What is causing my computer to BSOD at random times?

Anonymous
2024-12-06T20:22:37+00:00

I have a custom built gaming PC that has recently been blue screening randomly and it seems completely unprompted. It happens when I'm in the middle of a game, or when I'm working on a Word document with Spotify playing, or when I'm browsing google chrome with nothing else open. I don't know what could be causing it.

The error I get is always "KMODE_EXCEPTION_NOT_HANDLED"

I recently had an issue where my computer would BSOD with the same error every time I woke it up from sleep mode. I got a warranty replacement for my RAM and that fixed that issue. These BSODs seem to be caused by something else. This also means that I find it highly unlikely that there's something wrong with my RAM.

Here is a link to the dump files I've gathered so far. I will add more as my computer continues to crash. It happens once every few hours, it seems.

https://drive.google.com/drive/folders/1_QM2imGRMNnQtNsdU8W98a16JUMTyj0d?usp=sharing

Does anybody know what could be causing this issue? Do the dump files point to anything specifically that could be causing the crashes?

Thank you

Windows for home | Windows 10 | Performance and system failures

Locked Question. This question was migrated from the Microsoft Support Community. You can vote on whether it's helpful, but you can't add comments or replies or follow the question.

0 comments

84 answers

Sort by: Oldest
Most helpful Newest Oldest
  1. Reza-Ameri 45,896 Reputation points Volunteer Moderator
    2024-12-06T21:05:47+00:00

    Open start and search for feedback and open the Feedback Hub app and report this issue and you may share dump files and other logs there. Open start and search for cmd and right click and run as administrator and then type the following command:

    sfc /scannow

    Press enter and let it runs and see what the result is?

    Was this answer helpful?

    0 comments
  2. Anonymous
    2024-12-06T21:19:21+00:00

    Hello Alex,

    The 3 crashes were all caused by the instruction "mov cr0,rax", which is part of the sequence:

    mov r12,cr0

    mov rax,r12

    btr rax,10h

    mov cr0,rax

    The odd thing is that this code is not in any driver - it appears to be code that has been copied into some allocated memory. This type of behaviour is definitely deprecated in Windows kernel-mode code.

    It is not currently clear if there is enough information in the dump file to identify the source of this code. I will let you know if I find anything.

    Gary

    Was this answer helpful?

    0 comments
  3. Anonymous
    2024-12-06T21:29:18+00:00

    Hi Reza,

    When I ran sfc /scannow I got this output:

    Windows Resource Protection found corrupt files and successfully repaired them.
    For online repairs, details are included in the CBS log file located at
    windir\Logs\CBS\CBS.log. For example C:\Windows\Logs\CBS\CBS.log. For offline
    repairs, details are included in the log file provided by the /OFFLOGFILE flag.

    This isn't the first time I've had to do that, and last time I ran it there were corrupt files then as well. Could there be something causing the file corruption?

    Thank you very much for your help

    Was this answer helpful?

    0 comments
  4. Anonymous
    2024-12-06T21:32:07+00:00

    Hi Gary,

    Thank you for your help. If there's any more information I can provide you please let me know.

    Was this answer helpful?

    0 comments
  5. Anonymous
    2024-12-06T21:59:12+00:00

    Hello Alex,

    You could try the following three commands and let me know if any matches are found:

    findstr /m E3.M..I..D9 \Windows\System32\*.sys

    findstr /s /m E3.M..I..D9 \Windows\System32\drivers\*.sys

    findstr /s /m E3.M..I..D9 \Windows\System32\DriverStore\FileRepository\*.sys

    E3.M..I..D9 is a pattern in the mystery instruction sequence. That sequence is not present on my system, so there should not be too many false positives.

    Gary

    Was this answer helpful?

    0 comments