Intermediate BSODs when shutting down/restart/sleep/hibernate computer

Page 4 of 9 FirstFirst ... 23456 ... LastLast

  1. Posts : 41,474
    windows 10 professional version 1607 build 14393.969 64 bit
       #31

    1) Uninstall:
    a) Mcafee AV using the applicable uninstall tool:
    http://download.mcafee.com/products/...tches/MCPR.exe

    b) Software related to Carbon Black
    Reason core security software using the applicable uninstall tool:
    Malware scan of cbk7.sys (Carbon Black Core Driver) 5dfa38f63870d7d52eec8fde459b32350a3fb359 - Reason Core Security Labs


    2) After uninstalling all non-Microsoft AV software make sure that Windows defender is on

    3) After one week of computer stability ( no BSOD) then install one of the AV software products. If there are no BSOD for 1 -2 days then install the second AV software to reevaluate computer environment stability/instability. If there are no further BSOD then continue using the AV software. If there are recurrent BSOD then find alternative AV software.



    Code:
    carbonblackk	CarbonBlack Core Driver	\??\c:\windows\system32\drivers\cbk7.sys	Kernel Driver	Yes	System	Running	OK	Normal	No	Yes
    Code:
    mfehidk	McAfee Inc. mfehidk	c:\windows\system32\drivers\mfehidk.sys	Kernel Driver	Yes	Boot	Running	OK	Normal	No	Yes
    Code:
    mfencbdc	McAfee LLC. mfencbdc	c:\windows\system32\drivers\mfencbdc.sys	Kernel Driver	No	Manual	Stopped	OK	Normal	No	No
    Code:
    mfeaack	McAfee Inc. mfeaack	c:\windows\system32\drivers\mfeaack.sys	Kernel Driver	No	Manual	Stopped	OK	Normal	No	No
    Code:
    2018-11-01 09:02	Windows Error Reporting	Fault bucket , type 0
    Event Name: BlueScreen
    Response: Not available
    Cab Id: 0
    
    Problem signature:
    P1: 1000009f
    P2: 4
    P3: 12c
    P4: ffff820d19b3c700
    P5: fffff8036f3d0900
    P6: 10_0_17134
    P7: 0_0
    P8: 256_1
    P9: 
    P10: 
    
    Attached files:
    \\?\C:\WINDOWS\Minidump\110118-7812-01.dmp
    \\?\C:\WINDOWS\TEMP\WER-62500-0.sysdata.xml
    \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER2AC4.tmp.WERInternalMetadata.xml
    \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER2AE4.tmp.xml
    \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER2B41.tmp.csv
    \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER2BA0.tmp.txt
    
    These files may be available here:
    C:\ProgramData\Microsoft\Windows\WER\ReportArchive\Kernel_1000009f_d8fcbb25047a5e44e283bdce4a6a7178a4be3_00000000_cab_48a7df78
    
    Analysis symbol: 
    Rechecking for solution: 0
    Report Id: 046a862b-2658-421e-8465-d2fd1dd87438
    Report Status: 2049
    Hashed bucket: 
    Cab Guid: 0
    2018-11-01 08:20	Windows Error Reporting	Fault bucket , type 0
    Event Name: BlueScreen
    Response: Not available
    Cab Id: 0
    
    Problem signature:
    P1: 1000009f
    P2: 4
    P3: 12c
    P4: ffff820d19b3c700
    P5: fffff8036f3d0900
    P6: 10_0_17134
    P7: 0_0
    P8: 256_1
    P9: 
    P10: 
    
    Attached files:
    \\?\C:\WINDOWS\Minidump\110118-7812-01.dmp
    \\?\C:\WINDOWS\TEMP\WER-62500-0.sysdata.xml
    \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER2AC4.tmp.WERInternalMetadata.xml
    \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER2AE4.tmp.xml
    \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER2B41.tmp.csv
    \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER2BA0.tmp.txt
    
    These files may be available here:
    C:\ProgramData\Microsoft\Windows\WER\ReportQueue\Kernel_1000009f_d8fcbb25047a5e44e283bdce4a6a7178a4be3_00000000_03f52bae
    
    Analysis symbol: 
    Rechecking for solution: 0
    Report Id: 046a862b-2658-421e-8465-d2fd1dd87438
    Report Status: 4
    Hashed bucket: 
    Cab Guid: 0
    2018-10-09 07:10	Windows Error Reporting	Fault bucket , type 0
    Event Name: BlueScreen
    Response: Not available
    Cab Id: 0
    
    Problem signature:
    P1: 1000009f
    P2: 4
    P3: 12c
    P4: ffff878d47817100
    P5: fffff802d89d0900
    P6: 10_0_17134
    P7: 0_0
    P8: 256_1
    P9: 
    P10: 
    
    Attached files:
    \\?\C:\WINDOWS\Minidump\100918-10968-01.dmp
    \\?\C:\WINDOWS\TEMP\WER-86437-0.sysdata.xml
    \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER7CBC.tmp.WERInternalMetadata.xml
    \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER7CCD.tmp.xml
    \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER7D1A.tmp.csv
    \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER7D5A.tmp.txt
    
    These files may be available here:
    C:\ProgramData\Microsoft\Windows\WER\ReportArchive\Kernel_1000009f_7eefbbe6b7c88ad4baa9a67ad3ccd99a6b76d8c_00000000_cab_40c57e33
    
    Analysis symbol: 
    Rechecking for solution: 0
    Report Id: 9f77c36a-099a-47bc-a6f7-d51493889c07
    Report Status: 2049
    Hashed bucket: 
    Cab Guid: 0
    2018-10-09 07:10	Windows Error Reporting	Fault bucket , type 0
    Event Name: BlueScreen
    Response: Not available
    Cab Id: 0
    
    Problem signature:
    P1: 1000009f
    P2: 4
    P3: 12c
    P4: ffff878d47817100
    P5: fffff802d89d0900
    P6: 10_0_17134
    P7: 0_0
    P8: 256_1
    P9: 
    P10: 
    
    Attached files:
    \\?\C:\WINDOWS\Minidump\100918-10968-01.dmp
    \\?\C:\WINDOWS\TEMP\WER-86437-0.sysdata.xml
    \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER7CBC.tmp.WERInternalMetadata.xml
    \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER7CCD.tmp.xml
    \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER7D1A.tmp.csv
    \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER7D5A.tmp.txt
    
    These files may be available here:
    C:\ProgramData\Microsoft\Windows\WER\ReportQueue\Kernel_1000009f_7eefbbe6b7c88ad4baa9a67ad3ccd99a6b76d8c_00000000_00d97d68
    
    Analysis symbol: 
    Rechecking for solution: 0
    Report Id: 9f77c36a-099a-47bc-a6f7-d51493889c07
    Report Status: 4
    Hashed bucket: 
    Cab Guid: 0
    2018-10-21 13:15	Windows Error Reporting	Fault bucket , type 0
    Event Name: BlueScreen
    Response: Not available
    Cab Id: 0
    
    Problem signature:
    P1: 1000009f
    P2: 4
    P3: 12c
    P4: ffff8b8bbe094040
    P5: ffff81020cc37900
    P6: 10_0_17134
    P7: 0_0
    P8: 256_1
    P9: 
    P10: 
    
    Attached files:
    \\?\C:\WINDOWS\Minidump\102118-7421-01.dmp
    \\?\C:\WINDOWS\TEMP\WER-44125-0.sysdata.xml
    \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WERC41B.tmp.WERInternalMetadata.xml
    \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WERC42B.tmp.xml
    \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WERC4A7.tmp.csv
    \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WERC4E7.tmp.txt
    
    These files may be available here:
    C:\ProgramData\Microsoft\Windows\WER\ReportArchive\Kernel_1000009f_b972c0b98d7ea38b11a04fb416aeb446d32a8183_00000000_cab_3448c9a9
    
    Analysis symbol: 
    Rechecking for solution: 0
    Report Id: 2b975695-0474-4854-831c-7a035408ba63
    Report Status: 2051
    Hashed bucket: 
    Cab Guid: 0
    2018-10-21 13:15	Windows Error Reporting	Fault bucket , type 0
    Event Name: BlueScreen
    Response: Not available
    Cab Id: 0
    
    Problem signature:
    P1: 1000009f
    P2: 4
    P3: 12c
    P4: ffff8b8bbe094040
    P5: ffff81020cc37900
    P6: 10_0_17134
    P7: 0_0
    P8: 256_1
    P9: 
    P10: 
    
    Attached files:
    \\?\C:\WINDOWS\Minidump\102118-7421-01.dmp
    \\?\C:\WINDOWS\TEMP\WER-44125-0.sysdata.xml
    \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WERC41B.tmp.WERInternalMetadata.xml
    \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WERC42B.tmp.xml
    \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WERC4A7.tmp.csv
    \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WERC4E7.tmp.txt
    
    These files may be available here:
    C:\ProgramData\Microsoft\Windows\WER\ReportQueue\Kernel_1000009f_b972c0b98d7ea38b11a04fb416aeb446d32a8183_00000000_03f4c4f5
    
    Analysis symbol: 
    Rechecking for solution: 0
    Report Id: 2b975695-0474-4854-831c-7a035408ba63
    Report Status: 4
    Hashed bucket: 
    Cab Guid: 0
    2018-10-10 06:34	Windows Error Reporting	Fault bucket , type 0
    Event Name: BlueScreen
    Response: Not available
    Cab Id: 0
    
    Problem signature:
    P1: 1000009f
    P2: 4
    P3: 12c
    P4: ffff958d1c167040
    P5: fffff800b25d0900
    P6: 10_0_17134
    P7: 0_0
    P8: 256_1
    P9: 
    P10: 
    
    Attached files:
    \\?\C:\WINDOWS\Minidump\101018-7890-01.dmp
    \\?\C:\WINDOWS\TEMP\WER-24656-0.sysdata.xml
    \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER72AF.tmp.WERInternalMetadata.xml
    \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER72C0.tmp.xml
    \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER72DE.tmp.csv
    \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER72FE.tmp.txt
    
    These files may be available here:
    C:\ProgramData\Microsoft\Windows\WER\ReportArchive\Kernel_1000009f_b4260dba46efd4eff64ae43146c5e3447716_00000000_cab_275c7407
    
