locked
Kernel-Power failure RRS feed

  • Question

  • Can someone please help with below error which is causing multiple reboot and BSOD:

    The system has rebooted without cleanly shutting down first. This error could be caused if the system stopped responding, crashed, or lost power unexpectedly.

    - System
    - Provider
    [ Name] Microsoft-Windows-Kernel-Power
    [ Guid] {331C3B3A-2005-44C2-AC5E-77220C37D6B4}
    EventID 41
    Version 2
    Level 1
    Task 63
    Opcode 0
    Keywords 0x8000000000000002
    - TimeCreated
    [ SystemTime] 2018-01-29T01:26:08.062816800Z
    EventRecordID 86931778
    Correlation
    - Execution
    [ ProcessID] 4
    [ ThreadID] 8
    Channel System
    Computer fahkdcwd01.FACTORIAL.LOCAL
    - Security
    [ UserID] S-1-5-18
    - EventData
    BugcheckCode 209
    BugcheckParameter1 0xfffffa8014a40000
    BugcheckParameter2 0x2
    BugcheckParameter3 0x0
    BugcheckParameter4 0xfffff8800147e913
    SleepInProgress false
    PowerButtonTimestamp 0

    Problem signature:

      Problem Event Name:                        BlueScreen

      OS Version:                                          6.1.7601.2.1.0.274.10

      Locale ID:                                             1033

    Additional information about the problem:

      BCCode:                                               d1

      BCP1:                                                    FFFFFA80142CB000

      BCP2:                                                    0000000000000002

      BCP3:                                                    0000000000000000

      BCP4:                                                    FFFFF88003C61913

      OS Version:                                          6_1_7601

      Service Pack:                                       1_0

      Product:                                               274_2

    Files that help describe the problem:

      C:\Windows\Minidump\012618-39702-01.dmp

      C:\Users\Administrator\AppData\Local\Temp\2\WER-35304960-0.sysdata.xml

    Monday, January 29, 2018 11:25 AM

Answers

  • The memory dump was posted multiple times.  It does not have the information needed to analyze the computer problems.  It would provide an incomplete answer.  For a comprehensive answer these files are needed:

    What is needed now are these files:

    msinfo32

    dxdiag

    mini dumps

    hosts

    install

    uninstall

    services

    drivers

    event viewer

    etc.

    This administrative prompt command should collect all of the above files and place them on the desktop.

    Once on the desktop > zip > place a one drive or drop box share link into the thread

    copy %SystemRoot%\minidump\*.dmp "%USERPROFILE%\Desktop\"&dxdiag /t %Temp%\dxdiag.txt&copy %Temp%\dxdiag.txt "%USERPROFILE%\Desktop\SFdebugFiles\"&type %SystemRoot%\System32\drivers\etc\hosts >> "%USERPROFILE%\Desktop\hosts.txt"&systeminfo > "%USERPROFILE%\Desktop\systeminfo.txt"&driverquery /v > "%USERPROFILE%\Desktop\drivers.txt" &msinfo32 /nfo "%USERPROFILE%\Desktop\msinfo32.nfo"&wevtutil qe System /f:text > "%USERPROFILE%\Desktop\eventlog.txt"&reg export HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall "%USERPROFILE%\Desktop\uninstall.txt"&reg export "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components" "%USERPROFILE%\Desktop\installed.txt"&net start > "%USERPROFILE%\Desktop\services.txt"&REM wmic startup list full /format:htable >"%USERPROFILE%\Desktop\startup.html"&wmic STARTUP GET Caption, Command, User >"%USERPROFILE%\Desktop\startup.txt"

    Thursday, February 1, 2018 9:22 AM
  • Hi,

    Upgrade Symantec and see if the bsod will happen.

    If the problem still exist, please upload the new dump file.

    Thanks for your time. 


    Please remember to mark the replies as answers if they help.
    If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com.

    Friday, February 2, 2018 8:16 AM

All replies

  • Make sure send this report.

    Also submit this issue through Feedback Hub app.

    Monday, January 29, 2018 4:27 PM
  • To evaluate the BSOD please post logs for troubleshooting.

