Solved Bsod boot only in safe mode

[theobserver]

Windows 7 Bsod.I can boot only in safe mode

Hi all,

for the past 2 days i cannot log in normally in my windows 7.

Only in safe mode (without networking)

I am not lazy and i have read a lot.
But it seems i cannot fix the pc without your help.

I have read here the thread about how to post and says that i should attach the dump file.Well i have it attached. (the minidump.If another is needed please tell me and i will do it asap)

Also says to use the sf diagnostic tool.I have it attached.Run it while in safe mode.

I have attached the mini dump renamed as 011313-21481-01.txt.You have to rename it to .tmp because the forum here does not allow me to uploadIf another dump is needed please tell me and i will do asap.

I also have attached the file from the tool bluescreenview in case someone is more familiar with.

If someone else need something else pls tell me and i will do it asap.

Up to now i have tried:
System restore -failed
Repair windows -failed (cannot fix problem)
Repair windows from install disk (no sp1) -failed (says no problem with boot)
Repair windows from install disk (with sp1) -failed (says no problem with boot)
chkdsk -failed (it says is in use and schedule it for next boot but doesnt happen since i get the bsod)
tried to upgrade my windows 7 to sp1 from dvd -failed because says that i should start normally and then run setup from dvd.
tried to upgrade my windows 7 from windows dvd (without sp1) failed for the same reason as above.
which is not possible since i get the bsod.Right now i am reading around if i could upgrade from safe mode.

If there is something else i should try please tell me.

Thank you for your time reading this.

Regards,
theobserver.

 

[Britton30]

You may zip any file needed and upload as long as each is less than 8GB.
Some hardware tests to run.

Graphics card:
Video Card Stress Test with Furmark

Hard drive(s):
Pick one for your HDD brand or use Seatools.
7 Free Hard Drive Testing Software Tools


RAM (memory):
This will require memtest on a bootable CD or USB stick.
http://www.sevenforums.com/tutorials/105647-ram-test-memtest86.html

 

[theobserver]

Thx for yor answer.

I dont think there is some problem with the hardware but since there is a chance and no other answer yet i will try the tests you post.
They wil be run in safe mode since i cannot log in normally.

Thank you.

 

[theobserver]

memtest and sea tool does not show any errors.

Fmark exits with an error (probably because i am in safe mode)

Please suggest me something else because i am really out of options.

Thank you for your time reading this.

Regards,
theobserver

 

[Britton30]

Did you run memtest for 7 passes as shown? How about the hard drive test?
To better help us to help you would you please add your systems specs? Here's how:SystemInfo See Your System Specs Under System Manufacturer/Model Number add whether it is a desktop or laptop and whether self built. Very important

Log in to Seven Forums and you will be able to transfer the info directly to the specs page in your profile from within the System Info app.

After doing this your specs will be available in each of your posts.
Click on My system Specs in the lower left of this post to see how it should look.
Full instructions are in the tutorial.

I also called for the BSOD Team to look.

 

[Dave76]

As Britton30 mentioned, we need your System Specs, how many passes did you run with memtest86+?
You can also try this program to find your specs: Speccy Free System information Utility

Your zip folder was not complete.
Blue Screen of Death (BSOD) Posting Instructions
When posting a new crash dump, include all System File Collection and health reports. They contain valuable information that we can use to find the cause of the crashes.

All your crashes are the same.

STOP 0x000000D1: DRIVER_IRQL_NOT_LESS_OR_EQUAL
Usual causes:  Device driver
*** WARNING: Unable to verify timestamp for nm3.sys
*** ERROR: Module load completed but symbols could not be loaded for nm3.sys
Probably caused by : nm3.sys ( nm3+1358 )
An attempt was made to access a pageable (or completely invalid) address at an
interrupt request level (IRQL) that is too high.  This is usually
caused by drivers using improper addresses.
READ_ADDRESS: GetPointerFromAddress: unable to read from fffff8000350e100
GetUlongFromAddress: unable to read from fffff8000350e1c0
 0000000000000020 Nonpaged pool
DEFAULT_BUCKET_ID:  WIN7_DRIVER_FAULT
FAILURE_BUCKET_ID:  X64_0xD1_nm3+1358

nm3.sys - Network Monitor 3 NDIS 6.0 Monitoring Filter Driver - Microsoft Network Monitor 3.4
Try re-installing from the link above.

This is probably not the cause of your crashes, just a result.
Since it won't boot unless in Safe Mode, this indicates a non-Windows driver issue.

