Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

kernel_data_inpage_error - help, please!


  • Please log in to reply
24 replies to this topic

#1 felinewarrior

felinewarrior

  • Members
  • 15 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:California
  • Local time:09:29 AM

Posted 28 August 2014 - 08:00 PM

Greetings!
 
I'm working on a Lenovo G500, running Windows 8.1, and Bitdefender Antivirus Plus 2015. The machine is was purchased new in November 2013 and I use it primarily to do design work (Adobe Creative Cloud) and writing. A little web surfing, social media, etc. - no gaming or anything like that.
 
The trouble began a few weeks ago: the laptop seemed unable to restart -- I could start it from a completely OFF position, but after an update that required a restart, for example, I'd be stuck in this crazy cycle, with the message "Your PC ran into an error and needs to restart. We're just collecting some info and then we'll restart for you" which it would do - over and over again. Sometimes it wouldn't restart, but land at a page that gave me various repair options (refresh, restart, etc.). It always seemed to be the luck of the draw, until I found I could turn it off, go water the garden, come back and voila - it would turn on and boot into Windows.

 

Once up and running again, there are no problems -- I have InDesign and Photoshop open, Google drive, Chrome, and I'm flying along doing work.

 

BUT last night, everything froze up and then it restarted, this time with a message about KERNEL_DATA_INPAGE_ERROR, and telling me where to find the log with the info (which I'll attach for your review). Today, from command prompt, I ran sfc /scannow, with this message at the end:

 

"Windows Resource Protection found corrupt files but was unable to fix some of them. Details are included in the CBS.Log windir\Logs\CBS\CBS.log. For example C:\Windows\Logs\CBS\CBS.log. Note that logging is currently not supported in offline servicing scenarios."
 
I did a disk scan (c:/ properties/tools / error checking, which completed with a report of health. 
 
ALSO (and forgive me if this is too much info) around the time the restarting issues began, the Lenovo diagnostic tool's hardware scan was giving me warnings on both the SMART short self-test and SMART drive self-tests-- and then after I re-installed Bitdefender (a hunch, no real reason) the report was fine. 
 
So last night's KERNEL_DATA warning finally gave me something to go on (other than the "we've found problems..." message) so I thought I'd drop by and ask for help.
 
HELP!
 
Please let me know what other information I can provide to assist with diagnostics.
 
THANKS!
FelineWarrior


BC AdBot (Login to Remove)

 


#2 blueelvis

blueelvis

    Bleep Blop Bleep


  • Malware Response Team
  • 1,666 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:India
  • Local time:09:59 PM

Posted 29 August 2014 - 02:26 AM

Hi FelineWarrior & Welcome to the forums ^_^,

 

Could you please upload the Dump files from this path - "C:\Windows\Minidumps" to a file hoster like One Drive, DropBox or Mediafire so that those could be analyzed? Please make sure you zip up the Dump files and then upload the zip file.


Member of the Bleeping Computer A.I.I. early response team!


In case I have been helping you and you haven't received a reply from me in 48 hours, please feel free to PM me. Anything else? Still feel free to PM me :)

Did you read this? http://omgdebugging.com/5-tips-for-getting-the-best-bang-for-the-buck-at-fast-food-joints/

#3 felinewarrior

felinewarrior
  • Topic Starter

  • Members
  • 15 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:California
  • Local time:09:29 AM

Posted 29 August 2014 - 11:48 AM

Thanks for the reply, blue elvis! :)

I'm away from the computer in question for the next 8 hours but will upload the dump files the minute I get home.  THANKS !!!



#4 blueelvis

blueelvis

    Bleep Blop Bleep


  • Malware Response Team
  • 1,666 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:India
  • Local time:09:59 PM

Posted 29 August 2014 - 03:06 PM

Thanks for the reply, blue elvis! :)

I'm away from the computer in question for the next 8 hours but will upload the dump files the minute I get home.  THANKS !!!

Sure thing ^_^. Looking forward to your update.


