BSOD not specific to loading but always within 5 min of cold start

SAllen61 · 13 Jan 2014

Sigh, 4 min BSOD.....cold boot, logged in, looked at email a min, turned off EarthDesk, and launched MechWarrior online, which runs in a window till you actually pick your mech to battle and in the process of launching with that mech to do a battle when the BSOD came early before the game actually started building the next static game screen of folk loading team slots to see who is who before the video goes live however it could be just timing as well for the game runs ok normally, ran it earlier today before work for a quick battle.

SF Diag dump attached "sysdump3"

I'm sorry that this seems to be a stubborn fix to find, If all else fails I am willing to reformat and reload if necessary.

I did that once already which didn't help solve the problem but who knows if it is a virus something hiding in a boot sector on one of my drives that keeps passing back around......just talking out loud, I have run avast just to check and of course win defender.....always nothing.....I don't surf off the beaten internet sites and watch what email I open so I'm usually clean, learned that lession way back on the 5 inch floppy drives when viruses first started coming around, that's been awhile....telling my age here..

Again, I do appreciate your assistance

Thank you,

Stephen

Golden · 13 Jan 2014

WinDBG still blames the video card driver, even after you changed it.

I'm going to ask someone with more experience to look at this, as I may be missing something.

SAllen61 · 13 Jan 2014

ok, on standby...

Thx

Arc · 13 Jan 2014

Hi SAllen61.

It is certain that the BitDefender AntiVirus FS filter driver is contributing to your BSODs.

Code:

fffff880`0927a0b8  fffff880`080e7f86Unable to load image \??\C:\Windows\system32\Drivers\bdfsfltr.sys, Win32 error 0n2
*** WARNING: Unable to verify timestamp for bdfsfltr.sys
*** ERROR: Module load completed but symbols could not be loaded for bdfsfltr.sys
 bdfsfltr+0x4f86

Description here: Driver Reference Table - bdfsfltr.sys

If you are sure that BitDefender is not installed in the system, delete it manually:

Code:

c:\windows\system32\drivers\bdfsfltr.sys.

Also, I have checked the two latest BSODs, both are the same.

Code:

BugCheck 1E, {ffffffffc0000005, fffff80002eb1150, 0, ffffffffffffffff}

Probably caused by : memory_corruption ( nt!MiReplenishPageSlist+c0 )

Followup: MachineOwner
---------

Memory corruption, with a hint of/driven by display failure.

Code:

fffff880`0927a298  fffff880`0f526b1dUnable to load image \SystemRoot\system32\DRIVERS\nvlddmkm.sys, Win32 error 0n2
*** WARNING: Unable to verify timestamp for nvlddmkm.sys
*** ERROR: Module load completed but symbols could not be loaded for nvlddmkm.sys
 nvlddmkm+0xc7b1d

Form your and Golden's previous conversations it is appearing that the issue is continuing irrespective of the driver versions. Because I have never seen 314.22 WHQL to fail on itself.

Code:

fffff880`05a6f000 fffff880`0651a000   nvlddmkm T (no symbols)           
    Loaded symbol image file: nvlddmkm.sys
    Image path: \SystemRoot\system32\DRIVERS\nvlddmkm.sys
    Image name: nvlddmkm.sys
    Timestamp:        Fri Mar 15 07:07:00 2013 (51427B3C)
    CheckSum:         00A8D47C
    ImageSize:        00AAB000
    Translations:     0000.04b0 0000.04e4 0409.04b0 0409.04e4

In this situation I would suggest you to take some hardware tests.

Stress test the Graphics Card using Furmark.
Video Card - Stress Test with Furmark

Test your RAM modules for possible errors.
How to Test and Diagnose RAM Issues with Memtest86+
Run memtest for at least 8 passes, preferably overnight.

Also, some information will be necessary ......

Are you overclocking? As you are getting BSODs, you should stop overclocking and run all the hardware components like CPU, GPU and RAM to their default settings.

Check if the Power Supply Unit (PSU) supplying adequate power to the computer or not.
eXtreme Power Supply Calculator
Also let us know the wattage of the PSU.

Is the computer hot? Report us the heat of the computer after a couple of hours of your normal usage. Upload a screenshot of the summery tab of Speccy. Alternatively, you can publish a Speccy snapshot too: Speccy - Publish Snapshot of your System Specs .

Let us know the results.

SAllen61 · 13 Jan 2014

Early results:
Safe mode deleted bdfsfltr.sys - check
Furmark - 99% 21FPS 82C peak temp stable
memtest86 - ran win7 internal memory test on reboot all options checked pass 2x - normal
eXtremes PSCL - Minimum Power supply 373w Recommended 423w
Installed Power Supply is an OZC 700w

Text save of Speecy Summary attached - core 31C motherboard 29C

No overclocking being done at all, Bios is factory default.....oh wait internal GPU on board is toggled for multimonitor support for the LucidMVP thingy which has since be removed. Switching back to disabled.

No BSOD while doing all this.......The usual time for the BSOD to occur is becoming less frequent definitely but the optimal time seems to be after work first bootup about 2:00 am my time.

