Repeating BSOD

Jimmy232 · 08 Oct 2012

Hello I have a problem with my laptop I keep getting a repeating BSOD problem.
I've uploaded the Diagnostic results

Golden · 08 Oct 2012

Welcome Jimmy. Please perform the following:

1. Download and save this tool to your desktop:
http://go.microsoft.com/fwlink/?linkid=52012

2. Run the tool, and then click 'Copy' - ignore any errors if they appear

3. Use CTRL+V to paste the unedited results of the validation tool here in your next reply

More information : Windows Genuine and Activation Issue Posting Instructions

Regards,
Golden

Jimmy232 · 08 Oct 2012

Code:

Diagnostic Report (1.9.0027.0):
-----------------------------------------
Windows Validation Data-->

Validation Code: 0
Cached Online Validation Code: 0x0
Windows Product Key: *****-*****-73CQT-WMF7J-3Q6C9
Windows Product Key Hash: KaFG+RmurcM3ZxzWyfEP9WtPUJw=
Windows Product ID: 00359-OEM-8992687-00010
Windows Product ID Type: 2
Windows License Type: OEM SLP
Windows OS version: 6.1.7601.2.00010300.1.0.003
ID: {49F570C6-125D-4358-9E65-724AB7AC4B15}(1)
Is Admin: Yes
TestCab: 0x0
LegitcheckControl ActiveX: N/A, hr = 0x80070002
Signed By: N/A, hr = 0x80070002
Product Name: Windows 7 Home Premium
Architecture: 0x00000009
Build lab: 7601.win7sp1_gdr.120503-2030
TTS Error: 
Validation Diagnostic: 
Resolution Status: N/A

Vista WgaER Data-->
ThreatID(s): N/A, hr = 0x80070002
Version: N/A, hr = 0x80070002

Windows XP Notifications Data-->
Cached Result: N/A, hr = 0x80070002
File Exists: No
Version: N/A, hr = 0x80070002
WgaTray.exe Signed By: N/A, hr = 0x80070002
WgaLogon.dll Signed By: N/A, hr = 0x80070002

OGA Notifications Data-->
Cached Result: N/A, hr = 0x80070002
Version: N/A, hr = 0x80070002
OGAExec.exe Signed By: N/A, hr = 0x80070002
OGAAddin.dll Signed By: N/A, hr = 0x80070002

OGA Data-->
Office Status: 109 N/A
OGA Version: N/A, 0x80070002
Signed By: N/A, hr = 0x80070002
Office Diagnostics: 025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3

Browser Data-->
Proxy settings: N/A
User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)
Default Browser: C:\Users\James\AppData\Local\Google\Chrome\Application\chrome.exe
Download signed ActiveX controls: Prompt
Download unsigned ActiveX controls: Disabled
Run ActiveX controls and plug-ins: Allowed
Initialize and script ActiveX controls not marked as safe: Disabled
Allow scripting of Internet Explorer Webbrowser control: Disabled
Active scripting: Allowed
Script ActiveX controls marked as safe for scripting: Allowed

File Scan Data-->

Other data-->
Office Details: <GenuineResults><MachineData><UGUID>{49F570C6-125D-4358-9E65-724AB7AC4B15}</UGUID><Version>1.9.0027.0</Version><OS>6.1.7601.2.00010300.1.0.003</OS><Architecture>x64</Architecture><PKey>*****-*****-*****-*****-3Q6C9</PKey><PID>00359-OEM-8992687-00010</PID><PIDType>2</PIDType><SID>S-1-5-21-559971405-3367911599-3471530228</SID><SYSTEM><Manufacturer>Hewlett-Packard</Manufacturer><Model>Pavilon g6 Notebook PC          </Model></SYSTEM><BIOS><Manufacturer>Hewlett-Packard</Manufacturer><Version>F.33</Version><SMBIOSVersion major="2" minor="7"/><Date>20110830000000.000000+000</Date></BIOS><HWID>0ECE3F07018400FE</HWID><UserLCID>0809</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>GMT Standard Time(GMT+00:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM><OEMID>HPQOEM</OEMID><OEMTableID>SLIC-MPC</OEMTableID></OEM><GANotification/></MachineData><Software><Office><Result>109</Result><Products/><Applications/></Office></Software></GenuineResults>  

Spsys.log Content: 0x80070002

Licensing Data-->
Software licensing service version: 6.1.7601.17514

Name: Windows(R) 7, HomePremium edition
Description: Windows Operating System - Windows(R) 7, OEM_SLP channel
Activation ID: d2c04e90-c3dd-4260-b0f3-f845f5d27d64
Application ID: 55c92734-d682-4d71-983e-d6ec3f16059f
Extended PID: 00359-00178-926-800010-02-2057-7601.0000-3032011
Installation ID: 020121723675598773244653319503138381094012469624922023
Processor Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88338
Machine Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88339
Use License URL: http://go.microsoft.com/fwlink/?LinkID=88341
Product Key Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88340
Partial Product Key: 3Q6C9
License Status: Licensed
Remaining Windows rearm count: 1
Trusted time: 08/10/2012 11:47:43

Windows Activation Technologies-->
HrOffline: 0x00000000
HrOnline: 0x00000000
HealthStatus: 0x0000000000000000
Event Time Stamp: 7:1:2012 14:27
ActiveX: Registered, Version: 7.1.7600.16395
Admin Service: Registered, Version: 7.1.7600.16395
HealthStatus Bitmask Output:


HWID Data-->
HWID Hash Current: MAAAAAIAAQABAAEAAQABAAAAAgABAAEAonZMJhU/dxZGmuY1VjF39n7pvtXcsy5z

