BSOD after updating all security programs

RaidenRaccoon · 26 Mar 2015

This is for my game server PC, not my main PC.

It's running

Windows 7 Home Premium 64 bit
emsisoft antimalware (1 yr license)
Malwarebytes Premium (lifetime)
(at the time of crash) Starbound and Terraria servers
x2 160GB HDDs (one for back up)
x2 2GB DDR3 RAM
x1 1GB GeForce GT 430
2.9GHz Intel Pentium G850
Tyan S5517 Motherboard
Apevia 430W PSU

The night before the crash: Malwarebytes had just udated it's GUI, emsisoft updated and I installed 2 updates for Windows Defender. Only emsisoft required a restart, so I did and loaded the 2 game servers back up.

I awoke to find a message on the desktop about a BSOD that occurred and that my resolution went from 720p to 800x600 (geforce experience wasn't running).

I immediately came here and downloaded the DM Log Collector and turned off the 'Reboot on error'. In the middle of DM doing it's thing, another BSOD- I assume one similar to the previous one.

After rebooting, my resolution returned to normal and the PC has been doing fine for several hours.

I have a feeling one of the updates might have been the cause- specifically emsisoft as the .sys file mentioned on the BSOD seems related to the software upon google searching.

I would love for someone who better understands dump files and such to give me their input though. I really want to know what caused the crashes.

Boozad · 26 Mar 2015

1: Emsisoft

Emsisoft is indeed causing issues. It could be that it's conflicting with MBAM and I'd suggest uninstalling the software, MBAM should more than have you covered with malware protection.

Code:

*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck 3B, {c0000005, fffff880041c1f08, fffff88002e50c70, 0}

Probably caused by : epp64.sys ( epp64+12f08 )

Followup: MachineOwner

2: nVidia Driver

Your nVidia driver has been flagged. Look for an updated version here and follow NVIDIA Drivers - Avoid Problems for the cleanest possible install.

Code:

fffff800`04305620  fffff880`04b57239Unable to load image \SystemRoot\system32\DRIVERS\nvlddmkm.sys, Win32 error 0n2
*** WARNING: Unable to verify timestamp for nvlddmkm.sys
*** ERROR: Module load completed but symbols could not be loaded for nvlddmkm.sys
 nvlddmkm+0x108239

0: kd> lmvm nvlddmkm
start             end                 module name
fffff880`04a4f000 fffff880`05461000   nvlddmkm T (no symbols)           
    Loaded symbol image file: nvlddmkm.sys
    Image path: \SystemRoot\system32\DRIVERS\nvlddmkm.sys
    Image name: nvlddmkm.sys
    Timestamp:        Thu Feb 05 18:01:37 2015 (54D3B001)
    CheckSum:         009D4DDE
    ImageSize:        00A12000
    Translations:     0000.04b0 0000.04e4 0409.04b0 0409.04e4

3: Intel 82579V Gigabit Network Connection Driver

Your Intel 82579V Gigabit Network Connection driver has been flagged. It's pretty old and probably needs updating. Check here for an updated version.

Code:

*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck D1, {19a840f02a8, 2, 8, 19a840f02a8}

*** WARNING: Unable to verify timestamp for e1c62x64.sys
*** ERROR: Module load completed but symbols could not be loaded for e1c62x64.sys
Probably caused by : e1c62x64.sys ( e1c62x64+27c85 )

Followup: MachineOwner

0: kd> lmvm e1c62x64
start             end                 module name
fffff880`044fc000 fffff880`04578000   e1c62x64 T (no symbols)           
    Loaded symbol image file: e1c62x64.sys
    Image path: \SystemRoot\system32\DRIVERS\e1c62x64.sys
    Image name: e1c62x64.sys
    Timestamp:        Thu Feb 21 05:14:02 2013 (5125AD1A)
    CheckSum:         0008277C
    ImageSize:        0007C000
    Translations:     0000.04b0 0000.04e4 0409.04b0 0409.04e

RaidenRaccoon · 26 Mar 2015

Ah. Thank you so much! I shall update those and uninstall emsisoft.

Boozad · 26 Mar 2015

Let us know how you get on.

RaidenRaccoon · 28 Mar 2015

This is for my game server PC, not my main PC.

It's running

Windows 7 Home Premium 64 bit
emsisoft antimalware (1 yr license) [PRIOR TO CRASH- UNINSTALLED AFTERWARDS]
Malwarebytes Premium (lifetime)
(at the time of crash) Starbound and Terraria servers
x2 160GB HDDs (one for back up)
x2 2GB DDR3 RAM
2.9GHz Intel Pentium G850
Tyan S5517 Motherboard
Apevia 430W PSU

Hardware changes prior to crash:

Removed DVD/CD Drive
Removed video card (GeForce GT 430)

Thermal probes at the time of crash showed 19C for the CPU and 24C for the hard drives.

PC has crashed before, but from different errors

This particular crash messed up Windows a bit after rebooting normally. Nothing would load on the taskbar except the start button, windows explorer (folders) would crash before it even started up a folder, etc

I restarted into safe mode, backed up my server files and rebooted, everything started normally. Uninstalled Emsisoft, updated Windows Defender and Ethernet driver.

No player has logged into the servers for days and the 2 that are currently running (I have 3, but only run 2 at a time until I upgrade the RAM) which are the same ones that were up prior to the crash have the memory idling at 50-60%.

It is possible either Emsisoft or Malwarebytes was running a scheduled scan at the time of the crash. I usually schedule scans weekly to monthly at 3 to 5 AM on all my machines.

Boozad · 28 Mar 2015

Memory Diagnostics

Run MemTest86+

Download and run MemTest86+ to test your RAM. RAM - Test with Memtest86+

Note

Attachment 354081

Run MemTest86+ for at least 8 passes. Ideally set it off before you go to bed and leave it overnight, we're looking for zero errors here. A single error will show something's going bad with your RAM.

RaidenRaccoon · 28 Mar 2015

Currently on Pass 9, no errors yet. Should I let it continue?

Boozad · 28 Mar 2015

I think that should be fine after nine passes.

RaidenRaccoon · 30 Mar 2015

Back again, same computer, another BSOD earlier today.

The BSOD didn't give much information so I have no idea what it was this time. Again, same 2 game servers were running.

Starting to suspect the motherboard as the hard drives show up as 'good' in CrystalDisk, Error Check doesn't seem to find anything, the OS was installed earlier this month and the RAM made it through 9 passes of MemTest86+. Plus the 2 game servers only seem to put the RAM usage at 75% max.

Going to leave them off until the next crash, if there will be one, to rule them out.

RaidenRaccoon · 31 Mar 2015

And another BSOD.

Just like the one before, not much information as well as the top part being cut off (error seemed large and the top and right were cut off on my monitor)

Only things running in the system tray were Malwarebytes, Hamachi, Team Viewer and Intel Rapid Storage Technology.

No game servers running this time.

BSOD after updating all security programs

BSOD after updating all security programs

Bsod - memory_management

Run MemTest86+