BSOD on startup

elbmek · Jun 20, 2022

MY pc has begun to produce BSOD screen on startup. The images are attached. I phoned my 'techie' and described the problem. He checked it out his end and said the message "K_Mode_exception_not_handled" was a generic message and didnt actually say anything. He also stated he had to revert someone's pc to win 10 because of BSOD errors. I told him that the only new thing in 11 was Bit Defender and that I had Malwarebytes Premium installed. He said to delete Bit Defender and run it for a few days to see if the BSOD returns. I did this and rebooted and my desktop came up no problem. MY wife said she had had a few BSODs on her account but it went OK on reboots.

He informed me that win 11 security and MWB in unison will look after your pc during this time.

Superfly · Jun 20, 2022

elbmek said:
MY pc has begun to produce BSOD screen on startup. The images are attached. I phoned my 'techie' and described the problem. He checked it out his end and said the message "K_Mode_exception_not_handled" was a generic message and didnt actually say anything. He also stated he had to revert someone's pc to win 10 because of BSOD errors. I told him that the only new thing in 11 was Bit Defender and that I had Malwarebytes Premium installed. He said to delete Bit Defender and run it for a few days to see if the BSOD returns. I did this and rebooted and my desktop came up no problem. MY wife said she had had a few BSODs on her account but it went OK on reboots.

He informed me that win 11 security and MWB in unison will look after your pc during this time.

No problems running BitDefender here - in fact it runs perfectly well with TinyFirewall. The techie is grabbing at straws.

elbmek · Jun 20, 2022

Well, we'll see after a few days, if the screens come back. He is a knowledgeable man, I trust his opinions but as I said, we shall see.

Superfly · Jun 20, 2022

elbmek said:
Well, we'll see after a few days, if the screens come back. He is a knowledgeable man, I trust his opinions but as I said, we shall see.

No prob..
I still think they should provide a more accurate diagnosis, than "wait and see" - why blindly trust an unsubstantiated opinion?

imanlien2020 · Jun 20, 2022

elbmek said:
MY pc has begun to produce BSOD screen on startup. The images are attached. I phoned my 'techie' and described the problem. He checked it out his end and said the message "K_Mode_exception_not_handled" was a generic message and didnt actually say anything. He also stated he had to revert someone's pc to win 10 because of BSOD errors. I told him that the only new thing in 11 was Bit Defender and that I had Malwarebytes Premium installed. He said to delete Bit Defender and run it for a few days to see if the BSOD returns. I did this and rebooted and my desktop came up no problem. MY wife said she had had a few BSODs on her account but it went OK on reboots.

He informed me that win 11 security and MWB in unison will look after your pc during this time.

and this very well could be. I used Bitdefender Total Security for a few months free and I have used pretty much every Security Software out there and Bitdefender is incredibly tight on security. Like it blocked tons of things etc. You really just have to go through every setting and tweak them just right, when I did that my pc ran great. In my opinion Bitdefender is the Best security software. I use Avast Premium only and disabled every single Windows Defender setting I could find. And you gotta dig deep to even do that nowadays.

philc43 · Jun 20, 2022

Please follow the instructions in the link: BSOD - Posting Instructions

This will collect some logfiles and any crash dumps so that we can provide a diagnosis of the reason for the BSOD.

elbmek · Jun 20, 2022

Thats great phil and even easy for me to use. Here is the file. MWB scan produced 2 files for quarantine, I cant see what they are

philc43 · Jun 20, 2022

elbmek said:
Thats great phil and even easy for me to use. Here is the file. MWB scan produced 2 files for quarantine, I cant see what they are

Hello elbmek, unfortunately you have linked the V2 log collector rather than following the instructions to upload the files that it produces. Please follow the steps provided in the BSOD posting instructions.

elbmek · Jun 20, 2022

strange, it was a folder it placed on my desktop, I assumed it knew what it was doing. I'll have to find out where it placed it.

I ran the software again and it placed another zipped folder on the desktop, it wont attach folder in here

google drive cannot see them

elbmek · Jun 20, 2022

MIKE-PC-(2022-06-20_18-25-04).zip

drive.google.com

I think this is what you want

philc43 · Jun 20, 2022

elbmek said:
MIKE-PC-(2022-06-20_18-25-04).zip

drive.google.com

I think this is what you want

That's great - you are almost there - the file on your Google Drive needs to be shared and you need to provide the link.

elbmek · Jun 20, 2022

Thats what I did?

MIKE-PC-(2022-06-20_18-25-04).zip

drive.google.com

philc43 · Jun 20, 2022

Brilliant - it's now shared and I can access it. Will work on the files and report back in a while.

elbmek · Jun 20, 2022

Thanks for your time Phil, greatly appreciated

philc43 · Jun 20, 2022

A couple of things popped out when analysing the crash dumps - Bitdefender and MSI One Dragon software.

Here is the analysis of the stack when the crash occurs:

Rich (BB code):

14: kd> .load pde;!dpx
=========================================================================================
PDE v11.3 - Copyright 2017 Andrew Richards
=========================================================================================
Start memory scan  : 0xffff90879a2e5a88 ($csp)
End memory scan    : 0xffff90879a2e8000 (Kernel Stack Base)

0xffff90879a2e5b18 : 0xfffff8066c21c0a0 : nt!KiServiceLinkage
Unable to load image \SystemRoot\system32\DRIVERS\atc.sys, Win32 error 0n2
*** WARNING: Unable to verify timestamp for atc.sys
0xffff90879a2e5eb8 : 0xfffff8066c048703 : nt!MiCheckVirtualAddress+0xf3
0xffff90879a2e5ed0 : 0xfffff8066be11d90 : nt!KERNEL_AUDIT_API_OPENPROCESS
0xffff90879a2e5ee8 : 0xfffff8066c048448 : nt!MiInPagePageTable+0x2f8
0xffff90879a2e5f38 : 0xfffff8066c092e72 : nt!RtlGetExtendedContextLength2+0x22
0xffff90879a2e60f8 : 0xfffff8066c081b41 : nt!MiUnlockWorkingSetShared+0x81
0xffff90879a2e6128 : 0xfffff8066c079d73 : nt!MiUserFault+0x6b3
0xffff90879a2e6168 : 0xfffff8066c22a5ce : nt!KiExceptionDispatch+0x10e
0xffff90879a2e6258 : 0xfffff8066c229e78 : nt!KiSystemServiceCopyEnd+0x28
0xffff90879a2e62f8 : 0xfffff8066c051f01 : nt!RtlpHpLfhSlotAllocate+0x121
0xffff90879a2e6348 : 0xfffff8066c2265da : nt!KiPageFault+0x41a       <--- Here is where the fault occurs
0xffff90879a2e6350 : 0xffff908700000000 :  Trap @ ffff90879a2e6350
0xffff90879a2e6438 : 0xfffff8066c21c0a0 : nt!KiServiceLinkage
0xffff90879a2e6478 : 0xfffff8066c0513b3 : nt!ExAllocateHeapPool+0x2a3
0xffff90879a2e65a8 : 0xfffff80670fdc291 : FLTMGR!FltReleasePushLock+0x21
0xffff90879a2e6868 : 0xfffff80670fdc291 : FLTMGR!FltReleasePushLock+0x21
0xffff90879a2e6918 : 0xfffff80670fdc291 : FLTMGR!FltReleasePushLock+0x21
0xffff90879a2e6bb0 : 0xfffff8066caf6338 : nt!PspCreateProcessNotifyRoutine+0x78
0xffff90879a2e6bd8 : 0xfffff8066c46be0e : nt!PspCallProcessNotifyRoutines+0x206
0xffff90879a2e6c10 : 0xfffff8067fc355e0 : bam!BampKernelCalloutTable
0xffff90879a2e6ca8 : 0xfffff8066c5e0e65 : nt!PspInsertThread+0x639
0xffff90879a2e6d78 : 0xfffff8066c5d4980 : nt!NtCreateUserProcess+0xe10
0xffff90879a2e6e38 : 0x0053002b002b0033 :  !du "3++S++"
0xffff90879a2e7580 : 0xffffa685996056c0 :  !du ""\??\C:\Program Files (x86)\MSI\One Dragon Center\VoiceControl\VoiceControlEngine...""
0xffff90879a2e7a08 : 0xffff90879a2e7a48 : 0xfffff8066c4fff96 : nt!NtOpenKey+0x56
0xffff90879a2e7a28 : 0xfffff8066c229e78 : nt!KiSystemServiceCopyEnd+0x28
0xffff90879a2e7a48 : 0xfffff8066c4fff96 : nt!NtOpenKey+0x56
0xffff90879a2e7a98 : 0xfffff8066c229f45 : nt!KiSystemServiceExit+0xc5
0xffff90879a2e7aa0 : 0x0000000000000001 :  Trap @ ffff90879a2e7aa0

