Windows 10: Error: KMODE_EXCEPTION_NOT_HANDLED

The last bsod mini dump available for debugging in the logs was on 9/14/2017.

Please post using a one drive or drop box share link:memory dump file:

%SystemRoot%\MEMORY.DMP or C:\Windows\MEMORY.DMP

Use file explorer > this PC > local C: drive > right upper corner search enter each of the above to find results.

For any bsod please post a new zip:
BSOD - Posting Instructions - Windows 10 Forums

 

If it hasn't crashed for 4+ days this issue is likely resolved.

 

Spectrum, hope you are right

Zbook : Dump file link : Microsoft OneDrive - Access files anywhere. Create docs with free Office Online.

Am keeping fingers crossed that dump file not corrupted

 

The memory dump files was not able to be debugged as it was partially corrupt.

The event log displayed that 1 driver failed to load:

anodlwf.sys

This information was in an earlier post. The failed to load has reoccurred.

This has not produced a bsod and may just be an event recording at this time.

In this link a similar driver was deleted:
BSOD Driver Irql not less or equal - Anodlwfx.sys - Windows 7 Help Forums

At this juncture the un-installation of the AV drivers has produced a stable computer environment.
You can continue using Microsoft Windows defender or reinstall AV.
If there is any new bsod you can then reopen the thread.

Code: anodlwf ANOD Network Security ANOD Network Security Kernel System Stopped OK FALSE FALSE 0 8,192 0 06/03/2009 5:10:08 AM C:\WINDOWS\system32\DRIVERS\anodlwfx.sys[/quote]

 

Hi, both sites point to a general website so I am unable to update any drivers from it.

I ran driver booster to see if it could find any drivers to be updated. It could not find anyhting there.

I think its a windows thing, ran windows update, nothing. Could not find anyhting called anod in windows services.msc

A stable environment is a good thing.

I'm kinda stumped.

 

In general when updating drivers use computer manufacturer websites first as the component manufacturer drivers may have been modified for the specific computer and then second choice is the component manufacturer website such as Intel, Nvidia, Gigabyte, etc. The other websites it is unclear what you are getting and there have been bsod that have required clean install.

For this driver are you still using this software/application?

There are several things you can do at this juncture:
1) Close the thread (solved with uninstalling 2 AV software programs and their drivers)
2) Keep the thread open for the remainder of the week and keep monitoring for bsod.
3) Use Windows driver verifier to see if there are anymore misbehaving drivers.

 

Re this driver, not even sure which sw app it came from. I don't have any wireless cards, only Realteck etehrnet port. Maybe TAP 9 (from vpn) might create it ?

Good advice. Will keep thread open for rest of week, and if no other BSOds, then will close it.

At least its a stable system for now

 

All good things have to come to an end I guess. Just got another BOSD. Hopefully is just an anomoly.

Dump file enclosed : Microsoft OneDrive - Access files anywhere. Create docs with free Office Online.
Diag File enclosed : DAD-PC-20_09_2017_173712_90.zip
CCleaner screenCCleaner Sept 20.docxCCleaner Sept 20.docxshot enclosed :

I guess we reset the clock to see how long the system will stay up.

 

Registry cleaning has caused many people problems with their computers.
To fix they had to perform clean installs.
It's best that when using Ccleaner you use the Windows and Application cleaning and not the registry cleaning.
If you have a backup image and are comfortable restoring the image then you can use registry cleaning. But again there have been many unexpected problems.

The last mini dump in the DM log collector was from 9/14/2017.

The misbehaving driver on 9/20/2017 was the graphics hardware driver: atikmpag.sys

Perform the following steps:


1) Uninstall everything AMD using Display driver uninstaller and install new drivers from the Dell or the AMD website.
2) The Dell web site is preferred.
3) Enter the computer's serial or product number and the operating system to view available drivers.
4) If you use the AMD web site be sure the "clean install" box is checked and only install the graphics driver.
Official Display Driver Uninstaller DDU Download
Display Driver Uninstaller Download version 17.0.7.2
Display Driver Uninstaller: How to use - Windows 7 Help Forums
AMD Support and Radeon Software Driver Download

5) When the graphics driver has been reinstalled from the Dell website use the Dell diagnostics and perform the full diagnostics tests on the computer and post the results into the thread.