Have you installed any new software recently?
Any new hardware?

Remove all un-necessary programs from 'Start Up'
How to Change, Add, or Remove Startup Programs in Windows 7

From your System Events Log:

Event[34996]:
  Log Name: System
  Source: Service Control Manager
  Date: 2012-10-20T00:03:57.316
  Event ID: 7026
  Task: N/A
  Level: Error
  Opcode: N/A
  Keyword: Classic
  User: N/A
  User Name: N/A
  Computer: lolas-PC
  Description: 
The following boot-start or system-start driver(s) failed to load: 
Lbd

Lbd.sys - Ad-Aware boot driver
Remove Ad-Aware for testing purposes.

What anti-virus are you using?

Event[34613]:
  Log Name: System
  Source: Disk
  Date: 2012-10-15T11:18:10.681
  Event ID: 11
  Task: N/A
  Level: Error
  Opcode: N/A
  Keyword: Classic
  User: N/A
  User Name: N/A
  Computer: lolas-PC
  Description: 
The driver detected a controller error on \Device\Harddisk2\DR10.

Event[34577]:
  Log Name: System
  Source: Disk
  Date: 2012-10-15T01:30:24.579
  Event ID: 11
  Task: N/A
  Level: Error
  Opcode: N/A
  Keyword: Classic
  User: N/A
  User Name: N/A
  Computer: lolas-PC
  Description: 
The driver detected a controller error on \Device\Harddisk3\DR5.

This could be several things, knowing your hardware would help to diagnose.
What is your SATA controller driver?

Event[37881]:
  Log Name: Application
  Source: Microsoft-Windows-Wininit
  Date: 2013-01-13T16:28:54.000
  Event ID: 1001
  Task: N/A
  Level: Information
  Opcode: N/A
  Keyword: Classic
  User: N/A
  User Name: N/A
  Computer: lolas-PC
  Description: 


Checking file system on E:
The type of the file system is NTFS.
Volume label is Old_New.

One of your disks needs to be checked for consistency. You
may cancel the disk check, but it is strongly recommended
that you continue.
Windows will now check the disk.                         

CHKDSK is verifying files (stage 1 of 3)...
  94976 file records processed.                                         

File verification completed.
  2 large file records processed.                                   

  0 bad file records processed.                                     

  0 EA records processed.                                           

  0 reparse records processed.                                      

CHKDSK is verifying indexes (stage 2 of 3)...
  97022 index entries processed.                                        

Index verification completed.
  0 unindexed files scanned.                                        

  0 unindexed files recovered.                                      

CHKDSK is verifying security descriptors (stage 3 of 3)...
  94976 file SDs/SIDs processed.                                        

Security descriptor verification completed.
  1024 data files processed.                                           

CHKDSK is verifying Usn Journal...
  166537712 USN bytes processed.                                            

Usn Journal verification completed.
Correcting errors in the master file table's (MFT) BITMAP attribute.
Windows has made corrections to the file system.

 244196000 KB total disk space.
 241538432 KB in 21140 files.
      8392 KB in 1025 indexes.
         0 KB in bad sectors.
    331248 KB in use by the system.
     65536 KB occupied by the log file.
   2317928 KB available on disk.

      4096 bytes in each allocation unit.
  61049000 total allocation units on disk.
    579482 allocation units available on disk.

Internal Info:
00 73 01 00 a1 56 00 00 8e 86 00 00 00 00 00 00  .s...V..........
5e 03 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ^...............
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................

Check Disk found errors on your E: master file table's (MFT).

Event[37567]:
  Log Name: Application
  Source: Windows Error Reporting
  Date: 2013-01-09T15:33:11.000
  Event ID: 1001
  Task: N/A
  Level: Information
  Opcode: Info
  Keyword: Classic
  User: N/A
  User Name: N/A
  Computer: lolas-PC
  Description: 
Fault bucket , type 0
Event Name: AppHangTransient
Response: Not available
Cab Id: 0

Problem signature:
P1: firefox.exe
P2: 17.0.1.4715
P3: 50b71a4b
P4: unknown
P5: unknown
P6: unknown
P7: unknown
P8: 
P9: 
P10: 

Attached files:

These files may be available here:


Analysis symbol: 
Rechecking for solution: 0
Report Id: 138405b0-5a61-11e2-a28c-001e8c414aec
Report Status: 1

There are reported issues with the latest FireFox versions, un-install for testing. You can install an older version.

