Solved Constant crashing BSOD, drivers failing, slow mouse during app crash

[Laith]

Yup.

 

[axe0]

Is there anything uploaded?
Sometimes I don't see uploaded files via the app.

 

[fr3nchy]

Okay heres the zip file for real this time. sorry about that.

 

[Laith]

So,

BugCheck 3B, {c0000005, fffff8000347b116, fffff8800e882c80, 0}

Probably caused by : ntkrnlmp.exe ( nt!SwapContext_PatchXSave+46 )

BugCheck 1E, {0, 0, 0, 0}

Probably caused by : Unknown_Image ( ANALYSIS_INCONCLUSIVE )

Run sfc /scannow and chkdsk /f /r.
Install the latest updates from Windows Update.

Do the exact same steps for chkdsk /f /r but instead of typing in sfc /scannow type chkdsk /f /r.
http://www.sevenforums.com/tutorials/1538-sfc-scannow-command-system-file-checker.html

Run MGADiag and post your results http://www.sevenforums.com/windows-...ne-activation-issue-posting-instructions.html

Have you done anything overclocking? If so please disable it.

 

[fr3nchy]

I've already done the chkdsk and scannow before But i am running those again, because you told me too. No overclocking. windows updates are up to date.

Diagnostic Report (1.9.0027.0):
-----------------------------------------
Windows Validation Data-->

Validation Code: 0
Cached Online Validation Code: 0x0
Windows Product Key: *****-*****-*****-*****-23BKG
Windows Product Key Hash: Y3/yg4h9Z8PdCVgGpqKWROUKY1g=
Windows Product ID: 55041-091-6456687-86313
Windows Product ID Type: 6
Windows License Type: Volume MAK
Windows OS version: 6.1.7601.2.00010100.1.0.048
ID: {EBF7CEC5-68AC-4DAF-8331-DA6A48014545}(3)
Is Admin: Yes
TestCab: 0x0
LegitcheckControl ActiveX: N/A, hr = 0x80070002
Signed By: N/A, hr = 0x80070002
Product Name: Windows 7 Professional
Architecture: 0x00000009
Build lab: 7601.win7sp1_gdr.150928-1507
TTS Error: 
Validation Diagnostic: 
Resolution Status: N/A

Vista WgaER Data-->
ThreatID(s): N/A, hr = 0x80070002
Version: N/A, hr = 0x80070002

Windows XP Notifications Data-->
Cached Result: N/A, hr = 0x80070002
File Exists: No
Version: N/A, hr = 0x80070002
WgaTray.exe Signed By: N/A, hr = 0x80070002
WgaLogon.dll Signed By: N/A, hr = 0x80070002

OGA Notifications Data-->
Cached Result: N/A, hr = 0x80070002
Version: N/A, hr = 0x80070002
OGAExec.exe Signed By: N/A, hr = 0x80070002
OGAAddin.dll Signed By: N/A, hr = 0x80070002

OGA Data-->
Office Status: 109 N/A
OGA Version: N/A, 0x80070002
Signed By: N/A, hr = 0x80070002
Office Diagnostics: 025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3

Browser Data-->
Proxy settings: N/A
User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)
Default Browser: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
Download signed ActiveX controls: Prompt
Download unsigned ActiveX controls: Disabled
Run ActiveX controls and plug-ins: Allowed
Initialize and script ActiveX controls not marked as safe: Disabled
Allow scripting of Internet Explorer Webbrowser control: Disabled
Active scripting: Allowed
Script ActiveX controls marked as safe for scripting: Allowed

File Scan Data-->

Other data-->
Office Details: <GenuineResults><MachineData><UGUID>{EBF7CEC5-68AC-4DAF-8331-DA6A48014545}</UGUID><Version>1.9.0027.0</Version><OS>6.1.7601.2.00010100.1.0.048</OS><Architecture>x64</Architecture><PKey>*****-*****-*****-*****-BBBBB</PKey><PID>55041-091-6456687-86313</PID><PIDType>6</PIDType><SID>S-1-5-21-1024984512-3158142407-3721388370</SID><SYSTEM><Manufacturer>To Be Filled By O.E.M.</Manufacturer><Model>To Be Filled By O.E.M.</Model></SYSTEM><BIOS><Manufacturer>American Megatrends Inc.</Manufacturer><Version>P3.10</Version><SMBIOSVersion major="2" minor="7"/><Date>20140416000000.000000+000</Date></BIOS><HWID>C5D53407018400FE</HWID><UserLCID>0409</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>Pacific Standard Time(GMT-08:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM/><GANotification/></MachineData><Software><Office><Result>109</Result><Products/><Applications/></Office></Software></GenuineResults>  

