by   May 11 2010   
BSOD 0x0000007B, in this post I'm sharing with you a blue screen message that actually produced several different types of messages. It was caused by a application needed to run MLB software. Matt's computer seemed to get this issue every year when subscribing to the service. Not sure if it's a specific issue with the Dell Optiplex and Win XP. 2 years the same thing, this year (2012) we are running Vista and will check back if anything happens. But the BSOD was related to a couple of things.

Troubleshoooting steps for a Blue Screen System Halt.

Troubleshooting steps for a Blue Screen System Halt (BSOD) STOP:0000007b C:\WINDOWS\system32\asHBsVedV.dll

The C:\WINDOWS\system32\asHBsVedV.dll is accompanied by:
in this order:
Bad image: services.exe
lsass.exe
savedump.exe
userinit.exe
Explorer.exe
hkcmd.exe
avgtray.exe
dumprep.exe
dwtrig20.exe
msmsgs.exe
GoogleUpdate.exe
dwwin.exe
GoogleCrashHandler.exe

All this followed by.... blue screen.... STOP: 000000F4
Also saw a: STOP: C000021a

Troubleshooting steps:

1. Removed the hard drive and scanned for viruses.

Found 2 virus delievery packages in the windows temp folder but did not fine the virus. This should send up flags if anything else changes on your system.

Reboot into safemode: If you see any errors copy them down on a piece of paper.

In our example we found the following errors during our safemode boot.

lsass.exe bad image reported during safemode boot.

Error message: The application or DLL c:\windows\system32\asHBsVeDV.dll is not a valid windows image.

If your keyboard and mouse are working run the following steps so we can identify the main issue. We want to check to see if a virus has corrupted our system files causing our system halts. To make a few things faster we are going to disable a few settings.

1. Right mouse click on My Computer. Left mouse click on Properties. Click on Advanced. We want to change a few settings in your startup and recovery. Basicly I like to disable the memory dump section by selecting none in the drop down box for "write debugging information." Unless you are going to send this report to Microsoft you really don't need it.

We found within the DLL file that was the first item in our system halt screen had the following data in it.

Only a small group of numbers found in asHBsVeDV.dll file.

Renamed the file asHBsVeDV.dll but we checked to see if it was a system file for windows and wasn't.

After renaming the file we run MSCONFIG.EXE from the start run line.

Selected startup and edited the startup applications.

HKCMD
AVGTRAY
DUMPREP0-K
Googleupdate
MLB.TV NEXVEF

This is the second time I found the MLB application cause an issue. About last year this system had a similar issue and I renamed the DLL. The same DLL was reinstalled.

The Issues with this computer so far that we found.

1. Found delivery package for a known trojan.

2. Found a file associated with the MLB website.

Now for all you baseball fans. This MLB fan has had the same issue related to this application that allows video stream of live ball games. The hook during start seems to not work very well and the plug-in that is discribed as an Media Player plug-in for a torrent style video stream should not be loading at start. In my opinion it should only load when media player is started.

Last year this application had an associated exe file that AVG version 9 detected as a Trojan horse SHeur3.PWC . This year the DLL doesn't seem to be showing as a virus and I haven't located the new exe file associated with this dynamic link library. (DLL)

Notes from last year MLB install.
The Keylogger installed in the following folders with the following files.
WINDOWS\system32\asHBsVedV.dll
WINDOWS\system32\aqnatefi4.exe

HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\WINDOWS\AppInit_Dlls
Locate the asHBsVeDV.dll

AppInit_DLLs

MLB.TV NexDef Plug-in

From the MLB FAQ: "First, disable any Ad Blocking features or plug-ins that you may have enabled in your browser or security programs. If you are using Firefox, disable the following plug-ins if you are using them: AdBlock Plus, FlashBlock, and NoScript."

Conclusion: The MLB.TV application ties to Media player with an application Swarmcast Autobahn. This hook attempts to install during startup. The hook DLL seemed to cause the system to crash. Typically video codec or in this case a modified torrent application was crashing on startup . Bonjour services were also running but we do not know at this time in our testing if the two services required each other or if they actually caused a confict.

The renaming of the DLL file and the removal of the Registry entry now allows the system to boot normally and function as of this time. Testing will be conducted to see if the modification has interfered with our video MLB game play time.

Nice technology by the way, having a torrent stream really helps those slower DSL users. Not to mention the dial up users.

If you are an MLB Media Player user and have issues with Blue Screens System Halts we would like to hear your comments. This article is designed to help people fix what could be an issue with third party applications. The Fault Stop error according to Microsoft is related mostly to your hard drive. We have replaced this hard drive the first time we saw this error. Now it is clear that the Microsoft article is not related to this issue but the Stop Error is the same.

So next time you visit MLB Media Center and get a blue screen come on back and post your experience.

BSOD 0x0000007B, in this post I'm sharing with you a blue screen message that actually produced several different types of messages. It was caused by a application needed to run MLB software. Matt's computer seemed to get this issue every year when subscribing to the service. Not sure if it's a specific issue with the Dell Optiplex and Win XP. 2 years the same thing, this year (2012) we are running Vista and will check back if anything happens. But the BSOD was related to a couple of things.