Very Frustrating!

Viruses and worms
1

Hey!

My previous attempts to right this failed miserably after a second crash within 45 minutes… I’ve been having an issue with Random Crashes, the last one (Just occurred a dew minutes ago) I caught. The first one of the day, my Dad caught.

Originally, my Dad speculated the Thermals of my CPU and GPU. (I have really crappy airflow). However, while running slightly hot, it’s not nearing a dangerous temperature that would initiate a crash like that.

WhoCrash has kindly given me 2 reports…

See the quotes below.

[b]On Sat 2015-04-11 12:01:32 PM GMT your computer crashed[/b] crash dump file: C:\WINDOWS\Minidump\041115-30078-01.dmp This was probably caused by the following module: ntoskrnl.exe (nt+0x1509A0) Bugcheck code: 0x1A (0x5300, 0xFFFFC0002A80C000, 0x1D800010000, 0xCE57734CC6240635) Error: MEMORY_MANAGEMENT file path: C:\WINDOWS\system32\ntoskrnl.exe product: Microsoft® Windows® Operating System company: Microsoft Corporation description: NT Kernel & System Bug check description: This indicates that a severe memory management error occurred. This might be a case of memory corruption. More often memory corruption happens because of software errors in buggy drivers, not because of faulty RAM modules. The crash took place in the Windows kernel. Possibly this problem is caused by another driver that cannot be identified at this time.
[b]On Sat 2015-04-11 11:37:59 AM GMT your computer crashed[/b] crash dump file: C:\WINDOWS\Minidump\041115-55890-01.dmp This was probably caused by the following module: ntoskrnl.exe (nt+0x1509A0) Bugcheck code: 0x50 (0xFFFFF680010C6500, 0x0, 0xFFFFF80196AFE67D, 0x2) Error: PAGE_FAULT_IN_NONPAGED_AREA file path: C:\WINDOWS\system32\ntoskrnl.exe product: Microsoft® Windows® Operating System company: Microsoft Corporation description: NT Kernel & System Bug check description: This indicates that invalid system memory has been referenced. This appears to be a typical software driver bug and is not likely to be caused by a hardware problem. The crash took place in the Windows kernel. Possibly this problem is caused by another driver that cannot be identified at this time.

Now, I also took a look into my Event Logs, which has referenced a few (About 5 reported) Bad Blocks within the HDD. I can guess they are Soft Bad blocks, as they shouldn’t be physically damaged.

I ALSO took a look into a few other programs, which haven’t reported anything abnormal. I don’t overclock (I can’t, actually.)

Unless some low level Windows drivers are conflicting, nothing should be triggering this as I maintain no Anti-Virus or Firewall. I keep MCShield, MBAM and Zemana around though.

I will attach logs, soon.

Thanks,
Michael

2

Just perform system control.
Go to the command promt.
Click right and perform in admin mode.
Type sfc /scannow and press enter. (mind the space before / )
All windows system files are checked for errors windows and switched to correct versions

After the scan see results and a CBS logfile.

Now type findstr /c:“[SR]” %windir%\Logs\CBS\CBS.log > “%userprofile%\Desktop\sfcdetails.txt” and press enter.
Note the space before / and %windir% and before and behind >.
Then on your desktop you should find a file named sfcdetails.txt.
Attach that to your reply posting and have essexboy go over that txt.file.

polonus

3

Logs are here.

Malwarebytes is scanning right now. The only complaint is 2 instances of Virus.Jeefo from REALLY old cases way back. Jeefo was never actually run on the system.

And will do Polonus

4

The additions txt has the system errors in it

5

See attached.

Thank you, FYI.

6

Hi Michael,

Essexboy has some clever tools indeed, all is included and all iis covered.
But it never hurts to learn how to scan the OS for errors and to get the logs txt file unto the desktop. :wink:

pol

7

The only way to resolve this is a bit tedious :slight_smile:

Set the system to clean boot and run for a sufficient time to ensure that the BSOD are no longer present.
Then reinstate the services one at a time until they recur
Currently my thoughts would be either MBAM or CIS

In the search box type Msconfig and select the programme that appears at the top

1.In the System Configuration Utility dialog box, click Selective Startup on the General tab.

https://dl.dropboxusercontent.com/u/73555776/Cleanboot1.JPG

2.Click to clear the Load Startup Items check box.
NoteThe Use Original Boot.ini check box is unavailable.
3.Click the Services tab.
4.Click to select the Hide All Microsoft Services check box.

https://dl.dropboxusercontent.com/u/73555776/cleanboot2.JPG

5.Click Disable All, and then click OK.
6.When you are prompted, click Restart.

8

OK, I have left MBAM, CIS, Unchecky and Zemana unchecked for now. I will reinstate them later, after ensuring my MS Serices aren’t causing issues.

9

Aye if they still occur then it may be worth running SFC

10

I’ve run it once, I’ll give it a shot if they come back though.

11

Hi Michael,

Essexboy has it, all the tools, the right knowledge, he delivers us from evil code with the refinement of an exorcist. ;D

Damian

12

Indeed!

Well, seems good so far running strictly M$ services. I might just leave the rest off. This is stable.

13

Well I think you can rule out Avast as that is still running :slight_smile: