Error: KMODE_EXCEPTION_NOT_HANDLED

starview · 13 Sep 2017

thks, will do so overnight and let you know tomorrow.

zbook · 13 Sep 2017

Whenever possible please post the memory dump as per steps #3 and #4 in post #7.

starview · 14 Sep 2017

Was running HDTune error check (not quick) overnight and saw this morning that PC had crashed. Am enclosed the diag report.

Next :
Will uninstall AV and Malwarebytes as soon as can find licence keys for reinstall
Provide memory dump info
Rerun HDtune error scan again.Attachment 153283

starview · 14 Sep 2017

1 drive link : Microsoft OneDrive - Access files anywhere. Create docs with free Office Online.
Let me know if does not work.

Interestingly enough, when uninstalled bitdefender, there is some remnant somewhere that keeps turing win defender off.

will work on the hdtune error scan now

Spectrum · 14 Sep 2017

Looks like that dump file is corrupt, I'd also suggest compressing the .dmp file before uploading to save yourself some time uploading it.

Also, have you had any bluescreens since running chkdsk.exe? If so, please upload a new set of logs.

starview · 14 Sep 2017

Hi Spectrum, yes, uploaded previously. I'll try to reinclude here again, here

I also ran hdtune error scan (the long one), no issues.

HD Tune: PNY CS1311 960GB SSD Error Scan

Scanned data : 915349 MB
Damaged Blocks : 0.0 %
Elapsed Time : 91:25

Also ran sfc /scannow... no issues

Did I mention its kinda frustrating ?

Spectrum · 14 Sep 2017

From the latest mini crash dump I'm still seeing disk errors.

You may want to try another sata cable for your PNY SSD, if you don't have any extras, swap cables with another disk. Given that all the blue screens appear to be due to hard faults, it wouldn't be a bad idea to rebuild the page file, this guide is a good walkthrough despite being written for vista: Delete/Recreate the Pagefile.

Code:

ExceptionAddress: fffff80143759bb0 (nt!RtlDecompressBufferXpressLz+0x0000000000000060)
   ExceptionCode: c0000006 (In-page I/O error)
  ExceptionFlags: 00000000
NumberParameters: 3
   Parameter[0]: 0000000000000000
   Parameter[1]: 000000000bc2a790
   Parameter[2]: 00000000c0000185
Inpage operation failed at 000000000bc2a790, due to I/O error 00000000c0000185

Code:

Probably caused by : hardware_disk

Code:

 # Child-SP          RetAddr           Call Site
00 ffffc201`4f0c1758 fffff801`438c5fd2 nt!KeBugCheckEx
01 ffffc201`4f0c1760 fffff801`437f8b6d nt!SMKM_STORE<SM_TRAITS>::SmStUnhandledExceptionFilter+0x22
02 ffffc201`4f0c17a0 fffff801`437d545f nt!`SMKM_STORE<SM_TRAITS>::SmStDirectReadIssue'::`1'::filt$0+0x1f
03 ffffc201`4f0c17d0 fffff801`437f1a5d nt!_C_specific_handler+0x9f
04 ffffc201`4f0c1840 fffff801`436ab234 nt!RtlpExecuteHandlerForException+0xd
05 ffffc201`4f0c1870 fffff801`436a9fd6 nt!RtlDispatchException+0x404
06 ffffc201`4f0c1f60 fffff801`437f698e nt!KiDispatchException+0x1f6
07 ffffc201`4f0c2610 fffff801`437f4e57 nt!KiExceptionDispatch+0xce
08 ffffc201`4f0c27f0 fffff801`43759bb0 nt!KiPageFault+0x217
09 ffffc201`4f0c2980 fffff801`437591b0 nt!RtlDecompressBufferXpressLz+0x60
0a ffffc201`4f0c29b0 fffff801`43758e8d nt!RtlDecompressBufferEx+0x60
0b ffffc201`4f0c2a00 fffff801`43758cff nt!ST_STORE<SM_TRAITS>::StDmSinglePageCopy+0x159
0c ffffc201`4f0c2ae0 fffff801`437586eb nt!ST_STORE<SM_TRAITS>::StDmSinglePageTransfer+0x7b
0d ffffc201`4f0c2b30 fffff801`437584bc nt!ST_STORE<SM_TRAITS>::StDmpSinglePageRetrieve+0x183
0e ffffc201`4f0c2bd0 fffff801`4375a12f nt!ST_STORE<SM_TRAITS>::StDmPageRetrieve+0x98
0f ffffc201`4f0c2c90 fffff801`437509aa nt!SMKM_STORE<SM_TRAITS>::SmStDirectReadIssue+0x6f
10 ffffc201`4f0c2ce0 fffff801`4375bf77 nt!SMKM_STORE<SM_TRAITS>::SmStReadThread+0x16a
11 ffffc201`4f0c2d50 fffff801`437f0a06 nt!PspSystemThreadStartup+0x47
12 ffffc201`4f0c2da0 00000000`00000000 nt!KiStartSystemThread+0x16