    Using administrative command prompt copy and paste this whole command:

    Make sure the default language is English so that the logs can be scanned and read.

    https://www.tenforums.com/tutorials/3813-language-add-remove-change-windows-10-a.html

    The command will automatically collect the computer files and place them on the desktop.

    Then use one drive or drop box to place share links into the the thread for troubleshooting.

    https://support.office.com/en-us/article/Share-OneDrive-files-and-folders-9fcc2f7d-de0c-4cec-93b0-a82024800c07

    It will automatically collect these files:  msinfo32, dxdiag, mini dumps, drivers hosts, install, uninstall, services, startup, event viewer files, etc.

    Open administrative command prompt and copy and paste the whole command:

    copy %SystemRoot%\minidump\*.dmp "%USERPROFILE%\Desktop\"&dxdiag /t %Temp%\dxdiag.txt&copy %Temp%\dxdiag.txt "%USERPROFILE%\Desktop\SFdebugFiles\"&type %SystemRoot%\System32\drivers\etc\hosts >> "%USERPROFILE%\Desktop\hosts.txt"&systeminfo > "%USERPROFILE%\Desktop\systeminfo.txt"&driverquery /v > "%USERPROFILE%\Desktop\drivers.txt" &msinfo32 /nfo "%USERPROFILE%\Desktop\msinfo32.nfo"&wevtutil qe System /f:text > "%USERPROFILE%\Desktop\eventlog.txt"&reg export HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall "%USERPROFILE%\Desktop\uninstall.txt"&reg export "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components" "%USERPROFILE%\Desktop\installed.txt"&net start > "%USERPROFILE%\Desktop\services.txt"&REM wmic startup list full /format:htable >"%USERPROFILE%\Desktop\startup.html"&wmic STARTUP GET Caption, Command, User >"%USERPROFILE%\Desktop\startup.txt"

    There is 1 file for you to find manually:  memory dump file:

    C:\Windows\MEMORY.DMP

    Use file explorer > this PC > local C: drive > right upper corner search enter each of the above to find results.

    Sometimes the dxdiag file needs to be found and saved manually:  In the left lower corner search type:  dxdiag > When the DirectX Diagnostic Tool opens click on the next page button so that each tab is opened > click on save all information > save to desktop > post one drive or drop box share link into the thread

    Monday, January 29, 2018 4:32 PM
  • Hi,

    Please refer to :https://support.microsoft.com/en-sg/help/2028504/windows-kernel-event-id-41-error-the-system-has-rebooted-without-clean

    In addition, you can upload the dump files to a network drive and share the link here, we can help you to do more research.


    Please remember to mark the replies as answers if they help.
    If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com.

    Tuesday, January 30, 2018 6:10 AM
  • Hi- We noticed that the problems started after the windows update KB4054998. Pls see dump analysis below and advise:

    CUSTOMER_CRASH_COUNT:  1

    DEFAULT_BUCKET_ID:  WIN7_DRIVER_FAULT_SERVER
    BUGCHECK_STR:  0xD1
    PROCESS_NAME:  svchost.exe

    ***************************
    CUSTOMER_CRASH_COUNT:  1
    DEFAULT_BUCKET_ID:  WIN7_DRIVER_FAULT_SERVER
    BUGCHECK_STR:  0xD1
    PROCESS_NAME:  System

    *************************
    CUSTOMER_CRASH_COUNT:  1
    DEFAULT_BUCKET_ID:  WIN7_DRIVER_FAULT_SERVER
    BUGCHECK_STR:  0xD1
    PROCESS_NAME:  System

    Wednesday, January 31, 2018 3:48 AM
  • There is very little that can be done with a txt file.

    For dumps the dump files are needed so that they can be debugged.

    See the earlier post to run the administrative command prompt command so that you can post the files to be troubleshooted into the thread.

    Wednesday, January 31, 2018 5:48 AM
  • Hi there- I ran the command and it generated the MEMORY.DMP file in c:\windows. Can you please guide me:

    a) Is this the only file I need to send or is there any other file?

    b) I did not understand how to send these and to whom. Can you please clarify?

    Thanks

    Wednesday, January 31, 2018 5:58 AM
  • Please follow the instructions in this link: (if there is a part that you don't please indicate the part)

    To evaluate the BSOD please post logs for troubleshooting.

