Rash of BSOD's, Bad Driver?

[Synkro]

I've been fighting BSOD's for months now, but recently I had a burst of them that seem to point to a bad driver (using WhoCrashed and WinDbg). Here are my last four crash dumps:

https://www.dropbox.com/sh/h24jpv47p9bzgb5/AACjhxRo6mwRG7LKf3vfKmtma?dl=0

Any advice? Thanks.

 

[scout_03]

post the whocrashed result directly here .

 

[Synkro]

post the whocrashed result directly here .

WhoCrashed report added to Dropbox link.

 

[scout_03]

could you post the printscreen of the who crashed the one you post give all page details like arial font and others so hard to read details but it is related to a obsolete driver even a buged one .

 

[Synkro]

could you post the printscreen of the who crashed the one you post give all page details like arial font and others so hard to read details but it is related to a obsolete driver even a buged one .

Last four dumps:

http://

 

[scout_03]

for the 3b check graphic driver also check your windows system files you have corrupted registery files and some in the os i would do a os files repair .

 

[Synkro]

for the 3b check graphic driver also check your windows system files you have corrupted registery files and some in the os i would do a os files repair .

Ran sfc/scannow, "Windows Resource Protection did not find any integrity violations."

GeForce driver is up to date.

 

[Synkro]

I ran driver verifier and induced several BSOD's. Dump files added to Dropbox link in original post.

 

[Colif]

I will ask someone to decypher dump files and we will get to bottom of it...

please don't bump

 

[gardenman]

Hi, I ran the dump files through the debugger and got the following information: https://pastebin.com/zyPC9hwG

Spoiler

File: 072917-7593-01.dmp (Sat Jul 29 11:40:08.409 2017)
BugCheck: [DRIVER_OVERRAN_STACK_BUFFER (F7)] {3c80206f46a0, 8ba9e8902088, ffff7456176fdf77, 0}
Warning: Unable to verify timestamp for: win32k.sys
Probably caused by: memory_corruption (Process: System)

File: 072917-7625-01.dmp (Sat Jul 29 12:24:38.533 2017)
BugCheck: [SYSTEM_SERVICE_EXCEPTION (3B)] {c0000005, fffff8035529c7c0, ffffd000051172c0, 0}
Probably caused by: memory_corruption (Process: MsMpEng.exe)

File: 072917-7640-03.dmp (Sat Jul 29 16:55:10.359 2017)
BugCheck: [SYSTEM_THREAD_EXCEPTION_NOT_HANDLED_M (1000007E)] {ffffffffc0000005, fffff8004a5edc25, ffffc100a1945dd8, ffffc100a1945620}
Warning: Unable to verify timestamp for: win32k.sys
Probably caused by: memory_corruption (Process: System)

File: 072917-8421-01.dmp (Sat Jul 29 16:48:56.084 2017)
BugCheck: [SYSTEM_THREAD_EXCEPTION_NOT_HANDLED_M (1000007E)] {ffffffffc0000005, fffff800ad9f5c25, ffffe4805e3b3dd8, ffffe4805e3b3620}
Warning: Unable to verify timestamp for: win32k.sys
Probably caused by: memory_corruption (Process: System)

File: 072917-8546-01.dmp (Sat Jul 29 17:01:48.829 2017)
BugCheck: [SYSTEM_THREAD_EXCEPTION_NOT_HANDLED_M (1000007E)] {ffffffffc0000005, fffff80065d76c25, ffffb7013f1aedd8, ffffb7013f1ae620}
Warning: Unable to verify timestamp for: win32k.sys
Probably caused by: memory_corruption (Process: System)

File: 072917-8875-01.dmp (Sat Jul 29 16:56:55.493 2017)
BugCheck: [SYSTEM_THREAD_EXCEPTION_NOT_HANDLED_M (1000007E)] {ffffffffc0000005, fffff8030ab6cc25, ffffcc8018680dd8, ffffcc8018680620}
Warning: Unable to verify timestamp for: win32k.sys
Probably caused by: memory_corruption (Process: System)

File: 072617-7859-01.dmp (Wed Jul 26 15:15:34.190 2017)
BugCheck: [DPC_WATCHDOG_VIOLATION (133)] {1, 1e00, fffff80051df9348, 0}
Warning: Unable to verify timestamp for: win32k.sys
Probably caused by: memory_corruption (Process: svchost.exe)

File: 072917-7578-01.dmp (Sat Jul 29 16:52:37.954 2017)
BugCheck: [SYSTEM_THREAD_EXCEPTION_NOT_HANDLED_M (1000007E)] {ffffffffc0000005, fffff8027eb60c25, ffffad017a0c5dd8, ffffad017a0c5620}
Warning: Unable to verify timestamp for: win32k.sys
Probably caused by: memory_corruption (Process: System)

File: 072917-7250-01.dmp
Invalid file format

I can't help you with this. Wait for someone else to reply. Good luck.

