SYSTEM_SERVICE_EXCEPTION BSOD after PC rebuild

Page 3 of 8 FirstFirst 12345 ... LastLast

  1. Posts : 63
    Windows 7 Home Premium 64-bit
    Thread Starter
       #21

    Hey,

    I did as you asked but I’m still getting errors

    Here’s what’s happened in chronological order:

    Firstly, I tried to retrieve a CHKDSK log that was made a few weeks ago. After switching my PC on, I got as far as seeing the list of drivers/files being loaded for Safe Mode before a BSOD flashed on screen. I did get chance to write it down (or blink) before my PC then auto-restarted. Its dump files are attached to this post with the title: UNKNOWN BSOD.

    I managed to get the CHKDSK log on my second attempt at entering Safe Mode. I couldn’t get the code to work for PowerShell that would save the log as a .txt file, so I did it manually from within Event Viewer. I also copied the description of the log to a .txt file. These files are attached to this post and are dated 2013.10.25. The scan didn’t find anything wrong with my HDD.

    Shortly after booting Windows up normally and reaching the desktop, a MEMORY_MANAGEMENT BSOD appeared. Its dump files are attached to this post with the date 2013.11.03. After retrieving these files with the SF Diagnostic Tool from Safe Mode, I booted Windows up normally and reached the desktop. Soon after this, an error message saying that: “Catalyst Control Center: Host Application has stopped working”. I dismissed this message and a stop error message then appeared. I think it mentioned “MMDrive” and “load”. I couldn’t write it down as within a few seconds a BSOD flashed briefly on-screen, which too vanished suddenly as my PC auto-restarted. This blue-screen’s dump files are attached to this post with the title: ANOTHER UNKNOWN BSOD.

    I was able to get a second CHKDSK scan to run but this time using the elevated command prompt. The test came back negative for errors. Its log and a copied description of the results in a .txt file are attached. I’ve also included a folder called LocaleMetaData that appeared after saving the first CHKDSK log. Another version didn’t appear after saving the second log though, so I’ve included it in case it’s important.

    When I came around to getting the log files sometime after the scan, I switched my PC on and tried to boot into Safe Mode. However, I found that it wouldn’t load further than the motherboard’s POST screen. I was probably pressing F8 as the screen appeared though, if this is a factor.

    I rebooted my PC and this time found that I could get past the POST screen but my PC wouldn’t load past a black screen with a flashing white underscore style cursor in the top left hand side. After rebooting again, I was able to get to Safe Mode to retrieve the log files.

    I then ran SeaTools for DOS’ Long Scan, which came back negative. A photo of the on-screen results is attached to this post. I also re-seated the HDD’s SATA and power cables in the drive itself and the connections to the motherboard and PSU.

    A screenshot from Crystal Disk Info is attached to this post. The “Reallocated Sectors Count” that was flagged has been mentioned in one of my previous Seven Forums threads. When I first saw it, I Googled it and read that it would only be an issue if the figure changes. The figure was 100 when I first saw it approximately a year ago and it hasn’t changed since. I did reset the count the last time I installed Crystal Disk Info but I guess this has been undone!

    Everything seemed stable after re-seating the cables but I have had more problems. In fact they happened, when using my PC to listen to YouTube videos whilst writing up the first draft of this reply to your post. Firstly, the Flash plug-in crashed. I refreshed the page and the music continued. Then, the music turned into a buzzing/humming noise. A MEMORY_MANAGEMENT BSOD then appeared. Its dump files are dated 2013.11.04 and, like the rest, are attached to this post.

    Please help!
      My Computer


  2. Posts : 3,056
    Windows 10
       #22

    I still think it's a hardware fault due to the failing worker during the Prime95 test and CDI S.M.A.R.T warning.
    But it's worth enabling Driver Verifier just in case I'm missing something.

    Arc said:
    Driver Verifier - Enable and Disable
    Run Driver Verifier for 24 hours or the occurrence of the next crash, whichever is earlier.

       Information
    Why Driver Verifier:
    It puts a stress on the drivers, ans so it makes the unstable drivers crash. Hopefully the driver that crashes is recorded in the memory dump.

    How Can we know that DV is enabled:
    It will make the system bit of slow, laggy.

       Warning
    Before enabling DV, make it sure that you have earlier System restore points made in your computer. You can check it easily by using CCleaner looking at Tools > System Restore.

    If there is no points, make a System Restore Point manually before enabling DV.

       Tip



    Let us know the results, with the subsequent crash dumps, if any.
      My Computer


  3. Posts : 63
    Windows 7 Home Premium 64-bit
    Thread Starter
       #23

    Success! I think!