Spsys.log Content: 0x80070002

Licensing Data-->
Software licensing service version: 6.1.7601.17514

Name: Windows(R) 7, Professional edition
Description: Windows Operating System - Windows(R) 7, VOLUME_MAK channel
Activation ID: 9abf5984-9c16-46f2-ad1e-7fe15931a8dd
Application ID: 55c92734-d682-4d71-983e-d6ec3f16059f
Extended PID: 55041-00172-091-645668-03-1033-7600.0000-1722014
Installation ID: 002516736374758533676170403285514715623400368002971612
Processor Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88338
Machine Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88339
Use License URL: http://go.microsoft.com/fwlink/?LinkID=88341
Product Key Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88340
Partial Product Key: 23BKG
License Status: Licensed
Remaining Windows rearm count: 4
Trusted time: 10/14/2015 10:18:28 PM

Windows Activation Technologies-->
HrOffline: 0x00000000
HrOnline: 0x00000000
HealthStatus: 0x0000000000000000
Event Time Stamp: 9:30:2015 17:49
ActiveX: Registered, Version: 7.1.7600.16395
Admin Service: Registered, Version: 7.1.7600.16395
HealthStatus Bitmask Output:


HWID Data-->
HWID Hash Current: NgAAAAEAAgABAAEAAgADAAAAAgABAAEAHKImUeLywr90xAKxGL5CNrL7jDNURO+NOmvCDwA/

OEM Activation 1.0 Data-->
N/A

OEM Activation 2.0 Data-->
BIOS valid for OA 2.0: yes, but no SLIC table
Windows marker version: N/A
OEMID and OEMTableID Consistent: N/A
BIOS Information: 
  ACPI Table Name	OEMID Value	OEMTableID Value
  APIC			ALASKA		A M I
  FACP			ALASKA		A M I
  HPET			ALASKA		A M I
  MCFG			ALASKA		OEMMCFG.
  FPDT			ALASKA		A M I
  AAFT			ALASKA		OEMAAFT 
  SSDT			INTEL		CpuPm
  EINJ			AMI		AMI EINJ
  ERST			AMIER		AMI ERST
  HEST			AMI		AMI HEST
  BERT			AMI		AMI BERT
  BGRT			ALASKA		A M I

 

[Laith]

I'll be waiting.

Run MemTest86+ for 8 passes, It must be MemTest86+. http://www.sevenforums.com/tutorials/105647-ram-test-memtest86.html

 

[axe0]

Unfortunately, the msinfo32 file is again corrupted

Please uninstall everything of Nvidia using Display Driver Uninstaller and install new drivers from Nvidia

*** WARNING: Unable to verify timestamp for nvlddmkm.sys
*** ERROR: Module load completed but symbols could not be loaded for nvlddmkm.sys

7: kd> lmvm nvlddmkm
start             end                 module name
fffff880`05eea000 fffff880`069a5000   nvlddmkm T (no symbols)           
    Loaded symbol image file: nvlddmkm.sys
    Image path: nvlddmkm.sys
    Image name: [U]nvlddmkm.sys[/U]
    Timestamp:        [COLOR="Red"][U]Tue May 12 03:59:00 2015[/U][/COLOR] (55515E64)
    CheckSum:         00A86612
    ImageSize:        00ABB000
    Translations:     0000.04b0 0000.04e4 0409.04b0 0409.04e4

The driver cfosspeed6 has been flagged.
I don't know with what program it belongs because of the msinfo32 file corruption.

