[Mitra]

My computer has been crashing randomly. I get different kinds of error messages when i get BSOD. 

How do I figure out what's wrong? Please help!

 

 

I ran WhoCrashed and got this report:

 

Crash Dump Analysis

Crash dump directory: C:\Windows\Minidump

Crash dumps are enabled on your computer.

On Mon 2014-06-16 10:52:33 GMT your computer crashed
crash dump file: C:\Windows\Minidump\061614-15210-01.dmp
This was probably caused by the following module: tcpip.sys (tcpip+0x141288)
Bugcheck code: 0xFC (0xFFFFF88001742288, 0x8000000003917121, 0xFFFFF88003DEFB50, 0x0)
Error: ATTEMPTED_EXECUTE_OF_NOEXECUTE_MEMORY
file path: C:\Windows\system32\drivers\tcpip.sys
product: Operativsystemet Microsoft® Windows®
company: Microsoft Corporation
description: TCP/IP-drivrutin
Bug check description: This indicates that an attempt was made to execute non-executable memory.
This might be a case of memory corruption. More often memory corruption happens because of software errors in buggy drivers, not because of faulty RAM modules. There is a possibility this problem was caused by a virus or other malware.
The crash took place in a standard Microsoft module. Your system configuration may be incorrect. Possibly this problem is caused by another driver on your system that cannot be identified at this time.



On Mon 2014-06-16 10:52:33 GMT your computer crashed
crash dump file: C:\Windows\memory.dmp
This was probably caused by the following module: tcpip.sys (tcpip+0x141288)
Bugcheck code: 0xFC (0xFFFFF88001742288, 0x8000000003917121, 0xFFFFF88003DEFB50, 0x0)
Error: ATTEMPTED_EXECUTE_OF_NOEXECUTE_MEMORY
file path: C:\Windows\system32\drivers\tcpip.sys
product: Operativsystemet Microsoft® Windows®
company: Microsoft Corporation
description: TCP/IP-drivrutin
Bug check description: This indicates that an attempt was made to execute non-executable memory.
This might be a case of memory corruption. More often memory corruption happens because of software errors in buggy drivers, not because of faulty RAM modules. There is a possibility this problem was caused by a virus or other malware.
The crash took place in a standard Microsoft module. Your system configuration may be incorrect. Possibly this problem is caused by another driver on your system that cannot be identified at this time.



On Mon 2014-06-16 10:48:56 GMT your computer crashed
crash dump file: C:\Windows\Minidump\061614-14960-01.dmp
This was probably caused by the following module: ntoskrnl.exe (nt+0x75BC0)
Bugcheck code: 0xD1 (0x13AFE135, 0x2, 0x8, 0x13AFE135)
Error: DRIVER_IRQL_NOT_LESS_OR_EQUAL
file path: C:\Windows\system32\ntoskrnl.exe
product: Microsoft® Windows® Operating System
company: Microsoft Corporation
description: NT Kernel & System
Bug check description: This indicates that a kernel-mode driver attempted to access pageable memory at a process IRQL that was too high.
This appears to be a typical software driver bug and is not likely to be caused by a hardware problem.
The crash took place in the Windows kernel. Possibly this problem is caused by another driver that cannot be identified at this time.



On Sun 2014-06-15 19:33:58 GMT your computer crashed
crash dump file: C:\Windows\Minidump\061514-25833-01.dmp
This was probably caused by the following module: rdyboost.sys (0xFFFFF880018CAEB2)
Bugcheck code: 0xD1 (0xFFFFFA9004262460, 0x2, 0x0, 0xFFFFF880018CAEB2)
Error: DRIVER_IRQL_NOT_LESS_OR_EQUAL
file path: C:\Windows\system32\drivers\rdyboost.sys
product: Microsoft® Windows® Operating System
company: Microsoft Corporation
description: ReadyBoost Driver
Bug check description: This indicates that a kernel-mode driver attempted to access pageable memory at a process IRQL that was too high.
This appears to be a typical software driver bug and is not likely to be caused by a hardware problem.
The crash took place in a standard Microsoft module. Your system configuration may be incorrect. Possibly this problem is caused by another driver on your system that cannot be identified at this time.



On Thu 2014-06-12 06:58:44 GMT your computer crashed
crash dump file: C:\Windows\Minidump\061214-19047-01.dmp
This was probably caused by the following module: ntoskrnl.exe (nt+0x75BC0)
Bugcheck code: 0x50 (0xFFFFF1201887AF36, 0x1, 0xFFFFF80002D9B82D, 0x7)
Error: PAGE_FAULT_IN_NONPAGED_AREA
file path: C:\Windows\system32\ntoskrnl.exe
product: Microsoft® Windows® Operating System
company: Microsoft Corporation
description: NT Kernel & System
Bug check description: This indicates that invalid system memory has been referenced.
This appears to be a typical software driver bug and is not likely to be caused by a hardware problem.
The crash took place in the Windows kernel. Possibly this problem is caused by another driver that cannot be identified at this time.

