Help, stuck in SafeMode, because computer crashes, in standard mode. Help me-out, please.

[myaccount1234]

I had to use msconfig to go into safe boot safe mode with networking. I connected to the internet by using Command Prompt commands. I need help to find what's wrong with my computer. The computer crashes a few minutes after booting up with purple and red lines down the screen. I then have to hard reset with power button. The computer has not crashed once in safe mode, as I did this yesterday too, and restarted the computer and it crashed again in standard mode again today. I have no money to go out and buy new components. The computer is from 2011, and I am a college student. Please help me, and tell me what to do to fix this.

 

[clutchc]

Might be software conflicts, malware, or some other poorly written software. Give CCleaner a run and do both the Clean and Registry portions. Then run a malware pgm like Malwarebytes.

 

[Ralston18]

Open Event Viewer.

Work your way through the various logs. Look for warnings and error codes.

Reference link to help:

http://www.tomshardware.com/faq/id-3128616/windows-event-viewer.html

Do not immediately react to any given log entry. Look for consistencies and patterns.

Narrow it down to some likely and applicable issue.

 

[myaccount1234]

I get errors like this in event viewer Log Name: Security
Source: Microsoft-Windows-Security-Auditing
Date: 10/6/2017 6:51:39 PM
Event ID: 5038
Task Category: System Integrity
Level: Information
Keywords: Audit Failure
User: N/A
Computer: Desktop-Computer
Description:
Code integrity determined that the image hash of a file is not valid. The file could be corrupt due to unauthorized modification or the invalid hash could indicate a potential disk device error.

File Name: \Device\HarddiskVolume2\Windows\System32\drivers\hardlock.sys
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-Security-Auditing" Guid="{54849625-5478-4994-A5BA-3E3B0328C30D}" />
<EventID>5038</EventID>
<Version>0</Version>
<Level>0</Level>
<Task>12290</Task>
<Opcode>0</Opcode>
<Keywords>0x8010000000000000</Keywords>
<TimeCreated SystemTime="2017-10-06T22:51:39.804822500Z" />
<EventRecordID>175248</EventRecordID>
<Correlation />
<Execution ProcessID="4" ThreadID="348" />
<Channel>Security</Channel>
<Computer>Desktop-Computer</Computer>
<Security />
</System>
<EventData>
<Data Name="param1">\Device\HarddiskVolume2\Windows\System32\drivers\hardlock.sys</Data>
</EventData>
</Event>

 

[myaccount1234]

Log Name: Microsoft-Windows-Kernel-EventTracing/Admin
Source: Microsoft-Windows-Kernel-EventTracing
Date: 10/6/2017 7:38:10 PM
Event ID: 4
Task Category: Logging
Level: Warning
Keywords: Session
User: SYSTEM
Computer: Desktop-Computer
Description:
The maximum file size for session "ReadyBoot" has been reached. As a result, events might be lost (not logged) to file "C:\WINDOWS\Prefetch\ReadyBoot\ReadyBoot.etl". The maximum files size is currently set to 20971520 bytes.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-Kernel-EventTracing" Guid="{B675EC37-BDB6-4648-BC92-F3FDC74D3CA2}" />
<EventID>4</EventID>
<Version>0</Version>
<Level>3</Level>
<Task>1</Task>
<Opcode>10</Opcode>
<Keywords>0x8000000000000010</Keywords>
<TimeCreated SystemTime="2017-10-06T23:38:10.171211900Z" />
<EventRecordID>718</EventRecordID>
<Correlation />
<Execution ProcessID="4" ThreadID="152" />
<Channel>Microsoft-Windows-Kernel-EventTracing/Admin</Channel>
<Computer>Desktop-Computer</Computer>
<Security UserID="S-1-5-18" />
</System>
<EventData>
<Data Name="SessionName">ReadyBoot</Data>
<Data Name="FileName">C:\WINDOWS\Prefetch\ReadyBoot\ReadyBoot.etl</Data>
<Data Name="ErrorCode">3221225864</Data>
<Data Name="LoggingMode">276824064</Data>
<Data Name="MaxFileSize">20971520</Data>
</EventData>
</Event>

 

[Ralston18]

Where did you get the Windows 10 OS?

May be corrupted or pirated.....

 

[myaccount1234]

Open Event Viewer.

Work your way through the various logs. Look for warnings and error codes.

Reference link to help:

http://www.tomshardware.com/faq/id-3128616/windows-event-viewer.html

Do not immediately react to any given log entry. Look for consistencies and patterns.

Narrow it down to some likely and applicable issue.

46 events in the past 24 hours
Log Name: System
Source: Microsoft-Windows-Ntfs
Date: 10/6/2017 6:53:54 PM
Event ID: 98
Task Category: None
Level: Warning
Keywords: (2)
User: SYSTEM
Computer: Desktop-Computer
Description:
Volume \\?\Volume{1b47052c-0000-0000-0000-c074e5000000} (\Device\HarddiskVolume3) requires an Online Scan. An Online Scan will automatically run as part of the next scheduled maintenance task. Alternatively you may run "CHKDSK /SCAN" locally via the command line, or run "REPAIR-VOLUME <drive:> -SCAN" locally or remotely via PowerShell.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-Ntfs" Guid="{3FF37A1C-A68D-4D6E-8C9B-F79E8B16C482}" />
<EventID>98</EventID>
<Version>0</Version>
<Level>3</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x8000000000000002</Keywords>
<TimeCreated SystemTime="2017-10-06T22:53:54.038790000Z" />
<EventRecordID>46736</EventRecordID>
<Correlation />
<Execution ProcessID="4" ThreadID="436" />
<Channel>System</Channel>
<Computer>Desktop-Computer</Computer>
<Security UserID="S-1-5-18" />
</System>
<EventData>
<Data Name="DriveName">\\?\Volume{1b47052c-0000-0000-0000-c074e5000000}</Data>
<Data Name="DeviceName">\Device\HarddiskVolume3</Data>
<Data Name="CorruptionActionState">1</Data>
</EventData>
</Event>

 

[Ralston18]

Run ccleaner as suggested by Clutchc.

Also download and run the applicable manufacturer's disk drive diagnostic software.

Narrow down the possible issues.

 

[myaccount1234]

Where did you get the Windows 10 OS?

May be corrupted or pirated.....

Windows 10 updated free, I know that is the the problem as it started yesterday.

 

[clutchc]

If you updated from a previous version of windows, how long ago was that?
And please list your system specs.

 

[Ralston18]

Go back a step:

Press "WIN" + "I" and then Update & Security.

Take a look at the update history. You may need to roll something back.

And this:

Alternatively you may run "CHKDSK /SCAN" locally via the command line, or run "REPAIR-VOLUME <drive:> -SCAN" locally or remotely via PowerShell.

 

[smorizio]

damaged files may be second cause from hardware failure and system lock ups and reboots. if the pc has onboard video port and a gpu. pull the gpu that was causing lines. see if the system will post fine from onboard video.

 

[myaccount1234]

When I do a chkdsk /c it saids files currupted but in read only mode.

 

[clutchc]

When I do a chkdsk /c it saids files currupted but in read only mode.

Bingo!

 

[myaccount1234]

My Norton Security the last few mouths had a error message about something but it could not fixed with a scan.. I just tried to uninstall it with Norton Uninstall., and the computer crashed with purple and red lines in safe mode. Norton pops up with this error message after a few minutes after booting. Could this be the problem? How to uninstall if Norton crashes the computer?

 

[clutchc]

You have Norton too? Another possible problem area. Search for 'how to uninstall norton' for some suggestions. Otherwise, just use the uninstaller and hope for the best.

 

[myaccount1234]

I found out what was the problem, one of the RAM sticks was broking. Now my computer works now, with out BLOSD