Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Experiencing BSOD multiple times


  • Please log in to reply
14 replies to this topic

#1 Cońch

Cońch

  • Members
  • 30 posts
  • OFFLINE
  •  
  • Local time:03:35 AM

Posted 26 March 2014 - 08:52 PM

I started experiencing BSOD crashes with an error indicating IRQL_NOT_LESS_OR_EQUAL multiple times while trying to download a patch for Neverwinter Online. This occurs whether I am trying to access the game through Steam or Arc. The program/system identified was always netio.sys.

 

However, today, I experienced something different. I was doing some online banking and I received the BSOD. It happened so fast and unexpectedly that I didn’t see the error message but I did notice that it did not identify the program/system. This was the first time I got a BSOD when not in a game.

 

The only action I have taken was to check to see if my drivers were up to date and they were.



BC AdBot (Login to Remove)

 


#2 OldPhil

OldPhil

    Doppleganger


  • Members
  • 4,157 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Long Island New York
  • Local time:04:35 AM

Posted 26 March 2014 - 09:18 PM

Do you have a Logitech mouse or key board?


Honesty & Integrity Above All!


#3 Cońch

Cońch
  • Topic Starter

  • Members
  • 30 posts
  • OFFLINE
  •  
  • Local time:03:35 AM

Posted 26 March 2014 - 09:29 PM

No, I do not. I have a Dell keyboard and a Microsoft mouse.

 

However, I do have a Logitech web camera but it is never connected.

 

I did just purchase this new mouse which installed a Microsoft keyboard/mouse suite within the past 3 weeks. My problems just started this week.



#4 Kirbyofdeath

Kirbyofdeath

  • Members
  • 459 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Somewhere on Earth
  • Local time:03:35 AM

Posted 26 March 2014 - 09:31 PM

Also can you please upload all the minidump files located in C:\Windows\Minidumps?



#5 Cońch

Cońch
  • Topic Starter

  • Members
  • 30 posts
  • OFFLINE
  •  
  • Local time:03:35 AM

Posted 26 March 2014 - 09:45 PM

  • 032614-49421-01.dmp

    You aren't permitted to upload this kind of file

I'm trying but it won't let me upload.



#6 Cońch

Cońch
  • Topic Starter

  • Members
  • 30 posts
  • OFFLINE
  •  
  • Local time:03:35 AM

Posted 26 March 2014 - 09:48 PM

I can copy the file and paste it, but not sure if that is better?



#7 Kirbyofdeath

Kirbyofdeath

  • Members
  • 459 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Somewhere on Earth
  • Local time:03:35 AM

Posted 26 March 2014 - 09:53 PM

you will have to upload it in a .zip file. if that does not work, try uploading it to a file hosting site, like dropbox.



#8 Cońch

Cońch
  • Topic Starter

  • Members
  • 30 posts
  • OFFLINE
  •  
  • Local time:03:35 AM

Posted 26 March 2014 - 10:04 PM

Here they are!

Attached Files



#9 acerts04

acerts04

  • Members
  • 582 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:03:35 AM

Posted 26 March 2014 - 10:45 PM

hello and :welcome:
 
what drivers did you check to see were up to date? Netio.sys can usually mean network related issues such as outdated network card driver, third party firewall, network monitoring programs etc. For now though, There are a few things i came across in your dump files. 
 
:step1: Did you update your radeon graphic drivers? uninstall them and get the newest ones from AMD
\SystemRoot\system32\DRIVERS\atikmdag.sys
 
:step2: Do you have norton on your system? If you do please uninstall it for now even just to test if it is the problem. Although i recommend a free anti virus such as avast or MSE.
C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_20.3.1.22\Definitions\IPSDefs\20140324.002\IDSvia64.sys,
 
:step3: Do you have anything from iobit installed on your pc, specifically iobit malware fighter? If you do please uninstall that also. There was a reference to UrlFilter.sys in your dump file that comes from iobit malware fighter.
 
These are shots in the dark i took from your crash dumps since i dont have information about your system right now. In order for me to get that if you wouldnt mind please following these below instructions if any of the above steps dont help your problem.
 
 
Publish a snapshot of your system using Speccy
 
Please follow the below tutorial to know how to use "Speccy" to collect system info.
 
http://www.bleepingcomputer.com/forums/t/323892/publish-a-snapshot-using-speccy/
 
Don't paste the output displayed by "Speccy" here. Instead paste the web link it displays.

