Windows 10: BSOD 0x00000001 triggered by Skyrim SE quicksave/autosave

Hello everyone I've been trying to resolve this issue for a week or so and have not had much luck. I built a new computer with a Ryzen 1800x to replace my dead one and cloned my drives to brand new M.2 drives. I have a Samsung 960 PRO for boot/applications and a WD blue 1TB for games and the problem started immediately after the rebuild. It only occurred while playing Skyrim, Nier: automata (installed after the rebuild) never triggered the BSOD. Things I did before first BSOD memtest86+ 5 passes, intel burn test 20 hours, Prime95 6 hours.
Things I've tried to resolve issue in order (APC mismatch during saving after each item unless otherwise stated) download BlueScreenView (didn't/don't understand most of what it says but got me the bugcheck codes ), disabled memory OC 1.35V 2800MHZ, memtest86+ 8 passes single threaded, disabled SMT (re-enabled after crash), memtest86+ 9 passes multi-threaded, furmark 1 hour, Prime95 20 hour, ran SFC.exe /scannow, ran DISM (just in case) and re-ran SFC, format windows drive clean install, enabled driver verifier (on everything none microsoft), clean install of skyrim (16 hours in game then received BSOD "DRIVER_VERIFIER_DETECTED_VIOLATION 0x000000c4" while the video card was trying to catch up to my actions in game), disabled driver verifier, enable driver verifier (on everything)
Driver verifier on everything was accidental but was interesting,I was AFK during the reboot to re-enable driver verifier so i missed all but the last two of the UNEXPECTED_KERNEL_MODE_TRAP 0x0000007f BSOD's it through. The computer would load to the login screen while windows continued to load in the background the BSOD would appear and start the process all over again. the last 0x0000007f I was able to login but BSOD hit before I could disable driver verifier, learned how to get windows 10 into safe mode (I miss my bloody F* keys all of a sudden) and disable driver verifier, rebooted and here I am.

any help would be greatly appreciated.
PJ

PS.My saves are going to a NAS over a Mellanox 10Gbe fiber

:)

 

Xbox app "You can't share game clips" error.

For me it only does this with certain games. e.g Dark Souls 3, Skyrim SE and other games. whats strange is that Gmod works and thats not even an xbox game.

 

BSOD due to DPC_Watchdog_Violation

I have done some of the steps suggested and it seems the BSOD goes away in general but it's still consistently triggered by one activity, downloading via qBitorrrent. It happens consistently, with the same error code, DPC watchdog violation

Here's my new MiniDump file: 012618-31203-01.rar

Are there any more clues as to why this specific application consistently trigger the BSOD? I've tried other similar application like uTorrent but it still triggers BSOD regardless of which application I use.

Thank you again for your help.

 

The last dump, 9/3 5:41Om indicates a problem with ambakdrv.sys.
Code: BugCheck 7F, {8, fffff801e1048e70, ffff9d005a98afb0, fffff801deea6272} *** WARNING: Unable to verify timestamp for ambakdrv.sys *** ERROR: Module load completed but symbols could not be loaded for ambakdrv.sys Probably caused by : memory_corruption Followup: memory_corruption[/quote] Driver Description: Aomei BackUpper driver
Driver Update Site: http://www.aomeitech.com/download.html

The Aomei driver is quite old,:
Code: 0: kd> lmvm ambakdrv Browse full module list start end module name fffff80b`24310000 fffff80b`2431a000 ambakdrv T (no symbols) Loaded symbol image file: ambakdrv.sys Image path: \SystemRoot\system32\ambakdrv.sys Image name: ambakdrv.sys Browse all global symbols functions data Timestamp: Tue Dec 25 03:46:35 2012 (50D967EB) CheckSum: 0001A96C ImageSize: 0000A000 Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4[/quote] Check to see if there is a newer version of Aomei Backupper or better yet, uninstall it and switch to Macrium Reflect Free or Premium. See id that helps.

 

I had the latest version installed, uninstalled it and deleted \SystemRoot\system32\ambakdrv.sys set verifier to scan all again. 7F BSOD returned, betting it's going to be one of these unknowns this time. Could the repeated crashes be damaging the files or did the damaged files come first?Attachment 151810Attachment 151811

 

Open administrative command prompt and type or copy and paste:

1) sfc /scannow
2) dism /online /cleanup-image /restorehealth
3) When these have completed > right click on the top bar or title bar of the administrative command prompt box > left click on edit then select all > right click on the top bar again > left click on edit then copy > paste into the thread
4) chkdsk /x /f /r
This may take many hours so plan to run overnight

Microsoft Windows [Version 10.0.15063]
(c) 2017 Microsoft Corporation. All rights reserved.


