So I was watching u-verse online (Marvels Agents of Shield) and everything just froze with a humming sound -- I could not move the cursor so I powered it off. The computer was restarted by me -- it rebooted fine but then crashed after a few minutes. Here is the BSOD log file for your review.
Hi tzxlyd,
Please upload a kernel dump to dropbox, onedrive, google drive or similar services/programs and post a share link in your next reply.
The kernel dump is located in C:\Windows\Memory.dmp
Here is the share link and I will post it to google drive. I may have caused it to be unreadable though because somehow I must have asked for an app called saavy archiver to open it -- I wasn't actually trying to do that but I must have. Do I need an email address to send it to for google drive to work?
C:\Users\mbessio\Desktop\Memory Dump
search-ms:displayname=Search%20Results%20in%20Local%20Disk%20(C%3A)&crumb=filename%3A~<memory.dmp%20OR%20Sy stem.Generic.String%3Amemory.dmp&crumb=location:C%3A%5C
Axeo,
I was asking about the email address to send the file to for google drive but I have sent you the link for drop box instead. I thought I was out of space on drop box but I still had space available.
https://dl.dropboxusercontent.com/u/...ump/MEMORY.rar
It all seems to be starting by an unloaded module, research shows that this may be related to malware.
Code:3: kd> k *** Stack trace for last set context - .thread/.cxr resets it # Child-SP RetAddr Call Site 00 00000027`704fd2b8 00007fff`d39efab6 ntdll!NtTerminateProcess+0x14 01 00000027`704fd2c0 00007fff`d39cdc50 ntdll!TppWorkerpInnerExceptionFilter+0x3f05a 02 00000027`704fd2f0 00007fff`d39b6bd6 ntdll!TppWorkerThread$filt$5+0x19 03 00000027`704fd330 00007fff`d39c5c42 ntdll!_C_specific_handler+0x96 04 00000027`704fd3a0 00007fff`d39cab9d ntdll!_GSHandlerCheck_SEH+0x76 05 00000027`704fd3d0 00007fff`d3969913 ntdll!RtlpExecuteHandlerForException+0xd 06 00000027`704fd400 00007fff`d39c9cba ntdll!RtlDispatchException+0x373 07 00000027`704fdb00 00007fff`bfd81dec ntdll!KiUserExceptionDispatch+0x3a 08 00000027`704fe210 00000027`704fe220 <Unloaded_SppExtComObjHook.dll>+0x1dec 09 00000027`704fe218 00000000`00000df8 0x00000027`704fe220 0a 00000027`704fe220 00100001`00000001 0xdf8 0b 00000027`704fe228 00000027`704fe380 0x00100001`00000001 0c 00000027`704fe230 00000000`00000000 0x00000027`704fe380
Please run a threat scan with Malwarebytes*, a full scan with your AV, scan your system with Adwcleaner, Kaspersky TTDSKiller, ESET Online Scanner and SuperAntiSpyware
Note
*(Uncheck trial version in the installation process)
Please upload the scan logs.
Axeo,
I will download and run the scans as you advised. Also, Windows Defender ran a scan not very long ago earlier today and said there were no threats detected. I will post what I find once all of the AVs you suggested have completed. Will the AVs you want me to run provide scan logs that can be attached for your review or will I have to post them on dropbox?
I am attaching the 2 reports I have so far -- I am getting a message that I have to remove an antivirus program before I can run the other programs but I wanted to make sure that is what I should do before taking any action -- should I remove Kaspersky before I run the remaining programs? Kaspersky shows there are programs that could cause harm but are not viruses on an external drive that is attached to the computer -- the drive is not mine so I wanted to make sure before I take any further action.
You shouldn't need to disable your AV, I've run all scans many times without disabling my AV.
Quote