Windows 7 64 bit Freezes and cannot boot new programs (DCOM?)

Shadowjk · 04 May 2014

Right, I have been going through your event logs and your force power off has provided some information.

Code:

Error	20/04/2014 16:07:26	EventLog	6008	None	The previous system shutdown at 16:06:40 on ‎20/‎04/‎2014 was unexpected.
Information	20/04/2014 16:07:08	Microsoft-Windows-FilterManager	6	None	File System Filter 'FileInfo' (6.1, ‎2009‎-‎07‎-‎14T00:34:25.000000000Z) has successfully loaded and registered with Filter Manager.
Information	20/04/2014 16:07:08	Microsoft-Windows-Kernel-General	12	None	The operating system started at system time ‎2014‎-‎04‎-‎20T15:07:08.125599300Z.
Error	20/04/2014 16:06:12	Microsoft-Windows-DistributedCOM	10000	None	"Unable to start a DCOM Server: {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5}. The error:
""5""
Happened while starting this command:
C:\Windows\system32\DllHost.exe /Processid:{AB8902B4-09CA-4BB6-B78D-A8F59079A8D5}"
Warning	20/04/2014 16:06:00	Microsoft-Windows-DNS-Client	1014	None	Name resolution for the name www.google.co.uk timed out after none of the configured DNS servers responded.
Information	20/04/2014 16:05:15	Application Popup	26	None	"Application popup: OAsrv.exe - Application Error : The exception unknown software exception (0x0eedfade) occurred in the application at location 0x762cc41f.
"

Code:

Error 19/04/2014 17:46:40 EventLog 6008 None The previous system shutdown at 17:42:03 on ‎19/‎04/‎2014 was unexpected.
Critical 19/04/2014 17:46:37 Microsoft-Windows-Kernel-Power 41 (63) The system has rebooted without cleanly shutting down first. This error could be caused if the system stopped responding, crashed, or lost power unexpectedly.
Information 19/04/2014 17:46:36 Microsoft-Windows-FilterManager 6 None File System Filter 'OADevice' (6.1, ‎2013‎-‎10‎-‎11T02:40:06.000000000Z) has successfully loaded and registered with Filter Manager.
Information 19/04/2014 17:46:32 Microsoft-Windows-FilterManager 6 None File System Filter 'gzflt' (6.1, ‎2013‎-‎04‎-‎22T11:21:00.000000000Z) has successfully loaded and registered with Filter Manager.
Information 19/04/2014 17:46:28 Microsoft-Windows-FilterManager 6 None File System Filter 'FileInfo' (6.1, ‎2009‎-‎07‎-‎14T00:34:25.000000000Z) has successfully loaded and registered with Filter Manager.
Information 19/04/2014 17:46:28 Microsoft-Windows-Kernel-General 12 None The operating system started at system time ‎2014‎-‎04‎-‎19T16:46:28.125599300Z.
Error 19/04/2014 17:17:51 Microsoft-Windows-DistributedCOM 10000 None "Unable to start a DCOM Server: {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5}. The error:
""5""
Happened while starting this command:
C:\Windows\system32\DllHost.exe /Processid:{AB8902B4-09CA-4BB6-B78D-A8F59079A8D5}"
Information 19/04/2014 17:16:37 Application Popup 26 None "Application popup: OAsrv.exe - Application Error : The exception unknown software exception (0x0eedfade) occurred in the application at location 0x752bc41f.
"

It appears that each time your machine freezes (If that is the status of the machine when you force power off) the Online Armour application crashes. Then a process of the same ID attempts to start. I am assuming this is you trying to open an application or it is most likely Online Armour trying to startup again. I am not sure. Searching for the process ID did not yield any information.

From your results you ran earlier at around 6 you had Online Armour installed:

Code:

Online Armor 6.0 (Version: 6.0)

Is it possible for you to uninstall it and see if it is causing the issue? Based on the logs you have provided this is all that I can suspect is causing the issue at the moment. Earlier logs did show the WMIprvse.exe however they have not shown up since the 1st of may and did not correlate to a forced shutdown. That being said, that would be the next culprit I would look further in to afterwards.
_____________________________________________________________

Going back some time, a driver tried to start but failed.

Code:

Warning	16/04/2014 09:19:19	Microsoft-Windows-Kernel-PnP	219	(212)	The driver \Driver\WUDFRd failed to load for the device ACPI\PNP0A0A\2&daba3ff&3.
Information	16/04/2014 09:19:19	Microsoft-Windows-DriverFrameworks-UserMode	10114	Startup of the UMDF reflector	The UMDF reflector was unable to complete startup because the WUDFPf service was not found.  This service may be started later during boot, at which point Windows will attempt to start the device again.

