BSOD: what is ntkrnlmp.exe (nt!kebugcheckex+0x0) and why is it crashing my windows 10 64-bit lenovo

Been getting a heap of BSOD over the last few months. Each time I think I've identified it, it comes back.

What else can I try? Computer isn't that old. Thx

On Thu 02-Feb-17 17:58:48 your computer crashed
crash dump file: C:\WINDOWS\memory.dmp
This was probably caused by the following module:
ntkrnlmp.exe (nt!KeBugCheckEx+0x0)
Bugcheck code: 0x154 (0xFFFFD08E85DF2000, 0xFFFFA681B9BA2FF0, 0x2, 0x0)
Error:
CUSTOM_ERROR
The crash took place in the Windows kernel. Possibly this problem is caused by another driver that cannot be identified at this time.



On Tue 31-Jan-17 23:02:44 your computer crashed
crash dump file: C:\WINDOWS\Minidump\020117-42578-01.dmp
This was probably caused by the following module: Unknown ()
Bugcheck code: 0x0 (0x0, 0x0, 0x0, 0x0)
Error: CUSTOM_ERROR
A third party driver was identified as the probable root cause of this system error.
Google query: CUSTOM_ERROR



On Fri 27-Jan-17 20:39:23 your computer crashed
crash dump file: C:\WINDOWS\Minidump\012717-34390-01.dmp
This was probably caused by the following module: ntoskrnl.exe (nt+0x14A6F0)
Bugcheck code: 0xEF (0xFFFFDD07486AF080, 0x0, 0x0, 0x0)
Error: CRITICAL_PROCESS_DIED
file path: C:\WINDOWS\system32\ntoskrnl.exe
product: Microsoft® Windows® Operating System
company: Microsoft Corporation
description: NT Kernel & System
Bug check description: This indicates that a critical system process died.
There is a possibility this problem was caused by a virus or other malware.
The crash took place in the Windows kernel. Possibly this problem is caused by another driver that cannot be identified at this time.

* Please try a lower page number.

* Please enter only numbers.

* Please try a lower page number.

* Please enter only numbers.

Please upload no more than three copies of your dump files that were created during the last 14 days as shared files to your OneDrive with a link here.

 

Dump files are usually found at c:\windows\minidump. You may need to change your settings in Windows to be able to see the files. To show hidden files select the keyboard shortcut Win+S, type File Explorer Options in the Search box and click Folder Options in the drop down menu. Select View, Advanced Settings and verify that the box before "Show hidden files and folders" is checked and "Hide protected operating system files" is unchecked. You may need to scroll down to see the second item. You should also make certain that the box before "Hide extensions for known file types" is not checked.

 

What is your computer make and model? If not a branded computer what is your motherboard make and model?

 

Please download and run Driver View and upload a copy of the report it produces to your OneDrive. To get a report on all drivers select Edit, Select All followed by File, Save Selected Items. Text file format please, HTML files are less easy to work with.

http://www.nirsoft.net/utils/driverview.html

 

Please provide a copy of your System Information file. To access your System Information file select the keyboard shortcut Win+R, type msinfo32 and press the ENTER key. Select File, Export and give the file a name noting where it is located. Files in the txt file format are preferred. Do not place the cursor within the body of the report before exporting the file. The system creates a new System Information file each time system information is accessed. You need to allow a minute or two for the file to be fully populated before exporting a copy. Please upload the file to your OneDrive, share with everyone and post a link here.

 

For help with OneDrive see paragraph 9.3:

http://www.gerryscomputertips.co.uk/MicrosoftCommunity1.htm

 

Gerry
Stourport-on-Severn, Worcestershire, England
Enquire Plan Execute

Was this reply helpful?

Sorry this didn't help.

Great! Thanks for your feedback.

How satisfied are you with this reply?

Thanks for your feedback, it helps us improve the site.

How satisfied are you with this reply?

Thanks for your feedback.

Thanks Gerry. I'm working with a Lenovo ThinkPad W540.

Here's the OneDrive info: https://1drv.ms/f/s!AsmUUyWu99q9gSDRtqGU3NewQjIr

Appreciate your help!

Was this reply helpful?

Sorry this didn't help.

Great! Thanks for your feedback.

How satisfied are you with this reply?

Thanks for your feedback, it helps us improve the site.

How satisfied are you with this reply?

Thanks for your feedback.

Update the Lenovo Power Management driver to version 1.67.12.18:

https://download.lenovo.com/pccbbs/mobiles/n1mku52w.exe

 

Update the Realtek High Definition Audio driver to version 6.0.1.7746:

https://download.lenovo.com/pccbbs/mobiles/n10a513w.exe

 

Update the Intel(R) Management Engine Interface to version 11.0.0.63:

https://download.lenovo.com/ibmdl/pub/pc/pccbbs/mobiles/grra07ww.exe

 

Update the Intel Chipset driver to version 10.1.1.9:

https://download.lenovo.com/pccbbs/mobiles/n17ha03w.exe

 

Update the Intel Rapid Storage Technology driver to version 14.5.0.1081:

https://download.lenovo.com/ibmdl/pub/pc/pccbbs/mobiles/gmit07ww.exe

 

Update the NVIDIA Quadro K1100M driver to version 376.62:

http://www.nvidia.com/content/DriverDownload-March2009/confirmation.php?url=/Windows/Quadro_Certified/376.62/376.62-quadro-grid-desktop-notebook-win10-64bit-international-whql.exe&lang=us&type=Quadro

Please restart your computer and allow 20 minutes for the system to run before uploading information required to help me investigate your problem. When examining Event Viewer log files many, not all, problems show in the period immediately after the computer has been booted.

 

Please provide an updated copy of your System Information file. To access your System Information file select the keyboard shortcut Win+R, type msinfo32 and click OK . Place the cursor on System Summary. Select File, Export and give the file a name noting where it is located. Click Save. Files in the txt file format are preferred.Do not place the cursor within the body of the report before exporting the file.The system creates a new System Information file each time system information is accessed. You need to allow a minute or two for the file to be fully populated before exporting a copy. Please upload the file to your OneDrive, share with everyone and post a link here. If the report is in a language other than English, please state the language.

 

Please upload to your OneDrive and share with everyone a copy of your System log file from your Event Viewer and post a link here. Please remove any earlier copies of the logs from your OneDrive.

 

To access the System log select the keyboard shortcut Win+R, type eventvwr.msc and press the ENTER key. From the list in the left side of the window select Windows Logs and System. Place the cursor on System, select Action from the Menu and Save All Events as (the default evtx file type) and give the file a name. Do not provide filtered files. Do not place the cursor in the list of reports before selecting Action from the menu. Do not clear logs whilst you have a continuing problem.

Gerry
Stourport-on-Severn, Worcestershire, England
Enquire Plan Execute

Was this reply helpful?

Sorry this didn't help.

Great! Thanks for your feedback.

How satisfied are you with this reply?

Thanks for your feedback, it helps us improve the site.

How satisfied are you with this reply?

Thanks for your feedback.

Ta. Here's the link: https://1drv.ms/f/s!AsmUUyWu99q9gSDRtqGU3NewQjIr

Is there a setting I need to invoke to make sure these updates are a part of the routine updates?

Was this reply helpful?

Sorry this didn't help.

Great! Thanks for your feedback.

How satisfied are you with this reply?

Thanks for your feedback, it helps us improve the site.

How satisfied are you with this reply?

Thanks for your feedback.

Please upload to your OneDrive and share with everyone a copy of your System log file from your Event Viewer and post a link here. Please remove any earlier copies of the logs from your OneDrive.

 

To access the System log select the keyboard shortcut Win+R, type eventvwr.msc and press the ENTER key. From the list in the left side of the window select Windows Logs and System. Place the cursor on System, select Action from the Menu and Save All Events as (the default evtx file type) and give the file a name. Do not provide filtered files. Do not place the cursor in the list of reports before selecting Action from the menu. Do not clear logs whilst you have a continuing problem.

Gerry
Stourport-on-Severn, Worcestershire, England
Enquire Plan Execute

Was this reply helpful?

Sorry this didn't help.

Great! Thanks for your feedback.

How satisfied are you with this reply?

Thanks for your feedback, it helps us improve the site.

How satisfied are you with this reply?

Thanks for your feedback.

System log file added. Thanks

https://1drv.ms/f/s!AsmUUyWu99q9gSDRtqGU3NewQjIr

Was this reply helpful?

