Solved BSOD - Event ID 162 and 41, error creating dumpfile

lenovouser · Dec 20, 2023

Hi!

Since I got my Laptop it has experienced random, recurring BSOD:s. The Event viewer shows Event ID 162 and 41 for all of them, with an error creating dumpfiles. There are no obvious ways to induce the crashes. When the crashes occur, the computer slows down immensely, audio gets distorted into "white noise" followed by a split second BSOD, all of which occurs over around 2 seconds. It has happened while gaming, while gaming with friends, just browsing the internet, and so on. I can do all of those things without crashes as well, and go long periods without crashing.

The windows memory diagnostic did not show any problems with RAM. Using windows driver verifier, NordVPN drivers (either nordlwf, or Ndivert.sys, depending on verifier setting) causes immediate crash and dumpfile creation. I don't know if these represent the recurring crashes, which is what I would like to confirm if possible. Using the verifier with NordVPN uninstalled does not produce crashes, even after a couple of days of usage; there was however one time where the computer crashed (not a BSOD, just a random restart) which I don't what it means.

What I would like to know is if this is proof that NordVPN drivers are causing the crashes, or if further testing is needed. Also, if it's the cause, is NordVPN thereby unusable for stable use on my system?

Here is the V2 logger file as a onedrive link regarding the recent verifier crash response to installing NordVPN with the elevenforums verifier settings. (Hope I did it correctly) OneDrive

Thank you for your reply!

zbook · Dec 20, 2023

Laptop manufacturers are responsible for the OEM OS, Drivers, Applications, and hardware at the time of sale.

New laptops should not have BSOD.

It's best to contact Lenovo for Return Merchandise Authorization (RMA).

Some troubleshooting can be performed.

Please perform the following steps:

1) Run Tuneup plus > post a share link into this thread using one drive, drop box, or google drive.

Batch files for use in BSOD debugging - Windows 10 Help Forums

Information This thread is for use by the BSOD team to store batch files that can be used to collect additional data, fix settings or anything else that is useful in debugging BSOD problems in Windows 10. The way I see it working is the first

www.tenforums.com

https://www.tenforums.com/attachments/bsod-crashes-debugging/360139d1645183596-batch-files-use-bsod-debugging-tuneup_plus_log.zip

2) Indicate which tutorial you had used for Windows Driver Verifier

3) Turn off WDV using administrative command prompt verifier /reset

4) Use this tutorial for WDV:

Enable and Disable Driver Verifier in Windows 10

How to Enable and Disable Driver Verifier in Windows 10

www.tenforums.com

5) Upgrade the BIOS:

Page Not Found - Lenovo Support GR

pcsupport.lenovo.com

6) Uninstall only the AMD GPU drivers using DDU and reinstall using the Lenovo website:

Display Driver Uninstaller (DDU) download latest version 18.0.8.1

Official Display Driver Uninstaller (DDU) download website. DDU is a driver removal utility that can help you completely uninstall AMD/NVIDIA/INTEL graphics card drivers and packages from your system, trying to remove all leftovers (including registry keys, folders and files, driver store).

www.wagnardsoft.com

Display Driver Uninstaller: How to use

How to Use Display Driver Uninstaller to Uninstall any Installed Display Driver

www.sevenforums.com

laptops and netbooks :: gaming series :: ideapad gaming 3 15ach6 :: 82k2 :: 82k201y3mx :: mp2c3fs0 - Lenovo Support US

pcsupport.lenovo.com

6) Nordvpn and nordlwf can be tested later

lenovouser · Dec 21, 2023

Hi,

The Tuneup file is attached to this reply. I followed the instructions provided here: BSOD - Driver Verifier Instructions [Official] for the driver verifier. Here is a share link for the tuneup file on onedrive if necessary OneDrive

zbook · Dec 21, 2023

Please follow this tutorial : Enable and Disable Driver Verifier in Windows 10

The tutorial that you displayed is only for that person.

lenovouser · Dec 23, 2023

Hi,

I ran the driver verifier with the recommended settings provided in this thread and got another crash, after updating the bios and doing reinstall of the AMD drivers, with NordVPN uninstalled. The stop code given was Unexpected Store Exception, but it did not produce a minidump this time around for some reason. (I'll note that the settings have "Automatic Memory Dump" instead of "Small Minidump" enabled, which I do not remember changing)

The event viewer indicate the same errors as those I described in the first post, although this time there was also a HAL error, saying the watchdog timer was triggered.

Here is a link to the V2 logger file: OneDrive

x BlueRobot · Dec 23, 2023

zbook said:
The tutorial that you displayed is only for that person.

You do know most of the settings in the tutorial were recommended by a developer at Microsoft? Despite that, I've explained in detail, in that tutorial why the Windows 10 should not be followed, yet you still have not provided any objective reason why my tutorial is wrong, nevertheless we both know that the reason is simply because you dislike me for banning you from another forum.

The issue appears to be with Nord VPN and your own testing has confirmed this. Nord VPN and most VPN programs are pretty terrible in terms of stability and usefulness, I wouldn't recommend anyone use one unless you're willing to spend the money to get a "business-grade" VPN, and even then, I would question why do you need one to begin with? They don't make you more secure or protect you your privacy, most of those VPN companies sell your network traffic to advertisers, it's how they manage to either offer free versions or discounted ones.

