BSOD after automatic shutdown due to overheating processor

VistaKing · 24 May 2013

PaulVdB

Can you open up a new thread inside the System Security section .

Run the FRST one more time . Delete the old FRST tool along with the log inside the USB Flash Drive .

Tool :

Warning

You will need a USB FLASH DRIVE

Tip

Download the Tool from a non infected PC

Download Farbar Recovery Scan Tool

32-bit Version OS

Farbar Recovery Scan Tool

64-Bit Version OS

Farbar Recovery Scan Tool x64

Note

Click the

button and right-click Computer .Select Properties .Look for System Type: which will say 32-bit Operating System or 64-bit Operating System

Plug the flash drive into the infected PC.

Enter System Recovery Options.

To enter System Recovery Options from the Advanced Boot Options:
Restart the computer.
As soon as the BIOS is loaded begin tapping the F8 key until Advanced Boot Options appears.
Use the arrow keys to select the Repair your computer menu item.
Select US as the keyboard language settings, and then click Next.
Select the operating system you want to repair, and then click Next.
Select your user account an click Next.

To enter System Recovery Options by using Windows installation disc:
Insert the installation disc.
Restart your computer.
If prompted, press any key to start Windows from the installation disc. If your computer is not configured to start from a CD or DVD, check your BIOS settings.
Click Repair your computer.
Select US as the keyboard language settings, and then click Next.
Select the operating system you want to repair, and then click Next.
Select your user account and click Next.

On the System Recovery Options menu you will get the following options:
Startup Repair

System Restore

Windows Complete PC Restore

Windows Memory Diagnostic Tool

Command Prompt

Select Command Prompt

In the command window type e:\frst.exe (for x64 bit version type e:\frst64) and press Enter

Note

Replace letter e with the drive letter of your flash drive.

Tip

Type the commands below to see what your letter is for the USB drive and press ENTER after each command

Code:

Diskpart
List volume

The tool will start to run.
When the tool opens click Yes to disclaimer.
Press Scan button.
FRST will let you know when the scan is complete and has written the FRST.txt to file
Please copy and paste both logs in your reply.(FRST.txt and Addition.txt)PaulVdB

Golden · 24 May 2013

Before we do anything else, We should get the MGADIAG report.

In order to completely troubleshoot Windows validation & activation issues, please perform the following:

1. Download and save this tool to your desktop:
http://go.microsoft.com/fwlink/?linkid=52012

2. Run the tool, and then click Copy - ignore any errors if they appear

3. Use CTRL+V to paste the unedited results of the tool here in your next reply

More detail: Windows Genuine and Activation Issue Posting Instructions

PaulVdB · 25 May 2013

Golden said:

Before we do anything else, We should get the MGADIAG report.

In order to completely troubleshoot Windows validation & activation issues, please perform the following:

1. Download and save this tool to your desktop:
http://go.microsoft.com/fwlink/?linkid=52012

2. Run the tool, and then click Copy - ignore any errors if they appear

3. Use CTRL+V to paste the unedited results of the tool here in your next reply

More detail: Windows Genuine and Activation Issue Posting Instructions

OK Golden, I didn't install my (newly bought) OS yet. I'm using my Laptop to post here. Nevevertheless, I ran the tool on this laptop. See results below. I will run this tool as soon I installed the new OS on my desktop computer. This could take a few days, because my final goal is to kinda "update" my old OS with the new one without having to reinstall all progs and their settings.

Diagnostic Report (1.9.0027.0):
-----------------------------------------
Windows Validation Data-->

Validation Code: 0
Cached Online Validation Code: 0x0
Windows Product Key: *****-*****-73CQT-WMF7J-3Q6C9
Windows Product Key Hash: KaFG+RmurcM3ZxzWyfEP9WtPUJw=
Windows Product ID: 00359-OEM-8992687-00010
Windows Product ID Type: 2
Windows License Type: OEM SLP
Windows OS version: 6.1.7601.2.00010300.1.0.003
ID: {1937FE60-0FCE-4B9A-A68F-1E23FF854924}(1)
Is Admin: Yes
TestCab: 0x0
LegitcheckControl ActiveX: N/A, hr = 0x80070002
Signed By: N/A, hr = 0x80070002
Product Name: Windows 7 Home Premium
Architecture: 0x00000009
Build lab: 7601.win7sp1_gdr.130318-1533
TTS Error:
Validation Diagnostic:
Resolution Status: N/A