Sorry this didn't help.

Great! Thanks for your feedback.

How satisfied are you with this reply?

Thanks for your feedback, it helps us improve the site.

How satisfied are you with this reply?

Thanks for your feedback.

These crashes were related to memory corruption (probably caused by a driver).

Please run these two tests to verify your memory and find which driver is causing the problem.  Please run verifier first.  You do not need to run memtest yet unless verifier does not find the cause, or you want to.



If you are over-clocking anything reset to default before running these tests.
In other words STOP!!!  If you do not know what this means you probably are not


1-Driver verifier (for complete directions see our wiki here)
answers.microsoft.com/en-us/windows/wiki/windows_other-system/driver-verifier-tracking-down-a-mis-behaving/f5cb4faf-556b-4b6d-95b3-c48669e4c983

2-Memtest. (You can read more about running memtest here)
answers.microsoft.com/en-us/windows/wiki/windows_other-system/bsod-memory-problems-test-easily-and-completely/21c3f63f-f570-4522-b2ef-ecc7b7ff6461
Cat herder
Windows Insider MVP
MVP-Windows and Devices for IT
http://www.zigzag3143.com/

Was this reply helpful?

Sorry this didn't help.

Great! Thanks for your feedback.

How satisfied are you with this reply?

Thanks for your feedback, it helps us improve the site.

How satisfied are you with this reply?

Thanks for your feedback.

Thanks ZigZag. Driver Verifier run and mini memory dump uploaded to the drive (only one new one that has content). BSOD identified ApsHM64.sys as the failure point. Have included latest msinfo and System log

https://1drv.ms/f/s!AsmUUyWu99q9gSDRtqGU3NewQjIr

Memtest not run

Was this reply helpful?

Sorry this didn't help.

Great! Thanks for your feedback.

How satisfied are you with this reply?

Thanks for your feedback, it helps us improve the site.

How satisfied are you with this reply?

Thanks for your feedback.

ApsHM64.sys is the Lenovo Active Protection System.

 

Update the Lenovo Active Protection System to version 1.82.0.3:

https://download.lenovo.com/pccbbs/mobiles/n1msk03w.exe

 

Readme:

https://download.lenovo.com/pccbbs/mobiles/n1msk03w.txt

Gerry
Stourport-on-Severn, Worcestershire, England
Enquire Plan Execute

Was this reply helpful?

Sorry this didn't help.

Great! Thanks for your feedback.

How satisfied are you with this reply?

Thanks for your feedback, it helps us improve the site.

How satisfied are you with this reply?

Thanks for your feedback.

Two repeating errors every time the computer is booted.

 

Select the keyboard shortcut Win+S, type Services, click View local services in the drop down list and press the ENTER key. Locate NetTcpPortSharing service in the list. Check that it has started and that the StartUp type is Automatic. If it is not set to Automatic right click and select Properties, General tab. There is a box after StartUp type. The options are available on a drop down by clicking on the arrow down to the right of the box. Make the change and click on Apply and OK. Restart the computer and check whether it has started.

 

Log Name:      System
Source:        Server
Date:          04/02/2017 05:05:34
Event ID:      2511
Level:         Warning
Description:
The server service was unable to recreate the share My Apps because the directory C:\ProgramData\BlueStacks\UserData\Library\My Apps no longer exists.  Please run "net share My Apps /delete" to delete the share, or recreate the directory C:\ProgramData\BlueStacks\UserData\Library\My Apps.

 

Select the keyboard shortcut Win+R, type "net share My Apps /delete" to delete the share and press the ENTER key, or enter File Explorerer and recreate the directory C:\ProgramData\BlueStacks\UserData\Library\My Apps.

Gerry
Stourport-on-Severn, Worcestershire, England
Enquire Plan Execute

Was this reply helpful?

Sorry this didn't help.

Great! Thanks for your feedback.

How satisfied are you with this reply?

Thanks for your feedback, it helps us improve the site.

How satisfied are you with this reply?

Thanks for your feedback.

* Please try a lower page number.

* Please enter only numbers.

* Please try a lower page number.

* Please enter only numbers.

 
 

Question Info


Last updated March 20, 2024 Views 12,437 Applies to: