[Canary]

Hi.

I had the blue screen of death today (although I'm afraid I failed to make a note of the error code).

I have now logged on successfully by selecting "last known good configuration", but is there anything I can do to make sure it doesn't happen again - and to find out what happened?

Thanks in advance.

Edited by Canary, 12 October 2011 - 07:31 AM.

[Advertisements]

Download BlueScreenView
No installation required.
Double click on BlueScreenView.exe file to run the program.
When scanning is done, go Edit>Select All.
Go File>Save Selected Items, and save the report as BSOD.txt.
Open BSOD.txt in Notepad, copy all content, and paste it into your next reply.

Thanks to Broni for the instructions and program




Download WhoCrashed from the link in my signature below
This program checks for any drivers which may have been causing your computer to crash....

Click on the file you just downloaded and run it.

Put a tick in Accept then click on Next
Put a tick in the Don't create a start menu folder then click Next
Put a tick in Create a Desktop Icon then click on Install and make sure there is a tick in Launch Whocrashed before clicking Finish
Click Analyze
It will want to download the Debugger and install it Say Yes
WhoCrashed will create report but you have to scroll down to see it
Copy and paste it into your next reply







http://www.resplendence.com/downloads

[rshaffer61]

Download BlueScreenView
No installation required.
Double click on BlueScreenView.exe file to run the program.
When scanning is done, go Edit>Select All.
Go File>Save Selected Items, and save the report as BSOD.txt.
Open BSOD.txt in Notepad, copy all content, and paste it into your next reply.

Thanks to Broni for the instructions and program




Download WhoCrashed from the link in my signature below
This program checks for any drivers which may have been causing your computer to crash....

Click on the file you just downloaded and run it.

Put a tick in Accept then click on Next
Put a tick in the Don't create a start menu folder then click Next
Put a tick in Create a Desktop Icon then click on Install and make sure there is a tick in Launch Whocrashed before clicking Finish
Click Analyze
It will want to download the Debugger and install it Say Yes
WhoCrashed will create report but you have to scroll down to see it
Copy and paste it into your next reply







http://www.resplendence.com/downloads

[Canary]

Hi, and thanks for your help with this.

When I ran BlueScreenView, the window came up completely blank. Therefore, it wouldn't let me click on "Save Selected Items".

Meanwhile, here's the WhoCrashed report:





System Information (local)
--------------------------------------------------------------------------------

computer name: AA-6B6419C4E72A
windows version: Windows XP Service Pack 3, 5.1, build: 2600
windows dir: C:\WINDOWS
CPU: GenuineIntel Mobile Intel® Pentium® 4 CPU 2.80GHz Intel586, level: 15
2 logical processors, active mask: 3
RAM: 536182784 total
VM: 2147352576, free: 2040954880



--------------------------------------------------------------------------------
Crash Dump Analysis
--------------------------------------------------------------------------------

Crash dump directory: C:\WINDOWS\Minidump

Crash dumps are enabled on your computer.


No valid crash dumps have been found on your computer

[rshaffer61]

Wow that didn't show e anything so lets try this.

• Please download the Event Viewer Tool by Vino Rosso VEW and save it to your Desktop:
• Double-click VEW.exe
• Under 'Select log to query', select (as appropriate):
  
  • Application
  • System
• Under 'Select type to list', select (as appropriate):
  
  • Error
  • Information
  • Warning

Then use the 'Date of events' or 'Number of events' as follows:

Either:

• Click the radio button for 'Number of events'
  Type 3 in the 1 to 20 box (or any number from 1 to 20)
  Then click the Run button.
  Notepad will open with the output log.
  
  
• Click the radio button for 'Date of events'
  In the From: boxes type today's date (presuming the crash happened today) 12 10 2011
  In the To: boxes type today's date (presuming the crash happened today) 12 10 2011
  Then click the Run button.
  Notepad will open with the output log.

Please post the Output log in your next reply

[Canary]

Thanks. Here's the log:

Vino's Event Viewer v01c run on Windows XP in English
Report run at 12/10/2011 18:53:50

Note: All dates below are in the format dd/mm/yyyy

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
'Application' Log - error Type
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Log: 'Application' Date/Time: 10/10/2011 11:43:15
Type: error Category: 0
Event: 5000 Source: MPSampleSubmission
EventType mptelemetry, P1 8024402c, P2 endsearch, P3 search, P4 3.0.8402.0, P5 mpsigdwn.dll, P6 3.0.8402.0, P7 microsoft security essentials (edb4fa23-53b8-4afa-8c5d-99752cca7094), P8 NIL, P9 NIL, P10 NIL.

Log: 'Application' Date/Time: 20/09/2011 21:30:41
Type: error Category: 0
Event: 1001 Source: Application Hang
Fault bucket 734037209.

Log: 'Application' Date/Time: 20/09/2011 21:30:37
Type: error Category: 101
Event: 1002 Source: Application Hang
Hanging application explorer.exe, version 6.0.2900.5512, hang module hungapp, version 0.0.0.0, hang address 0x00000000.

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
'Application' Log - information Type
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Log: 'Application' Date/Time: 12/10/2011 18:38:33
Type: information Category: 0
Event: 0 Source: gupdate
The event description cannot be found.

Log: 'Application' Date/Time: 12/10/2011 18:38:31
Type: information Category: 0
Event: 0 Source: gupdate
The event description cannot be found.

Log: 'Application' Date/Time: 12/10/2011 17:07:33
Type: information Category: 0
Event: 11707 Source: MsiInstaller
Product: Debugging Tools for Windows (x86) -- Installation completed successfully.

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
'Application' Log - warning Type
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Log: 'Application' Date/Time: 20/09/2011 21:10:31
Type: warning Category: 52
Event: 4356 Source: EventSystem
The COM+ Event System failed to create an instance of the subscriber partition:{41E90F3E-56C1-4633-81C3-6E8BAC8BDD70}!new:{58FC39EB-9DBD-4EA7-B7B4-9404CC6ACFAB}. CoGetObject returned HRESULT 8000401A.

Log: 'Application' Date/Time: 18/09/2011 13:09:52
Type: warning Category: 52
Event: 4356 Source: EventSystem
The COM+ Event System failed to create an instance of the subscriber partition:{41E90F3E-56C1-4633-81C3-6E8BAC8BDD70}!new:{58FC39EB-9DBD-4EA7-B7B4-9404CC6ACFAB}. CoGetObject returned HRESULT 8000401A.

Log: 'Application' Date/Time: 14/09/2011 09:49:14
Type: warning Category: 0
Event: 1001 Source: MsiInstaller
Detection of product '{90280409-6000-11D3-8CFE-0050048383C9}', feature 'EXCELFiles' failed during request for component '{5572D282-F5E5-11D3-A8E8-0060083FD8D3}'

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
'System' Log - error Type
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Log: 'System' Date/Time: 12/10/2011 14:19:48
Type: error Category: 0
Event: 7000 Source: Service Control Manager
The General Purpose USB Driver (adildr.sys) service failed to start due to the following error: The system cannot find the file specified.

Log: 'System' Date/Time: 12/10/2011 13:45:05
Type: error Category: 0
Event: 7034 Source: Service Control Manager
The Microsoft Antimalware Service service terminated unexpectedly. It has done this 3 time(s).

Log: 'System' Date/Time: 12/10/2011 13:43:09
Type: error Category: 0
Event: 7031 Source: Service Control Manager
The Microsoft Antimalware Service service terminated unexpectedly. It has done this 2 time(s). The following corrective action will be taken in 15000 milliseconds: Restart the service.

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
'System' Log - information Type
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Log: 'System' Date/Time: 12/10/2011 18:38:33
Type: information Category: 0
Event: 7036 Source: Service Control Manager
The Google Update Service (gupdate) service entered the stopped state.

Log: 'System' Date/Time: 12/10/2011 18:38:31
Type: information Category: 0
Event: 7036 Source: Service Control Manager
The Google Update Service (gupdate) service entered the running state.

Log: 'System' Date/Time: 12/10/2011 18:38:31
Type: information Category: 0
Event: 7035 Source: Service Control Manager
The Google Update Service (gupdate) service was successfully sent a start control.

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
'System' Log - warning Type
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Log: 'System' Date/Time: 11/10/2011 11:09:24
Type: warning Category: 0
Event: 4 Source: bcm4sbxp
Broadcom 440x 10/100 Integrated Controller: The network link is down. Check to make sure the network cable is properly connected.

Log: 'System' Date/Time: 10/10/2011 20:40:47
Type: warning Category: 0
Event: 4 Source: bcm4sbxp
Broadcom 440x 10/100 Integrated Controller: The network link is down. Check to make sure the network cable is properly connected.

Log: 'System' Date/Time: 23/09/2011 15:50:26
Type: warning Category: 0
Event: 4 Source: bcm4sbxp
Broadcom 440x 10/100 Integrated Controller: The network link is down. Check to make sure the network cable is properly connected.

[rshaffer61]

OK to make it easier this is the main ones I see from this month.

Log: 'System' Date/Time: 11/10/2011 11:09:24
Type: warning Category: 0
Event: 4 Source: bcm4sbxp
Broadcom 440x 10/100 Integrated Controller: The network link is down. Check to make sure the network cable is properly connected.

Nic card failed

Log: 'System' Date/Time: 12/10/2011 18:38:33
Type: information Category: 0
Event: 7036 Source: Service Control Manager
The Google Update Service (gupdate) service entered the stopped state.

Google updater failed probably due to the nic card

Log: 'System' Date/Time: 12/10/2011 14:19:48
Type: error Category: 0
Event: 7000 Source: Service Control Manager
The General Purpose USB Driver (adildr.sys) service failed to start due to the following error: The system cannot find the file specified.

Log: 'System' Date/Time: 12/10/2011 13:45:05
Type: error Category: 0
Event: 7034 Source: Service Control Manager
The Microsoft Antimalware Service service terminated unexpectedly. It has done this 3 time(s).

Log: 'System' Date/Time: 12/10/2011 13:43:09
Type: error Category: 0
Event: 7031 Source: Service Control Manager
The Microsoft Antimalware Service service terminated unexpectedly. It has done this 2 time(s). The following corrective action will be taken in 15000 milliseconds: Restart the service.

USB failed once and your MS malware protection failed twice.


Now lets start checking stuff.
First please do the following.

Go to

Start and then to Run
Type in Chkdsk /r Note the space between k and /
Click Enter ...It will probably ask if you want to do this on the next reboot...click Y
If the window doesn't shutdown on its own then reboot the system manually. On reboot the system will start the chkdsk operation
This one will take longer then chkdsk /f

Note... there are 5 stages...
It may appear to hang at a certain percent for a hour or more or even back up and go over the same area...this is normal...
DO NOT SHUT YOUR COMPUTER DOWN WHILE CHKDSK IS RUNNING OR YOU CAN HAVE SEVERE PROBLEMS
This can take several hours to complete.
When completed it will boot the system back into windows.

Reboot after your done running chkdsk /r...
then Go to Start...Run and type: eventvwr.msc press Enter
When Event Viewer opens, click on Applications... then scroll down to Winlogon and double-click on it. This is the log created after running Checkdisk...copy and paste the log back here


We will advise after studying the log.

[Canary]

Hi - the Chkdsk seemed to run OK, but finding the correct information in Event Viewer wasn't so straightforward.

But I think this is the info you asked for.

Thanks.


Checking file system on C:
The type of the file system is NTFS.

A disk check has been scheduled.
Windows will now check the disk.
Cleaning up minor inconsistencies on the drive.
Cleaning up 98 unused index entries from index $SII of file 0x9.
Cleaning up 98 unused index entries from index $SDH of file 0x9.
Cleaning up 98 unused security descriptors.
CHKDSK is verifying Usn Journal...
Usn Journal verification completed.
CHKDSK is verifying file data (stage 4 of 5)...
File data verification completed.
CHKDSK is verifying free space (stage 5 of 5)...
Free space verification is complete.

39062015 KB total disk space.
38579620 KB in 69590 files.
27144 KB in 9703 indexes.
0 KB in bad sectors.
171275 KB in use by the system.
65536 KB occupied by the log file.
283976 KB available on disk.

4096 bytes in each allocation unit.
9765503 total allocation units on disk.
70994 allocation units available on disk.

Internal Info:
80 6c 01 00 c9 35 01 00 d1 cc 01 00 00 00 00 00 .l...5..........
37 18 00 00 02 00 00 00 46 04 00 00 00 00 00 00 7.......F.......
48 db 71 06 00 00 00 00 ce fc fb 51 00 00 00 00 H.q........Q....
3e 5d 73 0f 00 00 00 00 a4 b6 02 70 05 00 00 00 >]s........p....
e6 f3 b4 1b 00 00 00 00 e8 00 79 fc 05 00 00 00 ..........y.....
30 77 57 a6 00 00 00 00 98 38 07 00 d6 0f 01 00 0wW......8......
00 00 00 00 00 90 b6 32 09 00 00 00 e7 25 00 00 .......2.....%..

Windows has finished checking your disk.
Please wait while your computer restarts.

[rshaffer61]

Please Go to

1: START and the click on RUN
2: Type in devmgmt.msc
3: Click Enter


To do a screenshot please have click on your Print Screen on your keyboard. It is normally the key above your number pad between the F12 key and the Scroll Lock key
Now go to Start and then to All Programs
Scroll to Accessories and then click on Paint
In the Empty White Area click and hold the CTRL key and then click the V
Go to the File option at the top and click on Save as
Save as file type JPEG and save it to your Desktop


Attach it to your next reply





Go Start and then to Run ("Start Search" in Vista),
Type in: sfc /scannow
Click OK (Enter in Vista).
Have Windows CD/DVD handy.
If System File Checker (sfc) finds any errors, it may ask you for the CD/DVD.
If sfc does not find any errors in Windows XP, it will simply quit, without any message.
In Vista you will receive the following message: "Windows resource protection did not find any integrity violations".

For Vista users ONLY: Navigate to C:\Windows\Logs\CBS folder. You'll see CBS.log file.
Usually, it's pretty big file, so upload it to Flyupload, and post download link.


If you don't have Windows CD....
This applies mostly to Windows XP, since Vista rarely requires use of its DVD while running "sfc"
Note This method will not necessarily work as well, as when using Windows CD, because not always ALL system files are backed up on your hard drive. Also, backed up files may be corrupted as well.

Go Start and then Run
type in regedit and click OK


Navigate to the following key:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Setup

You will see various entries Values on the right hand side.

The one we want is called: SourcePath

It probably has an entry pointing to your CD-ROM drive, usually D and that is why it is asking for the XP CD.
All we need to do is change it to: C:
Now, double click the SourcePatch setting and a new box will pop up.
Change the drive letter from your CD drive to your root drive, usually C:
Close Registry Editor.

Now restart your computer and try sfc /scannow again!


Thanks to Broni for the instructions

[Canary]

Hi - when I post the screenshot of Device Manager, do you want me to expand all the individual categories first, or is it just the main list that you want to see?

[rshaffer61]

Just the main list

[Canary]

Here's the screenshot (attached).

Nothing came up in the System File Checker scan.

Thanks again.

Attached Thumbnails

• 

[rshaffer61]

OK that all looks good but does not disqualify the possibility that a driver may be the culprit. Next I would like you to check your drivers by using DriverMax to make sure every driver it checks is up to date. If not it will give you a list of all drivers that need updating a a link to get them for free. I use this program myself and it is free to use. The only limitation is you can only update two drivers a day with the free version. Before updating any please supply a link to the results page so I can advise you on which drivers to get in what order of importance.

Download DriverMax and have it scan your system. It will open their website with all the out of date drivers you can update. With the free version you can update only 2 drivers per day so if you have a lot of them it will take a few days to get everything updated. I have been using it for about 4 months now and like it better then any other utility out there for keeping my drivers up to date.

[Canary]

Hi - is this the info you need?

Thanks.



My link

Edited by rshaffer61, 13 October 2011 - 02:25 PM.
Corrected link

[rshaffer61]

Good job and yep that is it.
Now the first driver I would suggest is your Network Adapter since that is one of the main errors I see in your Event log.

After the above one then I suggest the Display Adapter

The next set I would go with is the Universal Serial Bus Controller.
There are 4 there so it's going to take a couple of days to get them all downloaded and installed.

From there we will look at the next set to start with.

[Canary]

I've updated the Network Adapter, but now I keep getting an update saying my computer-disc space is critically low. Is there some way I can uninstall the old driver? And would that help?

Also, the updating of the Display Adapter keeps stopping - it says it has found too many problems to continue. Is that also related to a space issue, do you think?

Thanks.