Solved MSE found virtool.win32/obfuscator.XZ but couldn't get rid of it.

[VistaKing]

Thanks for KoolKat to run the BSOD for me. I tried to see if your Mushkin SSD had any firmware updates but it doesn't couldn't locate any on their website.
The F4 BSOD has to do with hard drive issues.

Loading Dump File [C:\Users\Yusra\Downloads\SF_19-03-2013\031913-72150-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available

Symbol search path is: SRV*c:\symbols*http://msdl.microsoft.com/download/symbols
Executable search path is: 
Windows 7 Kernel Version 7601 (Service Pack 1) MP (4 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS Personal
Built by: 7601.18044.amd64fre.win7sp1_gdr.130104-1431
Machine Name:
Kernel base = 0xfffff800`03009000 PsLoadedModuleList = 0xfffff800`0324d670
Debug session time: Wed Mar 20 03:36:53.674 2013 (UTC + 6:00)
System Uptime: 0 days 1:06:56.001
Loading Kernel Symbols
...............................................................
................................................................
..................................
Loading User Symbols
Loading unloaded module list
..........
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.
[COLOR="Blue"]
BugCheck F4[/COLOR], {3, fffffa800d1c29e0, fffffa800d1c2cc0, fffff80003386470}

----- ETW minidump data unavailable-----
[COLOR="Red"]Probably caused by : csrss.exe[/COLOR]

Followup: MachineOwner
---------

Loading Dump File [C:\Users\Yusra\Downloads\SF_19-03-2013\031913-28220-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available

Symbol search path is: SRV*c:\symbols*http://msdl.microsoft.com/download/symbols
Executable search path is: 
Windows 7 Kernel Version 7601 (Service Pack 1) MP (4 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS Personal
Built by: 7601.18044.amd64fre.win7sp1_gdr.130104-1431
Machine Name:
Kernel base = 0xfffff800`0305b000 PsLoadedModuleList = 0xfffff800`0329f670
Debug session time: Tue Mar 19 08:03:14.062 2013 (UTC + 6:00)
System Uptime: 0 days 3:07:16.015
Loading Kernel Symbols
...............................................................
................................................................
..................................
Loading User Symbols
Loading unloaded module list
....
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

[COLOR="Blue"]BugCheck F4[/COLOR], {3, fffffa800d3f9b30, fffffa800d3f9e10, fffff800033d8470}

----- ETW minidump data unavailable-----
[COLOR="Red"]Probably caused by : csrss.exe[/COLOR]

Followup: MachineOwner
---------

Loading Dump File [C:\Users\Yusra\Downloads\SF_19-03-2013\031913-26332-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available

Symbol search path is: SRV*c:\symbols*http://msdl.microsoft.com/download/symbols
Executable search path is: 
Windows 7 Kernel Version 7601 (Service Pack 1) MP (4 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS Personal
Built by: 7601.18044.amd64fre.win7sp1_gdr.130104-1431
Machine Name:
Kernel base = 0xfffff800`0305d000 PsLoadedModuleList = 0xfffff800`032a1670
Debug session time: Wed Mar 20 01:58:39.730 2013 (UTC + 6:00)
System Uptime: 0 days 0:53:41.057
Loading Kernel Symbols
...............................................................
................................................................
..................................
Loading User Symbols
Loading unloaded module list
.....
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

[COLOR="Blue"]BugCheck F4[/COLOR], {3, fffffa800d881750, fffffa800d881a30, fffff800033da470}

----- ETW minidump data unavailable-----
[COLOR="Red"]Probably caused by : wininit.exe[/COLOR]

Followup: MachineOwner
---------

Loading Dump File [C:\Users\Yusra\Downloads\SF_19-03-2013\031813-30529-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available

Symbol search path is: SRV*c:\symbols*http://msdl.microsoft.com/download/symbols
Executable search path is: 
Windows 7 Kernel Version 7601 (Service Pack 1) MP (4 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS Personal
Built by: 7601.18044.amd64fre.win7sp1_gdr.130104-1431
Machine Name:
Kernel base = 0xfffff800`03018000 PsLoadedModuleList = 0xfffff800`0325c670
Debug session time: Tue Mar 19 00:22:09.117 2013 (UTC + 6:00)
System Uptime: 0 days 0:34:29.070
Loading Kernel Symbols
...............................................................
................................................................
.............................
Loading User Symbols
Loading unloaded module list
.....
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