6) Post an image of the Ccleaner settings for Windows > system and advanced


Code: 20/09/2017 12:15 PM Windows Error Reporting Fault bucket LKD_0x141_Tdr:6_IMAGE_atikmpag.sys, type 0 Event Name: LiveKernelEvent Response: Not available Cab Id: 1dc09530-7a38-4fc2-a059-dbaaf5db101a Problem signature: P1: 141 P2: ffffa000990ab010 P3: fffff80e920ff818 P4: 0 P5: 4 P6: 10_0_15063 P7: 0_0 P8: 768_1 P9: P10: Attached files: \\?\C:\WINDOWS\LiveKernelReports\WATCHDOG\WATCHDOG-20170920-0815.dmp \\?\C:\Windows\Temp\WER-157635781-0.sysdata.xml \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER7666.tmp.WERInternalMetadata.xml \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER7676.tmp.csv \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER7696.tmp.txt \\?\C:\Windows\Temp\WERA9FA.tmp.WERDataCollectionStatus.txt These files may be available here: C:\ProgramData\Microsoft\Windows\WER\ReportArchive\Kernel_141_f88357987953718f83c1324a4b113b336e9b79c_00000000_cab_3791ab51 Analysis symbol: Rechecking for solution: 0 Report Id: 56e9646d-adf3-4bbe-84d5-b6dc07f8ae58 Report Status: 268435456 Hashed bucket:[/quote] Code: Windows Error Reporting:+++ WER0 +++:Fault bucket LKD_0x141_Tdr:6_IMAGE_atikmpag.sys, type 0Event Name: LiveKernelEventResponse: Not availableCab Id: 1dc09530-7a38-4fc2-a059-dbaaf5db101aProblem signature1: 141P2: ffffa000990ab010P3: fffff80e920ff818P4: 0P5: 4P6: 10_0_15063P7: 0_0P8: 768_1P9: P10:[/quote] Code: Name AMD Radeon (TM) R9 200 SeriesPNP Device ID PCI\VEN_1002&DEV_6811&SUBSYS_30501462&REV_00\4&3A4C116B&0&0038 Adapter Type AMD Radeon Graphics Processor (0x6811), Advanced Micro Devices, Inc. compatible Adapter Description AMD Radeon (TM) R9 200 Series Adapter RAM (2,147,483,648) bytes Installed Drivers aticfx64.dll,aticfx64.dll,aticfx64.dll,amdxc64.dll,aticfx32,aticfx32,aticfx32,amdxc32,atiumd64,atidxx64.dll,atidxx64.dll,atiumdag,atidxx32,atidxx32,atiumdva,atiumd6a.cap,atitmm64 Driver Version 22.19.673.0 INF File oem31.inf (ati2mtag_R575DS section) Color Planes Not Available Color Table Entries 4294967296 Resolution 1920 x 1080 x 60 hertz Bits/Pixel 32 Memory Address 0xD0000000-0xDFFFFFFF Memory Address 0xFBE80000-0xFBEBFFFF I/O Port 0x0000E000-0x0000E0FF IRQ Channel IRQ 4294967286 I/O Port 0x000003B0-0x000003BB I/O Port 0x000003C0-0x000003DF Memory Address 0xA0000-0xBFFFF Driver c:\windows\system32\driverstore\filerepository\c0317359.inf_amd64_71db94a48cef0172\atikmpag.sys (22.19.673.0, 529.02 KB (541,720 bytes), 24/08/2017 1:41 PM)[/quote] Memory Dump:

Code: **************************************************************************THIS DUMP FILE IS PARTIALLY CORRUPT. KdDebuggerDataBlock is not present or unreadable. ************************************************************************** BugCheck 3B, {c0000005, ffff978729ca476f, ffffbc00791f1e60, 0} GetContextState failed, 0xD0000147 Unable to get current machine context, NTSTATUS 0xC0000147 ***** Kernel symbols are WRONG. Please fix symbols to do analysis.[/quote]

 

Oh my, looks like I have some work to do.

Will do it as soon as get some time in between work and post tomorrow or so.

