Green screen saying Windows Insider Build ran into a problem

Hi,
I've recently started getting this Green Screen of Death saying Windows Insider Build ran into a problem. I'm not a Windows Insider. Any ideas what to do about it?

Unexpected Kernel mode trap is a hardware error, sometimes relating to ram. IMO, the fact it recognizes you being on an insider build is a separate issue from the hardware error green screen but I could be wrong
Are you able to get into windows at all?
If so,use these instructions for gathering the dump files associated with the green screen. Zip the files and unload the zipped folder to any cloud provider (onedrive, dropbox, googledrive, etc) Share the file and provide a link to it in this thread. That gives @zbook and the other folks here who are proficient in analyzing log files something to work with. BSOD - Posting Instructions

glasskuter said:

Unexpected Kernel mode trap is a hardware error, sometimes relating to ram. IMO, the fact it recognizes you being on an insider build is a separate issue from the hardware error green screen but I could be wrong
Are you able to get into windows at all?
If so,use these instructions for gathering the dump files associated with the green screen. Zip the files and unload the zipped folder to any cloud provider (onedrive, dropbox, googledrive, etc) Share the file and provide a link to it in this thread. That gives @zbook and the other folks here who are proficient in analyzing log files something to work with. BSOD - Posting Instructions

Click to expand...

Hi Glasskuter,
Here it is. I've not used Dropbox etc, as it doesn't seem too big.

It only happens occasionally and only when I'm shutting down the computer

The GPU in use is Intel UHD Graphics 730

Which discrete GPU card was used for this PRIME H610M-D D4?



Approximately when were each of these RAM modules installed:
a) Netac Technology Co Ltd
b) Kingston


1) Please run:

HWinfo64 > click GPU > post images or share links


Speccy > post a share link



2) Uninstall these AV using the applicable uninstall tools:

AVG
Avira
Bitdefender







3) Make sure that Microsoft defender is on.



4) Search for software related to Callback Technologies > report findings

zbook said:

The GPU in use is Intel UHD Graphics 730

Which discrete GPU card was used for this PRIME H610M-D D4?



Approximately when were each of these RAM modules installed:
a) Netac Technology Co Ltd
b) Kingston


1) Please run:

HWinfo64 > click GPU > post images or share links

Free Download HWiNFO Sofware | Installer & Portable for Windows, DOS

Start to analyze your hardware right now! HWiNFO has available as an Installer and Portable version for Windows (32/64-bit) and Portable version for DOS.

www.hwinfo.com

Speccy > post a share link

Speccy - Free Download

Download Speccy - the System Information tool

www.ccleaner.com

2) Uninstall these AV using the applicable uninstall tools:

AVG
Avira
Bitdefender

[KB146] Uninstallers (removal tools) for common Windows antivirus software

support.eset.com

How to use the AVG Uninstall Tool | AVG

Step-by-step instructions to use the AVG Uninstall Tool on Windows PC.

support.avg.com

Uninstall Bitdefender

Uninstall Bitdefender

www.bitdefender.com

How to uninstall Bitdefender from a Windows computer

To uninstall Bitdefender from a Windows computer, go to Control Panel > Programs and Features > right-click on Bitdefender > Uninstall

www.bitdefender.com

https://support.avira.com/hc/en-us/articles/360003162153-Uninstallation-of-Avira-for-Windows

3) Make sure that Microsoft defender is on.



4) Search for software related to Callback Technologies > report findings

SystemLookup - cbfs20

Code:

cbfs20    cbfs20    c:\windows\system32\drivers\cbfs20.sys

Click to expand...

Thanks for the reply
GPU - I haven’t the slightest idea what you mean. Could you explain it for a simpleton like me?
I don’t have AVG orAVIRA.
Both sets of RAM have been installed for 12 months in one case and 9 months in the other.
I’ll work through the rest as soon as I can, but am currently badly affected by severe depression which slows both me and my brain down.
Again, I really appreciate your help

HWINFO - the only GPU bit I can find is in the summary (screenshot)
Specy http://speccy.piriform.com/results/gZ5MQZld53KJdmnJYPS2TcJ
For cbfs20, is this screenshot what you wanted?

As an aside, didn't it use to be possible to roll back Windows Updates? I installed this on 27/10: 2023-10 Cumulative Update Preview for Windows 11 Version 22H2 for x64-based Systems (KB5031455). Don't know if this has caused the problem

The computer log files reported drivers for AV that may have been from prior installation and incompletely uninstalled.

Avira: avgntflt avgntflt.sys Tue Oct 12 06:32:13 2021 (6165723D)
Bitdefender: atc.sys Mon Aug 7 06:21:14 2023 (64D0D3AA)


The computer has some old drivers.


Which backup imaging software is in use?