    Analysis symbol: 
    Rechecking for solution: 0
    Report Id: fd19053f-8820-47df-a4c3-a59f04020c9f
    Report Status: 2051
    Hashed bucket: 
    Cab Guid: 0
    2018-10-10 06:34	Windows Error Reporting	Fault bucket , type 0
    Event Name: BlueScreen
    Response: Not available
    Cab Id: 0
    
    Problem signature:
    P1: 1000009f
    P2: 4
    P3: 12c
    P4: ffff958d1c167040
    P5: fffff800b25d0900
    P6: 10_0_17134
    P7: 0_0
    P8: 256_1
    P9: 
    P10: 
    
    Attached files:
    \\?\C:\WINDOWS\Minidump\101018-7890-01.dmp
    \\?\C:\WINDOWS\TEMP\WER-24656-0.sysdata.xml
    \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER72AF.tmp.WERInternalMetadata.xml
    \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER72C0.tmp.xml
    \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER72DE.tmp.csv
    \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER72FE.tmp.txt
    
    These files may be available here:
    C:\ProgramData\Microsoft\Windows\WER\ReportQueue\Kernel_1000009f_b4260dba46efd4eff64ae43146c5e3447716_00000000_01e472fd
    
    Analysis symbol: 
    Rechecking for solution: 0
    Report Id: fd19053f-8820-47df-a4c3-a59f04020c9f
    Report Status: 4
    Hashed bucket: 
    Cab Guid: 0
    2018-11-01 12:14	Windows Error Reporting	Fault bucket , type 0
    Event Name: BlueScreen
    Response: Not available
    Cab Id: 0
    
    Problem signature:
    P1: 1000009f
    P2: 4
    P3: 12c
    P4: ffff9a0c371e2040
    P5: fffff80010bd0900
    P6: 10_0_17134
    P7: 0_0
    P8: 256_1
    P9: 
    P10: 
    
    Attached files:
    \\?\C:\WINDOWS\Minidump\110118-7468-01.dmp
    \\?\C:\WINDOWS\TEMP\WER-78171-0.sysdata.xml
    \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER728B.tmp.WERInternalMetadata.xml
    \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER72BB.tmp.xml
    \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER746F.tmp.csv
    \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER74ED.tmp.txt
    
    These files may be available here:
    C:\ProgramData\Microsoft\Windows\WER\ReportArchive\Kernel_1000009f_724ea09b93bbeed08cc2dc8a112a71b4f8653ecd_00000000_cab_0a057e43
    
    Analysis symbol: 
    Rechecking for solution: 0
    Report Id: 585bcfa7-8659-437d-ad9a-3ece8010bbfb
    Report Status: 2049
    Hashed bucket: 
    Cab Guid: 0
    2018-11-01 12:14	Windows Error Reporting	Fault bucket , type 0
    Event Name: BlueScreen
    Response: Not available
    Cab Id: 0
    
    Problem signature:
    P1: 1000009f
    P2: 4
    P3: 12c
    P4: ffff9a0c371e2040
    P5: fffff80010bd0900
    P6: 10_0_17134
    P7: 0_0
    P8: 256_1
    P9: 
    P10: 
    
    Attached files:
    \\?\C:\WINDOWS\Minidump\110118-7468-01.dmp
    \\?\C:\WINDOWS\TEMP\WER-78171-0.sysdata.xml
    \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER728B.tmp.WERInternalMetadata.xml
    \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER72BB.tmp.xml
    \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER746F.tmp.csv
    \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER74ED.tmp.txt
    
    These files may be available here:
    C:\ProgramData\Microsoft\Windows\WER\ReportQueue\Kernel_1000009f_724ea09b93bbeed08cc2dc8a112a71b4f8653ecd_00000000_03f574fc
    
    Analysis symbol: 
    Rechecking for solution: 0
    Report Id: 585bcfa7-8659-437d-ad9a-3ece8010bbfb
    Report Status: 4
    Hashed bucket: 
    Cab Guid: 0
    2018-10-22 08:58	Windows Error Reporting	Fault bucket , type 0
    Event Name: BlueScreen
    Response: Not available
    Cab Id: 0
    
    Problem signature:
    P1: 1000009f
    P2: 4
    P3: 12c
    P4: ffff9f871428c040
    P5: fffff800d9dd0900
    P6: 10_0_17134
    P7: 0_0
    P8: 256_1
    P9: 
    P10: 
    
    Attached files:
    \\?\C:\WINDOWS\Minidump\102218-7796-01.dmp
    \\?\C:\WINDOWS\TEMP\WER-53546-0.sysdata.xml
    \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WERE66A.tmp.WERInternalMetadata.xml
    \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WERE67B.tmp.xml
    \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WERE67A.tmp.csv
    \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WERE6B9.tmp.txt
    
    These files may be available here:
    C:\ProgramData\Microsoft\Windows\WER\ReportArchive\Kernel_1000009f_6bb11f8e2d699129b24f88b84b10d94be4a5ef_00000000_cab_3fd4e956
    
    Analysis symbol: 
    Rechecking for solution: 0
    Report Id: d52a8e85-cdcd-4201-8846-8ce436ccf31e
    Report Status: 2051
    Hashed bucket: 
    Cab Guid: 0
    2018-10-22 08:58	Windows Error Reporting	Fault bucket , type 0
    Event Name: BlueScreen
    Response: Not available
    Cab Id: 0
    
    Problem signature:
    P1: 1000009f
    P2: 4
    P3: 12c
    P4: ffff9f871428c040
    P5: fffff800d9dd0900
    P6: 10_0_17134
    P7: 0_0
    P8: 256_1
    P9: 
    P10: 
    
    Attached files:
    \\?\C:\WINDOWS\Minidump\102218-7796-01.dmp
    \\?\C:\WINDOWS\TEMP\WER-53546-0.sysdata.xml
    \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WERE66A.tmp.WERInternalMetadata.xml
    \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WERE67B.tmp.xml
    \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WERE67A.tmp.csv
    \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WERE6B9.tmp.txt
    
    These files may be available here:
    C:\ProgramData\Microsoft\Windows\WER\ReportQueue\Kernel_1000009f_6bb11f8e2d699129b24f88b84b10d94be4a5ef_00000000_03ece6c6
    
    Analysis symbol: 
    Rechecking for solution: 0
    Report Id: d52a8e85-cdcd-4201-8846-8ce436ccf31e
    Report Status: 4
    Hashed bucket: 
    Cab Guid: 0
    2018-08-27 11:33	Windows Error Reporting	Fault bucket , type 0
    Event Name: BlueScreen
    Response: Not available
    Cab Id: 0
    
    Problem signature:
    P1: 1000009f
    P2: 4
    P3: 12c
    P4: ffffc703a9586700
    P5: ffffac0497a37900
    P6: 10_0_17134
    P7: 0_0
    P8: 256_1
    P9: 
    P10: 
    
    Attached files:
    \\?\C:\WINDOWS\Minidump\082718-7562-01.dmp
    \\?\C:\WINDOWS\TEMP\WER-19421-0.sysdata.xml
    \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER7407.tmp.WERInternalMetadata.xml
    \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER7417.tmp.xml
    \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER7455.tmp.csv
    \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER7475.tmp.txt
    
    These files may be available here:
    C:\ProgramData\Microsoft\Windows\WER\ReportArchive\Kernel_1000009f_64617532ba7d83a9d9d8f8b76122255720526d2_00000000_cab_05b0cb7f
    
    Analysis symbol: 
    Rechecking for solution: 0
    Report Id: 1d462e56-c75e-4566-b45c-0ba4eda51b61
    Report Status: 2049
    Hashed bucket: 
    Cab Guid: 0
    2018-08-27 10:14	Windows Error Reporting	Fault bucket , type 0
    Event Name: BlueScreen
    Response: Not available
    Cab Id: 0
    
    Problem signature:
    P1: 1000009f
    P2: 4
    P3: 12c
    P4: ffffc703a9586700
    P5: ffffac0497a37900
    P6: 10_0_17134
    P7: 0_0
    P8: 256_1
    P9: 
    P10: 
    
    Attached files:
    \\?\C:\WINDOWS\Minidump\082718-7562-01.dmp
    \\?\C:\WINDOWS\TEMP\WER-19421-0.sysdata.xml
    \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER7407.tmp.WERInternalMetadata.xml
    \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER7417.tmp.xml
    \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER7455.tmp.csv
    \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER7475.tmp.txt
    
    These files may be available here:
    C:\ProgramData\Microsoft\Windows\WER\ReportQueue\Kernel_1000009f_64617532ba7d83a9d9d8f8b76122255720526d2_00000000_03f47484
    
    Analysis symbol: 
    Rechecking for solution: 0
    Report Id: 1d462e56-c75e-4566-b45c-0ba4eda51b61
    Report Status: 4
    Hashed bucket: 
    Cab Guid: 0
    2018-09-07 07:14	Windows Error Reporting	Fault bucket , type 0
    Event Name: BlueScreen
    Response: Not available
    Cab Id: 0
    
    Problem signature:
    P1: 1000009f
    P2: 4
    P3: 12c
    P4: ffffcf013e90a700
    P5: ffff830301637900
    P6: 10_0_17134
    P7: 0_0
    P8: 256_1
    P9: 
    P10: 
    
    Attached files:
    \\?\C:\WINDOWS\Minidump\090718-7265-01.dmp
    \\?\C:\WINDOWS\TEMP\WER-20875-0.sysdata.xml
    \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER7128.tmp.WERInternalMetadata.xml
    \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER7139.tmp.xml
    \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER7167.tmp.csv
    \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER7177.tmp.txt
    
    These files may be available here:
    C:\ProgramData\Microsoft\Windows\WER\ReportArchive\Kernel_1000009f_82c3a9938482dea97e17dd5c8dacb35cede3045_00000000_cab_23a083f5
    
    Analysis symbol: 
    Rechecking for solution: 0
    Report Id: 4ef00c6c-dc06-420e-8618-c79ea9758e48
    Report Status: 2049
    Hashed bucket: 
    Cab Guid: 0
    2018-09-07 07:14	Windows Error Reporting	Fault bucket , type 0
    Event Name: BlueScreen
    Response: Not available
    Cab Id: 0
    
    Problem signature:
    P1: 1000009f
    P2: 4
    P3: 12c
    P4: ffffcf013e90a700
    P5: ffff830301637900
    P6: 10_0_17134
    P7: 0_0
    P8: 256_1
    P9: 
    P10: 
    
