Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Multiple BSODs NO RESOLUTION


  • Please log in to reply
14 replies to this topic

#1 skyslaptop

skyslaptop

  • Members
  • 10 posts
  • OFFLINE
  •  
  • Local time:03:51 AM

Posted 16 December 2017 - 01:56 PM

Hello everyone thank you for reading my post. I have search many times through google reading forums and somehow I always end up here. So I thought I would make a post. My HP Laptop with Windows 10 is having episodic BSODs that occur at seemingly random times throughout my laptop usage. I have taken it to HP TWICE, the second time they replaced my motherboard. Only for it to BSOD on me within an hour of using it. I have done a System Recovery, but to no prevail. I suspect that I am infected by a Rootkit. But that's just me taking a shot based off all my failures. Please any and all help is welcomed.



BC AdBot (Login to Remove)

 


#2 skyslaptop

skyslaptop
  • Topic Starter

  • Members
  • 10 posts
  • OFFLINE
  •  
  • Local time:03:51 AM

Posted 16 December 2017 - 02:18 PM

I am willing to do whatever it takes. If this is the wrong forum just let me know



#3 bwv848

bwv848

    Bleepin' Owl


  • BSOD Kernel Dump Expert
  • 2,990 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:92.96 million miles away from the sun
  • Local time:04:51 AM

Posted 16 December 2017 - 02:25 PM

We need more information about your system than what you've provided. Hence, please follow these BSOD posting instructions and attach the requested files by replying to this topic. You may skip the part of step three where it instructs you to create a new topic, since you already have a topic here. There's no need to create another topic. :wink:

Thank you.

Regards,
bwv848

P.S. Even if your computer isn't blue screening, please still do the above.


If I do not reply in three days, please message me.
 
BC BSOD Posting Instructions | Carrona BSOD Index | Driver Reference Table (DRT)


#4 skyslaptop

skyslaptop
  • Topic Starter

  • Members
  • 10 posts
  • OFFLINE
  •  
  • Local time:03:51 AM

Posted 16 December 2017 - 03:10 PM

how do i attach the file? :mellow: :lol:



#5 bwv848

bwv848

    Bleepin' Owl


  • BSOD Kernel Dump Expert
  • 2,990 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:92.96 million miles away from the sun
  • Local time:04:51 AM

Posted 16 December 2017 - 03:11 PM

To attach a file, please click Reply to this topic on the top right-side of your topic page. Next, on the bottom, under Attach Files, click Browse..., then click Open, and finally Attach This File. To finalize and post your post, click Add Reply.
 


If I do not reply in three days, please message me.
 
BC BSOD Posting Instructions | Carrona BSOD Index | Driver Reference Table (DRT)


#6 skyslaptop

skyslaptop
  • Topic Starter

  • Members
  • 10 posts
  • OFFLINE
  •  
  • Local time:03:51 AM

Posted 16 December 2017 - 03:21 PM

got it



#7 skyslaptop

skyslaptop
  • Topic Starter

  • Members
  • 10 posts
  • OFFLINE
  •  
  • Local time:03:51 AM

Posted 16 December 2017 - 03:23 PM

system info



#8 skyslaptop

skyslaptop
  • Topic Starter

  • Members
  • 10 posts
  • OFFLINE
  •  
  • Local time:03:51 AM

Posted 16 December 2017 - 03:24 PM

ok here they are... sorry

Attached Files



#9 bwv848

bwv848

    Bleepin' Owl


  • BSOD Kernel Dump Expert
  • 2,990 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:92.96 million miles away from the sun
  • Local time:04:51 AM

Posted 16 December 2017 - 03:31 PM

From the latest dump, AVG seems to be potentially at fault.

0: kd> !dpx ffffe580e327c000 ffffe580e3283000
Start memory scan  : 0xffffe580e327c000
End memory scan    : 0xffffe580e3283000

