Random BSODs and applications crashes on a fresh Win7 install

R4ndom said:

Ran on partition D: so far (programmes installed directly in d: root folder, instead of Program Files as by default) and c: as well.

The problem is the C: partition as I cannot do it in windows, because the drive is locked, so I chose the option to do it at the next reboot, rebooted and left it run.

The issue is though that this way I cannot really check what actually happened. After googling I found out that logs are possible to find in the event viewer following the last post from this thread [Solved] Win7 chkdsk log file location - config-customize - windows-7 but I can only see the results of D: scan in my logs, which was without problems, 0 bad sectors or errors of the file system.

Nothing was logged about the C: system drive and as I wasn't in front of the computer when it rebooted (or crashed, as I described before during chkdisk) I cannot tell whether something was repaired, or if everything was ok. I read that when ran on corrupted disks, the logs are not written.... so is my only solution to stay in front of the screen all the time as it scans c: and wait for a report or BSOD?

Thanks!

Edit: I found the C: log as well, under winninit entry in the same location, I simply started searching by time stamp following the D: disk check, as I ran the C: check immediately after. From the log results for me that Windows adjusted some big files records, I will proceed to the scanning of the last partition and will post full results for all the 3 partitions.

Alright, sounds good. For anyone having similar problems who stumble into this thread, you can get the disk check logs using the following tutorial. Check Disk (chkdsk) - Read Event Viewer Log

Thanks for posting back that you found them and will post them. I'll let you know what I recommend next once I read through them.

Hello :)

Here are the (not-google) translated logs from the 3 partitions. I run chkdisk on C: twice. Do you see anything abnormal apart from disk C:? Strange that no errors showed on D: while Starcraft is installed precisely there and it had reported corrupted installation files, which was unable to repair. Anyway, in your opinion, should the drive be RMA or can it be trusted? I always thought that only bad sectors could cause such mayhem.

Would you think useful uploading previous dumps (from 5-7 days ago), or there's no more sense in analyzing them? Would you still recommend testing memories overnight? Where all these corrupted file system problems could actually have come from in a 2-days fresh OS?

Thanks a bunch for your help!

Code:

PARTITION C: 1st pass

Log name:Application
Source:        Microsoft-Windows-Wininit
Date:          2012-01-11 13:44:51
Event ID:1001
Event Category: N/A
Stage/Level:        Information
Keywords: Classic
User:    N/A
Computer:      FX-4100
Description:


Checking file system on C:
The type of the file system is NTFS.

A disk check has been scheduled.
Windows will now check the disk.                         

CHKDSK is veryfing files (stage 1 of 5)
  File records processed: 108544.                                   

File verification completed.
  Large file records processed: 139.                            

  Damaged file records processed: 0.                      

  EA records processed: 0.                  

  Reparse records processed: 64.                         

CHKDSK is veryfing indexes (stage 2 of 5)
  Index entries processed: 155546.                                    

Index verification completed.
  Unindexed files scanned: 0.                            

  Unindexed files recovered: 0.                                

CHKDSK is veryfing security descriptors/file IDs (stage 3 of 5)
  SDs/SIDs file processed: 108544.   

Cleaning up 232 index entries from index $SII of file 0x9.
Cleaning up 146 entries from index $SDH of file 0x9.
Cleaning up 146 unused security descriptors.
Security descriptors verification complete.
  Data files processed: 23502.                                     
Veryfing USN log...

  USN numbers bytes processed: 35380592.                                
Checking usn log ***integrity***? completed.

CHKDSK is veryfing file data (stage 4 of 5)
  Files processed: 108528.                                            

Checking file data completed.
CHKDSK is veryfing free space (stage 5 of 5)
  Free clusters processed: 10404672.                                        

Free space verification completed.
CHKDSK has detected unallocated space marked as allocated in the main
bitmap of the MFT (Main File Table??) - hope I got the translation correctly
Windows applied corrections to the file system.

  67379199 KB total disk space.
  25487992 KB in 84775 files.
     60832 KB in 23503 indexes.
         0 KB in bad sectors.
    211687 KB in use by the system.
     65536 KB occupied by the log file.
  41618688 KB available on disk.

