BleepingComputer.com: WinSATRestorePower - Spybot detection - Windows Crashed

Jump to content

Forum Rules

When posting your problem, do not run and post a ComboFix log. ComboFix is a tool that should only be run under the supervision of someone who has been trained in its use. Using it on your own can cause problems with your computer. Any posts containing CF Logs will be ignored.

To receive help, you should instead provide a detailed description of your problem, detailed word-for-word error messages that you are receiving, screenshots of strange behaviour, and your operating system. This information is much more useful to our helpers than a ComboFix log.


If you have not received help after three days, please post a link to your topic HERE.
Page 1 of 1
  • You cannot start a new topic
  • You cannot reply to this topic

WinSATRestorePower - Spybot detection - Windows Crashed Spybot detected a registry value delete associated with WinSATRestoreP

#1 User is offline   stpdgirl 

  • New Member
  • Pip
  • Find Topics
  • Group: Members
  • Posts: 4
  • Joined: 13-December 10

Posted 13 December 2010 - 02:21 AM

Hello all

I am pretty sure I have some sort of virus but I wanted to post and ask for some help before I went and did something to make things worse. Spybot Search and Destroy, from yesterday evening, started popping (repeatedly) up with a dialog asking permission for a registry change which had to do with WinSATRestorePower. It was deleting a value or some other and I'm not exactly sure what it was asking for but I denied it out of suspicion as I didn't know what program was trying to mess with my registry.
(Note: Also, yesterday, I just installed a Microsoft LifeCam but it seemed to be compatible with my Windows 7 just fine)
Today I turned on my computer and after it configured the Microsoft Lifecam/webcam shortly, after I clicked on the lifecam program dialog a minute later the screen got all weird and then it went to a blue screen that babbled about dumping memory. Also I've started the computer since the dump happened at 11:35pm, ran Spybot Search and Destroy and all it found was coupon adware that I wasn't able to remove because I'm not the administrator. It is now 1:19am and there is no sign of another memory dump. I'm not sure if this is associated with the webcam drivers, a possible trojan/adware/malware or maybe has something to do with the graphic card recently installed? I'd really appreciate some help.Thanks in advance!

OS:Windows 7
Graphics Card: ATI Radeon HD 3650
Processor: Intel Pentium 4 cpu 2.80GHz 2.79GHz
Memory: 1.50 GB
32 - bit

This post has been edited by stpdgirl: 13 December 2010 - 02:22 AM


#2 User is online   cryptodan 

  • Bleepin Madman
  • PipPipPipPipPipPip
  • Find Topics
  • Group: BC Advisor
  • Posts: 18,375
  • Joined: 08-September 08
  • Gender:Male
  • Location:Catonsville, Md

Posted 13 December 2010 - 02:43 AM

We need to know more about your BSODs...

Download BlueScreenView (in Zip file)

No installation required.

Unzip downloaded file and double click on BlueScreenView.exe file to run the program and When scanning is done, go to Edit > Select All.

Then go to File > Save Selected Items, and save the report as BSOD.txt.

Open BSOD.txt in Notepad, copy all content, and paste it into your next reply.

Compliments of Broni

My work schedule is as follows: Mon and Tues 1800 to 0600, Friday - Sunday 1800EST to 0600, and Wednesday to Thursday 1800est to 0600. So if I do not respond right away I am at work.
----------------
If I am helping you, then Please Send Me a Message!with your thread link in it. This is only if I haven't replied back to you within 24 to 48 hours.
----------------
My Main Site || My Backup Site || steam://friends/add/cryptodan Add me to your Steam Friends.

#3 User is offline   stpdgirl 

  • New Member
  • Pip
  • Find Topics
  • Group: Members
  • Posts: 4
  • Joined: 13-December 10

Posted 13 December 2010 - 10:50 AM

I think I did it right, or at least I hope I did!
Is this what you were looking for?