    Attached files:
    \\?\C:\WINDOWS\Minidump\090718-7265-01.dmp
    \\?\C:\WINDOWS\TEMP\WER-20875-0.sysdata.xml
    \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER7128.tmp.WERInternalMetadata.xml
    \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER7139.tmp.xml
    \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER7167.tmp.csv
    \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER7177.tmp.txt
    
    These files may be available here:
    C:\ProgramData\Microsoft\Windows\WER\ReportQueue\Kernel_1000009f_82c3a9938482dea97e17dd5c8dacb35cede3045_00000000_03ec7186
    
    Analysis symbol: 
    Rechecking for solution: 0
    Report Id: 4ef00c6c-dc06-420e-8618-c79ea9758e48
    Report Status: 4
    Hashed bucket: 
    Cab Guid: 0
    2018-09-28 13:59	Windows Error Reporting	Fault bucket , type 0
    Event Name: BlueScreen
    Response: Not available
    Cab Id: 0
    
    Problem signature:
    P1: 1000009f
    P2: 4
    P3: 12c
    P4: ffffdd8166ef4700
    P5: fffff802dafd0900
    P6: 10_0_17134
    P7: 0_0
    P8: 256_1
    P9: 
    P10: 
    
    Attached files:
    \\?\C:\WINDOWS\Minidump\092818-7375-01.dmp
    \\?\C:\WINDOWS\TEMP\WER-44640-0.sysdata.xml
    \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WERC227.tmp.WERInternalMetadata.xml
    \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WERC247.tmp.xml
    \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WERC294.tmp.csv
    \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WERC2D4.tmp.txt
    
    These files may be available here:
    C:\ProgramData\Microsoft\Windows\WER\ReportArchive\Kernel_1000009f_327d055d23e84f746a9a7347ef1fb47d66985_00000000_cab_3a9cc43a
    
    Analysis symbol: 
    Rechecking for solution: 0
    Report Id: 31e856a3-f0b8-4e8e-8158-e2137a47fc82
    Report Status: 2049
    Hashed bucket: 
    Cab Guid: 0
    2018-09-28 13:59	Windows Error Reporting	Fault bucket , type 0
    Event Name: BlueScreen
    Response: Not available
    Cab Id: 0
    
    Problem signature:
    P1: 1000009f
    P2: 4
    P3: 12c
    P4: ffffdd8166ef4700
    P5: fffff802dafd0900
    P6: 10_0_17134
    P7: 0_0
    P8: 256_1
    P9: 
    P10: 
    
    Attached files:
    \\?\C:\WINDOWS\Minidump\092818-7375-01.dmp
    \\?\C:\WINDOWS\TEMP\WER-44640-0.sysdata.xml
    \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WERC227.tmp.WERInternalMetadata.xml
    \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WERC247.tmp.xml
    \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WERC294.tmp.csv
    \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WERC2D4.tmp.txt
    
    These files may be available here:
    C:\ProgramData\Microsoft\Windows\WER\ReportQueue\Kernel_1000009f_327d055d23e84f746a9a7347ef1fb47d66985_00000000_03ecc2e2
    
    Analysis symbol: 
    Rechecking for solution: 0
    Report Id: 31e856a3-f0b8-4e8e-8158-e2137a47fc82
    Report Status: 4
    Hashed bucket: 
    Cab Guid: 0
    2018-10-19 12:25	Windows Error Reporting	Fault bucket , type 0
    Event Name: BlueScreen
    Response: Not available
    Cab Id: 0
    
    Problem signature:
    P1: 1000009f
    P2: 4
    P3: 12c
    P4: ffffe08544155040
    P5: fffff8031d9d0900
    P6: 10_0_17134
    P7: 0_0
    P8: 256_1
    P9: 
    P10: 
    
    Attached files:
    \\?\C:\WINDOWS\Minidump\101918-7281-01.dmp
    \\?\C:\WINDOWS\TEMP\WER-38984-0.sysdata.xml
    \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WERC17B.tmp.WERInternalMetadata.xml
    \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WERC1BA.tmp.xml
    \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WERC246.tmp.csv
    \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WERC276.tmp.txt
    
    These files may be available here:
    C:\ProgramData\Microsoft\Windows\WER\ReportArchive\Kernel_1000009f_c0a3f9ce1abf614cb0e7d9306969b7adf7da2e4_00000000_cab_2bdcc766
    
    Analysis symbol: 
    Rechecking for solution: 0
    Report Id: 9617bb30-7331-4ee3-a93c-c28c61d51b39
    Report Status: 2051
    Hashed bucket: 
    Cab Guid: 0
    2018-10-19 12:25	Windows Error Reporting	Fault bucket , type 0
    Event Name: BlueScreen
    Response: Not available
    Cab Id: 0
    
    Problem signature:
    P1: 1000009f
    P2: 4
    P3: 12c
    P4: ffffe08544155040
    P5: fffff8031d9d0900
    P6: 10_0_17134
    P7: 0_0
    P8: 256_1
    P9: 
    P10: 
    
    Attached files:
    \\?\C:\WINDOWS\Minidump\101918-7281-01.dmp
    \\?\C:\WINDOWS\TEMP\WER-38984-0.sysdata.xml
    \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WERC17B.tmp.WERInternalMetadata.xml
    \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WERC1BA.tmp.xml
    \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WERC246.tmp.csv
    \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WERC276.tmp.txt
    
    These files may be available here:
    C:\ProgramData\Microsoft\Windows\WER\ReportQueue\Kernel_1000009f_c0a3f9ce1abf614cb0e7d9306969b7adf7da2e4_00000000_03ccc294
    
    Analysis symbol: 
    Rechecking for solution: 0
    Report Id: 9617bb30-7331-4ee3-a93c-c28c61d51b39
    Report Status: 4
    Hashed bucket: 
    Cab Guid: 0
    2018-10-19 07:53	Windows Error Reporting	Fault bucket , type 0
    Event Name: BlueScreen
    Response: Not available
    Cab Id: 0
    
    Problem signature:
    P1: 1000009f
    P2: 4
    P3: 12c
    P4: ffffe309ba7d4700
    P5: ffff878133c37900
    P6: 10_0_17134
    P7: 0_0
    P8: 256_1
    P9: 
    P10: 
    
    Attached files:
    \\?\C:\WINDOWS\Minidump\101918-7578-01.dmp
    \\?\C:\WINDOWS\TEMP\WER-57468-0.sysdata.xml
    \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER50C.tmp.WERInternalMetadata.xml
    \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER51C.tmp.xml
    \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER54A.tmp.csv
    \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER57A.tmp.txt
    
    These files may be available here:
    C:\ProgramData\Microsoft\Windows\WER\ReportArchive\Kernel_1000009f_76507dced4408ef3666aca575d9cd9596c557b_00000000_cab_46810644
    
    Analysis symbol: 
    Rechecking for solution: 0
    Report Id: 3b6ccbb0-494a-451a-aacd-8a3548504390
    Report Status: 2049
    Hashed bucket: 
    Cab Guid: 0
    2018-10-19 07:53	Windows Error Reporting	Fault bucket , type 0
    Event Name: BlueScreen
    Response: Not available
    Cab Id: 0
    
    Problem signature:
    P1: 1000009f
    P2: 4
    P3: 12c
    P4: ffffe309ba7d4700
    P5: ffff878133c37900
    P6: 10_0_17134
    P7: 0_0
    P8: 256_1
    P9: 
    P10: 
    
    Attached files:
    \\?\C:\WINDOWS\Minidump\101918-7578-01.dmp
    \\?\C:\WINDOWS\TEMP\WER-57468-0.sysdata.xml
    \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER50C.tmp.WERInternalMetadata.xml
    \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER51C.tmp.xml
    \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER54A.tmp.csv
    \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER57A.tmp.txt
    
    These files may be available here:
    C:\ProgramData\Microsoft\Windows\WER\ReportQueue\Kernel_1000009f_76507dced4408ef3666aca575d9cd9596c557b_00000000_03c50579
    
    Analysis symbol: 
    Rechecking for solution: 0
    Report Id: 3b6ccbb0-494a-451a-aacd-8a3548504390
    Report Status: 4
    Hashed bucket: 
    Cab Guid: 0
    2018-10-25 09:10	Windows Error Reporting	Fault bucket , type 0
    Event Name: BlueScreen
    Response: Not available
    Cab Id: 0
    
    Problem signature:
    P1: 139
    P2: 3
    P3: ffff9689e98fb660
    P4: ffff9689e98fb5b8
    P5: 0
    P6: 10_0_17134
    P7: 0_0
    P8: 256_1
    P9: 
    P10: 
    
    Attached files:
    \\?\C:\WINDOWS\Minidump\102518-8500-01.dmp
    \\?\C:\WINDOWS\TEMP\WER-90531-0.sysdata.xml
    \\?\C:\WINDOWS\MEMORY.DMP
    \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER7B74.tmp.WERInternalMetadata.xml
    \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER7B85.tmp.xml
    
    These files may be available here:
    C:\ProgramData\Microsoft\Windows\WER\ReportArchive\Kernel_139_baea197593bc442a58c0c384e863f881a87c18_00000000_cab_33ed5ce0
    
    Analysis symbol: 
    Rechecking for solution: 0
    Report Id: 28d59bc9-2e5b-4259-acf4-bf0eec32a2ad
    Report Status: 2049
    Hashed bucket: 
    Cab Guid: 0
    2018-09-26 08:01	Windows Error Reporting	Fault bucket , type 0
    Event Name: BlueScreen
    Response: Not available
    Cab Id: 0
    
    Problem signature:
    P1: 9f
    P2: 3
    P3: ffff838dcfa06060
    P4: fffff8031a9d08d0
    P5: ffff838dde883800
    P6: 10_0_17134
    P7: 0_0
    P8: 256_1
    P9: 
    P10: 
    
    Attached files:
    \\?\C:\WINDOWS\Minidump\092618-8437-01.dmp
    \\?\C:\WINDOWS\TEMP\WER-31406-0.sysdata.xml
    \\?\C:\WINDOWS\MEMORY.DMP
    \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER924D.tmp.WERInternalMetadata.xml
    \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER926D.tmp.xml
    \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER929B.tmp.csv
    \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER92BB.tmp.txt
    
    These files may be available here:
    C:\ProgramData\Microsoft\Windows\WER\ReportArchive\Kernel_9f_f4d7c6515524949a5d6e3995243ff14b5490a2_00000000_cab_39ab3e0a
    