Member of the Bleeping Computer A.I.I. early response team!


In case I have been helping you and you haven't received a reply from me in 48 hours, please feel free to PM me. Anything else? Still feel free to PM me :)

Did you read this? http://omgdebugging.com/5-tips-for-getting-the-best-bang-for-the-buck-at-fast-food-joints/

#5 felinewarrior

felinewarrior
  • Topic Starter

  • Members
  • 15 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:California
  • Local time:09:29 AM

Posted 30 August 2014 - 01:54 PM

Sorry for the delay.... 

 

Okay there is only ONE minidump file but here's the link to it on dropbox:

https://www.dropbox.com/s/eahgxvpscwtdd3w/082714-84015-01.dmp?dl=0

 

I await your instructions!

 

-FW



#6 blueelvis

blueelvis

    Bleep Blop Bleep


  • Malware Response Team
  • 1,666 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:India
  • Local time:09:59 PM

Posted 31 August 2014 - 09:03 AM

Hi FelineWarrior ^_^,
 
I have analyzed your dump file and below has been provided an analysis of the same for informative purposes :-
**************************Thu Aug 28 10:04:17.460 2014 (UTC + 5:30)**************************
*** WARNING: Unable to verify checksum for win32k.sys
 
Probably caused by : memory_corruption
 
BugCheck 7A, {fffff6fc004fef80, ffffffffc0000185, 85a1e860, fffff8009fdf0154}
BugCheck Info: [url=http://www.carrona.org/bsodindx.html#0x0000007A]KERNEL_DATA_INPAGE_ERROR (7a)[/url]
 
DISK_HARDWARE_ERROR: There was error with disk hardware
 
BUGCHECK_STR:  0x7a_c0000185
 
PROCESS_NAME:  dwm.exe
 
FAILURE_BUCKET_ID:  MEMORY_CORRUPTION_LARGE_4096
 
MaxSpeed:     2600
 
CurrentSpeed: 2594
 
  BIOS Version                  78CN24WW(V2.02)
 
  BIOS Release Date             09/23/2013
 
  Manufacturer                  LENOVO
 
  Product Name                  20236
 
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
Below is a list of 3rd party drivers present on your system :-

**************************Thu Aug 28 10:04:17.460 2014 (UTC + 5:30)**************************
[b][u]LhdX64.sys                  Mon Jan 11 20:36:58 2010 (4B4B3E92)[/u][/b]
[b][u]PxHlpa64.sys                Tue Apr 24 22:56:29 2012 (4F96E245)[/u][/b]
[b][u]GEARAspiWDM.sys             Fri May  4 01:26:17 2012 (4FA2E2E1)[/u][/b]
[b][u]bdfwfpf.sys                 Wed Oct 17 17:42:10 2012 (507EA09A)[/u][/b]
[b][u]avchv.sys                   Wed Oct 31 22:35:22 2012 (50915A52)[/u][/b]
AMPPAL.sys                  Wed Feb 13 17:19:57 2013 (511B7DE5)
AcpiVpc.sys                 Sun Feb 17 07:22:02 2013 (512037C2)
IntcDAud.sys                Tue Jul  2 16:01:16 2013 (51D2ABF4)
TeeDriverx64.sys            Wed Jul  3 00:08:08 2013 (51D31E10)
L1C63x64.sys                Tue Jul 16 12:26:31 2013 (51E4EE9F)
rtsuvc.sys                  Fri Jul 19 13:28:16 2013 (51E8F198)
iwdbus.sys                  Thu Jul 25 06:36:12 2013 (51F07A04)
dump_iaStorA.sys            Fri Aug  2 07:09:52 2013 (51FB0DE8)
iaStorA.sys                 Fri Aug  2 07:09:52 2013 (51FB0DE8)
bcmwl63a.sys                Wed Aug  7 09:34:47 2013 (5201C75F)
trufos.sys                  Wed Aug  7 16:16:25 2013 (52022581)
CHDRT64.sys                 Thu Aug  8 08:17:18 2013 (520306B6)
SynTP.sys                   Thu Aug 15 04:30:40 2013 (520C0C18)
Smb_driver_Intel.sys        Thu Aug 15 04:33:24 2013 (520C0CBC)
igdkmd64.sys                Tue Aug 20 04:38:25 2013 (5212A569)
intelppm.sys                Thu Aug 22 14:16:35 2013 (5215CFEB)
gzflt.sys                   Fri Aug 23 16:18:49 2013 (52173E11)
avc3.sys                    Mon Dec  2 15:07:41 2013 (529C54E5)
avckf.sys                   Mon Dec  2 15:09:31 2013 (529C5553)
point64.sys                 Thu Dec 12 18:46:17 2013 (52A9B721)
dc3d.sys                    Thu Dec 12 18:46:35 2013 (52A9B733)
TotRec8.sys                 Wed Apr 30 17:37:49 2014 (5360E795)
http://www.carrona.org/drivers/driver.php?id=LhdX64.sys
http://www.carrona.org/drivers/driver.php?id=PxHlpa64.sys
http://www.carrona.org/drivers/driver.php?id=GEARAspiWDM.sys
http://www.carrona.org/drivers/driver.php?id=bdfwfpf.sys
http://www.carrona.org/drivers/driver.php?id=avchv.sys
http://www.carrona.org/drivers/driver.php?id=AMPPAL.sys
http://www.carrona.org/drivers/driver.php?id=AcpiVpc.sys
http://www.carrona.org/drivers/driver.php?id=IntcDAud.sys
http://www.carrona.org/drivers/driver.php?id=TeeDriverx64.sys
http://www.carrona.org/drivers/driver.php?id=L1C63x64.sys
http://www.carrona.org/drivers/driver.php?id=rtsuvc.sys
http://www.carrona.org/drivers/driver.php?id=iwdbus.sys
http://www.carrona.org/drivers/driver.php?id=dump_iaStorA.sys
http://www.carrona.org/drivers/driver.php?id=iaStorA.sys
http://www.carrona.org/drivers/driver.php?id=bcmwl63a.sys
http://www.carrona.org/drivers/driver.php?id=trufos.sys
http://www.carrona.org/drivers/driver.php?id=CHDRT64.sys
http://www.carrona.org/drivers/driver.php?id=SynTP.sys
http://www.carrona.org/drivers/driver.php?id=Smb_driver_Intel.sys
http://www.carrona.org/drivers/driver.php?id=igdkmd64.sys
http://www.carrona.org/drivers/driver.php?id=intelppm.sys
http://www.carrona.org/drivers/driver.php?id=gzflt.sys
http://www.carrona.org/drivers/driver.php?id=avc3.sys
http://www.carrona.org/drivers/driver.php?id=avckf.sys
http://www.carrona.org/drivers/driver.php?id=point64.sys
http://www.carrona.org/drivers/driver.php?id=dc3d.sys
http://www.carrona.org/drivers/driver.php?id=TotRec8.sys
 

 
Please follow the below steps, one step at a time :-
  • Please remove the BitDefender Antivirus using this **TOOL** till the time we are troubleshooting. Once you do this, please turn on Windows Defender & Windows Firewall so that you stay protected.
  • According to the Dump file, there was an error with the Disk Hardware. So, would you please follow these Hard Drive Diagnostics over **here** and post back the results?
  • Please run the DISM & Scannow commands.

    Then please run the following DISM commands to see if there's any problems with the system (from an elevated (Run as administrator) Command Prompt). Press Enter after each one:
    Code:
    [code[Dism /Online /Cleanup-Image /ScanHealth[/code]
    Code:

    Dism /Online /Cleanup-Image /CheckHealth
    If the problem is fixable, you can use this command to repair it (from an elevated (Run as administrator) Command Prompt). Press Enter after typing it:
    Code:
    Dism /Online /Cleanup-Image /RestoreHealth
    From this article: Repair a Windows Image

    You can also run sfc.exe /scannow from an elevated (Run as administrator) Command Prompt to check for further corruption.
Let me know how it goes ^_^

Member of the Bleeping Computer A.I.I. early response team!


In case I have been helping you and you haven't received a reply from me in 48 hours, please feel free to PM me. Anything else? Still feel free to PM me :)

Did you read this? http://omgdebugging.com/5-tips-for-getting-the-best-bang-for-the-buck-at-fast-food-joints/

#7 felinewarrior

felinewarrior
  • Topic Starter

  • Members
  • 15 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:California
  • Local time:09:29 AM

Posted 01 September 2014 - 02:11 AM

Hi, I am about to follow your instructions but am unsure about #2: "According to the Dump file, there was an error with the Disk Hardware. So, would you please follow these Hard Drive Diagnostics over **here** and post back the results?"

 

Where is over here?  Was there supposed to be a link? Or is it the directions about DISM?

 

THANK YOU!!!

 

FW



#8 blueelvis

blueelvis

    Bleep Blop Bleep


  • Malware Response Team
  • 1,666 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:India
  • Local time:09:59 PM

Posted 01 September 2014 - 03:45 AM

Hi, I am about to follow your instructions but am unsure about #2: "According to the Dump file, there was an error with the Disk Hardware. So, would you please follow these Hard Drive Diagnostics over **here** and post back the results?"

 

Where is over here?  Was there supposed to be a link? Or is it the directions about DISM?

 

THANK YOU!!!

 

FW

 

Oops, I am sorry that I forgot to add the Link to the Hard Disk Diagnostics <_<

 

Here it is :- http://www.carrona.org/hddiag.html

 

It is the guide to perform the Hard Drive Diagnostics using the Seatools and other software.

 

Let me know how it goes ^_^.


Member of the Bleeping Computer A.I.I. early response team!


In case I have been helping you and you haven't received a reply from me in 48 hours, please feel free to PM me. Anything else? Still feel free to PM me :)

Did you read this? http://omgdebugging.com/5-tips-for-getting-the-best-bang-for-the-buck-at-fast-food-joints/

#9 felinewarrior

felinewarrior
  • Topic Starter

  • Members
  • 15 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:California
  • Local time:09:29 AM

Posted 01 September 2014 - 12:03 PM

Hi, there blue elvis!

 

DISM REPORTS:

 

 

C:\windows\system32>DISM /Online /Cleanup-image /ScanHealth
 
Deployment Image Servicing and Management tool
Version: 6.3.9600.17031
 
Image Version: 6.3.9600.17031
 
[==========================100.0%==========================]
The component store is repairable.
The operation completed successfully.
 
 
 
C:\windows\system32>Dism /Online /Cleanup-Image /RestoreHealth
 
Deployment Image Servicing and Management tool
Version: 6.3.9600.17031
 
Image Version: 6.3.9600.17031
 
[==========================100.0%==========================]
The restore operation completed successfully. The component store corruption was
 repaired.
The operation completed successfully.
 
C:\windows\system32>Dism /Online /Cleanup-Image /RestoreHealth
 
_________________________________________________________________
 
Next is the hard drive diagnostic testing. I am helping my mom move to a new house today so am not sure when I'll complete the hard drive diagnostics - my plan is to do it today, maybe this evening. IF not today, then Tuesday morning (I'm in USA on pacific time, fyi).  THANKS!!!

Edited by felinewarrior, 01 September 2014 - 12:10 PM.


#10 blueelvis

blueelvis

    Bleep Blop Bleep


  • Malware Response Team
  • 1,666 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:India
  • Local time:09:59 PM

Posted 01 September 2014 - 12:11 PM

Hi FelineWarrior ^_^,

 

Don't worry about time. I would be notified once you reply to this topic.

 

But, according to the logs, I see that you ran only the first command 3 times :P

Please perform the following commands one by one after each command :-

 

  1. Dism /Online /Cleanup-Image /ScanHealth
  2. Dism /Online /Cleanup-Image /CheckHealth
  3. Dism /Online /Cleanup-Image /RestoreHealth

 

Let me know the results ^_^ . Don't worry about timing as I am generally online except the 6 hours of sleep :wink:


Member of the Bleeping Computer A.I.I. early response team!


