This has been happening every once in a while and it's rather annoying. Nothing points towards RAM corruption though as all my RAM is usable and I did a test on the RAM. Not sure what's going on but maybe you all could help me out? It's beginning to become really annoying. Apparently it's a custom error...
See rule #4 on piracy:
Forum Rules - Windows 10 Help Forums
Please remove all software used to bypass or divert the activation of software and remove all pirated software.
Once this is complete run the BETA log collector and post a new zip into the thread:
https://www.tenforums.com/attachment...-v2-beta10.zip
(extract > open)
Oh oops. My bad. Fixed. Let me know if I missed anything.
One of the files was missing from the log collector.
Please rerun the log collector and post a new zip into the thread.
Okay I did. Is the file still missing?
The file is still missing.
1) What steps were made to remove the piracy?
2) Which files were modified?
There was only 1 mini dump file with bugcheck 1A.
The logs displayed other bugchecks: 21, 7E.
3) Open file explorer> this PC > C: > in the right upper corner search for:
C:\windows\memory.dmp > zip > post a one drive or drop box share link into the thread
4) The computer has mismatched RAM. There are a pair of Samsung 4GB RAM and a 8GB module. When was the RAM module added?
5) Run memtest86+ version 5.01 for at least 8 passes.
Memtest86+ - Advanced Memory Diagnostic Tool
This may take hours so plan to run it overnight.
a) Please make sure you use the Memtest86+ version 5.01 with the link below.
Memtest86+ - Advanced Memory Diagnostic Tool
The testing is done not by time but by passes.
The more passes the better.
There are a significant number of false negatives if fewer than 8 passes are made.
A false negative is a test pass when there is malfunctioning RAM.
There is 8 GB of RAM on the computer.
Memtest86+ version 5.01 testing takes approximately 1 - 2 hours /GB RAM
Just 1 error is a fail and you can abort testing.
Then test 1 RAM module at a time in the same DIMM each for 8 or more passes.
b) When Memtest86+ version 5.01 has completed 8 or more passes use a camera or smart phone camera to take a picture and post an image into the thread.
Memory problems. - Microsoft Community
MemTest86+ - Test RAM | Windows 10 Tutorials
6) If the computer has Ccleaner > click windows tab > scroll down to system and advanced > post an image into the thread
7) In the left lower corner search type: system or system control > open system control panel > on the left pane click advanced system settings
a) > on the advanced tab under startup and recovery > click settings > post an image of the startup and recovery into the thread.
b) > on the advanced tab under performance > click on settings > under performance options > click on the advanced tab > under virtual memory > click on change > post an image of the virtual memory tab into the thread
Code:6/11/2018 11:15 PM Windows Error Reporting Fault bucket , type 0 Event Name: BlueScreen Response: Not available Cab Id: 0 Problem signature: P1: 1000007e P2: ffffffffc0000005 P3: fffff80454e291b0 P4: fffffd80c6edf458 P5: fffffd80c6edeca0 P6: 10_0_17134 P7: 0_0 P8: 256_1 P9: P10: Attached files: \\?\C:\WINDOWS\Minidump\061118-30406-01.dmp \\?\C:\WINDOWS\TEMP\WER-345500-0.sysdata.xml \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WERAF71.tmp.WERInternalMetadata.xml \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WERAFA1.tmp.xml \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WERB06B.tmp.csv \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WERB0DA.tmp.txt These files may be available here: C:\ProgramData\Microsoft\Windows\WER\ReportQueue\Kernel_1000007e_7fb316dfe861415718e8ab9ff6ea780afd962b_00000000_cab_02e9b0d9 Analysis symbol: Rechecking for solution: 0 Report Id: 649ebff7-c2ff-481d-b0e6-72e33594e1ab Report Status: 4 Hashed bucket: Cab Guid: 06/29/2018 10:59 PM Windows Error Reporting Fault bucket , type 0 Event Name: BlueScreen Response: Not available Cab Id: 0 Problem signature: P1: 1a P2: 403 P3: ffffcc0dd74ee548 P4: 80000001d598b867 P5: ffffcc370fa1d8c0 P6: 10_0_17134 P7: 0_0 P8: 256_1 P9: P10: Attached files: \\?\C:\WINDOWS\Minidump\062918-33187-01.dmp \\?\C:\WINDOWS\TEMP\WER-310093-0.sysdata.xml \\?