Various 0x0000007A Stop Errors on Newly Installed Win7 and HD

[derekimo]

OK, another step down, SFC is clear.

Malwarebytes won't interfere with Avast, please run full scans of both. One at a time though.

Then Seatools.

 

[Jahkepon]

I had to leave in the middle of the full system Avast scan, but it appears to have found no threats. I'll try the malewarebytes assuming it won't interfere with Avast or vise versa as previously stated. I plan to uninstall it as soon as I'm done using it regardless.



Edit: I didn't see your latest reply. Thanks for the clarification.


Edit: I'll be using the "Threat Scan" scan type.

 

[derekimo]

It's a good on demand scanner to have but it's up to you whether you keep it.

Just use this version for now,

Download Malwarebytes Anti-Malware 1.75 - FileHippo.com

 

[Jahkepon]

I used your first link and just grabbed the malewarebytes that was first available. It's (trial) version 2.0.1.1004. It's detected 9 objects apparently during the filesystem objects scan already.

If you feel this version isn't recommended for this I can uninstall after this scan and try the version you linked specifically just now. I'm both glad that it's giving me new information, but obviously concerned. Not sure what the true nature of what it's found is yet since I'm waiting for the scan to finish and don't want to interrupt potentially.

I may hang onto this program be it this version or the other just since it's actually giving me something that Avast didn't. I assumed prematurely that I wouldn't be learning anything new.


Edit: The scan completed and the objects it found are simply listed as "potentially unwanted" or potential threats. The planned action is to quarantine. 9 are files, one is a registry key, and the last is a registry value. All files are .exe except for one .tmp. All the names under "detected item" start with "PUP.OPTIONAL". Some look like program download files for programs I have. Painttool SAI for instance is one.


Edit: Is there a way you'd like me to share more? Shall I accept the action of quarantining these potential threats?

 

[derekimo]

That's alright just use the one you have. when it's done scanning post the log of what it found.

You'll find them here,

C:\ProgramData\Malwarebytes\Malwarebytes' Anti-Malware\Logs

ProgramData is a hidden folder so you'll have to unhide to get to it.

http://www.sevenforums.com/tutorials/394-hidden-files-folders-show-hide.html

I'm not sure how you activated the trial, but just hang on to the software for a few days.

 

[Jahkepon]

Here. I guess I'm just attaching the XML file.

Getting a free trial of their premium version or whatever was a box checked by default during the installation process. I almost unchecked it but decided to give the trial a try assuming at the time that I'd likely uninstall anyways. We'll see.

Actually, it appears I can't attach that file. Do I open in a browser and provide the link then?

 

[derekimo]

Edit: The scan completed and the objects it found are simply listed as "potentially unwanted" or potential threats. The planned action is to quarantine. 9 are files, one is a registry key, and the last is a registry value. All files are .exe except for one .tmp. All the names under "detected item" start with "PUP.OPTIONAL". Some look like program download files for programs I have. Painttool SAI for instance is one.


Edit: Is there a way you'd like me to share more? Shall I accept the action of quarantining these potential threats?

Yes, quarantine, then you can delete them in the quarantine list.

The .exe's are probably flagged because they have other offers in the install options.

 

[Jahkepon]

I guess this might work as well. Just opened the XML in WordPad and I'll copy/paste below....

