Blue Screen of Death

[A10 Tactical]

I have been getting blue screens a lot in the last few days on my computer:

Windows 7 Home Premium 64 Bit
Dell Inspiron 545
Pentium Dual Core ES400 @ 2.70ghz
RAM 6 GB

Recently when I login to windows and sometimes its right when im in the middle of work. I have run Ad-aware, Kasperky, Ccleaner and Super Anti Spyware. Super did find 3 bad looking files which I was able to successfully remove but alas the blue screens still come. I was able to save some reports from these blue screen crashes using a program called "Blue Screen View". Below are the pasted results. Report 1 being the most recent report. "Report Bottom" was an entry that was on the bottom portion of the Blue Screen View program and the only one in that section that was actually highlighted in red so I figured I should add that to this message as well. Please any help would be greatly appreciated. There have been no hardware additions to this computer either, its completely factory.

Report 1
==================================================
Dump File : 012412-32588-01.dmp
Crash Time : 1/24/2012 10:15:21 PM
Bug Check String : WORKER_INVALID
Bug Check Code : 0x000000e4
Parameter 1 : 00000000`00000001
Parameter 2 : fffff880`02de0c00
Parameter 3 : 00000000`00000000
Parameter 4 : 00000000`00000000
Caused By Driver : ntoskrnl.exe
Caused By Address : ntoskrnl.exe+71f00
File Description : NT Kernel & System
Product Name : Microsoft® Windows® Operating System
Company : Microsoft Corporation
File Version : 6.1.7600.16385 (win7_rtm.090713-1255)
Processor : x64
Crash Address : ntoskrnl.exe+71f00
Stack Address 1 :
Stack Address 2 :
Stack Address 3 :
Computer Name :
Full Path : C:\Windows\Minidump\012412-32588-01.dmp
Processors Count : 2
Major Version : 15
Minor Version : 7600
Dump File Size : 276,440
==================================================

Report 2
==================================================
Dump File : 012412-23758-01.dmp
Crash Time : 1/24/2012 10:13:44 PM
Bug Check String : DRIVER_OVERRAN_STACK_BUFFER
Bug Check Code : 0x000000f7
Parameter 1 : 00002b99`05b545d0
Parameter 2 : 00002b99`2ddfa232
Parameter 3 : ffffd466`d2205dcd
Parameter 4 : 00000000`00000000
Caused By Driver : msrpc.sys
Caused By Address : msrpc.sys+1616
File Description :
Product Name :
Company :
File Version :
Processor : x64
Crash Address : ntoskrnl.exe+71f00
Stack Address 1 :
Stack Address 2 :
Stack Address 3 :
Computer Name :
Full Path : C:\Windows\Minidump\012412-23758-01.dmp
Processors Count : 2
Major Version : 15
Minor Version : 7600
Dump File Size : 276,440
==================================================

Report 3
==================================================
Dump File : 012412-23368-01.dmp
Crash Time : 1/24/2012 10:12:15 PM
Bug Check String : SYSTEM_SERVICE_EXCEPTION
Bug Check Code : 0x0000003b
Parameter 1 : 00000000`c0000005
Parameter 2 : fffff800`02d7157a
Parameter 3 : fffff880`01f65c90
Parameter 4 : 00000000`00000000
Caused By Driver : ntoskrnl.exe
Caused By Address : ntoskrnl.exe+71f00
File Description : NT Kernel & System
Product Name : Microsoft® Windows® Operating System
Company : Microsoft Corporation
File Version : 6.1.7600.16385 (win7_rtm.090713-1255)
Processor : x64
Crash Address : ntoskrnl.exe+71f00
Stack Address 1 :
Stack Address 2 :
Stack Address 3 :
Computer Name :
Full Path : C:\Windows\Minidump\012412-23368-01.dmp
Processors Count : 2
Major Version : 15
Minor Version : 7600
Dump File Size : 276,440
==================================================

