Vista64 BSOD - Driver, Hardware, Software?

[mitchellb]

Something I noticed after a crash was the loss of settings, i.e. startup configurations, internet explorer settings.

You know what, just give me some time to backup and prepare the things that are needed.

You asked to make sure I have access to a computer, would it be just for communication only? Alternatively I could use my ipod touch, but only for contact. If I need it for downloading other things then I wouldn't be able to.

 

[richc46]

There is a good chance that there will not be a problem, but you have to be told of all the possiblities. It will be basically for communications, if you have a problem.

 

[mitchellb]

So you don't perdict there will be any complete data loss. I understand you cannot guarantee no loss of data/files.

Like I said, give me time to backup my files and such. I will reply when I am ready to start the process.

 

[richc46]

Just take your time, dont rush. Do what you need to do.
The only thing that the verifer does is to cause BSODs and indicate the driver responsobile. The worst that it will do is to cause the same problem that may occur if you dont solve the BSOD problem. With any situation, I cannot guarantee that there will be no data loss. Its wise that you back up. You should back up once a week anyway.

 

[mitchellb]

I don't know if this is of concern, but I after logging on, Windows Powershell was installed. Was this some kind of hidden system protection program, I've never seen this before.

 

[richc46]

Its nothing you need, but not a concern
Windows PowerShell 1.0 for Windows Vista Free Download » My Digital Life

 

[mitchellb]

Rich, how do I create a system restore point?

 

[richc46]

You want the restore point in case of problems; you can return to the way things were when you made the point.
http://www.vistax64.com/tutorials/76905-system-restore-how.html

 

[mitchellb]

Okay since I'm going to be wanting BSODs to occur I should be in an admin account, right?

Also, should I create a restore point both for the Local drive and the Recovery drive? Or just the Local only?

 

[mitchellb]

I have begun the procedure

 

[mitchellb]

Alright so, my pc crashed/turned off. I booted up, and it took me awhile because it crashed on start up. Once I was able go further than the windows loading screen, it never displayed the BSOD error, I looked into the location of the minidump and nothing new was recorded/stored.

I will continue having it on until I see a BSOD.

 

[richc46]

Yes, I need those reports

 

[mitchellb]

Yes, I need those reports

I know the reports are needed, but my pc has not crashed at all, I'm pretty sure I've stressed it out, max. But no BSOD.

 

[mitchellb]

BSOD error

Here's the report, I'll be waiting patiently for details and more.

*EDIT - Important
I may have screwed up. After the BSOD, I booted up and I arrived at startup repair, I didn't choose the option, simply put: timer ran out (timer to choose repair or normal startup). I don't know if this will affect the Report that I posted. Reason I say this, my applications haved been removed (i.e. itunes.exe, writer.exe, postbox.exe). I didn't know startup repair meant removing "problems" for my pc.

 

[richc46]

Your reports are consistent. 21A

STOP 0xC000021A: STATUS_SYSTEM_PROCESS_TERMINATED Usual causes: User-mode device driver, system service, or third-party application, Mismatched system files

Although you were using the Verifier, the BSODs were not caused by a driver. I checked all of you BSOD reports and uncovered something that I missed the first time around. Every BSOD happened while a particular process was running.
This is what the process is and what it does
http://www.processlibrary.com/directory/files/smss/24771/

There are several possibilites as to the problem with this process
One, it is hiding a virus.
If not already done, run a full anti virus update and run a full scan
Download and run a full updated scan with malwarebytes. I did not recheck the entire thread to see if this was done.

If negative
Run a full SFC scan, run 3 times if errors are found
http://www.vistax64.com/tutorials/66978-system-files-sfc-command.html

If no errors you must run a repair install.
http://www.vistax64.com/tutorials/88236-repair-install-vista.html?filter[11]=Performance Maintenance

 

[mitchellb]

Your reports are consistent. 21A

STOP 0xC000021A: STATUS_SYSTEM_PROCESS_TERMINATED Usual causes: User-mode device driver, system service, or third-party application, Mismatched system files

Although you were using the Verifier, the BSODs were not caused by a driver. I checked all of you BSOD reports and uncovered something that I missed the first time around. Every BSOD happened while a particular process was running.
This is what the process is and what it does
smss.exe - What is smss.exe?

There are several possibilites as to the problem with this process
One, it is hiding a virus.
If not already done, run a full anti virus update and run a full scan
Download and run a full updated scan with malwarebytes. I did not recheck the entire thread to see if this was done.

If negative
Run a full SFC scan, run 3 times if errors are found
http://www.vistax64.com/tutorials/66978-system-files-sfc-command.html

If no errors you must run a repair install.
http://www.vistax64.com/tutorials/88236-repair-install-vista.html?filter[11]=Performance Maintenance

WOW, a virus is possibly causing this. Thanks, I will keep you updated after virus and malware scan.

 

[mitchellb]

so smss.exe is hiding a virus? Or the other way around?

 

[richc46]

smss is a necessary process. It is used by virus writers to hide virus. This does not mean this is the situation in your case. We have to find out if it is, using your anti virus.
If its negative, go to step 2.
Dont forget the malwarebytes scan.

 

[mitchellb]

smss is a necessary process. It is used by virus writers to hide virus. This does not mean this is the situation in your case. We have to find out if it is, using your anti virus.
If its negative, go to step 2.
Dont forget the malwarebytes scan.

Ran both a virus and malware scan. Malwarebytes found something the log is attached.

The malware is sitting in quaratine, should I procede and delete it premenantly?

 

[richc46]

You can leave it in quaarantine.