Attached Thumbnails

• 

Edited by Mitra, 16 June 2014 - 07:08 AM.

[Advertisements]

 

Please download MINITOOLBOX and run it.

Checkmark following boxes:



Flush DNS
Reset FF proxy Settings
Reset Ie Proxy Settings
Report IE Proxy Settings
Report FF Proxy Settings
List content of Hosts
List IP configuration
List Winsock Entries
List last 10 Event Viewer log
List Installed Programs
List Users, Partitions and Memory size
List Devices (problems only)



Click Go post the result.




Download Autoruns and Autorunsc Unzip it to your desktop and then double click autoruns.exe
After the scan is finished then click on File>>>>>>>>>>>Save
The default name will be autoruns.arn make sure to save it as Autoruns.txt under the file type option.
in other words make sure it is a .txt file instead of .arn Attach the text in your next reply.

 

Please upload your minidump files. How to compress and upload Minidump files

 

If you have any issues uploading anything to this site please use File Dropper...

[rockmilk]

 

Please download MINITOOLBOX and run it.

Checkmark following boxes:



Flush DNS
Reset FF proxy Settings
Reset Ie Proxy Settings
Report IE Proxy Settings
Report FF Proxy Settings
List content of Hosts
List IP configuration
List Winsock Entries
List last 10 Event Viewer log
List Installed Programs
List Users, Partitions and Memory size
List Devices (problems only)



Click Go post the result.




Download Autoruns and Autorunsc Unzip it to your desktop and then double click autoruns.exe
After the scan is finished then click on File>>>>>>>>>>>Save
The default name will be autoruns.arn make sure to save it as Autoruns.txt under the file type option.
in other words make sure it is a .txt file instead of .arn Attach the text in your next reply.

 

Please upload your minidump files. How to compress and upload Minidump files

 

If you have any issues uploading anything to this site please use File Dropper...

[Mitra]

My computer is set to Swedish, hope it wont be a problem!

 

 

MiniToolBox by Farbar  Version: 13-06-2014

Ran by Mitra (administrator) on 17-06-2014 at 07:29:05

Running from "C:\Users\Mitra\Downloads"

Microsoft Windows 7 Home Premium  Service Pack 1 (X64)

Boot Mode: Normal

***************************************************************************

 

========================= Flush DNS: ===================================

 

IP-konfiguration f�r Windows

 

DNS-matcharens cacheminne har rensats.

 

========================= IE Proxy Settings: ============================== 

 

Proxy is not enabled.

No Proxy Server is set.

 

"Reset IE Proxy Settings": IE Proxy Settings were reset.

========================= Hosts content: =================================

 

 

 

========================= IP Configuration: ================================

 

NVIDIA nForce 10/100 Mbps Ethernet  = Anslutning till lokalt nätverk (Connected)

 

 

# ----------------------------------

# IPv4-konfiguration

# ----------------------------------

pushd interface ipv4

 

reset

set global icmpredirects=enabled

 

 

popd

# [bleep] p� IPv4-konfigurationen

 

 

 

IP-konfiguration f�r Windows

 

   V�rddatornamn . . . . . . . . . . : Mitra-Dator

   Prim�rt DNS-suffix. . . . . . . . : 

   Nodtyp. . . . . . . . . . . . . . : Hybrid

   IP-routning aktiverat . . . . . . : Nej

   WINS-proxy aktiverat. . . . . . . : Nej

 

Ethernet-anslutning Anslutning till lokalt n�tverk:

 

   Anslutningsspecifika DNS-suffix . : 

   Beskrivning . . . . . . . . . . . : NVIDIA nForce 10/100 Mbps Ethernet 

   Fysisk adress . . . . . . . . . . : 00-1E-90-42-F1-4C

   DHCP aktiverat. . . . . . . . . . : Ja

   Autokonfiguration aktiverat . . . : Ja

   L�nklokal IPv6-adress . . . . . . : fe80::e14f:8324:e2d4:bec6%11(Standard) 

   IPv4-adress . . . . . . . . . . . : 192.168.0.10(Standard) 

   N�tmask . . . . . . . . . . . . . : 255.255.255.0

   L�net erh�lls . . . . . . . . . . : den 17 juni 2014 07:26:11

   L�net upph�r. . . . . . . . . . . : den 17 juni 2014 08:26:10

   Standard-gateway. . . . . . . . . : 192.168.0.1

   DHCP-server . . . . . . . . . . . : 192.168.0.1

   IAID f�r DHCPv6 . . . . . . . . . : 234888848

   DUID f�r DHCPv6-klient. . . . . . : 00-01-00-01-1A-3B-A3-ED-00-1E-90-42-F1-4C

   DNS-servrar . . . . . . . . . . . : 193.150.193.150

                                       83.255.245.11

   NetBIOS �ver TCP/IP . . . . . . . : Aktiverat

 

