Solved BSOD: ntoskrnl.exe+74ec0: error 0x000000c5 [DRIVER_CORRUPTED_EXPOOL]

[essenbe]

I'm sure being old doesn't have anything to do with the confusion though.

 

[ice70]

I'm sure being old doesn't have anything to do with the confusion though.

in the same way it had nothing to do with me setting my BIOS to AHCI instead of RAID at my end
[or pressing the fast button in the AI suite in the first place!]
In the plus side, backups still restoring. My younger self would be panicking at the moment!

I have had some RAID file corruption in the past. Not entirely sure but it may have been down to a series of powercuts.
I have a UPS in place now, but would you suggest then that converting the RAID to just two normal drives may be the way forward?
Back up the RAID drive, revert it then format each one before moving everything back? From your previous comment is sounds like the RAID I have set up is more trouble than it is worth?

Apologies for the meandering thread!

Thank you for your help
ice70

 

[essenbe]

No problems at all. We have seen quite a few problems with raid here. I have used it myself a little and determined it was more trouble than it was worth. First on your raid 1 drives, every time you make a write, the computer has to do it twice, so your performance takes a big hit. Also, if you accidentally delete a file, it is deleted on both disks, so there is no advantage there, if you get a virus, you have it on both disks, so a disadvantage there too. To me, those are some of the things I think make raid not worth the problems or the performance hit. They sort of defeat the purpose of a raid 0. Raid does have it's place, but that is usually in a server environment using 10 or more disks running something like a raid 10 (1+0). Personally, I think you would be better served using the second disk as a backup disk and do frequent backups with images. If you delete a file, you can recover it from the image or if you get a Virus you can recover from an image.

The choice to use raid or not is yours. But I find it causes more problems than it is worth and there seem to me, to be more negatives than positives. I am moving to almost all SSDs and separate my data from my OS. The OS is just programs which are easy to install. My data is what is important to me. I do a clean install, install the Windows Updates and my basic programs that I always use and make an image of it with 2 or 3 imaging programs. I save that and I never have to worry about a clean install again. I back up my Data using imaging programs almost daily. Depending on your needs and available space, you can decide how many and which images to keep. I keep them on 3 different disks (yes, I am a fanatic about backups). Your OS disk is the one most likely to have problems or not be able to start, that's why I separate my data. It is much safer, and easier to backup or restore. I move all my user files and folders to another disk. I can then back up just one disk. That is my system, but you will have to develop your system that works best for you. My philosophy is it is not if a hard drive will go bad, it is when it will go bad.

 

[ice70]

Hi Essenbe,

apologies for the silence, turns out the RAID data corruption was a little more extensive than first thought. On the plus side I did get to clear out my data drive of the rubbish I had kept lying around 'just in case'. But I also have very little confidence that my work source files are not corrupted and need to make sure they are ok before deploying them

The joys of 20/20 hindsight [don't push the button and make sure you put RAID back on!]

Anyway, that is largely unrelated to the BSOD. I thought I could get through the week before doing anything major but turns out I was wrong - had two BSOD yesterday and a system freeze.

Installed the samsung evo update [mentioned way back at the beginning of this thread] and crossed my fingers that there were no problems. Who needs coffee when the potential for a complete system reinstall & tight work deadline looming
But it completed without a problem - at least none that I am aware of at the moment.

I also remember seeing something about a san disk driver failing to load in the event viewer and remembered that I had an extreme usb 3 flash drive left in the back USB 3 port. So I have removed that as well.
error:
The driver \Driver\WUDFRd failed to load for the device WpdBusEnumRoot\UMB\2&37c186b&0&STORAGE#VOLUME#_??_USBSTOR#DISK&VEN_SANDISK&PROD_EXTREME&REV_0001#AA011020120902084128&0#.
Log Name: System
Source: Microsoft-Windows-Kernel-PnP
Date: 20/02/2015 23:13:08
Event ID: 219
Task Category: (212)
Level: Warning
Keywords:
User: SYSTEM
Computer: Tower-PC
Description:
The driver \Driver\WUDFRd failed to load for the device WpdBusEnumRoot\UMB\2&37c186b&0&STORAGE#VOLUME#_??_USBSTOR#DISK&VEN_SANDISK&PROD_EXTREME&REV_0001#AA011020120902084128&0#.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-Kernel-PnP" Guid="{9C205A39-1250-487D-ABD7-E831C6290539}" />
<EventID>219</EventID>
<Version>0</Version>
<Level>3</Level>
<Task>212</Task>
<Opcode>0</Opcode>
<Keywords>0x8000000000000000</Keywords>
<TimeCreated SystemTime="2015-02-20T23:13:08.288272600Z" />
<EventRecordID>51561</EventRecordID>
<Correlation />
<Execution ProcessID="4" ThreadID="628" />
<Channel>System</Channel>
<Computer>Tower-PC</Computer>
<Security UserID="S-1-5-18" />
</System>
<EventData>
<Data Name="DriverNameLength">120</Data>
<Data Name="DriverName">WpdBusEnumRoot\UMB\2&37c186b&0&STORAGE#VOLUME#_??_USBSTOR#DISK&VEN_SANDISK&PROD_EXTREME&REV_0001#AA011020120902084128&0#</Data>
<Data Name="Status">3221226341</Data>
<Data Name="FailureNameLength">14</Data>
<Data Name="FailureName">\Driver\WUDFRd</Data>
<Data Name="Version">0</Data>
</EventData>
</Event>

I also removed PSIA.exe

so far so good, but it has only been about 24 hours so maybe a little early to tell. But fingers crossed.

I also have my OS / Data on separate drives and now have 0 confidence in the RAID set up I have. This is the 3rd data corruption problem I have had in something like 2 years. So there is a new drive on order which I will put in then I will just use the current drives for backups of the new one. One thing I also found was that some of my backups were not up to scratch. I am using the built in windows backup - I would be interested to hear more about the disk imaging software you are using.

Thank you for your help,
ice70

 

[essenbe]

I use Macrium Relect free edition (Macrium Reflect Free) and Paragon Backup and Recovery free (https://www.paragon-software.com/free/) They do anything I need and are very flexible.

 

[ice70]

Hi Essenbe

thank you for the software info. Internal drive ordered and should be on its way soon.

On a slightly different note, I tried copying some files to an external drive and it failed, initially it just hung explorer.
Did a checkdisk and checked for bad sectors too, but it came up clean.

Just tried to copy some files over again and it failed. The drive [and the two other external usb drives] vanished from the 'my computer' view. and I got several event log messages:

An error was detected on device \Device\Harddisk4\DR5 during a paging operation.
Log Name: System
Source: Disk
Date: 22/02/2015 10:37:34
Event ID: 51
Task Category: None
Level: Warning
Keywords: Classic
User: N/A
Computer: Tower-PC
Description:
An error was detected on device \Device\Harddisk4\DR5 during a paging operation.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Disk" />
<EventID Qualifiers="32772">51</EventID>
<Level>3</Level>
<Task>0</Task>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2015-02-22T10:37:34.575896500Z" />
<EventRecordID>52735</EventRecordID>
<Channel>System</Channel>
<Computer>Tower-PC</Computer>
<Security />
</System>
<EventData>
<Data>\Device\Harddisk4\DR5</Data>
<Binary>040080000100000000000000330004802D0100000E0000C000000000000000000000000000000000AE3D050000000000FFFFFFFF01000000580000080000000000200A1280032040000000003C0000000060B26C80FAFFFF18815B6580FAFFFF0000000000000000105CC30C80FAFFFFF095CB6C80FAFFFF354CD71F000000002A001FD74C3500001000000000000000000000000000000000000000000000000000000000000000</Binary>
</EventData>
</Event>

then followed by:

The Portable Device Enumerator Service service entered the running state.
Log Name: System
Source: Service Control Manager
Date: 22/02/2015 10:37:52
Event ID: 7036
Task Category: None
Level: Information
Keywords: Classic
User: N/A
Computer: Tower-PC
Description:
The Portable Device Enumerator Service service entered the running state.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
<EventID Qualifiers="16384">7036</EventID>
<Version>0</Version>
<Level>4</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x8080000000000000</Keywords>
<TimeCreated SystemTime="2015-02-22T10:37:52.411930700Z" />
<EventRecordID>52736</EventRecordID>
<Correlation />
<Execution ProcessID="800" ThreadID="11636" />
<Channel>System</Channel>
<Computer>Tower-PC</Computer>
<Security />
</System>
<EventData>
<Data Name="param1">Portable Device Enumerator Service</Data>
<Data Name="param2">running</Data>
<Binary>57005000440042007500730045006E0075006D002F0034000000</Binary>
</EventData>
</Event>

I could copy the files on to an internal drive ok.

I also had a few files on my new evo drive corrupted! The whole reason for putting in the new drive was due to a massive file corruption before christmas that pretty much took out my c drive. I had thought that the several BSOD may have cause the problems, but the patterns are looking a lot like the ones I have before I replaced drive.

I seem to be having a lot of file corruption - it this something that RAID1 would cause?
File corruption on drives other than those on the RIAD array?
Or do I have something more serious?

.. and yes, I am now REALLY paranoid!

Thank you for your help
ice70

 

[essenbe]

To be perfectly honest, I don't know. Raid can cause all kind of problems. However they are usually limited to the drives in the array. But it is possible as the drives in the array interact with other drives. You will probably only know when you do a clean install in a non raid situation. The BSODs can cause file system errors, but I have never seen what I understand you are saying.

 

[ice70]

Hi Essenbe,

thank you for your reply.

I attached the usb drive to my Laptop and I copied the files that failed earlier over. No problems

> You will probably only know when you do a clean install in a non raid situation.
I have no faith in my current PC setup to maintain data integrity.
I am moving to work on the laptop - can't deal with the stress of wondering if my work will suddenly get corrupted again, or spare the time dealing with random system failures! The MySQL DB I exported last night is now corrupted! Glad I backed up

Once the new internal drive arrives, will install, back up the current RAID 1 data to it and then format both the OS & Data, remove the RAID1 and start again.
Hopefully this will fix the problems...
I am a little concerned though that I seem to be experiencing similar problems to those before I replaces the C drive.

My BIOS is also from 2011 - would it be worth updating - I am on windows 7 pro 64 bit?


P8Z68-V PRO (LGA1155)
BIOS
Brand American Megatrends Inc.
Version 0221
Date 06/04/2011

I think this is the update:
Motherboard - P8Z68-V PRO - ASUS
Version 3603(Only for Win7 & Win8)
17.03 MBytes update 2012/11/27

hmm... do I smell of desperation here?

thank you for all your patience and help,
ice70

 

[essenbe]

There is always a danger in updating the bios, but always run the latest BIOS. If it were mine, I would update it. Perhaps I am a little confused though. You are talking about a laptop, but a P8V68-V Pro is a desktop board. Also, do you have the latest firmware on your Samsung EVO? and have you performed the performance restoration update for it? this is the link to it Samsung SSD Downloads | Samsung SSD

 

[ice70]

Hi Essenbe,

sorry for the confusion, looks like the data corruption has filtered into my brain!!!

Steps I did today

1. Desktop PC: copy from usb external J: -> usb external M:
result: failed
event log showed disk errors
checkdisk fix and find bad sector on M: showed nothing
M: vanished from my explorer and looked like it powered off.
Other external drives also vanished.
Other drives returned to show in explorer.
Explorer unresponsive.
Restart failed, had to press and hold power off.

