Solved Random BSOD errors with ntoskrnl.exe and one instance of tcpip.sys

jamesldavis · Apr 5, 2015

I had had having numerous blue screen crashes in the last two weeks which dump indicated was always related to ntoskrnl.exe. The crash would occur at the moment I clicked on something but various programs I was running were involved and not just one.

WHAT I'VE DONE SO FAR: I ran checkdisk, Avast antivirus thorough scan, an anti-malware checker, Windows 7 memory check, then a two-hour memory check downloaded from Lenova, the manufacture of my laptop. No problems were detected by any of these programs.

I went through all the drivers on my system as listed in the device manger and found no cases of red X. (There was one "unknown device" with a yellow exclamation mark. I ran Driver Booster looking for a fix and it updated 10 or so drivers Following that, the same ntoskrnl.exe crash continued so I restored my system from a backup of 11 days ago, which I think was before the problem started. I ran Driver Booster again and it updated 10 or so drivers. Before rebooting, I removed the one unknown driver in device manager with an exclamation mark to see if it would refresh.

After rebooting I got yet another blue screen crash, this time pointing to both ntoskrnl.exe AND a problem with DRIVER_CORRUPTED_EXPOOL caused by tcpip.sys+75822. (Apparently driverbooster had introduced a another problem since I had not seen this error before. Not sure.)

I've been running my computer for 7 hours without a crash, whereas before it would crash every two hours or so. Not sure if I did something to improve it, or if its just part of the randomness. (2 hours after I wrote this, a new crash. See the third dump below titled LAST CRASH.

THREE mini dumps: ================================================== Filename : ntoskrnl.exe Address In Stack : ntoskrnl.exe+74469 From Address : fffff800`0305e000 To Address : fffff800`03645000 Size : 0x005e7000 Time Stamp : 0x54d0317d Time String : 2/2/2015 7:25:01 PM Product Name : Microsoft® Windows® Operating System File Description : NT Kernel & System File Version : 6.1.7601.18741 (win7sp1_gdr.150202-1526) Company : Microsoft Corporation Full Path : C:\Windows\system32\ntoskrnl.exe ================================================== ==================================================

Dump File : 040515-14991-01.dmp Crash Time : 4/5/2015 7:14:44 AM Bug Check String : DRIVER_CORRUPTED_EXPOOL Bug Check Code : 0x000000c5 Parameter 1 : 00000000`00000008 Parameter 2 : 00000000`00000002 Parameter 3 : 00000000`00000000 Parameter 4 : fffff800`03209b15 Caused By Driver : tcpip.sys Caused By Address : tcpip.sys+75822 File Description : Product Name : Company : File Version : Processor : x64 Crash Address : ntoskrnl.exe+74ec0 Stack Address 1 : Stack Address 2 : Stack Address 3 : Computer Name : Full Path : C:\Windows\Minidump\040515-14991-01.dmp Processors Count : 4 Major Version : 15 Minor Version : 7601 Dump File Size : 286,577 Dump File Time : 4/5/2015 7:43:32 AM ==================================================

LATEST CRASH:

==================================================
Dump File : 040515-14086-01.dmp
Crash Time : 4/5/2015 4:02:39 PM
Bug Check String : PAGE_FAULT_IN_NONPAGED_AREA
Bug Check Code : 0x00000050
Parameter 1 : fffffa80`0beaf520
Parameter 2 : 00000000`00000001
Parameter 3 : fffff880`014c4fb7
Parameter 4 : 00000000`00000000
Caused By Driver : NDProxy.SYS
Caused By Address : NDProxy.SYS+4b0e230
File Description :
Product Name :
Company :
File Version :
Processor : x64
Crash Address : ntoskrnl.exe+74ec0
Stack Address 1 :
Stack Address 2 :
Stack Address 3 :
Computer Name :
Full Path : C:\Windows\Minidump\040515-14086-01.dmp
Processors Count : 4
Major Version : 15
Minor Version : 7601
Dump File Size : 287,985
Dump File Time : 4/5/2015 4:03:31 PM
==================================================

essenbe · Apr 5, 2015

Hello, jamesldavis and welcome to the forums. I will try to help you with this. You only have one dump file dated today. I would like you to fill out your system specs as detailed as possible. It will help us to help you if we know what hardware we are dealing with. I would also suggest you uninstall any driver finders, registry cleaners or general 'speed up Windows' programs. They will do more harm than good. This is what your dump file says.

Code:

BugCheck C5, {8, 2, 0, fffff80003209b15}
*** WARNING: Unable to verify timestamp for WiseTDIFw64.sys
[COLOR=red]*** ERROR: Module load completed but symbols could not be loaded for WiseTDIFw64.sys[/COLOR]
Probably caused by : Pool_Corruption ( nt!ExDeferredFreePool+249 )
Followup: Pool_corruption

That seems to be a product of WiseCleaners (Free Wise Solutions For Your PC - Free Wise Care 365, Free Registry Cleaner, Free Disk Cleaner, Free Data Recovery and Free Uninstaller) and I would suggest you uninstall it using their uninstall program Wise Program Uninstaller - Uinstall Software, Remove or Change Programs and Forced Uninstall for Free..

Once all of that is done please open an elevated command prompt ( click start, type cmd in the search box, right click on the cmd entry and select run as administrator) in the black box that opens, copy/paste sfc /scannow. If you decide to type it, notice the space between the sfc and the /. It is a system file checker which will scan your system files and attempt to correct any missing or corrupt files. What we want are the results to say windows found no integrity violations. If it says files were found but could not be repaired, close the box, reboot and run it again, after opening the administrative command prompt. You may have to reboot and run it three times for it to repair all system files. If it can't repair them after 3 reboots, let us know. Let us know the results and if your experience improves any.

Also please re run the http://www.sevenforums.com/bsod-help-support/96879-blue-screen-death-bsod-posting-instructions.html several of the files were missing.

jamesldavis · Apr 6, 2015

OK, I uninstalled the programs you suggested, then ran the sfc /scannow three times, rebooting between scans.

After each scan the scan reported: "Windows resource protection found corrupt files but was unable to fix some of them." and saved a CBS log file which I have attached. The file grew larger on each scan so it must be cumulative.

For hardware etc. info, below are dropbox links to a "system info.txt" file exported from the Windows "System Information" application built into Windows. Also to the log file generated by the scan you recommended. Both files were too large for formum attachment, hence the links.

Thanks for your help,

James

https://www.dropbox.com/s/s1aln9v72qq5x5g/CBS3 log.txt?dl=0

https://www.dropbox.com/s/nsy6cubbs0w6hmn/system info.txt?dl=0

jamesldavis · Apr 6, 2015

"Also please re run the Blue Screen of Death (BSOD) Posting Instructions several of the files were missing."

Attached is a rerun of the data collector

essenbe · Apr 6, 2015

I will have to get someone else to look at the CBS file. In the future if you will save it to your Desktop, right click it and select 'send to' and Compressed Zip folder, it will upload just fine.

View attachment 355326

NoelDP · Apr 7, 2015

I've no idea what file that was you posted, Steve - but it looks more like an IE/JS log than a CBS log to me!
Going back to the OP's CBS3.log file reveals these errors...

Code:

 Line 18953: 2015-04-06 11:19:07, Info                  CSI    00000367 [SR] Repairing 5 components
 Line 18954: 2015-04-06 11:19:07, Info                  CSI    00000368 [SR] Beginning Verify and Repair transaction
 Line 18955: 2015-04-06 11:19:07, Info                  CSI    00000369 [SR] Cannot repair member file [l:22{11}]"desktop.ini" of Microsoft-Windows-ehome-samplemedia, Version = 6.1.7600.16385, pA = PROCESSOR_ARCHITECTURE_AMD64 (9), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, file is missing
 Line 18956: 2015-04-06 11:19:07, Info                  CSI    0000036a [SR] Cannot repair member file [l:58{29}]"win7_scenic-demoshort_raw.wtv" of Microsoft-Windows-ehome-samplemedia, Version = 6.1.7600.16385, pA = PROCESSOR_ARCHITECTURE_AMD64 (9), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, file is missing
 Line 18957: 2015-04-06 11:19:07, Info                  CSI    0000036b [SR] Cannot repair member file [l:22{11}]"Kalimba.mp3" of Microsoft-Windows-MusicSamples, Version = 6.1.7600.16385, pA = PROCESSOR_ARCHITECTURE_AMD64 (9), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, file is missing
 Line 18958: 2015-04-06 11:19:07, Info                  CSI    0000036c [SR] Cannot repair member file [l:22{11}]"desktop.ini" of Microsoft-Windows-MusicSamples, Version = 6.1.7600.16385, pA = PROCESSOR_ARCHITECTURE_AMD64 (9), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, file is missing
 Line 18959: 2015-04-06 11:19:07, Info                  CSI    0000036d [SR] Cannot repair member file [l:58{29}]"Maid with the Flaxen Hair.mp3" of Microsoft-Windows-MusicSamples, Version = 6.1.7600.16385, pA = PROCESSOR_ARCHITECTURE_AMD64 (9), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, file is missing
 Line 18960: 2015-04-06 11:19:07, Info                  CSI    0000036e [SR] Cannot repair member file [l:28{14}]"Sleep Away.mp3" of Microsoft-Windows-MusicSamples, Version = 6.1.7600.16385, pA = PROCESSOR_ARCHITECTURE_AMD64 (9), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, file is missing
 Line 18961: 2015-04-06 11:19:07, Info                  CSI    0000036f [SR] Cannot repair member file [l:18{9}]"Koala.jpg" of Microsoft-Windows-PhotoSamples, Version = 6.1.7600.16385, pA = PROCESSOR_ARCHITECTURE_AMD64 (9), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, file is missing
 Line 18962: 2015-04-06 11:19:07, Info                  CSI    00000370 [SR] Cannot repair member file [l:26{13}]"Jellyfish.jpg" of Microsoft-Windows-PhotoSamples, Version = 6.1.7600.16385, pA = PROCESSOR_ARCHITECTURE_AMD64 (9), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, file is missing
 Line 18963: 2015-04-06 11:19:07, Info                  CSI    00000371 [SR] Cannot repair member file [l:26{13}]"SampleRes.dll" of Microsoft-Windows-PhotoSamples, Version = 6.1.7600.16385, pA = PROCESSOR_ARCHITECTURE_AMD64 (9), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, file is missing
 Line 18964: 2015-04-06 11:19:07, Info                  CSI    00000372 [SR] Cannot repair member file [l:22{11}]"desktop.ini" of Microsoft-Windows-PhotoSamples, Version = 6.1.7600.16385, pA = PROCESSOR_ARCHITECTURE_AMD64 (9), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, file is missing
 Line 18965: 2015-04-06 11:19:07, Info                  CSI    00000373 [SR] Cannot repair member file [l:20{10}]"Desert.jpg" of Microsoft-Windows-PhotoSamples, Version = 6.1.7600.16385, pA = PROCESSOR_ARCHITECTURE_AMD64 (9), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, file is missing
 Line 18966: 2015-04-06 11:19:07, Info                  CSI    00000374 [SR] Cannot repair member file [l:28{14}]"Lighthouse.jpg" of Microsoft-Windows-PhotoSamples, Version = 6.1.7600.16385, pA = PROCESSOR_ARCHITECTURE_AMD64 (9), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, file is missing
 Line 18967: 2015-04-06 11:19:07, Info                  CSI    00000375 [SR] Cannot repair member file [l:20{10}]"Tulips.jpg" of Microsoft-Windows-PhotoSamples, Version = 6.1.7600.16385, pA = PROCESSOR_ARCHITECTURE_AMD64 (9), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, file is missing
