Solved BSOD after logging on for around 2 minutes, error 0x0000008E

[darrenx1]

BSOD occurs whenever i select start normally after a crash. Even if shutdown is successful it will still crash. I did a few system restores and had a successful log on w/o a BSOD. After shutdown with the first log on after system restore BSOD occurred every time after the first successful log on.

Error code 0x0000008E

My system is running in safemode with networking so it will not get a BSOD.

My system has some malware issues as well. It is an ongoing type. (svchost) malwarebytes blocked this with its malicous website blocking but svchost still attacks my computer.

System also contains a windows update error. code FFFFFFFE

I would like to find out how i can fix this BSOD error so i can succesfully log on w/o crashing after logging on for about a couple minutes, Usually 1 2 or 3 min after log on.

I tried attaching a mini crash dump file but it says invalid file. I hope i can get help with the information i have given but if the crash dump file is needed i will take further action to get it attached with this thread.

Please let me know how i can solve this issue

Best regards

darren

 

[VistaKing]

darrenx1 welcome to SevenForums

   Warning

You will need a USB FLASH DRIVE

   Tip

Download the Tool from a non infected PC

Farbar Recovery Scan Tool

Choose one that goes with your OS bit version . Save the file to a USB Flash drive

32-bit Version OS :ar: Farbar Recovery Scan Tool

64-Bit Version OS :ar: Farbar Recovery Scan Tool x64

   Note

Click the rb: button and right-click Computer .Select Properties . Look for System Type: which will say 32-bit Operating System or 64-bit Operating System

Plug the flash drive into the infected PC.

Enter System Recovery Options.

:ar: To enter System Recovery Options from the Advanced Boot Options:
Restart the computer.
As soon as the BIOS is loaded begin tapping the F8 key until Advanced Boot Options appears.
Use the arrow keys to select Repair Your Computer menu item.
Select US as the keyboard language settings, and then click Next.
Select the operating system you want to repair, and then click Next.
Select your user account an click Next.

:ar: To enter System Recovery Options by using Windows installation disc:
Insert the installation disc.
Restart your computer.
If prompted, press any key to start Windows from the installation disc. If your computer is not configured to start from a CD or DVD, check your BIOS settings.
Click Repair your computer.
Select US as the keyboard language settings, and then click Next.
Select the operating system you want to repair, and then click Next.
Select your user account and click Next.

:ar: On the System Recovery Options menu you will get the following options:

• Startup Repair

• System Restore

• Windows Complete PC Restore

• Windows Memory Diagnostic Tool

• Command Prompt

Select Command Prompt

In the command window type X:\FRST.exe (for x64 bit version type X:\FRST64.exe) and press Enter

   Note

Replace letter X with the drive letter of your flash drive.

   Tip

Type the commands below to see what your letter is for the USB drive and press ENTER after each command

Diskpart
List volume

The tool will start to run.
When the tool opens click Yes to disclaimer.
Press Scan button.
FRST will let you know when the scan is complete and has written the FRST.txt to file
Please copy and paste both logs in your reply.(FRST.txt and Addition.txt)

   Note

FRST.txt and Addition.txt files will be inside the root of the USB Flash Drive

 

[darrenx1]

I had no problems doing what you recommended me to do. Here is the log the scan came up with.

 

[VistaKing]

Open up notepad . Inside notepad copy and paste the highlighted text below


start
HKU\sarah\...\Run: [swg] "C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [x]
HKU\sarah\...\Run: [Pando Media Booster] C:\Program Files\Pando Networks\Media Booster\PMB.exe [ 2013-01-25] ()
HKU\sarah\...\Policies\system: [LogonHoursAction] 2
HKU\sarah\...\Policies\system: [DontDisplayLogonHoursWarnings] 1
C:\Windows\6E4CF694BD0C45EB96029D6D46941250.tmp
C:\Windows\Tasks\SA.DAT
TDL4: custom:26000022 <===== ATTENTION!
end


Save the file as Fixlist.txt Save the file to your Flash Drive . Open up FRST.exe again and click on [FIX] button . Once its done it will create a new log called Fixlog.txt . Try to log into the PC in normal mode . Once you're inside the desktop upload the Fixlog.txt file .