<?xml version="1.0" encoding="UTF-8" ?>
<logs>
<record severity="debug" LoggingEventType="2" datetime="2014-05-18T23:19:59.333162-07:00" source="Protection" type="Protection" username="SYSTEM" systemname="LEO-PC" last_modified_tag="96a5039b-4d91-490d-a34b-830410307869" result="Starting" subtype="Malware Protection"></record>
<record severity="debug" LoggingEventType="2" datetime="2014-05-18T23:19:59.356164-07:00" source="Protection" type="Protection" username="SYSTEM" systemname="LEO-PC" last_modified_tag="c1f6ec30-1e32-4f40-b7aa-b21a78ccdab7" result="Started" subtype="Malware Protection"></record>
<record severity="debug" LoggingEventType="2" datetime="2014-05-18T23:19:59.559175-07:00" source="Protection" type="Protection" username="SYSTEM" systemname="LEO-PC" last_modified_tag="bc8309a1-9f08-4c6f-9bea-c900b9c98c0c" result="Starting" subtype="Malicious Website Protection"></record>
<record severity="debug" LoggingEventType="2" datetime="2014-05-18T23:20:05.014487-07:00" source="Protection" type="Protection" username="SYSTEM" systemname="LEO-PC" last_modified_tag="723d65a1-889c-4114-aff6-df64225f41fe" result="Started" subtype="Malicious Website Protection"></record>
<record severity="debug" LoggingEventType="1" datetime="2014-05-18T23:20:11.515859-07:00" source="Manual" type="Update" username="SYSTEM" systemname="LEO-PC" fromVersion="2014.2.20.1" last_modified_tag="19657378-6c13-4952-ab21-7f13dbef93d0" name="Rootkit Database" toVersion="2014.3.27.1"></record>
<record severity="debug" LoggingEventType="1" datetime="2014-05-18T23:20:36.628295-07:00" source="Manual" type="Update" username="SYSTEM" systemname="LEO-PC" fromVersion="2014.3.4.9" last_modified_tag="6c94733a-1d05-43a1-b238-ed0dda466e22" name="Malware Database" toVersion="2014.5.19.2"></record>
<record severity="debug" LoggingEventType="2" datetime="2014-05-18T23:20:37.735359-07:00" source="Protection" type="Protection" username="SYSTEM" systemname="LEO-PC" last_modified_tag="bf41364b-524c-43cc-9adf-90452d552791" result="Starting" subtype="Refresh"></record>
<record severity="debug" LoggingEventType="2" datetime="2014-05-18T23:20:37.756360-07:00" source="Protection" type="Protection" username="SYSTEM" systemname="LEO-PC" last_modified_tag="04763efb-c9eb-4988-af93-f9e9692daff2" result="Stopping" subtype="Malicious Website Protection"></record>
<record severity="debug" LoggingEventType="2" datetime="2014-05-18T23:20:38.080378-07:00" source="Protection" type="Protection" username="SYSTEM" systemname="LEO-PC" last_modified_tag="08ab0c18-a941-44e7-81f1-11f8584c1666" result="Stopped" subtype="Malicious Website Protection"></record>
<record severity="debug" LoggingEventType="2" datetime="2014-05-18T23:20:47.706929-07:00" source="Protection" type="Protection" username="SYSTEM" systemname="LEO-PC" last_modified_tag="b5e81817-6496-4539-be64-1ef69ae53a3f" result="Success" subtype="Refresh"></record>
<record severity="debug" LoggingEventType="2" datetime="2014-05-18T23:20:47.801935-07:00" source="Protection" type="Protection" username="SYSTEM" systemname="LEO-PC" last_modified_tag="9f74254a-9c52-43f7-93d6-b86f3757f644" result="Starting" subtype="Malicious Website Protection"></record>
<record severity="debug" LoggingEventType="2" datetime="2014-05-18T23:20:48.249960-07:00" source="Protection" type="Protection" username="SYSTEM" systemname="LEO-PC" last_modified_tag="17ce932c-f055-491a-827b-f2b255e27ff8" result="Started" subtype="Malicious Website Protection"></record>
</logs>

 

[Jahkepon]

Yes, quarantine, then you can delete them in the quarantine list.

The .exe's are probably flagged because they have other offers in the install options.

Yes, I recall a couple things I've downloaded where I had to dodge around things I didn't want during the installation process that they would've dumped on me by default otherwise.

I'll quarantine the threats and remove as suggested. I'm not sure what the registry key and registry value are about.

 

[derekimo]

I have no idea what that is, it's not the log I was expecting. Just quarantine or preferably delete what it found.

Next on the list is seatools. we are posting over each other and this is getting confusing.

 

[Jahkepon]

My computer wanted to restart after the quarantine just now, so I let it.

