BSOD A device driver attempting to corrupt the system has been caught.

ScrumpyDorito said:

zigzag3143 said:

The majority of these (and driver verified) were Related to dtsoftbus01.sys Virtual Bus Driver from DT Soft Ltd

I would remove it

How do I find this file? Because I uninstalled Daemon Tool lite a while back.

Try searching for it.

It should be in C:\windows\system32\...

zigzag3143 said:

ScrumpyDorito said:

zigzag3143 said:

The majority of these (and driver verified) were Related to dtsoftbus01.sys Virtual Bus Driver from DT Soft Ltd

I would remove it

How do I find this file? Because I uninstalled Daemon Tool lite a while back.

Try searching for it.

It should be in C:\windows\system32\...

Edit: I did a search on the registry for any leftover daemon tools, I found dtsoftbus01.sys but it wont let me delete it

I dont see anything in the system32 files pertaining to dtsoftbus01.sys

ScrumpyDorito said:

zigzag3143 said:

ScrumpyDorito said:

How do I find this file? Because I uninstalled Daemon Tool lite a while back.

Try searching for it.

It should be in C:\windows\system32\...

Edit: I did a search on the registry for any leftover daemon tools, I found dtsoftbus01.sys but it wont let me delete it

I dont see anything in the system32 files pertaining to dtsoftbus01.sys

Where is your copy located?


Have you tried removing it in safe mode (F8)?

Its located in the registry in HKEY-LOCALMACHINE/SOFTARE/WOW6432NODE/MICROSOFT/windows/currentversion/setup/PNPLOCKDOWNFILES

It isnt actually installed because it doesnt show in the SYS32 files and no recorded documents, it was only in the registry.

Its still in the registry and it wont let me delete it either even though I ran in as ADMIN. Cant seem to change it to full control when I go into regedit properties.

ScrumpyDorito said:

Its located in the registry in HKEY-LOCALMACHINE/SOFTARE/WOW6432NODE/MICROSOFT/windows/currentversion/setup/PNPLOCKDOWNFILES

It isnt actually installed because it doesnt show in the SYS32 files and no recorded documents, it was only in the registry.

Its still in the registry and it wont let me delete it either even though I ran in as ADMIN. Cant seem to change it to full control when I go into regedit properties.

You need to take ownership of that key. To do so:
1. Click on the Start Menu
2. Type regedit into the Search for programs and files box(do not hit enter)
3. Right click regedit.exe and click Run as administrator
4. Find the key you mention above
5. Right click the key in the left pane
6. Click Permissions
7. Click Advanced
8. Click the Owner tab
9. Select your user from the list below Change owner to:...If your user is not listed under Change owner to:, click Other users or groups... and enter your username exactly as it appears in C:\Users, then select your user from the list
10. Tick the box to Replace owner on subcontainers and objects
11. Hit OK.
12. Select your user from the Group or user names. If your user is not listed, click Add and again type in your user name as it appers in C:\Users, then select your user from the list
13. Tick the box under Allow for full control.
14. Hit OK
15. You should now be able to delete the key.

writhziden said:

ScrumpyDorito said:

Its located in the registry in HKEY-LOCALMACHINE/SOFTARE/WOW6432NODE/MICROSOFT/windows/currentversion/setup/PNPLOCKDOWNFILES

It isnt actually installed because it doesnt show in the SYS32 files and no recorded documents, it was only in the registry.

Its still in the registry and it wont let me delete it either even though I ran in as ADMIN. Cant seem to change it to full control when I go into regedit properties.

You need to take ownership of that key. To do so:
1. Click on the Start Menu
2. Type regedit into the Search for programs and files box(do not hit enter)
3. Right click regedit.exe and click Run as administrator
4. Find the key you mention above
5. Right click the key in the left pane
6. Click Permissions
7. Click Advanced
8. Click the Owner tab
9. Select your user from the list below Change owner to:...If your user is not listed under Change owner to:, click Other users or groups... and enter your username exactly as it appears in C:\Users, then select your user from the list
10. Tick the box to Replace owner on subcontainers and objects
11. Hit OK.
12. Select your user from the Group or user names. If your user is not listed, click Add and again type in your user name as it appers in C:\Users, then select your user from the list
13. Tick the box under Allow for full control.
14. Hit OK
15. You should now be able to delete the key.

I have successfuly deleted the key, should I run driver verifier and post the dump files on here to see if it has been sorted?

ScrumpyDorito said:

writhziden said:

ScrumpyDorito said:

Its located in the registry in HKEY-LOCALMACHINE/SOFTARE/WOW6432NODE/MICROSOFT/windows/currentversion/setup/PNPLOCKDOWNFILES

It isnt actually installed because it doesnt show in the SYS32 files and no recorded documents, it was only in the registry.

Its still in the registry and it wont let me delete it either even though I ran in as ADMIN. Cant seem to change it to full control when I go into regedit properties.

You need to take ownership of that key. To do so:
1. Click on the Start Menu
2. Type regedit into the Search for programs and files box(do not hit enter)
3. Right click regedit.exe and click Run as administrator
4. Find the key you mention above
5. Right click the key in the left pane
6. Click Permissions
7. Click Advanced
8. Click the Owner tab
9. Select your user from the list below Change owner to:...If your user is not listed under Change owner to:, click Other users or groups... and enter your username exactly as it appears in C:\Users, then select your user from the list
10. Tick the box to Replace owner on subcontainers and objects
11. Hit OK.
12. Select your user from the Group or user names. If your user is not listed, click Add and again type in your user name as it appers in C:\Users, then select your user from the list
13. Tick the box under Allow for full control.
14. Hit OK
15. You should now be able to delete the key.

I have successfuly deleted the key, should I run driver verifier and post the dump files on here to see if it has been sorted?

Yes. Sounds good to me

Uploaded are the BSOD dump files after running driver verifier

ScrumpyDorito said:

Uploaded are the BSOD dump files after running driver verifier

Driver verified and Related to luafv.sys Sterownik filtru wirtualizacji plików LUA from Microsoft Corporation.