Welcome to Ten Forums BSOD forum.
For all tests please make sure that images are posted into the thread.
In case there are problems posting images please use one drive or drop box and post share links into the thread.
Please open administrative command prompt and type or copy and paste:
1) sfc /scannow
2) dism /online /cleanup-image /restorehealth
3) When these have completed > right click on the top bar or title bar of the administrative command prompt box > left click on edit then select all > right click on the top bar again > left click on edit then copy > paste into the thread
4) Run HDTune:
http://www.hdtune.com/
to check the health,
scan for errors, no quick scan but full scan
run a benchmark.
It may take some time, but please take the time you need to perform it properly.
When above is done please make screenshots of the following
the health,
the error scan,
the benchmark incl. following
transfer rate,
access time,
burst rate,
cpu usage.
Take Screenshot in Windows 10 General Tips Tutorials
5) Open administrative command prompt and type or copy and paste: chkdsk /x /r
This may take many hours so plan to run overnight.
Microsoft Windows [Version 10.0.15063]
(c) 2017 Microsoft Corporation. All rights reserved.
C:\Windows\system32>chkdsk /x /r
The type of the file system is NTFS.
Cannot lock current drive.
Chkdsk cannot run because the volume is in use by another
process. Would you like to schedule this volume to be
checked the next time the system restarts? (Y/N)
Type Y and then reboot.
Perform this on each partition and use the syntax chkdsk /x /r C: changing C to the applicable drive letter.
6) Post the event viewer chkdsk report into the thread using the information in this link:
Read Chkdsk Log in Event Viewer in Windows 10 Performance Maintenance Tutorials
7) Run memtest86+ version 5.01 for at least 8 passes. Memtest86+ - Advanced Memory Diagnostic Tool
This may take hours so plan to run it overnight.
Please make sure you use the Memtest86+ version 5.01 with the link below.
Memtest86+ - Advanced Memory Diagnostic Tool
The testing is done not by time but by passes.
The more passes the better.
There are a significant number of false negatives if fewer than 8 passes are made.
A false negative is a test pass when there is malfunctioning RAM.
There is 16 GB of RAM on the computer.
Memtest86+ version 5.01 testing takes approximately 1 - 2 hours /GB RAM
Just 1 error is a fail and you can abort testing.
Then test 1 RAM module at a time in the same DIMM each for 8 or more passes.
When Memtest86+ has completed 8 or more passes use a camera or smart phone camera to take a picture and post an image into the thread.
Memory problems. - Microsoft Community
MemTest86+ - Test RAM BSOD Tutorials
8) Turn off Windows fast startup:
Turn On or Off Fast Startup in Windows 10 Performance Maintenance Tutorials
9) Open disk management > post an image into the thread
10) In the left lower corner search type: system > open system control panel > on the left pane click advanced system settings > on the advanced tab in startup and recovery click settings > post an image into the thread
12) Make sure that there is no over clocking while troubleshooting.
13) Sometimes there are problems in the bios that produce bsod.
The BIOS: BIOS Version/Date American Megatrends Inc. F3, 10/20/2015
14) Please check to see if this is the most up to date version.
15) To ensure that there are no improper bios settings please reset the bios.
16) Sometimes there can be failure to boot after resetting the bios.
17) So please make sure your files are backed up.
18) Please make a backup image with Macrium:
Macrium Software | Macrium Reflect Free:
Macrium Software | Your Image is Everything
Macrium Software | Macrium Reflect Free
19) And please create a brand new restore point.
How to Clear Your Computers CMOS to Reset BIOS Settings:
How to Clear Your Computers CMOS to Reset BIOS Settings
3 Ways to Reset Your BIOS - wikiHow:
3 Ways to Reset Your BIOS - wikiHow
20) Please open the website for the computer's drivers and post a URL into the thread.
21) Open device manager > click view > show hidden devices > expand all rows > look for any row with a yellow triangle and black exclamation mark > post images into the thread.
22) Uninstall Malwarebytes during the troubleshooting process.
23) Please make sure that chkdsk /r and HD Tune tests are performed on each partition/drive.
24) Find the memory dump file and post a one drive or drop box share link into the thread >memory dump file: %SystemRoot%\MEMORY.DMP or C:\Windows\MEMORY.DMP
Use file explorer > this PC > local C: drive > right upper corner search enter each of the above to find results.