 Line 18968: 2015-04-06 11:19:07, Info                  CSI    00000376 [SR] Cannot repair member file [l:34{17}]"Chrysanthemum.jpg" of Microsoft-Windows-PhotoSamples, Version = 6.1.7600.16385, pA = PROCESSOR_ARCHITECTURE_AMD64 (9), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, file is missing
 Line 18969: 2015-04-06 11:19:07, Info                  CSI    00000377 [SR] Cannot repair member file [l:28{14}]"Hydrangeas.jpg" of Microsoft-Windows-PhotoSamples, Version = 6.1.7600.16385, pA = PROCESSOR_ARCHITECTURE_AMD64 (9), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, file is missing
 Line 18970: 2015-04-06 11:19:07, Info                  CSI    00000378 [SR] Cannot repair member file [l:24{12}]"Penguins.jpg" of Microsoft-Windows-PhotoSamples, Version = 6.1.7600.16385, pA = PROCESSOR_ARCHITECTURE_AMD64 (9), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, file is missing
 Line 18971: 2015-04-06 11:19:07, Info                  CSI    00000379 [SR] Cannot repair member file [l:22{11}]"desktop.ini" of Microsoft-Windows-VideoSamples, Version = 6.1.7600.16385, pA = PROCESSOR_ARCHITECTURE_AMD64 (9), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, file is missing
 Line 18972: 2015-04-06 11:19:07, Info                  CSI    0000037a [SR] Cannot repair member file [l:24{12}]"Wildlife.wmv" of Microsoft-Windows-VideoSamples, Version = 6.1.7600.16385, pA = PROCESSOR_ARCHITECTURE_AMD64 (9), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, file is missing
 Line 18973: 2015-04-06 11:19:07, Info                  CSI    0000037b [SR] Cannot repair member file [l:58{29}]"Clip_1080_5sec_VC1_15mbps.wmv" of Microsoft-Windows-WinSATMediaSamples, Version = 6.1.7600.16385, pA = PROCESSOR_ARCHITECTURE_AMD64 (9), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, file is missing
 Line 18974: 2015-04-06 11:19:07, Info                  CSI    0000037c [SR] Cannot repair member file [l:56{28}]"Clip_480_5sec_6mbps_h264.mp4" of Microsoft-Windows-WinSATMediaSamples, Version = 6.1.7600.16385, pA = PROCESSOR_ARCHITECTURE_AMD64 (9), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, file is missing
 Line 18975: 2015-04-06 11:19:07, Info                  CSI    0000037d [SR] Cannot repair member file [l:20{10}]"winsat.wmv" of Microsoft-Windows-WinSATMediaSamples, Version = 6.1.7600.16385, pA = PROCESSOR_ARCHITECTURE_AMD64 (9), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, file is missing
 Line 18976: 2015-04-06 11:19:07, Info                  CSI    0000037e [SR] Cannot repair member file [l:68{34}]"Clip_1080_5sec_MPEG2_HD_15mbps.mpg" of Microsoft-Windows-WinSATMediaSamples, Version = 6.1.7600.16385, pA = PROCESSOR_ARCHITECTURE_AMD64 (9), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, file is missing
 Line 18977: 2015-04-06 11:19:07, Info                  CSI    0000037f [SR] Cannot repair member file [l:60{30}]"Clip_1080_5sec_10mbps_h264.mp4" of Microsoft-Windows-WinSATMediaSamples, Version = 6.1.7600.16385, pA = PROCESSOR_ARCHITECTURE_AMD64 (9), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, file is missing
 Line 18978: 2015-04-06 11:19:07, Info                  CSI    00000380 [SR] Cannot repair member file [l:32{16}]"winsatencode.wmv" of Microsoft-Windows-WinSATMediaSamples, Version = 6.1.7600.16385, pA = PROCESSOR_ARCHITECTURE_AMD64 (9), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, file is missing
 Line 18979: 2015-04-06 11:19:07, Info                  CSI    00000381 [SR] Cannot repair member file [l:56{28}]"Clip_480i_5sec_6mbps_new.mpg" of Microsoft-Windows-WinSATMediaSamples, Version = 6.1.7600.16385, pA = PROCESSOR_ARCHITECTURE_AMD64 (9), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, file is missing
 Line 18980: 2015-04-06 11:19:07, Info                  CSI    00000382 [SR] Cannot repair member file [l:56{28}]"Clip_480p_5sec_6mbps_new.mpg" of Microsoft-Windows-WinSATMediaSamples, Version = 6.1.7600.16385, pA = PROCESSOR_ARCHITECTURE_AMD64 (9), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, file is missing

