Windows 10: Dpc_watchdog_latency bsod error

All of them please, it may take some time depending on the speed of your pc.

 

Running them - will post results soon.

 

Attachment 144719Attachment 144720Attachment 144721

Here are the results. The online scan kept on freezing, so I didnt post those results, and Windows Defender didnt pick up any viruses

 

I would recommend to give your pc a very thorough AV attention, best would be with someone else who knows what is on your system. It may be just some adware as far as I've seen, but adware can be very nasty and cause lots of issues too.

From this point I'll let @zbook continue *Smile

 

Thank you for all your help and advice *Smile. Will Windows defender suffice as my antivirus or should I get another program?

 

These are the remaining malware scan logs per post #12
SUPERAntiSpyware | Remove Malware | Remove Spyware - AntiMalware, AntiSpyware, AntiAdware!
Free Virus Scan | Online Virus Scan from ESET ESET
Please upload the scan logs.


Code: -Scan Summary-Scan Type: Threat Scan Result: Completed Objects Scanned: 413961 Threats Detected: 5 Threats Quarantined: 0 (No malicious items detected) Time Elapsed: 1 min, 32 sec[/quote] Code: File: 5RiskWare.BitCoinMiner, C:\USERS\NASEE\APPDATA\ROAMING\MICROSOFT\WINDOWS\START MENU\PROGRAMS\STARTUP\WINDOWSUPDATES.VBS, No Action By User, [113], [415969],1.0.2397 PUP.Optional.MindSpark, C:\USERS\NASEE\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\LOCAL STORAGE\http_easypdfcombine.dl.myway.com_0.localstorage, No Action By User, [284], [240305],1.0.2397 PUP.Optional.MindSpark, C:\USERS\NASEE\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\LOCAL STORAGE\http_easypdfcombine.dl.myway.com_0.localstorage-journal, No Action By User, [284], [240305],1.0.2397 PUP.Optional.MindSpark, C:\USERS\NASEE\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\LOCAL STORAGE\http_easypdfcombine.dl.tb.ask.com_0.localstorage, No Action By User, [284], [240306],1.0.2397 PUP.Optional.MindSpark, C:\USERS\NASEE\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\LOCAL STORAGE\http_easypdfcombine.dl.tb.ask.com_0.localstorage-journal, No Action By User, [284], [240306],1.0.2397[/quote] Code: Deleted: Driver Booster Scheduler[/quote] Code: Deleted: C:\Windows\SysNative\drivers\netfilter2.sysDeleted: C:\Users\nasee\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\importantupdates.vbs Deleted: C:\Users\nasee\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Driver Booster.lnk[/quote] Code: Deleted: C:\Users\nasee\AppData\Roaming\importantupdates[/quote] Code: SearchProvider deleted: Search the web (Babylon) - search.babylon.comSearchProvider deleted: Softonic EN - throttle.en.softonic.com SearchProvider deleted: Ask Search - ask.com SearchProvider deleted: Search the web (Babylon) - search.babylon.com Startpage deleted: Google Startpage deleted: thesearchpage.info Startpage deleted: Google Startpage deleted: Gmail Startpage deleted: Reference.com - What's Your Question Startpage deleted: Google Scholar Startpage deleted: YouTube Startpage deleted: Google Startpage deleted: thesearchpage.info Startpage deleted: Google Startpage deleted: Gmail Startpage deleted: Reference.com - What's Your Question Startpage deleted: Google Scholar Startpage deleted: YouTube Startpage deleted: Google Startpage deleted: thesearchpage.info Startpage deleted: http://google.com/ Startpage deleted: https://mail.google.com/mail/ Startpage deleted: http://reference.com/ Startpage deleted: http://scholar.google.com/ Startpage deleted: http://youtube.com/ Startpage deleted: https://www.google.com/ Startpage deleted: http://websearch.thesearchpage.info...&hid=8420786197904792575&lg=EN&cc=ZA&unqvl=74 Startpage deleted: http://google.com/ Startpage deleted: https://mail.google.com/mail/ Startpage deleted: http://reference.com/ Startpage deleted: http://scholar.google.com/ Startpage deleted: http://youtube.com/ Startpage deleted: https://www.google.com/ Startpage deleted: http://websearch.thesearchpage.info...&hid=8420786197904792575&lg=EN&cc=ZA&unqvl=74 Startpage deleted: http://google.com/ Startpage deleted: https://mail.google.com/mail/ Startpage deleted: http://reference.com/ Startpage deleted: http://scholar.google.com/ Startpage deleted: http://youtube.com/ Startpage deleted: https://www.google.com/ Startpage deleted: http://websearch.thesearchpage.info...&hid=8420786197904792575&lg=EN&cc=ZA&unqvl=74 Startpage deleted: http://google.com/ Startpage deleted: https://mail.google.com/mail/ Startpage deleted: http://reference.com/ Startpage deleted: http://scholar.google.com/ Startpage deleted: http://youtube.com/ Startpage deleted: https://www.google.com/ Startpage deleted: http://websearch.thesearchpage.info...&hid=8420786197904792575&lg=EN&cc=ZA&unqvl=74 Startpage deleted: http://google.com/ Startpage deleted: https://mail.google.com/mail/ Startpage deleted: http://reference.com/ Startpage deleted: http://scholar.google.com/ Startpage deleted: http://youtube.com/[/quote]