      4096 bytes in each allocation unit.
  16844799 total allocation units on disk.
  10404672 allocation units available on disk.

Internal information:
00 a8 01 00 02 a7 01 00 be 3d 03 00 00 00 00 00  .........=......
b2 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00  ....@...........
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................

Windows has completed disk check.
Wait for the system to restart.

XML event code:
<Event xmlns=&quot;http://schemas.microsoft.com/win/2004/08/events/event&quot;>
  <System>
    <Provider Name=&quot;Microsoft-Windows-Wininit&quot; Guid=&quot;{206f6dea-d3c5-4d10-bc72-989f03c8b84b}&quot; EventSourceName=&quot;Wininit&quot; />
    <EventID Qualifiers=&quot;16384&quot;>1001</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime=&quot;2012-01-11T12:44:51.000000000Z&quot; />
    <EventRecordID>1419</EventRecordID>
    <Correlation />
    <Execution ProcessID=&quot;0&quot; ThreadID=&quot;0&quot; />
    <Channel>Application</Channel>
    <Computer>FX-4100</Computer>
    <Security />
  </System>
  <EventData>
    <Data>

Partition C: 2nd pass

Log name:Application
Source:        Microsoft-Windows-Wininit
Date:          2012-01-11 18:50:07
Event ID:1001
Event Category: N/A
Stage/Level:        Information
Keywords: Classic
User:    N/A
Computer:      FX-4100
Description:


Checking file system on C:
The type of the file system is NTFS.

A disk check has been scheduled.
Windows will now check the disk.                         

CHKDSK is veryfing files (stage 1 of 5)
  File records processed: 108544.                                   

File verification completed.
  Large file records processed: 138.  .                            

  Damaged file records processed: 0.                      

  EA records processed: 0.                  

  Reparse records processed: 64.                         

CHKDSK is veryfing indexes (stage 2 of 5)
  Index entries processed: 155544.                                    

Index verification completed.

  Unindexed files scanned: 0.                            

  Unindexed files recovered: 0.                                

CHKDSK is veryfing security descriptors/file IDs (stage 3 of 5)
   SDs/SIDs file processed: 108544.   

Cleaning up 2 index entries from index $SII of file 0x9.
Cleaning up 2 entries from index $SDH of file 0x9.
Cleaning up 2 unused security descriptors.
Security descriptors verification complete.
  Data files processed: 23501.                                     
Veryfing USN log...

  USN numbers bytes processed: 35676496.                                

Checking usn log ***integrity***? completed.
CHKDSK is veryfing file data (stage 4 of 5)
  Files processed: 108528.                                            

Checking file data completed.
CHKDSK is veryfing free space (stage 5 of 5)
  Free clusters processed: 10406483.                                        

Free space verification completed..
Windows has verified the file system and didn't find any problems.

  67379199 KB total disk space.
  25480228 KB in 84759 files.
     60840 KB in 23502 indexes.
         0 KB in bad sectors.
    212199 KB in use by the system.
     65536 KB occupied by the log file.
  41625932 KB available on disk.

      4096 bytes in each allocation unit.
  16844799 total allocation units on disk.
  10406483 allocation units available on disk.

Internal information:
00 a8 01 00 f1 a6 01 00 99 3d 03 00 00 00 00 00  .........=......
b2 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00  ....@...........
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................

Windows has completed disk check.
Wait for the system to restart.

Kod XML zdarzenia:
<Event xmlns=&quot;http://schemas.microsoft.com/win/2004/08/events/event&quot;>
  <System>
    <Provider Name=&quot;Microsoft-Windows-Wininit&quot; Guid=&quot;{206f6dea-d3c5-4d10-bc72-989f03c8b84b}&quot; EventSourceName=&quot;Wininit&quot; />
    <EventID Qualifiers=&quot;16384&quot;>1001</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime=&quot;2012-01-11T17:50:07.000000000Z&quot; />
    <EventRecordID>1466</EventRecordID>
    <Correlation />
    <Execution ProcessID=&quot;0&quot; ThreadID=&quot;0&quot; />
    <Channel>Application</Channel>
    <Computer>FX-4100</Computer>
    <Security />
  </System>
  <EventData>
    <Data>
</Data>
  </EventData>
</Event>

Partition D:

Log name:Application
Source:        Chkdsk
Dat:          2012-01-11 13:06:41
Event ID:26214
Event Category: N/A
Stage/Level:        Information
Keywords: Classic
User:    N/A
Computer:      FX-4100
Description:
Chkdsk has been launched in read/write mode.  

