BSOD only while playing Call of Duty MW3 - Event ID 162 and 41 combo

cambo11 · Nov 15, 2023

zbook said:
Please make a new restore point.

Read this tutorial on Windows Driver Verifier (WDV):

Enable and Disable Driver Verifier in Windows 10

How to Enable and Disable Driver Verifier in Windows 10

www.tenforums.com

Learn how to recover from using the tool by booting into safe mode and running one or more of these ACP commands to turn off the tool:

verifier /reset

verifier /bootmode resetonbootfail

Start WDV with these test settings:

a) test all non-Microsoft drivers

b) test no Microsoft drivers

c) start the testing with the three customized tests in the Ten Forums link

Plan to run the tool for approximately 48 hrs with various customized tests.

If there is no immediate BSOD then open ACP and copy and paste:

verifier /querysettings

Post a share link into the newest post.

For any BSOD post a new V2 share link into the newest post.

I tried disabling the WDV and still had the BSOD.

Currently trying your suggestion. What is the difference between A & B if we are testing non-microsoft drivers? I am currently doing A and selected all drivers except Microsoft ones.

For C, I am unsure what links you are referring to in the Ten Forums link.

zbook · Nov 15, 2023

When viewing the WDV menu windows scroll and sort as needed to identify Microsoft and non-Microsoft drivers.

Test all non-Microsoft drives with the selected customized tests.

Start with the 3 customized tests in the TF link.

If there is no immediate BSOD then post verifier /querysettings results.

Various customized tests will be used to find misbehaving drivers.

cambo11 · Nov 15, 2023

I am currently running the test selecting these 3 tests and all non-microsoft drivers.

I/O Verification
Force pending I/O requests
IRP logging

For this step, is this where I takes 32hrs+ or can I proceed with "verifier /querysettings".? No immediate BSOD so far after testing the game which it would normally occur.

cambo11 · Nov 16, 2023

Currently, no BSOD which would normally occur by now.

Code:

Verifier Flags: 0x00100610

  Standard Flags:

    [ ] 0x00000001 Special pool.
    [ ] 0x00000002 Force IRQL checking.
    [ ] 0x00000008 Pool tracking.
    [X] 0x00000010 I/O verification.
    [ ] 0x00000020 Deadlock detection.
    [ ] 0x00000080 DMA checking.
    [ ] 0x00000100 Security checks.
    [ ] 0x00000800 Miscellaneous checks.
    [ ] 0x00020000 DDI compliance checking.

  Additional Flags:

    [ ] 0x00000004 Randomized low resources simulation.
    [X] 0x00000200 Force pending I/O requests.
    [X] 0x00000400 IRP logging.
    [ ] 0x00002000 Invariant MDL checking for stack.
    [ ] 0x00004000 Invariant MDL checking for driver.
    [ ] 0x00008000 Power framework delay fuzzing.
    [ ] 0x00010000 Port/miniport interface checking.
    [ ] 0x00040000 Systematic low resources simulation.
    [ ] 0x00080000 DDI compliance checking (additional).
    [ ] 0x00200000 NDIS/WIFI verification.
    [ ] 0x00800000 Kernel synchronization delay fuzzing.
    [ ] 0x01000000 VM switch verification.
    [ ] 0x02000000 Code integrity checks.

  Internal Flags:

    [X] 0x00100000 Extended Verifier flags (internal).

    [X] Indicates flag is enabled.

  Boot Mode:

    Persistent

  Rules:

    All rules are using default settings

  Verified Drivers:

    klupd_klif_arkmon.sys
    cm_km.sys
    iastorvd.sys
    klupd_klif_klbg.sys
    klbackupdisk.sys
    klflt.sys
    klbackupflt.sys
    klif.sys
    klhk.sys
    klgse.sys
    klpd.sys
    kldisk.sys
    googledrivefs31092.sys
    googledrivefs31357.sys
    klwfp.sys
    klwtp.sys
    klim6.sys
    klpnpflt.sys
    msio64.sys
    kneps.sys
    klids.sys
    asio3.sys
    asio2.sys
    tap_ovpnconnect.sys
    nvlddmkm.sys
    netwtw12.sys
    ialpss2_i2c_adl.sys
    teedriverw10x64.sys
    e2fn.sys
    ialpss2_gpio2_adl.sys
    nvvad64v.sys
    nvmoduletracker.sys
    nvvhci.sys
    ssdevfactory.sys
    steelseries-sonar-vad.sys
    nvhda64v.sys
    rtkvhd64.sys
    ibtusb.sys
    sshid.sys
    klmouflt.sys
    klkbdflt.sys
    rogms.sys
    dump_dumpstorport.sys
    dump_stornvme.sys
    dump_dumpfve.sys
    odd.sys
    klupd_klif_klark.sys
    zttap300.sys
    klupd_klif_mark.sys
    hwinfo64a_190.sys

zbook · Nov 16, 2023

Please restart WDV with these customized tests:

[ ] 0x00000001 Special pool.
[ ] 0x00000002 Force IRQL checking.
[ ] 0x00000008 Pool tracking.
[ ] 0x00000010 I/O verification.
[ ] 0x00000020 Deadlock detection.
[ ] 0x00000080 DMA checking.
[ ] 0x00000100 Security checks.
[ ] 0x00000800 Miscellaneous checks.
[ ] 0x00020000 DDI compliance checking.
[ ] 0x00080000 DDI compliance checking (additional).
[ ] 0x00000200 Force pending I/O requests.
[ ] 0x00000400 IRP logging.

If there is no immediate BSOD then post a verifier /querysettings share link into the newest post using one drive, drop box, or google drive.

cambo11 · Nov 16, 2023

Was not able to reproduce BSOD with the latest customized tests. I've tried running game stress tests and also ran the game a few time. I did update to the latest Nvidia drivers. The only issue that I did run into is that the audio would somehow stop working which required a restart to get it going again. I assume this was related to the verifier stressing the driver.

I tried turning off the verifier and was able to reproduce the crash again within minutes. This one is stumping me for sure.

Code:

Verifier Flags: 0x001a0fbb

  Standard Flags:

    [X] 0x00000001 Special pool.
    [X] 0x00000002 Force IRQL checking.
    [X] 0x00000008 Pool tracking.
    [X] 0x00000010 I/O verification.
    [X] 0x00000020 Deadlock detection.
    [X] 0x00000080 DMA checking.
    [X] 0x00000100 Security checks.
    [X] 0x00000800 Miscellaneous checks.
    [X] 0x00020000 DDI compliance checking.

  Additional Flags:

    [ ] 0x00000004 Randomized low resources simulation.
    [X] 0x00000200 Force pending I/O requests.
    [X] 0x00000400 IRP logging.
    [ ] 0x00002000 Invariant MDL checking for stack.
    [ ] 0x00004000 Invariant MDL checking for driver.
    [ ] 0x00008000 Power framework delay fuzzing.
    [ ] 0x00010000 Port/miniport interface checking.
    [ ] 0x00040000 Systematic low resources simulation.
    [X] 0x00080000 DDI compliance checking (additional).
    [ ] 0x00200000 NDIS/WIFI verification.
    [ ] 0x00800000 Kernel synchronization delay fuzzing.
    [ ] 0x01000000 VM switch verification.
    [ ] 0x02000000 Code integrity checks.

  Internal Flags:

    [X] 0x00100000 Extended Verifier flags (internal).

    [X] Indicates flag is enabled.

  Boot Mode:

    Persistent

  Rules:

    All rules are using default settings

  Extensions:

    wdm: rules.all

  Verified Drivers:

    klupd_klif_arkmon.sys
    cm_km.sys
    iastorvd.sys
    klupd_klif_klbg.sys
    klbackupdisk.sys
    klflt.sys
    klbackupflt.sys
    klif.sys
    klhk.sys
    klgse.sys
    klpd.sys
    kldisk.sys
    googledrivefs31092.sys
    googledrivefs31357.sys
    klwfp.sys
    klwtp.sys
    klim6.sys
    klpnpflt.sys
    msio64.sys
    kneps.sys
    klids.sys
    asio3.sys
    asio2.sys
    tap_ovpnconnect.sys
    nvlddmkm.sys
    netwtw12.sys
    ialpss2_i2c_adl.sys
    teedriverw10x64.sys
    e2fn.sys
    ialpss2_gpio2_adl.sys
    nvvad64v.sys
    nvmoduletracker.sys
    nvvhci.sys
    ssdevfactory.sys
    steelseries-sonar-vad.sys
    nvhda64v.sys
    rtkvhd64.sys
    ibtusb.sys
    sshid.sys
    klmouflt.sys
    klkbdflt.sys
    rogms.sys
    dump_dumpstorport.sys
    dump_stornvme.sys
    dump_dumpfve.sys
    odd.sys
    klupd_klif_klark.sys
    zttap300.sys
    klupd_klif_mark.sys
    hwinfo64a_190.sys

zbook · Nov 16, 2023

1) Make a new restore point.

2) Restart WDV using all customized tests except:

[ ] 0x00000004 Randomized low resources simulation.

If there is no immediate crash then post verifier / querysettings results.

Report any major performance problems including very slow reboot.

For any BSOD post a new V2 share link into the newest post.

cambo11 · Nov 16, 2023

That caused an immediate BSOD once it restarted and tried to log into windows. I did not have to run the game at all.

I got into the BSOD bootloop which I recovered through safe mode and disabling it. I could not restore from a save point for some reason.

Here's the latest V2 and hope you can identify what the cause is. OBERT-PC-(2023-11-16_20-48-18).zip

zbook · Nov 17, 2023

1) Uninstall: SteelSeries GG 51.0.0

sshid SteelSeries HID Service c:\windows\system32\drivers\sshid.sys

Engine | SteelSeries

2) Make a new restore point

3) Restart WDV with the same customized tests.

cambo11 · Nov 17, 2023

Uninstalled Steelseries GG and restarted WDV. I am now able to boot into Windows without BSOD now.

It's a bit sluggish but will try to see if I can cause BSOD again. How long should I keep this running?

cambo11 · Nov 17, 2023

Got hit with a BSOD but this time around the screen just completely froze. Afterwards, it got into a bootloop with odd.sys.

V2: OBERT-PC-(2023-11-17_01-26-56).zip

zbook · Nov 17, 2023

1) Uninstall: odd.sys

odd odd \??\c:\windows\system32\drivers\odd.sys

(I've not yet gotten name confirmation)

2) Make a new restore point

3) Restart WDV with the same customized tests.

cambo11 · Nov 17, 2023

c:\windows\system32\drivers\odd.sys was installed for sega tools game emulation running few months back.

Removed in ACP:

Code:

sc delete odd

zbook · Nov 17, 2023

What is the latest using WDV?

cambo11 · Nov 17, 2023

I am starting to think Call of Duty Modern Warfare 3 just have some strange conflicting behavior with drivers. What a buggy mess of a game.

All I am doing is opening the game and running a benchmark or just idling in menu. That's how the BSOD is triggered.

I also uninstalled zerotier (zttap300.sys). I did not get a BSOD but Event Viewer Event ID 4 was flagged. Source Kernel-XDV.

Code:

- System

  - Provider

   [ Name]  Microsoft-Windows-Kernel-XDV
   [ Guid]  {f029ac39-38f0-4a40-b7de-404d244004cb}
 
   EventID 4
 
   Version 0
 
   Level 2
 
   Task 0
 
   Opcode 1
 
   Keywords 0x4000200000000000
 
  - TimeCreated

   [ SystemTime]  2023-11-17T07:51:35.5884612Z
 
   EventRecordID 220834
 
  - Correlation

   [ ActivityID]  {f029ac39-38f0-4a40-b7de-404d244004cb}
 
  - Execution

   [ ProcessID]  19104
   [ ThreadID]  18496
 
   Channel System
 
   Computer Obert-PC
 
  - Security

   [ UserID]  S-1-5-18
 

- EventData

  RuleId 0x2002
  ErrorMessage DRIVER VERIFIER DETECTED VIOLATION
  Module zttap300.sys
  Irql 0

Current WDV:

Code:

Verifier Flags: 0x03bfefbb

  Standard Flags:

    [X] 0x00000001 Special pool.
    [X] 0x00000002 Force IRQL checking.
    [X] 0x00000008 Pool tracking.
    [X] 0x00000010 I/O verification.
    [X] 0x00000020 Deadlock detection.
    [X] 0x00000080 DMA checking.
    [X] 0x00000100 Security checks.
    [X] 0x00000800 Miscellaneous checks.
    [X] 0x00020000 DDI compliance checking.

  Additional Flags:

    [ ] 0x00000004 Randomized low resources simulation.
    [X] 0x00000200 Force pending I/O requests.
    [X] 0x00000400 IRP logging.
    [X] 0x00002000 Invariant MDL checking for stack.
    [X] 0x00004000 Invariant MDL checking for driver.
    [X] 0x00008000 Power framework delay fuzzing.
    [X] 0x00010000 Port/miniport interface checking.
    [X] 0x00040000 Systematic low resources simulation.
    [X] 0x00080000 DDI compliance checking (additional).
    [X] 0x00200000 NDIS/WIFI verification.
    [X] 0x00800000 Kernel synchronization delay fuzzing.
    [X] 0x01000000 VM switch verification.
    [X] 0x02000000 Code integrity checks.

  Internal Flags:

    [X] 0x00100000 Extended Verifier flags (internal).

    [X] Indicates flag is enabled.

