Intermittent BSOD issues with different error each time, mostly related to driver

cyazuno

Prominent
Jul 31, 2017
2
0
510
Specs:
Dell Inspiron 5458
Intel i7-5500U
8 GB RAM

I've been dealing with this for quite some time now, and am at a loss for a solution. I've tried taking it to my school's IT, but they've not been much help at all. They simply performed scans and fresh installed the BIOS for my system. I've been having BSOD issues for the past couple of weeks, and though they are intermittent, they are frequent enough to be a nuisance. I've been recording the past several or so BSOD stop errors, and they are as follows:

IRQL NOT LESS OR EQUAL
IRQL NOT LESS OR EQUAL
DRIVER OVERRAN STACK BUFFER
BAD POOL HEADER
DPC WATCHDOG VIOLATION

There have been more, but I seem to have failed to record them. If this is useful information, I ran verifier.exe from the command prompt and when that happened I got consistent blue screens on startup until I reset that command. If any more information is necessary, I will gladly try to cooperate and provide it. I ask for some patience however, as I am both relatively new to this and on a college schedule. Thank you for your time.

UPDATE:
Thank you all for your assistance. I managed to get rid of the scvp virtual bus controller driver, and isolated the last and most recent minidump files and analyzed them with whocrashed. As of right now, it lists only the cyberlink driver as the problematic third party driver. Currently I'm uninstalling cyberlink completely, as I don't see a need for it especially if it is problematic, and apparently from the information from the Uninstall Programs interface, cyberlink was installed recently somewhere in the middle of July, and I have no recollection of this actually occurring. I'll post the most recent minidump files I have and the updated whocrashed information.

Crash Dump Analysis
--------------------------------------------------------------------------------

Crash dump directory: C:\WINDOWS\Minidump

Crash dumps are enabled on your computer.

On Tue 8/8/2017 1:24:18 PM your computer crashed
crash dump file: C:\WINDOWS\Minidump\080817-26781-01.dmp
This was probably caused by the following module: clvirtualdrive.sys (CLVirtualDrive+0x4D45)
Bugcheck code: 0xC4 (0x2000, 0xFFFFF80355A04D45, 0x0, 0x0)
Error: DRIVER_VERIFIER_DETECTED_VIOLATION
file path: C:\WINDOWS\system32\drivers\clvirtualdrive.sys
product: CyberLink Virtual Device Driver
company: CyberLink
description: It is a virtual device driver which could create multiple virtual devices and mount image files.
Bug check description: This is the general bug check code for fatal errors found by Driver Verifier.
This appears to be a typical software driver bug and is not likely to be caused by a hardware problem.
A third party driver was identified as the probable root cause of this system error. It is suggested you look for an update for the following driver: clvirtualdrive.sys (It is a virtual device driver which could create multiple virtual devices and mount image files., CyberLink).
Google query: CyberLink DRIVER_VERIFIER_DETECTED_VIOLATION



On Tue 8/8/2017 1:24:18 PM your computer crashed
crash dump file: C:\WINDOWS\memory.dmp
This was probably caused by the following module: clvirtualdrive.sys (CLVirtualDrive+0x4D45)
Bugcheck code: 0xC4 (0x2000, 0xFFFFF80355A04D45, 0x0, 0x0)
Error: DRIVER_VERIFIER_DETECTED_VIOLATION
file path: C:\WINDOWS\system32\drivers\clvirtualdrive.sys
product: CyberLink Virtual Device Driver
company: CyberLink
description: It is a virtual device driver which could create multiple virtual devices and mount image files.
Bug check description: This is the general bug check code for fatal errors found by Driver Verifier.
This appears to be a typical software driver bug and is not likely to be caused by a hardware problem.
A third party driver was identified as the probable root cause of this system error. It is suggested you look for an update for the following driver: clvirtualdrive.sys (It is a virtual device driver which could create multiple virtual devices and mount image files., CyberLink).
Google query: CyberLink DRIVER_VERIFIER_DETECTED_VIOLATION



On Mon 8/7/2017 8:58:10 PM your computer crashed
crash dump file: C:\WINDOWS\Minidump\080717-41218-01.dmp
This was probably caused by the following module: ntoskrnl.exe (nt+0x16C4C0)
Bugcheck code: 0x19 (0x3, 0xFFFFD7812B720940, 0x2ADEA6C0FFFFD781, 0xFFFFD7812B720940)
Error: BAD_POOL_HEADER
file path: C:\WINDOWS\system32\ntoskrnl.exe
product: Microsoft® Windows® Operating System
company: Microsoft Corporation
description: NT Kernel & System
Bug check description: This indicates that a pool header is corrupt.
This appears to be a typical software driver bug and is not likely to be caused by a hardware problem. This might be a case of memory corruption. More often memory corruption happens because of software errors in buggy drivers, not because of faulty RAM modules. This problem might also be caused because of overheating (thermal issue).
The crash took place in the Windows kernel. Possibly this problem is caused by another driver that cannot be identified at this time.