*** WARNING: Unable to verify timestamp for cfosspeed6.sys
*** ERROR: Module load completed but symbols could not be loaded for cfosspeed6.sys

5: kd> lmvm cfosspeed6
start             end                 module name
fffff880`04a14000 fffff880`04bdd000   cfosspeed6 T (no symbols)           
    Loaded symbol image file: cfosspeed6.sys
    Image path: cfosspeed6.sys
    Image name: [U]cfosspeed6.sys[/U]
    Timestamp:        [COLOR="red"][u]Wed May 29 18:47:24 2013[/u][/COLOR] (51A6311C)
    CheckSum:         001BCFA6
    ImageSize:        001C9000
    Translations:     0000.04b0 0000.04e4 0409.04b0 0409.04e4

 

[fr3nchy]

I'm working through what axe is suggesting. i will get a flash drive tomorrow to do a memtest. thanks for all your help so far both you. especially considering how strange these issues are, to me atleast.

 

[axe0]

Please open msinfo32*, click on file in the right upper corner > save and save the msinfo32 information with .nfo extension.
Make a zip file with the saved msinfo32 in it and upload the zip file.
I hope this works against the corruption, the msinfo32.nfo file could provide us a lot of useful information so we can provide better support to you.


*Search "msinfo32.exe" or "msinfo32" (without quotes)

 

[Laith]

@axe0 cfosspeed6.sys belongs to the ASUS TurboLAN, it's Internet Accelerator.

Uninstall ASUS TurboLAN.

 

[axe0]

@axe0 cfosspeed6.sys belongs to the ASUS TurboLAN, it's Internet Accelerator.

Uninstall ASUS TurboLAN.

The problem, with many drivers also, is that this driver is also used with other programs.
The msinfo32.nfo is needed to confirm that this driver is used by ASUS.

 

[Laith]

Oh yea, that's right.

 

[fr3nchy]

Please open msinfo32*, click on file in the right upper corner > save and save the msinfo32 information with .nfo extension.
Make a zip file with the saved msinfo32 in it and upload the zip file.
I hope this works against the corruption, the msinfo32.nfo file could provide us a lot of useful information so we can provide better support to you.

here's the zip file attached below with msinfo in it. hopefully this helps.

@axe0 cfosspeed6.sys belongs to the ASUS TurboLAN, it's Internet Accelerator.

Uninstall ASUS TurboLAN.

Uninstalled asrock xfast LAN which had the driver responsible(cfosspeed6)

Please uninstall everything of Nvidia using Display Driver Uninstaller and install new drivers from Nvidia

I've now completed this step as well.
I'm now rebooting to perform memtest like laith suggested.

 

[fr3nchy]

Im 6 hours into the memtest and 3 passes, no errors. Is it supposed to last this long?

 

[axe0]

I again cannot open msinfo32.nfo.

What does sfc say? Windows Resource Protection did not find any integrity violation?

Please download and install Malwarebytes free (Uncheck trial version in the installation process)
Please run a threat scan with Malwarebytes, a full scan with your AV, scan your system with Adwcleaner and Kaspersky TTDSKiller.

Normally MemTest86+ takes about 16-20h with 16GB RAM.

 

[fr3nchy]

memtest is complete 8 passes complete. 0 errors.
ran malwarebytes scan, 40+ threats cleared.
Yeah man I'm not sure why msinfo isn't working properly. when I open msinfo, the following prompt shows up, i click okay and it allows me to open it normally. Im not sure how to fix it for it to work properly when you open it.

 

[axe0]

Please do the following:

• Open an admin command prompt
• Copy/paste "sfc/scannow" (without quotes) and press enter

When SFC is finished, please upload the cbs.log file located at {windows partition}\Windows\Logs\CBS\, if the file is too large try a 3rd party uploader like dropbox, onedrive, google drive, mediafire etc.

You have done it a few times, but I'd like some insight into it.

 

[fr3nchy]

put the cbs in a zip. here take a look. hopefully it helps shed some light on this issue.

 

[axe0]

Please run sfc, reboot, sfc a couple times.
There is a lot of repairment and movement of files going on and I don't think SFC is finished yet.

 

[fr3nchy]

ive run sfc /scannow and rebooted several times. for some reason the process starts but the command prompt disappears after a while what's going on and am i doing anything wrong here?
ill post another cbs log in a moment