2. Desktop PC: copy from usb external J: -> internal ssd C:
worked fine

3. Desktop PC: copy files from internal ssd C: -> usb external M:
result: failed
event log showed disk errors
checkdisk fix and find bad sector on M: showed nothing
M: vanished from my explorer and looked like it powered off.
Other external drives also vanished.
External drives returned to show in explorer.
Explorer unresponsive.
Restart failed, had to press and hold power off.

4. Laptop [not desktop - another PC]: connected usb M:
copied over network from desktop usb external J: -> [now laptop] usb external M:
worked fine.. at lest I had no errors, no idea if there was any corruption.

Have decided to shift to working on the laptop until I have resolved the corruption problem.

Is it possible hardware is causing this?

BIOS - I feel that it can't really get any worse! Once I have the new drive, will make a back up of my current files [and just hope it is not corrupted!]

Sumsung EVO - yes, updated the firmware and applied the performance restoration.

once again, thank you for your help!
ice70

 

[essenbe]

Hardware could be to blame for your problems. My philosophy is everything is suspect until the solution is found. From your explanation, I am reasonably sure Drive M has a problem. It can have nothing to do with bad sectors. There are quite a few factors that go into making a drive work right. Try the same operations without drive M connected at all and see if you get the same results.

 

[ice70]

Hi essenbe,
sorry for the delay, work has taken over a bit! But, I have just had a corrupt file on my the laptop I am working on while I deal with the orignal problem on the desktop. Whilst it may just one of those things, I am not somewhat concerned I may have picked up something unpleasant, virus or malware.
What is the best virus checker that runs from a bootable CD?
Just want to make sure i have nothing on my laptop or desktop

thank you for your help
ice70

 

[essenbe]

You can run a complete scan with your current Anti Virus then run these online scanners:

Scan with Kaspersky TDSSKiller:
Anti-rootkit utility TDSSKiller
Anti-rootkit utility TDSSKiller
ESET online scanner:
Free Virus Scan | Online Virus Scanner from ESET
Free Online Virus Scanner | ESET

 

[ice70]

Hi essenbe, thank you for the links. Ran them and came up clean. Then ran chkdisk again on the raid and it came up with more bad clusters. I am guessing the raid drives are at the end of their life. Or can bad clusters be caused by something else other than drive failure? For example a faulty motherboard or cables?
Also ran chkdisk on the new evo ssd (c and there was a repair required on the journal, I don't have the exact message, but is this normal for a new drive or something I should be thinking about returning?

 

[essenbe]

As far as the SSD, the Journal entries is nothing I would be concerned about. It does not seem to me, that it is a defect in the drive, just in the files. As far as the bad clusters on the raid drives, I would plan to replace them, if it were me. As I understand it, a surface scan checks the surface of the disk. If it finds sectors where it can't read or write to, it notifies the controller not to use those sectors. But many times, once bad sections of a disk is found, they grow larger until the drives fail.

 

[ice70]

Hi essenbe,

apologies for the lateness in reply.

I had no faith in the hardware and could not take the risk in working on it. Eventually bit the bullet, replaced the riad drives and formatted everything and started from scratch.

After about 4 weeks, nothing seems to have gone wrong and I have my fingers crossed it will stay that way for a while

thank you for all your help and support.
ice70

 

[essenbe]

Great news. I'm glad it is working right for you again. Good job. When you feel your problem is resolved, please mark this thread as solved. If you have any more problems, you can post back here or start a new thread and reference this one, whichever you would like.

 

[ice70]

sorry, missed the mark thread as solved. Is there anything else I need to do? Is there a points system to give you points or something like that? Or will the happy vibes winging its way to you from a wet west coast Scotland location be ok?

 

[essenbe]

Yes, that's fine. I'll take the happy vibes, I need them. No problem about the mark solved. The scale icon in the top right is how to give someone a Rep. But, I already have more than I deserve. Thanks for the thought though, but it may come in handy for other threads in this forum. I hope you will stick around. There is much to be learned here.