6 different BSODs while normally using computer (hardware tested - OK)

[winio]

Dear friends,
I have annoying problems with BSODs on my laptop. It happens 1-2 times a day during normal work - browsing internet, writing email, watching youtube etc.
I have 6 different BSODs - 0x24, 0x3b, 0x7e, 0x01, 0xc4 and 0x1a
Hardware tested and working OK
* I have tested RAM with memtest (bootable from pendrive, 8h working no errors)
* CPU temperature OK, cleaned heatsink, new thermal grease - CPU temp 40-55C
* Hard disk: SMART clean, no bad sectors (40GB free storage)

Tried to solve problem myself:
*done 'format C:\' - new clean installation Windows7 Proffesional x64
*updated all drivers and updated windows
*deinstalled Arcavir antivirus (caused bsods while using driver verifier) and installed avast

Unluckily, still have problem - I do not know what to do.
I am giving You the zip file containing dump files and configuration. Hope You help me.

greetings,
Winio

 

[ICIT2LOL]

Hello and welcome winio mate I see Avast as a listed issue

IMAGE_NAME: [COLOR="Red"] aswSP.sys[/COLOR]

STACK_COMMAND:  .cxr 0xfffff8800d0254f0 ; kb

BUCKET_ID:  WRONG_SYMBOLS

FAILURE_BUCKET_ID:  WRONG_SYMBOLS

ANALYSIS_SOURCE:  KM

FAILURE_ID_HASH_STRING:  km:wrong_symbols

I'd try disabling or getting rid of it for starters and have you run these
SFC /SCANNOW Command - System File Checker
Disk Check < if necessary include the /f and /r in the command line as per Option2
Run these in safe mode and the sfc often best run for two to three runs – you can leave out the /r switch in ckdsk if you feel it not necessary
NB SFC best run for about three scans
The memtest too did you run it for at least 8 PASSES because any less and you may as well not bother and we only recommend this for memtest RAM - Test with Memtest86+ so is the one you used??

There are other dumps that have errors but lets start with the easy stuff

 

[winio]

So:

SFC /scannow - i did several times, as I was reading the forum before posting my thread - no errors
Disc check (CHKDSK) as well
Memtest - was running whole night, no errors. Also changed RAM sticks for 100% working and tested again, no errors.
Checked with Memtest86+ booted from USB (before Windows).

"I'd try disabling or getting rid of it for starters and have you run these"
Do You mean, that I need to disable Avast? As I see it is an Avast Antivirus file. I had same problems with Arcavir (problems with the .sys file related to Arcavir Antivirus module). Installed Avast, as millions users use Avast and it is working. Disabling antivirus is not a solution, as I also had problems with previous one - it must be something different... My girlfriend was using Avast with no problem - than I have installed my Arcavir Antivirus on her laptop and it is working as well...

 

[ICIT2LOL]

Well that was just one of the dumps winio I might jst ask for backup on this as there are others and see what someone else might see.

 

[winio]

Do You need some more information or files?

 

[ICIT2LOL]

No not just for the minute I have asked for some help but I will still keep on digging around.

 

[axe0]

Hi winio,

Please uninstall Avast and use Microsoft Security Essentials as alternative

Please check Toshiba for BIOS updates and check if Crucial has firmware updates for your SSD.

What memtest did you run?

Upload the chkdsk log :arrow: Check Disk (chkdsk) - Read Event Viewer Log


Please run CPU-Z | Softwares | CPUID, open it and make screenshots of the following tabs

• CPU
• Mainboard
• Memory
• SPD*
• Graphics

*SPD shows the details of each stick, you can show the details by choosing different slots in the left upper corner.
Please make screenshots of each stick.

Please post each screenshot in your next reply/replies.

 

[torchwood]

Hi Winio,
where did you get your install media?
I have a feeling its corrupt.
Your showing an MSDN Ultimate key on a pro version.

please run this tool, copy/paste the output
http://go.microsoft.com/fwlink/?LinkID=52012.