    But first... in chronological order:

    I booted my PC up normally and a blue-screen error appeared. I couldn't make out what it said, but it's dump files attached to this post with the title: UNKNOWN BSOD.

    After leaving Safe Mode, I booted my PC up normally and manually created a System Restore point. I then enabled Driver Verifier and rebooted my system as advised. On booting up normally, my computer worked fine. I was able to browse the internet and listen to videos on YouTube for an hour or so without a problem. To tease out some errors, I restarted my PC. Shortly after starting Firefox I was told that it was applying updates. It started OK though. I then received an error message saying that: "Desktop Manager has stopped working". Shortly after this, Firefox crashed. After restarting, it crashed again within the space of a few minutes. This time though, when I chose the "Restart Firefox" option in the Mozilla Crash Reporter, Firefox didn't restart. It did say that the crash report was submitted successfully though. After leaving my PC for a while a blue-screen appeared. It was an IRQL_NOT_LESS_OR_EQUAL BSOD and I think a driver was mentioned. I can't be sure, as it was only on-screen for a while, but its crash dump is attached to this post.

    I hope it helps!
      My Computer


  4. Posts : 3,056
    Windows 10
       #24

    Hi thanks for the new dumps :) .
    It all comes back to my initial analysis back in page #1.

    Both bug checks show signs of an infection. We have two ways of dealing with that, one is to completely
    wipe the drive without backing up any data what so ever I am going to assume that is the less preferable
    option the other option is to take more aggressive methods in scanning for the culprits.

    Which one do you prefer?
      My Computer


  5. Posts : 63
    Windows 7 Home Premium 64-bit
    Thread Starter
       #25

    Ha! You were right! The more aggressive scan, please! :)

    My HDD is split into two partitions btw. Partition C is the Windows 7 installation whereas partition D is my "backup" drive; it contains all of my files from this PC and my old one. Should it come to formatting the drive, would both partitions need to go?
      My Computer


  6. Posts : 3,056
    Windows 10
       #26

    I though so :) .
    I believe it won't come to that but if that is true both would need to be deleted.

    Please scan for possible infection and file corruption, perform the scans in the order they appear in.

    • Download TDSS-Killer and scan for rootkits. <This has already been complete, but it's so short I don't feel bad asking you to do it again. Please upload the TDSSKILLER log which will be located in the C:\ partition once you boot back in normal mode.




    • Download AdwCleaner, it might ask you to download an updated version, do so. launch the program and click the Scan button, once it's finished go through the Folders tab and Files tab and see if it has detected any personally important files that you want to keep for now will deal with those later. Please upload the log file which will be created after removal procedure in a folder C:\AdwCleaner, if you are unable to find the log file simply launch AdwCleaner again and click the Report button.


    • Download Malwarebytes and DON'T activate the trail (uncheck the box at the end of the installation)


    • Follow this tutorial on how to use the SFC/ SCANNOW tool in Windows. See OPTION THREE in-order to upload the CBS log file.
      My Computer


  7. Posts : 63
    Windows 7 Home Premium 64-bit
    Thread Starter
       #27

    Hey,

    I ran those scans like you asked. One of them even found something!

    In the descriptions below, please assume that I ran the scans in Safe Mode unless otherwise stated. Here's what has happened:

    TDSSKiller

    I ran a standard scan in Safe Mode and it found no results. I then set it to perform every type of scan. I had to boot my PC normally to calibrate TDSSKiller to run a scan with the "Loaded Modules" option selected. When I reached the desktop, I started the scan. During the scan I got an error message saying: "Windows Explorer has stopped working" and whether I would like to send information on it to Microsoft. I chose to do so and shortly after this the error message and reporting prompt re-appeared. This time Windows Explorer closed down though. All that was visible was the TDSSKiller window and the wallpaper on the desktop. The scan showed no results.


    Kaspersky Rescue Disk

    I installed the .ISO to my USB stick using Kaspersky's installer but when I booted from it, I found that I couldn't connect to the internet to update the program's definitions. So, I Googled the problem and found a solution that involved updating the definitions without booting from the flash drive. The KRD ran fine although the program seemed slightly buggy and there was some extra text when it first booted up. The website with this information on is here: Update your Kaspersky Rescue Disk automatically | Ghacks I mention this in case you feel the program's integrity is compromised.

    I set KRD to check every drive. The scan came back negative. I couldn't find a log and from what I made of the online help there isn't one created automatically unless something is found. Or unless you tell it to create logs on non-critical events, which I didn't.

    AdwCleaner

    I actually found a result from this scan. It was a registry key and it was removed successfully.


    Malwarebytes Anti-Malware

    I ran a full scan and it found no results.


    sfc /SCANNOW

    I ran this five times using an elevated command prompt in Windows. All scans came back negative. The log file that is attached is for the last scan. I've attached a photo of the summaries of all five scans.


