Windows 7: BSOD F4 Wininit.exe Driver_Fault

bulletng · 28 Nov 2012

I'm working on a co-workers computer oversea's via remote since I don't have physical access to it. The computer is partially brand new (the monitor was broken in flight). The user hasn't used the computer that often but she says that it shuts down randomly.

After remoting in I viewed the Event Viewer and the only thing I noticed was several Kernal_Power logs and one BugCheck (F4). I've tried some basic things I can do via remote such as SFC, AV scan, and update. I'm not exactly sure what else to do since it's really difficult not having physical access to the machine. I need to get this computer fixed rather quickly too.

Code:

*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

CRITICAL_OBJECT_TERMINATION (f4)
A process or thread crucial to system operation has unexpectedly exited or been
terminated.
Several processes and threads are necessary for the operation of the
system; when they are terminated (for any reason), the system can no
longer function.
Arguments:
Arg1: 0000000000000003, Process
Arg2: fffffa8009257b30, Terminating object
Arg3: fffffa8009257e10, Process image file name
Arg4: fffff800031ce460, Explanatory message (ascii)

Debugging Details:
------------------

----- ETW minidump data unavailable-----
TRIAGER: Could not open triage file : c:\Program Files\Windows Kits\8.0\Debuggers\x86\triage\modclass.ini, error 2

PROCESS_OBJECT: fffffa8009257b30

IMAGE_NAME:  wininit.exe

DEBUG_FLR_IMAGE_TIMESTAMP:  0

MODULE_NAME: wininit

FAULTING_MODULE: 0000000000000000 

PROCESS_NAME:  wininit.exe

EXCEPTION_CODE: (Win32) 0x5 (5) - Access is denied.

BUGCHECK_STR:  0xF4_5

CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  WIN7_DRIVER_FAULT

CURRENT_IRQL:  0

STACK_TEXT:  
fffff880`0425b9c8 fffff800`03256822 : 00000000`000000f4 00000000`00000003 fffffa80`09257b30 fffffa80`09257e10 : nt!KeBugCheckEx
fffff880`0425b9d0 fffff800`03202e0b : 00000000`00000001 fffffa80`080b6650 fffffa80`09257b30 fffff880`0425bae0 : nt!PspCatchCriticalBreak+0x92
fffff880`0425ba10 fffff800`03181f04 : 00000000`00000001 00000000`00000001 fffffa80`09257b30 0000007f`00000000 : nt! ?? ::NNGAKEGL::`string'+0x176e6
fffff880`0425ba60 fffff800`02ece253 : 00000000`00000008 00000000`00000005 fffffa80`080b6650 00000000`00635d98 : nt!NtTerminateProcess+0xf4
fffff880`0425bae0 00000000`77bb15da : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSystemServiceCopyEnd+0x13
00000000`001ffb98 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x77bb15da


STACK_COMMAND:  kb

FOLLOWUP_NAME:  MachineOwner

FAILURE_BUCKET_ID:  X64_0xF4_5_IMAGE_wininit.exe

BUCKET_ID:  X64_0xF4_5_IMAGE_wininit.exe

Followup: MachineOwner
---------

Everything is in the attachment.

Arc · 28 Nov 2012

Hello bulletng.

Stop 0xF4 is basically a storage related bugcheck, and you need to do some disc checks.

Update your SSD's Firmware (skip it, if it is not a SSD)
Reseat the sata and power.
Run chkdsk /f/r, following the option two of the tutorial Disk Check
Seatool for dos: SeaTools | Seagate download
Burn it in a blank cd. boot from the CD, click on "Accept", wait for it to finish detecting the drives, then in the upper left corner select "Basic Tests", then select "Long Test" and let it run.

Also, uninstall AVG. Use Microsoft Security Essentials as your antivirus with windows inbuilt firewall, and free MBAM as the on demand scanner.

Download and install those, and then run full system scans with both of them, one by one. And Scan the system for possible virus infectionWith these two, too.

Get rid of intel rapid storage, assuming the disc controllers may be the fault.

Right click on "my computer" icon and click "manage" on the context menu.
It will open the "computer management" window.
Select "Device Manager" in the left pane, It will list all the existing devices up.
Expand "Disc Drives" by clicking on the triangle in front of it.
Select one item under it, right click, uninstall.
Continue the process for all items under "Disc Drives"
Now restart the computer. At restart, windows will auto configure the appropriate system driver, msahci.sys.

Let us know the results.

bulletng · 28 Nov 2012

Thanks for the quick response Arc. I do not have physical access to the computer but I will attempt to do the procedures that I can do via Remote.

One curiosity I have is why do you (an other members) suggest to uninstall AVG all the time? Not that I have a problem with uninstalling it, but I've been using this software for so long without any issues.

I will perform those as soon as I can. Thank you again.

Arc · 28 Nov 2012

AVG and McAfee ... there are some happy users, but most of them are unhappy. BSOD, network blockage ets are regular with those, and most of all, they fail to give a real protection. That is why

bulletng · 28 Nov 2012

I went ahead and performed most of those steps that I could do via remote.

Uninstall AVG and install MSE, MBAM and TDSSKiller and ran scans from all of them including Defender which found nothing. I uninstalled Intel Rapid Storage and set SFC /f/r to run the next time I restart. I will let the co-worker know to test out the laptop to see if the problem continues and report back here!

Thanks again for all your help.

Arc · 29 Nov 2012

Well done, as a remote assistance

bulletng · 11 Dec 2012

It's been a week since then and it appears to be working fine! Thank you

Arc · 11 Dec 2012

Good news that the issue is over

Windows 7: BSOD F4 Wininit.exe Driver_Fault

BSOD F4 Wininit.exe Driver_Fault problems?