BSOD Occurring Multiple Times Per Day (no singular cause)

**axe0** · 01 Nov 2015

This is the Microsoft Windows Anti-Malware protection system driver.
I am not sure what it could mean, system file problems or malware.

Code:

*** WARNING: Unable to verify timestamp for MpFilter.sys
*** ERROR: Module load completed but symbols could not be loaded for MpFilter.sys

Diagnostics Test

System File Check

Please try following:

Open an admin command prompt
Copy/paste "sfc/scannow" (without quotes) and press enter
When it finished reboot your system
Open again an admin command prompt
Enter sfc/scannow again

If sfc/scannow does NOT say "Windows Resource Protection did not find any integrity violation", please upload the cbs.log file located at {windows partition}\Windows\Logs\CBS\, if the file is too large try a 3rd party uploader like dropbox, onedrive, google drive, mediafire etc.
System File Check(SFC a.k.a. Windows Resource Protection) needs to have your system rebooted in order for sfc to try to fix the problems that it finds.

Diagnostics Test

Malware scan

Please run a threat scan with Malwarebytes, a full scan with your AV, scan your system with Adwcleaner, Kaspersky TTDSKiller, ESET Online Scanner and SuperAntiSpyware

Brothahill666 · 01 Nov 2015

I ran sfc/scannow and it said "Windows Resource Protection did not find any integrity violation." I rebooted the computer and ran sfc/scannow again and it said the same thing.

I ran Adwcleaner and it produced the following.

***** [ Services ] *****

***** [ Folders ] *****
[-] Folder Deleted : C:\Program Files (x86)\Common Files\Software Update Utility
[-] Folder Deleted : C:\ProgramData\TweakBit
***** [ Files ] *****

***** [ DLLs ] *****

***** [ Shortcuts ] *****

***** [ Scheduled tasks ] *****

***** [ Registry ] *****
[-] Key Deleted : HKLM\SOFTWARE\Classes\AppID\dnu.EXE
[-] Key Deleted : HKLM\SOFTWARE\Classes\dnUpdate
[-] Key Deleted : HKLM\SOFTWARE\Classes\dnUpdater.DownloadUIBrowser
[-] Key Deleted : HKLM\SOFTWARE\Classes\dnUpdater.DownloadUIBrowser.1
[-] Key Deleted : HKLM\SOFTWARE\Classes\dnUpdater.DownloadUpdController
[-] Key Deleted : HKLM\SOFTWARE\Classes\dnUpdater.DownloadUpdController.1
[-] Key Deleted : HKLM\SOFTWARE\Classes\AppID\{6C259840-5BA8-46E6-8ED1-EF3BA47D8BA1}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{7B089B94-D1DC-4C6B-87E1-8156E22C1D96}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{E15A9BFD-D16D-496D-8222-44CADF316E70}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{660E6F4F-840D-436D-B668-433D9591BAC5}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{E7435878-65B9-44D1-A443-81754E5DFC90}
[-] Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{92380354-381A-471F-BE2E-DD9ACD9777EA}
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{7B089B94-D1DC-4C6B-87E1-8156E22C1D96}
[-] Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{660E6F4F-840D-436D-B668-433D9591BAC5}
[-] Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{E7435878-65B9-44D1-A443-81754E5DFC90}
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SoftwareUpdUtility
***** [ Web browsers ] *****

*************************
:: "Tracing" keys removed
:: Winsock settings cleared

I ran Kaspersky TTDSKiller and it found no errors.

I ran ESET Online scanner and it found 6 potentially unwanted applications.

- a variant of Win32/Systweak.n
- a variant of Win32/Systweak.l
- a variant of Win32/Systweak
- a variant of Win32/Systweak.n
- a variant of Win32/Systweak.n
- a variant of Win32/Systweak.l

I ran SuperAntiSpyware and it found 1 threat.

- Adware.Tracking Cookie

I also have some other BSOD data at

https://onedrive.live.com/redir?resi...hint=folder%2c

**axe0** · 02 Nov 2015

I prefer to analyse data from the zip generated by the DM Log Collector tool.
This because I don't want to search from an external site what files I am looking for to analyse.

Brothahill666 · 07 Nov 2015

I tried to upload the latest DMP files via the DM Collector Log program. It no longer works. I receive a dxdiag.exe - Bad Image error which says the following.

"C:\Windows\system32\nvspcap.dll is either not designed to run on Windows or it contains an error. Try installing the program again using the original installation media or contact your system administrator or the software vendor for support."

I have also been experiencing some issues with IE 11. Browser windows crash forcing pages to reload. No idea if any of this is related.

**axe0** · 07 Nov 2015

Repair Install

Brothahill666 · 07 Nov 2015

I must have messed up something with the repair install because I wound up having to perform a clean install from scratch. While reinstalling the OS, the computer blue screened. Do you think that the BSOD with a completely wiped drive is 100% rock solid evidence that all BSOD issues are a hardware problem?

**axe0** · 08 Nov 2015

Not all BSOD's, but yes it is.

**axe0** · 08 Nov 2015

Diagnostics Test

HDD TEST

Run SeaTools to check the integrity of your HDD. SeaTools for DOS and Windows - How to Use

Note

Do not run SeaTools on an SSD as the results will be invalid.

Run chkdsk Disk Check

Diagnostic Test

CPU TEST

Run Prime95 to stress test your CPU. Prime95 - Stress Test Your CPU - Windows 7 Forums

Warning

Your CPU temperatures will rise quickly while under this stress test. Keep a keen eye on them and abort the test if overheating occurs.

Brothahill666 · 10 Nov 2015

I have begun running Memtest with a single stick (brand new). Someone suggested making 20 passes, but I haven't been able to get a full 20 passes because of power issues at home. I will continue trying. Thus far, I have been able to run tests for at least 8 hours in each slot which is around 9-11 passes. During the test in slot 1, it returned 500+ errors. The test in slot 2 returned 100+ errors (maybe 3 hours before power died). Slots 3 and 4 produced no errors in 8 hours. Then I tried slot 1 again and it gave me 0 errors. This test is still running. I'll keep it going for the 20 passes. I have tried running my computer with the single memory stick in slots 1 and 3 and both gave me BSOD, but slot 3 did seem to blue screen less.

**axe0** · 11 Nov 2015

Sounds like a few slots are causing problems