Constant crashing and BSOD on MSi gaming laptop

maristredfox

Thread Starter
Joined
Mar 14, 2008
Messages
75
maristredfox
Download this please
https://www.malwarebytes.com/adwcleaner/
When you have it on the desktop
right click and click run as admin
BEFORE you scan
go to settings and turn off all except cloud based database
and
under cleaning options ask for confirmation before reboot
TURN those two ON

then scan
if it finds anything allow it to fix the errors

DO NOT select Basic repair if it does NOT find anything

If it finds issues then after the clenaing go to the GUI again and this time click logs on the left side
double click the scan log
notepad will open select all please and paste to reply
do the same please with the clean log

DO NOT DELETE any log files by going to the location shown in C drive, as that will prevent you restoring cleaned files if it should clean a required entry.
Scan log:
# -------------------------------
# Malwarebytes AdwCleaner 8.0.7.0
# -------------------------------
# Build: 07-22-2020
# Database: 2020-07-20.1 (Cloud)
# Support: https://www.malwarebytes.com/support
#
# -------------------------------
# Mode: Scan
# -------------------------------
# Start: 08-11-2020
# Duration: 00:00:17
# OS: Windows 10 Home
# Scanned: 31837
# Detected: 12


***** [ Services ] *****

No malicious services found.

***** [ Folders ] *****

Adware.SearchProTools C:\ProgramData\US-Media Capital
Adware.Tuto4PC C:\Program Files (x86)\Multitimer
PUP.Optional.MarginTrade C:\Program Files (x86)\Margin Trade

***** [ Files ] *****

No malicious files found.

***** [ DLL ] *****

No malicious DLLs found.

***** [ WMI ] *****

No malicious WMI found.

***** [ Shortcuts ] *****

No malicious shortcuts found.

***** [ Tasks ] *****

Adware.SearchProTools C:\Windows\System32\Tasks\SEARCHTOOLS

***** [ Registry ] *****

Adware.SearchProTools HKCU\Software\US-Media Capital
Adware.SearchProTools HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{4BD814BB-8E8D-4242-8CBC-EA1FE053E5AF}
Adware.SearchProTools HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\SearchTools
PUP.Optional.InstallCore HKCU\Software\csastats
Trojan.Agent HKCU\Software\Microsoft\Windows\CurrentVersion\Run|SysHelper
Trojan.Agent HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{CA185F39-49A6-4549-BC4B-3FA08CB674DE}
Trojan.Agent HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{CA185F39-49A6-4549-BC4B-3FA08CB674DE}
Trojan.Agent HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Time Trigger Task

***** [ Chromium (and derivatives) ] *****

No malicious Chromium entries found.

***** [ Chromium URLs ] *****

No malicious Chromium URLs found.

***** [ Firefox (and derivatives) ] *****

No malicious Firefox entries found.

***** [ Firefox URLs ] *****

No malicious Firefox URLs found.

***** [ Hosts File Entries ] *****

No malicious hosts file entries found.

***** [ Preinstalled Software ] *****

No Preinstalled Software found.



########## EOF - C:\AdwCleaner\Logs\AdwCleaner[S00].txt ##########

Clean log:
# -------------------------------
# Malwarebytes AdwCleaner 8.0.7.0
# -------------------------------
# Build: 07-22-2020
# Database: 2020-07-20.1 (Cloud)
# Support: https://www.malwarebytes.com/support
#
# -------------------------------
# Mode: Clean
# -------------------------------
# Start: 08-11-2020
# Duration: 00:00:01
# OS: Windows 10 Home
# Cleaned: 12
# Failed: 0


***** [ Services ] *****

No malicious services cleaned.

***** [ Folders ] *****

Deleted C:\Program Files (x86)\Margin Trade
Deleted C:\Program Files (x86)\Multitimer
Deleted C:\ProgramData\US-Media Capital

***** [ Files ] *****

No malicious files cleaned.

***** [ DLL ] *****

No malicious DLLs cleaned.

***** [ WMI ] *****

No malicious WMI cleaned.

***** [ Shortcuts ] *****

No malicious shortcuts cleaned.

***** [ Tasks ] *****

Deleted C:\Windows\System32\Tasks\SEARCHTOOLS

***** [ Registry ] *****

Deleted HKCU\Software\Microsoft\Windows\CurrentVersion\Run|SysHelper
Deleted HKCU\Software\US-Media Capital
Deleted HKCU\Software\csastats
Deleted HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{CA185F39-49A6-4549-BC4B-3FA08CB674DE}
Deleted HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{4BD814BB-8E8D-4242-8CBC-EA1FE053E5AF}
Deleted HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{CA185F39-49A6-4549-BC4B-3FA08CB674DE}
Deleted HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\SearchTools
Deleted HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Time Trigger Task

***** [ Chromium (and derivatives) ] *****

No malicious Chromium entries cleaned.

***** [ Chromium URLs ] *****

No malicious Chromium URLs cleaned.

***** [ Firefox (and derivatives) ] *****

No malicious Firefox entries cleaned.

***** [ Firefox URLs ] *****

No malicious Firefox URLs cleaned.

***** [ Hosts File Entries ] *****

No malicious hosts file entries cleaned.

***** [ Preinstalled Software ] *****

No Preinstalled Software cleaned.


