Windows 7 Forums

Welcome to Windows 7 Forums. Our forum is dedicated to helping you find support and solutions for any problems regarding your Windows 7 PC be it Dell, HP, Acer, Asus or a custom build. We also provide an extensive Windows 7 tutorial section that covers a wide range of tips and tricks.


Windows 7: UKASH for 3rd time

27 Sep 2013   #21
darrenj1471

windows 7 64 bit
 
 

Believe same as before, is this related? Certainly never happened prior to latest UKASH but could it be related a failed repair?




Attached Thumbnails
UKASH for 3rd time-20130927_195613.jpg  
My System SpecsSystem Spec
.
27 Sep 2013   #22
cottonball

Windows 7 Home Premium
 
 

Can you get to Safe Mode and see if the Stop: 0x00000050 Blue screen happens then?

At this point, the ransomware may not be the case, there may be another cause for those BSODs.
My System SpecsSystem Spec
27 Sep 2013   #23
darrenj1471

windows 7 64 bit
 
 

Safe mode seems ok ie does not exhibit the bsod problem. ..
Does show a message saying windows has recovered from an unexpected shutdown (thats an understatement)
My System SpecsSystem Spec
.

27 Sep 2013   #24
cottonball

Windows 7 Home Premium
 
 

See if you can boot to Safe Mode with Networking, and try running Malwarebytes Anti-Malware as specified in Post #12.

If you can run it, please post its results.


Edit: Once done with the above, see if you can temporarily disable your Antivirus program (AVG 2013)
http://www.avg.com/ww-en/faq.num-4497

Then, boot to normal mode, and see if you get any BSODs.
My System SpecsSystem Spec
27 Sep 2013   #25
Arc

Microsoft Community Contributor Award Recipient

Microsoft Windows 10 Pro Insider Preview 64-bit
 
 

Hi darrenj1471. Can you post following the Blue Screen of Death (BSOD) Posting Instructions? It will help us to know more about the BSOD.
My System SpecsSystem Spec
28 Sep 2013   #26
darrenj1471

windows 7 64 bit
 
 

Safe Mode with Networking was working fine, and Im actually posting this message from the infected PC now, but as soon as I double clicked the downloaded MBAM program the BSOD appeared
My System SpecsSystem Spec
28 Sep 2013   #27
cottonball

Windows 7 Home Premium
 
 

darrenj1471,

Please follow Arc's instructions. There is something more going on here...
My System SpecsSystem Spec
29 Sep 2013   #28
darrenj1471

windows 7 64 bit
 
 

I dont know if Im supposed to be doing a complete memory dump or kernel? And should I be doing it from Safe Mode or safe mode with networking?

Sorry be dumb but Arc can you advise which mode I need to load the infected/problematic pc and which option Im doing ie 'no dump at bsod' or one of the plethora of others
My System SpecsSystem Spec
29 Sep 2013   #29
darrenj1471

windows 7 64 bit
 
 

Ok I winged it, I started in safe mode and changed the dump option from Kernel to Smallfile (no idea why I chose that or what I was supposed to do). I then restarted the laptop in Safe Mode with Networking and have run the SF tool

Attached is the results and I hope you can use this to help, or advise me what I should do exactly ? Thanks


Attached Files
File Type: rar SF_29-09-2013.rar (1.57 MB, 8 views)
My System SpecsSystem Spec
29 Sep 2013   #30
Arc

Microsoft Community Contributor Award Recipient

Microsoft Windows 10 Pro Insider Preview 64-bit
 
 

Hi darrenj1471.

Boot into Safe mode. Browse to C:\Windows\Font and delete any/all font you have installed lately just prior to the time this issue is started.

Then Browse to C:\Windows\System32\Fntcache.dat ..... delete the Fntcache.dat file.

