BSoD playing certain games, various error codes (usually 0x03b)

Page 3 of 8 FirstFirst 12345 ... LastLast

  1. Posts : 21,482
    Win 7 x64 Home Premium (and x86 VirtualBox VM)/Win10
       #21

    Hmmm -
    Please download and install Malwarebytes Anti-malware (free version) from http://www.malwarebytes.org/products/malwarebytes_free/ - UNtick 'Enable free trial of MBAM PRO' at the end of the installation - and update it, then run a full scan in your main account, and Quick scans in any other user accounts.

    Delete everything it finds
      My Computer


  2. Posts : 82
    Windows 7 Professional x64
    Thread Starter
       #22

    The only thing found was "BundleOffers" something in my recycle bin, which I removed. I will restart and run another SFC and see what happens, and edit this post.

    EDIT: Same as last time. First it reports not being able to repair everything, then reports successfully repairing them.
    Last edited by msgerbs; 18 Nov 2012 at 21:16.
      My Computer


  3. Posts : 21,482
    Win 7 x64 Home Premium (and x86 VirtualBox VM)/Win10
       #23

    Please run the following command in an Elevated Command Prompt...

    Code:
     
    ICACLS C:\Windows\Help\mui\0409\diskmgt.chm
    DIR C:\Windows\Help\mui\0409\diskmgt.chm
    ATTRIB C:\Windows\Help\mui\0409\diskmgt.chm
    SFC /scanfile=C:\Windows\Help\mui\0409\diskmgt.chm
    ICACLS C:\Windows\Help\mui\0409\diskmgt.chm
    DIR C:\Windows\Help\mui\0409\diskmgt.chm
    ATTRIB C:\Windows\Help\mui\0409\diskmgt.chm
    ICACLS C:\Windows\winsxs\amd64_server-help-chm.diskm_v.resources_31bf3856ad364e35_6.1.7600.16385_en-us_d76955a45e11858c\diskmgt.chm
    post the results
      My Computer


  4. Posts : 82
    Windows 7 Professional x64
    Thread Starter
       #24

    Here are the results:
    Code:
    Microsoft Windows [Version 6.1.7600]
    Copyright (c) 2009 Microsoft Corporation.  All rights reserved.
    
    C:\Windows\system32>ICACLS C:\Windows\Help\mui\0409\diskmgt.chm
    C:\Windows\Help\mui\0409\diskmgt.chm NT SERVICE\TrustedInstaller:(F)
                                         BUILTIN\Administrators:(RX)
                                         NT AUTHORITY\SYSTEM:(RX)
                                         BUILTIN\Users:(RX)
    
    Successfully processed 1 files; Failed processing 0 files
    
    C:\Windows\system32>DIR C:\Windows\Help\mui\0409\diskmgt.chm
     Volume in drive C has no label.
     Volume Serial Number is 228C-77CF
    
     Directory of C:\Windows\Help\mui\0409
    
    04/12/2011  08:17 AM            79,785 diskmgt.CHM
                   1 File(s)         79,785 bytes
                   0 Dir(s)  670,138,163,200 bytes free
    
    C:\Windows\system32>ATTRIB C:\Windows\Help\mui\0409\diskmgt.chm
    A            C:\Windows\Help\mui\0409\diskmgt.CHM
    
    C:\Windows\system32>SFC /scanfile=C:\Windows\Help\mui\0409\diskmgt.chm
    
    
    Windows Resource Protection did not find any integrity violations.
    
    C:\Windows\system32>ICACLS C:\Windows\Help\mui\0409\diskmgt.chm
    C:\Windows\Help\mui\0409\diskmgt.chm NT SERVICE\TrustedInstaller:(F)
                                         BUILTIN\Administrators:(RX)
                                         NT AUTHORITY\SYSTEM:(RX)
                                         BUILTIN\Users:(RX)
    
    Successfully processed 1 files; Failed processing 0 files
    
    C:\Windows\system32>DIR C:\Windows\Help\mui\0409\diskmgt.chm
     Volume in drive C has no label.
     Volume Serial Number is 228C-77CF
    
     Directory of C:\Windows\Help\mui\0409
    
    04/12/2011  08:17 AM            79,785 diskmgt.CHM
                   1 File(s)         79,785 bytes
                   0 Dir(s)  670,136,668,160 bytes free
    
    C:\Windows\system32>ATTRIB C:\Windows\Help\mui\0409\diskmgt.chm
    A            C:\Windows\Help\mui\0409\diskmgt.CHM
    
    C:\Windows\system32>ICACLS C:\Windows\winsxs\amd64_server-help-chm.diskm_v.resou
    rces_31bf3856ad364e35_6.1.7600.16385_en-us_d76955a45e11858c\diskmgt.chm
    C:\Windows\winsxs\amd64_server-help-chm.diskm_v.resources_31bf3856ad364e35_6.1.7
    600.16385_en-us_d76955a45e11858c\diskmgt.chm NT SERVICE\TrustedInstaller:(F)
    
                                                 BUILTIN\Administrators:(RX)
    
                                                 NT AUTHORITY\SYSTEM:(RX)
    
                                                 BUILTIN\Users:(RX)
    
    Successfully processed 1 files; Failed processing 0 files
    
    C:\Windows\system32>
      My Computer


  5. Posts : 21,482
    Win 7 x64 Home Premium (and x86 VirtualBox VM)/Win10
       #25

    That all looks normal - apart from the date of the file itself. (no version 16385/6 file can normally have a date after July 2009)

    I should have also asked for this one....