AdwCleaner[S00].txt - [2487 octets] - [11/08/2020 21:11:51]

########## EOF - C:\AdwCleaner\Logs\AdwCleaner[C00].txt ##########
 

Macboatmaster

Trusted Advisor
Spam Fighter
Joined
Jan 14, 2010
Messages
24,088
Is it still crashing please and can you now turn on Defender
Wndows security Virus and Threat Protection.
 

maristredfox

Thread Starter
Joined
Mar 14, 2008
Messages
75
I think the crashes are less frequent, but I haven't played much lately.

I still can't turn on Windows Virus and Threat protection.
 

maristredfox

Thread Starter
Joined
Mar 14, 2008
Messages
75
Yes, the crashes are definitely less frequent - but I still can't turn on Windows virus and threat protection.
 

Macboatmaster

Trusted Advisor
Spam Fighter
Joined
Jan 14, 2010
Messages
24,088
Sorry for some reason I missed your reply
Send me please the results of this
https://forums.techguy.org/threads/gps-connection-problem.1249026/page-2

see please my post 23 - follow that procedure on your computer and attach the results to your reply
That log is very extensive and it will take me sometime to look at it all
Please do not make any changes to the system after posting the log file, as to do so will confuse the issue.
Thanks
 

Macboatmaster

Trusted Advisor
Spam Fighter
Joined
Jan 14, 2010
Messages
24,088
You have these entries on autorun task
\Norton Security with Backup\Norton Security Autofix
"C:\Program Files\Norton Security\Engine\22.20.2.57\SymErr.exe" /ui
File not found: C:\Program Files\Norton Security\Engine\22.20.2.57\SymErr.exe

\Norton Security with Backup\Norton Security Error Analyzer
"C:\Program Files\Norton Security\Engine\22.20.2.57\SymErr.exe" /analyze
File not found: C:\Program Files\Norton Security\Engine\22.20.2.57\SymErr.exe

\Norton Security with Backup\Norton Security Error Processor
"C:\Program Files\Norton Security\Engine\22.20.2.57\SymErr.exe" /submit
File not found: C:\Program Files\Norton Security\Engine\22.20.2.57\SymErr.exe


Go here
https://www.revouninstaller.com/products/revo-uninstaller-pro/
download FREE TRIAL
it is good for 30 days
When you have it installed and open it you will see this
Untitled.png
On the first image click the drop arrow to the left of the word search and select name, then type norton
see if it finds anything if it does it will list them , in the main window, select them by clicking on them and then click on REMOVE
Then go to tools and autorun manager


the main window contents will change and under scheduled taks you should find the entries I have posted above, unless the search found them.
Select them and click remove

BE EXTREMELY CAREFUL that you are only selecting those entries for Norton.
 

Macboatmaster

Trusted Advisor
Spam Fighter
Joined
Jan 14, 2010
Messages
24,088
Then go to tools and autorun manager


the main window contents will change and under scheduled tasks you should find the entries I have posted above, unless the search found them.
Select them and click remove
but does it there as I asked
 

Macboatmaster

Trusted Advisor
Spam Fighter
Joined
Jan 14, 2010
Messages
24,088
Please go to cmd prompt with admin rights
at the cmd prompt
it will open on
C:\Windows\system32>
if it does not type
C:
press enter
then type
chkdsk /r
press enter
If it responds with
Do you wish to force dismount Y/N
type
N
it should then ask iof you wish to run on restart - or that may be the first response
Type Y
retsart the computer and then chkdsk will run
when it has completed and the computer restarts follow the procedure here to get me the results please

https://www.tenforums.com/tutorials/40822-read-chkdsk-log-event-viewer-windows-10-a.html
as yo have run chkdsk on restart
you type in filter
wininit

You then when you have the wininit chkdsk result on the screen as at point 4 on the link, click copy (on right hand side of page) as text and paste to reply
 

maristredfox

Thread Starter
Joined
Mar 14, 2008
Messages
75
I did all the instructions, but I don't think chkdsk ran after I restarted the computer. Should I have seen it running like when ScanDisk or Defrag is running?

Then when I went to look for the results, nothing came up. I tried all the options in the tenforums link.
 

Macboatmaster

Trusted Advisor
Spam Fighter
Joined
Jan 14, 2010
Messages
24,088
Did you get a message on the cmd prompt window after the chkdsk /r cmd

when you rebooted you should having logged in have seen a message regarding chkdsk and the message would say press any key to stop the chkdsk running.
 

maristredfox

Thread Starter
Joined
Mar 14, 2008
Messages
75
Yes - it said chkdsk would run after restart, but there was no message after I did the restart.
 

Macboatmaster

Trusted Advisor
Spam Fighter
Joined
Jan 14, 2010
Messages
24,088
and on the message
do you wish to run chkdsk on restart Y/N
you typed
Y
because if you did not type Y and simply closed the cmd prompt it ould not run
 

Users Who Are Viewing This Thread (Users: 0, Guests: 1)

As Seen On
As Seen On...

Welcome to Tech Support Guy!

Are you looking for the solution to your computer problem? Join our site today to ask your question. This site is completely free -- paid for by advertisers and donations.

If you're not already familiar with forums, watch our Welcome Guide to get started.

Join over 807,865 other people just like you!

Latest posts

Staff online

Members online

Top