Author Topic: Fake Microsoft alert  (Read 6573 times)

0 Members and 1 Guest are viewing this topic.

Offline alicia.rose

  • Full Member
  • ***
  • Posts: 144
Re: Fake Microsoft alert
« Reply #15 on: December 13, 2018, 11:18:19 PM »
Thank you for answering my question Pondus....................

Wondering why I had the BSOD on reboot and now have a shaking screen??
« Last Edit: December 13, 2018, 11:20:54 PM by alicia.rose »

Offline Pondus

  • Probably Bot
  • ****
  • Posts: 37506
  • Not a avast user
Re: Fake Microsoft alert
« Reply #16 on: December 14, 2018, 07:25:37 AM »
Thank you for answering my question Pondus....................

Wondering why I had the BSOD on reboot and now have a shaking screen??
Follow instructions / link posted by @schmidthouse in reply #12
attach the requested logs and a expert will take a look




Offline kwiq

  • Avast team
  • Sr. Member
  • *
  • Posts: 254
Re: Fake Microsoft alert
« Reply #17 on: December 14, 2018, 09:25:59 AM »
Hi alicia.rose,
I would like to ask you for MEMORY.DMP to find out which driver caused your BSOD.

Some information from the picture you attached :
Bug Check 0x50: PAGE_FAULT_IN_NONPAGED_AREA
Referenced address : 0xe27ac000
Module address: 0xf52625b0
It means that a driver (0xf52625b0) tried to read from memory 0xe27ac000.

1)Locate a dump file :
The default location of the dump file is %SystemRoot%\memory.dmp i.e C:\Windows\memory.dmp if C: is the system drive. Windows can also capture small memory dumps which occupy less space. These dumps are created at %SystemRoot%\Minidump.dmp (C:\Window\Minidump.dump if C: is the system drive)
2) Zip it as alicia_rose_bsod_12_2018.zip
3) Upload the zip file to  ftp://ftp.avast.com/incoming

Thank you !

Offline alicia.rose

  • Full Member
  • ***
  • Posts: 144
Re: Fake Microsoft alert
« Reply #18 on: December 14, 2018, 02:05:59 PM »
Hello kwiq,

Thank you very much for helping me.

I have the Minidump / zip file, but cannot click anywhere on the page you asked me to upload it to other than 'Up to higher level directory'?

Thank you Pondus.
« Last Edit: December 14, 2018, 02:16:02 PM by alicia.rose »

Offline Pondus

  • Probably Bot
  • ****
  • Posts: 37506
  • Not a avast user
Re: Fake Microsoft alert
« Reply #19 on: December 14, 2018, 02:09:48 PM »
Uploading files to the Avast FTP server  >>  https://support.avast.com/en-ww/article/FTP-file-upload



Offline alicia.rose

  • Full Member
  • ***
  • Posts: 144
Re: Fake Microsoft alert
« Reply #20 on: December 14, 2018, 02:15:10 PM »
Tried your link Pondus................just a loading circle going round - nothing else showing.

I am using K-Meleon browser. Cannot use Chrome / latest Firefox version - not compatible with my computer.

Tried both links with the Firefox version I have - 1st same as before, 2nd page won't load.

I can ask a friend to do it.
« Last Edit: December 14, 2018, 02:27:56 PM by alicia.rose »

Offline karimus

  • Jr. Member
  • **
  • Posts: 49
Re: Fake Microsoft alert
« Reply #21 on: December 14, 2018, 02:31:07 PM »
HI :

Reset Internet Explorer settings
You can reset Internet Explorer settings to what they were when Internet Explorer was first installed on your PC. This can be useful for troubleshooting problems that may be caused by settings changed after installation. Note that resetting Internet Explorer isn't reversible, and all previous settings are lost after reset.

Close all Internet Explorer windows. Select the Tools  button, and then select Internet options.
Select the Advanced tab, and then select Reset.
In the Reset Internet Explorer Settings dialog box, select Reset.
When Internet Explorer finishes applying default settings, select Close, and then select OK. Restart your PC to apply changes.

Beside this,use adwcleaner from https://toolslib.net/downloads/viewdownload/1-adwcleaner/

and then follow this:
To turn off SmartScreen   in Internet Explorer 8

In Internet Explorer, select the Safety button, point to SmartScreen Filter, and then click either Turn off SmartScreen Filter or Turn on SmartScreen Filter.
In the Microsoft SmartScreen Filter dialog box, click OK.

Cordially


Offline alicia.rose

  • Full Member
  • ***
  • Posts: 144
Re: Fake Microsoft alert
« Reply #22 on: December 14, 2018, 02:39:40 PM »
Thank you for helping karimus.

XP - I cannot use IE for browsing at all - pages will not load.

Think it has been blocked for security reasons.

I am emailing a friend (with attachment)............asking them to do it for me.

Might take a few days.

Offline karimus

  • Jr. Member
  • **
  • Posts: 49
Re: Fake Microsoft alert
« Reply #23 on: December 14, 2018, 05:58:11 PM »
Hi,

You can do it from this way for XP :

 click Start > Run > Type the command inetcpl.cpl in the Open box > press ENTER.

Advanced tab»  Reset in settings of Reset Internet Explorer and apply

restart cpu.

For the other Windows,just click on WIN+R and follow same step.

Offline alicia.rose

  • Full Member
  • ***
  • Posts: 144
Re: Fake Microsoft alert
« Reply #24 on: December 14, 2018, 08:08:34 PM »
kwiq - Avast team

My friend has just contacted me to let me know he has uploaded the Minidump / zip file (on my behalf), as requested.

The last BSOD on this computer was 5th April 2014.

BlueScreenView did not record a crash on 13th December 2018?

Thank you for the information karimus.
« Last Edit: December 14, 2018, 08:40:40 PM by alicia.rose »

Offline kwiq

  • Avast team
  • Sr. Member
  • *
  • Posts: 254
Re: Fake Microsoft alert
« Reply #25 on: December 18, 2018, 08:40:13 AM »
Hi alicia.rose,
I found you file but it is password protected archive and I dont know the password.
Can you send it me as private message.
Thank you

Offline Asyn

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 76037
    • >>>  Avast Forum - Deutschsprachiger Bereich  <<<
Re: Fake Microsoft alert
« Reply #26 on: December 18, 2018, 08:47:59 AM »
Hi alicia.rose,
I found you file but it is password protected archive and I dont know the password.
Hi, if she did follow Pondus' advice (Reply #19), the PW is "virus".
W8.1 [x64] - Avast Free AV 23.3.8047.BC [UI.757] - Firefox ESR 102.9 [NS/uBO/PB] - Thunderbird 102.9.1
Avast-Tools: Secure Browser 109.0 - Cleanup 23.1 - SecureLine 5.18 - DriverUpdater 23.1 - CCleaner 6.01
Avast Wissenswertes (Downloads, Anleitungen & Infos): https://forum.avast.com/index.php?topic=60523.0

Offline kwiq

  • Avast team
  • Sr. Member
  • *
  • Posts: 254
Re: Fake Microsoft alert
« Reply #27 on: December 18, 2018, 09:35:00 AM »
Hi alicia.rose,
it is a crash in aswStmXP.sys driver.
forwarded to developers
Thank you !

Offline alicia.rose

  • Full Member
  • ***
  • Posts: 144
Re: Fake Microsoft alert
« Reply #28 on: December 18, 2018, 02:07:28 PM »
kwiq / Avast team

Thank you very much for the information. Really appreciated you analyzing the Minidump for me and all the help I have received here.

Regarding the shaky, moving screen since the BSOD...............

I uninstalled and reinstalled the graphics card driver - issue completely resolved. :)
« Last Edit: December 18, 2018, 03:23:00 PM by alicia.rose »

Offline mchain

  • Avast Evangelist
  • Ultra Poster
  • ***
  • Posts: 5564
  • Spartan Warrior
Re: Fake Microsoft alert
« Reply #29 on: December 19, 2018, 07:36:49 AM »
Graphics driver needs to be intact to work properly without corruption.
Windows 10 Home 64-bit 22H2 Avast Premier Security version 24.1.6099 (build 24.1.88821.762)  UI version 1.0.797
 UI version 1.0.788.  Windows 11 Home 23H2 - Windows 11 Pro 23H2 Avast Premier Security version 24.2.6105 (build 24.1.8918.827) UI version 1.0.801