Solved BSOD - system at idle overnight - restarted okay

[yrralrellim]

I woke up to a BSOD greeting me this morning. No new hardware installed; no new software installed by me but installed two non-Windows program updates on 4/24. [IrfanView & WinISO] Windows Update apparently installed PowerPoint Viewer on 4/26 (today) ???? although I already have a 2013 MS Office installation! (my 64-bit system was upgraded from Win Home Premium to Win Ultimate several weeks ago.)

NirSoft bluescreenview says CmBatt.sys driver caused the crash. I would like to PLEASE determine for sure what caused the BSOD so I can take any necessary action(s). Thank you.

 

[Thedoctor44]

The driver at fault is esgiguard.sys which belongs to SpyHunter part of Enigma Software Group.

You are also getting errors from Malwarebytes, is the pro version installed because that will probably be why.

Please remove both then if the BSODs stop you can install Malwarebytes again but don't select the pro trial.

Unable to load image esgiguard.sys, Win32 error 0n2
*** WARNING: Unable to verify timestamp for esgiguard.sys
*** ERROR: Module load completed but symbols could not be loaded for esgiguard.sys
Unable to load image mwac.sys, Win32 error 0n2
*** WARNING: Unable to verify timestamp for mwac.sys
*** ERROR: Module load completed but symbols could not be loaded for [COLOR="red"]mwac.sys[/COLOR]
Probably caused by : [COLOR="Red"]esgiguard.sys[/COLOR] ( esgiguard+14ec )

 

[yrralrellim]

Thanks for the super-fast response. I will proceed as you suggested. My Malwarebytes is Premium v2.0.1.1004 and I also have SpyHunter v4.17.6.4336. Thanks again.

 

[Golden]

Thanks for the super-fast response. I will proceed as you suggested. My Malwarebytes is Premium v2.0.1.1004 and I also have SpyHunter v4.17.6.4336. Thanks again.

If at all possible, revert to Malwatebytes 1.75....the new release has been noted to give a few BSOD's here. Wait until they have ironed out the issues with it before trying V2x again.

Its bad practice to have multiple anti-virus software installed. Get rid of Bitdefender.

fffff880`091b1928  fffff880`01519b80Unable to load image avc3.sys, Win32 error 0n2
*** WARNING: Unable to verify timestamp for avc3.sys
*** ERROR: Module load completed but symbols could not be loaded for avc3.sys
 avc3+0x72b80

fffff880`091b2948  fffff880`013cf1f0Unable to load image bdfwfpf.sys, Win32 error 0n2
*** WARNING: Unable to verify timestamp for bdfwfpf.sys
*** ERROR: Module load completed but symbols could not be loaded for bdfwfpf.sys
 bdfwfpf+0x91f0

Uninstall Acronis Try & Decide

fffff880`091b1c58  fffff880`01ea40f2Unable to load image tdrpm273.sys, Win32 error 0n2
*** WARNING: Unable to verify timestamp for tdrpm273.sys
*** ERROR: Module load completed but symbols could not be loaded for tdrpm273.sys
 tdrpm273+0x4c0f2

 

[yrralrellim]

BitDefender is my anti-virus (and firewall) of choice. What other anti-virus ism trying to run?

 

[Golden]

View attachment 315365

You have Outpost Security Suite Pro installed according to your specifications?

At any rate, Bitdefender is contributing to your BSOD's....uninstall completely and replace with MSE.

Uninstall this too:

Emsisoft Anti-Malware 8.0 - Service	a2AntiMalware	Running	Auto	Own Process	"c:\program files (x86)\emsisoft anti-malware\a2service.exe"	Normal	LocalSystem	0

 

[yrralrellim]

Outpost was originally installed but was uninstalled in early March and was replaced by BitDefender.

Emsisoft Antimalware uninstalled.

SpyHunter4 uninstalled.

Malwarebytes v2 uninstalled. (Will find and install v1.75)

Apparently Acronis did not fully uninstall several weeks ago. I will clean up that problem but will have to reinstall Acronis -- there is no available uninstall file.

 

[Golden]

Replace Bitdefender with MSE too...its clearly identified in the .dmp files as a problem.

 

[yrralrellim]

You are saying to totally ignore the recent av-test.org findings and replace BitDefender with MSE? AV-TEST - The Independent IT-Security Institute: Jan/Feb 2014
I do not trust MSE.

New problem now on every reboot:
Problem signature:
Problem Event Name: CLR20r3
Problem Signature 01: traymanager.exe
Problem Signature 02: 1.0.0.0
Problem Signature 03: 5225df75
Problem Signature 04: mscorlib
Problem Signature 05: 4.0.30319.18444
Problem Signature 06: 52717edc
Problem Signature 07: 256
Problem Signature 08: 10
Problem Signature 09: System.InvalidOperationException
OS Version: 6.1.7601.2.1.0.256.1
Locale ID: 1033
Additional Information 1: 0a9e
Additional Information 2: 0a9e372d3b4ad19135b953a78882e789
Additional Information 3: 0a9e
Additional Information 4: 0a9e372d3b4ad19135b953a78882e789

 

[Thedoctor44]

MSE is one of, if not the best anti virus that we have never found any problems using it.
If you don't want to listen then that's your own fault.

 

[Golden]

You are saying to totally ignore the recent av-test.org findings and replace BitDefender with MSE?

No. What I am saying is that WinDBG has objectively identified Bitdefender as being a contributor to the BSOD. If you wish to be BSOD free, you should replace it with MSE, which has never been found to cause BSOD's.

AV-Test.org does not rate anti-virus products on their likelyhood of causing BSOD's or not, only on their ability to prevent/remove malware. If you do not trust MSE, you are welcome to try a different product.

Upload the new .dmp file if you continue to receive BSOD's so I can look at them.

 

[yrralrellim]

I can appreciate that. Yesterday's BSOD was the first for me on this machine since installing BitDefender. I will see if there are any more BSOD's now that I got rid of SpyHunter4 and reverted to Malwarebytes 1.75 edition. Perhaps there were too many "security" type of programs running and not coexisting with BitDefender. I also found the culprit for my traymanager.exe problem --it was my Apowersoft Online Screen Recorder program but that problem surfaced only after the recent Windows updates. Thanks again for your invaluable help. I'd like to learn how to interpret the dm log collector info myself rather than submitting on the forum but I'm not sure how to go about that task.

 

[Thedoctor44]

Yes it could be the fact that you had multiple real time Anti Virus programs on your PC.
If you are that desperate to keep bit defender then wait to see if it still blue screens as Anti Virus programs can actually get the blame when they aren't the cause.
If it blue screens again just upload the dump files.