zbook · 14 Sep 2017

This driver has failed to load: anodlwf.sys

Please reinstall this driver.

The logs display that Malwarebytes is still loading.
Please uninstall Malwarebytes during the troubleshooting process.

Code:

Event[20171]:  Log Name: System  Source: Microsoft-Windows-WHEA-Logger  Date: 2017-09-14T06:48:24.292  Event ID: 17  Task: N/A  Level: Warning  Opcode: Info  Keyword: N/A  User: S-1-5-19  User Name: NT AUTHORITY\LOCAL SERVICE  Computer: Dad-PC  Description: A corrected hardware error has occurred.Component: PCI Express Root PortError Source: Advanced Error Reporting (PCI Express)Bus:Device:Function: 0x0:0x0:0x0Vendor ID:Device ID: 0x8086:0x3405Class Code: 0x30000The details view of this entry contains further information.

Code:

Event[20156]:  Log Name: System  Source: Service Control Manager  Date: 2017-09-14T00:40:57.577  Event ID: 7026  Task: N/A  Level: Information  Opcode: N/A  Keyword: Classic  User: N/A  User Name: N/A  Computer: Dad-PC  Description: The following boot-start or system-start driver(s) did not load: anodlwfdam

anodlwf.sys

ALPHA NDIS 6.0 Filter Driver

http://www.alphanetworks.com/index.php

Code:

Event[20154]:  Log Name: System  Source: Service Control Manager  Date: 2017-09-14T00:40:56.918  Event ID: 7045  Task: N/A  Level: Information  Opcode: N/A  Keyword: Classic  User: S-1-5-18  User Name: NT AUTHORITY\SYSTEM  Computer: Dad-PC  Description: A service was installed in the system.Service Name:  MBAMFarfltService File Name:  C:\WINDOWS\system32\drivers\farflt.sysService Type:  kernel mode driverService Start Type:  demand startService Account:  Event[20155]:  Log Name: System  Source: Microsoft-Windows-FilterManager  Date: 2017-09-14T00:40:57.046  Event ID: 6  Task: N/A  Level: Information  Opcode: Info  Keyword: N/A  User: S-1-5-18  User Name: NT AUTHORITY\SYSTEM  Computer: Dad-PC  Description: File System Filter 'MBAMFarflt' (6.3, ?2017?-?02?-?21T14:19:17.000000000Z) has successfully loaded and registered with Filter Manager.

Code:

Event[20153]:  Log Name: System  Source: Service Control Manager  Date: 2017-09-14T00:40:56.385  Event ID: 7045  Task: N/A  Level: Information  Opcode: N/A  Keyword: Classic  User: S-1-5-18  User Name: NT AUTHORITY\SYSTEM  Computer: Dad-PC  Description: A service was installed in the system.Service Name:  MBAMSwissArmyService File Name:  C:\WINDOWS\system32\drivers\MBAMSwissArmy.sysService Type:  kernel mode driverService Start Type:  demand startService Account:

Code:

Event[20101]:  Log Name: System  Source: Microsoft-Windows-WHEA-Logger  Date: 2017-09-13T23:41:10.538  Event ID: 17  Task: N/A  Level: Warning  Opcode: Info  Keyword: N/A  User: S-1-5-19  User Name: NT AUTHORITY\LOCAL SERVICE  Computer: Dad-PC  Description: A corrected hardware error has occurred.Component: PCI Express Root PortError Source: Advanced Error Reporting (PCI Express)Bus:Device:Function: 0x0:0x0:0x0Vendor ID:Device ID: 0x8086:0x3405Class Code: 0x30000The details view of this entry contains further information.

