BSOD caused by SYSTEM_SERVICE_EXCEPTION ntroskrnl.exe

Dave

Log Name:      System

Source:        Microsoft Antimalware

Date:          03/05/2015 06:46:21

Event ID:      2001

Level:         Error

Description:

Microsoft Antimalware has encountered an error trying to update signatures.

 New Signature Version:

 Previous Signature Version: 1.197.1227.0

 Update Source: Microsoft Update Server

 Update Stage: Install

 Source Path: http://www.microsoft.com  Signature Type: AntiVirus

 Update Type: Full

 User: NT AUTHORITY\SYSTEM

 Current Engine Version:

 Previous Engine Version: 1.1.11602.0

 Error code: 0x80070643

 Error description: Fatal error during installation.

I suggest you uninstall and reinstall Microsoft Security Essentials.

Select the keyboard shortcut Windows Key + R, type Appwiz.cpl and press the ENTER key. Place the cursor on Microsoft Security Essentials, right click and select Uninstall from the drop down menu. Restart your computer.

How to manually uninstall Microsoft Security Essentials if you cannot uninstall it by using the Add or Remove Programs item:

http://support.microsoft.com/kb/2435760/en-gb

Restart the computer, download, install, update definitions and run a complete scan with Microsoft Security Essentials:

http://www.microsoft.com/en-gb/download/details.aspx?id=5201

I can see nothing in the logs suggesting that there is a pressing need to update the BIOS.

Gerry,

I'll do this once I get home. Interesting that despite it saying fatal error in that report, I haven't experienced either a crash restart nor BSOD. < I have now uninstalled/installed Essentials and am running the full virus scan.

Thanks for the advice about the BIOS, would it still be a good idea to update or am I more likely to do more damage than good? < I read the instructions about 50 times, watched the tutorial video about 50 times and still can't work out how I do this using a USB. I think I'll leave it for the mean time.

Again, thanks for your time in providing me support with regard to this issue.

Dave

Edits in bold.

Gerry,

Just when I think we are getting somewhere, after running a full virus scan and nothing found. A fresh new BSOD this morning. I have attached up to date Event Viewer files and the dump file from the BSOD.

https://www.dropbox.com/s/jjpnixnzqnap6d3/050415-17924-01.zip?dl=0

https://www.dropbox.com/s/2wwyms0m820b68v/Event\_File\_Application\_040515.zip?dl=0

https://www.dropbox.com/s/y0w1bf621sv4c47/Event\_File\_System\_040515.zip?dl=0

Hopefully having these up to date files may find the source of the issue...

Thanks as always

Dave

Dave

Please update ATK0110 driver:

http://dlcdnet.asus.com/pub/ASUS/misc/utils/MB\_WIN7\_ATK.ZIP?\_ga=1.245633348.1517952585.1430668810

Update VIA Audio Driver to version 6.0.1.9500:

http://dlcdnet.asus.com/pub/ASUS/misc/audio/VIA\_Audio\_V6019500\_XPVistaWin7.zip?\_ga=1.10230005.1517952585.1430668810

Download the driver and copy it to a folder on your desktop. Write down the path to the folder. If the driver has been zipped you will need to right click on the file and extract to your folder.

Next type Device Manager in the Search box above the Start button and press ENTER. Locate and right click on the device and select Properties. Click on the Driver tab and the Update Driver button. Click on “Browse my computer for driver” and click the Browse button. Type in the Search box the file path to your folder and click on Next. The system should find the driver in your folder and update. If it does not find the driver recheck that the driver is not zipped.

Log Name:      System

Source:        Microsoft-Windows-DistributedCOM

Date:          04/05/2015 09:44:39

Event ID:      10016

Level:         Error

Description:

The application-specific permission settings do not grant Local Launch permission for the COM Server application with CLSID

{C97FCC79-E628-407D-AE68-A06AD6D8B4D1}

 and APPID

{344ED43D-D086-4961-86A6-1106F4ACAD9B}

 to the user NT AUTHORITY\SYSTEM SID (S-1-5-18) from address LocalHost (Using LRPC). This security permission can be modified using the Component Services administrative tool.

Solution:

http://www.itexperience.net/2010/10/29/event-10016-the-application-specific-permission-settings-do-not-grant-local-launch-permission-for-the-com-server-application-with-clsid-c97fcc79-e628-407d-ae68-a06ad6d8b4d1/

Please download and run Driver View and upload a copy of the report it produces to your OneDrive. To get a report on all drivers select Edit, Select All followed by File, Save Selected Items.

http://www.nirsoft.net/utils/driverview.html

Some of your installed software may not be suitable for Windows 7. Please download and run the Windows 7 Upgrade Advisor and upload a copy of the report to your OneDrive as a shared file:

https://www.microsoft.com/en-gb/download/details.aspx?id=20

Gerry,

I had already updated the ATK driver from your previous advice. It is showing as the 2009 version in my drivers list. I presume I've installed the right version (x64) as I run a 64bit machine (according to my information in properties).

I have updated my Audio Driver as per the link you sent.

I have completed the instructions as the 'itexperience.net' instructions. Was that the cause of my BSOD today?

I have downloaded driver view, please find the file here -> https://www.dropbox.com/s/0a5po7dik5immxi/Driver\_View\_File.txt?dl=0

I have downloaded and run Windows 7 Upgrade, please find the report here -> https://www.dropbox.com/s/a3lyqo114lbzaoa/Windows7\_Upgrade\_Info.mht?dl=0

With regard to the Windows 7 Upgrade information, I have a few comments.

1. It says I'm entitled to an anytime upgrade to 64bit. It was my impression I was running 64bit. Have I missed something? It is ticked in green but that's confused me a tad.
2. Adobe Media I've never used, yet when I try and uninstall using add/remove, it asks me to insert a disk.
3. NeatImage I use sporadically and it has never caused an issue. Would like to keep it if I can. I'll check for a Windows 7 version.
4. YouTube downloader I never use and have uninstalled.

Thanks as always for your comments and help, it's been really appreciated over the past week. Not sure if we are getting any closer to a resolution but I'd hope so :)