Random BSOD even with fresh reset, can't find the cause

Hi,

I'm having BSODs on my laptop since months and I struggle finding the reason.
I asked for help on the Microsoft community, but I thought I should give a try here as well.

I work on a Lenovo T440P and the BSODs seem to happen more frequently when I stress the machine (prime95, OCCT, CPU intensive tasks). No overclocking or undervolting. The temperatures are normal.
I ran the Intel processor diagnostic tool and the Lenovo BIOS diagnostic, everything OK.
When I run prime95 or memtest on Windows, I will have a BSOD for sure in the next hour.
However, Memtest86 on a USB key ran perfectly more than 10 hours. Same for prime95 when launched from a live Linux.

I discovered these two links a few weeks ago:
https://answers.microsoft.com/en-us/windows/wiki/windows_10-update/driver-verifier-tracking-down-a-mis-behaving/f5cb4faf-556b-4b6d-95b3-c48669e4c983
https://answers.microsoft.com/en-us/windows/wiki/windows_other-system/bsod-your-computer-crashed-here-is-how-to-get-the/1939df35-283f-4830-a4dd-e95ee5d8669d?tm=1374986676739
They helped me finding some problematic drivers, but it looks like almost all my drivers are causing crashes, so I guess I'm not on the right way.

I used the driver verifier with the settings mentioned in the previous article. I ran it for each non-Microsoft driver separately, because when I ticked everything it wouldn't even boot.

So far I encountered driver verifier errors with the following drivers/programs : VirtualBox, Intel Extreme Tuning Utility, Intel Bluetooth Driver for AC7260, Realtek PCIe SDCard reader are a few examples. Most of them were installed by the Lenovo system update, so I guess they were verified by Lenovo before being pushed to all the laptops. Therefore, something else may be wrong...

I put some of the minidumps associated with the faulty driver on my OneDrive, as well as the msinfo32 output:
Microsoft OneDrive - Access files anywhere. Create docs with free Office Online.
I put away from the Windows directory all the drivers that failed the verification but still get BSODs when stressing the system, mostly MEMORY_MANAGEMENT.

From that, the Microsoft community told me to do a fresh reset from the Windows settings (Fall creators update), and that is what I did. I'm now running a "fresh" install but still having the same faulty behavior.

Here is a dump of my fresh install that has already encoutered some crashes:
Attachment 159765

Honestly I don't know where I should start to continue my investigation...

Any help will be greatly appreciated.

Thank you in advance, and have a nice day!

Rule 4
No piracy or discussion of piracy allowed at all. Such as software, music, videos and other intellectual property violations (e.g. downloading youtube videos locally etc) - it is forum policy that no help shall be given to people who knowingly steal software or services.


One of the main reasons for this is that the act of pirating the software will inevitably change the working of the software and make investigation and repair impossible. Please install a legitimate copy of the software and if you are still experiencing the issue we will be pleased to assist - No further assistance will be provided until we are satisfied that the software is genuine.

Hi,
Could you please give more information about what is pirated concerning my installation ?
My Windows install is legitimate. The only pirated software I have installed is some Adobe components. I don't want to discuss the purpose of piracy here, but is it this software you are talking about ? If so, I would be pleased to uninstall this and continue finding the cause of the issue.
Thanks!

Adobe software.

If you uninstall the software we can provide help.

Hi,
Thank you. I've uninstalled Adobe software and tried a prime95 stress test again, but it went to a BSOD with the same kind of error in few minutes.

I've posted another dump file to check if everything is "correct" ?

Have a nice day

Run windows memory diags for a good few passes.

The files are in a foreign language and cannot be scanned or read. Please change the default language to English and re-post the log collector so that the files can be troubleshooted:

BSOD - Posting Instructions - Windows 10 Forums

Oops, sorry. I hope this is working now, it's displayed in English on my laptop:
Attachment 159974
Is that okay?

During this upgrade period windbg has had incomplete debugging.
Some debugging commands work and others don't.
So based on the working commands there was 1 misbehaving hardware driver.
The event log displayed drive problems.

Perform the following steps:
1) open administrative command prompt and type or copy and paste:
2) sfc /scannow
3) dism /online /cleanup-image /restorehealth
4) When these have completed > right click on the top bar or title bar of the administrative command prompt box > left click on edit then select all > right click on the top bar again > left click on edit then copy > paste into the thread
5) chkdsk /x /r (on every drive)
This command may take many hours to run so plan to run overnight.
6) To find and post the chkdsk report into the thread use the information in this link:
Read Chkdsk Log in Event Viewer in Windows 10 Performance Maintenance Tutorials
7) Run HDTune: (on all drives)
http://www.hdtune.com/
to check the health,
scan for errors, no quick scan but full scan
run a benchmark.


It may take some time, but please take the time you need to perform it properly.
When above is done please make screenshots of the following
the health,
the error scan,
the benchmark incl. following
transfer rate,
access time,
burst rate,
cpu usage.
Take Screenshot in Windows 10 General Tips Tutorials

8) Run Sea tools for windows on your drive using SMART, short and long generic tests:


How to use SeaTools for Windows
http://www.seagate.com/support/downl...ls-win-master/
How to use SeaTools for Windows
http://www.seagate.com/support/downloads/seatools/

9) Update the Intel(R) Dual Band Wireless-AC 7260Adapter: netwbw02.sys
Updating a driver: Updating a driver. - Microsoft Community

10) Run memtest86+ version 5.01 for at least 8 passes. Memtest86+ - Advanced Memory Diagnostic Tool


This may take hours so plan to run it overnight.


Please make sure you use the Memtest86+ version 5.01 with the link below.
Memtest86+ - Advanced Memory Diagnostic Tool


The testing is done not by time but by passes.


The more passes the better.


There are a significant number of false negatives if fewer than 8 passes are made.


A false negative is a pass when there is malfunctioning RAM.


There is 16 GB of RAM on the computer.


Memtest86+ version 5.01 testing takes approximately 1 - 2 hours /GB RAM


Just 1 error is a fail and you can abort testing.


Then test 1 RAM module at a time in the same DIMM each for 8 or more passes.


Again the more passes the better.


If both RAM pass when tested 1 at a time after failing when tested together test the next DIMM with 1 RAM module for 8 or more passes. This will help to differentiate malfunctioning RAM from malfunctioning DIMM /Motherboard.


Memtest86+ - Advanced Memory Diagnostic Tool
Memtest86+ - Advanced Memory Diagnostic Tool


Microsoft Community
Memory problems. - Microsoft Community


11) When Memtest86+ has completed 8 or more passes use a camera or smart phone camera to take a picture and post an image of the results into the thread.


MemTest86+ - Test RAM Windows 10 BSOD Tutorials
MemTest86+ - Test RAM BSOD Tutorials

Code:

Event[379]:  Log Name: System  Source: Disk  Date: 2017-10-12T13:50:30.096  Event ID: 11  Task: N/A  Level: Error  Opcode: N/A  Keyword: Classic  User: N/A  User Name: N/A  Computer: Antoine-Poulet  Description: The driver detected a controller error on \Device\Harddisk2\DR2.

Code:

Event[881]:  Log Name: System  Source: Disk  Date: 2017-10-12T15:05:43.713  Event ID: 11  Task: N/A  Level: Error  Opcode: N/A  Keyword: Classic  User: N/A  User Name: N/A  Computer: Antoine-Poulet  Description: The driver detected a controller error on \Device\Harddisk3\DR3.

Code:

Event[6108]:  Log Name: System  Source: Disk  Date: 2017-10-24T10:56:00.630  Event ID: 11  Task: N/A  Level: Error  Opcode: N/A  Keyword: Classic  User: N/A  User Name: N/A  Computer: Antoine-Poulet  Description: The driver detected a controller error on \Device\Harddisk2\DR2.

Code:

Name    [00000002] Intel(R) Dual Band Wireless-AC 7260Adapter Type    Ethernet 802.3Product Type    Intel(R) Dual Band Wireless-AC 7260Installed    YesPNP Device ID    PCI\VEN_8086&DEV_08B2&SUBSYS_C2708086&REV_83\4&2252D3DE&0&00E1Last Reset    10/24/2017 3:54 PMIndex    2Service Name    NETwNb64IP Address    192.168.43.12, fe80::2d0b:db43:6fdd:2024IP Subnet    255.255.255.0, 64Default IP Gateway    192.168.43.1DHCP Enabled    YesDHCP Server    192.168.43.1DHCP Lease Expires    10/24/2017 4:55 PMDHCP Lease Obtained    10/24/2017 3:55 PMMAC Address    ‪90:2E:1C:33:E8:8E‬Memory Address    0xF0400000-0xF04FFFFFIRQ Channel    IRQ 4294967293Driver    c:\windows\system32\drivers\netwbw02.sys (18.33.7.2, 3.35 MB (3,517,696 bytes), 4/13/2017 2:10 PM)

Code:

10/15/2017 9:34 PM    Windows Error Reporting    Fault bucket , type 0
Event Name: BlueScreen
Response: Non disponible
Cab Id: 0