    Using administrative command prompt copy and paste this whole command:

    Make sure the default language is English so that the logs can be scanned and read.

    https://www.tenforums.com/tutorials/3813-language-add-remove-change-windows-10-a.html

    The command will automatically collect the computer files and place them on the desktop.

    Then use one drive or drop box to place share links into the the thread for troubleshooting.

    https://support.office.com/en-us/article/Share-OneDrive-files-and-folders-9fcc2f7d-de0c-4cec-93b0-a82024800c07

    It will automatically collect these files:  msinfo32, dxdiag, mini dumps, drivers hosts, install, uninstall, services, startup, event viewer files, etc.

    Open administrative command prompt and copy and paste the whole command:

    copy %SystemRoot%\minidump\*.dmp "%USERPROFILE%\Desktop\"&dxdiag /t %Temp%\dxdiag.txt&copy %Temp%\dxdiag.txt "%USERPROFILE%\Desktop\SFdebugFiles\"&type %SystemRoot%\System32\drivers\etc\hosts >> "%USERPROFILE%\Desktop\hosts.txt"&systeminfo > "%USERPROFILE%\Desktop\systeminfo.txt"&driverquery /v > "%USERPROFILE%\Desktop\drivers.txt" &msinfo32 /nfo "%USERPROFILE%\Desktop\msinfo32.nfo"&wevtutil qe System /f:text > "%USERPROFILE%\Desktop\eventlog.txt"&reg export HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall "%USERPROFILE%\Desktop\uninstall.txt"&reg export "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components" "%USERPROFILE%\Desktop\installed.txt"&net start > "%USERPROFILE%\Desktop\services.txt"&REM wmic startup list full /format:htable >"%USERPROFILE%\Desktop\startup.html"&wmic STARTUP GET Caption, Command, User >"%USERPROFILE%\Desktop\startup.txt"

    There is 1 file for you to find manually:  memory dump file:

    C:\Windows\MEMORY.DMP

    Use file explorer > this PC > local C: drive > right upper corner search enter each of the above to find results.

    Sometimes the dxdiag file needs to be found and saved manually:  In the left lower corner search type:  dxdiag > When the DirectX Diagnostic Tool opens click on the next page button so that each tab is opened > click on save all information > save to desktop > post one drive or drop box share link into the thread

    Wednesday, January 31, 2018 6:25 AM
  • Hi- can you please clarify how exactly to share this file privately with you (i.e. not to put it out on the internet?

    Can you please guide me?

    Thanks

    Wednesday, January 31, 2018 6:49 AM
  • From the part of dump file you post above, seems that it is a driver issue.

    Since you have mentioned that you have done an update recently, there may be some driver compatibility issue.

    For further research, please upload the dump file to a network drive, like Onedrive or Dropbox, then share the link in the forum. It is a public forum, you have to post the dump file here so that we can get it if you don't mind.

    How to upload files to a Onedrive:http://www.wikihow.com/Use-SkyDrive  

    Note: this is a 3rd party link, we don't have any warranties on this website. It's just for your convenience.


    Please remember to mark the replies as answers if they help.
    If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com.

    Wednesday, January 31, 2018 7:19 AM
  • To share files with people the most common methods now are to post share links into threads.  

    One drive, drop box, google each have the option to use their cloud software where you have a limited amount of space to add files (txt, pdf, images, video, etc.).  The user clicks share and a link is created that allows the end user to post the link into the website.  This way you only upload once.  Then you can easily post a share link.

    The logs collected should not have personal information and should have information about the computer hardware and software.  Your personal files should not be submitted.

    When using the administrative command prompt command the collected files will appear on the desktop.  Copy and paste them into one drive or drop box.  Then create share links and post into 7 zip or post directly into the thread.

    Wednesday, January 31, 2018 7:20 AM
  • Thanks everyone. Here is the file:

    https://1drv.ms/u/s!AizgpNkYfCZla92eqAc8Cf_Acbc

    Please let me know next steps.

