Solved BSOD error 0x0000009F while closing down

[Arc]

A clean reinstall will be far better than a recovery.

If it is anyhow possible, do the clean install as guided in the provided link.

If it is really beyond your ability, then you have to do a compromise and go for a recovery. Then we have to see if the problem remains or not.

 

[jpaulm]

Hi Arc, thanks for your quick responses! What you suggest may be the last resort, but I thought I would just show my ignorance by asking if deleting the Sunbelt drivers from C:\Windows\System32\drivers: sbapifs, sbfw, sbfwim, sbhips, sbp2port, sbredrv, sbwtis, would improve matters. Also, when I do a search in the registry, there are only two refs to sbfwim.sys: ImagePath in HKLM/SYSTEM/ControlSet001/services/SBFWIMCL and HKLM/SYSTEM/ControlSet001/services/SBFWIMCLMP .

So I am wondering whether it might be helpful to delete SBFWIMCL and SBFWIMCLMP fom the registry and those drivers from C:\Windows\System32\drivers - or would it just create more havoc?!

Thanks again,

Paul M.

PS Why does your icon sometimes have "external" below it in Bengali? Just curious!

 

[jpaulm]

Minor correction: sbredrv.sys and sbp2port.sys seem to be related to other software, but the others are all SunBelt.

 

[Arc]

Minor correction: sbredrv.sys and sbp2port.sys seem to be related to other software, but the others are all SunBelt.

sbredrv.sys is sunbelt, too!

If you delete the drivers of a program that you previously uninstalled (I guess you deleted the program, too) technically it will not harm the computer.

But I will say it again that it may not be enough to wipe up all the unnecessary evil.

PS1: I am external, that is why.

 

[jpaulm]

Thanks for your prompt response! I actually reinstalled Spybot Search and Destroy and then uninstalled it - drivers still there! I guess I will try deleting the drivers. What about the registry entries, though? Is it better to delete the drives and then the registry entries, or the reverse - or maybe it doesn't matter...?

I am really impressed with your quick and thorough responses! Thanks a million!

PS This article - Sbredrv.sys Process - What is Sbredrv.sys? - Reviversoft - says sbredrv.sys is part of Vipre. This one says it is part of SunBelt's CounterSpy - Sbredrv.sys driver | What is Sbredrv.sys file? , which I don't believe I ever installed. Weird!

 

[Arc]

I think I have told it to you earlier, but sunbelt discontinued in 2011. The components are used by some other products. But IN YOUR COMPUTER IT IS GFI ONLY!!!!!!!

ITEM | VALUE
Name | [00000015] GFI Software Firewall NDIS IM Filter Miniport
Adapter Type | Ethernet 802.3
Product Type | GFI Software Firewall NDIS IM Filter Miniport
Installed | Yes
PNP Device ID | ROOT\SB_SBFWIMCLMP\0000
Last Reset | 30/08/2014 8:27 AM
Index | 15
Service Name | SBFWIMCLMP
IP Address | Not Available
IP Subnet | Not Available
Default IP Gateway | Not Available
DHCP Enabled | No
DHCP Server | Not Available
DHCP Lease Expires | Not Available
DHCP Lease Obtained | Not Available
MAC Address | 22:26:82:4C5:6A
Driver | c:\windows\system32\drivers\sbfwim.sys (5.2.51.0, 117.78 KB (120,608 bytes), 07/10/2013 10:06 PM)

sbfwimcl    [COLOR=Red][B]GFI[/B][/COLOR] Software Firewall NDIS IM Filter Service    c:\windows\system32\drivers\sbfwim.sys    Kernel Driver    No    Manual    Stopped    OK    Normal    No    No

sbfwimclmp    [COLOR=Red][B]GFI[/B][/COLOR] Software Firewall NDIS IM Filter Miniport    c:\windows\system32\drivers\sbfwim.sys    Kernel Driver    Yes    Manual    Running    OK    Normal    No    Yes

gfiark    gfiark    c:\windows\system32\drivers\gfiark.sys    Kernel Driver    No    Manual    Stopped    OK    Normal    No    No

mantle.exe   [COLOR=Red] c:\program files (x86)\[U][B]gfi[/B][/U]\languard 11 agent\mantle.exe[/COLOR]    4896    8    200    1380    30/08/2014 10:15 AM    11.1.2012.1123    137.87 KB (141,176 bytes)    23/11/2012 9:00 AM

mantle    11.1.2012.1123    137.87 KB (141,176 bytes)    23/11/2012 9:00 AM    [COLOR=Red]GFI Software Development Ltd.[/COLOR]    [COLOR=Red]c:\program files (x86)\[U][B]gfi[/B][/U]\languard 11 agent\mantle.exe[/COLOR]

[COLOR=Red]GFI LanGuard 11 Attendant Service[/COLOR]    gfi_lanss11_attservice    Stopped    Disabled    Own Process    "c:\program files (x86)\[COLOR=Red][U][B]gfi[/B][/U][/COLOR]\languard 11 agent\lnssatt.exe" -service    Normal    LocalSystem    0

I wonder why you failed to get GFI in your system at the first place when I can see it very easily, and I wonder why you still dont pay attention to what I say but search for online craps!

It is my last post in your thread. Your words are totally inconstant!

GFI Languard didn't show up in my list of Programs and Features, but it was in C:\Programs, so I deleted it there. Hope that's OK.

I don't think I deleted some files without uninstalling - that's not something I would normally do!

I tried to be gentle ..... but ....... every person has a bearing capacity!

 

[jpaulm]

I know you are losing (have lost) patience with me, but my words are not inconsistent! I did explain earlier that Languard was not in Control Panel/Programs and Features, so I tried deleting it... That was all I knew how to do - is there another way of uninstalling systems? I did ask if that was OK! No answer though...

Also my Program Files (x86) does not show gfi - where did you get that information from? I also searched Program Files (x86) for Mantle - can't find it... Is it possible that you are using my first dump, not the one I sent a few days ago? Or are there hidden files that I can't see, but you can?

Sorry, I really didn't understand "But IN YOUR COMPUTER IT IS GFI ONLY!!!!!!!" - since I can't find a gfi directory, I don't know what you mean!There is some gfi stuff, e.g. gfiark, in Vipre - can I assume that's OK?Lastly, should I delete the registry entries I mentioned, or only those drivers - and, if both, in which order?I really hope you take pity and answer this note, as your last one is really, really, confusing!

TIA

Paul M.