[pineapple tree]

Over a week ago I started this thread in Virus/Trojan/Spyware Help. chemist helped me over in the other thread but could not find signs of malware in my logs after running several different scans.

In short, my computer has the occasional error telling me that "Windows has encountered a critical problem" (I attached a screenshot of the full message), and then it proceeds to lock up until I remove the power cord and battery. When I boot it back up, I receive a Windows Action Center alert that the crash was a result of a virus called Win32/Small.CA. But, like I said, chemist could not find any signs of the virus.

The crash happens rarely (roughly once a week) and only happens immediately after I wake my computer up when it's been asleep for a while. Other than that, I haven't noticed any reasons for the crash or anything odd with my PC.

Any ideas? Thanks in advance!

 

[Stephen Bowles]

Hello Pineapple_tree

I have seen this type of thing occur before when background program/services end without cause.

For a first effort, try running cmd.exe as Administrator and entering sfc /scannow.

You probably already know this, but just in case, you can get to cmd.exe by:
> Clicking on the Start button/globe
> Typing cmd.exe in the search box
> You should see it in the list, right click and run as Administrator.

Following that, try starting your computer in Safe Mode, see if the problem occurs when in this state.

If not sure, to start in safe mode will require you to press one of the function F keys during boot, before you see the Windows logo, probably F8, but could be F10 or something else. Hopefully, if F8 doesn't work, you will see some writing that tells you.

 

[jenae]

Hi, just went through your post with Chemist over at the security forum. I noticed a reference to hiberfil.sys in Old Timer Tools. Since you mention this critical error message is associated with sleep\hibernation I think we should look here.

The hiberfil.sys file can corrupt, it is the sleep\hibernate file. We can create a fresh copy and remove the corruption, worth a shot (no harm in doing this).

Go to start search and type:- cmd, right click on the returned cmd.exe and select "run as administrator" at the prompt type:-

powercfg -h off

press enter
reboot to take effect. This turns off hibernation\sleep.

Once back into windows, open a cmd as admin (as shown) and type:-

 powercfg -h on

press enter, restart computer, windows will recreate a fresh copy of the file.