Crash When i Run a Program

[Jono7272]

Hi, When I go to run a game called Xiah the computer crashes and gives this error:

Stop: 0x000000F4 (0x00000003, 0x83127020, 0x83127194, 0x805FA160)

Included is the Minidump File.

Any help would be much appreciated,
Jono

 

[howard_hopkinso]

Hello and welcome to Techspot.

Your minidump crashes at guard.sys. This is the driver for your AVG Antispyware programme.

Temporarily, uninstall AVG Antispyware and see if you still have problems.

Regards Howard :wave: :wave:

 

[Jono7272]

Thanks for the quick reply,

I uninstalled AVG AntiSpyware and then tried it again but again it crashed.

Included is the MiniDump file.

Thanks in advance,
Jono

 

[howard_hopkinso]

Again, your minidump crashes at guard.sys. As you have uninstalled AVG Antispyware, this shouldn`t have happened.

I want to have a quick check for malware. Please read this thread HERE and post a HJT log.

Regards Howard

 

[Jono7272]

Ok, attached is HJT log.

Thanks again,
Jono

 

[peterdiva]

KLIF.SYS might be the problem. This looks to have been left behind after removing Kaspersky. There's also a Trend Micro file by itself. These need to be removed.

b9c15000 b9c50000 KLIF KLIF.SYS Mon Oct 16 18:38:52 2006 (4533613C)
ba012000 ba023500 tmcomm tmcomm.sys Mon Jul 31 14:41:15 2006 (44CDA60B)

 

[Jono7272]

I removed both of them and tried again, but again same thing happened.

Attached is latest MiniDump.

Thanks for the help,
Jono

 

[howard_hopkinso]

peterdiva may well be correct. I also see you have Zonealarm running. This may also be part of the problem. Uninstall Zonealarm and temporarily use the Windows Firewall.

Run HJT with no other programmes open(except notepad). Click the scan button. Have HJT fix the following, by placing a tick in the little box next to(if there).

O2 - BHO: (no name) - {3FD6B99C-A275-46ea-8FD1-3D63986E51E4} - C:\WINDOWS\system32\pnbfcnlx.dll (file missing)

O2 - BHO: (no name) - {70543EDD-DBA4-4601-9DF3-14D75AD9C2BB} - C:\WINDOWS\System32\ikbkgd.dll (file missing)

O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)

O2 - BHO: (no name) - {BA3D9DEB-DC7A-40EB-A9A0-386B2D8C7FF0} - C:\WINDOWS\system32\ddccy.dll (file missing)

O2 - BHO: (no name) - {C23D4E1F-A170-48C9-8DF7-D7963E21549D} - C:\WINDOWS\system32\ddccy.dll (file missing)

O9 - Extra button: (no name) - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - (no file)

O9 - Extra button: ÓéÀÖÔÚÏß - {D1EDDE84-E67E-4ccd-B28E-73AD3B71A7C9} - http://bars.plugunion.com/ (file missing)

O9 - Extra 'Tools' menuitem: ÓéÀÖÔÚÏß - {D1EDDE84-E67E-4ccd-B28E-73AD3B71A7C9} - http://bars.plugunion.com/ (file missing)

O9 - Extra button: PartyPoker.net - {F4430FE8-2638-42e5-B849-800749B94EED} - C:\PartyGaming.net\PartyPokerNet\RunPF.exe (file missing)

O9 - Extra 'Tools' menuitem: PartyPoker.net - {F4430FE8-2638-42e5-B849-800749B94EED} - C:\PartyGaming.net\PartyPokerNet\RunPF.exe (file missing)

O16 - DPF: {09F1ADAC-76D8-4D0F-99A5-5C907DADB988} - http://cdn.downloadcontrol.com/files/installers/cab/SystemDoctor2006FreeInstall. cab

O16 - DPF: {0C72835A-34C5-4273-A700-A2347E784B58} (NPPWebInstallV2 Control) - http://www.siren24.com/nprotect/down/NPPWebInstallV2.cab

O16 - DPF: {4F091885-8A80-478E-8F48-C53508CA12FD} (DekaronAutoPlay Control) - http://file.dekaron.co.kr/_DownUtil/syscab/Dekaron.CAB

O16 - DPF: {58FC4C77-71C2-4972-A8CD-78691AD85158} (BJA Control) - http://www.worldwinner.com/games/v49/bjattack/bjattack.cab

O16 - DPF: {62969CF2-0F7A-433B-A221-FD8818C06C2F} (Blockwerx Control) - http://www.worldwinner.com/games/v47/blockwerx/blockwerx.cab

O16 - DPF: {71057C18-0507-4747-86BC-E11CE7512C5F} (mailhelper Class) - https://register.btinternet.com/templates/btmailcontrol013.cab

O16 - DPF: {8A94C905-FF9D-43B6-8708-F0F22D22B1CB} (Wwlaunch Control) - http://www.worldwinner.com/games/shared/wwlaunch.cab

O16 - DPF: {AC120B1D-9411-4111-AF52-118052D85D45} (GameDesire Darts Games) - http://67.15.101.3/g_bin/eng/darts_2_0_0_35.cab

O16 - DPF: {AF2E62B6-F9E1-4D4F-A10A-9DC8E6DCBCC0} (VideoEgg ActiveX Loader) - http://update.videoegg.com/Install/Windows/Initial/VideoEggPublisher.exe

O16 - DPF: {B64F4A7C-97C9-11DA-8BDE-F66BAD1E3F3A} - http://download.cdn.winsoftware.com/files/installers/cab/WinAntiVirusPro2006Free Install.cab

O16 - DPF: {BB637307-92FA-47EC-B3F7-6969078673CC} (Royal Control) - http://www.worldwinner.com/games/v44/royal/royal.cab

O16 - DPF: {D6FCA8ED-4715-43DE-9BD2-2789778A5B09} - http://nprotect.ini3.co.th/nProtect/KeyCrypt/npkcx.cab

O16 - DPF: {E53458D2-5A83-4BD1-8DE2-EEEBE73BAB77} - http://dinet.info/e/us29/e.cab

O16 - DPF: {E862C832-3A5F-4CEB-BFAA-167B22010A71} (InfosFinder2.InfosFinder) - http://support.packardbell.com/files/activex/InfosFinder2.CAB

O16 - DPF: {F919FBD3-A96B-4679-AF26-F551439BB5FD} - http://locator1.cdn.imagesrvr.com/sites/sysprotect.com/scanner/pages/scanner/Sys ProtectScannerInstall.cab

O16 - DPF: {FAE74270-E5EE-49C3-B816-EA8B4D55F38F} (H2hPool Control) - http://www.worldwinner.com/games/v51/h2hpool/h2hpool.cab

O20 - Winlogon Notify: ddccy - C:\WINDOWS\system32\ddccy.dll (file missing)

O20 - Winlogon Notify: winbjt32 - winbjt32.dll (file missing)

O20 - Winlogon Notify: wintuh32 - wintuh32.dll (file missing)

Click on the fix checked button.

Close HJT.

Reboot your system and post a fresh HJT.

Regards Howard

 

[Jono7272]

Ok, did as you said.

Included is new HJT Log.

Thanks,
Jono

Edit: Ive retried the program and it works fine now, i guess i should try another FireWall other than Zone Alarm.

 

[howard_hopkinso]

Your HJT log is clean.

Zonealarm is known to cause problems on some systems/configurations. Other firewalls you may want to consider are:

Kerio or Comodo free firewall programmes.

Regards Howard