BSOD on brand new laptop!

[Amber311]

I got a brand new Sager gaming laptop, within 3 hours of first use, I got the blue screen of death.

Before getting the BSOD error I downloaded Avira antivirus, mozilla firefox browser, and the computer itself asked me to update something for the killer wireless card. Then I decided to download a free game (watch dogs 2) that came with the laptop purchase. The game was huge 20 something gb... Several minutes into the download is when the BSOD happened. When it restarted the BSOD started to loop. I get two error messagees on the blue screen: Kernal_security_check_failure and IRQL_not_less_or_equal (mostly the Kernal one though)

I can get the computer to start in safe mode. I went into the device manager and tried to use the auto update feature by clicking on each driver. Only one updated: killer wireless network adapter

I tried a system restore, but that didn't work.

Also, I took a look at the event viewer and here's a screen shot of the findings:

I've submitted a request with the computer company since it's under warranty but they won't be open until Monday.

Any ideas?

Please let me know what specs or other information would be helpful. Thanks!

 

[Paul NZ]

The last pic if you didnt turn it off / press the on/button can mean a faulty power supply

Could be the killer network drivers if it started having probs after the drivers updated. I would uninstall Avira for now

if you can get into safe mode / networking upload the small dmp files to opnedrive. Then post the link

 

[Amber311]

The last pic if you didnt turn it off / press the on/button can mean a faulty power supply

Could be the killer network drivers if it started having probs after the drivers updated. I would uninstall Avira for now

if you can get into safe mode / networking upload the small dmp files to opnedrive. Then post the link

Here's the link to dmp files:
https://drive.google.com/open?id=0B2_D6pCPI6cNTmNueWd6T0ZRMlU

 

[Paul NZ]

Did you uninstall Avira?

 

[Amber311]

Did you uninstall Avira?

Yes, I did

 

[Paul NZ]

Has it crashed since? The files for it were still in the dmp files you posted

 

[Amber311]

Has it crashed since? The files for it were still in the dmp files you posted

Yep, I copied the dmp files before I restarted. Will upload the latest.

 

[Paul NZ]

k

 

[Amber311]

k

Here's the dmp files with the latest ones added
https://drive.google.com/open?id=0B2_D6pCPI6cNU1dZZFBidE91UGM

 

[Paul NZ]

Hmm files for Avira are still in this dmp file


I would run the removal tool, to make sure none of the files are left on the hdd

When does it crash exactly?? Anytime, when youre doing something specific?

If it keeps crashing, since it's new I would return / replace it

 

[Amber311]

Hmm files for Avira are still in this dmp file


I would run the removal tool, to make sure none of the files are left on the hdd

When does it crash exactly?? Anytime, when youre doing something specific?

If it keeps crashing, since it's new I would return / replace it

Will do the removal tool...

It crashed the first time during the download of the game I mentioned in the first post. Since then it crashes every time the computer is starting, when it gets to the login screen.

 

[Paul NZ]

Do you use the killer wireless card?? Was this on it, or did you buy it? If you dont use it, disable it in device manager.

We'll see if thats the cause

Or try this. Press the windows key (if it's there), and r type in msconfig. Go to the boot tab. Select safe mode with network. We'll see if it crashes booting into windows

If it doesnt then it maybe something in startup thats causing it

If you can get ccleaner we'll see whats in startup. And what's installed

Do a custom install. Then go to tools/'startup and tools/uninstall. Bottom right. Copy and paste what comes up in here.

 

[Amber311]

Do you use the killer wireless card?? Was this on it, or did you buy it? If you dont use it, disable it in device manager.

We'll see if thats the cause

Or try this. Press the windows key (if it's there), and r type in msconfig. Go to the boot tab. Select safe mode with network. We'll see if it crashes booting into windows

If it doesnt then it maybe something in startup thats causing it

If you can get ccl;eaner we maybe to see whats in startup. DO a custom install. Then go to tools/'startup and tools/uninstall. Bottom right. Copy and paste what comes up in here. ccleaner.com

The Killer wireless card came with the laptop. The laptop is currently in safe mode with networking and does not crash.

Will get CCleaner and post results.

 

[Paul NZ]

Sweet.

So does it crash everytime when you boot into windows normally?

If it does it does sound like something in startup is causing it. If it doesnt crash in safe mode (since most drivers are disabled)

 

[Amber311]

Here's startup:

Yes HKCU:Run CCleaner Monitoring Piriform Ltd "C:\Program Files\CCleaner\CCleaner64.exe" /MONITOR
Yes HKCU:RunOnce Uninstall 17.3.6720.1207 Microsoft Corporation C:\Windows\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Amber\AppData\Local\Microsoft\OneDrive\17.3.6720.1207"
Yes HKLM:Run IAStorIcon Intel Corporation "C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIconLaunch.exe" "C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe" 60
Yes HKLM:Run MBCfg64 Microsoft Corporation C:\Windows\system32\RunDLL32.exe C:\Windows\system32\MBCfg64.dll,RunDLLEntry MBCfg64
Yes HKLM:Run RTHDVCPL Realtek Semiconductor "C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe" -s
Yes HKLM:Run ShadowPlay Microsoft Corporation "C:\Windows\system32\rundll32.exe" C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart
Yes HKLM:Run Sound Blaster X-Fi MB5 Creative Technology Ltd "C:\Program Files (x86)\Creative\Sound Blaster X-Fi MB5\Sound Blaster X-Fi MB5\SBXFIMB5.exe" /r
Yes HKLM:Run UpdReg Creative Technology Ltd. C:\Windows\UpdReg.EXE
Yes HKLM:Run WindowsDefender "%ProgramFiles%\Windows Defender\MSASCuiL.exe"
Yes HKLM:RunOnce GrpConv grpconv -o
Yes Startup Common Hotkey.lnk CLEVO CO. C:\Program Files (x86)\Hotkey\HkeyTray.exe
Yes Startup Common Killer Network Manager.lnk Rivet Networks C:\Program Files\Killer Networking\Network Manager\NetworkManager.exe
Yes Startup User zSpeedup.lnk



Uninstall:
3D Builder Microsoft Corporation 1/6/2017 12.0.3131.0
Airplane Mode Hid Installer 12/28/2016 5.0.0.2
Alarms & Clock Microsoft Corporation 1/6/2017 10.1612.3343.0
App Installer Microsoft Corporation 1/6/2017 1.0.2181.0
Calculator Microsoft Corporation 1/6/2017 10.1612.3341.0
Camera Microsoft Corporation 1/6/2017 2016.1101.20.0
CCleaner Piriform 1/7/2017 5.25
Control Center 5.0001.0.83 12/28/2016 5.0001.0.83
Drawboard PDF Drawboard 1/6/2017 5.1.50.0
Facebook Facebook Inc 1/5/2017 75.700.56604.0
Feedback Hub Microsoft Corporation 1/6/2017 1.1611.3471.0
Get Office Microsoft Corporation 1/6/2017 17.7608.23501.0
Get Started Microsoft Corporation 1/6/2017 4.2.29.0
Groove Music Microsoft Corporation 1/6/2017 10.16112.10211.0
Insyde Airplane Mode HID Mini-Driver Insyde Corporation 12/28/2016 1.4.0.3
Intel(R) Management Engine Components Intel Corporation 12/28/2016 11.5.0.1020
Intel(R) Rapid Storage Technology Intel Corporation 12/28/2016 15.0.0.1039
Killer Performance Suite Rivet Networks 12/28/2016 1.1.55.1538
Mail and Calendar Microsoft Corporation 1/6/2017 17.7714.42037.0
Maps Microsoft Corporation 1/6/2017 5.1611.3342.0
Messaging Microsoft Corporation 1/5/2017 3.19.1001.0
Microsoft Solitaire Collection Microsoft Studios 1/6/2017 3.12.12120.0
Microsoft Sticky Notes Microsoft Corporation 1/6/2017 1.3.0.0
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.21005 Microsoft Corporation 12/28/2016 20.5 MB 12.0.21005.1
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.21005 Microsoft Corporation 12/28/2016 17.1 MB 12.0.21005.1
Microsoft Visual C++ 2015 Redistributable (x64) - 14.0.23918 Microsoft Corporation 12/28/2016 22.4 MB 14.0.23918.0
Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.23918 Microsoft Corporation 12/28/2016 18.7 MB 14.0.23918.0
Movies & TV Microsoft Corporation 1/6/2017 10.16112.10221.0
News Microsoft Corporation 1/5/2017 4.18.41.0
NVIDIA 3D Vision Driver 376.33 NVIDIA Corporation 12/28/2016 376.33
NVIDIA GeForce Experience 3.1.2.31 NVIDIA Corporation 12/28/2016 3.1.2.31
NVIDIA Graphics Driver 376.33 NVIDIA Corporation 12/28/2016 376.33
NVIDIA HD Audio Driver 1.3.34.17 NVIDIA Corporation 12/28/2016 1.3.34.17
NVIDIA PhysX System Software 9.16.0318 NVIDIA Corporation 12/28/2016 9.16.0318
OneNote Microsoft Corporation 1/6/2017 17.7668.57681.0
Paid Wi-Fi & Cellular Microsoft Corporation 1/6/2017 1.1607.6.0
People Microsoft Corporation 1/6/2017 10.1.3160.0
Photos Microsoft Corporation 1/6/2017 16.1118.10000.0
Qualcomm Atheros 61x4 Bluetooth Suite (64) Qualcomm Atheros 12/28/2016 40.4 MB 10.0.0.116
Realtek Card Reader Realtek Semiconductor Corp. 12/28/2016 14.6 MB 10.0.10586.21291
Realtek High Definition Audio Driver Realtek Semiconductor Corp. 12/28/2016 484 MB 6.0.1.7874
Revo Uninstaller Pro 3.1.0 VS Revo Group, Ltd. 1/7/2017 34.8 MB 3.1.0
Skype Preview Skype 1/6/2017 11.10.145.0
Sound Blaster X-Fi MB5 Creative Technology Limited 12/28/2016 1.00.18
Store Microsoft Corporation 1/6/2017 11610.1001.23.0
Store Purchase App Microsoft Corporation 1/6/2017 11608.1000.2431.0
Synaptics Pointing Device Driver Synaptics Incorporated 12/28/2016 46.4 MB 19.3.4.31
Synaptics WBF USB Fingerprint Reader Synaptics Incorporated 12/28/2016 4.31 MB 5.5.204.24
Thunderbolt(TM) Software Intel Corporation 12/28/2016 2.69 MB 16.1.47.275
Twitter Twitter Inc. 1/5/2017 5.4.1.0
Voice Recorder Microsoft Corporation 1/6/2017 10.1612.3352.0
Vulkan Run Time Libraries 1.0.26.0 LunarG, Inc. 12/28/2016 1.66 MB 1.0.26.0
Weather Microsoft Corporation 1/6/2017 4.18.37.0
Windows Driver Package - Insyde (AirplaneModeHid) HIDClass (07/14/2015 1.4.0.3) Insyde 12/28/2016 07/14/2015 1.4.0.3
Xbox Microsoft Corporation 1/6/2017 24.24.20004.0
Xbox Identity Provider Microsoft Corporation 1/6/2017 11.19.19003.0

