Random BSOD

[Viperlx]

Hi All,

I have a computer that BSODs every once in awhile. I was wondering if you could help m determine the issue.

Is Windows 7 . . .
- x86 (32-bit) or x64 ? x86
- the original installed OS on the system? No
- What is the age of system (hardware)? 1 year
- What is the age of OS installation (have you re-installed the OS?) 2 months

If you need more information, please let me know.

Thanks.

 

[Maguscreed]

before we do anything else could you verify that the file
ndiscdp.sys

Is located in Windows\system32 before we go any further.

I ask because it's the faulting file, its not normally associated with problems though, so before we continue I would like to make sure it's not a malicious file pretending to be something proper.

 

[Influx]

Hello Viperlx,

The dumps point to ndiscdp.sys as the probable cause.
ndiscdp.sys(Cisco Discovery Protocol Driver) is related to Cisco Unified Video Advantage.

C:\Program Files\Cisco Systems\Cisco Unified Video Advantage\

Please do the following:
Obtain the latest version of Cisco Unified Video Advantage.

Also, please fill in your System Specs.

 

[Maguscreed]

yeah having followed my instructions if it IS located where it should be go ahead and follow influx's that would have likely been the content of my next post anyhow

 

[Viperlx]

before we do anything else could you verify that the file
ndiscdp.sys

Is located in Windows\system32 before we go any further.

I ask because it's the faulting file, its not normally associated with problems though, so before we continue I would like to make sure it's not a malicious file pretending to be something proper.

The file is not located there.

 

[Maguscreed]

We should probably have a complete look with a scanner then.
This is my favorite on demand scanner and it's free.
Malwarebytes : Malwarebytes Anti-Malware PRO removes malware including viruses, spyware, worms and trojans, plus it protects your computer

make sure you let it update its list before scanning.
We want a complete scan here too. (at least a complete scan of the boot drive, if you have additional drives you can leave them out for the moment to try and save some time. It's pretty rare a virus isn't located on the main drive anyhow.

 

[Viperlx]

ah I am very familiar with malwarebytes. I will run it and report back with the findings.

 

[Maguscreed]

it's a good one, if that doesn't sort anything we'll have another look.
Like influx suggested above, it could be a out of date cisco product, but it should be located in the system32 folder if that is the case.

 

[Influx]

We should probably have a complete look with a scanner then.
This is my favorite on demand scanner and it's free.
Malwarebytes : Malwarebytes Anti-Malware PRO removes malware including viruses, spyware, worms and trojans, plus it protects your computer

make sure you let it update its list before scanning.
We want a complete scan here too. (at least a complete scan of the boot drive, if you have additional drives you can leave them out for the moment to try and save some time. It's pretty rare a virus isn't located on the main drive anyhow.

ndiscdp.sys is located at C:\Windows\system32\DRIVERS\
This is unlikely a malware since the Cisco software is installed, and there isn't anything suspicious as far as I know.

Please attempt to do my suggestion
Obtain the latest version of Cisco Unified Video Advantage.

If the BSOD still occurs, do remove Cisco Unified Video Advantage.

 

[yowanvista]

Few more things, an old HP Keyboard Filter Driver should be updated, HP Support & Drivers | United States

HpqKbFiltr.sys        0x95fe9000    0x95fed180    0x00004180    0x46770333    19/06/2007 02:12:03

You should remove any Cisco Products and Trend Micro Antivirus, they are both using obsolete drivers.
Use MSE instead.

VSApiNt.sys        0x91e0a000    0x91f323a0    0x001283a0    0x49ccb0e4    27/03/2009 14:56:36                
TmPreFlt.sys        0x8d59e000    0x8d5ab000    0x0000d000    0x49ccb57e    27/03/2009 15:16:14                
TmXPFlt.sys        0x91f33000    0x91f7b000    0x00048000    0x49ccb57f    27/03/2009 15:16:15

Update your O2Micro SD Reader Driver, download & install the latest version. (from HP's website)

 

[Viperlx]

Few more things, an old HP Keyboard Filter Driver should be updated, HP Support & Drivers | United States

HpqKbFiltr.sys        0x95fe9000    0x95fed180    0x00004180    0x46770333    19/06/2007 02:12:03

You should remove any Cisco Products and Trend Micro Antivirus, they are both using obsolete drivers.
Use MSE instead.

VSApiNt.sys        0x91e0a000    0x91f323a0    0x001283a0    0x49ccb0e4    27/03/2009 14:56:36                
TmPreFlt.sys        0x8d59e000    0x8d5ab000    0x0000d000    0x49ccb57e    27/03/2009 15:16:14                
TmXPFlt.sys        0x91f33000    0x91f7b000    0x00048000    0x49ccb57f    27/03/2009 15:16:15

Update your O2Micro SD Reader Driver, download & install the latest version. (from HP's website)

We cannot remove any Cisco or Trend Micro Products because this is an corporate computer. I will update the other drivers as mentioned though.

 

[writhziden]

Does your corporation have an IT department? It is usually best to take computer issues to your IT department before posting any information on the forums that could compromise corporate data.