Jump to content

Welcome to Geeks to Go - Register now for FREE

Geeks To Go is a helpful hub, where thousands of volunteer geeks quickly serve friendly answers and support. Check out the forums and get free advice from the experts. Register now to gain access to all of our features, it's FREE and only takes one minute. Once registered and logged in, you will be able to create topics, post replies to existing threads, give reputation to your fellow members, get your own private messenger, post status updates, manage your profile and so much more.

Create Account How it Works
Photo

browser redirect?


  • Please log in to reply

#46
soonerskies

soonerskies

    Member

  • Topic Starter
  • Member
  • PipPip
  • 74 posts
Vino's Event Viewer v01c run on Windows 2008 in English
Report run at 03/03/2013 2:23:28 PM

Note: All dates below are in the format dd/mm/yyyy

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
'Application' Log - Critical Type
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
'Application' Log - Error Type
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Log: 'Application' Date/Time: 03/03/2013 8:17:55 PM
Type: Error Category: 0
Event: 10 Source: Microsoft-Windows-WMI
Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected.

Log: 'Application' Date/Time: 03/03/2013 8:16:28 PM
Type: Error Category: 0
Event: 0 Source: SetupARService
Service cannot be started. System.NullReferenceException: Object reference not set to an instance of an object. at SetupAfterRebootService.SetupARService.OnStart(String[] args) at System.ServiceProcess.ServiceBase.ServiceQueuedMainCallback(Object state)

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
'Application' Log - Warning Type
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Log: 'Application' Date/Time: 03/03/2013 8:16:49 PM
Type: Warning Category: 6
Event: 3057 Source: Application Virtualization Client
{tid=EC0}
The Application Virtualization Client Core initialized correctly. Installed Product: Version: 4.6.1.10263 Install Path: C:\Program Files (x86)\Microsoft Application Virtualization Client Global Data Directory: C:\ProgramData\Microsoft\Application Virtualization Client\ Machine Name: GILBERT-PC Operating System: Windows 7 64-bit Service Pack 1.0 Build 7601 OSD Command:

Log: 'Application' Date/Time: 03/03/2013 8:16:47 PM
Type: Warning Category: 3
Event: 3191 Source: Application Virtualization Client
{tid=EC0}
-------------------------------------------------------- Initialized client log (C:\ProgramData\Microsoft\Application Virtualization Client\sftlog.txt)
  • 0

Advertisements


#47
RKinner

RKinner

    Malware Expert

  • Expert
  • 20,001 posts
  • MVP
I left the /c off from

sc config SetupARService start= disabled in the otl fix so it didn't take.

Copy the next line:

sc config SetupARService start= disabled

Start, All Programs, Accessories, right click on Command Prompt and Run as Administrator, Continue. Right click and Paste or Edit then Paste and the copied line should appear.
Hit Enter.

That should stop the service error:

Event: 0 Source: SetupARService
Service cannot be started. System.NullReferenceException: Object reference not set to an instance of an object. at SetupAfterRebootService.SetupARService.OnStart(String[] args) at System.ServiceProcess.ServiceBase.ServiceQueuedMainCallback(Object state)


Somehow we scared off the VSS error.

This error:

Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected.

is harmless but there is a fixit for it:

http://support.micro...b;en-US;2545227


This one:

Event: 219 Source: Microsoft-Windows-Kernel-PnP
The driver \Driver\WUDFRd failed to load for the device WpdBusEnumRoot\UMB\2&37c186b&0&STORAGE#VOLUME#_??_USBSTOR#DISK&VEN_GENERIC-&PROD_COMPACT_FLASH&REV_1.01#058F63626420&10#.


is something to do with a USB connected device. It's possible that it just means the device is not plugged in. Right click on Computer and select Manage (Continue) then Device Manager. View, Show Hidden Devices. Look in the right pane for any yellow or red marks. Right click on them and uninstall. Reboot and then go back into Device manager as before and see if any are still yellow/red.

I think you need to tell the audio to use the builtin speakers then if it still doesn't work I would visit the PC maker's website and download the latest audio driver.

We can try Driver verifier and see if it can figure out what is causing the blue screen:

First go into C:\windows\minidump and delete the old .dmp files.

Enable driver verifier
1) Open an elevated command prompt (Start, All Programs, Accessories then right click on Command Prompt and Run as Administrator. Then 2) type (with an Enter after each line).)

verifier  /standard  /all

3) Reboot your machine
4) Use machine again until it crashes or try wordpad
After the crash & reboot, go into safe mode. http://windowshelp.m...c904a11033.mspx

Disable driver verifier
1) Open an elevated command prompt
2) Type with an enter after the line:
verifier  /reset
3) Reboot your machine into regular mode.

Run Blue Screen View and post the log. Also ATTACH the .dmp file that should be in C:\Windows\Minidump\

Ron

PS You are right I should have deleted the line:

Start, All Programs, Accessories, right click on Command Prompt and Run as Administrator, Continue. Type with an Enter after each line:
  • 0

#48
soonerskies

soonerskies

    Member

  • Topic Starter
  • Member
  • PipPip
  • 74 posts
Did this … sc config SetupARService start= disabled
Replied … success

Ran FixIt

Went to Device Manager. Yes, the 4 “removable storage” devices had yellow yield ! signs … checked properties, saw something like “couldn’t start”, or something. Uninstalled all of them.

