Brand new computer, occasional BSOD, can't find any pattern

[zap514]

Hi!

So i have been having regular problems with my new computer running W7 Professional Sp1 64bit.

I have checked the hard drive for errors, none found
run memtest, 8 passes, no errors.
tried sfc /scannow, no errors.
Switched mouse, keyboard, monitor connection (from HDMI to VGA since i thought that might have caused all my previous blue screens)

For internet i use an ethernetcable straight to the router
All firmware and drivers are up to date and no errors are showing up in device manageer.

It would be much appreciated if you could take a look at my dmp-files

Theese are my specs:
Gigabyte GA-Z77M-D3H - Intel i7 3770K - Intel HD Graphics 4000 - Samsung 830 256GB - Corsair Vengeance LP 16GB CL9 1600Mhz - Silverstone ST40NF (400W)

If you need any additional info dont hesitate to ask

Many Thanks in advance

 

[Arc]

Hello zap514, sorry to say, vut it is the failure of your antivirus program.

fffff880`03337928  fffff880`02c914d0Unable to load image \SystemRoot\system32\DRIVERS\eamonm.sys, Win32 error 0n2
*** WARNING: Unable to verify timestamp for eamonm.sys
*** ERROR: Module load completed but symbols could not be loaded for eamonm.sys
 eamonm+0x44d0

Description here: Driver Reference Table - eamonm.sys.

I'd suggest to uninstall ESET.
Use Microsoft Security Essentials as your antivirus with windows inbuilt firewall, and free MBAM as the on demand scanner.

Download and install those, and then run full system scans with both of them, one by one.

Also, Scan the system for possible virus infection.

• Anti-rootkit utility TDSSKiller
• Windows Defender Offline

update the network driver.
First, download the network card driver from manufactuer's website.
Then reinstall the driver:

1. Click the Start Button, type "devmgmt.msc" (without quotation marks) in the Start Menu Search box and press Enter.
2. Double click to expand "Network adaptors".
3. Right click your network card and click Uninstall.
4. Check "Delete driver software for this device" check box, click OK.
5. Restart the computer
6. If windows does not auto configure the appropriate drivers at startup, install the downloaded one manually.

And then, try to recover the error that is saying to be ntfs.sys.

1. Update your SSD's Firmware (skip, if it is not a SSD)
2. Re-seat the sata and power.
3. Run chkdsk /f/r, following the option two of the tutorial Disk Check
4. Seatool for dos: SeaTools | Seagate download
   Burn it in a blank cd. boot from the CD, click on "Accept", wait for it to finish detecting the drives, then in the upper left corner select "Basic Tests", then select "Long Test" and let it run.

 

[zap514]

I have followed your instructions and have not encountered any more blue screens. Thank you!

 

[Arc]

Nice to know

 

[zap514]

So it seems that the problem still persist. It was really weird actually, today when i turned on the computer, just after logging in a notification appears that Microsoft security essentials needs to be turned on, allthough I never turned it off (?).Then shortly after I received a new BSOD, similar to my previous blue screens, caused by ntoskrnl.exe, after that I got a couple of more blue screens. I have attached some new DPM files.
I was hoping you could take a look at it.
Thanks again in advance.

 

[Arc]

*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

[COLOR=Red]BugCheck 19[/COLOR], {3, fffffa8012820570, c000000000040, fffffa8012820f18}

Probably caused by : Pool_Corruption ( nt!ExDeferredFreePool+cbb )

Followup: Pool_corruption
---------

2: kd> !analyze -v
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

[COLOR=Red]BAD_POOL_HEADER (19)[/COLOR]
The pool is already corrupt at the time of the current request.
This may or may not be due to the caller.
The internal pool links must be walked to figure out a possible cause of
the problem, [B][COLOR=Red]and then special pool applied to the suspect tags or the driver
verifier to a suspect driver.[/COLOR][/B]
Arguments:
Arg1: 0000000000000003, the pool freelist is corrupt.
Arg2: fffffa8012820570, the pool entry being checked.
Arg3: 000c000000000040, the read back flink freelist value (should be the same as 2).
Arg4: fffffa8012820f18, the read back blink freelist value (should be the same as 2).

Debugging Details:
------------------

In such a situation, it is better to enable Driver Verifier to monitor the drivers.
Driver Verifier - Enable and Disable
Run Driver Verifier for 24 hours or the occurrence of the next crash, whichever is earlier.

Let us know the results, with the subsequent crash dumps, if any.

 

[zap514]

Okay so I have run verifier with all services except those signed by microsoft. then i get BSOD instantly at startup and have to use system restore to get the OS working again. The bluescreens said to be caused by ntoskrnl.exe and also a driver for my midi-keyboard. So i deleted it and ran verifier again and i still get regular blue screens, even after disabling verifier. The last two bluescreens were caused by:
tunnel.sys (tunnel+0x2CD3)
tunnel.sys (0xFFFFF880044C1CD3)

I have attached the latest dumpfiles

 

[Arc]

You need to uninstall Daemon tools. It is a very frequently BSOD causer.

