Solved Random BSOD's at random moments

[thijs95]

Hi,

I'm new here, but I have a BSOD issue. I use Windows 7 Home Premium, but since i got the pc from a friend, I've been having BSOD issuses. I tried updating my graphics card, but this had no effect. Also, I swapped my RAM cards in different orders, but this works for only a couple of days. I have no idea what is causing all this. I attached the log file. Someone with any idea?

Thanks a lot in advance.

 

[Thedoctor44]

This looks like malware, more specifically a rootkit.

BugCheck 1000008E, {[COLOR="Red"]80000004[/COLOR], 82e5a608, a464f870, 0}

a464f914 82e5c6c8 8c81b7f8 00000160 8c81a484 nt!HvpGetCellPaged+0xe4
a464f940 82e4070b a464fc54 8c81b7f8 8c81a3c8 nt!CmpConstructName+0x96
a464f9b4 82e3e85f 8c81b7f8 a464fc18 8c81a3c8 nt!CmpGetSymbolicLink+0x1f6
a464fb48 82e35d2e 8c80a770 855b6f78 881ce8f0 nt!CmpParseKey+0x890
a464fbc4 82e46157 00000000 a464fc18 00000040 [COLOR="red"]nt!ObpLookupObjectName+0x4fa[/COLOR]
a464fc20 82e44088 7795e81c 855b6f78 898efc01 [COLOR="red"]nt!ObOpenObjectByName+0x165[/COLOR]
a464fd00 82e5c8fa 0012f950 00000003 7795e81c [COLOR="Red"]nt!CmOpenKey+0x1f4[/COLOR]
a464fd20 82c4d8c6 0012f950 00000003 7795e81c [COLOR="Red"]nt!NtOpenKey+0x18[/COLOR] <-- Opening registry key
a464fd20 779370f4 0012f950 00000003 7795e81c [COLOR="Blue"]nt!KiSystemServicePostCall[/COLOR] <-- System call
WARNING: Frame IP not in any known module. Following frames may be wrong.
0012fb50 00000000 00000000 00000000 00000000 0x779370f4

The rootkit appears to be using Direct Kernel Object Manipulation and hiding to prevent detection.

I would use Kaspersky's TDSSKiller Anti Rootkit utility to find the virus(s)

Anti-rootkit utility TDSSKiller

 

[thijs95]

Thanks a lot for your reply. I ran the TDSSKiller, but no threat was found. Any idea what i could do?

 

[Thedoctor44]

I would give Avast MBR a try then we'll go from there.

aswMBR Download

Run Windows Security Essentials as well.

 

[thijs95]

I ran aswMBR but nothing was found, as far as i can see. I attached the log file. I did a recovery on windows lately, but that didnt help. Also, as mentioned before, I tried to switch between RAM slots. This worked out the first time, but after about a month or two, it started all over again... any ideas left? Thanks a lot already though.

 

[Thedoctor44]

The rest of your dump files are very random, you've got 0xD1 bugchecks.

BugCheck D1, {[COLOR="Red"]0[/COLOR], [COLOR="Blue"]2[/COLOR], [COLOR="Purple"]1[/COLOR], 8b9c743f}

A null referenced pointer at an IRQL too high with a write operation, this is normally caused by drivers but given the situation I feel bad RAM is the cause.
To add to this there is nothing in the raw stack at all which isn't good at all.

   Information

Download it here:

Memtest86+ - Advanced Memory Diagnostic Tool

Which one should I download?

You have two options to choose from, you can either download the ISO version then burn it do a CD and boot it from there.
The other option is downloading the auto installer for USB sticks, you then boot from that USB stick.
Be warned though, it will format your USB then install the files needed to make it bootable so any files left over will be wiped off.

So how does it work?

It works by writing a series of test patterns to most memory addresses over 9 tests, it then reads the data back to compare it for errors.

The default pass does 9 different tests varying in access patterns and test data. A tenth pass is optional from the menu which writes all the memory in zeroes then sleeps for 90 minutes and compares it to see if any address have changed, this takes 3 hours per pass each time.

My memtest86 isn't booting! What should I do?

This can be caused by a number of different reasons, common ones include your BIOS not setting using the correct settings, you might want to change your boot priority order.
Other causes include your motherboard not supporting bootable USB sticks in which case you'll need to use a CD (or floppy drive).

Any other issues you might want to look here:

FAQ : please read before posting

 

[thijs95]

Sorry for the late reply , been really busy these days.

I ran memtest, but it didnt find a single fault... ANY idea what else could cause all these different BSoD's?

 

[Arc]

Let us know how many passes you ran memtest86+.

Also upload your MSINFO32.nfo file.

1. Click on the start button
2. Type "msinfo32" (without quotes) in the search bar of the start menu, click the resulting link. It will open the System Information window.
3. File>Save. In the "File Name" filed, put "MSINFO32" (without Quote), give the save location to desktop, and click the "save" button.
4. Give the time for processing, it will save a .nfo file on your desktop.
5. Zip it, and upload it following the instruction.

 

[thijs95]

Hmm I only ran it once, I stopped it while working on the second test... I'll run it for the next 3 hours. Also I attached the file.
Thanks a lot !

 

[Arc]

Do two things.

First, open the computer. Apply the SATA cable on a different port on the motherboard.

And complete 8 passes with memtest 86+.

Let us know the situation after that.

 

[thijs95]

Sorry if I sound like a noob, but I guessed with SATA cable you meant my HDD's SATA cable, I applied that one to another port. Then I ran 8 passes on memtest, but still not a single error found... any idea?

 

[Arc]

If there is no errors after 8 passes, it can be say that it is possible that the RAM is not causing any issue.

Let us know how the computer is running after changing the SATA port.

 

[thijs95]

Well, sadly nothing changed. after 2 days I got my next BSoD. I attached a printscreen from my bluescreenview tool. Here you can see how many different BSoD's I get. By the way, It says a NVIDIA file caused the problem this time, but 19/20 times its Windows OS. Since I wasn't running any heavy tasks, I guess this is also just random?

Getting really tired of this pc...

 

[Arc]

Hi thijs95.

Sorry for posting back after a long time. I was not able to come online.

Can you supply the info for one more time? Click on the button below ....



It will download the DM log collector. Right click on the application and run as administrator. It will generate a .zip file on your desktop. Upload the .zip.
http://www.sevenforums.com/tutorials/9733-screenshots-files-upload-post-seven-forums.html

 

[thijs95]

Hi,

Sorry for the late reply, have been on a long holiday. Anyways, I opened up my computer, took apart all seperate parts, cleaned them all with a lot of contact spray. Turned out that both my CPU heatsink, my graphics card and a lot of other parts were filled with dust. After cleaning everything and reassembling my pc, I havent had any more problems (yet).

Thanks a lot for all the help!

 

[Arc]