These are some items noted in the zip logs (msinfo32, dxdiag, event, etc.)

Some of these can be worked on after the rule in/out malware is completed.
1) chkdsk /x /r on each drive
Post the result of each chkdsk into the thread:
Read Chkdsk Log in Event Viewer in Windows 10 Windows 10 Performance Maintenance Tutorials
2) turn off windows fast startup:
Turn On or Off Fast Startup in Windows 10 Windows 10 Performance Maintenance Tutorials
3) open administrative command prompt and type or copy and paste these commands:
a) sfc /scannow
b) dism /online /cleanup-image /restorehealth
c) When these have completed > right click on the top bar or title bar of the administrative command prompt box > left click on edit then select all > right click on the top bar again > left click on copy > paste into the thread
d) msconfig (in the pop up system configuration > move the dot from normal startup to selective startup > uncheck load startup items > click service tab > in left lower corner check hide all Microsoft services > in the lower right side click disable all > click apply or ok > do not reboot)

e) taskmgr (in the pop up task manager > click on the start up tab > click on status so that the column sorts with enable rising to the top > right click on each row with enable and change to disable)

https://support.microsoft.com/en-us/...oot-in-windows
How to perform a Clean Boot in Windows 10 - TechNet Articles - United States (English) - TechNet Wiki

f) shutdown /r (you will reboot the computer so that it is in clean boot)

Evaluate the performance on your computer in clean boot during typical use.
Are the boots faster or slower?
Are the shutdowns faster or slower?
How has the audio and video performance changed? Is it better, worse, or the same?
Continue using clean boot indefinitely to monitor performance.

4) Make sure that there is no over clocking while troubleshooting.
To ensure that there are no improper bios settings please reset the bios.
Sometimes there can be failure to boot after resetting the bios.
So please make sure your files are backed up.
Please make a backup image with Macrium:

Macrium Software | Macrium Reflect Free: Macrium Software | Your image is everything

And please create a restore point.

How to Clear Your Computers CMOS to Reset BIOS Settings:
How to Clear Your Computers CMOS to Reset BIOS Settings

3 Ways to Reset Your BIOS - wikiHow:
3 Ways to Reset Your BIOS - wikiHow

5) The title of the thread displays DPC WATCHDOG LATENCY BSOD but there was no bsod file in the zip.
The logs indicate multiple crashes.
There were also multiple: Dump file creation failed due to error during dump creation


6) check to see that the system settings are optimally configured to view bsod windows as well as create and save dump files:
Keyboard: win + r keys simultaneously > type or copy and paste: sysdm.cpl > click advanced tab > under startup and recover click settings > under system failure un-check automatically restart

Please use the Microsoft snipping tool or paint to post an image of the startup and recovery settings into the thread.

