Windows 10: Bsod kmode exception not handled

Hello all,

I have just experienced a BSOD on my Windows 10 desktop, which displayed the following error code:

KMODE EXCEPTION NOT HANDLED

I have attached the dump file zip, created immediately after the system restarted.

I have made two hardware changes recently (2 weeks ago), and the system has been running rock solid, 24 hours per day since then, with no errors or BSOD's.

1: I installed a new graphics card (driver is up to date)
2: I upgraded my RAM from 8 GB to 16 GB

Any help on what has caused this BSOD would be greatly appreciated,

Many thanks,

Andy.

:)

 

Windows 10 - BSOD: KMODE EXCEPTION NOT HANDLED (cng.sys)

Hi,

We suggest that you try the workaround suggested on DonchakVS's reply on August 5, 2015 and check if it resolves the issue:

Windows 10 - BSOD: KMODE EXCEPTION NOT HANDLED (cng.sys).

 

PLS HELP MY COMPUTER RESTARTS AUTOMATICALLY

Did as you told

I Worked for a few minutes

and the bsod came again and restarted the pc.

Kmode exception not handled

Wdfilter.sys

 

Hi studsr,

Welcome to the BSOD forum.

Open administrative command prompt and type or copy and paste these commands:
1) sfc /scannow
2) dism /online /cleanup-image /restorehealth
3) When these have completed > right click on the top bar or title bar of the administrative command prompt box > left click on edit then select all > right click on the top bar again > left click on edit then copy > paste into the thread
4) Turn off Windows fast startup:
Turn On or Off Fast Startup in Windows 10 Performance Maintenance Tutorials
5) Update Realtek NICDRV 8169 PCIe GBE Family Controller driver rt640x64.sys
Updating a driver: Updating a driver. - Microsoft Community
6) Make sure that there is no over clocking while troubleshooting.

7) Sometimes there are problems in the bios that produce bsod.

The BIOS: BIOS Version/Date American Megatrends Inc. 2501, 21/07/2014

8) Please check to see if this is the most up to date version.

9) To ensure that there are no improper bios settings please reset the bios.

10) Sometimes there can be failure to boot after resetting the bios.

11) So please make sure your files are backed up.

12) Please make a backup image with Macrium:

Macrium Software | Macrium Reflect Free:
Macrium Software | Your Image is Everything
Macrium Software | Macrium Reflect Free

13) And please create a brand new restore point.

How to Clear Your Computers CMOS to Reset BIOS Settings:
How to Clear Your Computers CMOS to Reset BIOS Settings

3 Ways to Reset Your BIOS - wikiHow:
3 Ways to Reset Your BIOS - wikiHow

14) Post a kernal memory dump into the thread using a one drive or drop box share link:
memory dump file:
%SystemRoot%\MEMORY.DMP or
C:\Windows\MEMORY.DMP
Use file explorer > this PC > local C: drive > right upper corner search enter each of the above to find results.

15) Run memtest86+ version 5.01 for at least 8 passes.
Memtest86+ - Advanced Memory Diagnostic Tool
This may take hours so plan to run it overnight.

Please make sure you use the Memtest86+ version 5.01 with the link below.
Memtest86+ - Advanced Memory Diagnostic Tool

The testing is done not by time but by passes.
The more passes the better.
There are a significant number of false negatives if fewer than 8 passes are made.
A false negative is a pass when there is malfunctioning RAM.
There is 16 GB of RAM on the computer with 4 GB modules on 4 DIMM.
Memtest86+ version 5.01 testing takes approximately 1 - 2 hours /GB RAM
Just 1 error is a fail and you can abort testing.
Then test 1 RAM module at a time in the same DIMM each for 8 or more passes.
Again the more passes the better.
If all RAM pass when tested 1 at a time after failing when tested together test the next DIMM with 1 RAM module for 8 or more passes. This will help to differentiate malfunctioning RAM from malfunctioning DIMM /Motherboard.

Memtest86+ - Advanced Memory Diagnostic Tool
Memtest86+ - Advanced Memory Diagnostic Tool

Microsoft Community
Memory problems. - Microsoft Community

MemTest86+ - Test RAM Windows 10 BSOD Tutorials
MemTest86+ - Test RAM BSOD Tutorials

16) When Memtest86+ has completed 8 or more passes use a camera or smart phone camera to take a picture and post an image of the results into the thread.

17) Run HDTune on each drive
HD Tune website
to check the health,
scan for errors, no quick scan but full scan
run a benchmark.

