Little_Micky_Fingers
Member
- Apr 2, 2014
- 8
First of all allow me to say "Hello!" to all members and guests who use this forum. One of the reasons I chose to join this particular one, is because of the
quality of the posts, the help that is freely given and the general air of friendliness to be found here. The reason that I found this forum is because of a problem
to be found on two of our Windows 8 machines and I have been online searching for a solution. I will deal with the problem machines one at a time.
In mid March 2014 I suddenly experienced 3 BSOD's in rapid succession on my machine. Two of them occurred whilst I was not in front of the screen. My pretty little
wife twice told me that "I didn't touch it, the screen went blue, there was some writing, but, I couldn't read it and then it just restarted" ... and then I was
present for the third. The "writing" informed me that a problem with afd.sys had killed my laptop. An investigation was required. I was running Windows 8 having rolled back from 8.1 after having problems with a 1Tb Toshiba hard drive (used for backup system images) not being recognised by 8.1.
First of all I ran some thorough scans using MSE, Malwarebytes and Tdsskiller - no malware or infections found. Wireshark and Nmap were used to test the security on
our side of the router - no problems there. Winsock catalogue was reset - just in case. Wireshark and Nmap were used to see if there were any network issues -
nothing found. The sfc utility came next with the following output:-
"C:\WINDOWS\system32>sfc /scannow
Beginning system scan. This process will take some time.
Beginning verification phase of system scan.
Verification 100% complete.
"Windows Resource Protection found corrupt files but was unable to fix some
of them. Details are included in the CBS.Log windir\Logs\CBS\CBS.log. For
example C:\Windows\Logs\CBS\CBS.log. Note that logging is currently not
supported in offline servicing scenarios."
Paragon Backup and Recovery 2013 Free is used to create my backup images, so, I restored the machine, ran sfc utility again and got the same result as above. (Next
time I create a backup I will be more thorough before I assume that the image is a good one!) I checked all my backups and the result was the same. I then decided
to upgrade to 8.1 to see if that would solve the problem. It did - I re-ran the sfc utility and everything appeared to be in order. I used Belarc Advisor to create
a profile, all updates were accounted for, and it looked as if I had a healthy system once more. I solved the problem with the external hard drive using the
diskpart utility, scanned all removable drives and created another backup image. No external drives have been used since. All software on the machine is legitimate
and I don't visit any "dodgy" sites. My browser is well protected (NoScript, Adblock+, DoNotTrackMe, HTTPS Everywhere) and I carry out regular checks on most
things.
This morning - 2 April - I decided to run the sfc utility once more (paranoia - a wonderful thing!) and I'm back to square one:-
"Windows Resource Protection found corrupt files but was unable to fix some
of them. Details are included in the CBS.Log windir\Logs\CBS\CBS.log. For
example C:\Windows\Logs\CBS\CBS.log. Note that logging is currently not
supported in offline servicing scenarios."
Now, when I upgraded to 8.1 I saved ALL the logs. There are two CBS.log that can be examined. There is also a Belarc profile (containing license keys). I would
greatly appreciate any help in solving this issue. I have noted that you are all really busy at the present time and I thank you for taking the time to read a
rather lengthy first post.
“If a man could mount to heaven and survey the mighty universe, his admiration of its beauties would be much diminished unless he had some one to share in his
pleasure”
Marcus Tullius Cicero
"The internet could be such a place"
LMF
quality of the posts, the help that is freely given and the general air of friendliness to be found here. The reason that I found this forum is because of a problem
to be found on two of our Windows 8 machines and I have been online searching for a solution. I will deal with the problem machines one at a time.
In mid March 2014 I suddenly experienced 3 BSOD's in rapid succession on my machine. Two of them occurred whilst I was not in front of the screen. My pretty little
wife twice told me that "I didn't touch it, the screen went blue, there was some writing, but, I couldn't read it and then it just restarted" ... and then I was
present for the third. The "writing" informed me that a problem with afd.sys had killed my laptop. An investigation was required. I was running Windows 8 having rolled back from 8.1 after having problems with a 1Tb Toshiba hard drive (used for backup system images) not being recognised by 8.1.
First of all I ran some thorough scans using MSE, Malwarebytes and Tdsskiller - no malware or infections found. Wireshark and Nmap were used to test the security on
our side of the router - no problems there. Winsock catalogue was reset - just in case. Wireshark and Nmap were used to see if there were any network issues -
nothing found. The sfc utility came next with the following output:-
"C:\WINDOWS\system32>sfc /scannow
Beginning system scan. This process will take some time.
Beginning verification phase of system scan.
Verification 100% complete.
"Windows Resource Protection found corrupt files but was unable to fix some
of them. Details are included in the CBS.Log windir\Logs\CBS\CBS.log. For
example C:\Windows\Logs\CBS\CBS.log. Note that logging is currently not
supported in offline servicing scenarios."
Paragon Backup and Recovery 2013 Free is used to create my backup images, so, I restored the machine, ran sfc utility again and got the same result as above. (Next
time I create a backup I will be more thorough before I assume that the image is a good one!) I checked all my backups and the result was the same. I then decided
to upgrade to 8.1 to see if that would solve the problem. It did - I re-ran the sfc utility and everything appeared to be in order. I used Belarc Advisor to create
a profile, all updates were accounted for, and it looked as if I had a healthy system once more. I solved the problem with the external hard drive using the
diskpart utility, scanned all removable drives and created another backup image. No external drives have been used since. All software on the machine is legitimate
and I don't visit any "dodgy" sites. My browser is well protected (NoScript, Adblock+, DoNotTrackMe, HTTPS Everywhere) and I carry out regular checks on most
things.
This morning - 2 April - I decided to run the sfc utility once more (paranoia - a wonderful thing!) and I'm back to square one:-
"Windows Resource Protection found corrupt files but was unable to fix some
of them. Details are included in the CBS.Log windir\Logs\CBS\CBS.log. For
example C:\Windows\Logs\CBS\CBS.log. Note that logging is currently not
supported in offline servicing scenarios."
Now, when I upgraded to 8.1 I saved ALL the logs. There are two CBS.log that can be examined. There is also a Belarc profile (containing license keys). I would
greatly appreciate any help in solving this issue. I have noted that you are all really busy at the present time and I thank you for taking the time to read a
rather lengthy first post.
“If a man could mount to heaven and survey the mighty universe, his admiration of its beauties would be much diminished unless he had some one to share in his
pleasure”
Marcus Tullius Cicero
"The internet could be such a place"
LMF
