BSOD ntoskrnl.exe then atikmdag.sys errors. Please help! - wyles

[1nonly]

I'm at my wits end on this. For months now Ive been getting BSOD errors. Different kinds, mostly ntoskrnl.exe errors. Memory modules appear to be well, uninstalled avg as i heard it could cause problems, purchased avast yesterday and installed it. Did a repair install of windows 7 64-bit home premium edition. Worked perfectly well all day yesterday. Today it starts up and goes blue screen again. So frustrated, at this point I just want to know if I need a new computer or if this one is still salvageable. See attached for the dump files.

 

[Dsprague]

first perhaps you would care to explain your host file:

# Copyright (c) 1993-2009 Microsoft Corp.
#
# This is a sample HOSTS file used by Microsoft TCP/IP for Windows.
#
# This file contains the mappings of IP addresses to host names. Each
# entry should be kept on an individual line. The IP address should
# be placed in the first column followed by the corresponding host name.
# The IP address and the host name should be separated by at least one
# space.
#
# Additionally, comments (such as these) may be inserted on individual
# lines or following the machine name denoted by a '#' symbol.
#
# For example:
#
#      102.54.94.97     rhino.acme.com          # source server
#       38.25.63.10     x.acme.com              # x client host

# localhost name resolution is handled within DNS itself.
#    127.0.0.1       localhost
#    ::1             localhost

127.0.0.1 activate.adobe.com  
127.0.0.1       activation.nero.com  
127.0.0.1 license.superantispyware.com
127.0.0.1 license.superantispyware.com

 

[1nonly]

I'm sorry, I don't follow what you're asking.
I don't understand what would need to be explained about the host file. Not even sure how to read it.

 

[Dsprague]

Well you see this host file shows evidence of blocking licensing servers that validate software which tells me that you have cracked software on your pc and we do not support piracy on this site.

Forum Rules and info- Please Read!

4) No discussion of piracy or anything illegal is allowed at all. Such as software, music, videos and other intellectual property violations.

 

[1nonly]

fair enough. honestly, i don't recall pirated software on the computer. It was given to local tech for review when I first got errors in november but I don't recall much of anything being done on it. I know I have windows and avast and both are licensed. I also have office 2010 validated and working. those are the only main programs that I'm aware of.
I don't use nero so i couldn't tell you if I have that or not.
as far as adobe, i have the reader, but that's free and that's about it.
don't know about superantispyware...it's name is self-explanatory, but i don't use it if it exists on my computer.
i do use a free version of malwarebytes for my spyware scans, along with avast.

either way, because of those entries I won't be able to get help? Once the computer is up and running I can look for those bits of software and remove them if they exist.
piracy isn't my thing. too many people i know have had problems with pirated software and that type of software appears to be more trouble than it's worth. I'd rather not play cat and mouse is what I'm trying to say.

I would dare to say that the guy that looked the computer over thought he was doing me some sort of favor. For all I know hey may have been part of the problem.

so again, I ask...would I not be able to get help now? I would appreciate it.

 

[1nonly]

So, DsPrague, you won't be able to help me?
For what its worth I'm sorry that software was on the computer but i really had no knowledge of it. It's the family computer and I'm just trying to get it to work again.
​

 

[1nonly]

worst case scenario, i could try to decipher the Crashes and Debugging "how to" section, I guess. Seems I may have been blocked out of help here.
That's cool. Rules are rules. That's what I get for letting someone else look over the computer and trusting them. He won't be looking over my computer again, that's for sure.

 

[Slartybart]

Please post the product on your COA sticker (bottom, side or battery compartment)
Juts the product (Home, Professional, Ultimate), not any numbers

Run go.microsoft.com/fwlink/?linkid=52012
and post the output wrapped in a code box
-hit the # icon on the post menu bar when you post the output)

The MGADiag tool detects and reports BIOS information.

