Solved Multiple BSOD, error 0x000000E1

[jcewing2001]

I have been experiencing multiple BSOD for about 2 weeks now. It has occurred during various different times, including upon opening internet pages, after prolonged non-use, and just for the heck of it, or so it seems. I don't think I had downloaded any new drivers. I am not totally computer savvy, but can follow directions pretty well and would appreciate any help. I think I was able to download the last dump from the BSOD correctly.

 

[koolkat77]

Welcome

Please upload your msinfo32.nfo file. To get this: Start Menu -> Type msinfo32 into the Search programs and files box -> When it opens, go to File, Save -> Save as msinfo32.nfo and save in a place you will remember -> Let it finish the process of gathering and saving the system info -> Right click the .nfo file, click send to compressed (zipped) folder -> Upload the .zip file here.

Please upload your msinfo32.txt file. To get this: Start Menu -> Type msinfo32 into the Search programs and files box -> When it opens, go to File, Export -> Save as msinfo32.txt and save in a place you will remember -> Let it finish the process of gathering and saving the system info -> Right click the .txt file, click send to compressed (zipped) folder -> Upload the .zip file here.

McAfee is a frequent cause of BSOD-s, consider uninstalling it with the McAfee Removal Tool and replace with Microsoft Security Essentials at least to test.

• How to uninstall or reinstall supported McAfee products using the Consumer Products Removal tool (MCPR)
• McAfee Removal Tool - McAfee Uninstaller

MSE is recommended from a strict BSOD perspective, compatibility & stability compared to other antiviruses/internet security software:-

• 
  1. Microsoft Security Essentials - Free Antivirus for Windows
  2. Malwarebytes - Free
  3.http://www.sevenforums.com/system-security/206705-good-free-system-security-combination.html

:warn: Do not start the free trial of Malware Bytes; remember to deselect that option when prompted.

Run a full scan with both (separately) once downloaded, installed and updated.

---

Run the System File Checker. It allows the user to scan for and restore corruptions in Windows system files.

• 
  1. Click on the rb:
  2. Type CMD on Search
  3. Left click and Run as Administrator
  4. Type SFC /scannow

Full tutorial here:

• http://www.sevenforums.com/tutorials/1538-sfc-scannow-command-system-file-checker.html

---

Run Disk Check on your hard disk for file system errors and bad sectors on it:

• http://www.sevenforums.com/tutorials/433-disk-check.html

---

Free up the start-up, nothing except the antivirus is usually needed.

• http://www.sevenforums.com/tutorials/1401-startup-programs-change.html
• http://www.sevenforums.com/tutorial...ation-conflicts-performing-clean-startup.html

---

Make scans with the following:

-Kaspersky TDSSKiller

• Anti-rootkit utility TDSSKiller

-ESET online scanner

• Free Online Virus Scanner | ESET

 

[jcewing2001]

msinfo32 and system file checker

OK, here are the msinfo32 items requested and the system file checker is running. I will work on the McAfee and the Microsoft Security Essentials tonight. Thank you

 

[jcewing2001]

The system file checker found some corrupt files and said that it was unable to fix some of them. Details included in the CBS.log windir/Logs/CBS/CBS.log. How do I find this and upload here.

 

[koolkat77]

Check option three (3) on the tutorial

Got them, thank you

Post back updates on how the BSOD-s are after following all the steps.

Next:

Update the display driver to a more recent version. In case the download link I post is not compatible with your system, you can roll back drivers or make windows get the latest ones:

Driver    c:\windows\system32\drivers\atikmpag.sys (8.14.1.6214, 302.50 KB (309,760 bytes), [COLOR=Red]7/6/2011[/COLOR] 1:32 AM)

Method:

• Click on the Start rb: ► Control Panel ► Programs ► Uninstall a program ► Uninstall everything related to; ATI and then restart the system.
• Delete remnants of its drivers/older drivers using Driver Fusion/Sweeper
  • Tutorial: Sometimes drivers remain, not completely uninstalled.
  Follow this tutorial for complete removal of drivers of the particular program> http://www.sevenforums.com/tutorials/83814-drivers-clean-left-over-files-after-uninstalling.html

Get the latest drivers from:

• AMD Driver Autodetect

Go to this link:

• Intel® Driver Update Utility

Check your system for latest drivers and download and install all/any drivers it finds.

Post back results.

 

[jcewing2001]

system file check results

Here is the results from the SFC, still working on the orther suggestions

 

[koolkat77]

Thanks. I'm calling a friend to take a look at those files.
Post back when you're done.

 

[NoelDP]

There's 5 errors there - SFC fixed 3 of them.
Please also run the CheckSUR tool, which includes other aspects of the OS and may find other problems - we can fix them all at once, then

Please download and save the CheckSUR tool from http://support.microsoft.com/kb/947821
(you'll need to look in the details for Method 2)

Run it - The tool can take anywhere from 5 mins to a couple of hours to run (or 'Install') depending on how much it has to do, and may exit silently - it may appear to freeze for most of that time, but be patient.
The result is logged in the C:\Windows\Logs\CBS\CheckSUR.log file - and an archive …\checksur.persist.log file

Then zip the CheckSUR.log and attach it to your reply


Just for ease of access and storage - here's teh critical part of teh report....