Checking file system on D:
Volume has been unmounted. All open entries to this volume are now invalid/incorrect.
Volume name: Programmes.

CHKDSK is veryfing files (stage 1 of 5)
  File records processed: 21504.                                   

File verification completed.
  Large file records processed: 1.                            

  Damaged file records processed: 0                            

  Bad file records processed: 0.                      

  EA records processed: 0.                                

CHKDSK is veryfing indexes (stage 2 of 5)
  Index entries processed: 23914.                                    

Index verification completed.


CHKDSK is veryfing security descriptors/file IDs (stage 3 of 5)
   SDs/SIDs file processed: 21504.   

Cleaning up 2 index entries from index $SII of file 0x9.
Cleaning up 2 entries from index $SDH of file 0x9.
Cleaning up 2 unused index descriptors.
Security descriptors verification complete.
  Data files processed: 1206.                                     

Veryfing USN log...
  USN numbers bytes processed: 1186432.                                

Checking usn log ***integrity***? completed.
CHKDSK is veryfing file data (stage 4 of 5)
  Files processed: 21488.                                            

Checking file data completed.
CHKDSK is veryfing free space (stage 5 of 5)
  Free clusters processed: 33143508.                                        

Free space verification completed..
Windows has verified the file system and didn't find any problems.

 155135999 KB total disk space.
  22464344 KB in 10191 files.
      4076 KB in 1207 indexes.
     93543 KB in use by the system.
     65536 KB occupied by the log file.
 132574036 KB available on disk.

      4096 bytes in each allocation unit.
  38783999 total allocation units on disk.
  33143509 allocation units available on disk.

XML event code:
<Event xmlns=&quot;http://schemas.microsoft.com/win/2004/08/events/event&quot;>
  <System>
    <Provider Name=&quot;Chkdsk&quot; />
    <EventID Qualifiers=&quot;0&quot;>26214</EventID>
    <Level>4</Level>
    <Task>0</Task>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime=&quot;2012-01-11T12:06:41.000000000Z&quot; />
    <EventRecordID>1412</EventRecordID>
    <Channel>Application</Channel>
    <Computer>FX-4100</Computer>
    <Security />
  </System>
  <EventData>
    <Data>

</Data>
    <Binary>00540000922C0000B7450000000000001D000000000000000000000000000000</Binary>
  </EventData>
</Event>

Partition E:

Log name:Application
Source:        Chkdsk
Date:          2012-01-11 19:51:19
Event ID:26214
Event Category: N/A
Stage/Level:        Information
Keywords: Classic
User:    N/A
Computer:      FX-4100
Description:
Chkdsk has been launched in read/write mode.    

Checking file system on E:
Volume has been unmounted. All open entries to this volume are now invalid/incorrect.
Volume name: Data.

CHKDSK is veryfing files (stage 1 of 5)
  File records processed: 14592.                                   

File verification completed.
  Large file records processed: 4.                            

  Damaged file records processed: 0                            

  Bad file records processed: 0.                      

  EA records processed: 0.                           

CHKDSK is veryfing indexes (stage 2 of 5)
  Index entries processed: 16472.                                    

Index verification completed.


CHKDSK is veryfing security descriptors/file IDs (stage 3 of 5)
   SDs/SIDs file processed: 14592.   

Cleaning up 75 index entries from index $SII of file 0x9.
Cleaning up 75 entries from index $SDH of file 0x9.
Cleaning up 75 unused index descriptors.
Security descriptors verification complete.
  Data files processed: 941.                                     

