Solved Random BSOD with PC in idle state: Bug Check 124

[aduckfan]

I've experienced several BSOD episodes resulting ultimately with PC shut down. Don't know how many more my SSD can withstand hoping you can help me with this.
Thanks in Advance

 

[essenbe]

Hello aduckfan, welcome to Seven Forums, I will try to help you with your problem. You have 3 dump files, all showing a stop error of 0X124. That is a general hardware error and is very difficult to find out what piece of hardware it is. If you have made and hardware or software changes to your computer recently, please let me know. The error indicates either a piece of hardware is failing/failed or a driver is making it act in unexpected ways so the operating system thinks it is/has failed. Only the dump file from today gives any clues. However, while looking at the dump files I noticed a lot of references to the file system and what would be the Hard drive.

What the dump file did blame for the crash was

BHDrvx64
start             end                 module name
fffff880`05254000 fffff880`053db000   BHDrvx64 T (no symbols)           
    Loaded symbol image file: BHDrvx64.sys
    Image path: BHDrvx64.sys
    Image name: BHDrvx64.sys
    Timestamp:        Tue Sep 23 21:12:51 2014 (542228A3)
    CheckSum:         0018E7EA
    ImageSize:        00187000
    Translations:     0000.04b0 0000.04e4 0409.04b0 0409.04e4

Which is your Symantec Heuristics Driver

SYMNETS
start             end                 module name
fffff880`054cc000 fffff880`05562000   SYMNETS  T (no symbols)           
    Loaded symbol image file: SYMNETS.SYS
    Image path: SYMNETS.SYS
    Image name: SYMNETS.SYS
    Timestamp:        Thu Feb 13 05:25:14 2014 (52FCAB9A)
    CheckSum:         00098278
    ImageSize:        00096000
    Translations:     0000.04b0 0000.04e4 0409.04b0 0409.04e4

Which is your Symantec/ Norton NIS/ N360 driver

tdrpm273
start             end                 module name
fffff880`01e4b000 fffff880`01f82000   tdrpm273 T (no symbols)           
    Loaded symbol image file: tdrpm273.sys
    Image path: tdrpm273.sys
    Image name: tdrpm273.sys
    Timestamp:        Tue Aug 10 04:54:18 2010 (4C6121CA)
    CheckSum:         0013510D
    ImageSize:        00137000
    Translations:     0000.04b0 0000.04e4 0409.04b0 0409.04e4

Which is the Acronis Try&Decide Volume Filter Driver

and

nvlddmkm
start             end                 module name
fffff880`0f69b000 fffff880`10329000   nvlddmkm T (no symbols)           
    Loaded symbol image file: nvlddmkm.sys
    Image path: nvlddmkm.sys
    Image name: nvlddmkm.sys
    Timestamp:        Wed Jul 02 12:42:02 2014 (53B4446A)
    CheckSum:         00C4C7C9
    ImageSize:        00C8E000
    Translations:     0000.04b0 0000.04e4 0409.04b0 0409.04e4

Which is your Graphics driver.

I would suggest you remove Norton from your system, as it was blamed twice and is also known to cause BSODs. this will help you do it. https://support.norton.com/sp/en/us/home/current/solutions/kb20080710133834EN_EndUserProfile_en_us
And replacing it with Microsoft Security essentials for the time being at least until we find the cause of your problems. Microsoft Security Essentials - Microsoft Windows

I would seriously consider removing Acronis also. removal https://kb.acronis.com/content/34876

Please also run Seatools, Seagate's diagnostic test. Please run the long and short tests.

http://www.sevenforums.com/tutorials/313457-seatools-dos-windows-how-use.html#Part3

Also please open a elevated command prompt ( click start, type cmd in the search box, right click on the cmd entry and select run as administrator) in the black box that opens, copy/paste sfc /scannow. If you decide to type it, notice the space between the sfc and the /. It is a system file checker which will scan your system files and attempt to correct any missing or corrupt files. What we want are the results to say windows found no integrity violations. If it says files were found but could not be repaired, close the box, reboot and run it again, after opening the administrative command prompt. You may have to reboot and run it three times for it to repair all system files. If it can't repair them after 3 reboots, let us know.

Let us know the results of these tests and if you see any improved results.

 

[aduckfan]

essenbe,
Thanks for taking this on. Norton is fairly new I got hacked by cryptowall, after that mess I took Comcast up on the freebie Norton 360. I'm thinking that's when BSOD started. I thought it may be heat related so I added another fan and larger heat sink runs cooler but still BSOD. Didn't even know acronis was on here so we'll do some house keeping and report back. I've ran SFC several times along with reimage. Will run SFC per you're instructions. Have also ran sea tools.

