BSOD BCCode: 1a

Zassie · 20 Mar 2013

Getting BSOD since yesterday, no new hardware has been installed and what not.

Problem signature:
Problem Event Name: BlueScreen
OS Version: 6.1.7601.2.1.0.256.1
Locale ID: 1033

Additional information about the problem:
BCCode: 1a
BCP1: 0000000000003452
BCP2: 000000000D95C000
BCP3: FFFFF700010830A8
BCP4: D84000007F728866
OS Version: 6_1_7601
Service Pack: 1_0
Product: 256_1

Files that help describe the problem:
C:\Windows\Minidump\032013-22822-01.dmp
C:\Users\zass\AppData\Local\Temp\WER-75426-0.sysdata.xml

Read our privacy statement online:
Windows 7 Privacy Statement - Microsoft Windows

If the online privacy statement is not available, please read our privacy statement offline:
C:\Windows\system32\en-US\erofflps.txt

Attached are the dumps :)

Thanks in advance for the help

Dsprague · 20 Mar 2013

Please begin by removing Daemon tools, then once it is uninstalled please download and run this tool:

DuplexSecure - Downloads

When you run the tool if the Uninstall button is grayed out then you are done and can close the window. If it is not then click uninstall and allow the tool to run. DO NOT click the install button it will install a harmful driver onto your system.

Zassie · 20 Mar 2013

I have completed what you have told me, Daemon Tools is removed and SPTD is showing greyed out Uninstall button

Dsprague · 20 Mar 2013

Good now test and see if you get further BSODs, if you do post back here with the new dump files.

Zassie · 04 Apr 2013

Seems that im blue screening again

Have attached the new dump files

Thanks in advance :)

Dsprague · 04 Apr 2013

Could you please post the following here: Windows Genuine and Activation Issue Posting Instructions

Zassie · 04 Apr 2013

Code:

Diagnostic Report (1.9.0027.0):
-----------------------------------------
Windows Validation Data-->

Validation Code: 0
Cached Online Validation Code: 0x0
Windows Product Key: *****-*****-D4M3X-9BK9M-4RPH9
Windows Product Key Hash: jlr8sJgEl+xs9ipw2oBs+TIywKw=
Windows Product ID: 00426-OEM-8992662-00009
Windows Product ID Type: 2
Windows License Type: OEM SLP
Windows OS version: 6.1.7601.2.00010100.1.0.001
ID: {F5E8EF10-2304-4985-8625-DB2276E53991}(1)
Is Admin: Yes
TestCab: 0x0
LegitcheckControl ActiveX: N/A, hr = 0x80070002
Signed By: N/A, hr = 0x80070002
Product Name: Windows 7 Ultimate
Architecture: 0x00000009
Build lab: 7601.win7sp1_gdr.130104-1431
TTS Error: 
Validation Diagnostic: 
Resolution Status: N/A

Vista WgaER Data-->
ThreatID(s): N/A, hr = 0x80070002
Version: N/A, hr = 0x80070002

Windows XP Notifications Data-->
Cached Result: N/A, hr = 0x80070002
File Exists: No
Version: N/A, hr = 0x80070002
WgaTray.exe Signed By: N/A, hr = 0x80070002
WgaLogon.dll Signed By: N/A, hr = 0x80070002

OGA Notifications Data-->
Cached Result: N/A, hr = 0x80070002
Version: N/A, hr = 0x80070002
OGAExec.exe Signed By: N/A, hr = 0x80070002
OGAAddin.dll Signed By: N/A, hr = 0x80070002

OGA Data-->
Office Status: 109 N/A
OGA Version: N/A, 0x80070002
Signed By: N/A, hr = 0x80070002
Office Diagnostics: 025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3

Browser Data-->
Proxy settings: N/A
User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)
Default Browser: C:\Program Files (x86)\Mozilla Firefox\firefox.exe
Download signed ActiveX controls: Prompt
Download unsigned ActiveX controls: Disabled
Run ActiveX controls and plug-ins: Allowed
Initialize and script ActiveX controls not marked as safe: Disabled
Allow scripting of Internet Explorer Webbrowser control: Disabled
Active scripting: Allowed
Script ActiveX controls marked as safe for scripting: Allowed

File Scan Data-->

Other data-->
Office Details: <GenuineResults><MachineData><UGUID>{F5E8EF10-2304-4985-8625-DB2276E53991}</UGUID><Version>1.9.0027.0</Version><OS>6.1.7601.2.00010100.1.0.001</OS><Architecture>x64</Architecture><PKey>*****-*****-*****-*****-4RPH9</PKey><PID>00426-OEM-8992662-00009</PID><PIDType>2</PIDType><SID>S-1-5-21-788329702-3547628742-2791258510</SID><SYSTEM><Manufacturer>MSI</Manufacturer><Model>MS-7636</Model></SYSTEM><BIOS><Manufacturer>American Megatrends Inc.</Manufacturer><Version>V1.3</Version><SMBIOSVersion major="2" minor="6"/><Date>20091221000000.000000+000</Date></BIOS><HWID>25273007018400FE</HWID><UserLCID>0409</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>South Africa Standard Time(GMT+02:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM><OEMID>MSI_NB</OEMID><OEMTableID>MEGABOOK</OEMTableID></OEM><GANotification/></MachineData><Software><Office><Result>109</Result><Products/><Applications/></Office></Software></GenuineResults>  

Spsys.log Content: 0x80070002

Licensing Data-->
Software licensing service version: 6.1.7601.17514

Name: Windows(R) 7, Ultimate edition
Description: Windows Operating System - Windows(R) 7, OEM_SLP channel
Activation ID: 7cfd4696-69a9-4af7-af36-ff3d12b6b6c8
Application ID: 55c92734-d682-4d71-983e-d6ec3f16059f
Extended PID: 00426-00178-926-600009-02-1033-7601.0000-0812013
Installation ID: 012635425914208270489275359114626910118726763424612510
Processor Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88338
Machine Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88339
Use License URL: http://go.microsoft.com/fwlink/?LinkID=88341
Product Key Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88340
Partial Product Key: 4RPH9
License Status: Licensed
Remaining Windows rearm count: 4
Trusted time: 4/4/2013 2:55:17 PM

Windows Activation Technologies-->
HrOffline: 0x00000000
HrOnline: 0x00000000
HealthStatus: 0x0000000000000000
Event Time Stamp: 11:3:2012 16:14
ActiveX: Registered, Version: 7.1.7600.16395
Admin Service: Not Registered - 0x80070005
HealthStatus Bitmask Output:


HWID Data-->
HWID Hash Current: NAAAAAIABAABAAEAAQABAAAAAQABAAEA6GFYok40xrZCxkTYgJY+JIosBA/eiGy3xPF2Vg==

OEM Activation 1.0 Data-->
N/A

OEM Activation 2.0 Data-->
BIOS valid for OA 2.0: yes
Windows marker version: 0x20001
OEMID and OEMTableID Consistent: yes
BIOS Information: 
  ACPI Table Name    OEMID Value    OEMTableID Value
  APIC            7636MS        A7636100
  FACP            7636MS        A7636100
  HPET            7636MS        OEMHPET 
  MCFG            7636MS        OEMMCFG 
  OEMB            7636MS        A7636100
  SSDT            DpgPmm        CpuPm
  SLIC            MSI_NB        MEGABOOK

Dsprague · 04 Apr 2013

It appears that this installation of windows is counterfeit, the product ID is for a Fujitsu, but it is installed on an OEM board. Also in your hosts file it looks like you have both adobe and the Microsoft licensing servers blocked:

Code:

# Copyright (c) 1993-2009 Microsoft Corp.
#
# This is a sample HOSTS file used by Microsoft TCP/IP for Windows.
#
# This file contains the mappings of IP addresses to host names. Each
# entry should be kept on an individual line. The IP address should
# be placed in the first column followed by the corresponding host name.
# The IP address and the host name should be separated by at least one
# space.
#
# Additionally, comments (such as these) may be inserted on individual
# lines or following the machine name denoted by a '#' symbol.
#
# For example:
#
#      102.54.94.97     rhino.acme.com          # source server
#       38.25.63.10     x.acme.com              # x client host

# localhost name resolution is handled within DNS itself.
#    127.0.0.1       localhost
#    ::1             localhost
127.0.0.1                   activate.adobe.com
127.0.0.1                   practivate.adobe.com
127.0.0.1 validation.sls.microsoft.com