[COLOR="Blue"]BugCheck F4[/COLOR], {3, fffffa800dddc060, fffffa800dddc340, fffff80003395470}

----- ETW minidump data unavailable-----
[COLOR="Red"]Probably caused by : csrss.exe[/COLOR]

Followup: MachineOwner
---------

Loading Dump File [C:\Users\Yusra\Downloads\SF_19-03-2013\031813-29874-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available

Symbol search path is: SRV*c:\symbols*http://msdl.microsoft.com/download/symbols
Executable search path is: 
Windows 7 Kernel Version 7601 (Service Pack 1) MP (4 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS Personal
Built by: 7601.18044.amd64fre.win7sp1_gdr.130104-1431
Machine Name:
Kernel base = 0xfffff800`03007000 PsLoadedModuleList = 0xfffff800`0324b670
Debug session time: Mon Mar 18 22:56:54.684 2013 (UTC + 6:00)
System Uptime: 0 days 0:46:53.011
Loading Kernel Symbols
...............................................................
................................................................
..............................
Loading User Symbols
Loading unloaded module list
....
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

[COLOR="Blue"]BugCheck F4[/COLOR], {3, fffffa800d21fb30, fffffa800d21fe10, fffff80003384470}

----- ETW minidump data unavailable-----
[COLOR="Red"]Probably caused by : csrss.exe[/COLOR]

Followup: MachineOwner
---------

My System SpecsSystem Spec

 

[Zibeltor]

I checked the website myself and found this link:
SSD Firmware Updates

It didn't really say which models of hard drives that update is meant for though, so I was pretty nervous about just unzipping and running it.

Okay, again, I'm afraid I don't really know what that code means, but I'm pretty sure my hard drives are fine. I've run several CHKDSKs on my C drive, and they've never shown a problem. But again, I am the lowly noob here, so I will default to whatever you recommend.

 

[VistaKing]

Run chkdsk once more then after run sfc /scannow

CHKDSK tutorial
:ar: http://www.sevenforums.com/tutorials/433-disk-check.html

SFC /SCANNOW tutorial
:ar: http://www.sevenforums.com/tutorials/1538-sfc-scannow-command-system-file-checker.html

The firmware is not for your model of an SSD.

Added:

Here is Mushkin's tech number 1 (800) 569-1868 and press 1
* * Telephone customer support is available M-F, 8AM-6PM CST * *

 

[Zibeltor]

Alrighty, I just scheduled a disk check and am going to run it. I don't know if/where it would put a log, but I'll try and upload it when it's done; then I'll run the other program you recommended. Edit: Yeah, the CHKDSK finished. It went so fast I didn't even see the results or anything. If you know where I can find that log I'd be happy to upload it here.

I'm going to start running the other program now, the SFC one.

 

[VistaKing]

To get the log for ChkDsk take a look at the link below

:ar: http://www.sevenforums.com/tutorials/96938-check-disk-chkdsk-read-event-viewer-log.html

The log for SFC will be in the folder below
C:\Windows\Logs\CBS\CBS.log

 

[Zibeltor]

Okay. I still wasn't exactly sure how you wanted the info, but here you go. I'll start that other sfc program now.

Edit: oh yeah, after looking at the tutorial, one of the Microsoft tech guys already did it. I included the latest logs from that too. It was too big for a text document, so I had to rar it.

 

[Jacee]

Is the date and time correct on your computer?

 

[VistaKing]

Okay. I still wasn't exactly sure how you wanted the info, but here you go. I'll start that other sfc program now.

Edit: oh yeah, after looking at the tutorial, one of the Microsoft tech guys already did it. I included the latest logs from that too. It was too big for a text document, so I had to rar it.

What Microsoft tech guys?

Added:

I just had Brink take a look at your logs . We both didn't find any issues on the logs.

 

[Zibeltor]

@ Jacee: Yes, the date and time are correct.

