Multiple errors, system hangs and crashes in Win10

Tim Bateson - He / Him 1 Reputation point
2022-02-12T04:13:57.047+00:00

My computer is 18 months old. About 9 months ago I had multiple incidents where the computer would hang and simply sit. No error messages. No warnings. Nothing. I would manually power down and checking the event viewer, the culprit seemd to be the drivers that supported my Razer headset. Removing those did not help though and evetually, I ran a full system restore and restored the computer to factory settings.
Things ran well untril last week when the crashes began happening again and though I couldn't ID any one issue in the event viewer, I eventually had to restore factory settings again.
Well, this morning, the crashes have started again.
I have run the hardware diagnostic (with zero issues identified).
The errors that appear most often seem to relate to KNDBWM.exe but there are multiple entires like this -

Warning 12/02/2022 2:43:39 PM DistributedCOM 10016 None
Warning 12/02/2022 2:43:38 PM DistributedCOM 10016 None
Warning 12/02/2022 2:40:49 PM DistributedCOM 10016 None

Log Name: System
Source: Microsoft-Windows-DistributedCOM
Date: 12/02/2022 2:43:39 PM
Event ID: 10016
Task Category: None
Level: Warning
Keywords: Classic
User: DESKTOP-MCPBJKB\timot
Computer: DESKTOP-MCPBJKB
Description:
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
and APPID
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
to the user DESKTOP-MCPBJKB\timot SID (S-1-5-21-1235384014-1626977555-2353073450-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-DistributedCOM" Guid="{1B562E86-B7AA-4131-BADC-B6F3A001407E}" EventSourceName="DCOM" />
<EventID Qualifiers="0">10016</EventID>
<Version>0</Version>
<Level>3</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x8080000000000000</Keywords>
<TimeCreated SystemTime="2022-02-12T03:43:39.7460043Z" />
<EventRecordID>4167</EventRecordID>
<Correlation ActivityID="{fc94b5a8-3c68-477d-afbb-b20ec8330055}" />
<Execution ProcessID="88" ThreadID="2952" />
<Channel>System</Channel>
<Computer>DESKTOP-MCPBJKB</Computer>
<Security UserID="S-1-5-21-1235384014-1626977555-2353073450-1001" />
</System>
<EventData>
<Data Name="param1">application-specific</Data>
<Data Name="param2">Local</Data>
<Data Name="param3">Activation</Data>
<Data Name="param4">{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}</Data>
<Data Name="param5">{15C20B67-12E7-4BB6-92BB-7AFF07997402}</Data>
<Data Name="param6">DESKTOP-MCPBJKB</Data>
<Data Name="param7">timot</Data>
<Data Name="param8">S-1-5-21-1235384014-1626977555-2353073450-1001</Data>
<Data Name="param9">LocalHost (Using LRPC)</Data>
<Data Name="param10">Unavailable</Data>
<Data Name="param11">Unavailable</Data>
</EventData>
</Event>

Log Name: System
Source: Microsoft-Windows-DistributedCOM
Date: 12/02/2022 2:43:38 PM
Event ID: 10016
Task Category: None
Level: Warning
Keywords: Classic
User: DESKTOP-MCPBJKB\timot
Computer: DESKTOP-MCPBJKB
Description:
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
and APPID
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
to the user DESKTOP-MCPBJKB\timot SID (S-1-5-21-1235384014-1626977555-2353073450-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-DistributedCOM" Guid="{1B562E86-B7AA-4131-BADC-B6F3A001407E}" EventSourceName="DCOM" />
<EventID Qualifiers="0">10016</EventID>
<Version>0</Version>
<Level>3</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x8080000000000000</Keywords>
<TimeCreated SystemTime="2022-02-12T03:43:38.6136158Z" />
<EventRecordID>4166</EventRecordID>
<Correlation ActivityID="{ffc44207-e41c-49d9-baae-a3be7ecd23eb}" />
<Execution ProcessID="88" ThreadID="6792" />
<Channel>System</Channel>
<Computer>DESKTOP-MCPBJKB</Computer>
<Security UserID="S-1-5-21-1235384014-1626977555-2353073450-1001" />
</System>
<EventData>
<Data Name="param1">application-specific</Data>
<Data Name="param2">Local</Data>
<Data Name="param3">Activation</Data>
<Data Name="param4">{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}</Data>
<Data Name="param5">{15C20B67-12E7-4BB6-92BB-7AFF07997402}</Data>
<Data Name="param6">DESKTOP-MCPBJKB</Data>
<Data Name="param7">timot</Data>
<Data Name="param8">S-1-5-21-1235384014-1626977555-2353073450-1001</Data>
<Data Name="param9">LocalHost (Using LRPC)</Data>
<Data Name="param10">Unavailable</Data>
<Data Name="param11">Unavailable</Data>
</EventData>
</Event>

