New
#21
The beta logs were uploaded in a manner in which they are very difficult to view.
It would take inordinate amount of time to not be able to download and scan files.
Maybe there are others that can help you.
The beta logs were uploaded in a manner in which they are very difficult to view.
It would take inordinate amount of time to not be able to download and scan files.
Maybe there are others that can help you.
All I did was to merely send the generated log for compression by right clicking, like you normally do. I'll use 7zip from now on and hope to do a better job with the upcoming beta log zip...But I still can't figure out why you're not able to download. The settings allow as far as I can see.
Hope things are better tomorrow.
Thanks anyway for your patience:)
I've managed to give the installation another try. It crashed again as expected but it seems the Memory dumps aren’t created for some reason despite me tweaking the settings (Disabled Auto restart after BSOD, Chose complete dumps in the options, Unchecked overwrite logs etc).
Again the setupdmp never shows up in either the Panther or the Rollback folders. Also, only two folders NewOs & UnattendGC are up to date in the Windows/Panther directory. The others are still stuck on the old date 24-Nov17. No idea why though. As for the rest of the logs you should find them in the logs.
I’ve chosen 7ip this time which should help in that it doesn’t allow for previewing in Dropbox. Hopefully, you should be able download and not have any issues like last time. Here’s the link to fresh logs.
Beta Logs:
Panther Logs: Dropbox - W10Forums Logs.7z
Thanks
Last edited by BRAC; 15 Apr 2023 at 06:06.
For all tests / steps please post images into the thread
If there are problems posting images into the thread then use one drive or drop box share links.
1) Open administrative command prompt and copy and paste:
2) sfc /scannow
3) dism /online /cleanup-image /restorehealth
4) When these have completed > right click on the top bar or title bar of the administrative command prompt box > left click on edit then select all > right click on the top bar again > left click on edit then copy > paste into the thread
5) chkdsk /x /f /r
Use the syntax chkdsk /x /f /r C: or chkdsk /x /f /r D: changing the drive letter to the applicable drive
This may take many hours so plan to run overnight.
C:\Windows\system32>chkdsk /x /f /r
The type of the file system is NTFS.
Cannot lock current drive.
Chkdsk cannot run because the volume is in use by another
process. Would you like to schedule this volume to be
checked the next time the system restarts? (Y/N)
Type: Y
reboot
6) Use the information in this link to find the chkdsk report in the event viewer. Copy and paste > notepad > post a one drive or drop box share link into the thread
Read Chkdsk Log in Event Viewer in Windows 10 | Windows 10 Tutorials
7) Uninstall Bitdefender
Use the applicable uninstall tool:
Uninstall Bitdefender
How to uninstall Bitdefender from your Windows device
8) Turn on Windows defender
9) Uninstall Malwarebytes
Use the applicable uninstall tool:
Malwarebytes Cleanup Utility download and instr... | Official Malwarebytes Support
10) list any other antivirus or firewall software products that were installed on the computer since the last Windows upgrade
11) List any drive encryption software that had been used on the computer since the last Windows upgrade
12) Make a backup image using Macrium:
Macrium Software | Your Image is Everything
13) Place the backup image onto another drive or into the cloud
14) Make a brand new restore point
'
15) Read these links on Windows driver verifier: (Do not use the tool until it is communicated in the thread)
Driver Verifier-- tracking down a mis-behaving driver. - Microsoft Community
https://www.tenforums.com/tutorials/5470-enable-disable-driver-verifier-windows-10-a.html
16) Open disk management > widen two columns > sources and volume > make sure that the text in each row is in full view and that there is no text that is cut off by the column size > post an image into the thread
Disk Management - How to Post a Screenshot of | Windows 10 Tutorials
17) Open minitool partition wizard > post an image into the thread
18) Uninstall Eraser
19) If the computer has Ccleaner > click windows tab > scroll down to system and advanced > post an image into the thread
20) In the left lower corner search type: system or system control > open system control panel > on the left pane click advanced system settings
a) > on the advanced tab under startup and recovery > click settings > post an image of the startup and recovery into the thread.
