SetupFailure stopcode (BSOD) upon updating from 23H2 to 24H2. What failed?

JLArranz · Dec 12, 2024

First off, should I hope it restarts on its own (it says "we'll restart for you") and tries to correct anything? The update attempt has lasted like 16 hours, maybe it takes 8 hours more to restart, or the only way out here is shutting down or rebooting?

I've got one multiboot USB flashdrive that works fine and can boot (all verified) to "Windows Recovery Disk" (this is the normal "Recovery disk" that Windows 10/11 can do w/o any expertise except finding where it's done in Settings) done after the update to 23H2 many months ago, Macrium Reflect v8.1 WinRE and Macrium Reflect v8.1 WinPE. I've got disk images, one done just before starting this update to 24H2 yesterday and others more ancient, all stored in a 2TB HDD USB disk permanently connected and in flashdrives, so recovering isn't a problem.

But I'd like to know what concretely is impeding the update to 24H2. In a previous attempt a week ago I think I destroyed relevant info when trying to get it. I was trying to follow this page:

Windows 10 upgrade resolution procedures - Windows Client

Discover general troubleshooting procedures for dealing with 0xC1900101, the generic rollback code thrown when something goes wrong during a Windows 10 upgrade.

learn.microsoft.com

...I downloaded and run SetupDiag ( SetupDiag ) and I could not find any additional subcode or trace besides 0xc1900101, either through SetupDiag or other means, but I suspect SetupDiag deleted it.

Does anyone have a "protocol", a "list" of items (like folders, files, registry keys,...) to rewiew and get additional info?

-----------------------------------------------------------

The miniPC is slow in general but stable, and efficient with updates (even fairly quick) until now. It started with Internet-autoinstallable W10 in fall 2021 and I updated it to W11 through Windows Update in winter that year. It's had one or two "main updates" up to 23H2 all through Windows Update and all successful. Up to date in everything before starting the 24H2 update process, offered through Windows update.

This is my 2nd/3rd attempt at installing 24H2, all through Windows Update. I tried it about one week ago (w/o the December LCU, this latter attempt has been done after the December LCU), but it failed nearly exactly the same way as this time:

After 13-15 hours downloading/installing while in Windows, 8 minutes preparing the computer with Windows offline, and some few minutes more in the 1st or 2nd booting screen with the blue Windows pic and the swirling little white bar below, it went to the same BSOD (one week ago I retried the update after rebooting but it failed with the error 0x8024a22a that doesn't exist in the net, although the error 0x8024a22d seems about corruption so I restored the Macrium Reflect partition and ended that attempt).

In this attempt, besides December LCU, I also updated Stardock Start 11 from v1 to v2 (I'm 99% sure now that v1 wasn't compatible with 24H2, but my attempt with v2.11 now has had the exact same outcome as before).

I'm using now a W10 desktop w/o problems or anything. Going to Resolving Blue Screen errors in Windows - Microsoft Support as advised by the blue screen (the QR code also directs there), directs me to the Spanish version of Resolving Blue Screen errors in Windows - Microsoft Support . I haven't seen anything relevant for this case.

-----------------------------------------------------------

The affected computer is a
- miniPC MeLE Quieter2Q with
- Celeron J4125
- 8GB DDR4 RAM
- 256GB eMMC
- several USB3 ports
- 2 HDMI ports (only one used)
- Ethernet port

(the disk has about 70 GB occupied, the rest is free, it's used only for Windows and it has the typical 4 UEFI/GPT partitions that I've never fiddled with)
(only keyboard, mouse and an external 2TB HDD connected to the USB ports now or during the update process)
(I don't have doubts about the HDD and it shouldn't be "in" the update process)

XxXxX · Dec 12, 2024

this is not of much help to you, sorry.
i had very similar issues when upgrading 2 AiO systems both systems are less then 2 years old.

no matter what i tried they wouldn't boot the only option i had was to do a clean install on both systems.
that worked both systems are now running fine with 24H2.

i dont think you are alone with this upgrade problem.
again i apologise for the lack of help. best of luck, Steve ..

zbook · Dec 12, 2024

Please run the V2 log collector > post a share link

BSOD - Posting Instructions

BSOD - Posting Instructions This will show you how to help provide needed information about your system and dump files. It will not contain any personal or sensitive information about you or your data. To get better help with your Windows BSOD issue, please read these instructions and follow...

www.elevenforum.com

JLArranz · Dec 12, 2024

zbook said:
Please run the V2 log collector > post a share link

BSOD - Posting Instructions

BSOD - Posting Instructions This will show you how to help provide needed information about your system and dump files. It will not contain any personal or sensitive information about you or your data. To get better help with your Windows BSOD issue, please read these instructions and follow...

www.elevenforum.com

Going to reboot from the bsod. It's in Spanish. How do I change it to English?

zbook · Dec 12, 2024

JLArranz said:
It's in Spanish. How do I change it to English?

One or more of these links may be useful:

Add, Remove, and Change Display Language in Windows 10

How to Add or Remove Language Packs and Change Display Language in Windows 10

www.tenforums.com

Change Display Language in Windows 10

How to Change Display Language in Windows 10

www.tenforums.com

JLArranz · Dec 12, 2024

Thanks. :)

MODERNO-(2024-12-13_00-16-16).zip

drive.google.com

zbook · Dec 12, 2024

1) Please post a link for the motherboard drivers:

Fanless Mini PC Rev GMLR1 1.10

2) Run Tuneup plus > post a share link

https://www.tenforums.com/attachments/bsod-crashes-debugging/360139d1645183596-batch-files-use-bsod-debugging-tuneup_plus_log.zip

Batch files for use in BSOD debugging - Windows 10 Help Forums

Information This thread is for use by the BSOD team to store batch files that can be used to collect additional data, fix settings or anything else that is useful in debugging BSOD problems in Windows 10. The way I see it working is the first

www.tenforums.com

Batch files for use in BSOD debugging - Windows 10 Help Forums

Information This thread is for use by the BSOD team to store batch files that can be used to collect additional data, fix settings or anything else that is useful in debugging BSOD problems in Windows 10. The way I see it working is the first

www.tenforums.com

3) List all installed non-Microsoft:
a) antivirus
b) firewall
c) drive encryption

4) Uninstall all zone alarm software using the applicable uninstall tool

Uninstall ZoneAlarm Extreme Security

Press the Windows key then type: uninstall. From the search results click on Add or remove programs. Scroll to the bottom of the Apps & features list and select ZoneAlarm Extreme Security....

support.zonealarm.com

Uninstall ZoneAlarm Free Firewall

Press the Windows key then type: uninstall. From the search results click on Add or remove programs. Scroll to the bottom of the Apps & features list and select ZoneAlarm Free Firewall. Th...

support.zonealarm.com

5) Make sure that defender is on

6) Create a new restore point:

Create System Restore Point in Windows 11

This tutorial will show you how to manually create a restore point in Windows 11. Turning on system protection for a drive allows System Restore to include the drive when restore points are created so you can undo undesired system changes by reverting to a previous point in time. System...

www.elevenforum.com

JLArranz · Dec 12, 2024

It's a bit too late here, but I'll give a "draft" reply.

0) I prefer 23H2 + ZA over 24H2, but I had conceived the plan of detaching my external 2TB disk (that has many ancient files that W11 Defender would delete for being ancient and executable, I have Win7 and 10 with the same files), uninstalling ZA, updating to 24H2, reinstalling ZA and reconnecting the disk. Isn't ZoneAlarm Extreme Security NextGen compatible with 24H2?

1) I have never needed or used such drivers, but I believe you mean this:

Drivers - Google Drive

drive.google.com

(taken from Drivers , the link above is the first "link2")

2) I haven't found anything about the file produced by this bat.

3) Only ZoneAlarm Extreme Security NextGen, unless there're traces of ZoneAlarm Extreme Security "legacy". Basically they're different softwares, although NextGen can be installed over "legacy" iirc (I don't recall having uninstalled "legacy" manually when installing "NextGen", and I've got 2 Win7s 1 Win10 and this Win11 that have gone from "legacy" to NextGen, although I've uninstalled "legacy" manually 2 or 3 times in the past to fix issues/corruption in the app).

4) Besides "0)" and given the possibly corrupt outcome of my previous 24H2 attempt (fixed with a disk image restore), I'll restore the disk image before either cancelling 24H2 or retrying it, this install is only to diagnosing, but I'm starting to fear a lot about 24H2.

5) It would be consistent with the plan of shipping ZA for other route to avoid the Police control to the cars.

zbook · Dec 12, 2024

1) Please post a link for the motherboard website

2) Check for a more up to date non-beta BIOS

BIOS Version/Date American Megatrends Inc. 10.1, 7/24/2021

3) Zone alarm caused BSOD Sun Sep 29 02:34:04.775 2024 (UTC - 6:00)

and there are many errors in the event viewer > completely uninstall zone alarm software > plan to reinstall after a successful update

Code:

ZoneAlarm                                                          4.3.283.19962  Check Point Software                                           
ZoneAlarm Antivirus                                                15.8.200.19118 Check Point Software Technologies Ltd.      20220628           
ZoneAlarm Firewall                                                 15.8.200.19118 Check Point Software Technologies Ltd.      20220628           
ZoneAlarm Security                                                 15.8.200.19118 Check Point Software Technologies Ltd.      20220628           
ZoneAlarm Update Helper                                            1.3.99.0       Check Point Software Ltd.                   20240919

4) After uninstalling zone alarm > make sure defender is on > run Tuneup plus > post a share link

https://www.tenforums.com/attachments/bsod-crashes-debugging/360139d1645183596-batch-files-use-bsod-debugging-tuneup_plus_log.zip

5) Run Sea Tools Long generic test (all drives) > post images or share links

https://www.seagate.com/content/dam...ds/seatools/_shared/downloads/100869623_B.pdf

https://www.seagate.com/content/dam...shared/downloads/SeaToolsWindowsInstaller.exe

6) Run HD Tune (all drives) (run an old version so that it produces results for the whole drive)
HD Tune website
a) Health
b) Full error scan

7) Open administrative command prompt and copy and paste:

chkdsk /b /v

Run these chkdsk switches on all drives using the syntax: chkdsk /b /v C: or chkdsk /b /v D: or chkdsk /b /v E: etc.

Make sure that the windows drive runs overnight while sleeping.

C:\WINDOWS\system32>chkdsk /b /v
The type of the file system is NTFS.
Cannot lock current drive.
Chkdsk cannot run because the volume is in use by another
process. Would you like to schedule this volume to be
checked the next time the system restarts? (Y/N)

Type: Y

Reboot as needed.

8) After completing all chkdsk /b /v run:

https://www.tenforums.com/attachmen...-files-use-bsod-debugging-chkdskfromevent.bat

Batch files for use in BSOD debugging - Windows 10 Help Forums

Batch files for use in BSOD debugging - Windows 10 Help Forums

Code:

Event[323]
  Log Name: System
  Source: Ntfs
  Date: 2024-11-14T20:26:15.9080000Z
  Event ID: 55
  Task: N/A
  Level: Error
  Opcode: Info

  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: Moderno
  Description:
A corruption was discovered in the file system structure on volume C:.

Se desconoce la naturaleza exacta del da±o. Las estructuras del sistema de archivos deberßn examinarse en lφnea.

Code:

Event[5249]
  Log Name: System
  Source: Ntfs
  Date: 2024-12-11T22:54:50.8210000Z
  Event ID: 55
  Task: N/A
  Level: Error
  Opcode: Info

  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: Moderno
  Description:
A corruption was discovered in the file system structure on volume C:.

Se desconoce la naturaleza exacta del da±o. Las estructuras del sistema de archivos deberßn examinarse en lφnea.

Code:

Event[5838]
  Log Name: System
  Source: Microsoft-Windows-WindowsUpdateClient
  Date: 2024-12-12T23:25:27.2640000Z
  Event ID: 20
  Task: Windows Update Agent
  Level: Error s
  Opcode: Installation
  Keyword: Installation,Failure,
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: Moderno
  Description:
Installation Failure: Windows failed to install the following update with error 0xC1900101: Windows 11, version 24H2.

Code:

Windows ha encontrado problemas que deben solucionarse sin conexi≤n.

Code:

Windows has encountered problems that need to be fixed offline.

Code:

------------------------
Disk & DVD/CD-ROM Drives
------------------------
      Drive: C:
 Free Space: 153.0 GB
Total Space: 234.9 GB
File System: NTFS
      Model: Generic A3A444

      Drive: D:
 Free Space: 12.5 GB
Total Space: 65.1 GB
File System: NTFS
      Model: TOSHIBA EXTERNAL_USB USB Device

      Drive: E:
 Free Space: 175.1 GB
Total Space: 1842.6 GB
File System: NTFS
      Model: TOSHIBA EXTERNAL_USB USB Device

JLArranz · Dec 13, 2024

Sorry for the long post but

I'll rest a bit from this (so there's time), I won't do anything with my Win11 miniPC until Sunday or Monday at least, it's off now.

The post 24H2-failure Windows installation has severe visible problems, would it be apt for diagnosing? I mean, for its own blame or for 24H2's blame or even for my own blame, it's developed issues that it didn't have before the attempt (where I can return quidkly with Macrium). Is it still worth to run Tuneup Plus in its current state? (the previous tool left a file in the desktop, does this one do the same?)

The Windows Update window wasn't working (either called from Settings or from the systray 24H2-"try me" WU-icon), a small swirling wait circle in the upper part replaces the content (the rest of the settings windows seemed fine), and the CPU was over 90% all the time (*). This might be fixed with a reboot or not, but I shut it down and went to sleep. Neither the WU window nor Windows did have any visible problem in my attempt a week ago, it was in WU where I saw the 0xc1900901 error then; instead I believed to detect "invisible problems" for the strange and relatively quick (maybe 5 hours) 0x8024a22a error upon re-attempting 24H2 then.

