Windows 7 BSOD: Stop error code: 0xF4_smss.exe CRITICAL_OBJECT_TERMINATION

aleksaym

New Member
Joined
Dec 10, 2018
Messages
6
Crash date: Sun Dec 9 18:32:22.186 2018 (UTC + 5:00)
Stop error code: 0xF4_smss.exe
CRITICAL_OBJECT_TERMINATION
Process name: smss.exe
Probably caused by: Unknown_Image

"SFC /Scannow" - without any problems.

Please help me.
see att: minidumps, and logs, config, etc.. at zip-file
 

Attachments

Solution
Hi,
dump file is exactly the same as earlier dumps.

The cause of this I'm pretty sure is Dr Web AV. You need to remove it to test this theory plus it's not stopping you from getting infected as the trojan proves.

As I said several times try removing it and using the apps outlined earlier.
Sort by date Sort by votes
Hi,
looking over your dump file driver stack I noticed the apps posted below:

3a753ba.sys Fri Jun 8 02:46:24 2018: This is taken from the driver stack list could be malware.

Please run something like Malwarebytes to check.

aksfridge.sys Thu Jul 11 02:33:17 2013: Relates to a product called Aladin security? It is known for causing bsod's, please remove to test. (or the very least update)

spiderg3.sys Wed May 16 05:29:40 2018: Looks like another security application? Whilst some will run alongside each other nicely other apps can clash.

Try removing them all and just use something like Defender and malwarebytes. See if the bsod's stop.
 
Upvote 0 Downvote
Hi, kemical

aksfridge.sys - Aladdin HASP for app - 1C. It can't work without this driver.
spiderg3.sys - antivirus Dr.Web
what you think about dwprot.sys? it's dr.web too.
I'll try removing

3a753ba.sys - ?
295c214.sys - in other dump
How can I see the path of this file?
 
Upvote 0 Downvote
aleksaym said:
How can I see the path of this file?
Click to expand...
You could try doing a search but usually drivers which appear like the above is malware.

Do you have any more dump files? The more we see the better really.

Can you give more details on when the bsod occurs (does it coincide with you going online for example or is just random)

Have you recently updated anything?

Third party AV apps are usually a good place to start when tracking down bsod's hence my suggestion.

Did you try the Malwarebytes scan?

Another good AV to scan your system with is Eset's online scanner:
Online Malware Detection
 
Upvote 0 Downvote
  1. Now, I have 9 dump files (see att).
  2. just random. People work with ONLY one app - 1Cv8 by ViTerminalXP (on win7)
  3. Yes, I recently updated AV app - Dr.Web (from ver.6 to ver.11.5) - 01 dec 2018, and BSOD began everyday! random.
  4. No, I didn't try Malwarebytes scan because I'm afraid conflict with Dr.Web. And I'm afraid that scanning will slow down PC very much.
(people work now).
But I'll try it's possible.
5) Online scanner I'll try too as it's possible.
 

Attachments

Upvote 0 Downvote
aleksaym said:
Yes, I recently updated AV app - Dr.Web (from ver.6 to ver.11.5) - 01 dec 2018, and BSOD began everyday! random.
Click to expand...
Try rolling back or remove application entirely.

Thank you for the dump files, I still feel however that Dr Web is the culprit.
 
Upvote 0 Downvote
  1. ESET Online scanner found "C:\Windows\System32\Tasks\7534351e-f5a2-584f-34001120040e6b58 PowerShell/Agent.AS trojan "
  2. + I run cmd with icacls %WinDir%\Tasks /grant:r *S-1-5-11:RX
(Task Exploit)
3) Dr.Web still working.
Watching...
 
Upvote 0 Downvote
aleksaym said:
ESET Online scanner found "C:\Windows\System32\Tasks\7534351e-f5a2-584f-34001120040e6b58 PowerShell/Agent.AS trojan "
Click to expand...
I would run the scanner a second time just to make sure the trojan has gone.

Any changes regarding the bsod?
 
Upvote 0 Downvote
kemical said:
I would run the scanner a second time just to make sure the trojan has gone.

Any changes regarding the bsod?
Click to expand...
But I have new BSOD. (see att) and I see 3f9f029.sys (like 3a753ba.sys or 295c214.sys ) in this dump
I run the scanner a second time. Result: no problems.
 

Attachments

Upvote 0 Downvote
Hi,
dump file is exactly the same as earlier dumps.

The cause of this I'm pretty sure is Dr Web AV. You need to remove it to test this theory plus it's not stopping you from getting infected as the trojan proves.

As I said several times try removing it and using the apps outlined earlier.
 
Upvote 0 Downvote
Solution
Your very welcome!

Glad to hear your issue is hopefully resolved but if not please post back.
 
Upvote 0 Downvote
You must log in or register to reply here.

Similar threads

  • Solved
Windows 7 Various BSOD stop errors
Replies
5
Views
2K
kemical
C
  • Solved
Windows 7 Multiple DSOD ntoskrnl.exe + various errors + Stop error code 0x0000000A
Replies
3
Views
2K
kemical
D
  • Solved
Windows 7 BSOd Stop Error 116
Replies
1
Views
3K
Trouble
  • Solved
Windows 7 BSOD 0x000000F4: CRITICAL_OBJECT_TERMINATION - Need help
Replies
1
Views
10K
ChatGPT
L
Windows 7 BSOD in Windows 7 Ultimate x64
Replies
9
Views
12K
ickymay