Solved BSOD +Search Function lost +Outlook crashing +services not enabling

[mfx]

BSOD Dual monitor running both full screen different applications.

Basics : BSOD occasionally

Cause : Possibly due to Windows Performance being change by TuneUpUtilities 2012 (Do not recommend this program in Windows7 with SSD drives and USB security software dongles). SSD Drive which I have had installed for a while and clean install back in August.

OD occasionally when running dual monitor with VLCplayer on the secondary and a master program (sometimes a game) on the master. Never been an issue in the past. This maybe a rogue non related issue and just the gfx card going down.

Appears when running VLCplayer and on some occasions firefox/chrome (TVCatchup - Never Miss A Show Again) which is adobe flash plugin based.

No new hardware added.


Antivirus = EsetNod current license (since April 2011) not sure why it's not recognised by Windows7 oin the diagnostics but is actively running.

OK to stay on OP. Has anyone got a reliable registry script I can import to quickly resolve the Windows Features on or off issue please?

Files attached below. Will try and catch the oxe error number (keep missing it/forgetting to make a note).

Thanks for any help.

Mark

System Manufacturer/Model Number
EVGA X55
OS
Windows 7 Ultimate x64
CPU
i7920 2.66ghz
Motherboard
EVGA X55
Memory
12gb Triple DDr1066mhz
Graphics Card(s)
ATI HD4870
Sound Card
RME Fireface 800
Monitor(s) Displays
Samsung 22" / Samsung172w
Screen Resolution
1650x1080 / 1280x768
Hard Drives
OCX SSD Vertex2 120gb
Maxtor Raptor 150gb
WD 1tb 64
WD 640gb

PSU
Silent 650w
Case

Custom designed SilentCase

Cooling
Air

Keyboard
Microsoft Bulk Standard

Mouse
LogitechMX510

Internet Speed
50MB Virgin
Other Info
I'm no Pro but try to learn quickly!

 

[Golden]

Hi Mark,

I've had a quick read, and I suspect all 3 of your threads are related (the fact that there appears to be missing services sounds particularely serious given that an sfc /scannow doesn't appear to fix the issue). To me, it sounds like a significant issue with your underlying system - the various tuneup utilities have either contributed or complicated the issue even further. These utilities are by and large completely redundant in Windows 7 and it is extremely rare that anyone will recommend them now.

Unfortunately, these are well beyond my capabilities, but I think I can find someone that is able to help you. Whilst we wait for someone, can you please run this tool, and then post the results in your next reply:

http://go.microsoft.com/fwlink/?linkid=52012

Also, can you see whether you have any .dmp files in C:\Windows\Minidump? If so, then please also attach the latest .dmp file here as this is usually the first file a BSOD analyst will look at.

Regards,
Golden

*** EDIT : I have requested a more experienced eye to look at this ***

 

[mfx]

Hi Golden

Thank you for your reply and escalation much appreciated.

Windows Dumpfile folder is empty. Which is odd as I have had another BSOD. This occurred after having graphics full screen on primary monitor, shutting the program down and then closing the secondary monitor firefox which was running tvcatchup full scree.

I have attached other files as requested.

I have also run the outlook native repair which turned up nothing.

I have also set up a new pst file for the archive.

Everyone's help is really appreciated.

I could do a reinstall the thing is it takes me about 2 days to install and configure the software installed.

Should I deleted/uninstall ccleaner or glarys utilities. Only reason is to get rid of the junk files or should I really be using Windows7 built in features. A lot of probably, in my case, habitual necessity of cleanliness

 

[gregrocker]

It's possible there's another traceable cause, but in almost every case where MucAfee or a tweaking Suite is mentioned you have already solved the issue.

Win7 will not tolerate XPired-Era tweaking suites like TuneUpUtilities which has likely ruined your System. Why would anyone do such a thing with a perfectly feather-light, instantaneous OS? Any improvement would have to be in hardware.

You can try a Repair Install but many of the botched settings changes may carry over so a Clean Reinstall following these steps is the best approach to such system suicide: Perfect Reinstall

 

[NoelDP]

I've had a look at the output from the MGADiag tool - here's what I found
The system went into 'Grace Mode' on the 11th August - and was immediately activated (If I'm reading it right).
Since then, there have been no significant problems with WGA (or at least no recorded events.
I'm not sure why the tool has been run 9 times today, and there are 6 or so copies of the results in the TXT file? - there were no significant changes between the first and last results anyhow

I can see no problems in the MGADiag output - and the Office installation appears to have been properly done, and is probably genuine (It's difficult to tell, since MS abandoned the OGA program in December last year, but at least it's not being reported as a definite counterfeit )


I've not read the rest of the threads (or the rest of this one, come to that), so can't comment on anything else.

 

[mfx]

Hi Greg

I've read several of your posts along my journey.

The BSOD was occurring pre the TuneUp installs and to be fair CC and GU have been running without a hitch since install Nov 2009/Dec 2010 and Aug 2011. That aside it does appear TuneUp has probably caused the problem.

There is one other contributing factor that I recall. Windows did a self adjustment for Aero and enhanced features setting the performance vs quality weighted towards performance. I am actually wondering if the BSOD is a graphics card issue (overflow). Regarding the search I am pretty confident you are right regarding registry especially since the program and featuyres dialogue box has gone rogu (no text or tick boxes).

I have used eset nod32 since I have owned W7 and it's again been flawless.

Reinstall is an absolute last resort but may be necessary

 

[gregrocker]

Eset is fine and may be the best paid AV.

I'd pursue the BSOD analysis because a driver is likely causing those. Meanwhile try other Win7 Display drivers for your GPU from manufacturer, working backward. I just solved a 7 crash on old hardware by ditching the Vista driver for an XP driver, so oddities exist.

I'd also never fear a Clean Reinstall as it is a fresh start better than getting a new computer (with today's bloatware preinstalls). It's also a great learning experience which is a specialty here so we will have your back: Reinstalling Windows 7

 

[mfx]

@Noel Thanks for the info. As far as I am aware all my software is legitamate. Including MS OS (received it free from Microsoft when they launched Windows7 via their tubberware party style bash) and office, I have two copies, are official as far as i can tell; Logos, holograms and so forth and has always activated fine over the years.

@ Greg I know I know reinstall. I only did it in August I do have a windows image of the original install on a secondary drive. What I failed to do and I really should've done and will do next time...back up once all my programs are installed.

Guys I really appreciate your help. Keep looking there has got to be something simple with the Search and Outlook bugs.

 

[NoelDP]

Looking in the MSINFO32 data - there are a number of 'Problem Devices', including two disabled RealTek NIC drivers.
This raises the question of
1) Why were they disabled?
2) do they actually exist, since a third one appears to be working properly (How many physical NIC ports are there)?
3) Is there a problem with the physical LAN connection - NIC faults can have HUGE impacts on the system.
4) What happens if you turn the NIC off in the BIOS (if it's possible)? does this stop your other problems as well?

 

[mfx]

Hi Noel

There are two ethernet terminals on the motherboard are these the NICS you refer to? In BIOS both set to auto and I use one for internet access. Neither disabled.

I have tested both and run absolutely fine.

If I switch the ethernet off I wouldn't be able to replecate the function that would cause the bsod.

Not sure what the 3rd one is. All 3 appear in Network Connections :

Realtek PCI GBE Family Controller(s) :

Local Area Connection
Local Area Connection 2
Local Area Connection 3

2+3 are disabled.

 

[NoelDP]

If I switch the ethernet off I wouldn't be able to replecate the function that would cause the bsod.

(my point precisely<g>)

I can't help thinking that there's a problem there somewhere.
Please look in Device Manager, and enable 'Show hidden Devices'
UNINSTALL (not just disable) all yellow or red-flagged devices - and ALL the RealTek Ethernet Adapters.
If anything doesn't want to uninstall, reboot to Safe Mode, and try from there.
Reboot to Normal Mode, and let Windows reinstall anything it thinks it needs to - make a note of any that cause problems.

Then re-test.

 

[NoelDP]

I also see msseces and msmpeng in running processes - Doesn't eSet switch off Windows Defender? - or do you also have MSE installed? If so, then UNINSTALL either MSE, or eSet.

 

[mfx]

Uninstalling MSE now.

 

[NoelDP]

That should stop an awful lot of problems - have a play and see
Having two AV's installed and running will cause all sorts of conflicts as they fight for posession of files as they are opened.

What other AV's have EVER been installed on this machine? - including any preinstalled by the manufacturer?

It would probably be a good idea to use the removal tool for MSE as well - and you may need to think about a reinstall of eSet (or a repair install) - How to manually uninstall Microsoft Security Essentials 1.0.1963 if you cannot uninstall it by using the Add or Remove Programs item

 

[mfx]

Only MSE. After years of experience (some of it somewhat blinkered and tunnelled) I have learnt quickly that Norton/McAfee are not system friendly.

Will try and use the tool unfortunately my Search has dissapeared of the face of my system...reinstall seems to be the way forward.

Had a look through device manager unhidden. No exclamation marks or ? devices (well one but that's a midi port which is now currently unplugged no issues).

Deinstalled the following :

Virtual Clone ISO manager.
Rebirth (propellerheads legacy software this could be a major issue tbh)
A few other small programs no redundant - Recuvva accidentally deleted 15 years of samples now backed up

Thanks for the tip.

Still have other issues to resolve if you care to peruse

Thanks

http://www.sevenforums.com/general-...win-f-programs-features-fail.html#post1651912

http://www.sevenforums.com/microsof...07-crashing-running-safe-mode-appears-ok.html

Peace

 

[NoelDP]

Only MSE. After years of experience (some of it somewhat blinkered and tunnelled) I have learnt quickly that Norton/McAfee are not system friendly.

Still have other issues to resolve if you care to peruse

Thanks

http://www.sevenforums.com/general-...win-f-programs-features-fail.html#post1651912

http://www.sevenforums.com/microsof...07-crashing-running-safe-mode-appears-ok.html

Peace

I too have a certain amount of prejudice about those two programs :devil: - they tend to get ripped out of any PC I'm asked to work on (and if the owner doesnt want it removed, then I don't work on it).

YOu may find that those problems will also be solved, or at least mitigated.
I'll have a look - but my knowledge of Outlook's foibles cound be written in 24pt on a postage stamp, and as for Windows Search.....

Let's see how the BSOD's go, after a few days, and see if things have settled down.

 

[Jonathan_King]

Hi there,

I found evidence of hard drive/controller trouble all through your logs.

Event[4]:
  Log Name: System
  Source: atapi
  Date: 2011-11-10T13:58:06.105
  Event ID: 11
  Task: N/A
  Level: Error
  Opcode: N/A
  Keyword: Classic
  User: N/A
  User Name: N/A
  Computer: MFXSOUND
  Description: 
The driver detected a controller error on \Device\Ide\IdePort5.

Event[3958]:
  Log Name: System
  Source: Microsoft-Windows-UserPnp
  Date: 2011-11-08T12:56:56.842
  Event ID: 20011
  Task: N/A
  Level: Information
  Opcode: Info
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: MFXSOUND
  Description: 
Device action request for device 'USB\VID_059F&PID_1010\SAMSUNG_HDS0VVJ1MP706377______' was vetoed by 'STORAGE\Volume\{8207a2bf-fbf5-11e0-b574-00113b1137b0}#0000000000007E00' with veto type 5.

Event[3959]:
  Log Name: System
  Source: Microsoft-Windows-Kernel-PnP
  Date: 2011-11-08T12:56:56.842
  Event ID: 225
  Task: N/A
  Level: Warning
  Opcode: Info
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: MFXSOUND
  Description: 
The application System with process id 4 stopped the removal or ejection for the device USB\VID_059F&PID_1010\SAMSUNG_HDS0VVJ1MP706377______.

Event[13402]:
  Log Name: System
  Source: Disk
  Date: 2011-10-30T23:34:56.282
  Event ID: 51
  Task: N/A
  Level: Warning
  Opcode: N/A
  Keyword: Classic
  User: N/A
  User Name: N/A
  Computer: MFXSOUND
  Description: 
An error was detected on device \Device\Harddisk6\DR14 during a paging operation.

That could explain the problem with Windows Search:

Event[0]:
  Log Name: System
  Source: Service Control Manager
  Date: 2011-11-10T13:58:32.989
  Event ID: 7034
  Task: N/A
  Level: Error
  Opcode: N/A
  Keyword: Classic
  User: N/A
  User Name: N/A
  Computer: MFXSOUND
  Description: 
The Windows Search service terminated unexpectedly.  It has done this 19 time(s).

Start off by running SeaTools: SeaTools for Windows | Seagate

When SeaTools is done, open a command prompt and run:

chkdsk /r

Please report the results of both tests.

Also, be sure to do a repair install. It shouldn't touch any of your data, and might resolve your Windows Search issue, assuming it is not being caused by a hard drive issue. See this guide: http://www.sevenforums.com/tutorials/3413-repair-install.html

I see evidence of past or present malware on your system:

Event[2820]:
  Log Name: System
  Source: Microsoft Antimalware
  Date: 2011-11-09T13:52:36.000
  Event ID: 1117
  Task: N/A
  Level: Information
  Opcode: Info
  Keyword: Classic
  User: N/A
  User Name: N/A
  Computer: MFXSOUND
  Description: 
Microsoft Antimalware has taken action to protect this machine from malware or other potentially unwanted software.
 For more information please see the following:
http://go.microsoft.com/fwlink/?linkid=37020&name=Adware:Win32/OpenCandy&threatid=159633
     Name: Adware:Win32/OpenCandy
     ID: 159633
     Severity: Low
     Category: Adware
     Path: file:_D:\MFX STUDIO\Studio Utilities\Darkwave\DarkWave-Studio-3.0.7.exe;file:_G:\Studio Utilities\Darkwave\DarkWave-Studio-3.0.7.exe;folder:_C:\Users\MFX\AppData\Roaming\OpenCandy\
     Detection Origin: Local machine
     Detection Type: Concrete
     Detection Source: Real-Time Protection
     User: MFXSOUND\MFX
     Process Name: C:\Windows\explorer.exe
     Action: Remove
     Action Status:  To finish removing malware and other potentially unwanted software, restart the computer. 
     Signature Version: AV: 1.115.1486.0, AS: 1.115.1486.0, NIS: 10.7.0.0
     Engine Version: AM: 1.1.7801.0, NIS: 2.0.7707.0

Run a full scan with ESET, including all drives (not just C).

 

[mfx]

Hi there thanks for the input.

Not sure why DarkWave is malware but nonetheless never installed and was on a seperate data drive now deleted.

SeaTools worked fine and didn't raise any issues but to be honest not sure what options to run?

chkdsk /r (ran as administrator) didn't throw up any issues either.

Wondering if it's a driver issue with the GFX.

To be honest I am homing in on a recovery from August and full reinstall of the system software programs for the studio.

What I am think is have the admin account for the studio and setup another user account for office work and surfing. May even install on a second drive office and other applications as the studio is really where I need the SSD performance tbh.

 

[Jonathan_King]

For SeaTools, run the Short Drive Self Test.

For chkdsk, did you have to reboot the computer in order for it to run? Open event viewer ("eventvwr.msc" in the start menu), go to Windows Logs > Application, and find the latest wininit entry. Could you copy/paste your results here?

 

[mfx]

For SeaTools, run the Short Drive Self Test.

For chkdsk, did you have to reboot the computer in order for it to run? Open event viewer ("eventvwr.msc" in the start menu), go to Windows Logs > Application, and find the latest wininit entry. Could you copy/paste your results here?

Will rerun Seatools again tomorrow (midnight now and sleepy).

I have run "eventvwr.msc" and gone to windows logs>applications. Theres a lot in ther and have attached below.

There is a load of errors and yellow ! from TuneUp Utilities 2012. DEFINATELY NOT A PROGRAM I WOULD RECOMMEND IN THE FUTURE by the looks of things.

Attached the event log as a zip, I am unable to locate the winnit.

Hope this helps.