C:\Windows\system32>chkdsk /x /f /r
The type of the file system is NTFS.
Cannot lock current drive.


Chkdsk cannot run because the volume is in use by another
process. Would you like to schedule this volume to be
checked the next time the system restarts? (Y/N)



Type Y
And then reboot.


5) Use one drive or drop box to post a share link for the memory dump:

memory dump: file explorer > this PC local c: drive > search:
%SystemRoot%\MEMORY.DMP
or
C:\Windows\MEMORY.DMP

6) Post the chkdsk drive scan results in the event.vwr using the information in this link:
Read Chkdsk Log in Event Viewer in Windows 10 Windows 10 Performance Maintenance Tutorials

7) uninstall bitdefender:
Uninstall Bitdefender

8) turn on Microsoft Windows defender


9) The best way to fix the misbehaving Nvidia driver is to uninstall everything Nvidia using Display driver uninstaller and install new drivers from the computer manufacturer's website or from the Nvidia website.

The computer manufacturer's web site is preferred.

Enter the computer's serial or product number and the operating system to view available drivers.


If you use the Nvidia web site be sure the "clean install" box is checked and only install the graphics driver and the physx driver.


Official Display Driver Uninstaller DDU Download


Display Driver Uninstaller Download version 17.0.7.2


Display Driver Uninstaller: How to use - Windows 7 Help Forums


NVIDIA





gzflt.sys BitDefender Gonzales FileSystem Driver Support: http://www.bitdefender.com/support/consumer.html
Download: Download Antivirus Software - Bitdefender Downloads
nvlddmkm.sys nVidia Video drivers Download Drivers | NVIDIA
Get from OEM for laptops
Code: Event[1261]: Log Name: System Source: Microsoft-Windows-Kernel-General Date: 2017-08-31T20:46:40.124 Event ID: 5 Task: N/A Level: Error Opcode: Info Keyword: N/A User: S-1-5-18 User Name: NT AUTHORITY\SYSTEM Computer: BLUEONI Description: {Registry Hive Recovered} Registry hive (file): '\??\Volume{827707f4-5194-41b1-be62-4232245f7497}\System Volume Information\SPP\SppCbsHiveStore\{cd42efe1-f6f1-427c-b004-033192c625a4}{401637D3-D4FB-4D1F-914E-2F142E1B6CFC}' was corrupted and it has been recovered. Some data might have been lost.[/quote] Code: 8/29/2017 12:12 AM Application Error Faulting application name: vsserv.exe, version: 22.0.8.118, time stamp: 0x5956141a Faulting module name: ntdll.dll, version: 10.0.15063.447, time stamp: 0xa329d3a8 Exception code: 0xc000000d Fault offset: 0x0000000000105a50 Faulting process id: 0x7b0 Faulting application start time: 0x01d32058acd0ee26 Faulting application path: C:\Program Files\Bitdefender\Bitdefender Security\vsserv.exe Faulting module path: C:\WINDOWS\SYSTEM32\ntdll.dll Report Id: e4af85c1-03d8-4540-8b07-4c610eaeebbf Faulting package full name: Faulting package-relative application ID:8/28/2017 11:51 PM Application Error Faulting application name: vsserv.exe, version: 22.0.8.118, time stamp: 0x5956141a Faulting module name: ntdll.dll, version: 10.0.15063.447, time stamp: 0xa329d3a8 Exception code: 0xc000000d Fault offset: 0x0000000000105a50 Faulting process id: 0x10c4 Faulting application start time: 0x01d3205640d42ddf Faulting application path: C:\Program Files\Bitdefender\Bitdefender Security\vsserv.exe Faulting module path: C:\WINDOWS\SYSTEM32\ntdll.dll Report Id: b23ecd51-c7a8-4371-844e-fbe299d1444b Faulting package full name: Faulting package-relative application ID:[/quote] Code: Name NVIDIA GeForce GTX 560 TiPNP Device ID PCI\VEN_10DE&DEV_1200&SUBSYS_838B1043&REV_A1\4&1C3D25BB&0&0019 Adapter Type GeForce GTX 560 Ti, NVIDIA compatible Adapter Description NVIDIA GeForce GTX 560 Ti Adapter RAM 1.00 GB (1,073,741,824 bytes) Installed Drivers C:\WINDOWS\System32\DriverStore\FileRepository\nvaki.inf_amd64_b2662aa358e9b7e8\nvldumdx.dll,C:\WINDOWS\System32\DriverStore\FileRepository\nvaki.inf_amd64_b2662aa358e9b7e8\nvldumdx.dll,C:\WINDOWS\System32\DriverStore\FileRepository\nvaki.inf_amd64_b2662aa358e9b7e8\nvldumdx.dll,C:\WINDOWS\System32\DriverStore\FileRepository\nvaki.inf_amd64_b2662aa358e9b7e8\nvldumdx.dll,C:\WINDOWS\System32\DriverStore\FileRepository\nvaki.inf_amd64_b2662aa358e9b7e8\nvldumd.dll,C:\WINDOWS\System32\DriverStore\FileRepository\nvaki.inf_amd64_b2662aa358e9b7e8\nvldumd.dll,C:\WINDOWS\System32\DriverStore\FileRepository\nvaki.inf_amd64_b2662aa358e9b7e8\nvldumd.dll,C:\WINDOWS\System32\DriverStore\FileRepository\nvaki.inf_amd64_b2662aa358e9b7e8\nvldumd.dll Driver Version 22.21.13.8541 INF File oem23.inf (Section004 section) Color Planes Not Available Color Table Entries 4294967296 Resolution 1680 x 1050 x 59 hertz Bits/Pixel 32 Memory Address 0xF4000000-0xF5FFFFFF Memory Address 0xE0000000-0xF7FFFFFF Memory Address 0xE8000000-0xEBFFFFFF I/O Port 0x0000F000-0x0000F07F IRQ Channel IRQ 54 I/O Port 0x000003B0-0x000003DF I/O Port 0x000003C0-0x000003DF Memory Address 0xA0000-0xBFFFF Driver c:\windows\system32\driverstore\filerepository\nvaki.inf_amd64_b2662aa358e9b7e8\nvlddmkm.sys (22.21.13.8541, 14.88 MB (15,600,248 bytes), 8/28/2017 8:15 PM)[/quote]