 

[1nonly]

I will try that.
FYI, i put the computer together so there won't be a sticker on it. The version of windows on my computer is Windows 7 Home Premium (64-bit) edition. I have since lost the original software cd of windows in our July 2012 move. However, I was able to extract the key with 3rd party software yesterday prior to doing a repair install. In fact, I used the directions from this website to get the iso of my windows edition.
I'm at work now and won't be home again for another few hours so once I am I will do what you requested. Hopefully i don't run into any problems trying to run them. Hopefully the tool you suggests runs in safe mode, as it appears that's the only way i can get into my computer today.
Thanks in advance for helping me.

 

[carwiz]

fffff880`0480b000 fffff880`053be000 atikmdag T (no symbols)
Loaded symbol image file: atikmdag.sys
Image path: \SystemRoot\system32\DRIVERS\atikmdag.sys
Image name: atikmdag.sys
Timestamp: Fri Nov 16 14:18:02 2012 (50A69F7A)
CheckSum: 00B65E3C

atikmdag.sys tried to write to an invalid memory address. Check for driver updates to your ATI Radeon. Be sure to download drivers from the OEM site. Don't rely on third party sites for drivers.

 

[1nonly]

Here is the information I got from the Microsoft Genuine Advantage Diagnostic Tool

Diagnostic Report (1.9.0027.0):
-----------------------------------------
Windows Validation Data-->

Validation Code: 0
Cached Online Validation Code: N/A, hr = 0x8007043c
Windows Product Key: *****-*****-G8FVF-37KJ3-QXH4P
Windows Product Key Hash: rCSuajFfrJPE6hpOH0QiYat1nfo=
Windows Product ID: 00359-232-7343911-86942
Windows Product ID Type: 5
Windows License Type: Retail
Windows OS version: 6.1.7601.2.00010300.1.0.003
ID: {227B5B2E-75BE-4665-B83E-F7FF1D0DF235}(3)
Is Admin: Yes
TestCab: 0x0
LegitcheckControl ActiveX: N/A, hr = 0x80070002
Signed By: N/A, hr = 0x80070002
Product Name: Windows 7 Home Premium
Architecture: 0x00000009
Build lab: 7601.win7sp1_gdr.120830-0333
TTS Error: 
Validation Diagnostic: 
Resolution Status: N/A

Vista WgaER Data-->
ThreatID(s): N/A, hr = 0x80070002
Version: N/A, hr = 0x80070002

Windows XP Notifications Data-->
Cached Result: N/A, hr = 0x80070002
File Exists: No
Version: N/A, hr = 0x80070002
WgaTray.exe Signed By: N/A, hr = 0x80070002
WgaLogon.dll Signed By: N/A, hr = 0x80070002

OGA Notifications Data-->
Cached Result: N/A, hr = 0x80070002
Version: N/A, hr = 0x80070002
OGAExec.exe Signed By: N/A, hr = 0x80070002
OGAAddin.dll Signed By: N/A, hr = 0x80070002

OGA Data-->
Office Status: 109 N/A
OGA Version: N/A, 0x80070002
Signed By: N/A, hr = 0x80070002
Office Diagnostics: 025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3

Browser Data-->
Proxy settings: N/A
User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)
Default Browser: C:\Program Files (x86)\Mozilla Firefox\firefox.exe
Download signed ActiveX controls: Prompt
Download unsigned ActiveX controls: Disabled
Run ActiveX controls and plug-ins: Allowed
Initialize and script ActiveX controls not marked as safe: Disabled
Allow scripting of Internet Explorer Webbrowser control: Disabled
Active scripting: Allowed
Script ActiveX controls marked as safe for scripting: Allowed

