Question Random HYPERVISOR_ERROR bluescreens on a regular basis.

ConorDuey2000

Reputable
Dec 21, 2021
138
3
4,585
Hey. As of recently, at least once every two days, my computer will randomly get a HYPERVISOR_ERROR bluescreen. This is really annoying me and it's happened at complete random. Recently, I was uploading a large file somewhere and my computer had a random HYPER_VISOR_ERROR bluescreen while that file was uploading and I had to reupload that file all over again. I've even thought of buying a new computer because this bluescreen problem has gotten so bad. I've tried debugging the minidumps and all that it told me was that the process name was System so I can't figure out what's causing those bluescreens. I've tried uninstalling drivers, installing new drivers, updating drivers until they're up to date, and uninstalling the Hyper-V Windows feature. So far, nothing has solved my bluescreen problem. I'd disable virtualization in my computer's BIOS, but I can't because I regularly run virtual machines on VMWare and I don't wanna restart my computer and temporarily change my BIOS settings every time I wanna run a virtual machine. Right now, I have all of the VMWare services turned off and I only temporarily turn them on when I wanna run a virtual machine. Here are all of the minidumps on my computer that didn't get deleted. All of them are HYPERVISOR_ERROR bluescreens except for one which is an IRQL_NOT_LESS_OR_EQUAL bluescreen and I don't know what caused that bluescreen. I really hope that you can fix my bluescreen problem.
 
Right click start
choose Windows Terminal (admin)
if it doesn't open as powershell, select the drop down arrow in title row and choose it from list

copy/paste this command into window:

Repair-WindowsImage -Online -RestoreHealth

and press enter

Then type SFC /scannow

and press enter


Restart PC if SFC fixes any files as some fixes require a restart to be implemented

First command repairs the files SFC uses to clean files, and SFC fixes system files

SFC = System File Checker. First command runs DISM - https://docs.microsoft.com/en-us/windows-hardware/manufacture/desktop/what-is-dism?view=windows-11


what are specs of the PC?
Do you have latest BIOS?
 
Right click start
choose Windows Terminal (admin)
if it doesn't open as powershell, select the drop down arrow in title row and choose it from list

copy/paste this command into window:

Repair-WindowsImage -Online -RestoreHealth

and press enter

Then type SFC /scannow

and press enter


Restart PC if SFC fixes any files as some fixes require a restart to be implemented

First command repairs the files SFC uses to clean files, and SFC fixes system files

SFC = System File Checker. First command runs DISM - https://docs.microsoft.com/en-us/windows-hardware/manufacture/desktop/what-is-dism?view=windows-11


what are specs of the PC?
Do you have latest BIOS?
I've ran the sfc /scannow and it told me that it restored the file "AddInProccess.exe" which I deleted because it was hogging up to much of my GPU. From now on, whenever I'm doing something that requires a lot of my GPU, I'll delete "AddInProccess.exe", do whatever I have to do, and when I'm done, I'll run the sfc /scannow command to restore that deleted file.
 
The addinprocess.exe file is part of Microsoft NET Framework.
There are a few reasons that could be causing this, so let's do a scan like this:
-Verification with Windows Defender:
Uninstall any third-party anti-malware, many antiviruses have their own removal tool. Visit the Installed Software website for more information. Your system will not be unprotected as Windows has its own security system that automatically enables as soon as you restart your computer.
leave just Windows Defender, then Windows+i, update & security, Windows security, open Windows security, virus and threat protection, scan options, tick and run a full scan, then tick and run an offline scan.

-If necessary, download the Microsoft NET Framework:
https://dotnet.microsoft.com/download/dotnet-fr...
https://answers.microsoft.com/en-us...ocessexe/89c139f6-28ad-45bb-a41c-d07343548856
 
its possible its malware pretending to be that application
This could be RedLine Stealer Malware, as it is known to disguise itself as AddInProcess.exe, which is meant to be part of the Microsoft NET Framework. Try downloading a reliable anti-virus software, like Kaspersky. If it does detect it as malware, it will run its advanced disinfection, and it will be removed from your system. If it is using 100% of your GPU, then it's probably a crypto miner. Hopefully this helps.
 
its possible its malware pretending to be that application
The executable is located in "C:\Windows\Microsoft.NET\Framework64\v4.0.30319" and I'm not sure if that's a legit directory or not. I'll download Kaspersky and run a virus scan. If it detects that RedLine Stealer Malware, I'll tell you that it detected it.
 
The directory is a valid one but well, i don't know if malware can't insert itself in there.
the folder matches up with NET 4.5.1 which is current version.
Alright. I can't run Kaspersky on my computer. Whenever I run "startup.exe" both as administrator and not as administrator, it just stays open in the task manager and no windows pop up, so I decided to start a scan and it found the Bladabindi backdoor, an agent trojan, some MSIL Crypt trojans, and an AI malware. However, no "RedLine Stealer Malware" malware popped up.
 
well, it doesn't necessarily have to be that name. It could have been one of the things the scan found.

If you can't install AV, that is a clue. It means something doesn't want to be removed.

