The bsod were seen in some of the logs however one of the events was crash dump failed.
When a crash dump fails there is no mini dump file to debug.
It's unclear how whocrashed was able to process the dump.
If it was that means that it had had to exist.
So make sure that if Ccleaner is being used that the settings are modified so that it does not delete dump files.
Please post into the thread the whocrashed result.
The mbam is malwarebytes. So it may need to be uninstalled.
It did find a PUP.
The Rocket League crash was reported in the windows events.
When it crashed it involved Nvidia.
So this may need some more testing to see whether the Nvidia driver was a cause of the dump as there were more crashes than dumps. With more mini dump files to debug the misbehaving driver may become apparent when using windows driver verifier again.
To make sure any possible malware is addressed run these scanners on the computer and post the results into the thread:
Downloads - AdwCleaner - ToolsLib
SUPERAntiSpyware | Remove Malware | Remove Spyware - AntiMalware, AntiSpyware, AntiAdware!
Free Virus Scan | Online Virus Scan from ESET ESET
Are you using Intel Speedstep?
Code:
Event[10123]: Log Name: System
Source: volmgr
Date: 2017-08-16T15:57:05.593
Event ID: 46
Task: N/A
Level: Error
Opcode: N/A
Keyword: Classic
User: N/A
User Name: N/A
Computer: DESKTOP-N44VCA9
Description:
Crash dump initialization failed!
Code:
Event[10287]: Log Name: System
Source: Microsoft-Windows-StartupRepair
Date: 2017-08-16T16:05:20.953
Event ID: 1002
Task: N/A
Level: Information
Opcode: Info
Keyword: N/A
User: S-1-5-18
User Name: NT AUTHORITY\SYSTEM
Computer: DESKTOP-N44VCA9
Description:
Startup Repair failed.
Code:
Event[10270]: Log Name: System
Source: Microsoft-Windows-Kernel-Processor-Power
Date: 2017-08-16T16:05:14.408
Event ID: 35
Task: N/A
Level: Error
Opcode: Info
Keyword: N/A
User: S-1-5-18
User Name: NT AUTHORITY\SYSTEM
Computer: DESKTOP-N44VCA9
Description:
Performance power management features on processor 10 in group 0 are disabled due to a firmware problem. Check with the computer manufacturer for updated firmware.
Code:
Event[10268]: Log Name: System
Source: Microsoft-Windows-Kernel-Processor-Power
Date: 2017-08-16T16:05:14.408
Event ID: 35
Task: N/A
Level: Error
Opcode: Info
Keyword: N/A
User: S-1-5-18
User Name: NT AUTHORITY\SYSTEM
Computer: DESKTOP-N44VCA9
Description:
Performance power management features on processor 9 in group 0 are disabled due to a firmware problem. Check with the computer manufacturer for updated firmware.
Code:
Event[10266]: Log Name: System
Source: Microsoft-Windows-Kernel-Processor-Power
Date: 2017-08-16T16:05:14.408
Event ID: 35
Task: N/A
Level: Error
Opcode: Info
Keyword: N/A
User: S-1-5-18
User Name: NT AUTHORITY\SYSTEM
Computer: DESKTOP-N44VCA9
Description:
Performance power management features on processor 8 in group 0 are disabled due to a firmware problem. Check with the computer manufacturer for updated firmware.
Code:
Event[10264]: Log Name: System
Source: Microsoft-Windows-Kernel-Processor-Power
Date: 2017-08-16T16:05:14.407
Event ID: 35
Task: N/A
Level: Error
Opcode: Info
Keyword: N/A
User: S-1-5-18
User Name: NT AUTHORITY\SYSTEM
Computer: DESKTOP-N44VCA9
Description:
Performance power management features on processor 7 in group 0 are disabled due to a firmware problem. Check with the computer manufacturer for updated firmware.
Code:
Event[10209]: Log Name: System
Source: Service Control Manager
Date: 2017-08-16T16:03:28.903
Event ID: 7001
Task: N/A
Level: Error
Opcode: N/A
Keyword: Classic
User: N/A
User Name: N/A
Computer: DESKTOP-N44VCA9
Description:
The mrxsmb service depends on the rdbss service which failed to start because of the following error:
A device attached to the system is not functioning.