(*) (HwInfo systray) The 65-70ºC temperatures couldn't lie less (with the room at about 16ºC), though it's irritating that there're always hidden things running when this happens. Task manager was seeing about 95% CPU use, and ZA processes were working but maybe 40% among the two. WU is an usual culprit of these "CPU stresses" (in any computer I mean). (This fanless computer has an efficient throttling system, at high enough loads -and normal or high room temps- the CPU runs steadily at 70-75ºC).

Hence I'm leaning to do the next boot from my bootable flashdrive with Macrium Reflect and restoring the previous image first, unless there're worth proofs possible yet.

-----------------------------------

I suppose it doesn't matter, but there was another difference between the attempt done past week and this attempt: I used Wifi (variable between 433 and 866 Mbps) in the former and Ethernet (1 Gbps) in the latter (I should buy a switch to have my 4 computers plus the printer permanently Ethernet'ed). The fiber has 300 Mbps.

-----------------------------------

Computer's motherboard: it's a miniPC, it has an ad-hoc board to hold the Celeron J4125 (that has the gfx, doesn't it have the chipset too?), the soldered RAM and eMMC, helper/peripheral chips (like the Everest ES8336 audio), and the USB HDMI etc connectors. I purchased this MeLE Quieter 2Q Fanless Mini PC Intel Gemini Lake J4125 Win 11 Pro Dual 4K HDMI Small Computer Portable Micro PC, LPDDR4, Windows11, Dual HDMI 4K, 2.4G/5G Wi-Fi, Gigabit Ethernet, BT 4.2, USB 3.0 * 4, SSD, VESA Mount in Amazon.es in 2021, I connected it to peripherals and the net, turned it on and it installed Windows 10 on its own (months/years afterwards I installed the updates to superior OSs through Windows Update, always w/o hassles). In this "magic" way I had a full PC up and running in little time from receiving it, but I don't have access to the inners (well, I can open it and install an M2 disk, but there isn't an Asus, Gigabyte, MSI, Dell, HP etc motherboard involved).

-----------------------------------

Stability: I installed Macrium Reflect in 2021. The first and up to now only disk image restore has been a week ago for the failed 24H2 attempt then. It has had maybe 2-3 BSODs per year on average, w/o any very visible reason. Neither has had visible and permanent consequences, shut down reboot and all 100% fine again (the miniPC only has one button to turn it on/off, it doesn't have reset button or disk LED, the button is blue when on and red when off).

Lately (w/o relation to 24H2) I'm being notified of disk errors, maybe once per session or somewhat less. I haven't paid much attention to them but I believe they're in the C: drive. I consider it possible they're "false positives" or CPU/RAM/chipset/buses transient errors. The cause could also be simply the general slowness of the computer, for instance in a Thunderbird POP account it downloads 6 messages and says (not verbatim) "error in file permissions", retry and get the other 4 w/o problems). Not lately but this computer has had Explorer inconsistencies, like deleting a file or folder and showing it until quite a bit afterwards.

-----------------------------------

ZA Extreme Security NextGen has "things". In the first scan it found malware in the winsxs folder I believe (in the deepest inners of Windows for sure, one of those small files that exist by the millions or nearly), but I preferred the defective screw to no screw in the depths of the nuclear plant. I'm not sure if the exclusion exists yet.

I think/believe neither ZA antivirus nor Windows Defender has full control (the "security providers" window shows or has shown Defender as the antivirus).

The first day it was a nightmare in my data partition (the 65 GB one with 12 GB free, full of drivers, installers, etc from many ages) detecting virus (false positives or "new concepts" -PUPs, file reputation and such-, never detected under Win10 or 7 anyway) everywhere there and with repetitive detections (I mean like 20 files 15-25 times in a row each, seems that by Windows Defender until ZA managed to win in Tron and make the exception -introduced by me- prevail (*) ).

(*): if I've caught it well, ZA lets you exclude just a file, while with Windows Defender you can exclude viruses, so you either delete the file or exclude the virus/supposed virus that the file has in any file. Obviously the first approach is better for dealing with false positives.

There's a permanent consequence of this: everytime the computer is booted it detects pc-wizard_2014.2.13-setup.exe (one of the "victims" of the plague described above, never used or tried in a modern OS here) as infected or malware, although I have deleted it long ago trying to avoid this detection (it's in the "Events timeline" list of ZAES NextGen and the details end with "Status: Restored", although the file never more exists).

BUT, from all this cascade of bits, only the permanent "pc-wizard_2014.2.13-setup.exe issue" is clearly buggy. For a time I was sure that Windows Defender under Windows 11 would never yield the antivirus function to a 3rd party app.

zbook · Dec 13, 2024

Summary for posts #7 and #9:

1) Post a link for the motherboard website > for use as needed during the troubleshooting

2) Upgrade the BIOS to the most up to date non-beta BIOS

3) Run Tuneup plus (it can run multiple times as needed) > post a share link

4) Temporarily uninstall Zone Alarm using the applicable uninstall tool > improves likelihood of a successful windows upgrade > monitor for other causes of BSOD

5) Make sure that defender is on

6) Test the drive > there are multiple parameters and multiple types of tests > a drive can pass many tests and fail on another > the tests can run overnight while sleeping

7) The above steps are to troubleshoot the failure to upgrade Windows and BSOD
With Zone alarm uninstalled and drive testing other troubleshooting steps can be performed as needed.