    Analysis symbol: 
    Rechecking for solution: 0
    Report Id: f6a37008-ffcd-46ed-9552-a88b4a0aa635
    Report Status: 2049
    Hashed bucket: 
    Cab Guid: 0
    2018-09-26 07:03	Windows Error Reporting	Fault bucket , type 0
    Event Name: BlueScreen
    Response: Not available
    Cab Id: 0
    
    Problem signature:
    P1: 9f
    P2: 3
    P3: ffff838dcfa06060
    P4: fffff8031a9d08d0
    P5: ffff838dde883800
    P6: 10_0_17134
    P7: 0_0
    P8: 256_1
    P9: 
    P10: 
    
    Attached files:
    \\?\C:\WINDOWS\Minidump\092618-8437-01.dmp
    \\?\C:\WINDOWS\TEMP\WER-31406-0.sysdata.xml
    \\?\C:\WINDOWS\MEMORY.DMP
    \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER924D.tmp.WERInternalMetadata.xml
    \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER926D.tmp.xml
    \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER929B.tmp.csv
    \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER92BB.tmp.txt
    
    These files may be available here:
    C:\ProgramData\Microsoft\Windows\WER\ReportQueue\Kernel_9f_f4d7c6515524949a5d6e3995243ff14b5490a2_00000000_03f892ca
    
    Analysis symbol: 
    Rechecking for solution: 0
    Report Id: f6a37008-ffcd-46ed-9552-a88b4a0aa635
    Report Status: 4
    Hashed bucket: 
    Cab Guid: 0
    2018-10-31 08:12	Windows Error Reporting	Fault bucket , type 0
    Event Name: BlueScreen
    Response: Not available
    Cab Id: 0
    
    Problem signature:
    P1: 9f
    P2: 3
    P3: ffff878c4462a060
    P4: ffff810286c6f8d0
    P5: ffff878c5a66a570
    P6: 10_0_17134
    P7: 0_0
    P8: 256_1
    P9: 
    P10: 
    
    Attached files:
    \\?\C:\WINDOWS\Minidump\103118-10000-01.dmp
    \\?\C:\WINDOWS\TEMP\WER-101406-0.sysdata.xml
    \\?\C:\WINDOWS\MEMORY.DMP
    \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WERB4A5.tmp.WERInternalMetadata.xml
    \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WERB4C5.tmp.xml
    \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WERB512.tmp.csv
    \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WERB561.tmp.txt
    
    These files may be available here:
    C:\ProgramData\Microsoft\Windows\WER\ReportArchive\Kernel_9f_7ea4c26c6bcd9f490f16f59ac4e823475b4ef4b_00000000_cab_3755b88d
    
    Analysis symbol: 
    Rechecking for solution: 0
    Report Id: de13f96b-f46e-432d-b67a-0a73f729fd39
    Report Status: 2049
    Hashed bucket: 
    Cab Guid: 0
    2018-10-31 08:12	Windows Error Reporting	Fault bucket , type 0
    Event Name: BlueScreen
    Response: Not available
    Cab Id: 0
    
    Problem signature:
    P1: 9f
    P2: 3
    P3: ffff878c4462a060
    P4: ffff810286c6f8d0
    P5: ffff878c5a66a570
    P6: 10_0_17134
    P7: 0_0
    P8: 256_1
    P9: 
    P10: 
    
    Attached files:
    \\?\C:\WINDOWS\Minidump\103118-10000-01.dmp
    \\?\C:\WINDOWS\TEMP\WER-101406-0.sysdata.xml
    \\?\C:\WINDOWS\MEMORY.DMP
    \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WERB4A5.tmp.WERInternalMetadata.xml
    \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WERB4C5.tmp.xml
    \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WERB512.tmp.csv
    \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WERB561.tmp.txt
    
    These files may be available here:
    C:\ProgramData\Microsoft\Windows\WER\ReportQueue\Kernel_9f_7ea4c26c6bcd9f490f16f59ac4e823475b4ef4b_00000000_03fdb570
    
    Analysis symbol: 
    Rechecking for solution: 0
    Report Id: de13f96b-f46e-432d-b67a-0a73f729fd39
    Report Status: 4
    Hashed bucket: 
    Cab Guid: 0
    2018-10-24 07:08	Windows Error Reporting	Fault bucket , type 0
    Event Name: BlueScreen
    Response: Not available
    Cab Id: 0
    
    Problem signature:
    P1: 9f
    P2: 3
    P3: ffff8d85c6c0a060
    P4: fffffd0ed8a538d0
    P5: ffff8d85e4b6d450
    P6: 10_0_17134
    P7: 0_0
    P8: 256_1
    P9: 
    P10: 
    
    Attached files:
    \\?\C:\WINDOWS\Minidump\102418-10531-01.dmp
    \\?\C:\WINDOWS\TEMP\WER-39625-0.sysdata.xml
    \\?\C:\WINDOWS\MEMORY.DMP
    \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WERABD0.tmp.WERInternalMetadata.xml
    \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WERAC00.tmp.xml
    \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WERAC2E.tmp.csv
    \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WERAC3E.tmp.txt
    
    These files may be available here:
    C:\ProgramData\Microsoft\Windows\WER\ReportArchive\Kernel_9f_722e1ab8b411565c1b9675893f8ded93f3103857_00000000_cab_1ec0ad08
    
    Analysis symbol: 
    Rechecking for solution: 0
    Report Id: 59da323e-d1a8-4cd7-a542-2b349682a9f5
    Report Status: 2049
    Hashed bucket: 
    Cab Guid: 0
    2018-10-24 07:08	Windows Error Reporting	Fault bucket , type 0
    Event Name: BlueScreen
    Response: Not available
    Cab Id: 0
    
    Problem signature:
    P1: 9f
    P2: 3
    P3: ffff8d85c6c0a060
    P4: fffffd0ed8a538d0
    P5: ffff8d85e4b6d450
    P6: 10_0_17134
    P7: 0_0
    P8: 256_1
    P9: 
    P10: 
    
    Attached files:
    \\?\C:\WINDOWS\Minidump\102418-10531-01.dmp
    \\?\C:\WINDOWS\TEMP\WER-39625-0.sysdata.xml
    \\?\C:\WINDOWS\MEMORY.DMP
    \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WERABD0.tmp.WERInternalMetadata.xml
    \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WERAC00.tmp.xml
    \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WERAC2E.tmp.csv
    \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WERAC3E.tmp.txt
    
    These files may be available here:
    C:\ProgramData\Microsoft\Windows\WER\ReportQueue\Kernel_9f_722e1ab8b411565c1b9675893f8ded93f3103857_00000000_03f0ac4d
    
    Analysis symbol: 
    Rechecking for solution: 0
    Report Id: 59da323e-d1a8-4cd7-a542-2b349682a9f5
    Report Status: 4
    Hashed bucket: 
    Cab Guid: 0
    2018-10-18 07:45	Windows Error Reporting	Fault bucket , type 0
    Event Name: BlueScreen
    Response: Not available
    Cab Id: 0
    
    Problem signature:
    P1: 9f
    P2: 3
    P3: ffff9001afe06060
    P4: fffff487236538d0
    P5: ffff9001afa80b40
    P6: 10_0_17134
    P7: 0_0
    P8: 256_1
    P9: 
    P10: 
    
    Attached files:
    \\?\C:\WINDOWS\Minidump\101818-10671-01.dmp
    \\?\C:\WINDOWS\TEMP\WER-32468-0.sysdata.xml
    \\?\C:\WINDOWS\MEMORY.DMP
    \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WERC803.tmp.WERInternalMetadata.xml
    \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WERC823.tmp.xml
    \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WERC851.tmp.csv
    \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WERC881.tmp.txt
    
    These files may be available here:
    C:\ProgramData\Microsoft\Windows\WER\ReportArchive\Kernel_9f_c32e15c422b511580c3dc6bf795012d6f1fb97_00000000_cab_59b6422d
    
    Analysis symbol: 
    Rechecking for solution: 0
    Report Id: 50121244-94ac-4d27-8c5a-12ef4e3d2294
    Report Status: 2049
    Hashed bucket: 
    Cab Guid: 0
    2018-10-18 06:59	Windows Error Reporting	Fault bucket , type 0
    Event Name: BlueScreen
    Response: Not available
    Cab Id: 0
    
    Problem signature:
    P1: 9f
    P2: 3
    P3: ffff9001afe06060
    P4: fffff487236538d0
    P5: ffff9001afa80b40
    P6: 10_0_17134
    P7: 0_0
    P8: 256_1
    P9: 
    P10: 
    
    Attached files:
    \\?\C:\WINDOWS\Minidump\101818-10671-01.dmp
    \\?\C:\WINDOWS\TEMP\WER-32468-0.sysdata.xml
    \\?\C:\WINDOWS\MEMORY.DMP
    \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WERC803.tmp.WERInternalMetadata.xml
    \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WERC823.tmp.xml
    \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WERC851.tmp.csv
    \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WERC881.tmp.txt
    
    These files may be available here:
    C:\ProgramData\Microsoft\Windows\WER\ReportQueue\Kernel_9f_c32e15c422b511580c3dc6bf795012d6f1fb97_00000000_03f8c88f
    
    Analysis symbol: 
    Rechecking for solution: 0
    Report Id: 50121244-94ac-4d27-8c5a-12ef4e3d2294
    Report Status: 4
    Hashed bucket: 
    Cab Guid: 0
    2018-10-12 15:26	Windows Error Reporting	Fault bucket , type 0
    Event Name: BlueScreen
    Response: Not available
    Cab Id: 0
    
    Problem signature:
    P1: 9f
    P2: 3
    P3: ffff97874fa4a060
    P4: fffff800dbfd08d0
    P5: ffff978758d5eb60
    P6: 10_0_17134
    P7: 0_0
    P8: 256_1
    P9: 
    P10: 
    
    Attached files:
    \\?\C:\WINDOWS\Minidump\101218-43953-01.dmp
    \\?\C:\WINDOWS\TEMP\WER-105625-0.sysdata.xml
    \\?\C:\WINDOWS\MEMORY.DMP
    \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WERB65A.tmp.WERInternalMetadata.xml
    \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WERB66B.tmp.xml
    \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WERB6A8.tmp.csv
    \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WERB6D8.tmp.txt
    
    These files may be available here:
    C:\ProgramData\Microsoft\Windows\WER\ReportArchive\Kernel_9f_da6955597ba682c11d2709665fe78fa08ec9d0_00000000_cab_0a91d5d9
    
