Multiple 64-bit Win7 Pro BSODs for weeks

[Thenin]

For a couple of weeks now I've been getting several different BSODs on one of my 64-bit Win 7 Pro SP1 systems. I don't think I've seen more than one at a time (i.e., the sequence I keep seeing is BSOD, reboot with CHKDSK, then the system runs fine with no issues for hours or days before another BSOD occurs).

The 3 minidumps I've uploaded with the "DM Log Collector" tool reflect 3 different BSODs: 0x04E, 0x03B, and 0x00A, but I've seen other ones whose error codes I can't recall.

Raxco PerfectUpdater detects no out-of-date drivers, and I haven't added any new hardware in months. The only new drivers/services/software I've installed were for WinAntiRansom, which is brand new as of a few hours ago, so they can't be responsible for the BSODs. (I installed it because of an apparent "ransom" attempt that failed on a different machine).

Both MBAM and Avira Pro report no malware. Also, I've exhaustively run MemTest86 v7 for almost two full days and no memory errors were discovered.

I'm stumped, so I'm asking you super-geniuses around here for help. Thanks!

(By the way, I'm posting this from a different machine).

 

[Thenin]

(deleted)

 

[Thenin]

(deleted)

 

[axe0]

BSOD Posting Instructions

 

[Thenin]

I've followed those instructions! The data requested by those instructions was posted in my OP!

If I'm missing something (which I doubt), why don't you just tell me what it is instead of pointlessly and unkindly and unhelpfully posting a link to instructions I've already complied with?

 

[axe0]

That zip doesn't contain all data since the last crashes, that is why I posted..

Please note, with 'all data' I mean not only dumps but event logs and all new data too.

 

[Thenin]

I've deleted any reference to data other than that requested by the "BSOD Posting Instructions" in my OP. Please respond only to my OP. Thank you.

 

[axe0]

Please start with the HDD tests, the file system structure of partition M may be seriously corrupted.
The other partitions should be checked too.

Event[1737]:
  Log Name: System
  Source: Ntfs
  Date: 2016-10-02T21:09:40.210
  Event ID: 55
  Task: N/A
  Level: Error
  Opcode: N/A
  Keyword: Classic
  User: N/A
  User Name: N/A
  Computer: Power7
  Description: 
The file system structure on the disk is corrupt and unusable. Please run the chkdsk utility on the volume M:.

Diagnostics Test

 HDD TEST

Run SeaTools DOS to check the integrity of your HDD. SeaTools for DOS and Windows - How to Use - Windows 7 Help Forums
Run the long test.

   Note

Do not run SeaTools on an SSD as the results will be invalid.

Make a photo of the result and post it.

Run chkdsk
Disk Check - Windows 7 Help Forums
Use option TWO with parameter /r
Upload the chkdsk log :ar: Check Disk (chkdsk) - Read Event Viewer Log

Run HDTune to

• scan for errors, no quick scan but full scan
• check the health,
• benchmark.

It may take some time, but please take the time you need to perform it properly.
When above is done please make screenshots of the following

• the error scan,
• the health,
• the benchmark incl. following
  • transfer rate,
  • access time,
  • burst rate,
  • cpu usage.

   Warning

Programs that claim to update your drivers install either the wrong or corrupted drivers.
If you have installed any driver with Driver Agent, please remove them as it may cause trouble.

An easy way to get remove these drivers is by using a restore point prior the installation.

Please remove Wise Registry Cleaner, this kind of software is dangerous and unnecessary.

If any overclocking is present, please remove it.