Roy

 

[winio]

@ Torchwood:
My Windows is Windows 7 Proffesional.
Instal Media: downloaded from official Microsoft MSDNAA - I am student - Warsaw Univ. of Technology
Below I paste the report You wanted:

Diagnostic Report (1.9.0027.0):
-----------------------------------------
Windows Validation Data-->

Validation Code: 0
Cached Online Validation Code: N/A, hr = 0xc004f012
Windows Product Key: *****-*****-PJW24-BF2W4-BJYMR
Windows Product Key Hash: bRkksEt0tFBa7IfEvgjMBwm0dIg=
Windows Product ID: 00371-705-1077652-06970
Windows Product ID Type: 5
Windows License Type: Retail
Windows OS version: 6.1.7601.2.00010100.1.0.048
ID: {E5A311A5-678E-4CE6-A803-558A6C0C0BEA}(1)
Is Admin: Yes
TestCab: 0x0
LegitcheckControl ActiveX: N/A, hr = 0x80070002
Signed By: N/A, hr = 0x80070002
Product Name: Windows 7 Professional
Architecture: 0x00000009
Build lab: 7601.win7sp1_ldr.160516-0600
TTS Error:
Validation Diagnostic:
Resolution Status: N/A

Vista WgaER Data-->
ThreatID(s): N/A, hr = 0x80070002
Version: N/A, hr = 0x80070002

Windows XP Notifications Data-->
Cached Result: N/A, hr = 0x80070002
File Exists: No
Version: N/A, hr = 0x80070002
WgaTray.exe Signed By: N/A, hr = 0x80070002
WgaLogon.dll Signed By: N/A, hr = 0x80070002

OGA Notifications Data-->
Cached Result: N/A, hr = 0x80070002
Version: N/A, hr = 0x80070002
OGAExec.exe Signed By: N/A, hr = 0x80070002
OGAAddin.dll Signed By: N/A, hr = 0x80070002

OGA Data-->
Office Status: 109 N/A
OGA Version: N/A, 0x80070002
Signed By: N/A, hr = 0x80070002
Office Diagnostics: 025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3

Browser Data-->
Proxy settings: N/A
User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)
Default Browser: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
Download signed ActiveX controls: Prompt
Download unsigned ActiveX controls: Disabled
Run ActiveX controls and plug-ins: Allowed
Initialize and script ActiveX controls not marked as safe: Disabled
Allow scripting of Internet Explorer Webbrowser control: Disabled
Active scripting: Allowed
Script ActiveX controls marked as safe for scripting: Allowed

File Scan Data-->

Other data-->
Office Details: <GenuineResults><MachineData><UGUID>{E5A311A5-678E-4CE6-A803-558A6C0C0BEA}</UGUID><Version>1.9.0027.0</Version><OS>6.1.7601.2.00010100.1.0.048</OS><Architecture>x64</Architecture><PKey>*****-*****-*****-*****-BJYMR</PKey><PID>00371-705-1077652-06970</PID><PIDType>5</PIDType><SID>S-1-5-21-3907149516-3738058387-1284807862</SID><SYSTEM><Manufacturer>TOSHIBA</Manufacturer><Model>PORTEGE M780</Model></SYSTEM><BIOS><Manufacturer>TOSHIBA</Manufacturer><Version>Version 2.30 </Version><SMBIOSVersion major="2" minor="4"/><Date>20111216000000.000000+000</Date></BIOS><HWID>98C03107018400FC</HWID><UserLCID>0415</UserLCID><SystemLCID>0415</SystemLCID><TimeZone>Środkowoeuropejski czas stand.(GMT+01:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM><OEMID>TOSHIB</OEMID><OEMTableID>A0077 </OEMTableID></OEM><GANotification/></MachineData><Software><Office><Result>109</Result><Products/><Applications/></Office></Software></GenuineResults>

