BSOD appearing random times with different error codes

NewLife · 05 Feb 2015

I have recently had some BSODs with a variety of error codes. Mostly I have 0x000000F4, 0x0000007A and ataport.SYS with a title KERNEL_DATA_INPAGE_ERROR, and 0x0000007A with Nfts.sys codes. Unfortunately, only one dmp file had been created with a title CRITICAL_OBJECT_TERMINATION, in the other cases they could not been created for some unknown reasons.

These happen unexpectedly, sometimes I even do not do anything with my PC and the error message is on. (I do not use sleeping or hibernating mode) Before it happens, almost everything on the screen freezes down, and I hear my hardware working with unusual and weird sounds, it is like it were struggling, shutting down and turning on itself. Chkdsk was also used some times after an unsuccessful boot, and it always found and solved some problems on the disk. Furthermore, sometimes boot and switching off requires more time than usual. However I do not get any problems while the PC is on, it seems to be working fine.

I have not found any problems with the hardware yet, everything is in its place and works fine, the measured temperatures were always OK.

I was looking for some malwares, and Malwarebytes found an issue with the rundll32.exe in the temporary files. How can I know that it is not a FalsePositive case, and if it is not, what should I do? Should I remove it, then? Is this move going to solve the problems?

I use Windows 7 Home Premium 64bit, the PC is about a half year, the system is about a few months old, because a few months ago some problems similar to these occured, and the best way was to reinstall everything without any analyzing, because the situation was rudely getting worse and worse, and it worked (for a while), but now, I want to know what and where the problem exactly is.

I would appreciate if you could help me solving this problem, please inform me if you need more information about my system or these above mentioned problems.

Thanking you in advance for your help and I am sorry for my bad english. I hope I included everything and am suitable for the rules.

ICIT2LOL · 06 Feb 2015

Hello and welcome NewLife mate take a look at this because that csrss.exe comes up in the dump files as the probable cause Is csrss.exe a trojan?

Now you could just start with these it will not take long and may eliminate the possibility of malware
http://www.superantispyware.com/
http://www.malwarebytes.org/products/malwarebytes_free/
http://www.bleepingcomputer.com/download/adwcleaner/
ADW download from bleeping computer delete any rubbish found with the malware scans
(with ADW if you are running Kaspersky it will throe it up as malware just override Kaspersky)

Golden · 06 Feb 2015

Additional information is required.

1. Download the DM Log Collector application to your desktop by clicking the link below

DM Log Collector.exe

2. Run it by double-clicking the icon on your desktop, and follow the prompts.
3. Locate the .ZIP file that is created on your desktop, and upload it here in your next reply.

NewLife · 06 Feb 2015

I have checked csrss.exe based on the posts, and it seems to be safe.

I have run scans with all of the mentioned programs, all of them found some issues which became removed and repaired. I have indluded their log files.

The first BSOD in the folder was caused by a wrong installed game, I have not had any problems after that case so I guess that should not have caused any damage for my system and is not in connection with these problems I am having now.

Golden · 07 Feb 2015

Code:

*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck F4, {3, fffffa8004bcab30, fffffa8004bcae10, fffff800031e2db0}

----- ETW minidump data unavailable-----
Probably caused by : csrss.exe

Followup: MachineOwner
---------

Run the LONG test of the DOS version of SeaTools:
SeaTools for DOS and Windows - How to Use

ICIT2LOL · 07 Feb 2015

Yes Golden that is the bit spotted and a few Googles on it (links below) did hint that it could be malware and why I asked for the scans, but anyway I'll leave it now.

Is csrss.exe a trojan?

csrss.exe - csrss - Process Information

NewLife · 14 Feb 2015

The tests were all passed, and csrss.exe is considered safe.
The most interesting thing is, that BSODs seem to be dissappearing. After I had cleaned my PC with antimalwares, I had no BSODs anymore.

One issue about my hardware is, that is it possible that the problems were caused by the plug on the motherboard of the hard drive? It seems being quite loose, but it is always fixed in.

Golden · 14 Feb 2015

Yes it could be the connector.

NewLife · 16 Feb 2015

OK, thank you for the help! :)