S
senglit-126
Guest
Hi, I got a strange problem. Wish to find answer here.
I have a Netgear R6100 wireless router in my home and I connected a USB portable hard disk (Seagate, 2TB) onto the router. With the "readyshare" function of R6100 wireless router, all of the computers and electrical devices in my home can visit the Seagate USB hard disk(by Samba protocol).
There are 2 Win10 laptops, 1 Mac Pro, 3 iPhones, 3 Android phones, 2 iPads and my smart TV (Android) in my wireless LAN. They all work very well with the Seagate USB hard disk. But my Win10 PC, on which I do most of my work, got big problem with it.
I mapped the shared Seagate USB hard disk as virtual driver "Z". When I copy files from/to driver Z, or when I open a file on driver Z, I often get a system crash with a blue screen "End code: PAGE_FAULT_IN_NONPAGED_AREA, Failed: RTDwxxlj.SYS".
It doesn't happen every time when I visit the driver Z, but quite frequently, around 3 or 4 times per day.
At first, I thought it's maybe caused by my old wireless network card on PC. It's a very old Intel model. I changed the old wireless network card to an Intel 9260AC, with the newest driver. But I still got system crash with blue screen.
Then I think it must be a software problem.
I found the RTDwxxlj.SYS in c:\windows\system32\drivers. with "Hiden" property. The "property" of the file shows it's a Microsoft product (Windows Win7 DDK driver) with a digital signature by FarStone Technology. But the signature is shown as "not avalible, expired or not activated".
I also found RTDwxxlJ is regested as a system service at \HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\RTDwxxlj, with iterms:
Name Type Value
Group REG_SZ System Bus Extender
Start REG_DWORD 1
Type REG_DWORD 1
ErrorControl REG_DWORD 1
DisplayName REG_SZ RTDwxxlJ
I checked the other 2 Win10 laptops and there were no RTDwxxlj.SYS in the system.
It looks like a virus to me. So, this was what I did:
1. copy the RTDwxxlj.SYS to a backup folder
2. smash the RTDwxxlj.SYS file with my anti-virus tool
3. restart the Win10
I was expecting to found an error/alarm with the win10 system or any auto-started program. And then I can know which program loaded this RTDwxxlj.SYS file. This program can be highly suspected as the "Bad Guy".
But nothing happen. There was no error/alarm when Win10 started up. Everything looked the same as usual. I opened c:\windows\system32\drivers folder and found RTDwxxlj.SYS was there again! And the system keeping crash with blue screen 3 to 4 times per day.
What caused this problem? How can I fix it?
Thank you!
More...
I have a Netgear R6100 wireless router in my home and I connected a USB portable hard disk (Seagate, 2TB) onto the router. With the "readyshare" function of R6100 wireless router, all of the computers and electrical devices in my home can visit the Seagate USB hard disk(by Samba protocol).
There are 2 Win10 laptops, 1 Mac Pro, 3 iPhones, 3 Android phones, 2 iPads and my smart TV (Android) in my wireless LAN. They all work very well with the Seagate USB hard disk. But my Win10 PC, on which I do most of my work, got big problem with it.
I mapped the shared Seagate USB hard disk as virtual driver "Z". When I copy files from/to driver Z, or when I open a file on driver Z, I often get a system crash with a blue screen "End code: PAGE_FAULT_IN_NONPAGED_AREA, Failed: RTDwxxlj.SYS".
It doesn't happen every time when I visit the driver Z, but quite frequently, around 3 or 4 times per day.
At first, I thought it's maybe caused by my old wireless network card on PC. It's a very old Intel model. I changed the old wireless network card to an Intel 9260AC, with the newest driver. But I still got system crash with blue screen.
Then I think it must be a software problem.
I found the RTDwxxlj.SYS in c:\windows\system32\drivers. with "Hiden" property. The "property" of the file shows it's a Microsoft product (Windows Win7 DDK driver) with a digital signature by FarStone Technology. But the signature is shown as "not avalible, expired or not activated".
I also found RTDwxxlJ is regested as a system service at \HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\RTDwxxlj, with iterms:
Name Type Value
Group REG_SZ System Bus Extender
Start REG_DWORD 1
Type REG_DWORD 1
ErrorControl REG_DWORD 1
DisplayName REG_SZ RTDwxxlJ
I checked the other 2 Win10 laptops and there were no RTDwxxlj.SYS in the system.
It looks like a virus to me. So, this was what I did:
1. copy the RTDwxxlj.SYS to a backup folder
2. smash the RTDwxxlj.SYS file with my anti-virus tool
3. restart the Win10
I was expecting to found an error/alarm with the win10 system or any auto-started program. And then I can know which program loaded this RTDwxxlj.SYS file. This program can be highly suspected as the "Bad Guy".
But nothing happen. There was no error/alarm when Win10 started up. Everything looked the same as usual. I opened c:\windows\system32\drivers folder and found RTDwxxlj.SYS was there again! And the system keeping crash with blue screen 3 to 4 times per day.
What caused this problem? How can I fix it?
Thank you!
More...