3-7 BSODs each day any help appreciated

G

Grisham

Member
Joined
Aug 30, 2021
Posts
17
I have replaced the graphics card and the PSU. I have moved the graphics card to a different slot and reseated both memory modules. I have gone into the BIOS and set the CPU and memory to its default speed. I have used DDU to remove the Nvidia graphics drivers and have installed the latest non-dch drivers. I have used Driver Easy to check and install all the latest drivers. Device Manager shows no issues.

I back-up daily. At one point I had a stable system but every time I tried to update any of the drivers it would make the system unstable. I was able to put the system back to a stable backup as the system and program drives are separate from the data drives. This worked for a while but now even that doesn't work.

I got some suggestions that seemed to work - specifically updating to the latest BIOS 3602. This lasted for about 10 days. However, I had to temporarily install a ThunderboltEX 3 for testing. This didn't work as expected. Then shortly after I removed the card and not the drivers I started getting frequent BSODs again - 3 today. I tried installing an image I had backed up prior to installing the ThunderboltEX 3, but this doesn't appear to have resolved the problem. I'm inclined to think I may have a hardware problem because restoring it back to an apparently stable state does not have any affect. Any advice would be welcome.

I have had 7 BSODs in one day and overall, it has become very disruptive.

I have gone through all the installed programs and removed quite a few, including some older ones, that I no longer require. I have done another chkdsk c: /f /r, SFC /scannow and DISM /Online /Cleanup-Image /RestoreHealth
One of the dump files made reference to dxgmms2.sys. So I used DDU to uninstall the graphics drivers and Realtek drivers and then re-installed them.

I ran memtest+ through two cycles without any errors reported. I tried running Windows with just one memory module in A2 but BSODs continued with each of the modules installed on its own. I did move the memory from A2+B2 to A1+B1 which gave me four days without a BSOD… then back to regular disruptive service.

I have used the Intel Memory and Storage Tool 1.9.147 for my Intel 750 Series 1.2TB drive - it shows 92% Estimated Life remaining. I have run the full diagnostic scans on both partitions 100% OK.

I tested the WD Red 4TB HD and the 960GB SanDisk Ultra II SSD using the Extended Diagnostic test of the Dashboard tool, and both came back without any issues.

Toshiba don’t provide any diagnostic tools, so I used “chkdsk /f /r” on the Toshiba X300 6TB HDD – no errors were detected.

CrystalDiskInfo also reported no errors on any of the drives

I have been copying the dumps after each BSOD, because the regularly get overwritten. I copied them back into the minidump folder before I ran the report – If they have not been included, let me know, and I can upload them separately.

**********************
Self-build

Desktop

N/A

Windows 10

X64

N/A

Windows 7 Pro

Full version

5 years

5 years

No

Intel 7700K

Corsair Vengeance LPX DDR4 2666 C16 2x16GB – switched from A2+B2 to A1+B1

Nvidia GeForce GTX 1060 6GB

Asus Z170-WS

Corsair CP-9020072-UK Professional Platinum Series HX750i ATX/EPS 750W Power Supply Unit

Drive Verifier - I think it is off but I’m not really sure

Norton 360 Pro. I have System Mechanic Pro installed but the AV part is disabled. I can’t really tell what Windows Defender is doing. It is supposed to be off but keeps making status messages every so often.

I have Firetrust VPN installed but not currently active

The system is overclocked by the motherboard at 9% I was still getting the same problems when I set it to stock speeds

Thanks!
 

Attachments

Last edited by a moderator:
It seems that a critical process is being terminated for some reason. This can be due to hardware, however, I have seen occasions where AV programs have terminated system processes for no good reason, therefore leading to the BSODs you've been experiencing. I would suggest removing System Mechanic Pro and Norton 360 Pro using the official removal tool - Download and run the Norton Remove and Reinstall tool

While troubleshooting, I would strongly recommend remaining with Windows Defender.
 
x BlueRobot said:
It seems that a critical process is being terminated for some reason. This can be due to hardware, however, I have seen occasions where AV programs have terminated system processes for no good reason, therefore leading to the BSODs you've been experiencing. I would suggest removing System Mechanic Pro and Norton 360 Pro using the official removal tool - Download and run the Norton Remove and Reinstall tool

While troubleshooting, I would strongly recommend remaining with Windows Defender.
Click to expand...

I've taken your advice which seems logical. Although I feel a little nervous without Norton keeping me safe. I'd be more worried if I hadn't seen some recent reviews of how good the built in Windows Defender has become. Before I finished the last sentence the PC BSOD'd again. So it would seem any conflict with the AV programs is not the likely culprit. However, I will leave them uninstalled for the time being.