 Minitoolbox log
 
Download "Minitoolbox" from the below link.
 
http://www.bleepingcomputer.com/download/minitoolbox/
 
 Run the tool and only select the following tick boxes.
 
 
List last 10 Event viewer errors
List installed program
List users, partition and memory size
List Minidumps
 
Now click "Go" and post the output displayed in next reply.

Edited by acerts04, 26 March 2014 - 10:56 PM.

"In real life, the hardest aspect of the battle between good and evil is determining which is which."


#10 Kirbyofdeath

Kirbyofdeath

  • Members
  • 459 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Somewhere on Earth
  • Local time:03:35 AM

Posted 26 March 2014 - 10:48 PM

Here is dump from 3/26/2014 8:15 pm

 

*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************
 
DRIVER_IRQL_NOT_LESS_OR_EQUAL (d1)
An attempt was made to access a pageable (or completely invalid) address at an
interrupt request level (IRQL) that is too high.  This is usually
caused by drivers using improper addresses.
If kernel debugger is available get stack backtrace.
Arguments:
Arg1: 0000000000000008, memory referenced
Arg2: 0000000000000002, IRQL
Arg3: 0000000000000000, value 0 = read operation, 1 = write operation
Arg4: fffff8800172fa1d, address which referenced memory
 
Debugging Details:
------------------
 
 
READ_ADDRESS: GetPointerFromAddress: unable to read from fffff800030c1100
GetUlongFromAddress: unable to read from fffff800030c11c0
 0000000000000008 Nonpaged pool
 
CURRENT_IRQL:  2
 
FAULTING_IP: 
NETIO!CalloutStreamDataInit+1d
fffff880`0172fa1d 488b5808        mov     rbx,qword ptr [rax+8]
 
CUSTOMER_CRASH_COUNT:  1
 
DEFAULT_BUCKET_ID:  WIN7_DRIVER_FAULT
 
BUGCHECK_STR:  0xD1
 
PROCESS_NAME:  Neverwinter.ex
 
ANALYSIS_VERSION: 6.3.9600.16384 (debuggers(dbg).130821-1623) amd64fre
 
TRAP_FRAME:  fffff8800a5c4460 -- (.trap 0xfffff8800a5c4460)
NOTE: The trap frame does not contain all registers.
Some register values may be zeroed or incorrect.
rax=0000000000000000 rbx=0000000000000000 rcx=fffffa8009270930
rdx=fffffa8007502910 rsi=0000000000000000 rdi=0000000000000000
rip=fffff8800172fa1d rsp=fffff8800a5c45f0 rbp=fffffa80075028e0
 r8=fffff8800a5c4670  r9=0000000000000000 r10=00000000000000f0
r11=00000000000000e5 r12=0000000000000000 r13=0000000000000000
r14=0000000000000000 r15=0000000000000000
iopl=0         nv up ei ng nz na po nc
NETIO!CalloutStreamDataInit+0x1d:
fffff880`0172fa1d 488b5808        mov     rbx,qword ptr [rax+8] ds:00000000`00000008=????????????????
Resetting default scope
 