 

[theobserver]

Thank you so much for yor answers guys.
I should have come here to ask earlier and not let 3 days of tries on my own.

Right now i can not even log in with safe mode.

Safe mode stacks at CLASSPNP.The light of HD lits as if it is loading but it stacks.

Anyway i will try to answer as many of your question as i can since i cannot log in in safe mode any more.

@Britton30

i let memtest running more than it was saying. It run for about 2 hours with no problems.
Seatools run all test succesfully except the one that erases data.The only strange thing was that it shows my 2 disks twice. As if i had 4 disks.

I cannot give you my system specs since i cannot log in any more.
The pc is a desktop ,i bought it from a friend 4 years ago and is running till today smoothly.
Here is what i remember
Intel dual core 3000
Motherboard Asus Formula
4 Mb memory
2 vga cards ati 3800
2 disks. the one with two partitions (c , d)
Soundcard Extreme fx
Windows ultimate x64

I dont recall the rest

@Dave76:

I have not install recently hardware. But i think i know what this was caused from.

I show that my nsxns folder was rather big. I read about this folder and i found out ttha win7 hold there crusial info.I also found out that i could save 5 Gb (if i recall correct) if i would make Service Pack 1 permanent. So i run a command i found on that site ,which i dont recall now and it freed 5 Gb.I also run ccleaner and uninstall couple programs like hamachi. The next restart had the blue screen

I didnt had adaware.I had it a year before.
Myantivirus is avast.Run it in safe mode didnt show any infections.
Firefox run while in safe mode correctly thought i didn had network.i am writing to you from a borrowed laptop.

Since now i cannot log in in safe mode and after of 3 days i need my pc to work.I am thinking to put another disk in pc to install windows fresh cause they seem really bad right now.

I thank you much for your answers.
If you have an idea what to do to get in safe mode to give you the info you ask i will do.

Thank you for your time and excuse my lame english.

Regards,
theobserver.


@

 

[theobserver]

Ok i managed to log in with safe mode.

Unfortunately i can not use systeminfo to automatically upload my specs since i have no access to the net from the damaged pc. Yet i have input them manually.Unfortunatelly for each tab there were many choices so i filled which i think appropriate. Also systeminfo does not have an export to txt

I also tried speccy and get an error CPU dll init failed (error 2) Some information will not be displayed. then it crashes to desktop.

 

[theobserver]

That is good but strange.

I have installed what Dave76 proposed Microsoft Network monitor (although it had an ia64 and a 64 version i didnt know which so i preffered the 64 version.)

Then i disabled startup programs.

From my reads all this time i had concluded that was a problem with networking or similar and iremembered that i had set hamachi network driver load first than normal driver for hamachi to work correctly.Was not sure though so

Then i disabled another driver had to do with tunneling and a program i installed some months ago.

Then i disabled a hamachi network driver (cause it wasnt uninstalling)

and i managed to boot normaly after three days of continuous tries !

Now i will create a restore point and i will try to enable startup programs some at a time and see what happens.

That was actually my last try before i would do a clean windows install.

I have some questions now:

Is system restore enough? Later i will create a backup of c:
How can i uninstall a driver that is not uninstalling?

I believe the hamachi driver did the problem.

Also i would like to ask how to uninstall a driver when it is not uninstalling and a good backup program you would suggest.

UPDATE: All startup programs are loading ok.
The only problem i have is tha avast turns on with an exclamation mark that show it is not working.

Thank you for your time reading this.

Regards,
theobserver.

 

[Pauly]

i think i know what this was caused from.

I show that my nsxns folder was rather big. I read about this folder and i found out ttha win7 hold there crusial info.I also found out that i could save 5 Gb (if i recall correct) if i would make Service Pack 1 permanent. So i run a command i found on that site ,which i dont recall now and it freed 5 Gb.I also run ccleaner and uninstall couple programs like hamachi. The next restart had the blue screen

I think you need to clarify exactly what you did and what command you ran as this is likely what caused your problem, im guessing you messed with the winsxs folder

 

[Dave76]

Agree with Pauly, with the unknown command from somewhere and running CCleaner, I think a clean install would be your best option.

First you can try System File Checker to see if there is anything that can be fixed.
How to Repair Windows 7 System Files with System File Checker

Let us know the results.

 

[theobserver]

The pc is ok now as i wrote above.

Thank you much for your help.

For those who ask about the command it was this: dism /online /cleanup-image /spsuperseded /hidesp

 

[Dave76]

Glad it's stable now.

You're welcome.