question

MinghaoFu-1981 avatar image
0 Votes"
MinghaoFu-1981 asked ·

Windows10 blue screen problem, hope to help solve it.

onedrive.live.com


windows-10-setup
10 |1000 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

EckiS avatar image
0 Votes"
EckiS answered ·

that was a KERNEL_MODE_HEAP_CORRUPTION, no 3rd party drivers on the call stack.

you should try to uninstall this 3rd party software and try to reproduce. (some chinese antivirus?)
C:\Windows\system32\drivers\AliPaladin64.sys Fri Sep 7 04:14:27 2018
C:\Windows\System32\drivers\Tppwr64v.sys Thu Feb 16 05:57:36 2017
C:\Windows\system32\drivers\TsQBDrv.sys Thu Nov 22 05:27:13 2018
C:\Windows\system32\drivers\xlwfp.sys Fri Mar 23 03:36:33 2018

Multiple instances of the Lenovo Solution Center drivers were unloaded, so you could uninstall that, too.
If the crashes continue: enable driver verifier.

· 2 ·
10 |1000 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Thank you very much for your suggestions, but my computer is a brand new computer produced in July 2019. Why does the record show the records of 2017 and 2018?

0 Votes 0 ·

These three drivers are rogue applications from three Chinese companies. I understand that they will always occupy memory in the background (even if the application is closed). I have found a way to uninstall them through the registry. I hope to avoid the next blue screen. Thank you very much
Help me analyze the dump file, you helped me find the key point of this failure.

0 Votes 0 ·
luanvieiradearaujo avatar image
0 Votes"
luanvieiradearaujo answered ·

Hi MinghaoFu-1981

I've worked as Windows Support Engineer on behalf of Microsoft and I can help analyzing the dump file generated during the blue screen to try to find its root cause.

The default location of the dump file is %SystemRoot%memory.dmp. Can you check if the file is there?

If so, please upload do OneDrive so I can download and proceed.

Thanks!

· 7 ·
10 |1000 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Please see the attached pdf.

I noticed that you are using Windows 18362 (1903).
There are many known issues that can cause this behavior.
To avoid this known issues, I suggest updating to 18363 (1909) and applying Windows Update to continue.

Can you follow this steps and verify if the issue persists?

Thanks

8511-bugcheck-analysis.pdf


0 Votes 0 ·
bugcheck-analysis.pdf (429.2 KiB)

8503-%E5%BE%AE%E4%BF%A1%E6%88%AA%E5%9B%BE-20200520071720.png




My computer has been updated in 1909. In the past year, my computer has shown a blue screen twice. The problem you helped me analyze is heap. How can I prevent this from happening again?
Thank you very much for your help

0 Votes 0 ·
Show more comments
RAJUMSCMATHEMATICS avatar image
0 Votes"
RAJUMSCMATHEMATICS answered ·

Share the memory dump files

· 1 ·
10 |1000 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

EckiS avatar image
0 Votes"
EckiS answered ·

that are the dates of these drivers.

·
10 |1000 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.