LAST_CONTROL_TRANSFER:  from fffff80002e89169 to fffff80002e89bc0
 
STACK_TEXT:  
fffff880`0a5c4318 fffff800`02e89169 : 00000000`0000000a 00000000`00000008 00000000`00000002 00000000`00000000 : nt!KeBugCheckEx
fffff880`0a5c4320 fffff800`02e87de0 : 00000000`00000000 fffff880`0a5c4500 00000000`ffffffe1 fffff880`0a5c4810 : nt!KiBugCheckDispatch+0x69
fffff880`0a5c4460 fffff880`0172fa1d : fffffa80`092709c8 fffffa80`092709c0 00000000`00000001 fffff880`01743883 : nt!KiPageFault+0x260
fffff880`0a5c45f0 fffff880`017390d4 : fffff880`0a5c4810 fffff880`0a5c4810 fffff880`0a5c4a10 fffffa80`0905bc30 : NETIO!CalloutStreamDataInit+0x1d
fffff880`0a5c4630 fffff880`01744e98 : 00000000`00000000 fffff880`0a5c4a10 fffff880`0a5c47c0 fffff880`0a5c4848 : NETIO!StreamInvokeCalloutAndNormalizeAction+0x54
fffff880`0a5c46d0 fffff880`01745e91 : fffffa80`075028e0 fffff880`0a5c4a10 fffff880`0a5c4810 fffff880`0a5c4e70 : NETIO!StreamCalloutProcessData+0x48
fffff880`0a5c4720 fffff880`01746ee8 : fffff880`0a5c4810 fffff880`0a5c4e70 fffff880`0a5c4a01 fffffa80`075028e0 : NETIO!StreamCalloutProcessingLoop+0xa1
fffff880`0a5c47b0 fffff880`01727a2a : fffff880`0a5c4a10 fffff880`04226cb0 00000000`00000000 fffff880`0a5c0014 : NETIO!StreamProcessCallout+0x1e8
fffff880`0a5c48a0 fffff880`0170ef58 : fffff880`0a5c0014 fffff880`0a5c4f70 fffffa80`0905bc88 fffff880`0a5c4e70 : NETIO! ?? ::FNODOBFM::`string'+0x71f2
fffff880`0a5c49c0 fffff880`017105d2 : fffff880`0a5c0014 fffff880`0a5c4f70 fffff880`0a5c5000 00000000`00000000 : NETIO!ArbitrateAndEnforce+0x238
fffff880`0a5c4a90 fffff880`01749f09 : fffff880`0a5c5240 fffff880`0a5c4f70 fffffa80`00000001 fffff880`0a5c4e70 : NETIO!KfdClassify+0x934
fffff880`0a5c4e00 fffff880`0174a3c9 : fffffa80`0905bc30 00000000`00000014 00000000`00000000 00000000`00000000 : NETIO!StreamClassify+0x109
fffff880`0a5c4f20 fffff880`0174ab0c : fffffa80`09a8ba80 fffffa80`0994e8c0 fffffa80`06d7fc00 fffffa80`09cd2f20 : NETIO!StreamCommonInspect+0x249
fffff880`0a5c5200 fffff880`01908ea4 : fffffa80`0905bc30 fffffa80`06d7fcf0 00000000`00000000 00000000`00000014 : NETIO!WfpStreamInspectSend+0x11c
fffff880`0a5c5280 fffff880`018c1373 : fffff880`0a5c55b0 00000000`00000000 fffff880`0a5c54a0 fffff880`0a5c55b0 : tcpip!InetInspectSend+0x34
fffff880`0a5c52b0 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : tcpip! ?? ::FNODOBFM::`string'+0x3dc42
 
 
STACK_COMMAND:  kb
 
FOLLOWUP_IP: 
NETIO!CalloutStreamDataInit+1d
fffff880`0172fa1d 488b5808        mov     rbx,qword ptr [rax+8]
 
SYMBOL_STACK_INDEX:  3
 
SYMBOL_NAME:  NETIO!CalloutStreamDataInit+1d
 
FOLLOWUP_NAME:  MachineOwner
 
MODULE_NAME: NETIO
 
IMAGE_NAME:  NETIO.SYS
 
DEBUG_FLR_IMAGE_TIMESTAMP:  5294760d
 
IMAGE_VERSION:  6.1.7601.18327
 
FAILURE_BUCKET_ID:  X64_0xD1_NETIO!CalloutStreamDataInit+1d
 
BUCKET_ID:  X64_0xD1_NETIO!CalloutStreamDataInit+1d
 
ANALYSIS_SOURCE:  KM
 
FAILURE_ID_HASH_STRING:  km:x64_0xd1_netio!calloutstreamdatainit+1d
 
FAILURE_ID_HASH:  {15e390bc-0d85-1db0-f7df-234d42ab8e7b}
 
Followup: MachineOwner
---------
 
 
 
Here is dump from 3/25/2014
2: kd> !analyze -v
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************
 
PAGE_FAULT_IN_NONPAGED_AREA (50)
Invalid system memory was referenced.  This cannot be protected by try-except,
it must be protected by a Probe.  Typically the address is just plain bad or it
is pointing at freed memory.
Arguments:
Arg1: fffffa8002616f90, memory referenced.
Arg2: 0000000000000001, value 0 = read operation, 1 = write operation.
Arg3: fffff880014cc807, If non-zero, the instruction address which referenced the bad memory
address.
Arg4: 0000000000000002, (reserved)
 
Debugging Details:
------------------
 
 
Could not read faulting driver name
 
WRITE_ADDRESS: GetPointerFromAddress: unable to read from fffff800030cc100
GetUlongFromAddress: unable to read from fffff800030cc1c0
 fffffa8002616f90 Nonpaged pool
 
FAULTING_IP: 
Ntfs!NtfsSetFileObject+107
fffff880`014cc807 f083403801      lock add dword ptr [rax+38h],1
 
MM_INTERNAL_CODE:  2
 
CUSTOMER_CRASH_COUNT:  1
 
DEFAULT_BUCKET_ID:  WIN7_DRIVER_FAULT
 
BUGCHECK_STR:  0x50
 
PROCESS_NAME:  System
 
CURRENT_IRQL:  0
 
ANALYSIS_VERSION: 6.3.9600.16384 (debuggers(dbg).130821-1623) amd64fre
 
TRAP_FRAME:  fffff88009a4d720 -- (.trap 0xfffff88009a4d720)
NOTE: The trap frame does not contain all registers.
Some register values may be zeroed or incorrect.
rax=fffffa8002616f58 rbx=0000000000000000 rcx=fffffa800c9be740
rdx=fffffa800c063930 rsi=0000000000000000 rdi=0000000000000000
rip=fffff880014cc807 rsp=fffff88009a4d8b0 rbp=0000000000000000
 r8=0000000000000002  r9=fffff8a01d1576d0 r10=fffffa8006e9e820
r11=0000000000000000 r12=0000000000000000 r13=0000000000000000
r14=0000000000000000 r15=0000000000000000
iopl=0         nv up ei pl zr na po nc
Ntfs!NtfsSetFileObject+0x107:
fffff880`014cc807 f083403801      lock add dword ptr [rax+38h],1 ds:fffffa80`02616f90=????????
Resetting default scope
 
LAST_CONTROL_TRANSFER:  from fffff80002f115e4 to fffff80002e94bc0
 
STACK_TEXT:  
fffff880`09a4d5b8 fffff800`02f115e4 : 00000000`00000050 fffffa80`02616f90 00000000`00000001 fffff880`09a4d720 : nt!KeBugCheckEx
fffff880`09a4d5c0 fffff800`02e92cee : 00000000`00000001 fffffa80`02616f90 fffff8a0`1d157500 fffff8a0`1d1578c0 : nt! ?? ::FNODOBFM::`string'+0x43836
fffff880`09a4d720 fffff880`014cc807 : fffff880`07cf50e0 00000000`00000080 fffff8a0`1d1575a0 fffff880`07cf5150 : nt!KiPageFault+0x16e
fffff880`09a4d8b0 fffff880`014c72c1 : 00000000`00000000 fffffa80`0c7f5f70 00000000`00000000 fffff8a0`1d1576d0 : Ntfs!NtfsSetFileObject+0x107
fffff880`09a4d8f0 fffff880`014b5eb5 : fffffa80`0c9be740 fffffa80`0c7f5f70 fffffa80`07153180 00000000`00000000 : Ntfs!NtfsOpenAttribute+0x491
fffff880`09a4da00 fffff880`014b1d0b : fffff880`07cf50e0 fffffa80`0c9be740 00000000`00000000 fffff8a0`00000000 : Ntfs!NtfsOpenExistingAttr+0x145
fffff880`09a4dac0 fffff880`0158f02d : fffffa80`0c9be740 fffffa80`0c7f5c60 00000000`00000000 fffffa80`00000000 : Ntfs!NtfsOpenAttributeInExistingFile+0x5ab
fffff880`09a4dc50 fffff880`014c4042 : fffffa80`0c9be740 fffffa80`0c7f5c60 00000000`00000000 00010000`00044906 : Ntfs!NtfsOpenFcbById+0x85b
fffff880`09a4dd50 fffff880`0142c40d : fffffa80`0c9be740 fffffa80`0c7f5c60 fffff880`07cf50e0 fffffa80`0611e900 : Ntfs!NtfsCommonCreate+0x1d20
fffff880`09a4df30 fffff800`02e8c6b7 : fffff880`07cf5050 00000000`00000000 00000000`00000000 00000000`00000000 : Ntfs!NtfsCommonCreateCallout+0x1d
fffff880`09a4df60 fffff800`02e8c678 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KxSwitchKernelStackCallout+0x27
fffff880`07cf4f20 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSwitchKernelStackContinue
 
 
STACK_COMMAND:  kb
 
FOLLOWUP_IP: 
Ntfs!NtfsSetFileObject+107
fffff880`014cc807 f083403801      lock add dword ptr [rax+38h],1
 
