Author Topic: Windows 7 Ult 64 bit trapped by BSD and can not get out. (Read 192185 times)

FreeCat · « **on:** August 06, 2017, 11:34:38 am »

Sorry that this is in all caps here, but wrote it on friend's laptop that kept going into CAPS.

SEQUENCE OF EVENTS 2017 08 05:

WINDOWS 7 PRO ULTIMATE RUNNING ON A DELL T7500
WITH 64 GB RAM AND TWO AMD W7000 GRAPHICS CARDS

UPDATES AVAILABLE - SEVERAL ESSENTIAL AND 2 .NET

.NET UPDATE DID NOT TAKE THE UPDATE BUT NEEDED A REBOOT TO APPLY THEM

SHUT DOWN MACHINE FOR REBOOT - LET LATENT CHARGE OUT OF MACHINE

AFTER THIS REBOOT: BLUE SCREEN

LET LATENT CHARGE OUT OF MACHINE

THEN WENT TO SAFE MODE

UPDATED TWEAKING.COM FOR V4 PRO

TURNED OFF MACHINE TO DRAIN LATENT CHARGE AGAIN

STARTED TWEAKING

RAN PRESCAN - FOUND SOME THINGS =- MOSTLY WITH LOGMEIN - WHICH I NO LONGER USE AND DELETED OVER A YEAR AGO

CHCKDSK BEGAN BUT FOUND ERRORS BUT I WANTED TO USE /F OR /R AND SAW IT DID NOT APPLY /F /R

LET LATENT CHARGE OUT OF MACHINE

I SET CHKDSK UP FOR /R AT REBOOT AND REBOOTED FROM TWEAKING

BUT WHEN MACHINE CAME UP IN SAFE MODE CHKDSK WAS NOT RUNNING

LET LATENT CHARGE OUT OF MACHINE

BEGAN TWEAKING AGAIN SETUP FOR SAFE MODE REBOOT WITH CHKDSK AT /R

ON REBOOT SAFE MODE CAM UP AGAIN BUT THERE WAS NO CHKDSK RUNNING

THEN WENT TO COMMAND MODE AND RAN CHKDSK WITH THE /R OPTIONS
CHCKDSK RAN FOR HOURS AND STILL RUNNING AT BEDTIME
THEN, IN THE MORNING BLUE SCREEN

TURNED OFF MACHINE TO DRAIN LATENT CHARGE

TRIED TO START IN SAFE MODE
LEFT FOR HOURS, SAFE MODE NEVER LOADS
AND THE LAST LINE LOADED IS AMBAKDRV.SYS

TURNED OFF MACHINE TO DRAIN LATENT CHARGE

TRIED TO BOOT SAFE MODE
LEFT FOR HOURS, SAFE MODE NEVER LOADS
AND THE LAST LINE LOADED IS AMBAKDRV.SYS

TURNED OFF MACHINE TO DRAIN LATENT CHARGE

TRIED TO BOOT SAFE MODE
LEFT FOR HOURS, SAFE MODE NEVER LOADS
AND THE LAST LINE LOADED IS AMBAKDRV.SYS

TRIED BOOT WITH LAST KNOW GOOD CONFIG

HERE IS THE TECH INFO:

*** STOP: OXOOOOOO1E (0XFFFFFFFFC000001D,0XFFFFF800042DC35F, 0X000000000000000000, 0XFFFFFA9073F88000)

AFTER THIS ON TRYING TO SAFE BOOT AGAIN "LAST KNOW GOOD CONFIG" WAS NO LONGER AVAILABLE AS AN OPTION.

I really, really need this machine for work.
I do have a backup but it is over three months old and I did a lot of work on machine since then (stopped running as I ran out os space as it needs 1.5TB space on my NAS to run backup and did not get another drive yet.

Thanks in advance for any help at all.

Boggin · « **Reply #1 on:** August 06, 2017, 02:13:26 pm »

The AMBAKDRV.SYS is part of AOMEI backupper - have you got that installed or recently uninstalled it ?

If you haven't then it could be an infection

It's unfortunate that you can't get into Safe Mode as what I've found about that AMBAKDRV.SYS is that it can be stopped in Services if it's a genuine file.

MS has a Hotfix for that Stop Code but I'm not sure if it applies to your error but you would need at least Safe Mode with Networking and they usually send these to you in an email.

https://support.microsoft.com/en-us/help/2764302/-0x0000001e-stop-error-occurs-intermittently-in-windows-7-sp1-and-wind

Do you have a Win 7 Ultimate install disk you can use to boot up with ?

It's best if your install disk includes SP1 but if it hasn't and you have a valid retail key, you can download the ISO on your friend's laptop from https://www.microsoft.com/en-gb/software-download/windows7

Scroll down and enter your product key and if it accepts it, it will release the download which will be about 3.09GB and select Save.

You can then use Windows USB/DVD Burner Tool to create a bootable disk. http://wudt.codeplex.com/

Assuming you have, tap F12 as you switch on to use the one off boot order change - use the cursor keys to select the DVD drive - insert the disk and press enter then press any key when prompted to boot from CD or DVD..

You may be presented with an inverse window with Windows Setup (EMS Enabled) highlighted - press enter.

Use the dropdown to change/confirm Language, Time and currency format - Next

Click on Repair your computer bottom left in the Install screen and note the location of the volume as it isn't always in C: when you boot up with an install disk or go into the Recovery Environment.

You may be able to use your restore points to go back to before the .NET Framework updates or see if a sfc /scannow will do anything for you.