 

[Paul NZ]

You can disable this by going to options/monitoring in ccleaner . Untick the top option. Enable system monitoring
Yes HKCU:Run CCleaner Monitoring Piriform Ltd "C:\Program Files\CCleaner\CCleaner64.exe" /MONITOR

Are there 2 different audio things on this?? Since it looks like there's realtek and creative drivers

Yes HKLM:Run RTHDVCPL Realtek Semiconductor "C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe" -s

And

Yes HKLM:Run Sound Blaster X-Fi MB5 Creative Technology Ltd "C:\Program Files (x86)\Creative\Sound Blaster X-Fi MB5\Sound Blaster X-Fi MB5\SBXFIMB5.exe" /r

You can delete this entry you dont need it in startup
Yes HKLM:Run UpdReg Creative Technology Ltd. C:\Windows\UpdReg.EXE

Not too sure what this is, but disable it. Possible that it's malware

Yes HKLM:RunOnce GrpConv grpconv -o

Disable this

Yes Startup Common Killer Network Manager.lnk Rivet Networks C:\Program Files\Killer Networking\Network Manager\NetworkManager.exe

I have no idea what this is either. Disable it. Sounds suss to me
Yes Startup User zSpeedup.lnk

We'll see if you've got malware.

Get trojan remover

Update it then click on scan. This if it finds anything will remove it from startup and the registry. Whatever it finds, it'll remove it

 

[Amber311]

You can disable this by going to options/monitoring in ccleaner . Untick the top option. Enable system monitoring
Yes HKCU:Run CCleaner Monitoring Piriform Ltd "C:\Program Files\CCleaner\CCleaner64.exe" /MONITOR

Are there 2 different audio things on this?? Since it looks like there's realtek and creative drivers

Yes HKLM:Run RTHDVCPL Realtek Semiconductor "C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe" -s

And

Yes HKLM:Run Sound Blaster X-Fi MB5 Creative Technology Ltd "C:\Program Files (x86)\Creative\Sound Blaster X-Fi MB5\Sound Blaster X-Fi MB5\SBXFIMB5.exe" /r

You can delete this entry you dont need it in startup
Yes HKLM:Run UpdReg Creative Technology Ltd. C:\Windows\UpdReg.EXE

Not too sure what this is, but disable it. Possible that it's malware

Yes HKLM:RunOnce GrpConv grpconv -o

Disable this

Yes Startup Common Killer Network Manager.lnk Rivet Networks C:\Program Files\Killer Networking\Network Manager\NetworkManager.exe

I have no idea what this is either. Disable it. Sounds suss to me
Yes Startup User zSpeedup.lnk

We'll see if you've got malware.

Get trojan remover

Update it then click on scan. This if it finds anything will remove it from startup and the registry. Whatever it finds, it'll remove it

The simplysup website doesn't seem to be working.... the download page gives me an error:
"Not Implemented

GET to /tremover/download.html not supported.

Additionally, a 501 Not Implemented error was encountered while trying to use an ErrorDocument to handle the request."

 

[Paul NZ]

Oh youre right... I could send it to you with teamviewer, if you want. Dont worry if you do you'll see what I'm doing

If you get it give me the id and password it gives you in a PM

 

[Amber311]

I haven't heard of team viewer.... it's some sort of remote screen sharing? No other way to send it to me? I'm actually using the net on a different computer.

 

[Paul NZ]

Yup its a way of helping people. Well you could get it from another site. If you can find it

Try adwcleaner.

Run it then scan. If it picks anything up, click on clean after. Then reboot. See if boots ok in normal windows after. This is a pretty good program, but I dont think it's as good as trojan remover

 

[Amber311]

Found trojan remover from another site. Downloading now.

 

[Paul NZ]

k

 

[Amber311]

It didn't find anything.

Says "No active malicious files were found and no changes were made"

 

[Paul NZ]

OK if you disabled the above entries try rebooting. See if it crashes when it gets to windows

Did you update it first?

 

[Amber311]

Did I update what first?