Getting BSOD every few minutes, problem with modidras.sys

[amaksoud]

Hi,

I started getting very frequent BSODs a few days ago.

It all started when I had problems updating windows, it always returned error code 80072efe.

I then posted the problem to MS Community and followed some steps as suggested by members of the community.

The steps didn't solve my problems, instead I began to get this BSOD.

If it happens, it will crash 3 consequent times.

The problem seem to be with a driver called movidras.sys which I tried searching for it, but it seems that no body knows about it, it's not even mentioned anywhere on the web.

System restore is not an option for me as the oldest restore point available is newer than the problem date.

I can't even try to restore from a DVD backup as my DVD drive is not working.

The logs & diagnostics are attached.

 

[koolkat77]

Welcome to SevenForums.

Norton tends to cause BSOD-s and several other issues. I would recommend uninstalling it with the Norton Removal Tool and replace with Microsoft Security Essentials To Test.

• Norton Removal Tool

Make scans with the following:

-Kaspersky TDSSKiller

• Anti-rootkit utility TDSSKiller

-ESET online scanner

• Free Online Virus Scanner | ESET

In addition, run the malicious software removal tool and WDO:

• http://www.sevenforums.com/tutorials/24076-malicious-software-removal-tool.html
• http://www.sevenforums.com/tutorials/166445-windows-defender-offline.html

Microsoft Security Essentials.

Recommended from a strict BSOD perspective, compatibility & stability compared to other antiviruses/internet security software. It is free and lightweight:-

• Microsoft Security Essentials - Free Antivirus for Windows
  • Malwarebytes : Malwarebytes Anti-Malware removes malware including viruses, spyware, worms and trojans, plus it protects your computer
    • http://www.sevenforums.com/system-security/206705-good-free-system-security-combination.html
    • How to Scan Your Computer With Multiple Antivirus Programs - How-To Geek

   Warning

:ar: Do not start the free trial of Malware Bytes; remember to deselect that option when prompted.

Run a full scan with both (separately) once downloaded, installed and updated.

Perform a System File Check:

1. Click on the start rb:
2. Type CMD on Search
3. Left click and Run as Administrator
4. Type SFC /scannow

Full tutorial here:

• http://www.sevenforums.com/tutorials/1538-sfc-scannow-command-system-file-checker.html

Disk Check on your hard drive for file system errors and bad sectors on it:

• http://www.sevenforums.com/tutorials/433-disk-check.html

Reduce items at start-up. Nothing except anti-virus is required plus improves the time for logging in windows.

• http://www.sevenforums.com/tutorials/1401-startup-programs-change.html
• http://www.sevenforums.com/tutorial...ation-conflicts-performing-clean-startup.html

Upload a screenshot of your hard disk using CrystalDiskInfo:

• CrystalDiskInfo - Software - Crystal Dew World
• http://www.sevenforums.com/tutorials/9733-screenshots-files-upload-post-seven-forums.html

Make a hard drive test from the hard drive manufacturers website:

• Hard Drive Diagnostic Procedure

Let us know the results.

 

[amaksoud]

Hi & thanks for the reply.

I already ran TDSSkiller a few days ago while trying to diagnose the windows update problem and there was nothing wrong.

I also ran SFC/SCNOW, Disk checker and Malware bytes before when I was diagnosing the update problem and didn't find anything wrong.

Clean start up and reducing start up items didn't help as well.

I'm currently running Safe mode with networking and while trying to run ESET online scanner along with Windows Malicious Software removal tool, the laptop shut down with out a BSOD.

I restarted on safe mode again and running ESET online scanner only for the time being.

I'll finish ESET, MS Malicious software removal & MS Security Essentials and feed you back.

 

[koolkat77]

Please do, look forward to the results

 

[amaksoud]

Hi,

I tried all the suggestions and all went OK without any threats except Windows Security Essentials (MSSE) which found some trojan as I remember and it was able to quarantine it and I them deleted it.

The problem now is that MSSE is unable to complete a full scan, each time I start a complete scan, it takes around 2 hours then the computer shuts down in it's own without BSOD.

I tried even running MSSE in safe mode and it did the same.

I guess this problem is due to a processor over heat as each time I run a full scan the processor goes up to 90-100% with only a couple of browser tabs open. After almost an hour the laptop ventilation fins emit huge heat.

When I tried the safe mode, the processor almost ran at around 40-50% and heat was less but eventually it shut down after 2.5 hours. Only the quick scan was ran 3 times and it couldn't find anything more that the trojan it found in the first time.

Running windows again makes the same BSOD.

Here's a screenshot of my disk using Crystal Disk, in 2 parts.

View attachment 251793

View attachment 251794

Note: When I installed MSSE and tried to update its definition for the first time, it was stuck after completing 1/4th of the updates and I had to manually download the update file and updated using it.

For the Hard drive diagnostics, my DVD drive is not functional and I can't boot from it.

 

[koolkat77]

Can you upload a screenshot of summary tab using speccy:
Speccy - System Information - Free Download

 

[amaksoud]

I get this error as soon as Speccy loads

View attachment 251811

 

[Britton30]

Are you able to run any scans?
Try this online one. Free Online Virus Scanner | ESET

Clean dust out all of your vents and openings.

I searched for modidras.sys and movidras.sys, the top result is your thread here.

To better help us to help you would you please add your systems specs? Here's how:SystemInfo See Your System Specs Under System Manufacturer/Model Number add whether it is a desktop or laptop and whether self built. Very important

Log in to Seven Forums and you will be able to transfer the info directly to the specs page in your profile from within the System Info app.