SYMBOL_STACK_INDEX:  3
 
SYMBOL_NAME:  Ntfs!NtfsSetFileObject+107
 
FOLLOWUP_NAME:  MachineOwner
 
MODULE_NAME: Ntfs
 
IMAGE_NAME:  Ntfs.sys
 
DEBUG_FLR_IMAGE_TIMESTAMP:  5167f5fc
 
IMAGE_VERSION:  6.1.7601.18127
 
FAILURE_BUCKET_ID:  X64_0x50_Ntfs!NtfsSetFileObject+107
 
BUCKET_ID:  X64_0x50_Ntfs!NtfsSetFileObject+107
 
ANALYSIS_SOURCE:  KM
 
FAILURE_ID_HASH_STRING:  km:x64_0x50_ntfs!ntfssetfileobject+107
 
FAILURE_ID_HASH:  {d0027915-62ac-e279-9c0d-64c9d66c43e1}
 
Followup: MachineOwner
---------
Your latest bsod was caused by "neverwinter.ex (probably .exe)"


#11 Cońch

Cońch
  • Topic Starter

  • Members
  • 30 posts
  • OFFLINE
  •  
  • Local time:03:35 AM

Posted 27 March 2014 - 10:23 PM

1)      Unistalled Radeon graphic drivers and reinstalled with newest one from AMD.

2)      Removed Norton 360. MSE is running.

3)      Removed Iobit Malware fighter.

 

Speccy URL - http://speccy.piriform.com/results/GRKWZx8haNDB2mRCTkFOaIY

 

MiniToolBox by Farbar  Version: 23-01-2014

Ran by Eric (administrator) on 27-03-2014 at 23:18:40

Running from "C:\Users\Eric\Downloads"

Microsoft Windows 7 Home Premium  Service Pack 1 (X64)

Boot Mode: Normal

***************************************************************************

 

========================= Event log errors: ===============================

 

Application errors:

==================

Error: (03/27/2014 10:43:58 PM) (Source: WinMgmt) (User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

 

Error: (03/27/2014 04:28:12 AM) (Source: Application Error) (User: )

Description: Faulting application name: svchost.exe_SysMain, version: 6.1.7600.16385, time stamp: 0x4a5bc3c1

Faulting module name: sysmain.dll, version: 6.1.7601.17514, time stamp: 0x4ce7c9db

Exception code: 0xc0000005

Fault offset: 0x000000000000b114

Faulting process id: 0x9c0

Faulting application start time: 0xsvchost.exe_SysMain0

Faulting application path: svchost.exe_SysMain1

Faulting module path: svchost.exe_SysMain2

Report Id: svchost.exe_SysMain3

 

Error: (03/26/2014 08:16:50 PM) (Source: WinMgmt) (User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

 

Error: (03/26/2014 08:12:37 PM) (Source: Steam Client Service) (User: )

Description: Error: Failed to poke open firewall

 

Error: (03/26/2014 07:46:07 PM) (Source: WinMgmt) (User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

 

Error: (03/26/2014 07:37:21 PM) (Source: Steam Client Service) (User: )

Description: Error: Failed to poke open firewall

 

Error: (03/26/2014 07:33:52 PM) (Source: WinMgmt) (User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

 

Error: (03/26/2014 07:20:59 PM) (Source: WinMgmt) (User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

 

Error: (03/25/2014 01:26:14 AM) (Source: WinMgmt) (User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

 

Error: (03/24/2014 11:47:09 PM) (Source: WinMgmt) (User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

 

 

System errors:

=============

Error: (03/27/2014 10:43:57 PM) (Source: Service Control Manager) (User: )

Description: The LiveUpdate service terminated unexpectedly.  It has done this 1 time(s).

 

Error: (03/27/2014 10:43:40 PM) (Source: Service Control Manager) (User: )

Description: The HomeGroup Provider service depends on the Function Discovery Provider Host service which failed to start because of the following error:

%%1058

 

Error: (03/27/2014 06:40:56 PM) (Source: Disk) (User: )

Description: The device, \Device\Harddisk1\DR1, has a bad block.

 

Error: (03/27/2014 06:39:58 PM) (Source: Disk) (User: )

Description: The device, \Device\Harddisk1\DR1, has a bad block.

 

Error: (03/27/2014 06:26:44 PM) (Source: Disk) (User: )

Description: The device, \Device\Harddisk1\DR1, has a bad block.

 

Error: (03/27/2014 05:33:22 PM) (Source: Disk) (User: )

Description: The device, \Device\Harddisk1\DR1, has a bad block.

 

Error: (03/27/2014 05:32:30 PM) (Source: Disk) (User: )

Description: The device, \Device\Harddisk1\DR1, has a bad block.

 

Error: (03/27/2014 05:28:59 PM) (Source: Disk) (User: )

Description: The device, \Device\Harddisk1\DR1, has a bad block.