Vista WgaER Data-->
ThreatID(s): N/A, hr = 0x80070002
Version: N/A, hr = 0x80070002

Windows XP Notifications Data-->
Cached Result: N/A, hr = 0x80070002
File Exists: No
Version: N/A, hr = 0x80070002
WgaTray.exe Signed By: N/A, hr = 0x80070002
WgaLogon.dll Signed By: N/A, hr = 0x80070002

OGA Notifications Data-->
Cached Result: N/A, hr = 0x80070002
Version: N/A, hr = 0x80070002
OGAExec.exe Signed By: N/A, hr = 0x80070002
OGAAddin.dll Signed By: N/A, hr = 0x80070002

OGA Data-->
Office Status: 109 N/A
OGA Version: N/A, 0x80070002
Signed By: N/A, hr = 0x80070002
Office Diagnostics: 025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3

Browser Data-->
Proxy settings: N/A
User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)
Default Browser: C:\Program Files (x86)\Mozilla Firefox\firefox.exe
Download signed ActiveX controls: Prompt
Download unsigned ActiveX controls: Disabled
Run ActiveX controls and plug-ins: Allowed
Initialize and script ActiveX controls not marked as safe: Disabled
Allow scripting of Internet Explorer Webbrowser control: Disabled
Active scripting: Allowed
Script ActiveX controls marked as safe for scripting: Allowed

File Scan Data-->

Other data-->
Office Details: <GenuineResults><MachineData><UGUID>{1937FE60-0FCE-4B9A-A68F-1E23FF854924}</UGUID><Version>1.9.0027.0</Version><OS>6.1.7601.2.00010300.1.0.003</OS><Architecture>x64</Architecture><PKey>*****-*****-*****-*****-3Q6C9</PKey><PID>00359-OEM-8992687-00010</PID><PIDType>2</PIDType><SID>S-1-5-21-2634796590-3920197035-911236573</SID><SYSTEM><Manufacturer>Hewlett-Packard</Manufacturer><Model>HP Pavilion g7 Notebook PC</Model></SYSTEM><BIOS><Manufacturer>Insyde</Manufacturer><Version>F.05</Version><SMBIOSVersion major="2" minor="7"/><Date>20120510000000.000000+000</Date></BIOS><HWID>55C73407018400F2</HWID><UserLCID>0813</UserLCID><SystemLCID>0413</SystemLCID><TimeZone>Romance (standaardtijd)(GMT+01:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM><OEMID>HPQOEM</OEMID><OEMTableID>SLIC-MPC</OEMTableID></OEM><GANotification/></MachineData><Software><Office><Result>109</Result><Products/><Applications/></Office></Software></GenuineResults>

Spsys.log Content: 0x80070002

Licensing Data-->
Versie van Software Licensing-service: 6.1.7601.17514

Naam: Windows(R) 7, HomePremium edition
Beschrijving: Windows Operating System - Windows(R) 7, OEM_SLP channel
Activerings-id: d2c04e90-c3dd-4260-b0f3-f845f5d27d64
Toepassings-id55c92734-d682-4d71-983e-d6ec3f16059f
Uitgebreide PID: 00359-00178-926-800010-02-2067-7601.0000-1712012
Installatie-id008873425145967434552200289236560073300831615594703426
URL van processorcertificaat: http://go.microsoft.com/fwlink/?LinkID=88338
URL van computercertificaat: http://go.microsoft.com/fwlink/?LinkID=88339
URL van gebruikte licentie: http://go.microsoft.com/fwlink/?LinkID=88341
URL van productcodecertificaat: http://go.microsoft.com/fwlink/?LinkID=88340
Gedeeltelijke productcode: 3Q6C9
Licentiestatus: licentie
Resterend aantal nieuwe Windows-activeringen: 0
Vertrouwde tijd: 25/05/2013 11:42:01

Windows Activation Technologies-->
HrOffline: 0x00000000
HrOnline: 0x00000000
HealthStatus: 0x0000000000000000
Event Time Stamp: 3:22:2013 16:38
ActiveX: Registered, Version: 7.1.7600.16395
Admin Service: Registered, Version: 7.1.7600.16395
HealthStatus Bitmask Output:

HWID Data-->
HWID Hash Current: MgAAAAEAAQABAAEAAAACAAAABAABAAEAln2airCNpshw8uj6ipuicEaoWqsoxG4bsN4=

OEM Activation 1.0 Data-->
N/A

OEM Activation 2.0 Data-->
BIOS valid for OA 2.0: yes
Windows marker version: 0x20001
OEMID and OEMTableID Consistent: yes
BIOS Information:
ACPI Table Name OEMID Value OEMTableID Value
APIC HPQOEM INSYDE
FACP HPQOEM SLIC-MPC
HPET HPQOEM INSYDE
BOOT HPQOEM INSYDE
MCFG HPQOEM INSYDE
WDAT HPQOEM INSYDE
UEFI HPQOEM INSYDE
ASF! HPQOEM INSYDE
SLIC HPQOEM SLIC-MPC
WDRT HPQOEM INSYDE
FPDT HPQOEM INSYDE
SSDT HPQOEM INSYDE
SSDT HPQOEM INSYDE

PaulVdB · 25 May 2013

Thanks for your continuous support, Vistaking.

Here's the frst.txt :

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 25-05-2013
Ran by SYSTEM on 25-05-2013 10:33:01
Running from F:\
Windows 7 Ultimate (X64) OS Language: English(US)
Internet Explorer Version 9
Boot Mode: Recovery
The current controlset is ControlSet001
ATTENTION!:=====> FRST is updated to run from normal or Safe mode to produce a full FRST.txt log and an extra Addition.txt log.

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [RTHDVCPL] C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe -s [12503184 2012-06-10] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg_Dolby] C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe /FORPCEE4 [1212560 2012-06-13] (Realtek Semiconductor)
HKLM\...\Run: [WinPatrol] C:\Program Files (x86)\BillP Studios\WinPatrol\WinPatrol.exe -expressboot [404712 2013-01-04] (BillP Studios)
HKLM\...\Run: [ISW] C:\Program Files\CheckPoint\ZAForceField\ForceField.exe /icon="hidden" [1127592 2012-11-22] (Check Point Software Technologies)
HKLM\...\RunOnce: [*Restore] C:\Windows\system32\rstrui.exe /RUNONCE [296960 2010-11-20] (Microsoft Corporation)
HKLM-x32\...\Run: [avast] "C:\Program Files\AVAST Software\Avast\avastUI.exe" /nogui [4767304 2013-03-06] (AVAST Software)
HKLM-x32\...\Run: [ZoneAlarm] "C:\Program Files (x86)\CheckPoint\ZoneAlarm\zatray.exe" [73984 2013-01-02] (Check Point Software Technologies LTD)
HKLM-x32\...\Run: [StartCCC] "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun [641664 2012-04-05] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [AMD AVT] Cmd.exe /c start "AMD Accelerated Video Transcoding device initialization" /min "C:\Program Files (x86)\AMD AVT\bin\kdbsync.exe" aml [10752 2012-02-20] ()
HKLM-x32\...\Run: [Dolby Home Theater v4] "C:\Program Files (x86)\Dolby Home Theater v4\pcee4.exe" -autostart [508256 2012-04-22] (Dolby Laboratories Inc.)

==================== Services (Whitelisted) =================

S4 AcrSch2Svc; C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedul2.exe [1126888 2012-08-22] (Acronis)
S4 afcdpsrv; C:\Program Files (x86)\Common Files\Acronis\CDP\afcdpsrv.exe [3696632 2012-12-03] (Acronis)
S2 AMD FUEL Service; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [361984 2012-04-05] (Advanced Micro Devices, Inc.)
S3 AppleChargerSrv; C:\Windows\System32\AppleChargerSrv.exe [31272 2010-04-06] ()
S2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [45248 2013-03-06] (AVAST Software)
S4 ComodoBackupService; C:\Program Files (x86)\Comodo\BackUp\CmdBkSvc.exe [1023488 2012-11-26] (COMODO)
S4 CrossLoopService; C:\Users\Paul\AppData\Local\CrossLoop\CrossLoopService.exe [569072 2012-01-05] (CrossLoop)
S2 ES lite Service; C:\Program Files (x86)\Gigabyte\EasySaver\ESSVR.EXE [68136 2009-08-24] ()
S2 IswSvc; C:\Program Files\CheckPoint\ZAForceField\IswSvc.exe [828072 2012-11-22] (Check Point Software Technologies)
S2 JMB36X; C:\Windows\SysWOW64\XSrvSetup.exe [72280 2010-09-07] ()
S3 NitroDriverReadSpool8; C:\Program Files\Common Files\Nitro\Pro\8.0\NitroPDFDriverService8x64.exe [230920 2012-09-18] (Nitro PDF Software)
S2 syncagentsrv; C:\Program Files (x86)\Common Files\Acronis\SyncAgent\syncagentsrv.exe [7017888 2012-08-18] (Acronis)
S3 tvnserver; C:\Users\Paul\AppData\Local\CrossLoop\tvnserver.exe [814080 2010-07-20] (GlavSoft LLC.)
S2 vsmon; C:\Program Files (x86)\CheckPoint\ZoneAlarm\vsmon.exe [2448032 2013-01-02] (Check Point Software Technologies LTD)
S4 PCPitstop Scheduling; E:\TOOLS\Test\PCPitstopScheduleService.exe [x]

==================== Drivers (Whitelisted) ====================

S3 ampa; C:\Windows\system32\ampa.sys [15288 2011-12-26] ()
S3 AODDriver; C:\Program Files (x86)\Gigabyte\ET6\amd64\AODDriver.sys [52280 2010-03-11] (Advanced Micro Devices)
S2 AODDriver4.1; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\amd64\AODDriver2.sys [53888 2012-03-05] (Advanced Micro Devices)
S1 AppleCharger; C:\Windows\System32\DRIVERS\AppleCharger.sys [21616 2011-09-05] ()
S2 aswFsBlk; C:\Windows\System32\Drivers\aswFsBlk.sys [33400 2013-03-06] ()
S2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [80816 2013-03-06] ()
S1 aswRdr; C:\Windows\System32\Drivers\aswrdr2.sys [70992 2013-03-06] ()
S0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65336 2013-03-06] ()
S1 aswSnx; C:\Windows\System32\Drivers\aswSnx.sys [1025808 2013-03-06] ()
S1 aswSP; C:\Windows\System32\Drivers\aswSP.sys [377920 2013-03-06] ()
S1 aswTdi; C:\Windows\System32\Drivers\aswTdi.sys [68920 2013-03-06] ()
S3 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [178624 2013-03-06] ()
S3 ddmdrv; C:\Windows\system32\ddmdrv.sys [15288 2011-06-15] ()
S3 gdrv; C:\Windows\gdrv.sys [25640 2013-05-17] (Windows (R) Server 2003 DDK provider)
S1 GsRamDsk; C:\Windows\System32\DRIVERS\GsRamDsk.sys [57592 2012-09-22] ()
S3 GVTDrv64; C:\Windows\GVTDrv64.sys [30528 2012-10-01] ()
S0 hotcore3; C:\Windows\System32\DRIVERS\hotcore3.sys [39216 2012-10-04] (Paragon Software Group)
S2 ISWKL; C:\Program Files\CheckPoint\ZAForceField\ISWKL.sys [33712 2012-11-22] (Check Point Software Technologies)
S3 SMIUSBAVCALL; C:\Windows\System32\Drivers\SmiUsbGrabber3F.sys [153344 2011-09-27] (Windows (R) Win 7 DDK provider)
S0 SscRdBus; C:\Windows\System32\DRIVERS\SscRdBus.sys [72216 2009-06-17] (SuperSpeed LLC)
S0 SscRdCls; C:\Windows\System32\DRIVERS\SscRdCls.sys [37376 2007-11-16] (SuperSpeed LLC)
S0 tib_mounter; C:\Windows\System32\DRIVERS\tib_mounter.sys [1093256 2012-12-03] (Acronis)
S1 UimBus; C:\Windows\System32\DRIVERS\uimx64.sys [90960 2012-10-31] (Windows (R) 2000 DDK provider)
S1 Uim_IM; C:\Windows\System32\Drivers\Uim_IMx64.sys [633552 2012-10-31] (Paragon)
S1 Uim_VIM; C:\Windows\System32\Drivers\uim_vimx64.sys [390224 2012-10-31] (Paragon)
S0 vidsflt; C:\Windows\System32\DRIVERS\vidsflt.sys [166024 2012-12-03] (Acronis)
S1 Vsdatant; C:\Windows\System32\DRIVERS\vsdatant.sys [450136 2012-12-13] (Check Point Software Technologies LTD)
S3 WinUsb; C:\Windows\System32\DRIVERS\WinUsb.sys [41984 2010-11-20] ()
S3 ALSysIO; \??\C:\Users\Paul\AppData\Local\Temp\ALSysIO64.sys [x]
S0 fltsrv; system32\DRIVERS\fltsrv.sys [x]
S0 snapman; system32\DRIVERS\snapman.sys [x]
S0 tdrpman; system32\DRIVERS\tdrpman.sys [x]
S3 VGPU; System32\drivers\rdvgkmd.sys [x]

