Windows 10: BSoD's after 10 minutes idle

winvr turned up Version 1703 (OS Build 15063.483). Also, I've already tried 8 passes of memtest86 and recently found out that the problem doesn't persist in safe mode. So that should eliminate the need to test hardware, right?

Here are the results of the other command prompt entries:

Microsoft Windows [Version 10.0.15063](c) 2017 Microsoft Corporation. All rights reserved.C:\WINDOWS\system32>winverC:\WINDOWS\system32>sfc /scannowBeginning system scan. This process will take some time.Beginning verification phase of system scan.Verification 100% complete.Windows Resource Protection found corrupt files but was unable to fix someof them. Details are included in the CBS.Log windir\Logs\CBS\CBS.log. Forexample C:\Windows\Logs\CBS\CBS.log. Note that logging is currently notsupported in offline servicing scenarios.C:\WINDOWS\system32>dism /online /cleanup-image /restorehealthDeployment Image Servicing and Management toolVersion: 10.0.15063.0Image Version: 10.0.15063.0[==========================100.0%==========================]Error: 0x800f081fThe source files could not be found.Use the "Source" option to specify the location of the files that are required to restore the feature. For more information on specifying a source location, see MSN.com - Hotmail, Outlook, Skype, Bing, Latest News, Photos Videos DISM log file can be found at C:\WINDOWS\Logs\DISM\dism.logC:\WINDOWS\system32>chkdsk /scanThe type of the file system is NTFS.Stage 1: Examining basic file system structure ... 277504 file records processed.File verification completed. 5906 large file records processed. 0 bad file records processed.Stage 2: Examining file name linkage ... 339512 index entries processed.Index verification completed. 0 unindexed files scanned. 0 unindexed files recovered to lost and found.Stage 3: Examining security descriptors ...Security descriptor verification completed. 31005 data files processed.CHKDSK is verifying Usn Journal... 41449024 USN bytes processed.Usn Journal verification completed.Windows has scanned the file system and found no problems.No further action is required. 243618815 KB total disk space. 54546760 KB in 161696 files. 109784 KB in 31006 indexes. 0 KB in bad sectors. 395647 KB in use by the system. 65536 KB occupied by the log file. 188566624 KB available on disk. 4096 bytes in each allocation unit. 60904703 total allocation units on disk. 47141656 allocation units available on disk.C:\WINDOWS\system32>

 

Not really, unfortunately.
In safe mode not everything of the system is being used, when safe mode gives no problems it means only the part that has been used seems proper, but there is no way in telling what part has been used.

 

Which Antivirus products have you used over the past few months?
Which one's are you using now in addition to Microsoft Windows defender?
The full 39 dump files were debugged.
The most frequent misbehaving driver was: WRkrn.sys
One new misbehaving driver was found in the remaining minidump files: MBAMChameleon.sys
Please use the control panel and uninstall all Malwarebytes software.
Please make sure that Windows defender is the only antivirus product in use during the troubleshooting.

Scannow reported that the operating system has corruption.
It was not able to fix the corruption.
Restorehealth was not able to fix the corruption.
It would be nice if you could rule in or rule out hardware problems by using safe mode.
Nobody has reported the duration of time, whether 1 minute or 1 week is sufficient time for accuracy of this type of testing.
For the Memtest86+ testing if there are fewer than 8 passes the number of false negatives is too large to make the test accuracy useful. So all testing has true negatives, true positives, false negatives, false positives, and accuracy. The aim is to find a test that can be performed with known or desired accuracy.

For the operating system open administrative command prompt and type or copy and paste:

1) sfc /scannow (repeat this two times for a total of three times)
2) dism /online /cleanup-image /checkhealth
3) dism /online /cleanup-image /scanhealth
4) dism /online /cleanup-image /restorehealth

When these commands have completed please post the results into the thread.

Find a flash drive that you can format.
Create a bootable windows 10 iso: Download Windows 10



Code: ffff9780`3eda34f8 fffff80e`ff2b4eb8Unable to load image \SystemRoot\system32\drivers\MBAMChameleon.sys, Win32 error 0n2*** WARNING: Unable to verify timestamp for MBAMChameleon.sys*** ERROR: Module load completed but symbols could not be loaded for MBAMChameleon.sys MBAMChameleon+0x24eb8[/quote]
Code: ffffe280`af882838 fffff80e`c8334d50Unable to load image \SystemRoot\system32\drivers\MBAMChameleon.sys, Win32 error 0n2*** WARNING: Unable to verify timestamp for MBAMChameleon.sys*** ERROR: Module load completed but symbols could not be loaded for MBAMChameleon.sys MBAMChameleon+0x24d50[/quote]
Code: Event[134]: Log Name: System Source: Service Control Manager Date: 2017-04-20T09:33:21.968 Event ID: 7045 Task: N/A Level: Information Opcode: N/A Keyword: Classic User: S-1-5-18 User Name: NT AUTHORITY\SYSTEM Computer: DESKTOP-QFUDV14 Description: A service was installed in the system.Service Name: MBAMChameleonService File Name: \SystemRoot\system32\drivers\MBAMChameleon.sysService Type: kernel mode driverService Start Type: auto startService Account:[/quote]
Code: Event[191]: Log Name: System Source: Microsoft-Windows-FilterManager Date: 2017-04-20T09:33:58.406 Event ID: 6 Task: N/A Level: Information Opcode: Info Keyword: N/A User: S-1-5-18 User Name: NT AUTHORITY\SYSTEM Computer: DESKTOP-QFUDV14 Description: File System Filter 'MBAMChameleon' (6.3, ?2016?-?11?-?19T15:13:08.000000000Z) has successfully loaded and registered with Filter Manager.[/quote]
Code: Event[6870]: Log Name: System Source: Service Control Manager Date: 2017-06-28T22:10:18.473 Event ID: 7045 Task: N/A Level: Information Opcode: N/A Keyword: Classic User: S-1-5-21-2467530947-2136463203-715072996-1001 User Name: DESKTOP-QFUDV14\Avery Devine Computer: DESKTOP-QFUDV14 Description: A service was installed in the system.Service Name: MBAMServiceService File Name: "C:\Program Files\Malwarebytes\Anti-Malware\mbamservice.exe"Service Type: user mode serviceService Start Type: demand startService Account: LocalSystem[/quote]
Code: Event[6872]: Log Name: System Source: Service Control Manager Date: 2017-06-28T22:10:19.676 Event ID: 7045 Task: N/A Level: Information Opcode: N/A Keyword: Classic User: S-1-5-18 User Name: NT AUTHORITY\SYSTEM Computer: DESKTOP-QFUDV14 Description: A service was installed in the system.Service Name: MBAMSwissArmyService File Name: C:\WINDOWS\system32\drivers\MBAMSwissArmy.sysService Type: kernel mode driverService Start Type: demand startService Account:[/quote]

