Solved Intermittent BSOD - MUP.SYS

[rikper]

Intermittent BSOD - System Service Exception(3b) & mup.sys

Within the last 4 weeks, I've been getting complaints of intermittent BSOD on 7 PCs. It seems to be more frequent on two of them. I've inspected the memory.dmp files generated and they all point to the mup.sys file causing the issue. I read an article on here on how to run the driver verifier, so I tried that but I'm still not sure what may be causing the crashes. I uploaded an XML file generated by the crash and and memory.dmp with results after having verifier enabled. Any assistance would be greatly appreciated!

-------------------------------
SYSTEM_SERVICE_EXCEPTION (3b)
An exception happened while executing a system service routine.
Arguments:
Arg1: 00000000c0000005, Exception code that caused the bugcheck
Arg2: fffff880019d40cd, Address of the instruction which caused the bugcheck
Arg3: fffff8800547d8e0, Address of the context record for the exception that caused the bugcheck
Arg4: 0000000000000000, zero.

Debugging Details:
------------------


DUMP_CLASS: 1

DUMP_QUALIFIER: 400

BUILD_VERSION_STRING: 7601.23572.amd64fre.win7sp1_ldr.161011-0600

SYSTEM_MANUFACTURER: HP

SYSTEM_PRODUCT_NAME: HP ProDesk 400 G3 MT

SYSTEM_SKU: V0C45UT#ABA

BIOS_VENDOR: HP

BIOS_VERSION: N03 Ver. 02.04

BIOS_DATE: 01/06/2016

BASEBOARD_MANUFACTURER: HP

BASEBOARD_PRODUCT: 8061

BASEBOARD_VERSION: KBC Version 05.26

DUMP_TYPE: 2

BUGCHECK_P1: c0000005

BUGCHECK_P2: fffff880019d40cd

BUGCHECK_P3: fffff8800547d8e0

BUGCHECK_P4: 0

EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%p referenced memory at 0x%p. The memory could not be %s.

FAULTING_IP:
mup!MupReleaseFileContext+4d
fffff880`019d40cd f0834304ff lock add dword ptr [rbx+4],0FFFFFFFFh

CONTEXT: fffff8800547d8e0 -- (.cxr 0xfffff8800547d8e0)
rax=0000000000000000 rbx=0000000000000000 rcx=fffff880019d1560
rdx=000000000000000d rsi=0000000000000000 rdi=fffff880019d1118
rip=fffff880019d40cd rsp=fffff8800547e2c0 rbp=0000000000000002
r8=0000000000000306 r9=fffff80003437bb4 r10=fffff8800547e940
r11=fffff8800547e260 r12=00000000c0000000 r13=fffffa800c6694f8
r14=0000000000000000 r15=fffffa800c6694a0
iopl=0 nv up ei pl nz ac po nc
cs=0010 ss=0018 ds=002b es=002b fs=0053 gs=002b efl=00010216
mup!MupReleaseFileContext+0x4d:
fffff880`019d40cd f0834304ff lock add dword ptr [rbx+4],0FFFFFFFFh ds:002b:00000000`00000004=????????
Resetting default scope

 

[axe0]

Hi rikper,

Please upload dumps of all systems having BSOD issues, preferably with Blue Screen of Death (BSOD) Posting Instructions

Run MemTest86+ on the system where the dump is coming from.

Diagnostic Test

 RAM TEST

Run MemTest86+ to analyse your RAM. MemTest86+ - Test RAM - Windows 7 Forums

   Note

MemTest86+ needs to be run for at least 8 complete passes for conclusive results. Set it running before you go to bed and leave it overnight. We're looking for zero errors here. Even a single error will indicate RAM failure.

Make a photo of the result and post it.

Addition:
If errors show up you can stop the test, remove all sticks but 1 and test this single stick in each slot for 8 passes or until errors show, switch sticks and repeat.
If errors show up and you see them a lot later, no problem, the errors don't affect the test.

 

[rikper]

I ran HP hardware diags and no issues. I also ran the memtest86+ diags and no errors.

 

[rikper]

Here is another dump file from a different computer. So far these are the only two that have had a BSOD since I enabled verifier. I have not run the memtest diags on this one yet

 

[axe0]

I'll need more information about the system, Blue Screen of Death (BSOD) Posting Instructions

 

[rikper]

DM Log Collector

here you go hope it helps

 

[axe0]

That sheds some light on the situation for this system.

Check for this system for network driver updates and check Symantec/Norton for software updates.
You may also want to check for BIOS updates.

 

[rikper]

PC1 BSOD Today

Here's the collection from the original PC I spoke about. It blue screened 20 min ago and I ran the collection tool. I updated the BIOS, NIC, Chipset and USB drivers on this one earlier today.

AND Thank you for your assistance thus far!

 

[axe0]

I don't see any attachment?

 

[rikper]

Sorry, I thought I attached it. I uploaded it now.

 

[torchwood]

For info
the last log is showing a Hardware problem on the PCI E card.

Its also having Group policy problems

Is this the domain server


Roy

 

[rikper]

It's not the domain controller. This is a PC on the domain. So the PCI-E Card is showing as bad? Weird, it's pretty new. Maybe a month old. Which file did you read that showed the PCI-E failure. I'd like to see if and also the group policy error. That way I can see what I can do about that error as well.

Thank you!

 

[rikper]

This one blue screened again today...

 

[axe0]

The hardware error would be the event logs, the group policy error either the update log or the event log.

Speaking of hardware errors:

Event[48668]:
  Log Name: System
  Source: Microsoft-Windows-WHEA-Logger
  Date: 2017-02-25T10:31:34.228
  Event ID: 17
  Task: N/A
  Level: Warning
  Opcode: Info
  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: AABERGEL.brodypa.local
  Description: 
A corrected hardware error has occurred.

Component: PCI Express Root Port
Error Source: Advanced Error Reporting (PCI Express)

Bus:Device:Function: 0x0:0x1c:0x0
Vendor ID:Device ID: 0x8086:0xa114
Class Code: 0x30400

The details view of this entry contains further information.


Name: Intel(R) 100 Series/C230 Series Chipset Family PCI Express Root Port #5 - A114
Device ID: PCI\VEN_8086&DEV_A114&SUBSYS_8061103C&REV_F1\3&11583659&0&E0
Driver: n/a


Event[48693]:
  Log Name: System
  Source: Microsoft-Windows-WHEA-Logger
  Date: 2017-02-25T15:43:56.184
  Event ID: 17
  Task: N/A
  Level: Warning
  Opcode: Info
  Keyword: N/A
  User: S-1-5-19
  User Name: NT AUTHORITY\LOCAL SERVICE
  Computer: AABERGEL.brodypa.local
  Description: 
A corrected hardware error has occurred.

Component: PCI Express Endpoint
Error Source: Advanced Error Reporting (PCI Express)

Bus:Device:Function: 0x2:0x0:0x0
Vendor ID:Device ID: 0x10ec:0x8168
Class Code: 0x10000

The details view of this entry contains further information.


Name: Realtek PCIe GBE Family Controller
Device ID: PCI\VEN_10EC&DEV_8168&SUBSYS_8061103C&REV_15\01000000684CE00000
Driver: n/a

The Realtek hardware is the most occuring, provided that the Realtek driver is quite a lot being flagged (as is Symantec/Norton drivers), there is a chance that this one is a bad ethernet port. I recommend to update or reinstall the Realtek network drivers and check for BIOS updates.