8) Other threads can be opened as needed for other computer problems

JLArranz · Dec 16, 2024

I've restored the previous Macrium Reflect Windows disk image (this PC's internal eMMC drive called "Generic A3A444" in previous reports, that only has Windows, the typical default 4 UEFI/GPT partitions, I've never fiddled with this drive) so I'm now in the previous 23H2 and all is working fine. I've also done some housekeeping, downloaded the requested tools (*) and done a new MR Windows disk image.

This MeLE-Technology Enriches Life and pages inside is the only thing that exists about the "motherboard", the "BIOS" and the (inexistant) "BIOS updates". I found a user that had difficulties installing 23H2 (23H2) in a more modern model of this same brand, he seemed to have a defective unit with TPM problems and lack of updates, but the unit was working fine in everything else (I souldn't have this kind of problems as I've installed the December's LCU fine and the systray is offering the 24H2 update).

(*): I haven't done anything with ZA yet, my plan is detaching the Toshiba 2TB drive and uninstalling ZA. I haven't found anything "special" to uninstall ZA. Your link for the "legacy" version and another page in the ZA web I've found for "NextGen", both tell to just uninstall from Control Panel -> Programs and features. In my files I've got a special tool valid to "completely uninstall" the legacy versión, but I neither have stored nor have found in the web an equivalent for "NextGen". NextGen is a lot simpler, so I suppose "Programs and Features" is a valid method. Btw:

(translation:

Security providers
[...]

Antivirus
Microsoft Defender Antivirus
Microsoft Defender Antivirus has been enabled
ZoneAlarm NextGen
ZoneAlarm NextGen has been disabled

Firewall
Windows Firewall
Windows Firewall has been disabled
ZoneAlarm NextGen Firewall
ZoneAlarm NextGen Firewall has been enabled

Web Protection
No providers
)

Difficulties with the drives tests:

- Seatools doesn't see the Windows internal disk.

- HD Tune Pro 5.75 (trial versión that can "process" the whole drive) sees it, but I suspect it's stuck:

The progress bar at the bottom counts down 5:00 (five minutes) and starts over and over again. Is this normal? I guess this drive just doesn't have SMART. Should I be patient here????

As for the big 2TB drive I lean to skipping its tests, because I plan to try 24H2 w/o it. If I succeed and have reconnection dificulties, I have time to open a thread about it for instance.

Megahertz · Dec 16, 2024

I agree that you have to uninstall ZA

How did you trigger the update? By WU or running setup.exe of a 24h2 mounted iso file?

JLArranz · Dec 16, 2024

Megahertz said:
I agree that you have to uninstall ZA

How did you trigger the update? By WU or running setup.exe of a 24h2 mounted iso file?

WU, there's even an icon in the systray.

zbook · Dec 16, 2024

Post image restoration: (Make sure that Zone Alarm has been uninstalled and defender is on)

1) Run Tuneup plus > post a share link

2) Post a new V2 share link with English as the default language.

3) See if drives are detected with each:

a) Legacy:

SeaTools Legacy Tools | Seagate US

b) Bootable

https://www.seagate.com/content/dam/seagate/migrated-assets/old-support-files/seatools/USBbootSetup-SeaToolsBootable.zip

SeaTools | Seagate US

SeaTools - Quick diagnostic tool that checks the health of your drive.

www.seagate.com

4) See if drives are detected with GSmart Control (all drives)

GSmartControl

Download GSmartControl for free. Hard disk drive and SSD health inspection tool. GSmartControl is a graphical user interface for smartctl. It allows you to inspect the hard disk and solid-state drive SMART data to determine its health, as well as run various tests on it.

sourceforge.net

GSmartControl · Hard disk drive and SSD health inspection tool

GSmartControl Hard disk drive and SSD health inspection tool GSmartControl is a graphical user interface for smartctl (from smartmontools package),...

gsmartcontrol.shaduri.dev

Click Self-Tests tab > Test type > Extended Self-test > Execute (run overnight)

Copy and paste the results > post a share link

Also, go in the Attributes tab: for any entries highlighted in red or pink, take a screenshot of the GSmartControl window > post a share link

The drive testing software may not be designed to identify or test: Generic A3A444

Is this emmc?