    Wednesday, January 31, 2018 7:23 AM
  • See this link so that you can open administrative command prompt:

    https://www.howtogeek.com/235101/10-ways-to-open-the-command-prompt-in-windows-10/

    memory dumps take too long to download and other computer files are useful for troubleshooting.

    So please use the share link for posting the administrative prompt command files for troubleshooting.


    Wednesday, January 31, 2018 7:29 AM
  • Hi,

    According to the dump file, seems that a driver tried to access an address that is pageable (or that is completely invalid) while the IRQL was too high.

    And seems that the error points to SYMNETS.SYS, which is part of Norton.


    STACK_TEXT: 
    fffff880`021a1eb8 fffff800`01ac3629 : 00000000`0000000a fffffa80`14a40000 00000000`00000002 00000000`00000000 : nt!KeBugCheckEx
    fffff880`021a1ec0 fffff800`01ac0b7c : 00000000`00000000 fffffa80`14a40000 00000008`00000000 fffffa80`14a3ffe9 : nt!KiBugCheckDispatch+0x69
    fffff880`021a2000 fffff880`0147e913 : fffffa80`14a3fa4c fffffa80`14a3fa40 fffffa80`14a40000 fffff880`021a2a40 : nt!KiPageFault+0x53c
    fffff880`021a2190 fffff880`0147e1fd : 00000000`00000298 fffffa80`14a3fa40 00000000`00000035 fffffa80`14430578 : SYMNETS+0x26913
    fffff880`021a25e0 fffff880`014728e0 : fffffa80`14430530 fffff880`021a2d80 00000000`00000da6 00000000`00000008 : SYMNETS+0x261fd
    fffff880`021a2610 fffff880`01471376 : fffff880`021a2c68 fffffa80`0be1ce20 00000000`00000000 fffff880`00ecd3a7 : SYMNETS+0x1a8e0
    fffff880`021a2650 fffff880`00e0cc92 : fffff880`021a2820 fffff880`021a2d80 00000000`00000000 fffffa80`069c5c80 : SYMNETS+0x193

    it is suggested that you can uninstall the program to have a test. If the problem can be fixed after you uninstall Norton, then it is possible that your old Norton has conflict with your updated system. Try to install the latest Norton version.


    Please remember to mark the replies as answers if they help.
    If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com.



    Wednesday, January 31, 2018 9:25 AM
  • Vivian-  you are fantastic!

    We raised this with Symantec and they said we need to upgrade the version to test. We have upgraded it. Lets see. 

    But Symantec also said they dont think BSOD was due to some MS processes:

    DEFAULT_BUCKET_ID:  WIN7_DRIVER_FAULT_SERVER
    BUGCHECK_STR:  0xD1
    PROCESS_NAME:  svchost.exe

    ***************************
    CUSTOMER_CRASH_COUNT:  1
    DEFAULT_BUCKET_ID:  WIN7_DRIVER_FAULT_SERVER
    BUGCHECK_STR:  0xD1
    PROCESS_NAME:  System

    *************************
    CUSTOMER_CRASH_COUNT:  1
    DEFAULT_BUCKET_ID:  WIN7_DRIVER_FAULT_SERVER
    BUGCHECK_STR:  0xD1
    PROCESS_NAME:  System

    Any idea whether these are all Symantec related or there is something else?

    Wednesday, January 31, 2018 9:52 AM
  • If you post the administrative command prompt collected files they can be troubleshooted.
    Wednesday, January 31, 2018 2:37 PM
  • Already posted. See: https://1drv.ms/u/s!AizgpNkYfCZla92eqAc8Cf_Acbc
    Thursday, February 1, 2018 12:35 AM
  • The link that was re-posted was for a memory dump.