Code:

Event[20100]:  Log Name: System  Source: Microsoft-Windows-WHEA-Logger  Date: 2017-09-13T23:25:51.202  Event ID: 17  Task: N/A  Level: Warning  Opcode: Info  Keyword: N/A  User: S-1-5-19  User Name: NT AUTHORITY\LOCAL SERVICE  Computer: Dad-PC  Description: A corrected hardware error has occurred.Component: PCI Express Root PortError Source: Advanced Error Reporting (PCI Express)Bus:Device:Function: 0x0:0x0:0x0Vendor ID:Device ID: 0x8086:0x3405Class Code: 0x30000The details view of this entry contains further information.

Code:

Event[20097]:  Log Name: System  Source: Microsoft-Windows-WHEA-Logger  Date: 2017-09-13T22:51:43.698  Event ID: 17  Task: N/A  Level: Warning  Opcode: Info  Keyword: N/A  User: S-1-5-19  User Name: NT AUTHORITY\LOCAL SERVICE  Computer: Dad-PC  Description: A corrected hardware error has occurred.Component: PCI Express Root PortError Source: Advanced Error Reporting (PCI Express)Bus:Device:Function: 0x0:0x0:0x0Vendor ID:Device ID: 0x8086:0x3405Class Code: 0x30000The details view of this entry contains further information.

Code:

Event[20093]:  Log Name: System  Source: Microsoft-Windows-WHEA-Logger  Date: 2017-09-13T21:06:43.960  Event ID: 17  Task: N/A  Level: Warning  Opcode: Info  Keyword: N/A  User: S-1-5-19  User Name: NT AUTHORITY\LOCAL SERVICE  Computer: Dad-PC  Description: A corrected hardware error has occurred.Component: PCI Express Root PortError Source: Advanced Error Reporting (PCI Express)Bus:Device:Function: 0x0:0x0:0x0Vendor ID:Device ID: 0x8086:0x3405Class Code: 0x30000The details view of this entry contains further information.

Code:

Event[20081]:  Log Name: System  Source: Microsoft-Windows-WHEA-Logger  Date: 2017-09-13T19:39:52.797  Event ID: 17  Task: N/A  Level: Warning  Opcode: Info  Keyword: N/A  User: S-1-5-19  User Name: NT AUTHORITY\LOCAL SERVICE  Computer: Dad-PC  Description: A corrected hardware error has occurred.Component: PCI Express Root PortError Source: Advanced Error Reporting (PCI Express)Bus:Device:Function: 0x0:0x0:0x0Vendor ID:Device ID: 0x8086:0x3405Class Code: 0x30000The details view of this entry contains further information.Event[20082]:  Log Name: System  Source: Microsoft-Windows-WHEA-Logger  Date: 2017-09-13T19:41:34.678  Event ID: 17  Task: N/A  Level: Warning  Opcode: Info  Keyword: N/A  User: S-1-5-19  User Name: NT AUTHORITY\LOCAL SERVICE  Computer: Dad-PC  Description: A corrected hardware error has occurred.Component: PCI Express Root PortError Source: Advanced Error Reporting (PCI Express)Bus:Device:Function: 0x0:0x0:0x0Vendor ID:Device ID: 0x8086:0x3405Class Code: 0x30000The details view of this entry contains further information.Event[20083]:  Log Name: System  Source: Microsoft-Windows-WHEA-Logger  Date: 2017-09-13T19:41:36.113  Event ID: 17  Task: N/A  Level: Warning  Opcode: Info  Keyword: N/A  User: S-1-5-19  User Name: NT AUTHORITY\LOCAL SERVICE  Computer: Dad-PC  Description: A corrected hardware error has occurred.Component: PCI Express Root PortError Source: Advanced Error Reporting (PCI Express)Bus:Device:Function: 0x0:0x0:0x0Vendor ID:Device ID: 0x8086:0x3405Class Code: 0x30000The details view of this entry contains further information.Event[20084]:  Log Name: System  Source: Microsoft-Windows-WHEA-Logger  Date: 2017-09-13T19:44:30.939  Event ID: 17  Task: N/A  Level: Warning  Opcode: Info  Keyword: N/A  User: S-1-5-19  User Name: NT AUTHORITY\LOCAL SERVICE  Computer: Dad-PC  Description: A corrected hardware error has occurred.Component: PCI Express Root PortError Source: Advanced Error Reporting (PCI Express)Bus:Device:Function: 0x0:0x0:0x0Vendor ID:Device ID: 0x8086:0x3405Class Code: 0x30000The details view of this entry contains further information.Event[20085]:  Log Name: System  Source: Microsoft-Windows-WHEA-Logger  Date: 2017-09-13T19:44:42.597  Event ID: 17  Task: N/A  Level: Warning  Opcode: Info  Keyword: N/A  User: S-1-5-19  User Name: NT AUTHORITY\LOCAL SERVICE  Computer: Dad-PC  Description: A corrected hardware error has occurred.Component: PCI Express Root PortError Source: Advanced Error Reporting (PCI Express)Bus:Device:Function: 0x0:0x0:0x0Vendor ID:Device ID: 0x8086:0x3405Class Code: 0x30000The details view of this entry contains further information.Event[20086]:  Log Name: System  Source: Microsoft-Windows-WHEA-Logger  Date: 2017-09-13T19:44:42.597  Event ID: 17  Task: N/A  Level: Warning  Opcode: Info  Keyword: N/A  User: S-1-5-19  User Name: NT AUTHORITY\LOCAL SERVICE  Computer: Dad-PC  Description: A corrected hardware error has occurred.Component: PCI Express Root PortError Source: Advanced Error Reporting (PCI Express)Bus:Device:Function: 0x0:0x0:0x0Vendor ID:Device ID: 0x8086:0x3405Class Code: 0x30000The details view of this entry contains further information.Event[20087]:  Log Name: System  Source: Microsoft-Windows-WHEA-Logger  Date: 2017-09-13T19:44:42.598  Event ID: 17  Task: N/A  Level: Warning  Opcode: Info  Keyword: N/A  User: S-1-5-19  User Name: NT AUTHORITY\LOCAL SERVICE  Computer: Dad-PC  Description: A corrected hardware error has occurred.Component: PCI Express Root PortError Source: Advanced Error Reporting (PCI Express)Bus:Device:Function: 0x0:0x0:0x0Vendor ID:Device ID: 0x8086:0x3405Class Code: 0x30000The details view of this entry contains further information.Event[20088]:  Log Name: System  Source: Microsoft-Windows-WHEA-Logger  Date: 2017-09-13T20:03:26.307  Event ID: 17  Task: N/A  Level: Warning  Opcode: Info  Keyword: N/A  User: S-1-5-19  User Name: NT AUTHORITY\LOCAL SERVICE  Computer: Dad-PC  Description: A corrected hardware error has occurred.Component: PCI Express Root PortError Source: Advanced Error Reporting (PCI Express)Bus:Device:Function: 0x0:0x0:0x0Vendor ID:Device ID: 0x8086:0x3405Class Code: 0x30000The details view of this entry contains further information.

Code:

Event[20058]:  Log Name: System  Source: Service Control Manager  Date: 2017-09-13T18:48:40.321  Event ID: 7026  Task: N/A  Level: Information  Opcode: N/A  Keyword: Classic  User: N/A  User Name: N/A  Computer: Dad-PC  Description: The following boot-start or system-start driver(s) did not load: anodlwfdam

Code:

anodlwf      ANOD Network Security  ANOD Network Security  Kernel        System     Stopped    OK         FALSE       FALSE        0                 8,192       0          06/03/2009 5:10:08 AM  C:\WINDOWS\system32\DRIVERS\anodlwfx.sys

starview · 14 Sep 2017

Hi Zbook. I have uninstalled Malwarebytes as well as bitdefender, although that happened after the log file attachement I had enclosed. Reason is it crashed overnight while running HDtune and before had a chance to unistall anything.

I'm not able to re-install the Alpha dis driver. The website link you had enclosed goes to the company and could not find a download page or anyhting. All my windows updates are current.

Also updated to the latest realtek lan drivers from their website. Maybe that will help as well

Hi Spectrum. Pagefile deleted, new sata cable put in, and used a different sata port on MB.

Spectrum · 14 Sep 2017

If you still get bluescreens after swapping cables and ports, I'd suggest making sure that AHCI link power management is set to "active". This ensures your disk is always given full power.

I have seen issues in the past where the SSD firmware wasn't able to properly handle the reduction in power, which in turn caused data corruption.

Add AHCI Link Power Management to Power Options in Windows 10 Windows 10 Performance Maintenance Tutorials