Microsoft (R) Windows Debugger Version 10.0.15063.137 AMD64 is malfunctioning with GetContextState failed, 0x8007001E
Two of the dumps: Probably caused by : memory_corruption
Eventlog:
Code:
Event[3553]: Log Name: System Source: Service Control Manager Date: 2017-06-02T21:05:08.432 Event ID: 7026 Task: N/A Level: Information Opcode: N/A Keyword: Classic User: N/A User Name: N/A Computer: DESKTOP-PMEM6GD Description: The following boot-start or system-start driver(s) did not load: dam
Code:
Event[3499]: Log Name: System Source: Service Control Manager Date: 2017-06-02T20:44:55.369 Event ID: 7026 Task: N/A Level: Information Opcode: N/A Keyword: Classic User: N/A User Name: N/A Computer: DESKTOP-PMEM6GD Description: The following boot-start or system-start driver(s) did not load: dam
Code:
Event[3393]: Log Name: System Source: Service Control Manager Date: 2017-06-02T20:05:55.276 Event ID: 7026 Task: N/A Level: Information Opcode: N/A Keyword: Classic User: N/A User Name: N/A Computer: DESKTOP-PMEM6GD Description: The following boot-start or system-start driver(s) did not load: dam
There were multiple crashes and this event has preceded the crashes:
Code:
Event[1130]: Log Name: System Source: Microsoft-Windows-FilterManager Date: 2017-05-30T21:39:42.180 Event ID: 6 Task: N/A Level: Information Opcode: Info Keyword: N/A User: S-1-5-18 User Name: NT AUTHORITY\SYSTEM Computer: DESKTOP-PMEM6GD Description: File System Filter 'npsvctrig' (10.0, ?2097?-?07?-?25T06:18:05.000000000Z) has successfully loaded and registered with Filter Manager.
Code:
Event[1610]: Log Name: System Source: Microsoft-Windows-Kernel-PnP Date: 2017-05-31T00:12:43.633 Event ID: 225 Task: N/A Level: Warning Opcode: Info Keyword: N/A User: S-1-5-18 User Name: NT AUTHORITY\SYSTEM Computer: DESKTOP-PMEM6GD Description: The application \Device\HarddiskVolume4\Program Files (x86)\Google\Update\1.3.33.5\GoogleCrashHandler.exe with process id 9356 stopped the removal or ejection for the device PCI\VEN_8086&DEV_A282&SUBSYS_7A641462&REV_00\3&11583659&0&B8.
Code:
Event[217]: Log Name: System Source: Microsoft-Windows-Kernel-PnP Date: 2017-05-31T04:57:06.383 Event ID: 219 Task: N/A Level: Warning Opcode: Info Keyword: N/A User: S-1-5-18 User Name: NT AUTHORITY\SYSTEM Computer: DESKTOP-PMEM6GD Description: The driver \Driver\WudfRd failed to load for the device SWD\WPDBUSENUM\_??_USBSTOR#Disk&Ven_SanDisk&Prod_Cruzer_Glide&Rev_1.27#20042605700307F0A611&0#{53f56307-b6bf-11d0-94f2-00a0c91efb8b}.
Code:
Event[328]: Log Name: System Source: Microsoft-Windows-Kernel-Boot Date: 2017-05-30T15:18:11.920 Event ID: 29 Task: N/A Level: Error Opcode: Info Keyword: N/A User: S-1-5-18 User Name: NT AUTHORITY\SYSTEM Computer: DESKTOP-PMEM6GD Description: Windows failed fast startup with error status 0xC00000D4.
Code:
Event[451]: Log Name: System Source: Microsoft-Windows-WindowsUpdateClient Date: 2017-05-30T15:23:06.797 Event ID: 20 Task: Windows Update Agent Level: Error Opcode: Installation Keyword: Installation,Failure User: S-1-5-18 User Name: NT AUTHORITY\SYSTEM Computer: DESKTOP-PMEM6GD Description: Installation Failure: Windows failed to install the following update with error 0x80246007: VCLibs 12.