               rsp : 0xffffe580e3281688 : 0xfffff801aa38f8a9 : nt!KiBugCheckDispatch+0x69
0xffffe580e3281158 : 0xffffe580e3281688 : 0xfffff801aa38f8a9 : nt!KiBugCheckDispatch+0x69
0xffffe580e3281198 : 0xfffff801aa38f413 : nt!KiSystemServiceCopyEnd+0x13
0xffffe580e32811a0 : 0xfffff801aa5b7684 : "nt!BcpDisplayParameters <PERF> (nt+0x39f684)"
0xffffe580e32811b8 : 0xfffff801aa384580 : nt!KeBugCheckEx
0xffffe580e3281268 : 0xffffa7e6e3200000 : win32kfull
0xffffe580e3281280 : 0xfffff801aa5a2000 : "nt!BcpDisplayParameters <PERF> (nt+0x38a000)"
0xffffe580e3281288 : 0xfffff801aa218000 : "nt!TmInitSystemPhase2 <PERF> (nt+0x0)"
0xffffe580e3281590 : 0xffffe580e3281800 : 0xfffff801aa60d8d0 : nt!RtlpUnwindHistoryTable
0xffffe580e3281598 : 0xfffff801aaaa353d : hal!HalRequestSoftwareInterrupt+0xcd
0xffffe580e32815e8 : 0xfffff801aa36cb47 : nt!PoGetFrequencyBucket+0xb
0xffffe580e3281620 : 0xfffff801aa5b7684 : "nt!BcpDisplayParameters <PERF> (nt+0x39f684)"
0xffffe580e3281628 : 0xfffff801aa38f413 : nt!KiSystemServiceCopyEnd+0x13
0xffffe580e3281648 : 0xfffff801aa384687 : nt!KeBugCheckEx+0x107
0xffffe580e3281658 : 0xfffff801aa610200 : nt!ExNode0
0xffffe580e3281688 : 0xfffff801aa38f8a9 : nt!KiBugCheckDispatch+0x69
0xffffe580e32816b8 : 0xfffff801aaaa353d : hal!HalRequestSoftwareInterrupt+0xcd
0xffffe580e3281760 : 0xfffff801aa595900 : nt!MiSystemPartition+0x7c0
0xffffe580e3281778 : 0xfffff801aa36cb47 : nt!PoGetFrequencyBucket+0xb
0xffffe580e32817a8 : 0xfffff801aa38f413 : nt!KiSystemServiceCopyEnd+0x13
0xffffe580e32817b0 : 0xfffff801aa5b7684 : "nt!BcpDisplayParameters <PERF> (nt+0x39f684)"
0xffffe580e32817c8 : 0xfffff801aa38f03c : nt!KiSystemServiceHandler+0x7c
0xffffe580e32817e0 : 0xffffe580e3281888 : 0xfffff801aa218000 : "nt!TmInitSystemPhase2 <PERF> (nt+0x0)"
0xffffe580e32817e8 : 0xfffff801aa2454a4 : nt!RtlLookupFunctionEntry+0x104
0xffffe580e3281800 : 0xfffff801aa60d8d0 : nt!RtlpUnwindHistoryTable
0xffffe580e3281808 : 0xfffff801aa38aa5d : nt!RtlpExecuteHandlerForException+0xd
0xffffe580e3281810 : 0xfffff801aa5a2000 : "nt!BcpDisplayParameters <PERF> (nt+0x38a000)"
0xffffe580e3281818 : 0xfffff801aa218000 : "nt!TmInitSystemPhase2 <PERF> (nt+0x0)"
0xffffe580e3281828 : 0xfffff801aa27e9ad : nt!SepAccessCheck+0x31d
0xffffe580e3281830 : 0xffffe580e32818e0 : 0xfffff801aa38f413 : nt!KiSystemServiceCopyEnd+0x13
0xffffe580e3281838 : 0xfffff801aa244244 : nt!RtlDispatchException+0x404
0xffffe580e3281878 : 0xfffff801aa36cb47 : nt!PoGetFrequencyBucket+0xb
0xffffe580e3281888 : 0xfffff801aa218000 : "nt!TmInitSystemPhase2 <PERF> (nt+0x0)"
0xffffe580e32818e0 : 0xfffff801aa38f413 : nt!KiSystemServiceCopyEnd+0x13
0xffffe580e32818e8 : 0xfffff801aa218000 : "nt!TmInitSystemPhase2 <PERF> (nt+0x0)"
0xffffe580e32818f0 : 0xfffff801aa5b7684 : "nt!BcpDisplayParameters <PERF> (nt+0x39f684)"
0xffffe580e3281910 : 0xfffff801aa38efc0 : nt!KiSystemServiceHandler
0xffffe580e3281948 : 0xfffff801aa9c27c8 : nt!SepMediumDaclSd
0xffffe580e3281988 : 0xfffff801aa27daa0 : nt!SeAccessCheckWithHint+0x5c0
Unable to load image \SystemRoot\system32\drivers\avgSP.sys, Win32 error 0n2
*** WARNING: Unable to verify timestamp for avgSP.sys
*** ERROR: Module load completed but symbols could not be loaded for avgSP.sys
0xffffe580e3281aa8 : 0xffffad8174cd002c :  !du "Desktop"
0xffffe580e3281b18 : 0xfffff801aa27f151 : nt!SepNormalAccessCheck+0x281
