Jump to content

Welcome to Geeks to Go - Register now for FREE

Geeks To Go is a helpful hub, where thousands of volunteer geeks quickly serve friendly answers and support. Check out the forums and get free advice from the experts. Register now to gain access to all of our features, it's FREE and only takes one minute. Once registered and logged in, you will be able to create topics, post replies to existing threads, give reputation to your fellow members, get your own private messenger, post status updates, manage your profile and so much more.

Create Account How it Works
Photo

Blue Screen of Death


  • Please log in to reply

#16
abrahams child

abrahams child

    Member

  • Topic Starter
  • Member
  • PipPipPip
  • 264 posts

I checked windows update and there was an update installed today 8/13/17 which was a definition update for MSE KB2310138 if that's what you are referring to on the scheduler.  Hibernation is disabled.  Is shield check something to do with your firewall working?


  • 0

Advertisements


#17
phillpower2

phillpower2

    Tech Staff

  • Technician
  • 21,272 posts
I checked windows update and there was an update installed today 8/13/17 which was a definition update for MSE KB2310138 if that's what you are referring to on the scheduler. 

 

 

No was asking if you knew what shield check was.

 

Is shield check something to do with your firewall working?

 

 

Shield check can either be a third party firewall or an AV program, depends what it was that was installed, you have MSE installed and Windows Firewall running so either of the aforementioned third party firewall or AV program could cause issues.

 

Getting late here and have an early start so going offline now I`m afraid, will try and check back tomorrow after work.


  • 0

#18
abrahams child

abrahams child

    Member

  • Topic Starter
  • Member
  • PipPipPip
  • 264 posts

Had another BSD today so when you have time to read the dump file.  How do you determine the health of the CPU?  Thnx


  • 0

#19
phillpower2

phillpower2

    Tech Staff

  • Technician
  • 21,272 posts
No was asking if you knew what shield check was.
 

 

 

Can you answer the above question for us, do you know what Shield Check is - did you ever install it.

 

No dmp file attached for us.

 

How do you determine the health of the CPU?  Thnx

 

 

You could try AMD System Monitor and see if that tells you anything.


  • 0

#20
abrahams child

abrahams child

    Member

  • Topic Starter
  • Member
  • PipPipPip
  • 264 posts

Don't have a clue what shield check is.  Here's yesterdays dump file and todays.

Attached Files


  • 0

#21
phillpower2

phillpower2

    Tech Staff

  • Technician
  • 21,272 posts
CLOCK_WATCHDOG_TIMEOUT (101) again in one, did you try the AMD tool that was suggested.
 
Last crash was different;
 
 
PAGE_FAULT_IN_NONPAGED_AREA (50)
Invalid system memory was referenced.  This cannot be protected by try-except,
it must be protected by a Probe.  Typically the address is just plain bad or it
is pointing at freed memory.
Arguments:
Arg1: fffff88010f13044, memory referenced.
Arg2: 0000000000000000, value 0 = read operation, 1 = write operation.
Arg3: fffff800030d6a7c, If non-zero, the instruction address which referenced the bad memory
address.
Arg4: 0000000000000002, (reserved)
 
Debugging Details:
------------------
 
 
Could not read faulting driver name
TRIAGER: Could not open triage file : e:\dump_analysis\program\triage\modclass.ini, error 2
 
READ_ADDRESS: GetPointerFromAddress: unable to read from fffff80002f0f100
GetUlongFromAddress: unable to read from fffff80002f0f1c8
 fffff88010f13044 Nonpaged pool
 
FAULTING_IP: 
nt!PfpSourceBuildVaArray+10c
fffff800`030d6a7c 0fb74844        movzx   ecx,word ptr [rax+44h]
 
MM_INTERNAL_CODE:  2
 
CUSTOMER_CRASH_COUNT:  1
 
DEFAULT_BUCKET_ID:  WIN7_DRIVER_FAULT
 
BUGCHECK_STR:  0x50 See info and suggestions here
 
Regarding Shield Check, see below;
 

Post an Autoruns log for us, see here  

 

 

1: Extract the Autoruns Zip file contents to a folder.

 

2: Double-click the "Autoruns.exe".

 

3: Click on the Options tab and then put a tick against the top three options.

 

4: Go to File then to Export As or Save in some versions.

 

5: Save AutoRuns.txt file to known location like your Desktop > when you click on File > Save you will then get the option to Save as type, click the drop down tab, change it to Text and then click the Save button.

 

6: Attach to your next reply.

 

 

  • 0

#22
abrahams child

abrahams child

    Member

  • Topic Starter
  • Member
  • PipPipPip
  • 264 posts

When I downloaded Autorun and extracted the zipfile there was no autorun.exe.  The options were Autoruns, Autorunsc, Autoruns64, Autorunsc64.  I ran Autoruns64 and the file was to big to attach to reply.


