Author Topic: Windows 7 Ult 64 bit trapped by BSD and can not get out.  (Read 27875 times)

0 Members and 1 Guest are viewing this topic.

Offline satrow

  • Jr. Member
  • **
  • Join Date: Nov 2016
  • Posts: 70
  • Location: Cymru
  • Karma: 2
    • View Profile
Re: Windows 7 Ult 64 bit trapped by BSD and can not get out.
« Reply #30 on: August 08, 2017, 04:56:04 PM »
Can you load MSConfig (Start > Run 'msconfig' ) and choose Selective Startup + Load System Services, Apply and Ok, allow it to reboot - hopefully, it will start without a BSOD, so you can then begin checking those logs, trying to access System Restore, maybe begin uninstalls, ... ?

Offline FreeCat

  • Full Member
  • ***
  • Join Date: Apr 2013
  • Posts: 195
  • Karma: 0
    • View Profile
Re: Windows 7 Ult 64 bit trapped by BSD and can not get out.
« Reply #31 on: August 08, 2017, 06:03:53 PM »
Howdy,

I did what you said satnow, but got another BSOD, attached

Offline satrow

  • Jr. Member
  • **
  • Join Date: Nov 2016
  • Posts: 70
  • Location: Cymru
  • Karma: 2
    • View Profile
Re: Windows 7 Ult 64 bit trapped by BSD and can not get out.
« Reply #32 on: August 08, 2017, 06:25:42 PM »
Another 0x3b with access denied relating to win32k.sys. It's late here, see what Boggin comes up with later, he might be online again in ~5 hours.

Offline FreeCat

  • Full Member
  • ***
  • Join Date: Apr 2013
  • Posts: 195
  • Karma: 0
    • View Profile
Re: Windows 7 Ult 64 bit trapped by BSD and can not get out.
« Reply #33 on: August 08, 2017, 08:13:16 PM »
Thanks, Satnow.

Online Boggin

  • Global Moderator
  • Hero Member
  • *****
  • Join Date: Jul 2014
  • Posts: 7089
  • Location: UK
  • Karma: 106
    • View Profile
Re: Windows 7 Ult 64 bit trapped by BSD and can not get out.
« Reply #34 on: August 09, 2017, 01:30:22 AM »
Restore points being wiped out can be a cause of an infection, but you need to see if they are still enabled.

Can you go to System protection and check that it's still showing as On.

In your opening post I've noticed that you say you are using Pro Ultimate - which is it, Pro or Ultimate as they are two separate versions and did you download and create a new install disk as I'd laid out in my Reply #1

If you hadn't then as you can now get Safe Mode with Networking, you'll be able to do it on your own machine.

With that you can perform an offboot sfc /scannow but it isn't guaranteed to repair what a normal sfc /scannow was unable to.

The steps for that are in my Reply #1.

To view the CBS log produced by a sfc /scannow, enter this cmd which will produce a desktop icon which when double clicked will open the log in Notepad.

You can copy & paste the cmd to the cmd prompt but it is best done straight after a sfc /scannow as the CBS log can be volatile.

findstr /c:"[SR]" %windir%\Logs\CBS\CBS.log > %userprofile%\Desktop\sfcdetails.txt

This produces a cut down version of the CBS log showing what it could and couldn't repair.

Downloading and running SFCFix.exe straight after a sfc /scannow may have some success but will produce its own log, but it must be run straight after a sfc /scannow.

http://www.majorgeeks.com/files/details/sfcfix.html

You can copy & paste both those reports into your reply box.

Is Event Viewer still showing the same errors or have any more been produced with the change of the stop error code ?

To rule out an infection, I want you to run a scan with the free ESET Online Scanner while in Safe Mode with Networking.

https://www.eset.com/uk/home/online-scanner/

Hit the SCAN NOW box.

Click on Advanced settings and check those boxes except for Archives and Proxy - it can take a while to run.

