Internet disconnects then CPU lagspikes,try to shutdown and I get BSOD

[Bobbeh123]

Hello all, two times since I got this new computer it has ended up Bluescreening.

I have noticed that during both of these times, my internet stops working. A process (which i believe relates to my Ralink Wireless LAN Card) called "svchost.exe" takes a lot of memory and the service name is "wudfsvc". Then I check the performance tab and my CPU's performance spikes 25-40% constantly. Then, the only time I receive the bluescreen is when I try to shut down my computer (if my cpu usage isn't spiking and I do have access to the internet, it shuts down fine and normal, it is only during this weird random event that I get bluescreen trying to shut down). I had installed drivers for my videocard, but that is about it. I did NOT install any drivers relating to my LAN card.

Please note that this occurs randomly and that particular service is always running at 150k memory usage. However, the only time I get this bluescreen is when the CPU usage starts to spike, my internet goes down and I try to shut down my computer.

Upon restarting my computer if this happens, it gets stuck on the splashscreen. So I end up turning it off completely and doing a normal boot up and the computer works perfectly fine.

ALIENWARE AURORA R3

i5-2400 3.10 ghz
radeon 6950

Is Windows 7 . . .
- x64
- Windows 7
- OEM
- 2 week old computer

 

[Veniathan]

You should not worry about svchost.exe

It's a system file, it usualy does indeed use alot of memory. Shutting it down will lead to instability.

So its not the problem, other then that. I do not know honestly ..

 

[Bobbeh123]

So is this a unfixable BSOD?

 

[Jonathan_King]

Hello,

It seems there may be some malware on your system:

Event[749]:
  Log Name: System
  Source: Microsoft Antimalware
  Date: 2011-10-31T20:29:31.000
  Event ID: 1116
  Task: N/A
  Level: Warning
  Opcode: Info
  Keyword: Classic
  User: N/A
  User Name: N/A
  Computer: Brett-PC
  Description: 
Microsoft Antimalware has detected malware or other potentially unwanted software.
 For more information please see the following:
http://go.microsoft.com/fwlink/?linkid=37020&name=HackTool:Win32/Keygen&threatid=2147593794
     Name: HackTool:Win32/Keygen
     ID: 2147593794
     Severity: Medium
     Category: Tool
     Path: file:_C:\$Recycle.Bin\S-0-0-00-0000000000-1697062364-0000000000-0000\$R41NBWJ.exe;file:_C:\Users\Brett\AppData\Local\Temp\Rar$DR94.456\Malwarebytes Anti-Malware 1.50.1.1100\Keygen MBAM.1.50 and later (FFF)\w00t.exe;file:_C:\Users\Brett\Desktop\w00t.exe
     Detection Origin: Local machine
     Detection Type: Concrete
     Detection Source: Real-Time Protection
     User: Brett-PC\Brett
     Process Name: C:\Program Files (x86)\SUPERAntiSpyware\SUPERAntiSpyware.exe
     Signature Version: AV: 1.115.963.0, AS: 1.115.963.0, NIS: 10.7.0.0
     Engine Version: AM: 1.1.7801.0, NIS: 2.0.7707.0

Run a scan with Malwarebytes, and also run a Full Scan with MSE.

Install the latest Realtek ethernet drivers from here: 218.210.127.131/downloads/downloadsView.aspx?Langid=1&PNid=13&PFid=5&Level=5&Conn=4&DownTypeID=3&GetDown=false

Rt64win7.sys    Mon Mar 22 05:57:14 2010 (4BA73EFA)

Event[1527]:
  Log Name: System
  Source: RTL8167
  Date: 2011-10-30T15:54:01.078
  Event ID: 1
  Task: N/A
  Level: Warning
  Opcode: N/A
  Keyword: Classic
  User: N/A
  User Name: N/A
  Computer: Brett-PC
  Description: 
Realtek PCIe GBE Family Controller is disconnected from network.

Run the McAfee removal tools shown here: service.mcafee.com/FAQDocument.aspx?lc=1033&id=TS100507

Other than that, start on some hardware tests. Run each of the three Prime95 tests: www.sevenforums.com/tutorials/100352-hardware-stress-test-prime95.html

...Summary of the dumps:

[font=lucida console]
Built by: 7601.17640.amd64fre.win7sp1_gdr.110622-1506
Debug session time: Tue Oct 25 23:14:07.979 2011 (UTC - 4:00)
System Uptime: 0 days 1:06:51.228
*** WARNING: Unable to verify timestamp for btmusb.sys
*** ERROR: Module load completed but symbols could not be loaded for btmusb.sys
*** WARNING: Unable to verify timestamp for usbhub.sys
*** ERROR: Module load completed but symbols could not be loaded for usbhub.sys
Probably caused by : usbhub.sys
DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT
BUGCHECK_STR:  0x9F
PROCESS_NAME:  System
FAILURE_BUCKET_ID:  X64_0x9F_3_IMAGE_usbhub.sys
BiosReleaseDate = 05/25/2011
SystemProductName = Aurora-R3
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
Built by: 7601.17640.amd64fre.win7sp1_gdr.110622-1506
Debug session time: Tue Nov  1 23:59:08.360 2011 (UTC - 4:00)
System Uptime: 0 days 9:56:46.609
*** WARNING: Unable to verify timestamp for usbhub.sys
*** ERROR: Module load completed but symbols could not be loaded for usbhub.sys
Probably caused by : usbhub.sys ( usbhub+12a60 )
DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT
BUGCHECK_STR:  0xFE
PROCESS_NAME:  System
FAILURE_BUCKET_ID:  X64_0xFE_usbhub+12a60
BiosReleaseDate = 05/25/2011
SystemProductName = Aurora-R3
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
  