 

[Colif]

Win32k.sys is part of windows so its what is crashing but may not be cause

Old drivers that might be cause

nuviocir_x64.sys (dated Thu Jul 11 2013) - Nuvoton SIO CIR Device Driver (?). Seems to be for an infrared scanner?
wdcsam64.sys (dated Fri Oct 9 2015) - Western Digital SCSI Arcitecture Model (SAM) WDM driver
MpKsl0779f59e.sys (dated Tue May 19 2015) - May be dynamic update driver for Microsoft Security Essentials MpKsl followed by 8 characters (either numbers or lowercase letters)
tap0901.sys (dated Wed Nov 5 2014) - The genuine tap0901.sys file is a software component of OpenVPN by OpenVPN Technologies
update Logitech Gaming Software
cmudaxp.sys (Dated Tue Jun 2 2015) - C-Media Audio Interface Driver (WDM) by C-Media, used by Asus Xonar & HTO CLARO Audio Interface Driver
ISCTD64.sys (dated Tue Nov 27 2012) - Intel Smart Connect Technology Driver (Remove or replace)
TeeDriverW8x64.sys (dated Tue Jul 7 2015) - Intel management Engine Interface (might be a newer version for win 10)

MsMpEng.exe = Windows Defender, i didn't see any lan drivers mentioned in the report. Try running an anti virus scan (standard advice for bsod and defender)

 

[Synkro]

Win32k.sys is part of windows so its what is crashing but may not be cause

Old drivers that might be cause

nuviocir_x64.sys (dated Thu Jul 11 2013) - Nuvoton SIO CIR Device Driver (?). Seems to be for an infrared scanner?
wdcsam64.sys (dated Fri Oct 9 2015) - Western Digital SCSI Arcitecture Model (SAM) WDM driver
MpKsl0779f59e.sys (dated Tue May 19 2015) - May be dynamic update driver for Microsoft Security Essentials MpKsl followed by 8 characters (either numbers or lowercase letters)
tap0901.sys (dated Wed Nov 5 2014) - The genuine tap0901.sys file is a software component of OpenVPN by OpenVPN Technologies
update Logitech Gaming Software
cmudaxp.sys (Dated Tue Jun 2 2015) - C-Media Audio Interface Driver (WDM) by C-Media, used by Asus Xonar & HTO CLARO Audio Interface Driver
ISCTD64.sys (dated Tue Nov 27 2012) - Intel Smart Connect Technology Driver (Remove or replace)
TeeDriverW8x64.sys (dated Tue Jul 7 2015) - Intel management Engine Interface (might be a newer version for win 10)

MsMpEng.exe = Windows Defender, i didn't see any lan drivers mentioned in the report. Try running an anti virus scan (standard advice for bsod and defender)

- nuviocir_x64.sys - Removed
- wdcsam64.sys - Updated WD SES drivers and firmware
- mpKsl0779f59e.sys - ??
- tap0901.sys - Reinstalled TAP driver (I need this for my VPN app)
- Logitech Gaming Software updated
- cmudaxp.sys - Driver is up to date, but I've seen crash dumps before that point to this. Should I reinstall the audio card?
- ISCTD64.sys - Removed
- TeeDriverW8x64.sys - Intel Management Engine Components reinstalled
- MsMpEng.exe - Ran Defender, no issues found

 

[Colif]

wait and see if you get any more bsod before removing anything else. Do you mean your crash dumps or other people's with regards to cmedia?

I think most bsod are caused by old drivers so its why i listed all the old ones. None were actually reported as causing errors directly but often a old driver will cause another part of windows to crash, and all we see is the part that crashed.

I was surprised to see scsi drivers. I would have run a scan with an AV other than defender to see if there was anything trying to attack defender. Something like Bitdefender free

 

[Synkro]

wait and see if you get any more bsod before removing anything else. Do you mean your crash dumps or other people's with regards to cmedia?

I think most bsod are caused by old drivers so its why i listed all the old ones. None were actually reported as causing errors directly but often a old driver will cause another part of windows to crash, and all we see is the part that crashed.

I was surprised to see scsi drivers. I would have run a scan with an AV other than defender to see if there was anything trying to attack defender. Something like Bitdefender free

My own crash dumps in the past pointed directly to cmudaxp.sys. I have also read of people having issues with this driver.

I will also try a scan with a secondary antivirus.

 

[Colif]

Which soundcard do you have? I hadn't noticed you had realtek HD audio on motherboard

 

[Synkro]

Which soundcard do you have? I hadn't noticed you had realtek HD audio on motherboard

Asus Xonar DG

 

[Colif]

I found these from last year, not official drivers but this guy seems to do all Asus Xonar cards - http://danielkawakami.blogspot.com.au/2017/01/updated-windows-10-drivers-for-asus.html

here are other drivers with a note about why this is happening (Scroll up to find drivers): http://maxedtech.com/asus-xonar-unified-drivers/comment-page-192/#win10