Freezing and twice a Blue Screen

usasma · 29 Jul 2012

Cookies usually aren't a problem.
Don't run CCleaner or other disk cleanup tools while we're troubleshooting - they delete the log files related to this problem.

I did find 2 problem devices:

Security Processor Loader Driver ROOT\LEGACY_SPLDR\0000 This device is not present, is not working properly, or does not have all its drivers installed.

McAfee NDIS Light Filter ROOT\LEGACY_MFENLFK\0000 This device is not present, is not working properly, or does not have all its drivers installed.

Normally I associate the Security Processor Loader driver either with a malware infection or the damage caused by a malware infection (even if the malware is removed). But I've never seen it when there's also been McAfee problems.

As such, I'd suggest this:

Anti-Virus Removal:
Please do the following:
- download a free antivirus for testing purposes: Free AntiVirus
- uninstall the McAfee from your system (you can reinstall it, if so desired, when we're done troubleshooting)
- remove any remnants of McAfee using this free tool: How to uninstall or reinstall supported McAfee products using the Consumer Products Removal tool (MCPR) (This link has changed a lot. If it doesn't work, search for McAfee Consumer Products Removal Tool)
- IMMEDIATELY install and update the free antivirus, then check to ensure that the Windows Firewall is turned on.
- check to see if this fixes the BSOD's
NOTE: NEVER run more than 1 anti-virus, firewall, Internet Security/Security Center application at the same time.

Then rerun the perfmon /report to see if the Security Processor Loader error goes away.

Many, many errors due to the Apple Mobile Device service. Please uninstall all the Apple stuff from your system. If you'd like, feel free to reinstall freshly downloaded copies of this software.

No memory dumps in the upload - but the WER section of MSINFO32 blames iaStor.sys in 4 of the 5 memory dumps listed. 2 things to try here:
- update the Intel RST (Rapid Storage Technology) drivers from the Intel Download Center ( http://downloadcenter.intel.com )
- run this free diagnostic on your hard drive(s): Hard Drive Diagnostic Procedure

Does the computer work OK in Safe Mode?

Please rerun the data collection tool after the next BSOD - hopefully it'll let us know what the problem is.

Kakennedy2011 · 29 Jul 2012

It does work in Safe Mode.
I'm starting now.....
Want to say thank you for helping me!

Kakennedy2011 · 29 Jul 2012

I tried the Mcafee uninstall
And the Free Antivirus but it only
let me do SafeMode...
It won't fully load and now another
Blue Screen.... I was able to take a pic with my phone....

Kakennedy2011 · 29 Jul 2012

Got Safe w/networking up...

Problem signature:

Problem Event Name: BlueScreen

OS Version: 6.1.7601.2.1.0.768.3

Locale ID:1033

Additional information about the problem:

BCCode:1000007e

BCP1: FFFFFFFFC0000005

BCP2:FFFFF880011685BE

BCP3:FFFFF88003724948

BCP4:FFFFF880037241A0

OS Version:6_1_7601

Service Pack:1_0

Product:768_1

Files that help describe the problem:

C:\Windows\Minidump\072912-37986-01.dmp

C:\Users\Kimmie\AppData\Local\Temp\WER-76939-0.sysdata.xml

Kakennedy2011 · 29 Jul 2012

One error is still there, the other is gone but now a new one.

usasma · 30 Jul 2012

Before trying the following, make sure that you have your stuff backed up, that you have set a System Restore point, and that you have a method to access Startup Repair in the event that the system won't boot. Having a downloaded and extracted copy of the Intel RST (iaStor.sys) is also a good idea. To create a Startup Repair disk, go to Start...All Programs...Maintenance...Create a System Repair Disc

Then, please try this free tool (I have a hunch that this is the TDSS rootkit): Anti-rootkit utility TDSSKiller If at all uncertain, don't let it make any changes to your system.

What happens here is that the TDSS rootkit affects several things - to include a boot start driver (in this case it'll most likely be iaStor.sys) and the partition table for your hard drive. Most repairs require that you replace the driver and then run Startup Repair (and/or the bootrec commands) in order to fix the damage. Please be advised that I am not an anti-malware expert and you may want to get more expert help in the Security forums.

Since the BSOD's both blame iaStor.sys - it's advisable to update your Intel Rapid Storage Technology (RST) drivers from the Intel website: http://downloadcenter.intel.com
Don't get the one's for the F6 driver installation - but rather get the installer for your system/chipset.

Also, please update your Synaptics Touchpad drivers and your EgisTec fingerprint scanner drivers from the PC Manufacturer's website (they both date from 2009).

