Solved Bsod worker_thread_returned_at_bad_irql

[v7377]

Hi,

I am new to this so please let me know if i am missing any info here.

Recently started noticing BSOD after downloading a movie- possible trojan with it. removed by mcafee but still consequences of BSOD and frequent windows restarts.

Attached zip from SF tool.

Thx

 

[koolkat77]

Hello and welcome to seven forums v7377

You shouldn't be running two antiviruses and a one like McAfee which is a known cause of BSOD's.

McAfee

Unloaded modules:
fffff880`06f78000 fffff880`06f82000   hiber_storpo
fffff880`06f82000 fffff880`06f99000   hiber_amd_sa
fffff880`06f99000 fffff880`06fac000   hiber_dumpfv
fffff880`06f6c000 fffff880`06f78000   usbprint.sys
fffff880`06f5b000 fffff880`06f6c000   usbscan.sys
fffff880`06e58000 fffff880`06e82000   mfeapfk.sys
fffff880`06eb0000 fffff880`06ebc000   usbprint.sys
fffff880`06e9f000 fffff880`06eb0000   usbscan.sys
fffff880`06e93000 fffff880`06e9f000   usbprint.sys
fffff880`06e82000 fffff880`06e93000   usbscan.sys
fffff880`06e00000 fffff880`06e2a000   mfeapfk.sys
fffff880`06507000 fffff880`06578000   spsys.sys
fffff880`06fa5000 fffff880`06fcf000   mfeapfk.sys
fffff880`06f5b000 fffff880`06fa5000   mfeavfk01.sy
fffff880`01a6c000 fffff880`01a7a000   crashdmp.sys
fffff880`01a7a000 fffff880`01a84000   dump_storpor
fffff880`01a84000 fffff880`01a9b000   dump_amd_sat
fffff880`01a9b000 fffff880`01aae000   dump_dumpfve

We have seen McAfee cause BSOD's on several systems and recommend uninstalling it with the McAfee Removal Tool and replace with Microsoft Security Essentials. How to uninstall McAfee products using the consumer Removal Tool (MCPR)

Uninstallers (removal tools) for common antivirus software. Microsoft Security Essentials and Malwarebytes are recommended from a strict BSOD perspective. They do not cause blue screens on the system as other AV products do.

Microsoft Security Essentials, Free antivirus for windows and Malwarebytes Anti-Malware Free

   Information

• :warn: Do not start the free trial of MalwareBytes, unselect that option when prompted.
  
  
  
  
  
• :tip: Update and make full scans with both separately.

Virus check

Scan your system with the following:

Kaspersky TDSSKiller - How to remove malware belonging to the family Rootkit.Win32.TDSS (aka Tidserv, TDSServ, Alureon)

ESET online scanner - One-time virus scanner free with ESET online scanner

As well as Windows Defender Offline: How to Use Windows Defender Offline

Please run these tests and report back the results

1. SFC /scannow to check windows for corruption - SFC /SCANNOW Command - System File Checker
2. Disk check for errors on the hard drive - How to Run Disk Check in Windows 7
3. Troubleshoot applications by a clean boot - Troubleshoot Application Conflicts by Performing a Clean Startup
4. Memtest86+ paying close attention to part 3 - RAM - Test with Memtest86+
5. Hard drive test from HDD mfg website - Hard Drive Diagnostic Procedure

 

[v7377]

Thanks!
Removed Mcafee and working with Microsoft security essentials and malwarebytes.
TDSSkiller, ESET online scanner and WDO- all no threats.

Systemfileschecker- no issues
Scheduled disk check
Will test for REM and Harddrive diagnostic procedure soon.


However, Microsoft security essentials history showed quarantined- trojandropper:win32/vb.hy
Removed but not sure what effects it has left on my laptop now!!

and if anything else I need to do.

 

[koolkat77]

If you want to double check on virus, you can create a thread here: System Security - Windows 7 Help Forums and I will request Cotton Ball to help you

 

[v7377]

Thanks for your help. submitted post in system security.