 

So.... I replaced drivers from AMD site. Not an option from Dell as PC originally came with Win 7.
Checked the quick as well as extended Dell tests, everything passed with flying colours.
Not able to use the CCleaner option as not sure what you mean by system and advanced.
stress tested the system by playing BF1 and after 2 hours or so today BSOD. Diag file enclsoed. Am going to guess its the ATI set and drivers again. I guess I might have to live with it.DAD-PC-22_09_2017_214659_30.zip

 

There was no new BSOD mini dump file.
The last one was on 9/14/2017
There have been a lot of WHEA errors.
Please post an image of Ccleaner see below.



Open Ccleaner without click on analyze or run.
It should open with the windows tab in view.
There is a scroll bar.
Scroll down so that you can view system and advanced in full view.
Then make an image to post into the thread.
Take Screenshot in Windows 10 Windows 10 General Tips Tutorials


Download and install Whocrashed:
Resplendence Software - WhoCrashed, automatic crash dump analyzer
Above analyze click on tools > crash dump test > type: ACCEPT
Click analyze > post an image of the results into the thread
Post a new zip after the above steps:
BSOD - Posting Instructions - Windows 10 Forums

Download and install HWinfo:
HWiNFO - Download



Code: Event[21386]: Log Name: System Source: Service Control Manager Date: 2017-09-22T20:49:35.699 Event ID: 7045 Task: N/A Level: Information Opcode: N/A Keyword: Classic User: S-1-5-18 User Name: NT AUTHORITY\SYSTEM Computer: Dad-PC Description: A service was installed in the system.Service Name: MBAMWebProtectionService File Name: C:\WINDOWS\system32\drivers\mwac.sysService Type: kernel mode driverService Start Type: demand startService Account: Event[21387]: Log Name: System Source: Microsoft-Windows-WHEA-Logger Date: 2017-09-22T21:36:20.977 Event ID: 17 Task: N/A Level: Warning Opcode: Info Keyword: N/A User: S-1-5-19 User Name: NT AUTHORITY\LOCAL SERVICE Computer: Dad-PC Description: A corrected hardware error has occurred.Component: PCI Express Root PortError Source: Advanced Error Reporting (PCI Express)Busevice:Function: 0x0:0x0:0x0Vendor IDevice ID: 0x8086:0x3405Class Code: 0x30000The details view of this entry contains further information.Event[21388]: Log Name: System Source: Microsoft-Windows-WHEA-Logger Date: 2017-09-22T21:44:36.781 Event ID: 17 Task: N/A Level: Warning Opcode: Info Keyword: N/A User: S-1-5-19 User Name: NT AUTHORITY\LOCAL SERVICE Computer: Dad-PC Description: A corrected hardware error has occurred.Component: PCI Express Root PortError Source: Advanced Error Reporting (PCI Express)Busevice:Function: 0x0:0x0:0x0Vendor IDevice ID: 0x8086:0x3405Class Code: 0x30000The details view of this entry contains further information.[/quote] Code: anodlwf ANOD Network Security ANOD Network Security Kernel System Stopped OK FALSE FALSE 0 8,192 0 06/03/2009 5:10:08 AM C:\WINDOWS\system32\DRIVERS\anodlwfx.sys 4,096[/quote] Code: The following boot-start or system-start driver(s) did not load: anodlwf[/quote] Code: Event[21342]: Log Name: System Source: Microsoft-Windows-Kernel-Power Date: 2017-09-22T20:37:51.040 Event ID: 41 Task: N/A Level: Critical Opcode: Info Keyword: N/A User: S-1-5-18 User Name: NT AUTHORITY\SYSTEM Computer: Dad-PC Description: The system has rebooted without cleanly shutting down first. This error could be caused if the system stopped responding, crashed, or lost power unexpectedly.[/quote] Code: Event[21331]: Log Name: System Source: EventLog Date: 2017-09-22T20:38:14.446 Event ID: 6008 Task: N/A Level: Error Opcode: N/A Keyword: Classic User: N/A User Name: N/A Computer: Dad-PC Description: The previous system shutdown at 8:34:20 PM on ?9/?22/?2017 was unexpected.