BSOD after copying files from one hard drive to another

joecatch

New member
Local time
1:00 AM
Messages
7
Hello. I hope you can help as this problem is very frustrating. Just built a new PC:
- Gigabyte Z97X Gaming 7 mobo
- 8 gig Corsair Vengance 1866 mhz
- EVGA GTX 770 video
- Intel 4770K CPU
- two 1 Tb WD black hard drives as RAID 1
- one ADATA 256 Gb SSD as OS drive
- one 1 Tb Toshiba drive
- Windows 7 64 bit Professional
- Rev F3 bios

System can run fine for days but when I copy large number of files from one drive to another (i.e., 70,000 files, 80 Gb), shortly afterwards (10 - 30 mins) I get a bugcheck BSOD.

I ran MEMTEST86 for hours with no errors. I can run PRIME95 with max heat with no errors. ANd like I said it seems to be fine until I do a large file copy. It doesn't seem to matter what drive I copy to/from. Booting WIndows I don't see any CHKDISK activity. Ideas?
 

My Computer My Computer

At a glance

Windows 7 Professional 64 bitIntel 4770K8 gig Corsair VengenceEVGA GTX 770
Computer type
PC/Desktop
OS
Windows 7 Professional 64 bit
CPU
Intel 4770K
Motherboard
Gigabyte Z97X Gaming 7
Memory
8 gig Corsair Vengence
Graphics Card(s)
EVGA GTX 770
Hard Drives
2 - WD 1 TB Black, 1- ADATA 256 GB SSD, 1- 1 TB Toshiba
Antivirus
Malware Bytes, Norton
It's best to run Memtest for at least seven passes and overnight.
The error is 0x124 which is a hardware error but the ErrRec didn't provide much since it was a total memory collapse. What it does show is a fault occurs right after a memory move. What's in memory at the time is a process called ubssrv-oc-only. This program is identified as a trojan virus by many antivirus scanners.

I'll see if one of our AV guys can check this out. In the meantime, run the System File Checker using Option Two in the tutorial. Report back any console messages from SFC.

Code:
WHEA_UNCORRECTABLE_ERROR (124)
A fatal hardware error has occurred. Parameter 1 identifies the type of error
source that reported the error. Parameter 2 holds the address of the
WHEA_ERROR_RECORD structure that describes the error conditon.
Arguments:
Arg1: 0000000000000000, Machine Check Exception
Arg2: fffffa8008788028, Address of the WHEA_ERROR_RECORD structure.
Arg3: 00000000bf800000, High order 32-bits of the MCi_STATUS value.
Arg4: 0000000000200401, Low order 32-bits of the MCi_STATUS value.
Debugging Details:
------------------

BUGCHECK_STR:  0x124_GenuineIntel
CUSTOMER_CRASH_COUNT:  1
DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT
PROCESS_NAME:  [B][COLOR=red]ubssrv_oc_only[/COLOR][/B]
CURRENT_IRQL:  f
STACK_TEXT:  
fffff880`009d7b58 fffff800`03217a3b : 00000000`00000124 00000000`00000000 fffffa80`08788028 00000000`bf800000 : nt!KeBugCheckEx
fffff880`009d7b60 fffff800`033da463 : 00000000`00000001 fffffa80`084feea0 00000000`00000000 fffffa80`084feef0 : hal!HalBugCheckSystem+0x1e3
fffff880`009d7ba0 fffff800`03217700 : 00000000`00000728 fffffa80`084feea0 fffff880`009d7f30 fffff880`009d7f00 : nt!WheaReportHwError+0x263
fffff880`009d7c00 fffff800`03217052 : fffffa80`084feea0 fffff880`009d7f30 fffffa80`084feea0 00000000`00000000 : hal!HalpMcaReportError+0x4c
fffff880`009d7d50 fffff800`03216f0d : 00000000`00000008 00000000`00000001 fffff880`009d7fb0 00000000`00000000 : hal!HalpMceHandler+0x9e
fffff880`009d7d90 fffff800`0320ae88 : 00000000`00000000 00000000`00000010 00000000`00000000 00000000`00000000 : hal!HalpMceHandlerWithRendezvous+0x55
fffff880`009d7dc0 fffff800`032c24ac : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : hal!HalHandleMcheck+0x40
fffff880`009d7df0 fffff800`032c2313 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : [B][COLOR=red]nt!KxMcheckAbort+0x6c
[/COLOR][/B]fffff880`009d7f30 fffff800`032ba7b8 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : [B][COLOR=red]nt!KiMcheckAbort+0x153[/COLOR][/B]
fffff880`07715638 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : [B][COLOR=red]nt!memmove+0x208[/COLOR][/B]

STACK_COMMAND:  kb
FOLLOWUP_NAME:  MachineOwner
MODULE_NAME: hardware
IMAGE_NAME:  hardware
DEBUG_FLR_IMAGE_TIMESTAMP:  0
FAILURE_BUCKET_ID:  X64_0x124_GenuineIntel_PROCESSOR_MAE
BUCKET_ID:  X64_0x124_GenuineIntel_PROCESSOR_MAE
Followup: MachineOwner
---------
 

