BSOD - Different reason every time.. Please help

[lshanks07]

Thank you for your help! My computer skills are slightly above average, and I can follow directions.... I will post my dump readings below.

I have been getting the BSOD for 5 days now... sometimes after rebooting several times... I can use the computer, but upon restarting... BSOD or system repair appears.

I have tried MBAM, MSE, MBAM found 8 threats and removed them yesterday. However, I have gotten 2 crashes today.

Maybe my order of operations was incorrect, so any help you are willing to provide will be greatly appreciated.

Here is the list... I think I have had like 30 crashes...

View attachment 265243

Thank you,

Lori

 

[Dsprague]

Please follow the http://www.sevenforums.com/bsod-help-support/96879-blue-screen-death-bsod-posting-instructions.html

 

[lshanks07]

I hope this gives you what you need!

Thank you

View attachment 265246

 

[Dsprague]

Odd it seems that the attached file is not working could you please upload the file again?

 

[lshanks07]

Sure!

I created a new zip file... hopefully this file will have the information you need

Thank you!

View attachment 265255

 

[Dsprague]

Ok a couple of things to try while I go through your files with a fine toothed comb, first run the system file checker to clear up any file system corruption that may have occurred do to the infection that was on your pc:

SFC.EXE /SCANNOW
Go to Start and type in "cmd.exe" (without the quotes)
At the top of the search box, right click on the cmd.exe and select "Run as adminstrator"
In the black window that opens, type "SFC.EXE /SCANNOW" (without the quotes) and press Enter.
Let the program run and post back what it says when it's done.

If the message after the command has finished running says anything other than no violations found run the command two more times.

Next check out these two hot fixes from microsoft and see if they are any help:

Stop error when a Windows 7-based or Windows Server 2008 R2-based computer crashes randomly

"0x0000001E" Stop error occurs intermittently in Windows 7 SP1 and Windows Server 2008 R2 SP1

 

[lshanks07]

Thank you,

I did run Scannow and the response was "windows resource protection did not find any integrity violations"

I will now check the hotfix links...

Thank you!

 

[lshanks07]

Ok,

I have downloaded and installed both hotfixes and subsequently rebooted after each install.

I was able to reboot both times in normal mode without any BSOD....

I am cautiously optomistic that these fixes helped!

Unless you find something else with the dump files.... I will wait to hear from you!

Thank you very much for your time and knowledge on this issue...

 

[Dsprague]

I did not see anything else that stuck out in the dump files, but give it a week and see if the system remains stable.

 

[lshanks07]

Will do!

Thanks again!!

 

[lshanks07]

Hello, I am back again... not sure if I should continue this thread or start a new one....

I am no longer getting BSOD, however, everytime I try to start computer it immediately goes into start up repair... once that has finished running... I can boot.. when I sign on.. there are 3 error messages that pop up...
There was a problem starting

c:\users\lori\appdata\roaming\qusgp.dll

C:\users\lori\appdata\roamingfxaer.dll
and
Moret.dll

Thank in advance!
All say access is denied

 

[Dsprague]

Try running the system file checker again, those seem like system files that may have become corrupted for some reason:

SFC.EXE /SCANNOW
Go to Start and type in "cmd.exe" (without the quotes)
At the top of the search box, right click on the cmd.exe and select "Run as adminstrator"
In the black window that opens, type "SFC.EXE /SCANNOW" (without the quotes) and press Enter.
Let the program run and post back what it says when it's done.

 

[lshanks07]

ok,

I ran the command as administrator... it only ran the verification phase... (not sure if that is normal) and came back with no integrity violations...

 

[Dsprague]

Odd let me see if I can get other eyes on the subject

 

[Arc]

The path c:\users\<username>\appdata\roaming\ is for the third party programs, and so beyond the scope of SFC. Those must be caused by deletion or otherwise damage of some third party program that I am not sure what it is.

To recover the start up issue, follow it:
Troubleshooting Windows 7 Failure to Start

Or, run Startup Repair with either from the installer disc or from the repair disc, for three separate times, with restarts after every single run.
Startup Repair: Run three separate times.
The automated Startup repair is not enough all the times.

Hope it will recover the boot issue. Report us if the boot issue is fixed or not. After that we will concentrate on the other issue.

EDIT:
If startup is repaired,

1. Click on the Start button
2. Type “msconfig (without quotes), click the resulting link. It will open the System Configuration window with the "general" tab selected.
   • Click the "startup" tab. Click "Disable all" > Apply > OK.
   • Click on "services" tab. Check the "Hide all Microsoft Services"; Click "Disable all" > Apply > OK

Then try to boot again normally. Is the error still popping up?

 

[carwiz]

It's unusual to see .dlls in the appdata folders. And the files are not part of Windows. Either a software application install is corrupt or these may be due to malware. A pic of your c:\users\lori\appdata\roaming folders might help. I don't recognize any of the dll names and they don't show up a system file lookup database.

 

[lshanks07]

Ok, I am unsure which process to do first...

I will be happy do to any and all, just specify order.

Should I post the file up for you all...

Also, these roaming errors do not appear if I log on as administrator.... Only when I log on as myself..,


Thank you all!!

 

[tom982]

Hello lshanks07 and welcome to the forums

I would highly advise against running Combofix at this stage, it is an incredibly powerful tool which no one in this thread, including me, has been trained to use. Besides, there is no indication of an infection present that would justify its use.

To speed things up a little, and to see whether a security analyst needs to remove any malware, could you run OTL for me please:

OTL

1. Download OTL to your Desktop
2. Double click on the OTL icon to run it. Make sure all other windows are closed and to let it run uninterrupted.
3. Click Run Scan. Do not change any settings unless otherwise told to do so. The scan won't take long.

When the scan completes, it will open two notepad windows. OTL.Txt and Extras.Txt. These are saved in the same location as OTL.
Please attach these files to your next post.

Tom