[/quote] Code: Event[21287]: Log Name: System Source: Microsoft-Windows-WHEA-Logger Date: 2017-09-21T17:51:07.781 Event ID: 17 Task: N/A Level: Warning Opcode: Info Keyword: N/A User: S-1-5-19 User Name: NT AUTHORITY\LOCAL SERVICE Computer: Dad-PC Description: A corrected hardware error has occurred.Component: PCI Express Root PortError Source: Advanced Error Reporting (PCI Express)Busevice:Function: 0x0:0x0:0x0Vendor IDevice ID: 0x8086:0x3405Class Code: 0x30000The details view of this entry contains further information.[/quote] Code: Event[21268]: Log Name: System Source: Microsoft-Windows-WHEA-Logger Date: 2017-09-21T15:24:02.170 Event ID: 17 Task: N/A Level: Warning Opcode: Info Keyword: N/A User: S-1-5-19 User Name: NT AUTHORITY\LOCAL SERVICE Computer: Dad-PC Description: A corrected hardware error has occurred.Component: PCI Express Root PortError Source: Advanced Error Reporting (PCI Express)Busevice:Function: 0x0:0x0:0x0Vendor IDevice ID: 0x8086:0x3405Class Code: 0x30000The details view of this entry contains further information.Event[21269]: Log Name: System Source: Microsoft-Windows-WHEA-Logger Date: 2017-09-21T15:28:42.170 Event ID: 17 Task: N/A Level: Warning Opcode: Info Keyword: N/A User: S-1-5-19 User Name: NT AUTHORITY\LOCAL SERVICE Computer: Dad-PC Description: A corrected hardware error has occurred.Component: PCI Express Root PortError Source: Advanced Error Reporting (PCI Express)Busevice:Function: 0x0:0x0:0x0Vendor IDevice ID: 0x8086:0x3405Class Code: 0x30000The details view of this entry contains further information.Event[21270]: Log Name: System Source: Microsoft-Windows-WHEA-Logger Date: 2017-09-21T15:30:20.211 Event ID: 17 Task: N/A Level: Warning Opcode: Info Keyword: N/A User: S-1-5-19 User Name: NT AUTHORITY\LOCAL SERVICE Computer: Dad-PC Description: A corrected hardware error has occurred.Component: PCI Express Root PortError Source: Advanced Error Reporting (PCI Express)Busevice:Function: 0x0:0x0:0x0Vendor IDevice ID: 0x8086:0x3405Class Code: 0x30000The details view of this entry contains further information.Event[21271]: Log Name: System Source: Microsoft-Windows-WHEA-Logger Date: 2017-09-21T15:35:38.908 Event ID: 17 Task: N/A Level: Warning Opcode: Info Keyword: N/A User: S-1-5-19 User Name: NT AUTHORITY\LOCAL SERVICE Computer: Dad-PC Description: A corrected hardware error has occurred.Component: PCI Express Root PortError Source: Advanced Error Reporting (PCI Express)Busevice:Function: 0x0:0x0:0x0Vendor IDevice ID: 0x8086:0x3405Class Code: 0x30000The details view of this entry contains further information.Event[21272]: Log Name: System Source: Microsoft-Windows-WHEA-Logger Date: 2017-09-21T15:38:08.142 Event ID: 17 Task: N/A Level: Warning Opcode: Info Keyword: N/A User: S-1-5-19 User Name: NT AUTHORITY\LOCAL SERVICE Computer: Dad-PC Description: A corrected hardware error has occurred.Component: PCI Express Root PortError Source: Advanced Error Reporting (PCI Express)Busevice:Function: 0x0:0x0:0x0Vendor IDevice ID: 0x8086:0x3405Class Code: 0x30000The details view of this entry contains further information.Event[21273]: Log Name: System Source: Microsoft-Windows-WHEA-Logger Date: 2017-09-21T15:38:08.142 Event ID: 17 Task: N/A Level: Warning Opcode: Info Keyword: N/A User: S-1-5-19 User Name: NT AUTHORITY\LOCAL SERVICE Computer: Dad-PC Description: A corrected hardware error has occurred.Component: PCI Express Root PortError Source: Advanced Error Reporting (PCI Express)Busevice:Function: 0x0:0x0:0x0Vendor IDevice ID: 0x8086:0x3405Class Code: 0x30000The