Question Random HYPERVISOR_ERROR bluescreens on a regular basis.

[ConorDuey2000]

Hey. As of recently, at least once every two days, my computer will randomly get a HYPERVISOR_ERROR bluescreen. This is really annoying me and it's happened at complete random. Recently, I was uploading a large file somewhere and my computer had a random HYPER_VISOR_ERROR bluescreen while that file was uploading and I had to reupload that file all over again. I've even thought of buying a new computer because this bluescreen problem has gotten so bad. I've tried debugging the minidumps and all that it told me was that the process name was System so I can't figure out what's causing those bluescreens. I've tried uninstalling drivers, installing new drivers, updating drivers until they're up to date, and uninstalling the Hyper-V Windows feature. So far, nothing has solved my bluescreen problem. I'd disable virtualization in my computer's BIOS, but I can't because I regularly run virtual machines on VMWare and I don't wanna restart my computer and temporarily change my BIOS settings every time I wanna run a virtual machine. Right now, I have all of the VMWare services turned off and I only temporarily turn them on when I wanna run a virtual machine. Here are all of the minidumps on my computer that didn't get deleted. All of them are HYPERVISOR_ERROR bluescreens except for one which is an IRQL_NOT_LESS_OR_EQUAL bluescreen and I don't know what caused that bluescreen. I really hope that you can fix my bluescreen problem.

 

[Colif]

Right click start
choose Windows Terminal (admin)
if it doesn't open as powershell, select the drop down arrow in title row and choose it from list

copy/paste this command into window:

Repair-WindowsImage -Online -RestoreHealth

and press enter

Then type SFC /scannow

and press enter

Restart PC if SFC fixes any files as some fixes require a restart to be implemented

First command repairs the files SFC uses to clean files, and SFC fixes system files

SFC = System File Checker. First command runs DISM - https://docs.microsoft.com/en-us/windows-hardware/manufacture/desktop/what-is-dism?view=windows-11


what are specs of the PC?
Do you have latest BIOS?

 

[ConorDuey2000]

Right click start
choose Windows Terminal (admin)
if it doesn't open as powershell, select the drop down arrow in title row and choose it from list

copy/paste this command into window:

Repair-WindowsImage -Online -RestoreHealth

and press enter

Then type SFC /scannow

and press enter

Restart PC if SFC fixes any files as some fixes require a restart to be implemented

First command repairs the files SFC uses to clean files, and SFC fixes system files

SFC = System File Checker. First command runs DISM - https://docs.microsoft.com/en-us/windows-hardware/manufacture/desktop/what-is-dism?view=windows-11


what are specs of the PC?
Do you have latest BIOS?

I've ran the sfc /scannow and it told me that it restored the file "AddInProccess.exe" which I deleted because it was hogging up to much of my GPU. From now on, whenever I'm doing something that requires a lot of my GPU, I'll delete "AddInProccess.exe", do whatever I have to do, and when I'm done, I'll run the sfc /scannow command to restore that deleted file.

 

[Colif]

The addinprocess.exe file is part of Microsoft NET Framework.
There are a few reasons that could be causing this, so let's do a scan like this:
-Verification with Windows Defender:
Uninstall any third-party anti-malware, many antiviruses have their own removal tool. Visit the Installed Software website for more information. Your system will not be unprotected as Windows has its own security system that automatically enables as soon as you restart your computer.
leave just Windows Defender, then Windows+i, update & security, Windows security, open Windows security, virus and threat protection, scan options, tick and run a full scan, then tick and run an offline scan.

-If necessary, download the Microsoft NET Framework:
https://dotnet.microsoft.com/download/dotnet-fr...

https://answers.microsoft.com/en-us...ocessexe/89c139f6-28ad-45bb-a41c-d07343548856

 

[ConorDuey2000]

https://answers.microsoft.com/en-us...ocessexe/89c139f6-28ad-45bb-a41c-d07343548856

I don't have any third party antivirus software installed on my computer.

 

[Colif]

okay, so just run a full scan of defender or download .net again

can try running the repair tool - https://docs.microsoft.com/en-us/dotnet/framework/install/repair

I have asked a friend to look at dumps but he is busy fixing his van. SO might not be right away.

its possible fixing .net will fix the BSOD. Its not a BSOD I see often

 

[ConorDuey2000]

okay, so just run a full scan of defender or download .net again

can try running the repair tool - https://docs.microsoft.com/en-us/dotnet/framework/install/repair

I have asked a friend to look at dumps but he is busy fixing his van. SO might not be right away.

its possible fixing .net will fix the BSOD. Its not a BSOD I see often

I ran the repair tool, but "AddInProcess.exe" is still maxed out at 100% at the GPU tab.