My Computer My Computer

At a glance

Windows 7 Pro-x64i7-2600 3.4GHz - 3.8GHz Turbo8Gb - 2x4GB, Muskin 991770 PC3-1333Integrated Intel HD 2000
Computer type
PC/Desktop
Computer Manufacturer/Model Number
Built 2/11/2011
OS
Windows 7 Pro-x64
CPU
i7-2600 3.4GHz - 3.8GHz Turbo
Motherboard
Intel DH67BL-B3
Memory
8Gb - 2x4GB, Muskin 991770 PC3-1333
Graphics Card(s)
Integrated Intel HD 2000
Sound Card
Integrated Intel 10.1 HD, RealTek ALC892
Monitor(s) Displays
Asus LCD VH222H, Haier HL24XSL2a
Screen Resolution
1920x1080, 1920x1080
Hard Drives
Crucial SSD C300-128Gb,
Western Digital WD5002AALX - 500Gb,
Western Digital WD7501AALS - 750Gb
PSU
Seasonic 650W 80+ Gold Modular
Case
Rosewill Defender
Cooling
Stock CPU, Four 120mm case fans, PCH fan added
Keyboard
Logitech EX100 Y-RBH94 Wireless
Mouse
Logitech EX100 M-RCE95 Wireless
Internet Speed
3.0/1.5 Mbs
Antivirus
Microsoft Security Essentials
Browser
Microsoft Internet Explorer 11
Other Info
Antec Veris Premier-Multimedia IR Station,
Cyber Accoustics-3602 Speakers,
AFT XM-5U Card Reader,
Hauppauge TV-HVR-2250,
Sony LX300 USB Turntable
Download DDS:

DDS.com

Save the file to your pc. Then open the dds icon to run the tool.
When done, DDS will open two (2) logs:
DDS.txt
Attach.txt

Save both reports to your desktop.
Include the contents of both logs in your next post by using the paperclip

picture.php



___________________________________________________________________________________________

1.) Download herdprotect: (choose the portable version)

Download herdProtect - Free Anti-Malware Platform

2.) Run the scan.

3.) When the scan finishes, save the results per the screenshot below. Then upload the log here.

DO NOT REMOVE ANYTHING YET. I will advise if anything needs removed when I receive the log.

Attached Images
313957d1397626709-degrading-windows-performance-save-results.png
 

My Computer My Computer

At a glance

Windows 10 ProAMD Ryzen 5 2400G Processor with Radeon RX Ve...G.SKILL Ripjaws V Series 16GB (2 x 8GB) 288-P...2047MB NVIDIA GeForce GTX 1060 6GB (EVGA)
Computer type
PC/Desktop
Computer Manufacturer/Model Number
Custom Built
OS
Windows 10 Pro
CPU
AMD Ryzen 5 2400G Processor with Radeon RX Vega 11 Graphics
Motherboard
ASRock X470 Master SLI/AC AM4 AMD Promontory X470 SATA 6Gb/s
Memory
G.SKILL Ripjaws V Series 16GB (2 x 8GB) 288-Pin DDR4 SDRAM D
Graphics Card(s)
2047MB NVIDIA GeForce GTX 1060 6GB (EVGA)
Sound Card
Motherboard Built in
Monitor(s) Displays
Acer R240HY bidx 23.8-Inch IPS HDMI DVI VGA (1920 x 1080) Wi
Screen Resolution
1920 x 1080
Hard Drives
1TB Sandisk SSD PLUS (Main drive)
500 GB Seagate 7200 RPM (Games)
500 GB Western Digital 7200 RPM (Virtual Machines)
PSU
CORSAIR TX Series TX650M 650W 80+ Gold Modular Power Supply
Case
CORSAIR CARBIDE SPEC-02 Mid-Tower Gaming Case, Red LED Fan
Cooling
220mm, two 120mm, and four 60mm fans
Keyboard
Wired Dell keyboard
Mouse
Wireless Logitech mouse
Internet Speed
250mb down, 30mb up
Antivirus
Panda Cloud Antivirus
Browser
Chrome-ish x64
Other Info
Your awesome for reading this.
Hello and thank you for your quick reply. Attached are the 2 log files your requested from DDS and one from herdprotect. I ran SFC and it found no problems.

I did uninstall the Gigabyte app center because I think that is where that usbssrv came from. As I said last time I ran MEMTEST86 overnight, 10 passes, no problems. I also ran it at other times with no problems.

Joe
 

My Computer My Computer

At a glance

Windows 7 Professional 64 bitIntel 4770K8 gig Corsair VengenceEVGA GTX 770
Computer type
PC/Desktop
OS
Windows 7 Professional 64 bit
CPU
Intel 4770K
Motherboard
Gigabyte Z97X Gaming 7
Memory
8 gig Corsair Vengence
Graphics Card(s)
EVGA GTX 770
Hard Drives
2 - WD 1 TB Black, 1- ADATA 256 GB SSD, 1- 1 TB Toshiba
Antivirus
Malware Bytes, Norton
No probs under control it would seem.
 
Last edited:

My Computer My Computer

At a glance

Desk1 7 Home Prem / Desk2 10 Pro / Main lap A...Desk1 i5 3750K / Laptop i7 GTX 860M / Desk2 i...Desk1 8GB (1866) / Desk2 16GB (1333) / Laptop...Desk 1& 2NVidia GTX 650 & Laptops on board Intel
Computer type
PC/Desktop
Computer Manufacturer/Model Number
Own build (new) Desk1 / Asus ROG Win 7 / Desk2 1st build
OS
Desk1 7 Home Prem / Desk2 10 Pro / Main lap Asus ROG 10 Pro 2 laptop Toshiba 7 Pro Asus P2520 7 & 10
CPU
Desk1 i5 3750K / Laptop i7 GTX 860M / Desk2 i5 2500
Motherboard
Desk1 Asus P877-V / Desk2 Gigabyte H67 UD3H / Laptop ?
Memory
Desk1 8GB (1866) / Desk2 16GB (1333) / Laptop 8Gb DDR3
Graphics Card(s)
Desk 1& 2NVidia GTX 650 & Laptops on board Intel
Sound Card
Desk 1 & 2 -XONAR DG Realtek High Def audio Laptop
Monitor(s) Displays
Desk 1 Benq HD 2450 / Desk2 Philips 24" / Laptop 17.5"
Screen Resolution
1920x1080 D1 & D2 & Laptop 1
Hard Drives
Desk1 Samsung 120GB 830 SSD
Asus ROG 256GB 850 Pro SSD
Desk2 Samsung 840 256 SSD
Toshiba 120GB EVO
PSU
Desk 1 Corsair HX 1050/ Laptop ? / Desk 2 Corsair HX 650
Case
Desk 1 Cooler HAF XM ? Toshiba laptop / Desk2 Coolermaster
Cooling
Fans on all Desk1 -2 Desk2 - all Coolermasters 5 Laptop ?
Keyboard
Desk 1 MS Sidewinder X6 Desk 2 MS Sidewinder X 4
Mouse
Desk 1&2 - Gigabyte MS 900 gamer - laptop - Logitec wireless
Internet Speed
ADSL2+
Other Info
One other Desktop (tester) and spare Toshba laptop both with SSD's
Running Kaspersky 2016 ISS on all machines config'd identically
Logitec audio stereo systems on each machine (x3)
Canon MG5250MFC
Router/modem TP-Link running WPA2SK
I'm not sure what I'm looking at in those uploads so we'll see what Andrew has to say about that. If there's any cleaning to do, I'd rather wait until after that's done before continuing with more dumps.

Did you get any more dumps (BSODs) after removing the Gigabyte app?
 

My Computer My Computer

At a glance

Windows 7 Pro-x64i7-2600 3.4GHz - 3.8GHz Turbo8Gb - 2x4GB, Muskin 991770 PC3-1333Integrated Intel HD 2000
Computer type
PC/Desktop
Computer Manufacturer/Model Number
Built 2/11/2011
OS
Windows 7 Pro-x64
CPU
i7-2600 3.4GHz - 3.8GHz Turbo
Motherboard
Intel DH67BL-B3
Memory
8Gb - 2x4GB, Muskin 991770 PC3-1333
Graphics Card(s)
Integrated Intel HD 2000
Sound Card
Integrated Intel 10.1 HD, RealTek ALC892
Monitor(s) Displays
Asus LCD VH222H, Haier HL24XSL2a
Screen Resolution
1920x1080, 1920x1080
Hard Drives
Crucial SSD C300-128Gb,
Western Digital WD5002AALX - 500Gb,
Western Digital WD7501AALS - 750Gb
PSU
Seasonic 650W 80+ Gold Modular
Case
Rosewill Defender
Cooling
Stock CPU, Four 120mm case fans, PCH fan added
Keyboard
Logitech EX100 Y-RBH94 Wireless
Mouse
Logitech EX100 M-RCE95 Wireless
Internet Speed
3.0/1.5 Mbs
Antivirus
Microsoft Security Essentials
Browser
Microsoft Internet Explorer 11
Other Info
Antec Veris Premier-Multimedia IR Station,
Cyber Accoustics-3602 Speakers,
AFT XM-5U Card Reader,
Hauppauge TV-HVR-2250,
Sony LX300 USB Turntable
I have tried moving large amounts of files between drives after removing Gigabytes apps and so far I have not had any BSOD. Of course only time will tell but right now it is looking good...

Joe
 

My Computer My Computer

At a glance

Windows 7 Professional 64 bitIntel 4770K8 gig Corsair VengenceEVGA GTX 770
Computer type
PC/Desktop
OS
Windows 7 Professional 64 bit
CPU
Intel 4770K
Motherboard
Gigabyte Z97X Gaming 7
Memory
8 gig Corsair Vengence
Graphics Card(s)
EVGA GTX 770
Hard Drives
2 - WD 1 TB Black, 1- ADATA 256 GB SSD, 1- 1 TB Toshiba
Antivirus
Malware Bytes, Norton
Keep us posted.
 

My Computer My Computer

At a glance

Windows 7 Pro-x64i7-2600 3.4GHz - 3.8GHz Turbo8Gb - 2x4GB, Muskin 991770 PC3-1333Integrated Intel HD 2000
Computer type
PC/Desktop
Computer Manufacturer/Model Number
Built 2/11/2011
OS
Windows 7 Pro-x64
CPU
i7-2600 3.4GHz - 3.8GHz Turbo
Motherboard
Intel DH67BL-B3
Memory
8Gb - 2x4GB, Muskin 991770 PC3-1333
Graphics Card(s)
Integrated Intel HD 2000
Sound Card
Integrated Intel 10.1 HD, RealTek ALC892
Monitor(s) Displays
Asus LCD VH222H, Haier HL24XSL2a
Screen Resolution
1920x1080, 1920x1080
Hard Drives
Crucial SSD C300-128Gb,
Western Digital WD5002AALX - 500Gb,
Western Digital WD7501AALS - 750Gb
PSU
Seasonic 650W 80+ Gold Modular
Case
Rosewill Defender
Cooling
Stock CPU, Four 120mm case fans, PCH fan added
Keyboard
Logitech EX100 Y-RBH94 Wireless
Mouse
Logitech EX100 M-RCE95 Wireless
Internet Speed
3.0/1.5 Mbs
Antivirus
Microsoft Security Essentials
Browser
Microsoft Internet Explorer 11
Other Info
Antec Veris Premier-Multimedia IR Station,
Cyber Accoustics-3602 Speakers,
AFT XM-5U Card Reader,
Hauppauge TV-HVR-2250,
Sony LX300 USB Turntable
I keep seeing things popping up in your temp folders. Lets clear them:


Make sure your data is backed up either on an external hard drive or somewhere else before proceeding:

1.) Please download and save the file TFC by Old Timer. Again, save the file to your downloads folder or your desktop. Do not run it.

Downloading TFC


2.) Close your programs before running this tool. TFC will close ALL open programs.

3.) Browse to where you saved tfc. Right click on tfc.exe and choose Run As Administrator.

4.) Click the Start button to begin the cleaning process and let it run uninterrupted to completion. When it finishes it will say total files cleaned, and the start button will be grayed out. Click exit.
Important! If TFC prompts you to reboot, please do so immediately. If not prompted, manually reboot the machine anyway to ensure a complete clean.
 
Last edited:

My Computer My Computer

At a glance

Windows 10 ProAMD Ryzen 5 2400G Processor with Radeon RX Ve...G.SKILL Ripjaws V Series 16GB (2 x 8GB) 288-P...2047MB NVIDIA GeForce GTX 1060 6GB (EVGA)
Computer type
PC/Desktop
Computer Manufacturer/Model Number
Custom Built
OS
Windows 10 Pro
CPU
AMD Ryzen 5 2400G Processor with Radeon RX Vega 11 Graphics
Motherboard
ASRock X470 Master SLI/AC AM4 AMD Promontory X470 SATA 6Gb/s
Memory
G.SKILL Ripjaws V Series 16GB (2 x 8GB) 288-Pin DDR4 SDRAM D
Graphics Card(s)
2047MB NVIDIA GeForce GTX 1060 6GB (EVGA)
Sound Card
Motherboard Built in
Monitor(s) Displays
Acer R240HY bidx 23.8-Inch IPS HDMI DVI VGA (1920 x 1080) Wi
Screen Resolution
1920 x 1080
Hard Drives
1TB Sandisk SSD PLUS (Main drive)
500 GB Seagate 7200 RPM (Games)
500 GB Western Digital 7200 RPM (Virtual Machines)
PSU
CORSAIR TX Series TX650M 650W 80+ Gold Modular Power Supply
Case
CORSAIR CARBIDE SPEC-02 Mid-Tower Gaming Case, Red LED Fan
Cooling
220mm, two 120mm, and four 60mm fans
Keyboard
Wired Dell keyboard
Mouse
Wireless Logitech mouse
Internet Speed
250mb down, 30mb up
Antivirus
Panda Cloud Antivirus
Browser
Chrome-ish x64
Other Info
Your awesome for reading this.
CARWIZ, you may be interested in the following:

Code:
==== Event Viewer Messages From Past Week ========

6/25/2014 8:50:04 PM, Error: Service Control Manager [7026]  - 
The following boot-start or system-start driver(s) failed to load:  
UsbCharger

Code:
6/25/2014 7:55:51 PM, Error: Microsoft-Windows-WHEA-Logger [18]  - 
A fatal hardware error has occurred. Reported by component: 
Processor Core Error Source:
 Machine Check Exception Error Type: Internal Unclassified Error 
Processor ID: 4 
The details view of this entry contains further information.

Code:
6/25/2014 7:55:50 PM, Error: Microsoft-Windows-WER-
SystemErrorReporting [1001]
  - The computer has rebooted from a bugcheck.  
The bugcheck was: 0x00000124 (0x0000000000000000, 0xfffffa8008788028, 
0x00000000bf800000, 0x0000000000200401). 
A dump was saved in: C:\Windows\MEMORY.DMP. Report Id: 062514-6692-01.

Code:
6/25/2014 7:32:06 PM, Error: Microsoft-Windows-WHEA-Logger [18]  - 
A fatal hardware error has occurred. Reported by component: Processor Core
 Error Source: Machine Check Exception Error Type: Internal Unclassified Error 
Processor ID: 2 The details view of this entry contains further information.

Code:
6/25/2014 7:32:06 PM, Error: Microsoft-Windows-WER-SystemErrorReporting
 [1001]  - The computer has rebooted from a bugcheck.  
The bugcheck was: 0x00000124 (0x0000000000000000, 0xfffffa800884b028,
 0x00000000bf800000, 0x0000000000200401). A dump was saved in: 
C:\Windows\MEMORY.DMP. Report Id: 062514-7300-01.

Code:
6/22/2014 8:44:41 PM, Error: Service Control Manager [7000]  - 
The cpuz137 service failed to start due to the following error:  
The system cannot find the path specified.

Code:
6/20/2014 9:14:23 PM, Error: Microsoft-Windows-Directory-Services-SAM [12291] 
 - SAM failed to start the TCP/IP or SPX/IPX listening thread

Code:
6/20/2014 7:49:01 PM, Error: Microsoft-Windows-WHEA-Logger [18]  - 
A fatal hardware error has occurred. Reported by component: Processor Core 
Error Source: Machine Check Exception Error Type: Internal Unclassified Error 
Processor ID: 6 The details view of this entry contains further information.

Code:
6/20/2014 7:48:52 PM, Error: Microsoft-Windows-WER-SystemErrorReporting
 [1001]  - The computer has rebooted from a bugcheck.  The bugcheck was: 
0x00000124 (0x0000000000000000, 0xfffffa8008537028, 0x00000000bf800000, 
0x0000000000200401). A dump was saved in: C:\Windows\MEMORY.DMP. 
Report Id: 062014-6130-01.

Code:
6/20/2014 7:21:20 AM, Error: Microsoft-Windows-WER-
SystemErrorReporting [1001]  - The computer has rebooted from a bugcheck. 
 The bugcheck was: 0x00000124 (0x0000000000000000, 0xfffffa8008548028, 
0x00000000bf800000, 0x0000000000200401). A dump was saved in: 
C:\Windows\MEMORY.DMP. Report Id: 062014-6302-01.

Code:
6/20/2014 6:20:30 AM, Error: Microsoft-Windows-WER-SystemErrorReporting
 [1001]  - The computer has rebooted from a bugcheck.  The bugcheck was: 
0x00000124 (0x0000000000000000, 0xfffffa8011a3d028, 0x00000000bf800000, 
0x0000000000200401). A dump was saved in: C:\Windows\MEMORY.DMP. 
Report Id: 062014-6349-01.

Code:
6/20/2014 12:06:15 PM, Error: Disk [11]  - 
The driver detected a controller error on \Device\Harddisk3\DR3.

Code:
6/19/2014 6:52:34 PM, Error: Microsoft-Windows-WER-SystemErrorReporting
 [1001]  - The computer has rebooted from a bugcheck. 
 The bugcheck was: 0x00000124 (0x0000000000000000, 0xfffffa8008829028,
 0x00000000bf800000, 0x0000000000200401). 
A dump was saved in: C:\Windows\MEMORY.DMP. Report Id: 061914-7082-01.

Code:
6/19/2014 4:53:42 PM, Error: Microsoft-Windows-WHEA-Logger [18]
  - A fatal hardware error has occurred. Reported by component: Processor 
Core Error Source: Machine Check Exception Error Type: Internal Unclassified
 Error Processor ID: 0 The details view of this entry contains further information.

Code:
6/19/2014 4:53:34 PM, Error: Microsoft-Windows-WER-SystemErrorReporting 
[1001]  - The computer has rebooted from a bugcheck.  The bugcheck was: 
0x00000124 (0x0000000000000000, 0xfffffa8008c10028, 0x00000000bf800000, 
0x0000000000200401). A dump was saved in: C:\Windows\MEMORY.DMP. 
Report Id: 061914-7004-01.

Code:
6/19/2014 4:29:31 PM, Error: Microsoft-Windows-WER-SystemErrorReporting
 [1001]  - The computer has rebooted from a bugcheck.  
The bugcheck was: 0x00000124 (0x0000000000000000, 0xfffffa8011d62028,
 0x00000000bf800000, 0x0000000000200401). A dump was saved in: 
C:\Windows\MEMORY.DMP. Report Id: 061914-7316-01.
.
 

My Computer My Computer

At a glance

Windows 10 ProAMD Ryzen 5 2400G Processor with Radeon RX Ve...G.SKILL Ripjaws V Series 16GB (2 x 8GB) 288-P...2047MB NVIDIA GeForce GTX 1060 6GB (EVGA)
Computer type
PC/Desktop
Computer Manufacturer/Model Number
Custom Built
OS
Windows 10 Pro
CPU
AMD Ryzen 5 2400G Processor with Radeon RX Vega 11 Graphics
Motherboard
ASRock X470 Master SLI/AC AM4 AMD Promontory X470 SATA 6Gb/s
Memory
G.SKILL Ripjaws V Series 16GB (2 x 8GB) 288-Pin DDR4 SDRAM D
Graphics Card(s)
2047MB NVIDIA GeForce GTX 1060 6GB (EVGA)
Sound Card
Motherboard Built in
Monitor(s) Displays
Acer R240HY bidx 23.8-Inch IPS HDMI DVI VGA (1920 x 1080) Wi
Screen Resolution
1920 x 1080
Hard Drives
1TB Sandisk SSD PLUS (Main drive)
500 GB Seagate 7200 RPM (Games)
500 GB Western Digital 7200 RPM (Virtual Machines)
PSU
CORSAIR TX Series TX650M 650W 80+ Gold Modular Power Supply
Case
CORSAIR CARBIDE SPEC-02 Mid-Tower Gaming Case, Red LED Fan
Cooling
220mm, two 120mm, and four 60mm fans
Keyboard
Wired Dell keyboard
Mouse
Wireless Logitech mouse
Internet Speed
250mb down, 30mb up
Antivirus
Panda Cloud Antivirus
Browser
Chrome-ish x64
Other Info
Your awesome for reading this.
OK, I ran TFC and here is the new results...

Thanks for your help.
 

My Computer My Computer

At a glance

Windows 7 Professional 64 bitIntel 4770K8 gig Corsair VengenceEVGA GTX 770
Computer type
PC/Desktop
OS
Windows 7 Professional 64 bit
CPU
Intel 4770K
Motherboard
Gigabyte Z97X Gaming 7
Memory
8 gig Corsair Vengence
Graphics Card(s)
EVGA GTX 770
Hard Drives
2 - WD 1 TB Black, 1- ADATA 256 GB SSD, 1- 1 TB Toshiba
Antivirus
Malware Bytes, Norton
Ok, your logs looks fine so far. I do not see any malware. I am looking into the ubssrv_oc_only.

I am not seeing this process running anywhere in the logs that were uploaded....I am looking into it.

Ok, looked at the logs and do not see it mentioned anywhere. Though if its malware, it could have changed its name and went somewhere else.

I believe it should be fine to continue looking into the bsod issue now.
 

My Computer My Computer

At a glance

Windows 10 ProAMD Ryzen 5 2400G Processor with Radeon RX Ve...G.SKILL Ripjaws V Series 16GB (2 x 8GB) 288-P...2047MB NVIDIA GeForce GTX 1060 6GB (EVGA)
Computer type
PC/Desktop
Computer Manufacturer/Model Number
Custom Built
OS
Windows 10 Pro
CPU
AMD Ryzen 5 2400G Processor with Radeon RX Vega 11 Graphics
Motherboard
ASRock X470 Master SLI/AC AM4 AMD Promontory X470 SATA 6Gb/s
Memory
G.SKILL Ripjaws V Series 16GB (2 x 8GB) 288-Pin DDR4 SDRAM D
Graphics Card(s)
2047MB NVIDIA GeForce GTX 1060 6GB (EVGA)
Sound Card
Motherboard Built in
Monitor(s) Displays
Acer R240HY bidx 23.8-Inch IPS HDMI DVI VGA (1920 x 1080) Wi
Screen Resolution
1920 x 1080
Hard Drives
1TB Sandisk SSD PLUS (Main drive)
500 GB Seagate 7200 RPM (Games)
500 GB Western Digital 7200 RPM (Virtual Machines)
PSU
CORSAIR TX Series TX650M 650W 80+ Gold Modular Power Supply
Case
CORSAIR CARBIDE SPEC-02 Mid-Tower Gaming Case, Red LED Fan
Cooling
220mm, two 120mm, and four 60mm fans
Keyboard
Wired Dell keyboard
Mouse
Wireless Logitech mouse
Internet Speed
250mb down, 30mb up
Antivirus
Panda Cloud Antivirus
Browser
Chrome-ish x64
Other Info
Your awesome for reading this.
Its starting to look like ubssrv_oc_only.exe is a false positive.

Joecatch, can you please navigate here to this file?

C:\Program Files\gigabyte\cloudstation\remoteoc\ubssrv_oc_only.exe

Can you then upload it to virustotal?

https://www.virustotal.com/

Also, what other exe files are mentioned in that folder?

It looks like this file may belong to some type of gigabyte software, which I noticed you have a gigabyte motherboard. You do not show having any installed gigabyte software though. Did you ever in the past install any gigabyte software?

One test would be to uninstall all gigabyte software, and then reinstall it. If the process disappears and then comes back in the exact same spot, it is most likely legitimate process.

Unfortunately looking up this process and file name shows little to no information.

So there are 2 possibilities:

It is malware, and is a new type of threat. (less likely) Or it is a false positive and belongs to gigabyte software. (most likely)


EDIT:

Looking into this further, I see it may belong to gigabyte cloudstation software. Which according to your logs, is no longer a installed program.

Did you ever use this software joecatch?


Looking at your restore points, I see it was removed and then reinstalled, yet I do not see it on your system anymore.....:confused:

Code:
==== System Restore Points ===================
.
RP295: 6/14/2014 8:58:17 PM - Windows Update
RP296: 6/14/2014 10:15:45 PM - Installed DC-10 Collection
RP297: 6/15/2014 5:45:40 PM - Windows Update
RP298: 6/18/2014 10:09:03 AM - Installed Cloud Station
RP299: 6/18/2014 6:14:50 PM - Removed Cloud Station
RP300: 6/18/2014 6:15:04 PM - Installed Cloud Station
RP301: 6/20/2014 10:26:14 PM - Device Driver Package Install: EPSON Imaging devices
RP302: 6/22/2014 8:04:50 PM - Removed Cloud Station
RP303: 6/22/2014 8:05:04 PM - Installed Cloud Station
 

My Computer My Computer

At a glance

Windows 10 ProAMD Ryzen 5 2400G Processor with Radeon RX Ve...G.SKILL Ripjaws V Series 16GB (2 x 8GB) 288-P...2047MB NVIDIA GeForce GTX 1060 6GB (EVGA)
Computer type
PC/Desktop
Computer Manufacturer/Model Number
Custom Built
OS
Windows 10 Pro
CPU
AMD Ryzen 5 2400G Processor with Radeon RX Vega 11 Graphics
Motherboard
ASRock X470 Master SLI/AC AM4 AMD Promontory X470 SATA 6Gb/s
Memory
G.SKILL Ripjaws V Series 16GB (2 x 8GB) 288-Pin DDR4 SDRAM D
Graphics Card(s)
2047MB NVIDIA GeForce GTX 1060 6GB (EVGA)
Sound Card
Motherboard Built in
Monitor(s) Displays
Acer R240HY bidx 23.8-Inch IPS HDMI DVI VGA (1920 x 1080) Wi
Screen Resolution
1920 x 1080
Hard Drives
1TB Sandisk SSD PLUS (Main drive)
500 GB Seagate 7200 RPM (Games)
500 GB Western Digital 7200 RPM (Virtual Machines)
PSU
CORSAIR TX Series TX650M 650W 80+ Gold Modular Power Supply
Case
CORSAIR CARBIDE SPEC-02 Mid-Tower Gaming Case, Red LED Fan
Cooling
220mm, two 120mm, and four 60mm fans
Keyboard
Wired Dell keyboard
Mouse
Wireless Logitech mouse
Internet Speed
250mb down, 30mb up
Antivirus
Panda Cloud Antivirus
Browser
Chrome-ish x64
Other Info
Your awesome for reading this.
Hello. Yes, I did have Gigabyte Apps Center loaded because I am using a Gigabyte Z97 Gaming 7 mobo. But as I stated above I uninstalled the app and since then I have not had any BSOD. So because of that, that file ubssrv_oc_only.exe, is no longer on my system.
 

My Computer My Computer

At a glance

Windows 7 Professional 64 bitIntel 4770K8 gig Corsair VengenceEVGA GTX 770
Computer type
PC/Desktop
OS
Windows 7 Professional 64 bit
CPU
Intel 4770K
Motherboard
Gigabyte Z97X Gaming 7
Memory
8 gig Corsair Vengence
Graphics Card(s)
EVGA GTX 770
Hard Drives
2 - WD 1 TB Black, 1- ADATA 256 GB SSD, 1- 1 TB Toshiba
Antivirus
Malware Bytes, Norton
ok sounds good then.

So no more bsods at all?

That is great news!

Let us know how it goes. Mark this thread solved if a week from now you are still good.
 