Veryfing USN log...
  USN numbers bytes processed: 25280104.                                

Checking usn log ***integrity***? completed.
CHKDSK is veryfing file data (stage 4 of 5)
  Files processed: 14576.                                            

Checking file data completed.
CHKDSK is veryfing free space (stage 5 of 5)
  Free clusters processed: 63756623.                                        

Free space verification completed..
Windows has verified the file system and didn't find any problems.

 265870335 KB total disk space.
  10728208 KB in 5381 files.
      1992 KB in 942 indexes.
    113639 KB in use by the system.
     65536 KB occupied by the log file.
 255026496 KB available on disk.

      4096 bytes in each allocation unit.
  66467583 total allocation units on disk.
  63756624 allocation units available on disk.

XML event code:
<Event xmlns=&quot;http://schemas.microsoft.com/win/2004/08/events/event&quot;>
  <System>
    <Provider Name=&quot;Chkdsk&quot; />
    <EventID Qualifiers=&quot;0&quot;>26214</EventID>
    <Level>4</Level>
    <Task>0</Task>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime=&quot;2012-01-11T18:51:19.000000000Z&quot; />
    <EventRecordID>1476</EventRecordID>
    <Channel>Application</Channel>
    <Computer>FX-4100</Computer>
    <Security />
  </System>
  <EventData>
    <Data>
</Data>
    <Binary>00390000BF1800003D22000000000000C6000000000000000000000000000000</Binary>
  </EventData>
</Event>

Looks like C: was cleaned up. See how it runs and whether you continue to have hard disk related problems.

I would still recommend running the memory tests overnight. Just start Memtest86+ an hour before bed tonight so you can make sure it hasn't stopped before you go to sleep. Then do the Windows memory diagnostics tomorrow night with the same procedure if Memtest86+ comes back clean. If it does not, we will provide further instructions.

Good luck!

Thanks, will repeat the memory test then and report back. Hopefully hard drive will stop crashing, I'm just wondering if it can still be trusted, I hesitate a bit. We'll see :) thanks again for help.

R4ndom said:

Thanks, will repeat the memory test then and report back. Hopefully hard drive will stop crashing, I'm just wondering if it can still be trusted, I hesitate a bit. We'll see :) thanks again for help.

Hard drive errors are difficult to diagnose. I just had one myself a few days ago, and it came back clean. They can occur on good drives just as easily on bad drives, but they will reoccur on bad drives. Just let it run for a week or two, and if the crashes occur due to NTFS.SYS and you continue to find hard disk errors, the drive is failing.

Best wishes the drive is good and just needed some cleaning.

Thanks writhziden :) does that mean I'd better run chkdsk every now and then during the 2 weeks? Or just leave it run and once problems reoccur return the disk? Would it make any sense to image the current c: partition should another disaster come to preserve my system image and user files or the risk would be to image a corrupted partition?

As for memories, so far, after 8hrs of memtest86+ tests no errors found, I'll let it run until tonight and then repeat with Win7 utility.

All the best.

R4ndom said:

Thanks writhziden :) does that mean I'd better run chkdsk every now and then during the 2 weeks? Or just leave it run and once problems reoccur return the disk? Would it make any sense to image the current c: partition should another disaster come to preserve my system image and user files or the risk would be to image a corrupted partition?

As for memories, so far, after 8hrs of memtest86+ tests no errors found, I'll let it run until tonight and then repeat with Win7 utility.

All the best.

I would just run normally for a week, then run chkdsk once a week or after any problems seem to have developed again. As for backing up your system and important files, we recommend doing this on a regular basis whether you have a good or a bad hard drive since computers can be unpredictable at times. Better to have a backup when something unexpected happens (hard drive crash, hard drive corruption, virus, etc.) than lose all your files.

Glad to see you are still going through the steps. Keep us updated. Best wishes!

Thanks for advice writhziden. Memtest86+ for 19hrs standard test with 19 passes completed and no errors. Will do the same with the windows one and post results.

Glad to see no errors in Memtest86+. Best wishes with the Windows Memory Diagnostic tool. :)