Solved BSOD when Scanning for Hardware changes in Device Manager

[jovanovic]

Hi,

When trying to scan for new devices device manager freezes and after some time I get BOSD.

I attached file below.

Thanks

 

[axe0]

Please uninstall everything of Nvidia using Display Driver Uninstaller and install new drivers from ASUS. Be sure the clean install box is checked and only install the Graphics driver and the PhysX driver, you can use this tutorial to do so :ar: NVIDIA Drivers - Avoid Problems

Bugcheck code 0000009F
Arguments 00000000`00000003 fffffa80`07fc3a10 fffff800`00ba0748 fffffa80`0716e8c0
Debug session time: Tue Mar 21 20:26:10.354 2017 (UTC + 1:00)
System Uptime: 0 days 0:14:06.775
0: kd> !irp fffffa800716e8c0
Irp is active with 4 stacks 3 is current (= 0xfffffa800716ea20)
 No Mdl: No System Buffer: Thread 00000000:  Irp stack trace.  Pending has been returned
     cmd  flg cl Device   File     Completion-Context
 [N/A(0), N/A(0)]
            0  2 00000000 00000000 00000000-00000000    

			Args: 00000000 00000000 00000000 ffffffffc000000e
 [IRP_MJ_POWER(16), IRP_MN_WAIT_WAKE(0)]
            0  2 fffffa8007fc3a10 00000000 fffff8800f229b3c-fffffa800ab376b0    
	       \Driver\pci	nvlddmkm
			Args: 00000000 00000000 00000000 00000000
>[IRP_MJ_POWER(16), IRP_MN_SET_POWER(2)]
            0 e1 fffffa800854b480 00000000 00000000-00000000    pending
	       \Driver\nvlddmkm
			Args: 00000000 00000001 00000001 00000000
 [N/A(0), N/A(0)]
            0  0 00000000 00000000 00000000-fffffa800e6f41c0    

			Args: 00000000 00000000 00000000 00000000

0: kd> lmvm nvlddmkm
Browse full module list
start             end                 module name
fffff880`0f0de000 fffff880`0fd7b000   nvlddmkm T (no symbols)           
    Loaded symbol image file: nvlddmkm.sys
    Image path: \SystemRoot\system32\DRIVERS\nvlddmkm.sys
    Image name: nvlddmkm.sys
    Browse all global symbols  functions  data
    Timestamp:        Mon Nov 14 10:42:35 2016 (5829870B)
    CheckSum:         00C5E4C4
    ImageSize:        00C9D000
    Translations:     0000.04b0 0000.04e4 0409.04b0 0409.04e4

 

[jovanovic]

Ok thanks for the fast and precise answer, I will follow your recommendations. I only used drivers from Nvidia site because ones from Asus are really outdated (from 2011), can I update drivers trough Windows update because I was offered a more recent ones that way, or its better to stick with old ones?
Cheers

 

[axe0]

Test the onces from ASUS first, laptop manufacturer drivers are usually altered to better support the hardware of the laptop.

 

[torchwood]

Hi Jovanavic,
from event log

ACPI: ACPI BIOS is attempting to write to an illegal PCI Operation Region (0x4), Please contact your system vendor for technical assistance.

see you have uxpatch installed known to cause bsod, suggest you remove it

There are some strange things on that comp,
833 updates - a lot of them duplicated with a unusuall indicator on them.
(and none since 13 march- failing)
It did not appear to have most of the standard MS device drivers
(i believe it was a syspreped OS install not ASUS, this is further born out by the product key)
please run this tool copy/paste the output

http://go.microsoft.com/fwlink/?LinkID=52012

Also this comp was not used for a long time, late 2014

Roy

 

[jovanovic]

Hi Roy,

Heres the MGA info

Diagnostic Report (1.9.0027.0):
-----------------------------------------
Windows Validation Data-->

Validation Code: 0
Cached Online Validation Code: N/A, hr = 0xc004f012
Windows Product Key: *****-*****-*****-*****-HTBP3
Windows Product Key Hash: 2m/jyXUw63w+drZlN954pDiYw3k=
Windows Product ID: 55041-051-0495377-86320
Windows Product ID Type: 6
Windows License Type: Volume MAK
Windows OS version: 6.1.7601.2.00010100.1.0.048
ID: {B5F5E6D5-EF01-4F92-AA63-5C114C117708}(3)
Is Admin: Yes
TestCab: 0x0
LegitcheckControl ActiveX: N/A, hr = 0x80070002
Signed By: N/A, hr = 0x80070002
Product Name: Windows 7 Professional
Architecture: 0x00000009
Build lab: 7601.win7sp1_ldr.141013-1517
TTS Error:
Validation Diagnostic:
Resolution Status: N/A