Rich (BB code):

3: kd> knL
 # Child-SP          RetAddr               Call Site
00 ffffa80b`2ee9e758 fffff802`1d0374e9     nt!KeBugCheckEx
01 ffffa80b`2ee9e760 fffff802`1d032a34     nt!KiBugCheckDispatch+0x69
02 ffffa80b`2ee9e8a0 fffff802`1d2fbd50     nt!KiPageFault+0x474 << Illegal page fault which leads to BSOD
03 ffffa80b`2ee9ea38 fffff802`1bc33850     nt!RtlEqualUnicodeString << Crash here!
04 ffffa80b`2ee9ea40 00000000`00000001     NDivert+0x3850 << Nord VPN 
05 ffffa80b`2ee9ea48 ffff8003`49e447c0     0x1
06 ffffa80b`2ee9ea50 fffff807`771d811b     0xffff8003`49e447c0
07 ffffa80b`2ee9ea58 ffff8003`6aaf1080     amdkmdag+0xb811b
08 ffffa80b`2ee9ea60 ffffa80b`2ee9eb58     0xffff8003`6aaf1080
09 ffffa80b`2ee9ea68 fffff807`771d8100     0xffffa80b`2ee9eb58
0a ffffa80b`2ee9ea70 ffffa80b`2ee9ea88     amdkmdag+0xb8100
0b ffffa80b`2ee9ea78 ffffa80b`2ee9ead9     0xffffa80b`2ee9ea88
0c ffffa80b`2ee9ea80 ffffa80b`2ee9eb80     0xffffa80b`2ee9ead9
0d ffffa80b`2ee9ea88 ffffffff`80005708     0xffffa80b`2ee9eb80
0e ffffa80b`2ee9ea90 fffff802`1bc46880     0xffffffff`80005708
0f ffffa80b`2ee9ea98 00000000`00000000     NDivert+0x16880

Both of the latest crashes from your first set of log files are identical.

lenovouser said:
(I'll note that the settings have "Automatic Memory Dump" instead of "Small Minidump" enabled, which I do not remember changing)

Which tutorial did you follow the second time? The Windows 10 version can lead to random unrelated crashes and false positives which is why I don't recommend anyone follow it.

lenovouser · Dec 23, 2023

In my first post I used the tutorial BSOD - Driver Verifier Instructions [Official] , in the second crash post I used the one provided in the thread.

I didn't alter my minidump settings going between the tutorials, so I was a little confused when a setting was changed seemingly by itself. Also, does the V2logger use the most recent dump file or does it work some other way? Because there was no dump file created by the latest crash, and I had uninstalled NordVPN prior to it.

zbook · Dec 23, 2023

The computer did not generate a dump file during the latest crash.

1) Please increase the free space on C: so that there is > 30 GB free space.

2) Confirm that all NordVPN software was uninstalled

Code:

Event[5408]
  Log Name: System
  Source: volmgr
  Date: 2023-12-23T13:19:15.4700000Z
  Event ID: 161
  Task: N/A
  Level: Error
  Opcode: N/A
  Keyword: Classic,
  User: N/A
  User Name: N/A
  Computer: Dawe
  Description:
Dump file creation failed due to error during dump creation.

x BlueRobot · Dec 24, 2023

lenovouser said:
Also, does the V2logger use the most recent dump file or does it work some other way?

It just takes everything in the Minidump folder, I believe Windows only keeps the last X number of dump files and then starts overwriting them. I think the default may be 5?

To answer your other question, if Windows experiences a crash before the dump_* drivers may have been able to load or those drivers crash themselves, then no dump file will be written to the disk. It is another reason why I don't like the Windows 10 tutorial, it recommends running Driver Verifier on those drivers, and with those settings, can cause them to error when they shouldn't.

lenovouser · Dec 24, 2023

1) Please increase the free space on C: so that there is > 30 GB free space.

2) Confirm that all NordVPN software was uninstalled

I have 100 Gb free on my C: currently, and I don't think I've ever gone below that so I don't know why I've had issues with dumpfile creations outside of those NordVPN related crashes using verifier.

To the best of my ability, I think NordVPN and all its components are uninstalled. I know for a fact that errors that occurred immediately on verifier start while having NordVPN installed do not occur after I have uninstalled NordVPN, so hopefully that's enough.

zbook · Dec 24, 2023

Please monitor the laptop using Reliability Monitor:

View Reliability History in Windows 11 Tutorial

This tutorial will show you how to view reliability history for your Windows 11 device. The Reliability Monitor provides a system stability overview and details about events that impact reliability. It calculates the Stability Index shown in the System Stability Chart. Reliability Monitor...

www.elevenforum.com

For any BSOD post a new V2 share link.

Options are to stress test all drivers using WDV or to monitor without stress testing.

The former is quicker and the later is slower.

Code:

------------------------
Disk & DVD/CD-ROM Drives
------------------------
      Drive: C:
 Free Space: 25.0 GB
Total Space: 486.1 GB
File System: NTFS
      Model: INTEL SSDPEKNW512GZL

lenovouser · Dec 29, 2023

Hi,

I have ran WDV for a couple of days now (I haven't used the computer in all of that time, so it should amount to ~48 hours), and the system did not crash even though it showed signs of significant stress. As it isn't crashing I have decided to stop the verifier as I do not know if I'm harming the system. Of note, before troubleshooting these signs would have crashed the system a long time ago.

Because I feel my system to be stable I will mark the thread as solved, and carry with me that NordVPN was the problem causing my machine to be unstable. I'll continue to monitor the system and if another crash were to appear I'll send my computer to be properly tested using my warranty when I'm able.

Thank you for all the help!

Best regards,
Lenovouser