Solved BSOD seemingly random most today are with FireFox open

[snave]

Hi:
I hope you can help. Had five BSODs today at most inappropriate times, of course.
I have FF open and also a Citrixsession open to my works network, though not sure if either of these are re;ated. Not doing anything intensive - and BAM! BSOD.
Any help in finding out what's going wrong will be so welcome!
Thanks!

 

[Arc]

fffff880`04e80418  fffff880`022b40a2Unable to load image \SystemRoot\system32\DRIVERS\avgidsdrivera.sys, Win32 error 0n2
[COLOR=Red]*** WARNING: Unable to verify timestamp for avgidsdrivera.sys
*** ERROR: Module load completed but symbols could not be loaded for avgidsdrivera.sys[/COLOR]
 avgidsdrivera+0x1a0a2

Uninstall AVG using AVG Remover. Use Microsoft Security Essentials as your antivirus with windows inbuilt firewall, and free MBAM as the on demand scanner.

Download, install and update those, and then run full system scans with both of them, one by one.

Well, do deeper scans. Scan the system for possible virus infection with the following programs.

• Anti-rootkit utility TDSSKiller
• Windows Defender Offline

Let us know the results. When multiple ports (storage and pointer) are failing and there is an ataport.sys error, there is a fair chance of malware.

 

[snave]

Wow, thanks Arc, I have some work to do. Will let you know.
I see that Kaspersky wants to uninstall Microsoft Security Essentials...

 

[Arc]

I see that Kaspersky wants to uninstall Microsoft Security Essentials...

You mean TDSSKiller?

 

[snave]

Yes... the link you put above takes me to Kaspersky Internet Security | Download free Trial | Kaspersky - running the downloaded .exe it asks if I want to remove MS Security Essentials.
I had another BSOD last night, this would after I uninstalled AVG using the tool. Do you want the .dmp file?
Very appreciative of all help given and offered !!!

 

[Arc]

You are getting KIS, which will lead to uninstall another antivirus. KIS is not the target one here.

Get TDSSKiller from here: Download Kaspersky TDSSKiller - MajorGeeks

 

[snave]

A quick update: Anti-rootkit finds nothing, was just about to create a bootable USB thumb drive and got another BSOD. So I am leaning away from AVG being teh culprit now, had at least two BSOD's since uninstall.

 

[Layback Bear]

Many anti virus programs when you install them will request that you remove other anti virus programs.

You only want one anti virus program install at one time.

I would recommend not using AVG and remove it completely if you haven't already. Just like Arc requested.

**Don't assume you only have one problem.

**When you get another BSOD please post a fresh set of logs for Arc to review.

 

[snave]

Thanks, Bear. Heres the two most recent .dmp files, one from today.

 

[ICIT2LOL]

Look I haven't gone through the whole trhead but are you overclocking? and do see this BSOD with WIN7_DRIVER_FAULT and 0x1E - Microsoft Community

A general scan with these might help
http://www.sevenforums.com/tutorials/1538-sfc-scannow-command-system-file-checker.html
http://www.sevenforums.com/tutorials/433-disk-check.html < if necessary include the /f and /r in the command line as per Option2
As for the AVG personally I gave it away years ago because it was crap and nothing I have seen since - especially my partners laptop - had convinced me otherwise. If you want to check it is all removed should you decide to get rid of it then check in regedit and look in Software in both the HKEY's - CURRENT USER and LOCAL MACHINE
- BUT DO THIS FIRST JUST IN CASE YOU HIT THE WRONG KEYS!!
http://www.sevenforums.com/tutorials/4230-registry-backup-restore.html

 

[Arc]

Thanks, Bear. Heres the two most recent .dmp files, one from today.

Blue Screen of Death (BSOD) Posting Instructions

 

[snave]

ICITLOL: Thanks.
No overclocking, wouldn't know where to start!
scannow run in elevated mode, nothing found.
chkdsk /F /R run with no errors.
I removed AVG at the beginning of this case as instructed by ARC, and not gone back.

 

[snave]

ARC: Sorry, DB log collector tool output enclosed here.

 

[Arc]

I am having symbol error in your dumps.

That may have two explanations. Either some problem from the MS symbol server (less possible because all other peoples dumps are fine) or it is a third party driver failing in your system that is having private symbol not accessible by other people.

In that situation it will be best to enable Driver Verifier to monitor the drivers.

Driver Verifier - Enable and Disable
​

Run Driver Verifier for 24 hours or the occurrence of the next crash, whichever is earlier.

   Information

Why Driver Verifier:
It puts a stress on the drivers, ans so it makes the unstable drivers crash. Hopefully the driver that crashes is recorded in the memory dump.

How Can we know that DV is enabled:
It will make the system bit of slow, laggy.

   Warning

Before enabling DV, make it sure that you have earlier System restore points made in your computer. You can check it easily by using CCleaner looking at Tools > System Restore.

If there is no points, make a System Restore Point manually before enabling DV.

   Tip

• If you fail to get on the Desktop because of DV, Boot into Advanced Boot Options > Safe mode. Disable DV there. Now boot normally again, and try following the instruction of enabling DV again.
• If you cannot boot in Safe mode too, do a System Restore to a point you made earlier.

Let us know the results, with the subsequent crash dumps, if any.

 

[snave]

ARC: DV enabled as requested. After enabling, the instructions say to reboot which I did. It had a BSOD on the way back up. I'll let it run a few hours now to see if there are any more occurrences.
I must say I am really impressed by the amount of support and knowledge I see on this forum. You guys are awesome.

 

[snave]

ARC: Two occurences since I turned on DV, both should be captured in this DM log collection. I've turned DV back off now.

 

[Golden]

*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck A, {1f0, 2, 0, fffff80002c989b5}

Probably caused by : CI.dll ( CI!A_SHAUpdate+60 )

Followup: MachineOwner
---------

Is Windows 7 completely updated?

Did you scan for rootkits as recommend previously?

 

[snave]

Golden: The following is in chronological order to the best of my memory:
(before opening case)
- run memtest64 overnight, no problems detected;
- run MBAM;
(open case on this forum)
- Uninstall AVG using the provided tool;
- Run anti rootkit;
- Run windows defender;
- Check registry for any AVG entry (none):
- run scannow;
- run a deep chkdsk;
- enable driver verifier.

edit to add: Windows is up to date, just installed 3008137 (I think that was the one anyway).

 

[Golden]

OK. Presumably TDDSKiller found nothing? Is Windows updated?

 

[snave]

Golden: Yes - Windows is up to date, just installed KB 3006137 (not 8137 as I said above).
I rebooted it after the install, it came up - I opened FF to update this - and It BSOD'ed again.