Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Virus causing Bsod ?


  • Please log in to reply
8 replies to this topic

#1 jez1213

jez1213

  • Members
  • 5 posts
  • OFFLINE
  •  
  • Local time:09:55 AM

Posted 01 October 2013 - 03:37 PM

Recently as of last week i have had multiple Bsod crashes with different stop codes on my laptop. the most common one is stop code 116. additionally my screen is not functioning properly as there are yellow and blue pixels left behind if either the mouse pointer moves or the window changes.

 

i believe this to be a virus because i haven't made any hardware changes recently. the laptop when attempting to start normally gets to the password screen then crashes so i have been using it in safe mode with networking.

 

i have scanned the computer with malwarebytes but it did not find any problems

 

any help or advice would be much appreciated

 

thanks

Jez


Edited by jez1213, 01 October 2013 - 03:40 PM.


BC AdBot (Login to Remove)

 


#2 hamluis

hamluis

    Moderator


  • Moderator
  • 55,726 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Killeen, TX
  • Local time:03:55 AM

Posted 01 October 2013 - 04:08 PM

Please download MiniToolBox  , save it to your desktop and run it.

 

Checkmark the following checkboxes:

  List last 10 Event Viewer log

  List Installed Programs

  List Users, Partitions and Memory size.

 

Click Go and paste the content into your next post.

 

Also...please Publish a Snapshot using Speccy - http://www.bleepingcomputer.com/forums/topic323892.html/page__p__1797792#entry1797792 , taking care to post the link of the snapshot in your next post.

 

Louis



#3 jez1213

jez1213
  • Topic Starter

  • Members
  • 5 posts
  • OFFLINE
  •  
  • Local time:09:55 AM

Posted 01 October 2013 - 04:19 PM

MiniToolBox by Farbar  Version: 13-07-2013
Ran by Jez (administrator) on 01-10-2013 at 22:13:00
Running from "C:\Users\Jez\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\6F195TIN"
Microsoft Windows 7 Enterprise  Service Pack 1 (X86)
Boot Mode: Network
***************************************************************************

========================= Event log errors: ===============================

Application errors:
==================
Error: (09/21/2013 10:12:30 AM) (Source: System Restore) (User: )
Description: Failed to create restore point (Process = C:\Windows\system32\msiexec.exe /V; Description = Installed AVG 2014; Error = 0x8007043c).

Error: (09/21/2013 10:11:01 AM) (Source: System Restore) (User: )
Description: Failed to create restore point (Process = C:\Windows\system32\msiexec.exe /V; Description = Installed AVG 2014; Error = 0x8007043c).

Error: (09/21/2013 10:10:57 AM) (Source: System Restore) (User: )
Description: Failed to create restore point (Process = C:\Windows\system32\msiexec.exe /V; Description = Installed AVG 2014; Error = 0x8007043c).

Error: (09/21/2013 10:10:47 AM) (Source: System Restore) (User: )
Description: Failed to create restore point (Process = C:\Windows\system32\msiexec.exe /V; Description = Installed AVG 2014; Error = 0x8007043c).

Error: (09/21/2013 10:10:44 AM) (Source: System Restore) (User: )
Description: Failed to create restore point (Process = C:\Windows\system32\msiexec.exe /V; Description = Installed AVG 2014; Error = 0x8007043c).

Error: (09/21/2013 10:10:43 AM) (Source: System Restore) (User: )
Description: Failed to create restore point (Process = C:\Windows\system32\msiexec.exe /V; Description = Installed AVG 2014; Error = 0x8007043c).