On Mon 8/7/2017 8:45:29 PM your computer crashed
crash dump file: C:\WINDOWS\Minidump\080717-39750-01.dmp
This was probably caused by the following module: ntoskrnl.exe (nt+0x16C4C0)
Bugcheck code: 0x18 (0x0, 0xFFFFC9006CF94A20, 0x2, 0xFFFFFFFF00005BFE)
Error: REFERENCE_BY_POINTER
file path: C:\WINDOWS\system32\ntoskrnl.exe
product: Microsoft® Windows® Operating System
company: Microsoft Corporation
description: NT Kernel & System
Bug check description: This indicates that the reference count of an object is illegal for the current state of the object.
This appears to be a typical software driver bug and is not likely to be caused by a hardware problem. This might be a case of memory corruption. More often memory corruption happens because of software errors in buggy drivers, not because of faulty RAM modules.
The crash took place in the Windows kernel. Possibly this problem is caused by another driver that cannot be identified at this time.



On Mon 8/7/2017 8:25:55 PM your computer crashed
crash dump file: C:\WINDOWS\Minidump\080717-41390-01.dmp
This was probably caused by the following module: ntoskrnl.exe (nt+0x16C4C0)
Bugcheck code: 0x1A (0x41791, 0xFFFF9380002DEA60, 0xFFFFE30C7D8F8F38, 0x2000040000408E3)
Error: MEMORY_MANAGEMENT
file path: C:\WINDOWS\system32\ntoskrnl.exe
product: Microsoft® Windows® Operating System
company: Microsoft Corporation
description: NT Kernel & System
Bug check description: This indicates that a severe memory management error occurred.
This might be a case of memory corruption. More often memory corruption happens because of software errors in buggy drivers, not because of faulty RAM modules. This problem might also be caused because of overheating (thermal issue).
The crash took place in the Windows kernel. Possibly this problem is caused by another driver that cannot be identified at this time.

Recent Minidumps


Again, all of this help is really appreciated; thanks a lot.
 
Solution
So cyberlink.sys is part of one of these: https://www.cyberlink.com/support/product-update.do?t=update&locale=en_US&lang=en_US - mostly DVD viewing/creating software?

scpvbus.sys = Scarlet.Crush Productions Scp Dual Shock 3 Virtual Bus Driver which I have seen cause problems in the past, I am unsure if there is a newer version

intelppm.sys = intel processor device driver

I would go here and click detect drivers, it should choose updates for your system: http://www.dell.com/support/home/us/en/04/product-support/product/inspiron-14-5458-laptop/drivers

I can't read dumps but someone will look at them for us.

Colif

Win 11 Master
Moderator
1. Can you download and run who crashed - it will give us a glimpse of the errors you getting and might help us solve them

Copy/paste summary in here and I see what I can do :)

2. Can you follow option one here
and then do this step below: Small memory dumps - Have Windows Create a Small Memory Dump (Minidump) on BSOD

that creates a file in c windows/minidump
copy that file to documents
upload the copy from documents to a cloud server and share the link here and someone with right software to read them will help you fix it :)
 

cyazuno

Prominent
Jul 31, 2017
2
0
510


Hello and thank you for the instructions! I apologize for the extended absence, I was away in Rome for a few days. I downloaded WhoCrashed and obtained the following information copied from the Crash Dump Analysis and Conclusion sections. Shortly after this is the link to my minidump files, saved in .rar format. If anymore information is necessary, please let me know. Thanks again for your time and help!

Here's the info:

Crash Dump Analysis
--------------------------------------------------------------------------------

Crash dump directory: C:\WINDOWS\Minidump

Crash dumps are enabled on your computer.

On Mon 8/7/2017 11:52:52 AM your computer crashed
crash dump file: C:\WINDOWS\Minidump\080717-35343-01.dmp
This was probably caused by the following module: ntoskrnl.exe (nt+0x16C4C0)
Bugcheck code: 0xF7 (0x413DA32B7268, 0x413DA32B726C, 0xFFFFBEC25CD48D93, 0x0)
Error: DRIVER_OVERRAN_STACK_BUFFER
file path: C:\WINDOWS\system32\ntoskrnl.exe
product: Microsoft® Windows® Operating System
company: Microsoft Corporation
description: NT Kernel & System
Bug check description: This indicates that a driver has overrun a stack-based buffer.
This appears to be a typical software driver bug and is not likely to be caused by a hardware problem.
The crash took place in the Windows kernel. Possibly this problem is caused by another driver that cannot be identified at this time.



On Mon 8/7/2017 11:52:52 AM your computer crashed
crash dump file: C:\WINDOWS\memory.dmp
This was probably caused by the following module: ntkrnlmp.exe (nt!KeBugCheckEx+0x0)
Bugcheck code: 0xF7 (0x413DA32B7268, 0x413DA32B726C, 0xFFFFBEC25CD48D93, 0x0)
Error: DRIVER_OVERRAN_STACK_BUFFER
Bug check description: This indicates that a driver has overrun a stack-based buffer.
This appears to be a typical software driver bug and is not likely to be caused by a hardware problem.
The crash took place in the Windows kernel. Possibly this problem is caused by another driver that cannot be identified at this time.



On Sun 8/6/2017 10:25:06 PM your computer crashed
crash dump file: C:\WINDOWS\Minidump\080617-50250-01.dmp
This was probably caused by the following module: win32kfull.sys (win32kfull+0x155324)
Bugcheck code: 0x197 (0x1, 0xFFFFBDCA808403D0, 0xFFFFBDCA80405D40, 0x1)
Error: CUSTOM_ERROR
file path: C:\WINDOWS\system32\win32kfull.sys
product: Microsoft® Windows® Operating System
company: Microsoft Corporation
description: Full/Desktop Win32k Kernel Driver
The crash took place in a standard Microsoft module. Your system configuration may be incorrect. Possibly this problem is caused by another driver on your system that cannot be identified at this time.



On Mon 7/31/2017 8:51:38 PM your computer crashed
crash dump file: C:\WINDOWS\Minidump\073117-33375-01.dmp
This was probably caused by the following module: intelppm.sys (0xFFFFF8035B751014)
Bugcheck code: 0xD1 (0x57, 0xFF, 0x0, 0xFFFFF8035B751014)
Error: DRIVER_IRQL_NOT_LESS_OR_EQUAL
file path: C:\WINDOWS\system32\drivers\intelppm.sys
product: Microsoft® Windows® Operating System
company: Microsoft Corporation
description: Processor Device Driver
Bug check description: This indicates that a kernel-mode driver attempted to access pageable memory at a process IRQL that was too high.
This appears to be a typical software driver bug and is not likely to be caused by a hardware problem.
The crash took place in a standard Microsoft module. Your system configuration may be incorrect. Possibly this problem is caused by another driver on your system that cannot be identified at this time.



On Mon 7/31/2017 7:34:21 PM your computer crashed
crash dump file: C:\WINDOWS\Minidump\073117-27421-01.dmp
This was probably caused by the following module: clvirtualdrive.sys (CLVirtualDrive+0x4D45)
Bugcheck code: 0xC4 (0x2000, 0xFFFFF8028F964D45, 0x0, 0x0)
Error: DRIVER_VERIFIER_DETECTED_VIOLATION
file path: C:\WINDOWS\system32\drivers\clvirtualdrive.sys
product: CyberLink Virtual Device Driver
company: CyberLink
description: It is a virtual device driver which could create multiple virtual devices and mount image files.
Bug check description: This is the general bug check code for fatal errors found by Driver Verifier.
This appears to be a typical software driver bug and is not likely to be caused by a hardware problem.
A third party driver was identified as the probable root cause of this system error. It is suggested you look for an update for the following driver: clvirtualdrive.sys (It is a virtual device driver which could create multiple virtual devices and mount image files., CyberLink).
Google query: CyberLink DRIVER_VERIFIER_DETECTED_VIOLATION





--------------------------------------------------------------------------------
Conclusion
--------------------------------------------------------------------------------

36 crash dumps have been found and analyzed. Only 5 are included in this report. 3 third party drivers have been identified to be causing system crashes on your computer. It is strongly suggested that you check for updates for these drivers on their company websites. Click on the links below to search with Google for updates for these drivers:

scpvbus.sys (Scp Virtual Bus Driver, Scarlet.Crush Productions)
clvirtualdrive.sys (It is a virtual device driver which could create multiple virtual devices and mount image files., CyberLink)
mpkslb9c75bdb.sys

Minidump Folder

 

Colif

Win 11 Master
Moderator
So cyberlink.sys is part of one of these: https://www.cyberlink.com/support/product-update.do?t=update&locale=en_US&lang=en_US - mostly DVD viewing/creating software?

scpvbus.sys = Scarlet.Crush Productions Scp Dual Shock 3 Virtual Bus Driver which I have seen cause problems in the past, I am unsure if there is a newer version

intelppm.sys = intel processor device driver

I would go here and click detect drivers, it should choose updates for your system: http://www.dell.com/support/home/us/en/04/product-support/product/inspiron-14-5458-laptop/drivers

I can't read dumps but someone will look at them for us.
 
