Frequent BSOD while watching Netflix / Youtube, random errors

kagehisa · 06 Nov 2013

Hi - I keep on getting random BSOD while watching Netflix, Youtube, or just simply browsing (although it's more frequent on Netflix / Youtube). This has been going on ever since my PC was built, but I just kept on ignoring them. However I want to get rid of the problem because it is interrupting my work.

I wish i could provide more details, but the errors I am getting seem pretty random. My SF zip file that is attached on this thread contains dmp files from January to this date, and it can be seen that the errors are different.

Hope you can help. Let me know what can I do to help you guys investigate the issue.
Thanks in advance!

koolkat77 · 06 Nov 2013

Welcome to the forum.

Please remove Kaspersky, Zone Alarm and Avast!. Running multiple AV's can cause BSOD's.

Revo Uninstaller "Free"
- Use Revo Uninstaller to uninstall stubborn software. Opt for Advance Mode while uninstalling. This allows you to remove leftover registry entries of the software.
  - Link to download: Download Revo Uninstaller Freeware - Free and Full Download - Uninstall software, remove programs, solve uninstall problems

Microsoft Security Essentials & the Free version of Malwarebytes, update and make full scans separately:

Note

Do not start the trial version of MalwareBytes

Also take a look at: Good & Free System Security Combination

Virus Check:
- Make scans with these tools below:
  - TDSSKiller Rootkit Removal Utility Free Download | Kaspersky Lab US
  - Online Virus Scanner Eset
Application conflict:
- Reduce the start-up items. This will help avoid software conflicts:
  - Remove Startup Programs in Windows 7
  - Clean Startup in Windows 7

System File Checker
- The SFC /SCANNOW Command - System File Checker scans the integrity of all protected Windows 7 system files and replaces incorrect corrupted, changed/modified, or damaged versions with the correct versions if possible. If you have modified your system files as in theming explorer/system files, running sfc /scannow will revert the system files to it's default state.
  - Link to full tutorial: SFC /SCANNOW Command - System File Checker
Run Disk Check in Windows 7
- Run this on your Hard Drive(s). This will show you how to run Check Disk or chkdsk in Windows 7 to check a selected hard disk for file system errors and bad sectors on it. With both boxes checked for all HDDs and with Automatically fix file system errors. Post back your logs for the checks after finding them using Check Disk (chkdsk) - Read Event Viewer Log
  - Link to full tutorial: Disk Check

Keep us posted.

kagehisa · 06 Nov 2013

I performed the following:
1. Downloaded Revo, and uninstalled Avast! and ZoneAlarm (note: i dont have kaspersky)
2. Downloaded Microsoft Security Essentials, and ran a full scan. No threats found.
3. Downloaded TDSSKiller and ran a scan. No threats found.
4. Downloaded Malwarebytes. As of the moment, the full scan is still running, with 8 objects detected.

I'll keep you posted as i complete the items you provided above. Thanks for the quick response!

koolkat77 · 07 Nov 2013

Take your time.
Good luck! :)

kagehisa · 07 Nov 2013

Hi - I have completed all the items mentioned above.
1. Downloaded Revo, and uninstalled Avast! and ZoneAlarm (note: i dont have kaspersky)
2. Downloaded Microsoft Security Essentials, and ran a full scan. No threats found.
3. Downloaded TDSSKiller and ran a scan. No threats found.
4. Downloaded Malwarebytes. The full scan detected 8 threats, and was quarantined and deleted successfully

Files Detected: 8
C:\Users\User1\AppData\Local\Temp\4HALfXxP.exe.part (PUP.Optional.Installrex) -> Quarantined and deleted successfully.
C:\Users\User1\AppData\Local\Temp\COsXRQ8J.exe.part (PUP.Optional.InstallIQ) -> Quarantined and deleted successfully.
C:\Users\User1\AppData\Local\Temp\KwOn5gis.exe.part (PUP.Optional.Installrex) -> Quarantined and deleted successfully.
C:\Users\User1\Downloads\marine2.exe (PUP.Optional.InstallIQ) -> Quarantined and deleted successfully.
C:\Users\User1\Downloads\movie_player_1280 (1).exe (PUP.Optional.InstallIQ.A) -> Quarantined and deleted successfully.
C:\Users\User1\Downloads\movie_player_1280 (2).exe (PUP.Optional.InstallIQ.A) -> Quarantined and deleted successfully.
C:\Users\User1\Downloads\movie_player_1280.exe (PUP.Optional.InstallIQ.A) -> Quarantined and deleted successfully.
C:\Users\User1\Downloads\SoftonicDownloader_for_sim-aquarium-3d.exe (PUP.Optional.Softonic) -> Quarantined and deleted successfully.