Tunnelanslutning: isatap.{166164EF-04E9-4EBA-B28F-E70950E503DF}:

 

   Tillst�nd . . . . . . . . . . . . : Fr�nkopplad

   Anslutningsspecifika DNS-suffix . : 

   Beskrivning . . . . . . . . . . . : Microsoft ISATAP Adapter

   Fysisk adress . . . . . . . . . . : 00-00-00-00-00-00-00-E0

   DHCP aktiverat. . . . . . . . . . : Nej

   Autokonfiguration aktiverat . . . : Ja

 

Tunnelanslutning: Anslutning till lokalt n�tverk* 11:

 

   Anslutningsspecifika DNS-suffix . : 

   Beskrivning . . . . . . . . . . . : Teredo Tunneling Pseudo-Interface

   Fysisk adress . . . . . . . . . . : 00-00-00-00-00-00-00-E0

   DHCP aktiverat. . . . . . . . . . : Nej

   Autokonfiguration aktiverat . . . : Ja

   IPv6-adress . . . . . . . . . . . : 2001:0:9d38:6ab8:3094:1eef:ac01:6924(Standard) 

   L�nklokal IPv6-adress . . . . . . : fe80::3094:1eef:ac01:6924%13(Standard) 

   Standard-gateway. . . . . . . . . : ::

   NetBIOS �ver TCP/IP . . . . . . . : Inaktiverat

Server:  resolver2.comhem.se

Address:  193.150.193.150

 

Namn:    google.com

Addresses:  2a00:1450:400f:803::1006

 173.194.40.226

 173.194.40.227

 173.194.40.228

 173.194.40.229

 173.194.40.230

 173.194.40.231

 173.194.40.232

 173.194.40.233

 173.194.40.238

 173.194.40.224

 173.194.40.225

 

 

Skickar ping-signal till google.com [173.194.40.228] med 32 byte data:

Svar fr�n 173.194.40.228: byte=32 tid=11ms TTL=56

Svar fr�n 173.194.40.228: byte=32 tid=11ms TTL=56

 

Ping-statistik f�r 173.194.40.228:

    Paket: Skickade = 2, Mottagna = 2, F�rlorade = 0 (0 %),

Ungef�rlig �verf�ringstid i millisekunder:

    L�gsta = 11 ms, H�gsta = 11 ms, Medel = 11 ms

Server:  resolver2.comhem.se

Address:  193.150.193.150

 

Namn:    yahoo.com

Addresses:  98.138.253.109

 98.139.183.24

 206.190.36.45

 

 

Skickar ping-signal till yahoo.com [98.139.183.24] med 32 byte data:

Svar fr�n 98.139.183.24: byte=32 tid=142ms TTL=51

Svar fr�n 98.139.183.24: byte=32 tid=140ms TTL=51

 

Ping-statistik f�r 98.139.183.24:

    Paket: Skickade = 2, Mottagna = 2, F�rlorade = 0 (0 %),

Ungef�rlig �verf�ringstid i millisekunder:

    L�gsta = 140 ms, H�gsta = 142 ms, Medel = 141 ms

 

Skickar ping-signal till 127.0.0.1 med 32 byte data:

Svar fr�n 127.0.0.1: byte=32 tid < 1 ms TTL=128

Svar fr�n 127.0.0.1: byte=32 tid < 1 ms TTL=128

 

Ping-statistik f�r 127.0.0.1:

    Paket: Skickade = 2, Mottagna = 2, F�rlorade = 0 (0 %),

Ungef�rlig �verf�ringstid i millisekunder:

    L�gsta = 0 ms, H�gsta = 0 ms, Medel = 0 ms

===========================================================================

Gr�nssnittslista

 11...00 1e 90 42 f1 4c ......NVIDIA nForce 10/100 Mbps Ethernet 

  1...........................Software Loopback Interface 1

 12...00 00 00 00 00 00 00 e0 Microsoft ISATAP Adapter

 13...00 00 00 00 00 00 00 e0 Teredo Tunneling Pseudo-Interface

===========================================================================

 

V�gtabell f�r IPv4

===========================================================================

Aktiva v�gar:

