[abrahams child]

I checked windows update and there was an update installed today 8/13/17 which was a definition update for MSE KB2310138 if that's what you are referring to on the scheduler.  Hibernation is disabled.  Is shield check something to do with your firewall working?

[Advertisements]

I checked windows update and there was an update installed today 8/13/17 which was a definition update for MSE KB2310138 if that's what you are referring to on the scheduler. 

 

 

No was asking if you knew what shield check was.

 

Is shield check something to do with your firewall working?

 

 

Shield check can either be a third party firewall or an AV program, depends what it was that was installed, you have MSE installed and Windows Firewall running so either of the aforementioned third party firewall or AV program could cause issues.

 

Getting late here and have an early start so going offline now I`m afraid, will try and check back tomorrow after work.

[phillpower2]

I checked windows update and there was an update installed today 8/13/17 which was a definition update for MSE KB2310138 if that's what you are referring to on the scheduler. 

 

 

No was asking if you knew what shield check was.

 

Is shield check something to do with your firewall working?

 

 

Shield check can either be a third party firewall or an AV program, depends what it was that was installed, you have MSE installed and Windows Firewall running so either of the aforementioned third party firewall or AV program could cause issues.

 

Getting late here and have an early start so going offline now I`m afraid, will try and check back tomorrow after work.

[abrahams child]

Had another BSD today so when you have time to read the dump file.  How do you determine the health of the CPU?  Thnx

[phillpower2]

No was asking if you knew what shield check was.

 

 

 

Can you answer the above question for us, do you know what Shield Check is - did you ever install it.

 

No dmp file attached for us.

 

How do you determine the health of the CPU?  Thnx

 

 

You could try AMD System Monitor and see if that tells you anything.

[abrahams child]

Don't have a clue what shield check is.  Here's yesterdays dump file and todays.

Attached Files

•  JR 3.zip   22.69KB   269 downloads
•  JR 4.zip   21.58KB   263 downloads

[phillpower2]

CLOCK_WATCHDOG_TIMEOUT (101) again in one, did you try the AMD tool that was suggested.

 

Last crash was different;

 

 

PAGE_FAULT_IN_NONPAGED_AREA (50)

Invalid system memory was referenced.  This cannot be protected by try-except,

it must be protected by a Probe.  Typically the address is just plain bad or it

is pointing at freed memory.

Arguments:

Arg1: fffff88010f13044, memory referenced.

Arg2: 0000000000000000, value 0 = read operation, 1 = write operation.

Arg3: fffff800030d6a7c, If non-zero, the instruction address which referenced the bad memory

address.

Arg4: 0000000000000002, (reserved)

 

Debugging Details:

------------------

 

 

Could not read faulting driver name

TRIAGER: Could not open triage file : e:\dump_analysis\program\triage\modclass.ini, error 2

 

READ_ADDRESS: GetPointerFromAddress: unable to read from fffff80002f0f100

GetUlongFromAddress: unable to read from fffff80002f0f1c8

 fffff88010f13044 Nonpaged pool

 

FAULTING_IP: 

nt!PfpSourceBuildVaArray+10c

fffff800`030d6a7c 0fb74844        movzx   ecx,word ptr [rax+44h]

 

MM_INTERNAL_CODE:  2

 

CUSTOMER_CRASH_COUNT:  1

 

DEFAULT_BUCKET_ID:  WIN7_DRIVER_FAULT

 

BUGCHECK_STR:  0x50 See info and suggestions here

 

Regarding Shield Check, see below;

 

Post an Autoruns log for us, see here  

 

 

1: Extract the Autoruns Zip file contents to a folder.

 

2: Double-click the "Autoruns.exe".

 

3: Click on the Options tab and then put a tick against the top three options.

 

4: Go to File then to Export As or Save in some versions.

 

5: Save AutoRuns.txt file to known location like your Desktop > when you click on File > Save you will then get the option to Save as type, click the drop down tab, change it to Text and then click the Save button.

 

6: Attach to your next reply.

