BSODs that seem to never end.

[HG8701]

I've been having multiple BSODs for over a month now and I've collected all the dump files I can. Problem is, I can't upload the dump files because the file is to large. I could post an event log of some sort but I have no clue how helpful that would be. If anyone would care to lend a hand feel free to just reply back or anything, because this is getting a little out of hand. I've uploaded my all services status hoping it would give someone some insight...I don't have a clue what to do really.

 

[Shintaro]

How big are the last 2 crash dump files? If they are too large put them up on OneDrive or MediaFire or something and I'll have a look.

Things that you should do:

1/ Please download and run Windows Defender Offline. It will create a CD / DVD / USB and will boot and scan your hard drive offline.
2/ Download and run TDSSKiller.
3/ Install Malwarebytes (Free Version) and scan your computer.
4/ Download CPU-Z and run it. Go to the "About" tab and save it as a txt (text) file. Upload the text file to the forum.
5/ What were you doing when it crashed? Can you consistently crash the computer?

 

[HG8701]

https://www.mediafire.com/?6i805qlpd7674y6

I uploaded the dump files there, I really appreciate the help. I've installed BitDefender on my computer. Do I need to install another rootkit from a different antivirus company?

 

[Shintaro]

No, but I would like you to perform those scans I mentioned in the post.

 

[Shintaro]

Please run MemTest86. There software needs to run through at lease 8 passes. This will take some time, so maybe you need to let it run over night. Here is a HowTo on MemTest86.


Then Please run Driver Verifier.

Driver verifier

The Driver Verifier tool that is included in every version of Windows since Windows 2000 it is used to detect and troubleshoot many driver issues that are known to cause system corruption, failures, or other unpredictable behavior.

***FIRST: Please backup your stuff and then make sure you've got access to another computer so you can contact us if problems arise.
Then make a System Restore point (so you can restore the system using the Windows 7 Startup Repair feature.)

1. Go to Start and type in "verifier" (without the quotes) and press Enter
2. Select "Create custom settings (for code developers)" and click "Next"
3. Select "Select individual settings from a full list" and click "Next"
4. Select:
   ---- Special Pool
   ---- Pool Tracking
   ---- Force IRQL Checking
   ----Deadlock Detection
   ---- Security Checks (Windows 7 & 8)
   ---- DDI compliance checking (Windows 8)
   ---- Miscellaneous Checks
5. Click "Next"
6. Select "Select driver names from a list" and click "Next"
7. Then select all drivers NOT provided by Microsoft and click "Next"
8. Select "Finish" on the next page.

Reboot the system and wait for it to crash to the Blue Screen.
Continue to use your system normally, and if you know what causes the crash, do that repeatedly.
The objective here is to get the system to crash because Driver Verifier is stressing the drivers out.

How Long should I wait for a crash?

- If it doesn't crash for you, then let it run for at least 36 hours of continuous operation.

How do I turn Driver Verifier off?!

- Reboot into Windows (after the crash) and turn off Driver Verifier by going back in and selecting "Delete existing settings" on the first page.

- Or press the Windows Key + R, and type in "verifier /reset" (Without the quotes)

- Then locate and zip up the memory dump file and upload it with your next post. then locate and zip up the memory dump file and upload it with your next post.

I can't get in to Windows, what do I do?

- If Windows will not start and get to a login screen or desktop, because it crashes too soon, try it in Safe Mode.


- If you can't get into Safe Mode, try using System Restore from your installation DVD to set the system back to the previous restore point that you created.

 

[HG8701]

https://www.mediafire.com/?8aab4dbhdtdn7hj

That would be the dump files after running the verifier, is BSODed as soon as i tried to log on. I'll pick up a flash drive today to try to do a USB boot of the MemTest86.

 

[Shintaro]

I have the crash files, but I need the output from CPU-Z.

Did you perform all the steps in my post #2?

 

[HG8701]

http://i29.photobucket.com/albums/c298/OmegaX3/CPUZ_zpsd35847c9.png

That would be the information you requested, correct?

 

[HG8701]

Here is the full report.

 

[Shintaro]

What is the model number of your ASUS laptop?

 

[HG8701]

G73SW

 

[Shintaro]

Thanks for that.
I needed to double check that ASUS did not have a preferred newer driver for your NVIDIA GeForce GTX 460M video chipset.
The problem appears to in the video chipset on the laptop.

Built by: 7601.18247.amd64fre.win7sp1_gdr.130828-1532
Debug session time: Wed Apr 9 13:29:56.737 2014 (UTC + 10:00)
System Uptime: 0 days 0:01:33.705
BugCheck C4, {f6, bc, fffffa800a5b7b30, fffff8800f36c0a1}
*** WARNING: Unable to verify timestamp for nvlddmkm.sys
*** ERROR: Module load completed but symbols could not be loaded for nvlddmkm.sys
Probably caused by : nvlddmkm.sys ( nvlddmkm+9b0a1 )
BUGCHECK_STR: 0xc4_f6
PROCESS_NAME: rundll32.exe

Please create a system restore point first.
Then go to Nvidia GeForce website and download the latest video driver 33.5.23 and install it.