It may take some time, but please take the time you need to perform it properly.
When above is done please make screenshots of the following
the health,
the error scan,
the benchmark incl. following
transfer rate,
access time,
burst rate,
cpu usage.
Take Screenshot in Windows 10 General Tips Tutorials

17) Open administrative command prompt and type or copy and paste:
chkdsk /x /r
This may take many hours to run so plan to run overnight.
18) Find the chkdsk report in the event.vwr and post the information into the thread using the information in this link: Read Chkdsk Log in Event Viewer in Windows 10 Performance Maintenance Tutorials

18) Open Ccleaner > windows tab > scroll to system and advanced > post an image into the thread

19) In the left lower corner search type clean > open disk cleanup > click ok > scroll to system error memory dumps and system created Windows error reporting > post an image into the thread


Code: Event[13516]: Log Name: System Source: Microsoft-Windows-Kernel-Boot Date: 2017-10-18T14:35:43.685 Event ID: 29 Task: N/A Level: Error Opcode: Info Keyword: N/A User: S-1-5-18 User Name: NT AUTHORITY\SYSTEM Computer: Desktop Description: Windows failed fast startup with error status 0xC00000D4.[/quote] Code: Event[13948]: Log Name: System Source: cdrom Date: 2017-10-22T15:44:13.586 Event ID: 51 Task: N/A Level: Warning Opcode: N/A Keyword: Classic User: N/A User Name: N/A Computer: Desktop Description: An error was detected on device \Device\CdRom0 during a paging operation.Event[13949]: Log Name: System Source: cdrom Date: 2017-10-22T15:44:13.624 Event ID: 51 Task: N/A Level: Warning Opcode: N/A Keyword: Classic User: N/A User Name: N/A Computer: Desktop Description: An error was detected on device \Device\CdRom0 during a paging operation.Event[13950]: Log Name: System Source: cdrom Date: 2017-10-22T15:44:13.639 Event ID: 51 Task: N/A Level: Warning Opcode: N/A Keyword: Classic User: N/A User Name: N/A Computer: Desktop Description: An error was detected on device \Device\CdRom0 during a paging operation.Event[13951]: Log Name: System Source: cdrom Date: 2017-10-22T15:44:13.659 Event ID: 51 Task: N/A Level: Warning Opcode: N/A Keyword: Classic User: N/A User Name: N/A Computer: Desktop Description: An error was detected on device \Device\CdRom0 during a paging operation.Event[13952]: Log Name: System Source: cdrom Date: 2017-10-22T15:44:13.767 Event ID: 51 Task: N/A Level: Warning Opcode: N/A Keyword: Classic User: N/A User Name: N/A Computer: Desktop Description: An error was detected on device \Device\CdRom0 during a paging operation.Event[13953]: Log Name: System Source: cdrom Date: 2017-10-22T15:44:13.800 Event ID: 51 Task: N/A Level: Warning Opcode: N/A Keyword: Classic User: N/A User Name: N/A Computer: Desktop Description: An error was detected on device \Device\CdRom0 during a paging operation.Event[13954]: Log Name: System Source: cdrom Date: 2017-10-22T15:44:13.954 Event ID: 51 Task: N/A Level: Warning Opcode: N/A Keyword: Classic User: N/A User Name: N/A Computer: Desktop Description: An error was detected on device \Device\CdRom0 during a paging operation.Event[13955]: Log Name: System Source: cdrom Date: 2017-10-22T15:44:13.974 Event ID: 51 Task: N/A Level: Warning Opcode: N/A Keyword: Classic User: N/A User Name: N/A Computer: Desktop Description: An error was detected on device \Device\CdRom0 during a paging operation.Event[13956]: Log Name: System Source: cdrom Date: 2017-10-22T15:44:13.989 Event ID: 51 Task: N/A Level: Warning Opcode: N/A Keyword: Classic User: N/A User Name: N/A Computer: Desktop Description: An error was detected on device \Device\CdRom0 during a paging operation.Event[13957]: Log Name: System Source: cdrom Date: 2017-10-22T15:44:14.039 Event ID: 51 Task: N/A Level: Warning Opcode: N/A Keyword: Classic User: N/A User Name: N/A Computer: Desktop Description: An error was detected on device \Device\CdRom0 during a paging operation.Event[13958]: Log Name: System Source: cdrom Date: 2017-10-22T15:44:14.053 Event ID: 51 Task: N/A Level: Warning Opcode: N/A Keyword: Classic User: N/A User Name: N/A Computer: Desktop Description: An error was detected on device \Device\CdRom0 during a paging operation.Event[13959]: Log Name: System Source: cdrom Date: 2017-10-22T15:44:14.073 Event ID: 51 Task: N/A Level: Warning Opcode: N/A Keyword: Classic User: N/A User Name: N/A Computer: Desktop Description: An error was detected on device \Device\CdRom0 during a paging operation.Event[13960]: Log Name: System Source: cdrom Date: 2017-10-22T15:44:14.087 Event ID: 51 Task: N/A Level: Warning Opcode: N/A Keyword: Classic User: N/A User Name: N/A Computer: Desktop Description: An error was detected on device \Device\CdRom0 during a paging operation.Event[13961]: Log Name: System Source: cdrom Date: 2017-10-22T15:44:14.101 Event ID: 51 Task: N/A Level: Warning Opcode: N/A Keyword: Classic User: N/A User Name: N/A Computer: Desktop Description: An error was detected on device \Device\CdRom0 during a paging operation.Event[13962]: Log Name: System Source: cdrom Date: 2017-10-22T15:44:14.120 Event ID: 51 Task: N/A Level: Warning Opcode: N/A Keyword: Classic User: N/A User Name: N/A Computer: Desktop Description: An error was detected on device \Device\CdRom0 during a paging operation.Event[13963]: Log Name: System Source: cdrom Date: 2017-10-22T15:44:17.782 Event ID: 51 Task: N/A Level: Warning Opcode: N/A Keyword: Classic User: N/A User Name: N/A Computer: Desktop Description: An error was detected on device \Device\CdRom0 during a paging operation.Event[13964]: Log Name: System Source: cdrom Date: 2017-10-22T15:45:33.647 Event ID: 51 Task: N/A Level: Warning Opcode: N/A Keyword: Classic User: N/A User Name: N/A Computer: Desktop Description: An error was detected on device \Device\CdRom0 during a paging operation.Event[13965]: Log Name: System Source: cdrom Date: 2017-10-22T15:45:41.268 Event ID: 51 Task: N/A Level: Warning Opcode: N/A Keyword: Classic User: N/A User Name: N/A Computer: Desktop Description: An error was detected on device \Device\CdRom0 during a paging operation.Event[13966]: Log Name: System Source: cdrom Date: 2017-10-22T15:45:55.773 Event ID: 51 Task: N/A Level: Warning Opcode: N/A Keyword: Classic User: N/A User Name: N/A Computer: Desktop Description: An error was detected on device \Device\CdRom0 during a paging operation.Event[13967]: Log Name: System Source: cdrom Date: 2017-10-22T15:46:01.012 Event ID: 51 Task: N/A Level: Warning Opcode: N/A Keyword: Classic User: N/A User Name: N/A Computer: Desktop Description: An error was detected on device \Device\CdRom0 during a paging operation.Event[13968]: Log Name: System Source: cdrom Date: 2017-10-22T15:46:07.169 Event ID: 51 Task: N/A Level: Warning Opcode: N/A Keyword: Classic User: N/A User Name: N/A Computer: Desktop Description: An error was detected on device \Device\CdRom0 during a paging operation.Event[13969]: Log Name: System Source: cdrom Date: 2017-10-22T15:46:13.168 Event ID: 51 Task: N/A Level: Warning Opcode: N/A Keyword: Classic User: N/A User Name: N/A Computer: Desktop Description: An error was detected on device \Device\CdRom0 during a paging operation.[/quote] Code: Event[13947]: Log Name: System Source: Display Date: 2017-10-22T13:52:45.818 Event ID: 4101 Task: N/A Level: Warning Opcode: Info Keyword: Classic User: N/A User Name: N/A Computer: Desktop Description: Display driver nvlddmkm stopped responding and has successfully recovered.[/quote] rt640x64.sys Realtek NICDRV 8169 PCIe GBE Family Controller driver http://www.realtek.com.tw/downloads/...&GetDown=false
