Solved BSOD - Stuck in Endless Startup Repair Loop

[Cheesenium]

I had updated my Avira Antivirus on my Windows 7 PC yesterday and the PC has stuck on an endless Startup Repair loop since then. I couldnt get into Safe Mode without getting a BSOD then reboot which I could not use the SF Diagnostic Tool to create a BSOD post. Also, there are times that I could boot to the desktop in Safe Mode but then, the PC BSOD instantly and reboot again.

At the same time, I had tried the startup repair infinite loop recovery on SF and it still couldnt fix the BSOD. Thanks for the rather useful guide though.

I had run chkdsk and window's build in memtest tool, and it seemed like there isnt any issue with my hardware. No bad sectors found with chkdsk and a normal memtest results seemed to be fine.

I had also done a System Restore which didnt help the situation.

I tried to disable the BSOD auto reboot and here are the technical information found on the screen:
***STOP: 0x0000007e (0xFFFFFFFFC0000005,0xFFFFF80003A0A000, 0xFFFFF880009A90D8, 0xFFFFF88009A8940)

In addition to that I had also seen errors like BAD_POOL_HEADER and PAGE_FAULT_IN_NONPAGED_AREA during some of the BSOD reboots.

Could this be a virus or trojan in the system? Or Avira messed up my system's startup? Or an impending HDD/RAM failure?

Information about my PC:
Asus G73JH A2 laptop
Windows 7 Home Premium x64
Intel i7 720QM 1.6GHz
8GB 1333 MHz DDR3
2x Seagate Momentus XT (This hard drive comes with a 4GB SSD for caching. A fairly notorious hard disk as it has quite a few issues surrounding it)
AMD Radeon 5870 Mobility 1GB

I do apologise that the information that i have provided isnt sufficient but I do appreciate if anyone could assist me in solving this issue. I have other PC lying around which can be used to extract other data if needed.

 

[VistaKing]

Cheesenium welcome to SevenForums

   Warning

You will need a USB FLASH DRIVE

   Tip

Download the Tool from a non infected PC

Farbar Recovery Scan Tool

Choose one that goes with your OS bit version . Save the file to a USB Flash drive

32-bit Version OS :ar: Farbar Recovery Scan Tool

64-Bit Version OS :ar: Farbar Recovery Scan Tool x64

   Note

Click the rb: button and right-click Computer .Select Properties . Look for System Type: which will say 32-bit Operating System or 64-bit Operating System

Plug the flash drive into the infected PC.

Enter System Recovery Options.

:ar: To enter System Recovery Options from the Advanced Boot Options:
Restart the computer.
As soon as the BIOS is loaded begin tapping the F8 key until Advanced Boot Options appears.
Use the arrow keys to select Repair Your Computer menu item.
Select US as the keyboard language settings, and then click Next.
Select the operating system you want to repair, and then click Next.
Select your user account an click Next.

:ar: To enter System Recovery Options by using Windows installation disc:
Insert the installation disc.
Restart your computer.
If prompted, press any key to start Windows from the installation disc. If your computer is not configured to start from a CD or DVD, check your BIOS settings.
Click Repair your computer.
Select US as the keyboard language settings, and then click Next.
Select the operating system you want to repair, and then click Next.
Select your user account and click Next.

:ar: On the System Recovery Options menu you will get the following options:

• Startup Repair

• System Restore

• Windows Complete PC Restore

• Windows Memory Diagnostic Tool

• Command Prompt

Select Command Prompt

In the command window type X:\FRST.exe (for x64 bit version type X:\FRST64.exe) and press Enter

   Note

Replace letter X with the drive letter of your flash drive.

   Tip

Type the commands below to see what your letter is for the USB drive and press ENTER after each command

Diskpart
List volume

The tool will start to run.
When the tool opens click Yes to disclaimer.
Press Scan button.
FRST will let you know when the scan is complete and has written the FRST.txt to file

Upload the FRST.txt file

   Note

FRST.txt file will be inside the root of the USB Flash Drive

 

[Cheesenium]

Here is the FRST.txt on PasteBin: Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 30-07-2013 01 - Pastebin.com

It is a fairly lengthy file so I think its better to put it on PasteBin.com.

Please let me i know if you need any other files. Thank you for your help.

 

[Cheesenium]

Also, on top of that, I had 3 complete system lockup last week with Error 11 (Event ID: 11 Source: Disk). I ran a chkdsk /f /r after, then the problem went away after that. I suspected it could be a bad sector.

The current BSOD experienced seemed to appeared after my Avira antivirus update.

 

[VistaKing]

Open Notepad . Inside Notepad paste the highlighted text inside notepad


start
HKLM\...\Run: [Setwallpaper] - c:\programdata\SetWallpaper.cmd [x]
HKLM\...\RunOnce: [*Restore] - C:\Windows\system32\rstrui.exe /RUNONCE [296960 2009-07-13] (Microsoft Corporation)
HKU\Lau Chee Keong\...\Run: [Steam] - "D:\Program Files\Steam\steam.exe" -silent [x]
HKU\Lau Chee Keong\...\Run: [Akamai NetSession Interface] - "C:\Users\Lau Chee Keong\AppData\Local\Akamai\netsession_win.exe" [x]
S3 DAUpdaterSvc; d:\program files\steam\steamapps\common\dragon age origins\bin_ship\DAUpdaterSvc.Service.exe [x]
S2 HiPatchService; D:\Program Files (x86)\Hi-Rez Studios\HiPatchService.exe [x]
S2 VMAuthdService; G:\VMWare\vmware-authd.exe [x]
C:\ProgramData\hash.dat
end


Click on File ====> Save As

File Name : Fixlist.txt

Save as type : All Files

Location : USB Flash Drive

Click on the [Save] button .

Open the FRST tool again inside System Recovery and click on the [Fix] button . Once complete it will create a new log called Fixlog.txt . Upload the new log created in your reply . It should be inside the usb drive .

Fixlog.txt will be inside the USB drive
Try to login .

 

[Cheesenium]

Alright ran the FRST tool again and this is what I got:

Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 30-07-2013 01
Ran by SYSTEM at 2013-07-30 14:27:21 Run:1
Running from H:\
Boot Mode: Recovery
==============================================

HKLM\Software\Microsoft\Windows\CurrentVersion\Run\\Setwallpaper => Value deleted successfully.
HKLM\Software\Microsoft\Windows\CurrentVersion\RunOnce\\*Restore => Value deleted successfully.
HKU\Lau Chee Keong\Software\Microsoft\Windows\CurrentVersion\Run\\Steam => Value deleted successfully.
HKU\Lau Chee Keong\Software\Microsoft\Windows\CurrentVersion\Run\\Akamai NetSession Interface => Value deleted successfully.
DAUpdaterSvc => Service deleted successfully.
HiPatchService => Service deleted successfully.
VMAuthdService => Service deleted successfully.
C:\ProgramData\hash.dat => Moved successfully.

==== End of Fixlog ====

Then, i tried to login after the fix being applied. After the windows loading screen, I got another BAD_POOL_HEADER BSOD with following details:

*** STOP: 0x00000019 (0x00000000000000003, 0xFFFFF8A0004E06D0, 0x0000000000000000, oxFFFFF8A0004E06D0)

Error code is slightly different from previous.

I'll attempt to run the following again as google keep pointing me towards these suggestions:
[FONT=&quot]1. [FONT=&quot]Check the disk error using chkdks /r command. [/FONT][/FONT]
[FONT=&quot]2. [FONT=&quot]Scan the system file using sfc /scannow command. [/FONT][/FONT]
[FONT=&quot]3. [FONT=&quot]Use Memory Diagnostic utility to check memory.[/FONT][/FONT]
[FONT=&quot] [/FONT]
[FONT=&quot]a) [FONT=&quot]Reboot computer, keep pressing F8, choose "Repair Your Computer" when startup menu appear.[/FONT][/FONT]
[FONT=&quot]b) [FONT=&quot]Click "Next" and type user password if prompt, click next.[/FONT][/FONT]
[FONT=&quot]c) [FONT=&quot]Press the Tab key on the keyboard to highlight "Windows Memory Diagnostic" and press the Enter key.[/FONT][/FONT]
[FONT=&quot] [/FONT]

 

[VistaKing]

Can you login to windows ?

