Error: KMODE_EXCEPTION_NOT_HANDLED

starview · 18 Sep 2017

Spectrum, hope you are right

Zbook : Dump file link : Microsoft OneDrive - Access files anywhere. Create docs with free Office Online.

Am keeping fingers crossed that dump file not corrupted

zbook · 18 Sep 2017

The memory dump files was not able to be debugged as it was partially corrupt.

The event log displayed that 1 driver failed to load:

anodlwf.sys

This information was in an earlier post. The failed to load has reoccurred.

This has not produced a bsod and may just be an event recording at this time.

In this link a similar driver was deleted:
BSOD Driver Irql not less or equal - Anodlwfx.sys - Windows 7 Help Forums

At this juncture the un-installation of the AV drivers has produced a stable computer environment.
You can continue using Microsoft Windows defender or reinstall AV.
If there is any new bsod you can then reopen the thread.

Code:

anodlwf      ANOD Network Security  ANOD Network Security  Kernel        System     Stopped    OK         FALSE       FALSE        0                 8,192       0          06/03/2009 5:10:08 AM  C:\WINDOWS\system32\DRIVERS\anodlwfx.sys

starview · 18 Sep 2017

Hi, both sites point to a general website so I am unable to update any drivers from it.

I ran driver booster to see if it could find any drivers to be updated. It could not find anyhting there.

I think its a windows thing, ran windows update, nothing. Could not find anyhting called anod in windows services.msc

A stable environment is a good thing.

I'm kinda stumped.

zbook · 18 Sep 2017

In general when updating drivers use computer manufacturer websites first as the component manufacturer drivers may have been modified for the specific computer and then second choice is the component manufacturer website such as Intel, Nvidia, Gigabyte, etc. The other websites it is unclear what you are getting and there have been bsod that have required clean install.

For this driver are you still using this software/application?

There are several things you can do at this juncture:
1) Close the thread (solved with uninstalling 2 AV software programs and their drivers)
2) Keep the thread open for the remainder of the week and keep monitoring for bsod.
3) Use Windows driver verifier to see if there are anymore misbehaving drivers.

starview · 18 Sep 2017

Re this driver, not even sure which sw app it came from. I don't have any wireless cards, only Realteck etehrnet port. Maybe TAP 9 (from vpn) might create it ?

Good advice. Will keep thread open for rest of week, and if no other BSOds, then will close it.

At least its a stable system for now

starview · 20 Sep 2017

All good things have to come to an end I guess. Just got another BOSD. Hopefully is just an anomoly.

Dump file enclosed : Microsoft OneDrive - Access files anywhere. Create docs with free Office Online.
Diag File enclosed : Attachment 154278
CCleaner screenAttachment 154279 Attachment 154279shot enclosed :

I guess we reset the clock to see how long the system will stay up.

zbook · 20 Sep 2017

Registry cleaning has caused many people problems with their computers.
To fix they had to perform clean installs.
It's best that when using Ccleaner you use the Windows and Application cleaning and not the registry cleaning.
If you have a backup image and are comfortable restoring the image then you can use registry cleaning. But again there have been many unexpected problems.

The last mini dump in the DM log collector was from 9/14/2017.

The misbehaving driver on 9/20/2017 was the graphics hardware driver: atikmpag.sys

Perform the following steps:

1) Uninstall everything AMD using Display driver uninstaller and install new drivers from the Dell or the AMD website.
2) The Dell web site is preferred.
3) Enter the computer's serial or product number and the operating system to view available drivers.
4) If you use the AMD web site be sure the "clean install" box is checked and only install the graphics driver.
Official Display Driver Uninstaller DDU Download
Display Driver Uninstaller Download version 17.0.7.2
Display Driver Uninstaller: How to use - Windows 7 Help Forums
AMD Support and Radeon Software Driver Download

5) When the graphics driver has been reinstalled from the Dell website use the Dell diagnostics and perform the full diagnostics tests on the computer and post the results into the thread.

