I have been experiencing multiple BSOD for about 2 weeks now. It has occurred during various different times, including upon opening internet pages, after prolonged non-use, and just for the heck of it, or so it seems. I don't think I had downloaded any new drivers. I am not totally computer savvy, but can follow directions pretty well and would appreciate any help. I think I was able to download the last dump from the BSOD correctly.
Welcome
Please upload your msinfo32.nfo file. To get this: Start Menu -> Type msinfo32 into the Search programs and files box -> When it opens, go to File, Save -> Save as msinfo32.nfo and save in a place you will remember -> Let it finish the process of gathering and saving the system info -> Right click the .nfo file, click send to compressed (zipped) folder -> Upload the .zip file here.
Please upload your msinfo32.txt file. To get this: Start Menu -> Type msinfo32 into the Search programs and files box -> When it opens, go to File, Export -> Save as msinfo32.txt and save in a place you will remember -> Let it finish the process of gathering and saving the system info -> Right click the .txt file, click send to compressed (zipped) folder -> Upload the .zip file here.
McAfee is a frequent cause of BSOD-s, consider uninstalling it with the McAfee Removal Tool and replace with Microsoft Security Essentials at least to test.
- How to uninstall or reinstall supported McAfee products using the Consumer Products Removal tool (MCPR)
- McAfee Removal Tool - McAfee Uninstaller
MSE is recommended from a strict BSOD perspective, compatibility & stability compared to other antiviruses/internet security software:-
- 1. Microsoft Security Essentials - Free Antivirus for Windows
2. Malwarebytes - Free
3.Good and Free system security combination.
Do not start the free trial of Malware Bytes; remember to deselect that option when prompted.
Run a full scan with both (separately) once downloaded, installed and updated.
Run the System File Checker. It allows the user to scan for and restore corruptions in Windows system files.
- 1. Click on the
2. Type CMD on Search
3. Left click and Run as Administrator
4. Type SFC /scannow
Full tutorial here:
Run Disk Check on your hard disk for file system errors and bad sectors on it:
Free up the start-up, nothing except the antivirus is usually needed.
Make scans with the following:
-Kaspersky TDSSKiller
-ESET online scanner
OK, here are the msinfo32 items requested and the system file checker is running. I will work on the McAfee and the Microsoft Security Essentials tonight. Thank you
The system file checker found some corrupt files and said that it was unable to fix some of them. Details included in the CBS.log windir/Logs/CBS/CBS.log. How do I find this and upload here.
Check option three (3) on the tutorial
Got them, thank you :)
Post back updates on how the BSOD-s are after following all the steps.
Next:
Update the display driver to a more recent version. In case the download link I post is not compatible with your system, you can roll back drivers or make windows get the latest ones:
Method:Code:Driver c:\windows\system32\drivers\atikmpag.sys (8.14.1.6214, 302.50 KB (309,760 bytes), 7/6/2011 1:32 AM)
- Click on the Start
► Control Panel ► Programs ► Uninstall a program ► Uninstall everything related to; ATI and then restart the system.
- Delete remnants of its drivers/older drivers using Driver Fusion/Sweeper
- Tutorial: Sometimes drivers remain, not completely uninstalled.
Follow this tutorial for complete removal of drivers of the particular program> Drivers - Clean Left over Files after Uninstalling
Get the latest drivers from:
Go to this link:
Check your system for latest drivers and download and install all/any drivers it finds.
Post back results.
Here is the results from the SFC, still working on the orther suggestions
There's 5 errors there - SFC fixed 3 of them.
Please also run the CheckSUR tool, which includes other aspects of the OS and may find other problems - we can fix them all at once, then :)
Please download and save the CheckSUR tool from http://support.microsoft.com/kb/947821
(you'll need to look in the details for Method 2)
Run it - The tool can take anywhere from 5 mins to a couple of hours to run (or 'Install') depending on how much it has to do, and may exit silently - it may appear to freeze for most of that time, but be patient.
The result is logged in the C:\Windows\Logs\CBS\CheckSUR.log file - and an archive …\checksur.persist.log file
Then zip the CheckSUR.log and attach it to your reply
Just for ease of access and storage - here's teh critical part of teh report....
Code:2012-12-06 09:00:33, Info CSI 000002f9 [SR] Repairing 5 components 2012-12-06 09:00:33, Info CSI 000002fa [SR] Beginning Verify and Repair transaction 2012-12-06 09:00:34, Info CSI 000002fb [SR] Cannot repair member file [l:22{11}]"sortkey.nlp" of mscorlib, Version = 6.1.7601.17952, pA = PROCESSOR_ARCHITECTURE_AMD64 (9), Culture neutral, VersionScope neutral, PublicKeyToken = {l:8 b:b77a5c561934e089}, Type neutral, TypeName neutral, PublicKey neutral in the store, file is missing 2012-12-06 09:00:34, Info CSI 000002fc [SR] Cannot repair member file [l:24{12}]"sorttbls.nlp" of mscorlib, Version = 6.1.7601.17952, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope neutral, PublicKeyToken = {l:8 b:b77a5c561934e089}, Type neutral, TypeName neutral, PublicKey neutral in the store, file is missing 2012-12-06 09:00:35, Info CSI 000002fd [SR] Repairing corrupted file [ml:58{29},l:56{28}]"\??\C:\Windows\system32\wbem"\[l:20{10}]"lsasrv.mof" from store 2012-12-06 09:00:36, Info CSI 000002fe [SR] Cannot repair member file [l:22{11}]"sortkey.nlp" of mscorlib, Version = 6.1.7601.17952, pA = PROCESSOR_ARCHITECTURE_AMD64 (9), Culture neutral, VersionScope neutral, PublicKeyToken = {l:8 b:b77a5c561934e089}, Type neutral, TypeName neutral, PublicKey neutral in the store, file is missing 2012-12-06 09:00:36, Info CSI 000002ff [SR] This component was referenced by [l:156{78}]"Package_1_for_KB2729452~31bf3856ad364e35~amd64~~6.1.1.0.2729452-16_neutral_GDR" 2012-12-06 09:00:36, Info CSI 00000300 [SR] Repairing corrupted file [ml:520{260},l:46{23}]"\??\C:\Windows\System32"\[l:24{12}]"dciman32.dll" from store 2012-12-06 09:00:37, Info CSI 00000301 [SR] Cannot repair member file [l:24{12}]"sorttbls.nlp" of mscorlib, Version = 6.1.7601.17952, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope neutral, PublicKeyToken = {l:8 b:b77a5c561934e089}, Type neutral, TypeName neutral, PublicKey neutral in the store, file is missing 2012-12-06 09:00:37, Info CSI 00000302 [SR] This component was referenced by [l:156{78}]"Package_3_for_KB2729452~31bf3856ad364e35~amd64~~6.1.1.0.2729452-32_neutral_GDR" 2012-12-06 09:00:38, Info CSI 00000303 [SR] Repairing corrupted file [ml:48{24},l:46{23}]"\??\C:\Windows\SysWOW64"\[l:24{12}]"dciman32.dll" from store 2012-12-06 09:00:38, Info CSI 00000305 [SR] Repair complete
Last edited by NoelDP; 07 Dec 2012 at 02:53. Reason: add file list
Thanks so for much all the help on this. I really appreciate it. Hopefully I am getting somewhere. Here is the Check SUR zip file. And there are still a few others things I haven't gotten to yet, hopefully I'll be able to knock the rest out today. The Microsoft Security Essentials and the Malwarebytes found trojans and they were all removed. So I am hopeful that this last task fixed what it messed up.
I'm working on the disk check today. Do you need any reports from that?
Quote