   N�tverksadress          N�tmask   Gateway-adress      Gr�nssnitt    M�tt

          0.0.0.0          0.0.0.0      192.168.0.1     192.168.0.10     20

        127.0.0.0        255.0.0.0         Vid lan         127.0.0.1    306

        127.0.0.1  255.255.255.255         Vid lan         127.0.0.1    306

  127.255.255.255  255.255.255.255         Vid lan         127.0.0.1    306

      192.168.0.0    255.255.255.0         Vid lan      192.168.0.10    276

     192.168.0.10  255.255.255.255         Vid lan      192.168.0.10    276

    192.168.0.255  255.255.255.255         Vid lan      192.168.0.10    276

        224.0.0.0        240.0.0.0         Vid lan         127.0.0.1    306

        224.0.0.0        240.0.0.0         Vid lan      192.168.0.10    276

  255.255.255.255  255.255.255.255         Vid lan         127.0.0.1    306

  255.255.255.255  255.255.255.255         Vid lan      192.168.0.10    276

===========================================================================

Best�ndiga v�gar:

  Inga

 

V�gtabell f�r IPv6

===========================================================================

Aktiva v�gar:

 Gr M�tt   N�tverk M�l              Gateway

 13     58 ::/0                     Vid lan

  1    306 ::1/128                  Vid lan

 13     58 2001::/32                Vid lan

 13    306 2001:0:9d38:6ab8:3094:1eef:ac01:6924/128

                                    Vid lan

 11    276 fe80::/64                Vid lan

 13    306 fe80::/64                Vid lan

 13    306 fe80::3094:1eef:ac01:6924/128

                                    Vid lan

 11    276 fe80::e14f:8324:e2d4:bec6/128

                                    Vid lan

  1    306 ff00::/8                 Vid lan

 13    306 ff00::/8                 Vid lan

 11    276 ff00::/8                 Vid lan

===========================================================================

Best�ndiga v�gar:

  Inga

========================= Winsock entries =====================================

 

Catalog5 01 C:\Windows\SysWOW64\NLAapi.dll [52224] (Microsoft Corporation)

Catalog5 02 C:\Windows\SysWOW64\napinsp.dll [52224] (Microsoft Corporation)

Catalog5 03 C:\Windows\SysWOW64\pnrpnsp.dll [65024] (Microsoft Corporation)

Catalog5 04 C:\Windows\SysWOW64\pnrpnsp.dll [65024] (Microsoft Corporation)

Catalog5 05 C:\Windows\SysWOW64\mswsock.dll [231424] (Microsoft Corporation)

Catalog5 06 C:\Windows\SysWOW64\winrnr.dll [20992] (Microsoft Corporation)

Catalog9 01 C:\Windows\SysWOW64\mswsock.dll [231424] (Microsoft Corporation)

Catalog9 02 C:\Windows\SysWOW64\mswsock.dll [231424] (Microsoft Corporation)

Catalog9 03 C:\Windows\SysWOW64\mswsock.dll [231424] (Microsoft Corporation)

Catalog9 04 C:\Windows\SysWOW64\mswsock.dll [231424] (Microsoft Corporation)

Catalog9 05 C:\Windows\SysWOW64\mswsock.dll [231424] (Microsoft Corporation)

Catalog9 06 C:\Windows\SysWOW64\mswsock.dll [231424] (Microsoft Corporation)

Catalog9 07 C:\Windows\SysWOW64\mswsock.dll [231424] (Microsoft Corporation)

Catalog9 08 C:\Windows\SysWOW64\mswsock.dll [231424] (Microsoft Corporation)

Catalog9 09 C:\Windows\SysWOW64\mswsock.dll [231424] (Microsoft Corporation)

Catalog9 10 C:\Windows\SysWOW64\mswsock.dll [231424] (Microsoft Corporation)

x64-Catalog5 01 C:\Windows\System32\NLAapi.dll [70656] (Microsoft Corporation)

x64-Catalog5 02 C:\Windows\System32\napinsp.dll [68096] (Microsoft Corporation)

x64-Catalog5 03 C:\Windows\System32\pnrpnsp.dll [86016] (Microsoft Corporation)

x64-Catalog5 04 C:\Windows\System32\pnrpnsp.dll [86016] (Microsoft Corporation)

x64-Catalog5 05 C:\Windows\System32\mswsock.dll [327168] (Microsoft Corporation)

x64-Catalog5 06 C:\Windows\System32\winrnr.dll [28672] (Microsoft Corporation)

x64-Catalog9 01 C:\Windows\System32\mswsock.dll [327168] (Microsoft Corporation)

x64-Catalog9 02 C:\Windows\System32\mswsock.dll [327168] (Microsoft Corporation)

x64-Catalog9 03 C:\Windows\System32\mswsock.dll [327168] (Microsoft Corporation)

x64-Catalog9 04 C:\Windows\System32\mswsock.dll [327168] (Microsoft Corporation)

x64-Catalog9 05 C:\Windows\System32\mswsock.dll [327168] (Microsoft Corporation)

x64-Catalog9 06 C:\Windows\System32\mswsock.dll [327168] (Microsoft Corporation)

x64-Catalog9 07 C:\Windows\System32\mswsock.dll [327168] (Microsoft Corporation)

x64-Catalog9 08 C:\Windows\System32\mswsock.dll [327168] (Microsoft Corporation)

x64-Catalog9 09 C:\Windows\System32\mswsock.dll [327168] (Microsoft Corporation)

x64-Catalog9 10 C:\Windows\System32\mswsock.dll [327168] (Microsoft Corporation)

