BSOD after updating all security programs

Bear with me, I'm at work at the moment. I'll take a look at these when I get home later.

RaidenRaccoon said:

Only things running in the system tray were Malwarebytes, Hamachi, Team Viewer and Intel Rapid Storage Technology.

Are you running a RAID setup?

Also can you disable/uninstall Hamachi for testing purposes.

Code:

DRIVER_OVERRAN_STACK_BUFFER (f7)
A driver has overrun a stack-based buffer.

STACK_TEXT:  
fffff800`042f9888 fffff880`04517a9e : 00000000`000000f7 ff0202fa`ff0202f7 0000f880`0451b23c ffff077f`fbae4dc3 : nt!KeBugCheckEx
fffff800`042f9890 fffff880`044f1aa5 : 00000000`00000032 fffffa80`06a5ee34 00000000`00000032 fffffa80`072b6c02 : netbt!_report_gsfailure+0x26
fffff800`042f98d0 fffff880`0408b325 : fffffa80`0729ea20 00000000`00000002 fffff800`042f9bd8 fffffa80`0729ea20 : netbt!TdiRcvNameSrvHandler+0x374
fffff800`042f9970 fffff880`01a84825 : fffffa80`072b6b80 00000000`00000000 fffffa80`072b6b80 fffff800`042f9bd0 : tdx!TdxEventReceiveMessagesTransportAddress+0x315
fffff800`042f9b60 fffff880`01a7f152 : 00000000`00000000 fffffa80`072b6b80 fffffa80`00000000 fffff800`042f9da0 : tcpip!UdpDeliverDatagrams+0x155
fffff800`042f9cf0 fffff880`01a5af97 : fffffa80`045eaab0 00000000`00000000 5e143a00`89008900 00000000`00000000 : tcpip!UdpReceiveDatagrams+0x132
fffff800`042f9d90 fffff880`01a5aaaa : 00000000`00000000 fffff880`01b6d9a0 fffff800`042f9f50 fffffa80`348dcd3e : tcpip!IppDeliverListToProtocol+0xf7
fffff800`042f9e50 fffff880`01a5a0a9 : fffff880`01b6d9a0 fffffa80`06aa0160 00000000`00000011 fffff800`042f9f40 : tcpip!IppProcessDeliverList+0x5a
fffff800`042f9ef0 fffff880`01a57d4f : 00000000`ff01a8c0 fffff880`01b6d9a0 fffff880`01b6d9a0 00000000`00000000 : tcpip!IppReceiveHeaderBatch+0x23a
fffff800`042f9fd0 fffff880`01a57322 : fffffa80`06acbc70 00000000`00000000 fffffa80`06ad9001 00000000`00000001 : tcpip!IpFlcReceivePackets+0x64f
fffff800`042fa1d0 fffff880`01a5674a : fffffa80`06ad9010 fffff800`042fa300 fffffa80`06ad9010 fffff800`02d20000 : tcpip!FlpReceiveNonPreValidatedNetBufferListChain+0x2b2
fffff800`042fa2b0 fffff800`02c927b8 : fffffa80`06aa0030 00000000`00004800 fffff800`02e10cc0 00000000`00000000 : tcpip!FlReceiveNetBufferListChainCalloutRoutine+0xda
fffff800`042fa300 fffff880`01a56e42 : fffff880`01a56670 fffff800`02e02e80 fffff800`02e29c02 fffff800`02c89e00 : nt!KeExpandKernelStackAndCalloutEx+0xd8
fffff800`042fa3e0 fffff880`019420eb : fffffa80`06ad88d0 00000000`00000000 fffffa80`067d71a0 fffff800`02c213db : tcpip!FlReceiveNetBufferListChain+0xb2
fffff800`042fa450 fffff880`0190bad6 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : ndis!ndisMIndicateNetBufferListsToOpen+0xdb
fffff800`042fa4c0 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : ndis!ndisMDispatchReceiveNetBufferLists+0x1d6

If you didn't successfully set up a RAID configuration then uninstall Intel Rapid Storage.

I don't believe this is a hardware fault.

