Main Forum > General Computer Support
Windows 7 Ult 64 bit trapped by BSD and can not get out.
FreeCat:
But wait. I just saw an email from Jim suggesting a look at this:
https://support.microsoft.com/en-us/help/2521220/-0x0000001e-stop-error-when-you-perform-disk-i-o-intensive-operations
And, these symptoms seem to fit exactly as my 2 TB hard drive is a RAID (ie two 2 TB drive in mirror configuration). I have never done a hotfix before. But I see STOP 0x000000001E message I believe. And hotfix link sends me to "Contact Us" MSFT. Although, not RAID5 but RAID0.
FreeCat:
OK - NEW BALL GAME! I thought that whatever I am going to do, I should try a reboot and press F8 which I did just before
I had to go out to the doctor.
Now, the machine is in safe mode.
Normally, I would just run Tweaking 4 Pro. But, after that scare of possibly being trapped in the BSD, I don't know what to do.
Any suggestions would be appreciated. Should I apply the hotfix or any MSFT fix?
I will wait to hear from y'all. Thanks in advance.
I can not work today without my computer.
Boggin:
As I'd said before, MS send these Hotfixes to you via email.
However, if you aren't sure that is the right one for you then perhaps best to leave it.
You haven't answered if you have AOMEI installed or have had it installed.
You may be able to get into Safe Mode by using msconfig
Go Start - type msconfig and press enter then under the Boot tab check the box for Safe boot and if you want that with Networking, then also check the box for Network - Apply - OK - Restart
If that gets you in, go Start - type services.msc and press enter then look for AOMEI or similar in Services.
It may be showing as Started and Automatic.
You can change its status to Manual by right clicking on it and selecting Properties then use the dropdown to select Manual - Stop - Apply - OK
Go File/Exit to close Services,
While you are in Safe Mode you can check to see what the chkdsk found.
Go Start - type eventvwr and press enter and when Event Viewer opens, ensure Event Viewer (Local) is highlighted.
When it has read the data etc. expand Windows Logs and click on Application/Action/Find then type chkdsk or wininit into the Find box and press enter.
Cancel the Find box and read the report in the scrollable window, checking to see if it finds any KBs in bad sectors, although you have to use the slider bars and down arrow to read it, but I think your BSODs are probably caused by that AOMEI.sys driver.
To boot back to normal you will have to go back into msconfig - uncheck the box for Network if you have chosen it and then uncheck the box for Safe boot - Apply - OK - Restart and then see how the computer performs.
If things are back to normal and you have AOMEI and want to continue using it, then I suggest you reinstall it as it has become buggy.
You should be able to do that in Safe Mode with Networking if you still have problems in normal mode.
EDIT - I was writing this post while you were replying but do what I've suggested in Safe Mode.
FreeCat:
OK, Boggin. And, thanks again for your help.
I could not use the Advanced/.../Find the way you described it, but I did get to an event viewer that showed the 16 hour chkdsk did complete around 2:30 AM. Zero bad sectors. :)
OK, sorry for not answering your question about AOMEI. Yes, I have it and have installed it and have been using for years. Works like a charm; even restore whole machine to another completely different machine; BTW, I wanted to spend top dollar for backup as I figured any low-priced BU would be unreliable, etc. I tried Acronis; absolutely impossible to use and help non existent without $90 call per incident --- where did it put it? --- is it complete? --- whey does it not restore? --- etc. --- all no brainers; but, I should be able to install and use without support; No?
More BTW: I tried Paragon --- not as expensive but same thing; not easy to use; support wacky, etc.
Then, AOMEI, and wham: Great backup. All the time. Restores like a charm. No brainer to use --- even differential and incremental!
So, yes I apologize for not answering. I have it and have used it for years.
I did notice one message about Backerupper (the AOMEI) product --- "possibly corrupted."
But, then a Netgear problem. But, right now in Safe Mode Netork seems connected.
Maybe best if I give you the sequence:
Log Name: Application
Source: Microsoft-Windows-Wininit
Date: 8/6/2017 6:57:18 AM
Event ID: 1001
Task Category: None
Level: Information
Keywords: Classic
User: N/A
Computer: M764-140-DQ64G3
Description:
Checking file system on C:
The type of the file system is NTFS.
A disk check has been scheduled.
Windows will now check the disk.
CHKDSK is verifying files (stage 1 of 5)...
3043584 file records processed.
File verification completed.
39074 large file records processed.
