Additional errors found while troublrshooting BSOD

During my debugging efforts I also ran System Health Report. I always get ONE error as follows:
Symptom: A service is reported as having an unexpected error code
Cause: One or more services has failed. The service did not stop gracefully, suggesting the service may have crashed or one of its components stopped in an unsupported way.
Details: Service exited with code not equal to 0 or 1077
If I double-click on “A service is reported as having an unexpected error code” I get the following:
Abnormally Stopped System Services
Path: C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted

Any suggestion on how to handle?

Error event log attached

Code:

Log Name:      System
Source:        Disk
Date:          5/2/2012 8:17:33 PM
Event ID:      11
Task Category: None
Level:         Error
Keywords:      Classic
User:          N/A
Computer:      HP2010
Description:
The driver detected a controller error on \Device\Harddisk5\DR5.

You have a ton of errors like the above. What hard disk has location 5? Start Menu -> Computer -> Right click a hard disk -> Properties -> Hardware tab -> Select each piece of hardware -> Check the Location for 5.

Are you hard disk controller drivers up to date? If they are, they may be corrupted and in need of an uninstall and re-install. If you fill in your system specs on your profile (not in a post in this thread), we will be able to help you find the proper drivers. System Info - See Your System Specs can help with filling in the system specs.

• If you are overclocking any hardware, please stop.
  
  
• Run Disk Check with both boxes checked for all HDDs and with Automatically fix file system errors checked for all SSDs. Post back your logs for the checks after finding them using Check Disk (chkdsk) - Read Event Viewer Log.
  For any drives that do not give the message:
  Windows has checked the file system and found no problems
  run disk check again as above. In other words, if it says:
  Windows has made corrections to the file system
  after running the disk check, run the disk check again.
  
  
• Run SFC /SCANNOW Command - System File Checker up to three times to fix all errors with a restart in between each. Post back if it continues to show errors after a fourth run or if the first run comes back with no integrity violations. Use OPTION THREE of SFC /SCANNOW Command - System File Checker to provide us with the sfcdetails.txt file if errors occur.

You also have event ID 4107 in your errors. See Event ID 4107 or Event ID 11 is logged in the Application log in Windows and in Windows Server to resolve that error.

Thanks for you advice. Below is an itemized answer


1. You have a ton of errors like the above. What hard disk has location 5? Start Menu -> Computer -> Right click a hard disk -> Properties -> Hardware tab -> Select each piece of hardware -> Check the Location for 5.
Nothing is shown for Location 5. More below.

2. Are you hard disk controller drivers up to date?

Have 2 storage controllers:

Intel ICH8R/ich9r/ICH10R/DO/PCH SATA RAID Controller
Driver Date: 6/4/2009
Driver Version: 8.9.0.1023

JMicron JMB36X Controller
Driver Datye: 11/25/2010
Driver Version: 1.17.62.0


Windows says “The best driver software for your device is already installed”, but (as I learned from the usb3hub.sys experience) this is not always true; or, as you mention, the drivers might be corrupt. How would I determine if they are corrupt or not?

3. If they are, they may be corrupted and in need of an uninstall and re-install. If you fill in your system specs on your profile (not in a post in this thread), we will be able to help you find the proper drivers. System Info - See Your System Specs can help with filling in the system specs.
Done – system specs uploaded

4. If you are overclocking any hardware, please stop. No overclocking

5. Run Disk Check with both boxes checked for all HDDs and with Automatically fix file system errors checked for all SSDs. Post back your logs for the checks after finding them using Check Disk (chkdsk) - Read Event Viewer Log.

I performed chkdsk as instructed. However, when checking the logs as described, FIND doesn’t work (grayed out). A manual investigation shows the following:
13476 events from 4/13/2012 5:10PM to 5/5/2012 at 10AM
ALL 13476 ARE THE SAME
Source: Disk
Event ID: 11 but when looking at the details I found 3 types:
The driver detected a controller error on \Device\Harddisk1\DR1.
The driver detected a controller error on \Device\Harddisk2\DR2.
The driver detected a controller error on \Device\Harddisk5\DR5.
Each type is reported consistently for several days.
The following is interesting:
Last timestamp for
The driver detected a controller error on \Device\Harddisk5\DR5.
is 5/4/2012 8:42:20 PM
First timestamp for
The driver detected a controller error on \Device\Harddisk1\DR1.
Is 5/5/2012 12:38:26 AM
The interesting thing is that Chkdsk performed between these times (5/4/2012 8:42:20 PM 5/5/2012 12:38:26 AM)
For any drives that do not give the message:
Windows has checked the file system and found no problems
run disk check again as above. In other words, if it says:
Windows has made corrections to the file system
after running the disk check, run the disk check again.

