also @ TechSpot: Asus' new lineup of Z87 Haswell motherboards revealed

BSOD on Windows 7 Ultimate 32-bit

Discussion in 'Windows BSOD, Freezing, Restarting Help' started by xacex000, May 28, 2011.

Post New Reply
  1. xacex000 Newcomer, in training

    Can anyone help me check out what happened ?

    My windows_NT6_BSOD_jcgriff2 file is too big to upload.

    Attached Files:

  2. Mark56 TechSpot Paladin Posts: 2,270

    First thing I can point out to you is that your system is not up to date, you should be on SP1 by now. Switch on Automatic Updates from the Control Panel.

    It is difficult to get a full picture of the problem from just one minidump. If you have any more in the C:/Windows/minidump folder then please zip them into one file and attach to your next post.

    You were using a program called Maplestory when the crash occurred but it only pointed to a windows driver which is unlikely to be the actual cause. The bug check code was 8E which has the following possible causes. Insufficient disk space, Device driver, Video card, BIOS, , Hardware incompatibility, Faulty system service, Memory


    The perfmon file shows a possible fault with a plug & play device.

    I would check all your system drivers are up to date and run a test on your memory with memtest86+, run at least 8 passes on one stick at a time. http://www.memtest.org/

    Before running the memory test (disconnect from the power supply and remove the battery if on a laptop) pull out all your memory sticks and clean the contacts with a soft pencil eraser and reseat them.
  3. xacex000 Newcomer, in training

    Uhm I had already noticed that my system is not up to date moment ago, and I had installed all the updates.

    Here's 1 more minidump file, others are the same.

    Attached Files:

  4. Mark56 TechSpot Paladin Posts: 2,270

    This is just the same as the first one. Run through the checks I suggested earlier and see if the memory test finds any faults. Faulty memory is the most likely cause but if that comes up clean the next test will be on all your drivers.
  5. xacex000 Newcomer, in training

    Can you give me a guide on how to do the memory test? Which one should I download?
  6. Mark56 TechSpot Paladin Posts: 2,270

    Sorry, I should have included that, here it is.

     
  7. xacex000 Newcomer, in training

    I had done the test, there's no error.
  8. Mark56 TechSpot Paladin Posts: 2,270

    OK, we will have to use a process of elimination.

    Try this guide to make sure you have no defective drivers.

    First, follow this guide to clean out any redundant drivers.
    http://www.howtogeek.com/howto/windows-vista/remove-old-drivers-after-upgrading-to-new-hardware/

  9. xacex000 Newcomer, in training

    Ok, I tried the show hidden device and I saw 1 exclaimation mark on a non plug and play drivers I wonder if it's the cause of the problem ?

    I've done the verifier by "Automatically select all drivers installed on this computer" then I keep get BSOD on startup and I manage to get back my system by using system restore in safe mode. Then the minidump files got rolled back too it's gone from my cpu so I can't post it. The BSOD error is like IQRL_NOT_LESS_OR_EQUAL STOP : 0x0000000A .

    Attached Files:

  10. Mark56 TechSpot Paladin Posts: 2,270

    You could have gone back into safe mode and just followed the instruction to switch off the verifier. Sorry that was missing from the instruction, I must edit it.

    When you got the blue screen what driver did it name?

    Could you run it again if you didn't make a note of it. Then use safe mode to switch the verifier off if need be.

    What is the non plug & play device with the yellow warning
  11. xacex000 Newcomer, in training

    I don't see any driver name anywhere on the BSOD. Here's the minidump file.

    By the way, after setting the verifier, I restarted my comp and then my antivirus would detect a application potentially unsafe, it is named as FsUsbService.exe. Then recommended me to run it in sandbox. After that, I'll get BSOD.

    Attached Files:

  12. Mark56 TechSpot Paladin Posts: 2,270

    This latest crash dump has supplied some usefull information.

    Do you have anything by this name installed, MobileTop CwService, if so uninstall it. This is connected to FsUsbService.exe

    There is also a problem with "Internet Download Manager", uninstall that also.

    Switch off the verifier and see how it goes.

    Download and run these free programs.

    http://www.malwarebytes.org/products/malwarebytes_free
    http://www.geekstogo.com/forum/files/file/187-tfc-temp-file-cleaner-by-oldtimer/
    http://superantispyware.com/
  13. xacex000 Newcomer, in training

    I don't have MobileTop CwService installed in my computer.

