Solved SFC/Scannow shows spsys.sys error

[farhaj]

He is having problems with Windows as far as text not even being visible in order to do much of anything. The initial error does suggest a possible malware infection like an I-Worm type virus or another large OS problem to content with.

The memory dump file may reveal one of the problems there since you had a blue screen. That could point out a driver issue if no malware is at the root. Typically disappearing icons and not seeing text is a display issue of some type.

What are memory Dump files.. and what should I reveal here so that the Problem can be solved..tell me in steps guys...

 

[karlsnooks]

see post #20.

 

[farhaj]

One possibility is that your computer is infected.

To rule out any possible infection, then an OFFLINE scan is necessary.

WDO is the tool you need and here is how to use WDO.

HOW TO USE MICROSOFT'S OFFLINE MALWARE REMOVER
Windows Defender Offline
· performs an offline scan of an infected PC to remove viruses, rootkits and other advanced malware.
· is a free standalone, bootable malware and virus remover from Microsoft.

Download Windows Defender Offline (about 785 kB)
You will have the choice of downloading the 32bit version (x86) or the 64 bit version (x64).
The link will help you determine whether you are running a 32 bit version or 64 bit version of Windows

NOTE!! You can download and prepare a 32 bit version using a 64 bit version of Windows
NOTE!! You can download and prepare a 64 bit version using a 32bit version of Windows.

You run the 32 bit version on a 32 bit version of Windows.
You run the 64 bit version on a 64 bit version of Windows.

The 32 bit download file name is: mssstool32.exe
The 64 bit download file name is: mssstool64.exe

For the curious, this program was originally name Microsoft Standalone System Sweeper.


INSTALLATION:
· Requires an Internet Connection.
· Insert 512 mB or larger USB stick into a usb port.
· Run the downloaded program--mssstool64.exe or mssstool32.exe
· NEXT button
· Choose the option On a USB flash drive that is not password protected
· NEXT button
· NEXT button
.
The install program will:
· format the usb stick using the NTFS format.
· download less than 230 mB.
· name the USB stick WDO_Media32 or WDO_Media64
· use less than 300 mB.

How to UPDATE the Windows Defender Offline USB stick:
· reinsert the usb stick
· run the installation program, mssstool64.exe or mssstool32.exe, again.
· the update will download less than 65 mB.

Since the malware database is sometimes updated several times in a day, always update before running.

PERFORM AN OFFLINE SCAN
Bootup your computer from the USB stick
Windows Defender Offline will automatically perform a quick scan.
After the quick scan finishes, Choose Full Scan
Select all of your drives

The initial, full scan can easily take several hours, but
Remember, your computer is being very thoroughly checked for all types of malware.

If i am not able to download and install te software in my current laptop : then can i do that in another working laptop and install the files in the usb and then run the usb in my current laptop from the bootup...

Also the blue screen I was referring earlier; was about the screen which came in when I started the windows and it came for a spot ; had some words written on it and then the laptop restarted back again.. Going into recovery mode.. Which continued every time it restarted itself until i made the settings to start at best known configuration by pressing f8 in the start... So, is that blue screen which was mentioned here erlier which i can get by going into dump files.. And if found ; shall i post that as well here or what..

Also , earlier i ran the sfc just twice rather than 3 times..

 

[karlsnooks]

yes, as the write-up says, you can prepare your usb stick on another computer.

I'll await the results of running WDO before proceeding.

Save your questions until after completion of WDO.

 

[farhaj]

yes, as the write-up says, you can prepare your usb stick on another computer.

I'll await the results of running WDO before proceeding.

Save your questions until after completion of WDO.

Ok.. I will do it later tonight but in the meantime u will stay online for how long.. Just so that i can know the answers

 

[karlsnooks]

don't worry. When WDO is finished, I'll be here.

 

[farhaj]

don't worry. When WDO is finished, I'll be here.

Actually i am not with my laptop right now.. And would be doing that work maybe in the late night... Thats why

 

[karlsnooks]

that's fine.

 

[Night Hawk]

He is having problems with Windows as far as text not even being visible in order to do much of anything. The initial error does suggest a possible malware infection like an I-Worm type virus or another large OS problem to content with.

