Windows 7 Forums
Welcome to Windows 7 Forums. Our forum is dedicated to helping you find support and solutions for any problems regarding your Windows 7 PC be it Dell, HP, Acer, Asus or a custom build. We also provide an extensive Windows 7 tutorial section that covers a wide range of tips and tricks.


Windows 7: Random BSODs, when restarting or shutting down windows

17 Jun 2017   #1
Nctolhu

Windows 7 Ultimate 64-bit SP1
 
 
Random BSODs, when restarting or shutting down windows

I've recently updated my computer with a new mob, processor, ram and keep getting random BSODs on shutting down or restarting windows. At first I thought it might be tied to a xmp profile i had set in the bios, reset everything back to default in bios and still getting it. I have run memtest to see if it would find any issues with the ram and it came back with no errors. I'm at my wits end here as to what the cause is, any help would be much appreciated. If you need anymore info just let me know and I will do my best to get it for you.




Attached Files
File Type: zip BURN-PC-Sat_06_17_2017_203617_69.zip (1.10 MB, 4 views)
My System SpecsSystem Spec
.
21 Jun 2017   #2
axe0

Windows 10 Pro
 
 

Hi Nctolhu,

Sorry for the delay.
Are you still in need of help?
My System SpecsSystem Spec
21 Jun 2017   #3
Nctolhu

Windows 7 Ultimate 64-bit SP1
 
 

Aye, I read some of the other post and adjusted a few things but don't know if it fixed the issue. any input would be greatly appreciated.
My System SpecsSystem Spec
.

23 Jun 2017   #4
axe0

Windows 10 Pro
 
 

What error codes do you get?
There haven't been error codes recorded in a few months.
My System SpecsSystem Spec
02 Jul 2017   #5
Nctolhu

Windows 7 Ultimate 64-bit SP1
 
 

The error seems to be the "irql_not_less_or_equal". sorry for the long time between replies but the BSOD is really random and didn't want to give miss information. re-uploaded the collection files(gathered right after the crash). Also for some reason windows does not want to save the minidump files after the crash anymore, checked settings and it is set to save.


Attached Files
File Type: zip BURN-PC-Sun_07_02_2017__82059_46.zip (1.24 MB, 3 views)
My System SpecsSystem Spec
02 Jul 2017   #6
axe0

Windows 10 Pro
 
 

My System SpecsSystem Spec
03 Jul 2017   #7
Nctolhu

Windows 7 Ultimate 64-bit SP1
 
 

Code:
Diagnostic Report (1.9.0027.0):
-----------------------------------------
Windows Validation Data-->

Validation Code: 0
Cached Online Validation Code: 0x0
Windows Product Key: *****-*****-33D89-JJM87-VT7D9
Windows Product Key Hash: JQq0q1mq650FUOLL/2vIDjTxGGc=
Windows Product ID: 00426-383-5431627-06938
Windows Product ID Type: 5
Windows License Type: Retail
Windows OS version: 6.1.7601.2.00010100.1.0.001
ID: {269F9F28-E003-44DD-8E7C-119924DF5257}(1)
Is Admin: Yes
TestCab: 0x0
LegitcheckControl ActiveX: N/A, hr = 0x80070002
Signed By: N/A, hr = 0x80070002
Product Name: Windows 7 Ultimate
Architecture: 0x00000009
Build lab: 7601.win7sp1_ldr.170512-0600
TTS Error: 
Validation Diagnostic: 
Resolution Status: N/A

Vista WgaER Data-->
ThreatID(s): N/A, hr = 0x80070002
Version: N/A, hr = 0x80070002

Windows XP Notifications Data-->
Cached Result: N/A, hr = 0x80070002
File Exists: No
Version: N/A, hr = 0x80070002
WgaTray.exe Signed By: N/A, hr = 0x80070002
WgaLogon.dll Signed By: N/A, hr = 0x80070002

OGA Notifications Data-->
Cached Result: N/A, hr = 0x80070002
Version: N/A, hr = 0x80070002
OGAExec.exe Signed By: N/A, hr = 0x80070002
OGAAddin.dll Signed By: N/A, hr = 0x80070002

OGA Data-->
Office Status: 109 N/A
OGA Version: N/A, 0x80070002
Signed By: N/A, hr = 0x80070002
Office Diagnostics: 025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3

Browser Data-->
Proxy settings: N/A
User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)
Default Browser: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
Download signed ActiveX controls: Prompt
Download unsigned ActiveX controls: Disabled
Run ActiveX controls and plug-ins: Allowed
Initialize and script ActiveX controls not marked as safe: Disabled
Allow scripting of Internet Explorer Webbrowser control: Disabled
Active scripting: Allowed
Script ActiveX controls marked as safe for scripting: Allowed