OEM Activation 1.0 Data-->
N/A

OEM Activation 2.0 Data-->
BIOS valid for OA 2.0: yes
Windows marker version: 0x20001
OEMID and OEMTableID Consistent: yes
BIOS Information: 
  ACPI Table Name    OEMID Value    OEMTableID Value
  APIC            HP            166F    
  FACP            HPQOEM        SLIC-MPC
  HPET            HP            166F    
  BOOT            HP            166F    
  MCFG            HP            166F    
  ASF!            HP            166F    
  SLIC            HPQOEM        SLIC-MPC
  MSDM            HP            166F    
  SSDT            HP            166F    
  ASPT            HP            166F    
  SSDT            HP            166F    
  SSDT            HP            166F

Golden · 08 Oct 2012

Jimmy,

Without looking at your detailed dmp files, the first suggestion I would make is to uninstall this, as its a known cause of BSOS:

Code:

DAEMON Tools Pro Agent    "c:\program files (x86)\daemon tools pro\dtagent.exe" -autorun    Admin-HP\James    HKU\S-1-5-21-559971405-3367911599-3471530228-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

In the meantime I'll ask a more experienced analyst to look at the dmp files.

I'd also suggest you perform a virus scan using ESET on-line scanner.

Regards,
Golden

Dave76 · 08 Oct 2012

Uninstall DAEMON Tools as Golden suggested, this is a known system crasher.
You don't need this as you have Magic ISO installed.

First thing I noticed is your C: partition only has 56GB free space out of 674.64GB, 8% free space.
It is recommended an absolute minimum of 10% free space, 15% is much better.
Can you move some files off of the C: drive?
Your Shadow copies for System restore are taking up all of the free space you have causing system instability.

Your crash dumps:

Code:

STOP 0x000000E1: WORKER_THREAD_RETURNED_AT_BAD_IRQL
Usual causes:  Device driver
FOLLOWUP_IP: nt!IopProcessWorkItem+0  fffff800`037bc610
SYMBOL_NAME:  nt!IopProcessWorkItem+0
FAILURE_BUCKET_ID:  X64_0xE1_nt!IopProcessWorkItem+0
1: kd> ln fffff800037bc610
(fffff800`037bc610)   nt!IopProcessWorkItem   |  (fffff800`037bc658)   nt!NtWaitForMultipleObjects
Exact matches: nt!IopProcessWorkItem (<no parameter info>)

The other seven crashes are all the same as this one.
Make more free space on your HDD as mentioned above.

From your System Event Logs:

Code:

Event[20870]:
  Log Name: System
  Source: Microsoft-Windows-Kernel-Processor-Power
  Date: 2012-07-25T15:01:14.218
  Event ID: 26
  Task: N/A
  Level: Information
  Opcode: Info
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: Admin-HP
  Description: 
Processor 0 in group 0 exposes the following:

2 idle state(s)
9 performance state(s)
8 throttle state(s)

Event[20871]:
  Log Name: System
  Source: Microsoft-Windows-Kernel-Power
  Date: 2012-07-25T15:01:14.218
  Event ID: 89
  Task: N/A
  Level: Information
  Opcode: Info
  Keyword: N/A
  User: S-1-5-18
  User Name: NT AUTHORITY\SYSTEM
  Computer: Admin-HP
  Description: 
ACPI thermal zone ACPI\ThermalZone\TZ01 has been enumerated.             
_PSV = 371K             
_TC1 = 2             
_TC2 = 5             
_TSP = 5000ms             
_AC0 = 0K             
_AC1 = 0K             
_AC2 = 0K             
_AC3 = 0K             
_AC4 = 0K             
_AC5 = 0K             
_AC6 = 0K             
_AC7 = 0K             
_AC8 = 0K             
_AC9 = 0K             
_CRT = 0K             
_HOT = 373K             
_PSL - see event data.

This indicates your CPU is overheating.
Use Real Temp , to check the CPU temps when at idle, under load and/or testing.
Let us know the minimum and maximum temps you get.

Code:

Event[29715]:
  Log Name: System
  Source: Service Control Manager
  Date: 2012-08-26T18:11:16.043
  Event ID: 7000
  Task: N/A
  Level: Error
  Opcode: N/A
  Keyword: Classic
  User: N/A
  User Name: N/A
  Computer: Admin-HP
  Description: 
The BuddyVM service failed to start due to the following error: 
This driver has been blocked from loading

Driver used by the Virtual Mate piracy protection system used by G-Collections software. This software is no longer used and patches to remove it from G-Collections software can be found here.

Do you have both MSE and McAfee running?
A lot of McAfee errors in the System Events Log.
We have seen McAfee causing problems with Windows 7, uninstall McAfee and use MSE.
Uninstall McAfee from the Control Panel > Programs and Features, then run the McAfee removal tool:
McAfee Consumer Products Removal tool (MCPR.exe)

Code:

Event[29960]:
  Log Name: System
  Source: Disk
  Date: 2012-08-27T18:58:07.047
  Event ID: 51
  Task: N/A
  Level: Warning
  Opcode: N/A
  Keyword: Classic
  User: N/A
  User Name: N/A
  Computer: Admin-HP
  Description: 
An error was detected on device \Device\Harddisk1\DR3 during a paging operation.

Event[29999]:
  Log Name: System
  Source: Ntfs
  Date: 2012-08-27T18:58:18.618
  Event ID: 57
  Task: N/A
  Level: Warning
  Opcode: N/A
  Keyword: Classic
  User: N/A
  User Name: N/A
  Computer: Admin-HP
  Description: 
The system failed to flush data to the transaction log. Corruption may occur.

There are hundreds of these errors, may be from not enough free disk space, run this HDD test to be sure.
D/L and run the HGST Drive Fitness Test