5. Ran a scan using Eset. 4 threats were found, and were deleted / uninstalled:
C:\Program Files (x86)\W3i\UninstallHelper\UninstallHelper.exe probably a variant of Win32/InstallIQ.A application
C:\Users\User1\AppData\Local\Temp\AskSLib.dll a variant of Win32/Bundled.Toolbar.Ask application
C:\Users\User1\AppData\Local\Temp\qwydLOXs.exe.part a variant of Win32/ELEX.C application
C:\Users\User1\Downloads\video_downloader.exe a variant of Win32/InstallCore.T application

6. Ran system file checker - no problems found.
7. Ran disk check - no problems found.
8. Checked my startup programs, and i unchecked programs that i don't need. The only ones checked are:
Realtek HD Audio Manager
Bluetooth Software
Adobe Updater Startup Utility
Microsoft Intellipoint
Microsoft Security Client
Power2Go
Google Update
JMB36X IDE Setup
Cyberlink MediaLibray Service
SBSV
Adobe CS5 Service Manager
hpwuSchd Application
Belkin Tray Application
Apple Push
iTunes

I'll let you know if i get a BSOD after these steps. Thanks!

kagehisa · 07 Nov 2013

I forgot to attach the Check Disk log.

koolkat77 · 07 Nov 2013

Code:

Chkdsk was executed in read-only mode on a volume snapshot.  

Checking file system on C:

CHKDSK is verifying files (stage 1 of 3)...
  215552 file records processed.                                          File verification completed.
  636 large file records processed.                                      0 bad file records processed.                                        0 EA records processed.                                              60 reparse records processed.                                       CHKDSK is verifying indexes (stage 2 of 3)...
  280772 index entries processed.                                         Index verification completed.


CHKDSK is verifying security descriptors (stage 3 of 3)...
  215552 file SDs/SIDs processed.                                         Cleaning up 573 unused index entries from index $SII of file 0x9.
Cleaning up 573 unused index entries from index $SDH of file 0x9.
Cleaning up 573 unused security descriptors.
Security descriptor verification completed.
  32611 data files processed.                                            CHKDSK is verifying Usn Journal...
  36456368 USN bytes processed.                                             Usn Journal verification completed.
Windows has checked the file system and found no problems.

 117115903 KB total disk space.
  74983592 KB in 151063 files.
     87380 KB in 32612 indexes.
    323611 KB in use by the system.
     65536 KB occupied by the log file.
  41721320 KB available on disk.

      4096 bytes in each allocation unit.
  29278975 total allocation units on disk.
  10430330 allocation units available on disk.

Looks fine :) thanks.

kagehisa · 09 Nov 2013

There have been no BSODs in the last 2 days. However i just encountered one today. Attached here is the fresh extract.
I don't know whether this is also part of my issue.

Note: I have encountered this BSOD while browsing.

Arc · 09 Nov 2013

kagehisa said:

I don't know whether this is also part of my issue.

Yes, it is the same continuing issue, as you have not followed the first line of the first reply.

koolkat77 said:

Please remove Kaspersky,

Kaspersky uses some Zone Alarm's driver which hijacks TCP network connections and its file system monitoring driver causes storage malfunction.

And it is still present there, and rightly failing.

Code:

fffff880`03b38358  fffff880`034c9650Unable to load image \SystemRoot\system32\DRIVERS\klif.sys, Win32 error 0n2
*** WARNING: Unable to verify timestamp for klif.sys
*** ERROR: Module load completed but symbols could not be loaded for klif.sys
 klif+0x1c650

Description here: klif.sys Windows process - What is it?

So you know what you have to do now.

kagehisa · 10 Nov 2013

Hi - I never had Kaspersky on my computer. And just to be sure, Kaspersky is not showing up on my Control Panel (Uninstall Programs), or even on the Revo Uninstaller. I did however, uninstall Avast and ZoneAlarm.

Any ideas how can i remove this klif.sys? Can i just delete it from the folder?