==================== NetSvcs (Whitelisted) ===================

==================== One Month Created Files and Folders ========

2013-05-22 22:18 - 2013-05-22 22:18 - 00000000 ____D C:\FRST
2013-05-19 18:17 - 2010-11-20 19:23 - 00383786 _RASH C:\bootmgr
2013-05-19 16:15 - 2013-05-18 21:12 - 00262144 ____A C:\Windows\System32\config\DEFAULT.myback
2013-05-19 16:14 - 2013-05-19 15:59 - 67895296 ____A C:\Windows\System32\config\SOFTWARE.myback
2013-05-19 16:13 - 2013-05-19 15:59 - 20709376 ____A C:\Windows\System32\config\SYSTEM.myback
2013-05-19 16:13 - 2013-05-18 21:23 - 00262144 ____A C:\Windows\System32\config\SAM.myback
2013-05-19 16:13 - 2013-05-18 13:00 - 00262144 ____A C:\Windows\System32\config\SECURITY.myback
2013-05-19 16:12 - 2013-05-18 21:12 - 00262144 ____A C:\Windows\System32\config\DEFAULT.mybak
2013-05-18 09:47 - 2013-05-18 09:47 - 00003488 ____N C:\bootsqm.dat
2013-05-17 05:33 - 2013-05-17 05:33 - 00001562 ____A C:\Users\Paul\Desktop\DirPrnInfo.txt
2013-05-17 05:30 - 2013-05-17 05:30 - 00000000 ____D C:\Users\Paul\AppData\Local\Karen's Power Tools
2013-05-17 05:28 - 2013-05-17 05:28 - 00000000 ____D C:\ProgramData\Karen's Power Tools
2013-05-16 10:05 - 2013-05-16 10:05 - 00000000 ____D C:\ProgramData\ProcessLasso
2013-05-16 10:04 - 2013-05-16 10:05 - 00000000 ____D C:\Users\Paul\AppData\Roaming\ProcessLasso
2013-05-15 10:51 - 2013-05-15 10:51 - 00000000 ____D C:\Users\Paul\AppData\Roaming\Yahoo!
2013-05-15 10:38 - 2013-05-15 10:38 - 00000794 ____A C:\Users\Public\Desktop\Yahoo! Messenger.lnk
2013-05-15 10:38 - 2013-05-15 10:38 - 00000000 ____D C:\ProgramData\Yahoo!
2013-05-15 10:30 - 2013-05-15 10:38 - 00000000 ____D C:\Program Files (x86)\Yahoo!
2013-05-13 12:13 - 2013-05-13 12:14 - 00000000 ____D C:\Program Files (x86)\GUMC6DD.tmp
2013-05-01 14:03 - 2013-05-01 14:03 - 00001570 ____A C:\Users\Paul\Desktop\DivX Movies.lnk
2013-04-30 12:31 - 2013-04-30 12:31 - 00000000 ____D C:\Users\Paul\Skype download
2013-04-30 12:06 - 2013-05-15 13:05 - 00000000 ____D C:\Users\Paul\AppData\Roaming\Skype
2013-04-30 12:06 - 2013-05-01 13:45 - 00000000 ___RD C:\Program Files (x86)\Skype
2013-04-30 12:06 - 2013-04-30 12:06 - 00000000 ____D C:\ProgramData\Skype

==================== One Month Modified Files and Folders =======

2013-05-22 22:18 - 2013-05-22 22:18 - 00000000 ____D C:\FRST
2013-05-19 15:59 - 2013-05-19 16:14 - 67895296 ____A C:\Windows\System32\config\SOFTWARE.myback
2013-05-19 15:59 - 2013-05-19 16:13 - 20709376 ____A C:\Windows\System32\config\SYSTEM.myback
2013-05-18 23:59 - 2009-07-13 21:38 - 00025600 __ASH C:\Windows\System32\config\BCD-Template.LOG
2013-05-18 23:59 - 2009-07-13 21:32 - 00028672 ____A C:\Windows\System32\config\BCD-Template
2013-05-18 21:23 - 2013-05-19 16:13 - 00262144 ____A C:\Windows\System32\config\SAM.myback
2013-05-18 21:12 - 2013-05-19 16:15 - 00262144 ____A C:\Windows\System32\config\DEFAULT.myback
2013-05-18 21:12 - 2013-05-19 16:12 - 00262144 ____A C:\Windows\System32\config\DEFAULT.mybak
2013-05-18 13:00 - 2013-05-19 16:13 - 00262144 ____A C:\Windows\System32\config\SECURITY.myback
2013-05-18 09:47 - 2013-05-18 09:47 - 00003488 ____N C:\bootsqm.dat
2013-05-18 08:45 - 2012-09-19 07:00 - 00000000 ____D C:\Users\Paul\AppData\Roaming\uTorrent
2013-05-18 08:18 - 2012-09-21 08:54 - 00001052 ____A C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2013-05-18 07:46 - 2012-09-18 08:27 - 01424369 ____A C:\Windows\WindowsUpdate.log
2013-05-18 07:22 - 2012-09-19 13:35 - 00001328 ____A C:\Windows\ulead32.ini
2013-05-18 07:12 - 2012-09-19 06:42 - 00000000 ____D C:\Users\Paul\AppData\Roaming\vlc
2013-05-17 13:55 - 2012-10-07 13:29 - 00000000 ____D C:\Users\Paul\AppData\Local\CrashDumps
2013-05-17 12:18 - 2012-09-21 08:54 - 00001048 ____A C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2013-05-17 05:33 - 2013-05-17 05:33 - 00001562 ____A C:\Users\Paul\Desktop\DirPrnInfo.txt
2013-05-17 05:30 - 2013-05-17 05:30 - 00000000 ____D C:\Users\Paul\AppData\Local\Karen's Power Tools
2013-05-17 05:28 - 2013-05-17 05:28 - 00000000 ____D C:\ProgramData\Karen's Power Tools
2013-05-17 01:12 - 2012-11-02 18:36 - 00000095 ____A C:\Users\Paul\.accessibility.properties
2013-05-17 01:12 - 2012-09-18 08:28 - 00000000 ____D C:\users\Paul
2013-05-17 01:08 - 2009-07-13 21:13 - 00782218 ____A C:\Windows\System32\PerfStringBackup.INI
2013-05-17 01:04 - 2013-04-13 04:40 - 00003930 ____A C:\Windows\setupact.log
2013-05-17 01:04 - 2012-09-18 10:10 - 00025640 ____A (Windows (R) Server 2003 DDK provider) C:\Windows\gdrv.sys
2013-05-17 01:04 - 2012-09-18 08:50 - 00000144 ____A C:\service.log
2013-05-17 01:04 - 2009-07-13 21:08 - 00000006 ___AH C:\Windows\Tasks\SA.DAT
2013-05-16 10:12 - 2012-09-18 12:27 - 00000000 ____D C:\Users\Paul\Desktop\Tools
2013-05-16 10:05 - 2013-05-16 10:05 - 00000000 ____D C:\ProgramData\ProcessLasso
2013-05-16 10:05 - 2013-05-16 10:04 - 00000000 ____D C:\Users\Paul\AppData\Roaming\ProcessLasso
2013-05-15 13:05 - 2013-04-30 12:06 - 00000000 ____D C:\Users\Paul\AppData\Roaming\Skype
2013-05-15 10:51 - 2013-05-15 10:51 - 00000000 ____D C:\Users\Paul\AppData\Roaming\Yahoo!
2013-05-15 10:38 - 2013-05-15 10:38 - 00000794 ____A C:\Users\Public\Desktop\Yahoo! Messenger.lnk
2013-05-15 10:38 - 2013-05-15 10:38 - 00000000 ____D C:\ProgramData\Yahoo!
2013-05-15 10:38 - 2013-05-15 10:30 - 00000000 ____D C:\Program Files (x86)\Yahoo!
2013-05-15 07:51 - 2012-09-18 13:18 - 00692104 ____A (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2013-05-15 07:51 - 2012-09-18 13:18 - 00071048 ____A (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2013-05-13 12:14 - 2013-05-13 12:13 - 00000000 ____D C:\Program Files (x86)\GUMC6DD.tmp
2013-05-13 11:39 - 2013-04-18 15:36 - 00000030 ____A C:\Windows\Iedit.INI
2013-05-12 09:28 - 2009-07-13 18:34 - 00000694 ____A C:\Windows\win.ini
2013-05-12 09:28 - 2009-07-13 18:34 - 00000245 ____A C:\Windows\system.ini
2013-05-09 07:42 - 2012-09-22 09:55 - 00001085 ____A C:\Windows\UnitConverter.INI
2013-05-05 13:43 - 2009-07-13 19:20 - 00000000 ____D C:\Windows\System32\NDF
2013-05-05 12:54 - 2012-09-22 10:17 - 00000000 ____D C:\Users\Paul\AppData\Roaming\TeraCopy
2013-05-05 10:55 - 2012-09-18 13:39 - 00000000 ___RD C:\Users\Paul\Desktop\Muziek
2013-05-04 09:13 - 2012-09-26 10:19 - 00000000 ____D C:\Users\Paul\AppData\Roaming\Nitro PDF
2013-05-03 05:19 - 2012-09-20 11:00 - 00000000 ____D C:\Users\Paul\Desktop\Video
2013-05-01 14:03 - 2013-05-01 14:03 - 00001570 ____A C:\Users\Paul\Desktop\DivX Movies.lnk
2013-05-01 14:03 - 2012-09-24 06:50 - 00000000 ____D C:\ProgramData\DivX
2013-05-01 14:03 - 2012-09-24 06:50 - 00000000 ____D C:\Program Files (x86)\DivX
2013-05-01 14:02 - 2012-09-24 06:51 - 00000000 ____D C:\Program Files\DivX
2013-05-01 13:58 - 2012-09-18 13:17 - 00000000 ____D C:\ProgramData\Adobe
2013-05-01 13:45 - 2013-04-30 12:06 - 00000000 ___RD C:\Program Files (x86)\Skype
2013-04-30 12:31 - 2013-04-30 12:31 - 00000000 ____D C:\Users\Paul\Skype download
2013-04-30 12:25 - 2012-09-19 07:29 - 00000000 ___RD C:\Users\Paul\Desktop\Commnicatie
2013-04-30 12:06 - 2013-04-30 12:06 - 00000000 ____D C:\ProgramData\Skype
2013-04-30 12:06 - 2012-09-19 12:21 - 00000000 ____D C:\Program Files (x86)\Windows Live
2013-04-30 12:01 - 2012-09-19 12:16 - 00000000 ____D C:\Users\Paul\AppData\Local\Windows Live

