Windows 7 Forums
Welcome to Windows 7 Forums. Our forum is dedicated to helping you find support and solutions for any problems regarding your Windows 7 PC be it Dell, HP, Acer, Asus or a custom build. We also provide an extensive Windows 7 tutorial section that covers a wide range of tips and tricks.


Windows 7: Random BSOD, Malware Suspected


09 Mar 2013   #1

Windows 7 Home Premium 64-bit SP1
 
 
Random BSOD, Malware Suspected

Hello,
I just had a BSOD. Everything was working fine for a few hours, then *blam*. I suspect malicious software for some reason, so can anybody help me try to find the reason? Just did an SFC scan, it's clean.
Thanks!
P.S. Look at my recent post HERE

My System SpecsSystem Spec
.

09 Mar 2013   #2
Arc

Microsoft Community Contributor Award Recipient

Windows 7 Home Premium 64 Bit SP 1
 
 

From your TDSSKiller log ....
Code:
13:17:45.0261 5460  Detected object count: 2
13:17:45.0261 5460  Actual detected object count: 2
13:17:54.0554 5460  HP Support Assistant Service ( UnsignedFile.Multi.Generic ) - skipped by user
13:17:54.0554 5460  HP Support Assistant Service ( UnsignedFile.Multi.Generic ) - User select action: Skip 
13:17:54.0554 5460  IconMan_R ( UnsignedFile.Multi.Generic ) - skipped by user
13:17:54.0554 5460  IconMan_R ( UnsignedFile.Multi.Generic ) - User select action: Skip
Dont skip but kill. That is why TDSSKiller for..... to kill them.

Run it again and kill.

If there are more issues even after killing, let us know.
My System SpecsSystem Spec
09 Mar 2013   #3

Windows 7 Home Premium 64-bit SP1
 
 

Thanks, but never mind. The 2 files are perfectly fine, but just unsigned. VirusTotal scanned them and there were negative.

I now need BSOD help
My System SpecsSystem Spec
.


09 Mar 2013   #4

Windows 7 Home Premium 64-bit SP1
 
 

Just did 3 scans in avast!: a rootkit scan, an autorun scan, and a memory scan. All 3 came back clean.
My System SpecsSystem Spec
09 Mar 2013   #5

Windows 7 Ultimate 32-Bit & Windows 7 Ultimate 64-Bit
 
 

Might want to scan with Malwarebytes

Malwarebytes : Malwarebytes Anti-Malware removes malware including viruses, spyware, worms and trojans, plus it protects your computer

Note   Note
Choose free version . When you're installing don't start the trial
My System SpecsSystem Spec
09 Mar 2013   #6

Windows 7 Home Premium 64-bit SP1
 
 

I believe that I have done a Malwarebytes scan pretty recently, but I will do another one
My System SpecsSystem Spec
09 Mar 2013   #7

Windows 7 Home Premium 64-bit SP1
 
 

I just did a full scan and there was 1 infected file. However, it was a false-positive.
My System SpecsSystem Spec
10 Mar 2013   #8
Arc

Microsoft Community Contributor Award Recipient

Windows 7 Home Premium 64 Bit SP 1
 
 

Your crash dumps are not showing any finite probable cause. In such a situation, it is better to enable Driver Verifier to monitor the drivers.
Driver Verifier - Enable and Disable
Run Driver Verifier for 24 hours or the occurrence of the next crash, whichever is earlier.

information   Information
Why Driver Verifier:
It puts a stress on the drivers, ans so it makes the unstable drivers crash. Hopefully the driver that crashes is recorded in the memory dump.

How Can we know that DV is enabled:
It will make the system bit of slow, laggy.

warning   Warning
Before enabling DV, make it sure that you have earlier System restore points made in your computer. You can check it easily by using CCleaner looking at Tools > System Restore.

If there is no points, make a System Restore Point manually before enabling DV.

Tip   Tip

Test your RAM modules for possible errors.
How to Test and Diagnose RAM Issues with Memtest86+
Run memtest for at least 8 passes, preferably overnight.

Let us know the results, with the subsequent crash dumps, if any.
My System SpecsSystem Spec
10 Mar 2013   #9

Windows 7 Home Premium 64-bit SP1
 
 

Just BSOD'd right after restart for Driver Verifier The driver is amd_sata.sys.
I tried updating my drivers, but all my AMD drivers are up to date.
I'll try uninstalling the SATA driver now.
EDIT: I can't uninstall the SATA driver. IDK what to do now :P
My System SpecsSystem Spec
10 Mar 2013   #10
Arc

Microsoft Community Contributor Award Recipient

Windows 7 Home Premium 64 Bit SP 1
 
 

It is Paragon Image Mounter (UIM) Plugin driver.
Code:
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck C4, {e1, fffff98001508f9c, 0, 0}

*** WARNING: Unable to verify timestamp for uim_vimx64.sys
*** ERROR: Module load completed but symbols could not be loaded for uim_vimx64.sys
Probably caused by : uim_vimx64.sys ( uim_vimx64+1827e )

Followup: MachineOwner
---------
Description here: Driver Reference Table - uim_vimx64.sys

I have seen a good number of issues caused by it .... Better you uninstall it.
Do you say that you have not installed Paragon? By any chance?
My System SpecsSystem Spec
Reply

 Random BSOD, Malware Suspected




Thread Tools



Similar help and support threads for2: Random BSOD, Malware Suspected
Thread Forum
Suspected Malware Causing BSOD System Security
Solved Malware suspected; found "My Web Search" System Security
Solved Suspected Malware System Security
Suspected Malware from a divix download prompt through WMP System Security
Random power off, suspected cause: SynTPEnh.exe Drivers
Random BSOD in a fresh install, suspected driver issue BSOD Help and Support
BSOD bsod 0x8e ....suspected due to corrupt drivers or virus? BSOD Help and Support

Our Sites

Site Links

About Us

Find Us

Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

Designer Media Ltd

All times are GMT -5. The time now is 09:20 PM.
Twitter Facebook Google+



Windows 7 Forums

Seven Forums Android App Seven Forums IOS App
  

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33