ntoskrnl.exe e58d2

essexboy or someone else i need a lot of help. i need help about BSOD. i think problem is similar that http://forum.avast.com/index.php?topic=113133.0
how can i repair ntoskrnl.exe ?
here is the minidump files with rar : http://speedy.sh/gVSDV/minidump.rar and i can give you what you need just i need help. i have been searching it for days. i couldn’t find anything.please help me :-\

Attach Malwarebytes and OTL diagnostic log http://forum.avast.com/index.php?topic=53253.0

thx for reply but probably i will do it tomorrow.

Ok, it is midnight in europe now so the experts are usually offline now

they are ready. im waiting for help now,please :-\

Please, anyone help me :cry:

Theres no malware expert online now.

Please check back tomorrow.

still 2-3 hours before they logout for the day :wink:

be patient

okay it is too important for me. i’m waiting now

up for today

Hi winters,

I am looking at posted logs right now … be right back. :wink:

Hi winters,

First note, there is no something like Malwarebytes portable. Or you install MBAM or don’t use it. Portable app can’t in most cases load/use his own drivers and this kind of software (portable antivirus/malware) you just do not need…

I see you also have been download and extract the MBAR (malwarebytes’ anti-rootkit tool). DId you preform the scan with it? I’m asking as I see the mbar folder as empty, no data.

Also, tip if I may. Do not use IOBit “Advanced SystemCare Browser Protection” as they are having malicius past. This is your choice.
https://forums.malwarebytes.org/index.php?showtopic=29681

>> Also advice to consider to reset all your browsers back on their default settings as I see lots of junk values loaded within browser. They all may cause slowness or unwanted redirect…etc. You will not lose any of personal data (i.e bookmarks …) by reseting the browser settings.
https://support.google.com/chrome/answer/3296214?hl=en
https://support.mozilla.org/en-US/kb/reset-firefox-easily-fix-most-problems

.

>>I’ve reviewed OTL logfile and his reports doesn’t show the malware presence. Below is the procedure for deploying the OTL’s script which will tell the tool to preform some minor (non-malware) repairs and fixes…

Re-run OTL.exe.

[*]Copy and paste the following text written inside of the quote box into the Custom Scans/Fixes box.

:FILES
dir C:\Windows\SysNative\CompatTel /c
ipconfig /flushdns /c
C:\Users\Ilkay\AppData\Local\6227
C:\Users\Ilkay\AppData\Roaming\Mozilla\Firefox\Profiles\upqmkec6.default\extensions\{AA052FD6-366A-4771-A591-0D8DC551585D}.xpi

:OTL
FF - prefs.js..browser.search.order.1: "Ask.com"
IE - HKU\S-1-5-21-4254776683-4179384125-1729940567-1005\..\SearchScopes\{46101A90-417E-4738-A7D9-7428C25490B0}: "URL" = http://websearch.ask.com/redirect?client=ie&tb=ORJ&o=&src=kw&q={searchTerms}&locale=&apn_ptnrs=U3&apn_dtid=OSJ000YYTR&apn_uid=77AC90A8-D126-44BD-ABF1-B31AA5CC8BE5&apn_sauid=D9AF39A6-ED5C-433C-A885-F4CC34DC9B24

O2:[b]64bit:[/b] - BHO: (no name) - {F9E4A054-E9B1-4BC3-83A3-76A1AE736170} - No CLSID value found.
[2 C:\Windows\SysNative\*.tmp files -> C:\Windows\SysNative\*.tmp -> ]
[2 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]
[2 C:\*.tmp files -> C:\*.tmp -> ]
[1 C:\Users\Ilkay\*.tmp files -> C:\Users\Ilkay\*.tmp -> ]
@Alternate Data Stream - 112 bytes -> C:\ProgramData\TEMP:D1B5B4F1

:COMMANDS
[EMPTYTEMP]

[*]Then click the Run Fix button at the top.
[*]Let the program run unhindered; it will reboot the system when it is done and open notepad with logreport. Attach here that logreport.

If the log doesn’t appear, it can be found here:

c:_OTL\MovedFiles\mmddyyyy_hhmmss.log

.

>>Regarding the BSOD problem, BSOD may be cause only from kernel driver or by hardware faulty. Also, the BSOD sometimes can cause a RootKit (which again is usually one of the drivers). So, in your reply you will tell me did you preform the MBAR scan. If not, I’ll tell you how to do that.

Also, as additionaly, we shall preform the BSOD analysis. As I do not like going anything on a blind, I want to see exactly what is causing the blue screen of death.
>>We’ll use WhoCrashed tool for that.

Please download WhoCrashed from here:
http://www.resplendence.com/download/whocrashedSetup.exe

This program will try to verify the analysis, which is the cause of driver error.
Note: This program requires installation.

Double-click to start the installation, and click Next .

[*] Check I accept the agreement and then the Next .
The program install to that location, and under that name by the program you offer.
[*] Click Next and in the next window, click Next
[*] Check Create a Desktop Icon and then click Next and then Install .

After you’ve installed WhoCrashed program, run it.

Note: If you get message that it look like this:


http://fotkica.com/thumbs2/117539_tmb_59577092_Who%20Crashed%20-%20Debuqqing.jpg

Click Download the requested file from the Microsoft site now and wait for the process to
download additional files and installation is complete.

When the program starts, click Analyze .
When scanning is done,click OK .

[*] Right-click on the area of the page with the report and select Select All, .
[*] Right-click on the area of the page with the report and select copy
[*] Open a new Notepad and select past to copy the contents of the logo in the notepad.

Now you can close the program.

Please attach here notepad with that logreport.

Firstly you are just great doing perfect really :slight_smile:
My problem is probably finished because i posted my problem to : www.techsupportforum.com/ (i hope its allowed to give links here) My pc works fine for hours.But i will listen your advises.If you still want this logs i can post you.

P.S: If it shows up again i will let you know.

Thanks very much again you are doing great.

Regards. :slight_smile:

Hi,

Please do not follow my instructions if you already receiving help at TSF.

Please, post the full URL from TSF, I am Security Collegue there so I would just like to see what was the couse. :slight_smile:

Edit: I found the link. :slight_smile:

http://www.techsupportforum.com/forums/f299/bsod-9f-837321.html
Here what i posted there :smiley:
Thanks for spending your time. :slight_smile:
Regards.

Yeah, you’re in the right place. They will solve your problem, you’re right hands.

Cheers

I think it’s fixed but i need to be sure %100.I can update this thread later if you want.