Solved BSOD Randomly While Using PC

[cyberworld]

New BSOD MSF.SYS32

Hello,
New BSOD this time in my Personal Laptop, When I'm opening some folders in my lappy BSOD occurs due to some MSF SYS32, Kindly help me i attached a zip file

 

[Dsprague]

It looks like your BSOD is being caused by Symantech:

*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck 100000FC, {88d0331c, 26bb8963, 88d03220, 0}

[COLOR=Red]Unable to load image WpsHelper.sys, Win32 error 0n2
*** WARNING: Unable to verify timestamp for WpsHelper.sys
*** ERROR: Module load completed but symbols could not be loaded for WpsHelper.sys
Probably caused by : WpsHelper.sys [/COLOR]( WpsHelper+ad7a )

Followup: MachineOwner
---------

Driver Reference Table - WpsHelper.sys

*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck 100000D1, {108, 2, 1, ab391a23}

[COLOR=Red]*** WARNING: Unable to verify timestamp for wpsdrvnt.sys
*** ERROR: Module load completed but symbols could not be loaded for wpsdrvnt.sys[/COLOR]
Probably caused by : hardware ( WpsHelper!GetVersionTable+1c7 )

Followup: MachineOwner
---------

Driver Reference Table - wpsdrvnt.sys

Since you are running windows enterprise, I am guessing this is a work PC, so you may want ot speak to the IT person about this problem.

 

[cyberworld]

I Asked them but no use, they dont't know anything

 

[Dsprague]

Well that's not very helpful of them.... but since they didn't offer you many options please do the following:

Uninstall Symantec using the Symantec Removal Tool. Then once Symantec is gone please replace it with MSE and Mbam. Tip: Be sure to Uncheck the box asking to start a free trial when installing Mbam

 

[cyberworld]

Ok thanks, i will do that and update the results

 

[Dsprague]

I look forward to your results.

 

[Layback Bear]

If this is a work computer belonging to your workplace I recommend not doing anything to the computer with out proper permission from the I.T. Department.

 

[cyberworld]

Removed the symantec antivirus and installed Microsoft security essentials, so far no problem.

 

[cyberworld]

New BSOD MSF SYS32

New BSOD this time in my Personal Laptop, When I'm opening some folders in my lappy BSOD occurs due to some MSF SYS32, Kindly help me i attached a zip file

 

[cyberworld]

its one day, nobody helped me, its frequently occuring a bsod, plz refer the above zip file

 

[Layback Bear]

My understanding of MSF SYS32 is a Keylogger program you have installed. Have you or anybody else you know off installed a key logger program?
If not you are infected.

 

[Arc]

This one is your problem.

Start Menu\Programs\MySecretFolder

NAME | DESCRIPTION | FILE | TYPE
msf32 | MSF32 | \??\c:\program files\ mysecretfolder \msf32.sys | Kernel Driver

The information obtained form your crash dump .....

*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck D6, {b3633000, 0, 8e1ccb2c, 0}

Probably caused by : [URL="http://systemexplorer.net/file-database/file/msf32-sys"]MSF32.SYS [/URL]( MSF32+5b2c )

Followup: MachineOwner
---------

It is set to be autostart with windows, too.

PROGRAM | COMMAND | USERNAME | LOCATION
MSF_Monitor | c:\progra~1\mysecr~1\msfmon.exe /start | Public | HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Uninstall MySecretFolder.

Then take care of the rest of the unnecessary startup entries there. Free up the startup.

1. Click on the Start button
2. Type “msconfig (without quotes), click the resulting link. It will open the System Configuration window.
3. Select the “Startup” tab.
4. Deselect all items other than the antivirus.
5. Apply > OK
6. Accept then restart.

Finally, when you have Microsoft Security Essentials installed, why are you using Avast? Two multiple instances of Real time protection program always causes problems.

PROGRAM | COMMAND | USERNAME | LOCATION
avast | "c:\program files\avast software\avast\avastui.exe" /nogui | Public | HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
MSC | "c:\program files\microsoft security client\msseces.exe" -hide -runkey | Public | HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Uninstall Avast using Avast Uninstall Utility. Use Microsoft Security Essentials as your antivirus with windows inbuilt firewall, and free MBAM as the on demand scanner.
Download, install and update those, and then run full system scans with both of them, one by one.

Let us know the results.

Edit: Install Service Pack 1 and other windows updates, too. Otherwise it will always be vulnerable to threats.

[COLOR=Red]Windows 7 Kernel Version 7600 MP[/COLOR] (4 procs) Free x86 compatible
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 7600.16385.x86fre.win7_rtm.090713-1255

Learn how to install Windows 7 Service Pack 1 (SP1)
Service Pack Center - Microsoft Windows

 

[cyberworld]

Thanks For your support, Firstly Mysecretfolder is a software which protects the folders with some passwords, and for one of the folder it is activated, so is the problem with Mysecretfolder ? should i remove it,and my lappy doesnot have internet connection(home), so i installed avast and is there any chance of getting Microsoft Essentials offline package with updates, so that i can download them in office and install and use in lappy ??
Start Menu\Programs\MySecretFolder

 

[Arc]

Thanks For your support, Firstly Mysecretfolder is a software which protects the folders with some passwords, and for one of the folder it is activated, so is the problem with Mysecretfolder ? should i remove it,and my lappy doesnot have internet connection(home), so i installed avast and is there any chance of getting Microsoft Essentials offline package with updates, so that i can download them in office and install and use in lappy ??
Start Menu\Programs\MySecretFolder

Whatever MySecretFolder is, it is at present responsible for your BSODs. And what have to do with is is stated clearly in my earlier post. Saying again, uninstall it.

You can download MSE and its updates from office and install in home.
MSE: FileHippo.com - Download Free Software
Virus Definitions: Install the latest Microsoft Security Essentials definition updates - Get the latest definitions - Microsoft Malware Protection Center

But there is MSE already installed, as I have seen?

 

[cyberworld]

Thanks Arc for detailed explanation, MSE is already installed but it's spyware definitions are outdated it is saying to update, but i dont have internet connection in my room , currently downloading the offline updates pack, and update the results

 

[cyberworld]

New BSOD

Another B SOD , updated the zip folder

 

[Arc]

Mate sorry to say, but I can see the zip dated 25/03/2013, PM 08:43, but cannot execute it. The zip is bad. I am waiting for another upload .... and this time check the zip before uploading?

 

[cyberworld]

ok now i wil uplod again

 

[cyberworld]

I Updated the zip file, please check and let me know what is causing trouble

 

[Arc]

You need to install Service Pack 1 and other windows updates ... but it is difficult for you as you have no internet connection in home. Still you may try if possible.....
Learn how to install Windows 7 Service Pack 1 (SP1)
Service Pack Center - Microsoft Windows

This latest crash dump is not resulting anything. It is a privet symbol that I cannot access to. In my best guess it is any plug and play device driver (USB or PCI).

As a test, can you enable Driver Verifier?
Driver Verifier - Enable and Disable
Run Driver Verifier for 24 hours or the occurrence of the next crash, whichever is earlier.

Let us know the results, with the subsequent crash dumps, if any.