Please perform the following steps:


1) Run Tuneup plus > post a share link




2) Run the Avira and Bitdefender uninstall tools
(After troubleshooting has completed you can reinstall Bitdefender or continue using Microsoft defender)


3) Make a new restore point:



4) Uninstall: cbfs20.sys


5) Read this tutorial on Windows Driver Verifier:



Learn the methods to recover from using the tool by booting into safe mode and running one or more of these commands:

verifier /reset

verifier /bootmode resetonbootfail


Plan to run the tool for approximately 48 hrs with various customized tests.

Start the tool with these settings:

a) Test all non-Microsoft drivers
b) Test no Microsoft drivers
c) Start with the 3 customized tests in the TF tutorial


If there is no immediate BSOD then open administrative command prompt and copy and paste:

verifier /querysettings

Post a share link into this thread using one drive, drop box, or google drive.

For any new BSOD post a new V2 share link into the newest post.

So far
1. Couldn't use the tools for AVG or Avast, as the programmes don't appear in Settings/Apps
Deleted anyhtign related to AVG or Avast in Safe Mode using Everthing, which finds everything. Most were in a Usser account Test that someone got me to set up a while ago - also deleted this user account. Couldn't get rid of avgntflt.sys, as it is supposedly in use.
Same for cbfs20.sys
2. Ran Tuneup Plus. Actually I ran sfc/ scannow yesterday and it did a replir. DICM said no problems
Today's results
Microsoft Windows 11 Pro Version 22H2 (OS Build 22621.2861)

==================================================================

Started on 18/12/2023 at 9:39:55.91

[SFC /ScanNow]

Beginning system scan. This process will take some time.

Results:

Windows Resource Protection did not find any integrity violations.

==================================================================

Started on 18/12/2023 at 9:41:00.98

[DISM /online /cleanup-image /ScanHealth]

Deployment Image Servicing and Management tool
Version: 10.0.22621.2792

Image Version: 10.0.22621.2861

No component store corruption detected.

The operation completed successfully.

==================================================================

Started on 18/12/2023 at 9:42:30.47

[DISM /online /cleanup-image /RestoreHealth]

Deployment Image Servicing and Management tool
Version: 10.0.22621.2792

Image Version: 10.0.22621.2861

The restore operation completed successfully.

The operation completed successfully.

==================================================================

The second "SFC /ScanNow" was skipped, as the first output the following:

Windows Resource Protection did not find any integrity violations.

==================================================================

Started on 18/12/2023 at 9:44:12.01

[ChkDsk /Scan]

The type of the file system is NTFS.

Stage 1: Examining basic file system structure ...
809728 file records processed.
File verification completed.
Phase duration (File record verification): 6.57 seconds.
20426 large file records processed.
Phase duration (Orphan file record recovery): 6.74 milliseconds.
0 bad file records processed.
Phase duration (Bad file record checking): 0.03 milliseconds.

Stage 2: Examining file name linkage ...
15946 reparse records processed.
1043558 index entries processed.
Index verification completed.
Phase duration (Index verification): 16.71 seconds.
0 unindexed files scanned.
Phase duration (Orphan reconnection): 804.20 milliseconds.
0 unindexed files recovered to lost and found.
Phase duration (Orphan recovery to lost and found): 0.05 milliseconds.
15946 reparse records processed.
Phase duration (Reparse point and Object ID verification): 26.51 milliseconds.

Stage 3: Examining security descriptors ...
Security descriptor verification completed.
Phase duration (Security descriptor verification): 124.25 milliseconds.
116916 data files processed.
Phase duration (Data attribute verification): 0.10 milliseconds.
CHKDSK is verifying Usn Journal...
40083416 USN bytes processed.
Usn Journal verification completed.
Phase duration (USN journal verification): 294.59 milliseconds.

Windows has scanned the file system and found no problems.

No further action is required.

467046416 KB total disk space.
142756716 KB in 245823 files.
231464 KB in 116917 indexes.
0 KB in bad sectors.
945088 KB in use by the system.
65536 KB occupied by the log file.
323113148 KB available on disk.

4096 bytes in each allocation unit.
116761604 total allocation units on disk.
80778287 allocation units available on disk.
Total duration: 24.54 seconds (24549 ms).

==================================================================

Started on 18/12/2023 at 9:44:46.02

AutoReboot

FALSE

==================================================================

[Set AutoReboot = False]

Updating property(s) of '\\NEWMESH\ROOT\CIMV2:Win32_OSRecoveryConfiguration.Name="Microsoft Windows 11 Pro|C:\\WINDOWS|\\Device\\Harddisk1\\Partition3"'

Property(s) update successful.

==================================================================

AutoReboot

FALSE

==================================================================

DebugInfoType

7

==================================================================

[Set DebugInfoType = 7]

Updating property(s) of '\\NEWMESH\ROOT\CIMV2:Win32_OSRecoveryConfiguration.Name="Microsoft Windows 11 Pro|C:\\WINDOWS|\\Device\\Harddisk1\\Partition3"'

Property(s) update successful.