Solution

gardenman

Splendid
Moderator
Hi, I reviewed only the last 10 (out of 35) dumps that were created. If needed I'll review the others later. I'm on a bit of a time crunch tonight. I got the following information from the debugger: https://pastebin.com/k0F9PYJ0

File: 080717-35343-01.dmp (Mon Aug 7 06:52:52 2017)
BugCheck: [DRIVER_OVERRAN_STACK_BUFFER (F7)] {413da32b7268, 413da32b726c, ffffbec25cd48d93, 0}
Probably caused by: ntkrnlmp.exe (Process: OfficeClickToRun.exe)

File: 080617-50250-01.dmp (Sun Aug 6 17:25:06 2017)
BugCheck 197, {1, ffffbdca808403d0, ffffbdca80405d40, 1}
Probably caused by: win32kfull.sys (Process: flux.exe)

File: 073117-33375-01.dmp (Mon Jul 31 15:51:38 2017)
BugCheck: [DRIVER_IRQL_NOT_LESS_OR_EQUAL (D1)] {57, ff, 0, fffff8035b751014}
Probably caused by: hardware (Process: System)

File: 073117-27421-01.dmp (Mon Jul 31 14:34:21 2017)
BugCheck: [DRIVER_VERIFIER_DETECTED_VIOLATION (C4)] {2000, fffff8028f964d45, 0, 0}
Warning: Unable to verify timestamp for: CLVirtualDrive.sys
Probably caused by: CLVirtualDrive.sys (Process: System)

File: 073117-27234-01.dmp (Mon Jul 31 11:50:28 2017)
BugCheck: [SYSTEM_THREAD_EXCEPTION_NOT_HANDLED_M (1000007E)] {ffffffffc0000005, fffff800ad6326df, ffffa601899494f8, ffffa60189948d40}
Probably caused by: memory_corruption (Process: System)

File: 073117-28859-01.dmp (Mon Jul 31 11:04:45 2017)
BugCheck: [KERNEL_SECURITY_CHECK_FAILURE (139)] {1d, ffffb7018056d780, ffffb7018056d6d8, 0}
Probably caused by: ntkrnlmp.exe (Process: System)

File: 073117-29937-01.dmp (Mon Jul 31 10:51:50 2017)
BugCheck: [DRIVER_VERIFIER_DETECTED_VIOLATION (C4)] {2000, fffff80237f3a25c, 0, 444c534b}
Warning: Unable to verify timestamp for: MpKslb9c75bdb.sys
Probably caused by: memory_corruption (Process: System)

File: 073117-33765-01.dmp (Mon Jul 31 10:11:44 2017)
BugCheck: [BAD_POOL_HEADER (19)] {e, ffffb0881917f440, a08d74b1757ffb48, a08d74b1757ffb4c}
Probably caused by: Npfs.SYS (Process: chrome.exe)

File: 073117-36828-01.dmp (Mon Jul 31 08:23:19 2017)
BugCheck: [DPC_WATCHDOG_VIOLATION (133)] {0, 501, 500, fffff801e8bee348}
Warning: Unable to verify timestamp for: Netwbw02.sys
Probably caused by: memory_corruption (Process: steamwebhelper.exe)

File: 072717-30125-01.dmp (Thu Jul 27 09:18:48 2017)
BugCheck: [SYSTEM_SERVICE_EXCEPTION (3B)] {c0000005, 7ff8aa58e490, ffffa20043d05d10, 0}
Warning: Unable to verify timestamp for: win32kfull.sys
Probably caused by: memory_corruption (Process: csrss.exe)
I can't help you with this. Wait for someone else to reply. Good luck.
 

Colif

Win 11 Master
Moderator
Old drivers that may cause problems, some previously mentioned above or in errors. Upgrade or remove where possible.

npf.sys (dated Thu Feb 28 2013) - NetGroup Packet Filter driver, a component of WinPCap by Riverbed
CLVirtualDrive.sys (dated Mon Nov 11 2013) - Part of cyberlink
usb3Hub.sys (Dated Tue Oct 7 2014) - USB 3.0 Prototype Hub Driver - most likely from Intel WLAN or WiDi
ScpVBus.sys (dated Sun May 5 2013) - Scarlet crush (See if newer version)
rt640x64.sys (dated Tue May 5 2015) - Realtek NICDRV 8169 PCIe GBE Family Controller driver
TeeDriverW8x64.sys (dated Tue Jul 7 2015) - Intel® Management Engine Interface (may not be a newer version)
iaLPSSi_I2C.sys (Dated Tue Feb 24 2015) - Intel(R) Serial IO I2C Controller Driver

soon, i won't have a role here, gardenmans pastebin will do my job for me
 

Latest posts