 

i'll edit this post as i go, the memory dump is 3.4 gigs so that will take a little while. would you like me to test after each step to see if the issue has been resolved? it probably would be faster to format and reinstall again than repair current install lol

Code: Microsoft Windows [Version 10.0.15063](c) 2017 Microsoft Corporation. All rights reserved.C:\WINDOWS\system32>sfc /scannowBeginning system scan. This process will take some time.Beginning verification phase of system scan.Verification 100% complete.Windows Resource Protection did not find any integrity violations.C:\WINDOWS\system32>dism /online /cleanup-image /restorehealthDeployment Image Servicing and Management toolVersion: 10.0.15063.0Image Version: 10.0.15063.0[==========================100.0%==========================] The restore operation completed successfully.The operation completed successfully.C:\WINDOWS\system32>chkdsk /x /f /rThe type of the file system is NTFS.Cannot lock current drive.Chkdsk cannot run because the volume is in use by anotherprocess. Would you like to schedule this volume to bechecked the next time the system restarts? (Y/N) yThis volume will be checked the next time the system restarts.C:\WINDOWS\system32>[/quote] checkdisk results
Code: Checking file system on C:The type of the file system is NTFS. A disk check has been scheduled. Windows will now check the disk. Stage 1: Examining basic file system structure ... 307712 file records processed. File verification completed. 7875 large file records processed. 0 bad file records processed. Stage 2: Examining file name linkage ... 415296 index entries processed. Index verification completed. 0 unindexed files scanned. 0 unindexed files recovered to lost and found. Stage 3: Examining security descriptors ... Cleaning up 1139 unused index entries from index $SII of file 0x9. Cleaning up 1139 unused index entries from index $SDH of file 0x9. Cleaning up 1139 unused security descriptors. Security descriptor verification completed. 53793 data files processed. CHKDSK is verifying Usn Journal... 37254160 USN bytes processed. Usn Journal verification completed. Stage 4: Looking for bad clusters in user file data ... 307696 files processed. File data verification completed. Stage 5: Looking for bad, free clusters ... 107111457 free clusters processed. Free space verification is complete. Windows has scanned the file system and found no problems. No further action is required. 498663259 KB total disk space. 69622844 KB in 231443 files. 166152 KB in 53794 indexes. 0 KB in bad sectors. 428431 KB in use by the system. 65536 KB occupied by the log file. 428445832 KB available on disk. 4096 bytes in each allocation unit. 124665814 total allocation units on disk. 107111458 allocation units available on disk. Internal Info: 00 b2 04 00 03 56 04 00 cd c6 08 00 00 00 00 00 .....V.......... 61 01 00 00 68 00 00 00 00 00 00 00 00 00 00 00 a...h........... Windows has finished checking your disk. Please wait while your computer restarts.[/quote]

 

Please post a memory.dmp file

After uninstalling Bitdefender, and replacing Nvidia please use windows driver verifier for 36 hours of typical computer use.