 

[Cheesenium]

Can you login to windows ?

I still having BSOD at Windows 7 Load Screen that has the Windows logo and a black background.

Even understand Safe Mode, my system either BSOD or lockup when Win 7 is loading BMLoad.sys file.

 

[VistaKing]

Take a look at the link below

:ar: http://www.sevenforums.com/tutorials/105647-ram-test-memtest86.html

Take a look at part 3 if you get any errors

Run SFC /scannow at boot
:ar: http://www.sevenforums.com/tutorials/139810-sfc-scannow-run-command-prompt-boot.html

 

[Cheesenium]

After I ran SFC, I got "Windows Resource Protection did not find any integrity violations".

Just to confirm, do I really need a Win 7 disc or a Repair disc to run SFC? I only login to the current window's installation's Startup Repair and ran the commands which is it sufficient?

I'll perform the memtest 86+ now with all 4 RAM sticks. Lets hope we'll be able to find something.

 

[VistaKing]

I think you could run it without the disc but its a good thing to have it in there as well .

 

[Cheesenium]

Just an update:

After I ran SFC, I had found that Windows Resource Protection did not find any integrity violations.

Also, my PC has passed all the tests on Memtest 86+. I had ran 9 tests.

Unfortunately, I still cant login to windows without getting BSOD at the loading screen. Still getting the same error: BAD_POOL_ERROR *** STOP: 0x00000019 (0x00000000000000003, 0xFFFFF8A0004E06D0, 0x0000000000000000, oxFFFFF8A0004E06D0)

Is there anything else I can try?

 

[VistaKing]

Can you login to Windows ? So your dmp file could be analyzed ?

 

[Cheesenium]

Can you login to Windows ? So your dmp file could be analyzed ?

Unfortunately, no, i am still stuck outside windows. Still BSOD when Windows is loading.

Is there anything else I can try?

Or I have to restore my laptop to factory condition?

 

[VistaKing]

Lets see something can you Redownload the FRST program place it inside a USB flash drive and do the steps again ?

 

[Cheesenium]

Lets see something can you Redownload the FRST program place it inside a USB flash drive and do the steps again ?

Alright, i'll try to get a FRST.txt. Maybe this time round, take out Avira from booting with the PC. I wont connect my PC to the internet so risk of getting malware or viruses are low.

 

[VistaKing]

Do the same steps in Post #2

Just download a new copy of the FRST.exe and save it to a USB flash drive

 

[Cheesenium]

Here is my FRST.txt file: Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 30-07-2013 03 - Pastebin.com

Thanks for you help, by the way.

 

[VistaKing]

Open Notepad . Inside Notepad paste the highlighted text inside notepad


start
HKLM\...\InprocServer32: [Default-cscui] <==== ATTENTION!
C:\Windows\Tasks\SA.DAT
end


Click on File ====> Save As

File Name : Fixlist.txt

Save as type : All Files

Location : USB Flash Drive

Click on the [Save] button .

Open the FRST tool again inside System Recovery and click on the [Fix] button . Once complete it will create a new log called Fixlog.txt . Upload the new log created in your reply . It should be inside the usb drive .

 

[Cheesenium]

Here is the Fix Log.

Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 30-07-2013 03
Ran by SYSTEM at 2013-07-31 11:38:07 Run:2
Running from H:\
Boot Mode: Recovery
==============================================

HKLM\Software\Classes\CLSID\{750fdf10-2a26-11d1-a3ea-080036587f03}\InprocServer32\\Default => Value was restored successfully.
C:\Windows\Tasks\SA.DAT => Moved successfully.

==== End of Fixlog ====

I try to boot into Safe Mode and the PC still lockup after loading \Windows\system32\drivers\BMLoad.sys with no hard disk activity.