Do you have a smartcard reader? Microsoft states that it is reported issue with a smartcard reader. - An exclamation mark (!) may be displayed next to the smartcard reader in Device Manager after you start Windows 7 or Windows Server 2008 R2

________________________________________________________________

There are also some errors with regards to a Netgear WNDA3200. Did you use to have a wireless device? If you aren't using one (Doesn't appear to be from your IPconfigs) then I wouldn't worry about these too much and shouldn't be the cause of your network issues.

For reference:

Code:

Error	04/05/2014 18:00:11	Service Control Manager	7000	None	"The NETGEAR WNDA3200 Device Checking Service service failed to start due to the following error: 
The system cannot find the file specified."

Information	03/05/2014 10:20:58	Service Control Manager	7040	None	The start type of the NETGEAR WNDA3200 Device Checking Service service was changed from auto start to demand start.

Hope This Helps,
Josh :)

eharper256 · 04 May 2014

No, I do not use a Wireless Device or have a Card Reader; the Router does provide wireless which is used for the PS3, but the PC is plugged in via Ethernet. I have uninstalled OA for now. Can't hurt I guess; though I'm now running the net naked, so to speak. Fortunately I'd imagine the Firefox extensions like AdBlock will help prevent the worst of the wear.

Thedoctor44 · 04 May 2014

Yes can you remove your onlinearmor driver(s) completely.
Then re-install it/them from here Emsisoft Online Armor Firewall

Are you still failing to download anything because Nirsoft Driver view will help.

Upload the list of all the third party drivers Using NirSoft DriverView:

Download and execute Driverview
View > Hide Microsoft Drivers
Edit > Select all
File > Save Selected Items
In the Save dialog, Set the path to desktop, Put "Driverview" in the name field, and save.
Zip the .txt file and upload it.

Can I also suggest updating your Realtek network driver.

Realtek

Warning

Before changing driver versions, make sure that you have earlier System restore points made in your computer. You can check it easily by using CCleaner looking at Tools > System Restore.

If there is no points, make a System Restore Point Manually

eharper256 · 04 May 2014

Ho hum, sorry for the delay; had to go get some eats and feed the cat.

I uninstalled OA and repaired BitDefender's installation. It seems that downloads are back, just downloaded a pair of random 200mb ASUS drivers as a test and they were done without interruption at 6mb a second. Google seems to be behaving again as well.

Shocking to think Online Armour was causing at least this problem; but that seems to be the case. Weird, since I've used and trusted it for ages on my old machines.

Still not sure as to whether the other freeze issue this topic was initially started for has been resolved yet, as that will take time to manifest, but at least we're back to the machine being relatively usable... Thanks everyone for the assistance so far. I'll keep you all updated as to the results.

Shadowjk · 04 May 2014

Awesome! Making progress

Josh

eharper256 · 04 May 2014

However, here is the Driverview output.

I also guess I need an OA alternative. Would people Recommend I get Outpost Firewall Pro, or go with Comodo? Or even just get Miniwall to top up the Windows Firewall (I hear its not as bad as it was back in the XP days)

Thedoctor44 · 04 May 2014

I've never needed to get anything as a top up firewall, I don't think I've ever known anyone else do it either.
I don't think it's necessary.

Daemon Tools!
Uninstall it, it is known to cause lots of issues including BSODs.

Code:

==================================================
Driver Name       : dtsoftbus01.sys
Address           : 00000000`0496C000
End Address       : 00000000`049B4000
Size              : 0x00048000
Load Count        : 1
Index             : 46
File Type         : Application
Description       : DAEMON Tools Virtual Bus Driver
Version           : 4.49.1.352
Company           : Disc Soft Ltd
Product Name      : DAEMON Tools
Modified Date     : 27/03/2014 20:03:33
Created Date      : 27/03/2014 20:03:33
Filename          : C:\Windows\system32\DRIVERS\dtsoftbus01.sys
File Attributes   : A
Service Name      : dtsoftbus01
Service Display Name: DAEMON Tools Virtual Bus Driver
Digital Signature :

Britton30 · 04 May 2014

I would recommend a good paid security suite, with AV, Anti-malware, anti spam and a two way configurable firewall.

Thedoctor44 · 04 May 2014

I haven't used that many paid AVs to be honest.

Norton was alright but it's prone to a lot of issues.
There are some people's PCs where it causes no issues though.
Bullguard, well lets just say that's caused a lot of issues, I wouldn't really recommend it to be honest.
You might not have much trouble with so you never know :)
I've been told Kaspersky is good, I've not encountered many cases where it's caused issues for people, if you went ofr a paid AV then I'd recommend that.
My Uncle uses it and it works fine, he's used lots of different AVs that have caused lots of issues.

Britton30 · 04 May 2014

Any paid suite may cause issues, like any software.
I've used Norton (not Norton 360) for 7 years with no issues, other which are good as others have said:
Avast
Kaspersky
F-Secure (expensive though)

Ones to avoid, several BSODs associated with them:

AVG
McAfee