BSOD Randomly 0x000000ef

· OS - Windows 10 Professional
· x64
· original installed OS on system Windows 10 Professional
· Is the OS an OEM version
· Age of system (hardware) one year and 9 months
· Age of OS installation - installed on 15 august 2016
· CPU Intel® Core™ i7-4710MQ CPU @ 2.50GHz, 2501 Mhz, 4 Core(s), 8 Logical Processor(s)
· Video Card Name NVIDIA Quadro K1100M
· MotherBoard - (it is a laptop)
· Power Supply - brand & wattage (it is a laptop)
· System Manufacturer HP
· Exact model number HP Zbook 15 G2
· Laptop

Hello, I Happened that randomly; here is the bugcheck: 0x000000ef
Thank you.

I'll let someone that knows what they're doing analyze the dmp files.

Just wanted to comment that it's been some time since I've seen anyone running Spybot and I was thinking it'd conflict with Win Defender in the Win 10 CU. Just noticed there was a thread: Shut down takes longer after Creators Update where that was discussed.

It sure does add a lot of Hosts entries

Open administrative command prompt and run:

sfc /scannow
dism /online /cleanup-image /restorehealth

Please report the findings for each scannow and restorhealth

Google searches for SppExtComObjHook.dll have numerous reports of malware. However I was unable to find it listed in these searches:
A-Z Listing of Threats Risks - Symantec Corp.
Recent Malware - McAfee Labs Threat Center

Malware and virus descriptions from the Microsoft Malware Protection Center's encyclopedia

Run Malwarebytes scan
Run full Avast scan
Please report results for each.


Run administrative command prompt: chkdsk /x /f /r
It will require a Y answer and a reboot. Run this overnight as it may take many hours.


Running Windows Debugger Version 10.0.15063.137 AMD64




BugCheck EF, {ffffe6077732f080, 0, 0, 0}

ETW minidump data unavailable
Probably caused by : SppExtComObjHook.dll_unloaded


BugCheck EF, {ffff808d89f42780, 0, 0, 0}

ETW minidump data unavailable
Probably caused by : SppExtComObjHook.dll_unloaded

Event[1898]:
Log Name: System
Source: Ntfs
Date: 2016-11-08T08:21:12.483
Event ID: 55
Task: N/A
Level: Error
Opcode: Info
Keyword: N/A
User: S-1-5-18
User Name: NT AUTHORITY\SYSTEM
Computer: Giuseppe
Description:
A corruption was discovered in the file system structure on volume I:.

The Master File Table (MFT) contains a corrupted file record. The file reference number is 0x1000000000000. The name of the file is "<unable to determine file name>".

Event[1899]:
Log Name: System
Source: Ntfs
Date: 2016-11-08T08:21:12.483
Event ID: 55
Task: N/A
Level: Error
Opcode: Info
Keyword: N/A
User: S-1-5-18
User Name: NT AUTHORITY\SYSTEM
Computer: Giuseppe
Description:
A corruption was discovered in the file system structure on volume I:.

The exact nature of the corruption is unknown. The file system structures need to be scanned online.

Event[1905]:
Log Name: System
Source: Ntfs
Date: 2016-11-08T08:21:12.551
Event ID: 55
Task: N/A
Level: Error
Opcode: Info
Keyword: N/A
User: S-1-5-18
User Name: NT AUTHORITY\SYSTEM
Computer: Giuseppe
Description:
A corruption was discovered in the file system structure on volume I:.

The Master File Table (MFT) contains a corrupted file record. The file reference number is 0x1000000000000. The name of the file is "<unable to determine file name>".

Event[1906]:
Log Name: System
Source: Ntfs
Date: 2016-11-08T08:21:12.552
Event ID: 55
Task: N/A
Level: Error
Opcode: Info
Keyword: N/A
User: S-1-5-18
User Name: NT AUTHORITY\SYSTEM
Computer: Giuseppe
Description:
A corruption was discovered in the file system structure on volume I:.

The exact nature of the corruption is unknown. The file system structures need to be scanned online.

axe0
Where do you look to see information on the genuine vs non genuine software? Which log displays the pirated software?