Solved BSOD not specific to loading but always within 5 min of cold start

[SAllen61]

This is driving me crazy, I have a gaming rig which has been fine up until Dec 16.

I did update some drivers with the IOrbit Driver program on that day.

This is what happens, I get one BSOD from a cold boot within 5-15 minutes, This occurs wither or not I actually log onto windows, windows crashes and restarts and from then on everything is fine till the next cold boot, I'm thinking its temperature specific, because it has to be from a actual cold startup not a reboot or a shutdown and restart trigger.

I have cleaned the fans, case, replugged the memory, reconnected all the cables, replaced the CPU heat sink, ran memory checks, disk checks, then since I had the SSD in there but not using it I just started over and reinstalled the original Win 7 pro 64 bit onto the SSD, reloaded the original Motherboard install drivers and let win update give me whatever it thought was needed.

9 sec boot up ya! but.....

no change as far as the BSOD rate, so it's apparently not a driver specific problem.

This is my first Intel rig, I always used AMD before and I am stumped....

Attached is the recommended SF diagnostic Tool report I called "SysDump1"

This only has the last 3 mini dumps because I accidently erased a bunch of them via a cleaner program and didn't realize it till too late, give me a couple days and I will have more.

Thank you for your time and consideration....

Stephen

 

[Golden]

Uninstall IOBit...its a pile of rubbish and may be contributing to the issues.

fffff880`0a0e1268  fffff880`01de23caUnable to load image \SystemRoot\system32\DRIVERS\VirtuWDDM.sys, Win32 error 0n2
*** WARNING: Unable to verify timestamp for [COLOR="Red"][B]VirtuWDDM.sys[/B][/COLOR]
*** ERROR: Module load completed but symbols could not be loaded for VirtuWDDM.sys
 VirtuWDDM+0x23ca

VirtuWDDM    VirtuWDDM              Kernel        12/9/2013 7:09:16 AM

Uninstall the LucidLogix software

fffff880`0a0e0fd0  fffff880`0f51efe7Unable to load image \SystemRoot\system32\DRIVERS\nvlddmkm.sys, Win32 error 0n2
*** WARNING: Unable to verify timestamp for nvlddmkm.sys
*** ERROR: Module load completed but symbols could not be loaded for [COLOR="red"][B]nvlddmkm.sys[/B][/COLOR]
 nvlddmkm+0xc6fe7

Name	[B][COLOR="red"]NVIDIA GeForce GTX 670[/COLOR][/B]
PNP Device ID	PCI\VEN_10DE&DEV_1189&SUBSYS_26733842&REV_A1\4&BAB4994&0&0008
Adapter Type	GeForce GTX 670, NVIDIA compatible
Adapter Description	NVIDIA GeForce GTX 670
Adapter RAM	(1,048,576) bytes
Installed Drivers	nvd3dumx.dll,nvwgf2umx.dll,nvwgf2umx.dll,nvd3dum,nvwgf2um,nvwgf2um
Driver Version	9.18.13.3182

Search for an updated driver for your video card.....if none exists, install the Nvidia 314.22 WHQL driver - its very stable

 

[SAllen61]

uninstalled LucidLogix
Upgraded to 332.21 for the GTX 670
not running any auto background junk with Iorbit, just as a quick manuel cleaner or toolkit debug checks when needed.

Did not crash this afternoon, but I may be moving too fast will recheck after work tonight.

 

[SAllen61]

Still something....

Still crashed after work, with one of the usual BSOD KMODE_EXCEPTION_NOT_HANDLED errors

ran SF diag result attached "SystemDumpII"

This boot up was minus LucidMVP, and with latest GTX 670 Driver 332.21

Thank you for your time and consideration,

Stephen

 

[Golden]

Stephen, I'll be back in an hour or two and will look at the dmp then and advise

 

[Golden]

fffff880`0927a0b8  fffff880`080e7f86Unable to load image \??\C:\Windows\system32\Drivers\bdfsfltr.sys, Win32 error 0n2
*** WARNING: Unable to verify timestamp for [COLOR="Red"][B]bdfsfltr.sys[/B][/COLOR]
*** ERROR: Module load completed but symbols could not be loaded for bdfsfltr.sys
 bdfsfltr+0x4f86

WinDBG blames BitDefender......uninstall it and replace with MSE.

fffff880`0927a298  fffff880`0f526b1dUnable to load image \SystemRoot\system32\DRIVERS\nvlddmkm.sys, Win32 error 0n2
*** WARNING: Unable to verify timestamp for [COLOR="Red"][B]nvlddmkm.sys[/B][/COLOR]
*** ERROR: Module load completed but symbols could not be loaded for nvlddmkm.sys
 nvlddmkm+0xc7b1d

WinDBG still has issues with the video card driver.

Lets revert to the 314.22 WHQL driver only. Uninstall the following Nvidia items in Control Panel > Programs and Features:

- 3D Vision Control Driver
- 3D Vision Driver
- Graphics Driver
- HD Audio Driver
- PhysX
- Nvidia Update

Now follow Drivers - Clean Left over Files after Uninstalling
Reboot. Go to Drivers - Download NVIDIA Drivers, Download 314.22 WHQL. While installing, Select Custom (Advanced) install. In the next page, follow this settings:

View attachment 301348

Reboot. Use system as normal.

 

[SAllen61]

Ummmm....ok, 314.22 graphics Driver and PhyXsys soft only. check
Bit Defender??? have no clue, never used that program ever, and this windows is a fresh install less that 4 days ago.
it is located in the correct place ...System32/Drivers has the right size 431,176 kB, Timestamp of Thrusday march 24, 2011 6:35:41 AM under the file Digital Signature Details.

It must have came in the windows install CD or Windows update. Other than that I don't have a clue about it.
Could be be a part of Windows Defender?


However I am noting that windows is missing timestamps?
also I am getting corrupted files, such as MechWarrior online errors out at times, they have a file checker program which says corrupted packet files and redownloads, but run it again and pop a different file is bad, run it again and it's another one.....

Another example is I downloaded EA's Dragon age game day before yesterday nothing running in the background using amazon's downloader thingy, major 12 Gig's download which had corrupted files....had to redownload three times them manually 7z test each of the data files and put all the good ones together so the installer would work.

This is something new going on as well.......everything before Dec 12 was solid now everything seems to be on a slant and I can't dial it in.

Thanks again for your time and consideration,

Stephen

 

[Golden]

Its unlikely that BitDefender came with a Windows update.....perhaps one of your other downloads? Its definitely not part of Windows Defender.

Your other issues appear to be victims of the BSOD'ing going on, if that makes sense.....at least thats what I think at the moment.

Upload the new dmp file if/when you get another BSOD

 

[SAllen61]

Ran it about 30 min this morning, one game this, one game that.....no errors so far

very few downloads actually on this system, like I said 4 days old, I got TiVo desktop which I only toggle on when I need it, autorun a desktop program called EarthDesk only as a pretty which I unload that when I game for it updates in the background.

Adobe Air for Pandora when I use it < rarely > then I got World of Tanks, World of Warplanes, MechWarrior Online, War Thunder, Dragon Age in fact since I was having trouble downloading I had kept a backup copy of the WoT, and WoW, War Thunder....I launched their respective installer and when it started downloading I exited, copyed the backup game into its place and relaunched the launcher and presto all done! Dragon Age would not let me do that....so I had to redownload it.

But BitDefender? I really don't know where that came from.

I will check on it again tonight after work again,

I'm feeling hopeful, thanks again!

Stephen

 

[Golden]

No worries. I'll keep stopping by here.

 

[SAllen61]

Sigh, 4 min BSOD.....cold boot, logged in, looked at email a min, turned off EarthDesk, and launched MechWarrior online, which runs in a window till you actually pick your mech to battle and in the process of launching with that mech to do a battle when the BSOD came early before the game actually started building the next static game screen of folk loading team slots to see who is who before the video goes live however it could be just timing as well for the game runs ok normally, ran it earlier today before work for a quick battle.

SF Diag dump attached "sysdump3"

I'm sorry that this seems to be a stubborn fix to find, If all else fails I am willing to reformat and reload if necessary.

I did that once already which didn't help solve the problem but who knows if it is a virus something hiding in a boot sector on one of my drives that keeps passing back around......just talking out loud, I have run avast just to check and of course win defender.....always nothing.....I don't surf off the beaten internet sites and watch what email I open so I'm usually clean, learned that lession way back on the 5 inch floppy drives when viruses first started coming around, that's been awhile....telling my age here..

Again, I do appreciate your assistance

Thank you,

Stephen

 

[Golden]

WinDBG still blames the video card driver, even after you changed it.

I'm going to ask someone with more experience to look at this, as I may be missing something.

 

[SAllen61]

ok, on standby...

Thx

 

[Arc]

Hi SAllen61.

It is certain that the BitDefender AntiVirus FS filter driver is contributing to your BSODs.

fffff880`0927a0b8  fffff880`080e7f86Unable to load image \??\C:\Windows\system32\Drivers\[URL="http://www.carrona.org/drivers/driver.php?id=bdfsfltr.sys"]bdfsfltr.sys[/URL], Win32 error 0n2
*** WARNING: Unable to verify timestamp for [URL="http://www.carrona.org/drivers/driver.php?id=bdfsfltr.sys"]bdfsfltr.sys[/URL]
*** ERROR: Module load completed but symbols could not be loaded for [URL="http://www.carrona.org/drivers/driver.php?id=bdfsfltr.sys"]bdfsfltr.sys[/URL]
 bdfsfltr+0x4f86

Description here: Driver Reference Table - bdfsfltr.sys

If you are sure that BitDefender is not installed in the system, delete it manually:

c:\windows\system32\drivers\bdfsfltr.sys.

Also, I have checked the two latest BSODs, both are the same.

[COLOR=Red]BugCheck 1E[/COLOR], {ffffffffc0000005, fffff80002eb1150, 0, ffffffffffffffff}

[COLOR=Red]Probably caused by : memory_corruption[/COLOR] ( nt!MiReplenishPageSlist+c0 )

Followup: MachineOwner
---------

Memory corruption, with a hint of/driven by display failure.

fffff880`0927a298  fffff880`0f526b1dUnable to load image \SystemRoot\system32\DRIVERS\nvlddmkm.sys, Win32 error 0n2
*** WARNING: Unable to verify timestamp for nvlddmkm.sys
[COLOR=Red]*** ERROR: Module load completed but symbols could not be loaded for nvlddmkm.sys[/COLOR]
 nvlddmkm+0xc7b1d

Form your and Golden's previous conversations it is appearing that the issue is continuing irrespective of the driver versions. Because I have never seen 314.22 WHQL to fail on itself.

fffff880`05a6f000 fffff880`0651a000   nvlddmkm T (no symbols)           
    Loaded symbol image file: nvlddmkm.sys
    Image path: \SystemRoot\system32\DRIVERS\nvlddmkm.sys
[COLOR=Red]    Image name: nvlddmkm.sys
    Timestamp:        Fri Mar 15 07:07:00 2013 [/COLOR](51427B3C)
    CheckSum:         00A8D47C
    ImageSize:        00AAB000
    Translations:     0000.04b0 0000.04e4 0409.04b0 0409.04e4

In this situation I would suggest you to take some hardware tests.

Stress test the Graphics Card using Furmark.
Video Card - Stress Test with Furmark

Test your RAM modules for possible errors.
How to Test and Diagnose RAM Issues with Memtest86+
Run memtest for at least 8 passes, preferably overnight.

Also, some information will be necessary ......

Are you overclocking? As you are getting BSODs, you should stop overclocking and run all the hardware components like CPU, GPU and RAM to their default settings.

Check if the Power Supply Unit (PSU) supplying adequate power to the computer or not.
eXtreme Power Supply Calculator
Also let us know the wattage of the PSU.

Is the computer hot? Report us the heat of the computer after a couple of hours of your normal usage. Upload a screenshot of the summery tab of Speccy. Alternatively, you can publish a Speccy snapshot too: http://www.sevenforums.com/tutorials/311593-speccy-publish-snapshot-your-system-specs.html .

Let us know the results.

 

[SAllen61]

Early results:
Safe mode deleted bdfsfltr.sys - check
Furmark - 99% 21FPS 82C peak temp stable
memtest86 - ran win7 internal memory test on reboot all options checked pass 2x - normal
eXtremes PSCL - Minimum Power supply 373w Recommended 423w
Installed Power Supply is an OZC 700w

Text save of Speecy Summary attached - core 31C motherboard 29C

No overclocking being done at all, Bios is factory default.....oh wait internal GPU on board is toggled for multimonitor support for the LucidMVP thingy which has since be removed. Switching back to disabled.

No BSOD while doing all this.......The usual time for the BSOD to occur is becoming less frequent definitely but the optimal time seems to be after work first bootup about 2:00 am my time.

 

[SAllen61]

Update:

Problems without bdfsfltr.sys? Service Control Manager error

excerpt from GB Diagnose Report:
Full report attached:

----------------------------------
12 - Event Log
----------------------------------
1201 - Time : 1/14/2014 7:07:47 AM
1202 - Source : WinMgmt
1203 - Description : Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected.
1201 - Time : 1/14/2014 6:40:57 AM
1202 - Source : WinMgmt
1203 - Description : Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected.
1201 - Time : 1/14/2014 6:02:28 AM
1202 - Source : WinMgmt
1203 - Description : Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected.
1201 - Time : 1/14/2014 5:51:38 AM
1202 - Source : WinMgmt
1203 - Description : Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected.
1201 - Time : 1/14/2014 5:48:03 AM
1202 - Source : WinMgmt
1203 - Description : Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected.
1201 - Time : 1/13/2014 3:27:44 PM
1202 - Source : WinMgmt
1203 - Description : Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected.
1201 - Time : 1/13/2014 3:23:02 PM
1202 - Source : WinMgmt
1203 - Description : Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected.
1201 - Time : 1/13/2014 4:19:49 AM
1202 - Source : WinMgmt
1203 - Description : Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected.
1201 - Time : 1/12/2014 8:14:47 PM
1202 - Source : WinMgmt
1203 - Description : Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected.
1201 - Time : 1/12/2014 7:59:33 PM
1202 - Source : WinMgmt
1203 - Description : Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected.
1201 - Time : 1/14/2014 7:07:05 AM
1202 - Source : Service Control Manager
1203 - Description : The LiveUpdate service terminated unexpectedly. It has done this 1 time(s).
1201 - Time : 1/14/2014 7:05:58 AM
1202 - Source : Service Control Manager
1203 - Description : The bdfsfltr service failed to start due to the following error:
The system cannot find the file specified.
1201 - Time : 1/14/2014 6:40:15 AM
1202 - Source : Service Control Manager
1203 - Description : The LiveUpdate service terminated unexpectedly. It has done this 1 time(s).
1201 - Time : 1/14/2014 6:39:04 AM
1202 - Source : Service Control Manager
1203 - Description : The bdfsfltr service failed to start due to the following error:
The system cannot find the file specified.
1201 - Time : 1/14/2014 6:01:48 AM
1202 - Source : Service Control Manager
1203 - Description : The LiveUpdate service terminated unexpectedly. It has done this 1 time(s).
1201 - Time : 1/14/2014 6:00:39 AM
1202 - Source : Service Control Manager
1203 - Description : The bdfsfltr service failed to start due to the following error:
The system cannot find the file specified.
1201 - Time : 1/14/2014 5:59:21 AM
1202 - Source : Service Control Manager
1203 - Description : The Network List Service service depends on the Network Location Awareness service which failed to start because of the following error:
The dependency service or group failed to start.
1201 - Time : 1/14/2014 5:59:21 AM
1202 - Source : Service Control Manager
1203 - Description : The Network List Service service depends on the Network Location Awareness service which failed to start because of the following error:
The dependency service or group failed to start.
1201 - Time : 1/14/2014 5:59:21 AM
1202 - Source : Service Control Manager
1203 - Description : The Network List Service service depends on the Network Location Awareness service which failed to start because of the following error:
The dependency service or group failed to start.
1201 - Time : 1/14/2014 5:59:21 AM
1202 - Source : Service Control Manager
1203 - Description : The Network List Service service depends on the Network Location Awareness service which failed to start because of the following error:
The dependency service or group failed to start.
----------------------------------
End of file - 33170 Bytes

 

[SAllen61]

This is my day off so I've been running this computer all day, no BSOD's but that is normal actually.

The BSOD usually occurs from a cold start and only one time then everything is ok till the next day.

I do not understand why only one BSOD then it's resolved till the next startup.

I figure if it's a driver then I should be able to duplicate it somehow, hardware basically checks out.

 

[Golden]

Unless Arc has another suggestion, have you tried a Clean Startup - its its a conflicting application?

http://www.sevenforums.com/tutorial...ation-conflicts-performing-clean-startup.html

 

[SAllen61]

That would be a long process for this BSOD, only once a day.
Just ran Malwarebytes Anti-Rootkit BETA 1.07.0.1008 finds something (.dll entry) immediately on launch in the registry and says it is usually associated with viral activity and gives you a chance to pass it or deleate it, first I said pass and nothing found, next run I said to deleate it and it's gone and I forgot to write it down....no log event on that fix...sigh.

I'm just not that quick anymore I guess, hoping that was something that was bugging things up.

 

[SAllen61]

Well got the nightly BSOD tonight, ran the last two days fine all day but leave for work and get back @ 3 am, fire up the computer up and bang BSOD while launching Mechwarror Online.

Video card was switching from desktop mode to fullscreen live video mode when It crashed.

This is getting dependable error but only once a day and has to be cold and after midnight to fire it back up.

Attached is: "sysdump4"