Jump to content

Welcome to Geeks to Go - Register now for FREE

Need help with your computer or device? Want to learn new tech skills? You're in the right place!
Geeks to Go is a friendly community of tech experts who can solve any problem you have. Just create a free account and post your question. Our volunteers will reply quickly and guide you through the steps. Don't let tech troubles stop you. Join Geeks to Go now and get the support you need!

How it Works Create Account
Photo

GMER bluescreens Windows Server 2003


  • Please log in to reply

#1
toddalmond

toddalmond

    Member

  • Member
  • PipPip
  • 17 posts
Running latest version of GMER (GMER 1.0.15.15281 as of this writing)
on Windows Server 2003 R2 SP2 32 bit.

Following the instructions on the Malware and Spyware Cleaning Guide.
The scan seems to complete, the 'Stop' button changes back to 'Scan' but the system is unresponsive and shortly after that we get the BSOD. BSOD says some thing about KWLRPROC.SYS (I think that's the right spelling, it disappeared before I could confirm. Google tells me nothing) It's a production server so I don't want to crash it again. Nothing in the event logs.

Malwarebytes is telling us that the IPs 91x212.226.67 & 94x228.209.201 are possibly malicious and are being blocked. Could they be involved? The first is in Russia - the second in Amsterdam.
  • 0

Advertisements


#2
Rorschach112

Rorschach112

    Ralphie

  • Retired Staff
  • 47,710 posts
Do the other steps from the guide and post in the Virus Removal forum
  • 0

#3
toddalmond

toddalmond

    Member

  • Topic Starter
  • Member
  • PipPip
  • 17 posts
OK. I just didn't want to be smacked for not including the GMER log in the Virus Removal forum post.
(hopefully I can find some down time to run it in safe mode)
  • 0

#4
Rorschach112

Rorschach112

    Ralphie

  • Retired Staff
  • 47,710 posts
No you wont, its not an essential step
  • 0

#5
toddalmond

toddalmond

    Member

  • Topic Starter
  • Member
  • PipPip
  • 17 posts
virus removal forum thread is here:
http://www.geekstogo...si-t272807.html


This thread can be closed.
  • 0






Similar Topics

1 user(s) are reading this topic

0 members, 1 guests, 0 anonymous users

As Featured On:

Microsoft Yahoo BBC MSN PC Magazine Washington Post HP