0 bad file records processed.
2 EA records processed.
278 reparse records processed.
CHKDSK is verifying indexes (stage 2 of 5)...
3397294 index entries processed.
Index verification completed.
0 unindexed files scanned.
0 unindexed files recovered.
CHKDSK is verifying security descriptors (stage 3 of 5)...
3043584 file SDs/SIDs processed.
Cleaning up 131 unused index entries from index $SII of file 0x9.
Cleaning up 131 unused index entries from index $SDH of file 0x9.
Cleaning up 131 unused security descriptors.
Security descriptor verification completed.
176856 data files processed.
CHKDSK is verifying Usn Journal...
53585616 USN bytes processed.
Usn Journal verification completed.
CHKDSK is verifying file data (stage 4 of 5)...
3043568 files processed.
File data verification completed.
CHKDSK is verifying free space (stage 5 of 5)...
137183270 free clusters processed.
Free space verification is complete.
Windows has checked the file system and found no problems.
1953019903 KB total disk space.
1399725324 KB in 2824137 files.
1333648 KB in 176857 indexes.
0 KB in bad sectors.
3227847 KB in use by the system.
65536 KB occupied by the log file.
548733084 KB available on disk.
4096 bytes in each allocation unit.
488254975 total allocation units on disk.
137183271 allocation units available on disk.
Internal Info:
00 71 2e 00 a5 ca 2d 00 5d aa 3e 00 00 00 00 00 .q....-.].>.....
60 31 00 00 16 01 00 00 00 00 00 00 00 00 00 00 `1..............
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
Windows has finished checking your disk.
Please wait while your computer restarts.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-Wininit" Guid="{206f6dea-d3c5-4d10-bc72-989f03c8b84b}" EventSourceName="Wininit" />
<EventID Qualifiers="16384">1001</EventID>
<Version>0</Version>
<Level>4</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2017-08-06T10:57:18.000000000Z" />
<EventRecordID>1103842</EventRecordID>
<Correlation />
<Execution ProcessID="0" ThreadID="0" />
<Channel>Application</Channel>
<Computer>M764-140-DQ64G3</Computer>
<Security />
</System>
<EventData>
<Data>
Checking file system on C:
The type of the file system is NTFS.
A disk check has been scheduled.
Windows will now check the disk.
CHKDSK is verifying files (stage 1 of 5)...
3043584 file records processed.
File verification completed.
39074 large file records processed.
0 bad file records processed.
2 EA records processed.
278 reparse records processed.
CHKDSK is verifying indexes (stage 2 of 5)...
3397294 index entries processed.
Index verification completed.
0 unindexed files scanned.
0 unindexed files recovered.
CHKDSK is verifying security descriptors (stage 3 of 5)...
3043584 file SDs/SIDs processed.
Cleaning up 131 unused index entries from index $SII of file 0x9.
Cleaning up 131 unused index entries from index $SDH of file 0x9.
Cleaning up 131 unused security descriptors.
Security descriptor verification completed.
176856 data files processed.
CHKDSK is verifying Usn Journal...
53585616 USN bytes processed.
Usn Journal verification completed.
CHKDSK is verifying file data (stage 4 of 5)...
3043568 files processed.
File data verification completed.
CHKDSK is verifying free space (stage 5 of 5)...
137183270 free clusters processed.
Free space verification is complete.
Windows has checked the file system and found no problems.
1953019903 KB total disk space.
1399725324 KB in 2824137 files.
1333648 KB in 176857 indexes.
0 KB in bad sectors.
3227847 KB in use by the system.
65536 KB occupied by the log file.
548733084 KB available on disk.
4096 bytes in each allocation unit.
488254975 total allocation units on disk.
137183271 allocation units available on disk.
Internal Info:
00 71 2e 00 a5 ca 2d 00 5d aa 3e 00 00 00 00 00 .q....-.].>.....
60 31 00 00 16 01 00 00 00 00 00 00 00 00 00 00 `1..............
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
Windows has finished checking your disk.
Please wait while your computer restarts.
</Data>
</EventData>
</Event>
===
Log Name: Application
Source: Backupper Service
Date: 8/6/2017 6:57:36 AM
Event ID: 0
Task Category: None
Level: Information
Keywords: Classic
User: N/A
Computer: M764-140-DQ64G3
Description:
The description for Event ID 0 from source Backupper Service cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer.
If the event originated on another computer, the display information had to be saved with the event.