    Code:
     
    DIR C:\Windows\winsxs\amd64_server-help-chm.diskm_v.resources_31bf3856ad364e35_6.1.7600.16385_en-us_d76955a45e11858c\diskmgt.chm
      My Computer


  6. Posts : 82
    Windows 7 Professional x64
    Thread Starter
       #26

    Code:
    Microsoft Windows [Version 6.1.7600]
    Copyright (c) 2009 Microsoft Corporation.  All rights reserved.
    
    C:\Windows\system32>DIR C:\Windows\winsxs\amd64_server-help-chm.diskm_v.resource
    s_31bf3856ad364e35_6.1.7600.16385_en-us_d76955a45e11858c\diskmgt.chm
     Volume in drive C has no label.
     Volume Serial Number is 228C-77CF
    
     Directory of C:\Windows\winsxs\amd64_server-help-chm.diskm_v.resources_31bf3856
    ad364e35_6.1.7600.16385_en-us_d76955a45e11858c
    
    04/12/2011  08:17 AM            79,785 diskmgt.CHM
                   1 File(s)         79,785 bytes
                   0 Dir(s)  669,764,075,520 bytes free
    
    C:\Windows\system32>
      My Computer


  7. Posts : 21,482
    Win 7 x64 Home Premium (and x86 VirtualBox VM)/Win10
       #27

    I've seen similar problems to this elsewhere - and suspect that they are the result of malware attacks

    I'll craft a fix, and we'll see if it changes anything.
      My Computer


  8. Posts : 82
    Windows 7 Professional x64
    Thread Starter
       #28

    NoelDP said:
    I've seen similar problems to this elsewhere - and suspect that they are the result of malware attacks

    I'll craft a fix, and we'll see if it changes anything.
    What is the problem, specifically, if I may ask?

    That seems strange, because I can't recall getting any malware on this system, and malwarebytes and MSE both turned up clean. Either something else caused it, or there's something that's been hiding very deep for a very long time. I've had none of the usual signs of malware, either... Seems like a strange set of files for malware to target, but who am I to judge.
      My Computer


  9. Posts : 21,482
    Win 7 x64 Home Premium (and x86 VirtualBox VM)/Win10
       #29

    I've uploaded a file - msgerbs2.zip - to my SkyDrive at https://skydrive.live.com/#cid=936736BB8FCEB92F&id=936736BB8FCEB92F%21526
    Please download and save it.
    Right-click on the saved file and select Extract all...
    Change the target to C:\ and click on Extract
    This should create a folder C:\msgerbs2
    Close all windows (it would be a good idea to print these instructions!)
    Now reboot to the Repair Environment - as soon as the machine restarts, start tapping F8 - this should bring up the Advanced Boot Menu, at the top of which should be the option 'Repair my Computer'
    Pick that
    You'll have to log in with your username and password.
    Pick the option to use a Command Prompt
    At the prompt type
    DIR C:\msgerbs2
    hit the enter key - if you get a 'Not Found' error try
    DIR D:\msgerbs2
    or
    DIR E:\msgerbs2

    The drive letter in use when you find the folder will need to be substituted (for<drive>) into the following command...

    XCOPY <drive>:\msgerbs2 <drive>:\windows\winsxs /y /i /s /v /h

    run the command (it should take almost no time)and when the prompt returns, type
    EXIT
    and hit the Enter key to exit Command Prompt - reboot to Normal Mode Windows.
    Now run SFC /SCANNOW in an Elevated Command Prompt
    then reboot and upload the new CBS.log file to your SkyDrive Public folder, and post a new link
    Also run a new MGADiag report, and post the result.
      My Computer


  10. Posts : 21,482
    Win 7 x64 Home Premium (and x86 VirtualBox VM)/Win10
       #30

    msgerbs said:
    What is the problem, specifically, if I may ask?

    That seems strange, because I can't recall getting any malware on this system, and malwarebytes and MSE both turned up clean. Either something else caused it, or there's something that's been hiding very deep for a very long time. I've had none of the usual signs of malware, either... Seems like a strange set of files for malware to target, but who am I to judge.
    I suspect that it is the result of an attempt to infect a file - which either fails, because of being blocked; or succeeds, but is undone by the resident AV.
    The file appears totally normal, but is sometimes affected (possibly in the metadata, rather than the file content) and this throws the system off.

    We'll see what happens when you replace the main file and force the update to the working copy.
      My Computer


 
Page 3 of 8 FirstFirst 12345 ... LastLast

  Related Discussions
Our Sites
Site Links
About Us
Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

© Designer Media Ltd
All times are GMT -5. The time now is 11:55.
Find Us