Solved BSOD on a nearly new computer

[nickbuchanan]

Many thanks Boozad, I will await your assesment.

 

[nickbuchanan]

Just had another one Boozad, seems to getting worse!

 

[Boozad]

I'll be with you soon as I can mate, I'll be finished with work stuff soon.

 

[Boozad]

Right, a couple of things Nick. Firstly, this is the Anti Malware section of MSE.

fffff880`21477218  fffff880`0101316a
[COLOR=Red]*** WARNING: Unable to verify timestamp for MpFilter.sys
*** ERROR: Module load completed but symbols could not be loaded for MpFilter.sys[/COLOR]
 MpFilter+0x1316a

It's possible there are some residual scraps of ESET hanging around, not definitely but possible. What I'd recommend here is to grab the ESET uninstall tool again (if you need to), the MSE uninstall tool from the link earlier in the thread and the MSE installation pack (if you don't still have it). Go offline and run both tools (MSE first) to ensure there's no AV left on the system. Reboot as required then perform a clean installation of MSE before going back online.

I think there's still a driver being mischievous though given the two latest dumps and the fact that MemTest86+ turned up no errors. Deal with the AVs first and then we'll look at Driver Verifier again if needs be.

*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck 3B, {c0000005, fffff8000355a1a0, fffff88021476c20, 0}

Probably caused by : memory_corruption ( nt!MiPerformFixups+80 )

Followup: MachineOwner

*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck 24, {1904fb, fffff88002199168, fffff880021989c0, fffff80003242825}

Probably caused by : ntkrnlmp.exe ( nt!RtlSubtreePredecessor+9 )

Followup: MachineOwner

 

[nickbuchanan]

Thanks Boozad, will crack on with it now!
Will post back as soon as.

 

[nickbuchanan]

I have just run the eset unistaller again in safe mode, it said there was nothing to remove.
Tried mse unistall, it was in dutch I think, from the link you gave me, it never did anything.
I will look for mse uninstall software.

 

[Boozad]

Strange, I thought all uninstallers on that list were good. Let me know if you need help finding one mate.

 

[nickbuchanan]

Found an article on the forum, it recommended uninstalling through normal channels
http://www.sevenforums.com/tutorials/345542-microsoft-security-essentials-uninstall-completely.html

Just scanning now after reinstal of mse, will keep you posted mate, Many thanks for all your help.

 

[Boozad]

You're welcome mate, keep us posted with how you go. We'll be here.

 

[nickbuchanan]

Ok mate back up with mse, should I run driver verifier now?

 

[Boozad]

Just test the system again please mate, I want to rule out MSE first. It really shouldn't be a problem.

 

[nickbuchanan]

Ok, mate, will carry on as usual for now, thank you.
Off flying, hope I do not crash though.
sorry i'll get me coat.

 

[nickbuchanan]

Hi Boozad.
We are getting there I think!
Just had another BSOD this morning.
I will await your further instruction when you get a chance to look at the files.
Many thanks.

 

[Boozad]

I'll get round to this tonight Nick, got a pretty busy day today.

 

[Boozad]

Right, this one's a bit tricky as nothing definitive is showing. Can you run the checks below and get me to me mate.

:ar: Run chkdsk. http://www.sevenforums.com/tutorials/433-disk-check.html

:ar: Open an elevated command prompt and type in or copy and paste sfc /scannow and hit enter.

Report back with the results.

 

[nickbuchanan]

Thanks Boozad, can i just tell you the results?
Not sure if i can copy and paste to you.

 

[nickbuchanan]

Any way, chdisk " windows has checkked the file system and found no problems"
2 nd one read "windows resource protection did not find any integrity violations"

 

[Boozad]

That's fine mate. Can you run until next BSOD please, it looks like a driver is at fault again but it's not showing and I'd rather give it a chance to show up on its own before enabling DV again.

 

[nickbuchanan]

No worries mate, will do.
Been alot better though! firefox has crashed quite alot as well, it gives a report but there is no way to copy it.

 

[Boozad]

What version of FireFox are you running?