Thanks
 
One of the later BSODs identified a fault with dxkrnl.sys. This is the second time a reference to dx drivers has come up.
I used DDU in safe mode to remove the NVidia drivers.
I re-installed the latest non-dch standard drivers.
After rebooting normally I opened an command window with admin rights
I ran 'sfc /scannow'
I then ran 'DISM /Online /Cleanup-Image /RestoreHealth'
Both came back with no issues
This sort of points back towards a hardware failure
I have already changed the PSU and cables
I have already replaced the graphics card...
 
Hi!

There are (active/enabled) remnants of something that seems another antivirus, i.e. frisk/cyren f-prot antivirus version 5.
Or authentium/cyren antivirus v5.
(Or is this part of iolo System Mechanic? :unsure: --- Did you remove it, like suggested by x BlueRobot?)

Then I can see also:
- intel driver updater (semav6msr64.sys): this caused bsods in the past (in one of my machines and other machine's people)
- Elaborate Bytes\VirtualCloneDrive (elbycdio.sys - remnants?): same as above.
- Asus software (sometimes it was problematic)
- Acronis antiransomware protection (remnants? Or is it installed along with acronis true image?)
- BitDefender remnants (bddci.sys)

I would continue with the removal of cyren and bitdefender remnants.
These could do the job:
Uninstaller for FPAV Windows 6.x
Uninstall Consumer Paid (the driver is dated 3 Dec 2018)
 
Last edited:
These files were not seen in the Sysnative log collector results:

29/08/2021 13:12 12,256,882 EvtxAppDump.txt
29/08/2021 13:12 14,864,516 EvtxSysDump.txt

Please run the Sysnative log collector again to collect these logs.
 
xilolee said:
Hi!

There are (active/enabled) remnants of something that seems another antivirus, i.e. frisk/cyren f-prot antivirus version 5.
Or authentium/cyren antivirus v5.
(Or is this part of iolo System Mechanic? :unsure: --- Did you remove it, like suggested by x BlueRobot?)

Then I can see also:
- intel driver updater (semav6msr64.sys): this caused bsods in the past (in one of my machines and other machine's people)
- Elaborate Bytes\VirtualCloneDrive (elbycdio.sys - remnants?): same as above.
- Asus software (sometimes it was problematic)
- Acronis antiransomware protection (remnants? Or is it installed along with acronis true image?)
- BitDefender remnants (bddci.sys)

I would continue with the removal of cyren and bitdefender remnants.
These could do the job:
Uninstaller for FPAV Windows 6.x
Uninstall Consumer Paid (the driver is dated 3 Dec 2018)
Click to expand...

I am using Acronis True Image 2021 for backing up. This also has an AV module - doesn't everything these days? 😱

I did remove Norton 360 and System Mechanic

I will try running the uninstaller and see what happens. I have a current license for RevoUninstaller if that helps?

Intel Driver Updater I can uninstall - I have experienced issues in the past and had already uninstalled it previously. I use DriverEasy to scan my PC for drivers that need updating.
Elaborate Bytes? Could this be to do with AnyDVD HD- I used it to copy CDs I haven't actively used it for years, although I keep it updated.
Asus software is often problematic. I am only really interested in the Fan Control module to keep the fan noise under control - but I can remove the whole set.
Acronis seem to be delighted with its ever increasing entanglement aside from providing a pretty good back up process - there's not much I can do as I have already turned off the AntiRansomeware option.
bddci.sys is actually another part of Acronis - I have never knowingly installed BitDefender.

Thanks,
 
zbook said:
These files were not seen in the Sysnative log collector results:

29/08/2021 13:12 12,256,882 EvtxAppDump.txt
29/08/2021 13:12 14,864,516 EvtxSysDump.txt

Please run the Sysnative log collector again to collect these logs.
Click to expand...
I had to remove them, as advised by the forum, because they made the report to big to upload. I did pause to wonder whether they were something I should still upload, then I had the next BSOD...
 

Attachments

The logs displayed corruption:
a) content index catalog
b) drive file system
c) data files
d) basic file structure

There were errors in the Master File Table (MFT) and volume bitmap.


