Normal mode booting OK but BSoD in safe mode

[luweitest]

Have asked in group microsoft.public.windowsxp.general but got no clue; so import my post here:

Quote

I have a very strange phenomenon with my ThinkPad X61, WindowsXPsp3. It
runs normally, but I cannot enter safe mode. Press F8 at boot, select
any one of 3 safe modes, it will end to a blue screen of death showing
something like:
Stop: 0x0000007E (0xC0000005, 0xF76C0211, 0xF78EA700, 0xF78EA3FC)

Before that blue screen, a screen shows a bunch of drivers loading. The
last one is mup.sys. That signed file is fine, however.  Something after
that must be wrong.

I used to be able to enter safe mode, but I cannot determine when this
phenomenon begins. Safe mode is used rarely.

Could anybody give some hints?

 

[Destro]

enable loging and then check C:\windows\ntbtlog.txt for errors.

[luweitest]

C:\windows\ntbtlog.txt:
---------------------------------------------------------------------------
 Service Pack 3 2 12 2019 09:11:50.375
Loaded driver \WINDOWS\system32\ntkrnlpa.exe
Loaded driver \WINDOWS\system32\hal.dll
Loaded driver \WINDOWS\system32\KDCOM.DLL
Loaded driver \WINDOWS\system32\BOOTVID.dll
Loaded driver d347bus.sys
Loaded driver ACPI.sys
Loaded driver \WINDOWS\system32\DRIVERS\WMILIB.SYS
Loaded driver pci.sys
Loaded driver compbatt.sys
Loaded driver \WINDOWS\system32\DRIVERS\BATTC.SYS
Loaded driver pciide.sys
Loaded driver \WINDOWS\system32\DRIVERS\PCIIDEX.SYS
Loaded driver MountMgr.sys
Loaded driver ftdisk.sys
Loaded driver ACPIEC.sys
Loaded driver \WINDOWS\system32\DRIVERS\OPRGHDLR.SYS
Loaded driver PartMgr.sys
Loaded driver VolSnap.sys
Loaded driver atapi.sys
Loaded driver d347prt.sys
Loaded driver \WINDOWS\System32\Drivers\SCSIPORT.SYS
Loaded driver disk.sys
Loaded driver \WINDOWS\system32\DRIVERS\CLASSPNP.SYS
Loaded driver fltMgr.sys
Loaded driver sr.sys
Loaded driver KSecDD.sys
Loaded driver DozeHDD.sys
Loaded driver Ntfs.sys
Loaded driver NDIS.sys
Loaded driver ApsHM86.sys
Loaded driver Apsx86.sys
Loaded driver Mup.sys
Loaded driver \SystemRoot\system32\DRIVERS\tunmp.sys
Loaded driver \SystemRoot\system32\DRIVERS\intelppm.sys
Loaded driver \SystemRoot\system32\DRIVERS\igxpmp32.sys
Loaded driver \SystemRoot\system32\DRIVERS\usbuhci.sys
Loaded driver \SystemRoot\system32\DRIVERS\usbehci.sys
Loaded driver \SystemRoot\system32\DRIVERS\HDAudBus.sys
Loaded driver \SystemRoot\system32\DRIVERS\NETw4x32.sys
Loaded driver \SystemRoot\system32\DRIVERS\pcmcia.sys
Loaded driver \SystemRoot\system32\DRIVERS\sdbus.sys
Loaded driver \SystemRoot\system32\DRIVERS\isapnp.sys
Loaded driver \SystemRoot\system32\DRIVERS\fsvga.sys
Loaded driver \SystemRoot\system32\DRIVERS\audstub.sys
Loaded driver \SystemRoot\system32\DRIVERS\rasl2tp.sys
Loaded driver \SystemRoot\system32\DRIVERS\ndistapi.sys
Loaded driver \SystemRoot\system32\DRIVERS\ndiswan.sys
Loaded driver \SystemRoot\system32\DRIVERS\raspppoe.sys
Loaded driver \SystemRoot\system32\DRIVERS\raspptp.sys
Loaded driver \SystemRoot\system32\DRIVERS\msgpc.sys
Loaded driver \SystemRoot\system32\DRIVERS\psched.sys
Loaded driver \SystemRoot\system32\DRIVERS\ptilink.sys
Loaded driver \SystemRoot\system32\DRIVERS\raspti.sys
Loaded driver \SystemRoot\system32\DRIVERS\rdpdr.sys
Loaded driver \SystemRoot\system32\DRIVERS\termdd.sys
Loaded driver \SystemRoot\system32\DRIVERS\kbdclass.sys
Loaded driver \SystemRoot\system32\DRIVERS\mouclass.sys
Loaded driver \SystemRoot\system32\DRIVERS\VBoxNetFlt.sys
Loaded driver \SystemRoot\system32\DRIVERS\swenum.sys
Loaded driver \SystemRoot\system32\DRIVERS\update.sys
Loaded driver \SystemRoot\system32\DRIVERS\mssmbios.sys
Loaded driver \SystemRoot\system32\DRIVERS\cdrom.sys
Loaded driver \SystemRoot\system32\DRIVERS\redbook.sys
Loaded driver \SystemRoot\system32\DRIVERS\GEARAspiWDM.sys
Loaded driver \SystemRoot\system32\DRIVERS\i8042prt.sys
Loaded driver \SystemRoot\System32\Drivers\wdf01000.sys
Loaded driver \SystemRoot\system32\DRIVERS\tp4track.sys
Loaded driver \SystemRoot\system32\DRIVERS\atmeltpm.sys
Loaded driver \SystemRoot\System32\Drivers\NDProxy.SYS
Did not load driver \SystemRoot\System32\Drivers\NDProxy.SYS
Loaded driver \SystemRoot\system32\DRIVERS\CmBatt.sys
Loaded driver \SystemRoot\system32\DRIVERS\ibmpmdrv.sys
Loaded driver \SystemRoot\system32\DRIVERS\usbhub.sys
Loaded driver \SystemRoot\system32\drivers\ADIHdAud.sys
Loaded driver \SystemRoot\system32\drivers\AEAudio.sys
Did not load driver \SystemRoot\System32\Drivers\Fdc.SYS
Did not load driver \SystemRoot\System32\Drivers\Flpydisk.SYS
Did not load driver \SystemRoot\System32\Drivers\Sfloppy.SYS
Did not load driver \SystemRoot\System32\Drivers\Cdaudio.SYS
Loaded driver \SystemRoot\System32\Drivers\Fs_Rec.SYS
Loaded driver \SystemRoot\System32\Drivers\Null.SYS
Loaded driver \SystemRoot\System32\Drivers\Beep.SYS
Did not load driver \SystemRoot\system32\DRIVERS\kbdhid.sys
Loaded driver \SystemRoot\System32\drivers\vga.sys
Loaded driver \SystemRoot\System32\Drivers\mnmdd.SYS