The memory dump file may reveal one of the problems there since you had a blue screen. That could point out a driver issue if no malware is at the root. Typically disappearing icons and not seeing text is a display issue of some type.

What are memory Dump files.. and what should I reveal here so that the Problem can be solved..tell me in steps guys...

A memory dump file is a log created following a BSOD(Blue Screen Of Death) when something causes Windows to crash unexpectedly. That contains information on softwares and drivers which is used for diagnosing the cause for the blue screen.

 

[farhaj]

One possibility is that your computer is infected.

To rule out any possible infection, then an OFFLINE scan is necessary.

WDO is the tool you need and here is how to use WDO.

HOW TO USE MICROSOFT'S OFFLINE MALWARE REMOVER
Windows Defender Offline
· performs an offline scan of an infected PC to remove viruses, rootkits and other advanced malware.
· is a free standalone, bootable malware and virus remover from Microsoft.

Download Windows Defender Offline (about 785 kB)
You will have the choice of downloading the 32bit version (x86) or the 64 bit version (x64).
The link will help you determine whether you are running a 32 bit version or 64 bit version of Windows

NOTE!! You can download and prepare a 32 bit version using a 64 bit version of Windows
NOTE!! You can download and prepare a 64 bit version using a 32bit version of Windows.

You run the 32 bit version on a 32 bit version of Windows.
You run the 64 bit version on a 64 bit version of Windows.

The 32 bit download file name is: mssstool32.exe
The 64 bit download file name is: mssstool64.exe

For the curious, this program was originally name Microsoft Standalone System Sweeper.


INSTALLATION:
· Requires an Internet Connection.
· Insert 512 mB or larger USB stick into a usb port.
· Run the downloaded program--mssstool64.exe or mssstool32.exe
· NEXT button
· Choose the option On a USB flash drive that is not password protected
· NEXT button
· NEXT button
.
The install program will:
· format the usb stick using the NTFS format.
· download less than 230 mB.
· name the USB stick WDO_Media32 or WDO_Media64
· use less than 300 mB.

How to UPDATE the Windows Defender Offline USB stick:
· reinsert the usb stick
· run the installation program, mssstool64.exe or mssstool32.exe, again.
· the update will download less than 65 mB.

Since the malware database is sometimes updated several times in a day, always update before running.

PERFORM AN OFFLINE SCAN
Bootup your computer from the USB stick
Windows Defender Offline will automatically perform a quick scan.
After the quick scan finishes, Choose Full Scan
Select all of your drives

The initial, full scan can easily take several hours, but
Remember, your computer is being very thoroughly checked for all types of malware.

I made the USB using another Laptop which had win 32-bit so the 32-bit usb was made.. but when I restarted my this affected Laptop (which has the 64-bit windows) using BOOT THE blue screen appeared and I had to restart and change the BOOT settings back to Hard drive and then the laptop opened fine...

Now, Tell me whats the Solution.. I again did twice SFC /SCannow on the Laptop ...RESULTS = View attachment sfcdetails.txt

 

[karlsnooks]

farhaj,

Download Windows Defender Offline (about 785 kB)
You will have the choice of downloading the 32bit version (x86) or the 64 bit version (x64).
The link will help you determine whether you are running a 32 bit version or 64 bit version of Windows

NOTE!! You can download and prepare a 32 bit version using a 64 bit version of Windows
NOTE!! You can download and prepare a 64 bit version using a 32bit version of Windows.

You run the 32 bit version on a 32 bit version of Windows.
You run the 64 bit version on a 64 bit version of Windows.

The 32 bit download file name is: mssstool32.exe
The 64 bit download file name is: mssstool64.exe

 

[farhaj]

farhaj,

Download Windows Defender Offline (about 785 kB)
You will have the choice of downloading the 32bit version (x86) or the 64 bit version (x64).
The link will help you determine whether you are running a 32 bit version or 64 bit version of Windows

NOTE!! You can download and prepare a 32 bit version using a 64 bit version of Windows
NOTE!! You can download and prepare a 64 bit version using a 32bit version of Windows.

You run the 32 bit version on a 32 bit version of Windows.
You run the 64 bit version on a 64 bit version of Windows.

