BSOD when trying to shut down, error 0x000000f4

[allanos]

Dear members,

Since late last night when i tried shutting down my laptop i got an BSOD. And now i am still getting them whenever i try to normally shut down my laptop. After rebooting etc, searching online i cannot find the problem and fix. Actually i did find the problem but i dont know what it is or how how to fix it.

Through my blue screen viwer i get this info.

CRITICAL_OBJECT_TERMINATION
bugcheck code: 0x000000f4
caused by driver: ntoskrnl.exe
caused by adress: ntoskrnl.exe+705c0

file description: NT Kernel & System
Microsoft® Windows® Operating System


Any help would be nice. thank you
I hope you guys can help me.

 

[allanos]

after try driver verifier i got some BSOD after each other. and made an new file with the dmp files.

anyone an idea?

 

[allanos]

This is the dump file after i used driver verifier. Have no clue yet what the problem is

 

[Arc]

Disable Driver Verifier now.

*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck C9, {23e, fffff880019a5324, fffff9800875eee0, 0}

[COLOR=Blue]*** WARNING: Unable to verify timestamp for GEARAspiWDM.sys
*** ERROR: Module load completed but symbols could not be loaded for GEARAspiWDM.sys[/COLOR]
Unable to load image \SystemRoot\system32\DRIVERS\dtsoftbus01.sys, Win32 error 0n2
*** WARNING: Unable to verify timestamp for dtsoftbus01.sys
*** ERROR: Module load completed but symbols could not be loaded for dtsoftbus01.sys
[COLOR=Red]Probably caused by : dtsoftbus01.sys[/COLOR] ( dtsoftbus01+1324 )

Followup: MachineOwner
---------

dtsoftbus01.sys is a component of Daemon Tools. Daemon Tools, Alcohol 120% and Power Archiver Pro uses SCSI Pass Through Direct (SPTD), which is a well known BSOD causer. Uninstall the program at first. Then download SPTD standalone installer from Disk-Tools.com, and execute the downloaded file as guided below :

• Double click to open it.
• Click this button only:
• 
• If it is grayed out, as in the picture, there is no more SPTD in your system, and you just close the window.

GEARAspiWDM.sys is a component of iTunes. Description here: Driver Reference Table - GEARAspiWDM.sys
As Itunes is contributing to your crashes, uninstall it too.

Let us know the results after applying those changes.

 

[allanos]

Thanks for your relpy. I disabled driver verifier, unistalled itunes an deamon tools as you said an no more stpd in my system. after doing this i rebooted and got an bluescreen again. here is the new dump file i got trough the diagnostic tool of seven forums.

Blue screen viewer still says it is ntoskrnl.exe problem?

 

[Arc]

*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

[COLOR=Red]BugCheck F4[/COLOR], {3, fffffa8006a0ab30, fffffa8006a0ae10, fffff80002fc5d50}

----- ETW minidump data unavailable-----
[COLOR=Red]Probably caused by : cybergate.exe[/COLOR]

Followup: MachineOwner
---------

I really dont have any idea how cybergate works. I needed to do a google search on it. But as it pointed out as a problem, plan to uninstall it, if it is not not anything th most necessary.

At least, remove it from startup. Free up the startup.

1. Click on the Start button
2. Type “msconfig (without quotes), click the resulting link. It will open the System Configuration window.
3. Select the “Startup” tab.
4. Deselect all items other than the antivirus.
5. Apply > OK
6. Accept the restart.

Uninstall Advanced System Care. it is not only not needed, but also harmful.

And do some disc checks.

1. Update your SSD's Firmware (skip it, if it is not a SSD).
2. Re-seat the sata and power.
   
   
3. Run chkdsk /f/r, following the option two of the tutorial Disk Check
4. Seatool for dos: SeaTools | Seagate download
   Burn it in a blank cd. boot from the CD, click on "Accept", wait for it to finish detecting the drives, then in the upper left corner select "Basic Tests", then select "Long Test" and let it run.

 

[allanos]

cybergate didnt know what it was also. But i couldnt remove it with the steps you said so i googled myself and apparently its somekind of trojan. So i installed malwarebytes and it deleted cybergate.

Advanced systemcare is uninstalled. But still the same blue screen when i normally shut down. I will do the disk checks on a later date and will post the results. thanks

 

[Arc]

My friend Dsprague also thought in the same line that your system is compromised, and wanted me to add this part about cybergate in my instructions for you. I told him to wait for your reply, it you installed it yourself to monitor something. There is a program in the same name used my people to remotely notice what the other people doing on a particular computer; and so it is widely used by the hackers.

Good to know that it is no more there, but bad to know that the computer is still crashing. Alongwith the disc checks, scan the system for possible virus infection with both of these two tools.

• Anti-rootkit utility TDSSKiller
• Windows Defender Offline
  

 

[allanos]

I also think my pc was compromised. Because it was a bit harder to remove cybergate then i thought. It wasnt removed immediately. It crashed agian and it was still on task manager. So i'd put in quarantaine and then searched for hidden files and deleted them. After this i could safely remove cybergate from the quarantaine. And t didnt crash. After good search i found one more cybergate file and also removed this. And after doing this my pc didnt crash anymore.

So i also ran the disc checks and it was fine now. So i think it was cybergate.exe that caused all my crashes.

Many thanks for all the tips and tools to help me get rid of the problem. It was very helpful!!

 

[Arc]

You are welcome If there are further crashes, let us know