Question WHEA_UNCORRECTABLE_ERROR after wake from sleep.

[CaseyBoud]

I just got a BSOD when waking my PC from sleep. I saw the desktop but everything froze and then the error happened. It said WHEA_UNCORRECTABLE_ERROR. I hard powered down and got back into Windows. The event viewer only showed "A fatal hardware error has occurred. A record describing the condition is contained in the data section of this event." The data section showed this real long code which I have no idea what it means. The most recent thing I updated was my nvidia drivers to version 471.68 and I have been having some issues with it. What happens is when starting a game that isn't my desktop resolution the screen stays black for a while, and I can eventually get back into windows but everything Nvidia is missing, like Geforce experience and the control panel. I have to restart for it to show up again. So I'm guessing this is just a bad nvidia driver causing this BSOD.

[EDIT] Okay something odd I noticed. Games that are on my D drive (which is a Samsung 970 EVO plus nvme) are asking me to install. So it almost seems like that secondary SSD had a fatal error not my GPU. The drive is showing up currently.


Does anyone know how I can figure out what this raw data code means?

RawData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

 

[axe0axe0]

The raw data is just a hexadecimal representation of the event itself.

Please upload all files in C:\Windows\Minidump to onedrive, google drive, dropbox or your preferred service for sharing files and post a share link. One dump is not going to be sufficient here.

Could you also export the System eventlogs from the eventviewer and provide a share link for it as well, it may contain additional info on the crashes.

 

[CaseyBoud]

Looks like I don't have any memory dumps at all. Windows was set to do an automatic memory dump. I just set it to do a small memory dump for the next BSOD.

Here is the WHEA log as text. I also uploaded it to google https://drive.google.com/file/d/1BFI9I2cdfhQ6oBrvEM9-3uGhm2en6-eu/view?usp=sharing

Log Name: System
Source: Microsoft-Windows-WHEA-Logger
Date: 8/15/2021 8:09:18 AM
Event ID: 1
Task Category: None
Level: Error
Keywords: WHEA Error Event Logs
User: LOCAL SERVICE
Computer: CASE-DESKTOP
Description:
A fatal hardware error has occurred. A record describing the condition is contained in the data section of this event.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-WHEA-Logger" Guid="{c26c4f3c-3f66-4e99-8f8a-39405cfed220}" />
<EventID>1</EventID>
<Version>0</Version>
<Level>2</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x8000000000000002</Keywords>
<TimeCreated SystemTime="2021-08-15T13:09:18.3670302Z" />
<EventRecordID>26000</EventRecordID>
<Correlation ActivityID="{95a602b1-9cfb-4f6b-afbd-741738fb1621}" />
<Execution ProcessID="5184" ThreadID="6856" />
<Channel>System</Channel>
<Computer>CASE-DESKTOP</Computer>
<Security UserID="S-1-5-19" />
</System>
<EventData>
<Data Name="Length">298</Data>
<Data Name="RawData">435045521002FFFFFFFF010001000000070000002A01000038060D000F0815143C60C1835215A74887D114D9467D7765000000000000000000000000000000008D7C2157665EFB4480339B74CACEDF5B03F83300702E884E992C6F26DAF3DB7A0A00E8F7BE90D701080000000000000000000000000000000000000000000000C8000000620000000003020001000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000053544F52504F52540100620000000300010005001100000003A82705B59EEB119243806E6F6E6963730074006F0072006E0076006D006500000000000000000000000000000000004E564D65202020200053616D73756E6720535344203938302000</Data>
</EventData>
</Event>

 

[axe0axe0]

For the link, please remove permissions.

What I would like is an export of all System events. There's typically more data that tends to get ignored yet may be important.

 

[CaseyBoud]

Here is the full event viewer for system. https://drive.google.com/file/d/1Gxff4kch6GmOPOqGvEoXbUgDTdilK0cw/view?usp=sharing

I noticed I'm getting a lot of warnings about Intel(R) Ethernet Controller (3) I225-V #2.

So I'm also experiencing some issues when restarting now. They seemed to have started after I updated my BIOS on my motherboard which is an ASUS ROG STRIX Z590-E. Q-code 55 keeps coming up on the motherboard LED display which means RAM issues. My RAM is 32GB of Corsair Dominator 3600 (4 sticks of 8GB). I had an XMP profile set, so I disabled that now seeing if anything changes.

 

[axe0axe0]

Could you run this in a command prompt and upload the eventlog.txt on the desktop.

wevtutil qe System /f:text > "%USERPROFILE%\Desktop\eventlog.txt"

I have a custom program for quickly going through event logs but it's having trouble with .evtx files for some reason.

 

[CaseyBoud]

Okay here is a txt https://drive.google.com/file/d/1U7jZImnINrF1v2SHjD9HYAJQr-PmmyV3/view?usp=sharing

 

[axe0axe0]

Did you run the command or save the events as a text file in event viewer? If it's the latter, that makes the content really hard to read because of the formatting used. Saving as text in event viewer uses the tab as delimiter which is what I am currently seeing after downloading the text file.

Just to show what I mean, here's one event from my computer after running the command.

Event[1]:
  Log Name: System
  Source: VMnetDHCP
  Date: 2021-01-27T18:49:38.0990000Z
  Event ID: 1
  Task: N/A
  Level: Waarschuwing
  Opcode: N/A
  Keyword: Klassiek
  User: N/A
  User Name: N/A
  Computer: DESKTOP-NPASAR7
  Description: 
dispatch: Timeout waiting for input data

This is a snippet from the text file you uploaded, I am not sure of this is one event or multiple or if I accidentally excluded the rest. This is tab delimited.

Level    Date and Time    Source    Event ID    Task Category
Warning    16-8-2021 22:56:00    Microsoft-Windows-DistributedCOM    10016    None    "The application-specific permission settings do not grant Local Launch permission for the COM Server application with CLSID 
Windows.SecurityCenter.WscDataProtection
 and APPID 
Unavailable
 to the user NT AUTHORITY\SYSTEM SID (S-1-5-18) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool."
Information    16-8-2021 22:54:08    Service Control Manager    7045    None    "A service was installed in the system.

Service Name:  IOMap
Service File Name:  C:\Windows\system32\drivers\IOMap64.sys
Service Type:  kernel mode driver
Service Start Type:  demand start
Service Account:  "
Information    16-8-2021 22:54:05    Service Control Manager    7045    None    "A service was installed in the system.

 

[CaseyBoud]

Did you run the command or save the events as a text file in event viewer? If it's the latter, that makes the content really hard to read because of the formatting used. Saving as text in event viewer uses the tab as delimiter which is what I am currently seeing after downloading the text file.

All I did was run the command like you said to do.

I ran it again and it looks more like what you got. https://drive.google.com/file/d/18DXL4qJACbWzNh3CqYYAPtD3MNFHukR5/view?usp=sharing

 

[axe0axe0]

That's better, has your system crashed recently? In the eventlog I don't see records of BSOD crashes.

 

[CaseyBoud]

I think on the 16th it got a BSOD when I woke from sleep. It seems to be really random.

 

[RohanWillAnswer]

I had this problem, and it drove me to the brink of sanity. Whea uncorrectable error id1 level 2, and I changed the psu, gpu, changed the order of ram sticks, gpu-drivers, re-install, same error.

Then I realised there was no mini-dump file after the stop-message and restarts. Computer froze and mouse&keyboard went dark. The computer booted directly into bios and the disc wasn't listed. There was only one thing I could think of that I had not done. Installing the Intel Rapid Storage- driver from Gigabyte (Z590 D). I also updated the firmware of my WD black sn850 harddrive and problem is gone.