Spsys.log Content: 0x80070002

Licensing Data-->
Wersja usługi licencjonowania oprogramowania: 6.1.7601.17514

Nazwa: Windows(R) 7, Professional edition
Opis: Windows Operating System - Windows(R) 7, RETAIL channel
Identyfikator aktywacji: c1e88de3-96c4-4563-ad7d-775f65b1e670
Identyfikator aplikacji: 55c92734-d682-4d71-983e-d6ec3f16059f
Rozszerzony identyfikator PID: 00371-00212-705-107765-00-1045-7601.0000-2502016
Identyfikator instalacji: 014882271601429591344001432950752716597174588071350604
Adres URL certyfikatu procesora: SpcService Web Service
Adres URL certyfikatu komputera: RacService Web Service
Adres URL licencji użytkowania: UseLicenseService Web Service
Adres URL certyfikatu klucza produktu: PkcService Web Service
Częściowy klucz produktu: BJYMR
Stan licencji: licencjonowano
Licznik pozostałych operacji przywrócenia pierwotnego stanu licencjonowania systemu Windows: 3
Godzina zaufana: 2016-10-16 09:30:33

Windows Activation Technologies-->
HrOffline: 0x00000000
HrOnline: 0x80072EE7
HealthStatus: 0x0000000000000000
Event Time Stamp: 9:9:2016 16:55
ActiveX: Registered, Version: 7.1.7600.16395
Admin Service: Registered, Version: 7.1.7600.16395
HealthStatus Bitmask Output:


HWID Data-->
HWID Hash Current: OAAAAAEABAABAAEAAAABAAAABQABAAEAonbM4gH9JBOYexClSFYuzJr1dHqCMIJDwLGSvtZuXF0=

OEM Activation 1.0 Data-->
N/A

OEM Activation 2.0 Data-->
BIOS valid for OA 2.0: yes
Windows marker version: 0x20001
OEMID and OEMTableID Consistent: yes
BIOS Information:
ACPI Table Name OEMID Value OEMTableID Value
APIC TOSHIB A0077
FACP TOSHIB A0077
HPET TOSHIB A0077
BOOT TOSHIB A0077
MCFG TOSHIB A0077
ASF! TOSHIB A0077
SLIC TOSHIB A0077
SSDT TOSHIB SataAhci
SSDT TOSHIB SataAhci
DMAR INTEL CP_DALE
SSDT TOSHIB SataAhci

 

[winio]

@axe0
Is Microsoft Security essential enough protection? I want to have 'normal' antivirus, like Arcavir
BIOS: Have newest Toshiba BIOS
Crucial firmware: Have newest firmware
Ran memtest 86+ (whole night, booted from USB), RAM 100% OK
================== CHKDSK LOG (IN POLISH) ====================
Nazwa dziennika:Application
Źródło: Microsoft-Windows-Wininit
Data: 2016-09-08 00:50:42
Identyfikator zdarzenia:1001
Kategoria zadania:Brak
Poziom: Informacje
Słowa kluczowe:Klasyczny
Użytkownik: Nie dotyczy
Komputer: M780
Opis:


Sprawdzanie systemu plików na C:
Typ systemu plików to NTFS.

Zaplanowano sprawdzenie dysku.
System Windows sprawdzi teraz dysk.

CHKDSK sprawdza pliki (poziom 1 z 5)
Przetworzone rekordy plików: 183808.

Ukonczono sprawdzanie plików.
Przetworzone rekordy duzych plików: 150.

Przetworzone rekordy uszkodzonych plików: 0.

Przetworzone rekordy atrybutów rozszerzonych: 2.

Przetworzone rekordy ponownej analizy: 84.

CHKDSK sprawdza indeksy (poziom 2 z 5)
Przetworzone wpisy indeksu: 245056.

Ukonczono weryfikacje indeksów.
Przeskanowane pliki nieindeksowane: 0.

Odzyskane pliki nieindeksowane: 0.

CHKDSK sprawdza deskryptory zabezpieczen (poziom 3 z 5)
Przetworzone deskryptory zabezpieczen/identyfikatory plików: 183808.

Oczyszczanie 208 nieuzywanych wpisów w indeksie $SII pliku 0x9.
Oczyszczanie 208 nieuzywanych wpisów w indeksie $SDH pliku 0x9.
Porzadkowanie 208 nieuzywanych deskryptorów zabezpieczen.
Ukonczono sprawdzanie deskryptorów zabezpieczen.
Przetworzone pliki danych: 30625.

Trwa sprawdzanie dziennika Usn...
Przetworzone bajty numerów USN: 35103416.