Code:
8/16/2017 10:08 PM Windows Error Reporting Fault bucket , type 0
Event Name: BlueScreen
Response: Not available
Cab Id: 0
Problem signature:
P1: c4
P2: 2006
P3: ffffc400b0857ef8
P4: fffff8025e8d01b0
P5: ffff9780eae4f6b8
P6: 10_0_15063
P7: 0_0
P8: 256_1
P9:
P10:
Attached files:
\\?\C:\Windows\Minidump\081617-8125-01.dmp
\\?\C:\Windows\Temp\WER-8359-0.sysdata.xml
\\?\C:\Windows\MEMORY.DMP
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER28D5.tmp.WERInternalMetadata.xml
These files may be available here:
C:\ProgramData\Microsoft\Windows\WER\ReportArchive\Kernel_c4_9914c188b69621b8d2704518562ea78d2191d1_00000000_cab_2ff2e3de
Analysis symbol:
Rechecking for solution: 0
Report Id: 1a2763a2-6989-48b0-b0a2-64181b05c672
Report Status: 2049
Hashed bucket:8/16/2017 10:03 PM Windows Error Reporting Fault bucket , type 0
Event Name: BlueScreen
Response: Not available
Cab Id: 0
Problem signature:
P1: c4
P2: 2006
P3: ffffc400b0857ef8
P4: fffff8025e8d01b0
P5: ffff9780eae4f6b8
P6: 10_0_15063
P7: 0_0
P8: 256_1
P9:
P10:
Attached files:
\\?\C:\Windows\Minidump\081617-8125-01.dmp
\\?\C:\Windows\Temp\WER-8359-0.sysdata.xml
\\?\C:\Windows\MEMORY.DMP
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER28D5.tmp.WERInternalMetadata.xml
These files may be available here:
C:\ProgramData\Microsoft\Windows\WER\ReportQueue\Kernel_c4_9914c188b69621b8d2704518562ea78d2191d1_00000000_02cc28e4
Analysis symbol:
Rechecking for solution: 0
Report Id: 1a2763a2-6989-48b0-b0a2-64181b05c672
Report Status: 4
Hashed bucket:8/16/2017 9:57 PM Windows Error Reporting Fault bucket 109089991477, type 1
Event Name: APPCRASH
Response: Not available
Cab Id: 0
Problem signature:
P1: NVIDIA Share.exe
P2: 59.3071.1634.2
P3: 5978c893
P4: libcef.dll
P5: 3.3071.1634.0
P6: 59498c26
P7: c0000005
P8: 01df0a00
P9:
P10:
Attached files:
\\?\C:\Users\Cesar\AppData\Local\Temp\WER9964.tmp.WERDataCollectionStatus.txt
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WERACF9.tmp.csv
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WERAD19.tmp.txt
These files may be available here:
C:\ProgramData\Microsoft\Windows\WER\ReportArchive\AppCrash_NVIDIA Share.exe_fecadec545c26c3eedb7268451b6bc74cc11991_b98ed6fd_3020d8eb
Analysis symbol:
Rechecking for solution: 0
Report Id: 6088b033-ff5c-4177-add1-546f61200259
Report Status: 268435456
Hashed bucket: 503347b1bbb676ff0a32c37cb5dba55b8/16/2017 9:55 PM Windows Error Reporting Fault bucket , type 0
Event Name: APPCRASH
Response: Not available
Cab Id: 0
Problem signature:
P1: RocketLeague.exe
P2: 1.0.10897.0
P3: 59656779
P4: RocketLeague.exe
P5: 1.0.10897.0
P6: 59656779
P7: c0000005
P8: 000fb411
P9:
P10:
Attached files:
\\?\C:\Users\Cesar\AppData\Local\Temp\WEREE62.tmp.WERDataCollectionStatus.txt
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER1EB.tmp.csv
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER1FB.tmp.txt
These files may be available here:
C:\ProgramData\Microsoft\Windows\WER\ReportArchive\AppCrash_RocketLeague.exe_5458689a1639c6eb4ea8503990b227c99b13_422dd9cd_1042183d
Analysis symbol:
Rechecking for solution: 0
Report Id: d8069970-da3b-4505-aa21-2a7a54b2978e
Report Status: 97
Hashed bucket:8/16/2017 9:54 PM Windows Error Reporting Fault bucket 109032282452, type 1
Event Name: APPCRASH
Response: Not available
Cab Id: 0
Problem signature:
P1: RocketLeague.exe
P2: 1.0.10897.0
P3: 59656779
P4: MSVCR100.dll
P5: 10.0.40219.325
P6: 4df2be1e
P7: c0000005
P8: 00001ed7
P9:
P10:
Attached files:
\\?\C:\Users\Cesar\AppData\Local\Temp\WERF52D.tmp.WERDataCollectionStatus.txt
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER8B4.tmp.csv
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER8C4.tmp.txt
These files may be available here:
C:\ProgramData\Microsoft\Windows\WER\ReportArchive\AppCrash_RocketLeague.exe_3f5b0662e45e1ae81bb79aeb8d54a8679ef4c40_422dd9cd_2c7d33e8
Analysis symbol:
Rechecking for solution: 0
Report Id: e2538b40-b1ef-4c3f-a19d-286361fe536d
