Hello, chocaholic. I will see if I can help.
You had 4 dump files. This is what they listed. I might add the first 2 were identical with one exception.
Code:
Use !analyze -v to get detailed debugging information.
BugCheck 9F, {3, fffffa800d6e9990, fffff800051293d8, fffffa800b1cd6c0}
*** WARNING: Unable to verify timestamp for btfilter.sys
*** ERROR: Module load completed but symbols could not be loaded for btfilter.sys
Probably caused by : btfilter.sys
that is the Atheros Bluetooth Driver
Code:
fff800`05129878 fffff880`05e34ed0Unable to load image Rt64win7.sys, Win32 error 0n2
*** WARNING: Unable to verify timestamp for Rt64win7.sys
*** ERROR: Module load completed but symbols could not be loaded for Rt64win7.sys
Rt64win7+0x1aed0
that is the Realtek RTL8168D/8111D Family PCI-E Gigabit Ethernet NIC
Code:
ffff800`05129550 fffff880`05532ff0Unable to load image SYMNETS.SYS, Win32 error 0n2
*** WARNING: Unable to verify timestamp for SYMNETS.SYS
*** ERROR: Module load completed but symbols could not be loaded for SYMNETS.SYS
SYMNETS+0x7bff0
That is the Symantec/ Norton NIS/ N360 Network Security driver
Code:
ffff800`05129528 fffff880`05417a00Unable to load image IDSvia64.sys, Win32 error 0n2
*** WARNING: Unable to verify timestamp for IDSvia64.sys
*** ERROR: Module load completed but symbols could not be loaded for IDSvia64.sys
IDSvia64+0xca00
Which is the Norton Internet Security. That's 2 errors from Norton, both present in 2 dumps. Norton is a well known cause of BSODs. That is from the last dump file, the next one is identical with the addition of
Code:
ffff800`00b9a718 fffff880`0794a88fUnable to load image athrx.sys, Win32 error 0n2
*** WARNING: Unable to verify timestamp for athrx.sys
*** ERROR: Module load completed but symbols could not be loaded for athrx.sys
athrx+0x14988f
That is the Atheros network adapter driver. The third dump listed
Code:
Use !analyze -v to get detailed debugging information.
BugCheck 1000007E, {ffffffffc0000005, fffff8800624c61e, fffff88003f161e8, fffff88003f15a40}
Probably caused by : atikmdag.sys ( atikmdag+4061e )
Followup: MachineOwner
Which is the graphics driver, and the last dump is
Code:
Use !analyze -v to get detailed debugging information.
BugCheck C5, {8, 2, 0, fffff800031c9b15}
Probably caused by : Pool_Corruption ( nt!ExDeferredFreePool+249 )
Followup: Pool_corruption
Which means basically a driver has corrupted other drivers or system files. If you look at it as a whole, you have Norton internet security and Norton network security mentioned in 2 of the dumps, with maybe one exception the other errors are all network drivers, athrx.sys, Realtek RTL8168D/8111D Family PCI-E Gigabit Ethernet NIC and the Atheros Bluetooth Driver. The other issue is the pool corruption which could be the cause of all of these. It appears that the main problem lies with the Network/LAN drivers. Those, I believe are controlled by Norton network security.
If you would like to know, ntoskrnl.exe is the Windows Kernel and will not cause a BSOD unless it has been tampered with or corrupted by some other process.
I would suggest that you uninstall Norton, if you can and use the Norton removal tool (https://support.norton.com/sp/en/us/...rProfile_en_us)
Also, please open an elevated command prompt ( click start, type cmd in the search box, right click on the cmd entry and select run as administrator) in the black box that opens, copy/paste sfc /scannow. If you decide to type it, notice the space between the sfc and the /. It is a system file checker which will scan your system files and attempt to correct any missing or corrupt files. What we want are the results to say windows found no integrity violations. If it says files were found but could not be repaired, close the box, reboot and run it again, after opening the administrative command prompt. You may have to reboot and run it three times for it to repair all system files. If it can't repair them after 3 reboots, let us know.
I realize you are dealing with this remotely and I don't know how much control you have over what is installed and what isn't. So, you look at the results and decide. You mentioned running Memtest86. If it will help you, I will give you the directions I normally give on how to run it correctly.
Please Run Memtest86+
Information
Please download from this site only
http://www.memtest.org/ in the middle of the page are the Download links, you can download the ISO.zip or the Auto USB Flash Drive installer.zip
Extract the Zip file. If you chose the ISO image, burn it to a CD using Windows Disk Image Burner or any Image burner you may have. If you downloaded the Auto USB installer, extract it, insert your USB 2.0 Flash Drive and take note of the drive letter. Run the installer, select the Flash Drive Letter, check the format box and press next. It will install memtest86+ to a flash drive. You can use either V4.20 or V5.01. Boot from your selected media. If you use V5.01 it will tell you to press certain buttons at the start, please press no buttons. The test will begin on it's own and continue to run until you stop it. It needs to run for 8 complete passes or until you receive an error. If you receive an error, stop the test. Even 1 error is a fail. Each pass tests a different part of the ram and each of the 10 tests in each pass tests something different. It takes a minimum of 8 passes to completely test the ram, more passes are better. It is quite a long test and will take several hours depending on how much ram you have. Due to the time length it is best to run overnight. If you have any questions, please do not hesitate to ask.
Please try some of those things and let us know your results.