File Scan Data-->

Other data-->
Office Details: <GenuineResults><MachineData><UGUID>{227B5B2E-75BE-4665-B83E-F7FF1D0DF235}</UGUID><Version>1.9.0027.0</Version><OS>6.1.7601.2.00010300.1.0.003</OS><Architecture>x64</Architecture><PKey>*****-*****-*****-*****-QXH4P</PKey><PID>00359-232-7343911-86942</PID><PIDType>5</PIDType><SID>S-1-5-21-1355069355-179563548-1826450633</SID><SYSTEM><Manufacturer>MICRO-STAR INTERNATIONAL CO.,LTD</Manufacturer><Model>MS-7501</Model></SYSTEM><BIOS><Manufacturer>American Megatrends Inc.</Manufacturer><Version>V1.12</Version><SMBIOSVersion major="2" minor="5"/><Date>20100824000000.000000+000</Date></BIOS><HWID>7CB83607018400F8</HWID><UserLCID>0409</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>Pacific Standard Time(GMT-08:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM/><GANotification/></MachineData><Software><Office><Result>109</Result><Products/><Applications/></Office></Software></GenuineResults>  

Spsys.log Content: 0x80070002

Licensing Data-->
On a computer running Microsoft Windows non-core edition, run 'slui.exe 0x2a 0x8007043C' to display the error text.
Error: 0x8007043C 

Windows Activation Technologies-->
HrOffline: 0x00000000
HrOnline: 0x00000000
HealthStatus: 0x0000000000000000
Event Time Stamp: 2:10:2013 18:28
ActiveX: Registered, Version: 7.1.7600.16395
Admin Service: Not Registered - 0x8007043c
HealthStatus Bitmask Output:


HWID Data-->
HWID Hash Current: LgAAAAEABAABAAAAAAAAAAAAAgABAAEAln0SiSS5Sm+emlTyEDO+dYwlfpHI9A==

OEM Activation 1.0 Data-->
N/A

OEM Activation 2.0 Data-->
BIOS valid for OA 2.0: yes, but no SLIC table
Windows marker version: N/A
OEMID and OEMTableID Consistent: N/A
BIOS Information: 
  ACPI Table Name    OEMID Value    OEMTableID Value
  APIC            082410        APIC1301
  FACP            082410        FACP1301
  SRAT            082410        OEMSRAT 
  MCFG            082410        OEMMCFG 
  OEMB            082410        OEMB1301
  SRAT            082410        OEMSRAT 
  TEPH            082410        OEMHPET

 

[Slartybart]

thanks, I'm asking for help on the MGSdiag output.

 

[1nonly]

fffff880`0480b000 fffff880`053be000 atikmdag T (no symbols)
Loaded symbol image file: atikmdag.sys
Image path: \SystemRoot\system32\DRIVERS\atikmdag.sys
Image name: atikmdag.sys
Timestamp: Fri Nov 16 14:18:02 2012 (50A69F7A)
CheckSum: 00B65E3C

atikmdag.sys tried to write to an invalid memory address. Check for driver updates to your ATI Radeon. Be sure to download drivers from the OEM site. Don't rely on third party sites for drivers.

I did download the installer. I had not updated those drivers since having done my repair installation yesterday. I uninstalled the default driver in safe mode and that seemed to allow me to log into my account normally (non safe mode) without a BSOD since I could not load the video driver updates in safe mode. I then updated the drivers and rebooted. So far, so good, but the benchmark for me is if the computer goes more than two days without a blue screen. So far, every time I've tried something it seems more like a cheap band aid. I'll still await any other responses on what to to based on the information I submitted on my initial post.
Oh, and i hadn't said it yet...thank you.

 

[1nonly]

thanks, I'm asking for help on the MGSdiag output.

More than willing to try anything to keep my computer running well.

 

[Slartybart]

A few more housekeeping tasks while we wait for MGAdiag analysis

Run the following MS Fixit:

Fix this problem
Microsoft Fix it 50267​

To reset the Hosts file back to the default automatically, click the Fix it button or link, click Run in the File Download dialog box, and then follow the steps in the Fix it wizard.
​

Please update your forum system specs - use theEasy System Specs link in my sig, so you don't have to type in in.

Please PUBLISH a Speccy report (publish on Speccy file menu) and post the URL you get back in a new post here.

These things will help everyone understand your system better.

Thanks,

Bill
.

 

[1nonly]

Finally able to log into computer without safe mode again...