0xffffe580e3281bf8 : 0xfffff801aa27e9ad : nt!SepAccessCheck+0x31d
0xffffe580e3281c18 : 0xfffff801aa55e000 : nt!PspQuotaExpansionDescriptors+0x20
0xffffe580e3281c58 : 0xfffff801aa2a8c00 : nt!MiResolveDemandZeroFault+0x1b0
0xffffe580e3281cc8 : 0xfffff801aa27e2e6 : nt!SepMandatoryIntegrityCheck+0x2a6
0xffffe580e3281d58 : 0xfffff801aa27d98a : nt!SeAccessCheckWithHint+0x4aa
0xffffe580e3281e10 : 0xfffff801aa38f806 : nt!KiSystemServiceExitPico+0x1ef
0xffffe580e3281e18 : 0xffffa7e6e3200000 : win32kfull
0xffffe580e3281e28 : 0xffffa7e6e3200000 : win32kfull
0xffffe580e3281e38 : 0xffffa7e6e3200000 : win32kfull
0xffffe580e3281e48 : 0xfffff801aa218000 : "nt!TmInitSystemPhase2 <PERF> (nt+0x0)"
0xffffe580e3281e50 : 0xfffff801aa5b7684 : "nt!BcpDisplayParameters <PERF> (nt+0x39f684)"
0xffffe580e3281e78 : 0xfffff801aa243590 : nt!KiPreprocessFault+0xb8
0xffffe580e3281ee8 : 0xfffff801aa243456 : nt!KdTrap+0x22
0xffffe580e3281f28 : 0xfffff801aa242fe6 : nt!KiDispatchException+0x1f6
0xffffe580e3281f58 : 0xfffff801aa279d00 : nt!ExAcquireResourceSharedLite+0xb0
0xffffe580e32820d8 : 0xffffad8174cd002c :  !du "Desktop"
0xffffe580e3282258 : 0xfffff801aa6b6aa0 : nt!CmpCallCallBacksEx+0x250
0xffffe580e3282288 : 0xffffad8174cd002c :  !du "Desktop"
0xffffe580e3282308 : 0xfffff801aa27daa0 : nt!SeAccessCheckWithHint+0x5c0
0xffffe580e3282358 : 0xfffff801aa6bf69d : nt!CmpParseKey+0x33d
0xffffe580e3282368 : 0xfffff801aa27b429 : nt!ExAcquirePushLockExclusiveEx+0xe9
0xffffe580e32823a8 : 0xfffff801aa6bab25 : nt!ObpIncrementHandleCountEx+0x255
0xffffe580e32823e8 : 0xfffff801aa242d60 : nt!RtlGetExtendedContextLength+0x34
0xffffe580e32824a8 : 0xfffff801aa27c253 : nt!ExReleaseResourceLite+0xa3
0xffffe580e32824b8 : 0xfffff801aa6bc58d : nt!ObpCreateHandle+0x5cd
Unable to load image \SystemRoot\system32\drivers\avgbidsdrivera.sys, Win32 error 0n2
*** WARNING: Unable to verify timestamp for avgbidsdrivera.sys
*** ERROR: Module load completed but symbols could not be loaded for avgbidsdrivera.sys
0xffffe580e3282530 : 0xfffff801aa6bf360 : nt!CmpParseKey
0xffffe580e32825d8 : 0xfffff801aa38f98e : nt!KiExceptionDispatch+0xce
0xffffe580e32825f8 : 0xfffff801aa27ad18 : nt!ExAcquireFastMutex+0xd8
0xffffe580e32826c8 : 0xfffff801aa6b6aa0 : nt!CmpCallCallBacksEx+0x250
0xffffe580e32827b8 : 0xfffff801aa38dc34 : nt!KiGeneralProtectionFault+0xf4
0xffffe580e32827c0 : 0x0000000000000000 :  Trap @ ffffe580e32827c0
0xffffe580e32827c8 : 0xfffff801aa6bed68 : nt!NtQueryValueKey+0x5e8
Unable to load image \SystemRoot\System32\win32kbase.sys, Win32 error 0n2
*** WARNING: Unable to verify timestamp for win32kbase.sys
*** ERROR: Module load completed but symbols could not be loaded for win32kbase.sys
0xffffe580e3282a78 : 0xfffff801aa38f413 : nt!KiSystemServiceCopyEnd+0x13
0xffffe580e3282a80 : 0xffffc20be05cb340 :  Trap @ ffffe580e3282a80
0: kd> .trap ffffe580e3282a80
NOTE: The trap frame does not contain all registers.
Some register values may be zeroed or incorrect.
rax=0000000000000000 rbx=0000000000000000 rcx=0000000000000000
rdx=0000000000000000 rsi=0000000000000000 rdi=0000000000000000
rip=00007ffac1609d44 rsp=000000000014f238 rbp=000000000065b7c0
 r8=0000000000000000  r9=0000000000000000 r10=0000000000000000
r11=0000000000000000 r12=0000000000000000 r13=0000000000000000
r14=0000000000000000 r15=0000000000000000
iopl=0         nv up ei pl zr na po nc
0033:00007ffa`c1609d44 ??              ???