==================================================================

DebugInfoType

7

==================================================================

[WMIC PageFile list]

AllocatedBaseSize=16384
CurrentUsage=93
Description=C:\pagefile.sys
InstallDate=20230205143155.636427+000
Name=C:\pagefile.sys
PeakUsage=93
Status=
TempPageFile=FALSE

==================================================================

AutomaticManagedPagefile

TRUE

==================================================================

[Set AutomaticManagedPagefile = True]

Updating property(s) of '\\NEWMESH\ROOT\CIMV2:Win32_ComputerSystem.Name="NEWMESH"'

Property(s) update successful.

==================================================================

AutomaticManagedPagefile

TRUE

==================================================================

[BcdEdit /enum {badmemory}]

RAM Defects
-----------
identifier {badmemory}

==================================================================

Finished on 18/12/2023 at 9:44:47.15
It took 4 minutes and 52 seconds to complete the operations.

To completely uninstall remnants of AV software the third party software companies each created software.

Please run each companies uninstaller software so that the remnants are completely uninstalled.

Do not use any registry cleaners.

Revo uninstaller can also be used.



Identify the software using the misbehaving driver cbfs20.sys.
Then uninstall the software.

To uninstall drivers / software boot into safe mode (shift + restart) and / or run Revo uninstaller (free version)

zbook said:

To completely uninstall remnants of AV software the third party software companies each created software.

Please run each companies uninstaller software so that the remnants are completely uninstalled.

Do not use any registry cleaners.

Revo uninstaller can also be used.



Identify the software using the misbehaving driver cbfs20.sys.
Then uninstall the software.

To uninstall drivers / software boot into safe mode (shift + restart) and / or run Revo uninstaller (free version)

Uninstall Software, Remove programs easily - Revo Uninstaller Pro

Clean removal of any program from your PC. Uninstall and remove programs and software in Windows with Revo Uninstaller Pro easily!

www.revouninstaller.com

Boot to Safe Mode in Windows 11 Tutorial

This tutorial will show you how to boot Windows 11 into normal mode, Safe Mode, Safe Mode with Networking, or Safe Mode with Command Prompt. Safe mode starts Windows in a basic state, using a limited set of files and drivers. If a problem doesn't happen in safe mode, this means that default...

www.elevenforum.com

Click to expand...

The link provided above simply says to go to Settings/Apps [KB146] Uninstallers (removal tools) for common Windows antivirus software
Revo doesn't find anything

Have now uninstalled avgntflt.sys. What is cbfs20.sys and why am i uninstalling it?

Am very tempted to restore a backup from before these Windows Preview update installations - any objection to that?

Have now run AVG and Avast uninstall tools

Open administrative command prompt and copy and paste:

Dism /online /get-drivers /format:table > "%userprofile%\desktop\drivers.txt"

Post a share link into this thread using one drive, drop box, or google drive.



cbfs20.sys was identified as a misbehaving driver.

If you cannot identify the software then make a restore point and rename the driver:

cbfs20.sys > cbfs20.sys.old

A backup image can be restored.

Once the image is restored it will have the outdated drivers but may fix the green screen if it was related to a driver.


Furmark can stress test the GPU: Intel(R) UHD Graphics 730


Test for 30 minutes > see warnings to abort testing

zbook said:

A backup image can be restored.

Once the image is restored it will have the outdated drivers but may fix the green screen if it was related to a driver.


Furmark can stress test the GPU: Intel(R) UHD Graphics 730

FurMark - GPU Stress Test

Stress test your GPU for stability issues with FurMark

www.tenforums.com

Test for 30 minutes > see warnings to abort testing

Code:

Name    Intel(R) UHD Graphics 730
PNP Device ID    PCI\VEN_8086&DEV_4692&SUBSYS_86941043&REV_0C\3&11583659&0&10
Adapter Type    Intel(R) UHD Graphics Family, Intel Corporation compatible
Adapter Description    Intel(R) UHD Graphics 730
Adapter RAM    1.00 GB (1,073,741,824 bytes)
Installed Drivers    <>,C:\WINDOWS\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_6ab7ff6f6f4c09db\igd10iumd64.dll,C:\WINDOWS\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_6ab7ff6f6f4c09db\igd10iumd64.dll,C:\WINDOWS\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_6ab7ff6f6f4c09db\igd12umd64.dll
Driver Version    31.0.101.3302
INF File    oem58.inf (iADLSD_w10_DS section)
Driver    C:\WINDOWS\SYSTEM32\DRIVERSTORE\FILEREPOSITORY\IIGD_DCH.INF_AMD64_6AB7FF6F6F4C09DB\IGDKMDN64.SYS (31.0.101.3302, 42.87 MB (44,950,032 bytes), 03/03/2023 20:11)

Click to expand...

cbfs seems to be Call Back File system - no idea where it is from. Will rename it. - says I need to be a trusted installer. Dated 9/11/22 so from when I bought the computer - not new. Edit - have just run cbfs in Everything and it seems to be part of pCloud Drive (part of Proton) Edit - have uninstalled Proton Drive and file still there!
How do i know if Furmark is frying the GPU?

