Endless BSOD cycle in Build 14295 (and 14342)

whitebloodcell · 28 May 2016

Have not had any issues until today. Recently upgraded to Build 14342. Now in endless loop of BSOD, only get a minute or two after login before BSOD. A variety of reasons are given for the crashes. Tried rolling back to an earlier build but problem persists. Have attached the debug output as requested, any advice would be greatly appreciated. Attachment 82133

Bluescreen view pointed to a few different drivers responsible. I could find anything on one of them, iorate.sys.

Ztruker · 28 May 2016

You're missing a lot of files from the DM Log collecter zip file.
Please try running it again in Administrator Mode by right clicking on it and selecting Run as Administrator.

Code:

*** WARNING: Unable to verify timestamp for win32k.sys
*** ERROR: Module load completed but symbols could not be loaded for win32k.sys
Probably caused by : memory_corruption ( nt!MiCoalesceFreePages+460 )

Memory corruption is often caused by defective RAM. Download Memtest86+ (you want the 2nd one Download - Pre-Compiled Bootable ISO (.zip)). Unzip it then create a CD from the iso file using your CD burning software. There is a good freeware burner called ImgBurn which will do this easily.

DO NOT burn the .iso file directly to CD. It must be used as input to a program that knows what to do with it, like the one I mentioned above.

You can do this on any computer that has a working CD Burner.

You can also use a Flash drive instead of a CD.

Download - Auto-installer for USB Key (Win 9x/2k/xp/7) *NEW!*.
Unzip and run Memtest86+ USB Installer.exe.
It will format the flash drive if you tell it to. I used a small, 16MB flash drive and it had 8.5GB left when done.

Boot the CD or Flash drive and run Memtest86+ for at least 3 complete passes unless it shows errors sooner than that. An overnight run is even better.

whitebloodcell · 29 May 2016

Attachment 82242

New debug files attached. Ran Memtest but it found no errors.

Ztruker · 29 May 2016

Genuine.txt still missing from zip.
I see service_KMS.exe running. This is normally used to illegally activate MS Office or bypass Office activation.

How many passes did you run memtest86+ for? 3 is minimum, 10 is the normal recommendation, over night is best.

If it's not RAM then the most likely cause is a driver. Please run Driver Verifier as described here:

Driver Verifier - Enable and Disable in Windows 10 - Windows 10 Forums

Note this at the top of the above link:

Attachment 82334