These are typical of using one of the worse System Tweakers - probably Advanced System Care.
This should be uninstalled.

I've uploaded a file - media64.zip - to my OneDrive at Noel's OneDrive
Please download and save it.

Right-click on the saved file and select Extract all...
Change the target to C:\ and click on Extract
Close all windows (it would be a good idea to print these instructions!)

Now reboot to the Repair Environment - as soon as the machine restarts, start tapping F8 - this should bring up the Advanced Boot Menu, at the top of which should be the option 'Repair my Computer'
Pick that
You'll have to log in with your username and password.

Pick the option to use a Command Prompt
At the prompt type
DIR C:\media64
hit the enter key - if you get a 'Not Found' error try
DIR D:\media64
or
DIR E:\media64

The drive letter in use when you find the folder will need to be substituted (for<drive>) into the following command...

XCOPY <drive>:\media64 <drive>:\windows\winsxs /y /i /s /v /h

(e.g. XCOPY P:\wfire P:\windows\winsxs /y /i /s /v /h )

run the command (it should take almost no time) and when the prompt returns, type
EXIT
and hit the Enter key to exit Command Prompt - reboot to Normal Mode Windows.

Now run SFC /SCANNOW in an Elevated Command Prompt
then reboot and upload the new CBS.log file to your reply

jamesldavis · Apr 7, 2015

I downloaded the media64 file pointed to in the last post but on looking at it I think this must be the wrong file since on looking at the media64 zip I found it is a collection of videos and related file and not a fix utility.

Please advise.

James

jamesldavis · Apr 7, 2015

Here is the cbs logs, zipped as you suggested.

NoelDP · Apr 7, 2015

The file I uploaded is exactly what it is supposed to be - yes, a collection of the missing/corrupt files.
You need to follow the instructions in my post #6 to get these files placed where they should be - which will stop the system complaining about them.

Anak · Apr 7, 2015

Hi jamesldavis, welcome to 7F!

I can understand your apprehension, but Noel's reputation is beyond reproach and he has helped thousands of users including me with his re-build files, not only here, but on other forums as well.

To help you understand the switches: Switches That You Can Use with Xcopy and Xcopy32 Commands

XCOPY <drive>:\media64 <drive>:\windows\winsxs /y /i /s /v /h

source Specifies the file to copy.
destination Specifies the location and the name of new files.
/a Copies files with the archive attribute set. This switch does not change the attribute.
/m Copies files with the archive attribute set, and turns off the archive attribute.
/d:date Copies files changed on or after the specified date.
/p Prompts you before each destination file is created.
/s Copies folders and subfolders except for empty ones.
/e Copies any subfolder, even if it is empty.
/w Prompts you to press a key before copying.
/c Continues copying even if errors occur.
/i If the destination does not exist, and you are copying more than one file, this switch assumes that the destination is a folder.
/q Does not display file names while copying.
/f Displays full source and destination file names while copying.
/l Displays files that are going to be copied.
/h Copies hidden and system files.
/r Overwrites read-only files.
/t Creates a folder structure, but does not copy files. Does not include empty folders or subfolders. Use the /t with the /e switch to include empty folders and subfolders.
/u Updates the files that already exist in that destination.
/k Copies attributes. Typical xcopy commands reset read-only attributes.
/y Overwrites existing files without prompting you.
/-y Prompts you before overwriting existing files.
/n Copies using the generated short names.
/v Verifies each new file.

Steve

jamesldavis · Apr 7, 2015

OK, I followed the instructions to boot into the Windows repair mode, pulled up the DOS prompt and x-copied the files using all the command line switches as specified.

After that I clicked to reboot. Near the point of completing the boot and loading up stuff, the system crashed with a blue screen. I've uploaded the cbs.log for that crash as CBS crash at boot.log A crash at boot had not happened before, so I booted to safe mode, shut down and booted again to normal mode without a problem.

I then ran the sfc /scannow again which reported corrupt files as before. The CBS.log for this last scan is also attached as CBS crash log after sfc scannow.log

Thanks again for you help.

James

NoelDP · Apr 7, 2015

Have uninstalled all Wise and IoBit software?
What AV is installed?

This is the first time that this fix has failed - let alone produced a BSOD/crash on boot.

Please follow the Windows Update Posting Instructions and post the requested data

If the file is too large (8MB compressed), remove the older CBSPersist cab files until the final file is below the limit - you can always post them separately after zipping them. (the forum doesn't allow the upload of bare CAB files, for a number of reasons)

jamesldavis · Apr 7, 2015

After the XCOPY procedure, my web browsers display all pages in a paper white background, and I think some graphics are also not displayed. How to revert to the usual appearance of web pages?

NoelDP · Apr 7, 2015

From the results of the SFC scan, the XCOPY procedure failed completely - I doubt ithad anything to do with the other problems you're experiencing.

It would probably be worthwhile to do a CHKDSK and post the logs - I see you have actually already done one, so I just need the log...

