Windows 10: Random BSODs ntoskrnl.exe

There were multiple misbehaving drivers identified in the mini and memory dumps.
These included software and hardware drivers.
For a new computer this was an unusally large number of misbehaving drivers.
Avast AV, Nvidia graphics, Logitech, Realtek Audio, Samsung
The windows error reporting displayed over 100 faulting applications and problem signatures for Intel zero config wireless.
The event log displayed a needed spotfix repair of the drive.


Open administrative command prompt and type or copy and paste:
1) sfc /scannow
2) dism /online /cleanup-image /restorehealth
3) When these have completed > right click on the top bar or title bar of the administrative command prompt box > left click on edit then select all > right click on the top bar again > left click on edit then copy > paste into the thread
4) Chkdsk /x /f /r
This may take many hours so plan to run it overnight.
Post the results using the informaton in this link:
Read Chkdsk Log in Event Viewer in Windows 10 Windows 10 Performance Maintenance Tutorials
5) Uninstall Avast antivirus
Avast Uninstall Utility | Download aswClear for Avast Removal
6) Turn on Microsoft Windows defender
7) The best way to fix the misbehaving Nvidia driver is to uninstall everything Nvidia using Display driver uninstaller and install new drivers from the computer manufacturer's website or from the Nvidia website.
The computer manufacturer's web site is preferred.
Enter the computer's serial or product number and the operating system to view available drivers.
If you use the Nvidia web site be sure the "clean install" box is checked and only install the graphics driver and the physx driver.
Official Display Driver Uninstaller DDU Download
Display Driver Uninstaller Download version 17.0.7.2
Display Driver Uninstaller: How to use - Windows 7 Help Forums
NVIDIA
8) Run memtest86+ version 5.01 for at least 8 passes.

This may take many hours so plan to run it overnight.

Memtest86+ - Advanced Memory Diagnostic Tool

When Memtest86+ has completed 8 or more runs use a camera or smart phone camera to take a picture and post an image into the thread.

Microsoft Community

MemTest86+ - Test RAM Windows 10 BSOD Tutorials
Memtest86+ is not run by time but by passes.
If fewer than 8 passes are made there is a significant incidence of false negatives.
A false negative is a pass when there is malfunctioning RAM.
The computer has 32 GB RAM. There are 2 RAM modules with 16 GB.
Memtest86+ takes approximately 1 - 2 hours /GB RAM
Using 32 GB at one time will take a long time but is the method to test multichannel RAM /MB.
Using 16 GB at one time will take shorter time but does not allow you to test multichannel RAM/ MB.
Just 1 error is a fail and you can abort testing.
Then you would test ! RAM module at a time in the same DIMM to determine which RAM module has malfunctioned.
If both RAM pass when tested independent after passing when tested simultaneously you need to test for DIMM / Motherboard problem by testing 1 RAM in another DIMM for 8 or more passes.

9) How To Fill Out Your System Specs How To Fill Out Your System Specs
System Specs - Fill in at Ten Forums:
System Specs - Fill in at Ten Forums Windows 10 General Tips Tutorials
In the left corner below in your post you find 'My System Specs'.
After clicking it you can find a link a little below that says 'Update your System Spec', click on this link to get to the page where you can fill in your system specs.
System Info - See Your System Specs - Windows 7 Help Forums

Please include information on PSU, cooler case, peripherals (mouse, keyboard, joystick) and anything attached to the computer via wireless or wired ( printer, headset, xbox, etc.)

10) Update Realtek: MBfilt64.sys
Updating a driver: Microsoft Community

11) Update Intel wireless using device manager: netwtw06.sys
Updating a driver: Microsoft Community

12) Update Logitech:\LGBusEnum.sys
Updating a driver: Microsoft Community

13) Unintall if you are no longer using or update Samsung: secnvme.sys
Updating a driver: Microsoft Community

14) Were you at any time using driver update software?

15) For any new BSOD please post an updated zip:
BSOD - Posting Instructions - Windows 10 Forums

16) Run HDTune:
http://www.hdtune.com/to check the drive health,
scan for errors, no quick scan but full scan
run a benchmark.

It may take some time, but please take the time you need to perform it properly.
When above is done please make screenshots of the following
the health,
the error scan,
the benchmark incl. following
transfer rate,
access time,
burst rate,
cpu usage.
Take Screenshot in Windows 10 Windows 10 General Tips Tutorials