@ KingVista: Before I came to this forum, I paid $99 for Microsoft tech support. >.< They did some basic maintenance (taking care of the malware problem, along with you guys mostly), and now my computer seems to only crash in one isolated set of circumstances (where I leave it on and walk away; when I come back the screen is just black and totally nonresponsive so I have to hard shut it down and reboot). Yeah, I was pretty confident my hard drives aren't really the issue. I thought things were going so well, but it it had just crashed now when I came back. :/ I was going to try and upload the latest minidump, but that's not a supported file...

 

[VistaKing]

The logs have to do with the Windows files itself. I do not think its has anything to do with the actual SSD drive itself. You may call the manufacture of the drive which is Mushkin and ask them if they have a firmware for your drive. If the drive is bad you do have warranty on the drive from the manufacture.

Edit:

The chkdsk log came out good. Id still go with trying to update the firmware though.

 

[Jacee]

What are your power settings?

 

[Zibeltor]

@ Jacee: That's a good question. I was wondering if it might be related to them. Um...they're kinda weird. They were weird when I first checked them and I 'unno, I fiddled with them. I formatted the info as best I could.

High performance > Require a password on wakeup > No
Hard disk > Turn off hard disk after > 1000 minutes
Desktop background settings > Slide show > Available
Wireless adapter settings > Power saving mode > Maximum performance
Sleep > Sleep after > 30 minutes

> Allow hybrid sleep > On​

>Hibernate after > never​

> Allow wake timers > Enable​

USB settings > USB selective suspend setting > Enabled
PCI Express > Link State Power Management > Off
Processor power management > Minimum processor state > 100%

> System cooling policy > Active​

> Maximum processor state > 100%​

Display > Turn off display after > 15 minutes
Multimedia settings > When sharing media > Prevent idling to sleep

> When playing video > Optimize video quality​

@ Kingvista: Sorry I missed the time window for Mushkin's technical support today. I was kinda busy this afternoon; I'll make sure to call them tomorrow morning and ask them about a firmware update for my SSD. Then I'll definitely report back to you guys.

Also, full disclosure: I really like a game called League of Legends, but it's infamous for having a really buggy/glitchy client. In trying to install it, they recommended that the only way to really get it running correctly (since I was having trouble) was to install it straight on the C drive. Now, pretty much 95% of the time when I update the game, it makes my comp blue screen and I just have to reboot and "repair" the League of Legends installation. I don't think that's the full issue behind my blue screens, but I thought it might give a hint or something, I 'unno.

 

[VistaKing]

Any blue screens you receive upload the dmp file .

 

[Jacee]

Try a test ... set 'Allow Hybrid Sleep' in Power Options/Advanced Settings to 'off'.

 

[Zibeltor]

@ Jacee: Aye aye. Hybrid sleep set to off. I'll go ahead and let the computer sleep to see if it helps anything.

@ Kingvista: As you wish, here is the latest crash dump.

 

[Zibeltor]

Well, I was hopeful. When I came back, it wasn't the normal plain lit black screen I see. It was actually the desktop, but when I tried to open a browser, windows explorer crashed and then it blue screened again. :/ I went ahead and attached the latest crash dump.

@Kingvista: I'm a little confused; you said that you didn't think there was anything actually wrong with the SSD, but that I might be able to get a replacement under warranty. How would I explain to them the problem with the hard drive so they know that I legitimately deserve a replacement?

 

[VistaKing]

You want to ask if there is a firmware for your model

 

[Jacee]

Well, I was hopeful. When I came back, it wasn't the normal plain lit black screen I see. It was actually the desktop, but when I tried to open a browser, windows explorer crashed and then it blue screened again. :/

I didn't look at your .rar file ... not all of us like to download and open 'such' files.... especially when it's coming from an infected machine.

 

[VistaKing]

When you get a BSOD do you see any files be listed ?

 

[Zibeltor]

@ Jacee: I'm sorry; is there a file format you would prefer? I'm pretty sure we've gotten rid of the malware; I've ran several scans that have come up clean. Could you recommend me a scan that would assure you it is safe to look at one of my log files?

@ Vistaking: No, there are never any files listed; just that same "STOP:0x0....F4" error.