There was 1 misbehaving driver identified debugging the latest mini dump file.
There were 2 additional faulting applications/bsod reported in windows error reporting.
Uninstall and reinstall these drivers:
1) athw10x.sys (Qualcom Atheros Network adapter)
2) rzendpt.sys (Razer endpoint driver)
3) MBfilt64.sys (Realtek high definition audio driver)
Updating a driver. - Microsoft Community
Code:
BugCheck 1E, {ffffffffc0000005, fffff805214887b0, 0, ffffffffffffffff}*** WARNING: Unable to verify timestamp for athw10x.sys*** ERROR: Module load completed but symbols could not be loaded for athw10x.sys*** WARNING: Unable to verify timestamp for win32k.sys*** ERROR: Module load completed but symbols could not be loaded for win32k.sysProbably caused by : Ndu.sys ( Ndu!guard_dispatch_icall_nop+0 )
Code:
athr Qualcomm Atheros Exten Qualcomm Atheros Exten Kernel Manual Running OK TRUE FALSE 0 3,604,480 0 5/12/2016 3:18:32 AM C:\WINDOWS\system32\drivers\athw10x.sys
Code:
Event[55]: Log Name: System Source: Service Control Manager Date: 2017-06-16T12:15:45.441 Event ID: 7045 Task: N/A Level: Information Opcode: N/A Keyword: Classic User: S-1-5-18 User Name: NT AUTHORITY\SYSTEM Computer: Shirubidu-PC Description: A service was installed in the system.Service Name: Qualcomm Atheros Extensible Wireless LAN device driverService File Name: \SystemRoot\System32\drivers\athw10x.sysService Type: controlador de modo de kernelService Start Type: Início pedidoService Account:
Code:
Name [00000001] Qualcomm Atheros AR9287 Wireless Network AdapterAdapter Type Ethernet 802.3Product Type Qualcomm Atheros AR9287 Wireless Network AdapterInstalled YesPNP Device ID PCI\VEN_168C&DEV_002E&SUBSYS_30A4168C&REV_01\4&10EE5168&0&00E6Last Reset 8/8/2017 10:30 PMIndex 1Service Name athrIP Address 192.168.1.70, fe80::b50b:b975:4654:1d64, 2001:8a0:e462:5301:a0c2:1a11:bed1:e2b1, 2001:8a0:e462:5301:b50b:b975:4654:1d64IP Subnet 255.255.255.0, 64, 128, 64Default IP Gateway 192.168.1.254, fe80::21f:9fff:fe7c:75a8DHCP Enabled YesDHCP Server 192.168.1.254DHCP Lease Expires 8/8/2017 11:31 PMDHCP Lease Obtained 8/8/2017 10:31 PMMAC Address 14:CC:20:64:9E:BFMemory Address 0xF7100000-0xF71FFFFFIRQ Channel IRQ 18Driver c:\windows\system32\drivers\athw10x.sys (10.0.0.341, 4.12 MB (4,317,112 bytes), 2/25/2017 3:01 PM)
Code:
7/31/2017 2:10 PM Windows Error Reporting Fault bucket 0xc4_2000_VRF_rzendpt!unknown_function, type 0
Event Name: BlueScreen
Response: Não disponível
Cab Id: 359d0dbf-c1ab-4208-b57c-2e7f16d6322a
Problem signature:
P1: c4
P2: 2000
P3: fffff808e58226e5
P4: 0
P5: 6e657a72
P6: 10_0_15063
P7: 0_0
P8: 768_1
P9:
P10:
Attached files:
\\?\C:\WINDOWS\Minidump\073117-3156-01.dmp
\\?\C:\Windows\Temp\WER-3765-0.sysdata.xml
\\?\C:\WINDOWS\MEMORY.DMP
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER182B.tmp.WERInternalMetadata.xml
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER183B.tmp.csv
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER183C.tmp.txt
These files may be available here:
C:\ProgramData\Microsoft\Windows\WER\ReportArchive\Kernel_c4_4f7cd46a31ab1e921789cdfc48fab9aea703e51_00000000_cab_1120c7e3
Analysis symbol:
Rechecking for solution: 0
Report Id: 591e4a96-57fc-415b-bbaa-0654844d6dbb
Report Status: 268435556
Hashed bucket:7/31/2017 1:40 PM Windows Error Reporting Fault bucket 0xc4_2000_VRF_rzendpt!unknown_function, type 0
Event Name: BlueScreen
Response: Não disponível
Cab Id: 5abe180e-d466-414a-9907-4d08857f81fd
Problem signature:
P1: c4
P2: 2000
P3: fffff801e0da26e5
P4: 0
P5: 6e657a72
P6: 10_0_15063
P7: 0_0
P8: 768_1
P9:
P10:
Attached files:
\\?\C:\WINDOWS\Minidump\073117-3187-01.dmp
\\?\C:\Windows\Temp\WER-3828-0.sysdata.xml
\\?\C:\WINDOWS\MEMORY.DMP
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER185A.tmp.WERInternalMetadata.xml
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER186A.tmp.csv
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER186B.tmp.txt
These files may be available here:
C:\ProgramData\Microsoft\Windows\WER\ReportArchive\Kernel_c4_81b8ae849b5496d2d78ef0b78856571942b018a7_00000000_cab_06072a9b
Analysis symbol:
Rechecking for solution: 0
Report Id: b2012fe8-8299-44f1-8c74-50e456ffec3a
Report Status: 268435556
Hashed bucket:7/31/2017 6:30 PM Windows Error Reporting Fault bucket 0xc4_2000_VRF_rzendpt!unknown_function, type 0
Event Name: BlueScreen
Response: Não disponível
Cab Id: c695af54-46cf-4117-a0b6-67c8b82e087b
Problem signature:
P1: c4
P2: 2000
P3: fffff80405df26e5
P4: 0
P5: 6e657a72
P6: 10_0_15063
P7: 0_0
P8: 768_1
P9:
P10:
Attached files:
\\?\C:\WINDOWS\Minidump\073117-3046-01.dmp
\\?\C:\Windows\Temp\WER-3671-0.sysdata.xml
\\?\C:\WINDOWS\MEMORY.DMP
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER16D3.tmp.WERInternalMetadata.xml
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER16E3.tmp.csv
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER16F4.tmp.txt
These files may be available here:
C:\ProgramData\Microsoft\Windows\WER\ReportArchive\Kernel_c4_d674804f1b6e9049eebe8ed9e854554af2be7756_00000000_cab_15c467e1
Analysis symbol:
Rechecking for solution: 0
Report Id: 65d0fafb-441f-43eb-92da-71cefc75a731
Report Status: 268435456
Hashed bucket:7/31/2017 5:08 PM Windows Error Reporting Fault bucket 0xc4_2000_VRF_rzendpt!unknown_function, type 0
Event Name: BlueScreen
Response: Não disponível
Cab Id: f2208b13-71ac-498f-8ea3-0b0e30acf98a
Problem signature:
P1: c4
P2: 2000
P3: fffff801ae2126e5
P4: 0
P5: 6e657a72
P6: 10_0_15063
P7: 0_0
P8: 768_1
P9:
P10:
Attached files:
\\?\C:\WINDOWS\Minidump\073117-3109-01.dmp
\\?\C:\Windows\Temp\WER-3765-0.sysdata.xml
\\?\C:\WINDOWS\MEMORY.DMP
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER1ACB.tmp.WERInternalMetadata.xml
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER1ADB.tmp.csv
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER1AEB.tmp.txt
These files may be available here:
C:\ProgramData\Microsoft\Windows\WER\ReportArchive\Kernel_c4_7b2edf229362ba1eaafde8dcc1edfa95f787a76_00000000_cab_108c7484
Analysis symbol:
Rechecking for solution: 0
Report Id: c94fe2d6-9f3c-4793-a65d-9f0493a5bafb
Report Status: 268435556
Hashed bucket:
Code:
rzendpt rzendpt rzendpt Kernel Manual Running OK TRUE FALSE 0 24,576 0 10/26/2016 9:12:17 AM C:\WINDOWS\system32\drivers\rzendpt.sys
Code:
Event[265]: Log Name: System Source: Microsoft-Windows-UserPnp Date: 2017-06-16T12:31:52.417 Event ID: 20001 Task: N/A Level: Information Opcode: Info Keyword: N/A User: S-1-5-18 User Name: NT AUTHORITY\SYSTEM Computer: Shirubidu-PC Description: Driver Management concluded the process to install driver rzendpt.inf_amd64_133c0279cc15cf2c\rzendpt.inf for Device Instance ID USB\VID_1532&PID_0043&MI_01\6&2A98FD20&0&0001 with the following status: 0x0.
Code:
7/31/2017 2:10 PM Windows Error Reporting Fault bucket 0xc4_2000_VRF_MBfilt64!unknown_function, type 0
Event Name: BlueScreen
Response: Não disponível
Cab Id: e5f55e00-754e-450d-8c7b-90ecb4ff616b
Problem signature:
P1: c4
P2: 2000
P3: fffff802cb5b4b94
P4: 0
P5: 774e6350
P6: 10_0_15063
P7: 0_0
P8: 768_1
P9:
P10:
Attached files:
\\?\C:\WINDOWS\Minidump\073117-3203-01.dmp
\\?\C:\Windows\Temp\WER-3703-0.sysdata.xml
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER183B.tmp.WERInternalMetadata.xml
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER183B.tmp.csv
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER184B.tmp.txt
\\?\C:\Windows\Temp\WER7B0D.tmp.WERDataCollectionStatus.txt
These files may be available here:
C:\ProgramData\Microsoft\Windows\WER\ReportArchive\Kernel_c4_2dcea9c4cb767bd48622e97d5c434b4e65c4d_00000000_cab_11207f9f
Analysis symbol:
Rechecking for solution: 0
Report Id: f38850e4-f626-4eef-a856-8dd849ef6d90
Report Status: 268435556
Hashed bucket:
Code:
MBfilt MBfilt MBfilt Kernel Manual Stopped OK FALSE FALSE 4,096 12,288 0 7/31/2009 4:40:32 AM C:\WINDOWS\system32\drivers\MBfilt64.sys
Code:
Event[2842]: Log Name: System Source: Service Control Manager Date: 2017-07-10T16:45:24.966 Event ID: 7045 Task: N/A Level: Information Opcode: N/A Keyword: Classic User: S-1-5-18 User Name: NT AUTHORITY\SYSTEM Computer: Shirubidu-PC Description: A service was installed in the system.Service Name: MBfiltService File Name: \SystemRoot\system32\drivers\MBfilt64.sysService Type: controlador de modo de kernelService Start Type: Início pedidoService Account: