Solved BSOD upon wake-up Cache_Manager and others

[GinW]

Hi,
Recently started getting BSOD on my desktop. Cache_Manager, NTFS File System,System Service Exception and others. It happens when we just let the computer go to sleep, overnight or during the day when not in use. Upon wake-up, the error is there.

Dell XPS 8300
Intel Core i7-2600 CPU @ 3.40
8 GB Ram
Windows 7 Professional x64

I have cleaned the dust bunnies, reseated the ram, ran memtest many times , updated what I could from the Dell site.
Attached is the file. Hope I did it right.

Thank you

 

[Gator]

Hey GinW, Welcome to Sevenforums!

Upon first glance, it appears you are getting BSODs from AVG and your broadcom (ethernet) driver

*** WARNING: Unable to verify timestamp for bcmwl664.sys
*** ERROR: Module load completed but symbols could not be loaded for bcmwl664.sys
 bcmwl664+0x1326e

Try updating your driver and see if that helps.
Downloads | Broadcom

AVG BSOD

*** WARNING: Unable to verify timestamp for avgidsdrivera.sys
*** ERROR: Module load completed but symbols could not be loaded for avgidsdrivera.sys
 avgidsdrivera+0x19742

Try removing AVG and installing MSE
AVG | Download tools and utilities

Then try installing MSE for now because it plays nice with Windows and rarely causes BSOD (if you prefer something else you can download it again after we clear BSOD issue)
Microsoft Security Essentials - Microsoft Windows


Report back with the results.

 

[GinW]

AVG Gone. Security Essentials installed.
Found an update for Broadband card-hope it's the right one.

 

[GinW]

Back again. There have been no BSOD until this morning. The computer has been on and idle for about 24 hrs and woke to this

system_service_exception. It did not create a dump file.

It is a desktop that serves as the host on our home network. We added a laptop to the network and printed a page from another laptop over wi-fi to a connected printer. Could this have anything to do with this?

 

[GinW]

Hi
Again a BSOD upon return from overnight sleep. This time created a dump, Totally lost. Help please.

 

[Gator]

Hey Gin, Im evaluating the new dumps now.

So far they seem random which could mean a hardware problem but for now, I see two that are pointing to your ethernet and/or network related processes. For now, try updating your network drivers.

Downloads | Broadcom

 

[GinW]

I have the latest Broadcom drivers I could find. Verison 15.6.0.10

 

[Gator]

Hello again Gin, sorry for the delay.

You are receiving Bugcheck 24 among others. Bugcheck 24 generally comes from corrupt file system, bad cables connection or virus.

Several dumps points to AVG causing a BSOD.

*** WARNING: Unable to verify timestamp for avgtpx64.sys
*** ERROR: Module load completed but symbols could not be loaded for avgtpx64.sys
 [COLOR=Red]avgtpx64[/COLOR]+0xa660

*** WARNING: Unable to verify timestamp for avgidsdrivera.sys
*** ERROR: Module load completed but symbols could not be loaded for avgidsdrivera.sys
 [COLOR=Red]avgidsdrivera[/COLOR]+0x19742

*** WARNING: Unable to verify timestamp for avgtpx64.sys
*** ERROR: Module load completed but symbols could not be loaded for avgtpx64.sys
 [COLOR=Red]avgtpx64[/COLOR]+0xa660

Remove AVG
AVG | Download tools and utilities

Install Microsoft Security Essentials. After we have a stable system again you can chose another antivirus if you want.
Microsoft Security Essentials - Microsoft Windows

Also, please remove Hotspot shield. Remove Spybot Search & Destroy and reset your hosts file.
http://www.sevenforums.com/tutorials/78266-hosts-file-use-windows-7-vista.html

DRIVER_IRQL_NOT_LESS_OR_EQUAL (d1)
An attempt was made to access a pageable (or completely invalid) address at an
interrupt request level (IRQL) that is too high.  This is usually
caused by drivers using improper addresses.
If kernel debugger is available get stack backtrace.
Arguments:
Arg1: 0000040000001130, memory referenced
Arg2: 0000000000000002, IRQL
Arg3: 0000000000000000, value 0 = read operation, 1 = write operation
Arg4: fffff8800314274a, address which referenced memory

Debugging Details:
------------------


READ_ADDRESS: GetPointerFromAddress: unable to read from fffff800032c2100
GetUlongFromAddress: unable to read from fffff800032c21c0
 0000040000001130 Nonpaged pool

CURRENT_IRQL:  2

FAULTING_IP: 
hssdrv6+574a
fffff880`0314274a 488baf30010000  mov     rbp,qword ptr [rdi+130h]

CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  WIN7_DRIVER_FAULT

BUGCHECK_STR:  0xD1

PROCESS_NAME:  [COLOR=Red]cmw_srv.exe[/COLOR]

Also scan with Malwarebytes, Microsoft Security Essentials and Superantispyware to see if you have any viruses.

http://www.sevenforums.com/tutorials/338716-malwarebytes-anti-malware-free.html

SUPERAntiSpyware | Remove Malware | Remove Spyware - AntiMalware, AntiSpyware, AntiAdware!

Post the scan results of these programs.

 

[GinW]

I have already removed AVG and am running MSE. (It apparently caused a problem in one of those dumps, too).
I will remove Spybot and Hot Shield. Don't understand the host file thing at all.
I will run Malwarebytes again and download the other malware checker.

No problem with the delay. I appreciate your help.

 

[Gator]

Follow this link below and make the file look like the picture below. Which basically means, delete all the other entries in that file so that it looks exactly like the picture

To be honest, you can delete everything in the file if you wish. Its for information purposes only.

http://www.sevenforums.com/tutorials/78266-hosts-file-use-windows-7-vista.html

 

[Gator]

When was your most recent Blue screen? As of 03/06 of this year you had a bluescreen due to AVG drivers (apparently). According to your logs your most recent BSOD was 03/08.

Did you make sure you full uninstalled AVG or was AVG still on your PC at this point?

 

[GinW]

AVG is completely gone. The last BS was 3/21/15.

 

[Gator]

Upload a new dump file. The last dump was made on the 8th of this month.

I'll need the new dump to find out why you're still getting them.

 

[GinW]

Maybe not. Guess it was still there. It was installed on 3/10. Just re-ran the uninstaller. Where do I find if it's leaving anything behind? Here's just the last dump file.

 

[Gator]

This one referenced Windows Defender/MSE so Im going to assume this is either a virus or failing hard drive. MSE/Windows defender don't typically cause BSOD's under normal circumstances.

Follow the link below to do a full scan of your computer.

How to easily clean an infected computer (Malware Removal Guide)

If you run all of these programs and come up malware/virus free, I would say we need to start looking at a failing hard drive (Also, could be cables, so check cable connections and make sure they are firmly secured to the hard drive)

Run a Hard drive test
SeaTools for Windows | Seagate

Also test Memory with Memtest86

Let it run for 8 passes or if it encounters any errors (whichever is first). If you get an error, your Memory or the Dimm slot itself has gone bad.

http://www.sevenforums.com/tutorials/105647-ram-test-memtest86.html

 

[Gator]

If you are unsure if AVG is completely removed, it may be worth installing it again then removing it with Revo uninstaller.

Revo Uninstaller Pro - Uninstall Software, Remove Programs easily, Forced Uninstall, Leftovers Uninstaller, Portable Uninstaller

There are other ways but this is the easiest.

 

[GinW]

Both Malware programs found adware and tracking cookies which I deleted. I already ran the Seagate Tools in quick scan with no errors and ran Memtest multiple times with no errors. Along with scandsk, checkdsk.
Does the last dump still show AVG is in there?
The computer operates without any issues on boot up and while running. It's just when it's been idle or asleep for a extended period that the Blue screens occur randomly upon wake-up by moving the mouse.

 

[Gator]

Both Malware programs found adware and tracking cookies which I deleted. I already ran the Seagate Tools in quick scan with no errors and ran Memtest multiple times with no errors. Along with scandsk, checkdsk.
Does the last dump still show AVG is in there?
The computer operates without any issues on boot up and while running. It's just when it's been idle or asleep for a extended period that the Blue screens occur randomly upon wake-up by moving the mouse.

This dump referenced a process from Windows Defender (MSE) but that is not typically something that causes BSOD's so it has to be something affecting it. I will ask some of the other guys to jump over here and see if they can find something else.

In the meantime, upload the full DM log collector again from the link below
http://www.sevenforums.com/bsod-help-support/96879-blue-screen-death-bsod-posting-instructions.html

This will give us an updated look at your system.

 

[Gator]

Also, make sure you run full tests of hard drive and ram.

At least 8 passes for Memtest. The longer the better

 

[GinW]

OK, I run all the other tests overnight and in the morning and send a complete file then.
Thank you