Problem signature:
P1: 109
P2: a3a008e20b8f64eb
P3: 0
P4: d3f438c258fa01cd
P5: 101
P6: 10_0_15063
P7: 0_0
P8: 256_1
P9: 
P10: 

Attached files:
\\?\C:\WINDOWS\Minidump\101517-7234-01.dmp
\\?\C:\Windows\Temp\WER-9281-0.sysdata.xml
\\?\C:\WINDOWS\MEMORY.DMP
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER395F.tmp.WERInternalMetadata.xml
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER396F.tmp.csv
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER397F.tmp.txt

These files may be available here:
C:\ProgramData\Microsoft\Windows\WER\ReportArchive\Kernel_109_418576cf9feb834ddffb665a825f0a951567f_00000000_cab_190cb2f4

Analysis symbol: 
Rechecking for solution: 0
Report Id: 88ee5a37-b7dd-4cb2-8745-1a1c5247eb1b
Report Status: 2049
Hashed bucket:10/15/2017 9:33 PM    Windows Error Reporting    Fault bucket , type 0
Event Name: BlueScreen
Response: Non disponible
Cab Id: 0

Problem signature:
P1: 109
P2: a3a008e20b8f64eb
P3: 0
P4: d3f438c258fa01cd
P5: 101
P6: 10_0_15063
P7: 0_0
P8: 256_1
P9: 
P10: 

Attached files:
\\?\C:\WINDOWS\Minidump\101517-7234-01.dmp
\\?\C:\Windows\Temp\WER-9281-0.sysdata.xml
\\?\C:\WINDOWS\MEMORY.DMP
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER395F.tmp.WERInternalMetadata.xml
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER396F.tmp.csv
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER397F.tmp.txt

These files may be available here:
C:\ProgramData\Microsoft\Windows\WER\ReportQueue\Kernel_109_418576cf9feb834ddffb665a825f0a951567f_00000000_0378397e

Analysis symbol: 
Rechecking for solution: 0
Report Id: 88ee5a37-b7dd-4cb2-8745-1a1c5247eb1b
Report Status: 4
Hashed bucket:
10/23/2017 11:19 AM    Windows Error Reporting    Fault bucket , type 0
Event Name: BlueScreen
Response: Non disponible
Cab Id: 0

Problem signature:
P1: 1a
P2: 403
P3: fffffe8000253e80
P4: 81000003d8cc2867
P5: fffffe800003fae0
P6: 10_0_15063
P7: 0_0
P8: 256_1
P9: 
P10: 

Attached files:
\\?\C:\WINDOWS\Minidump\102317-6625-01.dmp
\\?\C:\Windows\Temp\WER-9984-0.sysdata.xml
\\?\C:\WINDOWS\MEMORY.DMP
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER34BC.tmp.WERInternalMetadata.xml
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER3558.tmp.csv
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER3559.tmp.txt

These files may be available here:
C:\ProgramData\Microsoft\Windows\WER\ReportArchive\Kernel_1a_3f3256cd2a1672de7c242e3c6fef29b647a99fe5_00000000_cab_23fb066a

Analysis symbol: 
Rechecking for solution: 0
Report Id: ff46fc6c-8a62-4177-9a29-c0a76ef065e9
Report Status: 2049
Hashed bucket:
10/23/2017 11:12 AM    Windows Error Reporting    Fault bucket , type 0
Event Name: BlueScreen
Response: Non disponible
Cab Id: 0

Problem signature:
P1: 1a
P2: 403
P3: fffffe8000253e80
P4: 81000003d8cc2867
P5: fffffe800003fae0
P6: 10_0_15063
P7: 0_0
P8: 256_1
P9: 
P10: 

Attached files:
\\?\C:\WINDOWS\Minidump\102317-6625-01.dmp
\\?\C:\Windows\Temp\WER-9984-0.sysdata.xml
\\?\C:\WINDOWS\MEMORY.DMP
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER34BC.tmp.WERInternalMetadata.xml
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER3558.tmp.csv
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER3559.tmp.txt

These files may be available here:
C:\ProgramData\Microsoft\Windows\WER\ReportQueue\Kernel_1a_3f3256cd2a1672de7c242e3c6fef29b647a99fe5_00000000_03603567

Analysis symbol: 
Rechecking for solution: 0
Report Id: ff46fc6c-8a62-4177-9a29-c0a76ef065e9
Report Status: 4
Hashed bucket:
10/16/2017 10:09 PM    Windows Error Reporting    Fault bucket , type 0
Event Name: BlueScreen
Response: Non disponible
Cab Id: 0