In case I have been helping you and you haven't received a reply from me in 48 hours, please feel free to PM me. Anything else? Still feel free to PM me :)

Did you read this? http://omgdebugging.com/5-tips-for-getting-the-best-bang-for-the-buck-at-fast-food-joints/

#11 felinewarrior

felinewarrior
  • Topic Starter

  • Members
  • 15 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:California
  • Local time:09:29 AM

Posted 01 September 2014 - 07:31 PM

Hi, I actually did run the tests three times but apparently I didn't copy and paste them onto the page three times, just the last one... in process now! Sorry :\



#12 felinewarrior

felinewarrior
  • Topic Starter

  • Members
  • 15 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:California
  • Local time:09:29 AM

Posted 01 September 2014 - 09:15 PM

Microsoft Windows [Version 6.3.9600]
© 2013 Microsoft Corporation. All rights reserved.
 
C:\windows\system32>Dism /Online /Cleanup-image /ScanHealth
 
Deployment Image Servicing and Management tool
Version: 6.3.9600.17031
 
Image Version: 6.3.9600.17031
 
[==========================100.0%==========================]
No component store corruption detected.
The operation completed successfully.
 
C:\windows\system32>

Microsoft Windows [Version 6.3.9600]
© 2013 Microsoft Corporation. All rights reserved.
 
C:\windows\system32>Dism /Online /Cleanup-Image /CheckHealth
 
Deployment Image Servicing and Management tool
Version: 6.3.9600.17031
 
Image Version: 6.3.9600.17031
 
No component store corruption detected.
The operation completed successfully.
 
C:\windows\system32>


#13 felinewarrior

felinewarrior
  • Topic Starter

  • Members
  • 15 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:California
  • Local time:09:29 AM

Posted 01 September 2014 - 09:32 PM

Microsoft Windows [Version 6.3.9600]
© 2013 Microsoft Corporation. All rights reserved.
 
C:\windows\system32>Dism /Online /Cleanup-Image /RestoreHealth
 
Deployment Image Servicing and Management tool
Version: 6.3.9600.17031
 
Image Version: 6.3.9600.17031
 
[==========================100.0%==========================]
The restore operation completed successfully. The component store corruption was
 repaired.
The operation completed successfully.
 
C:\windows\system32>


#14 blueelvis

blueelvis

    Bleep Blop Bleep


  • Malware Response Team
  • 1,666 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:India
  • Local time:09:59 PM

Posted 01 September 2014 - 11:01 PM

Since the commands have completed fixing the system corruption, my question would be are you still getting any BSOD?

 

Please run the SeaTools for Windows which can be downloaded from this Link (Click On The Downloads Tab) :-

 

http://www.seagate.com/support/internal-hard-drives/laptop-hard-drives/spinpoint-m-series/

 

Make sure you run the Long Tests as well to test your HDD accurately.

 

Let me know how it goes ^_^.


Member of the Bleeping Computer A.I.I. early response team!


In case I have been helping you and you haven't received a reply from me in 48 hours, please feel free to PM me. Anything else? Still feel free to PM me :)

Did you read this? http://omgdebugging.com/5-tips-for-getting-the-best-bang-for-the-buck-at-fast-food-joints/

#15 felinewarrior

felinewarrior
  • Topic Starter

  • Members
  • 15 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:California
  • Local time:09:29 AM

Posted 02 September 2014 - 12:32 AM

Microsoft Windows [Version 6.3.9600]
© 2013 Microsoft Corporation. All rights reserved.
 
C:\windows\system32>sfc.exe /scannow
 
Beginning system scan.  This process will take some time.
 
Beginning verification phase of system scan.
Verification 100% complete.
 
Windows Resource Protection did not find any integrity violations.
 
C:\windows\system32>





0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users