b) > on the advanced tab under performance > click on settings > under performance options > click on the advanced tab > under virtual memory > click on change > post an image of the virtual memory tab into the thread
21) Uninstall MSI Afterburner
22) Run HD Tune:
http://www.hdtune.com/
Post images into the thread for test results on these tabs:
a) Health (SMART)
b) Benchmark
c) Full error scan
23) Run Sea Tools for Windows full generic scan > post results into the thread
24) List the Broadcom products /software that was in use or is currently in use on the computer
B06bdrv.sys
Broadcom Windows 64bit driver update for NetXtreme I and NetXtreme II Ethernet adapters for the 18.2.0 update. | Dell US
25) Which Reason Core Security software was used or is in use on the computer?
Lumdriver.sys
Malware scan of lum.sys (LUM application) be1b984b53618f0ca41b2c4d6e3e0ab91b3d2755 - Reason Core Security Labs
26) Uninstall Veracrypt
Veracrypt.sys
Contact Us - IDRIX: Cryptography and IT Security Experts
Last edited by zbook; 15 May 2018 at 21:27.
Thanks again for your time.
All those tests will take me a day or more I guess. I'll get back to you then.
Is Ccleaner a must because I don't have it installed?
edit: Do I need to follow the sequence in uninstalling the softwares ( Bitdefender Malwarebytes,Eraser MSI After Burner, Veracrypt) or can I remove them prior to starting any of the tests/checks?
Is it OK to run the chkdsk test (Overnight one) when I'm ready for a restart after doing some of the other tests which don't require a restart or is it mandatory for it be first in the sequence?
Last edited by BRAC; 16 May 2018 at 06:42.
Ccleaner does not need to be installed. If it is installed it can be used for housecleaning before the next upgrade attempt.
The steps do not have to be done in the exact sequence.
Chkdsk can be run overnight and it is best to do so as in most cases the scan, fix, and restore should be completed by the morning.
The steps that can be run overnight are :
1) chkdsk /x /f /r
2) HD Tune Full error scan
3) Sea Tools full generic scan
I can answer some of the queries right away as below:
1) Open administrative command prompt and copy and paste:
2) sfc /scannow
3) dism /online /cleanup-image /restorehealthCode:C:\Windows\system32>sfc /scannow Beginning system scan. This process will take some time. Beginning verification phase of system scan. Verification 100% complete. Windows Resource Protection did not find any integrity violations. C:\Windows\system32>dism /online /cleanup-image /restorehealth Deployment Image Servicing and Management tool Version: 10.0.16299.15 Image Version: 10.0.16299.371 [==========================100.0%==========================] The restore operation completed successfully. The operation completed successfully.My core security software is Bitdefender Total Security. I also have Malware bytes (free version- no active protection) installed for secondary use.10) list any other antivirus or firewall software products that were installed on the computer since the last Windows upgrade
I have Veracrypt installed but don't use it for system partition encryption. I also have Diskcryptor in use for an external hard disk. Again no system level encryption.11) List any drive encryption software that had been used on the computer since the last Windows upgrade
16) Open disk management > widen two columns > sources and volume > make sure that the text in each row is in full view and that there is no text that is cut off by the column size > post an image into the thread
Disk Management - How to Post a Screenshot of | Windows 10 Tutorials
17) Open minitool partition wizard > post an image into the thread
a) > on the advanced tab under startup and recovery > click settings > post an image of the startup and recovery into the thread.