==================== Known DLLs (Whitelisted) ================

[2012-09-18 10:00] - [2012-09-18 10:00] - 2144768 ____A () C:\Windows\System32\IERTUTIL.dll
[2012-09-18 10:00] - [2012-09-18 10:00] - 1793024 ____A () C:\Windows\SysWOW64\IERTUTIL.dll
[2012-09-18 10:00] - [2012-09-18 10:00] - 1346048 ____A () C:\Windows\System32\URLMON.dll
[2012-09-18 10:00] - [2012-09-18 10:00] - 1103872 ____A () C:\Windows\SysWOW64\URLMON.dll
[2012-09-18 10:00] - [2012-09-18 10:00] - 1392128 ____A () C:\Windows\System32\WININET.dll
[2012-09-18 10:00] - [2012-09-18 10:00] - 1129472 ____A () C:\Windows\SysWOW64\WININET.dll

==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit

==================== EXE ASSOCIATION =====================

HKLM\...\.exe: exefile => OK
HKLM\...\exefile\DefaultIcon: %1 => OK
HKLM\...\exefile\open\command: "%1" %* => OK

==================== Restore Points =========================

Restore point made on: 2013-05-04 09:49:09
Restore point made on: 2013-05-12 10:01:41
Restore point made on: 2013-05-16 07:37:15

==================== Memory info ===========================

Percentage of memory in use: 5%
Total physical RAM: 32749.24 MB
Available physical RAM: 30902.22 MB
Total Pagefile: 32747.39 MB
Available Pagefile: 30900.04 MB
Total Virtual: 8192 MB
Available Virtual: 8191.88 MB

==================== Drives ================================

Drive c: (C) (Fixed) (Total:55.8 GB) (Free:3.31 GB) NTFS (Disk=0 Partition=2) ==>[System with boot components (obtained from reading drive)]
Drive e: (Repair disc Windows 7 64-bit) (CDROM) (Total:0.16 GB) (Free:0 GB) UDF
Drive f: () (Removable) (Total:0.94 GB) (Free:0.63 GB) FAT (Disk=1 Partition=1)
Drive x: (Boot) (Fixed) (Total:0.03 GB) (Free:0.03 GB) NTFS
Drive y: (System Reserved) (Fixed) (Total:0.1 GB) (Free:0.07 GB) NTFS (Disk=0 Partition=1) ==>[System with boot components (obtained from reading drive)]

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (Size: 56 GB) (Disk ID: 480BAE2A)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=56 GB) - (Type=07 NTFS)

========================================================
Disk: 1 (Size: 964 MB) (Disk ID: 91F72D24)
Partition 1: (Active) - (Size=964 MB) - (Type=06)

Last Boot: 2013-05-14 07:35

==================== End Of Log ============================

gregrocker · 25 May 2013

If an activation crack was used on your install then you 'll need to reinstall it, after wiping the HD with Diskpart Clean Command. Merely uninstalling the crack and installing the new key, or running a Repair Install might not be enough since the crack works at the BIOS level.

If you'll follow the same steps given in Clean Reinstall - Factory OEM Windows 7 you'll get and keep a perfect install.

PaulVdB · 25 May 2013

gregrocker said:

If an activation crack was used on your install then you 'll need to reinstall it, after wiping the HD with Diskpart Clean Command. Merely uninstalling the crack and installing the new key, or running a Repair Install might not be enough since the crack works at the BIOS level.

If you'll follow the same steps given in Clean Reinstall - Factory OEM Windows 7 you'll get and keep a perfect install.

If you'll follow the same steps given in Clean Reinstall - Factory OEM Windows 7 you'll get and keep a perfect install.[/QUOTE]

You mean that this is kinda end of the story ? No more possibilities to rescue anything? If the "crack" works in the BIOS level, a HD/partition whipe does not "clean" my BIOS, does it? As far as I know BIOS is in ROM (Read Only Memory). Could a mobo-BIOS upgrade (what I was intended to do anyhow soon) get rid of that "crack" ? And if so, would it get my computer back to work so that I can finally get rid of the BSOD and somehow (over- or re-)install my legit OS and use my old programs, settings etc again. I DO have a very recent restore point...Will I be able to use it ?

If I follow the same steps given in Clean Reinstall - Factory OEM Windows 7 will I get and keep a perfect install, and all my previous settings/programs remain like they were before? In other words : If I do this, will all the (valuable! ) tips and tricks you guys gave during the past week be all in vain ? Does it mean that all the troubles that you + other members of this forum + I went through were only a way to pass time? I hope not.
Now all this doesn't take away my appreciation for what you Seven-Forum-Guys do, what you guys already did for me.
Anyhow I'll start allover following the steps as mentionned in the BSOD help thread.
Again : thanks for your time !

gregrocker · 25 May 2013

You'd want to wipe the HD with Diskpart Clean Command from the Win7 installer's Command Line before reinstall to clear the boot sector of any bad code.

Then there is nothing left of your old install and everything needs to be installed fresh. If you stick with the steps in Clean Reinstall - Factory OEM Windows 7 you will get and keep a perfect install. One of the steps will show you how to rescue any files. After its setup and running as you like save a Win7 backup image so you never have to reinstall again.

JerometheGiraff · 02 Jun 2013

I get the same problem as mentioned in this thread, some say it's CPU overheating, others say it's RAM, others say it's an bug in Window8. I don't want to have to re-install Windows to remove it. How often is it happening to some of you, frequently, every so many weeks, etc ?

gregrocker · 02 Jun 2013

Jerome, can you post up in our Crashes forum the Blue Screen of Death (BSOD)- Posting Instructions - Windows 7 Forums
for expert analysis.

If not work through the Troubleshooting Steps for Windows 7