[/font]

 

[Bobbeh123]

Hello,

It seems there may be some malware on your system:

Event[749]:
  Log Name: System
  Source: Microsoft Antimalware
  Date: 2011-10-31T20:29:31.000
  Event ID: 1116
  Task: N/A
  Level: Warning
  Opcode: Info
  Keyword: Classic
  User: N/A
  User Name: N/A
  Computer: Brett-PC
  Description: 
Microsoft Antimalware has detected malware or other potentially unwanted software.
 For more information please see the following:
http://go.microsoft.com/fwlink/?linkid=37020&name=HackTool:Win32/Keygen&threatid=2147593794
     Name: HackTool:Win32/Keygen
     ID: 2147593794
     Severity: Medium
     Category: Tool
     Path: file:_C:\$Recycle.Bin\S-0-0-00-0000000000-1697062364-0000000000-0000\$R41NBWJ.exe;file:_C:\Users\Brett\AppData\Local\Temp\Rar$DR94.456\Malwarebytes Anti-Malware 1.50.1.1100\Keygen MBAM.1.50 and later (FFF)\w00t.exe;file:_C:\Users\Brett\Desktop\w00t.exe
     Detection Origin: Local machine
     Detection Type: Concrete
     Detection Source: Real-Time Protection
     User: Brett-PC\Brett
     Process Name: C:\Program Files (x86)\SUPERAntiSpyware\SUPERAntiSpyware.exe
     Signature Version: AV: 1.115.963.0, AS: 1.115.963.0, NIS: 10.7.0.0
     Engine Version: AM: 1.1.7801.0, NIS: 2.0.7707.0

Run a scan with Malwarebytes, and also run a Full Scan with MSE.

Install the latest Realtek ethernet drivers from here: 218.210.127.131/downloads/downloadsView.aspx?Langid=1&PNid=13&PFid=5&Level=5&Conn=4&DownTypeID=3&GetDown=false

Rt64win7.sys    Mon Mar 22 05:57:14 2010 (4BA73EFA)

Event[1527]:
  Log Name: System
  Source: RTL8167
  Date: 2011-10-30T15:54:01.078
  Event ID: 1
  Task: N/A
  Level: Warning
  Opcode: N/A
  Keyword: Classic
  User: N/A
  User Name: N/A
  Computer: Brett-PC
  Description: 
Realtek PCIe GBE Family Controller is disconnected from network.

Run the McAfee removal tools shown here: service.mcafee.com/FAQDocument.aspx?lc=1033&id=TS100507

Other than that, start on some hardware tests. Run each of the three Prime95 tests: www.sevenforums.com/tutorials/100352-hardware-stress-test-prime95.html

...Summary of the dumps:

[font=lucida console]
Built by: 7601.17640.amd64fre.win7sp1_gdr.110622-1506
Debug session time: Tue Oct 25 23:14:07.979 2011 (UTC - 4:00)
System Uptime: 0 days 1:06:51.228
*** WARNING: Unable to verify timestamp for btmusb.sys
*** ERROR: Module load completed but symbols could not be loaded for btmusb.sys
*** WARNING: Unable to verify timestamp for usbhub.sys
*** ERROR: Module load completed but symbols could not be loaded for usbhub.sys
Probably caused by : usbhub.sys
DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT
BUGCHECK_STR:  0x9F
PROCESS_NAME:  System
FAILURE_BUCKET_ID:  X64_0x9F_3_IMAGE_usbhub.sys
BiosReleaseDate = 05/25/2011
SystemProductName = Aurora-R3
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
Built by: 7601.17640.amd64fre.win7sp1_gdr.110622-1506
Debug session time: Tue Nov  1 23:59:08.360 2011 (UTC - 4:00)
System Uptime: 0 days 9:56:46.609
*** WARNING: Unable to verify timestamp for usbhub.sys
*** ERROR: Module load completed but symbols could not be loaded for usbhub.sys
Probably caused by : usbhub.sys ( usbhub+12a60 )
DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT
BUGCHECK_STR:  0xFE
PROCESS_NAME:  System
FAILURE_BUCKET_ID:  X64_0xFE_usbhub+12a60
BiosReleaseDate = 05/25/2011
SystemProductName = Aurora-R3
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
  
[/font]

-malwarebytes removed the malware.
-the system is stable (i ran before i left for work)
I installed the ethernet drivers. Should I uninstall my old Ralink drivers now? The only problem if I do that is I won't have wifi access??