6) Post an image of the Ccleaner settings for Windows > system and advanced

Code:

20/09/2017 12:15 PM    Windows Error Reporting    Fault bucket LKD_0x141_Tdr:6_IMAGE_atikmpag.sys, type 0
Event Name: LiveKernelEvent
Response: Not available
Cab Id: 1dc09530-7a38-4fc2-a059-dbaaf5db101a

Problem signature:
P1: 141
P2: ffffa000990ab010
P3: fffff80e920ff818
P4: 0
P5: 4
P6: 10_0_15063
P7: 0_0
P8: 768_1
P9: 
P10: 

Attached files:
\\?\C:\WINDOWS\LiveKernelReports\WATCHDOG\WATCHDOG-20170920-0815.dmp
\\?\C:\Windows\Temp\WER-157635781-0.sysdata.xml
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER7666.tmp.WERInternalMetadata.xml
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER7676.tmp.csv
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER7696.tmp.txt
\\?\C:\Windows\Temp\WERA9FA.tmp.WERDataCollectionStatus.txt

These files may be available here:
C:\ProgramData\Microsoft\Windows\WER\ReportArchive\Kernel_141_f88357987953718f83c1324a4b113b336e9b79c_00000000_cab_3791ab51

Analysis symbol: 
Rechecking for solution: 0
Report Id: 56e9646d-adf3-4bbe-84d5-b6dc07f8ae58
Report Status: 268435456
Hashed bucket:

Code:

Windows Error Reporting:+++ WER0 +++:Fault bucket LKD_0x141_Tdr:6_IMAGE_atikmpag.sys, type 0Event Name: LiveKernelEventResponse: Not availableCab Id: 1dc09530-7a38-4fc2-a059-dbaaf5db101aProblem signature:P1: 141P2: ffffa000990ab010P3: fffff80e920ff818P4: 0P5: 4P6: 10_0_15063P7: 0_0P8: 768_1P9: P10:

Code:

Name    AMD Radeon (TM) R9 200 SeriesPNP Device ID    PCI\VEN_1002&DEV_6811&SUBSYS_30501462&REV_00\4&3A4C116B&0&0038
Adapter Type    AMD Radeon Graphics Processor (0x6811), Advanced Micro Devices, Inc. compatible
Adapter Description    AMD Radeon (TM) R9 200 Series
Adapter RAM    (2,147,483,648) bytes
Installed Drivers    aticfx64.dll,aticfx64.dll,aticfx64.dll,amdxc64.dll,aticfx32,aticfx32,aticfx32,amdxc32,atiumd64,atidxx64.dll,atidxx64.dll,atiumdag,atidxx32,atidxx32,atiumdva,atiumd6a.cap,atitmm64
Driver Version    22.19.673.0
INF File    oem31.inf (ati2mtag_R575DS section)
Color Planes    Not Available
Color Table Entries    4294967296
Resolution    1920 x 1080 x 60 hertz
Bits/Pixel    32
Memory Address    0xD0000000-0xDFFFFFFF
Memory Address    0xFBE80000-0xFBEBFFFF
I/O Port    0x0000E000-0x0000E0FF
IRQ Channel    IRQ 4294967286
I/O Port    0x000003B0-0x000003BB
I/O Port    0x000003C0-0x000003DF
Memory Address    0xA0000-0xBFFFF
Driver    c:\windows\system32\driverstore\filerepository\c0317359.inf_amd64_71db94a48cef0172\atikmpag.sys (22.19.673.0, 529.02 KB (541,720 bytes), 24/08/2017 1:41 PM)

Memory Dump:

Code:

**************************************************************************THIS DUMP FILE IS PARTIALLY CORRUPT.
KdDebuggerDataBlock is not present or unreadable.
**************************************************************************
BugCheck 3B, {c0000005, ffff978729ca476f, ffffbc00791f1e60, 0}


GetContextState failed, 0xD0000147
Unable to get current machine context, NTSTATUS 0xC0000147
***** Kernel symbols are WRONG. Please fix symbols to do analysis.

starview · 20 Sep 2017

Oh my, looks like I have some work to do.