    For the administrative command prompt command:

    1) open administrative command prompt:

    https://www.howtogeek.com/235101/10-ways-to-open-the-command-prompt-in-windows-10/

    2) copy and paste this whole command:

    copy %SystemRoot%\minidump\*.dmp "%USERPROFILE%\Desktop\"&dxdiag /t %Temp%\dxdiag.txt&copy %Temp%\dxdiag.txt "%USERPROFILE%\Desktop\SFdebugFiles\"&type %SystemRoot%\System32\drivers\etc\hosts >> "%USERPROFILE%\Desktop\hosts.txt"&systeminfo > "%USERPROFILE%\Desktop\systeminfo.txt"&driverquery /v > "%USERPROFILE%\Desktop\drivers.txt" &msinfo32 /nfo "%USERPROFILE%\Desktop\msinfo32.nfo"&wevtutil qe System /f:text > "%USERPROFILE%\Desktop\eventlog.txt"&reg export HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall "%USERPROFILE%\Desktop\uninstall.txt"&reg export "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components" "%USERPROFILE%\Desktop\installed.txt"&net start > "%USERPROFILE%\Desktop\services.txt"&REM wmic startup list full /format:htable >"%USERPROFILE%\Desktop\startup.html"&wmic STARTUP GET Caption, Command, User >"%USERPROFILE%\Desktop\startup.txt"

    3) When the files appear on the desktop use 7 zip or post share links into the thread using one drive or drop box share links.

    The files that appear on the desktop should include:  msinfo32, dxdiag, mini dumps, hosts, install, uninstall, services, drivers, event viewer, etc.
    Thursday, February 1, 2018 2:21 AM
  • Yes, here is MEMORY.DMP: https://1drv.ms/u/s!AizgpNkYfCZla92eqAc8Cf_Acbc
    Thursday, February 1, 2018 7:26 AM
  • The memory dump was posted multiple times.  It does not have the information needed to analyze the computer problems.  It would provide an incomplete answer.  For a comprehensive answer these files are needed:

    What is needed now are these files:

    msinfo32

    dxdiag

    mini dumps

    hosts

    install

    uninstall

    services

    drivers

    event viewer

    etc.

    This administrative prompt command should collect all of the above files and place them on the desktop.

    Once on the desktop > zip > place a one drive or drop box share link into the thread

    copy %SystemRoot%\minidump\*.dmp "%USERPROFILE%\Desktop\"&dxdiag /t %Temp%\dxdiag.txt&copy %Temp%\dxdiag.txt "%USERPROFILE%\Desktop\SFdebugFiles\"&type %SystemRoot%\System32\drivers\etc\hosts >> "%USERPROFILE%\Desktop\hosts.txt"&systeminfo > "%USERPROFILE%\Desktop\systeminfo.txt"&driverquery /v > "%USERPROFILE%\Desktop\drivers.txt" &msinfo32 /nfo "%USERPROFILE%\Desktop\msinfo32.nfo"&wevtutil qe System /f:text > "%USERPROFILE%\Desktop\eventlog.txt"&reg export HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall "%USERPROFILE%\Desktop\uninstall.txt"&reg export "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components" "%USERPROFILE%\Desktop\installed.txt"&net start > "%USERPROFILE%\Desktop\services.txt"&REM wmic startup list full /format:htable >"%USERPROFILE%\Desktop\startup.html"&wmic STARTUP GET Caption, Command, User >"%USERPROFILE%\Desktop\startup.txt"

    Thursday, February 1, 2018 9:22 AM
  • Here is the link to all these files:

    https://1drv.ms/u/s!AizgpNkYfCZlbLqUiY5z8-DJVP0

    Thanks

    Thursday, February 1, 2018 9:38 AM
  • 1) open device manager > click view > show hidden devices > expand all rows > look for any row that displays an icon that is a yellow triangle with a black exclamation mark > post images into the thread

    2) This device is listed as a problem device.  Look for this device in device manager and post an image into the thread:  

    WD SES Device USB Device USBSTOR\OTHER&VEN_WD&PROD_SES_DEVICE&REV_1012\575835314135354E394E3353&1
    The drivers for this device are not installed.