 

Error: (03/27/2014 05:28:56 PM) (Source: Disk) (User: )

Description: The device, \Device\Harddisk1\DR1, has a bad block.

 

Error: (03/27/2014 05:28:53 PM) (Source: Disk) (User: )

Description: The device, \Device\Harddisk1\DR1, has a bad block.

 

 

Microsoft Office Sessions:

=========================

Error: (03/27/2014 10:43:58 PM) (Source: WinMgmt)(User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

 

Error: (03/27/2014 04:28:12 AM) (Source: Application Error)(User: )

Description: svchost.exe_SysMain6.1.7600.163854a5bc3c1sysmain.dll6.1.7601.175144ce7c9dbc0000005000000000000b1149c001cf4951b366e398C:\Windows\system32\svchost.exec:\windows\system32\sysmain.dllbb876c79-b589-11e3-9bb5-001e4fbfda4a

 

Error: (03/26/2014 08:16:50 PM) (Source: WinMgmt)(User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

 

Error: (03/26/2014 08:12:37 PM) (Source: Steam Client Service)(User: )

Description: Failed to poke open firewall

 

Error: (03/26/2014 07:46:07 PM) (Source: WinMgmt)(User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

 

Error: (03/26/2014 07:37:21 PM) (Source: Steam Client Service)(User: )

Description: Failed to poke open firewall

 

Error: (03/26/2014 07:33:52 PM) (Source: WinMgmt)(User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

 

Error: (03/26/2014 07:20:59 PM) (Source: WinMgmt)(User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

 

Error: (03/25/2014 01:26:14 AM) (Source: WinMgmt)(User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

 

Error: (03/24/2014 11:47:09 PM) (Source: WinMgmt)(User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

 

 

CodeIntegrity Errors:

===================================

  Date: 2012-09-25 20:43:56.679

  Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\ComboFix\catchme.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

 

  Date: 2012-09-25 20:43:56.648

  Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\ComboFix\catchme.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

 

 

=========================== Installed Programs ============================

 

Ad-Aware Security Toolbar (Version: 0.9.1.20)

Adobe AIR (Version: 3.1.0.4880)

Adobe Flash Player 12 ActiveX (Version: 12.0.0.77)

Adobe Flash Player 12 Plugin (Version: 12.0.0.77)

Adobe Reader X (10.1.9) (Version: 10.1.9)

Advanced SystemCare Ultimate 7 (Version: 7.0.1)

AMD Accelerated Video Transcoding (Version: 12.5.100.30429)

AMD APP SDK Runtime (Version: 10.0.937.2)

AMD Catalyst Install Manager (Version: 8.0.877.0)

AMD Drag and Drop Transcoding (Version: 2.00.0000)

AMD Media Foundation Decoders (Version: 1.0.80430.0002)

Apple Application Support (Version: 2.3.6)

Apple Mobile Device Support (Version: 7.0.0.117)

Apple Software Update (Version: 2.1.3.127)

Arc (Version: 1.0.0.5510)

BattlEye (A2Free) Uninstall

Bonjour (Version: 3.0.0.10)

CameraHelperMsi (Version: 13.50.854.0)

Catalyst Control Center - Branding (Version: 1.00.0000)

Catalyst Control Center (Version: 2013.0429.2313.39747)

Catalyst Control Center Graphics Previews Common (Version: 2013.0429.2313.39747)

Catalyst Control Center Localization All (Version: 2013.0429.2313.39747)

CCC Help Chinese Standard (Version: 2013.0429.2312.39747)

CCC Help Chinese Traditional (Version: 2013.0429.2312.39747)

CCC Help Czech (Version: 2013.0429.2312.39747)

CCC Help Danish (Version: 2013.0429.2312.39747)

CCC Help Dutch (Version: 2013.0429.2312.39747)

CCC Help English (Version: 2013.0429.2312.39747)

CCC Help Finnish (Version: 2013.0429.2312.39747)

CCC Help French (Version: 2013.0429.2312.39747)

CCC Help German (Version: 2013.0429.2312.39747)

CCC Help Greek (Version: 2013.0429.2312.39747)

CCC Help Hungarian (Version: 2013.0429.2312.39747)

CCC Help Italian (Version: 2013.0429.2312.39747)

CCC Help Japanese (Version: 2013.0429.2312.39747)

CCC Help Korean (Version: 2013.0429.2312.39747)

CCC Help Norwegian (Version: 2013.0429.2312.39747)

CCC Help Polish (Version: 2013.0429.2312.39747)