From the motherboard website:

Code:

What hard drive is emmc?

eMMC is a kind of hard disk. 

eMMC (Embedded Multi Media Card) is a standard specification for embedded memory established by the MMC Association, 

mainly for products such as mobile phones or tablets.

JLArranz · Dec 16, 2024

The drive testing software may not be designed to identify or test: Generic A3A444

Is this emmc?

Sorry, I hadn't seen this question. I'm downloading the stuff and copying it to my Toshiba 2TB drive (that will be detached before uninstalling ZA to avoid the action of Microsoft Defender over some files) and to an empty pendrive (where I've also copied the other files/installers/etc related to this, to have an alternative while doing this operation; "D:\" was even my default path for downloads, what I've changed).

If there is an ultra-precise definition of what is an "emmc" and what is not an "emmc", I don't know it. I fear communicating that the "Generic A3A444" has tangible characteristics that it doesn't have, or communicating that it hasn't tangible characteristics that it actually has. The above doesn't mean that I know all about it.

What I know:

- It's made of silicon technology (so called "NAND" technology I believe).
- It's soldered to the mainboard.
(I cannot detach or replace it, but the computer has an inner M2 socket that admits some SSDs, and in the BIOS you can tell to boot from it instead. This socket is empty and I'm not planning a new drive just now. People that have attached a high quality drive say it's quite faster so.)
- It's like an SSD (high-ish MB/s in sequential reads, a lot lower access time than HDDs).
- It's not meant to be as good as an average SSD. It's purpose is to provide functional storage at a low price. I believe it does about 200 MB/s in linear reads (any semi-good SATA SSD does about 500 MB/s, except in sustained writes and of course random access patterns).

JLArranz · Dec 16, 2024

I've uninstalled ZA (it didn't prompt to reboot, but I rebooted manually), checked that Defender (Antivirus and Firewall) is on in Security providers,

run Tuneup_Plus_Log (result uploaded here) and V2_log_collector ( MODERNO-(2024-12-17_01-31-49).zip ) w/o hassles,

SeaTools for Windows v5 and HDTune\Health did the same as posted above,

SeaTools for Windows v1.4.0.7 caused a BSOD (DRV_IRQL_NOT_GREATER_OR_EQUAL iirc) and the systray icon to update to 24H2 did not appear until I uninstalled it (maybe this was coincidental, but the system is faster and more regular at boot w/o ZA), I also uninstalled SeaTools for Windows v5.

GSmartControl stated clearly that the "Generic A3A444" doesn't have SMART.

I got a clean scan with HDTune\Error_Scan, and I also post the speedmap (it surprised me a bit that being an "SSD" or similar it was much faster in several zones).

The bootable version of SeaTools v5 behaved exactly as the Windows versión and it didn't see the disk either.

zbook · Dec 17, 2024

JLArranz said:
3) Only ZoneAlarm Extreme Security NextGen, unless there're traces of ZoneAlarm Extreme Security "legacy". Basically they're different softwares, although NextGen can be installed over "legacy" iirc (I don't recall having uninstalled "legacy" manually when installing "NextGen", and I've got 2 Win7s 1 Win10 and this Win11 that have gone from "legacy" to NextGen, although I've uninstalled "legacy" manually 2 or 3 times in the past to fix issues/corruption in the app).

The computer restored Macrium image has multiple Kaspersky AV drivers.

1) Please run the Kaspersky uninstall tool:

Removal tool for Kaspersky applications on Windows (kavremover)

Overview of settings and features available in a Kaspersky application and guides on how to use them.

support.kaspersky.com

How to remove a Kaspersky application

Overview of settings and features available in a Kaspersky application and guides on how to use them.

support.kaspersky.com

2) Run the Trend Micro uninstall tool again

3) Temporarily uninstall check point software

4) Run Revo uninstaller for any remaining Kaspersky, Trend Micro, and check point software

Uninstall Software, Remove programs easily - Revo Uninstaller Pro

Clean removal of any program from your PC. Uninstall and remove programs and software in Windows with Revo Uninstaller Pro easily!

www.revouninstaller.com

5) Create a new restore point

6) Continue with the earlier drive tests (chkdsk /b /v) (include all drives)

7) After running chkdsk /b /v run the chkdsk script (post #9, step #8)

8) After completing all of the above run HD Sentinel: > post images or share links
a) Overview
b) Temperature
c) SMART

Code:

klbackupdisk klbackupdisk.sys Fri Apr  9 09:40:49 2021 (60706771)
klbackupflt klbackupflt.sys Fri Apr  9 09:40:36 2021 (60706764)
klflt    klflt.sys    Fri Apr  9 09:41:21 2021 (60706791)
klgse    klgse.sys    Wed Apr 14 05:15:34 2021 (6076C0C6)
klhk     klhk.sys     Wed Apr 21 02:33:41 2021 (607FD555)
klifsdk  klifsdk.sys  Thu Apr 15 22:31:53 2021 (60790529)
klupd_klifsdk_arkmon klupd_klifsdk_arkmon.sys Tue Sep 19 04:21:30 2023 (6509681A)
klupd_klifsdk_klbg klupd_klifsdk_klbg.sys Tue Sep 19 05:49:44 2023 (65097CC8)
klwtp    klwtp.sys    ***** Invalid (A6ACA522)