    Analysis symbol: 
    Rechecking for solution: 0
    Report Id: 2602876b-04d6-4b94-ba09-1bf63d204e21
    Report Status: 2051
    Hashed bucket: 
    Cab Guid: 0
    2018-10-12 15:26	Windows Error Reporting	Fault bucket , type 0
    Event Name: BlueScreen
    Response: Not available
    Cab Id: 0
    
    Problem signature:
    P1: 9f
    P2: 3
    P3: ffff97874fa4a060
    P4: fffff800dbfd08d0
    P5: ffff978758d5eb60
    P6: 10_0_17134
    P7: 0_0
    P8: 256_1
    P9: 
    P10: 
    
    Attached files:
    \\?\C:\WINDOWS\Minidump\101218-43953-01.dmp
    \\?\C:\WINDOWS\TEMP\WER-105625-0.sysdata.xml
    \\?\C:\WINDOWS\MEMORY.DMP
    \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WERB65A.tmp.WERInternalMetadata.xml
    \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WERB66B.tmp.xml
    \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WERB6A8.tmp.csv
    \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WERB6D8.tmp.txt
    
    These files may be available here:
    C:\ProgramData\Microsoft\Windows\WER\ReportQueue\Kernel_9f_da6955597ba682c11d2709665fe78fa08ec9d0_00000000_0061b6d7
    
    Analysis symbol: 
    Rechecking for solution: 0
    Report Id: 2602876b-04d6-4b94-ba09-1bf63d204e21
    Report Status: 4
    Hashed bucket: 
    Cab Guid: 0
    2018-09-10 07:29	Windows Error Reporting	Fault bucket , type 0
    Event Name: BlueScreen
    Response: Not available
    Cab Id: 0
    
    Problem signature:
    P1: 9f
    P2: 3
    P3: ffff9903ca00f060
    P4: ffffb687c4c7d8d0
    P5: ffff9903d26efb80
    P6: 10_0_17134
    P7: 0_0
    P8: 256_1
    P9: 
    P10: 
    
    Attached files:
    \\?\C:\WINDOWS\Minidump\091018-7156-01.dmp
    \\?\C:\WINDOWS\TEMP\WER-47187-0.sysdata.xml
    \\?\C:\WINDOWS\MEMORY.DMP
    \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WERCCF4.tmp.WERInternalMetadata.xml
    \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WERCD05.tmp.xml
    \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WERCD33.tmp.csv
    \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WERCD43.tmp.txt
    
    These files may be available here:
    C:\ProgramData\Microsoft\Windows\WER\ReportArchive\Kernel_9f_19836858c46ae86b2f27798b231f9f82344f2247_00000000_cab_1f4cd011
    
    Analysis symbol: 
    Rechecking for solution: 0
    Report Id: c17c00b1-e973-421b-91e7-bbe89870ae1a
    Report Status: 2049
    Hashed bucket: 
    Cab Guid: 0
    2018-09-10 07:29	Windows Error Reporting	Fault bucket , type 0
    Event Name: BlueScreen
    Response: Not available
    Cab Id: 0
    
    Problem signature:
    P1: 9f
    P2: 3
    P3: ffff9903ca00f060
    P4: ffffb687c4c7d8d0
    P5: ffff9903d26efb80
    P6: 10_0_17134
    P7: 0_0
    P8: 256_1
    P9: 
    P10: 
    
    Attached files:
    \\?\C:\WINDOWS\Minidump\091018-7156-01.dmp
    \\?\C:\WINDOWS\TEMP\WER-47187-0.sysdata.xml
    \\?\C:\WINDOWS\MEMORY.DMP
    \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WERCCF4.tmp.WERInternalMetadata.xml
    \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WERCD05.tmp.xml
    \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WERCD33.tmp.csv
    \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WERCD43.tmp.txt
    
    These files may be available here:
    C:\ProgramData\Microsoft\Windows\WER\ReportQueue\Kernel_9f_19836858c46ae86b2f27798b231f9f82344f2247_00000000_03eccd52
    
    Analysis symbol: 
    Rechecking for solution: 0
    Report Id: c17c00b1-e973-421b-91e7-bbe89870ae1a
    Report Status: 4
    Hashed bucket: 
    Cab Guid: 0
    2018-08-20 07:00	Windows Error Reporting	Fault bucket , type 0
    Event Name: BlueScreen
    Response: Not available
    Cab Id: 0
    
    Problem signature:
    P1: 9f
    P2: 3
    P3: ffffa884b5c81060
    P4: fffff287d26538d0
    P5: ffffa884c5f0e3b0
    P6: 10_0_17134
    P7: 0_0
    P8: 256_1
    P9: 
    P10: 
    
    Attached files:
    \\?\C:\WINDOWS\Minidump\082018-7578-01.dmp
    \\?\C:\WINDOWS\TEMP\WER-70812-0.sysdata.xml
    \\?\C:\WINDOWS\MEMORY.DMP
    \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER33FF.tmp.WERInternalMetadata.xml
    \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER3410.tmp.xml
    \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER340F.tmp.csv
    \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER344E.tmp.txt
    
    These files may be available here:
    C:\ProgramData\Microsoft\Windows\WER\ReportArchive\Kernel_9f_386650e677f7f03aa456fe95c3f6c53e594688bc_00000000_cab_07913524
    
    Analysis symbol: 
    Rechecking for solution: 0
    Report Id: 1f08ca08-c500-44ad-bd52-6b687be7ab80
    Report Status: 2049
    Hashed bucket: 
    Cab Guid: 0
    2018-08-20 07:00	Windows Error Reporting	Fault bucket , type 0
    Event Name: BlueScreen
    Response: Not available
    Cab Id: 0
    
    Problem signature:
    P1: 9f
    P2: 3
    P3: ffffa884b5c81060
    P4: fffff287d26538d0
    P5: ffffa884c5f0e3b0
    P6: 10_0_17134
    P7: 0_0
    P8: 256_1
    P9: 
    P10: 
    
    Attached files:
    \\?\C:\WINDOWS\Minidump\082018-7578-01.dmp
    \\?\C:\WINDOWS\TEMP\WER-70812-0.sysdata.xml
    \\?\C:\WINDOWS\MEMORY.DMP
    \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER33FF.tmp.WERInternalMetadata.xml
    \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER3410.tmp.xml
    \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER340F.tmp.csv
    \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER344E.tmp.txt
    
    These files may be available here:
    C:\ProgramData\Microsoft\Windows\WER\ReportQueue\Kernel_9f_386650e677f7f03aa456fe95c3f6c53e594688bc_00000000_03f93459
    
    Analysis symbol: 
    Rechecking for solution: 0
    Report Id: 1f08ca08-c500-44ad-bd52-6b687be7ab80
    Report Status: 4
    Hashed bucket: 
    Cab Guid: 0
    2018-08-23 07:54	Windows Error Reporting	Fault bucket , type 0
    Event Name: BlueScreen
    Response: Not available
    Cab Id: 0
    
    Problem signature:
    P1: 9f
    P2: 3
    P3: ffffb40473c96060
    P4: fffff38c09c7d8d0
    P5: ffffb4048ccb7a30
    P6: 10_0_17134
    P7: 0_0
    P8: 256_1
    P9: 
    P10: 
    
    Attached files:
    \\?\C:\WINDOWS\Minidump\082218-8015-01.dmp
    \\?\C:\WINDOWS\TEMP\WER-26484-0.sysdata.xml
    \\?\C:\WINDOWS\MEMORY.DMP
    \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER8116.tmp.WERInternalMetadata.xml
    \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER8175.tmp.xml
    \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER81A3.tmp.csv
    \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER81C3.tmp.txt
    
    These files may be available here:
    C:\ProgramData\Microsoft\Windows\WER\ReportArchive\Kernel_9f_d389428274f8517db19ff8d834df61e1a4e6df6_00000000_cab_083f810d
    
    Analysis symbol: 
    Rechecking for solution: 0
    Report Id: d729c2f0-f00b-4329-90fe-840e4a09f552
    Report Status: 2049
    Hashed bucket: 
    Cab Guid: 0
    2018-08-22 15:06	Windows Error Reporting	Fault bucket , type 0
    Event Name: BlueScreen
    Response: Not available
    Cab Id: 0
    
    Problem signature:
    P1: 9f
    P2: 3
    P3: ffffb40473c96060
    P4: fffff38c09c7d8d0
    P5: ffffb4048ccb7a30
    P6: 10_0_17134
    P7: 0_0
    P8: 256_1
    P9: 
    P10: 
    
    Attached files:
    \\?\C:\WINDOWS\Minidump\082218-8015-01.dmp
    \\?\C:\WINDOWS\TEMP\WER-26484-0.sysdata.xml
    \\?\C:\WINDOWS\MEMORY.DMP
    \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER8116.tmp.WERInternalMetadata.xml
    \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER8175.tmp.xml
    \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER81A3.tmp.csv
    \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER81C3.tmp.txt
    
    These files may be available here:
    C:\ProgramData\Microsoft\Windows\WER\ReportQueue\Kernel_9f_d389428274f8517db19ff8d834df61e1a4e6df6_00000000_03f881c2
    
    Analysis symbol: 
    Rechecking for solution: 0
    Report Id: d729c2f0-f00b-4329-90fe-840e4a09f552
    Report Status: 4
    Hashed bucket: 
    Cab Guid: 0
    2018-10-09 15:30	Windows Error Reporting	Fault bucket , type 0
    Event Name: BlueScreen
    Response: Not available
    Cab Id: 0
    
    Problem signature:
    P1: 9f
    P2: 3
    P3: ffffbe0f02092060
    P4: ffffdf859183ec20
    P5: ffffbe0f1fd2dca0
    P6: 10_0_17134
    P7: 0_0
    P8: 256_1
    P9: 
    P10: 
    
    Attached files:
    \\?\C:\WINDOWS\Minidump\100918-23781-01.dmp
    \\?\C:\WINDOWS\TEMP\WER-99921-0.sysdata.xml
    \\?\C:\WINDOWS\MEMORY.DMP
    \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WERB4F3.tmp.WERInternalMetadata.xml
    \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WERB523.tmp.xml
    \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WERB560.tmp.csv
    \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WERB5AF.tmp.txt
    
    These files may be available here:
    C:\ProgramData\Microsoft\Windows\WER\ReportArchive\Kernel_9f_f478aa247376e3e4db48cdbb6587992031322b87_00000000_cab_37601dfe
    