Log Name: System
Source: Microsoft-Windows-DistributedCOM
Date: 12/02/2022 2:40:49 PM
Event ID: 10016
Task Category: None
Level: Warning
Keywords: Classic
User: DESKTOP-MCPBJKB\timot
Computer: DESKTOP-MCPBJKB
Description:
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
and APPID
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
to the user DESKTOP-MCPBJKB\timot SID (S-1-5-21-1235384014-1626977555-2353073450-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-DistributedCOM" Guid="{1B562E86-B7AA-4131-BADC-B6F3A001407E}" EventSourceName="DCOM" />
<EventID Qualifiers="0">10016</EventID>
<Version>0</Version>
<Level>3</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x8080000000000000</Keywords>
<TimeCreated SystemTime="2022-02-12T03:40:49.0960769Z" />
<EventRecordID>4165</EventRecordID>
<Correlation ActivityID="{b5c526ef-3589-4c09-a2c3-376aaed6a025}" />
<Execution ProcessID="88" ThreadID="2588" />
<Channel>System</Channel>
<Computer>DESKTOP-MCPBJKB</Computer>
<Security UserID="S-1-5-21-1235384014-1626977555-2353073450-1001" />
</System>
<EventData>
<Data Name="param1">application-specific</Data>
<Data Name="param2">Local</Data>
<Data Name="param3">Activation</Data>
<Data Name="param4">{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}</Data>
<Data Name="param5">{15C20B67-12E7-4BB6-92BB-7AFF07997402}</Data>
<Data Name="param6">DESKTOP-MCPBJKB</Data>
<Data Name="param7">timot</Data>
<Data Name="param8">S-1-5-21-1235384014-1626977555-2353073450-1001</Data>
<Data Name="param9">LocalHost (Using LRPC)</Data>
<Data Name="param10">Unavailable</Data>
<Data Name="param11">Unavailable</Data>
</EventData>
</Event>

I don't really know what other info to provide but I am hoping that someone might have some idea of what is happening and could offer some suggestion so I don't experience another cascade of failure leading to another reimaging of the HD.

Thanks!

Windows 10
Windows 10
A Microsoft operating system that runs on personal computers and tablets.
10,705 questions
0 comments

2 answers

Sort by: Most helpful
Most helpful Newest Oldest
  1. EckiS 821 Reputation points
    2022-02-12T05:22:24.85+00:00

    the events you found can be ignored. They are (sadly) normal, but have no negative effect
    and are not cause by KNDBWM.

    KNDBWM,exe is from "Killer" network drivers: they are known to be buggy
    jut google "killer network bug or problem".

    0 comments
  2. Docs 15,146 Reputation points
    2022-02-12T05:57:19.78+00:00

    Please run the V2 log collector and post a share link into this thread using one drive, drop box, or google drive:

    https://www.tenforums.com/bsod-crashes-debugging/2198-bsod-posting-instructions.html

    .
    .
    .
    .
    .

    Please remember to vote and to mark the replies as answers if they help.

    On the bottom of each post there is:

    Propose as answer = answered the question

    On the left side of each post there is /\ with a number: click = a helpful post
    .
    .
    .
    .
    .

    0 comments