New
#21
Apparently TotRec8.sys is not supplied by MS with the HD Audio driver, but is part of 'Total Recorder 8' - and has been implicated in BSODs previously.
Apparently TotRec8.sys is not supplied by MS with the HD Audio driver, but is part of 'Total Recorder 8' - and has been implicated in BSODs previously.
Thanks for that. It gives me something definite to deal with.
I now propose deleting the High Definition sound entries in Hardware, booting in safe mode and deleting this driver once its not associated with the soundcard.
I shall then try the update again.
If I succeed I shall update this thread.
Thank you for your assistance.
I have Total Recorder Version 8.6 Build 6575 [latest available] with that driver on my Win10 Home computer and having no issues with it.
EDIT: More info. about the file, mine is version 8.6.0.0 and signed by Timestamp and dated 10/20/2015. I did forget to say I have the Pro
paid-for version.
Last edited by Berton; 09 Jan 2018 at 10:18.
Hi Berton.
I uninstalled Total Recorder 8.
and still get [0x8007001F, 0x50015] so you are right it doesnt affect the issue.
Last edited by John Mc; 09 Jan 2018 at 10:39.
John Mc,
Consider starting a new thread so that the focus is on the individual computer.
1) Please run this log collector and post a zip into the thread:
log collector v2-beta06.zip
2) Download and install Everything:
https://www.voidtools.com/
3) Use Everything to search for the following folders and files:
C:\Windows\Panther
setuperr.log
setupact.log
Setupmem.dmp
setupapi.dev.log
BlueBox.log
Event logs (*.evtx)
C:\$Windows.~BT\Sources\Rollback
$Windows.~bt\Sources\Rollback\setupmem.dmp
$Windows.~bt\Sources\Rollback\setupapi\setupapi.dev.log
$Windows.~bt\Sources\Rollback*.evtx
$Windows.~BT\Sources\Panther\UnattendGC
miglog.xml
Windows\Logs\Mosetup
Hi Zac,
thank you for your reply.
I got so fed up this afternoon that I tried the nuclear option of downloading a completely fresh operating system.
That also failed so perhaps its just as well.
I have to leave shortly for a gig and wont be back at this PC until tomorrow morning.
I have used Everything and gathered what log files were available.
Not all had data.
I have made a 7zip archive - attached.
It is not encrypted
Please run this log collector and post a zip into the thread:
log collector v2-beta06.zip
Hi Zac,
Here is the zip file rerquested
Please update the system specs in the "My Computer" section:
How To Fill Out Your System Specs
System Specs - Fill in at Ten Forums:
System Specs - Fill in at Ten Forums Site Use Tutorials
In the left corner below in your post you find 'My System Specs'.
After clicking it you can find a link a little below that says 'Update your System Spec', click on this link to get to the page where you can fill in your system specs.
System Info - See Your System Specs - Windows 7 Help Forums
Include PSU. cooler, case, peripherals and anything attached to the computer by wired or wireless (mouse, keyboard, headset, printer, xbox, etc.)
There were approximately 30 of these critical events in approximately 30 days:
The system has rebooted without cleanly shutting down first. This error could be caused if the system stopped responding, crashed, or lost power unexpectedly.
1) Were these spontaneous crashes or hard power offs?
a) Were there hangs, freezes, black, red, or blue screens, etc?
b) What is the age of the computer?
c) Which hardware has been replaced?
d) Were there any problems upgrading from 1511 > 1607 or 1607 > 1703?
For all steps please post images into the thread.
If there are any problems posting images please use one drive or drop box share links.
2) Open administrative command prompt and type or copy and paste:
3) sfc /scannow
4) dism /online /cleanup-image /restorehealth
5) When these have completed > right click on the top bar or title bar of the administrative command prompt box > left click on edit then select all > right click on the top bar again > left click on edit then copy > paste into the thread
6) chkdsk /x /f /r C: (Use the syntax chkdsk /x /f /r D: or chkdsk /x /f /r E: change the drive letter to the applicable drive) (test all drives/partitions)
This may take many hours so plan to run overnight.
7) Use the information in this link to find the chkdsk reports in the event viewer then copy and paste the report and post into the thread with a one drive or drop box share link:
Read Chkdsk Log in Event Viewer in Windows 10 Performance Maintenance Tutorials
8) Open Ccleaner > click windows tab > scroll down to system and advanced > post an image into the thread
9) In the left lower corner search type clean > open disk cleanup > scroll up and down > post images into the thread
10) In the left lower corner search type: system or system control > open system control panel > on the left pane click advanced system settings
> on the advanced tab under startup and recovery click settings > post an image of the startup and recovery into the thread.
> on the advanced tab under performance > click on settings > click on advanced tab > under virtual memory click on change > post an image of the virtual memory tab into the thread
11) In the left lower corner search type services > open windows error reporting service > scroll to the startup type column > right click > left click on properties > post an image into the thread
12) Download and install Whocrashed > in the left upper corner above analyze click on tools > crash dump test > type: ACCEPT
http://www.resplendence.com/whocrashed
13) Click analyze > look for dead or deaddead in the results > post the results into the thread
14) Run the log collector after all of the above steps and post a zip into the thread:
log collector v2-beta06.zip
15) Turn off windows fast startup:
Turn On or Off Fast Startup in Windows 10 Performance Maintenance Tutorials
16) Open device manager > click view > show hidden devices > expand all rows > look for triangular yellow icons with black exclamation marks > post images into the thread
17) Open disk management > widen each volume and status columns > view the contents of each row and make sure that nothing is cutoff > post an image into the thread
18) Perform windows updates > post an image into the thread using a one drive or drop box share link
19) Click update history > post an image > post an image into the thread using a one drive or drop box share link
20) Run HDTune: (all drives)
http://www.hdtune.com/
to check the health, run a benchmark, and scan for errors
When above is done please make screenshots of the following
a) the health (SMART)
b) the Full error scan (surface scan)
c) the benchmark including transfer rate, access time, burst rate, cpu usage
Take Screenshot in Windows 10 General Tips Tutorials
21) Indicate whether there is any encryption software on the computer other than Microsoft software
22) Indicate whether there is/was any AV in use other than windows defender
Code:Standard PS/2 Keyboard ACPI\PNP0303\0 This device is not present, is not working properly, or does not have all its drivers installed.Code:Microsoft PS/2 Mouse ACPI\PNP0F03\0 This device is not present, is not working properly, or does not have all its drivers installed.
Code:Event[10566]: Log Name: System Source: Microsoft-Windows-StartupRepair Date: 2018-01-09T16:47:56.501 Event ID: 1109 Task: N/A Level: Information Opcode: Info Keyword: N/A User: S-1-5-18 User Name: NT AUTHORITY\SYSTEM Computer: JohnMcAllister Description: The boot manager was corrupt.Code:Event[9936]: Log Name: System Source: Microsoft-Windows-Kernel-Boot Date: 2018-01-08T17:13:45.702 Event ID: 29 Task: N/A Level: Error Opcode: Info Keyword: N/A User: S-1-5-18 User Name: NT AUTHORITY\SYSTEM Computer: JohnMcAllister Description: Windows failed fast startup with error status 0xC00000D4.Code:Event[10570]: Log Name: System Source: Microsoft-Windows-ResetEng Date: 2018-01-09T16:48:07.679 Event ID: 4502 Task: N/A Level: Critical Opcode: Info Keyword: N/A User: S-1-5-18 User Name: NT AUTHORITY\SYSTEM Computer: JohnMcAllister Description: Attempt to reset the system has failed. Changes to the system have been undone.Code:Event[465]: Log Name: System Source: iaStorA Date: 2017-12-15T14:12:22.909 Event ID: 129 Task: N/A Level: Warning Opcode: N/A Keyword: Classic User: N/A User Name: N/A Computer: JohnMcAllister Description: Reset to device, \Device\RaidPort0, was issued.Code:Event[492]: Log Name: System Source: Volsnap Date: 2017-12-15T14:13:38.406 Event ID: 30 Task: N/A Level: Warning Opcode: N/A Keyword: Classic User: N/A User Name: N/A Computer: JohnMcAllister Description: An unfinished create of a shadow copy of volume D: was deleted.Code:Event[9955]: Log Name: System Source: Microsoft-Windows-Kernel-Power Date: 2018-01-08T17:13:48.383 Event ID: 41 Task: N/A Level: Critical Opcode: Info Keyword: N/A User: S-1-5-18 User Name: NT AUTHORITY\SYSTEM Computer: JohnMcAllister Description: The system has rebooted without cleanly shutting down first. This error could be caused if the system stopped responding, crashed, or lost power unexpectedly.
Last edited by zbook; 10 Jan 2018 at 04:56.
