Windows 10: Random BSOD, Windows not responding resulting in crashes.

Hi,


I am experiencing some stability issues lately with my system.

It all started with my PC randomly crashing resulting in Motherboard LED error messages. Sent GPU, MOBO, CPU for RMA - apparently CPU was faulty so got both MOBO and CPU replaced from B570+5600X to Z590-F+10700K.


After installation of new hardware and clean install of the OS I have started to experience same issue of OS crashing but this time no LED fault messages on MOBO.

I have an updated version of BIOS, all newest drivers along with newsest Windows 20H2 Update.

I realised after investigating Event Viewer that my MINIDUMP files were not being created so I have turned on that option, at the moment unfortunately I have no dump files as PC did not crash yet since then.

PC has been scanned by ESET Internet Security & Malwarebytez for any malware but nothing found.

Did OCCT stress testing on GPU, CPU, POWER - no issues.

Before aquiring new CPU&MOBO I did buy a new PSU just to rule out PSU problems but same issue persisted with new PSU.

MEMTEST on RAM - no issues.

CHKDSK on all drives - no issues.

SFC /scannow - had some files to fix but they were successfuly fixed and the issue persisted afterwards.

also did DISM and no help there.


My current PC specs are as follows:


Intel 10700K @ Stock

Asus Z590-F Motherboard

G-Skill 16GB 3600Mhz CL16 2x8GB

Asus RTX 3090 TUF OC 24GB

beQuiet 1000W Modular Bronze PSU


I have read online that some people had similiar issues with System instabilities but no resolutions were found or at least all the recommended ones I have already applied with no luck, here's info from my EventViewer:

Log Name: System
Source: Microsoft-Windows-Kernel-Power
Date: 16/03/2021 10:07:36
Event ID: 41
Task Category: 63
Level: Critical
Keywords: Log Always,Verbose
User: SYSTEM
Computer: DESKTOP-AVDCQ3O
Description:
The system has rebooted without cleanly shutting down first. This error could be caused if the system stopped responding, crashed, or lost power unexpectedly.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-Kernel-Power" Guid="{331c3b3a-2005-44c2-ac5e-77220c37d6b4}" />
<EventID>41</EventID>
<Version>8</Version>
<Level>1</Level>
<Task>63</Task>
<Opcode>0</Opcode>
<Keywords>0x8000400000000002</Keywords>
<TimeCreated SystemTime="2021-03-16T10:07:36.1809697Z" />
<EventRecordID>3209</EventRecordID>
<Correlation />
<Execution ProcessID="4" ThreadID="8" />
<Channel>System</Channel>
<Computer>DESKTOP-AVDCQ3O</Computer>
<Security UserID="S-1-5-18" />
</System>
<EventData>
<Data Name="BugcheckCode">340</Data>
<Data Name="BugcheckParameter1">0xffffd38f2be35000</Data>
<Data Name="BugcheckParameter2">0x0</Data>
<Data Name="BugcheckParameter3">0x0</Data>
<Data Name="BugcheckParameter4">0x0</Data>
<Data Name="SleepInProgress">0</Data>
<Data Name="PowerButtonTimestamp">0</Data>
<Data Name="BootAppStatus">0</Data>
<Data Name="Checkpoint">0</Data>
<Data Name="ConnectedStandbyInProgress">false</Data>
<Data Name="SystemSleepTransitionsToOn">0</Data>
<Data Name="CsEntryScenarioInstanceId">0</Data>
<Data Name="BugcheckInfoFromEFI">true</Data>
<Data Name="CheckpointStatus">0</Data>
<Data Name="CsEntryScenarioInstanceIdV2">0</Data>
<Data Name="LongPowerButtonPressDetected">false</Data>
</EventData>
</Event>
Log Name: System
Source: Microsoft-Windows-FilterManager
Date: 16/03/2021 10:07:36
Event ID: 6
Task Category: None
Level: Information
Keywords:
User: SYSTEM
Computer: DESKTOP-AVDCQ3O
Description:
File System Filter 'npsvctrig' 10.0, ‎2025‎-‎01‎-‎06T02:41:12.000000000Z has successfully loaded and registered with Filter Manager.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-FilterManager" Guid="{f3c5e28e-63f6-49c7-a204-e48a1bc4b09d}" />
<EventID>6</EventID>
<Version>0</Version>
<Level>4</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x8000000000000000</Keywords>
<TimeCreated SystemTime="2021-03-16T10:07:36.0365932Z" />
<EventRecordID>3208</EventRecordID>
<Correlation />
<Execution ProcessID="4" ThreadID="8" />
<Channel>System</Channel>
<Computer>DESKTOP-AVDCQ3O</Computer>
<Security UserID="S-1-5-18" />
</System>
<EventData>
<Data Name="FinalStatus">0x0</Data>
<Data Name="DeviceVersionMajor">10</Data>
<Data Name="DeviceVersionMinor">0</Data>
<Data Name="DeviceNameLength">9</Data>
<Data Name="DeviceName">npsvctrig</Data>
<Data Name="DeviceTime">2025-01-06T02:41:12.0000000Z</Data>
</EventData>
</Event>
Log Name: System
Source: Microsoft-Windows-FilterManager
Date: 16/03/2021 10:07:35
Event ID: 6
Task Category: None
Level: Information
Keywords:
User: SYSTEM
Computer: DESKTOP-AVDCQ3O
Description:
File System Filter 'eamonm' 10.0, ‎2020‎-‎10‎-‎09T20:07:48.000000000Z has successfully loaded and registered with Filter Manager.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-FilterManager" Guid="{f3c5e28e-63f6-49c7-a204-e48a1bc4b09d}" />
<EventID>6</EventID>
<Version>0</Version>
<Level>4</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x8000000000000000</Keywords>
<TimeCreated SystemTime="2021-03-16T10:07:35.0833164Z" />
<EventRecordID>3207</EventRecordID>
<Correlation />
<Execution ProcessID="4" ThreadID="8" />
<Channel>System</Channel>
<Computer>DESKTOP-AVDCQ3O</Computer>
<Security UserID="S-1-5-18" />
</System>
<EventData>
<Data Name="FinalStatus">0x0</Data>
<Data Name="DeviceVersionMajor">10</Data>
<Data Name="DeviceVersionMinor">0</Data>
<Data Name="DeviceNameLength">6</Data>
<Data Name="DeviceName">eamonm</Data>
<Data Name="DeviceTime">2020-10-09T20:07:48.0000000Z</Data>
</EventData>
</Event>
Log Name: System
Source: Microsoft-Windows-FilterManager
Date: 16/03/2021 10:07:35
Event ID: 6
Task Category: None
Level: Information
Keywords:
User: SYSTEM
Computer: DESKTOP-AVDCQ3O
Description:
File System Filter 'FileCrypt' 10.0, ‎2002‎-‎03‎-‎01T11:12:42.000000000Z has successfully loaded and registered with Filter Manager.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-FilterManager" Guid="{f3c5e28e-63f6-49c7-a204-e48a1bc4b09d}" />
<EventID>6</EventID>
<Version>0</Version>
<Level>4</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x8000000000000000</Keywords>
<TimeCreated SystemTime="2021-03-16T10:07:35.0726884Z" />
<EventRecordID>3206</EventRecordID>
<Correlation />
<Execution ProcessID="4" ThreadID="8" />
<Channel>System</Channel>
<Computer>DESKTOP-AVDCQ3O</Computer>
<Security UserID="S-1-5-18" />
</System>
<EventData>
<Data Name="FinalStatus">0x0</Data>
<Data Name="DeviceVersionMajor">10</Data>
<Data Name="DeviceVersionMinor">0</Data>
<Data Name="DeviceNameLength">9</Data>
<Data Name="DeviceName">FileCrypt</Data>
<Data Name="DeviceTime">2002-03-01T11:12:42.0000000Z</Data>
</EventData>
</Event>
Log Name: System
Source: volmgr
Date: 16/03/2021 10:07:34
Event ID: 161
Task Category: None
Level: Error
Keywords: Classic
User: N/A
Computer: DESKTOP-AVDCQ3O
Description:
The description for Event ID 161 from source volmgr cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer.