Will do it as soon as get some time in between work and post tomorrow or so.

starview · 22 Sep 2017

So.... I replaced drivers from AMD site. Not an option from Dell as PC originally came with Win 7.
Checked the quick as well as extended Dell tests, everything passed with flying colours.
Not able to use the CCleaner option as not sure what you mean by system and advanced.
stress tested the system by playing BF1 and after 2 hours or so today BSOD. Diag file enclsoed. Am going to guess its the ATI set and drivers again. I guess I might have to live with it.Attachment 154581

zbook · 22 Sep 2017

There was no new BSOD mini dump file.
The last one was on 9/14/2017
There have been a lot of WHEA errors.
Please post an image of Ccleaner see below.

Open Ccleaner without click on analyze or run.
It should open with the windows tab in view.
There is a scroll bar.
Scroll down so that you can view system and advanced in full view.
Then make an image to post into the thread.
Take Screenshot in Windows 10 Windows 10 General Tips Tutorials

Download and install Whocrashed:
http://www.resplendence.com/whocrashed
Above analyze click on tools > crash dump test > type: ACCEPT
Click analyze > post an image of the results into the thread
Post a new zip after the above steps:
BSOD - Posting Instructions - Windows 10 Forums

Download and install HWinfo:
HWiNFO - Download

Code:

Event[21386]:  Log Name: System  Source: Service Control Manager  Date: 2017-09-22T20:49:35.699  Event ID: 7045  Task: N/A  Level: Information  Opcode: N/A  Keyword: Classic  User: S-1-5-18  User Name: NT AUTHORITY\SYSTEM  Computer: Dad-PC  Description: A service was installed in the system.Service Name:  MBAMWebProtectionService File Name:  C:\WINDOWS\system32\drivers\mwac.sysService Type:  kernel mode driverService Start Type:  demand startService Account:  Event[21387]:  Log Name: System  Source: Microsoft-Windows-WHEA-Logger  Date: 2017-09-22T21:36:20.977  Event ID: 17  Task: N/A  Level: Warning  Opcode: Info  Keyword: N/A  User: S-1-5-19  User Name: NT AUTHORITY\LOCAL SERVICE  Computer: Dad-PC  Description: A corrected hardware error has occurred.Component: PCI Express Root PortError Source: Advanced Error Reporting (PCI Express)Bus:Device:Function: 0x0:0x0:0x0Vendor ID:Device ID: 0x8086:0x3405Class Code: 0x30000The details view of this entry contains further information.Event[21388]:  Log Name: System  Source: Microsoft-Windows-WHEA-Logger  Date: 2017-09-22T21:44:36.781  Event ID: 17  Task: N/A  Level: Warning  Opcode: Info  Keyword: N/A  User: S-1-5-19  User Name: NT AUTHORITY\LOCAL SERVICE  Computer: Dad-PC  Description: A corrected hardware error has occurred.Component: PCI Express Root PortError Source: Advanced Error Reporting (PCI Express)Bus:Device:Function: 0x0:0x0:0x0Vendor ID:Device ID: 0x8086:0x3405Class Code: 0x30000The details view of this entry contains further information.

Code:

anodlwf      ANOD Network Security  ANOD Network Security  Kernel        System     Stopped    OK         FALSE       FALSE        0                 8,192       0          06/03/2009 5:10:08 AM  C:\WINDOWS\system32\DRIVERS\anodlwfx.sys         4,096

Code:

The following boot-start or system-start driver(s) did not load: anodlwf

Code:

Event[21342]:  Log Name: System  Source: Microsoft-Windows-Kernel-Power  Date: 2017-09-22T20:37:51.040  Event ID: 41  Task: N/A  Level: Critical  Opcode: Info  Keyword: N/A  User: S-1-5-18  User Name: NT AUTHORITY\SYSTEM  Computer: Dad-PC  Description: The system has rebooted without cleanly shutting down first. This error could be caused if the system stopped responding, crashed, or lost power unexpectedly.

Code:

Event[21331]:  Log Name: System  Source: EventLog  Date: 2017-09-22T20:38:14.446  Event ID: 6008  Task: N/A  Level: Error  Opcode: N/A  Keyword: Classic  User: N/A  User Name: N/A  Computer: Dad-PC  Description: The previous system shutdown at 8:34:20 PM on ?9/?22/?2017 was unexpected.