Problem signature:
P1: 1a
P2: 41793
P3: ffff858000013e80
P4: 9e
P5: 9d
P6: 10_0_15063
P7: 0_0
P8: 256_1
P9: 
P10: 

Attached files:
\\?\C:\WINDOWS\Minidump\101717-9093-01.dmp
\\?\C:\Windows\Temp\WER-39828-0.sysdata.xml
\\?\C:\WINDOWS\MEMORY.DMP
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER3D33.tmp.WERInternalMetadata.xml
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER3D81.tmp.csv
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER3D91.tmp.txt

These files may be available here:
C:\ProgramData\Microsoft\Windows\WER\ReportArchive\Kernel_1a_cafabc9fe8543fee1eecc78ae65e3f9b2d09fc_00000000_cab_2efda8ce

Analysis symbol: 
Rechecking for solution: 0
Report Id: 0dda5fad-5052-458b-95b5-bc5fa73f3f82
Report Status: 2049
Hashed bucket:
10/16/2017 10:09 PM    Windows Error Reporting    Fault bucket , type 0
Event Name: BlueScreen
Response: Non disponible
Cab Id: 0

Problem signature:
P1: 1a
P2: 41793
P3: ffff858000013e80
P4: 9e
P5: 9d
P6: 10_0_15063
P7: 0_0
P8: 256_1
P9: 
P10: 

Attached files:
\\?\C:\WINDOWS\Minidump\101717-9093-01.dmp
\\?\C:\Windows\Temp\WER-39828-0.sysdata.xml
\\?\C:\WINDOWS\MEMORY.DMP
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER3D33.tmp.WERInternalMetadata.xml
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER3D81.tmp.csv
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER3D91.tmp.txt

These files may be available here:
C:\ProgramData\Microsoft\Windows\WER\ReportQueue\Kernel_1a_cafabc9fe8543fee1eecc78ae65e3f9b2d09fc_00000000_03713d90

Analysis symbol: 
Rechecking for solution: 0
Report Id: 0dda5fad-5052-458b-95b5-bc5fa73f3f82
Report Status: 4
Hashed bucket:
10/15/2017 3:15 PM    Windows Error Reporting    Fault bucket , type 0
Event Name: BlueScreen
Response: Non disponible
Cab Id: 0

Problem signature:
P1: c2
P2: 7
P3: 6264444e
P4: 41d0007
P5: ffff960b69bf48a0
P6: 10_0_15063
P7: 0_0
P8: 256_1
P9: 
P10: 

Attached files:
\\?\C:\WINDOWS\Minidump\101517-7515-01.dmp
\\?\C:\Windows\Temp\WER-9843-0.sysdata.xml
\\?\C:\WINDOWS\MEMORY.DMP
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER3AC6.tmp.WERInternalMetadata.xml
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER3AE6.tmp.csv
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER3AF6.tmp.txt

These files may be available here:
C:\ProgramData\Microsoft\Windows\WER\ReportArchive\Kernel_c2_2671284aee885e3d379765d243f551a3ae1ef358_00000000_cab_1fe459f7

Analysis symbol: 
Rechecking for solution: 0
Report Id: 18c893a0-4ecc-43d6-b826-d1cc56356c55
Report Status: 2049
Hashed bucket:
10/15/2017 3:15 PM    Windows Error Reporting    Fault bucket , type 0
Event Name: BlueScreen
Response: Non disponible
Cab Id: 0

Problem signature:
P1: c2
P2: 7
P3: 6264444e
P4: 41d0007
P5: ffff960b69bf48a0
P6: 10_0_15063
P7: 0_0
P8: 256_1
P9: 
P10: 

Attached files:
\\?\C:\WINDOWS\Minidump\101517-7515-01.dmp
\\?\C:\Windows\Temp\WER-9843-0.sysdata.xml
\\?\C:\WINDOWS\MEMORY.DMP
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER3AC6.tmp.WERInternalMetadata.xml
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER3AE6.tmp.csv
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER3AF6.tmp.txt

These files may be available here:
C:\ProgramData\Microsoft\Windows\WER\ReportQueue\Kernel_c2_2671284aee885e3d379765d243f551a3ae1ef358_00000000_03943af5

Analysis symbol: 
Rechecking for solution: 0
Report Id: 18c893a0-4ecc-43d6-b826-d1cc56356c55
Report Status: 4
Hashed bucket:

NETwbw02.sys

Intel® Wireless WiFi Link Driver - Intel® Wireless WiFi Link Adapter

https://downloadcenter.intel.com/default.aspx