BSOD increasingly frequent crashes; varying error messages.

givolini said:

I did notice MSE acting strange: sometimes, on startup, it won‘t activate and I‘ll have to update manually to have it started.
Perhaps I should reinstall?

Yes. Uninstall, then reinstall - no need for Safe Mode.

Code:

*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

MEMORY_MANAGEMENT (1a)
    # Any other values for parameter 1 must be individually examined.
Arguments:
Arg1: 0000000000005003, The subtype of the bugcheck.
Arg2: fffff70001080000
Arg3: 0000000000007f63
Arg4: 00010e210000ffc6

Debugging Details:
------------------


BUGCHECK_STR:  0x1a_5003

CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  WIN7_DRIVER_FAULT

PROCESS_NAME:  MsMpEng.exe

CURRENT_IRQL:  0

ANALYSIS_VERSION: 6.3.9600.16384 (debuggers(dbg).130821-1623) amd64fre

LAST_CONTROL_TRANSFER:  from fffff80002eef4ec to fffff80002e86bc0

MsMpEng.exe is a core process of Windows Defender. Please do the following:
1. Click Start
2. In the search box, type cmd
3. In the list that appears, right-click on cmd.exe and choose Run as administrator
4. In the command window that opens, type sfc /scannow and hit enter.

Report the output from the command window once it finishes.

More detail: SFC /SCANNOW Command - System File Checker

I'll ask NoelDP to have a look at this for you.

The failing replacement isn't exactly critical :)

Code:

 Line 72320: 2014-01-09 12:00:05, Info                  CSI    0000030b [SR] Repairing 1 components
 Line 72321: 2014-01-09 12:00:05, Info                  CSI    0000030c [SR] Beginning Verify and Repair transaction
 Line 72324: 2014-01-09 12:00:05, Info                  CSI    0000030e [SR] Cannot repair member file [l:18{9}]"img17.jpg" of Microsoft-Windows-Shell-Wallpaper-Architecture, Version = 6.1.7600.16385, pA = PROCESSOR_ARCHITECTURE_AMD64 (9), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, hash mismatch
 Line 72327: 2014-01-09 12:00:05, Info                  CSI    00000310 [SR] Cannot repair member file [l:18{9}]"img17.jpg" of Microsoft-Windows-Shell-Wallpaper-Architecture, Version = 6.1.7600.16385, pA = PROCESSOR_ARCHITECTURE_AMD64 (9), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, hash mismatch
 Line 72328: 2014-01-09 12:00:05, Info                  CSI    00000311 [SR] This component was referenced by [l:216{108}]"Microsoft-Windows-Branding-Professional-Client-Package~31bf3856ad364e35~amd64~~6.1.7601.17514.BPSC Namespace"
 Line 72333: 2014-01-09 12:00:05, Info                  CSI    00000314 [SR] Could not reproject corrupted file [ml:520{260},l:82{41}]"\??\C:\Windows\Web\Wallpaper\Architecture"\[l:18{9}]"img17.jpg"; source file in store is also corrupted
 Line 72342: 2014-01-09 12:00:05, Info                  CSI    00000316 [SR] Repair complete

... but Windows can get sniffy about these things, so I'll post a fix protocol in a few minutes.

...By the way, Golden - MsMPeng is also part of MSE. perhaps running removal tools for BitDefender and Avast would be a good idea?

I've uploaded a file - gviaa.zip - to my SkyDrive at Noel's SkyDrive
Please download and save it.
Right-click on the saved file and select Extract all...
Change the target to C:\ and click on Extract
Close all windows (it would be a good idea to print these instructions!)
Now reboot to the Repair Environment - as soon as the machine restarts, start tapping F8 - this should bring up the Advanced Boot Menu, at the top of which should be the option 'Repair my Computer'
Pick that
You'll have to log in with your username and password.
Pick the option to use a Command Prompt
At the prompt type
DIR C:\gviaa
hit the enter key - if you get a 'Not Found' error try
DIR D:\gviaa
or
DIR E:\gviaa

The drive letter in use when you find the folder will need to be substituted (for<drive>) into the following command...

XCOPY <drive>:\gviaa <drive>:\windows\winsxs /y /i /s /v /h

(e.g.XCOPY P:\wfire P:\windows\winsxs /y /i /s /v /h )

run the command (it should take almost no time)and when the prompt returns, type
EXIT
and hit the Enter key to exit Command Prompt - reboot to Normal Mode Windows.
Now run SFC /SCANNOW in an Elevated Command Prompt
then reboot and upload the new CBS.log file to your SkyDrive Public folder, and post a new link
Also run a new MGADiag report, and post the result.