Try bitdefender free - https://www.bitdefender.com.au/solutions/free.html
or Hitman Pro Trial - https://www.hitmanpro.com/en-us
Alright. After Malwarebytes finished its scan, I deleted all of the viruses that it detected and after I right clicked on "AddInProcess.exe" and clicked on "End task" the task ended and right now, I don't see "AddInProcess.exe" opening up in the task manager, again. I think that running that virus scan in Malwarebytes and deleting those viruses solved that "AddInProcess.exe" problem. Now, I have to solve that HYPERVISOR_ERROR bluescreen problem that I have.
 
so wait and see if it happens again. BSOD can be caused by viruses.
It didn't do anything to stop the bluescreens. I just got another HYPERVISOR_ERROR bluescreen and I don't know what caused it. It just said "Process Name: System" in WinDbg. Here is the minidump for that bluescreen.

Anyway, I really need help to fix this. I'm getting random and spontaneous HYPERVISOR_ERROR bluescreens at least once a week. I've even thought of reformatting my computer and even buying a new computer. However, right now, I have stopped every VMWare service and set all of them to "Manual" at startup. If I still continue to get HYPERVISOR_ERROR bluescreens after doing that, then that means I really need some help.
 
I ran the dump file through the debugger and got the following information: https://jsfiddle.net/kro2sd50/show This link is for anyone wanting to help. You do not have to view it. It is safe to "run the fiddle" as the page asks.

File information:072322-9625-01.dmp (Jul 23 2022 - 23:44:28)
Bugcheck:HYPERVISOR_ERROR (20001)
Probably caused by:ntkrnlmp.exe (Process running at time of crash: System)
Uptime:4 Day(s), 6 Hour(s), 01 Min(s), and 20 Sec(s)

This information can be used by others to help you. Someone else will post with more information. Please wait for additional answers. Good luck.
 
There is a new .net cumulative update, it might help?

when i say I don't see this often, I should have said... I don't think I seen this before.

generally I start on drivers.

um, lets see. this is old
Jun 06 2017SCDEmu.SYSPowerISO Virtual driver (PowerISO Computing) https://www.poweriso.com/
how new is your VM software? If anything likely involved, it would be it.
newest installed VMWare driver is from February, oldest parts are from 2019

What motherboard do you have? Is this a laptop? if laptop, what make/model instead of Motherboard model?? (this question based on presence of a card reader)
I can tell its from Asus with an AMD CPU.

The report from the BSOD isn't showing any details about the PC, this commonly happens if the BIOS is old. I already asked what BIOS you have... if you not sure, you can look in System Information app, the BIOS has its own row, it should show next to BIOS Version/Date, the row under CPU description

Updating bios could fix the problem.

less likely causes
May 05 2013ScpVBus.sysScarlet.Crush Productions Scp Dual Shock 3 Virtual Bus driver http://forums.pcsx2.net/
Scarlet Crush, newer version from 2015. Still not much better. Used as driver for Playstation and some Xbox controllers.
Audio drivers old but can be a pain to install right
Mar 26 2019RTKVHD64.sysRealtek Audio System driver https://www.realtek.com/en/
Possibly newer version of Icue.
newer version of Ethernet drivers
 
There is a new .net cumulative update, it might help?

when i say I don't see this often, I should have said... I don't think I seen this before.

generally I start on drivers.

um, lets see. this is old
Jun 06 2017SCDEmu.SYSPowerISO Virtual driver (PowerISO Computing) https://www.poweriso.com/
how new is your VM software? If anything likely involved, it would be it.
newest installed VMWare driver is from February, oldest parts are from 2019

What motherboard do you have? Is this a laptop? if laptop, what make/model instead of Motherboard model?? (this question based on presence of a card reader)
I can tell its from Asus with an AMD CPU.

The report from the BSOD isn't showing any details about the PC, this commonly happens if the BIOS is old. I already asked what BIOS you have... if you not sure, you can look in System Information app, the BIOS has its own row, it should show next to BIOS Version/Date, the row under CPU description

Updating bios could fix the problem.

less likely causes
May 05 2013ScpVBus.sysScarlet.Crush Productions Scp Dual Shock 3 Virtual Bus driver http://forums.pcsx2.net/
Scarlet Crush, newer version from 2015. Still not much better. Used as driver for Playstation and some Xbox controllers.
Audio drivers old but can be a pain to install right
Mar 26 2019RTKVHD64.sysRealtek Audio System driver https://www.realtek.com/en/
Possibly newer version of Icue.
newer version of Ethernet drivers
My version of VMWare is VMWare Workstation 16 Pro which should be the newest version of VMWare. However, I do have PowerISO installed and I have the PowerISO Virtual Drive option disabled. I also have that SCP Dualshock 3 driver, but it's also disabled.

I have a desktop computer and my motherboard is an ASUS TUF GAMING X570-PLUS (WI-FI) motherboard. I've made sure to update its BIOS to the latest version. Right now, I believe that disabling those VMWare services have solved my bluescreen problem. If I still continue to get bluescreens after that, I'll tell you that.
 
It could be a VMWare bug
https://communities.vmware.com/t5/V...dows-11-host-Windows-guest-in-VM/td-p/2870506
 
It could be a VMWare bug
https://communities.vmware.com/t5/V...dows-11-host-Windows-guest-in-VM/td-p/2870506
I'm not sure if it's a VMWare bug or not, but none of those forum posts ever mention any bluescreens.