\C:\WINDOWS\MEMORY.DMP \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER1564.tmp.WERInternalMetadata.xml \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER1584.tmp.xml \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER15E1.tmp.csv \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER168E.tmp.txt These files may be available here: C:\ProgramData\Microsoft\Windows\WER\ReportQueue\Kernel_1a_f8b277de271931ff9469e814ef60d7c3756659a0_00000000_cab_02fd169c Analysis symbol: Rechecking for solution: 0 Report Id: 3ac84ad5-cda6-442b-a265-46283c8c4165 Report Status: 4 Hashed bucket: Cab Guid: 0 6/19/2018 7:37 AM Windows Error Reporting Fault bucket , type 0 Event Name: BlueScreen Response: Not available Cab Id: 0 Problem signature: P1: 21 P2: ffffd700ef8d9080 P3: 2 P4: 10000003d P5: ffddcf30 P6: 10_0_17134 P7: 0_0 P8: 256_1 P9: P10: Attached files: \\?\C:\WINDOWS\Minidump\061918-43437-01.dmp \\?\C:\WINDOWS\TEMP\WER-330640-0.sysdata.xml \\?\C:\WINDOWS\MEMORY.DMP \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER869C.tmp.WERInternalMetadata.xml \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER86BC.tmp.xml \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER8758.tmp.csv \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER87B6.tmp.txt These files may be available here: C:\ProgramData\Microsoft\Windows\WER\ReportQueue\Kernel_21_9125485529350a4359629b448a825c1f8bbb3_00000000_cab_02f187b5 Analysis symbol: Rechecking for solution: 0 Report Id: 7240abbf-f848-418e-9da1-d2bf437cc223 Report Status: 4 Hashed bucket: Cab Guid: 0Code:6/29/2018 10:59 PM Windows Error Reporting Fault bucket 0x1a_403_nt!MiDeletePteRun, type 0 Event Name: BlueScreen Response: Not available Cab Id: b11fca5f-6982-4bc2-8bf9-11b846a4f580 Problem signature: P1: 1a P2: 403 P3: ffffcc0dd74ee548 P4: 80000001d598b867 P5: ffffcc370fa1d8c0 P6: 10_0_17134 P7: 0_0 P8: 256_1 P9: P10: Attached files: \\?\C:\WINDOWS\Minidump\062918-33187-01.dmp \\?\C:\WINDOWS\TEMP\WER-310093-0.sysdata.xml \\?\C:\WINDOWS\MEMORY.DMP \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER1564.tmp.WERInternalMetadata.xml \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER1584.tmp.xml \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER15E1.tmp.csv \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER168E.tmp.txt These files may be available here: C:\ProgramData\Microsoft\Windows\WER\ReportArchive\Kernel_1a_f8b277de271931ff9469e814ef60d7c3756659a0_00000000_cab_2f9950e6 Analysis symbol: Rechecking for solution: 0 Report Id: 3ac84ad5-cda6-442b-a265-46283c8c4165 Report Status: 268435456 Hashed bucket: Cab Guid: 06/19/2018 7:37 AM Windows Error Reporting Fault bucket 0x21_nt!MiReturnFullProcessCharges, type 0 Event Name: BlueScreen Response: Not available Cab Id: 874e4b88-45a9-4a16-ab76-42482086c91c Problem signature: P1: 21 P2: ffffd700ef8d9080 P3: 2 P4: 10000003d P5: ffddcf30 P6: 10_0_17134 P7: 0_0 P8: 256_1 P9: P10: Attached files: \\?\C:\WINDOWS\Minidump\061918-43437-01.dmp \\?\C:\WINDOWS\TEMP\WER-330640-0.sysdata.xml \\?\C:\WINDOWS\MEMORY.DMP \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER869C.tmp.WERInternalMetadata.xml \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER86BC.tmp.xml \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER8758.tmp.csv \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER87B6.tmp.txt These files may be available here: C:\ProgramData\Microsoft\Windows\WER\ReportArchive\Kernel_21_9125485529350a4359629b448a825c1f8bbb3_00000000_cab_17b1bb97 Analysis symbol: Rechecking for solution: 0 Report Id: 7240abbf-f848-418e-9da1-d2bf437cc223 Report Status: 268435456 Hashed bucket: Cab Guid: 0Code:6/11/2018 11:16 PM Windows Error Reporting Fault bucket AV_atikmdag!DMM_PowerManagement::GetPwrMgmtState, type 0 Event Name: BlueScreen Response: Not available Cab Id: d7c0c632-a050-4d4f-896a-075d059f6e5f Problem signature: P1: 1000007e P2: ffffffffc0000005 P3: fffff80454e291b0 P4: fffffd80c6edf458 P5: fffffd80c6edeca0 P6: 10_0_17134 P7: 0_0 P8: 256_1 P9: P10: Attached files: \\?\C:\WINDOWS\Minidump\061118-30406-01.dmp \\?\C:\WINDOWS\TEMP\WER-345500-0.sysdata.xml \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WERAF71.tmp.WERInternalMetadata.xml \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WERAFA1.tmp.xml \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WERB06B.tmp.csv \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WERB0DA.tmp.txt \\?\C:\Windows\Temp\WEREAB6.tmp.WERDataCollectionStatus.txt These files may be available here: C:\ProgramData\Microsoft\Windows\WER\ReportArchive\Kernel_1000007e_7fb316dfe861415718e8ab9ff6ea780afd962b_00000000_cab_209ded94 Analysis symbol: Rechecking for solution: 0 Report Id: 649ebff7-c2ff-481d-b0e6-72e33594e1ab Report Status: 268435456 Hashed bucket: Cab Guid: 0
Last edited by zbook; 30 Jun 2018 at 02:36.
