Solved BSOD after boot up, during login or right after, (bad spool header?)

[Depache]

BSOD after boot up, during login or right after, (bad_pool_header?)

So every now and again my computer decides to crash and BSOD me and i have done research and asked around with my tech savvy friends as to why and they had told me it might be my video card so i update the video card and or reinstall drivers for it and voila its fixed until the next time that it happens and i have to do the same thing again. now i feel kind of vulnerable giving so much about my computer away i know its not personal (at least it says its not) information but still. so im attaching my dump file but i am thinking it may not be the right one being that it is last modified last year... so not sure what to make of that. thank you for everyone who looks this over and thank you even more for a answer to this and more over for the one to solve my BSOD issue. have a great day all.

the dump file will have to be uploaded a little later like 5-10 mins from now it says i dont have permission to access it so i need to restart out of safe mode and hope it dose not crash and load it again.\

i forgot to say that the randomness of the crashes (reason why i say its random) is due to the fact that it will happen from multiple things.

ex: i install a new game-crashes on next restart or turning on of computer and i get to login screen, i download a large file overnight-crashes on next restart or turning on of computer and i get to login screen, i play a game like fallout 4 for 6 hours-crashes ~ at 6 hours and then crashes on next restart or turning on of computer and i get to login screen

now it wont crash on safe mode in fact i can install and do other things like do safe mode with network and write on the internet like i am, so that is good. it only crashes once i get to the login screen and its not right away every time in fact if im fast enough i can log in and get maybe 10-30 seconds into the loading of my computer before it crashes but i only get maybe 5-10 seconds at login screen so i have to be fast (i can type my passcode and login very quickly now because of this) i thought the login screen was the issue but i was wrong. i hope this helps. if not then i can delete it later on. thank you all again for your help.

 

[Depache]

my bad its (bad_pool_header)
and here is the dump file

 

[Depache]

im bumping because 175 views 3days and no response, at least a hey dude ill look at it. if not able to help then maybe a way for me to look the dump file over i cant open it in any format i looked online and it said to use dumpchk.exe but i dont have it on my pc nor can i get it from windows not sure why i must be going to the wrong site.

 

[z3r010]

The problem was you replied to it yourself and took it out of the unanswered thread queue, I'll leave a request for the guys to take a look.

 

[essenbe]

Hello Depache. Sorry about the wait. I would like you to do a couple of things for me.

Please fill out your System Specs​

   Information

Your System Specs will help us to help you, and doing it in this manner will make them available to all helpers in every post and keep us from hunting for them. We ask that you fill them out in as much detail as possible including Desktop or Laptop, Model number if it is an OEM computer and all components with the Manufacturer and Model number if possible.

If you will go to your last post and click the 'System Specs' in the bottom left of the post, you will find a link to update your system specs. Please fill those out in as much detail as possible, making sure to click save at the bottom of the page. If you would like to know what we would like, you can click 'My System Specs' at the bottom left of this post to see mine. If you do not know what your components are, this will help you accomplish this task. http://www.sevenforums.com/tutorials/180324-system-info-see-your-system-specs.html

Also, please make sure your system is configured for Small Memory Dumps.
http://www.sevenforums.com/tutorials/174459-dump-files-configure-windows-create-bsod.html

The only dump file I could find was dated 12/23/15.

Also, please uninstall Malwarebytes Chameleon for right now. I am not sure if you can do this in safe mode or not, but please try to run a full scan these scanners. You probably already have Malwarebytes but I am adding it just in case.

Scan with Kaspersky TDSSKiller:
Anti-rootkit utility TDSSKiller
Anti-rootkit utility TDSSKiller
ESET online scanner:
Free Virus Scan | ESET Online Scanner | ESET
Free Online Virus Scanner | ESET
Superantispyware
SUPERAntiSpyware | Remove Malware | Remove Spyware - AntiMalware, AntiSpyware, AntiAdware!
Malwarebytes
https://www.malwarebytes.org/mwb-download/
When installing, uncheck the start trial real time scanning and just use it as an on demand scanner

As soon as you fill out your system specs and complete these things I may be able to give you more suggestions. If you have any questions, feel free to ask.

 

[Depache]

i have done that first part and will commence the scans ill let you know what the results are after it may be a day or so.

 

[essenbe]

No problem, whenever you can.

 

[essenbe]

It's difficult to work without recent dump files. I did see that for a while Chameleon has been crashing and showing errors consistently. That can be a sign of malware trying to disable virus protection. That's the reasons for the scans. Be sure to configure your system for small memory dumps so we can get some dump files the next time you get a BSOD.

 

[Depache]

ok did everything you asked and had some unwanted malware and rootkits with some spyware is now clear. but the second scanner was trying to get rid of backups and hirens boot cd also all my steam mods. but i unchecked those. some of my windows .iso backups were also targeted. but i think its all good now. but it got a lot of crap off my pc so that is awesome.

so my computer crashed last night but the minidump did not result in anything. so there is no new dump files not sure what to do about that. yes it is set to minidump and before it was set to kernel dump. neither have resulted in dump files.

but im at this point now. what is next on fixing the BSOD

in reference to the old dump file i know its old but it was during a time when this happen as well and was told to update video drivers and it worked for a while until it happen again.