Code:

Event[21287]:  Log Name: System  Source: Microsoft-Windows-WHEA-Logger  Date: 2017-09-21T17:51:07.781  Event ID: 17  Task: N/A  Level: Warning  Opcode: Info  Keyword: N/A  User: S-1-5-19  User Name: NT AUTHORITY\LOCAL SERVICE  Computer: Dad-PC  Description: A corrected hardware error has occurred.Component: PCI Express Root PortError Source: Advanced Error Reporting (PCI Express)Bus:Device:Function: 0x0:0x0:0x0Vendor ID:Device ID: 0x8086:0x3405Class Code: 0x30000The details view of this entry contains further information.

Code:

Event[21268]:  Log Name: System  Source: Microsoft-Windows-WHEA-Logger  Date: 2017-09-21T15:24:02.170  Event ID: 17  Task: N/A  Level: Warning  Opcode: Info  Keyword: N/A  User: S-1-5-19  User Name: NT AUTHORITY\LOCAL SERVICE  Computer: Dad-PC  Description: A corrected hardware error has occurred.Component: PCI Express Root PortError Source: Advanced Error Reporting (PCI Express)Bus:Device:Function: 0x0:0x0:0x0Vendor ID:Device ID: 0x8086:0x3405Class Code: 0x30000The details view of this entry contains further information.Event[21269]:  Log Name: System  Source: Microsoft-Windows-WHEA-Logger  Date: 2017-09-21T15:28:42.170  Event ID: 17  Task: N/A  Level: Warning  Opcode: Info  Keyword: N/A  User: S-1-5-19  User Name: NT AUTHORITY\LOCAL SERVICE  Computer: Dad-PC  Description: A corrected hardware error has occurred.Component: PCI Express Root PortError Source: Advanced Error Reporting (PCI Express)Bus:Device:Function: 0x0:0x0:0x0Vendor ID:Device ID: 0x8086:0x3405Class Code: 0x30000The details view of this entry contains further information.Event[21270]:  Log Name: System  Source: Microsoft-Windows-WHEA-Logger  Date: 2017-09-21T15:30:20.211  Event ID: 17  Task: N/A  Level: Warning  Opcode: Info  Keyword: N/A  User: S-1-5-19  User Name: NT AUTHORITY\LOCAL SERVICE  Computer: Dad-PC  Description: A corrected hardware error has occurred.Component: PCI Express Root PortError Source: Advanced Error Reporting (PCI Express)Bus:Device:Function: 0x0:0x0:0x0Vendor ID:Device ID: 0x8086:0x3405Class Code: 0x30000The details view of this entry contains further information.Event[21271]:  Log Name: System  Source: Microsoft-Windows-WHEA-Logger  Date: 2017-09-21T15:35:38.908  Event ID: 17  Task: N/A  Level: Warning  Opcode: Info  Keyword: N/A  User: S-1-5-19  User Name: NT AUTHORITY\LOCAL SERVICE  Computer: Dad-PC  Description: A corrected hardware error has occurred.Component: PCI Express Root PortError Source: Advanced Error Reporting (PCI Express)Bus:Device:Function: 0x0:0x0:0x0Vendor ID:Device ID: 0x8086:0x3405Class Code: 0x30000The details view of this entry contains further information.Event[21272]:  Log Name: System  Source: Microsoft-Windows-WHEA-Logger  Date: 2017-09-21T15:38:08.142  Event ID: 17  Task: N/A  Level: Warning  Opcode: Info  Keyword: N/A  User: S-1-5-19  User Name: NT AUTHORITY\LOCAL SERVICE  Computer: Dad-PC  Description: A corrected hardware error has occurred.Component: PCI Express Root PortError Source: Advanced Error Reporting (PCI Express)Bus:Device:Function: 0x0:0x0:0x0Vendor ID:Device ID: 0x8086:0x3405Class Code: 0x30000The details view of this entry contains further information.Event[21273]:  Log Name: System  Source: Microsoft-Windows-WHEA-Logger  Date: 2017-09-21T15:38:08.142  Event ID: 17  Task: N/A  Level: Warning  