Control Panel, and then CCleaner's Registry Cleaner.1) What steps were made to remove the piracy?
2) Which files were modified?
I uninstalled a few programs I don't think were legally on here and then wiped them.
Strange... Why do you think it doesn't show the others in the mini dump?There was only 1 mini dump file with bugcheck 1A.
The logs displayed other bugchecks: 21, 7E.
Can't find. Even attempting to search for it didn't find it for me...3) Open file explorer> this PC > C: > in the right upper corner search for:
C:\windows\memory.dmp > zip > post a one drive or drop box share link into the thread
Attachment 194016
Added it soon as I got the computer over a year ago from another computer. I only had the bluescreen issue recently.4) The computer has mismatched RAM. There are a pair of Samsung 4GB RAM and a 8GB module. When was the RAM module added?
Will do, will edit when that is done.5) Run memtest86+ version 5.01 for at least 8 passes.
Memtest86+ - Advanced Memory Diagnostic Tool
This may take hours so plan to run it overnight.
a) Please make sure you use the Memtest86+ version 5.01 with the link below.
Memtest86+ - Advanced Memory Diagnostic Tool
The testing is done not by time but by passes.
The more passes the better.
There are a significant number of false negatives if fewer than 8 passes are made.
A false negative is a test pass when there is malfunctioning RAM.
There is 8 GB of RAM on the computer.
Memtest86+ version 5.01 testing takes approximately 1 - 2 hours /GB RAM
Just 1 error is a fail and you can abort testing.
Then test 1 RAM module at a time in the same DIMM each for 8 or more passes.
b) When Memtest86+ version 5.01 has completed 8 or more passes use a camera or smart phone camera to take a picture and post an image into the thread.
Memory problems. - Microsoft Community
MemTest86+ - Test RAM | Windows 10 Tutorials
Attachment 1940136) If the computer has Ccleaner > click windows tab > scroll down to system and advanced > post an image into the thread
7) In the left lower corner search type: system or system control > open system control panel > on the left pane click advanced system settingsAttachment 194014Attachment 194015a) > on the advanced tab under startup and recovery > click settings > post an image of the startup and recovery into the thread.
b) > on the advanced tab under performance > click on settings > under performance options > click on the advanced tab > under virtual memory > click on change > post an image of the virtual memory tab into the thread
For startup and recovery > system failure > un-check automatically restart
For every BSOD related crash you should now see a bugcheck and : (
Sometimes a misbehaving driver is displayed in the form *.sys.
If you see the driver record it and post it into the thread.
If you see a BSOD dump live the window should display a % counter.
Make sure that you allow it to rise to 100% before rebooting so that there is sufficient time to create the dump file.
The memory dump could have been removed in the earlier cleaning steps. The logs displayed:
Crash dump found at C:\WINDOWS\MEMORY.DMP
Creation date: 06/29/2018 18:54:36
Size on disk: 785 MB
For any crashes post a new beta zip and memory dump.
Alright, I have done so and I guess now it's a waiting game to see when it crashes again after I've done a memtest86+, huh? What happens if this thread goes inactive while I wait? Will I have to start a new thread or just post when new information comes in as you have requested?
When the Memtest86+ version 5.01 has completed 8 or more passes please post an image into the thread. The more the passes the better as sometimes it takes passes into the 20s to find malfunctioning RAM. The Memtest86+ version 5.01 results are also useful in checking the DIMM and MB.
This thread will remain active and those subscribed will get notices when there is activity.
For any BSOD with the above changes to startup and recovery you should be able to see the BSOD window. Then post the beta log collector zip and a memory dump.
There may be crashes that are not BSOD crashes. These unexpected restarts are sometimes seen in the logs.
At times a tool can be used to find unstable drivers. This is used when there are few crashes and more information is needed so that more dumps can be debugged. This tool is Windows driver verifier and there are custom settings used and backups performed before the tool is used.
Quote