 

[darrenx1]

I have started windows normally and am now on the deskstop as i am writing this reply. Upon the first log on while starting windows normally Bsod occured. I am now on the second log on attempt.

 

[VistaKing]

Description | Download
TDSSKILER|
Download

Right-click the program and select: Extract to tdsskiller\


A TDSSKiller folder is found on your Desktop.
Open the folder, and double-click the TDSSKiller application.


When the TDSSKiller console opens, click on: Change Parameters
Under Additional Options, place a check in the box next to: Detect TDLFS File System
Click: OK


Press: Start Scan


If a suspicious object is detected, the default action is Skip, leave it as is, and click on: Continue
If malicious objects are found, they show in the Scan results.
Ensure Cure (the default) is selected, then click: Continue > Reboot now, to finish the cleaning process.
(Note: If Cure is not available, select Skip, >>Do not select: Delete<<)


When done, the tool outputs its log to the disk with the Windows Operating System, normally C:\


Logs have a name like:

C:\TDSSKiller.X.X.X_12.04.2013_15.31.43_log.txt


Please post the TDSSKiller log in your reply.

 

[VistaKing]

Once you're back on the desktop ( normal mode ) run the below program

RogueKiller for 32bit or RogueKiller for 64bit

:ar: Click on one of the links above that goes with your Windows 7 bit versions

:ar: Save to the Desktop.

:ar: Close all windows and browsers

:ar: Right click on

and choose

:ar: Press: SCAN

:ar: provide the RKreport.txt (Mode: Scan) in your reply.

 

[darrenx1]

My computer encountered high severity malware and its default was cure. I rebooted and my desktop loaded with a all black backround, command prompt, norton auto fix which failed as a result , and a file asking me to run it. The files publisher name is kapersky lab. I have not touched anything on the desktop as of yet.

I am sending a reply as of now through another device.

My computer is still loaded with what a have told you In the first paragraph above.

My question is what should I do now?

I will wait for your reply and not touch anything until of your reply

 

[VistaKing]

Did you run what I posted on Post 7 ? RogueKiller ?

 

[darrenx1]

No I have not. It is still with an all black backround with command prompt norton auto fix and a file that wants to be ran

What do you suggest I should do from here?

 

[VistaKing]

I'm so confused . Can you rerun the FRST.exe file inside Recovery Mode and upload the new Frst.txt file , please ?

 

[darrenx1]

This is what my desktop loaded with after a reboot should I shutdown so I can go to system
restore? I would be glad to take photos for you also if you need them

 

[VistaKing]

Can you restart the PC and rerun the FRST.exe inside System Recovery mode posted on Post #2 ?

 

[darrenx1]

Excuse my recent complications if there were any. I x the file and my desktop went to normal. I am now running rouge cleaner and this is where I am at as of now.

 

[VistaKing]

Upload the log please .

Also run the TSSKiller please .

 

[darrenx1]

here is the log & should i change the paramaters for the tds killer scan like the last scan?

 

[VistaKing]

Follow the instructions I posted in Post #6

Inside the TDSSKILLER application

• Click on: Change Parameters
• Under Additional Options, place a check in the box next to: Detect TDLFS File System
• Click: OK

 

[darrenx1]

I ran the tds killer and it came up with TDSS file system

suspicous object medium risk. Default was to skip. I clicked continue afterwards.

BSOD has not occured at all so far now. Is there anything else i should run? and is it safe to restart, shutdown exc?

 

[VistaKing]

Upload the tdsskiller log

Log is inside C:\ drive called TDSSKiller

 

[darrenx1]

here is the log