Loaded driver \SystemRoot\System32\DRIVERS\RDPCDD.sys
Loaded driver \SystemRoot\System32\Drivers\Msfs.SYS
Loaded driver \SystemRoot\System32\Drivers\Npfs.SYS
Loaded driver \SystemRoot\system32\DRIVERS\rasacd.sys
Loaded driver \SystemRoot\system32\DRIVERS\ipsec.sys
Loaded driver \SystemRoot\system32\DRIVERS\tcpip.sys
Loaded driver \SystemRoot\system32\DRIVERS\ipnat.sys
Loaded driver \SystemRoot\system32\DRIVERS\wanarp.sys
Loaded driver \SystemRoot\system32\DRIVERS\netbt.sys
Loaded driver \SystemRoot\System32\drivers\afd.sys
Loaded driver \SystemRoot\system32\DRIVERS\netbios.sys
Loaded driver \SystemRoot\system32\DRIVERS\VBoxUSBMon.sys
Loaded driver \SystemRoot\system32\DRIVERS\VBoxDrv.sys
Loaded driver \SystemRoot\System32\drivers\Tppwrif.sys
Loaded driver \SystemRoot\system32\DRIVERS\TPHKDRV.sys
Loaded driver \SystemRoot\system32\DRIVERS\rdbss.sys
Loaded driver \SystemRoot\system32\DRIVERS\mrxsmb.sys
Loaded driver \SystemRoot\system32\DRIVERS\mdmxsdk.sys
Loaded driver \SystemRoot\system32\DRIVERS\smiif32.sys
Did not load driver \SystemRoot\system32\DRIVERS\imapi.sys
Loaded driver \SystemRoot\System32\Drivers\Fips.SYS
Loaded driver \SystemRoot\system32\DRIVERS\usbccgp.sys
Loaded driver \SystemRoot\system32\DRIVERS\hidusb.sys
Loaded driver \SystemRoot\system32\DRIVERS\kbdhid.sys
Loaded driver \SystemRoot\system32\DRIVERS\mouhid.sys
Loaded driver \SystemRoot\System32\Drivers\Cdfs.SYS
Loaded driver \SystemRoot\system32\DRIVERS\ndisuio.sys
Did not load driver \SystemRoot\System32\Drivers\Parport.SYS
Did not load driver \SystemRoot\system32\DRIVERS\ipnat.sys
Loaded driver \SystemRoot\system32\drivers\wdmaud.sys
Loaded driver \SystemRoot\system32\drivers\sysaudio.sys
Loaded driver \SystemRoot\system32\drivers\splitter.sys
Loaded driver \SystemRoot\system32\drivers\aec.sys
Loaded driver \SystemRoot\system32\drivers\swmidi.sys
Loaded driver \SystemRoot\system32\drivers\DMusic.sys
Loaded driver \SystemRoot\system32\drivers\kmixer.sys
Loaded driver \SystemRoot\system32\drivers\drmkaud.sys
Loaded driver \SystemRoot\System32\Drivers\HTTP.sys
Loaded driver \??\C:\green\ThrottleStop\WinRing0.sys
Loaded driver \SystemRoot\system32\DRIVERS\tcpip6.sys
Did not load driver \SystemRoot\system32\DRIVERS\Ip6Fw.sys
Loaded driver \SystemRoot\system32\DRIVERS\Ip6Fw.sys
Did not load driver \SystemRoot\system32\DRIVERS\Ip6Fw.sys
Loaded driver \SystemRoot\system32\drivers\kmixer.sys
---------------------------------------------------------------------------

I checked all 11 "did not load" driver file, all of them are signed, so
files are good. And some are special:
ndproxy is loaded first, then not loaded;
kbdhid is not loaded first, then loaded;
ip6fw is not loaded first, then loaded, then not loaded again.

Could that reveal something?

[Tripredacus]

If you have the memory dump, you can upload it and someone can take a look at it.

Otherwise, in this type of situation I would normally want to run the annoying step-by-step bootup option that is in the F8 menu... but I don't remember if it is an option in XP. Take a look. This is the mode that you can use to see what is next after mup.sys, or even further along afterwards, since you will need to press Y to load it.

[luweitest]

I recall that step-by-step option in Win98 era. XP removed it.

I managed to get a bootlog of safe mode by adding a line to boot.ini:

multi(0)disk(0)rdisk(0)partition(1)\WINDOWS="boot troubleshoot (safe mode)" /safeboot:minimal(alternateshell) /sos /bootlog /noguiboot /noexecute=optout /fastdetect

After BSOD, the ntbtlog.txt has only one line:

Loaded driver \SystemRoot\system32\drivers\kmixer.sys

I wonder why those drivers before kmixer.sys haven't been logged.

And I got a list of drivers|services in safe mode:

Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\AppMgmt]
@="Service"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Base]
@="Driver Group"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Boot Bus Extender]
@="Driver Group"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Boot file system]
@="Driver Group"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\CryptSvc]
@="Service"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\DcomLaunch]
@="Service"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\dmadmin]
@="Service"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\dmboot.sys]
@="Driver"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\dmio.sys]
@="Driver"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\dmload.sys]
@="Driver"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\dmserver]
@="Service"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\EventLog]
@="Service"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\File system]
@="Driver Group"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Filter]
@="Driver Group"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\HelpSvc]
@="Service"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Netlogon]
@="Service"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\PCI Configuration]
@="Driver Group"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\PlugPlay]
@="Service"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\PNP Filter]
@="Driver Group"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Primary disk]
@="Driver Group"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\RpcSs]
@="Service"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\SCSI Class]
@="Driver Group"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\sermouse.sys]
@="Driver"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\sr.sys]
@="FSFilter System Recovery"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\SRService]
@="Service"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\System Bus Extender]
@="Driver Group"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\vga.sys]
@="Driver"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\vgasave.sys]
@="Driver"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WinMgmt]
@="Service"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfPf]
@="Driver"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfRd]
@="Driver"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfSvc]
@="Service"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{36FC9E60-C465-11CF-8056-444553540000}]
@="Universal Serial Bus controllers"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E965-E325-11CE-BFC1-08002BE10318}]
@="CD-ROM Drive"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E967-E325-11CE-BFC1-08002BE10318}]
@="DiskDrive"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E969-E325-11CE-BFC1-08002BE10318}]
@="Standard floppy disk controller"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E96A-E325-11CE-BFC1-08002BE10318}]
@="Hdc"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E96B-E325-11CE-BFC1-08002BE10318}]
@="Keyboard"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E96F-E325-11CE-BFC1-08002BE10318}]
@="Mouse"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E977-E325-11CE-BFC1-08002BE10318}]
@="PCMCIA Adapters"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E97B-E325-11CE-BFC1-08002BE10318}]
@="SCSIAdapter"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E97D-E325-11CE-BFC1-08002BE10318}]
@="System"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E980-E325-11CE-BFC1-08002BE10318}]
@="Floppy disk drive"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{71A27CDD-812A-11D0-BEC7-08002BE2092F}]
@="Volume"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{745A17A0-74D3-11D0-B6FE-00A0C90F57DA}]
@="Human Interface Devices"

Is there anything unusual in the list? What will happen if I remove some items?

[luweitest]

1 hour ago, luweitest said:

After BSOD, the ntbtlog.txt has only one line:

Loaded driver \SystemRoot\system32\drivers\kmixer.sys

Another two tries even left no ntbtlog.txt.

[jaclaz]

First thing I would do is to run a chkdsk on the boot/system volume.

That kind of error is often connected with the main hard disk having issues (be them a too full volume, a bad hybernation file or *whatever* else).

Anyway running a chkdsk costs nothing and won't do any harm (if it does, it means there is a much bigger underlying problem). 

Check this (only seemingly unrelated):

https://msfn.org/board/topic/170864-chkdsk-not-working-faulty-hard-drive/

https://msfn.org/board/topic/170864-chkdsk-not-working-faulty-hard-drive/?do=findComment&comment=1066252

jaclaz

 

[Mathwiz]

Since the system boots in normal mode, but not safe mode, presumably it's either:

• A bad driver or service loading in safe mode that isn't loaded in normal mode (shouldn't happen, but something to look for), or
• A needed driver missing from safe mode.

I don't think it'll be easy to troubleshoot.

[luweitest]

On 2/24/2019 at 10:09 PM, jaclaz said:

First thing I would do is to run a chkdsk on the boot/system volume.