SAllen61 · 13 Jan 2014

Update:

Problems without bdfsfltr.sys? Service Control Manager error

excerpt from GB Diagnose Report:
Full report attached:

----------------------------------
12 - Event Log
----------------------------------
1201 - Time : 1/14/2014 7:07:47 AM
1202 - Source : WinMgmt
1203 - Description : Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected.
1201 - Time : 1/14/2014 6:40:57 AM
1202 - Source : WinMgmt
1203 - Description : Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected.
1201 - Time : 1/14/2014 6:02:28 AM
1202 - Source : WinMgmt
1203 - Description : Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected.
1201 - Time : 1/14/2014 5:51:38 AM
1202 - Source : WinMgmt
1203 - Description : Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected.
1201 - Time : 1/14/2014 5:48:03 AM
1202 - Source : WinMgmt
1203 - Description : Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected.
1201 - Time : 1/13/2014 3:27:44 PM
1202 - Source : WinMgmt
1203 - Description : Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected.
1201 - Time : 1/13/2014 3:23:02 PM
1202 - Source : WinMgmt
1203 - Description : Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected.
1201 - Time : 1/13/2014 4:19:49 AM
1202 - Source : WinMgmt
1203 - Description : Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected.
1201 - Time : 1/12/2014 8:14:47 PM
1202 - Source : WinMgmt
1203 - Description : Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected.
1201 - Time : 1/12/2014 7:59:33 PM
1202 - Source : WinMgmt
1203 - Description : Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected.
1201 - Time : 1/14/2014 7:07:05 AM
1202 - Source : Service Control Manager
1203 - Description : The LiveUpdate service terminated unexpectedly. It has done this 1 time(s).
1201 - Time : 1/14/2014 7:05:58 AM
1202 - Source : Service Control Manager
1203 - Description : The bdfsfltr service failed to start due to the following error:
The system cannot find the file specified.
1201 - Time : 1/14/2014 6:40:15 AM
1202 - Source : Service Control Manager
1203 - Description : The LiveUpdate service terminated unexpectedly. It has done this 1 time(s).
1201 - Time : 1/14/2014 6:39:04 AM
1202 - Source : Service Control Manager
1203 - Description : The bdfsfltr service failed to start due to the following error:
The system cannot find the file specified.
1201 - Time : 1/14/2014 6:01:48 AM
1202 - Source : Service Control Manager
1203 - Description : The LiveUpdate service terminated unexpectedly. It has done this 1 time(s).
1201 - Time : 1/14/2014 6:00:39 AM
1202 - Source : Service Control Manager
1203 - Description : The bdfsfltr service failed to start due to the following error:
The system cannot find the file specified.
1201 - Time : 1/14/2014 5:59:21 AM
1202 - Source : Service Control Manager
1203 - Description : The Network List Service service depends on the Network Location Awareness service which failed to start because of the following error:
The dependency service or group failed to start.
1201 - Time : 1/14/2014 5:59:21 AM
1202 - Source : Service Control Manager
1203 - Description : The Network List Service service depends on the Network Location Awareness service which failed to start because of the following error:
The dependency service or group failed to start.
1201 - Time : 1/14/2014 5:59:21 AM
1202 - Source : Service Control Manager
1203 - Description : The Network List Service service depends on the Network Location Awareness service which failed to start because of the following error:
The dependency service or group failed to start.
1201 - Time : 1/14/2014 5:59:21 AM
1202 - Source : Service Control Manager
1203 - Description : The Network List Service service depends on the Network Location Awareness service which failed to start because of the following error:
The dependency service or group failed to start.
----------------------------------
End of file - 33170 Bytes

SAllen61 · 14 Jan 2014

This is my day off so I've been running this computer all day, no BSOD's but that is normal actually.

The BSOD usually occurs from a cold start and only one time then everything is ok till the next day.

I do not understand why only one BSOD then it's resolved till the next startup.

I figure if it's a driver then I should be able to duplicate it somehow, hardware basically checks out.

Golden · 14 Jan 2014

Unless Arc has another suggestion, have you tried a Clean Startup - its its a conflicting application?

Troubleshoot Application Conflicts by Performing a Clean Startup

SAllen61 · 14 Jan 2014

That would be a long process for this BSOD, only once a day.
Just ran Malwarebytes Anti-Rootkit BETA 1.07.0.1008 finds something (.dll entry) immediately on launch in the registry and says it is usually associated with viral activity and gives you a chance to pass it or deleate it, first I said pass and nothing found, next run I said to deleate it and it's gone and I forgot to write it down....no log event on that fix...sigh.

I'm just not that quick anymore I guess, hoping that was something that was bugging things up.

SAllen61 · 16 Jan 2014

Well got the nightly BSOD tonight, ran the last two days fine all day but leave for work and get back @ 3 am, fire up the computer up and bang BSOD while launching Mechwarror Online.

Video card was switching from desktop mode to fullscreen live video mode when It crashed.

This is getting dependable error but only once a day and has to be cold and after midnight to fire it back up.

Attached is: "sysdump4"