Solved BSoD after BSoD...

[Bananajunky]

a few days ago my pc started to Crash after recieving a BSoD.
turns out, i had a Virus, wich i removed, but still damaged my system.
not being able to find the vista repair dvd, i thought ill try to ask here for help, im pretty much desperate now, since i dont wanna loose my files.
-Vista Home Premium 32bit
-original OS of the system
-OEM
-i had to format and reinstall vista 2 or 3 times allready.

heres the Windows_NT6_BSOD_jcgriff2 folder from rapidshare, since the forum-upload doesnt work for some reason:
https://rapidshare.com/files/458568376/Windows_NT6_BSOD_jcgriff2.rar

i was not able to perform the perfmon check ._.

thank you very much for your time

 

[Jonathan_King]

Hello,

Looks like a particular rootkit is causing trouble for you; please run this tool: How to remove malware belonging to the family Rootkit.Win32.TDSS (aka Tidserv, TDSServ, Alureon)?

Have it remove anything it finds; your BSODs should stop. If not:

Uninstall Daemon Tools, as it uses SPTD; remove SPTD itself with this tool: DuplexSecure

Uninstall ZoneAlarm as well, and start using the Windows Firewall instead.

...Summary of the dumps:

[font=lucida console]
Built by: 6002.18327.x86fre.vistasp2_gdr.101014-0432
Debug session time: Thu Apr 21 17:34:27.172 2011 (UTC - 4:00)
System Uptime: 0 days 0:05:26.798
*** WARNING: Unable to verify timestamp for iaStor.sys
*** ERROR: Module load completed but symbols could not be loaded for iaStor.sys
*** WARNING: Unable to verify timestamp for sptd.sys
*** ERROR: Module load completed but symbols could not be loaded for sptd.sys
Probably caused by : iaStor.sys ( iaStor+3de83 )
DEFAULT_BUCKET_ID:  COMMON_SYSTEM_FAULT
BUGCHECK_STR:  0xD1
PROCESS_NAME:  SYSTEM
FAILURE_BUCKET_ID:  0xD1_iaStor+3de83
SystemProductName = MS-7502
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
Built by: 6002.18327.x86fre.vistasp2_gdr.101014-0432
Debug session time: Thu Apr 21 17:27:45.623 2011 (UTC - 4:00)
System Uptime: 0 days 0:02:21.389
*** WARNING: Unable to verify timestamp for iaStor.sys
*** ERROR: Module load completed but symbols could not be loaded for iaStor.sys
*** WARNING: Unable to verify timestamp for sptd.sys
*** ERROR: Module load completed but symbols could not be loaded for sptd.sys
Probably caused by : iaStor.sys ( iaStor+3de87 )
DEFAULT_BUCKET_ID:  COMMON_SYSTEM_FAULT
BUGCHECK_STR:  0xD1
PROCESS_NAME:  SYSTEM
FAILURE_BUCKET_ID:  0xD1_iaStor+3de87
SystemProductName = MS-7502
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
Built by: 6002.18327.x86fre.vistasp2_gdr.101014-0432
Debug session time: Thu Apr 21 14:33:43.974 2011 (UTC - 4:00)
System Uptime: 0 days 4:17:53.634
*** WARNING: Unable to verify timestamp for iaStor.sys
*** ERROR: Module load completed but symbols could not be loaded for iaStor.sys
Probably caused by : iaStor.sys ( iaStor+3a70a )
DEFAULT_BUCKET_ID:  COMMON_SYSTEM_FAULT
BUGCHECK_STR:  0xD1
PROCESS_NAME:  SYSTEM
FAILURE_BUCKET_ID:  0xD1_iaStor+3a70a
SystemProductName = MS-7502
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
Built by: 6002.18327.x86fre.vistasp2_gdr.101014-0432
Debug session time: Thu Apr 21 10:14:56.581 2011 (UTC - 4:00)
