BSOD on login to Windows 7 Pro SP1 (Registry Error) 0x00000051

[cyko1987]

Hi

I am having a persistent BSOD when I try login to Windows 7 using my login credentials. If I run Windows in Safe Mode, there is no issue.

I've attached the ZIP from the SF Diagnostic Tool.

 

[YoYo155]

Welcome to 7F .

The bug checks are all identical.

REGISTRY_ERROR (51)
Arguments:
Arg1: 0000000000000001
Arg2: fffff8a000024010
Arg3: 0000000002a1b000
Arg4: 0000000000000374

Something has gone badly wrong with the registry.  If a kernel debugger
is available, get a stack trace. It can also indicate that the registry got
an I/O error while trying to read one of its files, so it can be caused by
hardware problems or filesystem corruption.
[hl][B]It may occur due to a failure in a refresh operation, which is used only
in by the security system[/B][/hl], and then only when resource limits are encountered.

By calling the RAW Stack we can get a better sense as to who might be the culprit.

fffff880`061fd2b8  fffff800`04ba8c58 nt! ?? ::NNGAKEGL::`string'+0x9dba
fffff880`061fd2f8  fffff800`04b13393 [COLOR=Blue]nt!HvMarkDirty[/COLOR]+0xc4
fffff880`061fd318  fffff800`04b13445[COLOR=Blue] nt!HvMarkDirty[/COLOR]+0x176
fffff880`061fd378  fffff800`04b1321c [COLOR=Blue]nt!HvMarkCellDirty[/COLOR]+0x150
fffff880`061fd3c8  fffff800`04badfa0 nt! ?? ::NNGAKEGL::`string'+0x116c4
fffff880`061fd408  fffff800`04ad48b2 [COLOR=Blue]nt!CmpMarkKeyValuesDirty[/COLOR]+0x182
fffff880`061fd4a8  fffff800`04ad4654 nt!CmpFreeKeyValues+0x24
fffff880`061fd4d8  fffff800`04ad3d5a nt!CmpSyncKeyValues+0x7a
fffff880`061fd508  fffff800`04b49a69 nt!CmpFindSubKeyByNameWithStatus+0x1b9
fffff880`061fd588  fffff800`04ad37ce nt!CmpFindSubKeyByName+0xe
fffff880`061fd5b8  fffff800`04ad3a88 nt!CmpCopySyncTree2+0x2a8
fffff880`061fd668  fffff800`04ad5d4e nt!CmpCopySyncTree+0x6e
fffff880`061fd6b8  fffff800`04ad5c67 nt!CmpSaveBootControlSet+0x307
fffff880`061fd7c8  fffff800`04b4cf33 nt!CmpUnlockRegistry+0x2f
fffff880`061fd7f0  fffff880`011d4fb0 [hl][COLOR=Red]mfehidk[/COLOR][/hl]+0x8dfb0 <
fffff880`061fd818  fffff880`01169c22 [hl][COLOR=Red]mfehidk[/COLOR][/hl]+0x22c22 < [B]These[/B] [B]two driver entries don't look like a part of Windows.[/B]
fffff880`061fd838  fffff800`04982744 nt!EtwpCCSwapTrace+0x4d4
fffff880`061fd858  fffff800`04c23756 nt!CmpCallCallBacks+0x4f6
fffff880`061fd898  fffff800`04ad5836 nt!NtInitializeRegistry+0xc6
fffff880`061fd8e8  fffff800`04876e93 nt!KiSystemServiceCopyEnd+0x13
fffff880`061fd8f8  fffff800`0498281e nt!EtwTraceContextSwap+0xae
fffff880`061fd928  fffff800`04b313b5[COLOR=Blue] nt!NtEnumerateKey[/COLOR]+0x2a3

• Driver Reference Table - mfehidk.sys

They sure aren't they are a part of McAfee.

mfehidk    McAfee Inc. mfehidk    c:\windows\system32\drivers\mfehidk.sys    Kernel Driver
McAfee Host Intrusion Prevention Service    enterceptAgent

Please remove McAfee(<link), you can use Microsoft Security Essentials(<link) as an alternative.


Once you are done with the removal and back in Windows Check for File System errors and corruption.

• Perform a Disk Check | Disk Check- Scroll down to OPTION TWO of the tutorial and use the /R switch in the CHKDSK command | chkdsk C: /R.
• Then Post the Disk Check results following | This Tutorial.
• Follow this tutorial on how to use the SFC/ SCANNOW tool in Windows.

Let us know the results .