Log Name:      System
Source:        Service Control Manager
Date:          3/27/2015 9:37:41 AM
Event ID:      7034
Task Category: None
Level:         Error
Keywords:      Classic
User:          N/A
Computer:      ASUS
Description:
The Service KMSELDI service terminated unexpectedly.  It has done this 1 time(s).
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="49152">7034</EventID>
    <Version>0</Version>
    <Level>2</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2015-03-27T01:37:41.947591500Z" />
    <EventRecordID>11207</EventRecordID>
    <Correlation />
    <Execution ProcessID="768" ThreadID="4404" />
    <Channel>System</Channel>
    <Computer>ASUS</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1">Service KMSELDI</Data>
    <Data Name="param2">1</Data>
    <Binary>530065007200760069006300650020004B004D00530045004C00440049000000</Binary>
  </EventData>
</Event>

  We do need the actual log files (called a DMP files) as they contain the only record of the sequence of events leading up to the crash, what drivers were loaded, and what was responsible.  

Please follow our instructions for finding and uploading the files we need to help you fix your computer. They can be found here If you have any questions about the procedure please ask

Hello ChangYunJun,

What is your current situation?

Please upload the dump file as MVP Zigzag mentioned.

Best regards,
Fangzhou CHEN

Log Name:      System
Source:        Service Control Manager
Date:          3/27/2015 9:37:41 AM
Event ID:      7034
Task Category: None
Level:         Error
Keywords:      Classic
User:          N/A
Computer:      ASUS
Description:
The Service KMSELDI service terminated unexpectedly.  It has done this 1 time(s).
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="49152">7034</EventID>
    <Version>0</Version>
    <Level>2</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2015-03-27T01:37:41.947591500Z" />
    <EventRecordID>11207</EventRecordID>
    <Correlation />
    <Execution ProcessID="768" ThreadID="4404" />
    <Channel>System</Channel>
    <Computer>ASUS</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1">Service KMSELDI</Data>
    <Data Name="param2">1</Data>
    <Binary>530065007200760069006300650020004B004D00530045004C00440049000000</Binary>
  </EventData>
</Event>

Note: All previous suggestions still apply!

The executable Service_KMS.exe has been detected as malware by 14 anti-virus scanners. It runs as a  separate (within the context of its own process) windows Service named Service KMSELDI. - Read more at : http://www.herdprotect.com/service_kms.exe-0b875e3a101d2b73bfaaddd9cc37c51386775d51.aspx

Note: Link above is for information purposes only!

First, run ESET Online Scanner.

http://www.eset.com/us/online-scanner/

Remove all found items.

Next,

Download, install update and run a complete scan with Malwarebytes (free version).

Malwarebytes.

https://www.malwarebytes.org/antimalware/

Note:

decline, the "free trial" offer, just prior to launching Malwarebytes, if you are inclined to do so, but remember, accepting the offer, lauches the program in full mode and that includes real-time monitoring that may cause a conflict, if you already have another AV Product installed.

Remove any and all found objects, reboot and repeat, until there are no fyrther detections.

You may also, want to run ADWCleaner, for good measure.

ADWCleaner.

http://www.bleepingcomputer.com/download/adwcleaner/

Let us know if anything was found.

• Edited by XP ROCKS 19 hours 5 minutes ago