Solved BSOD error mainly while watching videos, sometimes randomly.

[UniqueDeath]

This started happening maybe a week ago? I uninstalled a lot of programs that I installed like AVG, Firefox, Abode Flash, and the list goes on but nothing seems to fix it... I have no clue what it is! The only thing I've noticed is that when I'm play a game called Heroes of Newerth and looking at videos/on Firefox it, most of the time, doesn't BSOD or do anything. Sometimes it does though.

I'm sick of this issue. I'm really close to reformatting (I'm not even sure that would fix the problem) and just starting fresh, but I decided to see if anyone could help out.

Thanks for reading and thanks in advance!

Have an awesome day! =D

 

[Arc]

Hello UniqueDeath.

Update your ATI/AMD display driver.
You can get it from the link in our forum, http://www.sevenforums.com/graphic-...alyst-video-driver-windows-7-a.html#post17671, or you may go to AMD Graphics Driver and Software and opt for Automatically Detect and Install the appropriate driver for your card.

During installation, you may opt for advanced installation, and install the display driver only, not the Catalyst Control Center.

Then follow the other steps of http://www.sevenforums.com/crash-lo...op-0x116-video_tdr_error-troubleshooting.html

Let us know the results.

 

[UniqueDeath]

Writing this from my iPhone.

I've tried everything. Updating drivers, doing EVERYTHING in that troubleshooting thread you gave the link to, nothing has worked. The only thing I have noticed is that whenever I am on a browser (any) it BSOD's, but SOMETIMES I'll be on a browser with a game in the background and it has a lucky chance that it won't BSOD. I have no idea what to do. What is my last resort? Re-formatting?

Any other suggestions? And please make sure that I've taken the necessary steps in the troubleshooting thread you have me. I am pretty sure I've done it all.

Thanks for the help!

 

[UniqueDeath]

Also just did a men test and the results came up with nothing. I'm so freakin stumped...

 

[UniqueDeath]

Any help? xD

Would greatly appreciate it.

 

[Arc]

Boot into http://www.sevenforums.com/tutorials/666-advanced-boot-options.html, safe mode with networking.

Run a youtube video. Right click on it, and uncheck "hardware acceleration"

Also, in safe mode with networking, execute the SF diag tool and upload the resulting files.

 

[UniqueDeath]

Hey Arc, thank you so much for the reply! Did as you asked and I found no problems watching the YouTube video in safe mode after I did that. I'm going to reboot manually and try watching things in a normal startup.

Here are my SF Diagnostics.

By the way, am I doing everything right in terms of troubleshooting and letting you know what's wrong, etc? Please let me know if you need more info or anything!

Thanks again! Have a good one.

EDIT:

Nothing different with the hardware acceleration turned off. Just BSOD'ed.

 

[Arc]

Rollback the display driver to an earlier one .....
Device Manager - Roll Back Driver

Is the computer hot? Report us the heat of the computer after a couple of hours of your normal usage. Upload a screenshot of the summery tab of Speccy.

Stress test the Graphics Card using Furmark.
Video Card - Stress Test with Furmark

Test your RAM modules for possible errors.
How to Test and Diagnose RAM Issues with Memtest86+
Run memtest for at least 8 passes, preferably overnight.

 

[UniqueDeath]

Rolling back the display driver worked, but now I can't play any videos using any Media players. Opens them for a second and then immediately closes them. I can still watch videos online, but that's it.

Ran Speccy and here are the results.

Ran the stress test and it peaked at the temperature in the picture. I can't even see the picture because it does the same thing as the videos, it doesn't let me view anything. Doesn't even let me play games.

Ran MemTest overnight for 8 passes and all 8 passed.

 

[Arc]

Update the Marvell Yukon networking driver (Marvell Yukon 88E8059 PCI-E Gigabit Ethernet Controller) from Marvell - Support - Driver Downloads.

Uninstall AVG using AVG Remover. Use Microsoft Security Essentials as your antivirus with windows inbuilt firewall, and free MBAM as the on demand scanner.
Download, install and update those, and then run full system scans with both of them, one by one.

Let us know the results.

 

[UniqueDeath]

Can't run Microsoft Security cause for some reason these BSOD's have ripped my genuine status from my OS.......

 

[Arc]

No problem. Post a report following the http://www.sevenforums.com/windows-...n-issue-posting-instructions.html#post1957831. We will try to assist you.

 

[UniqueDeath]

Here are the results from the free MBAM anti-virus software.