Code: 01/09/2017 16:51 Application Error Faulting application name: ZeroConfigService.exe, version: 19.60.0.0, time stamp: 0x58eb9957 Faulting module name: ZeroConfigService.exe, version: 19.60.0.0, time stamp: 0x58eb9957 Exception code: 0xc0000409 Fault offset: 0x000000000022af80 Faulting process ID: 0xeac Faulting application start time: 0x01d322c7d093b057 Faulting application path: C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe Faulting module path: C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe Report ID: caef7a3a-69a2-4eac-bccc-44ca9b09ad95 Faulting package full name: Faulting package-relative application ID:01/09/2017 02:03 Application Error Faulting application name: ZeroConfigService.exe, version: 19.60.0.0, time stamp: 0x58eb9957 Faulting module name: ZeroConfigService.exe, version: 19.60.0.0, time stamp: 0x58eb9957 Exception code: 0xc0000409 Fault offset: 0x000000000022af80 Faulting process ID: 0xe48 Faulting application start time: 0x01d322a6865e1c42 Faulting application path: C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe Faulting module path: C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe Report ID: ac569ae0-1076-4716-afcd-021cab78590d Faulting package full name: Faulting package-relative application ID:31/08/2017 22:13 Application Error Faulting application name: ZeroConfigService.exe, version: 19.60.0.0, time stamp: 0x58eb9957 Faulting module name: ZeroConfigService.exe, version: 19.60.0.0, time stamp: 0x58eb9957 Exception code: 0xc0000409 Fault offset: 0x000000000022af80 Faulting process ID: 0xe1c Faulting application start time: 0x01d322a0ab52a155 Faulting application path: C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe Faulting module path: C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe Report ID: 460a8974-6d04-43a9-95ea-67735de869bb Faulting package full name: Faulting package-relative application ID:[/quote] aswSnx.SYS avast! Virtualization Driver http://support.avast.com/ aswSP.SYS avast! Self Protection Driver http://support.avast.com/ LGBusEnum.sys Logitech Keyboard http://www.logitech.com/en-us/suppor...oads/downloads MBfilt64.sys Realtek HiDefinition Audio driver (file labelled as Creative Audio Driver) - Was found in the latest Win8 version available from Realtek on 07Sep2013 http://www.realtek.com.tw/downloads/...&GetDown=false

Code: MBfilt MBfilt MBfilt Kernel Manual Running OK TRUE FALSE 4,096 12,288 0 31/07/2009 04:40:32 C:\Windows\system32\drivers\MBfilt64.sys 8,192[/quote] Code: Name [00000002] Intel(R) Dual Band Wireless-AC 8265Adapter Type Ethernet 802.3Product Type Intel(R) Dual Band Wireless-AC 8265Installed YesPNP Device ID PCI\VEN_8086&DEV_24FD&SUBSYS_00108086&REV_78\4&1E53108E&0&00E6Last Reset 01/09/2017 18:25Index 2Service Name Netwtw06IP Address Not AvailableIP Subnet Not AvailableDefault IP Gateway Not AvailableDHCP Enabled YesDHCP Server Not AvailableDHCP Lease Expires Not AvailableDHCP Lease Obtained Not AvailableMAC Address ‪00:28:F8:6C3:F6‬Memory Address 0xDC2FE000-0xDC2FFFFFIRQ Channel IRQ 4294967282Driver c:\windows\system32\drivers\netwtw06.sys (19.70.0.5, 7.23 MB (7,576,296 bytes), 23/05/2017 04:26)[/quote] Code: LGBusEnum Logitech Gaming Virtua Logitech Gaming Virtua Kernel Manual Running OK TRUE FALSE 5,248 7,552 0 13/06/2016 19:47:08 C:\Windows\system32\drivers\LGBusEnum.sys 1,664[/quote] Code: Event[8558]: Log Name: System Source: Microsoft-Windows-Ntfs Date: 2017-08-14T20:30:46.139 Event ID: 98 Task: N/A Level: Error Opcode: Info Keyword: N/A User: S-1-5-18 User Name: NT AUTHORITY\SYSTEM Computer: ClevoP670HS-G-Bravo Description: Volume C: (\Device\HarddiskVolume4) needs to be taken offline for a short time to perform a Spot Fix. Please run "CHKDSK /SPOTFIX" locally via the command line, or run "REPAIR-VOLUME <drive:>" locally or remotely via PowerShell.[/quote] Code: secnvme secnvme secnvme Kernel Boot Running OK TRUE FALSE 0 106,496 0 17/03/2017 06:03:34 C:\Windows\system32\drivers\secnvme.sys 4,096[/quote] Code: Name NVIDIA GeForce GTX 1070PNP Device ID PCI\VEN_10DE&DEV_1BE1&SUBSYS_67A31558&REV_A1\4&2C7DD164&0&0008 Adapter Type GeForce GTX 1070, NVIDIA compatible Adapter Description NVIDIA GeForce GTX 1070 Adapter RAM (1,048,576) bytes Installed Drivers C:\Windows\System32\DriverStore\FileRepository\nvcvi.inf_amd64_c51ef69b48de139f\nvldumdx.dll,C:\Windows\System32\DriverStore\FileRepository\nvcvi.inf_amd64_c51ef69b48de139f\nvldumdx.dll,C:\Windows\System32\DriverStore\FileRepository\nvcvi.inf_amd64_c51ef69b48de139f\nvldumdx.dll,C:\Windows\System32\DriverStore\FileRepository\nvcvi.inf_amd64_c51ef69b48de139f\nvldumdx.dll,C:\Windows\System32\DriverStore\FileRepository\nvcvi.inf_amd64_c51ef69b48de139f\nvldumd.dll,C:\Windows\System32\DriverStore\FileRepository\nvcvi.inf_amd64_c51ef69b48de139f\nvldumd.dll,C:\Windows\System32\DriverStore\FileRepository\nvcvi.inf_amd64_c51ef69b48de139f\nvldumd.dll,C:\Windows\System32\DriverStore\FileRepository\nvcvi.inf_amd64_c51ef69b48de139f\nvldumd.dll Driver Version 22.21.13.8541 INF File oem32.inf (Section094 section) Colour Planes Not Available Colour Table Entries 4294967296 Resolution 2560 x 1440 x 143 hertz Bits/Pixel 32 Memory Address 0xDB000000-0xDBFFFFFF Memory Address 0x90000000-0x9FFFFFFF Memory Address 0xA0000000-0xA1FFFFFF IRQ Channel IRQ 4294967283 Driver c:\windows\system32\driverstore\filerepository\nvcvi.inf_amd64_c51ef69b48de139f\nvlddmkm.sys (22.21.13.8541, 14.88 MB (15,600,248 bytes), 25/08/2017 21:16)[/quote]

 

I had no problem opening the 9/1 3:12AM dump. It indicates a problem with MBfilt64.sys.
Code: BugCheck A, {100001f88, 2, 0, fffff80180eee047} *** WARNING: Unable to verify timestamp for MBfilt64.sys *** ERROR: Module load completed but symbols could not be loaded for MBfilt64.sys Probably caused by : MBfilt64.sys ( MBfilt64+1817 )[/quote] Driver Description: Realtek HiDefinition Audio driver (file labelled as Creative Audio Driver)
Driver Update Site: http://www.realtek.com.tw/downloads/...&GetDown=false

See if there is an updated driver available.

Note: Verifier was active when this occurred:
Code: 3: kd> !verifier Verify Flags Level 0x00000610 STANDARD FLAGS: [X] (0x00000000) Automatic Checks [ ] (0x00000001) Special pool [ ] (0x00000002) Force IRQL checking [ ] (0x00000008) Pool tracking [X] (0x00000010) I/O verification [ ] (0x00000020) Deadlock detection [ ] (0x00000080) DMA checking [ ] (0x00000100) Security checks [ ] (0x00000800) Miscellaneous checks [ ] (0x00020000) DDI compliance checking ADDITIONAL FLAGS: [ ] (0x00000004) Randomized low resources simulation [X] (0x00000200) Force pending I/O requests [X] (0x00000400) IRP logging [ ] (0x00002000) Invariant MDL checking for stack [ ] (0x00004000) Invariant MDL checking for driver [ ] (0x00008000) Power framework delay fuzzing [ ] (0x00010000) Port/miniport interface checking [ ] (0x00040000) Systematic low resources simulation [ ] (0x00080000) DDI compliance checking (additional) [ ] (0x00200000) NDIS/WIFI verification [ ] (0x00800000) Kernel synchronization delay fuzzing [ ] (0x01000000) VM switch verification [ ] (0x02000000) Code integrity checks [X] Indicates flag is enabled Summary of All Verifier Statistics RaiseIrqls 0x95397 AcquireSpinLocks 0x4f73 Synch Executions 0x101 Trims 0x0 Pool Allocations Attempted 0x47090 Pool Allocations Succeeded 0x47090 Pool Allocations Succeeded SpecialPool 0x6ad Pool Allocations With NO TAG 0x54 Pool Allocations Failed 0x0 Current paged pool allocations 0x0 for 00000000 bytes Peak paged pool allocations 0x0 for 00000000 bytes Current nonpaged pool allocations 0x0 for 00000000 bytes Peak nonpaged pool allocations 0x0 for 00000000 bytes[/quote]

 

Thanks guys, I've been quite busy since but left Memtest on overnight and got to almost 8 passes (10 hours 20mins) with 0 errors but then I had to stop it as I needed the computer. Also ran HDTune and no errors.
Cant get the pics right now.

I've since had another BSOD last night when laptop was just idle and locked despite updating as many drivers as possible.
I haven't uninstalled Avast yet though, and Driver Verifier was off.
MEMORY_04_09_2017.zip - Google Drive

 

So I was able to swap my laptop with my brothers one which is identical (we just swapped out the SSDs) and the BSOD still happened, so it's not the laptop.

I've since done a clean install of Windows on a different SSD, but installed everything as I usually would and just got the same BSOD, so it MUST be a driver problem.

Intel display and wireless are up to date.
Time to uninstall Avast now.

Here's the new dumps and logs:

MEMORY_06_09_17.zip - Google Drive

 

There was 1 new bsod mini dump file and it had no new information.
Please confirm what you have done with each of the steps in post # 17.
Also which ones were done before and after the latest spontaneous bsod.

 

Finally solved, was caused by some of the Nvidia audio drivers.
Disabled all Nvidia related audio devices in Device Manger.

 

Run the beta version of the log collector using extract and post a zip into this thread:
log collector v2-beta08.zip