BSOD BugCheck Event ID 1001

I bought this Lenovo ThinkPad T490 this past January and in the 11 months I've had it, there have been no problems with it until yesterday afternoon when it got this BSOD and rebooted. It is updated to the latest Lenovo and Microsoft updates. I have made no hardware changes or upgrades to the laptop since buying it.

I ran the V2 log collector and uploaded the Zip folder to Google Drive, here:

LENOVOT490-(2020-12-23_08-21-11).zip - Google Drive

Below is the Event Viewer log entry. Any help diagnosing this BSOD would be appreciated.

Log Name: System
Source: Microsoft-Windows-WER-SystemErrorReporting
Date: 12/22/2020 2:03:31 PM
Event ID: 1001
Task Category: None
Level: Error
Keywords: Classic
User: N/A
Computer: LenovoT490
Description:
The computer has rebooted from a bugcheck. The bugcheck was: 0x00000154 (0xffffca0b0e1aa000, 0xffffa407dc35df30, 0x0000000000000002, 0x0000000000000000). A dump was saved in: C:\WINDOWS\Minidump\122220-13640-01.dmp. Report Id: 54646454-761d-430c-81e6-8cb5fff98527.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-WER-SystemErrorReporting" Guid="{ABCE23E7-DE45-4366-8631-84FA6C525952}" EventSourceName="BugCheck" />
<EventID Qualifiers="16384">1001</EventID>
<Version>0</Version>
<Level>2</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2020-12-22T19:03:31.8412660Z" />
<EventRecordID>14222</EventRecordID>
<Correlation />
<Execution ProcessID="0" ThreadID="0" />
<Channel>System</Channel>
<Computer>LenovoT490</Computer>
<Security />
</System>
<EventData>
<Data Name="param1">0x00000154 (0xffffca0b0e1aa000, 0xffffa407dc35df30, 0x0000000000000002, 0x0000000000000000)</Data>
<Data Name="param2">C:\WINDOWS\Minidump\122220-13640-01.dmp</Data>
<Data Name="param3">54646454-761d-430c-81e6-8cb5fff98527</Data>
</EventData>
</Event>

The RAM modules have different part numbers.
When was the second module installed?
4ATS1G64HZ-2G6E1
8ATF1G64HZ-2G6E1


1) Please run:

Tuneup.bat - Click here to go to the BSOD batch repository to download and run this batch file.

DiskParInfo.bat - Click here to go to the BSOD batch repository to download and run this batch file.




2) Run HD Tune (free version) (all drives)
HD Tune website
Post images into the thread for results on these tabs:
a) Health
b) Benchmark
c) Full error scan


3) Run Sea Tools for Windows
long generic test
Post an image of the test result into the thread
SeaTools for Windows |
Seagate
How to use SeaTools for Windows | Seagate Support US

4) Open administrative command prompt and type or copy and paste:
chkdsk /r /v
This may take hours to run so plan to run overnight.
Run on all drives using the syntax: chkdsk /r /v C: or chkdsk /r /v D: changing the drive letter to the applicable drive.

C:\Windows\system32>chkdsk /r /v
The type of the file system is NTFS.
Cannot lock current drive.

Chkdsk cannot run because the volume is in use by another
process. Would you like to schedule this volume to be
checked the next time the system restarts? (Y/N)

Type: Y
reboot


5) Use the information in this link to find the chkdsk report in the event viewer.
Copy and paste into notepad > save to desktop > post into the thread using a one drive, drop box, or google drive share link:
Read Chkdsk Log in Event Viewer in Windows 10 Windows 10 Performance Maintenance Tutorials
Read Chkdsk Log in Event Viewer in Windows 10

6) Run Memtest86 version 8.4 (or newer version if available) for four passes.
Repeat the test so that eight passes are performed.