    Analysis symbol: 
    Rechecking for solution: 0
    Report Id: 36f74b4f-4b1b-441b-8184-db0dec49bb88
    Report Status: 2049
    Hashed bucket: 
    Cab Guid: 0
    2018-10-09 14:40	Windows Error Reporting	Fault bucket , type 0
    Event Name: BlueScreen
    Response: Not available
    Cab Id: 0
    
    Problem signature:
    P1: 9f
    P2: 3
    P3: ffffbe0f02092060
    P4: ffffdf859183ec20
    P5: ffffbe0f1fd2dca0
    P6: 10_0_17134
    P7: 0_0
    P8: 256_1
    P9: 
    P10: 
    
    Attached files:
    \\?\C:\WINDOWS\Minidump\100918-23781-01.dmp
    \\?\C:\WINDOWS\TEMP\WER-99921-0.sysdata.xml
    \\?\C:\WINDOWS\MEMORY.DMP
    \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WERB4F3.tmp.WERInternalMetadata.xml
    \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WERB523.tmp.xml
    \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WERB560.tmp.csv
    \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WERB5AF.tmp.txt
    
    These files may be available here:
    C:\ProgramData\Microsoft\Windows\WER\ReportQueue\Kernel_9f_f478aa247376e3e4db48cdbb6587992031322b87_00000000_0129b5ae
    
    Analysis symbol: 
    Rechecking for solution: 0
    Report Id: 36f74b4f-4b1b-441b-8184-db0dec49bb88
    Report Status: 4
    Hashed bucket: 
    Cab Guid: 0
    2018-10-29 07:53	Windows Error Reporting	Fault bucket , type 0
    Event Name: BlueScreen
    Response: Not available
    Cab Id: 0
    
    Problem signature:
    P1: 9f
    P2: 3
    P3: ffffbe8959ff8930
    P4: fffff803be3d08d0
    P5: ffffbe8982b84350
    P6: 10_0_17134
    P7: 0_0
    P8: 256_1
    P9: 
    P10: 
    
    Attached files:
    \\?\C:\WINDOWS\Minidump\102918-8171-01.dmp
    \\?\C:\WINDOWS\TEMP\WER-113812-0.sysdata.xml
    \\?\C:\WINDOWS\MEMORY.DMP
    \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WERD2CC.tmp.WERInternalMetadata.xml
    \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WERD2DC.tmp.xml
    \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WERD2FA.tmp.csv
    \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WERD31B.tmp.txt
    
    These files may be available here:
    C:\ProgramData\Microsoft\Windows\WER\ReportArchive\Kernel_9f_ae351bd787c79fc41cf49eb7ae151224b5b0ea_00000000_cab_491ddaca
    
    Analysis symbol: 
    Rechecking for solution: 0
    Report Id: 92f87fad-a7d9-4be7-b26f-1f801e54ee9e
    Report Status: 2049
    Hashed bucket: 
    Cab Guid: 0
    2018-10-29 07:53	Windows Error Reporting	Fault bucket , type 0
    Event Name: BlueScreen
    Response: Not available
    Cab Id: 0
    
    Problem signature:
    P1: 9f
    P2: 3
    P3: ffffbe8959ff8930
    P4: fffff803be3d08d0
    P5: ffffbe8982b84350
    P6: 10_0_17134
    P7: 0_0
    P8: 256_1
    P9: 
    P10: 
    
    Attached files:
    \\?\C:\WINDOWS\Minidump\102918-8171-01.dmp
    \\?\C:\WINDOWS\TEMP\WER-113812-0.sysdata.xml
    \\?\C:\WINDOWS\MEMORY.DMP
    \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WERD2CC.tmp.WERInternalMetadata.xml
    \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WERD2DC.tmp.xml
    \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WERD2FA.tmp.csv
    \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WERD31B.tmp.txt
    
    These files may be available here:
    C:\ProgramData\Microsoft\Windows\WER\ReportQueue\Kernel_9f_ae351bd787c79fc41cf49eb7ae151224b5b0ea_00000000_03f9d329
    
    Analysis symbol: 
    Rechecking for solution: 0
    Report Id: 92f87fad-a7d9-4be7-b26f-1f801e54ee9e
    Report Status: 4
    Hashed bucket: 
    Cab Guid: 0
    2018-10-17 06:13	Windows Error Reporting	Fault bucket , type 0
    Event Name: BlueScreen
    Response: Not available
    Cab Id: 0
    
    Problem signature:
    P1: 9f
    P2: 3
    P3: ffffc003be3f7640
    P4: ffffab81b8a298d0
    P5: ffffc003cb3076c0
    P6: 10_0_17134
    P7: 0_0
    P8: 256_1
    P9: 
    P10: 
    
    Attached files:
    \\?\C:\WINDOWS\Minidump\101718-17421-01.dmp
    \\?\C:\WINDOWS\TEMP\WER-43718-0.sysdata.xml
    \\?\C:\WINDOWS\MEMORY.DMP
    \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WERBEDB.tmp.WERInternalMetadata.xml
    \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WERBEEC.tmp.xml
    \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WERBF19.tmp.csv
    \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WERBF2A.tmp.txt
    
    These files may be available here:
    C:\ProgramData\Microsoft\Windows\WER\ReportArchive\Kernel_9f_6a15b962e4b8b51132449ac404fb238db25ca15_00000000_cab_2a84c033
    
    Analysis symbol: 
    Rechecking for solution: 0
    Report Id: f3bb4407-4a9a-4842-9ea3-3863a9b61f47
    Report Status: 2049
    Hashed bucket: 
    Cab Guid: 0
    2018-10-17 06:13	Windows Error Reporting	Fault bucket , type 0
    Event Name: BlueScreen
    Response: Not available
    Cab Id: 0
    
    Problem signature:
    P1: 9f
    P2: 3
    P3: ffffc003be3f7640
    P4: ffffab81b8a298d0
    P5: ffffc003cb3076c0
    P6: 10_0_17134
    P7: 0_0
    P8: 256_1
    P9: 
    P10: 
    
    Attached files:
    \\?\C:\WINDOWS\Minidump\101718-17421-01.dmp
    \\?\C:\WINDOWS\TEMP\WER-43718-0.sysdata.xml
    \\?\C:\WINDOWS\MEMORY.DMP
    \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WERBEDB.tmp.WERInternalMetadata.xml
    \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WERBEEC.tmp.xml
    \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WERBF19.tmp.csv
    \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WERBF2A.tmp.txt
    
    These files may be available here:
    C:\ProgramData\Microsoft\Windows\WER\ReportQueue\Kernel_9f_6a15b962e4b8b51132449ac404fb238db25ca15_00000000_0054bf39
    
    Analysis symbol: 
    Rechecking for solution: 0
    Report Id: f3bb4407-4a9a-4842-9ea3-3863a9b61f47
    Report Status: 4
    Hashed bucket: 
    Cab Guid: 0
    2018-10-05 07:08	Windows Error Reporting	Fault bucket , type 0
    Event Name: BlueScreen
    Response: Not available
    Cab Id: 0
    
    Problem signature:
    P1: 9f
    P2: 3
    P3: ffffc50d565f9930
    P4: fffff801a01d08d0
    P5: ffffc50d5bc231b0
    P6: 10_0_17134
    P7: 0_0
    P8: 256_1
    P9: 
    P10: 
    
    Attached files:
    \\?\C:\WINDOWS\Minidump\100518-45859-01.dmp
    \\?\C:\WINDOWS\TEMP\WER-81968-0.sysdata.xml
    \\?\C:\WINDOWS\MEMORY.DMP
    \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER5DDA.tmp.WERInternalMetadata.xml
    \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER5DEB.tmp.xml
    \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER5E09.tmp.csv
    \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER5E48.tmp.txt
    
    These files may be available here:
    C:\ProgramData\Microsoft\Windows\WER\ReportArchive\Kernel_9f_cef9f82c484650f4226ce5a75643ac61cce31_00000000_cab_3ecd600d
    
    Analysis symbol: 
    Rechecking for solution: 0
    Report Id: 1aa23a34-4a6e-4686-a2b4-92b73ba660c9
    Report Status: 2049
    Hashed bucket: 
    Cab Guid: 0
    2018-10-05 07:08	Windows Error Reporting	Fault bucket , type 0
    Event Name: BlueScreen
    Response: Not available
    Cab Id: 0
    
    Problem signature:
    P1: 9f
    P2: 3
    P3: ffffc50d565f9930
    P4: fffff801a01d08d0
    P5: ffffc50d5bc231b0
    P6: 10_0_17134
    P7: 0_0
    P8: 256_1
    P9: 
    P10: 
    
    Attached files:
    \\?\C:\WINDOWS\Minidump\100518-45859-01.dmp
    \\?\C:\WINDOWS\TEMP\WER-81968-0.sysdata.xml
    \\?\C:\WINDOWS\MEMORY.DMP
    \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER5DDA.tmp.WERInternalMetadata.xml
    \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER5DEB.tmp.xml
    \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER5E09.tmp.csv
    \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER5E48.tmp.txt
    
    These files may be available here:
    C:\ProgramData\Microsoft\Windows\WER\ReportQueue\Kernel_9f_cef9f82c484650f4226ce5a75643ac61cce31_00000000_00655e47
    
    Analysis symbol: 
    Rechecking for solution: 0
    Report Id: 1aa23a34-4a6e-4686-a2b4-92b73ba660c9
    Report Status: 4
    Hashed bucket: 
    Cab Guid: 0
    2018-09-27 13:22	Windows Error Reporting	Fault bucket , type 0
    Event Name: BlueScreen
    Response: Not available
    Cab Id: 0
    
    Problem signature:
    P1: 9f
    P2: 3
    P3: ffffcc007be2d060
    P4: fffff8023e7d08d0
    P5: ffffcc00885458e0
    P6: 10_0_17134
    P7: 0_0
    P8: 256_1
    P9: 
    P10: 
    
    Attached files:
    \\?\C:\WINDOWS\Minidump\092718-12015-01.dmp
    \\?\C:\WINDOWS\TEMP\WER-53593-0.sysdata.xml
    \\?\C:\WINDOWS\MEMORY.DMP
    \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WERE9A4.tmp.WERInternalMetadata.xml
    \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WERE9C4.tmp.xml
    \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WERE9F2.tmp.csv
    \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WEREA12.tmp.txt
    
    These files may be available here:
    C:\ProgramData\Microsoft\Windows\WER\ReportArchive\Kernel_9f_7dc991ba919971df1eaeb176ca449dfd5162258_00000000_cab_178437aa
    
    Analysis symbol: 
    Rechecking for solution: 0
    Report Id: 469b4e98-17ff-421e-9ee6-d251fbff1bf0
    Report Status: 2049
    Hashed bucket: 
    Cab Guid: 0
    2018-09-27 12:43	Windows Error Reporting	Fault bucket , type 0
    Event Name: BlueScreen
    Response: Not available
    Cab Id: 0
    
    Problem signature:
    P1: 9f
    P2: 3
    P3: ffffcc007be2d060
    P4: fffff8023e7d08d0
    P5: ffffcc00885458e0
    P6: 10_0_17134
    P7: 0_0
    P8: 256_1
    P9: 
    P10: 
    
    Attached files:
    \\?\C:\WINDOWS\Minidump\092718-12015-01.dmp
    \\?\C:\WINDOWS\TEMP\WER-53593-0.sysdata.xml
    \\?\C:\WINDOWS\MEMORY.DMP
    \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WERE9A4.tmp.WERInternalMetadata.xml
    \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WERE9C4.tmp.xml
    \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WERE9F2.tmp.csv
    \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WEREA12.tmp.txt
    
    These files may be available here:
    C:\ProgramData\Microsoft\Windows\WER\ReportQueue\Kernel_9f_7dc991ba919971df1eaeb176ca449dfd5162258_00000000_01f4ea11
    
    Analysis symbol: 
    Rechecking for solution: 0
    Report Id: 469b4e98-17ff-421e-9ee6-d251fbff1bf0
    Report Status: 4
    Hashed bucket: 
    Cab Guid: 0
    2018-10-02 06:58	Windows Error Reporting	Fault bucket , type 0
    Event Name: BlueScreen
    Response: Not available
    Cab Id: 0
    
    Problem signature:
    P1: 9f
    P2: 3
    P3: ffffcd00d01f8640
    P4: fffffa8ab98618d0
    P5: ffffcd00e76bf4d0
    P6: 10_0_17134
    P7: 0_0
    P8: 256_1
    P9: 
    P10: 
    
    Attached files:
    \\?\C:\WINDOWS\Minidump\100218-20484-01.dmp
    \\?\C:\WINDOWS\TEMP\WER-40640-0.sysdata.xml
    \\?\C:\WINDOWS\MEMORY.DMP
    \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WERB073.tmp.WERInternalMetadata.xml
    \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WERB084.tmp.xml
    \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WERB0B2.tmp.csv
    \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WERB0C3.tmp.txt
    
    These files may be available here:
    C:\ProgramData\Microsoft\Windows\WER\ReportArchive\Kernel_9f_bea7349fa736f98bf0434704eac718f5b5332ae_00000000_cab_28a8b1cb
    
    Analysis symbol: 
    Rechecking for solution: 0
    Report Id: 0ebeef7a-ba38-46f7-a94c-dd349e1a05d1
    Report Status: 2049
    Hashed bucket: 
    Cab Guid: 0
    2018-10-02 06:58	Windows Error Reporting	Fault bucket , type 0
    Event Name: BlueScreen
    Response: Not available
    Cab Id: 0
    
    Problem signature:
    P1: 9f
    P2: 3
    P3: ffffcd00d01f8640
    P4: fffffa8ab98618d0
    P5: ffffcd00e76bf4d0
    P6: 10_0_17134
    P7: 0_0
    P8: 256_1
    P9: 
    P10: 
    
    Attached files:
    \\?\C:\WINDOWS\Minidump\100218-20484-01.dmp
    \\?\C:\WINDOWS\TEMP\WER-40640-0.sysdata.xml
    \\?\C:\WINDOWS\MEMORY.DMP
    \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WERB073.tmp.WERInternalMetadata.xml
    \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WERB084.tmp.xml
    \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WERB0B2.tmp.csv
    \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WERB0C3.tmp.txt
    
    These files may be available here:
    C:\ProgramData\Microsoft\Windows\WER\ReportQueue\Kernel_9f_bea7349fa736f98bf0434704eac718f5b5332ae_00000000_012cb0d1
    
    Analysis symbol: 
    Rechecking for solution: 0
    Report Id: 0ebeef7a-ba38-46f7-a94c-dd349e1a05d1
    Report Status: 4
    Hashed bucket: 
    Cab Guid: 0
    2018-09-27 07:14	Windows Error Reporting	Fault bucket , type 0
    Event Name: BlueScreen
    Response: Not available
    Cab Id: 0
    
    Problem signature:
    P1: 9f
    P2: 3
    P3: ffffcf0519df8b50
    P4: ffff828f5386f8d0
    P5: ffffcf052b880010
    P6: 10_0_17134
    P7: 0_0
    P8: 256_1
    P9: 
    P10: 
    
    Attached files:
    \\?\C:\WINDOWS\Minidump\092718-27468-01.dmp
    \\?\C:\WINDOWS\TEMP\WER-48328-0.sysdata.xml
    \\?\C:\WINDOWS\MEMORY.DMP
    \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WERCF08.tmp.WERInternalMetadata.xml
    \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WERCF28.tmp.xml
    \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WERCF56.tmp.csv
    \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WERCF76.tmp.txt
    
    These files may be available here:
    C:\ProgramData\Microsoft\Windows\WER\ReportArchive\Kernel_9f_b76a1526bf1765abb71b97ddced59c620bebb9_00000000_cab_28dcd05f
    
    Analysis symbol: 
    Rechecking for solution: 0
    Report Id: de9ae890-ff11-4765-bf09-96065e5f1054
    Report Status: 2049
    Hashed bucket: 
    Cab Guid: 0
    2018-09-27 07:14	Windows Error Reporting	Fault bucket , type 0
    Event Name: BlueScreen
    Response: Not available
    Cab Id: 0
    
    Problem signature:
    P1: 9f
    P2: 3
    P3: ffffcf0519df8b50
    P4: ffff828f5386f8d0
    P5: ffffcf052b880010
    P6: 10_0_17134
    P7: 0_0
    P8: 256_1
    P9: 
    P10: 
    
    Attached files:
    \\?\C:\WINDOWS\Minidump\092718-27468-01.dmp
    \\?\C:\WINDOWS\TEMP\WER-48328-0.sysdata.xml
    \\?\C:\WINDOWS\MEMORY.DMP
    \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WERCF08.tmp.WERInternalMetadata.xml
    \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WERCF28.tmp.xml
    \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WERCF56.tmp.csv
    \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WERCF76.tmp.txt
    
    These files may be available here:
    C:\ProgramData\Microsoft\Windows\WER\ReportQueue\Kernel_9f_b76a1526bf1765abb71b97ddced59c620bebb9_00000000_03e4cf75
    
    Analysis symbol: 
    Rechecking for solution: 0
    Report Id: de9ae890-ff11-4765-bf09-96065e5f1054
    Report Status: 4
    Hashed bucket: 
    Cab Guid: 0
    2018-09-24 07:18	Windows Error Reporting	Fault bucket , type 0
    Event Name: BlueScreen
    Response: Not available
    Cab Id: 0
    
    Problem signature:
    P1: 9f
    P2: 3
    P3: ffffdf8e1e9f7930
    P4: ffffa08cba66f8d0
    P5: ffffdf8e369082a0
    P6: 10_0_17134
    P7: 0_0
    P8: 256_1
    P9: 
    P10: 
    
    Attached files:
    \\?\C:\WINDOWS\Minidump\092418-13031-01.dmp
    \\?\C:\WINDOWS\TEMP\WER-63437-0.sysdata.xml
    \\?\C:\WINDOWS\MEMORY.DMP
    \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WERF7C.tmp.WERInternalMetadata.xml
    \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WERF8C.tmp.xml
    \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WERFAA.tmp.csv
    \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WERFCB.tmp.txt
    
    These files may be available here:
    C:\ProgramData\Microsoft\Windows\WER\ReportArchive\Kernel_9f_2954aeca823d26fd97b161baa3e8625ee2195f_00000000_cab_274515f4
    
    Analysis symbol: 
    Rechecking for solution: 0
    Report Id: 02766d3f-91b3-4dd9-9abe-e7c9b9070ce8
    Report Status: 2049
    Hashed bucket: 
    Cab Guid: 0
    2018-09-24 07:18	Windows Error Reporting	Fault bucket , type 0
    Event Name: BlueScreen
    Response: Not available
    Cab Id: 0
    
    Problem signature:
    P1: 9f
    P2: 3
    P3: ffffdf8e1e9f7930
    P4: ffffa08cba66f8d0
    P5: ffffdf8e369082a0
    P6: 10_0_17134
    P7: 0_0
    P8: 256_1
    P9: 
    P10: 
    
    Attached files:
    \\?\C:\WINDOWS\Minidump\092418-13031-01.dmp
    \\?\C:\WINDOWS\TEMP\WER-63437-0.sysdata.xml
    \\?\C:\WINDOWS\MEMORY.DMP
    \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WERF7C.tmp.WERInternalMetadata.xml
    \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WERF8C.tmp.xml
    \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WERFAA.tmp.csv
    \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WERFCB.tmp.txt
    
    These files may be available here:
    C:\ProgramData\Microsoft\Windows\WER\ReportQueue\Kernel_9f_2954aeca823d26fd97b161baa3e8625ee2195f_00000000_00650fca
    
    Analysis symbol: 
    Rechecking for solution: 0
    Report Id: 02766d3f-91b3-4dd9-9abe-e7c9b9070ce8
    Report Status: 4
    Hashed bucket: 
    Cab Guid: 0
    2018-08-27 08:06	Windows Error Reporting	Fault bucket , type 0
    Event Name: BlueScreen
    Response: Not available
    Cab Id: 0
    
    Problem signature:
    P1: 9f
    P2: 3
    P3: ffffe389409f8b50
    P4: ffff8000576458d0
    P5: ffffe389570e5e50
    P6: 10_0_17134
    P7: 0_0
    P8: 256_1
    P9: 
    P10: 
    
    Attached files:
    \\?\C:\WINDOWS\Minidump\082718-11031-01.dmp
    \\?\C:\WINDOWS\TEMP\WER-43359-0.sysdata.xml
    \\?\C:\WINDOWS\MEMORY.DMP
    \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WERC1D9.tmp.WERInternalMetadata.xml
    \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WERC1F9.tmp.xml
    \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WERC227.tmp.csv
    \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WERC247.tmp.txt
    
