Weird Problem

GokAy · 25 Jun 2015

Hey all, we have a saying here along the lines of "A tailor can't fix his own holes" :) so I am here asking for any advice.

I have been getting a strange glitch where windows stop refreshing and menus and informational pop-ups (like when you hover mouse on title of a webpage) turn black. The context menu for example when right clicked show correct for a split second and covered by a black overlay.

This started after I installed a program called QTTabBar (but not sure if they are related). Today it happened twice in 20 minute interval, but possible it won't happen for 3 days. Remedy has been to log off and log back in.

I have already restored to an image from before the install. And also cleaned the startup a bit. But still happening.

Attaching the DM log collector from a few days earlier (had a random BSOD) results in case you want to check the state of the system.

Weird Problem-20150619_185811401_ios.jpg

Boozad · 25 Jun 2015

There are a couple of drivers showing up in your dump file.

Kaspersky:

Code:

fffff880`02db6068  fffff880`038e7558Unable to load image klif.sys, Win32 error 0n2
*** WARNING: Unable to verify timestamp for klif.sys
*** ERROR: Module load completed but symbols could not be loaded for klif.sys
 klif+0x21558

Code:

KLIF         Kaspersky Lab Driver   Kaspersky Lab Driver   File System   System     Running    OK         TRUE        FALSE        147,456    241,664    0      3/11/2014 1:13:11 PM   C:\Windows\system32\DRIVERS\klif.sys

Zone Alarm Firewall:

Code:

BugCheck 7E, {ffffffffc0000005, fffff88007f4ecd8, fffff88002db6978, fffff88002db61d0}

*** WARNING: Unable to verify timestamp for vsdatant.sys
*** ERROR: Module load completed but symbols could not be loaded for vsdatant.sys
Probably caused by : vsdatant.sys ( vsdatant+ecd8 )

Code:

Vsdatant     Zone Alarm Firewall Dr Zone Alarm Firewall Dr Kernel        System     Running    OK         TRUE        FALSE        12,288     380,928    0      6/4/2014 3:03:11 AM    C:\Windows\system32\DRIVERS\vsdatant.sys

I don't see any trace of Kaspersky on your system, have you had it installed and then uninstalled it?

GokAy · 25 Jun 2015

Nope, never had it installed. Been using ZA for 5+ years.

It is this:

Weird Problem-lan-properties-kaspersky.jpg

I have it on my laptop too, which is unrelated. They both have ZA Extreme Security, maybe it is installing it.

Arc has already checked the dmp for me and we are aware of ZA causing the BSOD, I have my eyes watching it. :)

Thanks for your input, much appreciated!

Edit: Just checked ZA forums

NDIS is part of Kaspersky and as ZA uses Kaspersky engine it is also included in ZA (antivirus versions).