Code:
Event[512]:
Log Name: System
Source: Volsnap
Date: 2017-07-14T13:59:36.580
Event ID: 24
Task: N/A
Level: Warning
Opcode: N/A
Keyword: Classic
User: N/A
User Name: N/A
Computer: Alecto
Description:
There was insufficient disk space on volume K: to grow the shadow copy storage for shadow copies of K:. As a result of this failure all shadow copies of volume K: are at risk of being deleted.
Code:
Event[513]:
Log Name: System
Source: Volsnap
Date: 2017-07-14T14:07:31.309
Event ID: 35
Task: N/A
Level: Error
Opcode: N/A
Keyword: Classic
User: N/A
User Name: N/A
Computer: Alecto
Description:
The shadow copies of volume K: were aborted because the shadow copy storage failed to grow.
Code:
Event[538]:
Log Name: System
Source: Microsoft-Windows-Kernel-Boot
Date: 2017-07-15T01:27:25.538
Event ID: 29
Task: N/A
Level: Error
Opcode: Info
Keyword: N/A
User: S-1-5-18
User Name: NT AUTHORITY\SYSTEM
Computer: Alecto
Description:
Windows failed fast startup with error status 0xC000007B.
Code:
Event[3477]:
Log Name: System
Source: Disk
Date: 2017-09-15T02:40:47.482
Event ID: 11
Task: N/A
Level: Error
Opcode: N/A
Keyword: Classic
User: N/A
User Name: N/A
Computer: Alecto
Description:
The driver detected a controller error on \Device\Harddisk2\DR2.
Code:
Event[2694]:
Log Name: System
Source: Disk
Date: 2017-08-30T03:41:50.020
Event ID: 11
Task: N/A
Level: Error
Opcode: N/A
Keyword: Classic
User: N/A
User Name: N/A
Computer: Alecto
Description:
The driver detected a controller error on \Device\Harddisk3\DR6.
Code:
Event[2653]:
Log Name: System
Source: Volsnap
Date: 2017-08-29T00:37:17.423
Event ID: 33
Task: N/A
Level: Information
Opcode: N/A
Keyword: Classic
User: N/A
User Name: N/A
Computer: Alecto
Description:
The oldest shadow copy of volume K: was deleted to keep disk space usage for shadow copies of volume K: below the user defined limit.
Code:
Event[1665]:
Log Name: System
Source: Disk
Date: 2017-08-04T01:04:32.578
Event ID: 51
Task: N/A
Level: Warning
Opcode: N/A
Keyword: Classic
User: N/A
User Name: N/A
Computer: Alecto
Description:
An error was detected on device \Device\Harddisk2\DR85 during a paging operation.
Code:
Event[1646]:
Log Name: System
Source: Disk
Date: 2017-08-03T15:56:16.935
Event ID: 51
Task: N/A
Level: Warning
Opcode: N/A
Keyword: Classic
User: N/A
User Name: N/A
Computer: Alecto
Description:
An error was detected on device \Device\Harddisk2\DR82 during a paging operation.
Code:
Event[1481]:
Log Name: System
Source: Disk
Date: 2017-07-31T01:13:38.812
Event ID: 51
Task: N/A
Level: Warning
Opcode: N/A
Keyword: Classic
User: N/A
User Name: N/A
Computer: Alecto
Description:
An error was detected on device \Device\Harddisk2\DR38 during a paging operation.
Event[1482]:
Log Name: System
Source: Disk
Date: 2017-07-31T01:13:38.812
Event ID: 51
Task: N/A
Level: Warning
Opcode: N/A
Keyword: Classic
User: N/A
User Name: N/A
Computer: Alecto
Description:
An error was detected on device \Device\Harddisk2\DR38 during a paging operation.
Event[1483]:
Log Name: System
Source: Disk
Date: 2017-07-31T01:13:38.812
Event ID: 51
Task: N/A
Level: Warning
Opcode: N/A
Keyword: Classic
User: N/A
User Name: N/A
Computer: Alecto
Description:
An error was detected on device \Device\Harddisk2\DR38 during a paging operation.
Event[1484]:
Log Name: System
Source: Disk
Date: 2017-07-31T01:13:38.812
Event ID: 51
Task: N/A
Level: Warning
Opcode: N/A
Keyword: Classic
User: N/A
User Name: N/A
Computer: Alecto
Description:
An error was detected on device \Device\Harddisk2\DR38 during a paging operation.
Code:
Event[1095]:
Log Name: System
Source: Disk
Date: 2017-07-23T03:16:20.381
Event ID: 11
Task: N/A
Level: Error
Opcode: N/A
Keyword: Classic
User: N/A
User Name: N/A
Computer: Alecto
Description:
The driver detected a controller error on \Device\Harddisk2\DR2.
Code:
Event[1092]:
Log Name: System
Source: Display
Date: 2017-07-22T21:32:32.101
Event ID: 4101
Task: N/A
Level: Warning
Opcode: Info
Keyword: Classic
User: N/A
User Name: N/A
Computer: Alecto
Description:
Display driver nvlddmkm stopped responding and has successfully recovered.
Event[1093]:
Log Name: System
Source: Display
Date: 2017-07-22T22:02:36.851
Event ID: 4101
Task: N/A
Level: Warning
Opcode: Info
Keyword: Classic
User: N/A
User Name: N/A
Computer: Alecto
Description:
Display driver nvlddmkm stopped responding and has successfully recovered.
Event[1094]:
Log Name: System
Source: Display
Date: 2017-07-22T23:23:58.163
Event ID: 4101
Task: N/A
Level: Warning
Opcode: Info
Keyword: Classic
User: N/A
User Name: N/A
Computer: Alecto
Description:
Display driver nvlddmkm stopped responding and has successfully recovered.
Code:
Event[995]:
Log Name: System
Source: Disk
Date: 2017-07-22T15:18:44.011
Event ID: 51
Task: N/A
Level: Warning
Opcode: N/A
Keyword: Classic
User: N/A
User Name: N/A
Computer: Alecto
Description:
An error was detected on device \Device\Harddisk2\DR135 during a paging operation.
Code:
Event[5083]:
Log Name: System
Source: Display
Date: 2017-11-01T05:45:16.420
Event ID: 4101
Task: N/A
Level: Warning
Opcode: Info
Keyword: Classic
User: N/A
User Name: N/A
Computer: Alecto
Description:
Display driver nvlddmkm stopped responding and has successfully recovered.
Code:
Standard PS/2 Keyboard ACPI\PNP0303\0 This device is not present, is not working properly, or does not have all its drivers installed.
Code:
Microsoft PS/2 Mouse ACPI\PNP0F03\0 This device is not present, is not working properly, or does not have all its drivers installed.
Code:
7/15/2017 5:27 AM Windows Error Reporting Fault bucket , type 0
Event Name: BlueScreen
Response: Not available
Cab Id: 0
Problem signature:
P1: d1
P2: 0
P3: ff
P4: 1
P5: 0
P6: 10_0_15063
P7: 0_0
P8: 768_1
P9:
P10:
Attached files:
\\?\C:\WINDOWS\Minidump\071517-4390-01.dmp
\\?\C:\Windows\Temp\WER-5921-0.sysdata.xml
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER25A9.tmp.WERInternalMetadata.xml
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER25AA.tmp.csv
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER25BB.tmp.txt
These files may be available here:
C:\ProgramData\Microsoft\Windows\WER\ReportArchive\Kernel_d1_4f8d8342b4f49dfd8efbe1b4185485a12434d_00000000_cab_199c273e
Analysis symbol:
Rechecking for solution: 0
Report Id: 5b74425e-4b87-45b7-8ce9-4298136a2edf
Report Status: 2049
Hashed bucket:
7/15/2017 5:27 AM Windows Error Reporting Fault bucket , type 0
Event Name: BlueScreen
Response: Not available
Cab Id: 0
Problem signature:
P1: d1
P2: 0
P3: ff
P4: 1
P5: 0
P6: 10_0_15063
P7: 0_0
P8: 768_1
P9:
P10:
Attached files:
\\?\C:\WINDOWS\Minidump\071517-4390-01.dmp
\\?\C:\Windows\Temp\WER-5921-0.sysdata.xml
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER25A9.tmp.WERInternalMetadata.xml
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER25AA.tmp.csv
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER25BB.tmp.txt
These files may be available here:
C:\ProgramData\Microsoft\Windows\WER\ReportQueue\Kernel_d1_4f8d8342b4f49dfd8efbe1b4185485a12434d_00000000_02d425b8
Analysis symbol:
Rechecking for solution: 0
Report Id: 5b74425e-4b87-45b7-8ce9-4298136a2edf
Report Status: 4
Hashed bucket: