New
#11
I've uninstalled/reinstalled Microsoft Essentials.
For a day, it was fine.
Now, two more BSOD.
Enclosing files as usual.
Thanks
p.s. it seems there still is something wrong with the antivirus: real time protection is disabled, and it keeps saying it needs virus definition to be updated.
MsMpEng.exe is a core process of Windows Defender. Please do the following:Code:******************************************************************************* * * * Bugcheck Analysis * * * ******************************************************************************* MEMORY_MANAGEMENT (1a) # Any other values for parameter 1 must be individually examined. Arguments: Arg1: 0000000000005003, The subtype of the bugcheck. Arg2: fffff70001080000 Arg3: 0000000000007f63 Arg4: 00010e210000ffc6 Debugging Details: ------------------ BUGCHECK_STR: 0x1a_5003 CUSTOMER_CRASH_COUNT: 1 DEFAULT_BUCKET_ID: WIN7_DRIVER_FAULT PROCESS_NAME: MsMpEng.exe CURRENT_IRQL: 0 ANALYSIS_VERSION: 6.3.9600.16384 (debuggers(dbg).130821-1623) amd64fre LAST_CONTROL_TRANSFER: from fffff80002eef4ec to fffff80002e86bc0
1. Click Start
2. In the search box, type cmd
3. In the list that appears, right-click on cmd.exe and choose Run as administrator
4. In the command window that opens, type sfc /scannow and hit enter.
Report the output from the command window once it finishes.
More detail: SFC /SCANNOW Command - System File Checker
Here's the report
Sorry: the command window said something like "Windows resources protection: inpossible to restore some of the damaged files found. Details in the CBS.log file"
The failing replacement isn't exactly critical :)
... but Windows can get sniffy about these things, so I'll post a fix protocol in a few minutes.Code:Line 72320: 2014-01-09 12:00:05, Info CSI 0000030b [SR] Repairing 1 components Line 72321: 2014-01-09 12:00:05, Info CSI 0000030c [SR] Beginning Verify and Repair transaction Line 72324: 2014-01-09 12:00:05, Info CSI 0000030e [SR] Cannot repair member file [l:18{9}]"img17.jpg" of Microsoft-Windows-Shell-Wallpaper-Architecture, Version = 6.1.7600.16385, pA = PROCESSOR_ARCHITECTURE_AMD64 (9), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, hash mismatch Line 72327: 2014-01-09 12:00:05, Info CSI 00000310 [SR] Cannot repair member file [l:18{9}]"img17.jpg" of Microsoft-Windows-Shell-Wallpaper-Architecture, Version = 6.1.7600.16385, pA = PROCESSOR_ARCHITECTURE_AMD64 (9), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, hash mismatch Line 72328: 2014-01-09 12:00:05, Info CSI 00000311 [SR] This component was referenced by [l:216{108}]"Microsoft-Windows-Branding-Professional-Client-Package~31bf3856ad364e35~amd64~~6.1.7601.17514.BPSC Namespace" Line 72333: 2014-01-09 12:00:05, Info CSI 00000314 [SR] Could not reproject corrupted file [ml:520{260},l:82{41}]"\??\C:\Windows\Web\Wallpaper\Architecture"\[l:18{9}]"img17.jpg"; source file in store is also corrupted Line 72342: 2014-01-09 12:00:05, Info CSI 00000316 [SR] Repair complete
...By the way, Golden - MsMPeng is also part of MSE. perhaps running removal tools for BitDefender and Avast would be a good idea?
I've uploaded a file - gviaa.zip - to my SkyDrive at Noel's SkyDrive
Please download and save it.
Right-click on the saved file and select Extract all...
Change the target to C:\ and click on Extract
Close all windows (it would be a good idea to print these instructions!)
Now reboot to the Repair Environment - as soon as the machine restarts, start tapping F8 - this should bring up the Advanced Boot Menu, at the top of which should be the option 'Repair my Computer'
Pick that
You'll have to log in with your username and password.
Pick the option to use a Command Prompt
At the prompt type
DIR C:\gviaa
hit the enter key - if you get a 'Not Found' error try
DIR D:\gviaa
or
DIR E:\gviaa
The drive letter in use when you find the folder will need to be substituted (for<drive>) into the following command...
XCOPY <drive>:\gviaa <drive>:\windows\winsxs /y /i /s /v /h
(e.g.XCOPY P:\wfire P:\windows\winsxs /y /i /s /v /h )
run the command (it should take almost no time)and when the prompt returns, type
EXIT
and hit the Enter key to exit Command Prompt - reboot to Normal Mode Windows.
Now run SFC /SCANNOW in an Elevated Command Prompt
then reboot and upload the new CBS.log file to your SkyDrive Public folder, and post a new link
Also run a new MGADiag report, and post the result.
... wow :) Thank you so much for taking the time.
I'll print these instructions now.
Btw, I've already run the Avast revomal tool in Safe mode. As far as Bitdefender is concerned, that was an incredibly unpleasant experience that belongs to the past. I have reinstalled everything just a few days ago (but not Bit Defender).
p.s.: there seems to be just an image in the zipped folder. Is that right?
p.s. 2: I do not have a SkyDrive folder. Is it ok if I post the CBS.log file here like the first time?