Main Forum > General Computer Support
HELP! HELP! BIG PROBLEMS AFTER REPAIR !
Boggin:
I think that BSOD usually relates to Display drivers and may just have been a glitch, although Shane is usually more conversant with the BSOD errors, but I would have expected BSV to have given a Bug Check String which can give more info.
When you first open Event Viewer and after it has read the logs, you will be presented with Critical, Error etc. and for the last hour, last week etc.
The BSOD would probably have triggered a Critical for when you got the BSOD - these are normally just Event ID 41 but you can check by clicking on Critical and then on Show All Instances of This Event in the lower right pane.
Clicking on any in the upper pane will produce more details in the lower pane.
You can also do this when you click on Error and you are looking for Critical or Error with a time stamp for when the BSOD occurred.
Sometimes MS has more info and possible solutions when you click on the blue online help link, but sometimes you have to enter the details yourself in the brown box and do your own search of the links that produces.
You can use your restore points prior to installing the Hotfix to check if you start getting the ole32.dll errors again, but if you don't get anymore BSODs before restoring, then I would say the BSOD was just a driver glitch - subject to what Shane has to say, but he won't be back until Monday.
If you want to post any of the errors Event Viewer has recorded, click on whichever you want to post then click on Copy/Copy details as text in the lower right pane, right click in the reply box and select Paste.
sallyb:
Thank you! I will do that but right now I'm about 80% finished with the long five-step check disk, I did the pre-skan check disk and it said there were errors so then I did the F check disk and there were still errors so now I'm doing the long r one and I hope it will fix all the problems. I will post the results of that long when it's finished and maybe you can help me interpret it. I will not do a restore unless I get another blue screen and maybe Shane would be kind enough to look at all my information on Monday. But if I do get another one I will probably do the restore if it happens before then because I never get them on this machine. I feel bad obviously something has done something to the machine throughout this process of uninstalling the windows update doing the windows repair and downloading the hot fix. But I feel bad obviously something has done something to the machine throughout this process of uninstalling the windows update doing the windows repair and downloading the hot fix but since I can't restore to be for any of that I guess I'll never know, thank you for your help and I will keep you posted!
sallyb:
Here is my long check disk log:
Log Name: Application
Source: Microsoft-Windows-Wininit
Date: 6/20/2015 2:14:27 PM
Event ID: 1001
Task Category: None
Level: Information
Keywords: Classic
User: N/A
Computer: Sally-HP
Description:
Checking file system on C:
The type of the file system is NTFS.
Volume label is OS.
A disk check has been scheduled.
Windows will now check the disk.
CHKDSK is verifying files (stage 1 of 5)...
488192 file records processed.
File verification completed.
2206 large file records processed.
0 bad file records processed.
0 EA records processed.
61 reparse records processed.
CHKDSK is verifying indexes (stage 2 of 5)...
647374 index entries processed.
Index verification completed.
0 unindexed files scanned.
0 unindexed files recovered.
CHKDSK is verifying security descriptors (stage 3 of 5)...
488192 file SDs/SIDs processed.
Cleaning up 2 unused index entries from index $SII of file 0x9.
Cleaning up 2 unused index entries from index $SDH of file 0x9.
Cleaning up 2 unused security descriptors.
Security descriptor verification completed.
79592 data files processed.
CHKDSK is verifying Usn Journal...
35311896 USN bytes processed.
Usn Journal verification completed.
CHKDSK is verifying file data (stage 4 of 5)...
488176 files processed.
File data verification completed.
CHKDSK is verifying free space (stage 5 of 5)...
112469475 free clusters processed.
Free space verification is complete.
Windows has checked the file system and found no problems.
955629567 KB total disk space.
504865784 KB in 375432 files.
266236 KB in 79593 indexes.
0 KB in bad sectors.
619647 KB in use by the system.
65536 KB occupied by the log file.
449877900 KB available on disk.
4096 bytes in each allocation unit.
238907391 total allocation units on disk.
112469475 allocation units available on disk.
Internal Info:
00 73 07 00 75 f1 06 00 a8 b9 0c 00 00 00 00 00 .s..u...........
1b 65 00 00 3d 00 00 00 00 00 00 00 00 00 00 00 .e..=...........
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
Windows has finished checking your disk.