CCC Help Portuguese (Version: 2013.0429.2312.39747)

CCC Help Russian (Version: 2013.0429.2312.39747)

CCC Help Spanish (Version: 2013.0429.2312.39747)

CCC Help Swedish (Version: 2013.0429.2312.39747)

CCC Help Thai (Version: 2013.0429.2312.39747)

CCC Help Turkish (Version: 2013.0429.2312.39747)

ccc-utility64 (Version: 2013.0429.2313.39747)

CCleaner (Version: 3.24)

ConvertXtoDVD 4.1.19.365 (Version: 4.1.19.365)

Core Temp 1.0 RC3 (Version: 1.0)

Debugging Tools for Windows (x64) (Version: 6.12.2.633)

Driver Booster (Version: 1.2)

erLT (Version: 1.20.138.34)

ffdshow [rev 3154] [2009-12-09] (Version: 1.0)

FileZilla Client 3.5.3 (Version: 3.5.3)

Google Chrome (Version: 33.0.1750.154)

Intel® Network Connections Drivers (Version: 18.7)

IObit Apps Toolbar v7.6 (Version: 7.6)

iTunes (Version: 11.1.3.8)

Java 7 Update 51 (Version: 7.0.510)

Java SE Development Kit 7 Update 6 (64-bit) (Version: 1.7.0.60)

JavaFX 2.2.0 (64-bit) (Version: 2.2.0)

JavaFX 2.2.0 SDK (64-bit) (Version: 2.2.0)

Logitech Webcam Software (Version: 2.30)

LWS Facebook (Version: 13.50.854.0)

LWS Gallery (Version: 13.50.854.0)

LWS Help_main (Version: 13.50.862.0)

LWS Launcher (Version: 13.50.859.0)

LWS Motion Detection (Version: 13.30.1395.0)

LWS Pictures And Video (Version: 13.50.861.0)

LWS Twitter (Version: 13.30.1346.0)

LWS Video Mask Maker (Version: 13.30.1379.0)

LWS VideoEffects (Version: 13.30.1379.0)

LWS Webcam Software (Version: 13.31.1038.0)

LWS WLM Plugin (Version: 1.30.1201.0)

LWS YouTube Plugin (Version: 13.31.1038.0)

Malwarebytes Anti-Malware version 1.75.0.1300 (Version: 1.75.0.1300)

Microsoft .NET Framework 1.1

Microsoft .NET Framework 1.1 (Version: 1.1.4322)

Microsoft .NET Framework 4.5.1 (Version: 4.5.50938)

Microsoft Office Professional Plus 2013 - en-us (Version: 15.0.4569.1508)

Microsoft Security Client (Version: 4.4.0304.0)

Microsoft Security Essentials (Version: 4.4.304.0)

Microsoft Silverlight (Version: 5.1.30214.0)

Microsoft Visual C++ 2005 Redistributable (Version: 8.0.59193)

Microsoft Visual C++ 2005 Redistributable (Version: 8.0.61001)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (Version: 9.0.30729)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (Version: 9.0.30729.6161)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (Version: 9.0.21022)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (Version: 9.0.30729)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (Version: 9.0.30729.4148)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (Version: 9.0.30729.6161)

Microsoft Visual C++ 2010  x64 Redistributable - 10.0.30319 (Version: 10.0.30319)

Microsoft Visual C++ 2010  x86 Redistributable - 10.0.30319 (Version: 10.0.30319)

Microsoft Windows Performance Toolkit (Version: 4.8.0)

Microsoft Windows SDK for Windows 7 (7.1) (Version: 7.1.30514)

Microsoft Windows SDK for Windows 7 (7.1) (Version: 7.1.7600.0.30514)

Microsoft Windows SDK for Windows 7 Redistributable Components for Windows Debugging Tools (30514) (Version: 7.1.30514)

Mozilla Firefox 26.0 (x86 en-US) (Version: 26.0)

Mozilla Maintenance Service (Version: 26.0)

MSXML 4.0 SP3 Parser (KB2721691) (Version: 4.30.2114.0)

MSXML 4.0 SP3 Parser (KB2758694) (Version: 4.30.2117.0)

MSXML 4.0 SP3 Parser (Version: 4.30.2100.0)

NETGEAR Genie (Version: 2.2.28.24.exe )

Neverwinter

Office 15 Click-to-Run Extensibility Component (Version: 15.0.4569.1508)

Office 15 Click-to-Run Licensing Component (Version: 15.0.4569.1508)

