Messages

101

Tweaking.com Support & Help / Re: Win 10 crash

« on: January 11, 2017, 09:20:29 am »

I'm not familiar with 0x13a bugchecks (or W8>10), but as far as I can tell, it roughly means: "Memory in the kernel (Windows' core) was fatally overwritten. The kernel allocates a block of heap memory of a given size and *some buggy driver* writes to memory beyond the allocated size of the heap block."

It seems to have been triggered by the graphics subsection (win32kfull.sys default (no compatibility 'fix' needed) Windows graphics driver), though that might also use a 3rd party driver from the GPU/iGPU maker, AMD/ATI, nVidia, Intel etc., which might have been the real trigger.

If you can copy C:\Windows\Minidump\011017-8953-01.dmp to your Desktop, zip it (right-click it and select Send to > Compressed folder) and attach the resulting zip here, I could dig a little deeper.

If you can access W10's Repair options, a System Restore point would be a workaround, or if you can get access by another route and Rollback the graphics driver from Device Manager, that might also 'fix' it.

102

General Computer Support / Re: This happens when open pdf file;

« on: January 09, 2017, 04:22:28 am »

This was why I suggested using Foxit Reader.

I guessed that

Did you know that Foxit had also been vulnerable/targeted in the past - if there's a vulnerability in a popular software, *someone* will try to exploit it.

Rick, it's very important to ensure you're running a supported and updated Windows version, most of the recent MS patches for the Windows graphics subsystem have been specifically to prevent these exploits from infecting Windows and they are the main reason MS took on the task of issuing Flash updates for W8/10 and IE/Edge.

Same for all your Internet facing software - use the latest, patched versions.

Don't open pdfs in a browser, download them first. If they came via email, vet them before deciding whether to open them in your (patched) pdf reader of choice.

103

General Computer Support / Re: This happens when open pdf file;

« on: January 09, 2017, 03:43:33 am »

This could be as a result of trying to open a malformed/maliciously -created pdf file, like Flash, Adobe's Reader has been a constant target.

Have you uploaded the pdf to virustotal?

104

Tweaking.com Support & Help / Re: folders disappeared from the

« on: December 04, 2016, 03:49:25 pm »

Can you please describe fully what your original 'immediate emergency' was?

105

Feedback & Suggestions / Re: Unable to download the file. Trojan detected

« on: December 02, 2016, 03:26:41 am »

Virustotal also gives it a clean bill of health: https://www.virustotal.com/en/file/81675b391f0660ec0b691aa85fbf9510f34f1bf8dbe7c2e07d1141af9306f370/analysis/1480677783/

Contact SonicWall and report it to them as a false positive.

106

General Computer Support / Re: Repair stuck in administrator rest file permissions

« on: November 26, 2016, 03:27:28 pm »

Stop it, report back on whether Windows Repair fixed your problem or not

107

General Computer Support / Re: Repair stuck in administrator rest file permissions

« on: November 26, 2016, 02:32:20 pm »

No worries, friend, most online volunteers help out just because they enjoy doing it - but we all appreciate comments such as yours.

Thank you

108

General Computer Support / Re: Repair stuck in administrator rest file permissions

« on: November 26, 2016, 12:30:54 pm »

I'm not very familiar with Tweaking's Windows Repair but the notes onscreen in your images would suggest that it's stalled if your CPU% is that low.

Can you check to see whether it's waiting for user input? Like the Y/N? prompt that Is showing?

109

General Computer Support / Re: Vista opening Firefox goes to PuP! Help remove! http://src-click-download.xyz

« on: November 26, 2016, 12:22:26 pm »

No worries, Kenny.

It's quite safe to use SAS to remove all those cookies to give yourself a clean start, run it with it with your browsers closed.

As well as a cookie management browser extension, a good adblocking extension (I use uBlock Origin) will be useful too, it will prevent many advertising/tracking cookies from being stored because it will block your browser from connecting to their servers in the first instance.

110

General Computer Support / Re: Vista opening Firefox goes to PuP! Help remove! http://src-click-download.xyz

« on: November 26, 2016, 09:44:28 am »

Stop running SAS - it majors on cookies, which aren't malware, though some might be a privacy risk

Set your browser's Options to this:



And install a good Add-on to help with the finer details of cookie management.

111

General Computer Support / Re: Vista opening Firefox goes to PuP! Help remove! http://src-click-download.xyz

« on: November 26, 2016, 07:46:43 am »

Looking good now, I guess that the Firefox shortcut had been modified by the same browser hijacker that added/modified the Firefox.bat file at the bottom og the MBam log.

Any other issues seen?

112

General Computer Support / Re: Vista opening Firefox goes to PuP! Help remove! http://src-click-download.xyz

« on: November 26, 2016, 06:41:13 am »

The image in my previous message should enable you to access the MBam logs.

113

General Computer Support / Re: Vista opening Firefox goes to PuP! Help remove! http://src-click-download.xyz

« on: November 26, 2016, 01:11:30 am »

Are you running Firefox from a shortcut? If so, please use Explorer (or the command line/Run box) to start it directly: C:\Program Files (x86)\Mozilla Firefox\Firefox.exe or C:\Program Files\Mozilla Firefox\Firefox.exe.

It's looking like *something* did an incomplete job in cleaning up (MBam or SAS?) were both of these updated before running them?

Can you export and attach the MBam logs for us to check:

114

General Computer Support / Re: video and audio out of sync in a particular website

« on: November 26, 2016, 12:55:57 am »

It's unlikely that it's 'just' = purely a Flash problem, much more like a combination of factors (site delivery, networking protocols/routing, Flash version and 'sandboxing', browser/version, security software, OS patch level, ... ), which is what troubleshooting via a process of elimination is intended to pinpoint.

115

General Computer Support / Re: Vista opening Firefox goes to PuP! Help remove! http://src-click-download.xyz

« on: November 24, 2016, 10:12:22 pm »

The final step, once any malware/adware/redirects have been removed, is to Reset Firefox (and/or any other browser installed that has the same issue): https://malwaretips.com/blogs/reset-firefox-settings/

116

General Computer Support / Re: Samsung Laptop won't boot

« on: November 24, 2016, 10:09:09 pm »

The i7-2670QM CPU includes a baked in HD 3000 graphics processor which isn't compatible with W10, according to Intel's latest table: http://www.intel.com/content/www/us/en/support/graphics-drivers/000005526.html (though you might be able to run it under a Compatibility mode).

The latest W10 (both Catalyst and Crimson) x64 drivers for the HD69xxM series GPU are here: http://support.amd.com/en-us/download/desktop/legacy?product=legacy3&os=Windows+10+-+64 (read the blurb carefully, I'd opt for the Catalyst, they were released for W10 Release day, and they should take up much less drive space once installed, turn off Windows driver updates or they'll soon revert to the 'bad' drivers).

I think the issue is really down to the 'switchable' graphics (simplified: on the original OS by default, it would boot from the HD 3000, only switching to the AMD/ATI when on mains power and extra capabilities were needed for certain programs and tasks), which you should be able to change in the BIOS - but probably only to on (switchable, boots on Intel, can switch to and from AMD within Windows when required), or off (Intel only). Because this is hardware/BIOS driven, I don't think the full switchable graphics are possible or supported on W10.

I might be wrong, it would probably take some searching on specialist fora to be sure whether they can be made to work as they used to/should or not, on W10. I haven't had recent access to a notebook of this type, so this is theory only.

The best you could hope for in the event that your system isn't fully supported in w10 is that the BIOS can enable the AMD/ATI GPU only, this would give you better graphics power, should enable the installation of the latest drivers (above) but with the main drawbacks of extra heat being produced and a much lower run time on battery power.

There's a slim chance that disabling the Intel graphics component from within the Device Manager > Display adapters section would force the switch to the AMD - but, as that's set in the BIOS, I'm not at all hopeful - and recovering from the failure of Windows not finding *any* display adapter would require a working System Restore point, at least. Not really recommended.

117

General Computer Support / Re: Audio/Video lag accompanied by sonic "belch"

« on: November 21, 2016, 11:45:48 am »

STOP 0x000000AB: SESSION_HAS_VALID_POOL_ON_EXIT   
Usual causes:  A bug in Win32k.sys, Atmfd.dll, Rdpdd.dll, or a video driver.

All the above named files are display -related, Win32k, an MS driver for the graphics subsystem, an Adobe font library dll and MS Remote Desktop/Terminal Services? display dll:

WinDbg Output Example:
SESSION_HAS_VALID_POOL_ON_EXIT (ab)
Caused by a session driver not freeing its pool allocations prior to a
session unload.  This indicates a bug in win32k.sys, atmfd.dll,
rdpdd.dll or a video driver.
Arguments:
Arg1: 0000000000000000, session ID
Arg2: 0000000000000000, number of paged pool bytes that are leaking
Arg3: 0000000000000000, number of nonpaged pool bytes that are leaking
Arg4: 0000000000000000, total number of paged and nonpaged allocations that are leaking.
    nonpaged allocations are in the upper half of this word,
    paged allocations are in the lower half of this word.

Okay, so if we give MS benefit of the doubt and blame the 3rd party graphics drivers, can you either roll back the drivers from Device Manager or install the latest drivers for your card?

I would also block Windows Update from checking for/installing hardware drivers as well, at least during troubleshooting.

118

General Computer Support / Re: Audio/Video lag accompanied by sonic "belch"

« on: November 21, 2016, 10:14:02 am »

Could you dig into the details of the LKE, I suspect it's a 0x00000117, a TDR - Video Time out Detection and Recovery, there was a 'logjam' with the graphics waiting for a response from the CPU, which was busy - locked up waiting for, or dealing with, *something else*. At the time out, Windows triggered a reset of the graphics (you might have noticed the screen flashing black).

If so, the best troubleshooting method I know of is here, there are a lot of possible causes

119

General Computer Support / Re: video and audio out of sync in a particular website

« on: November 21, 2016, 08:04:45 am »

Hi all.

The latest Flash update has been problematic for a lot of users.

You could try the latest Beta: http://labs.adobe.com/technologies/flashruntimes/flashplayer/

Or the last of the ESR versions (v. 18.x from last month): https://forums.adobe.com/thread/889580

I would also recommend that you use the Flash uninstaller before switching Flash versions, and again each time you make a version change: https://forums.adobe.com/thread/928315

Oh, your OS and browser details might also be useful.

120

General Computer Support / Re: Audio/Video lag accompanied by sonic "belch"

« on: November 21, 2016, 01:48:12 am »

Hi, can you drill down into Reliability Reports and gives us any/all details from there that coincide with the issues reported?