Select Command Prompt and enter this command using the location letter of the volume instead of the X that I have used.

sfc /scannow /offbootdir=X:\ /offwindir=X:\Windows

Let us know how you get on with those.

FreeCat · « **Reply #2 on:** August 06, 2017, 07:17:46 pm »

Thanks VERY much Boggin'.

I began to try what you have recommended, but when I turned the computer on again it went into chkdsk so chkdsk is running and it is now way past the point that it stopped when it got the BSD. Now at 4 of 5 but 145k or 310k to go.

I makes sense to me to wait to see what happens.

I will keep you posted.

Thanks MUCH, again, Boggin'

Boggin · « **Reply #3 on:** August 06, 2017, 11:59:12 pm »

That sounds promising as long as it doesn't find any bad sectors.

FreeCat · « **Reply #4 on:** August 07, 2017, 06:41:37 am »

Well, by Monday morning, another BSD, but this time with page fault in non-paged area. I remember when the chkdsk began yesterday, I was trying to get to Safe Mode but F8 did not take and it began "Starting Windows". and after a while I saw it was in chkdsk. this prolly had to do with setting up of chkdsk for reboot. I dunno.

So, now, I am trying to get into safe mode and for the last 20 minutes still stopped at the AMOEI driver load.

I will try restart now without safe mode and see if chkdsk starts again.

FreeCat · « **Reply #5 on:** August 07, 2017, 06:48:02 am »

But wait. I just saw an email from Jim suggesting a look at this:

https://support.microsoft.com/en-us/help/2521220/-0x0000001e-stop-error-when-you-perform-disk-i-o-intensive-operations

And, these symptoms seem to fit exactly as my 2 TB hard drive is a RAID (ie two 2 TB drive in mirror configuration). I have never done a hotfix before. But I see STOP 0x000000001E message I believe. And hotfix link sends me to "Contact Us" MSFT. Although, not RAID5 but RAID0.

FreeCat · « **Reply #6 on:** August 07, 2017, 09:52:23 am »

OK - NEW BALL GAME! I thought that whatever I am going to do, I should try a reboot and press F8 which I did just before
I had to go out to the doctor.

Now, the machine is in safe mode.

Normally, I would just run Tweaking 4 Pro. But, after that scare of possibly being trapped in the BSD, I don't know what to do.

Any suggestions would be appreciated. Should I apply the hotfix or any MSFT fix?

I will wait to hear from y'all. Thanks in advance.

I can not work today without my computer.

Boggin · « **Reply #7 on:** August 07, 2017, 09:54:54 am »

As I'd said before, MS send these Hotfixes to you via email.

However, if you aren't sure that is the right one for you then perhaps best to leave it.

You haven't answered if you have AOMEI installed or have had it installed.

You may be able to get into Safe Mode by using msconfig

Go Start - type msconfig and press enter then under the Boot tab check the box for Safe boot and if you want that with Networking, then also check the box for Network - Apply - OK - Restart

If that gets you in, go Start - type services.msc and press enter then look for AOMEI or similar in Services.

It may be showing as Started and Automatic.

You can change its status to Manual by right clicking on it and selecting Properties then use the dropdown to select Manual - Stop - Apply - OK

Go File/Exit to close Services,

While you are in Safe Mode you can check to see what the chkdsk found.

Go Start - type eventvwr and press enter and when Event Viewer opens, ensure Event Viewer (Local) is highlighted.

When it has read the data etc. expand Windows Logs and click on Application/Action/Find then type chkdsk or wininit into the Find box and press enter.

Cancel the Find box and read the report in the scrollable window, checking to see if it finds any KBs in bad sectors, although you have to use the slider bars and down arrow to read it, but I think your BSODs are probably caused by that AOMEI.sys driver.

To boot back to normal you will have to go back into msconfig - uncheck the box for Network if you have chosen it and then uncheck the box for Safe boot - Apply - OK - Restart and then see how the computer performs.

If things are back to normal and you have AOMEI and want to continue using it, then I suggest you reinstall it as it has become buggy.

You should be able to do that in Safe Mode with Networking if you still have problems in normal mode.

EDIT - I was writing this post while you were replying but do what I've suggested in Safe Mode.

FreeCat · « **Reply #8 on:** August 07, 2017, 11:59:37 am »

OK, Boggin. And, thanks again for your help.
I could not use the Advanced/.../Find the way you described it, but I did get to an event viewer that showed the 16 hour chkdsk did complete around 2:30 AM. Zero bad sectors.

OK, sorry for not answering your question about AOMEI. Yes, I have it and have installed it and have been using for years. Works like a charm; even restore whole machine to another completely different machine; BTW, I wanted to spend top dollar for backup as I figured any low-priced BU would be unreliable, etc. I tried Acronis; absolutely impossible to use and help non existent without $90 call per incident --- where did it put it? --- is it complete? --- whey does it not restore? --- etc. --- all no brainers; but, I should be able to install and use without support; No?

More BTW: I tried Paragon --- not as expensive but same thing; not easy to use; support wacky, etc.

Then, AOMEI, and wham: Great backup. All the time. Restores like a charm. No brainer to use --- even differential and incremental!

So, yes I apologize for not answering. I have it and have used it for years.

I did notice one message about Backerupper (the AOMEI) product --- "possibly corrupted."

But, then a Netgear problem. But, right now in Safe Mode Netork seems connected.

Maybe best if I give you the sequence:

Log Name: Application
Source: Microsoft-Windows-Wininit
Date: 8/6/2017 6:57:18 AM
Event ID: 1001
Task Category: None
Level: Information
Keywords: Classic
User: N/A
Computer: M764-140-DQ64G3
Description:

Checking file system on C:
The type of the file system is NTFS.

