BSOD after boot up, during login or right after, (bad spool header?)

essenbe · 14 May 2016

OK, great. Hirens is not a virus. There are programs on it that allow you to reset passkeys and do a lot of stuff like that which is what some viruses do. That is why most AVs flag it. Hirens is OK. The other stuff is not and it is to your benefit to clean them out. Be mindful of what you download and where you download it from. There is a reason cracked programs and torrent downloads are undesirable. Most have malware, trojans and root kits in them. Torrents have whatever someone along the download chain wants to put in them. The best anti virus is you. Knowing where you go, what you download and where you download it from. Also, you need a good anti virus. malwarebytes is a very good program, but it is not an anti virus. Malwarebytes will tell you that. It is an anti malware. I use it myself but I also use an antivirus.

I am glad you are not having any more crashes and I hope it continues. Please upload all of the complete log files when you have them.

Depache · 14 May 2016

i have my malwarebytes and just incase ill upload both tss log files i scanned a few times.

in the next few days ill have the eset one it will be a min to do. so ill see you then ill keep a eye on this post till then if you have any new things for me to try. ill use the other two scans today too.

essenbe · 14 May 2016

OK, great

Depache · 14 May 2016

wow that was really fast so all i have left is the eset here is the logs for the last two programs.

ill see you in a few days

simrick · 14 May 2016

Hi.
Here are detailed instructions to run the ESET Online Scanner and manipulate the results.

Disable your Anti-Virus.

Navigate your browser to the ESET Online Scanner page and select SCAN NOW.
https://www.eset.com/us/online-scanner/

Attachment 386668

In the box that pops up, download and run the ESET Smart Installer.

Attachment 386669

Save the file, then run it.

Attachment 386670

Agree to the Terms of Use, then click Start.

Attachment 386671

Select the radio button to Enable detection of potentially unwanted applications. Click the down-arrow for Advanced Settings. Check the boxes as shown. If you use a proxy, check that box and configure it as necessary. Then click START.

Attachment 386672

The program will download the latest detection definitions and then begin the scan. It can take quite a while, depending on how many drives you have and the size of them. Threats will be displayed as they are identified.

Attachment 386673

Once the scan has finished, select List of found threats.

Attachment 386674

Look through the list to determine if any of the detections are false positives or unwanted. If you have been asked to provide a list by a forum member for evaluation, select Export to text file, save it to your desktop, and upload it in your thread. Then click Back.

Attachment 386675

Select Manage quarantine.

Attachment 386677

Click once to select any item which you do not want quarantined and then click Restore.

Attachment 386678

Verify the action "restored" shows for each item you do not want quarantined. When you are finished, click Back.

Attachment 386683

If a forum member has requested the log file, it can be found here:

Attachment 386680

When you are finished, you may check the box to delete the application on close.

Attachment 386682

If you are sure that you want all quarantined files to be deleted upon exit, check the box Delete quarantined files. If you are not sure, and would like them to stay in quarantine, don't check that box. They will show up in your list the next time you run the scanner, and you will be able to Restore them if needed.

Re-enable your Anti-Virus.

essenbe · 14 May 2016

Excellent simrick. Simrick is one of our experts on virus/malware. I asked simrick to assist you. Please follow the instructions exactly.

simrick · 14 May 2016

Happy to help essenbe. :)

Depache · 16 May 2016

here it is the eset log file. did it last night

sorry it is not as long as first one. the first one was 99 problems found, this is just 3.

still cant find the old eset file this one was where you told me it was but the eset folder was not there when i looked before like the whole folder. this time i uploaded the log before leaving the free trial or buy page just to be sure. its still there but was not sure why first time it was not.

simrick · 16 May 2016

Depache said:

here it is the eset log file. did it last night

sorry it is not as long as first one. the first one was 99 problems found, this is just 3.

still cant find the old eset file this one was where you told me it was but the eset folder was not there when i looked before like the whole folder. this time i uploaded the log before leaving the free trial or buy page just to be sure. its still there but was not sure why first time it was not.

Depache,
Assuming you have not had any further BSODs, I am going to take a stab here and say that all your problems were a result of the illegal stuff residing on your system. I'm sure you see now what a mistake that is, aside from being illegal. Based on what I've seen in the second sets of logs you've posted here, I can only imagine what was found during the first round of scans.

That being said, if this were my computer, I would be full-formatting the hard drive, (not a quick format), and reinstalling Windows from scratch. You can certainly assume that everything, and I mean everything, on your system has been compromised: your passwords for everything (mail, games, web sites, etc.), should all be changed from a known clean computer. You should visit the following website and check your email addresses on a regular basis, to see if they are showing up on public PasteBins for hackers to use.
https://haveibeenpwned.com/

Essenbe still needs to review your HOSTS file for infections. Please download and run RKILL and post the log here. This scan should only take a few minutes.

RKill Download

There are Ransomware out now which are targeting gamers. If you continue your illegal habits, you will most certainly be hit, and will lose everything, as there are no decryption tools available.

I am sure that if you show up here again for help and more illegal stuff is found, help will be withheld until you get your system "legal". And, you will find that reputable computer help forums abide by this policy.

So, we will wait now for your RKILL log to be posted without modification. Thanks.

Depache · 17 May 2016

here it is. i plan on not doing that anymore. i was poor and that is my only excuse but now i have money and can buy things and have been. i apologize for any and all inconveniences i have caused you or anyone else. i have cleared my computer of everything i can think of but you are right i need to do a zero out of my HD and reinstall windows. was wondering if you knew of a program that i can use for that. i used to have one when i did computer repair but i do not remember the name of it. again sorry.

BSOD after boot up, during login or right after, (bad spool header?)

ESET Online Scanner: Running and Manipulating Results