Hence please uninstall AVG, first from the Control Panel, and then completely by running their removal tool. Windows Defender should automatically kick in as your antivirus, if not, please enable it manually.

 

Did HP replace the RAM and SSD/HDD too?


Edited by bwv848, 16 December 2017 - 03:31 PM.

If I do not reply in three days, please message me.
 
BC BSOD Posting Instructions | Carrona BSOD Index | Driver Reference Table (DRT)


#10 skyslaptop

skyslaptop
  • Topic Starter

  • Members
  • 10 posts
  • OFFLINE
  •  
  • Local time:03:51 AM

Posted 16 December 2017 - 09:43 PM

HP told me that the processor failed, and that they replaced the Motherboard, that was it. I uninstalled AVG as you said, but I should tell you I've been experiencing this problem before I ever installed AVG....



#11 skyslaptop

skyslaptop
  • Topic Starter

  • Members
  • 10 posts
  • OFFLINE
  •  
  • Local time:03:51 AM

Posted 16 December 2017 - 09:46 PM

Also I have this in my Event Viewer

 

 

The speed of processor 3 in group 0 is being limited by system firmware. The processor has been in this reduced performance state for 71 seconds since the last report.

 

 

It could be nothing but just checking



#12 bwv848

bwv848

    Bleepin' Owl


  • BSOD Kernel Dump Expert
  • 2,990 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:92.96 million miles away from the sun
  • Local time:04:51 AM

Posted 16 December 2017 - 10:47 PM

The speed of processor 3 in group 0 is being limited by system firmware. The processor has been in this reduced performance state for 71 seconds since the last report.

Ignore this for now. Continue to monitor the system. I'm very surprised that the issue still persists after a motherboard replacement — in fact quite speechless! While I'm not sure what HP did, it's fair to guess that they changed the RAM too.

 

If that fails, are you willing to clean reinstall Windows 10 AFTER sending running the SFCA one last time and waiting for my input. That is, a clean installation of Windows with all available Windows Updates installed and no other third-party software installed. (Obviously you can't use the "factory reset" option as it will come with HP bloatware.)


If I do not reply in three days, please message me.
 
BC BSOD Posting Instructions | Carrona BSOD Index | Driver Reference Table (DRT)


#13 skyslaptop

skyslaptop
  • Topic Starter

  • Members
  • 10 posts
  • OFFLINE
  •  
  • Local time:03:51 AM

Posted 17 December 2017 - 11:43 AM

Yeah I can do that but how do I do a clean install? I think a clean install might be the only way. My hunch is that it's a rootkit that persists even after factory recovery.



#14 skyslaptop

skyslaptop
  • Topic Starter

  • Members
  • 10 posts
  • OFFLINE
  •  
  • Local time:03:51 AM

Posted 17 December 2017 - 01:12 PM

This also might be nothing but I saw this in Event Viewer Display driver igfx stopped responding and has successfully recovered.

Since my Motherboard was replaced now, I'm thinking it might be the graphics card as I know all divers are up to date



#15 bwv848

bwv848

    Bleepin' Owl


  • BSOD Kernel Dump Expert
  • 2,990 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:92.96 million miles away from the sun
  • Local time:04:51 AM

Posted 17 December 2017 - 09:57 PM

Instructions for a clean install are here:

 

https://www.howtogeek.com/265054/how-to-easily-reinstall-windows-10-without-the-bloatware/

 

When did you purchase the laptop? Has it been bluescreening since day one? If so, I'd honestly return the entire thing... most likely there is some unknown hardware failure somewhere AND it's quite a waste of time for you to deal with. We may honestly end up moving around in circles with no conclusion.


If I do not reply in three days, please message me.
 
BC BSOD Posting Instructions | Carrona BSOD Index | Driver Reference Table (DRT)





0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users