Report Status: 268435456
Hashed bucket: 4b39c1e8d82872d1af98a4a69dac8e628/16/2017 9:53 PM Windows Error Reporting Fault bucket 120796282341, type 4
Event Name: APPCRASH
Response: Not available
Cab Id: 0
Problem signature:
P1: dwm.exe
P2: 10.0.15063.0
P3: 982d0cc7
P4: dwmcore.dll
P5: 10.0.15063.483
P6: 460f87da
P7: c0000005
P8: 00000000000d6670
P9:
P10:
Attached files:
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER5197.tmp.WERInternalMetadata.xml
These files may be available here:
C:\ProgramData\Microsoft\Windows\WER\ReportArchive\AppCrash_dwm.exe_23cfb1be8d2daa5691af1d2d7ffc6d69732f89_9adbe171_27c456a8
Analysis symbol:
Rechecking for solution: 0
Report Id: 62da2a6c-e06a-4942-b1e5-09d86320abd1
Report Status: 268435456
Hashed bucket: 574401dcfe9d4bb238a778dcc20e91878/16/2017 9:53 PM Windows Error Reporting Fault bucket , type 0
Event Name: APPCRASH
Response: Not available
Cab Id: 0
Problem signature:
P1: dwm.exe
P2: 10.0.15063.0
P3: 982d0cc7
P4: dwmcore.dll
P5: 10.0.15063.483
P6: 460f87da
P7: c0000005
P8: 00000000000d6670
P9:
P10:
Attached files:
These files may be available here:
C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_dwm.exe_23cfb1be8d2daa5691af1d2d7ffc6d69732f89_9adbe171_10e44fa3
Analysis symbol:
Rechecking for solution: 0
Report Id: 62da2a6c-e06a-4942-b1e5-09d86320abd1
Report Status: 4
Hashed bucket:
8/16/2017 9:57 PM Application Error Faulting application name: NVIDIA Share.exe, version: 59.3071.1634.2, time stamp: 0x5978c893
Faulting module name: libcef.dll, version: 3.3071.1634.0, time stamp: 0x59498c26
Exception code: 0xc0000005
Fault offset: 0x01df0a00
Faulting process id: 0xfac
Faulting application start time: 0x01d316daa7faa9fa
Faulting application path: C:\Program Files (x86)\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA Share.exe
Faulting module path: C:\Program Files (x86)\NVIDIA Corporation\NVIDIA GeForce Experience\libcef.dll
Report Id: 6088b033-ff5c-4177-add1-546f61200259
Faulting package full name:
Faulting package-relative application ID:8/16/2017 9:55 PM Application Error Faulting application name: RocketLeague.exe, version: 1.0.10897.0, time stamp: 0x59656779
Faulting module name: RocketLeague.exe, version: 1.0.10897.0, time stamp: 0x59656779
Exception code: 0xc0000005
Fault offset: 0x000fb411
Faulting process id: 0x2be8
Faulting application start time: 0x01d316da532e446e
Faulting application path: C:\Program Files (x86)\Steam\steamapps\common\rocketleague\Binaries\Win32\RocketLeague.exe
Faulting module path: C:\Program Files (x86)\Steam\steamapps\common\rocketleague\Binaries\Win32\RocketLeague.exe
Report Id: d8069970-da3b-4505-aa21-2a7a54b2978e
Faulting package full name:
Faulting package-relative application ID:8/16/2017 9:54 PM Application Error Faulting application name: RocketLeague.exe, version: 1.0.10897.0, time stamp: 0x59656779
Faulting module name: MSVCR100.dll, version: 10.0.40219.325, time stamp: 0x4df2be1e
Exception code: 0xc0000005
Fault offset: 0x00001ed7
Faulting process id: 0x2464
Faulting application start time: 0x01d316da243562ca
Faulting application path: C:\Program Files (x86)\Steam\steamapps\common\rocketleague\Binaries\Win32\RocketLeague.exe
Faulting module path: C:\Windows\SYSTEM32\MSVCR100.dll
Report Id: e2538b40-b1ef-4c3f-a19d-286361fe536d
Faulting package full name:
Faulting package-relative application ID:8/16/2017 9:53 PM Application Error Faulting application name: dwm.exe, version: 10.0.15063.0, time stamp: 0x982d0cc7
Faulting module name: dwmcore.dll, version: 10.0.15063.483, time stamp: 0x460f87da
Exception code: 0xc0000005
Fault offset: 0x00000000000d6670
Faulting process id: 0x474
Faulting application start time: 0x01d316d97801985d
Faulting application path: C:\Windows\system32\dwm.exe
Faulting module path: C:\Windows\system32\dwmcore.dll
Report Id: 62da2a6c-e06a-4942-b1e5-09d86320abd1
Faulting package full name:
Faulting package-relative application ID: