Black Screen after Windows load, works on external, suspect Sketchup8

Oops .....sorry about that. When you suggested running that program, I thought you were referring to the program included with the SF tools but I had trouble with that one so didn't include it with my other logs.. Similar name so easy mistake I guess.
Anyway....I'll be home the rest of the night so will get on it now. (I also haven't had time to re-install/uninstall Sketchup but will get working on that too.
My daughter was pushing to get her computer back from me again today.....fixed or not so she can take it in somewhere. I sure hope I can get some results tonight because I would hate to have to give up with the amount of time that I've put into getting this figured out. Guess it's time to stop researching to narrow down the cause and just pull the trigger and try a few things! Sure hope your around and able to check this tonight as I'm sure I'll have more questions.
Thanks!

What have you managed to do so far?

Sorry for the delay. I was unable to install and run GPU-X due to being in safe mode....at least that was the error I got when I tried. I had spent a lot of time typing up a reply TWICE last night, and once today and lost what I had typed due to Sevenforums saying I was logged out after I hit send with no way to go back and save what I had written. Doh! (This time finally had the sense to paste message in).I was so frustrated to the point that I was just was to just restart, let windows update, then try to start in Normal mode and see what happened but before I could, I found myself on another wild goose chase of research again. Unfortunately, all I can remember is that I recalled reading something about the User hive not getting unloaded right causing problems like mine. (See Event Viewer info below which may point to that as well), so I started looking for info about possible registry issues with Sketchup and.user accounts in Windows 7...Found this info just now but likely about an older Version..“on Windows, Sketchup saves all the data in the User hive of the Registry”
A site about Registries in general said “Even a small Registry error can prevent Windows from loading the Desktop. Several of the common boot errors are related to faulty Registry values. For example the 0x0000007B Inaccessible Boot Device Blue Screen is caused by a missing device driver path in the Registry.

A few other concerns got in the way too.
The Action Center was showing a “problem with Skype”tried to “uninstall it before restarting but I didn't see Skype in Cntrl Panel/Programs....just a “Skype Toolbar” so I tried to remove that and it wouldn't uninstall. I got a message saying that “The Windows Installer Service could not be accessed.* This can occur if the Windows Installer is not correctly installed. Contact your support personnel for assistance." .
II looked in “services”and saw that it was listed as “manual” , then did a little research on that and found This problem can occur if one of the following conditions is true: *
The Windows Installer files that are on your computer are damaged or are missing.
You install or remove a program that uses the Windows Installer Microsoft Software Installation (MSI) package file (.msi). For example, this can occur when you try to install Microsoft Office on your computer.*

Reading that got me looking online to see if Sketchup 8 used the Installer and also got me looking back at the Office installation that my daughter tried when she installed the wrong Office product (365 for educators).
Sure enough..just like Sketchup....The Office 365 doesn't show under Cntrl Panel/programs anymore but under my user account/programs, there are 2 instances of “SetupX86.en.us.0365HomePremRetail.....” dated 9/14/12 (the same day she set up my user account, C:ProgramData shows a Microsoft folder dated 9/14/12 and inside that folder is an OFFICE folder dated 9/15/12 with several files including some sharepoint files so I know thats the Office 365,, and Program Files shows Office 15 dated 9/22/12 with a ClientX64 file in it (but the file is empty?)
What the heck does a person have to do to uninstall programs in Windows 7? I'd like to get rid of Norton and a few other programs like you said but what am I missing because this is ridiculous?
I'm guessing that maybe I need to be using her user admin account but since mine is also set as admin, I'm not sure I get that.

Anyway..on top of that, I got a notification that Adobe Updater wants to install Adobe Reader 9 – Multi UI ? I said no for now after recently having problems with a flashplayer update notification and Java update , which I ended up disabling in Chrome while working under my user account. Now that I'm working under my daughters, that got me looking at her Chrome plugins page and I noticed Java wasn't disabled on hers. This Windows 7 user stuff confuses the heck out of me. I didn't know things had to be disabled or uninstalled under each different user account...especially after finding more Sketchup files after thinking I had it uninstalled it from programs.

I took another look in Event Viewer, Windows Logs, Application and saw
11/25/12 1:23pm – Right after I installed Sketchup then shutdown notebook to take with me
2 warnings for Event 1530 for User Profile Service
Windows detected your registry file is still in use by other applications or services. The file will be unloaded now. The applications or services that hold your registry file may not function properly afterwards.
DETAIL -
8 user registry handles leaked from \Registry\User\S-1-5-21-3014146813-3350296163-495110445-1003:
Process 1184 (\Device\HarddiskVolume2\Windows\System32\FBAgent.exe) has opened key \REGISTRY\USER\S-1-5-21-3014146813-3350296163-495110445-1003
Process 1184 (\Device\HarddiskVolume2\Windows\System32\FBAgent.exe) has opened key \REGISTRY\USER\S-1-5-21-3014146813-3350296163-495110445-1003
Process 540 (\Device\HarddiskVolume2\Windows\System32\svchost.exe) has opened key \REGISTRY\USER\S-1-5-21-3014146813-3350296163-495110445-1003\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings
Process 540 (\Device\HarddiskVolume2\Windows\System32\svchost.exe) has opened key \REGISTRY\USER\S-1-5-21-3014146813-3350296163-495110445-1003\Software\Policies
Process 540 (\Device\HarddiskVolume2\Windows\System32\svchost.exe) has opened key \REGISTRY\USER\S-1-5-21-3014146813-3350296163-495110445-1003\Software\Microsoft\Internet Explorer\Main
Process 540 (\Device\HarddiskVolume2\Windows\System32\svchost.exe) has opened key \REGISTRY\USER\S-1-5-21-3014146813-3350296163-495110445-1003\Software\Microsoft\Windows\CurrentVersion\Internet Settings
Process 540 (\Device\HarddiskVolume2\Windows\System32\svchost.exe) has opened key \REGISTRY\USER\S-1-5-21-3014146813-3350296163-495110445-1003\Software\Microsoft\Windows\CurrentVersion\Internet Settings
Process 540 (\Device\HarddiskVolume2\Windows\System32\svchost.exe) has opened key \REGISTRY\USER\S-1-5-21-3014146813-3350296163-495110445-1003\Software

Then 2 more at 10:57pm, when I shut down to bring it home (only these don't include the svchost.exe entries....not sure why unless it is because there was no internet access...I only opened Sketcup while gone.
DETAIL -
2 user registry handles leaked from \Registry\User\S-1-5-21-3014146813-3350296163-495110445-1003:
Process 1196 (\Device\HarddiskVolume2\Windows\System32\FBAgent.exe) has opened key \REGISTRY\USER\S-1-5-21-3014146813-3350296163-495110445-1003
Process 1196 (\Device\HarddiskVolume2\Windows\System32\FBAgent.exe) has opened key \REGISTRY\USER\S-1-5-21-3014146813-3350296163-495110445-1003

I Read that Event 1530 - This behavior is by design. - The application that is listed in the event detail is leaving the registry handle open?? I looked up FastBoot and svchost.........
Yahoo answers - FastBoot is an ASUS feature,it decreases 64-bit Windows 7 boot time by tuning the BIOS and decreasing the number off startup applicationsthowever it uses alot of ram to do this...
I would disabe this service if you dont use the feature.......Svchost I haven't really figured outl

Think I might have something here!
On 11/26/12 at 7:15am (Must be the next reboot after using Sketchup?)
Windows Logs, Applications
Warning Event ID 399 , Source ESENT (3 of these)
wuaueng.dll (932) SUS20ClientDataStore: The database page read from the file "C:\Windows\SoftwareDistribution\DataStore\DataStore.edb" at offset 98304 (0x0000000000018000) (database page 2 (0x2)) for 32768 (0x00008000) bytes failed verification. Bit 161994 was corrupted and has been corrected. This problem is likely due to faulty hardware and may continue. Transient failures such as these can be a precursor to a catastrophic failure in the storage subsystem containing this file. Please contact your hardware vendor for further assistance diagnosing the problem.

Took awhile but finally found something about this event:
This Warning event indicates that a database page had a single-bit error that was corrected automatically. The particular database page was corrupt but has been repaired. If this event is occurring frequently, then action should be taken to prevent a system failure. *
Occurrence of event 399 indicates damage at the page level of the database. Damage at the page level is caused by driver, firmware, or hardware issues 99 percent of the time.
*
To resolve this warning, do one or more of the following:
*
1.Try "chkdsk" and "sfc /scannow" commands and see if they can help
2.Run system diagnostic tests. These tests may not be conclusive if the problem is infrequent and transient or only appears under very complex loads.
3.Consider migrating to different hardware.
4.Upgrade disk controller BIOS and firmware to the latest vendor revisions.
*
I don't think I've run “chkdsk” yer but think the scannow was included in the logs I already posted as is MemTest?Don't think #3 is an option and no clue what to do for #4 show that the latest Bios version showing on Asus Downloads is the one I already have and they don't list anything for “Firnware”
ASUSTeK Computer Inc. -Support- Drivers and Download K60IJ

Can you please advise?

Also, I know that I'm asking a lot but if you wouldn't mind looking at this site, maybe it would narrow things down better for you than me as to what could be causing the above error and black screen. Especially the section on “Dedicated Graphics Cards” and “Installer, .NET, MSI Problems”. (I'm pretty sure I saw some .NET problems either in Event Viewer or MS Updates through all of this but I am a novice at using Event Viewer and have wasted far to much time digging through it and still not having a clue what I'm looking at.
https://sites.google.com/site/sketch...ems/pc-install

P.s...while digging through the C: ProgramData, Microsoft,Windows files, I found a folder named “Power Efficiency Diagnostics” with some reports in it. The most recent shows dated 10/31/12 so it was after she set up my user account & installed Office but before I installed Sketchuph.. It does show some issues so I'm going to attach it, but I will run another tomorrow since instructions say “For the best results, you had better run this report when your computer is idle and without any open documents or programs running.” I'm not sure if the one I'm attaching was run in that environment or not since I don't know what generated it (doubt very much it was my daughter)but though it might help.
,Needless to say, I changed my mind on rebooting tonight but will try tomorrow because I just can't do another 4am night. I'd rather try with a clear head in the morning.

Sorry that was so long...I'm just learning as I go here and really appreciate your help (and patience)! Thanks!

FBAgent.exe belongs to the Asus FastBoot service, which is just bloatware and is not needed. It's best to remove this program.

svchost.exe is part of the Windows operating system, don't worry about this service.

Things To Do -

Scan for any missing, modified or corrupted protected Windows files with:

• SFC /SCANNOW Command - System File Checker

• Startup Repair

The above two steps will check for any corruption within the registry and other Windows System Files etc.

Forgot I had to babysit this morning so barely had enough time to run sfc/ scannow (did the verify for now).....anyway....as I said....I had already ran and uploaded this but here is another....Can you tell me by looking at it if you can see what is causing that Event 399?
I don't have the disc for startup repair but will see if I can get to that tonight after work....won't be home until midnight.
As much as I appreciate the help, a lot of my questions aren't being addressed and I've put a lot of time into putting them together so would really appreciate it if you'd please try to read them.
I know I'm not great at being concise but it feels like I'm getting some generic responses that I'm already far beyond on my own. Especially when asking for things that I've already addressed.
I hope that doesn't sound unappreciative because it's not meant to.
Thanks again

There seems to be a quite a large number of items repaired, however, I'll get someone to double check the CBS.log.

Event 399 seems to be related to Sleep/Hibernation issues, looking at the Energy Report:

There is a problem with the definition of the ACPI _PSD object on this computer. Installing the latest system firmware (BIOS) may resolve this issue.

Platform Power Management Capabilities:PCI Express Active-State Power Management (ASPM) Disabled
PCI Express Active-State Power Management (ASPM) has been disabled due to a known incompatibility with the hardware in this computer.

I would suggest updating the BIOS to the latest version, this usually resolves most hardware incompatibility issues, but you seem to have the latest BIOS version already.

Another common cause Sleep/Hibernation issues is drivers, remove these specified programs which are just bloatware and can corrupt your system, most people do and would recommend using a complete clean reinstall to give you the perfect installation of Windows 7 ~ Clean Reinstall - Factory OEM Windows 7

Code:

Start Menu\Programs\Norton Security Scan
Start Menu\Programs\Norton Security Suite
Start Menu\Programs\McAfee Security Scan Plus

Code:

Start Menu\Programs\ASUS Utility\SmartLogon
Start Menu\Programs\ASUS Utility\ASUS Splendid Utility
Start Menu\Programs\ASUS Utility\ASUS Live Update
Start Menu\Programs\ASUS Utility\ASUS Data Security Manager
Start Menu\Programs\ASUS Utility\ASUS CopyProtect
Start Menu\Programs\ASUS Utility
Start Menu\Programs\ASUS\ASUS AP Bank
Start Menu\Programs\ASUS

There more information regarding alternatives and removal methods for these programs in my first post --> Black Screen after Windows load, works on external, suspect Sketchup8

After completing those steps, then try this to check for any additional drivers which may be causing problems:

Run Driver Verifier to scan for any corrupted drivers which may be causing problems, this program works by running various stress tests on drivers, in order to produce a BSOD which will locate the driver; run for least 24 hours:

• Driver Verifier - Enable and Disable

   Information

Additional Help - Using Driver Verifier to identify issues with Drivers

Post the temperature of your graphics card, as a result of the overheating event which took place earlier in the thread, the best program to use for this is GPU-Z.

After completing all the above steps, then we can review the situation, and see what other troubleshooting steps should be taken specific to the results of the steps.

In a hurry...late for work....sorry Tom....no time to read yours but will check from phone later...

BlueRobot -

Sorry to be such a pain but I do have a few more questions before I get started on doing all of the things that you’ve suggested …I want to make sure I do them in the right order….(I’ll number them to hopefully make it easier to answer….maybe you can just copy/paste my list , then type in your answers?) It would make me feel a little better making this many changes.
These are the list of “Things to do”…(let me know if I missed anything and what order to do them in)
· SFC/ SCANNOW - Since I only ran the SFC / SCANNOW in the Verify mode, should I run it again to let it attempt to make the repairs or just see if the rest of the recommendations resolve the problems?
· Ms Updates – All…including just the recommended ones…..kinda worried after hearing this has been cause for many people but just confirm.
· Malwarebytes – Install & run
· Uninstall Programs – All Norton, Asus bloat….(Already did McAfee but just realized you didn’t answer my ? about Skype….Do you know if the Skype Toolbars showing under programs could be cause of notice I got in Action Center about a “Problem with Skype”? Anything I need to know about removing toolbars vs programs?
· Drivers - I don’t recall you mentioning updating the video/graphics driver but since most things I’ve read seem to point to that, I ‘m guessing I should…Since I don’t know a lot about drivers, wondering how I ended up with a different version (that I mentioned in earlier post)) than shown on Asus site when all other drivers match? Possibly from MS update? Could Sketchup have installed/changed driver?? Should I leave alone or change to what Asus shows even though that is old? As far as the Bios….would it make sense to still update the driver with the same version to maybe fix any issues with it?
· User Accounts – We didn’t really discuss this one but since it can be cause of many probs and I won’t need anymore, should I go ahead to remove my user account…If so, at what point in this process?
· GPU-Z –
· Driver Verifier – Sounds really scary so hoping to push this as far down list as possible. I’ll be the one who ends up with all of the problems they warn about….Maybe this could be reserved until all else fails….Your thoughts?
Lastly, I just looked briefly at the CBS.log….I’m not sure how you can tell there were a lot of things repaired but I have no idea how to interpret it. To me it just looks like a lot of problems.
While the energy report definitely indicates Sleep/Hibernate issues , it really doesn’t sound like the cause of the Event 399.
“Event 399 since wuaueng.dll (932) SUS20ClientDataStore: The database page read from the file "C:\Windows\SoftwareDistribution\DataStore\DataStore.edb" at offset 98304 (0x0000000000018000) (database page 2 (0x2)) for 32768 (0x00008000) bytes failed verification. Bit 161994 was corrupted and has been corrected. This problem is likely due to faulty hardware and may continue. Transient failures such as these can be a precursor to a catastrophic failure in the storage subsystem containing this file. Please contact your hardware vendor for further assistance diagnosing the problem”.
Since you said you were going to run the CBS log by someone, I’d appreciate it if you could also run the above error by them too. I’ve spent too much time (again) trying to learn more about it, since it looks like such specific info on what failed…..almost like an address of sorts in the database….that it seems like it should be easy to locate the problem “page” and “corrupted bit” for someone more who has better resources than “google” to look it up like I’ve been doing. Couldn’t hurt
The 2 closest things that I found were:
· Occurrence of event 399 indicates damage at the page level of the database. Damage at the page level is caused by driver, firmware, or hardware issues 99 percent of the time.
· According to the error message, the database file for Windows Updates is corrupt. As C:\WINDOWS\SoftwareDistribution is a temporary folder, I suggest deleting it to test the result if it is convenient for you to restart the computer:
Not sure how reliable the above possibilities are for that but it did happen at time probs started.
Late leaving for work so will get started when I get home at midnight. Thanks again!

1) SFC/ SCANNOW - Since I only ran the SFC / SCANNOW in the Verify mode, should I run it again to let it attempt to make the repairs or just see if the rest of the recommendations resolve the problems?

-->Read Tom's post, it will give you appropriate instructions.

------------------------------------------------------

2) Ms Updates – All…including just the recommended ones…..kinda worried after hearing this has been cause for many people but just confirm.

-->Install all the Important and Recommended updates, Windows Updates have only caused problems with systems which are either completely corrupted or the operating system wasn't even genuine. There are many security and stability released via Windows Update to improve the security and performance of your system.

-------------------------------------------------------

3) Malwarebytes – Install & run

-->Install the free version of Malwarebytes, be very careful and make sure you don't select the free trail for the paid version of Malwarebytes. Install and update with Microsoft Security Essentials.

-------------------------------------------------------

4) Uninstall Programs – All Norton, Asus bloat….(Already did McAfee but just realized you didn’t answer my ? about Skype….Do you know if the Skype Toolbars showing under programs could be cause of notice I got in Action Center about a “Problem with Skype”? Anything I need to know about removing toolbars vs programs?

-->I'm not sure, I haven't used Skype for a very long time and uninstalled the program a few years back, as far as I know you won't even need the Skype Toolbar to use Skype.

-------------------------------------------------------
4) Drivers - I don’t recall you mentioning updating the video/graphics driver but since most things I’ve read seem to point to that, I ‘m guessing I should…Since I don’t know a lot about drivers, wondering how I ended up with a different version (that I mentioned in earlier post)) than shown on Asus site when all other drivers match? Possibly from MS update? Could Sketchup have installed/changed driver?? Should I leave alone or change to what Asus shows even though that is old? As far as the Bios….would it make sense to still update the driver with the same version to maybe fix any issues with it?

-->Sketchup doesn't have any control over your drivers, leave the BIOS how it is you have the latest version already. I haven't noticed any problems with your graphics card driver as of yet, leave it at the current version.
-------------------------------------------------------
5) User Accounts – We didn’t really discuss this one but since it can be cause of many probs and I won’t need anymore, should I go ahead to remove my user account…If so, at what point in this process?

-->Keep the user account which was originally installed on the computer before you created your user account.

User Account - Delete

-------------------------------------------------------
6) GPU-Z –

-------------------------------------------------------

7) Driver Verifier – Sounds really scary so hoping to push this as far down list as possible. I’ll be the one who ends up with all of the problems they warn about….Maybe this could be reserved until all else fails….Your thoughts?

-->This step can be performed after everything else has been completed, most people don't experience any of the potential problems of using Driver Verifier, so I wouldn't worry. It's a in-built Windows tool and runs in the background until you stop it from running

-------------------------------------------------------

8)Lastly, I just looked briefly at the CBS.log….I’m not sure how you can tell there were a lot of things repaired but I have no idea how to interpret it. To me it just looks like a lot of problems.

While the energy report definitely indicates Sleep/Hibernate issues , it really doesn’t sound like the cause of the Event 399.
“Event 399 since wuaueng.dll (932) SUS20ClientDataStore: The database page read from the file "C:\Windows\SoftwareDistribution\DataStore\DataStore.edb" at offset 98304 (0x0000000000018000) (database page 2 (0x2)) for 32768 (0x00008000) bytes failed verification. Bit 161994 was corrupted and has been corrected.

This problem is likely due to faulty hardware and may continue. Transient failures such as these can be a precursor to a catastrophic failure in the storage subsystem containing this file. Please contact your hardware vendor for further assistance diagnosing the problem”.

Since you said you were going to run the CBS log by someone, I’d appreciate it if you could also run the above error by them too. I’ve spent too much time (again) trying to learn more about it, since it looks like such specific info on what failed…..almost like an address of sorts in the database….that it seems like it should be easy to locate the problem “page” and “corrupted bit” for someone more who has better resources than “google” to look it up like I’ve been doing.

Couldn’t hurt
The 2 closest things that I found were:
· Occurrence of event 399 indicates damage at the page level of the database. Damage at the page level is caused by driver, firmware, or hardware issues 99 percent of the time.
· According to the error message, the database file for Windows Updates is corrupt. As C:\WINDOWS\SoftwareDistribution is a temporary folder, I suggest deleting it to test the result if it is convenient for you to restart the computer:

-->Tom has provided instructions for the CBS.log.

wuaueng.dll seems to be a library file for Windows Update, therefore it is most probably related to something regarding Windows Update, Tom deals with many Windows Update related issues and will be able to assist you with this.