Please help fix BSOD and random crashes.

Hello,

Code:

MY specs: 
Computer type:
Laptop
System Manufacturer/Model Number:
Acer Nitro AN515-44
OS:
Windows 10 Version 21H1 (OS Build 19043.1889)
CPU:
AMD Ryzen 5 4600H
Motherboard:
RO Stonic_RNS AMD Promontory/Bixby FCH
Memory:
8 GBytes DDR4 SDRAM SO-DIMM Micron Kingston 770851898 (3A44F22D) ACR32D4S2S1ME-8
Graphics Card(s):
NVIDIA GeForce GTX 1650 Ti (TU117M) 4096 MBytes of GDDR6 SDRAM and AMD Radeon (Renoir) [ACER]
Sound Card:
AMD Zen - Audio Processor and NVIDIA TU117 - High Definition Audio Controller
Monitor(s) Displays:
Chi Mei [Unknown Model: CMN15E7] N156HCA-EAB CMN N156HCA-EAB
Screen Resolution:
1920 x 1080
Hard Drives:
1)SK hynix BC511 HFM256GDJTNI-82A0 256 GB M.2 NVMe SSD
2)Seagate 1TB BarracudaHard Drive ST1000LM049 (SATA 6Gb/s/128MB/7200 RPM)
Keyboard:
Builtin FUJ7401 Fujitsu PS/2 Keyboard
Mouse:
HID-compliant mouse Driver ELAN I2C Filter Driver

Could you please check my logs to find out what' the issue ?
It is happening randomly especially if I try to use MS 365 excel and Dev Azure portal in m browser. Happened in other cases as well. Giving link to V2 log collector here.

Sign in to your account

1) Please open the Ten Forums forum for BSOD > batch files > scroll to near the bottom > run Tuneup plus > post a share link

Batch files for use in BSOD debugging


2) C: drive free space = approximately 19 GB > increase free space so that there is greater than 30 GB free space

3) Make sure that windows and third party software clean are not used during the troubleshooting so that Windows error reporting and other troubleshooting files are not deleted

4) List all hardware attached to the computer ports (mouse, keyboard, joy stick, docking station, etc )

5) Uninstall Sophos antivirus using the applicable uninstall tool

(Uninstall the software related to sbiedrv sys)

6) Make sure that Microsoft defender is on

7) Perform Windows and Microsoft defender updates

8) Create a new restore point

9) For any BSOD after completing all of the above steps post a new V2 share link into the newest post

10) If there are no BSOD for one week then plan to reinstall Sophos or continue using Microsoft defender

zbook said:

1) Please open the Ten Forums forum for BSOD > batch files > scroll to near the bottom > run Tuneup plus > post a share link

Batch files for use in BSOD debugging


2) C: drive free space = approximately 19 GB > increase free space so that there is greater than 30 GB free space

3) Make sure that windows and third party software clean are not used during the troubleshooting so that Windows error reporting and other troubleshooting files are not deleted

4) List all hardware attached to the computer ports (mouse, keyboard, joy stick, docking station, etc )

5) Uninstall Sophos antivirus using the applicable uninstall tool

(Uninstall the software related to sbiedrv sys)

6) Make sure that Microsoft defender is on

7) Perform Windows and Microsoft defender updates

8) Create a new restore point

9) For any BSOD after completing all of the above steps post a new V2 share link into the newest post

10) If there are no BSOD for one week then plan to reinstall Sophos or continue using Microsoft defender

Thank you so much for looking into my issue. Much appreciated.

1) Here's the tuneup log Sign in to your account

2) Ok I will try to cleanup C drive asap . Those appdata/ appdata local folders and uwp apps are taking up lots of spaces.

3)OK

4) Wireless mouse logitech M331, headphone and ethernet cable , charger. Nothing else is connected. Internal keyboard of laptop.

5)I did not have any sophos antivirus, sbiedrv sys is a driver of sandboxie plus afaik. I uninstalled it

6) Umm I do not use antivirus since last 10 years. I tried malware bytes for occasional scanning, malware bytes anti exploit, malware bytes anti ransomware. But as of now not using it. I am careful while downloading and executing files, scripts , clicking links etc. Used to have ublock origin and umatrix in chrome, foolishIT software restriction policies and other stuffs but no defender to slow down my pc. I have seen noticeable difference

7) Again no defender . and about updates I have disabled it and only install selected KB if it has new feature or severe security fix that has no reported BSOD associated with that update.

