Windows 7 Forums

Welcome to Windows 7 Forums. Our forum is dedicated to helping you find support and solutions for any problems regarding your Windows 7 PC be it Dell, HP, Acer, Asus or a custom build. We also provide an extensive Windows 7 tutorial section that covers a wide range of tips and tricks.


Windows 7: BSOD when turning off the computer

15 Mar 2014   #11
Arc

Microsoft Community Contributor Award Recipient

Microsoft Windows 10 Pro Insider Preview 64-bit
 
 

The BSOD crash dump says:
Code:
BugCheck F4, {3, fffffa800ca96600, fffffa800ca968e0, fffff800035847b0}

----- ETW minidump data unavailable-----
Probably caused by : lsass.exe

Followup: MachineOwner
---------
The location of the file is ...
Code:
"c:\users\מחשב\appdata\local\temp\lsass.exe"
Download, Install and Run CCleaner, Temp will be cleaned.

But my question is ... what the programs are? They are auto-starting with windows.
  • ef6805c25b5a2f877bc96e021971597e ef6805c25b5a2f877bc96e021971597e.exe ASAF\מחשב Startup
  • ef6805c25b5a2f877bc96e021971597e "c:\users\מחשב\appdata\local\temp\lsass.exe" .. ASAF\מחשב HKU\S-1-5-21-3037542322-3080866099-3372102490-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
Its a malware. And it is the source of the issue. It is faking itself as Local Security Authority Subsystem Service (LSASS).
Quote:
Because lsass.exe is a crucial system file, its name is often faked by malware. The lsass.exe file used by Windows is located in the folder C:\Windows\System32. If it is running from any other location, that lsass.exe is most likely a virus, spyware, trojan or worm.
Scan the system for possible virus infection with the following programs.
Free up the startup. Windows does not need any other program to auto start with it, but the auto start programs often conflicts and causes various problems including BSODs.
  1. Click on the Start button
  2. Type “msconfig (without quotes), click the resulting link. It will open the System Configuration window.
  3. Select the “Startup” tab.
  4. Deselect all items other than the antivirus.
  5. Apply > OK
  6. Accept then restart.
Daemon Tools, Alcohol 120% and Power Archiver Pro uses SCSI Pass Through Direct (SPTD), which is a well known BSOD causer. Uninstall Daemon Tools at first. Then download SPTD standalone installer from Disk-Tools.com, and execute the downloaded file as guided below :
  • Double click to open it.
  • Click this button only:
  • If it is grayed out, as in the picture, there is no more SPTD in your system, and you just close the window.
Let us know the results.


My System SpecsSystem Spec
.
15 Mar 2014   #12
Slartybart

x64 (6.3.9600) Win8.1 Pro & soon dual boot x64 (6.1.7601) Win7_SP1 HomePrem
 
 

muzz: Thank you for the feedback.

Arc: You beat me to malware. More scanners that might be necessary, but let's see what TDSSKiller and MDO find.

When you think the threat has been removed, I suggest an SFC run.
But not until all scanners have done their job.


Side commentary only -> I am not suggesting that muzz change course or that any of the utilities listed below be used in this thread.

I am listing the following as reference only.

Old timer-TFC is a powerful stand alone application that cleans up Temp files/Folders.
A three pronged temporary file cleanup approach is probably bestI also found a nice utility, StartupLite, published by Malwarebytes that 'repairs' startup RUN items. It's BETA, ... more real world testing will determine when an RTM becomes available.

I tested it on my system but of course there was nothing to correct

What StartupLite considers when processing startup entries: Malwarebytes forum post
Download StartupLite from Malwarebytes

StartupLite Usage (from the download page):
  • Simply download StartUpLight from the link above and save it to a convenient location
  • Double click StartUpLITE.exe
  • Select all options you would like executed and select continue
    I didn't see any options, it just reported "No unnecessary startups found!"
    The continue button was inactive, the X close worked
There are two things I have not tested
  • Restore changes (uses msconfig)
  • Custom list
The user should manually check the MSCONGIG Services tab and Startup tab after running StartupLite and report items that remain.

Bill
.
My System SpecsSystem Spec
15 Mar 2014   #13
Arc

Microsoft Community Contributor Award Recipient

Microsoft Windows 10 Pro Insider Preview 64-bit
 
 

Quote   Quote: Originally Posted by Slartybart View Post

Arc: You beat me to malware.
Slartybart, I did not beat you. I pointed to it only.

Better luck next time, when I will not be there.

Edit: Muzzz's post #5. Points the same thing that I posted in my post #11.
Quote:
BugCheck F4, {3, fffffa800c9af750, fffffa800c9afa30, fffff8000358c7b0}

----- ETW minidump data unavailable-----
Probably caused by : lsass.exe

Followup: MachineOwner
---------
Honestly saying, I totally overlooked it at my post #7, which later rectified.

You had post #9 in between. If you said it there, I would not have the chance to beat you.
My System SpecsSystem Spec
.

15 Mar 2014   #14
Slartybart

x64 (6.3.9600) Win8.1 Pro & soon dual boot x64 (6.1.7601) Win7_SP1 HomePrem
 
 

Yeah, I missed my window on post# 9 - I'm working on it, but my posts are already lengthy.

As long as the issue on muzzz's machine gets resolved.... that's why we're all here.

I'll go back to watching the thread and let my BSOD sensei do his work (it's not magic if...)

Bill
.
My System SpecsSystem Spec
Reply

 BSOD when turning off the computer




Thread Tools Search this Thread
Search this Thread:

Advanced Search




Similar help and support threads
Thread Forum
When turning off computer & turning it back on again screen is blank
Here is the issue, when my computer goes to sleep after it's on for a while when I move the mouse to get the screen back up it shows the backround no icons or anything to click. Same if I turn it off and turn it back on. I have to turn it off and on many times then go to safe mode and shut down...
General Discussion
BSOD when turning computer off
So my computer crashed again, but now it has a new error message. Last time it crashed it was two weeks ago and it gave me a error message with I ended up fixing by uninstalling and reinstalling the drivers. Here was the previous thread...
General Discussion
BSOD when turning on computer
I get the BSOD when I turn on my computer. Windows 7 then resets and tells me to start a safe start mode while it scans for solutions. No solutions are ever found. Attached is the SF Zip, any help would be great!!!
BSOD Help and Support
BSOD 0x00000A after turning on computer.
Hi, I am relatively new to this so please forgive me If i am not well versed on computer lingo. So I have a HP M6 1068ca. I was printing off some stuff when I accidently shut down my computer. (I meant to press sleep) When I opened my computer again, It showed the starting windows screen then...
BSOD Help and Support
BSOD - win32k.sys - within 10 min of turning on my computer
BSOD happens every time I run my computer not in safe mode, typically within 5-10minutes of logging on. Started 2 days ago. Windows 7 ultimate, 32x. The original OS was Windows XP. OS was installed within the year. Hardware is probably about 2-3 years old. And sadly, I have no idea what...
BSOD Help and Support
BSOD with shutting down my computer and turning cam on on msn
Hello i alwways get a bsod with shutting down my computer and if i try to go on webcam on msn. going on cam with skype or something else works :confused: this are the 2 bluescreens that i mostly get. already thanks for trying to help me. ==================================================...
BSOD Help and Support


Our Sites

Site Links

About Us

Find Us

Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

Designer Media Ltd

All times are GMT -5. The time now is 13:53.

Twitter Facebook Google+



Windows 7 Forums

Seven Forums Android App Seven Forums IOS App