Please uninstall Jetico BestCryptCont for testing purpose

Child-SP          RetAddr           : Args to Child                                                           : Call Site
fffff880`0ea73038 fffff800`0395040c : 00000000`0000004e 00000000`00000099 00000000`00242fb2 00000000`00000002 : nt!KeBugCheckEx
fffff880`0ea73040 fffff800`0392d158 : fffff980`22d8f005 fffffa80`06c92130 00000000`00000000 00000000`00000001 : nt!MiBadShareCount+0x4c
fffff880`0ea73080 fffff800`03bd5289 : fffff980`22dc0000 fffff8a0`1a891d10 fffff8a0`00000000 fffffa80`00000000 : nt! ?? ::FNODOBFM::`string'+0x28767
fffff880`0ea73360 fffff800`038e12cb : 00000000`00640000 fffffa80`0cd55080 00000000`00000000 00000000`00700000 : nt!CcUnmapVacb+0x5d
fffff880`0ea733a0 fffff800`038d3669 : 00000000`00000001 00000000`00700000 fffffa80`1ee44010 fffffa80`0cd5ad50 : nt!CcUnmapVacbArray+0x1bb
fffff880`0ea73430 fffff800`03bab232 : 00000000`00000000 00000000`00700000 fffff880`0ea73500 fffff880`0ea73590 : nt!CcGetVirtualAddress+0x38a
fffff880`0ea734c0 fffff880`01ace1ff : fffff880`00000000 00000000`00000005 fffffa80`1dffe140 fffffa80`1ee20c01 : nt!CcCopyRead+0x132
fffff880`0ea73580 fffff880`01836098 : fffffa80`1ee20c30 fffffa80`1dffe0d8 fffff880`03772180 00000000`00000001 : Ntfs+0x991ff
fffff880`0ea73760 fffff880`018398ba : fffff880`0ea73830 fffff880`057bea03 00000000`032add00 fffffa80`1ee20c00 : fltmgr!FltpPerformFastIoCall+0x88
fffff880`0ea737c0 fffff880`01857630 : fffffa80`1ee20c30 00000000`00000000 fffff880`0ea739c8 00000000`00001000 : fltmgr!FltpPassThroughFastIo+0xda
fffff880`0ea73800 fffff880`017a7ba1 : 00000000`00000648 fffff880`017a4a0e fffffa80`1ee20c30 00000000`00001000 : fltmgr!FltpFastIoRead+0x1d0
fffff880`0ea738a0 00000000`00000648 : fffff880`017a4a0e fffffa80`1ee20c30 00000000`00001000 fffffa80`00000000 : [COLOR="red"]fsh[/COLOR]+0x4ba1
fffff880`0ea738a8 fffff880`017a4a0e : fffffa80`1ee20c30 00000000`00001000 fffffa80`00000000 00000000`032add08 : 0x648
fffff880`0ea738b0 fffffa80`1ee20c30 : 00000000`00001000 fffffa80`00000000 00000000`032add08 fffff880`0ea739c8 : fsh+0x1a0e
fffff880`0ea738b8 00000000`00001000 : fffffa80`00000000 00000000`032add08 fffff880`0ea739c8 fffffa80`1856c040 : 0xfffffa80`1ee20c30
fffff880`0ea738c0 fffffa80`00000000 : 00000000`032add08 fffff880`0ea739c8 fffffa80`1856c040 fffffa80`1ee20c30 : 0x1000
fffff880`0ea738c8 00000000`032add08 : fffff880`0ea739c8 fffffa80`1856c040 fffffa80`1ee20c30 fffff880`057beae7 : 0xfffffa80`00000000
fffff880`0ea738d0 fffff880`0ea739c8 : fffffa80`1856c040 fffffa80`1ee20c30 fffff880`057beae7 00000000`00f800c2 : 0x32add08
fffff880`0ea738d8 fffffa80`1856c040 : fffffa80`1ee20c30 fffff880`057beae7 00000000`00f800c2 00000000`00000000 : 0xfffff880`0ea739c8
fffff880`0ea738e0 fffffa80`1ee20c30 : fffff880`057beae7 00000000`00f800c2 00000000`00000000 00000000`00000000 : 0xfffffa80`1856c040
fffff880`0ea738e8 fffff880`057beae7 : 00000000`00f800c2 00000000`00000000 00000000`00000000 00000000`1f84edc0 : 0xfffffa80`1ee20c30
fffff880`0ea738f0 00000000`00f800c2 : 00000000`00000000 00000000`00000000 00000000`1f84edc0 00000000`00000000 : [COLOR="Red"]BCSWAP[/COLOR]+0x2ae7
fffff880`0ea738f8 00000000`00000000 : 00000000`00000000 00000000`1f84edc0 00000000`00000000 00000000`032add08 : 0xf800c2

Bugcheck code 0000004E
Arguments 00000000`00000099 00000000`00242fb2 00000000`00000002 00000000`001e8929
Debug session time: Mon Oct  3 03:06:09.063 2016 (UTC + 2:00)
System Uptime: 0 days 0:04:45.828

2: kd> lmvm BCSWAP // driver from Jetico possibly causing problems
Browse full module list
start             end                 module name
fffff880`057bc000 fffff880`057d8000   BCSWAP   T (no symbols)           
    Loaded symbol image file: BCSWAP.SYS
    Image path: BCSWAP.SYS
    Image name: BCSWAP.SYS
    Browse all global symbols  functions  data
    Timestamp:        Mon Sep 12 08:17:02 2016 (57D6485E)
    CheckSum:         0001D7DC
    ImageSize:        0001C000
    Translations:     0000.04b0 0000.04e4 0409.04b0 0409.04e4

2: kd> lmvm fsh // driver from Jetico possibly causing problems
Browse full module list
start             end                 module name
fffff880`017a3000 fffff880`017b4000   fsh      T (no symbols)           
    Loaded symbol image file: fsh.sys
    Image path: fsh.sys
    Image name: fsh.sys
    Browse all global symbols  functions  data
    Timestamp:        Wed Aug 31 14:00:54 2016 (57C6C6F6)
    CheckSum:         0001E3B0
    ImageSize:        00011000
    Translations:     0000.04b0 0000.04e4 0409.04b0 0409.04e4

Please uninstall everything of Nvidia using Display Driver Uninstaller and install new drivers from Nvidia. Be sure the clean install box is checked and only install the Graphics driver and the PhysX driver, you can use this tutorial to do so :ar: NVIDIA Drivers - Avoid Problems
View attachment 392410

0: kd> lmvm nvlddmkm
Browse full module list
start             end                 module name
fffff880`0f81d000 fffff880`10539000   nvlddmkm T (no symbols)           
    Loaded symbol image file: nvlddmkm.sys
    Image path: nvlddmkm.sys
    Image name: nvlddmkm.sys
    Browse all global symbols  functions  data
    Timestamp:        Fri May 20 03:25:49 2016 (573E679D)
    CheckSum:         00CD7F80
    ImageSize:        00D1C000
    Translations:     0000.04b0 0000.04e4 0409.04b0 0409.04e4

Please uninstall Avira and use Microsoft Security Essentials as alternative while troubleshooting.
Driver Reference Table - avipbb.sys,
Uninstall :arrow: Solved Anti Virus (AV) stand alone removal tools - Windows 10 Forums

fffff880`126c2938  fffffa80`19529b50
fffff880`126c2940  fffff880`126c2f00
fffff880`126c2948  fffff880`056fb83dUnable to load image avipbb.sys, Win32 error 0n2
*** WARNING: Unable to verify timestamp for avipbb.sys
*** ERROR: Module load completed but symbols could not be loaded for avipbb.sys
 avipbb+0x383d
fffff880`126c2950  fffffa80`19529b00
fffff880`126c2958  00000000`00000005