My Computer My Computer

At a glance

Windows 10 ProAMD Ryzen 5 2400G Processor with Radeon RX Ve...G.SKILL Ripjaws V Series 16GB (2 x 8GB) 288-P...2047MB NVIDIA GeForce GTX 1060 6GB (EVGA)
Computer type
PC/Desktop
Computer Manufacturer/Model Number
Custom Built
OS
Windows 10 Pro
CPU
AMD Ryzen 5 2400G Processor with Radeon RX Vega 11 Graphics
Motherboard
ASRock X470 Master SLI/AC AM4 AMD Promontory X470 SATA 6Gb/s
Memory
G.SKILL Ripjaws V Series 16GB (2 x 8GB) 288-Pin DDR4 SDRAM D
Graphics Card(s)
2047MB NVIDIA GeForce GTX 1060 6GB (EVGA)
Sound Card
Motherboard Built in
Monitor(s) Displays
Acer R240HY bidx 23.8-Inch IPS HDMI DVI VGA (1920 x 1080) Wi
Screen Resolution
1920 x 1080
Hard Drives
1TB Sandisk SSD PLUS (Main drive)
500 GB Seagate 7200 RPM (Games)
500 GB Western Digital 7200 RPM (Virtual Machines)
PSU
CORSAIR TX Series TX650M 650W 80+ Gold Modular Power Supply
Case
CORSAIR CARBIDE SPEC-02 Mid-Tower Gaming Case, Red LED Fan
Cooling
220mm, two 120mm, and four 60mm fans
Keyboard
Wired Dell keyboard
Mouse
Wireless Logitech mouse
Internet Speed
250mb down, 30mb up
Antivirus
Panda Cloud Antivirus
Browser
Chrome-ish x64
Other Info
Your awesome for reading this.
I believe all the errors were caused by memory faults. Memory faults in that it was corrupt. This is often caused by errant drivers, malware and/or some AV real-time scanners. When the Hardware Abstraction Layer (HAL) tanked, it got serious and the reason why not much is usable from the dumps. There could be more than one errant driver causing this so if the BSODs continue after removing the Gigabyte software, we'll need to start with a clean boot and add-back your "goodies" one at a time until the culprit(s) are found.

As Andrew says, keep us updated on the status.
 

My Computer My Computer

At a glance

Windows 7 Pro-x64i7-2600 3.4GHz - 3.8GHz Turbo8Gb - 2x4GB, Muskin 991770 PC3-1333Integrated Intel HD 2000
Computer type
PC/Desktop
Computer Manufacturer/Model Number
Built 2/11/2011
OS
Windows 7 Pro-x64
CPU
i7-2600 3.4GHz - 3.8GHz Turbo
Motherboard
Intel DH67BL-B3
Memory
8Gb - 2x4GB, Muskin 991770 PC3-1333
Graphics Card(s)
Integrated Intel HD 2000
Sound Card
Integrated Intel 10.1 HD, RealTek ALC892
Monitor(s) Displays
Asus LCD VH222H, Haier HL24XSL2a
Screen Resolution
1920x1080, 1920x1080
Hard Drives
Crucial SSD C300-128Gb,
Western Digital WD5002AALX - 500Gb,
Western Digital WD7501AALS - 750Gb
PSU
Seasonic 650W 80+ Gold Modular
Case
Rosewill Defender
Cooling
Stock CPU, Four 120mm case fans, PCH fan added
Keyboard
Logitech EX100 Y-RBH94 Wireless
Mouse
Logitech EX100 M-RCE95 Wireless
Internet Speed
3.0/1.5 Mbs
Antivirus
Microsoft Security Essentials
Browser
Microsoft Internet Explorer 11
Other Info
Antec Veris Premier-Multimedia IR Station,
Cyber Accoustics-3602 Speakers,
AFT XM-5U Card Reader,
Hauppauge TV-HVR-2250,
Sony LX300 USB Turntable
OK. As suggested to me elsewhere, I uninstalled Gigabyte App Center and Norton which was a free 90 trial run of some software of theirs. Since I have never had good luck with Norton, I had no problem deleting it!

Joe
 

My Computer My Computer

At a glance

Windows 7 Professional 64 bitIntel 4770K8 gig Corsair VengenceEVGA GTX 770
Computer type
PC/Desktop
OS
Windows 7 Professional 64 bit
CPU
Intel 4770K
Motherboard
Gigabyte Z97X Gaming 7
Memory
8 gig Corsair Vengence
Graphics Card(s)
EVGA GTX 770
Hard Drives
2 - WD 1 TB Black, 1- ADATA 256 GB SSD, 1- 1 TB Toshiba
Antivirus
Malware Bytes, Norton
I know this is a very long wall of text, But following the below will greatly reduce your chances of becoming infected again.

I advise you to install and use the following Free security programs/solutions so you do not get infected again:

-Panda antivirus -You can only have 1 antivirus installed at a time, I recommend using this one and uninstalling what you are using now.

-Malwarebytes

-Superantispyware

-Unchecky

-Should I remove it

-Web of Trust

-Set up open dns

Run the first 3 listed and scan around once every 2 weeks. Make sure you update them before scanning. Unfortunately no program out there is a silver bullet-there is no one program to protect you entirely. So due to this, it is necessary to have a couple of products to help keep you safe on all fronts.

Panda Cloud Antivirus: Panda cloud AV is a great free program that uses the cloud (the internet) to scan your pc for threats. This antivirus works very well at detecting the newest threats, as well as some unknown ones that have not yet been discovered. For information on how to use it, the manual is located here.


Malwarebytes: This is a great program to use to scan your pc for malware that your antivirus might possibly miss or not look for. A guide on how to use it can be found here.

