TIME: 10-07-2017 20:54:48.0728
ANALYSIS_VERSION: 10.0.15063.468 amd64fre
TRAP_FRAME: ffff8001c9e9ac70 -- (.trap 0xffff8001c9e9ac70)
NOTE: The trap frame does not contain all registers.
Some register values may be zeroed or incorrect.
rax=780265f250000000 rbx=0000000000000000 rcx=b38d624400000000
rdx=ffffed0000000000 rsi=0000000000000000 rdi=0000000000000000
rip=fffff80265c84a3c rsp=ffff8001c9e9ae00 rbp=ffff8001c9e9af40
r8=ffffed55c6c69400 r9=000000000fffffff r10=0000000b38d62440
r11=fffff80265f25ea0 r12=0000000000000000 r13=0000000000000000
r14=0000000000000000 r15=0000000000000000
iopl=0 nv up ei pl nz na po nc
nt!RemoveListHeadPte+0xa0:
fffff802`65c84a3c 4a8944d308 mov qword ptr [rbx+r10*8+8],rax ds:00000059`c6b12208=????????????????
Resetting default scope
LAST_CONTROL_TRANSFER: from fffff80265d65a29 to fffff80265d5a8b0
STACK_TEXT:
ffff8001`c9e9ab28 fffff802`65d65a29 : 00000000`0000000a ffffed99`c6b12208 00000000`00000002 00000000`00000001 : nt!KeBugCheckEx
ffff8001`c9e9ab30 fffff802`65d64007 : ffffd985`88575f00 fffff802`65cdab82 ffff8001`00000002 00000000`00000000 : nt!KiBugCheckDispatch+0x69
ffff8001`c9e9ac70 fffff802`65c84a3c : 00000000`00000000 ffff8001`c9e9b0d0 ffff8001`c9e9b190 ffffd985`89bc06c0 : nt!KiPageFault+0x247
ffff8001`c9e9ae00 fffff802`65c82a4c : ffffed00`00000000 fffff802`65f28080 ffff8001`c9e9af40 00000000`00000040 : nt!RemoveListHeadPte+0xa0
ffff8001`c9e9ae40 fffff802`65c81bea : ffffd985`89bc06c0 00000000`00000040 ffffd985`863ef728 ffffd985`89bc06c0 : nt!MiObtainSystemCacheView+0x11c
ffff8001`c9e9b000 fffff802`65c85690 : ffffd985`89bc0640 ffffc287`cbbdf540 ffffffd8`00000000 ffffd985`89bc0678 : nt!MmMapViewInSystemCache+0xda
ffff8001`c9e9b160 fffff802`65c57810 : ffffd985`8722bcb8 ffffd985`8722bcb8 ffffd985`00000000 00000000`00000000 : nt!CcGetVacbMiss+0xb8
ffff8001`c9e9b1e0 fffff802`65c38200 : ffffd985`00000000 00000000`00000000 ffff8001`c9e9b2e8 ffff8001`c9e9b2dc : nt!CcGetVirtualAddress+0x330
ffff8001`c9e9b290 fffff802`65c35187 : ffffd985`8722bc50 000000a5`380c9728 ffff8001`c9e9b400 ffffd985`00000002 : nt!CcMapAndCopyInToCache+0x4a0
ffff8001`c9e9b3a0 fffff804`1e5fa427 : ffffd985`8733f658 ffffc287`d1a9e150 ffffd985`8c3368d0 ffffc287`d1a9e150 : nt!CcCopyWriteEx+0xe7
ffff8001`c9e9b420 fffff804`1e5f6388 : ffffd985`8733f658 00000000`00000000 00000000`00000000 ffffd985`8733f658 : NTFS+0x1a427
ffff8001`c9e9b6a0 fffff804`1dc05206 : ffffd985`8c46a400 ffffd985`8725db80 ffffd985`8725db80 ffffd985`8725df68 : NTFS+0x16388
ffff8001`c9e9b760 fffff804`1dc03146 : 00000000`00000000 00000000`00000000 00000000`ffff8001 ffffd985`8b969080 : FLTMGR!FltpLegacyProcessingAfterPreCallbacksCompleted+0x1a6
ffff8001`c9e9b7f0 fffff802`66020dd0 : ffffd985`8c3368d0 ffffd985`8725db80 00000000`00000002 ffffd985`8c3368d0 : FLTMGR!FltpDispatch+0xb6
ffff8001`c9e9b850 fffff802`660217dd : 00000000`00000001 00000000`00000004 ffffd985`8c336920 ffff8001`c9e9bb00 : nt!IopSynchronousServiceTail+0x1a0
ffff8001`c9e9b910 fffff802`65d65593 : 00000000`00000240 00000000`00000000 00000000`00000000 00000000`00000000 : nt!NtWriteFile+0x66d
ffff8001`c9e9ba10 00007ffc`710261a4 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSystemServiceCopyEnd+0x13
000000a5`380c9608 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x00007ffc`710261a4
STACK_COMMAND: kb
THREAD_SHA1_HASH_MOD_FUNC: cd06802cf3339439210a3ab6cb920e5d61c97c89
THREAD_SHA1_HASH_MOD_FUNC_OFFSET: dc905217f32d8d3a729f5b3e041aa96a75c52728
THREAD_SHA1_HASH_MOD: 3ac2c0f5433a12278e529a8539a883f6a8a3028d