 

[essenbe]

Norton is a known cause of BSODs, so removing it is a good idea. Some people can use it with no problems, many it gives them fits, bit needs the uninstall utility to completely remove it and there will be bits and pieces still left over. The same with Acronis. That's why I shy away from those two programs, they seem to try to 'take over' the computer, I personally do not like that. I only asked for the Seatools because in the dump files, as you look at them I kept seeing references to the NTFS file system and I/O issues. Never were any of those blamed for a crash, but I would be concerned if they were on my computer.

 

[aduckfan]

CBS Logs

Seatools didn't find any errors SFC found a couple. I've uninstalled and cleaned up per you're request. The only new hardware is a Microsoft blue tooth mouse that drives me crazy since it just goes it's own way on occasion and is very slow to start up. Think it's heading back to Staples if I can't figure out what's going on. I've uploaded the CBS log. Someday I'll learn how to read them but not today.

 

[essenbe]

Me either, I can't read them. I'll have to ask for some help here. Have tou had any more BSOSs? If so, please run http://www.sevenforums.com/bsod-help-support/96879-blue-screen-death-bsod-posting-instructions.html and upload the results with your next post.

Just for your information, if you make a new post in this thread, I will be notified, if you edit a previous post I will not be notified, so please always make a new post.

 

[aduckfan]

No incidents since the original posting

 

[essenbe]

No problems. I have asked for someone to look at the CBS logs. I wouldn't be too concerned about your SSD. If a BSOD could kill one, mine would be dead and buried a long time ago. I've lost count, but I believe I have 13 SSDs now; albeit in about 5 computers, soon to be 6 I hope. But in overclocking, a BSOD is an 'occupational Hazard'.

 

[Layback Bear]

I totally agree with essenbe.
If BSOD killed ssd's I would have a few dead ones laying around.

While one is figuring out the best over clock for their system you must just get use to BSOD now and again. In a way BSOD are useful when over clocking. It will let you know that the last thing you changed in your over clocking was a no no.

 

[NoelDP]

The CBS log is 'interesting'
The SFC scan summary shows the following...

 Line 3771: 2014-12-04 05:21:12, Info                  CSI    00000366 [SR] Repairing 3 components
 Line 3772: 2014-12-04 05:21:12, Info                  CSI    00000367 [SR] Beginning Verify and Repair transaction
 Line 3775: 2014-12-04 05:21:12, Info                  CSI    00000369 [SR] Repairing corrupted file [ml:520{260},l:40{20}]"\??\C:\Windows\fonts"\[l:22{11}]"micross.ttf" from store
 Line 3778: 2014-12-04 05:21:12, Info                  CSI    0000036b [SR] Repairing corrupted file [ml:520{260},l:40{20}]"\??\C:\Windows\fonts"\[l:18{9}]"times.ttf" from store
 Line 3781: 2014-12-04 05:21:12, Info                  CSI    0000036d [SR] Repairing corrupted file [ml:520{260},l:40{20}]"\??\C:\Windows\fonts"\[l:20{10}]"timesi.ttf" from store
 Line 3784: 2014-12-04 05:21:12, Info                  CSI    0000036f [SR] Repairing corrupted file [ml:520{260},l:40{20}]"\??\C:\Windows\fonts"\[l:22{11}]"timesbi.ttf" from store
 Line 3787: 2014-12-04 05:21:12, Info                  CSI    00000371 [SR] Repairing corrupted file [ml:520{260},l:40{20}]"\??\C:\Windows\fonts"\[l:22{11}]"timesbd.ttf" from store
 Line 3790: 2014-12-04 05:21:12, Info                  CSI    00000373 [SR] Repairing corrupted file [ml:520{260},l:40{20}]"\??\C:\Windows\fonts"\[l:22{11}]"segoeui.ttf" from store
 Line 3793: 2014-12-04 05:21:12, Info                  CSI    00000375 [SR] Repairing corrupted file [ml:520{260},l:40{20}]"\??\C:\Windows\fonts"\[l:24{12}]"segoeuib.ttf" from store
 Line 3796: 2014-12-04 05:21:12, Info                  CSI    00000377 [SR] Repairing corrupted file [ml:520{260},l:40{20}]"\??\C:\Windows\fonts"\[l:24{12}]"segoeuii.ttf" from store
 Line 3799: 2014-12-04 05:21:12, Info                  CSI    00000379 [SR] Repairing corrupted file [ml:520{260},l:40{20}]"\??\C:\Windows\fonts"\[l:24{12}]"segoeuiz.ttf" from store
 Line 3817: 2014-12-04 05:21:12, Info                  CSI    0000037b [SR] Repair complete

These are all system fonts, so it begs the question of why these files should have got corrupted in the first place.

There is one error that doesn't get trapped by the usual SFC extraction ...