Opcode: Info  Keyword: N/A  User: S-1-5-19  User Name: NT AUTHORITY\LOCAL SERVICE  Computer: Dad-PC  Description: A corrected hardware error has occurred.Component: PCI Express Root PortError Source: Advanced Error Reporting (PCI Express)Bus:Device:Function: 0x0:0x0:0x0Vendor ID:Device ID: 0x8086:0x3405Class Code: 0x30000The details view of this entry contains further information.Event[21274]:  Log Name: System  Source: Microsoft-Windows-WHEA-Logger  Date: 2017-09-21T16:06:02.181  Event ID: 17  Task: N/A  Level: Warning  Opcode: Info  Keyword: N/A  User: S-1-5-19  User Name: NT AUTHORITY\LOCAL SERVICE  Computer: Dad-PC  Description: A corrected hardware error has occurred.Component: PCI Express Root PortError Source: Advanced Error Reporting (PCI Express)Bus:Device:Function: 0x0:0x0:0x0Vendor ID:Device ID: 0x8086:0x3405Class Code: 0x30000The details view of this entry contains further information.Event[21275]:  Log Name: System  Source: Microsoft-Windows-WAS  Date: 2017-09-21T16:24:13.420  Event ID: 5186  Task: N/A  Level: Information  Opcode: N/A  Keyword: Classic  User: N/A  User Name: N/A  Computer: Dad-PC  Description: A worker process with process id of '13740' serving application pool 'DefaultAppPool' was shutdown due to inactivity.  Application Pool timeout configuration was set to 20 minutes.  A new worker process will be started when needed.Event[21276]:  Log Name: System  Source: Microsoft-Windows-WHEA-Logger  Date: 2017-09-21T16:39:47.688  Event ID: 17  Task: N/A  Level: Warning  Opcode: Info  Keyword: N/A  User: S-1-5-19  User Name: NT AUTHORITY\LOCAL SERVICE  Computer: Dad-PC  Description: A corrected hardware error has occurred.Component: PCI Express Root PortError Source: Advanced Error Reporting (PCI Express)Bus:Device:Function: 0x0:0x0:0x0Vendor ID:Device ID: 0x8086:0x3405Class Code: 0x30000The details view of this entry contains further information.Event[21277]:  Log Name: System  Source: Microsoft-Windows-WHEA-Logger  Date: 2017-09-21T16:56:28.573  Event ID: 17  Task: N/A  Level: Warning  Opcode: Info  Keyword: N/A  User: S-1-5-19  User Name: NT AUTHORITY\LOCAL SERVICE  Computer: Dad-PC  Description: A corrected hardware error has occurred.Component: PCI Express Root PortError Source: Advanced Error Reporting (PCI Express)Bus:Device:Function: 0x0:0x0:0x0Vendor ID:Device ID: 0x8086:0x3405Class Code: 0x30000The details view of this entry contains further information.Event[21278]:  Log Name: System  Source: Microsoft-Windows-WHEA-Logger  Date: 2017-09-21T17:13:05.066  Event ID: 17  Task: N/A  Level: Warning  Opcode: Info  Keyword: N/A  User: S-1-5-19  User Name: NT AUTHORITY\LOCAL SERVICE  Computer: Dad-PC  Description: A corrected hardware error has occurred.Component: PCI Express Root PortError Source: Advanced Error Reporting (PCI Express)Bus:Device:Function: 0x0:0x0:0x0Vendor ID:Device ID: 0x8086:0x3405Class Code: 0x30000The details view of this entry contains further information.Event[21279]:  Log Name: System  Source: Microsoft-Windows-WHEA-Logger  Date: 2017-09-21T17:13:11.019  Event ID: 17  Task: N/A  Level: Warning  Opcode: Info  Keyword: N/A  User: S-1-5-19  User Name: NT AUTHORITY\LOCAL SERVICE  Computer: Dad-PC  Description: A corrected hardware error has occurred.Component: PCI Express Root PortError Source: Advanced Error Reporting (PCI Express)Bus:Device:Function: 0x0:0x0:0x0Vendor ID:Device ID: 0x8086:0x3405Class Code: 0x30000The details view of this entry contains further information.Event[21280]:  Log Name: System  Source: Microsoft-Windows-WHEA-Logger  Date: 2017-09-21T17:13:11.019  Event ID: 17  Task: N/A  Level: Warning  Opcode: Info  Keyword: N/A  User: S-1-5-19  User Name: NT AUTHORITY\LOCAL SERVICE  Computer: Dad-PC  Description: A corrected hardware error has occurred.Component: PCI Express Root PortError Source: Advanced Error Reporting (PCI Express)Bus:Device:Function: 0x0:0x0:0x0Vendor ID:Device ID: 0x8086:0x3405Class Code: 0x30000The details view of this entry contains further information.Event[21281]:  Log Name: System  Source: Microsoft-Windows-WHEA-Logger  Date: 2017-09-21T17:14:28.330  Event ID: 17  Task: N/A  Level: Warning  Opcode: Info  Keyword: N/A  User: S-1-5-19  User Name: NT AUTHORITY\LOCAL SERVICE  Computer: Dad-PC  Description: A corrected hardware error has occurred.Component: PCI Express Root PortError Source: Advanced Error Reporting (PCI Express)Bus:Device:Function: 0x0:0x0:0x0Vendor ID:Device ID: 0x8086:0x3405Class Code: 0x30000The details view of this entry contains further information.Event[21282]:  Log Name: System  Source: Microsoft-Windows-WHEA-Logger  Date: 2017-09-21T17:25:20.306  Event ID: 17  Task: N/A  Level: Warning  Opcode: Info  Keyword: N/A  User: S-1-5-19  User Name: NT AUTHORITY\LOCAL SERVICE  Computer: Dad-PC  Description: A corrected hardware error has occurred.Component: PCI Express Root PortError Source: Advanced Error Reporting (PCI Express)Bus:Device:Function: 0x0:0x0:0x0Vendor ID:Device ID: 0x8086:0x3405Class Code: 0x30000The details view of this entry contains further information.Event[21283]:  Log Name: System  Source: Microsoft-Windows-WHEA-Logger  Date: 2017-09-21T17:27:17.180  Event ID: 17  Task: N/A  Level: Warning  Opcode: Info  Keyword: N/A  User: S-1-5-19  User Name: NT AUTHORITY\LOCAL SERVICE  Computer: Dad-PC  Description: A corrected hardware error has occurred.Component: PCI Express Root PortError Source: Advanced Error Reporting (PCI Express)Bus:Device:Function: 0x0:0x0:0x0Vendor ID:Device ID: 0x8086:0x3405Class Code: 0x30000The details view of this entry contains further information.Event[21284]:  Log Name: System  Source: Microsoft-Windows-WHEA-Logger  Date: 2017-09-21T17:27:17.180  Event ID: 17  Task: N/A  Level: Warning  Opcode: Info  Keyword: N/A  User: S-1-5-19  User Name: NT AUTHORITY\LOCAL SERVICE  Computer: Dad-PC  Description: A corrected hardware error has occurred.Component: PCI Express Root PortError Source: Advanced Error Reporting (PCI Express)Bus:Device:Function: 0x0:0x0:0x0Vendor ID:Device ID: 0x8086:0x3405Class Code: 0x30000The details view of this entry contains further information.Event[21285]:  Log Name: System  Source: Microsoft-Windows-WHEA-Logger  Date: 2017-09-21T17:41:58.186  Event ID: 17  Task: N/A  Level: Warning  Opcode: Info  Keyword: N/A  User: S-1-5-19  User Name: NT AUTHORITY\LOCAL SERVICE  Computer: Dad-PC  Description: A corrected hardware error has occurred.Component: PCI Express Root PortError Source: Advanced Error Reporting (PCI Express)Bus:Device:Function: 0x0:0x0:0x0Vendor ID:Device ID: 0x8086:0x3405Class Code: 0x30000The details view of this entry contains further information.