BSOD-Failed Startups

[Whazzupdoc]

Hi again...and Merry Christmas!

My wife's computer: Win7x64 O/S. Last couple of days going down without warning. Had visited a particular homes/sales site selling homes in California and the 1st instance started immediately from that site, so says my wife.

Also none of her passwords seem to work.

1st I did the Windows StartUp Diagnostic and was told after about 20mins that it failed to complete. I then did a Restore to 12/14/18 but it acts sick. I ran FarBarx64 and have the attachments. Tell me what else I need to do.





This involves my wife's computer: Win7x64 Home Edition. I've run and am attaching the FarBar64 diagnostics I ran after I attempted the Windows Startup Diagnostic and restoration to 12/14 backup. It seems to not be shutting down as it was but it's sick.

None of her passwords work and the ton of desktop icons (she does a lot of online research) work. They just 'ding'. Her StartPage search program fails, however I can bring it up on Internet Explorer.

If you tell me what else you need (and how to do it), I'll get right on it. And thanks for your help.
Merry Christmas!
Doc

 

[Whazzupdoc]

It doesn't look like the attachments 'took'. I'll try again!

 

[torchwood]

Hi Doc,,

nothing obvious showing in FRST, apart from a driver updater program.

However the ray of sunshine,
see your running Macrium - Hope its upto date, i would restore using that, if its not to old.

If not please run the standard repair tools

sfc /scannow (from an elevated command mode)
KB947821 - from the description of the problem this could take a while.

Roy

 

[Whazzupdoc]

Hey Roy...been awhile!

Since I posted, I've been doing some of what you're suggesting and (cross fingers!) the machine hasn't experienced another BSOD. I'll try some others once I've got some quiet time on her machine...touchy!

It's true the Macrium Backup is daily. The sad admission is I've never had to restore and don't know what to do once I hit that Restore Tab. I'll have to go on and snag their manual and see if I understand it.

If I hit a wall I'll get back on this Post...I'll keep it open for a few days. Thanks!

Doc

 

[axe0]

Backup and Restore with Macrium Reflect | Tutorials

 

[Whazzupdoc]

Happy Sunday!

Complicated possible cause. I use Emsisoft Anti-Malware. My friend is their head tech and when he learned of the BSOD on my wife's computer, it was him who analyzed the Farbar diagnostic. Here's what he learned and maybe this will be instructive to others?

The crash was in Macrium Reflect's mrcbt.sys driver. The error was an incorrect parameter. The driver was called by reflectbin.exe, presumably the executable process for Macrium Reflect. The problem was the driver trying to read an incorrect (protected, maybe blanked) memory location. Most likely the memory location was protected, either by our program trying to scan it, or the memory had already been freed and Macrium's driver hadn't gotten the memo yet.

In short, Macrium tried to read memory and failed miserably, crashing everything.

I cannot say why that happened, but I can offer a suggestion at least, from the perspective of Emsisoft Anti-Malware. Please create monitoring exclusions for Macrium Reflect within our software, in Settings -> Exclusions. I think you've done this before, so I'll spare the detailed instructions. The paths you should exclude are:

Folder exclusion: C:\Program Files\Macrium\
Program exclusion: C:\Windows\system32\drivers\mrcbt.sys

Restart the computer after creating those, and see if the issue returns.

Comments?
Doc

 

[torchwood]

Hi Doc,

at least you've found the culprit.

Couple things come to mind, is Macrium upto date, is a Ram stick failing.
As an out-there thought does she install preview updates? - DONT, Macrium has been having problems in W10, both MS and Macrium had to change things and these may have have rolled down to W7.


Roy

 

[Whazzupdoc]

Hi Roy...and Merry Christmas to you!

Macrium updates (Incremental) daily...and when there is an update they tell us via email that there is one. I'm not quite sure what you mean by ramstick failing? The backup is to a Samsung 1Tbyte T-5. Also please elaborate on your comment about installing preview updates.

Here's the response I got from Macrium... Thank you for contacting the support team.

The KMODE_EXCEPTION_NOT_HANDLED 'BSoD' has been resolved by the Macrium Reflect v7.2.3957 update. Please ensure that you are running the most up-to-date version of Macrium Reflect.

Doc