System Uptime: 0 days 0:05:04.347
*** WARNING: Unable to verify timestamp for iaStor.sys
*** ERROR: Module load completed but symbols could not be loaded for iaStor.sys
Probably caused by : iaStor.sys ( iaStor+3a776 )
DEFAULT_BUCKET_ID:  COMMON_SYSTEM_FAULT
BUGCHECK_STR:  0xD1
PROCESS_NAME:  SYSTEM
FAILURE_BUCKET_ID:  0xD1_iaStor+3a776
SystemProductName = MS-7502
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
Built by: 6002.18327.x86fre.vistasp2_gdr.101014-0432
Debug session time: Thu Apr 21 10:08:54.895 2011 (UTC - 4:00)
System Uptime: 0 days 0:08:09.662
*** WARNING: Unable to verify timestamp for iaStor.sys
*** ERROR: Module load completed but symbols could not be loaded for iaStor.sys
*** WARNING: Unable to verify timestamp for sptd.sys
*** ERROR: Module load completed but symbols could not be loaded for sptd.sys
Probably caused by : iaStor.sys ( iaStor+479e )
DEFAULT_BUCKET_ID:  COMMON_SYSTEM_FAULT
BUGCHECK_STR:  0xD1
PROCESS_NAME:  firefox.exe
FAILURE_BUCKET_ID:  0xD1_iaStor+479e
SystemProductName = MS-7502
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
Built by: 6002.18327.x86fre.vistasp2_gdr.101014-0432
Debug session time: Thu Apr 21 08:06:28.940 2011 (UTC - 4:00)
System Uptime: 0 days 0:19:10.583
Probably caused by : ntkrpamp.exe ( nt!KiAttachProcess+a3 )
DEFAULT_BUCKET_ID:  COMMON_SYSTEM_FAULT
BUGCHECK_STR:  0xA
PROCESS_NAME:  SYSTEM
FAILURE_BUCKET_ID:  0xA_nt!KiAttachProcess+a3
SystemProductName = MS-7502
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
Built by: 6002.18327.x86fre.vistasp2_gdr.101014-0432
Debug session time: Thu Apr 21 07:46:02.782 2011 (UTC - 4:00)
System Uptime: 0 days 1:03:04.647
*** WARNING: Unable to verify timestamp for vsdatant.sys
*** ERROR: Module load completed but symbols could not be loaded for vsdatant.sys
Probably caused by : vsdatant.sys ( vsdatant+4b9f5 )
DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT
BUGCHECK_STR:  0x8E
PROCESS_NAME:  verclsid.exe
FAILURE_BUCKET_ID:  0x8E_vsdatant+4b9f5
SystemProductName = MS-7502
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
Built by: 6002.18327.x86fre.vistasp2_gdr.101014-0432
Debug session time: Thu Apr 21 06:41:43.262 2011 (UTC - 4:00)
System Uptime: 0 days 1:02:52.049
*** WARNING: Unable to verify timestamp for vsdatant.sys
*** ERROR: Module load completed but symbols could not be loaded for vsdatant.sys
Probably caused by : vsdatant.sys ( vsdatant+4b9f5 )
DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT
BUGCHECK_STR:  0x8E
PROCESS_NAME:  verclsid.exe
FAILURE_BUCKET_ID:  0x8E_vsdatant+4b9f5
SystemProductName = MS-7502
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
Built by: 6002.18327.x86fre.vistasp2_gdr.101014-0432
Debug session time: Wed Apr 20 18:43:10.119 2011 (UTC - 4:00)
System Uptime: 0 days 0:00:33.744
Probably caused by : ntkrpamp.exe ( nt!wcsstr+4d )
DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT
BUGCHECK_STR:  0x50
PROCESS_NAME:  smss.exe
FAILURE_BUCKET_ID:  0x50_nt!wcsstr+4d
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
Built by: 6002.18327.x86fre.vistasp2_gdr.101014-0432
Debug session time: Wed Apr 20 17:27:35.851 2011 (UTC - 4:00)
System Uptime: 0 days 1:03:25.627