2012-12-06 09:00:33, Info                  CSI    000002f9 [SR] Repairing 5 components
2012-12-06 09:00:33, Info                  CSI    000002fa [SR] Beginning Verify and Repair transaction
2012-12-06 09:00:34, Info                  CSI    000002fb [SR] Cannot repair member file [l:22{11}]"sortkey.nlp" of mscorlib, Version = 6.1.7601.17952, pA = PROCESSOR_ARCHITECTURE_AMD64 (9), Culture neutral, VersionScope neutral, PublicKeyToken = {l:8 b:b77a5c561934e089}, Type neutral, TypeName neutral, PublicKey neutral in the store, file is missing
2012-12-06 09:00:34, Info                  CSI    000002fc [SR] Cannot repair member file [l:24{12}]"sorttbls.nlp" of mscorlib, Version = 6.1.7601.17952, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope neutral, PublicKeyToken = {l:8 b:b77a5c561934e089}, Type neutral, TypeName neutral, PublicKey neutral in the store, file is missing
2012-12-06 09:00:35, Info                  CSI    000002fd [SR] Repairing corrupted file [ml:58{29},l:56{28}]"\??\C:\Windows\system32\wbem"\[l:20{10}]"lsasrv.mof" from store
2012-12-06 09:00:36, Info                  CSI    000002fe [SR] Cannot repair member file [l:22{11}]"sortkey.nlp" of mscorlib, Version = 6.1.7601.17952, pA = PROCESSOR_ARCHITECTURE_AMD64 (9), Culture neutral, VersionScope neutral, PublicKeyToken = {l:8 b:b77a5c561934e089}, Type neutral, TypeName neutral, PublicKey neutral in the store, file is missing
2012-12-06 09:00:36, Info                  CSI    000002ff [SR] This component was referenced by [l:156{78}]"Package_1_for_KB2729452~31bf3856ad364e35~amd64~~6.1.1.0.2729452-16_neutral_GDR"
2012-12-06 09:00:36, Info                  CSI    00000300 [SR] Repairing corrupted file [ml:520{260},l:46{23}]"\??\C:\Windows\System32"\[l:24{12}]"dciman32.dll" from store
2012-12-06 09:00:37, Info                  CSI    00000301 [SR] Cannot repair member file [l:24{12}]"sorttbls.nlp" of mscorlib, Version = 6.1.7601.17952, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope neutral, PublicKeyToken = {l:8 b:b77a5c561934e089}, Type neutral, TypeName neutral, PublicKey neutral in the store, file is missing
2012-12-06 09:00:37, Info                  CSI    00000302 [SR] This component was referenced by [l:156{78}]"Package_3_for_KB2729452~31bf3856ad364e35~amd64~~6.1.1.0.2729452-32_neutral_GDR"
2012-12-06 09:00:38, Info                  CSI    00000303 [SR] Repairing corrupted file [ml:48{24},l:46{23}]"\??\C:\Windows\SysWOW64"\[l:24{12}]"dciman32.dll" from store
2012-12-06 09:00:38, Info                  CSI    00000305 [SR] Repair complete

 

[jcewing2001]

Check SUR

Thanks so for much all the help on this. I really appreciate it. Hopefully I am getting somewhere. Here is the Check SUR zip file. And there are still a few others things I haven't gotten to yet, hopefully I'll be able to knock the rest out today. The Microsoft Security Essentials and the Malwarebytes found trojans and they were all removed. So I am hopeful that this last task fixed what it messed up.

 

[jcewing2001]

I'm working on the disk check today. Do you need any reports from that?

 

[koolkat77]

I'm working on the disk check today. Do you need any reports from that?

Yes.

Did you experience any BSOD-s so far?

 

[NoelDP]

Great! _ CheckSUR found (I think) a number of the files that were missing (and a few more, as you may have noticed!)
Please run another SFC and post the new CBS.log file.

 

[jcewing2001]

My last BSOD was yesterday afternoon! Which is pretty good considering I was getting several a day. I still need to clean up my start up, and I am rerunning the SFC, and will post as soon as its done. I have run disk checks on D:, C:, and E:, no problems were found. I am not sure how to find and upload those reports though. If there is a tutorial you could point me to that would be great, and I will get them posted.

 

[jcewing2001]

Ok here is the new SFC, I thought it looked promising! Hope I am right!

 

[jcewing2001]

OK, so I found this but it only the C: check disk. I couldn't find anything on the other two, and really I am not even sure if this is what you need.

 

[NoelDP]

The SFC looks fine now - the CHKDSK log isn't surprising given the crash history.
I can hand you back to the crash specialists now

 

[jcewing2001]

OK, so still no BSOD's. This is very exciting! I have a question though. Do you think it was most likely the viruses that caused my issues, or a combination of things? I ask because a friend of mine has had some similar issues and she had brought her laptop over and used it on my network and I wasn't sure if she could become infected just by using my network? I really appreciate all of your help with this, I wasn't sure if I was capable of fixing this on my own and was about to take it to someone to fix. I am sure you two have saved me a ton of money! And as I am in nursing school, I am forever grateful. My life is on this computer and I cannot afford a permanent crash!

 

[NoelDP]

There's an awful lot of if's involved in cross-network infections - the most obvious being the state of each computer's firewall. Back in the bad old days (pre XP SP2) the Windows Firewall wasn't switched on by default (if it was even present), and you could see a domino effect sweep around a network in minutes.
Since then, it tends to be only machines which are already compromised (or where the user has misguidedly switched off all firewalls, which amounts to being compromised) which are susceptible - but some of the more advanced viruses can attack on a network with disastrous results.
No known-infected machine should be attached to a network at the same time as 'good' ones, just in case.

 

[koolkat77]

Hi,

• If your problem is solved please use the
  
  Mark this thread as solved link at the top of your thread or down on the left corner