MemTest86 - Official Site of the x86 Memory Testing Tool

Use a camera or smart phone camera to take pictures and post images into the thread.
In case there are any problems uploading images use share links (one drive, drop box, or google drive)

Memtest86 has a feature to produce a text report.
Please post this in addition to the images.

The T490 comes with one 8GB memory module soldered to the system board. I ordered and received it with an additional 8GB module installed in the one upgrade slot, for a total of 16GB.

https://psref.lenovo.com/syspool/Sys..._T490_Spec.PDF

It will take me awhile to run the other tests so I will post back with those results.

- - - Updated - - -

Tuneup.bat won't run. I click "Yes" when I see the User Account Control do you want to run the Windows Command Processor, I see a quick flash of the window, then nothing else happens.

I'll move on to the DiskParInfo.bat

- - - Updated - - -

DiskParInfo.bat won't run either. Same result as tuneup.bat. I even tried disabling Norton virus & firewall but got the same result.

List any of these non-Microsoft software:

antivirus
firewall
drive encryption


1) Open administrative command prompt (ACP) and type or copy and paste:
2) sfc /scannow
3) dism /online /cleanup-image /scanhealth
4) dism /online /cleanup-image /restorehealth
5) sfc /scannow
6) chkdsk /scan
7) wmic recoveros set autoreboot = false
8) wmic recoveros set DebugInfoType = 7
9) wmic recoveros get autoreboot
10) wmic recoveros get DebugInfoType
11) bcdedit /enum {badmemory}


12) When these have completed > right click on the top bar or title bar of the administrative command prompt box > left click on edit then select all > right click on the top bar again > left click on edit then copy > paste into the thread

Use this link as needed when posting results:
How to Change Post Editor to Source or WYSIWYG Mode at TenForums.com


These steps / tests can be performed overnight:
a) HD Tune full error scan
b) Sea Tools for Windows long generic test
c) Chkdsk /r /v





Run the Norton uninstall tool:
Download and run the Norton Remove and Reinstall tool

Make sure Windows defender is on.

Retry each:
tuneup.bat and diskparinfo > report findings > post images

antivirus - Norton
firewall - Norton
drive encryption - none

I'll start the rest of the steps and post results.

- - - Updated - - -

Microsoft Windows [Version 10.0.19042.685]
(c) 2020 Microsoft Corporation. All rights reserved.

C:\WINDOWS\system32>sfc /scannow

Beginning system scan. This process will take some time.

Beginning verification phase of system scan.
Verification 100% complete.

Windows Resource Protection found corrupt files and successfully repaired them.
For online repairs, details are included in the CBS log file located at
windir\Logs\CBS\CBS.log. For example C:\Windows\Logs\CBS\CBS.log. For offline
repairs, details are included in the log file provided by the /OFFLOGFILE flag.

C:\WINDOWS\system32>dism /online /cleanup-image /scanhealth

Deployment Image Servicing and Management tool
Version: 10.0.19041.572

Image Version: 10.0.19042.685

[==========================100.0%==========================] No component store corruption detected.
The operation completed successfully.

C:\WINDOWS\system32>dism /online /cleanup-image /restorehealth

Deployment Image Servicing and Management tool
Version: 10.0.19041.572

Image Version: 10.0.19042.685

[==========================100.0%==========================] The restore operation completed successfully.
The operation completed successfully.

C:\WINDOWS\system32>sfc /scannow

Beginning system scan. This process will take some time.

Beginning verification phase of system scan.
Verification 100% complete.

Windows Resource Protection did not find any integrity violations.

C:\WINDOWS\system32>chkdsk /scan
The type of the file system is NTFS.
Volume label is Windows10_OS.

Stage 1: Examining basic file system structure ...
586240 file records processed.
File verification completed.
Phase duration (File record verification): 3.71 seconds.
8352 large file records processed.
Phase duration (Orphan file record recovery): 0.00 milliseconds.
0 bad file records processed.
Phase duration (Bad file record checking): 0.34 milliseconds.