FOLLOWUP_IP:
nt!RemoveListHeadPte+a0
fffff802`65c84a3c 4a8944d308 mov qword ptr [rbx+r10*8+8],rax
FAULT_INSTR_CODE: d344894a
SYMBOL_STACK_INDEX: 3
SYMBOL_NAME: nt!RemoveListHeadPte+a0
FOLLOWUP_NAME: MachineOwner
MODULE_NAME: nt
IMAGE_NAME: ntkrnlmp.exe
DEBUG_FLR_IMAGE_TIMESTAMP: 59b0d121
IMAGE_VERSION: 10.0.14393.1715
BUCKET_ID_FUNC_OFFSET: a0
FAILURE_BUCKET_ID: AV_nt!RemoveListHeadPte
BUCKET_ID: AV_nt!RemoveListHeadPte
PRIMARY_PROBLEM_CLASS: AV_nt!RemoveListHeadPte
TARGET_TIME: 2017-10-07T16:52:57.000Z
OSBUILD: 14393
OSSERVICEPACK: 1715
SERVICEPACK_NUMBER: 0
OS_REVISION: 0
SUITE_MASK: 272
PRODUCT_TYPE: 1
OSPLATFORM_TYPE: x64
OSNAME: Windows 10
OSEDITION: Windows 10 WinNt TerminalServer SingleUserTS
OS_LOCALE:
USER_LCID: 0
OSBUILD_TIMESTAMP: 2017-09-07 07:54:57
BUILDDATESTAMP_STR: 170906-1810
BUILDLAB_STR: rs1_release_inmarket
BUILDOSVER_STR: 10.0.14393.1715
ANALYSIS_SESSION_ELAPSED_TIME: 812
ANALYSIS_SOURCE: KM
FAILURE_ID_HASH_STRING: km:av_nt!removelistheadpte
FAILURE_ID_HASH: {45295d5a-ec7e-df5c-2592-394617d6bb64}
Followup: MachineOwner
---------
Copyright (c) Microsoft Corporation. All rights reserved.
Loading Dump File [C:\Windows\Minidump\100717-5265-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available
Symbol search path is: srv*
Executable search path is:
Windows 10 Kernel Version 14393 MP (8 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 14393.1715.amd64fre.rs1_release_inmarket.170906-1810
Machine Name:
Kernel base = 0xfffff802`65c0b000 PsLoadedModuleList = 0xfffff802`65f09040
Debug session time: Sat Oct 7 19:52:57.061 2017 (UTC + 3:00)
System Uptime: 0 days 2:16:18.713
Loading Kernel Symbols
.
Press ctrl-c (cdb, kd, ntsd) or ctrl-break (windbg) to abort symbol loads that take too long.
Run !sym noisy before .reload to track down problems loading symbols.
..............................................................
................................................................
..................................................
Loading User Symbols
Loading unloaded module list
..................................................
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
Use !analyze -v to get detailed debugging information.
BugCheck A, {ffffed99c6b12208, 2, 1, fffff80265c84a3c}
*** ERROR: Module load completed but symbols could not be loaded for NTFS.sys
Probably caused by : ntkrnlmp.exe ( nt!RemoveListHeadPte+a0 )
Followup: MachineOwner
---------
5: kd> !analyze -v
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
IRQL_NOT_LESS_OR_EQUAL (a)
An attempt was made to access a pageable (or completely invalid) address at an
interrupt request level (IRQL) that is too high. This is usually
caused by drivers using improper addresses.
If a kernel debugger is available get the stack backtrace.
Arguments:
Arg1: ffffed99c6b12208, memory referenced
Arg2: 0000000000000002, IRQL
Arg3: 0000000000000001, bitfield :
bit 0 : value 0 = read operation, 1 = write operation
bit 3 : value 0 = not an execute operation, 1 = execute operation (only on chips which support this level of status)
Arg4: fffff80265c84a3c, address which referenced memory
Debugging Details:
------------------
DUMP_CLASS: 1
DUMP_QUALIFIER: 400
BUILD_VERSION_STRING: 10.0.14393.1715 (rs1_release_inmarket.170906-1810)
SYSTEM_MANUFACTURER: System manufacturer
SYSTEM_PRODUCT_NAME: System Product Name
SYSTEM_SKU: SKU
SYSTEM_VERSION: System Version
BIOS_VENDOR: American Megatrends Inc.