A disk check has been scheduled.
Windows will now check the disk.

CHKDSK is verifying files (stage 1 of 5)...
3043584 file records processed.

File verification completed.
39074 large file records processed.

0 bad file records processed.

2 EA records processed.

278 reparse records processed.

CHKDSK is verifying indexes (stage 2 of 5)...
3397294 index entries processed.

Index verification completed.
0 unindexed files scanned.

0 unindexed files recovered.

CHKDSK is verifying security descriptors (stage 3 of 5)...
3043584 file SDs/SIDs processed.

Cleaning up 131 unused index entries from index $SII of file 0x9.
Cleaning up 131 unused index entries from index $SDH of file 0x9.
Cleaning up 131 unused security descriptors.
Security descriptor verification completed.
176856 data files processed.

CHKDSK is verifying Usn Journal...
53585616 USN bytes processed.

Usn Journal verification completed.
CHKDSK is verifying file data (stage 4 of 5)...
3043568 files processed.

File data verification completed.
CHKDSK is verifying free space (stage 5 of 5)...
137183270 free clusters processed.

Free space verification is complete.
Windows has checked the file system and found no problems.

1953019903 KB total disk space.
1399725324 KB in 2824137 files.
1333648 KB in 176857 indexes.
0 KB in bad sectors.
3227847 KB in use by the system.
65536 KB occupied by the log file.
548733084 KB available on disk.

4096 bytes in each allocation unit.
488254975 total allocation units on disk.
137183271 allocation units available on disk.

Internal Info:
00 71 2e 00 a5 ca 2d 00 5d aa 3e 00 00 00 00 00 .q....-.].>.....
60 31 00 00 16 01 00 00 00 00 00 00 00 00 00 00 `1..............
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................

Windows has finished checking your disk.
Please wait while your computer restarts.

Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-Wininit" Guid="{206f6dea-d3c5-4d10-bc72-989f03c8b84b}" EventSourceName="Wininit" />
<EventID Qualifiers="16384">1001</EventID>
<Version>0</Version>
<Level>4</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2017-08-06T10:57:18.000000000Z" />
<EventRecordID>1103842</EventRecordID>
<Correlation />
<Execution ProcessID="0" ThreadID="0" />
<Channel>Application</Channel>
<Computer>M764-140-DQ64G3</Computer>
<Security />
</System>
<EventData>
<Data>

Checking file system on C:
The type of the file system is NTFS.

A disk check has been scheduled.
Windows will now check the disk.

CHKDSK is verifying files (stage 1 of 5)...
3043584 file records processed.

File verification completed.
39074 large file records processed.

0 bad file records processed.

2 EA records processed.

278 reparse records processed.

CHKDSK is verifying indexes (stage 2 of 5)...
3397294 index entries processed.

Index verification completed.
0 unindexed files scanned.

0 unindexed files recovered.

CHKDSK is verifying security descriptors (stage 3 of 5)...
3043584 file SDs/SIDs processed.

Cleaning up 131 unused index entries from index $SII of file 0x9.
Cleaning up 131 unused index entries from index $SDH of file 0x9.
Cleaning up 131 unused security descriptors.
Security descriptor verification completed.
176856 data files processed.

CHKDSK is verifying Usn Journal...
53585616 USN bytes processed.

Usn Journal verification completed.
CHKDSK is verifying file data (stage 4 of 5)...
3043568 files processed.

File data verification completed.
CHKDSK is verifying free space (stage 5 of 5)...
137183270 free clusters processed.

Free space verification is complete.
Windows has checked the file system and found no problems.

1953019903 KB total disk space.
1399725324 KB in 2824137 files.
1333648 KB in 176857 indexes.
0 KB in bad sectors.
3227847 KB in use by the system.
65536 KB occupied by the log file.
548733084 KB available on disk.

4096 bytes in each allocation unit.
488254975 total allocation units on disk.
137183271 allocation units available on disk.

Internal Info:
00 71 2e 00 a5 ca 2d 00 5d aa 3e 00 00 00 00 00 .q....-.].>.....
60 31 00 00 16 01 00 00 00 00 00 00 00 00 00 00 `1..............
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................

Windows has finished checking your disk.
Please wait while your computer restarts.
</Data>
</EventData>
</Event>
===
Log Name: Application
Source: Backupper Service
Date: 8/6/2017 6:57:36 AM
Event ID: 0
Task Category: None
Level: Information
Keywords: Classic
User: N/A
Computer: M764-140-DQ64G3
Description:
The description for Event ID 0 from source Backupper Service cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer.

If the event originated on another computer, the display information had to be saved with the event.

The following information was included with the event:

Backupper Service
Backupper Service in OnStart

Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Backupper Service" />
<EventID Qualifiers="0">0</EventID>
<Level>4</Level>
<Task>0</Task>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2017-08-06T10:57:36.000000000Z" />
<EventRecordID>1103843</EventRecordID>
<Channel>Application</Channel>
<Computer>M764-140-DQ64G3</Computer>
<Security />
</System>
<EventData>
<Data>Backupper Service</Data>
<Data>Backupper Service in OnStart</Data>
</EventData>
</Event>
===
Log Name: Application
Source: FrAgent
Date: 8/6/2017 6:57:41 AM
Event ID: 105
Task Category: None
Level: Information
Keywords: Classic
User: N/A
Computer: M764-140-DQ64G3
Description:
The service was started.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="FrAgent" />
<EventID Qualifiers="0">105</EventID>
<Level>4</Level>
<Task>0</Task>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2017-08-06T10:57:41.000000000Z" />
<EventRecordID>1103844</EventRecordID>
<Channel>Application</Channel>
<Computer>M764-140-DQ64G3</Computer>
<Security />
</System>
<EventData>
</EventData>
</Event>
===
Log Name: Application
Source: NetgearSwitchUSB
Date: 8/6/2017 6:57:42 AM
Event ID: 0
Task Category: None
Level: Information
Keywords: Classic
User: N/A
Computer: M764-140-DQ64G3
Description:
The description for Event ID 0 from source NetgearSwitchUSB cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer.