There's also a box to uninstall on completion if I remember rightly.
« Last Edit: August 09, 2017, 01:48:27 AM by Boggin »

Online Boggin

  • Global Moderator
  • Hero Member
  • *****
  • Join Date: Jul 2014
  • Posts: 7089
  • Location: UK
  • Karma: 106
    • View Profile
Re: Windows 7 Ult 64 bit trapped by BSD and can not get out.
« Reply #35 on: August 09, 2017, 02:10:13 AM »
Forgot to add this but you can uninstall those updates that satrow has listed by going Start - type installed updates and press enter.

Click on the top right search box and enter the update in full - i.e. KB3156019 and that will come up in the main pane along with its install date.

Right click on each in turn and select Uninstall.

You can defer the restart until you have uninstalled all of them which will boot you back into normal mode and not sure if you'll be back with the BSOD, but it will go through a partial reconfigure before it shuts down and then restarts.

Offline satrow

  • Jr. Member
  • **
  • Join Date: Nov 2016
  • Posts: 70
  • Location: Cymru
  • Karma: 2
    • View Profile
Re: Windows 7 Ult 64 bit trapped by BSD and can not get out.
« Reply #36 on: August 09, 2017, 04:37:55 AM »
It's W7 x64 Ultimate SP1.

Info for the PC from systeminfo.txt/MSInfo32:
Code: [Select]
OS Name:                   Microsoft Windows 7 Ultimate
OS Version:                6.1.7601 Service Pack 1 Build 7601
OS Manufacturer:           Microsoft Corporation
OS Configuration:          Standalone Workstation
OS Build Type:             Multiprocessor Free
Registered Organization:   
Product ID:                xxxxx-xxx-xxxxxxx-xxxxx
Original Install Date:     6/11/2013, 12:03:35 PM
System Boot Time:          8/7/2017, 8:44:07 PM
System Manufacturer:       Dell Inc.
System Model:              Precision WorkStation T7500 
System Type:               x64-based PC
Processor(s):              2 Processor(s) Installed.
                           [01]: Intel64 Family 6 Model 26 Stepping 5 GenuineIntel ~2926 Mhz
                           [02]: Intel64 Family 6 Model 26 Stepping 5 GenuineIntel ~2926 Mhz
BIOS Version:              Dell Inc. A14, 7/6/2012
Windows Directory:         C:\Windows
System Directory:          C:\Windows\system32
Boot Device:               \Device\HarddiskVolume1
System Locale:             en-us;English (United States)
Input Locale:              en-us;English (United States)
Time Zone:                 (UTC-05:00) Eastern Time (US & Canada)
Total Physical Memory:     65,534 MB
Available Physical Memory: 61,120 MB
Virtual Memory: Max Size:  131,065 MB
Virtual Memory: Available: 126,708 MB
Virtual Memory: In Use:    4,357 MB

Offline FreeCat

  • Full Member
  • ***
  • Join Date: Apr 2013
  • Posts: 195
  • Karma: 0
    • View Profile
Re: Windows 7 Ult 64 bit trapped by BSD and can not get out.
« Reply #37 on: August 09, 2017, 07:07:30 AM »
Thanks, Boggin and Satnow.

OK, I have a lot of stuff to do, so I will give you answers and outline what I understand.

System Protection is turned off.  I will leave it off until you tell me to turn it on.
(I have never touched it previously; did not know it was there.)

Yes, I have Ultimate.  Pro was on system when purchased, but Dell wiped it and installed Ultimate.
(Sorry for confusion on this.)

I have begun the eSet AV scan; looks like it will take a while; 5% done, so far so good.  Re Virus Scann:  Bloggin, I saw that in May 2017 you tried Bitdefender.  Did you like it?  What were those others you suggested; I looked through the log but got lost and could not find them.

I saved the event viewer, but I am not sure if this is what you can see (ATTACHED).  Last time I did it screen by screen and it took over an hours; let me know if this is good or tell me a way to get it to you without screen by screen --- there must be a way.

Next I am going to try to uninstall the updates as per Satnow's list.

Then, I will work on the scannow stuff as it seems more complicated than un-install of update.

Thanks again for your help, Satnow and bloggin.

Jim, mentioned this hotfix for the scannow problem;  I have been told that hotfixes are dicey and should be used only as a last resort:

"There seems to be a hotfix for that but defiantly coming back to something with your drivers is not happy with the update at all.:
 
https://support.microsoft.com/en-us/help/980932/stop-error-code-0x0000003b-system-service-exception-on-a-computer-that
 
 





Offline FreeCat

  • Full Member
  • ***
  • Join Date: Apr 2013
  • Posts: 195
  • Karma: 0
    • View Profile
Re: Windows 7 Ult 64 bit trapped by BSD and can not get out.
« Reply #38 on: August 09, 2017, 07:50:58 AM »
Hi Bloggin,
I went to un-install the first update but no results found.  See attached.  Maybe I did it incorrectly.

BTW, eStat still no errors.

The Bitdefender uninstall did not uninstall it.
« Last Edit: August 09, 2017, 07:52:37 AM by FreeCat »

Online Boggin

  • Global Moderator
  • Hero Member
  • *****
  • Join Date: Jul 2014
  • Posts: 7089
  • Location: UK
  • Karma: 106
    • View Profile
Re: Windows 7 Ult 64 bit trapped by BSD and can not get out.
« Reply #39 on: August 09, 2017, 08:09:02 AM »
You would need to clear Start from the box before you enter the KB number.

Did you go Start - type installed updates to get that window because it looks more like Windows Explorer.

It's strange that you should mention Bitdefender as I've seen an entry for BDVEDISK in the event log.

I'm in the middle of composing a fuller reply.

Online Boggin

  • Global Moderator
  • Hero Member
  • *****
  • Join Date: Jul 2014
  • Posts: 7089
  • Location: UK
  • Karma: 106
    • View Profile
Re: Windows 7 Ult 64 bit trapped by BSD and can not get out.
« Reply #40 on: August 09, 2017, 08:21:27 AM »
You should have system protection turned on.

BTW - Is jpm (Jim) emailing you these Hotfixes ?

I wasn't overly impressed with Bitdefender because it was slow to start on boot and Windows Defender was kicking in (Win 10).

I used IObit Uninstaller to uninstall Bitdefender as Windows Uninstall which is supposed to uninstall it tends to leave residue.

However, you should be able to remove BDVEDISK using FreeFixer. - http://www.freefixer.com/

You can also use FreeFixer to remove anything else that has a box next to it where it says the file is not found - these are residue.

I gave Windows Defender a go but wasn't sure just how effective it was so went back to my paid for Norton Security.

You don't have a lot of Errors recorded but I did notice one for BDVEDISK not being able to load.

That belongs to Bitdefender, so have you had it installed at one time ?

Looking at this article, BDVEDISK can cause a 0x03B BSOD but it would have BDVEDISK.sys in the stop code.

http://www.fixoserror.com/fix-bdvedisk-sys-blue-screen-error-step-by-step.html

This article is for info only - don't go clicking on any download buttons.

I've gone down past that error and haven't been able to find it to copy & paste.

I'm not sure what this error means - perhaps satrow may have an idea.

Log Name:      Microsoft-Windows-Windows Firewall With Advanced Security/Firewall
Source:        Microsoft-Windows-Windows Firewall With Advanced Security
Date:          09/08/2017 01:36:28
Event ID:      2011
Task Category: None
Level:         Information
Keywords:     
User:          LOCAL SERVICE
Computer:      M764-140-DQ64G3
Description:
Windows Firewall was unable to notify the user that it blocked an application from accepting incoming connections on the network.

Reason:      The application is a system service
Application Path:   C:\windows\system32\lsass.exe
IP Version:   IPv4
Protocol:   TCP
Port:      49154
Process ID:   664
User:      SYSTEM
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Microsoft-Windows-Windows Firewall With Advanced Security" Guid="{D1BC9AFF-2ABF-4D71-9146-ECB2A986EB85}" />
    <EventID>2011</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8000000000000000</Keywords>
    <TimeCreated SystemTime="2017-08-09T00:36:28.762974400Z" />
    <EventRecordID>178597</EventRecordID>
    <Correlation />
    <Execution ProcessID="1068" ThreadID="1140" />
    <Channel>Microsoft-Windows-Windows Firewall With Advanced Security/Firewall</Channel>
    <Computer>M764-140-DQ64G3</Computer>
    <Security UserID="S-1-5-19" />
  </System>
  <EventData>
    <Data Name="ReasonCode">1</Data>
    <Data Name="ApplicationPath">C:\windows\system32\lsass.exe</Data>
    <Data Name="IPVersion">0</Data>
    <Data Name="Protocol">6</Data>
    <Data Name="Port">49154</Data>
    <Data Name="ProcessId">664</Data>
    <Data Name="ModifyingUser">S-1-5-18</Data>
  </EventData>
</Event>

Online Boggin

  • Global Moderator
  • Hero Member
  • *****
  • Join Date: Jul 2014
  • Posts: 7089
  • Location: UK
  • Karma: 106
    • View Profile
Re: Windows 7 Ult 64 bit trapped by BSD and can not get out.
« Reply #41 on: August 09, 2017, 08:26:54 AM »
You also have a couple of these but I think you've already run a chkds /r haven't you ?

Log Name:      System
Source:        Ntfs
Date:          09/08/2017 01:35:30
Event ID:      55
Task Category: (2)
Level:         Error
Keywords:      Classic
User:          N/A
Computer:      M764-140-DQ64G3
Description:
The file system structure on the disk is corrupt and unusable. Please run the chkdsk utility on the volume \Device\HarddiskVolume4.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Ntfs" />
    <EventID Qualifiers="49156">55</EventID>
    <Level>2</Level>
    <Task>2</Task>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2017-08-09T00:35:30.902472700Z" />
    <EventRecordID>1205144</EventRecordID>
    <Channel>System</Channel>
    <Computer>M764-140-DQ64G3</Computer>
    <Security />
  </System>
  <EventData>
    <Data>
    </Data>
    <Data>\Device\HarddiskVolume4</Data>
    <Binary>0C000C000200380002000000370004C000000000020100C000000000000000000000000000000000EE0C14001A00000000000100</Binary>
  </EventData>
</Event>


Offline satrow

  • Jr. Member
  • **
  • Join Date: Nov 2016
  • Posts: 70
  • Location: Cymru
  • Karma: 2
    • View Profile
Re: Windows 7 Ult 64 bit trapped by BSD and can not get out.
« Reply #42 on: August 09, 2017, 09:14:56 AM »
The last Hotfix doesn't apply here, it's an older 'fix', pre-SP1.

Try the latest BitDefender Uninstall tool: http://www.majorgeeks.com/files/details/bitdefender_uninstall_tool.html


Offline FreeCat

  • Full Member
  • ***
  • Join Date: Apr 2013
  • Posts: 195
  • Karma: 0
    • View Profile
Re: Windows 7 Ult 64 bit trapped by BSD and can not get out.
« Reply #43 on: August 09, 2017, 09:38:12 AM »
Thanks for this.  I will get to it as soon as anti-virus eSet finishes.

Online Boggin

  • Global Moderator
  • Hero Member
  • *****
  • Join Date: Jul 2014
  • Posts: 7089
  • Location: UK
  • Karma: 106
    • View Profile
Re: Windows 7 Ult 64 bit trapped by BSD and can not get out.
« Reply #44 on: August 09, 2017, 09:41:19 AM »
Just a reminder, go Start - type installed updates and press enter when View installed updates comes up.

Has ESET found anything yet - it usually tells you as it progresses.

Have you previously run a chkdsk /r ?

 

anything