 

[Colif]

its possible its malware pretending to be that application

This could be RedLine Stealer Malware, as it is known to disguise itself as AddInProcess.exe, which is meant to be part of the Microsoft NET Framework. Try downloading a reliable anti-virus software, like Kaspersky. If it does detect it as malware, it will run its advanced disinfection, and it will be removed from your system. If it is using 100% of your GPU, then it's probably a crypto miner. Hopefully this helps.

 

[ConorDuey2000]

its possible its malware pretending to be that application

The executable is located in "C:\Windows\Microsoft.NET\Framework64\v4.0.30319" and I'm not sure if that's a legit directory or not. I'll download Kaspersky and run a virus scan. If it detects that RedLine Stealer Malware, I'll tell you that it detected it.

 

[Colif]

The directory is a valid one but well, i don't know if malware can't insert itself in there.
the folder matches up with NET 4.5.1 which is current version.

 

[ConorDuey2000]

The directory is a valid one but well, i don't know if malware can't insert itself in there.
the folder matches up with NET 4.5.1 which is current version.

Alright. I can't run Kaspersky on my computer. Whenever I run "startup.exe" both as administrator and not as administrator, it just stays open in the task manager and no windows pop up, so I decided to start a scan and it found the Bladabindi backdoor, an agent trojan, some MSIL Crypt trojans, and an AI malware. However, no "RedLine Stealer Malware" malware popped up.

 

[Colif]

well, it doesn't necessarily have to be that name. It could have been one of the things the scan found.

If you can't install AV, that is a clue. It means something doesn't want to be removed.

Try bitdefender free - https://www.bitdefender.com.au/solutions/free.html
or Hitman Pro Trial - https://www.hitmanpro.com/en-us

 

[ConorDuey2000]

well, it doesn't necessarily have to be that name. It could have been one of the things the scan found.

If you can't install AV, that is a clue. It means something doesn't want to be removed.

Try bitdefender free - https://www.bitdefender.com.au/solutions/free.html
or Hitman Pro Trial - https://www.hitmanpro.com/en-us

Alright. After Malwarebytes finished its scan, I deleted all of the viruses that it detected and after I right clicked on "AddInProcess.exe" and clicked on "End task" the task ended and right now, I don't see "AddInProcess.exe" opening up in the task manager, again. I think that running that virus scan in Malwarebytes and deleting those viruses solved that "AddInProcess.exe" problem. Now, I have to solve that HYPERVISOR_ERROR bluescreen problem that I have.

 

[Colif]

have you had the BSOD since fixing the .net thing?

it could have all been the infections.

 

[ConorDuey2000]

have you had the BSOD since fixing the .net thing?

No. I just ran the fixer, today.

 

[Colif]

so wait and see if it happens again. BSOD can be caused by viruses.

 

[ConorDuey2000]

so wait and see if it happens again. BSOD can be caused by viruses.

Okay.

 

[ConorDuey2000]

so wait and see if it happens again. BSOD can be caused by viruses.

It didn't do anything to stop the bluescreens. I just got another HYPERVISOR_ERROR bluescreen and I don't know what caused it. It just said "Process Name: System" in WinDbg. Here is the minidump for that bluescreen.

Anyway, I really need help to fix this. I'm getting random and spontaneous HYPERVISOR_ERROR bluescreens at least once a week. I've even thought of reformatting my computer and even buying a new computer. However, right now, I have stopped every VMWare service and set all of them to "Manual" at startup. If I still continue to get HYPERVISOR_ERROR bluescreens after doing that, then that means I really need some help.

 

[gardenman]

I ran the dump file through the debugger and got the following information: https://jsfiddle.net/kro2sd50/show This link is for anyone wanting to help. You do not have to view it. It is safe to "run the fiddle" as the page asks.

File information:	072322-9625-01.dmp (Jul 23 2022 - 23:44:28)
Bugcheck:	HYPERVISOR_ERROR (20001)
Probably caused by:	ntkrnlmp.exe (Process running at time of crash: System)
Uptime:	4 Day(s), 6 Hour(s), 01 Min(s), and 20 Sec(s)

This information can be used by others to help you. Someone else will post with more information. Please wait for additional answers. Good luck.

 

[Colif]

There is a new .net cumulative update, it might help?

when i say I don't see this often, I should have said... I don't think I seen this before.

generally I start on drivers.

um, lets see. this is old

Jun 06 2017

SCDEmu.SYS

PowerISO Virtual driver (PowerISO Computing) https://www.poweriso.com/

how new is your VM software? If anything likely involved, it would be it.
newest installed VMWare driver is from February, oldest parts are from 2019

What motherboard do you have? Is this a laptop? if laptop, what make/model instead of Motherboard model?? (this question based on presence of a card reader)
I can tell its from Asus with an AMD CPU.

The report from the BSOD isn't showing any details about the PC, this commonly happens if the BIOS is old. I already asked what BIOS you have... if you not sure, you can look in System Information app, the BIOS has its own row, it should show next to BIOS Version/Date, the row under CPU description

Updating bios could fix the problem.

less likely causes

May 05 2013

ScpVBus.sys

Scarlet.Crush Productions Scp Dual Shock 3 Virtual Bus driver http://forums.pcsx2.net/

Scarlet Crush, newer version from 2015. Still not much better. Used as driver for Playstation and some Xbox controllers.
Audio drivers old but can be a pain to install right

Mar 26 2019

RTKVHD64.sys

Realtek Audio System driver https://www.realtek.com/en/

Possibly newer version of Icue.
newer version of Ethernet drivers

 

[ConorDuey2000]

There is a new .net cumulative update, it might help?

when i say I don't see this often, I should have said... I don't think I seen this before.

generally I start on drivers.

um, lets see. this is old

Jun 06 2017

SCDEmu.SYS

PowerISO Virtual driver (PowerISO Computing) https://www.poweriso.com/

how new is your VM software? If anything likely involved, it would be it.
newest installed VMWare driver is from February, oldest parts are from 2019

What motherboard do you have? Is this a laptop? if laptop, what make/model instead of Motherboard model?? (this question based on presence of a card reader)
I can tell its from Asus with an AMD CPU.

The report from the BSOD isn't showing any details about the PC, this commonly happens if the BIOS is old. I already asked what BIOS you have... if you not sure, you can look in System Information app, the BIOS has its own row, it should show next to BIOS Version/Date, the row under CPU description

Updating bios could fix the problem.

less likely causes

May 05 2013

ScpVBus.sys

Scarlet.Crush Productions Scp Dual Shock 3 Virtual Bus driver http://forums.pcsx2.net/

Scarlet Crush, newer version from 2015. Still not much better. Used as driver for Playstation and some Xbox controllers.
Audio drivers old but can be a pain to install right

Mar 26 2019

RTKVHD64.sys

Realtek Audio System driver https://www.realtek.com/en/

Possibly newer version of Icue.
newer version of Ethernet drivers

My version of VMWare is VMWare Workstation 16 Pro which should be the newest version of VMWare. However, I do have PowerISO installed and I have the PowerISO Virtual Drive option disabled. I also have that SCP Dualshock 3 driver, but it's also disabled.

I have a desktop computer and my motherboard is an ASUS TUF GAMING X570-PLUS (WI-FI) motherboard. I've made sure to update its BIOS to the latest version. Right now, I believe that disabling those VMWare services have solved my bluescreen problem. If I still continue to get bluescreens after that, I'll tell you that.

 

[Colif]

It could be a VMWare bug
https://communities.vmware.com/t5/V...dows-11-host-Windows-guest-in-VM/td-p/2870506

VMWare Workstation 16 (almost) working

Has anybody tried to run VMWorkstation 16 on Windows 11 yet? I installed Windows 11 last Friday and so far Workstation 16 seems to work almost flawlessly. The only thing that does not work is suspending the VM which results in an error message and the immediate shutdown of the guest os. Other...

www.elevenforum.com

VMWare 16.2.1 Workstation Pro

Does this play nice with Windows 11? On my main machine I'm running 22000.376 but I want to run Dev flights virtually. Can't seem to get it past "boot from CD/DVD" then it just times out. Everything is pointing toward the Dev ISO. Edited to say I'm running an AMD CPU if that makes any difference...

www.elevenforum.com

 

[Deleted member 14196]

its possible its malware pretending to be that application

Yes. This is the answer. That process is masquerading as a valid process. We have VMware workstation 16 and I’ve never seen any of these problems

 

[Colif]

Perhaps you need to do a clean install of win 11 to make sure all the files that were infecting PC before are gone now.

 

[ConorDuey2000]

It could be a VMWare bug
https://communities.vmware.com/t5/V...dows-11-host-Windows-guest-in-VM/td-p/2870506

VMWare Workstation 16 (almost) working

Has anybody tried to run VMWorkstation 16 on Windows 11 yet? I installed Windows 11 last Friday and so far Workstation 16 seems to work almost flawlessly. The only thing that does not work is suspending the VM which results in an error message and the immediate shutdown of the guest os. Other...

www.elevenforum.com

VMWare 16.2.1 Workstation Pro

Does this play nice with Windows 11? On my main machine I'm running 22000.376 but I want to run Dev flights virtually. Can't seem to get it past "boot from CD/DVD" then it just times out. Everything is pointing toward the Dev ISO. Edited to say I'm running an AMD CPU if that makes any difference...

www.elevenforum.com

I'm not sure if it's a VMWare bug or not, but none of those forum posts ever mention any bluescreens.