BSOD ntoskrnl.exe then atikmdag.sys errors. Please help! - wyles

[Slartybart]

Glad to hear that you're making headway. Did you do anything other than clean up your hosts file that allowed you to log in (not having to log in safe mode). Uninstall any software, stop any torrents? It's not important to resolving the issue, I'm just curious.

Thanks Noel for your eyes on the MGAdiag. We'll see what SFC and SUR have to report.

Funny thing is that he sounds like my brother in law

..... Interesting youtube video, but the guy recording sounds incredibly nerdy and condescending. .....

 

[1nonly]

Glad to hear that you're making headway. Did you do anything other than clean up your hosts file that allowed you to log in (not having to log in safe mode). Uninstall any software, stop any torrents? It's not important to resolving the issue, I'm just curious.

Thanks Noel for your eyes on the MGAdiag. We'll see what SFC and SUR have to report.

Funny thing is that he sounds like my brother in law

..... Interesting youtube video, but the guy recording sounds incredibly nerdy and condescending. .....

The pattern seems like this: turn on computer, attempt to reach normal log in...computer hangs, monitor gets no information from computer and is in standby mode. Monitor, that is...then you can't reset the computer in any fashion...you have to unplug it or turn off the power source.
It continues to behave like this.
If I manage to go into safe mode, then I can reboot and go into a normal log in.
Strange, huh?
I'll still continue to crack at it, though.

 

[carwiz]

If you're not using any of the Adobe retail products, you can remove the Adobe automatic update checker. It goes out and checks license keys as well as updates. Perhaps a leftover from your Adobe AIR trial and the reason for the Host file entry.

I also noticed many attempts at running a DVD copier (DVDFab.exe). I won't speculate on the reason for trying to bypass DVD copy protection but I doubt it's for law enforcement purposes.

I'm removing myself from this thread.

 

[1nonly]

If you're not using any of the Adobe retail products, you can remove the Adobe automatic update checker. It goes out and checks license keys as well as updates. Perhaps a leftover from your Adobe AIR trial and the reason for the Host file entry.

I also noticed many attempts at running a DVD copier (DVDFab.exe). I won't speculate on the reason for trying to bypass DVD copy protection but I doubt it's for law enforcement purposes.

I'm removing myself from this thread.

Call this my probation officer side coming out, but I feel that if you don't say anything you're as good as guilty. DVDFAB..had it, don't have it any longer. It's primary use was for backing up disney movies for my 7 year old. Just cause the movie's on sale doesn't mean i want to continue to buy it. So i would back up her movies. So why not hve it anymore? Two reasons, I've backed her movies up on a secondary hard drive now. And secondly, the program updates all the time and it can quickly get expensive to keep up to date with all the new securities put on movies, especially if I don't buy movies often anymore anyway.
The few movies I have are treasured. MOst of the time these days Netflix streaming services and redbox have more than covered. Plus, I'm more of a bluray head these days. Not sure how to remove the adobe automatic update checker. Couldn't find it.

I would appreciate you not leaving the thread though. Seem like a sharp cookie.

 

[1nonly]

That's fine then
Carry on, constable
(sorry - couldn't resist that one.)

I'd suggest running an SFC scan and CheckSUR, and see if they point up any file system problems...

If you follow the http://www.sevenforums.com/windows-...4840-windows-update-posting-instructions.html it'll give us the data.

Ran the CheckSUR tool and one update was found that still needed to be installed. It did without any problems although it took longer than I thought it should (about 5 min.) but it did ultimately install well. Only one optional update left to instal per windows update, and that's the Bing on Desktop upgrade. I don't want it as I don't like BIng so that one will remain as an option to install.

SFC scan CBS files attached. The sfc scan finished and said that windows resource protection found corrupt files but was unable to fix some of them.

 

[NoelDP]

I've known CheckSUR take over an hour to run even on a fairly fast system.
SFC usually takes around 10-20 minutes

The SFC results are interesting - the usual result in the summary is missing, so it took a little while to find the files reference....

2013-02-12 13:33:49, Info                  CSI    000000a7 [SR] Beginning Verify and Repair transaction
2013-02-12 13:33:51, Info                  CSI    000000a8 Hashes for file member \SystemRoot\WinSxS\amd64_microsoft-windows-font-truetype-batang_31bf3856ad364e35_6.1.7600.16385_none_13de7dc07ffbe591\batang.ttc do not match actual file [l:20{10}]"batang.ttc" :
  Found: {l:32 b:ulqlFHGtUWnyAeeFxp3HyZ+k/9IrI4VEd5X8GbN1XPQ=} Expected: {l:32 b:CRurQ9Vl/KHlAM6skcV1ab+uMdOT2KeYdhHc0lnq/hk=}
2013-02-12 13:33:51, Info                  CSI    000000a9 [SR] Cannot repair member file [l:20{10}]"batang.ttc" of Microsoft-Windows-Font-TrueType-Batang, Version = 6.1.7600.16385, pA = PROCESSOR_ARCHITECTURE_AMD64 (9), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, hash mismatch
2013-02-12 13:33:52, Info                  CSI    000000aa [SR] Repaired file \SystemRoot\WinSxS\Manifests\\[l:20{10}]"batang.ttc" by copying from backup
2013-02-12 13:33:52, Info                  CSI    000000ab Hashes for file member \??\C:\Windows\fonts\batang.ttc do not match actual file [l:20{10}]"batang.ttc" :
  Found: {l:32 b:ulqlFHGtUWnyAeeFxp3HyZ+k/9IrI4VEd5X8GbN1XPQ=} Expected: {l:32 b:CRurQ9Vl/KHlAM6skcV1ab+uMdOT2KeYdhHc0lnq/hk=}
2013-02-12 13:33:52, Info                  CSI    000000ac [SR] Repairing corrupted file [ml:520{260},l:40{20}]"\??\C:\Windows\fonts"\[l:20{10}]"batang.ttc" from store
2013-02-12 13:33:53, Info                  CSI    000000ad Repair results created:
     0: Create File: File = [l:256{128}]"\SystemRoot\WinSxS\amd64_microsoft-windows-font-truetype-batang_31bf3856ad364e35_6.1.7600.16385_none_13de7dc07ffbe591\batang.ttc", Attributes = 00000080
    1: Move File: Source = [l:164{82}]"\SystemRoot\WinSxS\Temp\PendingRenames\8fd1faa66809ce01af0900003c10d008.batang.ttc", Destination = [l:256{128}]"\SystemRoot\WinSxS\amd64_microsoft-windows-font-truetype-batang_31bf3856ad364e35_6.1.7600.16385_none_13de7dc07ffbe591\batang.ttc"
    2: Move File: Source = [l:192{96}]"\SystemRoot\WinSxS\Temp\PendingRenames\3dd35ba76809ce01b00900003c10d008._0000000000000000.cdf-ms", Destination = [l:104{52}]"\SystemRoot\WinSxS\FileMaps\_0000000000000000.cdf-ms"
    3: Move File: Source = [l:162{81}]"\SystemRoot\WinSxS\Temp\PendingRenames\881f5ca76809ce01b10900003c10d008.$$.cdf-ms", Destination = [l:74{37}]"\SystemRoot\WinSxS\FileMaps\$$.cdf-ms"
    4: Move File: Source = [l:208{104}]"\SystemRoot\WinSxS\Temp\PendingRenames\1fb85ca76809ce01b20900003c10d008.$$_fonts_40104ba9a1d20dac.cdf-ms", Destination = [l:120{60}]"\SystemRoot\WinSxS\FileMaps\$$_fonts_40104ba9a1d20dac.cdf-ms"
    5: Hard Link File: Source = [l:256{128}]"\SystemRoot\WinSxS\amd64_microsoft-windows-font-truetype-batang_31bf3856ad364e35_6.1.7600.16385_none_13de7dc07ffbe591\batang.ttc", Destination = [l:62{31}]"\??\C:\Windows\fonts\batang.ttc"
    6: Move File: Source = [l:214{107}]"\SystemRoot\WinSxS\Temp\PendingRenames\69db9aa76809ce01b30900003c10d008.$$_system32_21f9a9c4a2f8b514.cdf-ms", Destination = [l:126{63}]"\SystemRoot\WinSxS\FileMaps\$$_system32_21f9a9c4a2f8b514.cdf-ms"

The summary only refers to this obliquely -

2013-02-12 13:39:59, Info                  CSI    000002eb Creating NT transaction (seq 2), objectname [6]"(null)"
2013-02-12 13:39:59, Info                  CSI    000002ec Created NT transaction (seq 2) result 0x00000000, handle @0x440

I think a second run of SFC /SCANNOW may be a good idea to ensure that the move is bedded in properly, but you should get a 'no problems found message at the end.
If not, please post the new CBS.log file (only)

Your CheckSUR log is clean.

Unless you have problems with the second SFC, I'll leave you to the mercies of the BSOD specialists.
Good luck!

 

[1nonly]

Second pass with SFC / SCANNOW on an elevated dos prompt yielded no problems this time. I got a 'Windows Resource Protection did not find any integrity violations' message and it ran much faster this time.

 

[NoelDP]

Great! - back to the BSOD boys then

 

[1nonly]

Great! - back to the BSOD boys then

Good to hear! Thanks for your contributions,most of it was Greek to me, but if it fixed even a little of the problem then it was worth it. THanks again, sir!

 

[Slartybart]

just a quick note on how I handle Bing & Silverlight. These are two Windows Updates that I will never install, but they are repeatedly offered as updates. SilverLight has five and Bing two -I think.

:warn::warn: Right click the update and select hide - use this feature with caution
--> never hide an important or critical update. :warn::warn:
You can always restore hidden updates if you change your mind.

Good to see progress.

.....Only one optional update left to instal per windows update, and that's the Bing on Desktop upgrade. I don't want it as I don't like BIng so that one will remain as an option to install.

 

[gregrocker]

Did everything else check out using the Troubleshooting Steps for Windows 7?

 

[Slartybart]

@1nonly: I have to concur with Greg on the Clean Reinstall. I fat figured something in the past few days and only noticed the repercusions today. Price of researchng solutions on your only working machine, I guess. So I spent a few hours trying to fix it, but eventually said "screw it" - I could be half way tnrough a fresh install.

The tutorial is very well written - if you follow it step by step, you'll have a much better running system.

I was going to suggest that you go through your system and clean out the old applications, run some utilities to clean up any left over bits, but that's a lot of work. More work than backing up your data and doing a clean install.

It's your call, and it depends on your threshold for pain. Take the piecemeal approach and possibly BSOD in a week or a month from now, or go all in and get a stable system.

There's a lot of stuff on your machine that has the potential to bite you sometime in the future (questionable optimizers, many active torrents, not to mention outdated sotware/drivers).

You have some of the best folks giving you suggestions. So I'll bow out.

Work through these Troubleshooting Steps for Windows 7 particularly establishing a Clean Boot with only AV starting with Win7, checking the logs and System Resources for clues, running all Important and Optional Windows Updates after enabling Automatically deliver drivers via Windows Update (Step 3).

I would also consider getting a perfect install following these same steps for
Clean Reinstall - Factory OEM Windows 7.
Set up yourself as passworded Administrator then other family members as Standard Users so that they cannot download/install from questionable sites or change settings without your permission.