See this link: BSOD Finding and fixing them - Microsoft Community: BSOD Finding and fixing them - Microsoft Community


7) download and install: Whocrashed:
http://www.resplendence.com/downloads
8) on Whocrashed click on analyze and post any recent analysis of any mini or memory.dmp files
9) on Whocrashed view above analyze and click on tools > crash dump test > type ACCEPT > check to see if a dump was created by the test dump. Please post the whocrashed analysis into the thread.

10) Was there software used that removed some windows dll files?
11) What is the history of malware?
12) Had any AV program quarantined or removed any dll files?

13) These 4 dll files are missing:
libgdk_pixbuf-2.0-0.dll
libgdk-win32-2.0-0.dll
libcairo-2.dll
libglib-2.0-0.dll
Were there any noted errors or problems?

14) AUDIODG.EXE or C:\WINDOWS\system32\AUDIODG.EXE was a noted faulting application
It was associated with 2 faulting modules:
ICEsoundAPO64.dll or C:\WINDOWS\system32\ICEsoundAPO64.dll
ntdll.dl or C:\WINDOWS\SYSTEM32\ntdll.dll
Were there any noted errors or problems?

15) are your files backed up?
16) have you made an image of the drive and saved the image to another drive?
17) have you made a restore point?
18) are you able to perform a clean install if it is needed ? (delete partitions, format the drive, make an un-allocated drive, and reinstall windows 10 version 1703)







Code: Windows failed fast startup with error status 0xC00000D4.[/quote] Code: Dump file creation failed due to error during dump creation.[/quote] Code: The WinRM service cannot migrate the listener with Address * and Transport HTTP. A listener that has the same Address and Transport configuration already exists.[/quote] Code: Windows cannot store Bluetooth authentication codes (link keys) on the local adapter. Bluetooth keyboards might not work in the system BIOS during startup.[/quote] Code: Application popup: Main.exe - System Error : The code execution cannot proceed because libgdk_pixbuf-2.0-0.dll was not found. Reinstalling the program may fix this problem.[/quote] Code: Application popup: Main.exe - System Error : The code execution cannot proceed because libgdk-win32-2.0-0.dll was not found. Reinstalling the program may fix this problem.[/quote] Code: Application popup: Main.exe - System Error : The code execution cannot proceed because libcairo-2.dll was not found. Reinstalling the program may fix this problem.[/quote] Code: Application popup: Main.exe - System Error : The code execution cannot proceed because libglib-2.0-0.dll was not found. Reinstalling the program may fix this problem.[/quote] Code: Volume G: (\Device\HarddiskVolume10) needs to be taken offline to perform a Full Chkdsk. Please run "CHKDSK /F" locally via the command line, or run "REPAIR-VOLUME <drive:>" locally or remotely via PowerShell.[/quote] Code: The oldest shadow copy of volume C: was deleted to keep disk space usage for shadow copies of volume C: below the user defined limit.[/quote] Code: The application \Device\HarddiskVolume3\Windows\System32\audiodg.exe with process id 22944 stopped the removal or ejection for the device HDAUDIO\FUNC_01&VEN_10EC&DEV_0235&SUBSYS_104315E0&REV_1000\4&1f57fe61&1&0001.[/quote] Code: 7/18/2017 12:01 PM Application Error Faulting application name: AUDIODG.EXE, version: 10.0.15063.447, time stamp: 0xe365c782 Faulting module name: ntdll.dll, version: 10.0.15063.447, time stamp: 0xa329d3a8 Exception code: 0xc0000005 Fault offset: 0x000000000001445d Faulting process id: 0x134c Faulting application start time: 0x01d2ffbd9a25a80e Faulting application path: C:\WINDOWS\system32\AUDIODG.EXE Faulting module path: C:\WINDOWS\SYSTEM32\ntdll.dll Report Id: b54fd36f-bad7-4b5f-8292-7cbd39cac217 Faulting package full name: Faulting package-relative application ID:[/quote] Code: 7/17/2017 8:29 AM Application Error Faulting application name: AUDIODG.EXE, version: 10.0.15063.447, time stamp: 0xe365c782 Faulting module name: ICEsoundAPO64.dll, version: 1.0.0.26, time stamp: 0x5810ba4f Exception code: 0xc0000409 Fault offset: 0x000000000003185c Faulting process id: 0x14f14 Faulting application start time: 0x01d2fed4a2854ae4 Faulting application path: C:\WINDOWS\system32\AUDIODG.EXE Faulting module path: C:\WINDOWS\system32\ICEsoundAPO64.dll Report Id: e71031fd-586b-4c0d-a095-6d53dc1b3c6d Faulting package full name: Faulting package-relative application ID:[/quote] Code: Windows Error Reporting:+++ WER0 +++:Fault bucket 120787481823, type 4Event Name: APPCRASHResponse: Not availableCab Id: 0Problem signature1: AUDIODG.EXEP2: 10.0.15063.447P3: e365c782P4: ntdll.dllP5: 10.0.15063.447P6: a329d3a8P7: c0000005P8: 000000000001445dP9: P10:[/quote] Code: +++ WER2 +++:Fault bucket 127760220308, type 5Event Name: ScriptedDiagFailureResponse: Not availableCab Id: 0Problem signature1: Microsoft Corporation.AudioPlaybackDiagnostic.4.2P2: DefaultP3: 1.0.0.0P4: DefaultP5: P6: P7: P8: P9: P10:[/quote] Code: +++ WER6 +++:Fault bucket 116404734249, type 5Event Name: BEX64Response: Not availableCab Id: 0Problem signature1: AUDIODG.EXEP2: 10.0.15063.447P3: e365c782P4: ICEsoundAPO64.dllP5: 1.0.0.26P6: 5810ba4fP7: 000000000003185cP8: c0000409P9: 0000000000000007P10:[/quote] Code: +++ WER8 +++:Fault bucket 120787445887, type 4Event Name: APPCRASHResponse: Not availableCab Id: 0Problem signature1: AUDIODG.EXEP2: 10.0.15063.447P3: e365c782P4: ntdll.dllP5: 10.0.15063.447P6: a329d3a8P7: c0000005P8: 00000000000a8e3dP9: P10:[/quote]