*** ERROR: Module load completed but symbols could not be loaded for igdkmd64.sys
*** WARNING: Unable to verify timestamp for dtsoftbus01.sys

Try to search for any available updates for your Atheros NIC driver, in ATHEROS drivers for Microsoft Windows (Atheros?????).

 

[tlarseth]

You need to uninstall Daemon tools. It is a very frequently BSOD causer.

*** ERROR: Module load completed but symbols could not be loaded for igdkmd64.sys
*** WARNING: Unable to verify timestamp for dtsoftbus01.sys

Try to search for any available updates for your Atheros NIC driver, in ATHEROS drivers for Microsoft Windows (Atheros?????).

To remove Daemon Tools, don't just uninstall it, run the STDP uninstaller as well, the Daemon Tools uninstaller won't remove the driver that causes bluescreens on it's own, so you have to use another uninstaller to remove it, here is a link for you.

DuplexSecure - Downloads

 

[Arc]

To remove Daemon Tools, don't just uninstall it, run the STDP uninstaller as well, the Daemon Tools uninstaller won't remove the driver that causes bluescreens on it's own, so you have to use another uninstaller to remove it, here is a link for you.

DuplexSecure - Downloads

You know mate, why I dont suggest it? I have noticed it many a times that after uninstalling Daemon tools when the persons not with ample experience of this standalone SPTD installer, they got SPTD reinstalled using it, and our aim of troubleshooting that is to make the system free from SPTD, is not attained.

If you suggest it, always suggest to run the program, and then click the "uninstall" button only. If that is grayed out, exit the program, and dont touch any other buttons.

 

[tlarseth]

Thanks Arc, I assumed with me saying uninstaller they would know to click uninstall. Will keep that in mind.

 

[zap514]

You need to uninstall Daemon tools. It is a very frequently BSOD causer.

*** ERROR: Module load completed but symbols could not be loaded for igdkmd64.sys
*** WARNING: Unable to verify timestamp for dtsoftbus01.sys

Try to search for any available updates for your Atheros NIC driver, in ATHEROS drivers for Microsoft Windows (Atheros?????).

Okay I recently uninstalled Daemontools. I never had SPTD installed so there are no traces of Daemontools left on my computer. Still blue screens

I have the latest network driver available, and I have also tried previous versions. seems like all my crashes dont create dumpfiles..
here is the latest one anyways.

 

[Arc]

*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck 109, {a3a039d89f233b25, 0, 3b9608d50c8b7264, 101}

[COLOR=Red]Probably caused by : Unknown_Image[/COLOR] ( ANALYSIS_INCONCLUSIVE )

Followup: MachineOwner
---------

Your crash dumps are not showing any finite probable cause. In such a situation, it is better to enable Driver Verifier to monitor the drivers.

Driver Verifier - Enable and Disable

Run Driver Verifier for 24 hours or the occurrence of the next crash, whichever is earlier.

Let us know the results, with the subsequent crash dumps, if any.

 

[zap514]

*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck 109, {a3a039d89f233b25, 0, 3b9608d50c8b7264, 101}

[COLOR=Red]Probably caused by : Unknown_Image[/COLOR] ( ANALYSIS_INCONCLUSIVE )

Followup: MachineOwner
---------

Your crash dumps are not showing any finite probable cause. In such a situation, it is better to enable Driver Verifier to monitor the drivers.

Driver Verifier - Enable and Disable

Run Driver Verifier for 24 hours or the occurrence of the next crash, whichever is earlier.

Let us know the results, with the subsequent crash dumps, if any.

Okay so I just got a new bsod in Verifier, pointing towards my external soundcard (latest drivers installed). So now I have had the following programs and drivers causing bsod. (all programs and external hardware have run without any problem on my other windows 7 laptop and my macbook):

Nod32
Automap (Midikeyboard software and driver)
M-audio Fast track ultra (the soundcard that just caused a bsod, Minidump attached)
Evoluent mouse driver (for an ergonomic mouse I just bought, not sure if there was a dumpfile created for this one.)
Daemontools (without SPTD)
igdkmd64.sys (which is my graphics drivers, right?)

Is this really normal? considering all drivers are up to date and problems keep reoccuring with different drivers constantly
How reliable are BSOD results from "Driver verifier"? Does "driver verifier" stress the drivers in a way that would not cause any problems in normal operation and thereby create "false-positive" results?

Would it theoretically be possible that a single external component, such as a mouse, keyboard or monitor corrupts the system and creates problems in other drivers?

Im really giving up all hope on this computer, as unstable as it seems

 

[Arc]

Well, all those are normal.

