BSOD While Booting

Attempt at description:
Sometimes BSOD occurs on booting. After what seems to be a normal shutdown, on reboot system repair screen shows and have to do a restore and then it boots into Win.
Ran sfc with integrity good. Did notice in the sfc details file two entries that were different form the rest.
2013-01-14 09:18:56, Info CSI 0000030b [SR] Beginning Verify and Repair transaction
2013-01-14 09:18:57, Info CSI 0000030d [SR] Verify complete
2013-01-14 09:18:57, Info CSI 0000030e [SR] Verifying 65 (0x0000000000000041) components
2013-01-14 08:53:53, Info CSI 0000030b [SR] Beginning Verify and Repair transaction
2013-01-14 08:53:54, Info CSI 0000030d [SR] Verify complete
2013-01-14 08:53:54, Info CSI 0000030e [SR] Verifying 65 (0x0000000000000041) components

The two above entries from the file show "verifying 65". Everything else show a value of 100. I don't know if that is relevant.
Ran Norton Internet Security Scan, MalwareBytes, and MS Security Essentials with all results good.
Ran Check Disk on boot disk. First attempt at that I got a BSOD. Second attempt after the resotore at boot routine. Chkdsk ran. results were some files reindexed. Looks OK to me.
Tried using Seven Forums Diagnostic tool. I had some trouble getting it to run but finally completed. Files are attached.



Attachment 250146

Bad news, mate. And, the situation is also a bit different.

Code:

*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck 50, {ffffffffffffffd0, 1, fffff800034d312c, 0}


Could not read faulting driver name
Probably caused by : win32k.sys ( win32k!xxxCreateDesktopEx+8e2 )

Followup: MachineOwner
---------

According to Carrona.org, STOP 0x00000050: PAGE_FAULT_IN_NONPAGED_AREA
Usual causes: Defective hardware (particularly memory - but not just RAM), Faulty system service, Antivirus, Device driver, NTFS corruption, BIOS

Let us see these one by one.

BIOS: It is OK I think.

Code:

BiosMajorRelease = 4
BiosMinorRelease = 6
BiosVendor = American Megatrends Inc.
BiosVersion = 1709
BiosReleaseDate = 11/09/2012

NTFS Corruption: You have 3 SSDs, I guess?

Code:

Corsair Force GT ATA Device
OCZ-VERTEX3 ATA Device
OCZ-VERT EX2 SCSI Disk Device

Make it sure that the firmware of all of those are up to date. Also check the cabling.

Antivirus: You have two different real time protection programs installed, which may/should cause conflict. Uninstall Norton and all Symentec products using Norton Removal tool.
Use Microsoft Security Essentials as your antivirus with windows inbuilt firewall, and free MBAM as the on demand scanner.
Download, install and update those, and then run full system scans with both of them, one by one.

Faulty System Service: Run SFC /SCANNOW Command - System File Checker
If it fails, or you cannot boot into your desktop, try SFC /SCANNOW : Run in Command Prompt at Boot

Hardware/RAM: Test your RAM modules for possible errors.
How to Test and Diagnose RAM Issues with Memtest86+
Run memtest for at least 8 passes, preferably overnight.

Device Drivers: Update the following:
Intel Graphics Media Accelerator HD Driver: From Intel Download Center
Realtek High Definition Audio Function Driver: From Realtek
nVidia Video drivers: From Drivers - Download NVIDIA Drivers (Get the 310.90 one)
Realtek RTL8168D/8111D Family PCI-E Gigabit Ethernet NIC: From Realtek
Broadcom 802.11g Network Adapter: Search in the manufacturer's site.

Also, scan the system for possible virus infection.

• Anti-rootkit utility TDSSKiller
• Windows Defender Offline

Let us know the results.

Thanks for the reply. I'll use it as a plan. I will set the computer to test the ram overnight. In the meantime I'll check out the drivers you mentioned. I have already ran sfc but somewhere along the line I can revisit that. When I close this message I am off to hunt the drivers.

Well, let's see. I have been busy.
Drivers:
Intel Graphics Media Accelerator HD Driver: From Intel Download Center
Downloaded from Intel and installed. Driver Ver 9.17.10.2932, dated 12/12/2012

Realtek High Definition Audio Function Driver: From Realtek
Downloaded form RealTek and installed
Driver Ver 6.0.1.6699 dated 8/7/2012

nVidia Video drivers: From Drivers - Download NVIDIA Drivers (Get the 310.90 one)
Downloaded from EVGA (310.90) Have made two attempts a installing. First deleted old driver installation, booted to safe, ran driver sweeper. Booted up and did an install the driver when in and my NVidia panel shows up working. But the closing window said there was a couple of options that did not install. Tried a second install overtop of the first. Same result. Haven't done anymore there graphics seem ok.

Realtek RTL8168D/8111D Family PCI-E Gigabit Ethernet NIC: From Realtek
Installed driver ver 7.65.1025.2012 dated 10/25/2012

Broadcom 802.11g Network Adapter: Search in the manufacturer's site.
Broadcom had a Blue Tooth package that had a driver for this device. Installed ver 5.100.82.33 dated 10/26/2011

Realtek RTL8168D/8111D Family PCI-E Gigabit Ethernet NIC: From Realtek
Got this from Asus. Couldn't locate at Realtek. ver 5.100.82.33 dated 11/22/2010

I may have the data on those last two intermingled. I'm tired.
Will run Mem86 tonight.

Upgraded bios from 1709 to 1805

Well done. Very well done on the driver updates.

For the realtek ethernet nic driver, you might have taken the 6th one from the list of Realtek

Code:

Win7 and WinServer 2008 R2 Auto Installation Program (SID:1546351) | 7.065 | 2012/11/23 | 5847k | US2 | US1 | US3 |

Also, reduce one AV program (IMO MSE should stay) and scan for virus infections. Sometimes a bootkit/rootkit may cause the same crash at boot up.

Ran MemTest for @12hours. It said six complete passes with ZERO errors.

I dl'd the file from realtek that you pointed out. I will investigate that today. I will check into the firmware on the SSD's today but I know two of them is up to date. The boot disk is up to date I just did it about a week ago.

Although I got what I consider a "funky" message at the end of the graphics installation, I can not find any problems with it. I will revisit that before I am done.

After the mem test when I rebooted this morning everything was normal.

I am waffling on the AV. Just renewed with Norton and I have 360 days of use to go. But the real hitch is they have a small app with it that intergrates in IE. It is a pass word vault. It is really handy. I do not run anything live except norton. When I use MSE I just call it up and turn it on.

Thanks for your replys to this problem.

You are welcome :)

When I listed the driver updates, somehow I got this listed twice and then got confused.

"Realtek RTL8168D/8111D Family PCI-E Gigabit Ethernet NIC: From Realtek
Got this from Asus. Couldn't locate at Realtek. ver 5.100.82.33 dated 11/22/2010" <-- solved

Just Ignore.

Here is the info on the SSD's.

Two of the three is up to date. The Vertex 2 is up to ver 1.37. As you can see mine is running 1.23. Alas the update tool for windows cannot see the disk. I Tried a linux boot tool and it could not see the disk either. So for the time being it is out of date. My disks are on an AHCI Intel controller, But I have a feeling the vertex 2 is plugged into an Asmedia Sata Controller (probably the problem).

Attachment 250301

Attachment 250302

Attachment 250303

This beast is nice and docile this morning. I think I will go into a holding pattern to see if I still have a problem. If I have no problems I will post back with the good news (2 to 3 days). If the problem persists I will continue on with the suggestions you made.

Something weird is going on. Last Patch Tuesday I had approximately eight patches. Four of which was for Net Framework 4. On a Couple of those the machine seemed to hang. So I cancelled the install and did them over. The patches installed list showed where I had cancelled and then on the succeeding attempt showed a success.

Yesterday out of the blue I had four patches to install. They were all Net Framework 4. I installed and on reboot I checked the installed list. The cancelled attempts have disappeared. All show success. KB2742595 shows up twice. Is MS screwing around with me. Who is to say that isn't the problem I am working on?

Attachment 250320

.NET updates have a nasty habit of doing things like this - they seem to be particularly fragile.
I'd reboot, and do a manual check for updates - see if it pops up again.
If not, the second install corrected the problem.
If it does pop up again, then we'll have to do some detective work, and possibly some automated or manual repair.