Code:

Event[4969]
  Log Name: System
  Source: Microsoft-Windows-Ntfs
  Date: 2024-12-16T16:08:25.7780000Z
  Event ID: 98
  Task: N/A
  Level: Warning
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: Moderno
  Description:
Volume C: (\Device\HarddiskVolume3) requires an Online Scan.  An Online Scan will automatically run as part of the next scheduled maintenance task.  Alternatively you may run "CHKDSK /SCAN" locally via the command line, or run "REPAIR-VOLUME <drive:> -SCAN" locally or remotely via PowerShell.

Event[4970]
  Log Name: System
  Source: Ntfs
  Date: 2024-12-16T16:08:25.7830000Z
  Event ID: 55
  Task: N/A
  Level: Error
  Opcode: Info

  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: Moderno
  Description:
A corruption was discovered in the file system structure on volume C:.

Se desconoce la naturaleza exacta del da±o. Las estructuras del sistema de archivos deberßn examinarse en lφnea.

Code:

Event[4397]
  Log Name: System
  Source: Microsoft-Windows-Ntfs
  Date: 2024-12-11T22:54:50.8200000Z
  Event ID: 98
  Task: N/A
  Level: Warning
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: Moderno
  Description:
Volume C: (\Device\HarddiskVolume3) requires an Online Scan.  An Online Scan will automatically run as part of the next scheduled maintenance task.  Alternatively you may run "CHKDSK /SCAN" locally via the command line, or run "REPAIR-VOLUME <drive:> -SCAN" locally or remotely via PowerShell.

Event[4398]
  Log Name: System
  Source: Ntfs
  Date: 2024-12-11T22:54:50.8210000Z
  Event ID: 55
  Task: N/A
  Level: Error
  Opcode: Info

  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: Moderno
  Description:
A corruption was discovered in the file system structure on volume C:.

Se desconoce la naturaleza exacta del da±o. Las estructuras del sistema de archivos deberßn examinarse en lφnea.

Code:

Event[3227]
  Log Name: System
  Source: Microsoft-Windows-Ntfs
  Date: 2024-12-09T02:48:29.1690000Z
  Event ID: 98
  Task: N/A
  Level: Warning
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: Moderno
  Description:
Volume C: (\Device\HarddiskVolume3) requires an Online Scan.  An Online Scan will automatically run as part of the next scheduled maintenance task.  Alternatively you may run "CHKDSK /SCAN" locally via the command line, or run "REPAIR-VOLUME <drive:> -SCAN" locally or remotely via PowerShell.

Event[3228]
  Log Name: System
  Source: Ntfs
  Date: 2024-12-09T02:48:29.1710000Z
  Event ID: 55
  Task: N/A
  Level: Error
  Opcode: Info

  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: Moderno
  Description:
A corruption was discovered in the file system structure on volume C:.

Se desconoce la naturaleza exacta del da±o. Las estructuras del sistema de archivos deberßn examinarse en lφnea.

Code:

Event[2046]
  Log Name: System
  Source: Microsoft-Windows-Ntfs
  Date: 2024-11-29T20:57:14.1170000Z
  Event ID: 98
  Task: N/A
  Level: Warning
  Opcode: Info  g
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: Moderno
  Description:
Volume C: (\Device\HarddiskVolume3) requires an Online Scan.  An Online Scan will automatically run as part of the next scheduled maintenance task.  Alternatively you may run "CHKDSK /SCAN" locally via the command line, or run "REPAIR-VOLUME <drive:> -SCAN" locally or remotely via PowerShell.

Event[2047]
  Log Name: System
  Source: Ntfs
  Date: 2024-11-29T20:57:14.1180000Z
  Event ID: 55
  Task: N/A
  Level: Error
  Opcode: Info

  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: Moderno
  Description:
A corruption was discovered in the file system structure on volume C:.

Se desconoce la naturaleza exacta del da±o. Las estructuras del sistema de archivos deberßn examinarse en lφnea.