Rebooted and they all came back with the same yellow signs. Checking properties … “This device cannot start (Code 10)” In “Details” Value = “WPD FileSystem Volumne Driver” … says this for all 4 of them.

Will try to mess with speaker after the other stuff

Deleted old .dmp files
Enabled driver verifier
Rebooted

Fired off Firefox to see if it would cause a failure … total CPU utilization went to between 50-90%!
Several different processes, including firefox, malwarebytes, svchost + others consuming lots of cpu
System crashes within a minute or two.
Rebooted to safe mode w/networking
Disabled driver verifier
Rebooted to regular mode
Ran Bluescreenview
Will post results
  • 0

#49
soonerskies

soonerskies

    Member

  • Topic Starter
  • Member
  • PipPip
  • 74 posts
==================================================
Dump File : 030313-17971-01.dmp
Crash Time : 3/3/2013 10:01:58 PM
Bug Check String : PAGE_FAULT_IN_NONPAGED_AREA
Bug Check Code : 0x00000050
Parameter 1 : fffff900`c0580000
Parameter 2 : 00000000`00000001
Parameter 3 : fffff960`00022354
Parameter 4 : 00000000`00000000
Caused By Driver : ntoskrnl.exe
Caused By Address : ntoskrnl.exe+75c40
File Description : NT Kernel & System
Product Name : Microsoft® Windows® Operating System
Company : Microsoft Corporation
File Version : 6.1.7601.18044 (win7sp1_gdr.130104-1431)
Processor : x64
Crash Address : ntoskrnl.exe+75c40
Stack Address 1 :
Stack Address 2 :
Stack Address 3 :
Computer Name :
Full Path : C:\Windows\Minidump\030313-17971-01.dmp
Processors Count : 4
Major Version : 15
Minor Version : 7601
Dump File Size : 317,744
==================================================
  • 0

#50
soonerskies

soonerskies

    Member

  • Topic Starter
  • Member
  • PipPip
  • 74 posts
Ok ... tried attaching the dump file ... it said I couldn't attach that type of file ... so I changed extension from .dmp to .txt. That seemed to work .. hope that's ok.

Attached Files


  • 0

#51
RKinner

RKinner

    Malware Expert

  • Expert
  • 20,001 posts
  • MVP
It's win32k.sys again.

See if you can download and install this patch:

http://support.microsoft.com/kb/976527
  • 0

#52
soonerskies

soonerskies

    Member

  • Topic Starter
  • Member
  • PipPip
  • 74 posts
FYI ... for kicks ... started Firefox and just let it sit. CPU didn't run off like last time ... but after a few minutes, noticed it crashed, this time showing BAD_POOL_HEADER.

Started Firefox again ... clicked on a few links ... screen flashed, then system crashed ... this time with
PAGE_FAULT_IN_NONPAGED_AREA

I can do the same stuff in Chrome and it doesn't crash. ???

You think this is software or hardware ... or not sure at this point?
  • 0

#53
RKinner

RKinner

    Malware Expert

  • Expert
  • 20,001 posts
  • MVP
Smells like software. If the patch doesn't work or won't install we can try uninstalling Avast and see if it is causing the problem. The KB seems to want to blame third part a-v and firewall programs (for doing what the MS guidelines tell them to do) so it's something we can try. You can also try running Firefox in its safe mode:

http://support.mozil...using-safe-mode

Does it still crash? IF not one of the add-ons is causing it.
  • 0

#54
soonerskies

soonerskies

    Member

  • Topic Starter
  • Member
  • PipPip
  • 74 posts
They seem to try and scare you about the hotfix, saying intended for computers experiencing the exact problem described ... blah, blah. Is that just standard cya for microsoft?

Was wondering if some add-on in FF could be culpret. Should I also try uninstalling firefox and reinstalling fresh?
  • 0

#55
soonerskies

soonerskies

    Member

  • Topic Starter
  • Member
  • PipPip
  • 74 posts
Got the hotfix, tried to run ... came back with "the update is not applicable to your computer"

Thank you for hanging in here with me!
  • 0

Advertisements


#56
RKinner

RKinner

    Malware Expert

  • Expert
  • 20,001 posts
  • MVP
First try running Firefox in Safe Mode.
  • 0

#57
RKinner

RKinner

    Malware Expert

  • Expert
  • 20,001 posts
  • MVP
Also what make and model number is this? Does it have a service Tag? if so give me that too.
  • 0

#58
soonerskies

soonerskies

    Member

  • Topic Starter
  • Member
  • PipPip
  • 74 posts
Dell Inspiron 570

43MVTR1
  • 0

#59
RKinner

RKinner

    Malware Expert

  • Expert
  • 20,001 posts
  • MVP
Let's try the video driver. Dell says it's urgent so there was probably a bad bug in the old one.:

http://www.dell.com/...languageCode=en
  • 0

#60
soonerskies

soonerskies

    Member

  • Topic Starter
  • Member
  • PipPip
  • 74 posts
I updated the video driver. But still have same crash problem.

I tried Firefox in safe mode ... thought it was ok, but it too eventually crashed.

I then brought FF up in safe mode and did a "reset firefox", when FF came back, it said it was an outdated vsn, so followed link and downloaded and installed latest FF. Even with new version, it still crashed windows.

It seems I can fire off chrome and explorer and do whatever, and I have no problems. Try firefox or wordpad and .... boom!
  • 0






Similar Topics

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users

As Featured On:

Microsoft Yahoo BBC MSN PC Magazine Washington Post HP