BSOD win7 help

[Virtuoso X]

Thanks richc46, ill let my pc run for as long as possible,

on another note, ive been browsing in my event viewer, and can see something that i have no idea of.

"The Scottiez RootKit service failed to start due to the following error:
This driver has been blocked from loading"

also about 50 of these "The performance counter explain text string value in the registry is not formatted correctly. The malformed string is <insert square here> . The first DWORD in the Data section contains the index value to the malformed string while the second and third DWORDs in the Data section contain the last valid index values."

also "The computer has rebooted from a bugcheck. "

"Faulting application name: RTBK.EXE, version: 1.0.0.5, time stamp: 0x49b499ca"

i also see why you asked about rdy boost, my event viewer shows "Fault bucket X64_0x1a_1236_rdyboost!ST_STORE_SMD_TRAITS_::StReleaseRegion+4e, type 0
Event Name: BlueScreen
Response: Not available
Cab Id: 0"


also this error for blue screen "Fault bucket X64_0xA_nt!MiGetTopLevelPfn+65, type 0
Event Name: BlueScreen
Response: Not available"

and "Fault bucket X64_0x9F_3_IMAGE_usbaudio.sys, type 0
Event Name: BlueScreen
Response: Not available
Cab Id: 0"


I Never knew that event viewer recorded BSOD, i did a quick google on each of them, and nothing.

 

[Virtuoso X]

still getting this error. "The Scottiez RootKit service failed to start due to the following error:
This driver has been blocked from loading"

havnt got a BSOD since i last update my drivers.

i did a google on "The Scottiez RootKit" nothing came up, so i will be deleting C:\Windows\SysWOW64\drivers\SRK.sys because that is what is trying to start-and gets blocked.

 

[richc46]

Do you have winpatrol?

 

[Virtuoso X]

Do you have winpatrol?

No, i dont have winpatrol, i also suspect two microsoft updates causing the BSOD (KB982110 and 2272691) i have put a thread on updates section to see if anyone else got issues with those updates.

Google shows quiet afew people having issues.

So far about 18hrs without BSOD.

Upon last rebot my eventviewer is clean of any recent errors

 

[richc46]

Lets play safe, I do not like that word rootkit and dont like blocked
Run your antivirus and download and scan with malwarebytes. Takes about 90 minutes for the full scan and you should update it first before scanning.

 

[Virtuoso X]

25 items found in total, 20 by malwarebytes and 5 from norton 360, also about 7 are unknown, the 18 others are my personal files / cpp / vb/ net/ code which are detected as worm / trojans, still delete as i have secure backups.

 

[Virtuoso X]

Heres a screenshot taken from my search in regedit of rootkit, links directly to "The Scottiez RootKit" (SRK)

should i delete this registry?
http://img21.imageshack.us/img21/6629/regeditp.png

 

[richc46]

i want to be sure that you get the best help that we have available in this area. I am going to refer this to an expert in the security field, just be patient you will be helped.

 

[Virtuoso X]

Hello rich,

there will be no need for a security personnel to attend to this,
i took the chance and deleted ALL keys that had to do with SRK.sys (The Scottiez RootKit)

rebooted.


No errors.

Let the system run for 24 hrs

No errors.

Event Viewer....
What do ya know...no errors

thanks alot for your help =) tho it seems that my SRK.sys successfully starts before windows system protection which resulted in the BSOD forcing other system files to fail and not load.

Thanks again

 

[richc46]

Glad that it all worked out.