 

Attachment 144772 Chkdsk results

For some reason the Online Virus scan keeps freezing on my computer, so I wasnt able to get results from it.

Attachment 144773 Super Antispyware results.

Attachment 144774 The CMD stuff pasted

Attachment 144775

BIOS updated to latest version with default settings

 

System Information (local)
Computer name: DESKTOP-FIRKJTV
Windows version: Windows 10 , 10.0, build: 15063
Windows dir: C:\WINDOWS
Hardware: GL553VD, ASUSTeK COMPUTER INC.
CPU: GenuineIntel Intel(R) Core(TM) i5-7300HQ CPU @ 2.50GHz Intel586, level: 6
4 logical processors, active mask: 15
RAM: 17023127552 bytes total



Crash Dump Analysis
Crash dump directory: C:\WINDOWS\Minidump

Crash dumps are enabled on your computer.

On Tue 7/11/2017 8:41:15 PM your computer crashed
crash dump file: C:\WINDOWS\memory.dmp
This was probably caused by the following module: Unknown (0xFFFFF803143E2348)
Bugcheck code: 0x133 (0x0, 0x501, 0x500, 0xFFFFF803143E2348)
Error: DPC_WATCHDOG_VIOLATION
Bug check description: The DPC watchdog detected a prolonged run time at an IRQL of DISPATCH_LEVEL or above.
This appears to be a typical software driver bug and is not likely to be caused by a hardware problem. This problem might also be caused because of overheating (thermal issue).
A third party driver was identified as the probable root cause of this system error.
Google query: DPC_WATCHDOG_VIOLATION




Conclusion
One crash dump has been found and analyzed.
Read the topic general suggestions for troubleshooting system crashes for more information.

Note that it's not always possible to state with certainty whether a reported driver is responsible for crashing your system or that the root cause is in another module. Nonetheless it's suggested you look for updates for the products that these drivers belong to and regularly visit Windows update or enable automatic updates for Windows. In case a piece of malfunctioning hardware is causing trouble, a search with Google on the bug check errors together with the model name and brand of your computer may help you investigate this further.