Error: (09/15/2013 08:05:21 PM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 4692744

Error: (09/15/2013 08:05:21 PM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 4692744

Error: (09/15/2013 08:05:21 PM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second

Error: (09/15/2013 08:05:20 PM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 4691606

System errors:
=============
Error: (10/01/2013 09:04:53 PM) (Source: DCOM) (User: )
Description: 1068fdPHost{D3DCB472-7261-43CE-924B-0704BD730D5F}

Error: (10/01/2013 09:04:53 PM) (Source: DCOM) (User: )
Description: 1068fdPHost{145B4335-FE2A-4927-A040-7C35AD3180EF}

Error: (10/01/2013 09:04:40 PM) (Source: Service Control Manager) (User: )
Description: The HomeGroup Provider service depends on the Function Discovery Provider Host service which failed to start because of the following error:
%%1068

Error: (10/01/2013 09:04:39 PM) (Source: DCOM) (User: )
Description: 1084WSearch{9E175B6D-F52A-11D8-B9A5-505054503030}

Error: (10/01/2013 09:04:38 PM) (Source: DCOM) (User: )
Description: 1084WSearch{7D096C5F-AC08-4F1F-BEB7-5C22C517CE39}

Error: (10/01/2013 09:04:19 PM) (Source: DCOM) (User: )
Description: 1084EventSystem{1BE1F766-5536-11D1-B726-00C04FB926AF}

Error: (10/01/2013 09:04:08 PM) (Source: DCOM) (User: )
Description: 1084ShellHWDetection{DD522ACC-F821-461A-A407-50B198B896DC}

Error: (10/01/2013 09:03:58 PM) (Source: Service Control Manager) (User: )
Description: The following boot-start or system-start driver(s) failed to load:
Avgdiskx
AVGIDSDriver
AVGIDSShim
Avgldx86
discache
spldr
Wanarpv6

Error: (10/01/2013 09:03:49 PM) (Source: Service Control Manager) (User: )
Description: The IPsec Policy Agent service depends the following service: BFE. This service might not be installed.

Error: (10/01/2013 09:03:49 PM) (Source: Service Control Manager) (User: )
Description: The IKE and AuthIP IPsec Keying Modules service depends the following service: BFE. This service might not be installed.

Microsoft Office Sessions:
=========================
Error: (12/10/2012 07:45:17 PM) (Source: Microsoft Office 12 Sessions)(User: )
Description: ID: 1, Application Name: Microsoft Office Excel, Application Version: 12.0.6661.5000, Microsoft Office Version: 12.0.6612.1000. This session lasted 1039 seconds with 840 seconds of active time.  This session ended with a crash.

CodeIntegrity Errors:
===================================
  Date: 2013-09-20 19:51:36.433
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\ProgramData\Microsoft\Search\Data\Applications\Windows\tmp.edb because the set of per-page image hashes could not be found on the system.

  Date: 2013-09-20 19:51:36.137
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\ProgramData\Microsoft\Search\Data\Applications\Windows\tmp.edb because the set of per-page image hashes could not be found on the system.

  Date: 2013-09-20 19:51:35.872
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\ProgramData\Microsoft\Search\Data\Applications\Windows\tmp.edb because the set of per-page image hashes could not be found on the system.

