BSOD possibly tied to event for wmiprvse.exe

[mmosier1]

I have started receiving multiple BSOD per day at what seems to be random times. When I look at the Windows Event Viewer I see the error below for wmiprvse.exe occurring at the same time as the BSOD. Most recently the BSOD occurred while exiting the REX add-on for Flight Simulator X (FSX). However, several times I have come back to my computer after leaving it on overnight to find the system has rebooted and the error below is in the event log. This occurred at a time when neither REX or FSX were running.

As another thought... this might be tied to a fairly recent installation of two SSD disk drives. I cloned my system onto one of them rather than doing a complete reinstall of Windows. That's the only hardware change recently.

So I would really appreciate any help in trying to figure this out. I have attached a zip file from DM Log Collector.

Let me know if additional information is required.

Thanks in advance....

mm

Log Name: Application
Source: Application Error
Date: 6/11/2014 4:46:35 PM
Event ID: 1000
Task Category: (100)
Level: Error
Keywords: Classic
User: N/A
Computer: mmosier1-pc7
Description:
Faulting application name: wmiprvse.exe, version: 6.1.7601.17514, time stamp: 0x4ce79d42
Faulting module name: KPDui64.dll, version: 5.3.0.42, time stamp: 0x4666b217
Exception code: 0xc000000d
Fault offset: 0x000000000000e805
Faulting process id: 0x23c0
Faulting application start time: 0x01cf85b618dec3a2
Faulting application path: C:\Windows\system32\wbem\wmiprvse.exe
Faulting module path: C:\Windows\system32\spool\DRIVERS\x64\3\KPDui64.dll (Note: I verified this DLL DOES exist in my system.)
Report Id: 7989b477-f1a9-11e3-97bc-00241d23f0ca
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Application Error" />
<EventID Qualifiers="0">1000</EventID>
<Level>2</Level>
<Task>100</Task>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2014-06-11T20:46:35.000000000Z" />
<EventRecordID>315486</EventRecordID>
<Channel>Application</Channel>
<Computer>mmosier1-pc7</Computer>
<Security />
</System>
<EventData>
<Data>wmiprvse.exe</Data>
<Data>6.1.7601.17514</Data>
<Data>4ce79d42</Data>
<Data>KPDui64.dll</Data>
<Data>5.3.0.42</Data>
<Data>4666b217</Data>
<Data>c000000d</Data>
<Data>000000000000e805</Data>
<Data>23c0</Data>
<Data>01cf85b618dec3a2</Data>
<Data>C:\Windows\system32\wbem\wmiprvse.exe</Data>
<Data>C:\Windows\system32\spool\DRIVERS\x64\3\KPDui64.dll</Data>
<Data>7989b477-f1a9-11e3-97bc-00241d23f0ca</Data>
</EventData>
</Event>

 

[derekimo]

Hi there,

There's only one dump file in there.

Looks like your Mozy backup is causing this,

Unable to load image \SystemRoot\system32\DRIVERS\mozy.sys, Win32 error 0n2
*** WARNING: Unable to verify timestamp for mozy.sys
*** ERROR: Module load completed but symbols could not be loaded for mozy.sys
Probably caused by : mozy.sys ( mozy+fd74 )

Driver Reference Table - mozy.sys

You can see if there is an update or uninstall it for the time being.

 

[mmosier1]

Hi there,

There's only one dump file in there.

Looks like your Mozy backup is causing this,

Unable to load image \SystemRoot\system32\DRIVERS\mozy.sys, Win32 error 0n2
*** WARNING: Unable to verify timestamp for mozy.sys
*** ERROR: Module load completed but symbols could not be loaded for mozy.sys
Probably caused by : mozy.sys ( mozy+fd74 )

Driver Reference Table - mozy.sys

You can see if there is an update or uninstall it for the time being.

Thanks, I will check out Mozy.

 

[derekimo]

You're welcome, keep us posted.