Windows 10 BSOD on startup ntoskrnl.exe

cwsink · 15 Sep 2018

I think I'd probably try uninstalling the Sennheiser software and using the generic drivers to see if the problem goes away. If it is a problem with the Sennheiser drivers I don't think they'll do anything about it unless enough people complain to them. Last I heard the other person was waiting on a response from Sennheiser.

If the problems continue with the Sennheiser software removed I'd then try the individual DIMM test.

liamscor · 15 Sep 2018

Ok thanks will try that.

zbook · 15 Sep 2018

The bugchecks were:
1A
7E

1) For the next BSOD if the size is < 2 GB please post a zip using either:
one drive
drop box
google drive

The mega app was not installed. If possible please repost the older memory.dmp using one of the above options.

2) There are two log collectors: DM and BETA
At some time the BETA log collector will replace the DM log collector.
The BETA log collector will collect many useful files.
Please run both log collectors. The beta log collector is at the bottom of this webpage:
BSOD - Posting Instructions - Windows 10 Forums

3) Open administrative command prompt and type or copy and paste:
4) sfc /scannow
5) dism /online /cleanup-image /restorehealth
6) chkdsk /scan
7) powercfg -h off
8) When these have completed > right click on the top bar or title bar of the administrative command prompt box > left click on edit then select all > right click on the top bar again > left click on edit then copy > paste into the thread
9) shutdown /r

Code:

Event[2818]:
  Log Name: System
  Source: Microsoft-Windows-Kernel-Boot
  Date: 2018-09-15T22:59:52.822
  Event ID: 16
  Task: N/A
  Level: Error
  Opcode: Info
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: DESKTOP-RBGI142
  Description: 
Windows failed to resume from hibernate with error status 0xC0000001.

Code:

Event[1332]:
  Log Name: System
  Source: Display
  Date: 2018-09-08T18:36:33.087
  Event ID: 4101
  Task: N/A
  Level: Warning
  Opcode: Info
  Keyword: Classic
  User: N/A
  User Name: N/A
  Computer: DESKTOP-RBGI142
  Description: 
Display driver nvlddmkm stopped responding and has successfully recovered.

Code:

10/09/2018 10:47 AM Windows Error Reporting Fault bucket , type 0
Event Name: BlueScreen
Response: Not available
Cab Id: 0

Problem signature:
P1: 1000007e
P2: ffffffffc0000005
P3: fffff80261869e22
P4: fffff4029cfaf158
P5: fffff4029cfae9a0
P6: 10_0_17134
P7: 0_0
P8: 256_1
P9: 
P10: 

Attached files:
\\?\C:\Windows\Minidump\091018-7203-01.dmp
\\?\C:\Windows\TEMP\WER-24671-0.sysdata.xml
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER6ACF.tmp.WERInternalMetadata.xml
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER6AE0.tmp.xml
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER6AEF.tmp.csv
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER6AFF.tmp.txt

These files may be available here:
C:\ProgramData\Microsoft\Windows\WER\ReportArchive\Kernel_1000007e_752d357d9146c33e9c3d4ec95fd2ad3e5b594d_00000000_cab_26206cc3

Analysis symbol: 
Rechecking for solution: 0
Report Id: 232264c8-c177-4362-9c5e-83fe38220e03
Report Status: 2049
Hashed bucket: 
Cab Guid: 0
10/09/2018 10:47 AM Windows Error Reporting Fault bucket , type 0
Event Name: BlueScreen
Response: Not available
Cab Id: 0

Problem signature:
P1: 1000007e
P2: ffffffffc0000005
P3: fffff80261869e22
P4: fffff4029cfaf158
P5: fffff4029cfae9a0
P6: 10_0_17134
P7: 0_0
P8: 256_1
P9: 
P10: 

Attached files:
\\?\C:\Windows\Minidump\091018-7203-01.dmp
\\?\C:\Windows\TEMP\WER-24671-0.sysdata.xml
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER6ACF.tmp.WERInternalMetadata.xml
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER6AE0.tmp.xml
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER6AEF.tmp.csv
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER6AFF.tmp.txt

These files may be available here:
C:\ProgramData\Microsoft\Windows\WER\ReportQueue\Kernel_1000007e_752d357d9146c33e9c3d4ec95fd2ad3e5b594d_00000000_038c6afe

Analysis symbol: 
Rechecking for solution: 0
Report Id: 232264c8-c177-4362-9c5e-83fe38220e03
Report Status: 4
Hashed bucket: 
Cab Guid: 0
15/09/2018 10:00 PM Windows Error Reporting Fault bucket , type 0
Event Name: BlueScreen
Response: Not available
Cab Id: 0

Problem signature:
P1: 1a
P2: 783
P3: ffffb7888394e038
P4: ffffcd8ef3d40000
P5: ffff9909c64791e0
P6: 10_0_17134
P7: 0_0
P8: 256_1
P9: 
P10: 