Report 4
==================================================
Dump File : 012412-24476-01.dmp
Crash Time : 1/24/2012 10:10:44 PM
Bug Check String : IRQL_NOT_LESS_OR_EQUAL
Bug Check Code : 0x0000000a
Parameter 1 : 00000000`00000008
Parameter 2 : 00000000`00000002
Parameter 3 : 00000000`00000000
Parameter 4 : fffff800`02a9f591
Caused By Driver : ataport.SYS
Caused By Address : ataport.SYS+161a0
File Description :
Product Name :
Company :
File Version :
Processor : x64
Crash Address : ntoskrnl.exe+71f00
Stack Address 1 :
Stack Address 2 :
Stack Address 3 :
Computer Name :
Full Path : C:\Windows\Minidump\012412-24476-01.dmp
Processors Count : 2
Major Version : 15
Minor Version : 7600
Dump File Size : 276,440
==================================================

Report 5
==================================================
Dump File : 012412-23805-01.dmp
Crash Time : 1/24/2012 10:09:36 PM
Bug Check String : IRQL_NOT_LESS_OR_EQUAL
Bug Check Code : 0x0000000a
Parameter 1 : 00000000`00000000
Parameter 2 : 00000000`00000002
Parameter 3 : 00000000`00000000
Parameter 4 : fffff800`02aa6c06
Caused By Driver : ntoskrnl.exe
Caused By Address : ntoskrnl.exe+71f00
File Description : NT Kernel & System
Product Name : Microsoft® Windows® Operating System
Company : Microsoft Corporation
File Version : 6.1.7600.16385 (win7_rtm.090713-1255)
Processor : x64
Crash Address : ntoskrnl.exe+71f00
Stack Address 1 :
Stack Address 2 :
Stack Address 3 :
Computer Name :
Full Path : C:\Windows\Minidump\012412-23805-01.dmp
Processors Count : 2
Major Version : 15
Minor Version : 7600
Dump File Size : 276,440
==================================================

Report 6
==================================================
Dump File : 012412-23899-01.dmp
Crash Time : 1/24/2012 10:08:04 PM
Bug Check String : KMODE_EXCEPTION_NOT_HANDLED
Bug Check Code : 0x0000001e
Parameter 1 : ffffffff`c0000005
Parameter 2 : fffff800`02a784d8
Parameter 3 : 00000000`00000000
Parameter 4 : ffffffff`ffffffff
Caused By Driver : atapi.sys
Caused By Address : atapi.sys+16e4
File Description :
Product Name :
Company :
File Version :
Processor : x64
Crash Address : ntoskrnl.exe+71f00
Stack Address 1 :
Stack Address 2 :
Stack Address 3 :
Computer Name :
Full Path : C:\Windows\Minidump\012412-23899-01.dmp
Processors Count : 2
Major Version : 15
Minor Version : 7600
Dump File Size : 276,448
==================================================

Report Bottom
==================================================
Filename : ntoskrnl.exe
Address In Stack : ntoskrnl.exe+2155a8
From Address : fffff800`02a65000
To Address : fffff800`03042000
Size : 0x005dd000
Time Stamp : 0x4a5bc600
Time String : 7/13/2009 5:40:48 PM
Product Name : Microsoft® Windows® Operating System
File Description : NT Kernel & System
File Version : 6.1.7600.16385 (win7_rtm.090713-1255)
Company : Microsoft Corporation
Full Path : C:\Windows\system32\ntoskrnl.exe
==================================================

 

[signor]

From power off->Tap F8 repeatedly-> when given the options select "disable automatic restart"-> wait for problem to happen again-> write down the first 3 0x####### stop code errors-> post results->??????????-> proffit.

In all honesty theres too much bullshit posted, just give us ~ 3 stopcode errors from the actual bsod and there like a 99% chance we can tell you the steps to take.

 

[fixxxer113]

First of all, if it's under warranty, send it in for tech support.

Since you have all the error codes you can try this also:

Open Google and type - let's say for the first BSOD - "windows kb 0x000000e4"

The first result should be from the support.microsoft.com/KB/ site. That's the site where all those errors are organized in a Knowledge Base along with solutions. Read what it says. They usually give advice on manually dealing with the error and some times there is an automatic hotfix you can click on and have the system resolve it by itself.

 

[A10 Tactical]

Thanks for the replies guys. It turns out it was a nasty little rootkit that I was able to remove with TDSSKiller. Problem looks to be be solved

 

[gamerk316]

Well, it clearly looks like a driver problem to me. Rootkit could explain the issue.