Malwarebytes Anti-Malware (Trial) 1.70.0.1100
[URL="http://www.malwarebytes.org"]Malwarebytes : Free anti-malware download[/URL]

Database version: v2013.03.12.01

Windows 7 Service Pack 1 x64 NTFS
Internet Explorer 9.0.8112.16421
Federico :: FEDERICO-PC [administrator]

Protection: Enabled

3/11/2013 7:42:44 PM
mbam-log-2013-03-11 (19-42-44).txt

Scan type: Full scan (C:\|D:\|E:\|G:\|)
Scan options enabled: Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken | PUP | PUM
Scan options disabled: P2P
Objects scanned: 566602
Time elapsed: 1 hour(s), 5 minute(s), 42 second(s)

Memory Processes Detected: 0
(No malicious items detected)

Memory Modules Detected: 0
(No malicious items detected)

Registry Keys Detected: 1
HKCU\Software\DC3_FEXEC (Malware.Trace) -> Quarantined and deleted successfully.

Registry Values Detected: 0
(No malicious items detected)

Registry Data Items Detected: 0
(No malicious items detected)

Folders Detected: 1
C:\Users\Federico\AppData\Roaming\dclogs (Stolen.Data) -> Quarantined and deleted successfully.

Files Detected: 8
C:\Users\Federico\Downloads\Windows 7 Genuine Activation RemoveWAT 2.2.6.0 NLT-Release\Software\RemoveWAT.exe (HackTool.Wpakill) -> Quarantined and deleted successfully.
C:\Users\Federico\AppData\Roaming\dclogs\2013-01-03-5.dc (Stolen.Data) -> Quarantined and deleted successfully.
C:\Users\Federico\AppData\Roaming\dclogs\2013-01-04-6.dc (Stolen.Data) -> Quarantined and deleted successfully.
C:\Users\Federico\AppData\Roaming\dclogs\2013-01-05-7.dc (Stolen.Data) -> Quarantined and deleted successfully.
C:\Users\Federico\AppData\Roaming\dclogs\2013-01-06-1.dc (Stolen.Data) -> Quarantined and deleted successfully.
C:\Users\Federico\AppData\Roaming\dclogs\2013-01-07-2.dc (Stolen.Data) -> Quarantined and deleted successfully.
C:\Users\Federico\AppData\Roaming\dclogs\2013-01-08-3.dc (Stolen.Data) -> Quarantined and deleted successfully.
C:\Users\Federico\AppData\Roaming\dclogs\2013-01-09-4.dc (Stolen.Data) -> Quarantined and deleted successfully.

(end)

Didn't even know I had infections. I usually am VERY careful with things. Guess you can't be too careful though.

Trying to complete the genuine guidelines you gave me, it's tough because I keep getting the BSOD's like every 5 minutes with the browser open.

 

[UniqueDeath]

I really truly appreciate the help Arc, you're awesome. Have an awesome day!

Diagnostic Report (1.9.0027.0):
-----------------------------------------
Windows Validation Data-->

Validation Code: 0
Cached Online Validation Code: 0x0
Windows Product Key: *****-*****-GJY49-VJBQ7-HYRR2
Windows Product Key Hash: W5/6nm6F2UPXrCkY5xUhXb/+21g=
Windows Product ID: 00426-OEM-8992662-00006
Windows Product ID Type: 2
Windows License Type: OEM SLP
Windows OS version: 6.1.7601.2.00010100.1.0.001
ID: {0B9CF30C-533C-451C-B715-6735BEBB5B8A}(3)
Is Admin: Yes
TestCab: 0x0
LegitcheckControl ActiveX: N/A, hr = 0x80070002
Signed By: N/A, hr = 0x80070002
Product Name: Windows 7 Ultimate
Architecture: 0x00000009
Build lab: 7601.win7sp1_gdr.130104-1431
TTS Error: 
Validation Diagnostic: 
Resolution Status: N/A

Vista WgaER Data-->
ThreatID(s): N/A, hr = 0x80070002
Version: N/A, hr = 0x80070002

Windows XP Notifications Data-->
Cached Result: N/A, hr = 0x80070002
File Exists: No
Version: N/A, hr = 0x80070002
WgaTray.exe Signed By: N/A, hr = 0x80070002
WgaLogon.dll Signed By: N/A, hr = 0x80070002

OGA Notifications Data-->
Cached Result: N/A, hr = 0x80070002
Version: N/A, hr = 0x80070002
OGAExec.exe Signed By: N/A, hr = 0x80070002
OGAAddin.dll Signed By: N/A, hr = 0x80070002

OGA Data-->
Office Status: 109 N/A
OGA Version: N/A, 0x80070002
Signed By: N/A, hr = 0x80070002
Office Diagnostics: 025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3

Browser Data-->
Proxy settings: N/A
User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)
Default Browser: C:\Program Files\Waterfox\waterfox.exe
Download signed ActiveX controls: Prompt
Download unsigned ActiveX controls: Disabled
Run ActiveX controls and plug-ins: Allowed
Initialize and script ActiveX controls not marked as safe: Disabled
Allow scripting of Internet Explorer Webbrowser control: Disabled
Active scripting: Allowed
Script ActiveX controls marked as safe for scripting: Allowed