Code:
Event[604]: Log Name: System Source: Service Control Manager Date: 2017-05-30T15:39:27.353 Event ID: 7000 Task: N/A Level: Error Opcode: N/A Keyword: Classic User: N/A User Name: N/A Computer: DESKTOP-PMEM6GD Description: The MSICDSetup service failed to start due to the following error: This driver has been blocked from loading
Code:
Event[1221]: Log Name: System Source: Microsoft-Windows-Kernel-Boot Date: 2017-05-30T22:06:38.810 Event ID: 29 Task: N/A Level: Error Opcode: Info Keyword: N/A User: S-1-5-18 User Name: NT AUTHORITY\SYSTEM Computer: DESKTOP-PMEM6GD Description: Windows failed fast startup with error status 0xC00000D4.
Code:
Event[1678]: Log Name: System Source: User32 Date: 2017-05-31T01:52:39.359 Event ID: 1073 Task: N/A Level: Warning Opcode: N/A Keyword: Classic User: S-1-5-21-1390793526-556943757-3711158197-1001 User Name: DESKTOP-PMEM6GD\svikh Computer: DESKTOP-PMEM6GD Description: The attempt by user DESKTOP-PMEM6GD\svikh to restart/shutdown computer DESKTOP-PMEM6GD failed
Code:
Event[1813]: Log Name: System Source: Microsoft-Windows-Kernel-Boot Date: 2017-05-31T10:00:25.786 Event ID: 29 Task: N/A Level: Error Opcode: Info Keyword: N/A User: S-1-5-18 User Name: NT AUTHORITY\SYSTEM Computer: DESKTOP-PMEM6GD Description: Windows failed fast startup with error status 0xC00000D4.
Code:
Event[2095]: Log Name: System Source: Microsoft-Windows-WindowsUpdateClient Date: 2017-05-31T12:01:19.535 Event ID: 20 Task: Windows Update Agent Level: Error Opcode: Installation Keyword: Installation,Failure User: S-1-5-18 User Name: NT AUTHORITY\SYSTEM Computer: DESKTOP-PMEM6GD Description: Installation Failure: Windows failed to install the following update with error 0x80246007: Microsoft Sticky Notes.
Code:
Event[2154]: Log Name: System Source: Microsoft-Windows-WindowsUpdateClient Date: 2017-05-31T12:02:10.509 Event ID: 20 Task: Windows Update Agent Level: Error Opcode: Installation Keyword: Installation,Failure User: S-1-5-18 User Name: NT AUTHORITY\SYSTEM Computer: DESKTOP-PMEM6GD Description: Installation Failure: Windows failed to install the following update with error 0x80073D02: Microsoft Sticky Notes.
Code:
Event[2318]: Log Name: System Source: Service Control Manager Date: 2017-05-31T12:34:10.454 Event ID: 7000 Task: N/A Level: Error Opcode: N/A Keyword: Classic User: N/A User Name: N/A Computer: DESKTOP-PMEM6GD Description: The MSICDSetup service failed to start due to the following error: This driver has been blocked from loading
Code:
Event[2324]: Log Name: System Source: Service Control Manager Date: 2017-05-31T12:35:40.470 Event ID: 7000 Task: N/A Level: Error Opcode: N/A Keyword: Classic User: N/A User Name: N/A Computer: DESKTOP-PMEM6GD Description: The MSICDSetup service failed to start due to the following error: This driver has been blocked from loading
Code:
Event[2373]: Log Name: System Source: Microsoft-Windows-Kernel-PnP Date: 2017-05-31T12:44:24.900 Event ID: 219 Task: N/A Level: Warning Opcode: Info Keyword: N/A User: S-1-5-18 User Name: NT AUTHORITY\SYSTEM Computer: DESKTOP-PMEM6GD Description: The driver \Driver\WudfRd failed to load for the device SWD\WPDBUSENUM\_??_USBSTOR#Disk&Ven_Mass&Prod_Storage_Device&Rev_1.00#121220130416&0#{53f56307-b6bf-11d0-94f2-00a0c91efb8b}.