File Scan Data-->

Other data-->
Office Details: <GenuineResults><MachineData><UGUID>{269F9F28-E003-44DD-8E7C-119924DF5257}</UGUID><Version>1.9.0027.0</Version><OS>6.1.7601.2.00010100.1.0.001</OS><Architecture>x64</Architecture><PKey>*****-*****-*****-*****-VT7D9</PKey><PID>00426-383-5431627-06938</PID><PIDType>5</PIDType><SID>S-1-5-21-941422516-3030154424-3772097482</SID><SYSTEM><Manufacturer>System manufacturer</Manufacturer><Model>System Product Name</Model></SYSTEM><BIOS><Manufacturer>American Megatrends Inc.</Manufacturer><Version>3007</Version><SMBIOSVersion major="3" minor="0"/><Date>20161129000000.000000+000</Date></BIOS><HWID>B38E3B07018400FE</HWID><UserLCID>0409</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>Central Standard Time(GMT-06:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM/><GANotification/></MachineData><Software><Office><Result>109</Result><Products/><Applications/></Office></Software></GenuineResults>  

Spsys.log Content: 0x80070002

Licensing Data-->
Software licensing service version: 6.1.7601.17514

Name: Windows(R) 7, Ultimate edition
Description: Windows Operating System - Windows(R) 7, RETAIL channel
Activation ID: c619d61c-c2f2-40c3-ab3f-c5924314b0f3
Application ID: 55c92734-d682-4d71-983e-d6ec3f16059f
Extended PID: 00426-00212-383-543162-00-1033-7601.0000-2862016
Installation ID: 020464401636714054799032580930136706282550700755666955
Processor Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88338
Machine Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88339
Use License URL: http://go.microsoft.com/fwlink/?LinkID=88341
Product Key Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88340
Partial Product Key: VT7D9
License Status: Licensed
Remaining Windows rearm count: 3
Trusted time: 7/3/2017 11:50:33

Windows Activation Technologies-->
HrOffline: 0x00000000
HrOnline: 0x00000000
HealthStatus: 0x0000000000000000
Event Time Stamp: 4:14:2017 10:31
ActiveX: Registered, Version: 7.1.7600.16395
Admin Service: Registered, Version: 7.1.7600.16395
HealthStatus Bitmask Output:


HWID Data-->
HWID Hash Current: MAAAAAEAAQABAAEAAQADAAAAAQABAAEAhFHst8xPqMF8547jGoAKQxpqde1QjvRS

OEM Activation 1.0 Data-->
N/A

OEM Activation 2.0 Data-->
BIOS valid for OA 2.0: yes, but no SLIC table
Windows marker version: N/A
OEMID and OEMTableID Consistent: N/A
BIOS Information: 
  ACPI Table Name	OEMID Value	OEMTableID Value
  APIC			ALASKA		A M I 
  FACP			ALASKA		A M I 
  DBGP			INTEL 		
  HPET			INTEL 		SKL
  MCFG			ALASKA		A M I 
  FPDT			ALASKA		A M I 
  SSDT			SataRe		SataTabl
  FIDT			ALASKA		A M I
  SSDT			SataRe		SataTabl
  SSDT			SataRe		SataTabl
  SSDT			SataRe		SataTabl
  SSDT			SataRe		SataTabl
  UEFI			INTEL 		EDK2    
  SSDT			SataRe		SataTabl
  DBG2			INTEL 		
  LPIT			INTEL 		SKL
  WSMT			INTEL 		SKL
  SSDT			SataRe		SataTabl
  SSDT			SataRe		SataTabl
My System SpecsSystem Spec
05 Jul 2017   #8
axe0

Windows 10 Pro
 
 

I can't find much more related the below event, I will give you the benefit of doubt in regards to rule #4 which implies that no support is provided with anything related to piracy.

Rules: Windows 7 Help Forums - Forum Rules


I would suggest to run some scans, to be sure there are no similar files that may affect the issue.

Code:
Event[36313]:
  Log Name: System
  Source: Microsoft Antimalware
  Date: 2017-06-18T07:13:17.000
  Event ID: 1117
  Task: N/A
  Level: Information
  Opcode: Info
  Keyword: Classic
  User: N/A
  User Name: N/A
  Computer: Burn-PC
  Description: 
Microsoft Antimalware has taken action to protect this machine from malware or other potentially unwanted software.
 For more information please see the following:
http://go.microsoft.com/fwlink/?linkid=37020&name=HackTool:MSIL/Gendows&threatid=2147687558&enterprise=0
 	Name: HackTool:MSIL/Gendows
 	ID: 2147687558
 	Severity: Medium
 	Category: Tool
 	Path: file:_C:\Windows\AutoKMS\AutoKMS.exe
 	Detection Origin: Local machine
 	Detection Type: Concrete
 	Detection Source: Real-Time Protection
 	User: Burn-PC\Burn
 	Process Name: C:\Windows\AutoKMS\AutoKMS.exe
 	Action: Allow
 	Action Status:  No additional actions required
 	Error Code: 0x00000000
 	Error description: The operation completed successfully. 
 	Signature Version: AV: 1.245.1013.0, AS: 1.245.1013.0, NIS: 117.2.0.0
 	Engine Version: AM: 1.1.13804.0, NIS: 2.1.13804.0