Attached files:
\\?\C:\Windows\Minidump\091518-7843-01.dmp
\\?\C:\Windows\TEMP\WER-12812-0.sysdata.xml
\\?\C:\Windows\MEMORY.DMP
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER3C5D.tmp.WERInternalMetadata.xml
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER3C5E.tmp.xml
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER3C6C.tmp.csv
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER3C7D.tmp.txt

These files may be available here:
C:\ProgramData\Microsoft\Windows\WER\ReportArchive\Kernel_1a_8f704da092b35284d38f2e891f56b433b4524955_00000000_cab_1ef43cda

Analysis symbol: 
Rechecking for solution: 0
Report Id: ac18a89d-32af-4aef-93a5-bef0050c94a8
Report Status: 2049
Hashed bucket: 
Cab Guid: 0
15/09/2018 10:00 PM Windows Error Reporting Fault bucket , type 0
Event Name: BlueScreen
Response: Not available
Cab Id: 0

Problem signature:
P1: 1a
P2: 783
P3: ffffb7888394e038
P4: ffffcd8ef3d40000
P5: ffff9909c64791e0
P6: 10_0_17134
P7: 0_0
P8: 256_1
P9: 
P10: 

Attached files:
\\?\C:\Windows\Minidump\091518-7843-01.dmp
\\?\C:\Windows\TEMP\WER-12812-0.sysdata.xml
\\?\C:\Windows\MEMORY.DMP
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER3C5D.tmp.WERInternalMetadata.xml
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER3C5E.tmp.xml
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER3C6C.tmp.csv
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER3C7D.tmp.txt

These files may be available here:
C:\ProgramData\Microsoft\Windows\WER\ReportQueue\Kernel_1a_8f704da092b35284d38f2e891f56b433b4524955_00000000_037c3c8c

Analysis symbol: 
Rechecking for solution: 0
Report Id: ac18a89d-32af-4aef-93a5-bef0050c94a8
Report Status: 4
Hashed bucket: 
Cab Guid: 0

liamscor · 16 Sep 2018

Hi zbook,

Many thanks for your response and input. I have followed your steps and pasted the information down below. I have also run both log collection tools for the latest crash. I have uploaded the latest MEMORY.DMP to the Mega link below. You should be able to download it without installing any software. If you cant, then I will upload the files to another provider. I'm also thinking about going to to Windows 10 version 1709, since looking online other people have had a similar issue with 1803. Thanks again for your help.

https://mega.nz/#F!sygl0AxC!peLiUteinJ1gsi0Wa3AqNw

Microsoft Windows [Version 10.0.17134.285]
(c) 2018 Microsoft Corporation. All rights reserved.

C:\Windows\system32>sfc /scannow

Beginning system scan. This process will take some time.

Beginning verification phase of system scan.
Verification 100% complete.

Windows Resource Protection did not find any integrity violations.

C:\Windows\system32>dism /online /cleanup-image /restorehealth

Deployment Image Servicing and Management tool
Version: 10.0.17134.1

Image Version: 10.0.17134.285

[==========================100.0%==========================] The restore operation completed successfully.
The operation completed successfully.

C:\Windows\system32>chkdsk /scan
The type of the file system is NTFS.

Stage 1: Examining basic file system structure ...
208128 file records processed.
File verification completed.
9009 large file records processed.
0 bad file records processed.

Stage 2: Examining file name linkage ...
242 reparse records processed.
283960 index entries processed.
Index verification completed.
0 unindexed files scanned.
0 unindexed files recovered to lost and found.
242 reparse records processed.

Stage 3: Examining security descriptors ...
Security descriptor verification completed.
37917 data files processed.
CHKDSK is verifying Usn Journal...
40379144 USN bytes processed.
Usn Journal verification completed.

Windows has scanned the file system and found no problems.
No further action is required.

487755775 KB total disk space.
68575968 KB in 146826 files.
112740 KB in 37918 indexes.
0 KB in bad sectors.
333975 KB in use by the system.
65536 KB occupied by the log file.
418733092 KB available on disk.

4096 bytes in each allocation unit.
121938943 total allocation units on disk.
104683273 allocation units available on disk.

C:\Windows\system32>powercfg -h off

C:\Windows\system32>

zbook · 16 Sep 2018

The Mega links reports problems with the browsers and wants it software installed to use the tool.

Please use one of these to post share links into the thread:
a) one drive
b) drop box
c) google drive

cwsink · 16 Sep 2018

@zbook,

In Firefox, if you select the files one at a time and right-click you should get a context menu with a Download... option. From there you should see a Standard Download option which worked for me. It doesn't work for me in Edge, though.

zbook · 16 Sep 2018

@cwsink

For the threads it is useful to have one of these three share links as it makes it easier for those viewing the threads.
It takes us time for trial and error to see what does not work and what does work.

Some of the third party software can install PUP.

After a clean install only Edge is automatically installed so it would be best to have the share links to be able to work using Edge and not have viewers have to install other browsers just to view the thread.

If you open any links in the thread that were posted using Edge then one drive, drop box or google drive viewers can usually view the links without problems.

liamscor · 17 Sep 2018

Hi zbook,

In that case I will upload them to google drive, and will share the link. In the meantime, did you get a chance to look at the other information?

Regards,

Liam