The 32 bit download file name is: mssstool32.exe
The 64 bit download file name is: mssstool64.exe

OK.. NOw I am making the 64 bit windows file using this laptop of mine (which is 64-bit) ,,, Gradually, now it is downloading files.. I hope it completes correctly without any errors

 

[Night Hawk]

For a faster method without regard to whether it is 32bit or 64bit and no need to install you can download the VIPRE Rescue Program and watch as it sweeps the present copy of Windows for any bugs if any are to be found that is.

Once downloaded you simply doubleclick on the download itself(exe form) and watch as it creates a new temp folder to run out of which can be deleted later. That will find far more then Windows Defender in less time. It also gets Windows back running again if it gets trashed by a malware for the most part.

 

[karlsnooks]

and not any where as thorough.
and also not an offline, consequently, capable of missing some very serious malware.

 

[Night Hawk]

I've already seen what the VRP can do with a machine where the user was locked out of Windows totally by a bogus admin account not just a system file error created by the malware. A desktop shortcut was created to the download once copied over to the drive by live boot from a usb data recovery stick made up while booted in Safe Mode.

Once the normal restart was seen and the desktop arrived but no way to do anything but click on the shortcut the malware was promptly removed returing Windows to the user! That was seen on a system where you knew a malware was present.

For a general sweep a better option for free would be the updated MS Security Essentials which has been improved for the next version of Windows soon to arrive. The alternative as long you can boot into Windows and install programs there would be the trial download for the VIPRE Internet Security 2012 which will find bugs hidden in archives every other programs seems to miss.

Once you provide an email address the trial key sent out unlocks the full program for the trial period. Presently that's one of the best av/malware remover programs on the market.

The thing farhaj needs the most however is to replace the spsys.sys file itself if that has been lost or corrupted in some way. Since that is still a driver file of a sort despite the location one reference on how to go about is seen at How To: Replace/Delete Protected DLL Files In Windows 7 & Vista

 

[karlsnooks]

You evidently have some misconceptions re WDO. Suggest you use WDO once to see that lock out is not relevant.

 

[Night Hawk]

Of course not! It was a much more involved malware that was removed.

But so far no confirmation of any malware has been shown either. It may just what it is a corrupted or missing system file needing replacement.

The one question not asked so far is whether or not farhaj has installed something new lately that could also explain the error suddenly appearing.

 

[Layback Bear]

Just a though on how the problem started. From the OP's #7 post.

I was doing Itunes and then uniNstalled it.. It ws not picking my iphone... and then in some thread it was written to change some registry settings which I did and after the restart the BLUE SCREEN WOULD APPEAR And restart again and then I made it run into best possible settings...which is right now..
------------------------
Installing a few Apple programs on Windows 7 and when they didn't work the OP changed Windows 7 registry.
------------------------
farhaj so you don't get confused just use WDO as suggested by Karl.

 

[farhaj]

Of course not! It was a much more involved malware that was removed.

But so far no confirmation of any malware has been shown either. It may just what it is a corrupted or missing system file needing replacement.

The one question not asked so far is whether or not farhaj has installed something new lately that could also explain the error suddenly appearing.

I told earlier that i updated my itunes for the new version. After the new version was installed
It did not detect the iphone then; so i was constantly making changes to itunes and its related softwares so that it could detect the phone.. I did it as per according to the problems menioned in the help files and forum threads..

As i was doing this ; one place was written to make changes in the registry file which i did and after that when laptop was restarted the blue screen appeared and the computer constantly went into recovery mode wothout curing te problem and starting the windows.. After which i started the computer in the best known configuration settings
Which it started but the dialog boxes has remained since then...


And regarding the spys.sys file i think that is resolved because the latest sfcdetails.txt file i posted above does not show that as corrupited (please check the file in the above posts) the other problem r

 

[farhaj]

Now i have downloaded the correct 64 bit WDO and it worked fine when i restarted the laptop using boot from usb.. I will post he results for it later tonight or tomorrow after i get that job completly done...

Just let me know that i should perform a complete or quick scan would be fine for it...
Also, is there also any record or file saved by WDO after it performs cleaning and the problems it countered .. Just that i can even show it / upload the results file here...