Zakonczono sprawdzanie poprawnosci dziennika Usn.
CHKDSK sprawdza dane pliku (poziom 4 z 5)
Przetworzone pliki: 183792.

Zakonczono sprawdzanie danych pliku.
CHKDSK sprawdza wolne miejsce (etap 5 z 5)
Przetworzone wolne klastry: 10547989.

Zakonczono sprawdzanie wolnego miejsca na dysku.
System Windows sprawdzil system plików i nie znalazl zadnych problemów.

105953279 KB calkowitego miejsca na dysku.
63385392 KB w 152175 plikach.
88288 KB w 30626 indeksach.
0 KB w uszkodzonych sektorach.
287639 KB uzywanych przez system.
65536 KB zajetych przez plik dziennika.
42191960 KB dostepnych na dysku.

4096 bajtów w kazdej jednostce alokacji.
26488319 ogólem jednostek alokacji na dysku.
10547990 jednostek alokacji dostepnych na dysku.

Informacje wewnetrzne:
00 ce 02 00 1c ca 02 00 59 f6 04 00 00 00 00 00 ........Y.......
7b 00 00 00 54 00 00 00 00 00 00 00 00 00 00 00 {...T...........
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................

System Windows zakonczyl sprawdzanie dysku.
Zaczekaj na ponowne uruchomienie systemu.

Kod XML zdarzenia:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-Wininit" Guid="{206f6dea-d3c5-4d10-bc72-989f03c8b84b}" EventSourceName="Wininit" />
<EventID Qualifiers="16384">1001</EventID>
<Version>0</Version>
<Level>4</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2016-09-07T22:50:42.000000000Z" />
<EventRecordID>3519</EventRecordID>
<Correlation />
<Execution ProcessID="0" ThreadID="0" />
<Channel>Application</Channel>
<Computer>M780</Computer>
<Security />
</System>
<EventData>
<Data>

Sprawdzanie systemu plików na C:
Typ systemu plików to NTFS.

Zaplanowano sprawdzenie dysku.
System Windows sprawdzi teraz dysk.

CHKDSK sprawdza pliki (poziom 1 z 5)
Przetworzone rekordy plików: 183808.

Ukonczono sprawdzanie plików.
Przetworzone rekordy duzych plików: 150.

Przetworzone rekordy uszkodzonych plików: 0.

Przetworzone rekordy atrybutów rozszerzonych: 2.

Przetworzone rekordy ponownej analizy: 84.

CHKDSK sprawdza indeksy (poziom 2 z 5)
Przetworzone wpisy indeksu: 245056.

Ukonczono weryfikacje indeksów.
Przeskanowane pliki nieindeksowane: 0.

Odzyskane pliki nieindeksowane: 0.

CHKDSK sprawdza deskryptory zabezpieczen (poziom 3 z 5)
Przetworzone deskryptory zabezpieczen/identyfikatory plików: 183808.

Oczyszczanie 208 nieuzywanych wpisów w indeksie $SII pliku 0x9.
Oczyszczanie 208 nieuzywanych wpisów w indeksie $SDH pliku 0x9.
Porzadkowanie 208 nieuzywanych deskryptorów zabezpieczen.
Ukonczono sprawdzanie deskryptorów zabezpieczen.
Przetworzone pliki danych: 30625.

Trwa sprawdzanie dziennika Usn...
Przetworzone bajty numerów USN: 35103416.

Zakonczono sprawdzanie poprawnosci dziennika Usn.
CHKDSK sprawdza dane pliku (poziom 4 z 5)
Przetworzone pliki: 183792.

Zakonczono sprawdzanie danych pliku.
CHKDSK sprawdza wolne miejsce (etap 5 z 5)
Przetworzone wolne klastry: 10547989.

Zakonczono sprawdzanie wolnego miejsca na dysku.
System Windows sprawdzil system plików i nie znalazl zadnych problemów.