Please perform the following steps:

1) Open administrative command prompt and copy and paste:
(make sure the page file is on the windows drive)
(after the troubleshooting has completed you can modify the startup and recovery and page file settings to your preferences)

wmic recoveros set autoreboot = false
wmic recoveros set debuginfotype = 7
wmic computersystem where name=%computername% set automaticmanagedpagefile=true
msdt.exe -ep SystemSettings_Troubleshoot_L2 -id SearchDiagnostic

(Click Advanced > un-check Apply repairs automatically > click next > check all boxes > skip the typed entry > click next > click view detailed information > post images of the detailed results)


2) Run this command overnight.
Open administrative command prompt and type or copy and paste: Chkdsk /b /v C:

Microsoft Windows [Version 10.0.19042.1165]
(c) Microsoft Corporation. All rights reserved.

C:\WINDOWS\system32>chkdsk /b /v C:
The type of the file system is NTFS.
Cannot lock current drive.

Chkdsk cannot run because the volume is in use by another
process. Would you like to schedule this volume to be
checked the next time the system restarts? (Y/N)

Type: Y


3) Run HD Tune (free or trial version)
HD Tune website
Post images into the thread for results of these tests:
a) Health
b) Benchmark
c) Full error scan


4) Run Sea Tools for Windows long generic test
How to use SeaTools for Windows | Seagate Support US
https://www.seagate.com/files/www-c.../downloads/pdf/SeaTools-for-windows-en-us.pdf


5) These tests can be run overnight:
a) HD Tune full error scan
b) Sea Tools for Windows long generic test
c) Chkdsk /b /v


6) The computer has many drives.
Some are very large.
Testing can be performed overnight.
Use this opportunity to test all drives with each HD Tune, Sea Tools, and Chkdsk /b /v

Code: 
------------------------
Disk & DVD/CD-ROM Drives
------------------------
      Drive: C:
 Free Space: 89.8 GB
Total Space: 795.4 GB
File System: NTFS
      Model: INTEL SSDPE2MW012T4

      Drive: D:
 Free Space: 1969.6 GB
Total Space: 5723.0 GB
File System: NTFS
      Model: TOSHIBA HDWE160

      Drive: F:
 Free Space: 74.5 GB
Total Space: 349.0 GB
File System: NTFS
      Model: INTEL SSDPE2MW012T4

      Drive: G:
 Free Space: 179.0 GB
Total Space: 915.6 GB
File System: NTFS
      Model: SanDisk Ultra II 960GB

      Drive: H:
 Free Space: 152.9 GB
Total Space: 720.8 GB
File System: NTFS
      Model: Force MP510

      Drive: I:
 Free Space: 76.2 GB
Total Space: 824.3 GB
File System: NTFS
      Model: Force MP510

      Drive: K:
 Free Space: 270.4 GB
Total Space: 512.0 GB
File System: NTFS
      Model: Force MP510

      Drive: L:
 Free Space: 201.8 GB
Total Space: 1651.4 GB
File System: NTFS
      Model: Force MP510

      Drive: O:
 Free Space: 3517.1 GB
Total Space: 3815.3 GB
File System: NTFS
      Model: WDC WD40EFRX-68WT0N0

      Drive: Z:
 Free Space: 6.8 GB
Total Space: 106.9 GB
File System: NTFS
      Model: Force MP510

      Drive: J:
      Model: TSSTcorp CDDVDW SH-S203N
     Driver: C:\WINDOWS\SYSTEM32\DRIVERS\CDROM.SYS, 10.00.19041.1023 (English), 7/12/2021 18:35:32, 181248 bytes

      Drive: M:
      Model: PIONEER BD-ROM  BDC-207D
     Driver: C:\WINDOWS\SYSTEM32\DRIVERS\CDROM.SYS, 10.00.19041.1023 (English), 7/12/2021 18:35:32, 181248 bytes
 
Last edited by a moderator:
zbook said:
The logs displayed corruption:
a) content index catalog
b) drive file system
c) data files
d) basic file structure

There were errors in the Master File Table (MFT) and volume bitmap.
Click to expand...
Thanks for taking a look. Were there specific drives that had errors?
In my experience so far:
The C: drive (partition on the Intel 750 Series NVMe 1.2TB drive seems to have regular reports of errors. However when I scan them the drive appears to be clear of errors or fixed. I have run a number of different deep scan tools on each drive. The Toshiba 6TB drive is the only one where the manufacturer does not provide its own drive testing tool. I have run 'chkdsk /f /r' on each drive partition. I was able to reduce the time it took by running multiple command prompts in windows. As you have seen I have the swapfile on a separate partition of the Corsair MP510 m.2 drive. I suspect this will take me a while to complete. I will try and start the process tonight.
xilolee said:
Ok... Keep us posted if you solve the problem after these uninstallations, or don't.
Click to expand...
Quick update since making the changes yesterday I have had a further 7 BSODs - the shortest period between BSODs was 6 mins and the longest was about 3 hours. This process is very tiring.:confused::confused::confused:
 
xilolee said:
Post fresh logs. :-)
Click to expand...
Even after I take the txt files out the zipped file 14MB so I am under the impression it won't upload (10mb limit). What do you suggest. I can upload the original file to Google Drive and share a link here?