==================================================
Dump File : 121210-33359-01.dmp
Crash Time : 12/12/2010 11:35:40 PM
Bug Check String : BUGCODE_USB_DRIVER
Bug Check Code : 0x000000fe
Parameter 1 : 0x00000006
Parameter 2 : 0x84c6dcf0
Parameter 3 : 0x43787254
Parameter 4 : 0x00000000
Caused By Driver : USBPORT.SYS
Caused By Address : USBPORT.SYS+1025
File Description : USB 1.1 & 2.0 Port Driver
Product Name : Microsoft® Windows® Operating System
Company : Microsoft Corporation
File Version : 6.1.7600.16385 (win7_rtm.090713-1255)
Processor : 32-bit
Computer Name :
Full Path : C:\Windows\Minidump\121210-33359-01.dmp
Processors Count : 2
Major Version : 15
Minor Version : 7600
==================================================

#4 User is online   cryptodan 

  • Bleepin Madman
  • PipPipPipPipPipPip
  • Find Topics
  • Group: BC Advisor
  • Posts: 18,375
  • Joined: 08-September 08
  • Gender:Male
  • Location:Catonsville, Md

Posted 13 December 2010 - 01:37 PM

Try updating your USB Drivers.

Please perform the following, so that we can get the exact specs of your computer. This will better assist us in helping you more.

Publish a Snapshot using Speccy

The below is for those who cannot get online

Please take caution when attaching a text file to your post if you cannot copy/paste the link to your post, you will need to edit it to make sure that your Windows Key is not present.

My work schedule is as follows: Mon and Tues 1800 to 0600, Friday - Sunday 1800EST to 0600, and Wednesday to Thursday 1800est to 0600. So if I do not respond right away I am at work.
----------------
If I am helping you, then Please Send Me a Message!with your thread link in it. This is only if I haven't replied back to you within 24 to 48 hours.
----------------
My Main Site || My Backup Site || steam://friends/add/cryptodan Add me to your Steam Friends.

#5 User is offline   stpdgirl 

  • New Member
  • Pip
  • Find Topics
  • Group: Members
  • Posts: 4
  • Joined: 13-December 10

Posted 13 December 2010 - 11:11 PM

Hey CryptoDan! Thanks for such prompt replies! I did a web search on BSOD and that Microsoft Lifecam and found there are lots of BSOD associated with that camera. I believe that my computer automatically conncted with the internet to get the latest updated drivers when I connected the USB webcam because there was no driver CD/DVD disk that came with it.

In any case here is the Speccy Snapshot of my computer you asked for.

Speccy Link

#6 User is online   cryptodan 

  • Bleepin Madman
  • PipPipPipPipPipPip
  • Find Topics
  • Group: BC Advisor
  • Posts: 18,375
  • Joined: 08-September 08
  • Gender:Male
  • Location:Catonsville, Md

Posted 14 December 2010 - 06:34 AM

Your Motherboard is not compatible with Windows 7, and I would suggest down grading to Windows Vista if possible.

As per: http://downloadcenter.intel.com/Detail_Desc.aspx?agr=Y&DwnldID=18576&ProdId=1049&lang=eng

My work schedule is as follows: Mon and Tues 1800 to 0600, Friday - Sunday 1800EST to 0600, and Wednesday to Thursday 1800est to 0600. So if I do not respond right away I am at work.
----------------
If I am helping you, then Please Send Me a Message!with your thread link in it. This is only if I haven't replied back to you within 24 to 48 hours.
----------------
My Main Site || My Backup Site || steam://friends/add/cryptodan Add me to your Steam Friends.

#7 User is offline   stpdgirl 

  • New Member
  • Pip
  • Find Topics
  • Group: Members
  • Posts: 4
  • Joined: 13-December 10

Posted 14 December 2010 - 10:49 AM

Thats so strange! Okay, I'll definitely take note of that. So that's what caused the crash? Why did it take so long for it to realize that the motherboard wasn't compatible with Windows 7?

#8 User is online   cryptodan 

  • Bleepin Madman
  • PipPipPipPipPipPip
  • Find Topics
  • Group: BC Advisor
  • Posts: 18,375
  • Joined: 08-September 08
  • Gender:Male
  • Location:Catonsville, Md

Posted 14 December 2010 - 02:57 PM

Its not so much the fact that it took this long to find out its the fact that your new device caused this issue to come about.

My work schedule is as follows: Mon and Tues 1800 to 0600, Friday - Sunday 1800EST to 0600, and Wednesday to Thursday 1800est to 0600. So if I do not respond right away I am at work.
----------------
If I am helping you, then Please Send Me a Message!with your thread link in it. This is only if I haven't replied back to you within 24 to 48 hours.
----------------
My Main Site || My Backup Site || steam://friends/add/cryptodan Add me to your Steam Friends.

Share this topic:


Page 1 of 1
  • You cannot start a new topic
  • You cannot reply to this topic

1 User(s) are reading this topic
0 members, 1 guests, 0 anonymous users