Please wait while your computer restarts.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-Wininit" Guid="{206f6dea-d3c5-4d10-bc72-989f03c8b84b}" EventSourceName="Wininit" />
<EventID Qualifiers="16384">1001</EventID>
<Version>0</Version>
<Level>4</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2015-06-20T18:14:27.000000000Z" />
<EventRecordID>856329</EventRecordID>
<Correlation />
<Execution ProcessID="0" ThreadID="0" />
<Channel>Application</Channel>
<Computer>Sally-HP</Computer>
<Security />
</System>
<EventData>
<Data>
Checking file system on C:
The type of the file system is NTFS.
Volume label is OS.
A disk check has been scheduled.
Windows will now check the disk.
CHKDSK is verifying files (stage 1 of 5)...
488192 file records processed.
File verification completed.
2206 large file records processed.
0 bad file records processed.
0 EA records processed.
61 reparse records processed.
CHKDSK is verifying indexes (stage 2 of 5)...
647374 index entries processed.
Index verification completed.
0 unindexed files scanned.
0 unindexed files recovered.
CHKDSK is verifying security descriptors (stage 3 of 5)...
488192 file SDs/SIDs processed.
Cleaning up 2 unused index entries from index $SII of file 0x9.
Cleaning up 2 unused index entries from index $SDH of file 0x9.
Cleaning up 2 unused security descriptors.
Security descriptor verification completed.
79592 data files processed.
CHKDSK is verifying Usn Journal...
35311896 USN bytes processed.
Usn Journal verification completed.
CHKDSK is verifying file data (stage 4 of 5)...
488176 files processed.
File data verification completed.
CHKDSK is verifying free space (stage 5 of 5)...
112469475 free clusters processed.
Free space verification is complete.
Windows has checked the file system and found no problems.
955629567 KB total disk space.
504865784 KB in 375432 files.
266236 KB in 79593 indexes.
0 KB in bad sectors.
619647 KB in use by the system.
65536 KB occupied by the log file.
449877900 KB available on disk.
4096 bytes in each allocation unit.
238907391 total allocation units on disk.
112469475 allocation units available on disk.
Internal Info:
00 73 07 00 75 f1 06 00 a8 b9 0c 00 00 00 00 00 .s..u...........
1b 65 00 00 3d 00 00 00 00 00 00 00 00 00 00 00 .e..=...........
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
Windows has finished checking your disk.
Please wait while your computer restarts.
</Data>
</EventData>
</Event>
Log Name: Application
Source: Microsoft-Windows-Wininit
Date: 6/20/2015 2:14:27 PM
Event ID: 1001
Task Category: None
Level: Information
Keywords: Classic
User: N/A
Computer: Sally-HP
Description:
Checking file system on C:
The type of the file system is NTFS.
Volume label is OS.
A disk check has been scheduled.
Windows will now check the disk.
CHKDSK is verifying files (stage 1 of 5)...
488192 file records processed.
File verification completed.
2206 large file records processed.
0 bad file records processed.
0 EA records processed.
61 reparse records processed.
CHKDSK is verifying indexes (stage 2 of 5)...
647374 index entries processed.
Index verification completed.
0 unindexed files scanned.
0 unindexed files recovered.
CHKDSK is verifying security descriptors (stage 3 of 5)...
488192 file SDs/SIDs processed.
Cleaning up 2 unused index entries from index $SII of file 0x9.
Cleaning up 2 unused index entries from index $SDH of file 0x9.
Cleaning up 2 unused security descriptors.
Security descriptor verification completed.
79592 data files processed.
CHKDSK is verifying Usn Journal...
35311896 USN bytes processed.
Usn Journal verification completed.
CHKDSK is verifying file data (stage 4 of 5)...
488176 files processed.
File data verification completed.
CHKDSK is verifying free space (stage 5 of 5)...
112469475 free clusters processed.
Free space verification is complete.
Windows has checked the file system and found no problems.
955629567 KB total disk space.
504865784 KB in 375432 files.
266236 KB in 79593 indexes.
0 KB in bad sectors.
619647 KB in use by the system.
65536 KB occupied by the log file.
449877900 KB available on disk.
4096 bytes in each allocation unit.
238907391 total allocation units on disk.
112469475 allocation units available on disk.