 

========================= Event log errors: ===============================

 

Application errors:

==================

Error: (06/16/2014 06:34:39 PM) (Source: MsiInstaller) (User: Mitra-Dator)

Description: Produkt: Microsoft Fix it 50736 -- Fel 1704. Installationen av Microsoft .NET Framework 4 Extended är tillfälligt avbruten. Du måste återställa de ändringar som har gjorts under den installationen för att kunna fortsätta. Vill du återställa ändringarna?

 

Error: (06/16/2014 05:40:11 PM) (Source: WinMgmt) (User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

 

Error: (06/16/2014 05:31:26 PM) (Source: WinMgmt) (User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

 

Error: (06/16/2014 05:11:59 PM) (Source: WinMgmt) (User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

 

Error: (06/16/2014 04:56:38 PM) (Source: WinMgmt) (User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

 

Error: (06/16/2014 03:59:25 PM) (Source: WinMgmt) (User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

 

Error: (06/16/2014 00:55:22 PM) (Source: WinMgmt) (User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

 

Error: (06/16/2014 00:51:41 PM) (Source: WinMgmt) (User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

 

Error: (06/16/2014 00:48:16 PM) (Source: WinMgmt) (User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

 

Error: (06/16/2014 09:51:19 AM) (Source: WinMgmt) (User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

 

 

System errors:

=============

Error: (06/16/2014 05:29:44 PM) (Source: EventLog) (User: )

Description: Den senaste avstängningen av datorn vid 17:26:11 den ‎2014-‎06-‎16 skedde oväntat.

 

Error: (06/16/2014 04:54:53 PM) (Source: EventLog) (User: )

Description: Den senaste avstängningen av datorn vid 16:36:08 den ‎2014-‎06-‎16 skedde oväntat.

 

Error: (06/16/2014 03:57:40 PM) (Source: EventLog) (User: )

Description: Den senaste avstängningen av datorn vid 15:55:49 den ‎2014-‎06-‎16 skedde oväntat.

 

Error: (06/16/2014 00:53:38 PM) (Source: BugCheck) (User: )

Description: 0x000000fc (0xfffff88001742288, 0x8000000003917121, 0xfffff88003defb50, 0x0000000000000000)C:\Windows\MEMORY.DMP061614-15210-01

 

Error: (06/16/2014 00:53:37 PM) (Source: EventLog) (User: )

Description: Den senaste avstängningen av datorn vid 12:51:53 den ‎2014-‎06-‎16 skedde oväntat.

 

Error: (06/16/2014 00:49:57 PM) (Source: BugCheck) (User: )

Description: 0x000000d1 (0x0000000013afe135, 0x0000000000000002, 0x0000000000000008, 0x0000000013afe135)C:\Windows\MEMORY.DMP061614-14960-01

 

Error: (06/16/2014 00:49:56 PM) (Source: EventLog) (User: )

Description: Den senaste avstängningen av datorn vid 12:48:31 den ‎2014-‎06-‎16 skedde oväntat.

 

Error: (06/16/2014 00:46:34 PM) (Source: EventLog) (User: )

Description: Den senaste avstängningen av datorn vid 12:44:07 den ‎2014-‎06-‎16 skedde oväntat.

 

Error: (06/16/2014 09:49:40 AM) (Source: EventLog) (User: )

Description: Den senaste avstängningen av datorn vid 09:46:53 den ‎2014-‎06-‎16 skedde oväntat.

 

Error: (06/16/2014 08:54:55 AM) (Source: EventLog) (User: )

Description: Den senaste avstängningen av datorn vid 08:53:57 den ‎2014-‎06-‎16 skedde oväntat.

 

 

Microsoft Office Sessions:

=========================

 

 

=========================== Installed Programs ============================

µTorrent (HKCU\...\uTorrent) (Version: 3.4.1.31139 - BitTorrent Inc.)

Adobe Reader XI (11.0.07) - Svenska (HKLM-x32\...\{AC76BA86-7AD7-1053-7B44-AB0000000001}) (Version: 11.0.07 - Adobe Systems Incorporated)

BankID säkerhetsprogram (HKLM-x32\...\{2D6973ED-BBF2-434E-993C-37E05087B8C8}) (Version: 5.1.3.2 - Finansiell ID-Teknik BID AB)

Dota 2 (HKLM-x32\...\Steam App 570) (Version:  - Valve)

DriverScanner (HKLM-x32\...\{C2F8CA82-2BD9-4513-B2D1-08A47914C1DA}_is1) (Version: 4.0.12.4 - Uniblue Systems Ltd)

Google Chrome (HKLM-x32\...\Google Chrome) (Version: 35.0.1916.153 - Google Inc.)