    3) In the left lower corner type dxdiag > on the bottom near the center is a button for next > click next 5 times so that all tabs were opened > allow several minutes for it to fully load > save all information to the desktop > post a share link into the thread

    4) Open file explorer > this PC > C: > in the right upper corner type or copy and paste:  c:\windows\minidump > save to desktop > post a share link into the thread

    Also look for these specific mini dump files:

    4a) find this file:  C:\Windows\Minidump\011918-70372-01.dmp

    4b) find this file:  C:\Windows\Minidump\011518-56706-01.dmp

    5) Open administrative command prompt and type or copy and paste:

    6) sfc /scannow

    7) dism /online /cleanup-image /scanhealth

    8) dism /online /cleanup-image /restorehealth

    9) When these have completed > right click on the top bar or title bar of the administrative command prompt box > left click on edit then select all > right click on the top bar again > left click on edit then copy > paste into the thread

    10) chkdsk /x /f /r on every partition/drive

    Use the syntax chkdsk /x /f /r C: or chkdsk /x /f /r D: and change the drive letter c or d to the applicable drive letter

    C:\Windows\system32>chkdsk /x /f /r
    The type of the file system is NTFS.
    Cannot lock current drive.

    Chkdsk cannot run because the volume is in use by another
    process.  Would you like to schedule this volume to be
    checked the next time the system restarts? (Y/N)

    Type:  Y

    reboot

    11) Use the information in this link to find the chkdsk report in the event viewer.  Copy and paste the report > save to notepad > save to deskstop > post are share link into the thread

    https://www.tenforums.com/tutorials/40822-read-chkdsk-log-event-viewer-windows-10-a.html

    12) update these drivers:  b06bdrv      Broadcom NetXtreme II  

    bxvbda

    bxnd60a

    Broadcom BCM5716C NetXtreme II GigE (NDIS VBD Client)

    Broadcom NetXtreme II BXND c:\windows\system32\drivers\bxnd60a.sys

    Broadcom NetXtreme II VBD c:\windows\system32\drivers\bxvbda.sys


    Updating a driver:  https://answers.microsoft.com/en-us/windows/wiki/windows_10-update/updating-a-driver/a5e6345e-af9b-4099-bef0-8d22254aa1c1


    13) Run HD Tune on every drive:

    http://www.hdtune.com/

    Post into the thread images of the results for:

    a) Health (SMART)

    b) Benchmark

    c) Full error scan

    15) Open the website for the computer > enter the product or serial number > select the operating system > view drivers > post a URL or hyperlink into the thread

    16) Uninstall all Symantec/Norton software using the applicable uninstall tool:

    https://support.symantec.com/en_US/article.HOWTO124983.html

    17) Turn on Windows defender

    18) Symantec products can be reinstalled 1 - 2 weeks after the troubleshooting has been completed.  If there is a recurrent BSOD find an alternative AV/firewall.  If there are no recurrent BSOD you can continue to use the product.

    Event[431]:
      Log Name: System
      Source: Ntfs
      Date: 2017-10-03T17:44:33.976
      Event ID: 57
      Task: N/A
      Level: Warning
      Opcode: N/A
      Keyword: Classic
      User: N/A
      User Name: N/A
      Computer: fahkdcwd01.FACTORIAL.LOCAL
      Description: 
    The system failed to flush data to the transaction log. Corruption may occur.

    Event[22779]:
      Log Name: System
      Source: Microsoft-Windows-Directory-Services-SAM
      Date: 2017-10-07T01:48:16.889
      Event ID: 12294
      Task: N/A
      Level: Error
      Opcode: Info
      Keyword: N/A
      User: S-1-5-18
      User Name: NT AUTHORITY\SYSTEM
      Computer: fahkdcwd01.FACTORIAL.LOCAL
      Description: 
    The SAM database was unable to lockout the account of Administrator due to a resource error, such as a hard disk write failure (the specific error code is in the error data) . Accounts are locked after a certain number of bad passwords are provided so please consider resetting the password of the account mentioned above.

    Event[57112]:
      Log Name: System
      Source: Disk
      Date: 2018-01-28T05:55:10.244
      Event ID: 51
      Task: N/A
      Level: Warning
      Opcode: N/A
      Keyword: Classic
      User: N/A
      User Name: N/A
      Computer: fahkdcwd01.FACTORIAL.LOCAL
      Description: 
    An error was detected on device \Device\Harddisk3\DR3 during a paging operation.

    Event[58466]:
      Log Name: System
      Source: Microsoft-Windows-DHCP-Server
      Date: 2018-01-29T20:28:13.000
      Event ID: 10020
      Task: N/A
      Level: Warning
      Opcode: Info
      Keyword: Classic
      User: N/A
      User Name: N/A
      Computer: fahkdcwd01.FACTORIAL.LOCAL
      Description: 
    This computer has at least one dynamically assigned IPv6 address.For reliable DHCPv6 server operation, you should use only static IPv6 addresses.