If the event originated on another computer, the display information had to be saved with the event.

The following information was included with the event:

NetgearSwitchUSB
MediatekSwitchUSB in OnStart

Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="NetgearSwitchUSB" />
<EventID Qualifiers="0">0</EventID>
<Level>4</Level>
<Task>0</Task>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2017-08-06T10:57:42.000000000Z" />
<EventRecordID>1103845</EventRecordID>
<Channel>Application</Channel>
<Computer>M764-140-DQ64G3</Computer>
<Security />
</System>
<EventData>
<Data>NetgearSwitchUSB</Data>
<Data>MediatekSwitchUSB in OnStart</Data>
</EventData>
</Event>
===
Log Name: Application
Source: Microsoft-Windows-Winlogon
Date: 8/6/2017 6:57:47 AM
Event ID: 4101
Task Category: None
Level: Information
Keywords: Classic
User: N/A
Computer: M764-140-DQ64G3
Description:
Windows license validated.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-Winlogon" Guid="{DBE9B383-7CF3-4331-91CC-A3CB16A3B538}" EventSourceName="Winlogon" />
<EventID Qualifiers="16384">4101</EventID>
<Version>0</Version>
<Level>4</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2017-08-06T10:57:47.000000000Z" />
<EventRecordID>1103846</EventRecordID>
<Correlation />
<Execution ProcessID="0" ThreadID="0" />
<Channel>Application</Channel>
<Computer>M764-140-DQ64G3</Computer>
<Security />
</System>
<EventData>
<Data>0x00000000</Data>
<Data>0x00000001</Data>
</EventData>
</Event>
===
Log Name: Application
Source: Microsoft-Windows-EventSystem
Date: 8/7/2017 2:33:23 AM
Event ID: 4625
Task Category: None
Level: Information
Keywords: Classic
User: N/A
Computer: M764-140-DQ64G3
Description:
The EventSystem sub system is suppressing duplicate event log entries for a duration of 86400 seconds. The suppression timeout can be controlled by a REG_DWORD value named SuppressDuplicateDuration under the following registry key: HKLM\Software\Microsoft\EventSystem\EventLog.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-EventSystem" Guid="{899daace-4868-4295-afcd-9eb8fb497561}" EventSourceName="EventSystem" />
<EventID Qualifiers="16384">4625</EventID>
<Version>0</Version>
<Level>4</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2017-08-07T06:33:23.000000000Z" />
<EventRecordID>1103847</EventRecordID>
<Correlation />
<Execution ProcessID="0" ThreadID="0" />
<Channel>Application</Channel>
<Computer>M764-140-DQ64G3</Computer>
<Security />
</System>
<EventData>
<Data Name="param1">86400</Data>
<Data Name="param2">SuppressDuplicateDuration</Data>
<Data Name="param3">Software\Microsoft\EventSystem\EventLog</Data>
</EventData>
</Event>
===
Log Name: Application
Source: Microsoft-Windows-User Profiles Service
Date: 8/7/2017 2:33:23 AM
Event ID: 1531
Task Category: None
Level: Information
Keywords:
User: SYSTEM
Computer: M764-140-DQ64G3
Description:
The User Profile Service has started successfully.

Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-User Profiles Service" Guid="{89B1E9F0-5AFF-44A6-9B44-0A07A7CE5845}" />
<EventID>1531</EventID>
<Version>0</Version>
<Level>4</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x8000000000000000</Keywords>
<TimeCreated SystemTime="2017-08-07T06:33:23.099017100Z" />
<EventRecordID>1103849</EventRecordID>
<Correlation />
<Execution ProcessID="1840" ThreadID="2136" />
<Channel>Application</Channel>
<Computer>M764-140-DQ64G3</Computer>
<Security UserID="S-1-5-18" />
</System>
<EventData>
</EventData>
</Event>
===
Log Name: Application
Source: Microsoft-Windows-Wininit
Date: 8/7/2017 2:33:24 AM
Event ID: 1001
Task Category: None
Level: Information
Keywords: Classic
User: N/A
Computer: M764-140-DQ64G3
Description:

Checking file system on C:
The type of the file system is NTFS.

A disk check has been scheduled.
Windows will now check the disk.

CHKDSK is verifying files (stage 1 of 5)...
3043584 file records processed.

File verification completed.
38469 large file records processed.

0 bad file records processed.

2 EA records processed.

278 reparse records processed.

CHKDSK is verifying indexes (stage 2 of 5)...
3397298 index entries processed.

Index verification completed.
0 unindexed files scanned.

0 unindexed files recovered.

CHKDSK is verifying security descriptors (stage 3 of 5)...
3043584 file SDs/SIDs processed.

Security descriptor verification completed.
176858 data files processed.

CHKDSK is verifying Usn Journal...
53758848 USN bytes processed.

Usn Journal verification completed.
CHKDSK is verifying file data (stage 4 of 5)...
3043568 files processed.

File data verification completed.
CHKDSK is verifying free space (stage 5 of 5)...
137186535 free clusters processed.

Free space verification is complete.
Windows has checked the file system and found no problems.

1953019903 KB total disk space.
1399711764 KB in 2824056 files.
1333652 KB in 176859 indexes.
0 KB in bad sectors.
3228347 KB in use by the system.
65536 KB occupied by the log file.
548746140 KB available on disk.

4096 bytes in each allocation unit.
488254975 total allocation units on disk.
137186535 allocation units available on disk.

Internal Info:
00 71 2e 00 56 ca 2d 00 0e aa 3e 00 00 00 00 00 .q..V.-...>.....
60 31 00 00 16 01 00 00 00 00 00 00 00 00 00 00 `1..............
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................

Windows has finished checking your disk.
Please wait while your computer restarts.

Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-Wininit" Guid="{206f6dea-d3c5-4d10-bc72-989f03c8b84b}" EventSourceName="Wininit" />
<EventID Qualifiers="16384">1001</EventID>
<Version>0</Version>
<Level>4</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2017-08-07T06:33:24.000000000Z" />
<EventRecordID>1103848</EventRecordID>
<Correlation />
<Execution ProcessID="0" ThreadID="0" />
<Channel>Application</Channel>
<Computer>M764-140-DQ64G3</Computer>
<Security />
</System>
<EventData>
<Data>

Checking file system on C:
The type of the file system is NTFS.

A disk check has been scheduled.
Windows will now check the disk.

CHKDSK is verifying files (stage 1 of 5)...
3043584 file records processed.

File verification completed.
38469 large file records processed.

0 bad file records processed.

2 EA records processed.

278 reparse records processed.

CHKDSK is verifying indexes (stage 2 of 5)...
3397298 index entries processed.

Index verification completed.
0 unindexed files scanned.

0 unindexed files recovered.

CHKDSK is verifying security descriptors (stage 3 of 5)...
3043584 file SDs/SIDs processed.

Security descriptor verification completed.
176858 data files processed.

CHKDSK is verifying Usn Journal...
53758848 USN bytes processed.

Usn Journal verification completed.
CHKDSK is verifying file data (stage 4 of 5)...
3043568 files processed.

File data verification completed.
CHKDSK is verifying free space (stage 5 of 5)...
137186535 free clusters processed.

Free space verification is complete.
Windows has checked the file system and found no problems.

1953019903 KB total disk space.
1399711764 KB in 2824056 files.
1333652 KB in 176859 indexes.
0 KB in bad sectors.
3228347 KB in use by the system.
65536 KB occupied by the log file.
548746140 KB available on disk.

4096 bytes in each allocation unit.
488254975 total allocation units on disk.
137186535 allocation units available on disk.

Internal Info:
00 71 2e 00 56 ca 2d 00 0e aa 3e 00 00 00 00 00 .q..V.-...>.....
60 31 00 00 16 01 00 00 00 00 00 00 00 00 00 00 `1..............
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................

Windows has finished checking your disk.
Please wait while your computer restarts.
</Data>
</EventData>
</Event>
===
Log Name: Application
Source: Backupper Service
Date: 8/7/2017 2:33:44 AM
Event ID: 0
Task Category: None
Level: Information
Keywords: Classic
User: N/A
Computer: M764-140-DQ64G3
Description:
The description for Event ID 0 from source Backupper Service cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer.

If the event originated on another computer, the display information had to be saved with the event.

The following information was included with the event:

Backupper Service
Backupper Service in OnStart

Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Backupper Service" />
<EventID Qualifiers="0">0</EventID>
<Level>4</Level>
<Task>0</Task>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2017-08-07T06:33:44.000000000Z" />
<EventRecordID>1103850</EventRecordID>
<Channel>Application</Channel>
<Computer>M764-140-DQ64G3</Computer>
<Security />
</System>
<EventData>
<Data>Backupper Service</Data>
<Data>Backupper Service in OnStart</Data>
</EventData>
</Event>
===
Log Name: Application
Source: FrAgent
Date: 8/7/2017 2:33:48 AM
Event ID: 105
Task Category: None
Level: Information
Keywords: Classic
User: N/A
Computer: M764-140-DQ64G3
Description:
The service was started.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="FrAgent" />
<EventID Qualifiers="0">105</EventID>
<Level>4</Level>
<Task>0</Task>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2017-08-07T06:33:48.000000000Z" />
<EventRecordID>1103851</EventRecordID>
<Channel>Application</Channel>
<Computer>M764-140-DQ64G3</Computer>
<Security />
</System>
<EventData>
</EventData>
</Event>
===
Log Name: Application
Source: NetgearSwitchUSB
Date: 8/7/2017 2:33:50 AM
Event ID: 0
Task Category: None
Level: Information
Keywords: Classic
User: N/A
Computer: M764-140-DQ64G3
Description:
The description for Event ID 0 from source NetgearSwitchUSB cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer.

If the event originated on another computer, the display information had to be saved with the event.

The following information was included with the event:

NetgearSwitchUSB
MediatekSwitchUSB in OnStart

Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="NetgearSwitchUSB" />
<EventID Qualifiers="0">0</EventID>
<Level>4</Level>
<Task>0</Task>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2017-08-07T06:33:50.000000000Z" />
<EventRecordID>1103852</EventRecordID>
<Channel>Application</Channel>
<Computer>M764-140-DQ64G3</Computer>
<Security />
</System>
<EventData>
<Data>NetgearSwitchUSB</Data>
<Data>MediatekSwitchUSB in OnStart</Data>
</EventData>
</Event>
===

So, Boggin' the last event was at
8-7-2017 2:33:50 AM

So, when I looked at 930 there was the BSD.