8)OK done

9) I have not experienced crash as I have not visited these 2 sites till now. I heavily expect it's chrome (I use cent browser) extension or userscript. I will try to visit these sites in chrome's safe mode .

10)Again I do not use antivirus . But I understand it is indispensable for many. Could you tell me where you have noticied any Sophos products?

There were sfc /scannow and dism problems.

Which software / methods are in use to prevent Windows updates?


Please post share links for:

C:\Windows\Logs\CBS\CBS.log

C:\Windows\Logs\Dism\Dism.log


There was no Sophos problem; it was Sandboxie-Plus\SbieDrv.sys.

Code:

G:\Softwares\Sandboxie-Plus\SbieDrv.sys

Code:

sbiedrv	SbieDrv	\??\g:\softwares\sandboxie-plus\sbiedrv.sys	Kernel Driver

Code:

Sandboxie Service	SbieSvc	Stopped	Auto	Own Process	"g:\softwares\sandboxie-plus\sbiesvc.exe"

Code:

    Started on 09-Apr-24 at 22:29:01.56 
	
        [SFC /ScanNow] 
	
Windows Resource Protection could not start the repair service.
 
==================================================================
 
A TXT file named SFC_details-1.txt has been created.

==================================================================

    Started on 09-Apr-24 at 22:29:01.91 

        [DISM /online /cleanup-image /ScanHealth] 

Deployment Image Servicing and Management tool
Version: 10.0.19041.844

Image Version: 10.0.19043.1889 
 
Error: 87
The cleanup-image option is unknown. 
For more information, refer to the help by running DISM.exe /?.
The DISM log file can be found at C:\WINDOWS\Logs\DISM\dism.log
 
==================================================================

    Started on 09-Apr-24 at 22:29:14.16 

        [DISM /online /cleanup-image /RestoreHealth] 

Deployment Image Servicing and Management tool
Version: 10.0.19041.844

Image Version: 10.0.19043.1889 
 
Error: 87
The cleanup-image option is unknown. 
For more information, refer to the help by running DISM.exe /?.
The DISM log file can be found at C:\WINDOWS\Logs\DISM\dism.log
 
==================================================================

    Started on 09-Apr-24 at 22:29:26.41 

        [SFC /ScanNow] 

Windows Resource Protection could not start the repair service.

Code:

Event[26914]:
  Log Name: System
  Source: Service Control Manager
  Date: 2024-04-06T22:04:00.9620000Z
  Event ID: 7023
  Task: N/A
  Level: Error
  Opcode: N/A
  Keyword: Classic
  User: N/A
  User Name: N/A
  Computer: LAPTOP-QI0O5LGE
  Description: 
The Windows Update service terminated with the following error: 
The specified module could not be found.

Code:

Event[25490]:
  Log Name: System
  Source: Microsoft-Windows-WER-SystemErrorReporting
  Date: 2024-04-06T00:38:52.8980000Z
  Event ID: 1018
  Task: N/A
  Level: Information
  Opcode: N/A
  Keyword: Classic
  User: N/A
  User Name: N/A
  Computer: LAPTOP-QI0O5LGE
  Description: 
The dump file at location: C:\WINDOWS\MEMORY.DMP was deleted because the disk volume had less than 25 GB free space.

Which software / methods are in use to prevent Windows updates?

I disabled updates mainly using:
Wu10man
Winaero tweaker

Disabled Telemetry using :
O&O ShutUp10++:Free antispy tool for Windows 10 and 11
Sophia Script for Windows

If you want I can enable windows updates. Let me try to clear up 30GB in C drive and then recreate the crash . I will then post the logs again so that there will dump files.

Please make an additional backup image as necessary.

Run Windows and defender updates.

Report any updated drivers.

Run Tuneup plus > post a share link.



For each of the software / scripts what are their pro / con?
What happens if only one or two were used as compared to all?

zbook said:

Please make an additional backup image as necessary.

Run Windows and defender updates.

Report any updated drivers.

Run Tuneup plus > post a share link.



For each of the software / scripts what are their pro / con?
What happens if only one or two were used as compared to all?

WIll give you an update by today.

As for the softwares Wu10Man disables 4/5 services like windows update, update orchestrator, modules installer and so on, Blocks Microsoft hosts used to download updates, disable downloads using GPO, defers update for than 365 days, and other stuffs.

Winaero is a customizing software is mainly disables windows update using registry, disables drivers downloads during updates and disables automatic updates of Microsoft Store