=========================== Installed Programs ============================

 Update for Microsoft Office 2007 (KB2508958)
Ad-Aware Security Add-on (Version: 3.4.0.1)
Adobe Flash Player 11 ActiveX (Version: 11.7.700.202)
Adobe Flash Player 11 Plugin (Version: 11.7.700.202)
Adobe Reader 9.5.3 (Version: 9.5.3)
Adobe Shockwave Player 12.0 (Version: 12.0.0.112)
Apple Application Support (Version: 2.2.2)
Apple Mobile Device Support (Version: 6.0.0.59)
Apple Software Update (Version: 2.1.3.127)
AuthenTec TrueSuite (Version: 2.0.0.57)
AVG 2014 (Version: 14.0.3604)
AVG 2014 (Version: 14.0.4117)
AVG 2014 (Version: 2014.0.4117)
AVG Security Toolbar (Version: 15.5.0.2)
Bonjour (Version: 3.0.0.10)
Google Earth Plug-in (Version: 7.1.1.1888)
Google SketchUp 8 (Version: 3.0.4811)
Google Toolbar for Internet Explorer (Version: 1.0.0)
Google Toolbar for Internet Explorer (Version: 7.5.4413.1752)
Google Update Helper (Version: 1.3.21.153)
iTunes (Version: 10.7.0.21)
Java Auto Updater (Version: 2.0.2.4)
Java™ 6 Update 23 (Version: 6.0.230)
Malwarebytes Anti-Malware version 1.75.0.1300 (Version: 1.75.0.1300)
McAfee Security Scan Plus (Version: 3.0.318.3)
Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319)
Microsoft Combat Flight Simulator 3.0
Microsoft Office 2007 Service Pack 3 (SP3)
Microsoft Office Access MUI (English) 2007 (Version: 12.0.6612.1000)
Microsoft Office Access Setup Metadata MUI (English) 2007 (Version: 12.0.6612.1000)
Microsoft Office Enterprise 2007 (Version: 12.0.6612.1000)
Microsoft Office Excel MUI (English) 2007 (Version: 12.0.6612.1000)
Microsoft Office Groove MUI (English) 2007 (Version: 12.0.6612.1000)
Microsoft Office Groove Setup Metadata MUI (English) 2007 (Version: 12.0.6612.1000)
Microsoft Office InfoPath MUI (English) 2007 (Version: 12.0.6612.1000)
Microsoft Office OneNote MUI (English) 2007 (Version: 12.0.6612.1000)
Microsoft Office Outlook MUI (English) 2007 (Version: 12.0.6612.1000)
Microsoft Office PowerPoint MUI (English) 2007 (Version: 12.0.6612.1000)
Microsoft Office Proof (English) 2007 (Version: 12.0.6612.1000)
Microsoft Office Proof (French) 2007 (Version: 12.0.6612.1000)
Microsoft Office Proof (Spanish) 2007 (Version: 12.0.6612.1000)
Microsoft Office Proofing (English) 2007 (Version: 12.0.4518.1014)
Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)
Microsoft Office Publisher MUI (English) 2007 (Version: 12.0.6612.1000)
Microsoft Office Shared MUI (English) 2007 (Version: 12.0.6612.1000)
Microsoft Office Shared Setup Metadata MUI (English) 2007 (Version: 12.0.6612.1000)
Microsoft Office Word MUI (English) 2007 (Version: 12.0.6612.1000)
Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 (Version: 8.0.50727.4053)
Microsoft Visual C++ 2005 Redistributable (Version: 8.0.61001)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (Version: 9.0.30729.4148)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (Version: 9.0.30729.6161)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (Version: 10.0.40219)
PlayStation®Network Downloader (Version: 2.07.00849)
PlayStation®Store (Version: 4.5.15.13232)
PunkBuster Services (Version: 0.988)
QuickTime (Version: 7.71.80.42)
Skype Click to Call (Version: 5.9.9216)
Skype™ 5.10 (Version: 5.10.116)
Spotify (Version: 0.4.9)
Spotify (Version: 0.8.3.222.g317ab79d)
swMSM (Version: 12.0.0.1)
Synaptics Pointing Device Driver (Version: 10.0.13.2)
Texas Instruments PCIxx21/x515/xx12 drivers. (Version: 2.00.0004)
TIPCI (Version: 2.00.0004)
Update for 2007 Microsoft Office System (KB967642)
Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (Version: 1)
Update for Microsoft Office 2007 Help for Common Features (KB963673)
Update for Microsoft Office Access 2007 Help (KB963663)
Update for Microsoft Office Excel 2007 Help (KB963678)
Update for Microsoft Office Infopath 2007 Help (KB963662)
Update for Microsoft Office OneNote 2007 Help (KB963670)
Update for Microsoft Office Outlook 2007 (KB2596598) 32-Bit Edition
Update for Microsoft Office Outlook 2007 Help (KB963677)
Update for Microsoft Office Outlook 2007 Junk Email Filter (KB2687407) 32-Bit Edition
Update for Microsoft Office Powerpoint 2007 Help (KB963669)
Update for Microsoft Office Publisher 2007 Help (KB963667)
Update for Microsoft Office Script Editor Help (KB963671)
Update for Microsoft Office Word 2007 Help (KB963665)
Visual Studio 2012 x86 Redistributables (Version: 14.0.0.1)