**IMPORTANT: Also please ensure that verifier is still running after you have installed the new driver.

---------------------------------------------------------------------------------------------------------------------------------

 

[HG8701]

i did that before and still get BSODs but ill try again

 

[Shintaro]

The other option is to try an older version of the video driver.
Is verifier still on?
From a command prompt as Administrator type in:

verifier /querysettings

Are there any more crash files that you can upload?

 

[HG8701]

I had to turn the verifier off just to log in. I was using an older video driver before because I thought that was the problem.
Here are the new dump files:
https://www.mediafire.com/?t43lzi9253hgfrf

 

[Shintaro]

Ok, so the crash dump is interesting, it appears that a disk filter driver is having trouble.

# Child-SP  RetAddr  Call Site
00 fffff880`0b70e088 fffff800`031532a6 nt!KeBugCheckEx
01 fffff880`0b70e090 fffff800`033ea88e nt! ?? ::FNODOBFM::`string'+0x47448
02 fffff880`0b70e150 fffff880`014b8f72 nt!CcPinRead+0xde
03 fffff880`0b70e200 fffff880`014bc688 Ntfs!NtfsPinStream+0x62
04 fffff880`0b70e240 fffff880`014bb08d Ntfs!NtfsAllocateBitmapRun+0xc8
05 fffff880`0b70e310 fffff880`014b7e0f Ntfs!NtfsAllocateClusters+0x38d
06 fffff880`0b70e440 fffff880`0141d2fc Ntfs!NtfsAddAllocation+0x29f
07 fffff880`0b70e540 fffff880`0141abdc Ntfs!NtfsAddAllocationForNonResidentWrite+0xfc
08 fffff880`0b70e5a0 fffff880`0141bc93 Ntfs!NtfsCommonWrite+0x28b6
09 fffff880`0b70e750 fffff880`0110dbcf Ntfs!NtfsFsdWrite+0x1c3
0a fffff880`0b70e810 fffff880`0110c6df FLTMGR!FltpLegacyProcessingAfterPreCallbacksCompleted+0x24f
0b fffff880`0b70e8a0 fffff800`033de17b FLTMGR!FltpDispatch+0xcf
0c fffff880`0b70e900 fffff800`033e8b83 nt!IopSynchronousServiceTail+0xfb
0d fffff880`0b70e970 fffff800`030d3e53 nt!NtWriteFile+0x7e2
0e fffff880`0b70ea70 00000000`7700133a nt!KiSystemServiceCopyEnd+0x13
0f 00000000`002f2678 00000000`00000000 0x7700133a

So could you please:

1/ Uninstall BitDefender, (Uninstaller can be found HERE) just for the time being, and use Windows Defender. Please update it. It can be updated via Windows update or via its own interface on the "Update" tab. (If your not sure what I am talking about please ask)

2/ Please run chkdsk to make sure that there are no disk problems.

3/ Could you please have a look on your computer and tell me what downloader.exe is. So find the file and right click on the file and go to Properties then click on the "Details" tab. Please take a screen shot and post it to the forum.

 

[HG8701]

I was unable to find download.exe; I ran the chkdsk and nothing out of order appeared.

 

[Shintaro]

As you can see in the output from the crash dump, downloader.exe is up to something.

EXCEPTION_RECORD:  ffffffffc0000420 -- (.exr 0xffffffffc0000420)
Cannot read Exception record @ ffffffffc0000420
CUSTOMER_CRASH_COUNT:  1
DEFAULT_BUCKET_ID:  WIN7_DRIVER_FAULT
BUGCHECK_STR:  0x34
PROCESS_NAME:  downloader.exe
CURRENT_IRQL:  0
ANALYSIS_VERSION: 6.3.9600.16384 (debuggers(dbg).130821-1623) amd64fre
DEVICE_OBJECT: fffffa800ca74d08
LAST_CONTROL_TRANSFER:  from fffff800031532a6 to fffff800030d4bc0

Please perform the following and post the screen shot when done please.

1/ Download and run TDSSKiller.
2/ Install Malwarebytes (Free Version) and scan your computer.
3/ Please download and run Windows Defender Offline. It will create a CD / DVD / USB and will boot and scan your hard drive offline.

 

[HG8701]

How can I find this annoying program? It isn't even showing up in the task manager as a running program or anything. I've uploaded a new BSOD dump file. Maybe this might lead to another revelation?

https://www.mediafire.com/?ffnr6tv2bev5f8l

 

[TrainableMan]

It is highly probable you are infected with malware. No anti-virus is perfect and most people are far to willing to install software from dangerous sources. If you can't find Downloader.exe it may be hiding itself ... as malware is often known to do.

You need to follow Shintaro's advice to try and remove the malware.