If there is another bsod while using windows driver verifier please post a new zip.

 

Have you been able to locate the memory.dmp?


file explorer > this PC > local C: drive > enter

memory.dmp
or
%SystemRoot%\MEMORY.DMP
or
C:\Windows\MEMORY.DMP

use one drive or drop box to post a share link



The drive files are OK

When you find the file on the computer can you zip it and then post it in a share link?

Do you have 7zip or winzip?



Please update the specs on the computer:

How To Fill Out Your System Specs
How To Fill Out Your System Specs
System Specs - Fill in at Ten Forums:
System Specs - Fill in at Ten Forums Windows 10 General Tips Tutorials
In the left corner below in your post you find 'My System Specs'.
After clicking it you can find a link a little below that says 'Update your System Spec', click on this link to get to the page where you can fill in your system specs.
System Info - See Your System Specs - Windows 7 Help Forum




Run HD Tune:

HD Tune website


to check the health,
scan for errors, no quick scan but full scan
run a benchmark.


It may take some time, but please take the time you need to perform it properly.
When above is done please make screenshots of the following
the health,
the error scan,
the benchmark incl. following
transfer rate,
access time,
burst rate,
cpu usage.
Take Screenshot in Windows 10 Windows 10 General Tips Tutorials

 

The latest dump is the same as the previous one and indicates a problem with ambakdrv.sys. Please uninstall Aomei Backupper and see if that makes a difference.

 

@Ztruker
I've reconfirmed ambakdrv.sys Is no longer in my system32 folder so it shouldn't be capable of loading right? @zbook
Had to leave the memory dump uploading over night here is the link Microsoft OneDrive - Access files anywhere. Create docs with free Office Online.
My system specs were filled in at sign-up and appear to still be there but I'll post it here just to make sure it's visible.
System Spec
Computer typeC/DesktopSystem Manufacturer/Model Number:Me
OS:Windows 10
CPU:Ryzen 7 1800x
Motherboard:MSI X370 gaming pro carbon MS-7A32
Memory:Corsair Vengeance LPX 32 GB CMK32GX4M2B3200C16
Graphics Card(s):Asus ENGTX560 Ti DCII/2DI/1GD5

I've now completed all steps in your first post, BSOD as soon as I used verifier again attaching latest dumpAttachment 151911
HDtune results on my boot drive Samsung 960PRO SSD, health tab says N/A
Attachment 151917Attachment 151918

 

For the memory dump it is a very large file and may take hours to download. Hopefully it will not have errors.

For the system specs see these links:

How To Fill Out Your System Specs
How To Fill Out Your System Specs
System Specs - Fill in at Ten Forums:
System Specs - Fill in at Ten Forums Windows 10 General Tips Tutorials
In the left corner below in your post you find 'My System Specs'.
After clicking it you can find a link a little below that says 'Update your System Spec', click on this link to get to the page where you can fill in your system specs.
System Info - See Your System Specs - Windows 7 Help Forums

Please post information on: PSU, cooler, case, peripherals (mouse, keyboard, joystick) and anything attached to the computer by wireless or wired (printer, headset, xbox, etc.)

 

I did state it was large and it would take a while, is it unusual for it to be that large?
first link says
, you do not have permission to access this page. This could be due to one of several reasons:

• The page has been removed.
• Your user account may not have sufficient privileges to access this page.
• If you are a trying to post, the administrator may have disabled your account, or it may be awaiting activation.

Second link has links to http://www.nineforums.com which doesn't load
After some searching the UI I'll assume you want me to go into settings on the top right, then on the left under my settings edit system spec right?

Edit:WOW! I just realized if you click on your own "my computer" there are links at the bottom of the drop down to update it and add anotherAttachment 151938

 

Yes, the "my computer" section allows all viewers to see the information immediately.

 

The dump was from 9/3 at 5:41 but drivers.txt does indeed show ambakdrv.sys no longer on your system.