Code: Name [00000003] Realtek PCIe GBE Family ControllerAdapter Type Ethernet 802.3 Product Type Realtek PCIe GBE Family Controller Installed Yes PNP Device ID PCI\VEN_10EC&DEV_8168&SUBSYS_84321043&REV_06\4&11EB9DBD&0&00E4 Last Reset 25/10/2017 14:48 Index 3 Service Name rt640x64 IP Address 192.168.1.75, fe80::ece3:93ab:3f10:b12a IP Subnet 255.255.255.0, 64 Default IP Gateway 192.168.1.254 DHCP Enabled Yes DHCP Server 192.168.1.254 DHCP Lease Expires 26/10/2017 14:49 DHCP Lease Obtained 25/10/2017 14:49 MAC Address ‪10:BF:48:BA4:68‬ I/O Port 0x0000D000-0x0000D0FF Memory Address 0xF2104000-0xF2104FFF Memory Address 0xF2100000-0xF2103FFF IRQ Channel IRQ 4294967293 Driver c:\windows\system32\drivers\rt640x64.sys (10.21.811.2017, 985.48 KB (1,009,128 bytes), 13/01/2016 09:21)[/quote] Code: rt640x64 Realtek RT640 NT Driver c:\windows\system32\drivers\rt640x64.sys Kernel Driver Yes Manual Running OK Normal No Yes[/quote] Code: 22/07/2017 12:42 Windows Error Reporting Fault bucket , type 0 Event Name: BlueScreen Response: Not available Cab Id: 0 Problem signature: P1: 124 P2: 0 P3: ffffa78a740f0028 P4: be200000 P5: 5110a P6: 10_0_15063 P7: 0_0 P8: 256_1 P9: P10: Attached files: \\?\C:\WINDOWS\Minidump\072217-22953-01.dmp \\?\C:\Windows\Temp\WER-62859-0.sysdata.xml \\?\C:\WINDOWS\MEMORY.DMP \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WERA43A.tmp.WERInternalMetadata.xml \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WERA4E6.tmp.csv \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WERA506.tmp.txt These files may be available here: C:\ProgramData\Microsoft\Windows\WER\ReportArchive\Kernel_124_6cc67f41cadb4f3f83be681ecbf892bd9d279_00000000_cab_08bdc06c Analysis symbol: Rechecking for solution: 0 Report ID: ba7d8518-c8df-4c40-920b-56060b456ad5 Report Status: 2049 Hashed bucket:22/07/2017 12:42 Windows Error Reporting Fault bucket , type 0 Event Name: BlueScreen Response: Not available Cab Id: 0 Problem signature: P1: 124 P2: 0 P3: ffffa78a740f0028 P4: be200000 P5: 5110a P6: 10_0_15063 P7: 0_0 P8: 256_1 P9: P10: Attached files: \\?\C:\WINDOWS\Minidump\072217-22953-01.dmp \\?\C:\Windows\Temp\WER-62859-0.sysdata.xml \\?\C:\WINDOWS\MEMORY.DMP \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WERA43A.tmp.WERInternalMetadata.xml \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WERA4E6.tmp.csv \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WERA506.tmp.txt These files may be available here: C:\ProgramData\Microsoft\Windows\WER\ReportQueue\Kernel_124_6cc67f41cadb4f3f83be681ecbf892bd9d279_00000000_039da543 Analysis symbol: Rechecking for solution: 0 Report ID: ba7d8518-c8df-4c40-920b-56060b456ad5 Report Status: 4 Hashed bucket: 12/09/2017 12:20 Windows Error Reporting Fault bucket , type 0 Event Name: BlueScreen Response: Not available Cab Id: 0 Problem signature: P1: 124 P2: 0 P3: ffffca88098e9028 P4: be200000 P5: 5110a P6: 10_0_15063 P7: 0_0 P8: 256_1 P9: P10: Attached files: \\?\C:\WINDOWS\Minidump\091217-26687-01.dmp \\?\C:\Windows\Temp\WER-47625-0.sysdata.xml \\?\C:\WINDOWS\MEMORY.DMP \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER6651.tmp.WERInternalMetadata.xml \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER6A87.tmp.csv \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER6AA8.tmp.txt These files may be available here: C:\ProgramData\Microsoft\Windows\WER\ReportArchive\Kernel_124_f4b5491a3188480b7ed52bdf88f875506d2053_00000000_cab_243ff250 Analysis symbol: Rechecking for solution: 0 Report ID: 7a587e4f-6123-476a-8688-eaf89206977f Report Status: 2049 Hashed bucket: 12/09/2017 12:18 Windows Error Reporting Fault bucket , type 0 Event Name: BlueScreen Response: Not available Cab Id: 0 Problem signature: P1: 124 P2: 0 P3: ffffca88098e9028 P4: be200000 P5: 5110a P6: 10_0_15063 P7: 0_0 P8: 256_1 P9: P10: Attached files: \\?\C:\WINDOWS\Minidump\091217-26687-01.dmp \\?\C:\Windows\Temp\WER-47625-0.sysdata.xml \\?