Superantispyware: This is a great second opinion scanner which will scan for spyware and other types of PUPS. (Potentially unwanted programs.)

Unchecky: is a program that aims to keep unwanted programs from entering your pc when installing a new program. Most programs give you the option of express install or custom install. When you do a regular install of most applications, they add toolbars and other unwanted items to your pc. If you choose the custom option however, you can avoid most of these unwanted programs by unchecking them and then clicking next. This program does this for you automatically. It removes the checkmarks so that when you click next and next your way through the install proccess, you do not get a bunch of junk on your system. Keep in mind though, this is how most people get unwanted spyware etc on there pc. When installing any new program, google it and see if it has good reviews. Then during the install don't just click next and rush through it. Take your time to read what is in front of you, and uncheck anything you do not want.

The best part about unchecky is it's a install and forget. It updates automatically. And works to prevent unnecessary programs from sneaking in during software installs.


Should I remove it: This is not a malware scanner. What it does is it looks at all of the installed programs on your PC and gives you a percentage % of how many people uninstall the software. If the percentage % is high, I would remove it as it is most likely not a good program. It also gives a ton of information about what the program does and how it behaves.

WOT: (web of trust) is a very helpful browser addon that works with all web browsers and helps you to avoid nasty sites that have been known to host malware and the like. It uses a rating system by users as well as there own internal site investigations to place websites into categories and mark whether or not they are safe. It is a good tool to help you avoid clicking on a bad link in the first place.

Open DNS: is a service that helps you block known malware sites before they even reach your PC entirely. It also can be configured to block adult sites, and filter out other web sites based on categories. All for free. Not only does it protect your computers, but other devices as well.

For more information, see here:

https://support.opendns.com/entries/26514730-Web-Content-Filtering-and-Security

If it looks to advanced for you, it actually isn't very hard to set up. See the very first link above (set up open dns) which will take you to the setup page. You do not need to create an account if you wish not to. There is a link in the bottom right hand corner to avoid making an account if you do not want it. They have directions on how to apply it to your computer, or your router so that every device on your network can be protected.


Making windows security better for you and anyone using your PC:


I also suggest using a standard user account in windows, and only using an admin account when you need to install software. If you have family members sharing your pc, create standard user accounts for them. See this link below on how to do so:

http://www.sevenforums.com/tutorials/181024-user-account-create.html

When using a standard account and you make a change or install a program that affects the whole system, UAC will prompt you to continue. Make sure the setting or program you are tying to install is listed, then click yes to continue. If you are just browsing the web and the prompt appears with a program you have not heard of, or do not know what it is, it is much safer to click no then yes. No will block the action, and if you were trying to do something, you can always start it again and choose yes.

UAC makes this easy, see here:

What is user account control (UAC)?

I also suggest choosing always notify for UAC:

What are User Account Control settings?

I also recommend that you use bleeping computers suggestions which can be found here:

How to keep your computer safe online

So how Did I get Infected?


Those are my recommendations to you, and I Highly suggest you follow them. Should you have any questions, post back.

Do not feel like you need to do everything above, if your computer knowledge is limited do what you are able and feel comfortable doing. If you read all the instructions though you should be able to do it yourself.

With the solution provided above, your risk of malware infection drops considerably.
 
Last edited:

My Computer My Computer

At a glance

Windows 10 ProAMD Ryzen 5 2400G Processor with Radeon RX Ve...G.SKILL Ripjaws V Series 16GB (2 x 8GB) 288-P...2047MB NVIDIA GeForce GTX 1060 6GB (EVGA)
Computer type
PC/Desktop
Computer Manufacturer/Model Number
Custom Built
OS
Windows 10 Pro
CPU
AMD Ryzen 5 2400G Processor with Radeon RX Vega 11 Graphics
Motherboard
ASRock X470 Master SLI/AC AM4 AMD Promontory X470 SATA 6Gb/s
Memory
G.SKILL Ripjaws V Series 16GB (2 x 8GB) 288-Pin DDR4 SDRAM D
Graphics Card(s)
2047MB NVIDIA GeForce GTX 1060 6GB (EVGA)
Sound Card
Motherboard Built in
Monitor(s) Displays
Acer R240HY bidx 23.8-Inch IPS HDMI DVI VGA (1920 x 1080) Wi
Screen Resolution
1920 x 1080
Hard Drives
1TB Sandisk SSD PLUS (Main drive)
500 GB Seagate 7200 RPM (Games)
500 GB Western Digital 7200 RPM (Virtual Machines)
PSU
CORSAIR TX Series TX650M 650W 80+ Gold Modular Power Supply
Case
CORSAIR CARBIDE SPEC-02 Mid-Tower Gaming Case, Red LED Fan
Cooling
220mm, two 120mm, and four 60mm fans
Keyboard
Wired Dell keyboard
Mouse
Wireless Logitech mouse
Internet Speed
250mb down, 30mb up
Antivirus
Panda Cloud Antivirus
Browser
Chrome-ish x64
Other Info
Your awesome for reading this.
OK, I'd thought I report back and tell you I have had no more BSODs. System seems very stable. Thanks.

Joe
 

My Computer My Computer

At a glance

Windows 7 Professional 64 bitIntel 4770K8 gig Corsair VengenceEVGA GTX 770
Computer type
PC/Desktop
OS
Windows 7 Professional 64 bit
CPU
Intel 4770K
Motherboard
Gigabyte Z97X Gaming 7
Memory
8 gig Corsair Vengence
Graphics Card(s)
EVGA GTX 770
Hard Drives
2 - WD 1 TB Black, 1- ADATA 256 GB SSD, 1- 1 TB Toshiba
Antivirus
Malware Bytes, Norton
Back
Top