    Did you meant switch on the verifier or switch off ?

    Addon: I forgot to reply your previous post, the the non plug & play device with the yellow warning is MpKsle6771c2b. It's unknown I don't know what it is.
  14. Mark56 TechSpot Paladin Posts: 2,270

    MpKsle6771c2b. This is on my PC also, if you right click on it, select properties, under the driver tab it should be disabled. It's nothing to worry about.

    Yes, switch off the Verifier.

    Run the scans and see what they come up with, delete/quarantine any suspicious files they find.

    FsUsbService.exe is a possible infection, Malwarebytes should find and remove it if it is a threat.
  15. xacex000 Newcomer, in training

    I'm done with all the scans. Infected files are being removed/quarantined.
  16. Mark56 TechSpot Paladin Posts: 2,270

    What was found?
  17. xacex000 Newcomer, in training

    This is the result from malwarebytes.

    Scan type: Quick scan
    Objects scanned: 158915
    Time elapsed: 6 minute(s), 42 second(s)

    Memory Processes Infected: 0
    Memory Modules Infected: 1
    Registry Keys Infected: 8
    Registry Values Infected: 0
    Registry Data Items Infected: 0
    Folders Infected: 0
    Files Infected: 1

    Memory Processes Infected:
    (No malicious items detected)

    Memory Modules Infected:
    D:\Thunder\ComDlls\xunleiBHO_Now.dll (Trojan.BHO) -> Delete on reboot.

    Registry Keys Infected:
    HKEY_CLASSES_ROOT\Interface\{988934a4-064b-11d3-bb80-00104b35e7f9} (Trojan.BHO) -> Quarantined and deleted successfully.
    HKEY_CLASSES_ROOT\Interface\{a1dd29ed-2598-48e9-9793-64a9cd08ac94} (Trojan.BHO) -> Quarantined and deleted successfully.
    HKEY_CLASSES_ROOT\Typelib\{87ca3845-37fe-414c-81cf-e08a7d0f6779} (Trojan.BHO) -> Quarantined and deleted successfully.
    HKEY_CLASSES_ROOT\CLSID\{802f530b-a8f6-4631-ae49-6bacaac6373e} (Trojan.BHO) -> Quarantined and deleted successfully.
    HKEY_CLASSES_ROOT\CLSID\{889d2feb-5411-4565-8998-1dd2c5261283} (Trojan.BHO) -> Quarantined and deleted successfully.
    HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Settings\{889d2feb-5411-4565-8998-1dd2c5261283} (Trojan.BHO) -> Quarantined and deleted successfully.
    HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{889d2feb-5411-4565-8998-1dd2c5261283} (Trojan.BHO) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{889d2feb-5411-4565-8998-1dd2c5261283} (Trojan.BHO) -> Quarantined and deleted successfully.

    Registry Values Infected:
    (No malicious items detected)

    Registry Data Items Infected:
    (No malicious items detected)

    Folders Infected:
    (No malicious items detected)

    Files Infected:
    D:\Thunder\ComDlls\xunleiBHO_Now.dll (Trojan.BHO) -> Delete on reboot.
  18. Mark56 TechSpot Paladin Posts: 2,270

    OK, that may be the end of your problems, you did reboot to get rid of the last infected file?

    D:\Thunder\ComDlls\xunleiBHO_Now.dll (Trojan.BHO) -> Delete on reboot.

    Just be sure all the Malware has gone run Malwarebytes again on a Full Scan. If it finds more infections keep running it until it shows a clean result.

    Then continue to use your PC and report back if you get any more errors.

    You should also run scans with the other two scanners to check for other possible adware and to clean out all temp files.
  19. xacex000 Newcomer, in training

    I still get BSOD when playing maplestory.

    Attached Files:

  20. Mark56 TechSpot Paladin Posts: 2,270

    If the system is otherwise running fault free than it must be something to do with Maplestory. Try uninstalling and reinstalling it, it could be that the Malware corrupted something in the game.

    I've just done a quick search in respect of this game and there are many other people who have had the same problem. What anti virus do you use and have you got Windows Defender active, Defender has been found to cause a conflict with this game. I have seen some comments linking this game with Malware infections, personally, with all the trouble this game is causing, I would leave it alone.