That kind of error is often connected with the main hard disk having issues (be them a too full volume, a bad hybernation file or *whatever* else).

Yes I suspected disk failure at first and did chkdsk for couple of times. Apart from some long-standing bad sectors in the disk, no significant errors found. I did a full chkdsk again just now:

---------------------------------------------------------------------------------------------------

Checking file system on C:
The type of the file system is NTFS.
Volume label is SYSTEM.

A disk check has been scheduled.
Windows will now check the disk.                         
Cleaning up minor inconsistencies on the drive.
Cleaning up 44 unused index entries from index $SII of file 0x9.
Cleaning up 44 unused index entries from index $SDH of file 0x9.
Cleaning up 44 unused security descriptors.
CHKDSK is verifying Usn Journal...
Usn Journal verification completed.
CHKDSK is verifying file data (stage 4 of 5)...
File data verification completed.
CHKDSK is verifying free space (stage 5 of 5)...
Free space verification is complete.

  15361888 KB total disk space.
  11757232 KB in 101427 files.
     36384 KB in 9827 indexes.
         8 KB in bad sectors.
    210176 KB in use by the system.
     65536 KB occupied by the log file.
   3358088 KB available on disk.

      4096 bytes in each allocation unit.
   3840472 total allocation units on disk.
    839522 allocation units available on disk.

Internal Info:
20 22 02 00 a1 b2 01 00 99 7d 02 00 00 00 00 00   ".......}......
34 02 00 00 04 00 00 00 17 01 00 00 00 00 00 00  4...............
0a 4e 11 0a 00 00 00 00 8a a0 1d 3f 00 00 00 00  .N.........?....
14 8e fb 0c 00 00 00 00 d2 a8 1a a9 02 00 00 00  ................
48 f1 47 3d 00 00 00 00 74 df 91 44 03 00 00 00  H.G=....t..D....
99 9e 36 00 00 00 00 00 c8 3c 07 00 33 8c 01 00  ..6......<..3...
00 00 00 00 00 c0 9a cd 02 00 00 00 63 26 00 00  ............c&..

Windows has finished checking your disk.
Please wait while your computer restarts.

-----------------------------------------------------------------------------------------------------

And disk SMART info:

ID    Attribute name    Real value    Current    Worst    Threshold   Raw value

1    Read Error Rate    0    100    100    62    0x000000000000
2    Throughput Performance    4,434    108    108    40    0x000000001152
3    Spin-Up Time      1 ms    253    253    33    0x000000000001
4    Start/Stop Count    12,009    93    93    0    0x000000002EE9
5    Reallocated Sectors Count    0    100    100    5    0x000000000000
7    Seek Error Rate    0    100    100    67    0x000000000000
8    Seek Time Performance    38    124    124    40    0x000000000026
9    Power-On Hours (POH)    1335d 7h    27    27    0    0x000000007D2F
10    Spin Retry Count    0    100    100    60    0x000000000000
12    Power Cycle Count    10,215    94    94    0    0x0000000027E7
191    G-sense Error Rate    0    100    100    0    0x000000000000
192    Power-off Retract Count    4,294,901,979    99    99    0    0x0000FFFF00DB
193    Load Cycle Count    985,760    2    2    0    0x0000000F0AA0
194    Temperature    32 °C    171    171    0    0x000000000020
196    Reallocation Event Count    4    100    100    0    0x000000000004
197    Current Pending Sector Count    2    100    100    0    0x000000000002
198    Uncorrectable Sector Count    0    100    100    0    0x000000000000
199    UltraDMA CRC Error Count    0    200    200    0    0x000000000000
223    Load/Unload Retry Count    0    100    100    0    0x000000000000

---------------------------------------------------------------------------------------------------

Does "8 KB in bad sectors" correspond to 4 "Reallocation Event Count"? That 8KB bad sector has been there for a long time, not sure if it is relevant in time to the safe mode BSOD problem.