    These files may be available here:
    C:\ProgramData\Microsoft\Windows\WER\ReportArchive\Kernel_9f_f639461835a0f36546d1a689cb6fffb1ac4517c_00000000_cab_329a8c89
    
    Analysis symbol: 
    Rechecking for solution: 0
    Report Id: 805c333c-fc6e-4acc-b9a1-d248e4ac2d23
    Report Status: 2049
    Hashed bucket: 
    Cab Guid: 0
    2018-08-27 07:07	Windows Error Reporting	Fault bucket , type 0
    Event Name: BlueScreen
    Response: Not available
    Cab Id: 0
    
    Problem signature:
    P1: 9f
    P2: 3
    P3: ffffe389409f8b50
    P4: ffff8000576458d0
    P5: ffffe389570e5e50
    P6: 10_0_17134
    P7: 0_0
    P8: 256_1
    P9: 
    P10: 
    
    Attached files:
    \\?\C:\WINDOWS\Minidump\082718-11031-01.dmp
    \\?\C:\WINDOWS\TEMP\WER-43359-0.sysdata.xml
    \\?\C:\WINDOWS\MEMORY.DMP
    \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WERC1D9.tmp.WERInternalMetadata.xml
    \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WERC1F9.tmp.xml
    \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WERC227.tmp.csv
    \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WERC247.tmp.txt
    
    These files may be available here:
    C:\ProgramData\Microsoft\Windows\WER\ReportQueue\Kernel_9f_f639461835a0f36546d1a689cb6fffb1ac4517c_00000000_00d8c246
    
    Analysis symbol: 
    Rechecking for solution: 0
    Report Id: 805c333c-fc6e-4acc-b9a1-d248e4ac2d23
    Report Status: 4
    Hashed bucket: 
    Cab Guid: 0
    2018-08-22 07:00	Windows Error Reporting	Fault bucket , type 0
    Event Name: BlueScreen
    Response: Not available
    Cab Id: 0
    
    Problem signature:
    P1: 9f
    P2: 3
    P3: ffffe483e15f5060
    P4: ffffa087844538d0
    P5: ffffe483eedf5680
    P6: 10_0_17134
    P7: 0_0
    P8: 256_1
    P9: 
    P10: 
    
    Attached files:
    \\?\C:\WINDOWS\Minidump\082218-7750-01.dmp
    \\?\C:\WINDOWS\TEMP\WER-35203-0.sysdata.xml
    \\?\C:\WINDOWS\MEMORY.DMP
    \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER9FBA.tmp.WERInternalMetadata.xml
    \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER9FCB.tmp.xml
    \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER9FE9.tmp.csv
    \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WERA009.tmp.txt
    
    These files may be available here:
    C:\ProgramData\Microsoft\Windows\WER\ReportArchive\Kernel_9f_e1d172a5cd9015a1aed68c2731a1c2fdb2496_00000000_cab_012ca0c4
    
    Analysis symbol: 
    Rechecking for solution: 0
    Report Id: b114af01-c92a-406f-94d2-0efe2bd96816
    Report Status: 2049
    Hashed bucket: 
    Cab Guid: 0
    2018-08-22 07:00	Windows Error Reporting	Fault bucket , type 0
    Event Name: BlueScreen
    Response: Not available
    Cab Id: 0
    
    Problem signature:
    P1: 9f
    P2: 3
    P3: ffffe483e15f5060
    P4: ffffa087844538d0
    P5: ffffe483eedf5680
    P6: 10_0_17134
    P7: 0_0
    P8: 256_1
    P9: 
    P10: 
    
    Attached files:
    \\?\C:\WINDOWS\Minidump\082218-7750-01.dmp
    \\?\C:\WINDOWS\TEMP\WER-35203-0.sysdata.xml
    \\?\C:\WINDOWS\MEMORY.DMP
    \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER9FBA.tmp.WERInternalMetadata.xml
    \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER9FCB.tmp.xml
    \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER9FE9.tmp.csv
    \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WERA009.tmp.txt
    
    These files may be available here:
    C:\ProgramData\Microsoft\Windows\WER\ReportQueue\Kernel_9f_e1d172a5cd9015a1aed68c2731a1c2fdb2496_00000000_03eca008
    
    Analysis symbol: 
    Rechecking for solution: 0
    Report Id: b114af01-c92a-406f-94d2-0efe2bd96816
    Report Status: 4
    Hashed bucket: 
    Cab Guid: 0
      My Computer


  2. das
    Posts : 36
    Windows 10 x64
    Thread Starter
       #32

    zbook said:
    The memory.dmp is more useful in working up the BSOD crashed.
    We most often use the mini dumps as the file sizes are small and easily managed.
    With a memory dump its a larger view of what happened during the crash.
    Misbehaving drivers can be seen that are not seen with mini dumps.
    Seeing the drivers is most comprehensive with the complete memory dump however the file size is too large and can only be used by the end user.
    For debugging the best settings are to have automatic memory dump.
    The paging file should be on the Windows drive.
    But I thought you said I should set paging file to "No" on the Windows drive?

    Where do you see Reason Core Software?
      My Computer


  3. das
    Posts : 36
    Windows 10 x64
    Thread Starter
       #33

    Where do you see that the BSOD is related to McAfee or Carbon Black?
      My Computer


  4. Posts : 41,474
    windows 10 professional version 1607 build 14393.969 64 bit
       #34

    There can be drivers for hardware and software.
    Sometimes one driver conflicts with another driver.
    Other times just one driver crashes and cause other drivers to crash.

    Sometimes drivers are uninstalled and reinstalled.
    Other times drivers are uninstalled to look for computer environment stability.
    If there is stability this is a confirmation that the driver was related to the instability.

    Uninstall the carbon black and Mcafee software.
    Then after one week if there are no more BSOD you can reinstall the software.

    We use a software tool: Windbg to debug dump files.
    The above drivers were seen in the crashes.

    When the paging file is set to off it deletes the file.
    When it is reset it allows recreation of the file.
    So the only change was the file size.
    It resets the paging file formation.

    A complete memory dump uses drive file space that can be used for other files.
    Only the automatic memory dump setting is needed.


    Open administrative command prompt and type or copy and paste:
    a) sfc /scannow
    b) dism /online /cleanup-image /restorehealth
    c) chkdsk /scan
    d) When these have completed > right click on the top bar or title bar of the administrative command prompt box > left click on edit then select all > right click on the top bar again > left click on edit then copy > paste into the thread


    Code:
    Event[11161]:
      Log Name: Application
      Source: Microsoft-Windows-Search
      Date: 2018-10-29T09:04:51.579
      Event ID: 7042
      Task: Search service
      Level: Error
      Opcode: N/A
      Keyword: Classic
      User: N/A
      User Name: N/A
      Computer: DESKTOP-J212TNG
      Description: 
    The Windows Search Service is being stopped because there is a problem with the indexer: The catalog is corrupt.
    
    Details:
    	The content index catalog is corrupt.   0xc0041801 (0xc0041801)
      My Computer


  5. das
    Posts : 36
    Windows 10 x64
    Thread Starter
       #35

    I activated the Driver Verifier yesterday and got stuck in a BSOD loop until I disabled it.

    Attached is the dump
      My Computer


  6. Posts : 41,474
    windows 10 professional version 1607 build 14393.969 64 bit
       #36

    Please update the progress with uninstalling the software in post #31 and when available post the results for the administrative command prompt commands.
      My Computer


  7. das
    Posts : 36
    Windows 10 x64
    Thread Starter
       #37

    Could you show me where the Carbon Black agent and McAfee agent is responsible for the BSODs like phil43c did with the other drivers?
      My Computer


  8. Posts : 41,474
    windows 10 professional version 1607 build 14393.969 64 bit
       #38

    There was nothing special to see in the debugging.
    They were standard findings.
      My Computer


  9. das
    Posts : 36
    Windows 10 x64
    Thread Starter
       #39

    Ok, what was the findings in the dump files about what caused the BSOD?
      My Computer


  10. Posts : 41,474
    windows 10 professional version 1607 build 14393.969 64 bit
       #40

    We use software: windbg.
    There were multiple Mcafee drivers involved in the crash with carbon black.

    The drivers were displayed in post #31.


    Code:
    fffffe87`bdce4c98  00000000`00000246
    fffffe87`bdce4ca0  00000001`ffffffff
    fffffe87`bdce4ca8  fffff800`0e62355a nt!_GSHandlerCheckCommon+0x5a
    fffffe87`bdce4cb0  fffff800`709f155aUnable to load image \SystemRoot\system32\DRIVERS\mfencbdc.sys, Win32 error 0n2
    *** WARNING: Unable to verify timestamp for mfencbdc.sys
    *** ERROR: Module load completed but symbols could not be loaded for mfencbdc.sys
     mfencbdc+0x6155a
    fffffe87`bdce4cb8  fffff800`0e4f83b8 nt!KeCheckStackAndTargetAddress+0x28
    fffffe87`bdce4cc0  fffffe87`bdce65d8

    Code:
    fffffe87`bdce5f70  00000003`00000000
    fffffe87`bdce5f78  fffff800`6df2bc6aUnable to load image \SystemRoot\system32\drivers\mfehidk.sys, Win32 error 0n2
    *** WARNING: Unable to verify timestamp for mfehidk.sys
    *** ERROR: Module load completed but symbols could not be loaded for mfehidk.sys
     mfehidk+0x9bc6a
    fffffe87`bdce5f80  00000000`00f80034
    fffffe87`bdce5f88  ffff8a04`c2762010

    Code:
    fffffe87`bdce60b0  00000000`0000001d
    fffffe87`bdce60b8  fffff800`6f5f38eaUnable to load image \??\C:\Windows\system32\drivers\cbk7.sys, Win32 error 0n2
    *** WARNING: Unable to verify timestamp for cbk7.sys
    *** ERROR: Module load completed but symbols could not be loaded for cbk7.sys
     cbk7+0x238ea
    fffffe87`bdce60c0  fffffe87`bdce6380
    fffffe87`bdce60c8  00000000`00001001
    fffffe87`bdce60d0  ffffab00`50200000
      My Computer


 

  Related Discussions
Our Sites
Site Links
About Us
Windows 10 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 10" and related materials are trademarks of Microsoft Corp.

© Designer Media Ltd
All times are GMT -5. The time now is 08:55.
Find Us




Windows 10 Forums