Google Update Helper (x32 Version: 1.3.24.7 - Google Inc.) Hidden

Guild Wars 2 (HKLM-x32\...\Guild Wars 2) (Version:  - NCsoft Corporation, Ltd.)

Left 4 Dead 2 (HKLM-x32\...\Steam App 550) (Version:  - Valve)

Microsoft .NET Framework 4 Client Profile Language Pack - SVE (HKLM\...\Microsoft .NET Framework 4 Client Profile SVE Language Pack) (Version: 4.0.30319 - Microsoft Corporation)

Microsoft .NET Framework 4 Client Profile SVE Language Pack (Version: 4.0.30319 - Microsoft Corporation) Hidden

Microsoft .NET Framework 4 Extended Language Pack - SVE (HKLM\...\Microsoft .NET Framework 4 Extended SVE Language Pack) (Version: 4.0.30319 - Microsoft Corporation)

Microsoft .NET Framework 4 Extended SVE Language Pack (Version: 4.0.30319 - Microsoft Corporation) Hidden

Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)

Microsoft .NET Framework 4.5.1 (Version: 4.5.50938 - Microsoft Corporation) Hidden

Microsoft Office Access MUI (English) 2007 (x32 Version: 12.0.4518.1014 - Microsoft Corporation) Hidden

Microsoft Office Access Setup Metadata MUI (English) 2007 (x32 Version: 12.0.4518.1014 - Microsoft Corporation) Hidden

Microsoft Office Enterprise 2007 (HKLM-x32\...\ENTERPRISE) (Version: 12.0.4518.1014 - Microsoft Corporation)

Microsoft Office Enterprise 2007 (x32 Version: 12.0.4518.1014 - Microsoft Corporation) Hidden

Microsoft Office Excel MUI (English) 2007 (x32 Version: 12.0.4518.1014 - Microsoft Corporation) Hidden

Microsoft Office Groove MUI (English) 2007 (x32 Version: 12.0.4518.1014 - Microsoft Corporation) Hidden

Microsoft Office Groove Setup Metadata MUI (English) 2007 (x32 Version: 12.0.4518.1014 - Microsoft Corporation) Hidden

Microsoft Office InfoPath MUI (English) 2007 (x32 Version: 12.0.4518.1014 - Microsoft Corporation) Hidden

Microsoft Office Office 64-bit Components 2007 (Version: 12.0.4518.1014 - Microsoft Corporation) Hidden

Microsoft Office OneNote MUI (English) 2007 (x32 Version: 12.0.4518.1014 - Microsoft Corporation) Hidden

Microsoft Office Outlook MUI (English) 2007 (x32 Version: 12.0.4518.1014 - Microsoft Corporation) Hidden

Microsoft Office PowerPoint MUI (English) 2007 (x32 Version: 12.0.4518.1014 - Microsoft Corporation) Hidden

Microsoft Office Proof (English) 2007 (x32 Version: 12.0.4518.1014 - Microsoft Corporation) Hidden

Microsoft Office Proof (French) 2007 (x32 Version: 12.0.4518.1014 - Microsoft Corporation) Hidden

Microsoft Office Proof (Spanish) 2007 (x32 Version: 12.0.4518.1014 - Microsoft Corporation) Hidden

Microsoft Office Proofing (English) 2007 (x32 Version: 12.0.4518.1014 - Microsoft Corporation) Hidden

Microsoft Office Publisher MUI (English) 2007 (x32 Version: 12.0.4518.1014 - Microsoft Corporation) Hidden

Microsoft Office Shared 64-bit MUI (English) 2007 (Version: 12.0.4518.1014 - Microsoft Corporation) Hidden

Microsoft Office Shared 64-bit Setup Metadata MUI (English) 2007 (Version: 12.0.4518.1014 - Microsoft Corporation) Hidden

Microsoft Office Shared MUI (English) 2007 (x32 Version: 12.0.4518.1014 - Microsoft Corporation) Hidden

Microsoft Office Shared Setup Metadata MUI (English) 2007 (x32 Version: 12.0.4518.1014 - Microsoft Corporation) Hidden

Microsoft Office Word MUI (English) 2007 (x32 Version: 12.0.4518.1014 - Microsoft Corporation) Hidden

Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)

Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)

Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)

Microsoft_VC80_CRT_x86 (x32 Version: 8.0.50727.4053 - Adobe) Hidden

Microsoft_VC90_CRT_x86 (x32 Version: 1.00.0000 - Adobe) Hidden

NVIDIA 3D Vision drivrutin 337.88 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 337.88 - NVIDIA Corporation)

NVIDIA 3D Vision drivrutin för styrenhet 337.88 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 337.88 - NVIDIA Corporation)

NVIDIA Drivers (HKLM\...\NVIDIA Drivers) (Version: 1.10.62.40 - NVIDIA Corporation)

NVIDIA GeForce Experience 2.1 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 2.1 - NVIDIA Corporation)

NVIDIA Grafikdrivrutin 337.88 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 337.88 - NVIDIA Corporation)

NVIDIA Install Application (Version: 2.1002.157.1165 - NVIDIA Corporation) Hidden

NVIDIA LED Visualizer 1.0 (Version: 1.0 - NVIDIA Corporation) Hidden

NVIDIA Network Service (Version: 1.0 - NVIDIA Corporation) Hidden

NVIDIA PhysX (x32 Version: 9.13.1220 - NVIDIA Corporation) Hidden

NVIDIA PhysX systemprogramvara 9.13.1220 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.13.1220 - NVIDIA Corporation)

NVIDIA ShadowPlay 14.6.22 (Version: 14.6.22 - NVIDIA Corporation) Hidden

NVIDIA Stereoscopic 3D Driver (x32 Version: 7.17.12.6514 - NVIDIA Corporation) Hidden

NVIDIA Update Core (Version: 14.6.22 - NVIDIA Corporation) Hidden

NVIDIA Virtual Audio 1.2.23 (Version: 1.2.23 - NVIDIA Corporation) Hidden

NVIDIAs kontrollpanel 337.88 (Version: 337.88 - NVIDIA Corporation) Hidden

NVIDIA-uppdatering 14.6.22 (Version: 14.6.22 - NVIDIA Corporation) Hidden

Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.5910 - Realtek Semiconductor Corp.)

SHIELD Streaming (Version: 2.1.214 - NVIDIA Corporation) Hidden

Skype™ 6.14 (HKLM-x32\...\{7A3C7E05-EE37-47D6-99E1-2EB05A3DA3F7}) (Version: 6.14.104 - Skype Technologies S.A.)

Steam (HKLM-x32\...\Steam) (Version:  - Valve Corporation)

TeamSpeak 3 Client (HKLM\...\TeamSpeak 3 Client) (Version: 3.0.14 - TeamSpeak Systems GmbH)

The Walking Dead (HKLM-x32\...\Steam App 207610) (Version:  - )

The Walking Dead: Season Two (HKLM-x32\...\Steam App 261030) (Version:  - Telltale Games)

WhoCrashed 5.01 (HKLM\...\WhoCrashed_is1) (Version:  - Resplendence Software Projects Sp.)

WinRAR 5.01 (32-bit) (HKLM-x32\...\WinRAR archiver) (Version: 5.01.0 - win.rar GmbH)

VLC media player 2.1.3 (HKLM-x32\...\VLC media player) (Version: 2.1.3 - VideoLAN)

 

========================= Devices: ================================

 

 

========================= Memory info: ===================================

 

Percentage of memory in use: 31%

Total physical RAM: 4094.48 MB

Available physical RAM: 2805.33 MB

Total Pagefile: 8187.13 MB

Available Pagefile: 6044.25 MB

Total Virtual: 4095.88 MB

Available Virtual: 3973.71 MB

 

========================= Partitions: =====================================

 

1 Drive c: () (Fixed) (Total:931.41 GB) (Free:792.53 GB) NTFS

 

========================= Users: ========================================

 

Anv„ndarkonton f”r \\MITRA-DATOR

 

Administrat”r            G„st                     Mitra                    

Kommandot har utf”rts.

 

 

**** End of log ****

 

 

Autoruns:http://www.filedropper.com/autoruns

Minidump: http://www.filedropper.com/minidump_1

[rockmilk]

Please enable the viewing of hidden files on your machine.

http://www.howtogeek...-windows-vista/

 

Then do the following.

 

 

SystemLook
Please download SystemLook_x64.exe by jpshortstuff and save it to your Desktop.

1. Right click on SystemLook_x64.exe, select "Run As Administrator..." to run it. If prompted by UAC, please allow it.
   If you receive an "Open file - security warning"... asking "Do you want to run this file?", press the Run button.
2. Highlight and copy the following entries: into SystemLook's main text entry window.

   :filefind
   *PC Tools*
   
   :folderfind
   *PC Tools*
   
   :Regfind
   PC Tools
   

3. Press the Look button to start the scan. Please be patient - it may take a while...
   When finished, a Notepad window will open with the results of the scan.
   A file will be created (on your Desktop) with the results of the scan, named SystemLook.txt
4. Please post the contents of the SystemLook.txt file in your next reply.