6. Run SFC /SCANNOW Command - System File Checker up to three times to fix all errors with a restart in between each. Post back if it continues to show errors after a fourth run or if the first run comes back with no integrity violations. Use OPTION THREE of SFC /SCANNOW Command - System File Checker to provide us with the sfcdetails.txt file if errors occur.

7.You also have event ID 4107 in your errors. See Event ID 4107 or Event ID 11 is logged in the Application log in Windows and in Windows Server to resolve that error.

Done

Again, many thanks for all the help.

drdigital1 said:

5. Run Disk Check with both boxes checked for all HDDs and with Automatically fix file system errors checked for all SSDs. Post back your logs for the checks after finding them using Check Disk (chkdsk) - Read Event Viewer Log.

I performed chkdsk as instructed. However, when checking the logs as described, FIND doesn’t work (grayed out). A manual investigation shows the following:
13476 events from 4/13/2012 5:10PM to 5/5/2012 at 10AM
ALL 13476 ARE THE SAME
Source: Disk
Event ID: 11 but when looking at the details I found 3 types:
The driver detected a controller error on \Device\Harddisk1\DR1.
The driver detected a controller error on \Device\Harddisk2\DR2.
The driver detected a controller error on \Device\Harddisk5\DR5.
Each type is reported consistently for several days.
.

The comments made in item 5 are because I looked at Custom Views/Administrative Events instead of looking at Windows Logs/Application as instructed. Sorry about that. Once I did that, I found the summary of the chkdsk run last night (source was wininit as chkdsk was done through restart) and it says Windows has checked the file system and found no problems
I will run another chkdsk tonight.

In addition to the above, please take a screenshot of Disk Management. Start Menu -> Right click Computer -> Manage -> Disk Management (from the list on the left)

Screenshots and Files - Upload and Post in Seven Forums

Did you have a chance to run SFC /SCANNOW?

Thanks again for all the help!
Screenshots requested enclosed
Yes, I ran SFC /SCANNOW both yesterday and today with the same result: Verification 100%. Windows Resource Protection did not find any integrity violations
I also ran chkdsk again last night with the same result: Windows has checked the file system and found no problems
I am enclosing the latest Error Event Log as you instructed me earlier
1. In addition to the errors of type
Source: Disk
Event ID: 11
The driver detected a controller error on \Device\Harddisk1\DR1 or 2 etc
2. I have a lot of VSS errors
3. I still have some event ID 4107 (CAPI2) errors even though I followed the recommendations at Event ID 4107 or Event ID 11 is logged in the Application log in Windows and in Windows Server to resolve.
Failed extract of third-party root list from auto update cab at: <http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab> with error: A required certificate is not within its validity period when verifying against the current system clock or the timestamp in the signed file.
4. You wrote earlier
Are you hard disk controller drivers up to date? If they are, they may be corrupted and in need of an uninstall and re-install. If you fill in your system specs on your profile (not in a post in this thread), we will be able to help you find the proper drivers. System Info - See Your System Specs can help with filling in the system specs.
With so many controller errors (one every few seconds!) shouldn’t I do this? If you think so, can you provide some guidance, please?

Any other suggestions?

Hard disk 5 is one of your hidden Removable disks, from the looks of it. That was my suspicion all along. Let's see if uninstalling and re-installing the controllers helps:

• Download the controller drivers from Original Intel SATA Controller Driver HP Pavilion Elite HPE-380t CTO Desktop PC - HP Customer Care (United States - English)
• Uninstall your Controller drivers through Device Manager.
  1. Log in as an administrative user
  2. Click Start Menu
  3. Click Control Panel
  4. Click Hardware and Sound
  5. Click Device Manager
  6. Expand IDE ATA/ATAPI Controllers
  7. Right click the each Controller
  8. Click Uninstall (do not hit OK yet)
  9. Put a tick in the box to Delete driver software for this device
  10. Click OK
  11. Restart your computer if asked
  12. Install the downloaded drivers (if Windows installed its own drivers, see how the system responds, and if the errors are gone, do not worry about installing the downloaded drivers from HP).

Done. Windows installed a new driver as follows:
Driver date: 1/15/2010
Driver version: 9.5.7.1002
This is the same version (but not the same date) as the driver on the HP site.
The bad news is that the disk error EVENT ID 11 (The driver detected a controller error on \Device\Harddisk5\DR5.) continues, and so does VSS error EVENT ID 12294

(new event log file attached)


I really appreciate your continuous assistance. Thanks,

What do you use for backing up your system? Do you have 3rd party backup software by any chance?


Also check Windows Backup and Restore: Restore Backup User and System Files

Make sure you do not have a backup pending. The VSS errors indicate that the computer is trying to backup your computer files to a removable storage drive that is not connected.

...there is one thing which is different though. As you can see in the attached screen shot Disk 5 is now the USB-connected external drive. Could it be that the controller for the USB-connected hard drive is not the Intel one which I updated but a different (and corrupted/obsolete one)?