WhoCrashed Results

 

Also, I cannot afford to reinstall Windows as I need my laptop to be in a working condition for the next month or so, due to business reasons.

 

On Thu 7/20/2017 2:32:51 PM your computer crashed
crash dump file: C:\WINDOWS\memory.dmp
This was probably caused by the following module: rspcrash64.sys (rspCrash64+0x108B)
Bugcheck code: 0xDEADDEAD (0x0, 0x0, 0x19979B2D, 0x3C2A58ED)
Error: MANUALLY_INITIATED_CRASH1
file path: C:\WINDOWS\system32\drivers\rspcrash64.sys
product: WhoCrashed
company: Resplendence Software Projects Sp.
description: Resplendence WhoCrashed Crash Dump Test
Bug check description: This indicates that the user deliberately initiated a crash dump from either the kernel debugger or the keyboard.
This bug check belongs to the crash dump test that you have performed with WhoCrashed or other software. It means that a crash dump file was properly written out.

Also, booting seems slower now. Taking above 30 secs to boot, which is confusing because I have an SSD installed.
I believe that the various Antispyware, malware and antivirus programs that I have been running may have deleted some dll files. Now, for some reason, when I press the fn key some of the shortcuts do not work, for example fn + f3 would lower the backlit keyboard backlit brightness, but now it doesn't work. The f3 button performs its function fine alone tho. Is there any program which would allow me to restore my dll files to their previous state, and fix these issues?

 

Updated LatencyMon results after trying most of the steps you have given me


Attachment 144792

Attachment 144793

 

Memory items scanned : 1062Memory threats detected : 0
Registry items scanned : 69684
Registry threats detected : 0
File items scanned : 31512
File threats detected : 1082

Post #12: One more scan not yet submitted (has the performance of this scan changed in clean boot?)
ESET Online Scanner

Please see questions beginning with 10 and provide as much information as possible for each.
What is the history of malware on the computer etc.?
What error messages or crashes or problems have you experienced related to 13 and 14?
How many drives are there?
Which drive was and was not checked using chkdsk?
Is there an external drive?

Was Windows fast startup turned off?
Is the computer now in clean boot?
Were you over clocking?
Was the bios reset?

Which driver update programs were / are being used?

Please post a new zip file: BSOD - Posting Instructions - Windows 10 Forums
For any new bsod please update or post a new zip file.

 

The ESET online scanner keeps freezing, think ive mentioned this twice before
I havent come into contact with Malware on the PC before.
Only errors I have are the DPC Latency, where audio and mouse would lag at times, and get the BSOD related to it. IDK if this is related, but my FN + a few F keys dont trigger the shortcut stated, for example lowering keyboard brightness.

I have a 256 GB SSD + 1TB HDD, and i believe that the SSD was checked. The SSD has all of my programs on it including Windows. The HDD just stores a bunch of database files for my chess programs, a few .exes and Word + Excel docs

Fast boot off
Yes in clean boot
No overclocking, had only OC my GPU once before but didnt do anything afterwards
No, BIOS was not reset but rather updated to a later version, which has stock settings presumably
Driver Booster is the program which I use to update and install my drivers.

 

Run the Windows defender advanced scan (offline). It will reboot, then load windows defender, then perform a quick scan.
Run Windows defender in full scan and post an image into the thread.
Run the Microsoft Malicious software removal tool: Download Malicious Software Removal Tool from Official Microsoft Download Center

Post a new zip file: BSOD - Posting Instructions - Windows 10 Forums

For drivers the only sources should be computer manufacturer approved drivers, sometimes part manufacturer, and Windows updated drivers.

The software programs that install drivers can install anything.

Create a bootable Windows 10 iso: Download Windows 10

 

Attachment 144922


Attachment 144924 (eset online scan results. Kept it running for quite sometime and it finally completed the scan)

Attachment 144925

Why are my FN + F key shortcuts not working anymore, except a few like vol up and down?
Does it have anything to do with the fact that I disabled all the programs that start on boot?
Also, pls advise on what I should do next *Smile

EDIT: Here is the new zip file for the BSOD checker thing *Smile Attachment 144927