BSOD on shutdown :/

[Tomovirka]

Hello everyone

I'm having BSOD issues when I try to shut down or restart my windows, no issues if I do that in safemode though. The problem started yesterday after I copied some dll files to sys32 and syswow64 trying to get a program for Crusader Kings 2 to work (guess I learned now not to do that ). Anyway, here's what whocrashed says:

On Sat 28.6.2014. 12:51:56 GMT your computer crashed
crash dump file: C:\Windows\Minidump\062814-37986-01.dmp
uptime: 05:31:07
This was probably caused by the following module: ntkrnlmp.exe (nt!KeBugCheckEx+0x0)
Bugcheck code: 0xF4 (0x3, 0xFFFFFA8006F4C620, 0xFFFFFA8006F4C900, 0xFFFFF800033837B0)
Error: CRITICAL_OBJECT_TERMINATION
Bug check description: This indicates that a process or thread crucial to system operation has unexpectedly exited or been terminated.
This appears to be a typical software driver bug and is not likely to be caused by a hardware problem. This problem might be caused by a thermal issue.
The crash took place in the Windows kernel. Possibly this problem is caused by another driver that cannot be identified at this time.

Here's a minidump file from about 15 minutes ago
062814-37986-01.dmp - Speedy Share - upload your files here

Hope that someone can help out here, I really don't want to waste hours on backing up my stuff and reinstalling windows.

 

[Arc]

Hi Tomovirka.

Click on the button below ....



It will download the DM log collector. Right click on the application and run as administrator. It will generate a .zip file on your desktop. Upload the .zip.
http://www.sevenforums.com/tutorials/9733-screenshots-files-upload-post-seven-forums.html

 

[Tomovirka]

Allright, here you go, I thought a single dump file would be enough, my bad.
Also I forgot to mention, on startup I sometimes get the error message that regsvcs.exe won't start, I guess it's also related to the BSOD problem.

View attachment 323566

 

[Arc]

Wherefrom you have got your nvidia updates? Specially when you dont have anything to do with nvidia?? Your computer Satellite L500 is having intel chipset and ATI graphics.

• avidm.exe c:\users\puki\nvidia system update\avidm.exe
• dynmy.exe c:\users\puki\nvidia updates\dynmy.exe

And, the BSODs are reported to be caused by those stuff.

BugCheck F4, {3, fffffa80073fb060, fffffa80073fb340, fffff800033947b0}

----- ETW minidump data unavailable-----
[COLOR=Red]Probably caused by : aviDm.exe[/COLOR]

Followup: MachineOwner
---------

BugCheck F4, {3, fffffa8006f4c620, fffffa8006f4c900, fffff800033837b0}

----- ETW minidump data unavailable-----
[COLOR=Red]Probably caused by : dynMy.exe[/COLOR]

Followup: MachineOwner
---------

Go to c:\users\puki and delete these two folders. Those are nothing but virus trying to disguise themselves under known names.

Then scan the system for possible virus infection with the following programs.

• Anti-rootkit utility TDSSKiller
• Windows Defender Offline

And, change your perception about an antivirus. You are seeing that AGV is failing to keep you secured. Uninstall AVG using AVG Remover. Use Microsoft Security Essentials as your antivirus with windows inbuilt firewall, and free MBAM as the on demand scanner.

Download, install and update those, and then run full system scans with both of them, one by one, too.

At another note, you have two bad things installed. Daemon Tools and MagicISO. They also need proper action. Daemon Tools, Alcohol 120% and Power Archiver Pro uses SCSI Pass Through Direct (SPTD), which is a well known BSOD causer. Uninstall Daemon Tools at first. Then download SPTD standalone installer from Disk-Tools.com, and execute the downloaded file as guided below :

• Double click to open it.
• Click this button only:
• 
• If it is grayed out, as in the picture, there is no more SPTD in your system, and you just close the window.

MagicISO also has its own SCSI, mcdbus.sys. But it appears that it is not installed in your system. So simply uninstall MagicISO.

Let us know the results.

Now you know why a single crash dump was not enough.

 

[Tomovirka]

Thanks for your reply.

Well that sure isn't meant to be there since I don't use anything nvidia related, nor did I install anything from nvidia.
Of course solving this won't be easy, first I tried to delete these 2 files and it wouldn't let me since the procces is/are running, so I tried to end it in task manager, you can probably guess that a new BSOD happened right away. I tried going to safe mode to remove it, but there is no way to access that file since the "nvidia" folders can't be found in users, and in this mode I can't find it using search (which I normally can)
I uninstaled daemon tools and ran that SPTD program, it did it's work but it needs a restart, and if I do that I'll just get another BSOD, so I'm not sure if that will do any good.
Also I downloaded and did a sweep with TDSS killer, it found nothing. After that i got rid of avg and installed MSE and MBAM. MBAM found a lot of stuff and removed it, though It didn't do anything with aviDm and dinMy . Also I ran a scan with MSE, nothing on the radar here.

edit: now MBAM won't even opet anymore, this is getting frustrating

 

[Arc]

Well, it appears that you will need some thorough and deeper virus removal actions.

I requested Jacee to have a look at your thread. She is offline now, so please wait.

 

[Tomovirka]

No need to, I got into safemode, checked some additional options on TDSS and it managed to remove the troublemakers. No more BSOD problems, though I still can't use MBAM, I tried removing it and install it again, but it keeps giving me some runtime errors.

 

[Arc]

Great news.

Now observe it over some more days and let us know how it is running.

 

[Tomovirka]

Will do, thanks a lot

 

[Jacee]

Let's see if ESET OnlineScan detects any malware:

1. Hold down Control and click on the following link to open ESET OnlineScan in a new window.
   ESET OnlineScan
2. Click the
   
   button.
3. For alternate browsers only: (Microsoft Internet Explorer users can skip these steps)
   1. Click on
      
      to download the ESET Smart Installer. Save it to your desktop.
   2. Double click on the
      
      icon on your desktop.
4. Check
   
5. Click the
   
   button.
6. Accept any security warnings from your browser.
7. Check
   
8. Push the Start button.
9. ESET will then download updates for itself, install itself, and begin scanning your computer. Please be patient as this can take some time.
10. When the scan completes, push
    
11. Push
    
    , and save the file to your desktop using a unique name, such as ESETScan. Include the contents of this report in your next reply.
12. Push the
    
    button.
13. Push
    

 

[Jacee]

Also, uninstall:


D:\Program
Files (x86)\IObit\IObit Malware Fighter\IMF.exe" /systemstart /autostart
D:\Program Files (x86)\Comodo\IceDragon\icedragon_updater.exe