Code:

------------------------
Disk & DVD/CD-ROM Drives
------------------------
      Drive: C:
 Free Space: 153.0 GB
Total Space: 234.9 GB
File System: NTFS
      Model: Generic A3A444

      Drive: D:
 Free Space: 12.5 GB
Total Space: 65.1 GB
File System: NTFS
      Model: TOSHIBA EXTERNAL_USB USB Device

      Drive: E:
 Free Space: 175.1 GB
Total Space: 1842.6 GB
File System: NTFS
      Model: TOSHIBA EXTERNAL_USB USB Device

JLArranz · Dec 19, 2024

I've gone to the computer's BIOS in search for a SMART on/off option just in case, but I haven't found any (I had never "processed" this BIOS seriously b/c it's full of low level things and acronyms that I don't understand, and the computer works fine).

I've done two minor changes: I've disabled "Wake on LAN" (not necessary here) and "XHCI Hand-off" (more adequate for a modern OS).

I've also found info about the above "eMMC question": there're two settings (that I haven't touched) under Chipset -> South Cluster Configuration -> SCC Configuration :

SCC eMMC Support (028:F0) -> Enable
eMMC Max Speed -> HS400

--------------------------------------

I know well that ZA "legacy" was based in the Kaspersky engine. I've uninstalled every of the kavremvr.exe's 142 products, some twice or more.

At first I tried to "guess" which one(s) are more likely to uninstall the leftovers, and I uninstalled 2 or 3 rebooting after each one as requested, but finally I did a "brute force" approach w/o rebooting in the middle with 141 products, rebooted and did a Macrium image, then I uninstalled "Endpoint Sensor" what was requiring a clean boot.

With each product, the tool seems to hunt for the items of an own database (it takes variable time depending on the product) and says (not verbatim) "uninstallation succeeded" regardless of if it has found anything or not, it doesn't display a final list or progress messages, only a progress bar. It leaves logs though (I could zip them all and share a link, but they're over 300 MB, they're badly named and I wouldn't see the point).

"Trend Micro" and "Check Point" are dead ends.

--------------------------------------

Revo Uninstaller Pro Portable (that I've purchased hoping it can help me with proper uninstall of ZA* and reinstall of ZA NextGen in my other non-W11 systems aiming for better ZA performance, that is poor although they don't have any concrete problem or update need) finds 3 programs and 2 logs as shown in the pics. Somewhere in the process Revo indicated they correspond to v15.8.200.19118, the latter ZA "legacy" version for Windows 11 (W7->15.8.189.19018, W10->15.8.211.19229).

Typing more or the whole name you could select any of 4 programs individually, that I've force uninstalled in the "advanced" mode of the tool (the most thorough), ticking to (not verbatim) "Search for leftovers in all Windows accounts" (for the records, all my systems are mono-user with Administrator rights) and "Select an uninstaller from the list to run" (for the programs; neither uninstaller finished successfuly as they all lacked some file) or "Select a log from the list to be used" (for the logs) in all cases, in the following order:

- ZA Pro Firewall (1 log)
- ZA Firewall (1 program)
- ZA Antivirus (1 program)
- ZA Security (1 program + 1 log)

Afterwards, when typing "ZoneAlarm", Revo Uninstaller still finds the 2 logs (individually selectable by typing more of the program name), that appear w/o content (see pic, Idk myself what is a "log" in this context, or how can it exist w/o content):

But after rebooting they acquire the following content:

ZA Pro Firewall
- HKEY_LOCAL_MACHINE\SYSTEM\Setup\SetupapiLogStatus (no value)
- C:\ProgramData\Microsoft\Windows\ClipSVC\tokens.dat (1631 KB, 12/19/2024)

ZA Security
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Notifications\Data ("16-digit hex value" - many "1 or 2-digit hex values")
- HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Tracing (EnableConsoleTracing - 0)
- No files

After these findings I've gone to Autoruns, reviewed manually the "Everything" tab, and filtered with "ZA" and "Zone" to display the items conveniently:

Notice that all are "files not found". I believe to know that "ZANG" corresponds to ZA NextGen, not sure about the others. Idk if maneuvering in the registry myself but Idk how to be consistent (deleting everything relevant from every "item" surviving there yet).

--------------------------------------

I'll do the requested disk checks soon.

JLArranz · Dec 19, 2024

PS: I hadn't noticed it, but Revo has sent the deleted files to the Recycle Bin (97 files and folders), what I know for the deleting date/time. I'll keep them there for the moment. I don't use the Recycle Bin myself although I haven't disabled it (I normally use Shift-Del for deleting).

SetupFailure stopcode (BSOD) upon updating from 23H2 to 24H2. What failed?

New member

My Computer

Well-known member

My Computers

Well-known member

My Computer

New member

My Computer

Well-known member

My Computer

New member

My Computer

Well-known member

My Computer

New member

My Computer

Well-known member

My Computer

New member

My Computer

Well-known member

My Computer

New member

My Computer

Wish to be flying

My Computers

New member

My Computer

Well-known member

My Computer

New member

My Computer

New member

Attachments

My Computer

Well-known member

My Computer

New member

My Computer

New member

My Computer

Similar threads