Perhaps you were expecting a log made AFTER I had quarantined the items. I wasn't sure how to share the XML in any case.

I'll just move onto Seatools. Is this the instructional thread I should be looking at here.... http://www.sevenforums.com/tutorials/313457-seatools-dos-windows-how-use.html


Edit: Assuming these are the correct instructions, it appears that I should use Option 2 although it seems a bit less simple than Option 1.

 

[Jahkepon]

Didn't want to start this whole process last night, partly because I'm not sure what I'll be doing is the right thing to do... but I'm starting on Option 1 I suppose and hoping that's sufficient. I'll use option 2 if necessary. Let me know if this is the correct thing to do if you're around. Thanks.

 

[derekimo]

Yes, go ahead with option one. Let us know the results.

 

[Jahkepon]

I used Basic Test > Fix All > Fast. My drive passed. Is there any other info somewhere in this program that you need? Do I need to take a different test or even use Option 2? There's other values here that I've not seen before such as my firmware designation. I didn't know it was "SM14".

 

[derekimo]

Option two can't hurt, all we can do at this point is grasp for hints by running tests.

I have no idea why your other BSOD produced a dump but none of these do, that doesn't make any sense.

 

[Jahkepon]

I suppose I'll try Option 2 then.

Well, the most obvious difference is that all my other BSODs were 7A errors. The one I got yesterday, (Was it only that long ago?), wasn't a 7A error. Maybe these 7A errors are weird and don't want to produce a dumpfile.

I did do one thing prior to that tablet BSOD. I don't know how it could be related but it seemed like a good thing to do. I just turned off my backup and restore schedule. I'd had it scheduled to backup my system every month. Trouble is that I wanted it to backup onto my External HD but not until the schedule was made did I learn that the External HD was incompatible to backup due to it's large size... something about a "I/O Error" or something. It would need to be formatted evidently but I already had files on it from basic copying over actions from other drives, so I didn't bother with that. Again, however, I never did turn off the schedule so I wonder if my computer was trying to backup to something that didn't exist because the external wasn't plugged in and wouldn't have done the job anyways because it wasn't formatted, and maybe that buggered it up. Not sure obviously.

The fact that my 7A BSODs come around pretty reliably, usually within a day of a week, is curious to me. Generally they show up on Wednesday or Thursday. 10 of the 3 happened roughly a week after the last, and the ones that didn't happened within a day of the last, and recently I went two weeks without one. I can't be exactly sure on the days of the week of all of them, but I can say that most and possibly all have happened on a Wednesday or Thursday. The "on time" nature of them made me wonder if my backup schedule thing could possibly have any effect at all. It's a really loose correlation, but I don't know how connected all these functions actually are. Maybe my next 7A BSOD will give me a dumpfile though. Maybe somehow the schedule for my backups to a non compatible external HD had something to do with a lack of dumpfiles. Seems really unlikely.

 

[Jahkepon]

I'm also curious in the Speccy data I shared a while back now said anything about my BIOS or about my system in general that could describe some sort of conflict or compatibility issue. I figure not since you didn't say anything initially. Seemed you were seeing a lot more in that data than I could looking at the link myself.

 

[derekimo]

I was just looking at the temps in that Speccy report, which didn't look bad. I must have overlooked responding to that.

As for the Bugchecks you mentioned above, that wouldn't make a difference in creating the dumps.

 

[Jahkepon]

I tried to boot Seatools DOS from a USB Flashdrive and followed the instructions carefully. However when booted it was stuck at the loading screen just saying "FreeDOS". It never got to the Seatools GUI as described in step 2 of PART II of the Seatools for DOS part of the Seatools thread.

Any suggestions as to why this could be and if I should troubleshoot it until I can get this Seatools for DOS to work, or should we move on?

 

[Jahkepon]

In the meantime I can wait to see what my next BSOD brings. Perhaps these 7A files will produce a dumpfile finally, and assuming they stay on schedule I can expect one in the next few days. I'm not holding my breath though since I feel like the only reason it wouldn't make a dumpfile, unlike the tablet driver error, is because it's a different error.