========================= Memory info: ===================================

Percentage of memory in use: 34%
Total physical RAM: 2047.43 MB
Available physical RAM: 1333.66 MB
Total Pagefile: 4094.86 MB
Available Pagefile: 3415.68 MB
Total Virtual: 2047.88 MB
Available Virtual: 1940.55 MB

========================= Partitions: =====================================

1 Drive c: () (Fixed) (Total:29.2 GB) (Free:2.72 GB) NTFS
2 Drive d: (Data) (Fixed) (Total:63.86 GB) (Free:24.84 GB) NTFS

========================= Users: ========================================

User accounts for \\JEZ-NC6400

Administrator            Guest                    Jez                     

**** End of log ****

 

 

i downloaded speccy but it crashes upon opening



#4 hamluis

hamluis

    Moderator


  • Moderator
  • 55,726 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Killeen, TX
  • Local time:03:55 AM

Posted 01 October 2013 - 05:43 PM

Post the error message appearing when attempting to run Speccy, please.

 

You clearly don't have enough free space on the Windows partition for Windows to perform reliably.  Recommended percentage is approximately 10-15% for Windows 7 installs.

 

Louis


Edited by hamluis, 01 October 2013 - 05:53 PM.


#5 jez1213

jez1213
  • Topic Starter

  • Members
  • 5 posts
  • OFFLINE
  •  
  • Local time:09:55 AM

Posted 02 October 2013 - 12:41 PM

i have attached a .jpg screenshot of the error message that appears

 

cpu init failed (error 2) some information will not be displayed

Attached Files



#6 hamluis

hamluis

    Moderator


  • Moderator
  • 55,726 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Killeen, TX
  • Local time:03:55 AM

Posted 02 October 2013 - 02:12 PM

You clearly don't have enough free space on the Windows partition for Windows to perform reliably.  Recommended percentage is approximately 10-15% for Windows 7 installs.

 

Louis

 

One more time...this needs to be addressed by moving files, using a larger hard drive, etc.

 

I would move the contents of My Videos, My Photos, etc...to the other partition.

 

Louis



#7 jez1213

jez1213
  • Topic Starter

  • Members
  • 5 posts
  • OFFLINE
  •  
  • Local time:09:55 AM

Posted 02 October 2013 - 02:43 PM

thanks for the suggestion i will create some extra space but i am reasonably certain that the cause of my laptop breaking is due to either a virus or a driver issue or a hardware fault (hopefully not a hardware fault). i have been using it for the past year or so with that amount of spare capacity in the c: drive and it has been working fine

 

according to bluescreenview the last few crashes have all been because of the atikmdag.sys driver, with a stop code of 0x00000116, the other crashes in the last two weeks have had codes 0x00000050 , 0x100000ea and 0x1000008e . What do these codes actually mean?

 

Jez



#8 hamluis

hamluis

    Moderator


  • Moderator
  • 55,726 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Killeen, TX
  • Local time:03:55 AM

Posted 02 October 2013 - 03:19 PM

Well...I'm not trying to change your mind about the relationship between cause and effect...but I've given you my interpretation of what I see.  It's OK with me if you see something different...but many of us know that any malfunction apparent when the Windows partition doesn't have sufficient space....just may be attributable to the fact that it cannot perform in a normal operational pattern as long as that condition persists.

 

Louis



#9 jez1213

jez1213
  • Topic Starter

  • Members
  • 5 posts
  • OFFLINE
  •  
  • Local time:09:55 AM

Posted 02 October 2013 - 03:54 PM

ok so i tried uninstalling some unused programs but i got the windows installer error " the windows installer service could not be accessed. this can occur if the windows installer is not correctly installed. contact your support personnel for assistance" which prior to this i have not seen before.

 

is this because i am running in safe mode with networking or a genuine problem? when i try to start up the computer normally it gets to the welcome screen but when i type a password it crashes, so i cant use it normally at the moment

 

Jez






0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users