BSOD every shutdown & restart

inmnz · 28 Nov 2011

Hi I am running Windows 7, 64 bit
I am getting BSOD every shutdown and restart.

I have recently uninstalled ubuntu (I had dual boot going) and also removed 1 or 2 serious trojan/virus files with Lavasoft Ad-aware antivirus program.

I'm pretty sure I installed windows before I installed ubuntu, about a year ago, full retail.

the age of my system is also about 1 year

Problem signature:
Problem Event Name: BlueScreen
OS Version: 6.1.7601.2.1.0.256.48
Locale ID: 5129

Additional information about the problem:
BCCode: f4
BCP1: 0000000000000003
BCP2: FFFFFA8003E20910
BCP3: FFFFFA8003E20BF0
BCP4: FFFFF800031E48B0
OS Version: 6_1_7601
Service Pack: 1_0
Product: 256_1

Files that help describe the problem:
C:\Windows\Minidump\112911-25864-01.dmp
C:\Users\Ivan\AppData\Local\Temp\WER-41605-0.sysdata.xml

to be honest I think the virus ****ed me over, but yeah any help on this pls?

joodoo · 28 Nov 2011

Hi, inmnz.
You could try to remove remnants of the virus/malware with bootable media and such, but it is my opinion that a machine that has been infected rarely recovers fully.
I would cut my losses and reinstall to a cleaned HDD; unless of course you have a previously created system image that you can recover from.
Sorry if this is not the news you came to hear. I am sure there will be other offers of assist forthcoming from this venerated group of volunteers.

inmnz · 29 Nov 2011

yeah, that has crossed my mind as an option.

A friend has however given me instructions on how to locate and remove the persistent virus that I do have, but turns out it's quite a 'noob' virus and so shouldn't be too hard to get rid of. will post if I successfully remove it...

Edit:

done my research... Turns out the virus isn't so noob after all, I think it has edited a batch of my registries so that whenever I try and end the process, it prompts me to shut down my computer, and puts me into a BSOD. Similarly when I go into msconfig and uncheck the process' startup boxes, and apply the changes, if I close the window and return to msconfig the box is immediately checked again ie. this is the viruses' persistence. it will always be running.

so - I need to find some way to scan which of my registries have been edited, and change them back to normal, and kill the virus? can anyone help on this?

I guess this thread now needs to be moved to a more appropriate forum? Its a virus issue rather than a 'crashing' error...

Edit 2:

admin removed the files in safe mode and unchecked the start up boxes. all good now. Lol, it was a noob virus.

joodoo · 29 Nov 2011

Glad it's brought under control - for now. Let's hope the intruder doesn't rear it's ugly head again.

zigzag3143 · 29 Nov 2011

inmnz said:

Hi I am running Windows 7, 64 bit
I am getting BSOD every shutdown and restart.

I have recently uninstalled ubuntu (I had dual boot going) and also removed 1 or 2 serious trojan/virus files with Lavasoft Ad-aware antivirus program.

I'm pretty sure I installed windows before I installed ubuntu, about a year ago, full retail.

the age of my system is also about 1 year

Problem signature:
Problem Event Name: BlueScreen
OS Version: 6.1.7601.2.1.0.256.48
Locale ID: 5129

Additional information about the problem:
BCCode: f4
BCP1: 0000000000000003
BCP2: FFFFFA8003E20910
BCP3: FFFFFA8003E20BF0
BCP4: FFFFF800031E48B0
OS Version: 6_1_7601
Service Pack: 1_0
Product: 256_1

Files that help describe the problem:
C:\Windows\Minidump\112911-25864-01.dmp
C:\Users\Ivan\AppData\Local\Temp\WER-41605-0.sysdata.xml

to be honest I think the virus ****ed me over, but yeah any help on this pls?

Related to cBam.exe which may be viral. run malwarebytes to confirm

inmnz · 29 Nov 2011

@ zigzag yeah it was, how did you know? I'm interested to learn

zigzag3143 · 29 Nov 2011

inmnz said:

@ zigzag yeah it was, how did you know? I'm interested to learn

The file that was blamed had no references in google, and that usually indicates malware.