Blue Screen Crash

[Vodoochild81]

I have been getting a blue screen crash where windows is restarted for me. It's says system_service_exception

On here I saw that I should run sfc.exe in CMD as admin to scan for corrupted files...This is what I got. Is there any way I can fix the corrupted files without reinstalling? How can these files get corrupted? Do I have a virus?




Microsoft Windows [Version 6.3.9600]
(c) 2013 Microsoft Corporation. All rights reserved.

C:\Windows\system32>sfc.exe /scannow

Beginning system scan. This process will take some time.

Beginning verification phase of system scan.
Verification 100% complete.

Windows Resource Protection found corrupt files but was unable to fix some
of them. Details are included in the CBS.Log windir\Logs\CBS\CBS.log. For
example C:\Windows\Logs\CBS\CBS.log. Note that logging is currently not
supported in offline servicing scenarios.

C:\Windows\system32>

 

[Vodoochild81]

In the log this seems to be the parts that says repair could not be complete. Sorry but the text is mumbled up.


CSI 000008c1 Hashes for file member \SystemRoot\WinSxS\amd64_prncacla.inf_31bf3856ad364e35_6.3.9600.17415_none_95dd5540d57f8c01\Amd64\CNBJ2530.DPB do not match actual file [l:36{18}]"Amd64\CNBJ2530.DPB" :
Found: {l:32 b:gSKgtXuoRhmhQwrFs1rUNbjO7QFVr7009W1FWP3KKHI=} Expected: {l:32 b:n520k714Uu3utHa5JGQ6HQYbZphKhlMWq5pEmfnCDuw=}
2014-12-22 06:04:31, Info CSI 000008c2 [SR] Cannot repair member file [l:36{18}]"Amd64\CNBJ2530.DPB" of prncacla.inf, Version = 6.3.9600.17415, pA = PROCESSOR_ARCHITECTURE_AMD64 (9), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type = [l:24{12}]"driverUpdate", TypeName neutral, PublicKey neutral in the store, hash mismatch
2014-12-22 06:04:31, Info CSI 000008c3 Hashes for file member \SystemRoot\WinSxS\amd64_prncacla.inf_31bf3856ad364e35_6.3.9600.17415_none_95dd5540d57f8c01\Amd64\CNBJ2530.DPB do not match actual file [l:36{18}]"Amd64\CNBJ2530.DPB" :
Found: {l:32 b:gSKgtXuoRhmhQwrFs1rUNbjO7QFVr7009W1FWP3KKHI=} Expected: {l:32 b:n520k714Uu3utHa5JGQ6HQYbZphKhlMWq5pEmfnCDuw=}
2014-12-22 06:04:31, Info CSI 000008c4 [SR] Cannot repair member file [l:36{18}]"Amd64\CNBJ2530.DPB" of prncacla.inf, Version = 6.3.9600.17415, pA = PROCESSOR_ARCHITECTURE_AMD64 (9), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type = [l:24{12}]"driverUpdate", TypeName neutral, PublicKey neutral in the store, hash mismatch
2014-12-22 06:04:31, Info CSI 000008c5 [SR] This component was referenced by [l:166{83}]"Package_2709_for_KB3000850~31bf3856ad364e35~amd64~~6.3.1.8.3000850-6825_neutral_GDR"
2014-12-22 06:04:32, Info CSI 000008c6 [SR] Repair complete
2014-12-22 06:04:32, Info CSI 000008c7 [SR] Committing transaction
2014-12-22 06:04:32, Info CSI 000008c8 Creating NT transaction (seq 2), objectname [6]"(null)"
2014-12-22 06:04:32, Info CSI 000008c9 Created NT transaction (seq 2) result 0x00000000, handle @0x980
2014-12-22 06:04:32, Info CSI 000008ca@2014/12/22:11:04:32.019 Beginning NT transaction commit...
2014-12-22 06:04:32, Info CSI 000008cb@2014/12/22:11:04:32.029 CSI perf trace:
CSIPERF:TXCOMMIT;10396

 

[johnbl]

the system file checker sfc.exe will only fix a file by getting its hidden backup file. it can not fix a file if the backup is also corrupted.
(as would be the case in malware attacks on the system or some hacked version of windows)

windows 8.x can use the dism.exe command to get a clean copy of files from microsoft

start cmd.exe as an admin (windows key +r then type A)
then run the command
dism.exe /online /cleanup-image /restorehealth

be sure to run a malwarebytes scan, if you have malware the files will just be rehacked.
(rerun the sfc.exe command after you reboot your system to confirm your files are good)

 

[Vodoochild81]

So I did that Solution Johnbl...and it worked. However, then I got this BSOD "IRQL_NOT_LESS_OR_EQUAL"

Someone at bleepin computer tried to trace what driver had the problem in my minidump file with WinDbg

he said "Unfortunately, it looks like the BSODs are attributed to a very generic driver, ntkrnlmp.exe, that have no particuliar attachement except to the Windows OS itself. I can't personally rely on the BSOD crash dump to find the source of that BSOD."

Basically he couldn't trace it any further, and since he doesn't know hardware he can't really trouble shoot that..any ideas? So far I have not gotten that crash again in a while, so it might of been a one time thing...

 

[Vodoochild81]

if it helps, this is my thread at bleepin computer. Perhaps it has info you can shed light on as well.

http://www.bleepingcomputer.com/forums/t/560668/blue-screen-crash/

 

[johnbl]

sorry, i don't have rights to view your minidump .dmp file on that other site. you would have to put the .dmp file on a cloud server and give public access rights to it for me to view it.

if it helps, this is my thread at bleepin computer. Perhaps it has info you can shed light on as well.

http://www.bleepingcomputer.com/forums/t/560668/blue-screen-crash/

 

[Vodoochild81]

sorry, i don't have rights to view your minidump .dmp file on that other site. you would have to put the .dmp file on a cloud server and give public access rights to it for me to view it.

if it helps, this is my thread at bleepin computer. Perhaps it has info you can shed light on as well.

http://www.bleepingcomputer.com/forums/t/560668/blue-screen-crash/

Thanks man, but I actually updated my bios and all the blue screen crashes stopped so far. So I am assuming that was the problem. Unless you think it could be more and want to see it. How would I upload that to a cloud server?

 

[Vodoochild81]

Hi I know this thread is old, but I tried running the DISM scan now and it said I had corrupted files. I then did the restore health command and it is saying "error 0x800f0906 The Source Files Could Not Be Downloaded. Use the"source" option to specify the location of the files...." How and where would I do this? Thanks.

 

[johnbl]

I would check that you have a working internet connection and that you have free space on your driver to copy the downloaded files to. Having to specify the source to the files I think is used for isolated systems and custom builds.

also take a look at this:http://www.thewindowsclub.com/repair-corrupt-windows-image-error-0x800f0906

it shows how to manually clean up a bad image download.

(it would be good to find out why your download got corrupted, IE update network drivers and scan for malware)

Hi I know this thread is old, but I tried running the DISM scan now and it said I had corrupted files. I then did the restore health command and it is saying "error 0x800f0906 The Source Files Could Not Be Downloaded. Use the"source" option to specify the location of the files...." How and where would I do this? Thanks.