Forgot to say - ran the DISM above and nothing happened. Ran it as Terminal Admin:


Proposed plan of action, as the installtion of this Review Update could fit with the onset of this problem:
Install backup (Macrium) from before above installtion
Delete User Account Test
Run AVG and Avast tools
Run sfc and DICM
Sound good?

1) The image displayed the use of Powershell instead of administrative command prompt.


From post #10:

Open administrative command prompt and copy and paste:

Dism /online /get-drivers /format:table > "%userprofile%\desktop\drivers.txt"

Post a share link into this thread using one drive, drop box, or google drive.


2) WDV would be useful to identify misbehaving drivers and remove them.

An alternative is to keep restoring backup images.


3) The logs indicated that these are in use or have remnants:

Bitdefender
Avast
Malwarebytes
Superantispyware
Scanguard


4) Uninstall: Driver Booster 11 11.1.0 IObit 20231111


5) Uninstall all of the above and make sure Microsoft defender is on for AV and firewall




6) Once the GPU hardware is tested and passes or fails you'll have more information on the green image (driver / hardware)

Take pictures > post images or share links
Record the maximum temperature and continuous test duration.


7) When the troubleshooting has completed you can install selected third party software or continue using Microsoft defender.

zbook said:

1) The image displayed the use of Powershell instead of administrative command prompt.

Click to expand...

That’s because, like I said, above nothing happened with the administrative prompt

I've installed a backup from before the Windows Preview Update in )October and will see what happens

I've no idea what Scanguard is. It doesn't appear under Apps in Settings or in Control Panel, or Revo Uninstall or using Hitmanpro

As I asked before, how do I check the temperature of the GPU when using this Furmark thing?

Tombar said:

how do I check the temperature of the GPU when using this Furmark thing?

Click to expand...

Hi, I'm not a hardware expert but I believe you would be monitoring your cpu temperature since you use integrated graphics.
A good free installable tool for monitoring all the overall different aspects of a system (which includes temps) is HWMonitor HWMONITOR | Softwares | CPUID

However, for monitoring the temps across just my cores I prefer a simpler app called CoreTemp. It runs in the background and reports the temp across all my cores in my task tray. I can open CoreTemp and see the temp of each individual core.. Core Temp

The Furmark software displays the temperature while the software is in use.


These are additional temperature monitoring software:

Speccy: Speccy - Free Download
HW Monitor: HWMONITOR | Softwares | CPUID
Speedfan: SpeedFan - Access temperature sensor in your computer



Open administrative command prompt and copy and paste:

Dism /Online /Get-Drivers > "%userprofile%\Desktop\driver.txt

Post a share link into this thread using one drive, drop box, or google drive.

zbook said:

Open administrative command prompt and copy and paste:

Dism /Online /Get-Drivers > "%userprofile%\Desktop\driver.txt

Post a share link into this thread using one drive, drop box, or google drive.

Click to expand...

Finally got this to work!

zbook said:

The Furmark software displays the temperature while the software is in use.


These are additional temperature monitoring software:

Speccy: Speccy - Free Download
HW Monitor: HWMONITOR | Softwares | CPUID
Speedfan: SpeedFan - Access temperature sensor in your computer



Open administrative command prompt and copy and paste:

Dism /Online /Get-Drivers > "%userprofile%\Desktop\driver.txt

Post a share link into this thread using one drive, drop box, or google drive.

Click to expand...

The option T to toggle the temperature monitoring doesn't do anything, nor do the other toggles. How do I monitor the temperature?

The Furmark software was launched on the computer used to type this post.
The temp displayed temperatures 60 - 70 in the first minute.

What happened when you launched the software?
Didn't it display the temperature?
If not, then reinstall the software.

zbook said:

The Furmark software was launched on the computer used to type this post.
The temp displayed temperatures 60 - 70 in the first minute.

What happened when you launched the software?
Didn't it display the temperature?
If not, then reinstall the software.

Downloads

FurMark - GPU stress test and graphics card benchmark

geeks3d.com

Click to expand...

I launched it, then realised I couldn't see any temperature data, so stopped . It says use T to toggle temperature data, but none of the toggles work. Am i missing something?

How did you see the temperature? Ran it for 30 minutes, then tried to stop it with Esc, but that didn't work. Closed the programme. Looked in log, but that wasn't up to date.