Office 15 Click-to-Run Localization Component (Version: 15.0.4569.1508)

Pando Media Booster (Version: 2.6.0.9)

QuickTime (Version: 7.74.80.86)

Raptr

Revo Uninstaller 1.94 (Version: 1.94)

Skype™ 6.14 (Version: 6.14.104)

Smart Defrag 3 (Version: 3.1)

Speccy (Version: 1.25)

Star Wars: The Old Republic (Version: 1.00)

Steam

swMSM (Version: 12.0.0.1)

TeamSpeak 3 Client (Version: 3.0.14)

TurboTax 2012 (Version: 2012.0)

TurboTax 2012 WinPerFedFormset (Version: 012.000.1434)

TurboTax 2012 WinPerReleaseEngine (Version: 012.000.0347)

TurboTax 2012 WinPerTaxSupport (Version: 012.000.0152)

TurboTax 2012 wrapper (Version: 012.000.0126)

Ventrilo Client for Windows x64 (Version: 3.0.8.0)

WinPatrol (Version: 25.6.2012.1)

WinRAR 4.11 (64-bit) (Version: 4.11.0)

 

========================= Memory info: ===================================

 

Percentage of memory in use: 31%

Total physical RAM: 7037.61 MB

Available physical RAM: 4855.74 MB

Total Pagefile: 14073.4 MB

Available Pagefile: 11386.75 MB

Total Virtual: 4095.88 MB

Available Virtual: 3958.24 MB

 

========================= Partitions: =====================================

 

2 Drive c: () (Fixed) (Total:232.69 GB) (Free:91.01 GB) NTFS

3 Drive d: (HOME_ASSIGNMENT_5) (CDROM) (Total:1.29 GB) (Free:0 GB) UDF

4 Drive e: () (Fixed) (Total:0.12 GB) (Free:0.11 GB) FAT

5 Drive f: (WD SmartWare) (CDROM) (Total:0.43 GB) (Free:0 GB) UDF

7 Drive h: (My Book) (Fixed) (Total:1862.36 GB) (Free:1412.87 GB) NTFS

 

========================= Users: ========================================

 

User accounts for \\ERIC-PC

 

Administrator            Anne                     ASPNET                  

Eric                     Guest                   

 

========================= Minidump Files ==================================

 

No minidump file found

 

 

**** End of log ****



#12 acerts04

acerts04

  • Members
  • 582 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:03:35 AM

Posted 29 March 2014 - 01:34 PM

hello coach, sorry for the late reply. i have been busy. Are you still getting blue screens after uninstalling those programs and updating your radeon drivers? If you are,

I took a deeper look into you dump file and saw your intel network driver is from 2009

 

e1e6232e.sys Fri Jun 05 15:08:41 2009 (4A296D39)

 

Lets update that, as it might help. You can find the updated driver from your pc manufacturer website, or go here https://downloadcenter.intel.com/detail_desc.aspx?agr=Y&DwnldID=18713

 

Couple other things to try for safe measure also, please uninstall the iobit apps toolbar. Also just for now, uninstall Winpatrol until we figure out whats up with the blue screens


"In real life, the hardest aspect of the battle between good and evil is determining which is which."


#13 Cońch

Cońch
  • Topic Starter

  • Members
  • 30 posts
  • OFFLINE
  •  
  • Local time:03:35 AM

Posted 29 March 2014 - 01:56 PM

Hello acerts04.

 

You were a big help. After deleting I have not experienced any more BSODs. Hopefully a thing of the past.

 

1) I am unable to uninstall the iobit apps toolbar - receive an error "The feature you are trying to use is on a network resource that is unavailable."

 

2) I have downloaded and installed the updated intel network driver.

 

Coach



#14 acerts04

acerts04

  • Members
  • 582 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:03:35 AM

Posted 29 March 2014 - 02:20 PM

Awesome! :thumbsup: It was after following the original steps i gave you everything has been fine, correct?

 

Did you only try uninstalling it through add/remove programs? if so, just try and get rid of it from within your browser. I am not too sure, but it may have gotten deleted when i had you delete that iobit malware fighter. Not sure though.

 

Glad i could help and let me know if you have anymore issues!


"In real life, the hardest aspect of the battle between good and evil is determining which is which."


#15 OldPhil

OldPhil

    Doppleganger


  • Members
  • 4,157 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Long Island New York
  • Local time:04:35 AM

Posted 29 March 2014 - 02:58 PM

You may want to give Revo a shot it will uninstall just about anything.


Honesty & Integrity Above All!





0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users