Edited by rockmilk, 17 June 2014 - 02:42 PM.

[Mitra]

SystemLook 30.07.11 by jpshortstuff

Log created at 22:47 on 17/06/2014 by Mitra

Administrator - Elevation successful

 

========== filefind ==========

 

Searching for "*PC Tools*"

No files found.

 

========== folderfind ==========

 

Searching for "*PC Tools*"

No folders found.

 

========== Regfind ==========

 

Searching for "PC Tools"

No data found.

 

-= EOF =-

[rockmilk]

Odd, after analysis of your dump files this driver is blamed.

 

pctndis64.sys

 

 

http://www.herdprote...3f38d247b1.aspx

http://sysnative.com...d=pctNdis64.sys

 

 

Which as you see belongs to PC Tools internet security....

 

Can you check one more place for me please.

 

Open an elevated command prompt.

http://pcsupport.abo...t-windows-7.htm

 

 After the Elevated command is open, copy and paste the commands below one at a time and hit enter after each.

 

 

set DEVMGR_SHOW_NONPRESENT_DEVICES=1
start devmgmt.msc

 

 

Device manager will open now.

 

Then, click the View menu and select Show hidden devices


Then scroll down right click and uninstall the pctndis64.sys driver, if present.

 

Look for anything related to PC Tools as well uninstall it.

 

Each will ask for a reboot wait until the last one to do the reboot.

[Mitra]

This is very frustrating, I cannot find a driver with that name, nor anything which could be linked to PC tools.

These are the servers I have. http://i.imgur.com/b62FFXM.png

Maybe there is no way to solve this, sorry if I've wasted your time

[rockmilk]

Lets reset the Tcp/ip stack.

 

 

 

 

1. On the Start screen, type CMD. In the search results, right-click Command Prompt, and then click Run as administrator.
2. At the command prompt, enter the following command, and then press Enter:
   netsh int ip reset c:\resetlog.txt
   Note If you don't want to specify a directory path for the log file, run the following command instead:
   netsh int ip reset
3. Restart the computer.

 

 

Also please run this fix it as well then reboot the machine.

http://go.microsoft....?linkid=9848640

 

 

Also go here and download the driver for windows 7 64bit.

http://www.pcpitstop...s~Ethernet.html

 

Save it to your desktop.

 

Now open device manger.

 

Open an elevated command prompt.

http://pcsupport.abo...t-windows-7.htm

 

Copy and paste the following into the cmd window and hit enter.

 

start devmgmt.msc

 

 

Now scroll to the network adapters and left click the + to the left of it.

Right Click and uninstall the NVIDIA nForce 10/100 Mbps Ethernet driver.

Put a check in the box that reads delete the driver software or this device.

Then hit OK.

 

 

 

• Download TFC by OldTimer to your desktop.
• Close any open windows
• Double click the TFC icon to run the program. (Vista/7/8 Users, Right Click and select Run as Admin)
• TFC will close all open programs itself in order to run
• Click the Start button to begin the process
• Allow TFC to run uninterrupted
• Once its finished it should automatically reboot your machine, if it doesn't, manually reboot to ensure a complete clean.

 

After the machine has rebooted then please install the driver that you saved to your desktop, earlier in this post.

 

 

Test the machine out a bit and see how it responds if it happens to crash again please upload the latest dump files so I can go over them.

 

 

 

 

[Mitra]

One noob question, how do I install the driver (that i downloaded) after the reboot? I clicked it and it extracted into a folder, but I don't know what to do next, it's just a bunch of files, do I copy them into a certain folder? Please help, I'm sorry!

[rockmilk]

What is the exact make and model of your machine lets see if we can get a .exe file for the driver instead of what we have.

[Mitra]

Wait, so I found an .exe file, clicked it and got this http://i.imgur.com/iROoZ7g.png .The title reads "NVIDIA Uninstall"... The driver under network adapters is still called "NVIDIA nForce Networking Controller", shouldnt it be "NVIDIA nForce 10/100/1000 Mbps Ethernet" if I installed the new driver correct?

 

AAH! Think I made it, i updated the driver from devide manager and chose to install from the extracted folder, now the drivers' called "NVIDIA nForce 10/100/1000 Mbps Ethernet" I'm done now right? haha 

Edited by Mitra, 18 June 2014 - 09:46 AM.

[rockmilk]

No that will uninstall the driver.

 

Just go ahead and reset the Tcp/ip stack with the commands. ( skip the driver install for now)

 

I would like you to get your machine checked for malware before we continue.

 

Please start a new topic instructions are at the link below. If you still have issues after being given the all clean then come back here to this thread and we will continue.

 

Follow instructions here.

http://www.geekstogo...cleaning-guide/

 

Post new topic here.

http://www.geekstogo...o=new_post&f=37