Analysis of the trap just prior to the page fault:

14: kd> .trap ffff90879a2e6350;knL
NOTE: The trap frame does not contain all registers.
Some register values may be zeroed or incorrect.
rax=0000000000000000 rbx=0000000000000000 rcx=ffffffff800047b4
rdx=0000007f3c7e7018 rsi=0000000000000000 rdi=0000000000000000
rip=0000000000000000 rsp=ffff90879a2e64e8 rbp=ffff90879a2e6650
r8=ffff90879a2e6530  r9=0000000000000008 r10=000015fdfd8dc3b0
r11=ffffa68597d39040 r12=0000000000000000 r13=0000000000000000
r14=0000000000000000 r15=0000000000000000
iopl=0         nv up ei ng nz na po nc
00000000`00000000 ??              ???
*** Stack trace for last set context - .thread/.cxr resets it
# Child-SP          RetAddr               Call Site
00 ffff9087`9a2e64e8 fffff806`7ff385bf     0x0
01 ffff9087`9a2e64f0 00000000`00000074     atc+0x2485bf  <---- atc.sys is a Bitdefender driver
02 ffff9087`9a2e64f8 00000000`00000000     0x74

Please let me know if removing BitDefender makes a difference.
If you still get BSOD crashes I would consider temporarily removing the One Dragon Software to see if this helps.

elbmek · Jun 20, 2022

So far today, nothing has gone wrong. I have deliberately rebooted a couple of times during the day and nothing went wrong. The only thing dragon runs is the game keyboard. I dont know if it will operate properly if I delete dragon. Its an MSI Vigor GK50 Elite. I'll leave that part for now and monitor the pc. I am going away Thur - Sun to N Yorkshire. MY daughter will be here so I'll ask her if she has any BSOD's. And then take it from there when we return. Can that page fault be somehow removed?

A sincere thanks for your efforts and time, greatly and gratefully appreciated.

philc43 · Jun 21, 2022

That's all looking good. You do not need to worry about the page fault persisting - it is removed once the system has rebooted.

elbmek · Jun 21, 2022

thanks

BSOD on startup

Well-known member

Attachments

My Computer

Well-known member

My Computer

Well-known member

My Computer

Well-known member

My Computer

EternalSoul

My Computer

BSOD Analyst

My Computers

Well-known member

Attachments

My Computer

BSOD Analyst

My Computers

Well-known member

Attachments

My Computer

Well-known member

My Computer

BSOD Analyst

My Computers

Well-known member

My Computer

BSOD Analyst

My Computers

Well-known member

My Computer

BSOD Analyst

My Computers

Well-known member

My Computer

BSOD Analyst

My Computers

Well-known member

My Computer

Similar threads