Edited February 26, 2019 by luweitest

[luweitest]

On 2/25/2019 at 5:52 AM, Mathwiz said:

Since the system boots in normal mode, but not safe mode, presumably it's either:

• A bad driver or service loading in safe mode that isn't loaded in normal mode (shouldn't happen, but something to look for), or
• A needed driver missing from safe mode.

I don't think it'll be easy to troubleshoot.

The driver or service loaded in safe mode should be in [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal] , which I pasted in previous post, yet I don't know if there's anything unusual.

[jaclaz]

Well, CHKDSK "should be" (to be fair this is how I personally recommend to run it) run THREE times, in this order:

1) CHKDSK <driveletter:>
2) CHKDSK  <driveletter:> /F
3) CHKDSK <driveletter:> /R

The last pass (the one with the /R) should "get rid" of the bad sectors. (and no, they are not "normal", and as well the "minor inconsistencies" + the 44 index issues are not normal and may be enough to create the original problem).

Once you have run the CHKDSK as above thrice, if you re-run it without any parameter as in #1, your output should be *like*:

https://it.wikipedia.org/wiki/Chkdsk#/media/File:Chkdsk_screenshot.png

 

SMART data is actually (again in my perverted mind) a bunch of totally meaningless data, however even if they had any relevance (or connection with the problem) , they are at a level far lower than where the NTFS (and thus CHKDSK) are, 

jaclaz

[HarryTri]

On Παρασκευή, 22 Φεβρουαρίου 2019 at 10:17 AM, luweitest said:

I checked all 11 "did not load" driver file, all of them are signed, so
files are good. And some are special:
ndproxy is loaded first, then not loaded;
kbdhid is not loaded first, then loaded;
ip6fw is not loaded first, then loaded, then not loaded again.

On Windows XP SP2 and SP3 (at least) the "do not load" is in place of "enumerate" which is present in the ntbtlog.txt in previous versions of Windows but here ntbtlog.txt fails to present it correctly.

 

11 hours ago, jaclaz said:

The last pass (the one with the /R) should "get rid" of the bad sectors. (and no, they are not "normal", and as well the "minor inconsistencies" + the 44 index issues are not normal and may be enough to create the original problem).

Sorry but I run chkdisk all my life (almost) and all this stuff is absolutely normal (the bad sectors aren't so common but sometimes they exist too).

[cdob]

15 hours ago, luweitest said:

197    Current Pending Sector Count    2    100    100    0    0x000000000002

There are some minor trouble, yes this can result to a BSOD 0x7e.

Backup importand data first.

Run a extended test at WD windlg.exe. If there is a question to repair at end of test, do the repair.
https://support.wdc.com/downloads.aspx?p=3&lang=en

 

 

[luweitest]

9 hours ago, cdob said:

Run a extended test at WD windlg.exe. If there is a question to repair at end of test, do the repair.
https://support.wdc.com/downloads.aspx?p=3&lang=en

Ran an extensive test and did repair as prompted. It says data in the bad sector would lost, but I do not notice anything. The new SMART info has these items changed compared to the previous:

3    Spin-Up Time      0 ms    253    253    33    0x000000000000
4    Start/Stop Count    12,011    93    93    0    0x000000002EEB
9    Power-On Hours (POH)    1335d 20h    27    27    0    0x000000007D3C
12    Power Cycle Count    10,217    94    94    0    0x0000000027E9
193    Load Cycle Count    986,022    2    2    0    0x0000000F0BA6
194    Temperature    38 °C    144    144    0    0x000000000026
197    Current Pending Sector Count    0    100    100    0    0x000000000000

Seems Pending Sector issue is fixed. But safe mode still goes to the same BSOD.

 

[Bersaglio]

Try running

sfc /scannow

with local Administrator privileges. But prepare in advance the installation disk or image from which the system was originally installed (under the assumption You have installed the system with SP3 already included).