\C:\WINDOWS\MEMORY.DMP \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER6651.tmp.WERInternalMetadata.xml \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER6A87.tmp.csv \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER6AA8.tmp.txt These files may be available here: C:\ProgramData\Microsoft\Windows\WER\ReportQueue\Kernel_124_f4b5491a3188480b7ed52bdf88f875506d2053_00000000_03966c2d Analysis symbol: Rechecking for solution: 0 Report ID: 7a587e4f-6123-476a-8688-eaf89206977f Report Status: 4 Hashed bucket: 25/10/2017 13:56 Windows Error Reporting Fault bucket , type 0 Event Name: BlueScreen Response: Not available Cab Id: 0 Problem signature: P1: 1e P2: ffffffffc000001d P3: fffff802a0b4769f P4: ffffc30117693028 P5: ffffc30117692870 P6: 10_0_15063 P7: 0_0 P8: 256_1 P9: P10: Attached files: \\?\C:\WINDOWS\Minidump\102517-24515-01.dmp \\?\C:\Windows\Temp\WER-100687-0.sysdata.xml \\?\C:\WINDOWS\MEMORY.DMP \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WERAD9C.tmp.WERInternalMetadata.xml \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WERAD9D.tmp.csv \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WERADAE.tmp.txt These files may be available here: C:\ProgramData\Microsoft\Windows\WER\ReportArchive\Kernel_1e_401193ba1b75e2f8381b87d6b6cc5deb61b2e41_00000000_cab_147f2095 Analysis symbol: Rechecking for solution: 0 Report ID: a2f5858f-057c-48de-8e21-6f63dae032a6 Report Status: 2049 Hashed bucket: 25/10/2017 13:51 Windows Error Reporting Fault bucket , type 0 Event Name: BlueScreen Response: Not available Cab Id: 0 Problem signature: P1: 1e P2: ffffffffc000001d P3: fffff802a0b4769f P4: ffffc30117693028 P5: ffffc30117692870 P6: 10_0_15063 P7: 0_0 P8: 256_1 P9: P10: Attached files: \\?\C:\WINDOWS\Minidump\102517-24515-01.dmp \\?\C:\Windows\Temp\WER-100687-0.sysdata.xml \\?\C:\WINDOWS\MEMORY.DMP \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WERAD9C.tmp.WERInternalMetadata.xml \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WERAD9D.tmp.csv \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WERADAE.tmp.txt These files may be available here: C:\ProgramData\Microsoft\Windows\WER\ReportQueue\Kernel_1e_401193ba1b75e2f8381b87d6b6cc5deb61b2e41_00000000_03a6adf9 Analysis symbol: Rechecking for solution: 0 Report ID: a2f5858f-057c-48de-8e21-6f63dae032a6 Report Status: 4 Hashed bucket:[/quote] Code: 01/06/2017 10:07 Windows Error Reporting Fault bucket , type 0 Event Name: ScriptedDiagFailure Response: Not available Cab Id: 0 Problem signature: P1: Microsoft Corporation.BlueScreenDiagnostic.1.0 P2: Default P3: 1.0.0.0 P4: Default P5: P6: P7: P8: P9: P10: Attached files: These files may be available here: C:\ProgramData\Microsoft\Windows\WER\ReportQueue\NonCritical_Microsoft Corpor_90d593cc5dc8619a1b947a3e26af5ec0803fc0_00000000_1168a97b Analysis symbol: Rechecking for solution: 0 Report ID: 81e6562e-f9c5-45e6-b447-a06dfef61712 Report Status: 4 Hashed bucket:[/quote] Code: 01/06/2017 10:07 Windows Error Reporting Fault bucket 126099534364, type 5 Event Name: ScriptedDiagFailure Response: Not available Cab Id: 0 Problem signature: P1: Microsoft Corporation.BlueScreenDiagnostic.1.0 P2: Default P3: 1.0.0.0 P4: Default P5: P6: P7: P8: P9: P10: Attached files: \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WERAAA4.tmp.WERInternalMetadata.xml These files may be available here: C:\ProgramData\Microsoft\Windows\WER\ReportArchive\NonCritical_Microsoft Corpor_90d593cc5dc8619a1b947a3e26af5ec0803fc0_00000000_395cb11c Analysis symbol: Rechecking for solution: 0 Report ID: 81e6562e-f9c5-45e6-b447-a06dfef61712 Report Status: 268435456 Hashed bucket: 151632db3730fdd4fece4bf44251dd87[/quote]

 

Microsoft Windows [Version 10.0.15063](c) 2017 Microsoft Corporation. All rights reserved.C:\WINDOWS\system32>sfc /scannowBeginning system scan. This process will take some time.Beginning verification phase of system scan.Verification 100% complete.Windows Resource Protection did not find any integrity violations.C:\WINDOWS\system32>dism /online /cleanup-image /restorehealthDeployment Image Servicing and Management toolVersion: 10.0.15063.0Image Version: 10.0.15063.0[==========================100.0%==========================] The restore operation completed successfully.The operation completed successfully.C:\WINDOWS\system32>