BSOD 5-10 minutes after booting

Sinds a couple of months I've been getting Blue screens daily (some exceptions), ALWAYS after the first 5-10 minutes from booting. Dump files aren't always created.
I've been collecting them only sinds 20/06/13. I did a format I think about a week before that because it wouldn't even boot into windows anymore. The day after the clean install, BSOD.

24/06/13 Re-installed Nvidia drivers 320.18. No more BSOD until 04/07/13, BSOD after first 5 - 10 mins of booting, Win7 restarts, immediate BSOD again.
I start in safe mode with internet, BSOD (first time). I start in safe mode, everything seems to work. I start Win7 normally, everything works again.

This is usually the way it goes, I get a BSOD, reboot, everything works fine, except USUALLY it's only ONE BSOD and everything works perfectly ever after, until the next day...

BSODS used to say irql_not_less_or_equal 2. Not these last ones though, they didn't seem to give any explanation. I've Googled this several times and they always say it might be video drivers or anti virus.
I've reinstalled both sinds latest format. I'm currently using Free AVG. Before that I was using Free Avast, but I had to change to AVG because Avast all of a sudden refused to update and even launch, even after reinstalling.

My Win7 is always up to date, so are my drivers. (Motherboard, video, sound card )

Again: when I get my BSOD of the day everything works just fine after, I can play demanding games all day without any issues. Thats why I think it must be a software issue.

I'm hoping for a quick solution here because as you can probably imagine, I'm getting real tired of this.

Welcome to the forums Tchilleh,

Code:

BugCheck 1000007E, {ffffffffc0000005, fffff80002c129bc, fffff88003da2808, fffff88003da2060}

Probably caused by : Pool_Corruption ( nt!ExDeferredFreePool+100 )

Code:

Usual causes:  Insufficient disk space, Device driver, Video card, BIOS, Breakpoint with no debugger attached, Hardware incompatibility, Faulty system service, Memory, 3rd party remote control

Code:

0: kd>0: kd> !pool fffff800`02c129bc
Pool page fffff80002c129bc region is Nonpaged pool
GetUlongFromAddress: unable to read from fffff80002c83a38
fffff80002c12000 is not a valid small pool allocation, checking large pool...
unable to get pool big page table - either wrong symbols or pool tagging is disabled
fffff80002c12000 is freed (or corrupt) pool
Bad previous allocation size @fffff80002c12000, last size was 0

***
*** An error (or corruption) in the pool was detected;
*** Attempting to diagnose the problem.
***
*** Use !poolval fffff80002c12000 for more details.


Pool page [ fffff80002c12000 ] is __inVALID.

Analyzing linked list...
[ fffff80002c12000 ]: invalid previous size [ 0x48 ] should be [ 0x0 ]
[ fffff80002c12000 --> fffff80002c12400 (size = 0x400 bytes)]: Corrupt region


Scanning for single bit errors...

None found

There seems to be some definite pool corruption here, I believe a driver has most likely overwritten another pool allocation.

Code:

CONTEXT:  fffff88003da2060 -- (.cxr 0xfffff88003da2060)
rax=fffff8a000d89ce0 rbx=000000000000003f rcx=fffffa8006994290
rdx=01fffff880019034 rsi=fffff8a00244d000 rdi=fffff8a002284090
rip=fffff80002c129bc rsp=fffff88003da2a40 rbp=0000000000000001
 r8=01fffff880019034  r9=fffff8a0023da181 r10=0000000000000000
r11=0000000000000000 r12=fffffa8006994140 r13=0000000000000000
r14=0000000000000016 r15=0000000000000001
iopl=0         nv up ei pl zr na po nc
cs=0010  ss=0018  ds=002b  es=002b  fs=0053  gs=002b             efl=00010246
nt!ExDeferredFreePool+0x100:
fffff800`02c129bc 4c8b02          mov     r8,qword ptr [rdx] ds:002b:01fffff8`80019034=????????????????

Code:

0: kd> .formats 01fffff880019034; .formats fffffa8006994290
Evaluate expression:
  Hex:     01fffff8`80019034
  Decimal: 144115155863703604
  Octal:   0007777777420000310064
  Binary:  00000001 11111111 11111111 11111000 10000000 00000001 10010000 00110100
  Chars:   .......4
  Time:    Thu Sep  6 23:46:26.370 2057 (UTC + 1:00)
  Float:   low -1.43566e-040 high 9.40395e-038
  Double:  4.77829e-299
Evaluate expression:
  Hex:     fffffa80`06994290
  Decimal: -6047203245424
  Octal:   1777777650000646241220
  Binary:  11111111 11111111 11111010 10000000 00000110 10011001 01000010 10010000
  Chars:   ......B.
  Time:    ***** Invalid FILETIME
  Float:   low 5.765e-035 high -1.#QNAN
  Double:  -1.#QNAN

In my opinion, it also looks like a device driver has overwritten the beginning address of the rdx register too. The data seems to have been passed from the r8 register.

-------------------------------------------------------

Run Driver Verifier to scan for any corrupted drivers which may be causing problems, this program works by running various stress tests on drivers, in order to produce a BSOD which will locate the driver; run for least 24 hours:

• Driver Verifier - Enable and Disable

   Information

Additional Help - Using Driver Verifier to identify issues with Drivers

Remove:

Code:

Start Menu\Programs\AVG

AVG is known to cause BSODs with Windows 7, please remove this program completely using the AVG Removal Tool, and then install these free alternatives listed below.

