Routine BSOD's at wits end

[Bewos]

Good Afternoon,
I have been getting BSOD's for weeks now crash files show its always one of these 3 ( usually the last 2) msahci.sys, ntoskrnl.exe, ntoskrnl.exe. it seems to usually happen when I am on the internet.

I have attached the Zip file from the win 7 Diag diag tool.



Thanks in advance for any insight

 

[koolkat77]

Welcome

ntkrnlmpe.exe, ntoskrnl.exe are not the true cause of your crash.

STOP 0x0000001E: KMODE_EXCEPTION_NOT_HANDLED    
Usual causes:  Device driver, hardware, System service, compatibility, Remote control programs, memory, BIOS
BugCheck 1E, {ffffffffc0000005, fffff800031cc6ea, 1, 18}
Probably caused by : ntkrnlmp.exe ( nt!ObpCreateHandle+29a )
.......................................................................................................................
STOP 0x000000F7: DRIVER_OVERRAN_STACK_BUFFER
Usual causes:  Device driver, Malware
BugCheck F7, {ffca254e0c3af991, 22297de07364, ffffddd6821f8c9b, 0}
Probably caused by : ntkrnlmp.exe ( nt!_report_gsfailure+25 )

Problematic software:

Start Menu\Programs\Norton	Woolery-Office\Woolery:Start Menu\Programs\Norton	Woolery-Office\Woolery
Start Menu\Programs\Norton AntiVirus	Public:Start Menu\Programs\Norton AntiVirus	Public
Start Menu\Programs\Norton Bootable Recovery Tool Wizard	Public:Start Menu\Programs\Norton Bootable Recovery Tool Wizard	Public
Start Menu\Programs\Norton Identity Safe	Public:Start Menu\Programs\Norton Identity Safe	Public

Norton is a known cause to BSODs, suggest you to uninstall it completely including all its components and replace with free MSE (at least to test)

• Norton Removal Tool

Recommended antivirus program for Windows 7 based on stability compared to others:-

• Microsoft Security Essentials - Free Antivirus for Windows
• Malwarebytes - The Free version
• http://www.sevenforums.com/system-security/206705-good-free-system-security-combination.html

Run a full scan with both (separately) once downloaded, installed and updated as one of your bugchecks usual causes list malware as a cause.
Run this tool and delete anything it finds:

• Anti-rootkit utility TDSSKiller

Run the System File Checker that scans the of all protected Windows 7 system files and replaces incorrect corrupted, changed/modified, or damaged versions with the correct versions if possible:

• http://www.sevenforums.com/tutorials/1538-sfc-scannow-command-system-file-checker.html

Run Disk Check on your hard disk for file system errors and bad sectors on it:

• http://www.sevenforums.com/tutorials/433-disk-check.html

Keep us posted of the results

 

[Bewos]

Good evening,

Thanks so much for your help.
I after running the virus scan and the Malware scan I found out my computer was infected with several instances of the Alueron virus/trojan. Ran all the other suggested tools and I have scanned multiple times and the system comes up clean.
I Have had a few crashes showing this error ntfs.sys but I updated a few drives and this has not happened for a few days.

Now my computer is doing the following : If I start the computer "cold" (computer was off for the evening or several hours) and then log into windows the computer will randomly restart (within 1 -5 minutes of logging into windows). No blue screen or errors. I will turn the computer back on 1 or 2 more times ( It will restart) and then it will run. Every once and a while the screen will freeze and I will have to restart the computer with the power button.

I actually waited a week to see if it happened every time I turn the computer on and that seems to be the case.


Thanks again for your help,


Bewos

 

[Slartybart]

I removed a post reporting on an old alert regarding the Alureon virus. Please accept my apologies if you already read that and became concerned. I looked but did not see te oublication date (July 2012) and removed the erroneous post as soon as I discovered my error.

Bill
.

 

[Slartybart]

DCWG | Fix

That page lists Kaspersky TDSSKiller as one of the methods for cleaning Alureon - if you ran that and all the other security measures Kat provided, your system is probably clean.

At teh bottom of the page are two sites that you can make sure.

 

[Slartybart]

Well, I just spent the past few minutes testing if my pc was infected - went round and round between detect and using the example link.

I finally clicked the home link and it said my pc was clean. The Spanish and Australian sites were about as clear - not very clear at all. Anyway, there's lots of informatin to read. You might want to run one or two other scanners listed there just to be sure (Microsoft Defender Offline, Trend Micro Housecall)

 

[F5ing]

What about running these two items:

Run the System File Checker that scans the of all protected Windows 7 system files and replaces incorrect corrupted, changed/modified, or damaged versions with the correct versions if possible:

• http://www.sevenforums.com/tutorials/1538-sfc-scannow-command-system-file-checker.html

Run Disk Check on your hard disk for file system errors and bad sectors on it:

• http://www.sevenforums.com/tutorials/433-disk-check.html

Keep us posted of the results

You need to do the SFC to see if the infection mucked around with any system files; the chkdsk to ensure file system is okay.

 

[Slartybart]

After you respond to F5ing (did it, doing it) - please read about trouble shooitng freezes here. It provides fairly standard techniques that might help determin teh cause. I'm sure there's a similar tutorial here on SF (you could search SF) , but it didn't show up when I Googled computer "locking" up - usually SF is near the top of a search result.

There's lots of information there, read through it and see if it helps get to the bottom of it.

Bill
.

 

[Slartybart]

Also see: How to perform a clean boot to troubleshoot a problem in Windows Vista or Windows 7
and check your Event Viewer for eorrs and warnings.