Also when running the report it attempts to download an autorun file which it fails to do - is this important?

Thanks,
 
OK here is the report link:
20210901-SysnativeFileCollectionApp.zip

Since the last crash I still had an outstanding validation of last night's Acronis True Image backup. I changed the settings from max to normal - it's currently been for nearly 4 hours. I previously left it not running and it still crashed after four hours but 6 minutes between BSODs is a bit of a record so far 😱
 
Please remove also asus software and intel driver updater.

If you already uninstalled the last one, remove its driver; from an elevated command prompt, i.e. ran as an administrator, launch these commands:
Code: 
sc stop semav6msr64
sc delete semav6msr64

Post the results of the commands.
 
Last edited:
xilolee said:
Please remove also asus software and intel driver updater.

If you already uninstalled the last one, remove its driver; from an elevated command prompt, i.e. ran as an administrator, launch these commands:
Code: 
sc stop semav6msr64
sc delete semav6msr64

Post the results of the commands.
Click to expand...
Yes I had already uninstalled both.

I followed your directions with the remaining driver:
Microsoft Windows [Version 10.0.19043.1165]
(c) Microsoft Corporation. All rights reserved.

C:\WINDOWS\system32>sc stop semav6msr64

SERVICE_NAME: semav6msr64
TYPE : 1 KERNEL_DRIVER
STATE : 3 STOP_PENDING
(STOPPABLE, NOT_PAUSABLE, IGNORES_SHUTDOWN)
WIN32_EXIT_CODE : 0 (0x0)
SERVICE_EXIT_CODE : 0 (0x0)
CHECKPOINT : 0x0
WAIT_HINT : 0x0

C:\WINDOWS\system32>sc delete semav6msr64
[SC] DeleteService SUCCESS

Still waiting for the verification process to complete - 6 hours since the last crash. I will reboot once the verification is complete.

I found a number of ASUS drivers listed and some of them were running. I stopped them all, without checking which ones were running... :oops:

But when I reboot they will return to the state they were in as they are set to run automatically.

The drivers are:
ASUS Com Service
ASUS HM Com Service
ASUS System Control Service
ASUSCertService
AsusFanControlService

Thanks,
 
What verification? Chkdsk?
That's ok...
When you will restart, if those services will still be present, we will remove them with the same SC commands (we just have to find their service names, that are different than their display names).
 
xilolee said:
What verification? Chkdsk?
That's ok...
When you will restart, if those services will still be present, we will remove them with the same SC commands (we just have to find their service names, that are different than their display names).
Click to expand...
The verification of my backup using Acronis True Image

The drivers are:
ASUS Com Service - asComSvc
ASUS HM Com Service - asHmComSvc
ASUS System Control Service - AsSysCtrlService
ASUSCertService - AsusCertService
AsusFanControlService - AsusFanControlService

All have been successfully deleted
 
Last edited:
zbook said:
Please perform the following steps:

1) Open administrative command prompt and copy and paste:
(make sure the page file is on the windows drive)
(after the troubleshooting has completed you can modify the startup and recovery and page file settings to your preferences)

wmic recoveros set autoreboot = false
wmic recoveros set debuginfotype = 7
wmic computersystem where name=%computername% set automaticmanagedpagefile=true
msdt.exe -ep SystemSettings_Troubleshoot_L2 -id SearchDiagnostic

(Click Advanced > un-check Apply repairs automatically > click next > check all boxes > skip the typed entry > click next > click view detailed information > post images of the detailed results)
Click to expand...
I was thrown by "wmic computersystem where name=%computername% set automaticmanagedpagefile=true"
Which I worked out equates to "wmic name=Max set automaticmanagedpagefile=true" the response from this was "Failed to allocate memory!!!"
As far as I can tell I had already done this when I switched the pagefile back to C:

for the command "C:\WINDOWS\system32>chkdsk /b /v C:"
Surely /v is redundant because it is for FAT/FAT32

I have run it as you suggested in case you have some intention I don't understand.
 

Attachments

Has Sysnative Forums helped you? Please consider donating to help us support the site!

Back
Top