Random BSODs, when restarting or shutting down windows Diagnostics Test Random BSODs, when restarting or shutting down windows
 Malware scan

Please run a threat scan with Malwarebytes*, a full scan with your AV, scan your system with Adwcleaner, Kaspersky TTDSKiller, ESET Online Scanner and SuperAntiSpyware
Note   Note
*(Uncheck trial version in the installation process)

Please upload all scan logs.
My System SpecsSystem Spec
05 Jul 2017   #9
torchwood

W7 home premium 32bit/W7HP 64bit/w10 tp insider ring
 
 

That tool is known to be an activation exploit, for the OS and Office
you have just Whitelisted it, please uninstall it

Then re-install KB971033

Reboot

rerun the WGA tool and a new set of BSOD logs. (note some files were missing)

Roy
My System SpecsSystem Spec
06 Jul 2017   #10
Nctolhu

Windows 7 Ultimate 64-bit SP1
 
 

Code:
Diagnostic Report (1.9.0027.0):
-----------------------------------------
Windows Validation Data-->

Validation Code: 0
Cached Online Validation Code: 0x0
Windows Product Key: *****-*****-33D89-JJM87-VT7D9
Windows Product Key Hash: JQq0q1mq650FUOLL/2vIDjTxGGc=
Windows Product ID: 00426-383-5431627-06938
Windows Product ID Type: 5
Windows License Type: Retail
Windows OS version: 6.1.7601.2.00010100.1.0.001
ID: {269F9F28-E003-44DD-8E7C-119924DF5257}(3)
Is Admin: Yes
TestCab: 0x0
LegitcheckControl ActiveX: N/A, hr = 0x80070002
Signed By: N/A, hr = 0x80070002
Product Name: Windows 7 Ultimate
Architecture: 0x00000009
Build lab: 7601.win7sp1_ldr.170512-0600
TTS Error: 
Validation Diagnostic: 
Resolution Status: N/A

Vista WgaER Data-->
ThreatID(s): N/A, hr = 0x80070002
Version: N/A, hr = 0x80070002

Windows XP Notifications Data-->
Cached Result: N/A, hr = 0x80070002
File Exists: No
Version: N/A, hr = 0x80070002
WgaTray.exe Signed By: N/A, hr = 0x80070002
WgaLogon.dll Signed By: N/A, hr = 0x80070002

OGA Notifications Data-->
Cached Result: N/A, hr = 0x80070002
Version: N/A, hr = 0x80070002
OGAExec.exe Signed By: N/A, hr = 0x80070002
OGAAddin.dll Signed By: N/A, hr = 0x80070002

OGA Data-->
Office Status: 109 N/A
OGA Version: N/A, 0x80070002
Signed By: N/A, hr = 0x80070002
Office Diagnostics: 025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3

Browser Data-->
Proxy settings: N/A
User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)
Default Browser: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
Download signed ActiveX controls: Prompt
Download unsigned ActiveX controls: Disabled
Run ActiveX controls and plug-ins: Allowed
Initialize and script ActiveX controls not marked as safe: Disabled
Allow scripting of Internet Explorer Webbrowser control: Disabled
Active scripting: Allowed
Script ActiveX controls marked as safe for scripting: Allowed

File Scan Data-->

Other data-->
Office Details: <GenuineResults><MachineData><UGUID>{269F9F28-E003-44DD-8E7C-119924DF5257}</UGUID><Version>1.9.0027.0</Version><OS>6.1.7601.2.00010100.1.0.001</OS><Architecture>x64</Architecture><PKey>*****-*****-*****-*****-VT7D9</PKey><PID>00426-383-5431627-06938</PID><PIDType>5</PIDType><SID>S-1-5-21-941422516-3030154424-3772097482</SID><SYSTEM><Manufacturer>System manufacturer</Manufacturer><Model>System Product Name</Model></SYSTEM><BIOS><Manufacturer>American Megatrends Inc.</Manufacturer><Version>3007</Version><SMBIOSVersion major="3" minor="0"/><Date>20161129000000.000000+000</Date></BIOS><HWID>B38E3B07018400FE</HWID><UserLCID>0409</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>Central Standard Time(GMT-06:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM/><GANotification/></MachineData><Software><Office><Result>109</Result><Products/><Applications/></Office></Software></GenuineResults>  