File Scan Data-->
File Mismatch: C:\Windows\system32\systemcpl.dll[6.1.7600.16385], Hr = 0x800b0100
File Mismatch: C:\Windows\system32\user32.dll[6.1.7600.16385], Hr = 0x800b0100

Other data-->
Office Details: <GenuineResults><MachineData><UGUID>{0B9CF30C-533C-451C-B715-6735BEBB5B8A}</UGUID><Version>1.9.0027.0</Version><OS>6.1.7601.2.00010100.1.0.001</OS><Architecture>x64</Architecture><PKey>*****-*****-*****-*****-HYRR2</PKey><PID>00426-OEM-8992662-00006</PID><PIDType>2</PIDType><SID>S-1-5-21-209981913-2473670028-3598164684</SID><SYSTEM><Manufacturer>System manufacturer</Manufacturer><Model>System Product Name</Model></SYSTEM><BIOS><Manufacturer>American Megatrends Inc.</Manufacturer><Version>1902   </Version><SMBIOSVersion major="2" minor="6"/><Date>20110217000000.000000+000</Date></BIOS><HWID>E6410200018400FA</HWID><UserLCID>0409</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>Pacific Standard Time(GMT-08:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM/><GANotification/></MachineData><Software><Office><Result>109</Result><Products/><Applications/></Office></Software></GenuineResults>  

Spsys.log Content: 0x80070002

Licensing Data-->
Input Error: Can not find script file "C:\Windows\system32\slmgr.vbs".

Windows Activation Technologies-->
HrOffline: 0x00000000
HrOnline: N/A
HealthStatus: 0x0000000000000000
Event Time Stamp: N/A
ActiveX: Registered, Version: 7.1.7600.16395
Admin Service: Not Registered - 0x80070005
HealthStatus Bitmask Output:


HWID Data-->
HWID Hash Current: MgAAAAAABAABAAEAAQACAAAAAQABAAEACrYA8rbyJOZU8hAzzNG68NxGYj18RMDgji4=

OEM Activation 1.0 Data-->
N/A

OEM Activation 2.0 Data-->
BIOS valid for OA 2.0: yes, but no SLIC table
Windows marker version: N/A
OEMID and OEMTableID Consistent: N/A
BIOS Information: 
  ACPI Table Name    OEMID Value    OEMTableID Value
  APIC            021711        APIC1308
  FACP            021711        FACP1308
  SRAT            AMD           FAM_F_10
  HPET            021711        OEMHPET 
  MCFG            021711        OEMMCFG 
  OEMB            021711        OEMB1308
  SSDT            A M I         POWERNOW

 

[Arc]

I have requested NoelDP to have a look at the report. He is the best person in this field.

 

[UniqueDeath]

Thank you very much Arc, I've greatly appreciated all of your help! Take care my friend!

 

[Layback Bear]

This might be a clue from post #13
----

C:\Users\Federico\Downloads\Windows 7 Genuine Activation RemoveWAT 2.2.6.0 NLT-Release\Software\RemoveWAT.exe (HackTool.Wpakill) -> Quarantined and deleted successfully
----
http://www.microsoft.com/security/portal/threat/encyclopedia/entry.aspx?Name=HackTool:Win32/Wpakill

 

[Arc]

This might be a clue from post #13
----

C:\Users\Federico\Downloads\Windows 7 Genuine Activation RemoveWAT 2.2.6.0 NLT-Release\Software\RemoveWAT.exe (HackTool.Wpakill) -> Quarantined and deleted successfully
----
Encyclopedia entry: HackTool:Win32/Wpakill - Learn more about malware - Microsoft Malware Protection Center

:shock: Now we know why it is saying that it is not genuine.

Sorry to say UniqueDeath, but you need to activate windows using a legal key only to get rid of this situation.

 

[UniqueDeath]

I have a legal key. I only tried to RemoveWat after these BSOD's removed my key(at least that's what I think it is). My dad's company that he works for has business licenses that they sometimes have extras of. That's where I got my key. Before these BSOD's I never had a problem with Windows being genuine. I've had this computer for almost two years (will be 2 years old in May) and have never experienced this problem.

EDIT:

I could try to re-input my key that I got, I would just have to talk to my dad. I'll update you guys when my Windows is GENUINELY genuine again, lol =P.

Re-EDIT:

Oh and BTW, this FOR SURE has something to do with my display driver. Every time I disable it from Device Manager, nothing happens. The BSODs stop.

 

[NoelDP]

RemoveWAT is installed
the Key is for Acer, but it's a retail board with no SLIC table

Counterfeit.