The following info is just FYI, I've already addressed the issues that I saw in the above paragraphs

- Further info on BSOD error messages available at: http://www.carrona.org/bsodindx.html
- Info on how to troubleshoot BSOD's (DRAFT): http://www.carrona.org/userbsod.html
- How I do it: http://www.carrona.org/howidoit.html

3RD PARTY DRIVERS PRESENT IN THE DUMP FILES

Code:


GEARAspiWDM.sys   Mon May 18 08:17:04 2009 (4A1151C0)
HECIx64.sys       Thu Sep 17 15:54:16 2009 (4AB293E8)
Impcd.sys         Fri Feb 26 18:32:11 2010 (4B8859FB)
IntcDAud.sys      Wed Feb 03 08:38:31 2010 (4B697C57)
NTIDrvr.sys       Mon Apr 19 21:37:59 2010 (4BCD0577)
RTKVHD64.sys      Tue Jun 22 05:27:26 2010 (4C2081FE)
Sftvollh.sys      Fri Sep 30 12:42:46 2011 (4E85F186)
SynTP.sys         Thu Dec 10 21:30:38 2009 (4B21AECE)
UBHelper.sys      Tue Jul 06 00:19:26 2010 (4C32AECE)
amdxata.sys       Fri Mar 19 12:18:18 2010 (4BA3A3CA)
avc3.sys          Tue Mar 20 07:04:13 2012 (4F68642D)
avchv.sys         Fri Nov 25 04:04:45 2011 (4ECF5A2D)
avckf.sys         Fri Feb 10 05:39:13 2012 (4F34F3D1)
avgidsfiltera.sys Fri Dec 23 07:05:40 2011 (4EF46E94)
avgidsha.sys      Wed Apr 18 22:19:15 2012 (4F8F7623)
avgldx64.sys      Tue Feb 21 22:57:53 2012 (4F4467C1)
avgmfx64.sys      Fri Dec 23 07:08:12 2011 (4EF46F2C)
avgrkx64.sys      Mon Jan 30 22:11:41 2012 (4F275BED)
avgtdia.sys       Sun Mar 18 23:53:32 2012 (4F66ADBC)
avgtpx64.sys      Thu Jul 19 10:07:13 2012 (50081491)
bcmwl664.sys      Thu Jun 03 15:25:17 2010 (4C08019D)
bdfsfltr.sys      Wed Jul 27 11:23:21 2011 (4E302D69)
bdfwfpf.sys       Mon Nov 14 12:16:17 2011 (4EC14CE1)
bdvedisk.sys      Tue Jan 19 10:45:31 2010 (4B55D39B)
dump_iaStor.sys   Tue Apr 13 12:44:16 2010 (4BC49F60)
iaStor.sys        Tue Apr 13 12:44:16 2010 (4BC49F60)
igdkmd64.sys      Tue Jan 10 17:28:09 2012 (4F0CBB79)
k57nd60a.sys      Sat May 15 08:51:06 2010 (4BEE98BA)
mwlPSDFilter.sys  Tue Jun 02 06:07:30 2009 (4A24F9E2)
mwlPSDNServ.sys   Tue Jun 02 06:07:39 2009 (4A24F9EB)
mwlPSDVDisk.sys   Tue Jun 02 06:15:29 2009 (4A24FBC1)
trufos.sys        Wed Oct 19 05:10:43 2011 (4E9E9413)

Code:


Loading Dump File [C:\Users\John\_jcgriff2_\dbug\__Kernel__\072912-32495-01.dmp]
Built by: 7601.17835.amd64fre.win7sp1_gdr.120503-2030
Debug session time: Sun Jul 29 18:06:05.582 2012 (UTC - 4:00)
System Uptime: 0 days 0:04:51.049
*** WARNING: Unable to verify timestamp for iaStor.sys
*** ERROR: Module load completed but symbols could not be loaded for iaStor.sys
BugCheck 1000007E, {ffffffffc0000005, fffff880010ea5be, fffff88003532948, fffff880035321a0}
Probably caused by : iaStor.sys ( iaStor+725be )
DEFAULT_BUCKET_ID:  WIN7_DRIVER_FAULT
PROCESS_NAME:  System
BUGCHECK_STR:  0x7E
FAILURE_BUCKET_ID:  X64_0x7E_iaStor+725be
Bugcheck code 1000007E
Arguments ffffffff`c0000005 fffff880`010ea5be fffff880`03532948 fffff880`035321a0
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
Loading Dump File [C:\Users\John\_jcgriff2_\dbug\__Kernel__\072912-37986-01.dmp]
Built by: 7601.17835.amd64fre.win7sp1_gdr.120503-2030
Debug session time: Sun Jul 29 19:50:59.226 2012 (UTC - 4:00)
System Uptime: 0 days 0:35:43.708
*** WARNING: Unable to verify timestamp for iaStor.sys
*** ERROR: Module load completed but symbols could not be loaded for iaStor.sys
BugCheck 1000007E, {ffffffffc0000005, fffff880011685be, fffff88003724948, fffff880037241a0}
Probably caused by : iaStor.sys ( iaStor+725be )
DEFAULT_BUCKET_ID:  WIN7_DRIVER_FAULT
PROCESS_NAME:  System
BUGCHECK_STR:  0x7E
FAILURE_BUCKET_ID:  X64_0x7E_iaStor+725be
Bugcheck code 1000007E
Arguments ffffffff`c0000005 fffff880`011685be fffff880`03724948 fffff880`037241a0
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``

Kakennedy2011 · 04 Aug 2012

I am trying to do my backup but I keep getting code: 0x81000037

usasma · 05 Aug 2012

0x81000037 means that the device that you're trying to use no longer exists (so it's either disconnected, or suffering intermittent problems).

Kakennedy2011 · 05 Aug 2012

:-(
So need a different device?
Its a Toshiba Port.HardDrive 500gb

usasma · 06 Aug 2012

The first step would be to try another device.
If that doesn't work, then try other ports on the computer