Open Event Viewer
click on the Windows logs entry in the left pane to expand it.
Now click on the Application entry - wait while it loads.
Click on 'File' in the menu bar and select Save...
Save the file as Appevt.evtx
Repeat for the System log
then zip both, and upload them.

jamesldavis · Apr 7, 2015

Yes, I have uninstalled all Iobit software.

Avast anti-virus is installed.

I ran the Windows 7/64bit/SP2 hotfix update you pointed to, then ran the sfc /scannow.

The resulting cbs.log is attached.

thanks,

James

jamesldavis · Apr 7, 2015

I've been running chkdsk at restart with fix after every crash.

Attached are a zip of what I take to be the last chksisk shown in event viewer and also a zip of all of them.

Anak · Apr 8, 2015

jamesldavis said:
After the XCOPY procedure, my web browsers display all pages in a paper white background, and I think some graphics are also not displayed. How to revert to the usual appearance of web pages?

That's the first time I've heard of this happening also Noel.

James,
Check to see if any settings changed in Control Panel\All Control Panel Items\Personalization, specifically look for any confirmations to use the High Contrast White Theme. http://White background's problem in web pages | kioskea.net

2.) How many times did you run the SFC scan? Sometimes it may take three or more runs with re-boots in between for it to correct any violations it may find.

NoelDP · Apr 8, 2015

SFC VERY rarely requires more than one pass to fix everything it's capable of fixing - I can only recall three incidents of it happening in these forums without any apparent external action.

The more common reason for the copy to fail is that there's an extra level in the folder, or there was a typo in the command used.
The power of xcopy is such that it will create the target folders as necessary without regard to whether they make sense.

Let's check for the extra level...

Open an Elevated Commmand Prompt, and run the following commands

DIR C:\media64
DIR C:\Windows\winsxs\media64
DIR C:\Windows\winsxs\me*.*

post the results.

Here are some instructions to make life easier

1) To open an Elevated Command Prompt Window (the ECP window), click on Start, All Programs, Accessories – then right-click on Command Prompt, and select Run as Administrator. Accept the UAC prompt.
2) To run the commands easier, highlight the block of commands, and right-click on the highlight – select Copy. In the CP Window, click on the black/white icon at top left – select Paste. The commands will run but may not complete the last command, so hit the Enter Key once.
3) To copy the results... click on the Black/White icon in the top left, and select Edit... 'Select All', and hit the Enter key - then use Ctrl+V or r-click+Paste to paste it into your response.

jamesldavis · Apr 8, 2015

I had run sfc /scannow just once yesterday, so I ran it three more times just now with a reboots in between scans. In one instance Windows complained about not shutting down correctly.
All scan feedback in the DOS box was the same each time with report of error or errors that could not be fixed. Attached is the Log file.

jamesldavis · Apr 8, 2015

I started over just now and booted to windows repair, then ran the xcopy media64 procedure again. On restart I ran the sfc /scannow and for the first time it reported that no corrupt files were found.

Is there more to be done?

Solved Random BSOD errors with ntoskrnl.exe and one instance of tcpip.sys

New member

My Computer My Computer

At a glance

Jedi Master (RET)

My Computers My Computers

At a glance

At a glance

New member

My Computer My Computer

At a glance

New member

My Computer My Computer

At a glance

Jedi Master (RET)

My Computers My Computers

At a glance

At a glance

Three-Toed Sloth

My Computer My Computer

At a glance

New member

My Computer My Computer

At a glance

New member

My Computer My Computer

At a glance

Three-Toed Sloth

My Computer My Computer

At a glance

New member

My Computer My Computer

At a glance

New member

My Computer My Computer

At a glance

Three-Toed Sloth

My Computer My Computer

At a glance

New member

My Computer My Computer

At a glance

Three-Toed Sloth

My Computer My Computer

At a glance

New member

My Computer My Computer

At a glance

New member

My Computer My Computer

At a glance

New member

My Computer My Computer

At a glance

Three-Toed Sloth

My Computer My Computer

At a glance

New member

My Computer My Computer

At a glance

New member

My Computer My Computer

At a glance

Similar threads

My Computer

My Computers

My Computer

My Computer

My Computers

My Computer

My Computer

My Computer

My Computer

My Computer

My Computer

My Computer

My Computer

My Computer

My Computer

My Computer

My Computer

My Computer

My Computer

My Computer