Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Crash,windows can't load, need vista disk repair


  • Please log in to reply
9 replies to this topic

#1 Cedon

Cedon

  • Members
  • 6 posts
  • OFFLINE
  •  
  • Local time:05:15 PM

Posted 22 December 2010 - 12:17 PM

Hello,
I started a thread at PCPitstop.com and they sent me here.
a link to that thread: My link

SYSTEM INFO:
vista business(32) SP2
CPU:C2D E8400
4 gigs ram
Geforce 8800GT
500GB HD (97gb free of 465ish)

This last week or so my computer has started acting wierd. Programs are locking up for several seconds at a time(10-30+), geting the "not responding" message on most or no message at all. This includes system functions as well, such as rightclicking a desktop icon, my computer for instance, or even trying to ctr/alt/del to bring up the task manager. it can take up to a minute or more before it goes to the task manager select screen, then another minute or more for it to actually bring up the task manager.
Also, programs don't seem to be closing out of memorry properly, they close but if you check the task manager, there they are sucking down memory, some can be "end proccess"ed and some can't( you hit the end button and get all the right messages, but the process refuses to end)
I've run AV and mallware scans with avg/ windows defender/ spybot s&d / and malware bytes and cleaned out all the mallware etc they found, but the problem persisted.

Then:

I decided to start things off with a defrag, since i havn't done one in far too long, (auto deferag was turned off, and i download and delete alot of largish files continously) and it was one of the things mentioned by the PCpitstop scan.
I downloaded Diskkeaper Pro and did a manual defrag, about 35 HOURS later it finally finished.
restarted the next day, everything seems normal, then the computer hardlocks and goes to a black screen, had to be hard reset, (power switch in the back)(i wasn't home for that crash, just got the aftermath)
upon restart i get a black screen that says window couldn't start because a file was missing/corrupt

File: windows\system32\config\system
status: 0xC00000e9

Said to insert my windows vista disk and try to repair. I did this, after the 4-5 times it managed to fix whatever was wrong enough to boot normaly.
at this point i plugged in my external HD and backed up everything i could think of, including doing a windows recovory backup image. That last said it had problems do to some bad clusters.
I then did a checkdisk, i think it had a few disk errors fixed.
everything seemed to be running more or less normally again.
This evening i started running scans, the first one (DDS) ran fine, the second (GMER.exe)i thought i'd try in regular mode first, and if it didn't work properly id do it in safemode. it launched ok, but as i was trying to uncheck the aproppriot boxes i got a BSD
saying PFN_LIST_CORRUPT Stop: 0x0000004E
Upon reboot i get the windows couldn't start etc. i put in my vista disk, and did a system restore (wasn't available for the last one as i had just cleared my restore points bah!)
restore is successful, reboots fine and now im back to here hehe.

A log of my .DMP files follows as from this thread: http://www.bleepingcomputer.com/forums/topic176011.html on these forums (hope i did it right)

Wondering if my HD is failing, or if windows is just suffering from normal degradation from 2+years of use, or some other wierd thing.
registry errors and the like really freak me out.
thanks

MEMORY.DUMP
=================================================================================

Microsoft ® Windows Debugger Version 6.12.0002.633 X86
Copyright © Microsoft Corporation. All rights reserved.


Loading Dump File [C:\Users\Owner\Desktop\MEMORY.DMP]
Kernel Summary Dump File: Only kernel address space is available

WARNING: Whitespace at end of path element
Symbol search path is: SRV*c:\symbols*http://msdl.microsoft.com/download/symbols

Executable search path is:
Windows Server 2008/Windows Vista Kernel Version 6002 (Service Pack 2) MP (2 procs) Free x86 compatible
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 6002.18267.x86fre.vistasp2_gdr.100608-0458
Machine Name:
Kernel base = 0x81e35000 PsLoadedModuleList = 0x81f4cc70
Debug session time: Tue Dec 21 21:20:58.995 2010 (UTC - 5:00)
System Uptime: 0 days 8:54:39.771
Loading Kernel Symbols
...............................................................
................................................................
..................
Loading User Symbols

Loading unloaded module list
....
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck 4E, {7, 3d48a, 1, 0}

*** ERROR: Module load completed but symbols could not be loaded for kglcapow.sys
Probably caused by : kglcapow.sys ( kglcapow+c3da )

Followup: MachineOwner
---------

1: kd> !analyze -v
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

PFN_LIST_CORRUPT (4e)
Typically caused by drivers passing bad memory descriptor lists (ie: calling
MmUnlockPages twice with the same list, etc). If a kernel debugger is
available get the stack trace.
Arguments:
Arg1: 00000007, A driver has unlocked a page more times than it locked it
Arg2: 0003d48a, page frame number
Arg3: 00000001, current share count
Arg4: 00000000, 0

Debugging Details:
------------------


BUGCHECK_STR: 0x4E_7

DEFAULT_BUCKET_ID: VISTA_DRIVER_FAULT

PROCESS_NAME: System

CURRENT_IRQL: 2

LAST_CONTROL_TRANSFER: from 81e9d5e9 to 81eec34f

STACK_TEXT:
a114ca08 81e9d5e9 c042f4d0 8428c8d8 000ce29a nt!MiPfnReferenceCountIsZero+0x2a
a114ca6c 81f2487d 00000000 00000000 00008000 nt!MiDeferredUnlockPages+0x381
a114cb4c 81f22414 85e9a000 85ea2000 00000000 nt!MiFreePoolPages+0x10c
a114cbb0 ba0343da 85e9a000 00000000 a114cd1c nt!ExFreePoolWithTag+0x40e
WARNING: Stack unwind information not available. Following frames may be wrong.
a114ccc0 ba02a1cf 85e9a000 bef37b1c 00000000 kglcapow+0xc3da
a114cd5c ba02a4de ba03c5c0 00000000 85de8858 kglcapow+0x21cf
a114cd7c 8200ac42 ba03c5c0 c67a3e2e 00000000 kglcapow+0x24de
a114cdc0 81e73f4e ba02a488 ba03c5c0 00000000 nt!PspSystemThreadStartup+0x9d
00000000 00000000 00000000 00000000 00000000 nt!KiThreadStartup+0x16


STACK_COMMAND: kb

FOLLOWUP_IP:
kglcapow+c3da
ba0343da eb07 jmp kglcapow+0xc3e3 (ba0343e3)

SYMBOL_STACK_INDEX: 4

SYMBOL_NAME: kglcapow+c3da

FOLLOWUP_NAME: MachineOwner

MODULE_NAME: kglcapow

IMAGE_NAME: kglcapow.sys

DEBUG_FLR_IMAGE_TIMESTAMP: 4cd7b97f

FAILURE_BUCKET_ID: 0x4E_7_kglcapow+c3da

BUCKET_ID: 0x4E_7_kglcapow+c3da

Followup: MachineOwner
---------

==============================================================================================

Mini122110-01.DMP


Microsoft ® Windows Debugger Version 6.12.0002.633 X86
Copyright © Microsoft Corporation. All rights reserved.


Loading Dump File [C:\Users\Owner\Desktop\Mini122110-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available

WARNING: Whitespace at end of path element
Symbol search path is: SRV*c:\symbols*http://msdl.microsoft.com/download/symbols

Executable search path is:
Windows Server 2008/Windows Vista Kernel Version 6002 (Service Pack 2) MP (2 procs) Free x86 compatible
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 6002.18267.x86fre.vistasp2_gdr.100608-0458
Machine Name:
Kernel base = 0x81e35000 PsLoadedModuleList = 0x81f4cc70
Debug session time: Tue Dec 21 21:20:58.995 2010 (UTC - 5:00)
System Uptime: 0 days 8:54:39.771
Loading Kernel Symbols
...............................................................
................................................................
..................
Loading User Symbols
Loading unloaded module list
....
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck 4E, {7, 3d48a, 1, 0}

*** WARNING: Unable to verify timestamp for kglcapow.sys
*** ERROR: Module load completed but symbols could not be loaded for kglcapow.sys
Probably caused by : kglcapow.sys ( kglcapow+c3da )

Followup: MachineOwner
---------

1: kd> !analyze -v
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

PFN_LIST_CORRUPT (4e)
Typically caused by drivers passing bad memory descriptor lists (ie: calling
MmUnlockPages twice with the same list, etc). If a kernel debugger is
available get the stack trace.
Arguments:
Arg1: 00000007, A driver has unlocked a page more times than it locked it
Arg2: 0003d48a, page frame number
Arg3: 00000001, current share count
Arg4: 00000000, 0

Debugging Details:
------------------


BUGCHECK_STR: 0x4E_7

CUSTOMER_CRASH_COUNT: 1

DEFAULT_BUCKET_ID: VISTA_DRIVER_FAULT

PROCESS_NAME: System

CURRENT_IRQL: 2

LAST_CONTROL_TRANSFER: from 81e9d5e9 to 81eec34f

STACK_TEXT:
a114ca08 81e9d5e9 c042f4d0 8428c8d8 000ce29a nt!MiPfnReferenceCountIsZero+0x2a
a114ca6c 81f2487d 00000000 00000000 00008000 nt!MiDeferredUnlockPages+0x381
a114cb4c 81f22414 85e9a000 85ea2000 00000000 nt!MiFreePoolPages+0x10c
a114cbb0 ba0343da 85e9a000 00000000 a114cd1c nt!ExFreePoolWithTag+0x40e
WARNING: Stack unwind information not available. Following frames may be wrong.
a114ccc0 ba02a1cf 85e9a000 bef37b1c 00000000 kglcapow+0xc3da
a114cd5c ba02a4de ba03c5c0 00000000 85de8858 kglcapow+0x21cf
a114cd7c 8200ac42 ba03c5c0 c67a3e2e 00000000 kglcapow+0x24de
a114cdc0 81e73f4e ba02a488 ba03c5c0 00000000 nt!PspSystemThreadStartup+0x9d
00000000 00000000 00000000 00000000 00000000 nt!KiThreadStartup+0x16


STACK_COMMAND: kb

FOLLOWUP_IP:
kglcapow+c3da
ba0343da ?? ???

SYMBOL_STACK_INDEX: 4

SYMBOL_NAME: kglcapow+c3da

FOLLOWUP_NAME: MachineOwner

MODULE_NAME: kglcapow

IMAGE_NAME: kglcapow.sys

DEBUG_FLR_IMAGE_TIMESTAMP: 4cd7b97f

FAILURE_BUCKET_ID: 0x4E_7_kglcapow+c3da

BUCKET_ID: 0x4E_7_kglcapow+c3da

Followup: MachineOwner
---------

BC AdBot (Login to Remove)

 


#2 Broni

Broni

    The Coolest BC Computer


  • BC Advisor
  • 42,614 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Daly City, CA
  • Local time:03:15 PM

Posted 22 December 2010 - 01:25 PM

Your dump files list kglcapow.sys as a culprit.
I believe, it's a part of GMER, so no worries there.

Run hard drive diagnostics: http://www.tacktech.com/display.cfm?ttid=287 (or http://www.bleepingcomputer.com/forums/index.php?showtopic=28744&hl=hard+drive+diagnostic)
Make sure, you select tool, which is appropriate for the brand of your hard drive.
Depending on the program, it'll create bootable floppy, or bootable CD.
If downloaded file is of .iso type, use ImgBurn: http://www.imgburn.com/ to burn .iso file to a CD (select "Write image file to disc" option), and make the CD bootable.
For Toshiba hard drives, see here: http://sdd.toshiba.com/main.aspx?Path=ServicesSupport/FujitsuDrivesUSandCanada/SoftwareUtilities#diagnostic

Note : If you do not know how to set your computer to boot from CD follow the steps here

My Website

p4433470.gif

My help doesn't cost a penny, but if you'd like to consider a donation, click p22001735.gif


 


#3 Cedon

Cedon
  • Topic Starter

  • Members
  • 6 posts
  • OFFLINE
  •  
  • Local time:05:15 PM

Posted 25 December 2010 - 08:03 PM

Thanks for the quick response :)
I ran Western Digital Data Lifeguard Diagnostics
I ran the Quick Test and it failed to complete with status code 7; Fail checkpoint 97
Does this mean my HD is failing?
I ran it in normal mode(not safemode or anything)

#4 Broni

Broni

    The Coolest BC Computer


  • BC Advisor
  • 42,614 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Daly City, CA
  • Local time:03:15 PM

Posted 25 December 2010 - 09:50 PM

It's always important to post EXACT message.
Was it?
Status code = 07 (Failed read test element), Failure Checkpoint = 97 (Unknown Test) SMART self-test did not complete

My Website

p4433470.gif

My help doesn't cost a penny, but if you'd like to consider a donation, click p22001735.gif


 


#5 Cedon

Cedon
  • Topic Starter

  • Members
  • 6 posts
  • OFFLINE
  •  
  • Local time:05:15 PM

Posted 25 December 2010 - 11:53 PM

sorry :) should have thought of that.
popup follows:
================================================
Quick test on drive 1 did not complete!
Status code = 07 (failed read test element), failure checkpoint = 97
(unknown test)
SMART self-test did not complete on drive 1!
================================================
Under the smart disk information window everything has a green checkmark next to it, and non of the "value"'s are below (or anywhere close to the threshhold numbers,
and under the "warranty" section everything has a zero except for Raw reed error rate, spin up time, and Re-Allocated Sector count which all have a 1.

also: (just found this in view test results)
Test Option: QUICK TEST
Model Number: WDC WD5000AACS-00ZUB0
Unit Serial Number: WD-WCASU3421122
Firmware Number: 01.01B01
Capacity: 500.11 GB
SMART Status: PASS
Test Result: FAIL
Test Error Code: 06-Quick Test on drive 1 did not complete! Status code = 07 (Failed read test element), Failure Checkpoint = 97 (Unknown Test) SMART self-test did not complete on drive 1!
Test Time: 23:42:23, December 25, 2010

#6 Broni

Broni

    The Coolest BC Computer


  • BC Advisor
  • 42,614 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Daly City, CA
  • Local time:03:15 PM

Posted 26 December 2010 - 01:11 PM

Unfortunately, it looks like failing hard drive.

My Website

p4433470.gif

My help doesn't cost a penny, but if you'd like to consider a donation, click p22001735.gif


 


#7 Cedon

Cedon
  • Topic Starter

  • Members
  • 6 posts
  • OFFLINE
  •  
  • Local time:05:15 PM

Posted 27 December 2010 - 08:39 PM

I was afraid of that, at least i managed to get my data backed up :)
any idea if the backup image of the drive i made with windows backup will work if it had bad clusters?(said it did, but still made the image)?
thanks

#8 Broni

Broni

    The Coolest BC Computer


  • BC Advisor
  • 42,614 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Daly City, CA
  • Local time:03:15 PM

Posted 27 December 2010 - 08:58 PM

I think, you won't know until you try...

My Website

p4433470.gif

My help doesn't cost a penny, but if you'd like to consider a donation, click p22001735.gif


 


#9 Cedon

Cedon
  • Topic Starter

  • Members
  • 6 posts
  • OFFLINE
  •  
  • Local time:05:15 PM

Posted 27 December 2010 - 10:24 PM

thanks for the help,
i'll start saving for a new drive, at least this gives me an escuse to get an SSD for my boot drive hehe

#10 Broni

Broni

    The Coolest BC Computer


  • BC Advisor
  • 42,614 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Daly City, CA
  • Local time:03:15 PM

Posted 27 December 2010 - 10:28 PM

You're very welcome Posted Image

My Website

p4433470.gif

My help doesn't cost a penny, but if you'd like to consider a donation, click p22001735.gif


 





0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users