[Goodhiver]

As the title says, I have been getting lately way too many Bluescreens for it to be either normal or bareable. In the last three days, it has happened six times.

It happens randomly; if I am playing videogames, watching videos, streaming music or doing nothing at all does not seem to matter. I've been looking around for solutions and got myself BlueScreenView, with which I went through the six crashes.

I've attached only the last one, but all six have pretty much the same in common. ntoskrnl.exe and tcpip.sys seem to be the two problems - once more, I tried finding the solution for myself and it seems as if I cannot delete or modify either, due to them being core to the Windows OS.

I do not know if it helps or not, but pretty much every Bluescreen says something along the lines of *Stop* 0x0000003b (parameter 1, parameter 2, parameter 3, parameter 4) and on a second line underneath tcpip.sys 

 

 

Thanks for any help!

[Advertisements]

Hello Goodhiver, first lets take a look at your hard drive to see if there is something wrong. Download, install and run GSMARTControl. It should show a little icon of a hard drive in the window that opens. Doubleclick on the icon, then click on the attributes tab at the top. It will show a table. On the bottom right there is a button that says View Output, click it and then post the results here.

[Trevorever]

Hello Goodhiver, first lets take a look at your hard drive to see if there is something wrong. Download, install and run GSMARTControl. It should show a little icon of a hard drive in the window that opens. Doubleclick on the icon, then click on the attributes tab at the top. It will show a table. On the bottom right there is a button that says View Output, click it and then post the results here.

[Goodhiver]

Hey!

 

Thanks for the quick help, Trevorever. I downloaded the program and got the output - I hope I did it right, as I hadn't to click anywhere else to get the 'View Output' once the table was open.

 

I have attached the Output as an image as well since the text form is not formatted nicely.

Attached Thumbnails

• 

Attached Files

•  WDC_WD10EARS-22Y5B1__No_Information_Found__2014-04-17.txt   4.06KB   155 downloads

[Trevorever]

The log shows that there is a sector that the hard drive is having a hard time reading (current pending sector) This can be a sign of a failing hard drive (soon there will be more sectors it can't read from, or there could just be one bad sector and it will eventually reallocate it and continue on.  If you do not have a backup, I recommend that back up all your data now, and if you decide to continue to use this hard drive, to make sure you schedule a backup to run daily.

 

It could be that the files it is trying to read or in this sector or are in some way associated with it. After you backup your data, you can try to run CHKDSK to get windows to move stuff out of the bad sector.

 

Go to My Computer and right click Local Disk (C:) and select properties. Go to the Tools tab and click the Check now  button make sure both the Automatically... and Scan... check boxes are checked. You will have to restart you computer before it will start checking the drive. When you are done rebooting Click on the start menu and type Event Viewer. Open Event Viewer, expand Windows Logs  and click on Applications. Doubleclick the entry in the table that has wininit in the Source column. Click Copy  in the bottom right corner and paste it here.

[Goodhiver]

 

German incoming!

 

Protokollname: Application

Quelle:        Microsoft-Windows-Wininit

Datum:         18.04.2014 02:11:53

Ereignis-ID:   1001

Aufgabenkategorie:Keine

Ebene:         Informationen

Schlüsselwörter:Klassisch

Benutzer:      Nicht zutreffend

Computer:      Besitzer-PC

Beschreibung:

 

 

Dateisystem auf C: wird überprüft.

Der Typ des Dateisystems ist NTFS.

Die Volumebezeichnung lautet Packard Bell.

 

Eine Datenträgerüberprüfung ist geplant.

Die Datenträgerüberprüfung wird jetzt ausgeführt.        

 

CHKDSK überprüft Dateien (Phase 1 von 5)...

Instanzkennung für Datei 0x1e35d wird aufgeräumt.

Instanzkennung für Datei 0x1e35f wird aufgeräumt.

  532992 Datensätze verarbeitet.                                         

 

Dateiüberprüfung beendet.

  2163 große Datensätze verarbeitet.                                   

 

  0 ungültige Datensätze verarbeitet.                               

 

  0 E/A-Datensätze verarbeitet.                                     

 

  105 Analysedatensätze verarbeitet.                                  

 

CHKDSK überprüft Indizes (Phase 2 von 5)...

  648518 Indexeinträge verarbeitet.                                      

 

Indexüberprüfung beendet.

  0 nicht indizierte Dateien überprüft.                             

 

  0 nicht indizierte Dateien wiederhergestellt.                     

 

CHKDSK überprüft Sicherheitsbeschreibungen (Phase 3 von 5)...

  532992 SDs/SIDs verarbeitet.                                           

 

CHKDSK komprimiert den Datenstrom für die Sicherheitsbeschreibung

4093 nicht verwendete Sicherheitsbeschreibungen werden aufgeräumt.

  57764 Datendateien verarbeitet.                                       

 

CHKDSK überprüft USN-Journal...

  34769032 USN-Bytes verarbeitet.                                          

 

Die Überprüfung von USN-Journal ist abgeschlossen.

CHKDSK überprüft Dateidaten (Phase 4 von 5)...

  532976 Dateien wurden verarbeitet.                                     

 

Dateidatenüberprüfung beendet.

CHKDSK überprüft freien Speicherplatz (Phase 5 von 5)...

  30651021 freie Cluster verarbeitet.                                      

 

Verifizierung freien Speicherplatzes ist beendet.

1 fehlerhafte Cluster werden zur Datei der fehlerhaften Cluster hinzugefügt.

CHKDSK hat freien Speicher gefunden, der in der MFT-Bitmap (Master

File Table) als zugeordnet gekennzeichnet ist.

Fehler in Volumebitmap werden berichtigt.

Windows hat Probleme im Dateisystem behoben.

 

 475478015 KB Speicherplatz auf dem Datenträger insgesamt

 351989240 KB in 448149 Dateien

    235644 KB in 57767 Indizes

         4 KB in fehlerhaften Sektoren

    649043 KB vom System benutzt

     65536 KB von der Protokolldatei belegt

 122604084 KB auf dem Datenträger verfügbar

 

      4096 Bytes in jeder Zuordnungseinheit

 118869503 Zuordnungseinheiten auf dem Datenträger insgesamt

  30651021 Zuordnungseinheiten auf dem Datenträger verfügbar

 

Interne Informationen:

00 22 08 00 46 b8 07 00 62 ac 0d 00 00 00 00 00  ."..F...b.......

c0 0c 00 00 69 00 00 00 00 00 00 00 00 00 00 00  ....i...........

00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................

 

Die Überprüfung des Datenträgers wurde abgeschlossen.

Bitte warten Sie bis der Computer neu gestartet wurde.

 

Ereignis-XML:

<Event xmlns="http://schemas.micro.../events/event">

  <System>

    <Provider Name="Microsoft-Windows-Wininit" Guid="{206f6dea-d3c5-4d10-bc72-989f03c8b84b}" EventSourceName="Wininit" />

    <EventID Qualifiers="16384">1001</EventID>

    <Version>0</Version>

    <Level>4</Level>

    <Task>0</Task>

    <Opcode>0</Opcode>

    <Keywords>0x80000000000000</Keywords>

    <TimeCreated SystemTime="2014-04-18T00:11:53.000000000Z" />

    <EventRecordID>1689669</EventRecordID>

    <Correlation />

    <Execution ProcessID="0" ThreadID="0" />

    <Channel>Application</Channel>

    <Computer>Besitzer-PC</Computer>

    <Security />

  </System>

  <EventData>

    <Data>

 

Dateisystem auf C: wird überprüft.

Der Typ des Dateisystems ist NTFS.

Die Volumebezeichnung lautet Packard Bell.

 

Eine Datenträgerüberprüfung ist geplant.

Die Datenträgerüberprüfung wird jetzt ausgeführt.        

 

CHKDSK überprüft Dateien (Phase 1 von 5)...

Instanzkennung für Datei 0x1e35d wird aufgeräumt.

Instanzkennung für Datei 0x1e35f wird aufgeräumt.

  532992 Datensätze verarbeitet.                                         

 

Dateiüberprüfung beendet.

  2163 große Datensätze verarbeitet.                                   

 

  0 ungültige Datensätze verarbeitet.                               

 

  0 E/A-Datensätze verarbeitet.                                     

 

  105 Analysedatensätze verarbeitet.                                  

 

CHKDSK überprüft Indizes (Phase 2 von 5)...

  648518 Indexeinträge verarbeitet.                                      

 

Indexüberprüfung beendet.

  0 nicht indizierte Dateien überprüft.                             

 

  0 nicht indizierte Dateien wiederhergestellt.                     

 

CHKDSK überprüft Sicherheitsbeschreibungen (Phase 3 von 5)...

  532992 SDs/SIDs verarbeitet.                                           

 

CHKDSK komprimiert den Datenstrom für die Sicherheitsbeschreibung

4093 nicht verwendete Sicherheitsbeschreibungen werden aufgeräumt.

  57764 Datendateien verarbeitet.                                       

 

CHKDSK überprüft USN-Journal...

  34769032 USN-Bytes verarbeitet.                                          

 

Die Überprüfung von USN-Journal ist abgeschlossen.

CHKDSK überprüft Dateidaten (Phase 4 von 5)...

  532976 Dateien wurden verarbeitet.                                     

 

Dateidatenüberprüfung beendet.

CHKDSK überprüft freien Speicherplatz (Phase 5 von 5)...

  30651021 freie Cluster verarbeitet.                                      

 

Verifizierung freien Speicherplatzes ist beendet.

1 fehlerhafte Cluster werden zur Datei der fehlerhaften Cluster hinzugefügt.

CHKDSK hat freien Speicher gefunden, der in der MFT-Bitmap (Master

File Table) als zugeordnet gekennzeichnet ist.

Fehler in Volumebitmap werden berichtigt.

Windows hat Probleme im Dateisystem behoben.

 

 475478015 KB Speicherplatz auf dem Datenträger insgesamt

 351989240 KB in 448149 Dateien

    235644 KB in 57767 Indizes

         4 KB in fehlerhaften Sektoren

    649043 KB vom System benutzt

     65536 KB von der Protokolldatei belegt

 122604084 KB auf dem Datenträger verfügbar

 

      4096 Bytes in jeder Zuordnungseinheit

 118869503 Zuordnungseinheiten auf dem Datenträger insgesamt

  30651021 Zuordnungseinheiten auf dem Datenträger verfügbar

 

Interne Informationen:

00 22 08 00 46 b8 07 00 62 ac 0d 00 00 00 00 00  ."..F...b.......

c0 0c 00 00 69 00 00 00 00 00 00 00 00 00 00 00  ....i...........

00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................

 

Die Überprüfung des Datenträgers wurde abgeschlossen.

Bitte warten Sie bis der Computer neu gestartet wurde.

</Data>

  </EventData>

</Event>

 

Well.. yeah. I did not expected to be confronted by a language barrier. I kind of do not undersand properly what exactly is going on there, but I can translate something along the lines of there being one erroneous cluster found, which was then repaired. Also, there are 4kb of 'corrupt' data left.

I can also say that I have not gotten a Bluescreen this whole day so far, but had let the computer do its work while sleeping, as it seemed to take too long, and woke up somewhen in the middle of the night to a bluescreen.

If that does not work. Would a simple formatting of my OS get rid of this annoyance? 

[Trevorever]

Yes, it probably would get rid the issue, but we also want to make sure that it doesn't use that sector anymore. Ideally the hard drive itself would move it from current pending sector to reallocated sectors. Run gsmartcontrol again to check if it has done that now that chkdsk has tried to read it.

If it hasn't, usually writing zeros to the whole hard drive helps it do it. But you can also just run chkdsk after you reinstall so windows knows not to use it.

Before you reinstall, you can try to fix Windows corrupted files. Go to start menu, type cmd right click and click run as administrator. In the command prompt, type sfc /scannow

[Goodhiver]

Gsmartcontrol seems to be showing the same error it used to. I can upload it if needed, but pretty much nothing has changed.

 

I let the sfc /scannow command run and it seems to have found corrupt data. Shall I try to run Gsmartcontrol once more to check whether it has been corrected once I restart the computer or not?

[Trevorever]

It wouldn't hurt to check, but the hard drive probably still hasnt moved it. Did sfc repair the corruption? If it did, run it again to see if it finds any more corruption, then run chkdsk again to see if it still finds file system issues it can't repair.

[Goodhiver]

I have not yet re-started the computer, but roughly put it says that it has both found and repaired the corruption. I will give more input once I'm available to restart. Thank you for the whole help so far!

 

Edit: I was out yesterday and just turned on the computer today again. sfc /scannow does not find any errors anymore.

 

 

 

 

Edit 2: I decided to go in with a full sweep of my HDD, as I've been clogging it due to misuse of it in many years.

 

There is a new problem now, though. I do not know whether I should make a new Thread or not -

 

 

For internet, I usually use a Level One WUA-161 USB Adapter ( http://uk.level1.com...1610/p-2827.htm )

 

I have not the CD anymore, as I've got it from a friend and he kept the case (With the Driver-CD) and I can not reach him anytime soon. I've downloaded the Driver from their Homepage, but every time I try to install it I get an error (Attached to the post.)

 

I have already downloaded 2005, 2010 and 2013 Microsoft Visual C++ Runtime and .Net Framework. I also have made sure that .Net Framework is up and running in the options.

 

 

If I have to make a new Thread, I will - please tell me!

Attached Thumbnails

• 

Edited by Goodhiver, 19 April 2014 - 02:14 PM.

[jcgriff2]

Hi -

 

Chkdsk reported 4kb of bad sectors.  Whenever bad sectors >0, I recommend HDD replacement.

475478015 KB disk space in total 
  351989240 KB in 448149 files 
     235644 KB in 57767 indexes 
          4 KB in bad sectors 
     Used by the system 649 043 KB 
      65536 KB occupied by the log file 
  122604084 KB available on disk

For info, the BSOD info from post #1 -

 

Bugcheck 0x3b = system service threw an exception; the exception error code is located in Parm 1 (not listed in your post).

 

ntoskrnl.exe = Windows NT Kernel

 

tcpip.sys = Windows networking related driver

 

Regards. . .

 

jcgriff2

[Goodhiver]

In some way formatting did not helped to solve that problem? I cannot afford a HDD right now

 

I have solved my other problem. The download directory was the culprit.

[jcgriff2]

Keep an eye on that drive!

 

Run chkdsk /f /r from time to time.

[Trevorever]

I agree, make sure you keep a current backup. That hard drive might cause you more issues in the future.

[Goodhiver]

One of the first things I made was a backup with the essentials in case anything else may happen. If I run chkdsk once every, say, two weeks, should it be enough? Or shall I do it more often?

 

 

Thanks a lot for all the help! 

[jcgriff2]

The drive is failing.

 

Running chkdsk will only serve to prolong the inevitable replacement.

 

Every 2 weeks should be fine - keep an eye on the "fehlerhaften Sektoren" number specifically.

 

Regards. . .

 

jcgriff2