Code:
Event[2806]: Log Name: System Source: Microsoft-Windows-Directory-Services-SAM Date: 2017-05-31T21:53:59.900 Event ID: 12291 Task: N/A Level: Error Opcode: Info Keyword: N/A User: S-1-5-18 User Name: NT AUTHORITY\SYSTEM Computer: DESKTOP-PMEM6GD Description: SAM failed to start the TCP/IP or SPX/IPX listening thread
These are some of the notable or recurrent finding in the event log related to failure:
The MSICDSetup service failed to start due to the following error: This driver has been blocked from loading
The driver \Driver\WudfRd failed to load for the device SWD\WPDBUSENUM\_??_USBSTOR#Disk&Ven_Mass&Prod_Storage_Device&Rev_1.00#121220130416&0#{53f56307-b6bf-11d0-94f2-00a0c91efb8b}.
The following boot-start or system-start driver(s) did not load: dam
Windows failed fast startup with error status 0xC00000D4.
Installation Failure: Windows failed to install the following update with error 0x80246007: VCLibs 12.
Installation Failure: Windows failed to install the following update with error 0x80246007: Microsoft Sticky Notes.
Installation Failure: Windows failed to install the following update with error 0x80073D02: Microsoft Sticky Notes.
dam.sys DAM Kernel Driver Windows Update
WUDFRd.sys Windows Driver Foundation - User-mode Driver Framework Reflector Windows Update
npsvctrig.sys Named pipe service t Windows Update
For the bsod what information did you see from the whocrashed analysis?
Are you doing any over clocking?
Are you using software or hardware RAID?
In administrative command prompt type or copy and paste these commands:
1) winver (in the pop up view the windows version and build. the latest build is 15063.332) There were some failed windows updates in the event log. If there are currently any failed windows updates post the KB# and failure code.
2) sfc /scannow
3) dism /online /cleanup-image /restorehealth
4) chkdsk /scan
5) There were multiple windows failed fast start up.
Turn off fast startup:
Turn On or Off Fast Startup in Windows 10 Windows 10 Performance Maintenance Tutorials
6) In your post you indicated that you had ran memtest86.
With two bsod related to memory corruption please test the memory using memtest86+
Version 5.01
Memtest86+ - Advanced Memory Diagnostic Tool
Make at least 8 runs. Sometimes it takes runs in the teens to find ram or dim related problems. Run memtest86+ overnight.
7) After the above plan to run windows driver verifier.
Are you comfortable navigating through the windows recovery menu or windows advanced troubleshooting menu to safe mode with command prompt?
Open administrative command prompt and type or copy and paste this command:
shutdown /r /o /f /t 00
Navigate to safe mode with command prompt.
Type: shutdown /r
When you have completed memtest86+ with 8 or more runs and it is a pass this link has the settings for windows driver verifier:
Driver Verifier-- tracking down a mis-behaving driver. - Microsoft Community
Open system control panel > advanced system settings > startup and recovery settings > un-check automatically restart.
For windows driver verifier to start type verifier in the left lower corner search and then follow the link above.
To turn off windows driver verifier you will need to navigate through the windows advanced troubleshooting menu to startup options then safe mode with command prompt and type verifier /reset
When back on the desktop you should have already installed both whocrashed and bluescreenview. The minidump files are immediately analyzed and the driver/applications are uninstalled.
http://www.resplendence.com/whocrashed
Blue screen of death (STOP error) information in dump files.
Windows driver verifier is restarted and the next bsod is analyzed, etc.
Typically windows driver verifier will post a stop code with driver verifier detected violation. Sometimes it will display the misbehaving driver with *.sys. Most often the minidump files need to be analyzed with whocrashed and bluescreenview. Sometimes the analysis is different so make sure you also post the minidump files into the forum for analysis.
Please report each:
1) windows version and build, and any failed update KB# and error code
2) scannow
3) restorehealth
4) chkdsk /scan (you can use this administrative command prompt command to generate a desktop text file:
Read Chkdsk Log in Event Viewer in Windows 10 Windows 10 Performance Maintenance Tutorials
get-winevent -FilterHashTable @{logname="Application"; id="1001"}| ?{$_.providername –match "wininit"} | fl timecreated, message | out-file Desktop\CHKDSKResults.txt
5) memtest86+ version 5.01 with at least 8 runs