BSOD 4 Times in less then an Hour

[Emedic1973]

the guys at the Tenforums for windows advised me to uninstall Malwarebytes as that was causing the BSOD and also to post here so I am also posting this here as I really rely on my malwarebytes to keep my system clean.  Attached are the requested files from the instructions on how to post BSOD errors.  

 

Thank you in advance for your help.

 

SysnativeFileCollectionApp.zip

[usasma]

I'm traveling right now, I hope to respond to you within 24 hours - but it depends on internet availability.

I presume that the advice to uninstall MalwareBytes (from TenForums) was because of problems between MalwareBytes and BitDefender 2016.
IMO you can keep MalwareBytes installed, but cannot let it start with Windows (or you can get rid of BitDefender).  Then you'll be able to run manual scans w/MalwareBytes.

There are other opinions and other forms of advice on these forums.
In particular, see the posts by Maurice Naggar, as he is the resident staff expert for these problems (and posts regularly in this forum).

On with the BSOD analysis.....

Your UEFI/BIOS (version F3) dates from 2015.  Please check at the manufacturer's website to see if there are any UEFI/BIOS updates available for your system.  This is just in case there has been a recent update.
 

Only 8 Windows Update hotfixes installed.  Most build 10586 (TH2/1511) systems have more than this.  Please visit Windows Update and get ALL available Windows Updates.
The actual number is not important.  Rather it's important that you checked manually, installed any available updates, and didn't experience any errors when checking or updating.

The memory dumps are those typically seen when MalwareBytes and BitDefender2016 conflict.
Other advice is to revert to BitDefender 2015 or to frequent the BitDefender forums to see if they have changed anything to make this work

Good luck!
 

Analysis:

The following is for information purposes only.

The following information contains the relevant information from the blue screen analysis:

 

Quote

**************************Fri May 13 18:58:08.034 2016 (UTC - 4:00)**************************

Loading Dump File [C:\Users\john\SysnativeBSODApps\051316-18328-01.dmp]

Windows 10 Kernel Version 10586 MP (8 procs) Free x64

Built by: 10586.306.amd64fre.th2_release_sec.160422-1850

System Uptime:  0 days 0:11:02.792

*** WARNI  NG: Unable to verify timestamp for mwac.sys

*** ERROR: Module load completed but symbols could not be loaded for mwac.sys

Probably caused by :  fwpkclnt.sys ( fwpkclnt!FwpsConstructIpHeaderForTransportPacket0+1dd )

BugCheck 19, {20, fffe0014e05f780, ffffe0014e05f7a0, 4020017}

BugCheck Info: BAD_POOL_HEADER (19)

Arguments:

Arg1: 0000000000000020, a pool block header size is corrupt.

Arg2: ffffe0014e05f780, The pool entry we were looking for within the page.

Arg3: ffffe0014e05f7a0, The next pool entry.

Arg4: 0000000004020017, (reserved)

 

BUGCHECK_STR:  0x19_20

PROCESS_NAME:  mbamservice.ex

FAILURE_BUCKET_ID: 0x19_20_fwpkclnt!FwpsConstructIpHeaderForTransportPacket0

  BIOS Version                  F3

  BIOS Release Date             05/28/2015

  Manufacturer                  Gigabyte Technology Co., Ltd.

  Product Name                  To be filled by O.E.M.

  Baseboard Product             990FXA-UD3

¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``

The rest of the memory dump summaries are hidden in the Spoiler tag below.  Click on "Show" to reveal them.

 

 

 

**************************Fri May 13 18:46:22.156 2016 (UTC - 4:00)**************************

 

Loading Dump File [C:\Users\john\SysnativeBSODApps\051316-17468-01.dmp]

 

Windows 10 Kernel Version 10586 MP (8 procs) Free x64

 

Built by:

1058

6.306.amd64fre.th2_release_sec.160422-1850

 

System Uptime:

0 days 0:08:45.913

 

*** WARNING: Unable to verify timestamp for mwac.sys

 

*** ERROR: Module load completed but symbols could not be loaded for mwac.sys

 

Probably caused by :

fwpkclnt.sys ( fwpkclnt!FwpsConstructIpHeaderForTransportPacket0+1dd )

 

BugCheck

19, {20, ffffe0015eb70770, ffffe0015eb70790, 402000c}

 

BugCheck Info:

BAD_POOL_HEADER (19)

 

Arguments:

 

Arg1: 0000000000000020, a pool block header size is corrupt.

 

Arg2: ffffe0015eb70770, The pool entry we were looking for within the page.

 

Arg3: ffffe0015eb70790, The next pool entry.

 

Arg4: 000000000402000c, (reserved)

 

BUGCHECK_STR:  0x19_20

 

PROCESS_NAME:  mbamservice.ex

 

FAILURE_BUCKET_ID:

0x19_20_fwpkclnt!FwpsConstructIpHeaderForTransportPacket0

 

  BIOS Version                  F3

 

  BIOS Release Date             05/28/2015

 

  Manufacturer                  Gigabyte Technology Co., Ltd.

 

  Product Name                  To be filled by O.E.M.

 

  Baseboard Product             990FXA-UD3

 

¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``

 

**************************Fri May 13 17:52:32.580 2016 (UTC - 4:00)**************************

 

Loading Dump File [C:\Users\john\SysnativeBSODApps\051316-15375-01.dmp]

 

*** WARNING: Unable to verify timestamp for ntoskrnl.exe

 

*** ERROR: Module load completed but symbols could not be loaded for ntoskrnl.exe

 

Windows 10 Kernel Version 10586 MP (8 procs) Free x64

 

Built by:

1058

6.306.amd64fre.th2_release_sec.160422-1850

 

System Uptime:

0 days 0:04:22.342

 

*** WARNING: Unable to verify timestamp for mwac.sys

 

*** ERROR: Module load completed but symbols could not be loaded for mwac.sys

 

Probably caused by :

fwpkclnt.sys ( fwpkclnt!FwpsConstructIpHeaderForTransportPacket0+1dd )

 

BugCheck

19, {20, ffffe0016a595290, ffffe0016a5952b0, 4020029}

 

BugCheck Info:

BAD_POOL_HEADER (19)

 

Arguments:

 

Arg1: 0000000000000020, a pool block header size is corrupt.

 

Arg2: ffffe0016a595290, The pool entry we were looking for within the page.

 

Arg3: ffffe0016a5952b0, The next pool entry.

 

Arg4: 0000000004020029, (reserved)

 

BUGCHECK_STR:  0x19_20

 

PROCESS_NAME:  mbamservice.ex

 

FAILURE_BUCKET_ID:

0x19_20_fwpkclnt!FwpsConstructIpHeaderForTransportPacket0

 

  BIOS Version                  F3

 

  BIOS Release Date             05/28/2015

 

  Manufacturer                  Gigabyte Technology Co., Ltd.

 

  Product Name                  To be filled by O.E.M.

 

  Baseboard Product             990FXA-UD3

 

¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``

 

**************************Fri May 13 17:45:51.968 2016 (UTC - 4:00)**************************

 

Loading Dump File [C:\Users\john\SysnativeBSODApps\051316-18546-01.dmp]

 

Windows 10 Kernel Version 10586 MP (8 procs) Free x64

 

Built by:

1058

6.306.amd64fre.th2_release_sec.160422-1850

 

System Uptime:

0 days 0:06:14.728

 

*** WARNING: Unable to verify timestamp for mwac.sys

 

*** ERROR: Module load completed but symbols could not be loaded for mwac.sys

 

Probably caused by :

fwpkclnt.sys ( fwpkclnt!FwpsConstructIpHeaderForTransportPacket0+1dd )

 

BugCheck

19, {20, ffffe000c01b7d20, ffffe000c01b7d40, 4020010}

 

BugCheck Info:

BAD_POOL_HEADER (19)

 

Arguments:

 

Arg1: 0000000000000020, a pool block header size is corrupt.

 

Arg2: ffffe000c01b7d20, The pool entry we were looking for within the page.

 

Arg3: ffffe000c01b7d40, The next pool entry.

 

Arg4: 0000000004020010, (reserved)

 

BUGCHECK_STR:  0x19_20

 

PROCESS_NAME:  mbamservice.ex

 

FAILURE_BUCKET_ID:

0x19_20_fwpkclnt!FwpsConstructIpHeaderForTransportPacket0

 

  BIOS Version                  F3

 

  BIOS Release Date             05/28/2015

 

  Manufacturer                  Gigabyte Technology Co., Ltd.

 

  Product Name                  To be filled by O.E.M.

 

  Baseboard Product             990FXA-UD3

 

¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``

 

**************************Sat Apr 30 00:04:28.076 2016 (UTC - 4:00)**************************

 

Loading Dump File [C:\Users\john\SysnativeBSODApps\043016-10812-01.dmp]

 

Windows 10 Kernel Version 10586 MP (8 procs) Free x64

 

Built by:

1058

6.212.amd64fre.th2_release_sec.160328-1908

 

System Uptime:

1 days 1:05:46.832

 

Probably caused by :

ntkrnlmp.exe ( nt!SwapContext+101 )

 

BugCheck

3B, {c0000005, fffff802c6fbe5b1, ffffd00024577d70, 0}

 

BugCheck Info:

SYSTEM_SERVICE_EXCEPTION (3b)

 

Arguments:

 

Arg1: 00000000c0000005, Exception code that caused the bugcheck

 

Arg2: fffff802c6fbe5b1, Address of the instruction which caused the bugcheck

 

Arg3: ffffd00024577d70, Address of the context record for the exception that caused the bugcheck

 

Arg4: 0000000000000000, zero.

 

BUGCHECK_STR:  0x3B

 

DEFAULT_BUCKET_ID:  WIN8_DRIVER_FAULT

 

PROCESS_NAME:  ts3client_win6

 

FAILURE_BUCKET_ID:

0x3B_nt!SwapContext

 

  BIOS Version                  F3

 

  BIOS Release Date             05/28/2015

 

  Manufacturer                  Gigabyte Technology Co., Ltd.

 

  Product Name                  To be filled by O.E.M.

 

  Baseboard Product             990FXA-UD3

 

¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``

 

 

 

 

3rd Party Drivers:

The following is for information purposes only.

My recommendations were given above. The drivers that follow belong to software or devices that were not developed by Microsoft.

Any drivers in red should be updated/replaced/removed.

You can find links to the driver information and where to update the drivers in the section after the code box:

 

**************************Fri May 13 18:58:08.034 2016 (UTC - 4:00)**************************
    PxHlpa64.sys                Tue Apr 24 13:26:29 2012 (4F96E245)
    PDFsFilter.sys              Thu Aug 23 17:57:13 2012 (5036A739)
    lvrs64.sys                  Mon Oct 22 22:11:24 2012 (5085FCCC)
    lvuvc64.sys                 Mon Oct 22 22:12:08 2012 (5085FCF8)
    rawdsk3.sys                 Tue Feb 11 16:10:17 2014 (52FA91B9)
    xspltspk.sys                Wed Jun 11 16:59:54 2014 (5398C34A)
    mwac.sys                    Tue Jun 17 22:07:00 2014 (53A0F444)
    mvxxmm.sys                  Mon Apr 13 21:49:46 2015 (552C723A)
    mvs91xx.sys                 Mon Apr 13 21:49:58 2015 (552C7246)
    CorsairVBusDriver.sys       Wed May  6 09:10:40 2015 (554A12D0)
    CorsairVHidDriver.sys       Wed May  6 09:10:41 2015 (554A12D1)
    RTKVHD64.sys                Tue Jul  7 07:13:02 2015 (559BB43E)
    rt640x64.sys                Thu Jul 23 04:53:50 2015 (55B0AB9E)
    MBAMSwissArmy.sys           Wed Jul 29 00:26:01 2015 (55B855D9)
    mbam.sys                    Tue Aug 11 13:35:19 2015 (55CA3257)
    bdvedisk.sys                Mon Nov 23 06:38:07 2015 (5652FA9F)
    gzflt.sys                   Mon Dec 14 09:43:36 2015 (566ED598)
    AtihdWT6.sys                Sun Jan 17 10:05:05 2016 (569BADA1)
    trufos.sys                  Fri Feb  5 13:10:19 2016 (56B4E58B)
    bdfwfpf.sys                 Tue Feb  9 07:12:25 2016 (56B9D7A9)
    ignis.sys                   Fri Feb 12 08:24:54 2016 (56BDDD26)
    avc3.sys                    Fri Mar 11 10:16:09 2016 (56E2E139)
    avckf.sys                   Fri Mar 11 10:19:20 2016 (56E2E1F8)
    atikmpag.sys                Fri Apr 15 16:10:56 2016 (57114AD0)
    amdacpksd.sys               Fri Apr 15 16:20:47 2016 (57114D1F)
    atikmdag.sys                Fri Apr 15 16:47:27 2016 (5711535F)
    ¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
    **************************Fri May 13 17:52:32.580 2016 (UTC - 4:00)**************************
    ssudbus.sys                 Tue Dec  1 21:04:16 2015 (565E51A0)
    ssudmdm.sys                 Tue Dec  1 21:04:20 2015 (565E51A4)
    ¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
    **************************Sat Apr 30 00:04:28.076 2016 (UTC - 4:00)**************************
    atikmpag.sys                Sun Apr  3 21:31:54 2016 (5701C40A)
    atikmdag.sys                Sun Apr  3 22:46:46 2016 (5701D596)
    amdacpksd.sys               Sun Apr  3 23:16:29 2016 (5701DC8D)
    

 

 

http://www.carrona.org/drivers/driver.php?id=PxHlpa64.sys
http://www.carrona.org/drivers/driver.php?id=PDFsFilter.sys
http://www.carrona.org/drivers/driver.php?id=lvrs64.sys
http://www.carrona.org/drivers/driver.php?id=lvuvc64.sys
http://www.carrona.org/drivers/driver.php?id=rawdsk3.sys
http://www.carrona.org/drivers/driver.php?id=xspltspk.sys
http://www.carrona.org/drivers/driver.php?id=mwac.sys
http://www.carrona.org/drivers/driver.php?id=mvxxmm.sys
http://www.carrona.org/drivers/driver.php?id=mvs91xx.sys
http://www.carrona.org/drivers/driver.php?id=CorsairVBusDriver.sys
http://www.carrona.org/drivers/driver.php?id=CorsairVHidDriver.sys
http://www.carrona.org/drivers/driver.php?id=RTKVHD64.sys
http://www.carrona.org/drivers/driver.php?id=rt640x64.sys
http://www.carrona.org/drivers/driver.php?id=MBAMSwissArmy.sys
http://www.carrona.org/drivers/driver.php?id=mbam.sys
http://www.carrona.org/drivers/driver.php?id=bdvedisk.sys
http://www.carrona.org/drivers/driver.php?id=gzflt.sys
http://www.carrona.org/drivers/driver.php?id=AtihdWT6.sys
http://www.carrona.org/drivers/driver.php?id=trufos.sys
http://www.carrona.org/drivers/driver.php?id=bdfwfpf.sys
http://www.carrona.org/drivers/driver.php?id=ignis.sys
http://www.carrona.org/drivers/driver.php?id=avc3.sys
http://www.carrona.org/drivers/driver.php?id=avckf.sys
http://www.carrona.org/drivers/driver.php?id=atikmpag.sys
http://www.carrona.org/drivers/driver.php?id=amdacpksd.sys
http://www.carrona.org/drivers/driver.php?id=atikmdag.sys
http://www.carrona.org/drivers/driver.php?id=ssudbus.sys
http://www.carrona.org/drivers/driver.php?id=ssudmdm.sys
http://www.carrona.org/drivers/driver.php?id=atikmpag.sys
http://www.carrona.org/drivers/driver.php?id=atikmdag.sys
http://www.carrona.org/drivers/driver.php?id=amdacpksd.sys

Edited May 14, 2016 by usasma