BTW, AOMEI was already stopped here in safe mode.
And, I am about to delete it so I can reinstall fresh.
But, I will wait to hear from you.

How did it get corrupt, I wonder; how can I prevent this in the future.

I have no idea what the Netgear USB thing is other than I have a Netgear wireless plugged into my USB for communications; I can not use wired here as d-mark for fiber is on the other side of the building.

BTW, I wonder if there is any way to print this log out except screen by screen.

Should I run another Tweaking?

Thanks, again Boggin for all your help!

Boggin · « **Reply #9 on:** August 07, 2017, 02:13:22 pm »

Reinstalling AOMEI will probably be a good idea but in Programs and Features, when you right click on it do you get a Repair option ?

I don't know why it is snagging that Netgear if that is your wireless dongle.

Can you go to Device Manager/View/Show hidden devices and check for any yellow alerts - you may need to expand Network adapters and Non-Plug and Play Drivers.

I don't know if you can get a driver update for the dongle, but if you aren't getting any connectivity problems then I'd ignore that error.

BTW - Is AOMEI a paid for or free program ?

FreeCat · « **Reply #10 on:** August 07, 2017, 05:01:55 pm »

Thanks again Boggin for your assistance!

AOMEI was free but once I saw that it worked so well, I purchased a license.

Yellow on Devices: [after expanding every + sign]
Microsoft Teredo Tunneling Adapter > This device cannot start. (Code 10)
Apowersoft Audio Device - "unknown device"

BTW, AOMEI.

And, I am about to delete it so I can reinstall fresh.

Questions:

1. How did AOMEI get corrupt, I wonder; how can I prevent this in the future.

Wireless seems good. So as you said, I will not worry about that.

2. BTW, I wonder if there is any way to print this log out except screen by screen.

3. Should I run another Tweaking?

So, I am uninstalling AOMEI and rebooting.
I will then reinstall AOMEI and reboot again.

Keeping fingers crossed.

I will appreciate any suggestions.

FreeCat · « **Reply #11 on:** August 07, 2017, 05:33:13 pm »

Yes, I uninsulated AOMEI in Programs and Features.
There was no repair option.
But, I had to restart to complete the un-install process.
In doing so, I wanted to go to Safe Mode, but it went in starting normally (F8 did not work).
And came up with a new BSD --- very different.

It is attached.

FreeCat · « **Reply #12 on:** August 07, 2017, 05:57:45 pm »

HOWDY - SO THIS TIME i KEPT PRESSING THE f8 CONTINUALLY TO GET TO sAFE MODE after another BSD (attached) with a new message.

Am in a quandry, here.

FreeCat · « **Reply #13 on:** August 07, 2017, 08:35:24 pm »

But, I tried again. F8 to Safe Mode+. Now i am in Safe Mode.

Boggin · « **Reply #14 on:** August 08, 2017, 12:45:10 am »

I've seen different causes for that stop code so I'm going to contact another member who is more used to dealing with BSODs.

He'll give you instructions in how to upload the mini dump file.

Boggin · « **Reply #15 on:** August 08, 2017, 04:18:43 am »

While you are waiting for this other member to pick up your thread, can you download BlueScreenView and post its report.

This will give a brief description of its analysis of the mini dump files.

Scroll down to the bottom of the page and use the second download link.

http://www.nirsoft.net/utils/blue_screen_view.html

It will list all of your BSODs but it's the most recent one that will be of interest.

satrow · « **Reply #16 on:** August 08, 2017, 04:53:42 am »

Hi FreeCat.

We'll probably need a lot more data to figure this out, can you please follow these BSOD posting instructions as much as you can and attach the zipped folder(s) back here, please.

FreeCat · « **Reply #17 on:** August 08, 2017, 05:07:45 am »

OK, thanks Boggin'. I just saw these posts about BSD and have gathered the data re the BSOD posting instructions.

I can not see how to attach BSOD zip file to this post and here are answers to questions asked by the BSOD site:

BSOD zip file attached.
Here are the answer to the questions:
Howdy and thanks in advance for any help; I need this machineto work every day and have missed only Monday so far.

Major error occurred 8-4 overnight to 8-5.

I did a windows update and reboot was required and I rebooted so the update could finish overnight. In the morning was first BSOD.

Here are the answers to your questions:

This is Windows 7 Ultimate 64 bit running on a Del T7500 with 64GB of RAM using the W7 disk from Dell.

OS was not pre-installed as I had a software that took the C drive from my XP ro system and used that as a base to take the programs from XP and put them on this W7; I am not sure of all the details as the Dell OEM (no longer around) did all of this. This was done around 2009 when I bought the machine. The machine has performed pretty darned well over the years. Occasionally there were some problems (not any major ones), but never BSOD that stopped me cold. I would give you the details of these but I do not recall them too well and they were not big-deals as they were solved. OK, one was when I had to switch from wired internet to Wi-Fi. The Netgear USB dongle needed updating but could not connect after updating. Another was in attempting to change the RAID0 virtual C drive to a new drive, it took a whole weekend to boot the system; OK, that was a little bit of a big deal, but nothing like the present situation.

Hardware age 2009. OS7 running since then.

CPU is 16 processor AMD.
Video is two W7000 with four monitors each (Dell 2407P) for a total of eight monitors.

MotherBoard is Dell original with total added RAM of 64 GB.

Power supply is Dell and I believe it is 1150 or 1500 watts - hard to read).

Dell computers T7500 Desktop.

FreeCat · « **Reply #18 on:** August 08, 2017, 07:31:53 am »

OK BSOD file attached here.

Boggin · « **Reply #19 on:** August 08, 2017, 07:39:23 am »

I didn't get a notification for your previous post.

I don't have anything installed to read the dump files in that format so you'll have to wait for satrow to come back.

FreeCat · « **Reply #20 on:** August 08, 2017, 07:55:19 am »

OK, Bloggin, but the dump files I saw in the zip folder were just text files. But, with stuff I did not understand, but maybe you would.

Boggin · « **Reply #21 on:** August 08, 2017, 07:57:28 am »

I'll leave you with satrow on this but will monitor to see how you are getting on.

If he needs anymore info he'll let you know.

FreeCat · « **Reply #22 on:** August 08, 2017, 09:32:11 am »

On reading more it seems that first BSOD matched my machine; maybe one of the others.
This brings to mind Jim's comment which has a hotfix as a solution:

"That error may indicate a disk problem. Or.. an i/o issue with the controller.

https://support.microsoft.com/en-us/help/2521220/-0x0000001e-stop-error-when-you-perform-disk-i-o-intensive-operations"

But, I will wait for satrow.

satrow · « **Reply #23 on:** August 08, 2017, 10:11:42 am »

It's looking like Windows boot was interrupted whilst trying to run the newly updated file versions, probably by older or incompatible 3rd party drivers. Maybe your BitDefender interfering, perhaps the boot time defragger - there are several other potential suspects. The Windows driver affected appears to be Win32k.sys, the kernel driver for the graphics subsystem.

MS debug output snippet showing hardware/graphics faulting in the 8 dump files:

Code: [Select]

BugCheck 1E, {ffffffffc000001d, fffff800052ec35f, 0, fffffa8071d99a00}
Probably caused by : hardware ( nt!MmUnlockPages+22f )
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
BugCheck 3B, {c0000005, fffff9600015e775, fffff8800832c1a0, 0}
Probably caused by : win32k.sys ( win32k!ValidateHwnd+65 )
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
BugCheck 50, {ffffffffffffff83, 1, fffff8000529c363, 0}
Probably caused by : hardware ( nt! ?? ::FNODOBFM::`string'+3bdaf )
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
BugCheck 1E, {ffffffffc000001d, fffff800042dc35f, 0, fffffa8073f88000}
Probably caused by : hardware ( nt!MmUnlockPages+22f )
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
BugCheck 1E, {ffffffffc000001d, fffff800042ac35f, 0, fffffa80733c9000}
Probably caused by : hardware ( nt!MmUnlockPages+22f )
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
BugCheck 3B, {c0000005, fffff9600017e775, fffff880085c41a0, 0}
Probably caused by : win32k.sys ( win32k!ValidateHwnd+65 )
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
BugCheck 3B, {c0000005, fffff9600014ed90, fffff8800a276fb0, 0}
Probably caused by : win32k.sys ( win32k!HMValidateHandleNoSecure+10 )
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
BugCheck 1E, {ffffffffc000001d, fffff800042ac35f, 0, fffffa80781c5000}
Probably caused by : hardware ( nt!MmUnlockPages+22f )
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``

I'd say *something* is preventing Win32k.sys from loading the hardware drivers for the graphics cards; Win32k.sys 22/06/2017 is the newest driver loaded, the oldest is BASFND.sys from 25/04/2003!

For the best chance of keeping an older OS running, esp. on a relatively complex workstation like yours, you need to ensure that 3rd party drivers starting at Boot are kept to a minimum - get the latest versions you can, any 3rd party driver that's older than the latest Service Pack (November 2010) needs to be uninstalled or updated. Set 2011 as your target oldest date for any 3rd party drivers, newer is likely to be better.

The driver supplied with DaemonTools (amongst others), sptd.sys, is a known bad driver, often causing BSODs on W7, use the DT uninstaller and then use one of the methods here to disable/uninstall the driver. Do you really need things like an active Boot time defragger?

For reference, list of 3rd party drivers by date plus pointers for further details:

Code: [Select]