Lastly, what do I do about "DRIVER_POWER_STATE_FAILURE", will the ethernet drivers fix both of my BSODs?

 

[Jonathan_King]

The only thing I notice that might suggest an issue with your Ralink card is the usbhub.sys bugcheck. Given that your Ralink card is USB, there might be some correlation.

If the BSODs persist, try unplugging the wireless adapter for a few days, see if it makes a difference. You could also try just uninstalling the drivers and letting Windows reinstall some compatible ones. You should still have wireless access, but perhaps lost some functionality such as Wake on Lan and power savings.

 

[Bobbeh123]

alright well.. i seem to have persisting BSODs. i've had one since the last two. It is caused by "ntoskrnl.exe" but I'm not sure what the problem is EXACTLY. Here is how/when it happens: I attempt to shut down the computer and it hangs on "Shutting down" and ends up BSODing after a while. Then it restarts and hangs on splashscreen until eventually I have to do a hard reset. This only happens rarely because sometimes I can shut down just fine. Please help, i'd love to shut down my computer every day without the fear of a BSOD

btw, the wireless adapter isn't USB.

 

[Bobbeh123]

I still need help with this problem I posted the BSOD files above.

 

[Jonathan_King]

Are you aware that your Officejet printer is disabled? If you're not using it, disconnect it completely. For that matter, disconnect all USB devices that aren't essential to the basic usage of the computer.

Also, uninstall AlienRespawn, as it seems to be hanging:

Event[794]:
  Log Name: System
  Source: Service Control Manager
  Date: 2011-11-06T14:31:26.661
  Event ID: 7011
  Task: N/A
  Level: Error
  Opcode: N/A
  Keyword: Classic
  User: N/A
  User Name: N/A
  Computer: Brett-PC
  Description: 
A timeout (30000 milliseconds) was reached while waiting for a transaction response from the SftService service.

Finally, if that fails, we should resort to standard software troubleshooting methods, non-BSOD-specific. Try a selective startup: Run Selective Startup using System Configuration

...Summary of the dumps:

[font=lucida console]
Built by: 7601.17640.amd64fre.win7sp1_gdr.110622-1506
Debug session time: Mon Nov  7 18:55:29.157 2011 (UTC - 5:00)
System Uptime: 0 days 3:49:36.406
Probably caused by : usbehci.sys
DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT
BUGCHECK_STR:  0x9F
PROCESS_NAME:  System
FAILURE_BUCKET_ID:  X64_0x9F_3_IMAGE_usbehci.sys
BiosReleaseDate = 05/25/2011
SystemProductName = Aurora-R3
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
  
[/font]

 

[Bobbeh123]

Thanks, I've been having printer issues before.. so this could very well be the case. Also, ending the Alienrespawn process has allowed me to shut down my computer successfully before. Thanks!!

I'll get back to you if it still persists. (I completely disconnected the printer, although I still have my xbox 360 controller hooked up along with a webcam)

EDIT: I uninstalled ALL of my network adapters and restarted my computer. It just reinstalled them, so hopefully that will solve my problems? I have no idea at this point because I've tried new drivers already. Also, I have unplugged all USB devices from the computer.

 

[Jonathan_King]

Give it a try like that, hopefully it will solve the problem. If not, disconnect the xBox controller and webcam.

 

[Bobbeh123]

Ok, well.. i didn't get a BSOD. But i got the stupid internet problem again. My internet stopped working and I looked at my processes and something called "NT Kernel and Systems" was taking 26% of my CPU. I tried suspending the process and my whole computer locked up, causing me to do a hard reset to boot it back up normally. This links (along with my BSODs) witht he "ntoskrnl.exe" process/driver.

I honestly have NO CLUE why this is happening.

Should I just uninstall ALL of my internet drivers?

Again, this happens randomly so it's not like I can troubleshoot different software. Sometimes I can go on my computer for hours on end with no problems and sometimes I either get the internet problem or a BSOD on shutdown.

Can someone guide me on which drivers i need to uninstall and which ones I should download afterwards?

 

[Bobbeh123]

I looked at event viewer and when I had these internet problems Warnings popped up either saying

-WLAN autoconfig has successfully stopped
-WLAN Extensibility Module has stopped.
or
-Realtek PCIe GBE Family Controller is disconnected from network.

Hope this helps

 

[Bobbeh123]

well.. the only thing i can narrow it down to at this point is EVERY time I get a bluescreen .. it ALWAYS happens RIGHT when this error occurs in event viewer:


"WLAN Extensibility Module has stopped.

Module Path: C:\Windows\system32\RAIHV.dll"

i'm so tired of this. it seems unfixable, i've tried everything from updating driver,s power managements, BIOS updates. EVERYTHING.

I tried disabling all my anti-virus, my firewall.

I found the last time this happened was because of a game. Everytime the game was open, my internet didn't work and i couldn't open "network sharing center" and then when i closed it, my internet worked and I could access network sharing center!

Is my computer just messing with me at this point?

 

[Jonathan_King]

Do you have another network adapter you can use? If so, you could disable your onboard Realtek chip and see of the troubles stop.