Install and perform full scans with:

• Malwarebytes : Free anti-malware download
• Microsoft Security Essentials | Protect against viruses, spyware, and other malware

   Information

Remember to install the free version of Malwarebytes not the free trail; untick the free trial box during installation. MSE is the most lightweight and compatible with the Windows 7 operating system

You can also view this thread for a complete free and lightweight security protection combination:

• Good and Free system security combination.

Ok, so I did everything you proposed.

I uninstalled AVG with that advanced uninstaller.
I installed Microsoft essentials and malwarebytes.
I had to reboot several times but had no problems there.
I enabled verifier following the instruction in linked post.

Today, I boot my pc and it just freezes this time, also within the first 5 minutes. No BSOD but I did have to reboot because it was completely unresponsive. I guess this is a step up?

I do remember that past tuesday 02/07, I also had my pc freeze up like this.

So as a short summary: on 24/06 I reinstall Nvidia drivers because of the daily BSODS. Everything works fine until 02/07, it "just" freezes. Everything works fine after that until 04/07, BSODs again. Then 05/07 (today), "just" a freeze.

Since the reinstall the 24th, the only things I changed were: Install Empire: Total war on Steam on the 1st (with Steam first time setup for directx and stuff) and update Firefox to version 22 ont the 3rd.

I also ran the diagnostic tool again today. See attachement.

Code:

Event[7952]:
  Log Name: System
  Source: Disk
  Date: 2013-06-19 T20:27:07.385
  Event ID: 11
  Task: N/A
  Level: Fout
  Opcode: N/A
  Keyword: Klassiek
  User: N/A
  User Name: N/A
  Computer: Tchilleh-PC
  Description: 
Het stuurprogramma heeft een controllerfout gevonden in \Device\Harddisk2\DR4.

Code:

Event[10021]:
  Log Name: System
  Source: Disk
  Date: 2013-06-24 T18:59:27.376
  Event ID: 11
  Task: N/A
  Level: Fout
  Opcode: N/A
  Keyword: Klassiek
  User: N/A
  User Name: N/A
  Computer: Tchilleh-PC
  Description: 
Het stuurprogramma heeft een controllerfout gevonden in \Device\Harddisk2\DR2.

I noticed a few of these errors within your Event Log, it seems that the driver has detected an error for the controller for a certain hard-drive, I would suggest beginning to run some hard-drive diagnostics:

Run some hard-drive diagnostics and follow these steps:

• Hard Drive Diagnostic Procedure

Find your hard-drive manufacturer and run their tests.

Additional Tests:

• SeaTools for DOS | Seagate
• CrystalDiskInfo - Software - Crystal Dew World

Post a screenshot of Crystal Disk Info summary:

• Screenshots and Files - Upload and Post in Seven Forums

writhziden said:

If you have an SSD, make sure the following are up to date:

• SSD firmware
• BIOS Version
• Chipset Drivers
• Hard disk controller drivers/SATA drivers
• If you have a Marvell IDE ATA/ATAPI device, make sure the drivers are up to date from the Intel site or Marvell site and not from your motherboard/vendor support site.

Check for any file system errors and bad sectors using Option #2 of:

• Disk Check

Use this command with Disk Check:

Code:

chkdsk C: /f /r

I would recommend creating a backup of your data or creating a system image.

So, today I start my pc and wait out the freeze or bluescreen by making figures with my mouse on the desktop while drinking coffee. After +/- 10 minutes I think "yeah! no BSOD today", I open Firefox to start my daily internet routine aaand I get a BSOD. It reboots, I see that Microsoft Sec Essentials realtime protection didn't start so I manually enable it. And after a minute or two I get a BSOD again. Reboot, I hit F8 to start in safemode. After it finishes laoding the drivers to get into safemode I get another BSOD. Reboot, I get asked to run Windows boot recovery, I do that, reboot and Windows works again.

So then I run Western Digital Data Lifeguard Diagnostics (because I have Western D. drives), I run both SMART and extended test and both of them pass.

I run Crystaldiskinfo. (screenshots in attachement)

Then I run cmd in admin and run chkdsk c: /f /r , reboot, it runs and it says there are no errors, everything is fine.

I also ran the diagnostic tool again today. See attachement.

Code:

BugCheck A, {fffffba000eecdf8, 2, 0, fffff80001efb1cb}

Probably caused by : ntkrnlmp.exe ( nt! ?? ::FNODOBFM::`string'+433d3 )

Code:

Usual causes:  Kernel mode driver, System Service, BIOS, Windows, Virus scanner, Backup tool, compatibility

There's seems to be a few Windows drivers related to the hard-disk which are being blamed, and the dump file seems to be partially corrupted.

Scan for any missing, modified or corrupted protected Windows files with:

• SFC /SCANNOW Command - System File Checker

Here's from additional suggestions from another BSOD Team member (Arc):

1. Ataport is must vulnerable to rootkits, so the check may be needed.
2. Use the HDD2 (320 GB WD) to any other port than port 3.
3. Change the sata cables.

Scan for any malware:

• Windows Defender Offline
• Anti-rootkit utility TDSSKiller

First of all, thank you for all the feedback!

I just ran the SFC /scannow in windows and it said that everything is ok.

I'm going to try the rest of the suggestions tomorrow. Actually later today, its' 1:30 AM. Time to go sleep.