    I've not tried to use my PC in normal mode since the result was found in AdwCleaner. What do you think of the scan results?

    P.S. Ok, so the photo of the sfc /SCANNOW results is upside down :P I'm sure you can turn it the right way up though!
      My Computer


  8. Posts : 63
    Windows 7 Home Premium 64-bit
    Thread Starter
       #28

    I've actually just had a SYSTEM_SERVICE_EXCEPTION BSOD when I just booted my PC up normally. It appeared around the point where Windows is loading and it says "Please wait..." and "Welcome". I had just plugged my headphones into the case though, which would normally trigger a prompt from VIA ADECK if I was on the desktop. This prompt would normally ask me whether I wanted to use my headphones as headphones or as a microphone.

    The dump files of the blue-screen are attached. Please let me know what you think!
      My Computer


  9. Posts : 3,056
    Windows 10
       #29

    Edit:
    I didn't see you posting #28, I will give my thoughts about it later on.
    By the way you can disable Driver Verifier now - Driver Verifier - Enable and Disable



    Well at this point I'm a bit baffled , I was almost positive we would find an infection!
    Your bug checks are consistent when it comes to MpFilter.sys and NTFS which are most commonly
    due to security oriented software. The thing that I'm most curious about is the fact that you only have
    Malwarebytes and MSSE which I have never encountered them causing an issue.
    I was about to suggest to go for a clean install (and yes you can backup your data since it's clean),
    and install programs one by one in manageable chunks of time until we find the culprit, but instead I want you to try something I rarely suggest.

    Uninstall Microsoft Security Essentials and Malwarebytes.




    And install AVG Free and see how the machine handles itself over the course of a few days.
       Note
    During the installation process the wizard will ask you to install 4-5 more extensions of AVG
    including additional laguages, the check-boxes will be pre checked! uncheck them all and proceed with the installation.
      My Computer


  10. Posts : 63
    Windows 7 Home Premium 64-bit
    Thread Starter
       #30

    Hey,

    Here is another update on my PC and some more blue-screen dump files!

    09/11/2013

    After booting my PC up normally, I uninstalled Malwarebytes Anti-Malware using the tool that you recommended. I then booted into Safe Mode with the intention of uninstalling Microsoft Security Essentials but was told that I had to do that in the normal Windows mode. Upon reaching the desktop after booting up normally, I got a "Windows Desktop Manager has stopped working" error followed by one for Windows Explorer with the same problem. During this time, I was rushing to uninstall MSE before a BSOD was triggered. It wasn't quick enough though as a SYSTEM_SERVICE_EXCEPTION blue-screen appeared and my PC auto-restarted.

    After retrieving those dump files from Safe Mode, I was able to boot my PC up normally and successfully remove MSE. I then installed AVG using the Custom branch of the installation wizard. I unchecked every additional feature inc. additional languages, browser protection, email scanner and an application showing AVG's real-time protection status. Was that what you meant?

    I then restarted my PC to finalise AVG's installation. As it was booting up, between the POST screen and the "Please wait..." Windows screen, a BSOD appeared and my PC auto-restarted. I didn't see what the blue-screen error said but I was able to retrieve the dump files from Safe Mode. They're attached to this post as UNKNOWN BSOD.

    12/11/2013

    I booted my PC up normally but before reaching the desktop my PC auto-restarted. I booted into Safe Mode and retrieved some dump files using the Seven Forums Diagnostic Tool just in case a BSOD had been generated. I suspect one was as its size is different from the other dump files. I've attached it to this post as "SF_12-11-2013 - Possibly a new BSOD. Could be an old one".

    Whilst in Safe Mode I tried to run a full scan using AVG as while I was installing the program I wasn't running any kind of virus or spyware protection. The program started up, but it said that it could only do so using "Command Line". I started a full scan but after every entry it scanned, it said that it was "Locked. Unable to scan", or words to that effect. Do you know how I could get round this?

    After this bout in Safe Mode, I returned to Windows' normal mode and everything seemed stable. There were slight wobbles when signing in to Steam though. Initially I couldn't login as it said the Steam network was unavailable and after managing to sign in sometime later, Firefox crashed immediately afterwards. It restarted and ran fine after this though. After an hour or so of browsing the internet, I turned Driver Verifier off and shut down my PC.

    And this is where I am now. I'll report back after using my PC for a few more days. Could you let me know what you think of these BSODs and what's wrong with AVG? Thanks
      My Computer


 
Page 3 of 8 FirstFirst 12345 ... LastLast

  Related Discussions
Our Sites
Site Links
About Us
Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

© Designer Media Ltd
All times are GMT -5. The time now is 00:40.
Find Us