  • 0

#23
abrahams child

abrahams child

    Member

  • Topic Starter
  • Member
  • PipPipPip
  • 264 posts

Made it a zip file.  All other tests were good.

Attached Files


Edited by abrahams child, 16 August 2017 - 06:11 PM.

  • 0

#24
phillpower2

phillpower2

    Tech Staff

  • Technician
  • 21,272 posts

I was experiencing BSD issues when using Norton AV and IE as my default browser.  I was hesitant of using Google Chrome as a browser but I like it better than IE.  Using MSE as my AV but I'm still experiencing the BSD with changes suggested.  Thanx

 

You still have traces Norton and Symantec on your computer, see attachment below.

 

What I suggest;

 

Delete the Norton, Symantec and Shield Check entries in Autoruns.

 

Using the methods recommended by Malwarebytes and Super Anti Spyware uninstall both (This only temporary and both will be reinstalled later).

 

Re start the computer > run Autoruns again > upload the log** so that we can see that they are all gone.

 

** The reason why the log was too big to upload is because you did not save it as a Text as was suggested, no problem here as your zip is easier for us to read, it just makes more work for you which is something that we try to avoid  :thumbsup:

Attached Thumbnails

  • abrahams child autoruns.jpg

  • 0

#25
abrahams child

abrahams child

    Member

  • Topic Starter
  • Member
  • PipPipPip
  • 264 posts

Here is the autorun after uninstalling Malware/Superantispyware, restarting and deleting entries in task scheduler.   Can I then reinstall uninstalled programs now?

Attached Files


Edited by abrahams child, 17 August 2017 - 04:49 PM.

  • 0

Advertisements


#26
phillpower2

phillpower2

    Tech Staff

  • Technician
  • 21,272 posts
Can I then reinstall uninstalled programs now?

 

 

First things first, how is the computer behaving now that you have followed the steps suggested in my reply #24


  • 0

#27
abrahams child

abrahams child

    Member

  • Topic Starter
  • Member
  • PipPipPip
  • 264 posts

Had another BSD today and here is the dump file.

Attached Files

  • Attached File  JR 6.zip   43.27KB   7 downloads

  • 0

#28
phillpower2

phillpower2

    Tech Staff

  • Technician
  • 21,272 posts

You still have Malwarebytes on your computer, up to you if you don`t follow each troubleshooting step but don`t hold your breath on fixing this any time soon  :(

 

\SystemRoot\system32\drivers\MBAMChameleon.sys 
\SystemRoot\system32\DRIVERS\lltdio.sys 
\SystemRoot\system32\DRIVERS\nwifi.sys 
\SystemRoot\system32\DRIVERS\ndisuio.sys 
\SystemRoot\system32\DRIVERS\rspndr.sys 
\SystemRoot\system32\drivers\HTTP.sys 
\SystemRoot\system32\DRIVERS\bowser.sys 
\SystemRoot\System32\drivers\mpsdrv.sys 
\SystemRoot\system32\DRIVERS\mrxsmb.sys 
\SystemRoot\system32\DRIVERS\mrxsmb10.sys 
\SystemRoot\system32\DRIVERS\mrxsmb20.sys 
\??\C:\Windows\system32\ammntdrv.sys 
\??\C:\Windows\system32\amwrtdrv.sys 
\SystemRoot\system32\drivers\peauth.sys 
\SystemRoot\System32\DRIVERS\srvnet.sys 
\SystemRoot\System32\drivers\tcpipreg.sys 
\SystemRoot\System32\DRIVERS\srv2.sys 
\SystemRoot\System32\DRIVERS\srv.sys 
\SystemRoot\system32\DRIVERS\NisDrvWFP.sys 
\SystemRoot\system32\drivers\WudfPf.sys 
\SystemRoot\system32\DRIVERS\WinUsb.sys 
\SystemRoot\system32\DRIVERS\WUDFRd.sys 
\??\C:\Windows\system32\drivers\MBAMSwissArmy.sys 
\??\C:\Windows\system32\drivers\mwac.sys 
\??\C:\Windows\system32\drivers\mbam.sys 

  • 0

#29
abrahams child

abrahams child

    Member

  • Topic Starter
  • Member
  • PipPipPip
  • 264 posts

I reinstalled it but I'll uninstall it again, then go from there. 


  • 0

#30
phillpower2

phillpower2

    Tech Staff

  • Technician
  • 21,272 posts

  :thumbsup:

 

 

BUGCHECK_STR:  CLOCK_WATCHDOG_TIMEOUT_2_PROC

 

 

If you get the same error with MBAM uninstalled then I suspect that you are looking at hardware as opposed to software issues.


  • 0






Similar Topics

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users

As Featured On:

Microsoft Yahoo BBC MSN PC Magazine Washington Post HP