*** WARNING: Unable to verify timestamp for vsdatant.sys
*** ERROR: Module load completed but symbols could not be loaded for vsdatant.sys
Probably caused by : vsdatant.sys ( vsdatant+4b9f5 )
DEFAULT_BUCKET_ID:  COMMON_SYSTEM_FAULT
BUGCHECK_STR:  0x8E
PROCESS_NAME:  WerFault.exe
FAILURE_BUCKET_ID:  0x8E_vsdatant+4b9f5
SystemProductName = MS-7502
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
Built by: 6002.18327.x86fre.vistasp2_gdr.101014-0432
Debug session time: Wed Apr 20 15:57:41.729 2011 (UTC - 4:00)
System Uptime: 0 days 2:29:28.510
*** WARNING: Unable to verify timestamp for iaStor.sys
*** ERROR: Module load completed but symbols could not be loaded for iaStor.sys
*** WARNING: Unable to verify timestamp for sptd.sys
*** ERROR: Module load completed but symbols could not be loaded for sptd.sys
Probably caused by : iaStor.sys ( iaStor+3fff8 )
DEFAULT_BUCKET_ID:  COMMON_SYSTEM_FAULT
BUGCHECK_STR:  0x44
PROCESS_NAME:  firefox.exe
FAILURE_BUCKET_ID:  0x44_iaStor+3fff8
SystemProductName = MS-7502
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
Built by: 6002.18327.x86fre.vistasp2_gdr.101014-0432
Debug session time: Wed Apr 20 12:54:11.152 2011 (UTC - 4:00)
System Uptime: 0 days 0:02:49.918
*** WARNING: Unable to verify timestamp for iaStor.sys
*** ERROR: Module load completed but symbols could not be loaded for iaStor.sys
Probably caused by : iaStor.sys ( iaStor+3a70a )
DEFAULT_BUCKET_ID:  COMMON_SYSTEM_FAULT
BUGCHECK_STR:  0xD1
PROCESS_NAME:  SYSTEM
FAILURE_BUCKET_ID:  0xD1_iaStor+3a70a
SystemProductName = MS-7502
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
Built by: 6002.18327.x86fre.vistasp2_gdr.101014-0432
Debug session time: Wed Apr 20 09:36:37.098 2011 (UTC - 4:00)
System Uptime: 0 days 4:23:42.665
*** WARNING: Unable to verify timestamp for iaStor.sys
*** ERROR: Module load completed but symbols could not be loaded for iaStor.sys
*** WARNING: Unable to verify timestamp for sptd.sys
*** ERROR: Module load completed but symbols could not be loaded for sptd.sys
Probably caused by : iaStor.sys ( iaStor+479e )
DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT
BUGCHECK_STR:  0xD1
PROCESS_NAME:  SYSTEM
FAILURE_BUCKET_ID:  0xD1_iaStor+479e
SystemProductName = MS-7502
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
Built by: 6002.18327.x86fre.vistasp2_gdr.101014-0432
Debug session time: Tue Apr 19 19:23:44.644 2011 (UTC - 4:00)
System Uptime: 0 days 0:05:04.446
*** WARNING: Unable to verify timestamp for iaStor.sys
*** ERROR: Module load completed but symbols could not be loaded for iaStor.sys
Probably caused by : iaStor.sys ( iaStor+3a70a )
DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT
BUGCHECK_STR:  0xD1
PROCESS_NAME:  SYSTEM
FAILURE_BUCKET_ID:  0xD1_iaStor+3a70a
SystemProductName = MS-7502
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
  
[/font]

 

[Bananajunky]

after starting this thread, i actually run my antivirus program again and it found and detroyed a rootkit. i also used the program in your link and it destroyed another rootkit, the pc seems to be working just fine now, i hope it stays that way
thank you very much

 

[Jonathan_King]

You're welcome, let us know if you need anything else!