details view of this entry contains further information.Event[21274]: Log Name: System Source: Microsoft-Windows-WHEA-Logger Date: 2017-09-21T16:06:02.181 Event ID: 17 Task: N/A Level: Warning Opcode: Info Keyword: N/A User: S-1-5-19 User Name: NT AUTHORITY\LOCAL SERVICE Computer: Dad-PC Description: A corrected hardware error has occurred.Component: PCI Express Root PortError Source: Advanced Error Reporting (PCI Express)Busevice:Function: 0x0:0x0:0x0Vendor IDevice ID: 0x8086:0x3405Class Code: 0x30000The details view of this entry contains further information.Event[21275]: Log Name: System Source: Microsoft-Windows-WAS Date: 2017-09-21T16:24:13.420 Event ID: 5186 Task: N/A Level: Information Opcode: N/A Keyword: Classic User: N/A User Name: N/A Computer: Dad-PC Description: A worker process with process id of '13740' serving application pool 'DefaultAppPool' was shutdown due to inactivity. Application Pool timeout configuration was set to 20 minutes. A new worker process will be started when needed.Event[21276]: Log Name: System Source: Microsoft-Windows-WHEA-Logger Date: 2017-09-21T16:39:47.688 Event ID: 17 Task: N/A Level: Warning Opcode: Info Keyword: N/A User: S-1-5-19 User Name: NT AUTHORITY\LOCAL SERVICE Computer: Dad-PC Description: A corrected hardware error has occurred.Component: PCI Express Root PortError Source: Advanced Error Reporting (PCI Express)Busevice:Function: 0x0:0x0:0x0Vendor IDevice ID: 0x8086:0x3405Class Code: 0x30000The details view of this entry contains further information.Event[21277]: Log Name: System Source: Microsoft-Windows-WHEA-Logger Date: 2017-09-21T16:56:28.573 Event ID: 17 Task: N/A Level: Warning Opcode: Info Keyword: N/A User: S-1-5-19 User Name: NT AUTHORITY\LOCAL SERVICE Computer: Dad-PC Description: A corrected hardware error has occurred.Component: PCI Express Root PortError Source: Advanced Error Reporting (PCI Express)Busevice:Function: 0x0:0x0:0x0Vendor IDevice ID: 0x8086:0x3405Class Code: 0x30000The details view of this entry contains further information.Event[21278]: Log Name: System Source: Microsoft-Windows-WHEA-Logger Date: 2017-09-21T17:13:05.066 Event ID: 17 Task: N/A Level: Warning Opcode: Info Keyword: N/A User: S-1-5-19 User Name: NT AUTHORITY\LOCAL SERVICE Computer: Dad-PC Description: A corrected hardware error has occurred.Component: PCI Express Root PortError Source: Advanced Error Reporting (PCI Express)Busevice:Function: 0x0:0x0:0x0Vendor IDevice ID: 0x8086:0x3405Class Code: 0x30000The details view of this entry contains further information.Event[21279]: Log Name: System Source: Microsoft-Windows-WHEA-Logger Date: 2017-09-21T17:13:11.019 Event ID: 17 Task: N/A Level: Warning Opcode: Info Keyword: N/A User: S-1-5-19 User Name: NT AUTHORITY\LOCAL SERVICE Computer: Dad-PC Description: A corrected hardware error has occurred.Component: PCI Express Root PortError Source: Advanced Error Reporting (PCI Express)Busevice:Function: 0x0:0x0:0x0Vendor IDevice ID: 0x8086:0x3405Class Code: 0x30000The details view of this entry contains further information.Event[21280]: Log Name: System Source: Microsoft-Windows-WHEA-Logger Date: 2017-09-21T17:13:11.019 Event ID: 17 Task: N/A Level: Warning Opcode: Info Keyword: N/A User: S-1-5-19 User Name: NT AUTHORITY\LOCAL SERVICE Computer: Dad-PC Description: A corrected hardware error has occurred.Component: PCI Express Root PortError Source: Advanced Error Reporting (PCI Express)Busevice:Function: 0x0:0x0:0x0Vendor IDevice ID: 0x8086:0x3405Class Code: 0x30000The details view of this entry contains further information.Event[21281]: Log Name: System Source: Microsoft-Windows-WHEA-Logger Date: 