Code:

*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck F7, {ff0202faff0202f7, f8800451b23c, ffff077ffbae4dc3, 0}

Probably caused by : netbt.sys ( netbt!_report_gsfailure+26 )

Followup: MachineOwner
---------

0: kd> !analyze -v
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

DRIVER_OVERRAN_STACK_BUFFER (f7)
A driver has overrun a stack-based buffer.  This overrun could potentially
allow a malicious user to gain control of this machine.
DESCRIPTION
A driver overran a stack-based buffer (or local variable) in a way that would
have overwritten the function's return address and jumped back to an arbitrary
address when the function returned.  This is the classic "buffer overrun"
hacking attack and the system has been brought down to prevent a malicious user
from gaining complete control of it.
Do a kb to get a stack backtrace -- the last routine on the stack before the
buffer overrun handlers and bugcheck call is the one that overran its local
variable(s).
Arguments:
Arg1: ff0202faff0202f7, Actual security check cookie from the stack
Arg2: 0000f8800451b23c, Expected security check cookie
Arg3: ffff077ffbae4dc3, Complement of the expected security check cookie
Arg4: 0000000000000000, zero

Debugging Details:
------------------


DEFAULT_BUCKET_ID:  GS_FALSE_POSITIVE_MISSING_GSFRAME

SECURITY_COOKIE:  Expected 0000f8800451b23c found ff0202faff0202f7

CUSTOMER_CRASH_COUNT:  1

BUGCHECK_STR:  0xF7

PROCESS_NAME:  System

CURRENT_IRQL:  2

ANALYSIS_VERSION: 6.3.9600.17029 (debuggers(dbg).140219-1702) amd64fre

DPC_STACK_BASE:  FFFFF80004300FB0

LAST_CONTROL_TRANSFER:  from fffff88004517a9e to fffff80002c85ec0

0: kd> lmvm netbt
start             end                 module name
fffff880`044ed000 fffff880`04532000   netbt      (pdb symbols)          c:\symbols\netbt.pdb\3D581F5A08614A7CB02D71638469228D2\netbt.pdb
    Loaded symbol image file: netbt.sys
    Mapped memory image file: c:\symbols\netbt.sys\4CE7938645000\netbt.sys
    Image path: \SystemRoot\System32\DRIVERS\netbt.sys
    Image name: netbt.sys
    Timestamp:        Sat Nov 20 09:23:18 2010 (4CE79386)
    CheckSum:         00041134
    ImageSize:        00045000
    File version:     6.1.7601.17514
    Product version:  6.1.7601.17514
    File flags:       0 (Mask 3F)
    File OS:          40004 NT Win32
    File type:        3.7 Driver
    File date:        00000000.00000000
    Translations:     0409.04b0
    CompanyName:      Microsoft Corporation
    ProductName:      Microsoft® Windows® Operating System
    InternalName:     netbt.sys
    OriginalFilename: netbt.sys
    ProductVersion:   6.1.7601.17514
    FileVersion:      6.1.7601.17514 (win7sp1_rtm.101119-1850)
    FileDescription:  MBT Transport driver
    LegalCopyright:   © Microsoft Corporation. All rights reserved.

It's not the Windows version that is the problem, don't go using up a license that you don't need to. There's a driver in violation but there's no info as to what it is.

Diagnostic Test

 DRIVER VERIFIER

Driver Verifier will stress your drivers and cause BSODs if any fail. Follow this tutorial to enable/disable it. Driver Verifier - Enable and Disable

Enable Driver Verifier but only enable these options:

• Standard settings and IRP logging step 3.
• Don't enable Force Pending I/O Requests

   Warning

Make a System Restore point before enabling Driver Verifier.

   Note

Your system will act very sluggishly while DV is enabled, this is normal as your drivers will be being subjected to heavy testing in order to make them crash.

Post any resulting dump files.

Ran the verifier (select all but Microsoft drivers as per the tutorial instructed) and only marked the options you suggested.

The system did fine for 12 hours, but when I checked this afternoon (about and hour after the 24 hour mark) I was met with a BSOD.

EDIT: After posting this reply, I installed about 50 optional updates for 7 (2 were 'kernel' based), re initiated Hamachi and it's services and disabled verifier and then rebooted. Checked back on the PC and yet another BSOD stating: PAGE_FAULT_IN_NONPAGED_AREA. The PC is off atm, but I will grab the .dmp file from this crash in a bit.