BIOS_VERSION: 0809
BIOS_DATE: 07/07/2017
BASEBOARD_MANUFACTURER: ASUSTeK COMPUTER INC.
BASEBOARD_PRODUCT: STRIX B250I GAMING
BASEBOARD_VERSION: Rev X.0x
DUMP_TYPE: 2
DUMP_FILE_ATTRIBUTES: 0x8
Kernel Generated Triage Dump
BUGCHECK_P1: ffffed99c6b12208
BUGCHECK_P2: 2
BUGCHECK_P3: 1
BUGCHECK_P4: fffff80265c84a3c
WRITE_ADDRESS: fffff80265faa338: Unable to get MiVisibleState
Unable to get NonPagedPoolStart
Unable to get NonPagedPoolEnd
Unable to get PagedPoolStart
Unable to get PagedPoolEnd
ffffed99c6b12208
CURRENT_IRQL: 2
FAULTING_IP:
nt!RemoveListHeadPte+a0
fffff802`65c84a3c 4a8944d308 mov qword ptr [rbx+r10*8+8],rax
CPU_COUNT: 8
CPU_MHZ: e10
CPU_VENDOR: GenuineIntel
CPU_FAMILY: 6
CPU_MODEL: 9e
CPU_STEPPING: 9
CPU_MICROCODE: 6,9e,9,0 (F,M,S,R) SIG: 5E'00000000 (cache) 5E'00000000 (init)
CUSTOMER_CRASH_COUNT: 1
DEFAULT_BUCKET_ID: WIN8_DRIVER_FAULT
BUGCHECK_STR: AV
PROCESS_NAME: WerFault.exe
ANALYSIS_SESSION_HOST: PC
ANALYSIS_SESSION_TIME: 10-07-2017 20:54:48.0728
ANALYSIS_VERSION: 10.0.15063.468 amd64fre
TRAP_FRAME: ffff8001c9e9ac70 -- (.trap 0xffff8001c9e9ac70)
NOTE: The trap frame does not contain all registers.
Some register values may be zeroed or incorrect.
rax=780265f250000000 rbx=0000000000000000 rcx=b38d624400000000
rdx=ffffed0000000000 rsi=0000000000000000 rdi=0000000000000000
rip=fffff80265c84a3c rsp=ffff8001c9e9ae00 rbp=ffff8001c9e9af40
r8=ffffed55c6c69400 r9=000000000fffffff r10=0000000b38d62440
r11=fffff80265f25ea0 r12=0000000000000000 r13=0000000000000000
r14=0000000000000000 r15=0000000000000000
iopl=0 nv up ei pl nz na po nc
nt!RemoveListHeadPte+0xa0:
fffff802`65c84a3c 4a8944d308 mov qword ptr [rbx+r10*8+8],rax ds:00000059`c6b12208=????????????????
Resetting default scope
LAST_CONTROL_TRANSFER: from fffff80265d65a29 to fffff80265d5a8b0
STACK_TEXT:
ffff8001`c9e9ab28 fffff802`65d65a29 : 00000000`0000000a ffffed99`c6b12208 00000000`00000002 00000000`00000001 : nt!KeBugCheckEx
ffff8001`c9e9ab30 fffff802`65d64007 : ffffd985`88575f00 fffff802`65cdab82 ffff8001`00000002 00000000`00000000 : nt!KiBugCheckDispatch+0x69
ffff8001`c9e9ac70 fffff802`65c84a3c : 00000000`00000000 ffff8001`c9e9b0d0 ffff8001`c9e9b190 ffffd985`89bc06c0 : nt!KiPageFault+0x247
ffff8001`c9e9ae00 fffff802`65c82a4c : ffffed00`00000000 fffff802`65f28080 ffff8001`c9e9af40 00000000`00000040 : nt!RemoveListHeadPte+0xa0
ffff8001`c9e9ae40 fffff802`65c81bea : ffffd985`89bc06c0 00000000`00000040 ffffd985`863ef728 ffffd985`89bc06c0 : nt!MiObtainSystemCacheView+0x11c
ffff8001`c9e9b000 fffff802`65c85690 : ffffd985`89bc0640 ffffc287`cbbdf540 ffffffd8`00000000 ffffd985`89bc0678 : nt!MmMapViewInSystemCache+0xda
ffff8001`c9e9b160 fffff802`65c57810 : ffffd985`8722bcb8 ffffd985`8722bcb8 ffffd985`00000000 00000000`00000000 : nt!CcGetVacbMiss+0xb8
ffff8001`c9e9b1e0 fffff802`65c38200 : ffffd985`00000000 00000000`00000000 ffff8001`c9e9b2e8 ffff8001`c9e9b2dc : nt!CcGetVirtualAddress+0x330