Applied fix it that you posted.
Updated forum system specs with the link in your sig.
Speccy report found at: http://speccy.piriform.com/results/2tF3PlBsv2cX5w6jH7P8pHj

 

[gregrocker]

Work through these Troubleshooting Steps for Windows 7 particularly establishing a Clean Boot with only AV starting with Win7, checking the logs and System Resources for clues, running all Important and Optional Windows Updates after enabling Automatically deliver drivers via Windows Update (Step 3).

I would also consider getting a perfect install following these same steps for Clean Reinstall - Factory OEM Windows 7. Set up yourself as passworded Administrator then other family members as Standard Users so that they cannot download/install from questionable sites or change settings without your permission.

 

[NoelDP]

The Key in use is an MSDN Key from a not-for-resale MSDN account.
Unless you are an MSDN subscriber, you are not entitled to use the Key – and whoever sold it to you was not entitled to do so.
You need to claim an immediate refund from the vendor - do NOT accept the offer of a new key (all they are trying to do is to get past the 45-day claims window or avoid you sending the evidence of their crimes to the authorities)

Please read the following posts.... .................................

http://social.microsoft.com/Forums/en-US/genuinewindows7/thread/a2444f34-0aff-4f29-a8ac-67e28b0c0285

and

http://social.microsoft.com/Forums/en-US/genuinewindows7/thread/309bb621-92d5-43d6-98c1-2bb51b35607f

The pirates have got VERY good at this over the past few years, as the price of equipment for manufacturing the packages drops, and as factories open in less well-policed countries.

see also this post....

http://social.microsoft.com/Forums/en-US/genuinewindows7/thread/46a58748-5a64-41ff-b7f4-f6d3b47beca9


Also - have a look at this video....


http://www.youtube.com/watch?v=hzqNNiOM0cs

You may be able to get a complimentary copy of the OS from Microsoft - fill in the Counterfeit report here...
http://www.microsoft.com/en-gb/howtotell/default.aspx

 

[1nonly]

The Key in use is an MSDN Key from a not-for-resale MSDN account.
Unless you are an MSDN subscriber, you are not entitled to use the Key – and whoever sold it to you was not entitled to do so.
You need to claim an immediate refund from the vendor - do NOT accept the offer of a new key (all they are trying to do is to get past the 45-day claims window or avoid you sending the evidence of their crimes to the authorities)

Please read the following posts.... .................................

http://social.microsoft.com/Forums/en-US/genuinewindows7/thread/a2444f34-0aff-4f29-a8ac-67e28b0c0285

and

http://social.microsoft.com/Forums/en-US/genuinewindows7/thread/309bb621-92d5-43d6-98c1-2bb51b35607f

The pirates have got VERY good at this over the past few years, as the price of equipment for manufacturing the packages drops, and as factories open in less well-policed countries.

see also this post....

http://social.microsoft.com/Forums/en-US/genuinewindows7/thread/46a58748-5a64-41ff-b7f4-f6d3b47beca9


Also - have a look at this video....


http://www.youtube.com/watch?v=hzqNNiOM0cs

You may be able to get a complimentary copy of the OS from Microsoft - fill in the Counterfeit report here...
http://www.microsoft.com/en-gb/howtotell/default.aspx

Thanks for the info. Interesting youtube video, but the guy recording sounds incredibly nerdy and condescending. Either way, thank you. I am a current MSDN subscriber via my law enforcement work as I was working as a pseudo tech guy. I'm not anymore, but I am still a subscriber until, I think another year and a half..(don't exactly remember). A lot of neat keys available through the service, many of which I never used. Such is life. But yes, the keys are mine and were not sold to me. As I stated in a post earlier, the original discs I used for installing the OS were lost in a move to another house over the summer. But the key is legit. Thanks for your concern.

 

[NoelDP]

That's fine then
Carry on, constable
(sorry - couldn't resist that one.)

I'd suggest running an SFC scan and CheckSUR, and see if they point up any file system problems...

If you follow the http://www.sevenforums.com/windows-...4840-windows-update-posting-instructions.html it'll give us the data.