  Boot Mode:

    Persistent

  Rules:

    All rules are using default settings

  Extensions:

    wdm: rules.all
    ndis: rules.default

  Verified Drivers:

    klupd_klif_arkmon.sys
    cm_km.sys
    iastorvd.sys
    klupd_klif_klbg.sys
    klbackupdisk.sys
    klflt.sys
    klbackupflt.sys
    klif.sys
    klhk.sys
    klgse.sys
    klpd.sys
    kldisk.sys
    googledrivefs31092.sys
    googledrivefs31357.sys
    klwfp.sys
    klwtp.sys
    klim6.sys
    klpnpflt.sys
    msio64.sys
    kneps.sys
    klids.sys
    asio3.sys
    asio2.sys
    tap_ovpnconnect.sys
    nvlddmkm.sys
    netwtw12.sys
    ialpss2_i2c_adl.sys
    teedriverw10x64.sys
    e2fn.sys
    ialpss2_gpio2_adl.sys
    nvvad64v.sys
    nvmoduletracker.sys
    nvvhci.sys
    nvhda64v.sys
    rtkvhd64.sys
    ibtusb.sys
    klmouflt.sys
    klkbdflt.sys
    rogms.sys
    dump_dumpstorport.sys
    dump_stornvme.sys
    dump_dumpfve.sys
    odd.sys
    klupd_klif_klark.sys
    klupd_klif_mark.sys
    zttap300.sys
    hwinfo64a_190.sys
    ndis.sys
    netadaptercx.sys
    mbbcx.sys
    wificx.sys
    wdiwifi.sys

zbook · Nov 17, 2023

odd.sys was not yet uninstalled.

1) Search for odd.sys> change name: odd.sys > odd.sys.old

2) Uninstall Kaspersky AV:

Removal tool for Kaspersky applications (kavremover)

Overview of settings and features available in a Kaspersky application and guides on how to use them.

support.kaspersky.com

3) Make sure Microsoft defender is on.

4) Make a new restore point

5) Restart WDV with the same customized tests.

If there is no immediate crash then post verifier / querysettings results.

Report any major performance problems including very slow reboot.

For any BSOD post a new V2 share link into the newest post.

cambo11 · Nov 17, 2023

Renamed odd.sys from */system32/drivers/*. Uninstalled Kaspersky using removal tool.

No immediate crash.

Code:

Verifier Flags: 0x03bfefbb

  Standard Flags:

    [X] 0x00000001 Special pool.
    [X] 0x00000002 Force IRQL checking.
    [X] 0x00000008 Pool tracking.
    [X] 0x00000010 I/O verification.
    [X] 0x00000020 Deadlock detection.
    [X] 0x00000080 DMA checking.
    [X] 0x00000100 Security checks.
    [X] 0x00000800 Miscellaneous checks.
    [X] 0x00020000 DDI compliance checking.

  Additional Flags:

    [ ] 0x00000004 Randomized low resources simulation.
    [X] 0x00000200 Force pending I/O requests.
    [X] 0x00000400 IRP logging.
    [X] 0x00002000 Invariant MDL checking for stack.
    [X] 0x00004000 Invariant MDL checking for driver.
    [X] 0x00008000 Power framework delay fuzzing.
    [X] 0x00010000 Port/miniport interface checking.
    [X] 0x00040000 Systematic low resources simulation.
    [X] 0x00080000 DDI compliance checking (additional).
    [X] 0x00200000 NDIS/WIFI verification.
    [X] 0x00800000 Kernel synchronization delay fuzzing.
    [X] 0x01000000 VM switch verification.
    [X] 0x02000000 Code integrity checks.

  Internal Flags:

    [X] 0x00100000 Extended Verifier flags (internal).

    [X] Indicates flag is enabled.

  Boot Mode:

    Persistent

  Rules:

    All rules are using default settings

  Extensions:

    wdm: rules.all
    ndis: rules.default

  Verified Drivers:

    iastorvd.sys
    googledrivefs31092.sys
    googledrivefs31357.sys
    msio64.sys
    asio3.sys
    asio2.sys
    tap_ovpnconnect.sys
    nvlddmkm.sys
    netwtw12.sys
    ialpss2_i2c_adl.sys
    teedriverw10x64.sys
    e2fn.sys
    ialpss2_gpio2_adl.sys
    nvvad64v.sys
    nvmoduletracker.sys
    nvvhci.sys
    nvhda64v.sys
    rtkvhd64.sys
    ibtusb.sys
    rogms.sys
    dump_dumpstorport.sys
    dump_stornvme.sys
    dump_dumpfve.sys
    hwinfo64a_190.sys
    mpksldrv.sys
    ndis.sys
    netadaptercx.sys
    mbbcx.sys
    wificx.sys
    wdiwifi.sys

zbook · Nov 17, 2023

Nice progress.

Please run WDV for an additional 24 - 48 hrs.

cambo11 · Nov 19, 2023

24 hours without any BSOD with WDV so far.

zbook · Nov 19, 2023

Steady progress.

Monitor using Reliability Monitor:

View Reliability History in Windows 11 Tutorial

This tutorial will show you how to view reliability history for your Windows 11 device. The Reliability Monitor provides a system stability overview and details about events that impact reliability. It calculates the Stability Index shown in the System Stability Chart. Reliability Monitor...

www.elevenforum.com