Stage 2: Examining file name linkage ...
2491 reparse records processed.
763284 index entries processed.
Index verification completed.
Phase duration (Index verification): 14.72 seconds.
0 unindexed files scanned.
Phase duration (Orphan reconnection): 595.12 milliseconds.
0 unindexed files recovered to lost and found.
Phase duration (Orphan recovery to lost and found): 0.37 milliseconds.
2491 reparse records processed.
Phase duration (Reparse point and Object ID verification): 8.13 milliseconds.

Stage 3: Examining security descriptors ...
Security descriptor verification completed.
Phase duration (Security descriptor verification): 20.93 milliseconds.
88523 data files processed.
Phase duration (Data attribute verification): 1.21 milliseconds.
CHKDSK is verifying Usn Journal...
36782296 USN bytes processed.
Usn Journal verification completed.
Phase duration (USN journal verification): 198.36 milliseconds.

Windows has scanned the file system and found no problems.
No further action is required.

434070527 KB total disk space.
194354308 KB in 391020 files.
247188 KB in 88524 indexes.
0 KB in bad sectors.
708711 KB in use by the system.
65536 KB occupied by the log file.
238760320 KB available on disk.

4096 bytes in each allocation unit.
108517631 total allocation units on disk.
59690080 allocation units available on disk.
Total duration: 19.27 seconds (19276 ms).

C:\WINDOWS\system32>wmic recoveros set autoreboot = false
Updating property(s) of '\\LENOVOT490\ROOT\CIMV2:Win32_OSRecoveryConfiguration.Name="Microsoft Windows 10 Pro|C:\\WINDOWS|\\Device\\Harddisk0\\Partition4"'
Property(s) update successful.

C:\WINDOWS\system32>wmic recoveros set DebugInfoType = 7
Updating property(s) of '\\LENOVOT490\ROOT\CIMV2:Win32_OSRecoveryConfiguration.Name="Microsoft Windows 10 Pro|C:\\WINDOWS|\\Device\\Harddisk0\\Partition4"'
Property(s) update successful.

C:\WINDOWS\system32>wmic recoveros get autoreboot
AutoReboot
FALSE


C:\WINDOWS\system32>wmic recoveros get DebugInfoType
DebugInfoType
7


C:\WINDOWS\system32>bcdedit /enum {badmemory}

RAM Defects
-----------
identifier {badmemory}

C:\WINDOWS\system32>

First scannow:

Code:

Windows Resource Protection found corrupt files and successfully repaired them.

Second scannow:

Code:

Windows Resource Protection did not find any integrity violations.

Run:

SFCfromFile.bat - Click here to go to the BSOD batch repository to download and run this batch file.

LOGS.bat - Click here to go to the BSOD batch repository to download and run this batch file.

HD Tune results (I let the Health check update a few times but there were no entries)

I'll try running the next 2 bat files you listed.

Run Crystal Disk standard edition:
CrystalDiskInfo – Crystal Dew World
Post images into the thread.


Run HD Sentinel: (free or trial edition)
Hard Disk Sentinel - HDD health and temperature monitoring
Hard Disk Sentinel - HDD health and temperature monitoring
For each drive post images of these tabs into the thread:
Overview tab
Temperature
SMART
Disk performance

SFCfromFile.bat results below. I pressed [C] to close the window.

LOGS.bat would not run. Similar result to the first 2 bat files I tried to run.

I'll run the next 2 tests.

Open administrative command prompt (ACP) and type or copy and paste:

findstr /c:"[SR]" %windir%\Logs\CBS\CBS.log >"%userprofile%\Desktop\sfcdetails.txt"

Findstr /c:"[SR]" "C:\WINDOWS\Logs\CBS\CBS.log" > %UserProfile%\Desktop\Cbs.txt


Find the new text files on the desktop > post share links


Open administrative Powershell (PS) and copy and paste:


Attachment 311904


Post a share link