 

 

[abrahams child]

When I downloaded Autorun and extracted the zipfile there was no autorun.exe.  The options were Autoruns, Autorunsc, Autoruns64, Autorunsc64.  I ran Autoruns64 and the file was to big to attach to reply.

[abrahams child]

Made it a zip file.  All other tests were good.

Attached Files

•  Autorun 2.zip   252.65KB   266 downloads

Edited by abrahams child, 16 August 2017 - 06:11 PM.

[phillpower2]

I was experiencing BSD issues when using Norton AV and IE as my default browser.  I was hesitant of using Google Chrome as a browser but I like it better than IE.  Using MSE as my AV but I'm still experiencing the BSD with changes suggested.  Thanx

 

You still have traces Norton and Symantec on your computer, see attachment below.

 

What I suggest;

 

Delete the Norton, Symantec and Shield Check entries in Autoruns.

 

Using the methods recommended by Malwarebytes and Super Anti Spyware uninstall both (This only temporary and both will be reinstalled later).

 

Re start the computer > run Autoruns again > upload the log** so that we can see that they are all gone.

 

** The reason why the log was too big to upload is because you did not save it as a Text as was suggested, no problem here as your zip is easier for us to read, it just makes more work for you which is something that we try to avoid 

[abrahams child]

Here is the autorun after uninstalling Malware/Superantispyware, restarting and deleting entries in task scheduler.   Can I then reinstall uninstalled programs now?

Attached Files

•  Autorun 5.zip   241.72KB   256 downloads

Edited by abrahams child, 17 August 2017 - 04:49 PM.

[phillpower2]

Can I then reinstall uninstalled programs now?

 

 

First things first, how is the computer behaving now that you have followed the steps suggested in my reply #24

[abrahams child]

Had another BSD today and here is the dump file.

Attached Files

•  JR 6.zip   43.27KB   296 downloads

[phillpower2]

You still have Malwarebytes on your computer, up to you if you don`t follow each troubleshooting step but don`t hold your breath on fixing this any time soon 

 

\SystemRoot\system32\drivers\MBAMChameleon.sys 

\SystemRoot\system32\DRIVERS\lltdio.sys 

\SystemRoot\system32\DRIVERS\nwifi.sys 

\SystemRoot\system32\DRIVERS\ndisuio.sys 

\SystemRoot\system32\DRIVERS\rspndr.sys 

\SystemRoot\system32\drivers\HTTP.sys 

\SystemRoot\system32\DRIVERS\bowser.sys 

\SystemRoot\System32\drivers\mpsdrv.sys 

\SystemRoot\system32\DRIVERS\mrxsmb.sys 

\SystemRoot\system32\DRIVERS\mrxsmb10.sys 

\SystemRoot\system32\DRIVERS\mrxsmb20.sys 

\??\C:\Windows\system32\ammntdrv.sys 

\??\C:\Windows\system32\amwrtdrv.sys 

\SystemRoot\system32\drivers\peauth.sys 

\SystemRoot\System32\DRIVERS\srvnet.sys 

\SystemRoot\System32\drivers\tcpipreg.sys 

\SystemRoot\System32\DRIVERS\srv2.sys 

\SystemRoot\System32\DRIVERS\srv.sys 

\SystemRoot\system32\DRIVERS\NisDrvWFP.sys 

\SystemRoot\system32\drivers\WudfPf.sys 

\SystemRoot\system32\DRIVERS\WinUsb.sys 

\SystemRoot\system32\DRIVERS\WUDFRd.sys 

\??\C:\Windows\system32\drivers\MBAMSwissArmy.sys 

\??\C:\Windows\system32\drivers\mwac.sys 

\??\C:\Windows\system32\drivers\mbam.sys 

[abrahams child]

I reinstalled it but I'll uninstall it again, then go from there. 

[phillpower2]

 

 

 

BUGCHECK_STR:  CLOCK_WATCHDOG_TIMEOUT_2_PROC

 

 

If you get the same error with MBAM uninstalled then I suspect that you are looking at hardware as opposed to software issues.