The following information was included with the event:
Backupper Service
Backupper Service in OnStart
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Backupper Service" />
<EventID Qualifiers="0">0</EventID>
<Level>4</Level>
<Task>0</Task>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2017-08-06T10:57:36.000000000Z" />
<EventRecordID>1103843</EventRecordID>
<Channel>Application</Channel>
<Computer>M764-140-DQ64G3</Computer>
<Security />
</System>
<EventData>
<Data>Backupper Service</Data>
<Data>Backupper Service in OnStart</Data>
</EventData>
</Event>
===
Log Name: Application
Source: FrAgent
Date: 8/6/2017 6:57:41 AM
Event ID: 105
Task Category: None
Level: Information
Keywords: Classic
User: N/A
Computer: M764-140-DQ64G3
Description:
The service was started.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="FrAgent" />
<EventID Qualifiers="0">105</EventID>
<Level>4</Level>
<Task>0</Task>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2017-08-06T10:57:41.000000000Z" />
<EventRecordID>1103844</EventRecordID>
<Channel>Application</Channel>
<Computer>M764-140-DQ64G3</Computer>
<Security />
</System>
<EventData>
</EventData>
</Event>
===
Log Name: Application
Source: NetgearSwitchUSB
Date: 8/6/2017 6:57:42 AM
Event ID: 0
Task Category: None
Level: Information
Keywords: Classic
User: N/A
Computer: M764-140-DQ64G3
Description:
The description for Event ID 0 from source NetgearSwitchUSB cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer.
If the event originated on another computer, the display information had to be saved with the event.
The following information was included with the event:
NetgearSwitchUSB
MediatekSwitchUSB in OnStart
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="NetgearSwitchUSB" />
<EventID Qualifiers="0">0</EventID>
<Level>4</Level>
<Task>0</Task>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2017-08-06T10:57:42.000000000Z" />
<EventRecordID>1103845</EventRecordID>
<Channel>Application</Channel>
<Computer>M764-140-DQ64G3</Computer>
<Security />
</System>
<EventData>
<Data>NetgearSwitchUSB</Data>
<Data>MediatekSwitchUSB in OnStart</Data>
</EventData>
</Event>
===
Log Name: Application
Source: Microsoft-Windows-Winlogon
Date: 8/6/2017 6:57:47 AM
Event ID: 4101
Task Category: None
Level: Information
Keywords: Classic
User: N/A
Computer: M764-140-DQ64G3
Description:
Windows license validated.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-Winlogon" Guid="{DBE9B383-7CF3-4331-91CC-A3CB16A3B538}" EventSourceName="Winlogon" />
<EventID Qualifiers="16384">4101</EventID>
<Version>0</Version>
<Level>4</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2017-08-06T10:57:47.000000000Z" />
<EventRecordID>1103846</EventRecordID>
<Correlation />
<Execution ProcessID="0" ThreadID="0" />
<Channel>Application</Channel>
<Computer>M764-140-DQ64G3</Computer>
<Security />
</System>
<EventData>
<Data>0x00000000</Data>
<Data>0x00000001</Data>
</EventData>
</Event>
===
Log Name: Application
Source: Microsoft-Windows-EventSystem
Date: 8/7/2017 2:33:23 AM
Event ID: 4625
Task Category: None
Level: Information
Keywords: Classic
User: N/A
Computer: M764-140-DQ64G3
Description:
The EventSystem sub system is suppressing duplicate event log entries for a duration of 86400 seconds. The suppression timeout can be controlled by a REG_DWORD value named SuppressDuplicateDuration under the following registry key: HKLM\Software\Microsoft\EventSystem\EventLog.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-EventSystem" Guid="{899daace-4868-4295-afcd-9eb8fb497561}" EventSourceName="EventSystem" />
<EventID Qualifiers="16384">4625</EventID>
<Version>0</Version>
<Level>4</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2017-08-07T06:33:23.000000000Z" />
<EventRecordID>1103847</EventRecordID>
<Correlation />
<Execution ProcessID="0" ThreadID="0" />
<Channel>Application</Channel>
<Computer>M764-140-DQ64G3</Computer>
<Security />
</System>
<EventData>
<Data Name="param1">86400</Data>
<Data Name="param2">SuppressDuplicateDuration</Data>
<Data Name="param3">Software\Microsoft\EventSystem\EventLog</Data>
</EventData>
</Event>
===
Log Name: Application
Source: Microsoft-Windows-User Profiles Service
Date: 8/7/2017 2:33:23 AM
Event ID: 1531
Task Category: None
Level: Information
Keywords:
User: SYSTEM
Computer: M764-140-DQ64G3
Description:
The User Profile Service has started successfully.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-User Profiles Service" Guid="{89B1E9F0-5AFF-44A6-9B44-0A07A7CE5845}" />
<EventID>1531</EventID>
<Version>0</Version>
<Level>4</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x8000000000000000</Keywords>
<TimeCreated SystemTime="2017-08-07T06:33:23.099017100Z" />
<EventRecordID>1103849</EventRecordID>
<Correlation />
<Execution ProcessID="1840" ThreadID="2136" />
<Channel>Application</Channel>
<Computer>M764-140-DQ64G3</Computer>
<Security UserID="S-1-5-18" />
</System>
<EventData>
</EventData>
</Event>
===
Log Name: Application
Source: Microsoft-Windows-Wininit
Date: 8/7/2017 2:33:24 AM
Event ID: 1001
Task Category: None
Level: Information
Keywords: Classic
User: N/A
Computer: M764-140-DQ64G3
Description:
Checking file system on C:
The type of the file system is NTFS.
A disk check has been scheduled.
Windows will now check the disk.
CHKDSK is verifying files (stage 1 of 5)...
3043584 file records processed.
File verification completed.
38469 large file records processed.
0 bad file records processed.
2 EA records processed.
278 reparse records processed.
CHKDSK is verifying indexes (stage 2 of 5)...
3397298 index entries processed.
Index verification completed.
0 unindexed files scanned.
0 unindexed files recovered.
CHKDSK is verifying security descriptors (stage 3 of 5)...
3043584 file SDs/SIDs processed.
Security descriptor verification completed.
176858 data files processed.
CHKDSK is verifying Usn Journal...
53758848 USN bytes processed.
Usn Journal verification completed.
CHKDSK is verifying file data (stage 4 of 5)...
3043568 files processed.
File data verification completed.
CHKDSK is verifying free space (stage 5 of 5)...
137186535 free clusters processed.
Free space verification is complete.
Windows has checked the file system and found no problems.
1953019903 KB total disk space.
1399711764 KB in 2824056 files.
1333652 KB in 176859 indexes.
0 KB in bad sectors.
3228347 KB in use by the system.
65536 KB occupied by the log file.
548746140 KB available on disk.
4096 bytes in each allocation unit.
488254975 total allocation units on disk.
137186535 allocation units available on disk.
Internal Info:
00 71 2e 00 56 ca 2d 00 0e aa 3e 00 00 00 00 00 .q..V.-...>.....
60 31 00 00 16 01 00 00 00 00 00 00 00 00 00 00 `1..............
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
Windows has finished checking your disk.
Please wait while your computer restarts.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-Wininit" Guid="{206f6dea-d3c5-4d10-bc72-989f03c8b84b}" EventSourceName="Wininit" />
<EventID Qualifiers="16384">1001</EventID>
<Version>0</Version>
<Level>4</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2017-08-07T06:33:24.000000000Z" />
<EventRecordID>1103848</EventRecordID>
<Correlation />
<Execution ProcessID="0" ThreadID="0" />
<Channel>Application</Channel>
<Computer>M764-140-DQ64G3</Computer>
<Security />
</System>
<EventData>
<Data>
Checking file system on C:
The type of the file system is NTFS.
A disk check has been scheduled.
Windows will now check the disk.
CHKDSK is verifying files (stage 1 of 5)...
3043584 file records processed.
File verification completed.
38469 large file records processed.
0 bad file records processed.
2 EA records processed.
278 reparse records processed.
CHKDSK is verifying indexes (stage 2 of 5)...
3397298 index entries processed.
Index verification completed.
0 unindexed files scanned.
0 unindexed files recovered.
CHKDSK is verifying security descriptors (stage 3 of 5)...
3043584 file SDs/SIDs processed.
Security descriptor verification completed.
176858 data files processed.
CHKDSK is verifying Usn Journal...
53758848 USN bytes processed.
Usn Journal verification completed.
CHKDSK is verifying file data (stage 4 of 5)...
3043568 files processed.
File data verification completed.
CHKDSK is verifying free space (stage 5 of 5)...
137186535 free clusters processed.
Free space verification is complete.
Windows has checked the file system and found no problems.
1953019903 KB total disk space.
1399711764 KB in 2824056 files.
1333652 KB in 176859 indexes.
0 KB in bad sectors.
3228347 KB in use by the system.
65536 KB occupied by the log file.
548746140 KB available on disk.
4096 bytes in each allocation unit.
488254975 total allocation units on disk.
137186535 allocation units available on disk.
Internal Info:
00 71 2e 00 56 ca 2d 00 0e aa 3e 00 00 00 00 00 .q..V.-...>.....
60 31 00 00 16 01 00 00 00 00 00 00 00 00 00 00 `1..............
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
Windows has finished checking your disk.
Please wait while your computer restarts.
</Data>
</EventData>
</Event>
===
Log Name: Application
Source: Backupper Service
Date: 8/7/2017 2:33:44 AM
Event ID: 0
Task Category: None
Level: Information
Keywords: Classic
User: N/A
Computer: M764-140-DQ64G3
Description:
The description for Event ID 0 from source Backupper Service cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer.
If the event originated on another computer, the display information had to be saved with the event.
The following information was included with the event:
Backupper Service
Backupper Service in OnStart
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Backupper Service" />
<EventID Qualifiers="0">0</EventID>
<Level>4</Level>
<Task>0</Task>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2017-08-07T06:33:44.000000000Z" />
<EventRecordID>1103850</EventRecordID>
<Channel>Application</Channel>
<Computer>M764-140-DQ64G3</Computer>
<Security />
</System>
<EventData>
<Data>Backupper Service</Data>
<Data>Backupper Service in OnStart</Data>
</EventData>
</Event>
===
Log Name: Application
Source: FrAgent
Date: 8/7/2017 2:33:48 AM
Event ID: 105
Task Category: None
Level: Information
Keywords: Classic
User: N/A
Computer: M764-140-DQ64G3
Description:
The service was started.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="FrAgent" />
<EventID Qualifiers="0">105</EventID>
<Level>4</Level>
<Task>0</Task>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2017-08-07T06:33:48.000000000Z" />
<EventRecordID>1103851</EventRecordID>
<Channel>Application</Channel>
<Computer>M764-140-DQ64G3</Computer>
<Security />
</System>
<EventData>
</EventData>
</Event>
===
Log Name: Application
Source: NetgearSwitchUSB
Date: 8/7/2017 2:33:50 AM
Event ID: 0
Task Category: None
Level: Information
Keywords: Classic
User: N/A
Computer: M764-140-DQ64G3
Description:
The description for Event ID 0 from source NetgearSwitchUSB cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer.
If the event originated on another computer, the display information had to be saved with the event.
The following information was included with the event:
NetgearSwitchUSB
MediatekSwitchUSB in OnStart
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="NetgearSwitchUSB" />
<EventID Qualifiers="0">0</EventID>
<Level>4</Level>
<Task>0</Task>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2017-08-07T06:33:50.000000000Z" />
<EventRecordID>1103852</EventRecordID>
<Channel>Application</Channel>
<Computer>M764-140-DQ64G3</Computer>
<Security />
</System>
<EventData>
<Data>NetgearSwitchUSB</Data>
<Data>MediatekSwitchUSB in OnStart</Data>
</EventData>
</Event>
===
So, Boggin' the last event was at
8-7-2017 2:33:50 AM
So, when I looked at 930 there was the BSD.
BTW, AOMEI was already stopped here in safe mode.
And, I am about to delete it so I can reinstall fresh.
But, I will wait to hear from you.
How did it get corrupt, I wonder; how can I prevent this in the future.
I have no idea what the Netgear USB thing is other than I have a Netgear wireless plugged into my USB for communications; I can not use wired here as d-mark for fiber is on the other side of the building.
BTW, I wonder if there is any way to print this log out except screen by screen.
Should I run another Tweaking?
Thanks, again Boggin for all your help!
Boggin:
Reinstalling AOMEI will probably be a good idea but in Programs and Features, when you right click on it do you get a Repair option ?
I don't know why it is snagging that Netgear if that is your wireless dongle.
Can you go to Device Manager/View/Show hidden devices and check for any yellow alerts - you may need to expand Network adapters and Non-Plug and Play Drivers.
I don't know if you can get a driver update for the dongle, but if you aren't getting any connectivity problems then I'd ignore that error.
BTW - Is AOMEI a paid for or free program ?
Navigation
[0] Message Index
[#] Next page
[*] Previous page
Go to full version