2014-12-04 05:21:12, Info                  CSI    00000361 [SR] Committing transaction
2014-12-04 05:21:12, Info                  CSI    00000362 Creating NT transaction (seq 2), objectname [6]"(null)"
2014-12-04 05:21:12, Info                  CSI    00000363 Created NT transaction (seq 2) result 0x00000000, handle @0xbb8
2014-12-04 05:21:12, Error                 CSI    00000364 (F) STATUS_CANNOT_DELETE #7041045# from RtlRunPrimitiveOperationsFromCallbacksAgainstSil(...)[gle=0xd0000121]
2014-12-04 05:21:12, Info                  CSI    00000365 [SR] Unable to complete Verify and Repair transaction because some of the files that need to be repaired are in use. A reboot is required to complete this operation.

This should have been corrected on the reboot - but second run of SFC /SCANNOW will double-check that, so please do it and see if you get the expected 'no integrity violations found' message. If not, please post the new CBS.log file.

 

[aduckfan]

I ran an additional scan yesterday and SFC didn't find anything to report. I guess we'll mark this as solved and wait for the next issue. I got hit with cryptowall as previously stated with malware bytes installed Norton seemed to pickup and prevent more bad guys so now I'm not sure where I'll go.
If I could only get this cotton pick"n Bluetooth mouse to act like a mouse and not a train wreck I'll be happy. If anyone's thinking about one think again.

 

[essenbe]

Did you uninstall Norton? From a BSOD perspective, I we always recommend Microsoft Security essentials Microsoft Security Essentials - Microsoft Windows . It is the only anti Virus that has never caused a BSOD. I used it for years. That is not to say it is the best anti Virus, but it is the best if you are having BSODs caused by an anti virus because it will not cause one. I used it for a lot of years and never had a problem. The best anti virus, is your surfing practices and knowing what to download and where to download it from. Safe surfing practices are the best anti virus. As far as anti virus programs go, I don't believe there is a best. There is not a single one which will catch every virus without exception. The numbers may have changed, but the last 'test evaluation' I saw, the #1 rated one caught about 76% of them. Not very stellar in my book. A while back, I was looking for a driver for someone and ended up someplace I didn't intend to be. I got hit by a 'drive by'. I really thought I avoided it, I did not click anything, I held the start button down and did a hard shutdown. Most of those, it makes no difference what you click, even Alt+Control+delete and task manager, it will install the virus. So, a hard shutdown was what I tried. I ran every anti vireus, malware program I had or could think of online, Nothing was found, not a single thing. That is until I ran ESET's online scanner. It found about 15 different things and removed them. After it was finished, I rebooted and ran it again. Nothing was found. So, I figured that's the one I wanted. So, I bought ESET Smart Security. I also still have Malwarebytes and Superantispyware. Both on demand scanners and I use them 3 times a week on average. That's my story and I now have ESET Smart Security, but I still recommend MSE, especially while working a BSOD. That will take an anti virus problem out of the equation.

I think you should remove Norton, install MSE and give it some time before calling this thread closed and see if you continue to have problems. I'm sorry, but I cannot help you with your Bluetooth problem. I have never used it and am old fashioned and want a wired keyboard and mouse. I have several wireless ones and they work well, but being a gamer I can tell you they are not as responsive as a wired one. If you are not a gamer, that probably wouldn't matter to you. But I know little about Bluetooth, other that you have to have the right drivers installed and I've heard others say the Bluetooth module has to recognize the particular device you wish to control. but I have never tried it. But, lets give this some time before we quit to see if your BSOD problem is solved. You can leave it marked solved if you want, but if you post here, I will be notified, as long as it is a new post.

 

[Layback Bear]

I like Steve have used MSE for a long time without problems.
I also use other programs to scan just to be sure and Eset Online scan is always one of them.

Through the years I have used several wireless mouse and keyboards when done with all the trick keyboards and mice the only ones I found to work as they should for a long time doing just normal things on my computer were Microsoft wireless mouse and keyboards. I'm not a gamer.

A little hint: Even if the wireless mouse and keyboard state they are usb 3.0 I suggest trying them in usb 2.0 ports.
That has solved problems for me in the past.

The wireless mouse and keyboards I had the most problems were Logitech.

 

[aduckfan]

To Clean mine we used (I don't remember the order) RogueKiller, FRST, delfix, rkill, tdsskiller, combofix, tsclean. This from Malwarebyts support. After that I came across hitmanpro and it found lots of stuff the others missed. Then Norton called because I couldn't get 360 to install trough Comcast. I probably spent 8 to 10 hours on it. Have no idea how I got infected I'm very careful where I go but not careful enough obviously. The end result cryptowall got to every file on my PC and made them unusable. Even my backup drive. The only files still intact are on Google drive.
I've researched the Bluetooth mouse issue did some stuff seems to be working for now. I'll keep this incident open for awhile I have uninstalled Norton am installing MSE as I type. We'll see what happens. Thanks again.