Internal Info:
00 73 07 00 75 f1 06 00 a8 b9 0c 00 00 00 00 00 .s..u...........
1b 65 00 00 3d 00 00 00 00 00 00 00 00 00 00 00 .e..=...........
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
Windows has finished checking your disk.
Please wait while your computer restarts.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-Wininit" Guid="{206f6dea-d3c5-4d10-bc72-989f03c8b84b}" EventSourceName="Wininit" />
<EventID Qualifiers="16384">1001</EventID>
<Version>0</Version>
<Level>4</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2015-06-20T18:14:27.000000000Z" />
<EventRecordID>856329</EventRecordID>
<Correlation />
<Execution ProcessID="0" ThreadID="0" />
<Channel>Application</Channel>
<Computer>Sally-HP</Computer>
<Security />
</System>
<EventData>
<Data>
Checking file system on C:
The type of the file system is NTFS.
Volume label is OS.
A disk check has been scheduled.
Windows will now check the disk.
CHKDSK is verifying files (stage 1 of 5)...
488192 file records processed.
File verification completed.
2206 large file records processed.
0 bad file records processed.
0 EA records processed.
61 reparse records processed.
CHKDSK is verifying indexes (stage 2 of 5)...
647374 index entries processed.
Index verification completed.
0 unindexed files scanned.
0 unindexed files recovered.
CHKDSK is verifying security descriptors (stage 3 of 5)...
488192 file SDs/SIDs processed.
Cleaning up 2 unused index entries from index $SII of file 0x9.
Cleaning up 2 unused index entries from index $SDH of file 0x9.
Cleaning up 2 unused security descriptors.
Security descriptor verification completed.
79592 data files processed.
CHKDSK is verifying Usn Journal...
35311896 USN bytes processed.
Usn Journal verification completed.
CHKDSK is verifying file data (stage 4 of 5)...
488176 files processed.
File data verification completed.
CHKDSK is verifying free space (stage 5 of 5)...
112469475 free clusters processed.
Free space verification is complete.
Windows has checked the file system and found no problems.
955629567 KB total disk space.
504865784 KB in 375432 files.
266236 KB in 79593 indexes.
0 KB in bad sectors.
619647 KB in use by the system.
65536 KB occupied by the log file.
449877900 KB available on disk.
4096 bytes in each allocation unit.
238907391 total allocation units on disk.
112469475 allocation units available on disk.
Internal Info:
00 73 07 00 75 f1 06 00 a8 b9 0c 00 00 00 00 00 .s..u...........
1b 65 00 00 3d 00 00 00 00 00 00 00 00 00 00 00 .e..=...........
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
Windows has finished checking your disk.
Please wait while your computer restarts.
</Data>
</EventData>
</Event>
My Event View is not showing any critical errors.
Here are the errors at the time of the Blue Screen:
Event ID 6008
Log Name: System
Source: EventLog
Date: 6/19/2015 9:03:09 PM
Event ID: 6008
Task Category: None
Level: Error
Keywords: Classic
User: N/A
Computer: Sally-HP
Description:
The previous system shutdown at 8:58:52 PM on 6/19/2015 was unexpected.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="EventLog" />
<EventID Qualifiers="32768">6008</EventID>
<Level>2</Level>
<Task>0</Task>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2015-06-20T01:03:09.000000000Z" />
<EventRecordID>123181</EventRecordID>
<Channel>System</Channel>
<Computer>Sally-HP</Computer>
<Security />
</System>
<EventData>
<Data>8:58:52 PM</Data>
<Data>6/19/2015</Data>
<Data>
</Data>
<Data>
</Data>
<Data>37805</Data>
<Data>
</Data>
<Data>
</Data>
<Binary>DF0706000500130014003A003400F300DF0706000600140000003A003400F300600900003C000000010000006009000000000000B0040000010000008A050000</Binary>
</EventData>
</Event>
Next one:
Log Name: Microsoft-Windows-Kernel-EventTracing/Admin
Source: Microsoft-Windows-Kernel-EventTracing
Date: 6/19/2015 9:03:07 PM
Event ID: 3
Task Category: Session
Level: Error
Keywords: Session
User: SYSTEM
Computer: Sally-HP
Description:
Session "UBPM" stopped due to the following error: 0xC0000022
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-Kernel-EventTracing" Guid="{B675EC37-BDB6-4648-BC92-F3FDC74D3CA2}" />
<EventID>3</EventID>
<Version>0</Version>
<Level>2</Level>
<Task>2</Task>
<Opcode>14</Opcode>
<Keywords>0x8000000000000010</Keywords>
<TimeCreated SystemTime="2015-06-20T01:03:07.368629900Z" />
<EventRecordID>119</EventRecordID>
<Correlation />
<Execution ProcessID="4" ThreadID="844" />
<Channel>Microsoft-Windows-Kernel-EventTracing/Admin</Channel>
<Computer>Sally-HP</Computer>
<Security UserID="S-1-5-18" />
</System>
<EventData>
<Data Name="SessionName">UBPM</Data>
<Data Name="FileName">
</Data>
<Data Name="ErrorCode">3221225506</Data>
<Data Name="LoggingMode">268435840</Data>
</EventData>
</Event>
Next One:
Log Name: System
Source: Microsoft-Windows-Eventlog
Date: 6/19/2015 9:03:16 PM
Event ID: 22
Task Category: Service startup
Level: Error
Keywords: Service availability
User: LOCAL SERVICE
Computer: Sally-HP
Description:
The event logging service encountered an error while initializing publishing resources for channel Security. If channel type is Analytic or Debug, then this could mean there was an error initializing logging resources as well.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-Eventlog" Guid="{FC65DDD8-D6EF-4962-83D5-6E5CFE9CE148}" />
<EventID>22</EventID>
<Version>0</Version>
<Level>2</Level>
<Task>100</Task>
<Opcode>0</Opcode>
<Keywords>0x8000000000020000</Keywords>
<TimeCreated SystemTime="2015-06-20T01:03:16.483044900Z" />
<EventRecordID>123219</EventRecordID>
<Correlation />
<Execution ProcessID="448" ThreadID="512" />
<Channel>System</Channel>
<Computer>Sally-HP</Computer>
<Security UserID="S-1-5-19" />
</System>
<UserData>
<InitChannelPublishingFailure xmlns:auto-ns3="http://schemas.microsoft.com/win/2004/08/events" xmlns="http://manifests.microsoft.com/win/2004/08/windows/eventlog">
<Error Code="4201">
</Error>
<ChannelPath>Security</ChannelPath>
</InitChannelPublishingFailure>
</UserData>
</Event>
Next one- The bug Check:
Log Name: System
Source: Microsoft-Windows-WER-SystemErrorReporting
Date: 6/19/2015 9:03:29 PM
Event ID: 1001
Task Category: None
Level: Error
Keywords: Classic
User: N/A
Computer: Sally-HP
Description:
The computer has rebooted from a bugcheck. The bugcheck was: 0x00000116 (0xfffffa80123e44e0, 0xfffff880054d1728, 0x0000000000000000, 0x000000000000000d). A dump was saved in: C:\windows\MEMORY.DMP. Report Id: 061915-131742-01.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-WER-SystemErrorReporting" Guid="{ABCE23E7-DE45-4366-8631-84FA6C525952}" EventSourceName="BugCheck" />
<EventID Qualifiers="16384">1001</EventID>
<Version>0</Version>
<Level>2</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2015-06-20T01:03:29.000000000Z" />
<EventRecordID>123224</EventRecordID>
<Correlation />
<Execution ProcessID="0" ThreadID="0" />
<Channel>System</Channel>
<Computer>Sally-HP</Computer>
<Security />
</System>
<EventData>
<Data Name="param1">0x00000116 (0xfffffa80123e44e0, 0xfffff880054d1728, 0x0000000000000000, 0x000000000000000d)</Data>
<Data Name="param2">C:\windows\MEMORY.DMP</Data>
<Data Name="param3">061915-131742-01</Data>
</EventData>
</Event>
The is Greek to me!
But here's more:
Log Name: System
Source: NETLOGON
Date: 6/19/2015 9:03:31 PM
Event ID: 3095
Task Category: None
Level: Error
Keywords: Classic
User: N/A
Computer: Sally-HP
Description:
This computer is configured as a member of a workgroup, not as a member of a domain. The Netlogon service does not need to run in this configuration.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="NETLOGON" />
<EventID Qualifiers="0">3095</EventID>
<Level>2</Level>
<Task>0</Task>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2015-06-20T01:03:31.000000000Z" />
<EventRecordID>123227</EventRecordID>
<Channel>System</Channel>
<Computer>Sally-HP</Computer>
<Security />
</System>
<EventData>
</EventData>
</Event>
Next:
Log Name: System
Source: Microsoft-Windows-Eventlog
Date: 6/19/2015 9:03:35 PM
Event ID: 22
Task Category: Service startup
Level: Error
Keywords: Service availability
User: LOCAL SERVICE
Computer: Sally-HP
Description:
The event logging service encountered an error while initializing publishing resources for channel Security. If channel type is Analytic or Debug, then this could mean there was an error initializing logging resources as well.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-Eventlog" Guid="{FC65DDD8-D6EF-4962-83D5-6E5CFE9CE148}" />
<EventID>22</EventID>
<Version>0</Version>
<Level>2</Level>
<Task>100</Task>
<Opcode>0</Opcode>
<Keywords>0x8000000000020000</Keywords>
<TimeCreated SystemTime="2015-06-20T01:03:35.718078100Z" />
<EventRecordID>123232</EventRecordID>
<Correlation />
<Execution ProcessID="448" ThreadID="516" />
<Channel>System</Channel>
<Computer>Sally-HP</Computer>
<Security UserID="S-1-5-19" />
</System>
<UserData>
<InitChannelPublishingFailure xmlns:auto-ns3="http://schemas.microsoft.com/win/2004/08/events" xmlns="http://manifests.microsoft.com/win/2004/08/windows/eventlog">
<Error Code="4201">
</Error>
<ChannelPath>Security</ChannelPath>
</InitChannelPublishingFailure>
</UserData>
</Event>
Here's the next:
Log Name: System
Source: Microsoft-Windows-Eventlog
Date: 6/19/2015 9:03:35 PM
Event ID: 22
Task Category: Service startup
Level: Error
Keywords: Service availability
User: LOCAL SERVICE
Computer: Sally-HP
Description:
The event logging service encountered an error while initializing publishing resources for channel Security. If channel type is Analytic or Debug, then this could mean there was an error initializing logging resources as well.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-Eventlog" Guid="{FC65DDD8-D6EF-4962-83D5-6E5CFE9CE148}" />
<EventID>22</EventID>
<Version>0</Version>
<Level>2</Level>
<Task>100</Task>
<Opcode>0</Opcode>
<Keywords>0x8000000000020000</Keywords>
<TimeCreated SystemTime="2015-06-20T01:03:35.764878100Z" />
<EventRecordID>123233</EventRecordID>
<Correlation />
<Execution ProcessID="448" ThreadID="516" />
<Channel>System</Channel>
<Computer>Sally-HP</Computer>
<Security UserID="S-1-5-19" />
</System>
<UserData>
<InitChannelPublishingFailure xmlns:auto-ns3="http://schemas.microsoft.com/win/2004/08/events" xmlns="http://manifests.microsoft.com/win/2004/08/windows/eventlog">
<Error Code="4201">
</Error>
<ChannelPath>Security</ChannelPath>
</InitChannelPublishingFailure>
</UserData>
</Event>
So I could go on and on, but there a millions of errors (?) Everyday.....none critical but just gobs! How can the machine operate with all those errors?
Thank you!
Boggin:
The chkdsk report is fine - no file corruption found and no bad sectors on the HDD.
I'm not sure how significant the Event ID 3 for the UBPM is to the BSOD - I can't find it in my services.msc but the Task Scheduler is set as Started and Auto. and I would have thought similar for the UBPM. http://blogs.technet.com/b/askperf/archive/2009/10/04/windows-7-windows-server-2008-r2-unified-background-process-manager-ubpm.aspx
Event ID 22 could also have had a hand in it but Event Viewer always has Errors in it and is what phone scammers use to trap the unwary into parting with cash and allowing them access to your machine to possibly install a key logger to steal personal info.
Event ID 3095 is nothing to worry about.
sallyb:
Ok, thanks for responding. I think i'll hold tight for now and see if I get any more weird stuff or crashes, etc before I do anything else.. :sarcastic:
Navigation
[0] Message Index
[#] Next page
[*] Previous page
Go to full version