Solved Help with BSOD (page fault in nonpaged area)

Hi guys,

I really need some help here! I left my computer running overnight and after some Windows Update it has been giving me BSOD on startup, it doesn't even get to the login page, just BSODs. On Safe Mode it works fine but It wouldn´t start with a clean boot or diagnostics boot, just BSODs like in a normal boot. I have tried restoring to a previous date with no success (it gave me an error but after I loged into Safe Mode it told me it did restore, updates are no longer installed but i'm still getting BSOD). All of the files from the diagnostics tool are attached.

Thank you!!!

TDSSKILLER

download link :ar: TDSSKiller

Save to the Desktop

Right-click the program and select


When the TDSSKiller console opens, click on: Change Parameters
Under Additional Options, place a check in the box next to: Detect TDLFS File System

Click: OK


Press: Start Scan


If a suspicious object is detected, the default action is Skip, leave it as is, and click on: Continue
If malicious objects are found, they show in the Scan results.
Ensure Cure (the default) is selected, then click: Continue > Reboot now, to finish the cleaning process.
(Note: If Cure is not available, select Skip, >>Do not select: Delete<<)


When done, the tool outputs its log to the disk with the Windows Operating System, normally C:\


Logs have a name like:
C:\TDSSKiller.X.X.X_12.04.2013_15.31.43_log.txt


Please post the TDSSKiller log in your reply.

Hi VistaKing,

Thanks for your fast reply. Here is the log file, no threats were found.

Thank you!!!

Click here DDS

:ar: Click on Download Now button

:ar: When the download is complete . Drag the DDS program from the Downloads folder to your Desktop

:ar: Double click the DDS icon on the Desktop then click the Run button to run the tool.

:ar: Place a check next to attach.txt and click Start . When done, DDS will open two logs

• DDS.txt
• Attach.txt

:ar: Save two logs onto your desktop and upload them with your reply

How To Upload a File
Click on the Go Advanced button under the Message box . Scroll down to Additional Options then click on Manage Attachments in the Attach Files sections . Click the Browse button locate the file then click on the Open button . In the Upload File from your Computer section click on the Upload button . Wait until it finishes uploading then close the window . Then click Submit Reply .

Hi VistaKing,

Here are the files. Thanks again!

Run Malwarebytes

Download Link :ar: MalwareBytes

When the installation is done uncheck Enable free trial of Malwarebytes (see image below )



Update the definitions and do a full scan

:ar: On the Scanner tab:
Make sure the "Perform Full Scan" option is selected.
Then click on the Scan button.
:ar: If asked to select the drives to scan, leave all the drives selected and click on the Start Scan button.
:ar: The scan will begin and "Scan in progress" will show at the top. It may take some time to complete so please be patient.
:ar: When the scan is finished, a message box will say "The scan completed successfully. Click 'Show Results' to display all objects found".
:ar: Click OK to close the message box and continue with the removal process.
:ar: Back at the main Scanner screen, click on the Show Results button to see a list of any malware that was found.
:ar: Make sure that everything is checked, and click Remove Selected.
:ar: When removal is completed, a log report will open in Notepad.
:ar: The log is automatically saved and can be viewed by clicking the Logs tab in MBAM.
:ar: Copy and paste the contents of that report in your next reply and exit MBAM.

Log looks like this : mbam-log-yyyy-mm-dd

Log located : C:\Users\{Your UserName}\AppData\Roaming\Malwarebytes\Malwarebytes' Anti-Malware\Logs or C:\ProgramData\Malwarebytes\Malwarebytes' Anti-Malware\Logs

Ok here is the log file again. Thank you!

Download CKScanner by askey127 below

• Download link :ar: CKScanner
  
• Save it to your Desktop
  
• Right-click CKScanner.exe select
  
  
  
• Click Search For Files
  
• When the cursor hourglass disappears, click Save List To File
  
• A message box will verify the file saved
  
• Upload CKFiles.txt in your next reply

Done! Log attached. BTW I did not install any software or anything, computer was working fine untill some windows update restarted the computer when I was asleep and when I got here in the morning it was on the recovery screen... No BSODs before that. Thank you!

Run Farbar Recovery Scan Tool


64-Bit Version OS Farbar Recovery Scan Tool x64 <===== Download Link

Drag the FRST64.exe from the Downloads folder to your Desktop

Right click on FRST64.exe and choose

When the tool opens click Yes on the disclaimer window .

Press Scan button.

FRST will let you know when the scan is complete and has written the FRST.txt to file



Please upload both logs in your reply.(FRST.txt and Addition.txt)

:note: FRST.txt and Addition.txt will be on the Desktop :note:

Upload a File
Click on the Go Advanced button under the Message box . Scroll down to Additional Options then click on Manage Attachments in the Attach Files sections . Click the Browse button locate the file then click on the Open button . In the Upload File from your Computer section click on the Upload button . Wait until it finishes uploading then close the window . Then click Submit Reply .


Uninstall ALL of your cracked software you installed .

Done!

AdwCleaner

Click here AdwCleaner

:ar: Click on Download Now button

:ar: Save to the Desktop

:ar: Right-click on AdwCleaner.exe and choose

:ar: Click on Clean and confirm the prompt.


Upload the log : The log file is at C:\AdwCleaner[n].txt

Download Junkware Removal Toolkit

Click here Junkware Removal Tool to download

Drag the JRT.exe from the Downloads folder to your Desktop

Right click JRT.exe and choose

Once done upload the JRT.txt file

Open Notepad . Inside Notepad paste the highlighted text inside notepad

start
Winlogon\Notify\WB: C:\Program Files (x86)\Stardock\MyColors\fast64.dll [X]
HKCU\...\Run: [Google Update] - C:\Users\Di Grazia\AppData\Local\Google\Update\GoogleUpdate.exe [116648 2012-07-13] (Google Inc.)
HKCU\...\RunOnce: [FlashPlayerUpdate] - C:\Windows\SysWOW64\Macromed\Flash\FlashUtil32_11_7_700_224_Plugin.exe -update plugin [814472 2013-06-11] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [] - [x]
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Stardock MyColors.lnk
ShortcutTarget: Stardock MyColors.lnk -> C:\Program Files (x86)\Stardock\MyColors\SDDelayedLaunch.exe ()
Startup: C:\Users\Di Grazia\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\_uninst_.lnk
ShortcutTarget: _uninst_.lnk -> C:\Users\Di Grazia\AppData\Local\Temp\_uninst_.bat ()
S3 ZTEusbmdm6k; system32\DRIVERS\ZTEusbmdm6k.sys [x]
S3 ZTEusbnmea; system32\DRIVERS\ZTEusbnmea.sys [x]
S3 ZTEusbser6k; system32\DRIVERS\ZTEusbser6k.sys [x]
2013-07-17 12:26 - 2009-07-14 02:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-07-16 16:46 - 2012-08-19 03:29 - 00002198 _____ C:\Users\Di Grazia\config.xml
C:\Windows\System32\mctadmin.exe
end


Click on File ====> Save As

File Name : Fixlist.txt

Save as type : All Files

Location : Desktop

Click on the [Save] button .

Open FRST tool again from the Desktop and click on the [Fix] button . Once complete it will create a new log called Fixlog.txt . Upload the new log created in your reply . It should be on the desktop .

More research your BSOD was caused by a driver that goes with Kaspersky . Click on the link below to uninstall Kaspersky

:ar: Kaspersky Removal Tool

Install Microsoft Security Essentials

:ar: Microsoft Security Essentials x64-bit

YES! Uninstalling Kaspersky solved the problem! Thank you VistaKing, you are the man!!!