 

Okay, I just uninstalled Webroot. There wasn't any Malwarebytes to uninstall from my control panel and for some reason, I can't locate MBAMchameleon.sys in my driver folder. I tried a removal tool and it couldn't locate anything MBAM related on my computer. Weird.

Here are the results of the command prompt entries. I made a typo then fixed it:

Microsoft Windows [Version 10.0.15063](c) 2017 Microsoft Corporation. All rights reserved.C:\WINDOWS\system32>sfc /scannowBeginning system scan. This process will take some time.Beginning verification phase of system scan.Verification 100% complete.Windows Resource Protection found corrupt files but was unable to fix someof them. Details are included in the CBS.Log windir\Logs\CBS\CBS.log. Forexample C:\Windows\Logs\CBS\CBS.log. Note that logging is currently notsupported in offline servicing scenarios.C:\WINDOWS\system32>sfc /scannowBeginning system scan. This process will take some time.Beginning verification phase of system scan.Verification 100% complete.Windows Resource Protection found corrupt files but was unable to fix someof them. Details are included in the CBS.Log windir\Logs\CBS\CBS.log. Forexample C:\Windows\Logs\CBS\CBS.log. Note that logging is currently notsupported in offline servicing scenarios.C:\WINDOWS\system32>sfc /scannowBeginning system scan. This process will take some time.Beginning verification phase of system scan.Verification 100% complete.Windows Resource Protection found corrupt files but was unable to fix someof them. Details are included in the CBS.Log windir\Logs\CBS\CBS.log. Forexample C:\Windows\Logs\CBS\CBS.log. Note that logging is currently notsupported in offline servicing scenarios.C:\WINDOWS\system32>dism /online /cleanup-image /checkhealthDeployment Image Servicing and Management toolVersion: 10.0.15063.0Image Version: 10.0.15063.0The component store is repairable.The operation completed successfully.C:\WINDOWS\system32>dism /online /cleanup-image scanhealthError: 87DISM doesn't recognize the command-line option "scanhealth".For more information, refer to the help by running DISM.exe /?.The DISM log file can be found at C:\WINDOWS\Logs\DISM\dism.logC:\WINDOWS\system32>dism /online /cleanup-image /scanhealthDeployment Image Servicing and Management toolVersion: 10.0.15063.0Image Version: 10.0.15063.0[==========================100.0%==========================] The component store is repairable.The operation completed successfully.C:\WINDOWS\system32>dism /online /cleanup-image /restorehealthDeployment Image Servicing and Management toolVersion: 10.0.15063.0Image Version: 10.0.15063.0[===========================94.7%====================== ]Error: 0x800f081fThe source files could not be found.Use the "Source" option to specify the location of the files that are required to restore the feature. For more information on specifying a source location, see MSN.com - Hotmail, Outlook, Skype, Bing, Latest News, Photos Videos DISM log file can be found at C:\WINDOWS\Logs\DISM\dism.logC:\WINDOWS\system32>

 

If you are on a metered connection please make sure that is no longer metered and using administrative command prompt type: dism /online /cleanup-image /restorehealth

If you are not on a metered connection of if restorehealth fails to complete or fails to make the needed repairs:


1) find a flash drive that you can format
2) create a bootable windows 10 iso:
Download Windows 10
3) plan to perform an in place upgrade repair saving files and applications. In case the in place upgrade repair fails plan to perform a clean install with installation of windows 10 version 1703.
4) create a new restore point
5) back up your files
6) make an image of the drive using Macrium:
Macrium Software | Your image is everything


Method to perform an in place upgrade repair:
1) power on and boot to the desktop
2) open file explorer
3) insert the bootable windows 10 iso flash drive into any USB port
4) locate the USB windows 10 iso within file explorer and click on it to open it
5) look for the file/folder setup or setup.exe
6) click on this folder and when it opens look in the left lower corner for repair this computer
7) run through the in place upgrade repair menu using this link:
Repair Install Windows 10 with an In-place Upgrade Windows 10 Installation Upgrade Tutorials




For Memtest86+ please post an image into the thread displaying 8 or more passes.

 

After uninstalling Webroot completely and performing an in-place upgrade, the problem seeeeems to be gone. I'm not sure if it was Webroot or a faulty Windows update that caused OS corruption, but either way, I'm going to stay away from antiviruses other than Windows Defender for a while.

Thank you so much to everyone who took the time to help out! You're the best.

 

You'r welcome.
With a fresh operating sytem:
1) make a new restore point
2) make an image of your drive using Macrium and save that in another drive.