Blue screens

Hello Nikebreaker & Welcome to SevenForums!

Code:

Microsoft (R) Windows Debugger Version 6.12.0002.633 X86
Copyright (c) Microsoft Corporation. All rights reserved.


Loading Dump File [C:\Users\Frederik\AppData\Local\Temp\Rar$DI09.186\052511-25818-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available

Symbol search path is: SRV*C:\SymCache*http://msdl.microsoft.com/download/symbols
Executable search path is: 
Windows 7 Kernel Version 7600 MP (6 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS Personal
Built by: 7600.16385.amd64fre.win7_rtm.090713-1255
Machine Name:
Kernel base = 0xfffff800`02c15000 PsLoadedModuleList = 0xfffff800`02e52e50
Debug session time: Wed May 25 10:56:37.070 2011 (UTC + 2:00)
System Uptime: 0 days 0:31:58.350
Loading Kernel Symbols
...............................................................
................................................................
..........................
Loading User Symbols
Loading unloaded module list
.....
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck 4A, {749e2dd9, 2, 0, fffff88006e48ca0}

Probably caused by : ntkrnlmp.exe ( nt!KiSystemServiceExit+245 )

Followup: MachineOwner
---------

5: kd> !analyze -v
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

IRQL_GT_ZERO_AT_SYSTEM_SERVICE (4a)
Returning to usermode from a system call at an IRQL > PASSIVE_LEVEL.
Arguments:
Arg1: 00000000749e2dd9, Address of system function (system call routine)
Arg2: 0000000000000002, Current IRQL
Arg3: 0000000000000000, 0
Arg4: fffff88006e48ca0, 0

Debugging Details:
------------------


PROCESS_NAME:  vsmon.exe

BUGCHECK_STR:  RAISED_IRQL_FAULT

FAULTING_IP: 
+5d5e2faf0254dd70
00000000`749e2dd9 c3              ret

CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT

CURRENT_IRQL:  2

LAST_CONTROL_TRANSFER:  from fffff80002c86469 to fffff80002c86f00

STACK_TEXT:  
fffff880`06e48a68 fffff800`02c86469 : 00000000`0000004a 00000000`749e2dd9 00000000`00000002 00000000`00000000 : nt!KeBugCheckEx
fffff880`06e48a70 fffff800`02c863a0 : fffff880`06e48ca0 fffffa80`09c25d40 fffff880`06e48bf8 00000000`00000000 : nt!KiBugCheckDispatch+0x69
fffff880`06e48bb0 00000000`749e2dd9 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSystemServiceExit+0x245
00000000`0410eea8 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x749e2dd9


STACK_COMMAND:  kb

FOLLOWUP_IP: 
nt!KiSystemServiceExit+245
fffff800`02c863a0 4883ec50        sub     rsp,50h

SYMBOL_STACK_INDEX:  2

SYMBOL_NAME:  nt!KiSystemServiceExit+245

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: nt

IMAGE_NAME:  ntkrnlmp.exe

DEBUG_FLR_IMAGE_TIMESTAMP:  4a5bc600

FAILURE_BUCKET_ID:  X64_RAISED_IRQL_FAULT_vsmon.exe_nt!KiSystemServiceExit+245

BUCKET_ID:  X64_RAISED_IRQL_FAULT_vsmon.exe_nt!KiSystemServiceExit+245

Followup: MachineOwner
---------

Let's start out simple doing a SFC /SCANNOW

Two of your .dmp follows this ntkrnlmp.exe. Ntkrnlmp.exe is one of the most important files of the whole OS. You could be infected. What kind of Anti-Virus do you run? A full scan with Malwarebytes would be great.

Also make sure your drivers are up-to-date.

Best Regards,
FredeGail

Ninebreaker said:

Hi FredeGail

I currently only have avast antivirus and malware bytes installed i attempted to perform the scannow action and run a scan for a virus with malware bytes but sufferd a blue screen in the process i am now in safe mode and will perform the scannow function again and will then attempt to scan for a virus after woulds.

is it possable that a virus can inteligently identify a anti virus attempting to search for it and cuase a blue screen to stop itself from being discoverd. ?

If possible, post the .txt Malwarebytes generates after the scan if possible. I was more like asking for your AV, if you didn't have one etc.

Everything is possible

Best Regards,
FredeGail

From here it looks like some things got repaired. Go out of safe-mode and browse around as you do, and see if any BSOD will appear. If there's one appearing, upload the .dmp file

Best Regards,
FredeGail

Ninebreaker said:

This apears to have fixed the problems for the moment it may be to early to completly rule out any more problems.

Thank you for your assistance

Sounds great. Keep on having your computer open, and upload .dmp files if a BSOD appears.

Best Regards,
FredeGail