Windows 7: BSOD ntoskrnl.exe then atikmdag.sys errors. Please help! - wyles

Slartybart · 12 Feb 2013

Glad to hear that you're making headway. Did you do anything other than clean up your hosts file that allowed you to log in (not having to log in safe mode). Uninstall any software, stop any torrents? It's not important to resolving the issue, I'm just curious.

Thanks Noel for your eyes on the MGAdiag. We'll see what SFC and SUR have to report.

Funny thing is that he sounds like my brother in law

Quote: Originally Posted by 1nonly

..... Interesting youtube video, but the guy recording sounds incredibly nerdy and condescending. .....

1nonly · 12 Feb 2013

Quote: Originally Posted by Slartybart

Glad to hear that you're making headway. Did you do anything other than clean up your hosts file that allowed you to log in (not having to log in safe mode). Uninstall any software, stop any torrents? It's not important to resolving the issue, I'm just curious.

Thanks Noel for your eyes on the MGAdiag. We'll see what SFC and SUR have to report.

Funny thing is that he sounds like my brother in law

Quote: Originally Posted by 1nonly

..... Interesting youtube video, but the guy recording sounds incredibly nerdy and condescending. .....

The pattern seems like this: turn on computer, attempt to reach normal log in...computer hangs, monitor gets no information from computer and is in standby mode. Monitor, that is...then you can't reset the computer in any fashion...you have to unplug it or turn off the power source.
It continues to behave like this.
If I manage to go into safe mode, then I can reboot and go into a normal log in.
Strange, huh?
I'll still continue to crack at it, though.

carwiz · 12 Feb 2013

If you're not using any of the Adobe retail products, you can remove the Adobe automatic update checker. It goes out and checks license keys as well as updates. Perhaps a leftover from your Adobe AIR trial and the reason for the Host file entry.

I also noticed many attempts at running a DVD copier (DVDFab.exe). I won't speculate on the reason for trying to bypass DVD copy protection but I doubt it's for law enforcement purposes.

I'm removing myself from this thread.

1nonly · 12 Feb 2013

Quote: Originally Posted by carwiz

If you're not using any of the Adobe retail products, you can remove the Adobe automatic update checker. It goes out and checks license keys as well as updates. Perhaps a leftover from your Adobe AIR trial and the reason for the Host file entry.

I also noticed many attempts at running a DVD copier (DVDFab.exe). I won't speculate on the reason for trying to bypass DVD copy protection but I doubt it's for law enforcement purposes.

I'm removing myself from this thread.

Call this my probation officer side coming out, but I feel that if you don't say anything you're as good as guilty. DVDFAB..had it, don't have it any longer. It's primary use was for backing up disney movies for my 7 year old. Just cause the movie's on sale doesn't mean i want to continue to buy it. So i would back up her movies. So why not hve it anymore? Two reasons, I've backed her movies up on a secondary hard drive now. And secondly, the program updates all the time and it can quickly get expensive to keep up to date with all the new securities put on movies, especially if I don't buy movies often anymore anyway.
The few movies I have are treasured. MOst of the time these days Netflix streaming services and redbox have more than covered. Plus, I'm more of a bluray head these days. Not sure how to remove the adobe automatic update checker. Couldn't find it.

I would appreciate you not leaving the thread though. Seem like a sharp cookie.

1nonly · 12 Feb 2013

Quote: Originally Posted by NoelDP

That's fine then

Carry on, constable

(sorry - couldn't resist that one.)

I'd suggest running an SFC scan and CheckSUR, and see if they point up any file system problems...

If you follow the Windows Update Posting Instructions it'll give us the data.

Ran the CheckSUR tool and one update was found that still needed to be installed. It did without any problems although it took longer than I thought it should (about 5 min.) but it did ultimately install well. Only one optional update left to instal per windows update, and that's the Bing on Desktop upgrade. I don't want it as I don't like BIng so that one will remain as an option to install.

SFC scan CBS files attached. The sfc scan finished and said that windows resource protection found corrupt files but was unable to fix some of them.

NoelDP · 12 Feb 2013

I've known CheckSUR take over an hour to run even on a fairly fast system.
SFC usually takes around 10-20 minutes

The SFC results are interesting - the usual result in the summary is missing, so it took a little while to find the files reference....

Code:

2013-02-12 13:33:49, Info                  CSI    000000a7 [SR] Beginning Verify and Repair transaction
2013-02-12 13:33:51, Info                  CSI    000000a8 Hashes for file member \SystemRoot\WinSxS\amd64_microsoft-windows-font-truetype-batang_31bf3856ad364e35_6.1.7600.16385_none_13de7dc07ffbe591\batang.ttc do not match actual file [l:20{10}]"batang.ttc" :
  Found: {l:32 b:ulqlFHGtUWnyAeeFxp3HyZ+k/9IrI4VEd5X8GbN1XPQ=} Expected: {l:32 b:CRurQ9Vl/KHlAM6skcV1ab+uMdOT2KeYdhHc0lnq/hk=}
2013-02-12 13:33:51, Info                  CSI    000000a9 [SR] Cannot repair member file [l:20{10}]"batang.ttc" of Microsoft-Windows-Font-TrueType-Batang, Version = 6.1.7600.16385, pA = PROCESSOR_ARCHITECTURE_AMD64 (9), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, hash mismatch
2013-02-12 13:33:52, Info                  CSI    000000aa [SR] Repaired file \SystemRoot\WinSxS\Manifests\\[l:20{10}]"batang.ttc" by copying from backup
2013-02-12 13:33:52, Info                  CSI    000000ab Hashes for file member \??\C:\Windows\fonts\batang.ttc do not match actual file [l:20{10}]"batang.ttc" :
  Found: {l:32 b:ulqlFHGtUWnyAeeFxp3HyZ+k/9IrI4VEd5X8GbN1XPQ=} Expected: {l:32 b:CRurQ9Vl/KHlAM6skcV1ab+uMdOT2KeYdhHc0lnq/hk=}
2013-02-12 13:33:52, Info                  CSI    000000ac [SR] Repairing corrupted file [ml:520{260},l:40{20}]"\??\C:\Windows\fonts"\[l:20{10}]"batang.ttc" from store
2013-02-12 13:33:53, Info                  CSI    000000ad Repair results created:
     0: Create File: File = [l:256{128}]"\SystemRoot\WinSxS\amd64_microsoft-windows-font-truetype-batang_31bf3856ad364e35_6.1.7600.16385_none_13de7dc07ffbe591\batang.ttc", Attributes = 00000080
    1: Move File: Source = [l:164{82}]"\SystemRoot\WinSxS\Temp\PendingRenames\8fd1faa66809ce01af0900003c10d008.batang.ttc", Destination = [l:256{128}]"\SystemRoot\WinSxS\amd64_microsoft-windows-font-truetype-batang_31bf3856ad364e35_6.1.7600.16385_none_13de7dc07ffbe591\batang.ttc"
    2: Move File: Source = [l:192{96}]"\SystemRoot\WinSxS\Temp\PendingRenames\3dd35ba76809ce01b00900003c10d008._0000000000000000.cdf-ms", Destination = [l:104{52}]"\SystemRoot\WinSxS\FileMaps\_0000000000000000.cdf-ms"
    3: Move File: Source = [l:162{81}]"\SystemRoot\WinSxS\Temp\PendingRenames\881f5ca76809ce01b10900003c10d008.$$.cdf-ms", Destination = [l:74{37}]"\SystemRoot\WinSxS\FileMaps\$$.cdf-ms"
    4: Move File: Source = [l:208{104}]"\SystemRoot\WinSxS\Temp\PendingRenames\1fb85ca76809ce01b20900003c10d008.$$_fonts_40104ba9a1d20dac.cdf-ms", Destination = [l:120{60}]"\SystemRoot\WinSxS\FileMaps\$$_fonts_40104ba9a1d20dac.cdf-ms"
    5: Hard Link File: Source = [l:256{128}]"\SystemRoot\WinSxS\amd64_microsoft-windows-font-truetype-batang_31bf3856ad364e35_6.1.7600.16385_none_13de7dc07ffbe591\batang.ttc", Destination = [l:62{31}]"\??\C:\Windows\fonts\batang.ttc"
    6: Move File: Source = [l:214{107}]"\SystemRoot\WinSxS\Temp\PendingRenames\69db9aa76809ce01b30900003c10d008.$$_system32_21f9a9c4a2f8b514.cdf-ms", Destination = [l:126{63}]"\SystemRoot\WinSxS\FileMaps\$$_system32_21f9a9c4a2f8b514.cdf-ms"

The summary only refers to this obliquely -

Code:

2013-02-12 13:39:59, Info                  CSI    000002eb Creating NT transaction (seq 2), objectname [6]"(null)"
2013-02-12 13:39:59, Info                  CSI    000002ec Created NT transaction (seq 2) result 0x00000000, handle @0x440

I think a second run of SFC /SCANNOW may be a good idea to ensure that the move is bedded in properly, but you should get a 'no problems found message at the end.
If not, please post the new CBS.log file (only)

Your CheckSUR log is clean.

Unless you have problems with the second SFC, I'll leave you to the mercies of the BSOD specialists.

Good luck!

1nonly · 12 Feb 2013

Second pass with SFC / SCANNOW on an elevated dos prompt yielded no problems this time. I got a 'Windows Resource Protection did not find any integrity violations' message and it ran much faster this time.

NoelDP · 12 Feb 2013

Great! - back to the BSOD boys then

1nonly · 12 Feb 2013

Quote: Originally Posted by NoelDP

Great! - back to the BSOD boys then

Good to hear! Thanks for your contributions,most of it was Greek to me, but if it fixed even a little of the problem then it was worth it. THanks again, sir!

Slartybart · 12 Feb 2013

just a quick note on how I handle Bing & Silverlight. These are two Windows Updates that I will never install, but they are repeatedly offered as updates. SilverLight has five and Bing two -I think.

Right click the update and select hide - use this feature with caution
--> never hide an important or critical update.

You can always restore hidden updates if you change your mind.

Good to see progress.

Quote: Originally Posted by 1nonly

.....Only one optional update left to instal per windows update, and that's the Bing on Desktop upgrade. I don't want it as I don't like BIng so that one will remain as an option to install.

Windows 7: BSOD ntoskrnl.exe then atikmdag.sys errors. Please help! - wyles

BSOD ntoskrnl.exe then atikmdag.sys errors. Please help! - wyles problems?