105953279 KB calkowitego miejsca na dysku. // 105953279 KB ALL STORAGE.
63385392 KB w 152175 plikach. // 63385392 KB IN 152175 FILES.
88288 KB w 30626 indeksach. // 88288 KB IN 30626 iNDEX.
0 KB w uszkodzonych sektorach. // 0 KB IN BAD SECTORS.
287639 KB uzywanych przez system. // 287639 KB SYSTEM USED.
65536 KB zajetych przez plik dziennika. // 65536 KB LOG USED.
42191960 KB dostepnych na dysku. // 42191960 KB FREE STORAGE.

4096 bajtów w kazdej jednostce alokacji. // 4096B ALLOCATION SIZE
26488319 ogólem jednostek alokacji na dysku. // 26488319 ALLOCATIONS ALL
10547990 jednostek alokacji dostepnych na dysku. // 10547990 ALLOCATIONS FREE

Informacje wewnetrzne:
00 ce 02 00 1c ca 02 00 59 f6 04 00 00 00 00 00 ........Y.......
7b 00 00 00 54 00 00 00 00 00 00 00 00 00 00 00 {...T...........
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................

System Windows zakonczyl sprawdzanie dysku.
Zaczekaj na ponowne uruchomienie systemu.
</Data>
</EventData>
</Event>

SYSTEM WINDOWS FINISHED WORK WITH NO ERRORS
===============================================
CPU-Z screens:
Pasteboard — Uploaded Image

 

[axe0]

Winio, many AV programs provide normal protection including MSE. The only thing is that you need to stay careful on the internet.

 

[axe0]

Please remove the 2GB memory stick, mixed memory may cause a lot of problems where the root cause is difficult to identify.

 

[winio]

I have tested each single stick with Memtest, it was OK
About Antivirus - Avast is widely used, so why it may generate problems?

 

[axe0]

Many security programs are widely used, Avast, AVG, Kaspersky, McAfee (unfortunately IMHO), etc., all of them have caused various of problems for many users due to bugs. Hardware and software is usually updated/upgraded. When you update Windows, Windows changes in its way of it works, if programs don't update their software or improperly update their software problems occur due to bugs.

Why sometimes a problem occurs after a while nothing seems to have changed? The 'changed' part is 99% of the time invalid, because users change settings in programs that causes the program to change its behaviour, when looking at the big picture this causes various of changes where some changes are unfortunately resulting in issues.

 

[winio]

Until first post I had 5 new BSODs (2x7E, 2x3B and 4C) - do You need files?

 

[torchwood]

Hi Winio,
You should have a dreamspark licence purchased via Warsaw Uni.
MSDN keys are no longer sold.

And as i said before you have a PRO version, the key is for Ultimate.
the error
HrOnline: 0x80072EE7 : this error code means "Address can not be resolved" This is referring to either the address of the Activation Servers or the Validation servers. In plain speak, this means your computer can not find the place it needs to go to Activate or Validate.

Roy

 

[winio]

I have my system from here:

Sign In | Politechnika Warszawska - Wydzial Elektroniki i Technik Informacyjnych - Microsoft Imagine Premium | Academic Software Discounts

Windows 7 Proffesional x64

 

[ICIT2LOL]

Well you can if you like do a clean install as long as you have a valid key if you just download the free ISO for Pro - after you have saved all your data in whatever way you want.
The ISO can be downloaded from here Windows 7 Direct Download Links just make sure it is the right version - 7 Pro and the correct bit version too. You then burn that ISO toa bootable disk or stick - not keen on sticks myself and just install but I would recommend you clean the drive first using DISKPART.
Disk - Clean and Clean All with Diskpart Command

then
Clean Install Windows 7
Making the bootable disk is fairly straight forward using something like ImgBurn The Official ImgBurn Website

 

[winio]

As I have written before - i did clean install month ago - downloaded Windows 7 Proffesional x64 iso from the Microsoft Imagine website and I still have BSODs - so it is why I have written here. Probably one of the Toshiba drivers is faulty (maybe graphic card or intel RST), but I do not know which - all are up to date.

 

[axe0]

I have tested each single stick with Memtest, it was OK

Again, please remove the 2GB memory stick.

It doesn't matter that you tested each stick and the result was OK, mixed memory run on different specs causing instability because either of them will have to run under its designed specs what causes problems.