Bovrinox

Thanks Usasma, I have removed daemon tools, the sptd driver wasn't found by the uninstaller. I have removed amd overdrive, ASUS Music maker, ASUS welcome. There is still ASUS Manager and Device Setup in my add/remove programs list, but it wont let me remove them. The Device Setup one says "A program required for this install could not be run". When i try to uninstall ASUS manager, it says "the model does not support this application". Does this mean there are parts of these programs missing, causing some issues? Windows updates found an update for Windows Defender antivirus, so I have downloaded that, no other updates found. I shall try running the driver verifier tonight and see what happens. Thanks Matt

Hey Kevin, Yeah very peculiar. Thinking of thermal paste etc, my friend has a new cpu for me, and some fresh paste to mount it with. Also an after market cpu cooler, so i shall fit those when i can get the chance, if anything changes after that i shall be sure to let you know! Thanks for all your help mate Matt

Here ya go Kevin, hope it helps with your investigations. Matt SearchReg.txt

HI, I dont seem to have the Asus Secure Delete program on my system, so i have run BSODCollectionApp and attached the .zip file it created. I have also attached the Perfmon report for your enjoyment. Cheers Matt SysnativeFileCollectionApp.zip perfom report.zip

Hi there, Had another crash today, not had a chance to try what you have suggested yet but I will do it now. I have attached the new minidump. Thanks, Matt 032018-24687-01.dmp

Cheers Kevin, Here is the search log, it also had another restart today ill post the dump in the BSOD thread Matt Search.txt

Hey there chaps, I have been having problems with my pc randomly restarting for no apparent reason. A grand chap by the name of Kevin has been helping me after fixing an unrelated issue, and he has kindly pointed me in the direction of this forum. The original thread is here with some log files and more info: https://forums.malwarebytes.com/topic/224620-malware-not-removing-things-properly/ Any more insight would be greatly appreciated! Thanks

Hi Kevin, Thanks, i shall do that. Thought you might also be interested in this. It restarted again today almost immediately after logging in, as before no BSOD. It booted up as per normal, however instead of going straight to windows log in, it gave me a plain blue screen with white writing in the middle saying incorrect username and password. I clicked OK, and then logged in as normal, using the same details. It has created another minidump which i have attached. I shall pass on this info as you have suggested, thank you ever so much for all your efforts. Matt 031918-26843-01.dmp

Hi Kevin, Good timing there was just about to log in to my emails to tell you it hasn't, but then i clicked Chrome on my taskbar and it restarted! I checked the advanced system settings again, and it is still set not to restart on system crash, but it did anyway, with no BSOD. It has created a minidump log this time however, which i have attached. Thanks 031818-25265-01.dmp

Hi Kevin, Here is the log from the disk check. I ran it on C: and D: but there is only one log created. The scan on C: was completed almost instantly, which i though peculiar. Log Name: Application Source: Microsoft-Windows-Wininit Date: 17/03/2018 03:12:33 PM Event ID: 1001 Task Category: None Level: Information Keywords: Classic User: N/A Computer: DESKTOP-HB2D13M Description: Checking file system on D: The type of the file system is NTFS. Volume label is Data. A disk check has been scheduled. Windows will now check the disk. Stage 1: Examining basic file system structure ... 538624 file records processed. File verification completed. 2992 large file records processed. 0 bad file records processed. Stage 2: Examining file name linkage ... 1244 reparse records processed. 579500 index entries processed. Index verification completed. 0 unindexed files scanned. 0 unindexed files recovered to lost and found. 1244 reparse records processed. Stage 3: Examining security descriptors ... Cleaning up 37 unused index entries from index $SII of file 0x9. Cleaning up 37 unused index entries from index $SDH of file 0x9. Cleaning up 37 unused security descriptors. Security descriptor verification completed. 20439 data files processed. CHKDSK is verifying Usn Journal... 39367936 USN bytes processed. Usn Journal verification completed. Stage 4: Looking for bad clusters in user file data ... 538608 files processed. File data verification completed. Stage 5: Looking for bad, free clusters ... 68315040 free clusters processed. Free space verification is complete. Windows has scanned the file system and found no problems. No further action is required. 1795596287 KB total disk space. 1521518856 KB in 480281 files. 119112 KB in 20440 indexes. 0 KB in bad sectors. 698155 KB in use by the system. 65536 KB occupied by the log file. 273260164 KB available on disk. 4096 bytes in each allocation unit. 448899071 total allocation units on disk. 68315041 allocation units available on disk. Internal Info: 00 38 08 00 dc a3 07 00 3c da 07 00 00 00 00 00 .8......<....... dc 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ Event Xml: <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event"> <System> <Provider Name="Microsoft-Windows-Wininit" Guid="{206f6dea-d3c5-4d10-bc72-989f03c8b84b}" EventSourceName="Wininit" /> <EventID Qualifiers="16384">1001</EventID> <Version>0</Version> <Level>4</Level> <Task>0</Task> <Opcode>0</Opcode> <Keywords>0x80000000000000</Keywords> <TimeCreated SystemTime="2018-03-17T15:12:33.987436200Z" /> <EventRecordID>11673</EventRecordID> <Correlation /> <Execution ProcessID="0" ThreadID="0" /> <Channel>Application</Channel> <Computer>DESKTOP-HB2D13M</Computer> <Security /> </System> <EventData> <Data> Checking file system on D: The type of the file system is NTFS. Volume label is Data. A disk check has been scheduled. Windows will now check the disk. Stage 1: Examining basic file system structure ... 538624 file records processed. File verification completed. 2992 large file records processed. 0 bad file records processed. Stage 2: Examining file name linkage ... 1244 reparse records processed. 579500 index entries processed. Index verification completed. 0 unindexed files scanned. 0 unindexed files recovered to lost and found. 1244 reparse records processed. Stage 3: Examining security descriptors ... Cleaning up 37 unused index entries from index $SII of file 0x9. Cleaning up 37 unused index entries from index $SDH of file 0x9. Cleaning up 37 unused security descriptors. Security descriptor verification completed. 20439 data files processed. CHKDSK is verifying Usn Journal... 39367936 USN bytes processed. Usn Journal verification completed. Stage 4: Looking for bad clusters in user file data ... 538608 files processed. File data verification completed. Stage 5: Looking for bad, free clusters ... 68315040 free clusters processed. Free space verification is complete. Windows has scanned the file system and found no problems. No further action is required. 1795596287 KB total disk space. 1521518856 KB in 480281 files. 119112 KB in 20440 indexes. 0 KB in bad sectors. 698155 KB in use by the system. 65536 KB occupied by the log file. 273260164 KB available on disk. 4096 bytes in each allocation unit. 448899071 total allocation units on disk. 68315041 allocation units available on disk. Internal Info: 00 38 08 00 dc a3 07 00 3c da 07 00 00 00 00 00 .8......&lt;....... dc 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ </Data> </EventData> </Event> I have attached the CBS log, the Scannow in command prompt returned no integrity errors Thanks CBS.rar

Hi Kevin, I think the oldest part will be the HDD, its the only part from the original computer i bought. It has since had new cpu, gpu and motherboard etc. A friend of mine is big into pc gaming so i get all his left overs! The parts aren't particularly old but they are second hand. It is still the same power supply unit, so could that be causing an issue if its not providing enough power? I have checked all the drivers and they are up to date. I did have issues with the Radeon thing running multiple instances a while back, but that seems to be fixed now. Matt

Well that told me no component store corruption detected, so thats good. I ran it twice because the first time it said it was cancelled due to cancel request and it created the attached log file if that means anything to you? cheers dism.log

Ah ok, I shall put that down to a random occurrence then and continue to wait for another episode. Thanks

Hi Kevin, my pc seems to have restarted again while i was away from it, as it was on the login screen rather than where I had left it. When i logged in, chrome was open on the microsoft support webpage for some reason, it definitely wasn't when I left it. Nothing else was running, and I had Steam open at the time I left it. Would the BSOD require interaction, or is it a timed thing? I don't know if it simply restarted for windows automatic updates or something rather than crashing again, and also the minidump folder is empty. Thanks

Hey man, so far no more crashes but i sent you a donation via paypal for all your hard work so far! Very much appreciated, Thanks Matt