**************************Tue Aug  8 01:28:50.700 2017 (UTC + 1:00)**************************
BASFND.sys                 Fri Apr 25 00:17:12 2003 (3EA87078)
lmimirr.sys                Tue Apr 10 23:32:45 2007 (461C108D)
teamviewervpn.sys          Thu Dec 13 09:22:09 2007 (4760F9C1)
ckldrv.sys                 Mon Mar 17 16:46:29 2008 (47DEA065)
LMIRfsDriver.sys           Mon Jul 14 17:26:56 2008 (487B7E50)
inpoutx64.sys              Sat Oct 18 00:01:16 2008 (48F9193C)
b57nd60a.sys               Sun Apr 26 12:14:55 2009 (49F4422F)
vrvd5.sys                  Mon Sep  7 19:41:24 2009 (4AA553D4)
lsi_sas.sys                Thu Oct  1 16:04:35 2009 (4AC4C503)
npf.sys                    Tue Oct 20 19:00:19 2009 (4ADDFAB3)
ISODrv64.sys               Fri Jan 29 03:39:02 2010 (4B625856)
GSVDRIVE.sys               Fri Dec 10 06:07:07 2010 (4D01C38B)
mcdevice.sys               Thu May 19 08:09:59 2011 (4DD4C247)
FSPFltd2.sys               Fri Jun  3 15:59:38 2011 (4DE8F6DA)
StarPortLite.sys           Wed Oct 19 11:54:09 2011 (4E9EAC51)
vasdDev.sys                Mon Mar 19 07:11:16 2012 (4F66DC14)
bdvedisk.sys               Tue Apr 17 12:34:26 2012 (4F8D5542)
WinisoCDBus.sys            Tue May  8 10:57:47 2012 (4FA8EE1B)
scrcamhrdrv_x64.sys        Wed May  9 14:48:54 2012 (4FAA75C6)
tbhsd.sys                  Tue Oct  9 23:01:42 2012 (50749EC6)
bdfwfpf.sys                Mon Oct 29 12:23:28 2012 (508E7540)
leawo_vad.sys              Tue May 21 08:20:07 2013 (519B2027)
RrNetCapFilterDriver.sys   Fri Nov  1 15:51:24 2013 (5273CDFC)
BootDefragDriver.sys       Mon Nov 11 03:01:36 2013 (52804890)
hotcore3.sys               Mon Dec 16 15:56:37 2013 (52AF22B5)
UimFIO.SYS                 Mon Dec 16 16:03:22 2013 (52AF244A)
UimBus.sys                 Mon Dec 16 16:03:26 2013 (52AF244E)
uim_im.sys                 Mon Dec 16 16:03:46 2013 (52AF2462)
uim_devim.sys              Mon Dec 16 16:03:57 2013 (52AF246D)
clwvd.sys                  Tue Jan 28 03:58:25 2014 (52E72AE1)
Sleen1864.sys              Tue Jan 28 12:54:11 2014 (52E7A873)
HD-Hypervisor-amd64.sys    Thu May  1 08:28:08 2014 (5361F788)
wav_mixer.sys              Fri May  9 07:58:59 2014 (536C7CB3)
eudskacs.sys               Wed Aug 13 17:43:54 2014 (53EB95CA)
eubakup.sys                Wed Aug 13 17:44:00 2014 (53EB95D0)
EUBKMON.sys                Wed Aug 13 17:44:22 2014 (53EB95E6)
EuFdDisk.sys               Wed Aug 13 17:44:27 2014 (53EB95EB)
AntiLog64.sys              Thu Nov  6 10:22:02 2014 (545B4BCA)
sptd.sys                   Thu Dec 11 14:52:44 2014 (5489AFBC)
bdfndisf6.sys              Mon Dec 15 15:39:07 2014 (548F009B)
ElbyCDIO.sys               Wed Dec 17 23:30:51 2014 (5492122B)
mse.sys                    Fri Jan  2 15:49:21 2015 (54A6BE01)
GUSBootStartup.sys         Thu Apr 23 03:01:12 2015 (55385268)
cbfs5.sys                  Fri Apr 24 21:41:26 2015 (553AAA76)
vpnpbus.sys                Fri Apr 24 21:42:22 2015 (553AAAAE)
gzflt.sys                  Wed Apr 29 12:32:17 2015 (5540C141)
trufos.sys                 Mon May 11 09:26:27 2015 (555067B3)
avchv.sys                  Tue May 12 13:14:18 2015 (5551EE9A)
diskpt.sys                 Mon Jul 27 13:02:36 2015 (55B61DDC)
vDisk.sys                  Mon Aug 17 04:20:15 2015 (55D152EF)
diskbckp.sys               Mon Aug 17 04:20:17 2015 (55D152F1)
AtihdW76.sys               Wed Mar 30 06:00:37 2016 (56FB5D75)
atikmpag.sys               Sun Apr 17 02:50:25 2016 (5712EBE1)
atikmdag.sys               Sun Apr 17 03:57:02 2016 (5712FB7E)
tap0901.sys                Thu Apr 21 10:10:05 2016 (571898ED)
avc3.sys                   Wed Jun 22 18:34:09 2016 (576ACC11)
A6210.sys                  Thu Sep 15 13:14:21 2016 (57DA909D)

FreeCat · « **Reply #24 on:** August 08, 2017, 11:48:59 am »

Howdy satrow,

Thanks for all your thoughts.

BTW, what is the DRT?

Re: BASFND - Since I am using Netgear wireless, is this necessary? I spend just 30 minutes trying to login to Broadcom and their PW system is IMPOSSIBLE! Is there some simplier way to get this driver.

Re: Bitdefender. About two years ago, one of my data feeds was being cut off by Bitdefender. I tried to contact Bitdefender about this but could get no answer or fix from them. So, I attempted to un-install bitdefender but could never get it completely off. It always comes up with some message to update it or whatever. So, maybe telling me how to complete get it off my machine might be a good things here. BTW, which anti-virus would you suggest for best and total protection?

Re: Older operating system. I do not use the virtual capabilities of W7 Ultimate so I do not run any older operating systems at present.

Re: Boot time de-fragger. If I do not need this, I can delete it. But, I am not sure if it helps my system or not.

Re Graphics drivers. Originally I had Matrox cards in this machine, but they were very slow, etc. Then i put in NVIDA cards but could not drive all 8 monitors, I got the AMD W7000 in 2012 but AMD had very flaky support at that time for these cards and drivers would not work properly for a while. At the end of 2013, AMD released drivers that worked. To my knowledge I un-installed all other video drivers and I do not need any except the ones for the W7000. So,
it would be good, I think, to drop the W2k32sys driver. No? If that is a stupid idea and I should keep Win32k.sys driver, how to I get and install the latest?

At the rate I am going here to replace all of these, I will be here till Christmas. is there some site at which many drivers are located? Or some reliable tool that can get the latest for me?

BTW, when I get a new driver, do I just put it in the Windows folder somwhere or how to I put it on the system?

Thanks, again, for your work to help me.