Now restart the computer in normal mode. Observe how it is working. If it is BSODing again, post once again following the Blue Screen of Death (BSOD) Posting Instructions.
__________________________________________________________________________________
Code:
Child-SP          RetAddr           Call Site
fffff880`04b33bf8 fffff800`02301be0 nt!KeBugCheckEx
fffff880`04b33c00 fffff800`02281cae nt! ?? ::FNODOBFM::`string'+0x4518f
fffff880`04b33d60 fffff960`000c2384 nt!KiPageFault+0x16e
fffff880`04b33ef0 fffff960`000c22cb win32k!sfac_GetLongGlyphIDs+0x84
fffff880`04b33f40 fffff960`000c21fa win32k!sfac_GetWinNTGlyphIDs+0xbb
fffff880`04b33fb0 fffff960`000c20ca win32k!fs_WinNTGetGlyphIDs+0x6a
fffff880`04b34000 fffff960`000c1e28 win32k!cjComputeGLYPHSET_MSFT_UNICODE+0x252
fffff880`04b340c0 fffff960`000b917f win32k!bLoadGlyphSet+0xf8
fffff880`04b340f0 fffff960`000b931e win32k!bReloadGlyphSet+0x24b
fffff880`04b347b0 fffff960`000b9276 win32k!ttfdQueryFontTree+0x66
fffff880`04b34800 fffff960`00105fdb win32k!ttfdSemQueryFontTree+0x5a
fffff880`04b34840 fffff960`00105e87 win32k!PDEVOBJ::QueryFontTree+0x63
fffff880`04b348c0 fffff960`000c007a win32k!PFEOBJ::pfdg+0xa3
fffff880`04b34920 fffff960`0011a74c win32k!RFONTOBJ::bRealizeFont+0x46
fffff880`04b34a40 fffff960`000bc03c win32k!RFONTOBJ::bInit+0x548
fffff880`04b34b60 fffff960`000c6f2b win32k!GreGetTextMetricsW+0x4c
fffff880`04b34ba0 00000000`00000000 win32k!NtGdiGetTextMetricsW+0x1f
My System SpecsSystem Spec
Reply

 UKASH for 3rd time




Thread Tools Search this Thread
Search this Thread:

Advanced Search




Similar help and support threads
Thread Forum
UKASH Virus .....again :(
Hi there I have the dreaded Ukash virus again, exactly as per last time and last time I was kindly helped in this thread: http://www.sevenforums.com/system-security/249497-ukash-virus-simply-wont-go-away-help-pleeeaase.html Can you advise what I need to do to remove it as I guess the...
System Security
Help with the Ukash Virus Please
Hi. My laptop has recently gotten the Ukash Virus. It won’t let me start the laptop in any version of Safe Mode (either With Networking or With Command Prompt). By reading some of the other posts on this site I think I need to download something called Windows Defender Offline? Is this right?...
System Security
HELP > ukash virus :(
:cry: Followed the instructions from this thread http://www.sevenforums.com/system-security/249497-ukash-virus-simply-wont-go-away-help-pleeeaase.html Need a little help Please and thanks
System Security
ukash infection
no idea how. last night all was ok, did not download anything at all. this morning, I woke up to find my remote computer being infected with the ukash virus/trojan! all my Windows is updated as is my AV (symantec SBE) - no idea how i got this infection. The worst part is that I wont be home...
System Security
I need help removing Ukash virus please!
Im fixing a laptop here that is infected by the Ukash virus. After some research there seems to be a few different versions. They all do the same thing tho. They lock your computer and show a screen sayin your PC has been locked because you where on some illegal websites. They give you a link...
System Security
UKASH virus
Hi all, I have downloaded defender to a usb stick, problem is it wont boot from the stick. I have the UKASH virus and can't even get into safe mode it just throws me out. If my machine is not formatted to boot from usb and I can't get in to change it what options do I have. Is there a way of...
System Security


Our Sites

Site Links

About Us

Find Us

Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

© Designer Media Ltd

All times are GMT -5. The time now is 00:21.

Twitter Facebook Google+



Windows 7 Forums

Seven Forums Android App Seven Forums IOS App