mlm122

I was greeted with this error when my Sony Viao, running vista 32 bit, laptop restarted after installing some windows live updates.

what other info would you guys (and gals) need to help me get rid of this? Windows boot manager gave me the message in the header, and the only way I was able to get back to windows was f10 restore point. I fear a virus, since norton has shut itself off and won't restart, as well.

I installed and ran AVG, which didn't report any viruses.. so now I am really confused.

Any help would be appreciated. Thank you!

jcgriff2

Hi mlm122. . .

Welcome to TSF - Vista.

Are you sure the filename was ntoskrn1.exe and not ntoskrnl.exe? The one I named has the letter L before the .exe and not the numeral 1.

If it is the letter L do the following:

START | type cmd.exe into the start search box | right-click on cmd.exe above under Programs | select run as administrator | the black cmd prompt ("DOS") screen will appear | type the following - note the space after sfc -

sfc /scannow

Let it run...

jcgriff2

.

mlm122

thanks for the response & welcome you were right it was a "L"..However : here's the results of that scan :

Microsoft Windows [Version 6.0.6000]
Copyright (c) 2006 Microsoft Corporation. All rights reserved.

C:\Users\mm>sfc /scannow

Beginning system scan. This process will take some time.

Beginning verification phase of system scan.
Verification 100% complete.Windows Resource Protection found corrupt files but was unable to fix some of them.
Details are included in the CBS.Log windir\Logs\CBS\CBS.log. For example
C:\Windows\Logs\CBS\CBS.log

C:\Users\mm>
so what are my options now? And thanks again.

jcgriff2

Did you re-boot after SFC? There are some files that cannot repaired while up and running and must be done before HDD volume is mounted during re-boot.

JC

jcgriff2

How long ago were the Win Live updates?

mlm122

[quote=jcgriff2;1662365]Did you re-boot after SFC? There are some files that cannot repaired while up and running and must be done before HDD volume is mounted during re-boot. /quote

I will reboot now, but everytime I do in the past few days, it's given me that kernel error. I will post results in a bit, as it usually takes a few minutes. Thnx!

mlm122

Sunday night, that's when I started having the probs (sorry didn't see this question last time).. but I have rebooted twice now, seems ok,,, according to my logs, it's not till win updates try to install that the krn problem recurs.In other words, I solvedd the missing krn problem, by f10 restore point.. the system goes into sleep mode overnight, and it must try to install win updates sometime overnight, then I wake up to the missing krn problem again. I am hoping the scannow was the real fix, though. I am cautiously optimistic....

jcgriff2

Is the F10 resore point you are speaking of the Windows System Restore?

mlm122

yes, and I just let Windows install 14 updates. I looked at my schedule, it's scheduled to install updates every day @ 3am...

Well, the system rebooted after reporting successfully installing them, and oh boy.. back to the krnl error - anything else I can try??

Thanks!

jcgriff2

Are you updated with Vista SP1?

mlm122

I don't think so, and as you can tell - not having alot of luck with windows updates, I can reboot after going to my restore point - even updated Java and rebooted successfully.. but any windows update seems to be a problem. Right now, I am running Hardware Diagnostics and repair from the recovery tool menu - figure I have nothing to lose.

I will check if SP1 is installed when it's done.

jcgriff2

SP1 must take priority now.

I'll be back shortly with a file for you to run so I can get some information from your system.

JC

jcgriff2

Hi. . .

Please download the zip and extract the file in it to your desktop. Go to your desktop locate the file evtx_dump-msinfo32.bat, right-click on it and run as administrator. Let it run a few minutes - you'll see the screens come up scrolling.

When complete, go to your documents folder. You should find a folder named TSF_Vista_jcgriff2 with 3 files in it. Zip up the entire folder and attach to your next post. The output is a dump of some app & sys event logs, msinfo32 NFO file and rather large cbs log which contains cryptic info on windows updates.

Any ? or problems just let me know.

Regards. . .

JC

.

Attached Files

mlm122_Vista_08-22-08.zip (577 Bytes, 3 views)

mlm122

mlm122

ok, there you go. Whatever happened, it seems to have happened on the 17th., and is related to a win update. Let me know what you think. I apprec the effort.

Attached Files

TSF_Vista_jcgriff2.rar (544.3 KB, 2 views)

jcgriff2

Hi. . .

No, you are not Vista SP1 updated, not for lack of trying, though. Your Windows Updates are failing most of the time.

I need for you to run another file, please. The cbs log has 82,488 entries in it, but only takes us back 3 days to Aug 18. The size caused Vista to archive the entries before Aug 18 06:28:04. The archive is the cbs.persist.log file.

Download the zip, extract to desktop, right-click on it and run as admin. Look in documents folder, same sub-folder for the file mlm122_Vista_08-22-08_cbs.persist.txt. Zip it and attach.

jcgriff2

mlm122

Was there supposed to be another file, attached your post above, or run the one you have already sent? I saw the CBS logs referenced in the scannow results, so I can zip the persist log and attach, if that's what you need. I can do it when I get home tonight.

jcgriff2

Apologies... yes. I will go get it now for you.

jcgriff2

Hi. . .

OK.... the file is attached. Actually this works out OK because the event log dumps of 500 records each only went back 24 hours. So I need more event records - this time 5,000 from each. So there will be 2 output files that I will need. They will be in a new folder within the new folder from yesterday - its name is round2.

JC

.

Attached Files

cbs_persist_bat_08-22-08.zip (592 Bytes, 4 views)

mlm122

k, good luck --- been doing lots of reading, lots of ppl with my same prob in other forums, can't believe MS hasn't fixed it.

Attached Files

round2.rar (1.33 MB, 2 views)