BSOD using WMP,system restored to 4 days prior followed by many errors

[color567]

I have a Lenovo B560 with Windows 7 x64. Sequence of events:

1. Played music from a WD external HD with WMP. Music stopped playing and a terrible constant sound is coming out of the speakers (which began a year ago and happens sporadically), no other programs running besides WMP.
2. BSOD appeared while the noise kept going, so I held down the power button to turn off the laptop before reading the error message
3. After 10-15 minutes, turned laptop back on and proceeded to Safe mode. Hit the red shut down button on the bottom right without logging in on the log-in screen.
4. Next day (today), turned on laptop and computer froze while loading the log-in screen, I get that blue screen but it says Please Wait and never gets to where it allows me to type in my password (this happened many times before but I was able to resolve the issue by uninstalling Lenovo's Veriface).
7. Knowing it won't unfreeze itself, I proceed to shut down the computer by holding the power button down. Rebooted in Safe mode with networking. I then went to the Action Center to try Troubleshoot and it picked errors, told me to send them to Microsoft and didn't provide me with any further instructions.
8. Proceeded with system restore to 4 days prior (earliest reset point) and was able to log in without going through Safe mode.
9. When I tried to right click a file on my desktop I received the error "Windows Explorer has stopped working" with these details:


Problem signature:
Problem Event Name: APPCRASH
Application Name: Explorer.EXE
Application Version: 6.1.7601.17567
Application Timestamp: 4d672ee4
Fault Module Name: EgisUtility.dll
Fault Module Version: 7.0.0.62
Fault Module Timestamp: 4bfec35c
Exception Code: c0000005
Exception Offset: 0000000000005948
OS Version: 6.1.7601.2.1.0.768.3
Locale ID: 1033
Additional Information 1: cff1
Additional Information 2: cff107c1b90449293393c5f73f245a7f
Additional Information 3: 1992
Additional Information 4: 199254030f9379a7d047c3fcc9711995

10. I then search to see how I might fix this problem and then based on some suggestions, I disable certain programs at start-up by going to msconfig and restarted my computer, didn't work. Still same error upon right click. So I search some more and then when I tried to access services.msc, I get an error that "MMC cannot open file: ". I get this same error when I tried to look at the event logs. This is when I realized that my computer is not recognizing that I am the admin and so not giving me full rights.

11. Now I'm here hoping to get help, so I download and ran the SF Diag tool. System Info runs fine, I click on MSINFO 32 and when it gets to "windows error reporting," a box pops up that says "Access is denied," followed by this error box:

Microsoft .NET Framework

Unhandled exception has occurred in your application. If you click Continue, the application will ignore this error and attempt to continue. If you click Quit, the application will close immediately.

Could not find file ‘C:\msinfo32.nfo’.

I've attached the only document I got from the diag tool. I've downloaded the diag tool 3 times now and nothing has changed.

I tried going back to the Action Center to retrace my steps but now I can't even open that. Nothing works in System and Security!!! So what shall I do? There appears to be tons of errors and I'm not sure if re-installing Windows 7 will be helpful.

Thank you!

 

[richc46]

Welcome
We need the all important dump report. Please follow directions and try again
http://www.sevenforums.com/crashes-debugging/96879-blue-screen-death-bsod-posting-instructions.html

 

[color567]

Is there a different way to get all the dump reports? I've deleted and downloaded the diagnostic tool 3x now and I still get the same error. I can't right click to initiate running as administrator for the error stated above.

 

[richc46]

First make sure that you are configured correctly.
http://www.sevenforums.com/tutorials/174459-dump-files-configure-windows-create-bsod.html

 

[color567]

In System Properties, the dump files settings under system failure was set at "Write an event to the system log" and Small memory dump, restart automatically was unchecked. So how should I proceed?

Thanks!

 

[richc46]

The directions in the how to post tutorial says that you must run as administrator to ge the dump reports. When you run as administrator, the cursor should show as system and not with your user name. Did you do this correct? Try again to be sure.

 

[color567]

I've attached the small memory dump file I could access, which was created on 8/16. My laptop crashed on 8/19. Is this a problem? Like I previously mentioned, I restored my system back to 8/16 because I wasn't able to log into my laptop after the crash without going into safe mode. Should I change the settings to create a complete dump file?

 

[richc46]

That last download was completly empty.
Lets see what we can do, anyway.

Make a full Anti Virus scan and then download Malwarebytes, update and make a full scan..
http://www.malwarebytes.org/
Uninstall your Anti Virus and replace with
Microsoft Security Essentials - Free Antivirus for Windows
Set up a clean boot. Do not restore any items until, you are instructed to do so.
Troubleshoot Application Conflicts by Performing a Clean Startup
Submit any new BSODs after you make these changes.

 

[color567]

I'm sorry, I've attached it with the actual dump file!

 

[richc46]

Ok now we have one file. Each file gives little clues, so the more the better. Based upon this one and my hunch. This is the cause. Update driver
Etd.sys file descriptionProductname:Elantech Smart-Pad Description:ETD Ware TSR Enhancements Company:ELANTECH Devices Corp.

 

[color567]

I still can't figure out how to run the SF Diagnostic tool as an admin (right clicking and cntrl+shift did not work), so any other suggestions on accessing dump files?

Should I install the programs you suggested above? I have AVG for anti-virus and I ran the scanner yesterday and no viruses were detected.

What can I do about that driver?

 

[richc46]

Your last post had the dump file. Follow my post.

 

[color567]

So I followed your suggestions and
1. Malwarebytes did not detect anything
2. Microsoft security essentials does not seem to have installed because nothing happens after I run it and I am flagged for not having an anti-virus program installed (I still cannot open anything in System and Security btw)
3. Setting up a clean boot seems to not have done anything and, in fact, I have 2 additional problems being, 1) I cannot use the scroll function on my touch pad and 2) my cursor occasionally jumps to a different spot when I am typing

What shall I do next?

 

[richc46]

Disable clean boot and follow my instuctions about the driver that must be updated.

 

[color567]

I cannot update the driver because I do not have admin rights. In fact, I can't even access the updates from the Windows Update under System and Security.

 

[richc46]

Why dont you have rights?

 

[color567]

I'm not sure, but after I reset my computer and I found the right click issue, I realized I also didn't have admin rights even though I'm the only user. Hence, I wasn't able to run SF Diagnostic tool.

Curious, I tried system restore and this is the error that I got:

System Restore does not appear to be functioning correctly on this system.

A Volume Shadow Copy Service component encountered an unexpected error. Check the application event log for more information. (0x80042302)

 

[richc46]

Enable this account, it has adminsitrative rights.
http://www.sevenforums.com/tutorials/507-built-administrator-account-enable-disable.html?filter[2]=User Accounts

 

[color567]

Following this tutorial to access admin rights: http://www.sevenforums.com/tutorials/102552-built-administrator-enable-winre.html

Using option 2, I got stuck at step 5 because when I tried to open SAM, an error message popped up stating that the file was in use (which I really don't understand how it could have been). It appears others have had the same issue and had to use their system recovery disk, which I don't have. I only have a recovery partition, which if I run would wipe everything clear.

 

[richc46]

Sounds like your system is borked. You have the option to save your stuff and then use the recovery partition. You can try this first.
http://www.sevenforums.com/tutorials/1538-sfc-scannow-command-system-file-checker.html
If that does not work and you can borrow a Seven Install Cd, we can do a repair install.
And finally the restoration.