Need help folks with a BSOD

philc43 · 15 Dec 2017

You need to scroll to the end of the posting instructions and make sure you click on the beta06 tool.

Layback Bear · 15 Dec 2017

Last page, last post and at the bottom. That is the first place I should of looked.

I downloaded the tool and ran it

It states if I want to run this tool I need to

WARNING: If you would like allow this script to run, please temporarily disable Controlled Folder Access in Windows
Defender Security Center and then re-launch this script.

At the present time I'm looking for the Controlled Folder Access.

I'm new to Windows 10 so it's very difficult for me to find anything.

Jack

philc43 · 15 Dec 2017

This tutorial will show you how:

Change Windows Defender Controlled Folder Access Settings - Windows 10

Layback Bear · 15 Dec 2017

Well I found it thanks.

Here is the zip I hope. I might have to wait for another BSOD.

Attachment 168326

Happy Days are here again; it works

Jack

zbook · 15 Dec 2017

Also give this a try: log collector v2.zip

philc43 · 15 Dec 2017

Layback Bear said:

Well I found it thanks.

Here is the zip I hope. I might have to wait for another BSOD.

Attachment 168326

Happy Days are here again; it works

Jack

Glad you got it working :)

Now it turns out there is no crash mini-dump file saved but there is evidence that a memory.dmp file was created yesterday:

Code:

Event[10014]:
  Log Name: System
  Source: Microsoft-Windows-WER-SystemErrorReporting
  Date: 2017-12-14T18:34:37.092
  Event ID: 1001
  Task: N/A
  Level: Error
  Opcode: N/A
  Keyword: Classic
  User: N/A
  User Name: N/A
  Computer: Jack
  Description: 
The computer has rebooted from a bugcheck.  The bugcheck was: 0x0000001e (0xffffffffc0000005, 0xfffff80240cc7070, 0x0000000000000000, 0xffffffffffffffff). A dump was saved in: C:\Windows\MEMORY.DMP. Report Id: 195beda4-7fb6-48f7-a850-433f2869160e.

Please upload this memory.dmp file (if you can find it) to OneDrive and provide a link to it so that we can examine it. It is also possible that you have something installed or a maintenance task that is deleting these crash dump files. I suspect it is CCleaner. You should change the settings in this program so that it does not delete memory dump files.

Layback Bear · 16 Dec 2017

Sorry I don't use OneDrive or anything like it.

I did clean things out using Disk Cleanup and Ccleaner.

If and when I get a new BSOD I will post a new log.

Thanks folks for all your help!

Jack

Layback Bear · 16 Dec 2017

Just got a new BSOD.

Attachment 168473

Jack

Ztruker · 16 Dec 2017

Jack, the dump shows a problem with farflt.sys.

Code:

ffff8081`847f6920  fffff809`feec1e50Unable to load image \SystemRoot\system32\DRIVERS\farflt.sys, Win32 error 0n2
*** WARNING: Unable to verify timestamp for farflt.sys
*** ERROR: Module load completed but symbols could not be loaded for farflt.sys
 farflt+0x11e50

Driver Description: Malwarebytes Anti-Ransomware Protection
Driver Update Site: Downloads: https://www.malwarebytes.org/downloads/
Support: https://www.malwarebytes.org/support/

I suggest uninstalling Malwarebytes for now and see what difference that makes. Use the tool provided by MBAM to do this:
mb_clean.exe

If that helps you can try downloading and installing the latest version and see how that goes.

Layback Bear · 16 Dec 2017

Thank you Rich. I will work on it and let you know.

Jack

Update:

I remove Malwarebytes Premium and installed the free one. I will give it a try.

Reason is after removing the Premium the new one would not install.
It stated this computer is unable to install. But yet the free one would.

Doing some more research because I have a Premium with life time activation.

Jack