Instant random computer restarts

zbook · 01 Mar 2020

The dump file from one week ago displayed a driver that appears to no longer be installed.
If SbieDrv.sys or Sophos Sandboxie software is still installed please uninstall this software during the troubleshooting.

The Windows driver verifier tool is not typically run for more than a few days to reduce performance problems and slow boot.

Currently there are 9 customized tests.
Increase the number by 3 -5 per hour up to the 19 displayed in this link:

https://answers.microsoft.com/en-us/...3-c48669e4c983

Run the tool for an additional 24 hours.
If there are no BSOD this will complete the use of the tool.

Code:

SbieDrv.sys  Wed Feb  5 14:46:07 2020 (5E3B45AF)

GregJ7 · 03 Mar 2020

SbieDrv.sys was not a file on my computer nor was it in my registry. I tried to install Sandboxie, but it failed, presumably because of driver checking. It left an entry in Programs & Features, so I uninstalled it. What was it that you found that says it existed? I searched the .txt files of the V2 dump and didn't find any occurrences of "Sbie".

I don't see any customized "tests" at that link. It's either watch certain drivers or don't.

Ztruker · 03 Mar 2020

Currently there are 9 customized tests.
Increase the number by 3 -5 per hour up to the 19 displayed in this link:

I don't see these either at that link. Can you be more specific Z?

zbook · 03 Mar 2020

When using Windows driver verfier the customization menu has options to select each drivers and tests.
By custom we test all non-Microsoft drivers.
The number of simultaneous customized tests in the Ten Forums link is 3.
The number of simultaneous customized tests in the Microsoft link is 19.

There can be performance problems and slow boot while using the tool.

I've had end users start testing using the TF link.
There is a learning curve.
Then the number of simultaneous customized tests is increased by 3 - 5 / hour up to the 19 simultaneous tests in the Microsoft link.
If there are performance problems or slow boot the number of simultaneous tests are reduced.
Then the customized test options that were not yet selected are added.

The prior bugcheck misbehaving driver is no longer installed.
Any new BSOD would be caused by a different driver or malfunctioning hardware.

Enable and Disable Driver Verifier in Windows 10
https://answers.microsoft.com/en-us/...3-c48669e4c983

For any BSOD:

a) run the V2 log collector to collect new log files

b) open file explorer> this PC > C: > in the right upper corner search for: C:\Windows\memory.dmp
> if the file size is < 1.5 GB then zip > post a separate share link into the thread using one drive, drop box, or google drive

Ztruker · 03 Mar 2020

Ah, got it, just had to go deeper.

Attachment 269085 Attachment 269086

GregJ7 · 04 Mar 2020

Ah, ok. I've spent days running all the tests from the link. No problems, except when I tried to install Sandboxie. (I still need to know where you think SbieDrv.sys exists to be able to remove it.)

Here is the output from the latest BSoD:
GREGJ-PC-(2020-03-02_18-22-46).zip
MEMORY 2020-03-02 6.07pm.DMP

Thanks

zbook · 04 Mar 2020

1) Uninstall and reinstall: rt640x64.sys
Realtek PCIe GbE Family Controller

https://answers.microsoft.com/en-us/...0-8d22254aa1c1

Code:

rt640x64.sys	Realtek NICDRV 8169 PCIe GBE Family Controller driver
	http://www.realtek.com.tw/downloads/downloadsView.aspx?Langid=1&PNid=13&PFid=5&Level=5&Conn=4&DownTypeID=3&GetDown=false

Unofficial Realtek update site for older drivers -

https://www.realtek.cz/download-RTL8101E-network-driver-for-Windows7-64bit.html

2) Restart Windows driver verifier
(increase the number of simultaneous customized tests by 3 - 5 / hour up to the 19 displayed in the Microsoft link

3) Plan to run the tool for 48 hours and then an additional 36 hours after the last BSOD.

Code:

rt640x64	Realtek RT640 NT Driver	c:\windows\system32\drivers\rt640x64.sys	Kernel Driver	Yes	Manual	Running	OK	Normal	No	Yes

Code:

Name	[00000001] Realtek PCIe GbE Family Controller
Adapter Type	Not Available
Product Type	Realtek PCIe GbE Family Controller
Installed	Yes
PNP Device ID	Not Available
Last Reset	3/2/2020 6:06 PM
Index	1
Service Name	rt640x64
IP Address	Not Available
IP Subnet	Not Available
Default IP Gateway	Not Available
DHCP Enabled	Yes
DHCP Server	Not Available
DHCP Lease Expires	Not Available
DHCP Lease Obtained	Not Available
MAC Address	Not Available

Code:

rt640x64.sys Fri May 10 01:59:23 2019 (5CD53D6B)

Ztruker · 04 Mar 2020

I still need to know where you think SbieDrv.sys exists to be able to remove it.

If you can't find it, don't worry about it. SbieDrv. sys is a kernel-mode driver that belongs to the Sandboxie program. If you don't have that installed then it will not be on our system.

zbook · 04 Mar 2020

This is an option for a replacement driver:

rt640x64.sys Realtek NICDRV 8169 PCIe GBE Family Controller driver

Unofficial Realtek update site for older drivers -

Realtek network drivers for RTL8101E and Windows 7 64bit

GregJ7 · 04 Mar 2020

A little confused about the chip identifier in that report. My mobo handbook says my Realtek LAN chip is an 8111H. Unfortunately, the chip I assume to be the LAN chip has a metal cap over it, so I can't confirm visually. I found a couple "latest" drivers for that chip. I am currently testing the one with the highest version number (that I've seen from any source). If it fixes the problem, it'll take about 4 days to begin hoping that it is fixed and another 1.5 weeks to be sure. Thanks!