If the event originated on another computer, the display information had to be saved with the event.

The following information was included with the event:

\Device\HarddiskVolume3

Element not found

Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="volmgr" />
<EventID Qualifiers="49156">161</EventID>
<Version>0</Version>
<Level>2</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2021-03-16T10:07:34.9702951Z" />
<EventRecordID>3205</EventRecordID>
<Correlation />
<Execution ProcessID="4" ThreadID="500" />
<Channel>System</Channel>
<Computer>DESKTOP-AVDCQ3O</Computer>
<Security />
</System>
<EventData>
<Data>\Device\HarddiskVolume3</Data>
<Binary>000000000100000000000000A10004C041000000010000C000000000000000000000000000000000</Binary>
</EventData>
</Event>

I look forward to your advise.

Regards,

Chris

:)

 

Random BSOD while browsing internet


BitDefender is nothing special. mwac.sys causes BSODs anywhere.
A tiny documentation can be found here: Solved Random BSODs - Windows 10 Forums
In that very thread, the suggested action apparently worked.

The storage and network filters of any third party antivirus can cause BSODs. Neither MBAM nor BitDefender is any special. For a regular antivirus, it may be shifted to an alternative; but MBAM has no alternative. So a clean install of the said program is the most feasible first step.
As far as the first step is not failing, it is better to not think for the second step. Because the BSODs are not universal, failure at the first step is not universal; and success at the second step is also not universal.
That is why I posted that my suggestion may work, or may not. Let us see where it goes.

 

Random BSOD while browsing internet

Sorry, Bitdefender is a problem: BSOD BAD_POOL_HEADER - mwac.sys - Malwarebytes Anti-Malware Help - Malwarebytes Forums

 

Random BSODs "Bad_Pool_Caller"


This BSOD happens anywhere, irrespective of BitDefender. It takes place even when the antivirus is MSE in case of Windows 7. The most common cause is an expired trial or a cracked installation. Some examples:

• Norton: Windows 7 Random bsod caused by tcpip.sys - Windows 7 Help Forums
• MBAM only: Epic BSOD error appears just after few seconds from boot Solved - Windows 7 Help Forums
• McAfee: BSOD on Internet Related Programs (tcpip.sys) - Windows 7 Help Forums
• Avast: Bad Pool Header 0x00000019 at random times - Windows 7 Help Forums
• Avira: BSOD randomly Crashes my Laptop and freezes at Memory dump 100 - Windows 7 Help Forums
• Crack: BSOD every 6 minutes, also recent freezes - Windows 7 Help Forums

We are on our way of troubleshooting. If the uninstallation and reinstallation does not work, we will take the next step.

I, in general, know what I am doing and what I am suggesting. If I feel that I am unable to control the issue, I will definitely ask for help.