2017-09-21T17:14:28.330 Event ID: 17 Task: N/A Level: Warning Opcode: Info Keyword: N/A User: S-1-5-19 User Name: NT AUTHORITY\LOCAL SERVICE Computer: Dad-PC Description: A corrected hardware error has occurred.Component: PCI Express Root PortError Source: Advanced Error Reporting (PCI Express)Busevice:Function: 0x0:0x0:0x0Vendor IDevice ID: 0x8086:0x3405Class Code: 0x30000The details view of this entry contains further information.Event[21282]: Log Name: System Source: Microsoft-Windows-WHEA-Logger Date: 2017-09-21T17:25:20.306 Event ID: 17 Task: N/A Level: Warning Opcode: Info Keyword: N/A User: S-1-5-19 User Name: NT AUTHORITY\LOCAL SERVICE Computer: Dad-PC Description: A corrected hardware error has occurred.Component: PCI Express Root PortError Source: Advanced Error Reporting (PCI Express)Busevice:Function: 0x0:0x0:0x0Vendor IDevice ID: 0x8086:0x3405Class Code: 0x30000The details view of this entry contains further information.Event[21283]: Log Name: System Source: Microsoft-Windows-WHEA-Logger Date: 2017-09-21T17:27:17.180 Event ID: 17 Task: N/A Level: Warning Opcode: Info Keyword: N/A User: S-1-5-19 User Name: NT AUTHORITY\LOCAL SERVICE Computer: Dad-PC Description: A corrected hardware error has occurred.Component: PCI Express Root PortError Source: Advanced Error Reporting (PCI Express)Busevice:Function: 0x0:0x0:0x0Vendor IDevice ID: 0x8086:0x3405Class Code: 0x30000The details view of this entry contains further information.Event[21284]: Log Name: System Source: Microsoft-Windows-WHEA-Logger Date: 2017-09-21T17:27:17.180 Event ID: 17 Task: N/A Level: Warning Opcode: Info Keyword: N/A User: S-1-5-19 User Name: NT AUTHORITY\LOCAL SERVICE Computer: Dad-PC Description: A corrected hardware error has occurred.Component: PCI Express Root PortError Source: Advanced Error Reporting (PCI Express)Busevice:Function: 0x0:0x0:0x0Vendor IDevice ID: 0x8086:0x3405Class Code: 0x30000The details view of this entry contains further information.Event[21285]: Log Name: System Source: Microsoft-Windows-WHEA-Logger Date: 2017-09-21T17:41:58.186 Event ID: 17 Task: N/A Level: Warning Opcode: Info Keyword: N/A User: S-1-5-19 User Name: NT AUTHORITY\LOCAL SERVICE Computer: Dad-PC Description: A corrected hardware error has occurred.Component: PCI Express Root PortError Source: Advanced Error Reporting (PCI Express)Busevice:Function: 0x0:0x0:0x0Vendor IDevice ID: 0x8086:0x3405Class Code: 0x30000The details view of this entry contains further information.[/quote]

 

Hi, here you go :

CCleaner enclosed. Did not run, just a screenshotCCleaner screenshot Sept 23.docx
Memory dump file : Microsoft OneDrive - Access files anywhere. Create docs with free Office Online.
Who crashed file :Who crashed Sept 23.docx
HWInfo screenshot :HW Info Sept 23.docx

Thanks for everything as usual

 

For Whocrashed were you able to perform a crash dump test?

Please post an image of current startup and recovery settings:
In the left lower corner search type: system > open system control panel > on the left pane click advanced system settings > in startup and recovery click settings > post an image into the thread
Perform another crash dump test > analyze > post results into thread.

In post #27 there is a Dell link. The bios is 2010 and the current bios is 2014.
When possible please update the bios.

 

Yes, WhoCrashed doesnt seem to show the BSOD on Friday. Latest log enclosed.Crash Dump Analysis Sept 23.docx
System setting screenshot enclosed. (Hop[efully you can see the screenshot below)
Re BIOS. I've updated the latest one which is A04 several times, and it seems I ahve the latest one. Not sure why show 2010 vs 2014