• Nod32: Like all other AV programs, they also crash. You may try upgrading it to the latest, or choose a lightweight one lime Microsoft Security essentials.
• AutoMap: I am not very sure, never dealt with it.
• Daemon Tools: Most well knows BSOD causer. SPTD not needed, dtsoftbus01.sys alone is enough to do it.
• Display and sound driver: They crashes frequently. Either outdated driver, or a weak driver version, or improper installation cause it.
• All the third party mouse drivers are crashers, depending on situation.

DV is a widely used tool, and we depend on it. It is the fact that it put a stress, but within the stress, the drivers who are faulty and weak, eventually fail.



To me, the computer itself is not unstable, but it needs proper tuning and maintenance, and it is to be done manually.

 

[zap514]

Well, all those are normal.

• Nod32: Like all other AV programs, they also crash. You may try upgrading it to the latest, or choose a lightweight one lime Microsoft Security essentials.
• AutoMap: I am not very sure, never dealt with it.
• Daemon Tools: Most well knows BSOD causer. SPTD not needed, dtsoftbus01.sys alone is enough to do it.
• Display and sound driver: They crashes frequently. Either outdated driver, or a weak driver version, or improper installation cause it.
• All the third party mouse drivers are crashers, depending on situation.

DV is a widely used tool, and we depend on it. It is the fact that it put a stress, but within the stress, the drivers who are faulty and weak, eventually fail.



To me, the computer itself is not unstable, but it needs proper tuning and maintenance, and it is to be done manually.

Okay, so I have removed both the midi keyboard driver and external audiodriver, also their software but the problem seems to persist. Recently I have discovered that whenever i download files in my webbrowsers (Chrome or firefox) or when i try to extract/install files from a usb flashdrive the files constantly appear to be corrupted (crc-errors in winrar and random files in installations list as corrupted and gives me an option to cancel, retry or continue anyway

My first thought was that this must be caused by a problem with either the ram or harddrive. So last night I scanned my hard driver for errors, it showed no signs of bad sectors, I am currently running memtest86. It has currently 7 passes without any errors. Is that enough or should i run it longer?

Could this corruption problem somehow be caused by the "Realtime protection" in Microsoft Security Essentials? I don't think i have installed any new programs since MSE

 

[Arc]

Could this corruption problem somehow be caused by the "Realtime protection" in Microsoft Security Essentials? I don't think i have installed any new programs since MSE

Perhaps not ... still, scan the system for possible virus infection.

• Anti-rootkit utility TDSSKiller
• Windows Defender Offline

And, next time, upload the crash dumps, too.

 

[zap514]

Could this corruption problem somehow be caused by the "Realtime protection" in Microsoft Security Essentials? I don't think i have installed any new programs since MSE

Perhaps not ... still, scan the system for possible virus infection.

• Anti-rootkit utility TDSSKiller
• Windows Defender Offline

And, next time, upload the crash dumps, too.

Previously when running TDSKILLER i found no threats, yesterday when i ran it, i found several forged files, and whenever i put them in quarantine and scanned again, new threats came up and it never ended

I decided to format harddrive and reinstall the OS since TDSKILLER could'nt fix my problem.

So everything appeared to be going well after the fresh install, i ran some updates through windows update after installing all the latest drivers, then all of a sudden. BSOD (no dumpfile)... then the problems came back with corrupt files, most downloaded files got corrupted, also files copied from USB flashdrives. so I ran TDSKILLER, and once again, finds dozens of reappearing forged files(?). I managed to install malwarebytes after a lot of tries, the search came out clean. I tried using kasperskys rescue disk from usb but it failed to scan.

Any idea what the problem might be?

EDIT: They are all listed as Forgedfile.multi.generic

 

[Arc]

TDSSKiller kills threats called rootkit, and they stays in the BIOS. A formatting cannot clear them. Try killing the files, not quarantining.

Also, you may try another utility .... Malwarebytes : Malwarebytes Anti-Rootkit.

Let Windows Defender Offline a go, too.

 

[zap514]

TDSSKiller kills threats called rootkit, and they stays in the BIOS. A formatting cannot clear them. Try killing the files, not quarantining.

Also, you may try another utility .... Malwarebytes : Malwarebytes Anti-Rootkit.

Let Windows Defender Offline a go, too.

I have managed to remove some kind of MBR virus from my computer through Comodos rescue disc, I formated the computer and made scans with Malwarebytes anti-rootkit, tdskiller and MSE, found nothing, so it's definitely gone now. It also turns out
that my BIOS were really outdated so I figured that might be the problem (was F5, current version is F14)
This time I installed nothing more than firefox and MSE and let it run over night with driver verifier on, everything seemed fine. Downloaded files would still sometimes get corrupted though. So i thought maybe my ethernet cable is bad, but I have tried it in my other two computers running Windows 7 sp1 and Snowleopard 10.6.8. Did'nt get a single corrupted file there. Now i just got a new BSOD
I have attached the dmp
any ideas?

EDIT: I ran verifier on all drivers except those signed by microsoft