    Event[58445]:
      Log Name: System
      Source: Microsoft-Windows-Kerberos-Key-Distribution-Center
      Date: 2018-01-29T20:27:53.000
      Event ID: 29
      Task: N/A
      Level: Warning
      Opcode: N/A
      Keyword: Classic
      User: N/A
      User Name: N/A
      Computer: fahkdcwd01.FACTORIAL.LOCAL
      Description: 
    The Key Distribution Center (KDC) cannot find a suitable certificate to use for smart card logons, or the KDC certificate could not be verified. Smart card logon may not function correctly if this problem is not resolved. To correct this problem, either verify the existing KDC certificate using certutil.exe or enroll for a new KDC certificate.

    Event[22292]:
      Log Name: System
      Source: Ntfs
      Date: 2017-10-05T15:02:48.196
      Event ID: 130
      Task: N/A
      Level: Warning
      Opcode: Info
      Keyword: N/A
      User: S-1-5-18
      User Name: NT AUTHORITY\SYSTEM
      Computer: fahkdcwd01.FACTORIAL.LOCAL
      Description: 
    The file system structure on volume F: has now been repaired.

    Name [00000014] Broadcom BCM5716C NetXtreme II GigE (NDIS VBD Client)
    Adapter Type Ethernet 802.3
    Product Type Broadcom BCM5716C NetXtreme II GigE (NDIS VBD Client)
    Installed Yes
    PNP Device ID B06BDRV\L2ND&PCI_163B14E4&SUBSYS_02F11028&REV_20\5&1DFD1A9F&0&20050100
    Last Reset 1/29/2018 8:27 PM
    Index 14
    Service Name l2nd
    IP Address 10.88.12.21, fe80::2077:a62f:7c1e:9fd5
    IP Subnet 255.255.255.0, 64
    Default IP Gateway 10.88.12.254
    DHCP Enabled No
    DHCP Server Not Available
    DHCP Lease Expires Not Available
    DHCP Lease Obtained Not Available
    MAC Address D4:AE:52:95:4B:C7
    Driver c:\windows\system32\drivers\bxnd60a.sys (6.2.9.0, 101.04 KB (103,464 bytes), 2/24/2011 11:53 AM)

    Name [00000015] Broadcom BCM5716C NetXtreme II GigE (NDIS VBD Client)
    Adapter Type Ethernet 802.3
    Product Type Broadcom BCM5716C NetXtreme II GigE (NDIS VBD Client)
    Installed Yes
    PNP Device ID B06BDRV\L2ND&PCI_163B14E4&SUBSYS_02F11028&REV_20\5&3511FE51&0&20050100
    Last Reset 1/29/2018 8:27 PM
    Index 15
    Service Name l2nd
    IP Address 10.88.12.51, fe80::e42d:b28a:6a9a:9675
    IP Subnet 255.255.255.0, 64
    Default IP Gateway 10.88.12.254
    DHCP Enabled Yes
    DHCP Server 10.88.12.21
    DHCP Lease Expires 2/6/2018 8:36 PM
    DHCP Lease Obtained 1/29/2018 8:36 PM
    MAC Address D4:AE:52:95:4B:C8
    Driver c:\windows\system32\drivers\bxnd60a.sys (6.2.9.0, 101.04 KB (103,464 bytes), 2/24/2011 11:53 AM)

    Thursday, February 1, 2018 10:15 AM
  • Hi,

    Upgrade Symantec and see if the bsod will happen.

    If the problem still exist, please upload the new dump file.

    Thanks for your time. 


    Please remember to mark the replies as answers if they help.
    If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com.

    Friday, February 2, 2018 8:16 AM
  • For now the problem is gone, so will not run these diagnostics after upgrading Symantec. Thanks for help.
    Monday, February 5, 2018 1:17 AM
  • The problem is gone, so will not run these diagnostics after upgrading Symantec. Thanks for help.
    Monday, February 5, 2018 1:17 AM