Note: The most recent installation attempt was done with tweaked settings to the above ( Complete dumps, Unchecked Auto Restart, Unchecked overwrite etc). All prior installations were made on default settings. Also, no changes were made to the Virtual memory settings. All on default.
b) > on the advanced tab under performance > click on settings > under performance options > click on the advanced tab > under virtual memory > click on change > post an image of the virtual memory tab into the thread
The current Bluetooth software in use (with a few tweaks) is the Windows 10 compatible one (Widcomm BT_12.0.1.0240_Broadcom) downloaded from the Broadcom website during the initial Windows 10 release. The OEM one Widcomm 365 Bluetooth Module was incompatible since the beginning (Windows10). I also happen to have a Logitech Bluetooth mouse... Not aware of any other Broadcom products in use.24) List the Broadcom products /software that was in use or is currently in use on the computer
B06bdrv.sys
Note the above software Widcomm BT_12.0.1.0240_Broadcom is no longer available for download on their site and you're merely notified to update via Microsoft.
None as per my knowledge. Not sure if Malwarebytes has any links to Reason Core Security.25) Which Reason Core Security software was used or is in use on the computer?
Lumdriver.sys
1) Uninstall diskcryptor
2) These are drivers that failed to load:
Use file explorer or Everything search to find the software related to the third party software drivers:Code:Event[1117]: Log Name: System Source: Service Control Manager Date: 2018-05-12T15:06:45.725 Event ID: 7026 Task: N/A Level: Information Opcode: N/A Keyword: Classic User: N/A User Name: N/A Computer: SUBIN-P-V Description: The following boot-start or system-start driver(s) did not load: AFDb06bdrvbamdamDfscFileCryptGpuEnergyDrvLUMDriverNetBIOSNetBTnpsvctrignsiproxyPschedrdbsstdxveracryptvwififltWdFilter
a) B06bdrv.sys
b) Lumdriver.sys
c) Veracrypt.sys
3) For startup and recovery system failure:
a) un-check automatically restart
b) change write debugging information to automatic
c) reboot after the above system failure changes
With automatically restart un-checked: when there are BSOD you will see a BSOD windows with : ( and a bugcheck. Sometimes there may be a misbehaving driver displayed in the form *.sys. If you see a misbehaving driver please record it and post it into the thread. For each BSOD there is a % counter. If you see it, always make sure that it rises to 100% so that there is sufficient time to create the dump file before rebooting.
With the above steps there should be no antivirus software other than Microsoft windows defender.
All prior antivirus software and firewall software that was in use should be uninstalled again with the applicable uninstall tool.
There should be no drive encryption software.
Report into the thread when you are comfortable with the information in the links for using the Windows driver verifier tool.
Report into the thread once there is a Macrium backup image and a brand new restore point.
For the next upgrade there will need to be only 1 disk connected to the computer.
All other disks will need to be disconnected.
The last time I tried that I didn't see the progress counter...Also, wasn't sure how to reboot at the point and had to hard power down. Is it how it's done when you disable auto restart? The most recent driver related BSOD (before Upgrade) was caused by USBHUB.SYS which is the reason I suspected that to be the cause.For each BSOD there is a % counter. If you see it, always make sure that it rises to 100% so that there is sufficient time to create the dump file before rebooting.
Trying the regular ctrl alt del had no effect.
I'm currently running the Seatools scan. I'll probably report back tomorrow with the rest of the scans.
edit:
Veracrypt.sys clearly belongs to Veracrypt. It's strange for it to be causing issues now when I've had it for a number of years without a problem.
The Lumdriver.sys sits in the System32\drivers directory. Google says it's a Windows related driver that communicates with hardware devices. Would deleting that make a difference?
The other one doesn't show up anywhere in a search.
At sometime there was software in use that was related to the drivers.
During Windows upgrades there are checks for incompatibility.
So any software of software residual that is not needed or known to potentially interfere with upgrades should be uninstalled.
After a successful upgrade software can be reinstalled as long as it does not have a detrimental impact on performance.
For chkdsk /x /f /r run it on all partitions/drives.
Post event viewer notepad reports for each partition/drive into the thread.