SOLVED random BSODs

[Card388]

Recently I've been getting some BSODs. I don't know much about computers so I'm not exactly sure what's happening. There isn't anything specific that is causing me BSODs but it might be Vindictus since it doesn't seem to BSOD during DoTA but it does during or after I play Vindictus

 

[Card388]

Still getting BSODs from Vindictus but not other games and the temperature is down too so don't think it's from heat.

 

[Shintaro]

Welcome to the W7 forums.

My apologies for the slow responce.

***EDIT: Before you do that, please run an offline anit-virus scan:
http://windows.microsoft.com/en-US/windows/what-is-windows-defender-offline/


Please start with installing Windows SP1 (Service Pack 1)

Windows 7 Kernel Version 7600 MP (4 procs) Free x64

http://windows.microsoft.com/installwindows7sp1

Let us know how you go.

Hope this helps.

 

[Shintaro]

My sincere apologies, please run this first:
http://support.kaspersky.com/faq/?qid=208283363

I am so sorry about the muddled posts.

 

[Card388]

Thanks for replying to my issue I ran the TDSS killer and got 2 files. They're shown in the image and I put them in quarantine in case they're not supposed to be deleted.. I've tried to download the Windows Defender Offline, but when I run mpam-fex64 it doesn't work. I haven't installed SP1 yet since it seems like you wanted me to complete those two first.

 

[Shintaro]

Ok, Please remove Daemon Tools. It is known to cause crashes.
Then please try to install Windows SP1.

Let us know how you go.

 

[Card388]

Service Pack 1 Installed, Daemon Tools uninstalled. What should I do with the quarantine files? Is it okay to skip the Windows Defender offline part?
Lately I've been using HMonitor? Does that cause crashes a lot?

 

[Shintaro]

Just leave the quarantine files for now.
If can complete the Windows Defender, that would be good.

Also please download and install:
http://www.malwarebytes.org/products/malwarebytes_free/

And please scan your system with it.

The reason I am asking you to do this, is because there some files on your system that seem to have random names.

I have never heard of HWMonitor crashing a system.

If you computer crashes, please upload the crashes.

Please let us know how you go.
Hope this helps.

 

[Card388]

Malwarebytes Anti-Malware 1.62.0.1300
www.malwarebytes.org

Database version: v2012.08.20.02

Windows 7 Service Pack 1 x64 NTFS
Internet Explorer 9.0.8112.16421
Card388 :: CARD388-PC [administrator]

20/08/2012 1:19:58 AM
mbam-log-2012-08-20 (01-19-58).txt

Scan type: Quick scan
Scan options enabled: Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken | PUP | PUM
Scan options disabled: P2P
Objects scanned: 221138
Time elapsed: 5 minute(s), 28 second(s)

Memory Processes Detected: 0
(No malicious items detected)

Memory Modules Detected: 0
(No malicious items detected)

Registry Keys Detected: 7
HKCR\AppID\ActiveCollectorPlugin.DLL (Adware.Mirar) -> Quarantined and deleted successfully.
HKCU\SOFTWARE\3FWHZQA3LT (Trojan.FakeAlert) -> Quarantined and deleted successfully.
HKCU\SOFTWARE\SMH2B46TDP (Trojan.FakeAlert) -> Quarantined and deleted successfully.
HKCU\Software\IEBarProperties (Adware.Mirar) -> Quarantined and deleted successfully.
HKCU\Software\AppDataLow\Software\NetNucleous\ActiveCollector (Adware.Mirar) -> Quarantined and deleted successfully.
HKCU\Software\NetNucleous\ActiveCollector (Adware.Mirar) -> Quarantined and deleted successfully.
HKLM\SOFTWARE\ResultTool (Adware.ResultTool) -> Quarantined and deleted successfully.

Registry Values Detected: 1
HKLM\SOFTWARE\ResultTool|DllPath (Adware.ResultTool) -> Data: C:\Program Files (x86)\ResultTool\resulttool.dll -> Quarantined and deleted successfully.

Registry Data Items Detected: 1
HKLM\SOFTWARE\Microsoft\Internet Explorer\Main|Search Bar (Hijack.SearchPage) -> Bad: (http://www.tangosearch.com/?useie5=1&q=) Good: (http://www.google.com) -> Quarantined and repaired successfully.

Folders Detected: 4
C:\Program Files (x86)\Mozilla Firefox\extensions\{25AAD618-76C8-4E6A-9768-8320705379EC} (Adware.ResultTool) -> Quarantined and deleted successfully.
C:\Program Files (x86)\Mozilla Firefox\extensions\{25AAD618-76C8-4E6A-9768-8320705379EC}\chrome (Adware.ResultTool) -> Quarantined and deleted successfully.
C:\Program Files (x86)\Mozilla Firefox\extensions\{25AAD618-76C8-4E6A-9768-8320705379EC}\defaults (Adware.ResultTool) -> Quarantined and deleted successfully.
C:\Program Files (x86)\Mozilla Firefox\extensions\{25AAD618-76C8-4E6A-9768-8320705379EC}\defaults\preferences (Adware.ResultTool) -> Quarantined and deleted successfully.

Files Detected: 7
C:\$RECYCLE.BIN\S-1-5-21-4175250411-1506710768-3424168186-1001\$RSUNK3J.exe (PUP.Bundle.Installer.OI) -> Quarantined and deleted successfully.
C:\Users\Public\Documents\Server\admin.txt (Malware.Trace) -> Quarantined and deleted successfully.
C:\Users\Public\Documents\Server\server.dat (Malware.Trace) -> Quarantined and deleted successfully.
C:\Program Files (x86)\Mozilla Firefox\extensions\{25AAD618-76C8-4E6A-9768-8320705379EC}\chrome.manifest (Adware.ResultTool) -> Quarantined and deleted successfully.
C:\Program Files (x86)\Mozilla Firefox\extensions\{25AAD618-76C8-4E6A-9768-8320705379EC}\install.rdf (Adware.ResultTool) -> Quarantined and deleted successfully.
C:\Program Files (x86)\Mozilla Firefox\extensions\{25AAD618-76C8-4E6A-9768-8320705379EC}\chrome\resulttool.jar (Adware.ResultTool) -> Quarantined and deleted successfully.
C:\Program Files (x86)\Mozilla Firefox\extensions\{25AAD618-76C8-4E6A-9768-8320705379EC}\defaults\preferences\prefs.js (Adware.ResultTool) -> Quarantined and deleted successfully.

(end)

20eb3db58cf7bdc4a49f84bb38320b6e these files? They're pictures.
I sure have a lot of malware xD been using Ad Aware but I guess it doesn't get everything.

 

[Shintaro]

I think Malwarebytes can be run in safe mode.

Could you please give that a try.

It looks like we a cleaning up your system.

Has it crashed lately?

 

[Card388]

Actually It has today but not after following your first set of instructions.
Ran Malwarebyte on safe mode but nothing was found. I've left Vindictus on for a good while and there doesn't seem to be a BSOD yet.

 

[Shintaro]

OK, see how it goes for a day or so. If nothing happens and you are satisfied, then please mark the thread as solved.

 

[Card388]

No BSODs thanks a lot Shintaro :3