ffff8001`c9e9b290 fffff802`65c35187 : ffffd985`8722bc50 000000a5`380c9728 ffff8001`c9e9b400 ffffd985`00000002 : nt!CcMapAndCopyInToCache+0x4a0
ffff8001`c9e9b3a0 fffff804`1e5fa427 : ffffd985`8733f658 ffffc287`d1a9e150 ffffd985`8c3368d0 ffffc287`d1a9e150 : nt!CcCopyWriteEx+0xe7
ffff8001`c9e9b420 fffff804`1e5f6388 : ffffd985`8733f658 00000000`00000000 00000000`00000000 ffffd985`8733f658 : NTFS+0x1a427
ffff8001`c9e9b6a0 fffff804`1dc05206 : ffffd985`8c46a400 ffffd985`8725db80 ffffd985`8725db80 ffffd985`8725df68 : NTFS+0x16388
ffff8001`c9e9b760 fffff804`1dc03146 : 00000000`00000000 00000000`00000000 00000000`ffff8001 ffffd985`8b969080 : FLTMGR!FltpLegacyProcessingAfterPreCallbacksCompleted+0x1a6
ffff8001`c9e9b7f0 fffff802`66020dd0 : ffffd985`8c3368d0 ffffd985`8725db80 00000000`00000002 ffffd985`8c3368d0 : FLTMGR!FltpDispatch+0xb6
ffff8001`c9e9b850 fffff802`660217dd : 00000000`00000001 00000000`00000004 ffffd985`8c336920 ffff8001`c9e9bb00 : nt!IopSynchronousServiceTail+0x1a0
ffff8001`c9e9b910 fffff802`65d65593 : 00000000`00000240 00000000`00000000 00000000`00000000 00000000`00000000 : nt!NtWriteFile+0x66d
ffff8001`c9e9ba10 00007ffc`710261a4 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSystemServiceCopyEnd+0x13
000000a5`380c9608 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x00007ffc`710261a4
STACK_COMMAND: kb
THREAD_SHA1_HASH_MOD_FUNC: cd06802cf3339439210a3ab6cb920e5d61c97c89
THREAD_SHA1_HASH_MOD_FUNC_OFFSET: dc905217f32d8d3a729f5b3e041aa96a75c52728
THREAD_SHA1_HASH_MOD: 3ac2c0f5433a12278e529a8539a883f6a8a3028d
FOLLOWUP_IP:
nt!RemoveListHeadPte+a0
fffff802`65c84a3c 4a8944d308 mov qword ptr [rbx+r10*8+8],rax
FAULT_INSTR_CODE: d344894a
SYMBOL_STACK_INDEX: 3
SYMBOL_NAME: nt!RemoveListHeadPte+a0
FOLLOWUP_NAME: MachineOwner
MODULE_NAME: nt
IMAGE_NAME: ntkrnlmp.exe
DEBUG_FLR_IMAGE_TIMESTAMP: 59b0d121
IMAGE_VERSION: 10.0.14393.1715
BUCKET_ID_FUNC_OFFSET: a0
FAILURE_BUCKET_ID: AV_nt!RemoveListHeadPte
BUCKET_ID: AV_nt!RemoveListHeadPte
PRIMARY_PROBLEM_CLASS: AV_nt!RemoveListHeadPte
TARGET_TIME: 2017-10-07T16:52:57.000Z
OSBUILD: 14393
OSSERVICEPACK: 1715
SERVICEPACK_NUMBER: 0
OS_REVISION: 0
SUITE_MASK: 272
PRODUCT_TYPE: 1
OSPLATFORM_TYPE: x64
OSNAME: Windows 10
OSEDITION: Windows 10 WinNt TerminalServer SingleUserTS
OS_LOCALE:
USER_LCID: 0
OSBUILD_TIMESTAMP: 2017-09-07 07:54:57
BUILDDATESTAMP_STR: 170906-1810
BUILDLAB_STR: rs1_release_inmarket
BUILDOSVER_STR: 10.0.14393.1715
ANALYSIS_SESSION_ELAPSED_TIME: 812
ANALYSIS_SOURCE: KM
FAILURE_ID_HASH_STRING: km:av_nt!removelistheadpte
FAILURE_ID_HASH: {45295d5a-ec7e-df5c-2592-394617d6bb64}
Followup: MachineOwner
---------
uploaded a bunch of minidumps starting from 09/20, when installed windows 10:
https://drive.google.com/drive/folders/0B07lGQ9a3UWVNGtaWUFzMVRHbTg?usp=sharing