BSOD Immediate on boot into normal mode, error 0x00000116 nvlddmkm.sys

[phoebus]

This I believe is further escalation of the effects of a virus or trojan which I was convinced I had got rid of but maybe not. The BSOD happens as soon as I boot into normal mode but I can use safe mode OK with networking which is what I am using now.


It looks like a graphics card malfunction so I tried updating the driver [none available] and rolling back to the old one [no effect]. I reinstated the newest version.


The infection happened a few weeks ago. Major symptoms were fan fury and a bunch of weird processes in task manager. I blasted it with every anti-virus tool I could get my hands on, eset, malwarebytes, rogue killer etc and after a few days battle figured I had got rid of it. Web searches suggested it was a thing that was using my power to mine bitcoin or the like. Anyway the lasting damage is that Windows Update has disappeared so I have been working without it for a while now. Also my restore points are constantly being wiped out. I have none available at the moment.



Windows System Tool has run automatically a few times after the rebooting into safe mode but did not resolve the issue.


That's about all I can tell you for the moment. Hopefully you can help. If someone replies to this later I may not reply as i will soon be retiring for the night but I will definitely respond tomorrow as I intend to continue the battle.


I am resisting doing a repair job or a full re-installation until I have got through a few obligations but I am resigned to the prospect eventually.



Thanks for your help and for listening at least.

 

[wither 2]

Give this a shot-

a. Click Start, type services.msc in the Start search box and hit Enter.
b. Locate the “Remote Access Connection Manager” service.
c. Right-click the service and select “Properties”.
d. Click the “Dependencies” tab.
Make a note of the dependency services of “Remote Access Connection Manager” and make sure that these services are started and the startup type is set to “Automatic”.

 

[phoebus]

Hi
Here is a list of dependencies with each startup type and current status:-

Remote Access Connection Manager Automatic [can't start in safe mode]

error 1084
---------------------------
Secure Socket Tunneling Protocol Service Automatic [can't start in safe

mode] error 1084
Telephony Automatic [can't start in safe mode] error 1084
Plug and Play Automatic [started]
Remote Procedure Call (RPC) Automatic [started]
DCOM service process Launcher Automatic [started]
RPC endport mapper Automatic [started]
----------------------------------
Internet connection Sharing (ICS) Automatic [can't start] error 1068 the

dependancy service or group failed to start
Remote Access auto Connection Manager Automatic [can't start] error 1068
Routing and Remote Access Automatic [can't start] error 1068

 

[wither 2]

I was comparing my settings to yours and there are some that are started but are manual. Not unusual.

Can you set the ICS to disabled?

 

[wither 2]

The latest .dmp was empty so I spot checked the other ones. In every case, BSODs are being caused by your graphics card. I think it's over heating. As a result, you should do the cleanliness check on the case vents and fans and the GPU fan. Make sure the GPU fan is running. You could also run something like HMonitor to check the temperatures but I think it's easiest to to disable the driver and reboot. Also, could you provide the version number for the GPU?

However, the last shutdown in the event log appears to be connectivity related. That's why I asked you to check the services. I have no idea if this problem is related to the other one.

 

[phoebus]

Hi wither
I opened the GPU bay and cleaned the fans. There was some dust present but not enough to cause overheating.

I disabled GPU driver and rebooted.
Impossible to tell if GPU fan is operable when driver is disabled but I suspect it is fine and problem is connectivity or other electronic anomaly.


All services mentioned are started and set to auto.


ICS is disabled?


GPU details: nVIDIA GeForce GTX 580M driver version 9.18.13.2702


thats all

 

[wither 2]

You want to be sure that all other case fans are clean and running. It looks like you're running a notebook.

The GPU fan wouldn't be running when the driver is disabled. Sorry, if I confused you.

From what I can find, the driver you're using is for Win 8. However, it would be unusual for a NVIDIA driver to be applicable to only one OS. I found a list of drivers here-

NVIDIA GeForce GTX 580M Drivers Download for Windows 10, 8.1, 7, Vista, XP

but, you might want to run the automatic detection from the NVIDIA website or, if you have the Geforce Experience, use it.

However, since you can't boot into Windows, the driver wouldn't make any difference because it's not loaded yet. I was just addressing the BSOD.

I assume you're still having the problem with the startup.

 

[phoebus]

Yes samo samo, It will not boot normally. I am currently using it Safe Mode with networking.
I will try playing with drivers as you suggest. An older driver might work since the machine is over 7 years old.

Failing that I will ask the builder to repair [unlikely] the old or install a new GPU.

 

[wither 2]

As I mentioned, I don't think that's the cause of your boot problems since you can't get to the start of the Windows installation. The driver for the graphics card isn't loaded until it starts into that.

Did the person who checked out your hard drive actually try to boot from it in another computer? I mean, it's easy to check if it will spin up but the way you're trying to start Windows indicates to me, a problem with Windows on the drive or possibly, a problem in the BIOS or MBR.

 

[phoebus]

Hooray [maybe], I am now booting into normal mode and can get back to it if it crashes [fingers crossed] using 'last good configuration.' I am also able to set restore points although there's not much point restoring a duff system. However I have restored twice already. The downside is that as soon as I try to enable the nvidia card I get the BSOD. And as if that wasn't enough I am now being asked to re-activate the system which I can't do because I don't have access to the code until next week. I have been clicking 'activate later' which has been working so far. So this could be progress of sorts. Enabling the card without crashing would be an achievement though. I have downloaded three drivers all more recent than the one installed and the GeForce Experience which only works to tell me that the nvidia site can't be reached.

 

[wither 2]

How did you get it to boot?

The problem getting to the NVIDIA site is probably linked to the other problem. If you can get to the Geforce site, you can let it automatically detect your card. Not sure it would work with the driver disabled but maybe it looks into the internal Windows files.

 

[phoebus]

achieving a normal boot was probably more through luck than judgement. I shut down the machine and put it overnight in the
coldest place in the house and in the morning it booted first time. Since then I have been able to protect the booting but that's where the luck ran out. The card can't be enabled because any system changes which require a restart cause BSOD.
automated geforce can't find the GPU because in order to function it requires a java update which when installed is not found. a manual search produces a list of drivers none of which can be installed. geforce experience tells me I have the latest driver [good to know]. so here you have the perfect storm, a combination of physical/electronic damage to a vital component combined with the ongoing effects of an infiltration. over the coming days i will be retrieving all my important files off the machine in readiness for using my original windows disk, the end of which might well be a formatting of the hard drive and a re-installation. I'll keep you posted.

 

[wither 2]

I'm wondering if there's a electrical short on your graphics card. Can you pull it?