Spsys.log Content: 0x80070002

Licensing Data-->
Software licensing service version: 6.1.7601.17514

Name: Windows(R) 7, Ultimate edition
Description: Windows Operating System - Windows(R) 7, RETAIL channel
Activation ID: c619d61c-c2f2-40c3-ab3f-c5924314b0f3
Application ID: 55c92734-d682-4d71-983e-d6ec3f16059f
Extended PID: 00426-00212-383-543162-00-1033-7601.0000-2862016
Installation ID: 020464401636714054799032580930136706282550700755666955
Processor Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88338
Machine Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88339
Use License URL: http://go.microsoft.com/fwlink/?LinkID=88341
Product Key Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88340
Partial Product Key: VT7D9
License Status: Licensed
Remaining Windows rearm count: 3
Trusted time: 7/6/2017 08:26:21

Windows Activation Technologies-->
HrOffline: 0x00000000
HrOnline: 0x00000000
HealthStatus: 0x0000000000000000
Event Time Stamp: 4:14:2017 10:31
ActiveX: Registered, Version: 7.1.7600.16395
Admin Service: Registered, Version: 7.1.7600.16395
HealthStatus Bitmask Output:


HWID Data-->
HWID Hash Current: LgAAAAEAAQABAAEAAQACAAAAAQABAAEAhFHst8xPqMF8547jGoAKQxpqUI70Ug==

OEM Activation 1.0 Data-->
N/A

OEM Activation 2.0 Data-->
BIOS valid for OA 2.0: yes, but no SLIC table
Windows marker version: N/A
OEMID and OEMTableID Consistent: N/A
BIOS Information: 
  ACPI Table Name	OEMID Value	OEMTableID Value
  APIC			ALASKA		A M I 
  FACP			ALASKA		A M I 
  DBGP			INTEL 		
  HPET			INTEL 		SKL
  MCFG			ALASKA		A M I 
  FPDT			ALASKA		A M I 
  SSDT			SataRe		SataTabl
  FIDT			ALASKA		A M I
  SSDT			SataRe		SataTabl
  SSDT			SataRe		SataTabl
  SSDT			SataRe		SataTabl
  SSDT			SataRe		SataTabl
  UEFI			INTEL 		EDK2    
  SSDT			SataRe		SataTabl
  DBG2			INTEL 		
  LPIT			INTEL 		SKL
  WSMT			INTEL 		SKL
  SSDT			SataRe		SataTabl
  SSDT			SataRe		SataTabl


I believe this is all the log files and everything that was asked for. Couldn't figure out where essentials kept it's logs, however it came up clean after running all the other programs and removing everything that was found. Uninstalled and re-installed the KB971033, didn't notice any changes after doing so. All items that were white listed were unlisted before the scans and deleted/uninstalled once the scans completed. If you need anything else please let me know and thank you for your continued help.


Attached Files
File Type: zip BURN-PC-Thu_07_06_2017__82500_70.zip (1.19 MB, 3 views)
File Type: zip Log_Files.zip (93.0 KB, 2 views)
My System SpecsSystem Spec
Reply

 Random BSODs, when restarting or shutting down windows




Thread Tools




Similar help and support threads
Thread Forum
BSOD upon Restarting or Shutting Down
Get BSOD when restarting or shutting down. System asks to force closure of file holding up shutdown. Windows Task Manager shows no application running. BSOD appears when I force closure. The only new thing I done recently is install VirtualBox and try to run Windows 10 Technical Preview as a...
BSOD Help and Support
Random BSODs, computer randomly shutting down, please help
Hi, For weeks now, I've been having random BSODs that include PFN_LIST_CORRUPT, MEMORY_MANAGEMENT, BAD_POOL_HEADER, IRQL_NOT_LESS_OR_EQUAL, and more. Sometimes, the computer randomly shuts off and restarts. A few times, the screen freezes and the keyboard and mouse shuts off. Lately, it seems...
BSOD Help and Support
BSOD when Shutting Down or Restarting Computer
I'm not sure when the issue started. I usually don't shut down my computer to often but I recently started having to pay for Utilities and my computer is a bit power hungry. I don't get a BSOD every time that the computer shuts down but it is probably 60-70 percent of the time. The main culprit of...
BSOD Help and Support
Shutting down and restarting laptop
I have a habit of leaving my laptop on all the time, it's plugged into power. What is too long to leave a laptop running? How many times should I shut down or restart it? Thanks
General Discussion
Recent shutting down abd restarting by itself
Hello, I am new to this board so I thought the best place to start was general discussion. Ok, I have an HP laptop that has recently started shutting down and re starting itself. It offers me the option to start in SAFE MODE.:( I also have gotten a few messages asking that I stop...
General Discussion


Our Sites

Site Links

About Us

Find Us

Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

Designer Media Ltd

All times are GMT -5. The time now is 01:05.
Twitter Facebook Google+ Seven Forums iOS App Seven Forums Android App