 

[essenbe]

This won't take long. But run a system file checker.

open an elevated command prompt ( click start, type cmd in the search box, right click on the cmd entry and select run as administrator) in the black box that opens, copy/paste sfc /scannow. If you decide to type it, notice the space between the sfc and the /. It is a system file checker which will scan your system files and attempt to correct any missing or corrupt files. What we want are the results to say windows found no integrity violations. If it says files were found but could not be repaired, close the box, reboot and run it again, after opening the administrative command prompt. You may have to reboot and run it three times for it to repair all system files. If it can't repair them after 3 reboots, let us know.

If that comes out clean, follow this tutorial and reinstall your Graphics driver. Just install only the Graphics driver and PhysX, nothing else. ( http://www.sevenforums.com/tutorials/327414-nvidia-drivers-avoid-problems.html) Those scans are trying to remove things because they shouldn't be there. Hirens is OK, it is just the type of program it is. I can explain Hirens if you need me to. But the other stuff you should be concerned about.

 

[essenbe]

Go to C:/programfiles X86/ESET/ESET Online Scanner/ and upload the Log.TXT

View attachment 386594

A log file should already be created on your C: drive ( or whatever drive you boot from) in the root folder named something like TDSSKiller.2.1.1_27.12.2009_14.17.04_log.txt which is based on the program version # and date and time run.

Open malwarebytes and click on the History tab, check the scan Log, then export and upload that too

View attachment 386593

Also, ask yourself why an anti virus would want to remove your game mods and ISO files. The answer is pretty obvious.

Please zip up those files and upload them. This will tell you how. http://www.sevenforums.com/tutorials/9733-screenshots-files-upload-post-seven-forums.html

 

[Depache]

understood on the files, i am keeping the files you had me get (sskiller and the other 2) and saving them for future use. also i pay for malwarebytes yearly subscription. so the last thing was easy to complete being that i own a copy.

the cmd command prompt resulted with 0 errors

video drivers are now reinstalled

anything else now?

oops didnt notice the second page give me a min to do this

 

[essenbe]

I need to look at them or have someone else look at them. Also, malwarebytes is not an Anti Virus. It is an anti malware. There is a world of difference. The biggest problem seems to be what you are downloading and where you download from.

 

[Depache]

cant find this:
"C:/programfiles X86/ESET/ESET Online Scanner/ and upload the Log.TXT"

but here is the other two


understood i will make a active effort to be more careful from now on. also do you think i should buy a copy of the anti viral you had me use?

 

[essenbe]

Are you sure the TDSS KIller scan completed? Also, you uploaded the Protection log from Malwarebytes, I need the Scan Log.

I also Need the ESET log too. Go to C:\Program Files (x86)\ESET\ESET Online Scanner and upload the Log.TXT

Also, which program found the rootkits? Did TDSS say it found anything?

Malwarebytes >

View attachment 386599

 

[Depache]

the tssd said it got a harddisk issue but the log for eset is not there

 

[essenbe]

Are you able to boot normal now?

 

[essenbe]

What programs found the Rootkits and the Malware? If TDSS Killer did not run or aborted, run it again and send us the logs. If you ran the ESET Scanner, it created a log. If not run it again and set it to detect Malware, then send the logs. The Malwarebytes Scan Log you sent was for 5/8. Yours should have been for 5/13.

 

[essenbe]

Depache, You need to run Check Disk, http://www.sevenforums.com/tutorials/433-disk-check.html

Also, please provide the proper log files from the scans you have already done or run them again and allow them to complete, then upload the log files. After that, I need you to run these 2 scans JRT, Junkware Removal Tool Download and AdwCleaner(https://toolslib.net/downloads/viewdownload/1-adwcleaner/) then upload those log files.

You are going to have to remove the game mods and infected files from your computer. If you don't want to do that, there is not much reason to continue. You will be in the same place in a week or two. When we ask you questions, you need to answer them. These scans need to run and let them do their job. If you stop them because you don't want them to remove the viruses, malware and root kits, just say so. We have all run these scanners ourselves and looked at many log files. We know what they should look like. LET ME REMIND YOU OF SOMETHING. You may not mind having root kits and malware on your computer, but I do. When you upload a log file, I have to open it on my computer. I do not want them on my computer. If you infect my computer, I will not be very happy with you. You need to consider that as well. You need to decide what you want to do and be up front about it.

 

[Depache]

i am very sorry if i had upset you i had run the cleaners you suggested and have cleaned my computer out mods and all and i just re downloaded them and ran the cleaner again on them they are clear im assumeing that the issue was that they were infected prior and now should be safe. im also sorry if i have caused you any problems you have been very very helpful and since the scans and cleaning out i have not had any crashes since. witch is awesome. i will do the scan with eset again but it takes 12 hours to do so i have to set a time aside to do that. my malwarebytes scan is my fault ill run a new one and get that to you. ill also do the disk check, junkware removal and adwcleaner. thank you for your time i will make a more active effort to do this right this time. and no i dont want trojins adware viruses or rootkits on my computer i was just confused being that i knew hirens boot cd should not be so i was not sure about the rest.

ill have to do the eset scan again due to the fact that i cant find that log.txt file anywhere.