Randoms BSOD

Please uninstall Malwarebytes.

WDV testing is useful to rule in / out misbehaving drivers and decide whether to test hardware.


The latest BSOD was on 07/25 and was bugcheck 7E.

The memory dump was three weeks ago and was bugcheck WHEA 124.

Can I ask if Malwarebytes with Windows Defender is a good Security combo? Or I only uninstall to testing and when are done I install it again?

@zbook is there any evidence of MBAM being the problem other than a Stop 0x7E which wasn't saved and could be related to anything?

@CoralZeus please provide the output the registry queries so we can see what else is connected to your storage stack.

Win10Warlord said:

@zbook is there any evidence of MBAM being the problem other than a Stop 0x7E which wasn't saved and could be related to anything?

Uninstalling Malwarebytes was not related to BSOD and was just for the software problems reported in the log files.

- - - Updated - - -

Thanks, gameflt.sys is known to cause problems, particularly Stop 0x7Es so let's remove it along with the Xbox miniport driver using FRST:

FRST Registry Search
1. Click your Start button and type in cmd.
2.After you find the Command Prompt, right click on it and select Run as Administrator.
3. Copy and paste the following into the Command Prompt:

reg load HKLM\DRIVERS C:\WINDOWS\SYSTEM32\CONFIG\DRIVERS

4. Please download Farbar Recovery Scan Tool and save it to your Desktop.
Note: You need to run the 64-bit Version so please ensure you download that one.
5. Run FRST64 by Right-Clicking on the file and choosing Run as administrator.
6. Copy and paste gameflt; XVDD into the Search box and click the Search Registry button.
7. When the scan is complete a notepad window will open with the results. Please attach this to your next reply. It is saved on your desktop named SearchReg.txt.

Here is the SearchReg.txt

SearchReg.txt

- - - Updated - - -

Sorry , i do another search with only XVDD and here is the results . I think that in the early txt was a space between the XVDD and the gameflt; and for that reason the search doesnt find results ?

xvdd.txt

Thanks, it looks like it assumed that the whitespace was part of the driver name while searching, gameflt;XVDD should have worked correctly.

FRST Fix
NOTICE: This script was written specifically for this user, for use on that particular machine. Running this on another machine may cause damage to your operating system
1. Download the attached fixlist.txt and save it to the Desktop.
Note. It's important that both files, FRST64 and fixlist.txt are in the same location or the fix will not work (in this case...the desktop).
2. Run FRST64 by Right-Clicking on the file and choosing Run as administrator.
3. Press the Fix button just once and wait. If for some reason the tool needs a restart, please make sure you let the system restart normally. After that let the tool complete its run.
4. When finished FRST64 will generate a log on the Desktop (Fixlog.txt). Please post the contents of it in your reply.

The script will request for a reboot so please ensure that you have closed any applications and saved any documents before running FRST. Once the machine has rebooted, then please continue to use the machine as you normally would and upload any dump files again if you have any more crashes.

Here is the .txt ! Thanks

Fixlog.txt

Win10Warlord said:

Thanks, there isn't too much additional information but at least we have a little bit more to work with, I was hoping we would find where the surprise removal request possibly originated from.

Could you please open a command prompt window and then enter the following commands:

Code:

reg query HKLM\System\CurrentControlSet\Control\Class\{71a27cdd-812a-11d0-bec7-08002be2092f}
reg query HKLM\System\CurrentControlSet\Control\Class\{4d36e967-e325-11ce-bfc1-08002be10318}
reg query HKLM\System\CurrentControlSet\Control\Class\{4d36e97b-e325-11ce-bfc1-08002be10318}

Additionally, please open an elevated (admin) command prompt and then enter the following command:

Code:

fltmc filters

What were you seeking?

What did you find?