[7SP1Pro x64] Random BSOD

[furfur]

I have an issue with a Win7 PC that BSOD sometimes.

Here's all the info.

· OS - Windows 10, 8.1, 8, 7, Vista ? Win7
· x86 (32-bit) or x64 ? x64
· What was original installed OS on system? Win7 x64
· Is the OS an OEM version (came pre-installed on system) or full retail version (YOU purchased it from retailer)? OEM
· Age of system (hardware) 2012
· Age of OS installation - have you re-installed the OS? 14/12/2012

· CPU Intel i5-3750
· Video Card Intel HD Graphics, AMD RADEON HD 6450
· MotherBoard - (if NOT a laptop) ? :huh:
· Power Supply - brand & wattage (if laptop, skip this one) ?:huh:

· System Manufacturer HP
· Exact model number (if laptop, check label on bottom) Z220 SFF

· Laptop or Desktop? Desktop

Thanks very much!

 

[xilolee]

Re: Random BSOD

New bios available: 1.85 Rev.A 16.3 MB Mar 15, 2018
Windows7 defender (antispyware) seems enabled. It should be probably disabled by Sophos.

Read More:

BugCheck BE, {fffff683ff706b30, 19b00000b7cf4025, fffff8800b967b60, b} Probably caused by : ntkrnlmp.exe ( nt!KiPageFault+44a )
ATTEMPTED_WRITE_TO_READONLY_MEMORY (be)
An attempt was made to write to readonly memory. The guilty driver is on the stack trace (and is typically the current instruction pointer).
When possible, the guilty driver's name (Unicode string) is printed on the bugcheck screen and saved in KiBugCheckDriver.
Arguments:
Arg1: fffff683ff706b30, Virtual address for the attempted write.
Arg2: 19b00000b7cf4025, PTE contents.
Arg3: fffff8800b967b60, (reserved)
Arg4: 000000000000000b, (reserved)

DEFAULT_BUCKET_ID: WIN7_DRIVER_FAULT
BUGCHECK_STR: 0xBE
PROCESS_NAME: PrivacyIconCli

PrivacyIconClient.exe is mentioned.
From file.net:

The genuine PrivacyIconClient.exe file is a software component of Intel® Management Engine Components by Intel Corporation.
The Privacy Icon Client starts the Intel® Management and Security Status (IMSS) Application which presents the system tray Privacy Icon and tells whether Intel® Active Management Technology (AMT) firmware and Trusted Platform Module (TPM) hardware are present and activated. It requires the Microsoft .NET Framework. Uninstalling "Intel® Management Engine Components" via the Control Panel will remove this process. With the "-startup" runtime parameter, the Client tests for AMT and TPM and if either is absent the entire IMSS stops until the next boot. Without it, the IMSS runs without actually testing. The OEM can customize where the ME Components reside, what the icon looks like, and whether it appears. AMT's out-of-band (OOB) communication enables remote administrators to access computers even when powered off, which is a privacy issue. The IMSS Application has a new version and may change process names with each new generation, (7.x, 8.x, etc.), of AMT.

 

[furfur]

Thanks Xilolee, I've updated the BIOS and disabled Defender as suggested.

 

[xilolee]

Then let's see...