Win7 Ultimate 64bit NTOSKRNL.EXE BSOD

kevinp240

Reputable
Dec 25, 2014
4
0
4,510
Hi everyone.

I know there are a few NTOSKRNL.EXE BSOD threads already but in reading those answers stem towards a hardware fault and got resolved. Ever since December 17th, 2014 I've been getting BSODs quite infuriatingly often and they all relate to NTOSKRNL.EXE.

However I've already run MemTest+86 using an extended 2-pass test. That came back with no errors. I ran CHKDSK /F, again no errors. HDD S.M.A.R.T tests shows my HDDs do show some normal wear and tear but after 2.5 years of use with no bad sectors, they are still considered healthy. I've also run SFC /scannow but all my Windows core files are intact. I've ran full system scans with AVG Anti-Virus, MalwareBytes Anti-Virus and SpyBot S&D 2.2.21.0 and they all come back with no viruses/malware found. My system is completely clean.

I do recall though that my system was completely reliable without crashing before I installed Sony Vegas Pro 13 around December 14th. Thinking this was the cause I went the to Sony support forums. Initial speculation was my pagefile which was initially on a partitioned 32GB drive, but I've since moved the pagefile back to the main C: boot drive. I've also removed Sony Vegas but I still get BSODs regularly.

I'm aware overclocking CPU's can cause problems, but my CPU has been overclocked since purchase, and while I know how to safely overclock, it's been running little over 600MHz faster than stock for the past 2.5 years and I've never had a single BSOD until now.

Knowing my system is clear and not a hardware fault, could anyone offer a light to what's causing my problems?

My PC rig:
OS: MS Windows 7 Ultimate 64bit
RAM: 2 x Corsair Vengeance 4GB DDR3 1,600MHz
GPU: 2 x Nvidia GeForce 550TI 1GB GDDR5 (running SLI)
CPU: AMD Phenom II X4 965 Quad Core 3.4GHz (O.C'd to 4.1GHz)
HDD: 2 x 2GB Seagate Barracuda Green SATA II 7,200rpm
(1 drive single partition for Drive C, has approx 300GB free space,
1 drive 3 partitions for Drive E: (976GB cap, 822GB free), Drive F: (398GB cap, 163GB free) and Drive H: (488GB cap, 259GB free)).
Mobo: ASUS M5A97 R2

Video and audio drivers kept automatically up-to-date via Nvidia GeForce Experience program. The PC build I put together myself including my own purpose built wooden PC case to maximise cooling. Of which the CPU is cooled by Corsair Hydro H60i closed loop. GPUs and HDDs have their own enclosures and fan cooled so as the warm air from one doesn't mix with the other.

Kind regards
Kevin Pearson
 
Solution
you have a lot of very questionable drivers running on your system.
for example:
C:\Windows\TEMP\tmpBAF5.tmp Sat Jul 26 06:29:37 2008

this temp file is being loaded as a windows device driver. I would expect it to be a malware driver.
your Rapport Security driver is having issues also.

the bugcheck code I looked at indicates a bad instruction pointer, I would expect your system is under a malware attack.

-also, your ethernet driver is way out of date, your USB drivers are very old, you have a buggy version of aichargerplus.sys from 2010
that will corrupt memory, looks like you have Saitek Magic Bus driver from 2008 (various problems)

you could try to fix all the problems one at a time, or wipe the system, reinstall all the...
you have a lot of very questionable drivers running on your system.
for example:
C:\Windows\TEMP\tmpBAF5.tmp Sat Jul 26 06:29:37 2008

this temp file is being loaded as a windows device driver. I would expect it to be a malware driver.
your Rapport Security driver is having issues also.

the bugcheck code I looked at indicates a bad instruction pointer, I would expect your system is under a malware attack.

-also, your ethernet driver is way out of date, your USB drivers are very old, you have a buggy version of aichargerplus.sys from 2010
that will corrupt memory, looks like you have Saitek Magic Bus driver from 2008 (various problems)

you could try to fix all the problems one at a time, or wipe the system, reinstall all the service packs and updates. Then only install the required software.

your bios should also be updated to get the various USB fixes
M5A97 PRO ASUSTeK COMPUTER INC.

BIOS Starting Address Segment f000
BIOS Release Date 12/07/2011






 
Solution

kevinp240

Reputable
Dec 25, 2014
4
0
4,510
Hi johnbl.

I did a file search and registry search for tmpBAF5.tmp. It may have been in an earlier dump file but I cannot see it now. I must admit ignorance got the best of me as I haven't used a Saitek device for ages so I've now removed that software using Revo Uninstaller and CCleaner to remove all traces. I've just finished downloading USB, ethernet, BIOS and chipset drivers.

Now obviously this will take a while to do so I'll get back to you once the drivers have been updated and I've done some video rendering tests to see if the BSODs come back.

As for the possible malware attacks, I never use just a single program though last year I changed from avast AV to AVG due to avast picking up false positives which Malwarebytes found safe. My current mix of AV and malware scanners are Microsoft Security Essentials, AVG, Spybot S&D (now updated to 2.4) and Malwarebytes Antimalware. Up until now I've never had virus/malware issues as I'm careful where I browse (that's not to say legit websites are unhackable by the nefarious).

Would you say this is enough protection or should I invest in a different program? By the way, AVG was a pro license but that expired last month and with Christmas here my focus was on gifts for my partner and daughter so I haven't renewed yet.

Kind regards
Kevin Pearson
 

kevinp240

Reputable
Dec 25, 2014
4
0
4,510


Hi again johnbl. I've flashed the BIOS, updated the USB and ethernet drivers and installed the updated version of AI+ charger. I also removed all Saitek products. Given that I performed a number of software changes I won't be able to pin it down to a specific one, but since doing these steps I've been video rendering for the past 10 hours without a single crash now. I would normally get one within the first hour.

So it seems your steps have worked. I very much appreciate your time looking into this for me. I can extend life in Windows 7 until Windows 10 gets a full public release.

Kind regards
Kevin Pearson