Windows PowerShellCopyright (C) 2016 Microsoft Corporation. All rights reserved.PS C:\WINDOWS\system32> sfc/scannowsfc/scannow : The term 'sfc/scannow' is not recognized as the name of a cmdlet, function, script file, or operableprogram. Check the spelling of the name, or if a path was included, verify that the path is correct and try again.At line:1 char:1+ sfc/scannow+ ~~~~~~~~~~~ + CategoryInfo : ObjectNotFound: (sfc/scannow:String) [], CommandNotFoundException + FullyQualifiedErrorId : CommandNotFoundExceptionPS C:\WINDOWS\system32> cd..PS C:\WINDOWS> cd..PS C:\> sfc /scannowBeginning system scan. This process will take some time.Beginning verification phase of system scan.Verification 100% complete.Windows Resource Protection did not find any integrity violations.PS C:\> dism /online/cleanup-image/restorehealthDeployment Image Servicing and Management toolVersion: 10.0.15063.0Error: 87The online/cleanup-image/restorehealth option is unknown.For more information, refer to the help by running DISM.exe /?.The DISM log file can be found at C:\WINDOWS\Logs\DISM\dism.logPS C:\> dism.exe /?Deployment Image Servicing and Management toolVersion: 10.0.15063.0DISM.exe [dism_options] {Imaging_command} [<Imaging_arguments>]DISM.exe {/Image:<path_to_offline_image> | /Online} [dism_options] {servicing_command} [<servicing_arguments>]DESCRIPTION: DISM enumerates, installs, uninstalls, configures, and updates features and packages in Windows images. The commands that are available depend on the image being serviced and whether the image is offline or running.GENERIC IMAGING COMMANDS: /Split-Image - Splits an existing .wim or .ffu file into multiple read-only split WIM/FFU files. /Apply-Image - Applies an image. /Get-MountedImageInfo - Displays information about mounted WIM and VHD images. /Get-ImageInfo - Displays information about images in a WIM or VHD file. /Commit-Image - Saves changes to a mounted WIM or VHD image. /Unmount-Image - Unmounts a mounted WIM or VHD image. /Mount-Image - Mounts an image from a WIM or VHD file. /Remount-Image - Recovers an orphaned image mount directory. /Cleanup-Mountpoints - Deletes resources associated with corrupted mounted images.WIM COMMANDS: /Apply-CustomDataImage - Dehydrates files contained in the custom data image. /Capture-CustomImage - Captures customizations into a delta WIM file on a WIMBoot system. Captured directories include all subfolders and data. /Get-WIMBootEntry - Displays WIMBoot configuration entries for the specified disk volume. /Update-WIMBootEntry - Updates WIMBoot configuration entry for the specified disk volume. /List-Image - Displays a list of the files and folders in a specified image. /Delete-Image - Deletes the specified volume image from a WIM file that has multiple volume images. /Export-Image - Exports a copy of the specified image to another file. /Append-Image - Adds another image to a WIM file. /Capture-Image - Captures an image of a drive into a new WIM file. Captured directories include all subfolders and data. /Get-MountedWimInfo - Displays information about mounted WIM images. /Get-WimInfo - Displays information about images in a WIM file. /Commit-Wim - Saves changes to a mounted WIM image. /Unmount-Wim - Unmounts a mounted WIM image. /Mount-Wim - Mounts an image from a WIM file. /Remount-Wim - Recovers an orphaned WIM mount directory. /Cleanup-Wim - Deletes resources associated with mounted WIM images that are corrupted.IMAGE SPECIFICATIONS: /Online - Targets the running operating system. /Image - Specifies the path to the root directory of an offline Windows image.DISM OPTIONS: /English - Displays command line output in English. /Format - Specifies the report output format. /WinDir - Specifies the path to the Windows directory. /SysDriveDir - Specifies the path to the system-loader file named BootMgr. /LogPath - Specifies the logfile path. /LogLevel - Specifies the output level shown in the log (1-4). /NoRestart - Suppresses automatic reboots and reboot prompts. /Quiet - Suppresses all output except for error messages. /ScratchDir - Specifies the path to a scratch directory.For more information about these DISM options and their arguments, specify anoption immediately before /?. Examples: DISM.exe /Mount-Wim /? DISM.exe /ScratchDir /? DISM.exe /Image:C:\test\offline /? DISM.exe /Online /?PS C:\> dism.exe /online /cleanup-image /restorehealthDeployment Image Servicing and Management toolVersion: 10.0.15063.0Image Version: 10.0.15063.0[==========================100.0%==========================] The restore operation completed successfully.The operation completed successfully.PS C:\>