After doing this your specs will be available in each of your posts.
Click on My system Specs in the lower left of this post to see how it should look.
Full instructions are in the tutorial.

 

[amaksoud]

Are you able to run any scans?
Try this online one. Free Online Virus Scanner | ESET

Clean dust out all of your vents and openings.

I searched for modidras.sys and movidras.sys, the top result is your thread here.

To better help us to help you would you please add your systems specs? Here's how:SystemInfo See Your System Specs Under System Manufacturer/Model Number add whether it is a desktop or laptop and whether self built. Very important

Log in to Seven Forums and you will be able to transfer the info directly to the specs page in your profile from within the System Info app.

After doing this your specs will be available in each of your posts.
Click on My system Specs in the lower left of this post to see how it should look.
Full instructions are in the tutorial.

Thanks Britton for the reply.

I was able to run all the scans suggested by KoolKat77 except for the MSSE Full scan, the quick scan is Okay.

I added all the info as suggested, Thanks once again.

Forgot to tell you that I'll need sometime to get my hands on some tools to clean dust.

 

[Britton30]

A can of air should do the dust cleaning, about $6 in electronics stores or department. How did the Eset scan go?

 

[amaksoud]

A can of air should do the dust cleaning, about $6 in electronics stores or department. How did the Eset scan go?

No need to open the laptop ? I think if you mean that I can use compressed air without opening the laptop, the some of the dust will eventually settle inside.

I remember that the ESET scan was OK, to make sure I'm running it once again now and will confirm.

I just noticed that the file name in the thread subject is wrong while reading your first reply, it's movidras.sys not modidras.sys, thanks for the tip

 

[koolkat77]

Thanks Gary!

@ OP
Try HWinfo:

• CPUID - System & hardware benchmark, monitoring, reporting

 

[amaksoud]

Thanks Gary!

@ OP
Try HWinfo:

• CPUID - System & hardware benchmark, monitoring, reporting

Sorry Koolkat77, didn't get what you want me to do exactly.

I see few software but non of them called HWinfo.

I tried HWMonitor and it only shows the processor temperature.

 

[koolkat77]

Sorry, my bad. It's HWmonitor I was talking about

 

[amaksoud]

Sorry, my bad. It's HWmonitor I was talking about

No problem

As I told, it only shows the processor temp.

View attachment 251911

 

[koolkat77]

Okay thanks.

Did you get any new BSOD-s?

 

[amaksoud]

Okay thanks.

Did you get any new BSOD-s?

7 during the past 24 hours.

I'm running on safe mode, if not, I get a BSOD almost every 30 minutes or less.....note the time of the 5th & 6th BSOD from up, specially if I'm installing, uninstalling, updating drivers, scanning for viruses or male ware.

View attachment 251912

Two things I want to add here:

1- I updates all my laptop drivers yesterday from Toshiba's website even though most of the drivers on the site were more than 2 years old and I had the same version installed.

2- I went through the device manager, opening every driver I have and checking driver file associations with the movidras.sys but I found non associated with it.

One last question, is there any free software that can automatically search for and update my drivers ?

 

[koolkat77]

I think you should run a scan with Windows Defender Offline:

• http://www.sevenforums.com/tutorials/24076-malicious-software-removal-tool.html
• http://www.sevenforums.com/tutorials/166445-windows-defender-offline.html

It should be able to remove the thread MSE wasn't.

Then test RAM, in the following manner:

Take memtest. Run for 8 passes and test each stick in a know good slot for an additional 6 passes.

• http://www.sevenforums.com/tutorials/105647-ram-test-memtest86.html

The goal is to test all the RAM sticks and all the motherboard slots.

Check your motherboard manual to ensure the RAM sticks are in the recommended motherboard slots. Some motherboards have very specific slots required for the number of RAM sticks installed.

If you get errors, stop the test and continue with the next step.

1. Remove all but one stick of RAM from your computer (this will be RAM stick #1), and run Memtest86 again, for 7 passes.

*Be sure to note the RAM stick, use a piece of tape with a number, and note the motherboard slot.
​

If this stick passes the test then go to step #3.

2. If RAM stick #1 has errors, repeat the test with RAM stick #2 in the same motherboard slot.

*If RAM stick #2 passes, this indicates that RAM stick #1 may be bad. If you want to be absolutely sure, re-test RAM stick #1 in another known good slot.
​

*If RAM stick #2 has errors, this indicates another possible bad RAM stick, a possible motherboard slot failure or inadequate settings.
​

3. Test the next stick of RAM (stick #2) in the next motherboard slot.

*If this RAM stick has errors repeat step #2 using a known good stick if possible, or another stick.
​

*If this RAM stick has no errors and both sticks failed in slot#1, test RAM stick #1 in this slot.
​

4. If you find a stick that passes the test, test it in all the other motherboard slots.

If Part 2 testing shows errors, and all tests in Part 3 show errors, you will need to test the RAM sticks in another computer and/or test other RAM in your computer to identify the problem.

In this way, you can identify whether it is a bad stick of RAM, a bad motherboard, or incompatibility between the sticks.

   Information

Errors are sometimes found after 8 passes.

   Tip

Do this test overnight, before going to bed.

 

[amaksoud]

Ok. i will try that over night.

One more note, even on safe mode, the windows shuts down almost every 2 to 2.5 hours (no BSOD).

I will try the compressed air without opening the lap top today and note the emitted heat, if there's not much improvement, I will open it and try again.

Will keep you posted.

Thanks.

 

[Britton30]

There are programs which check for driver updates but I can't recommend one. All I have used do show drivers for hardware I don't have or want money for them. Never pay for a driver.