Vista WgaER Data-->
ThreatID(s): N/A, hr = 0x80070002
Version: N/A, hr = 0x80070002

Windows XP Notifications Data-->
Cached Result: N/A, hr = 0x80070002
File Exists: No
Version: N/A, hr = 0x80070002
WgaTray.exe Signed By: N/A, hr = 0x80070002
WgaLogon.dll Signed By: N/A, hr = 0x80070002

OGA Notifications Data-->
Cached Result: N/A, hr = 0x80070002
Version: N/A, hr = 0x80070002
OGAExec.exe Signed By: N/A, hr = 0x80070002
OGAAddin.dll Signed By: N/A, hr = 0x80070002

OGA Data-->
Office Status: 109 N/A
OGA Version: N/A, 0x80070002
Signed By: N/A, hr = 0x80070002
Office Diagnostics: 025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3

Browser Data-->
Proxy settings: N/A
User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)
Default Browser: C:\Program Files (x86)\Vivaldi\Application\vivaldi.exe
Download signed ActiveX controls: Prompt
Download unsigned ActiveX controls: Disabled
Run ActiveX controls and plug-ins: Allowed
Initialize and script ActiveX controls not marked as safe: Disabled
Allow scripting of Internet Explorer Webbrowser control: Disabled
Active scripting: Allowed
Script ActiveX controls marked as safe for scripting: Allowed

File Scan Data-->

Other data-->
Office Details: <GenuineResults><MachineData><UGUID>{B5F5E6D5-EF01-4F92-AA63-5C114C117708}</UGUID><Version>1.9.0027.0</Version><OS>6.1.7601.2.00010100.1.0.048</OS><Architecture>x64</Architecture><PKey>*****-*****-*****-*****-BBBBB</PKey><PID>55041-051-0495377-86320</PID><PIDType>6</PIDType><SID>S-1-5-21-510110552-455797767-535160026</SID><SYSTEM><Manufacturer>ASUSTeK Computer Inc. </Manufacturer><Model>N53Jn</Model></SYSTEM><BIOS><Manufacturer>American Megatrends Inc.</Manufacturer><Version>N53Jn.205</Version><SMBIOSVersion major="2" minor="6"/><Date>20100708000000.000000+000</Date></BIOS><HWID>38EB3E07018400FC</HWID><UserLCID>241A</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>Central Europe Standard Time(GMT+01:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM/><GANotification/></MachineData><Software><Office><Result>109</Result><Products/><Applications/></Office></Software></GenuineResults>

Spsys.log Content: 0x80070002

Licensing Data-->
Software licensing service version: 6.1.7601.22449

Name: Windows(R) 7, Professional edition
Description: Windows Operating System - Windows(R) 7, VOLUME_MAK channel
Activation ID: 9abf5984-9c16-46f2-ad1e-7fe15931a8dd
Application ID: 55c92734-d682-4d71-983e-d6ec3f16059f
Extended PID: 55041-00172-051-049537-03-1033-7601.0000-0812017
Installation ID: 007092817073885311175006472065550136265924407810179890
Processor Certificate URL: SpcService Web Service
Machine Certificate URL: RacService Web Service
Use License URL: UseLicenseService Web Service
Product Key Certificate URL: PkcService Web Service
Partial Product Key: HTBP3
License Status: Licensed
Remaining Windows rearm count: 2
Trusted time: 22.3.2017 18:08:27

Windows Activation Technologies-->
HrOffline: 0x00000000
HrOnline: N/A
HealthStatus: 0x0000000000000000
Event Time Stamp: N/A
ActiveX: Registered, Version: 7.1.7600.16395
Admin Service: Registered, Version: 7.1.7600.16395
HealthStatus Bitmask Output:


HWID Data-->
HWID Hash Current: LgAAAAEAAgABAAEAAAABAAAAAgABAAEAln24ktIpbAeaUWZ7FvlkqaKFoPNcXQ==

OEM Activation 1.0 Data-->
N/A

OEM Activation 2.0 Data-->
BIOS valid for OA 2.0: yes, but no SLIC table
Windows marker version: N/A
OEMID and OEMTableID Consistent: N/A
BIOS Information:
ACPI Table Name OEMID Value OEMTableID Value
APIC _ASUS_ Notebook
FACP _ASUS_ Notebook
DBGP _ASUS_ Notebook
HPET _ASUS_ Notebook
MCFG _ASUS_ Notebook
ECDT _ASUS_ Notebook
SSDT PmRef CpuPm

 

[torchwood]

As i thought a syspreped OS, thats NOT activated.

It also contains an activation exploit.

Until you install a genuine OS, NO further help will be provided.


Roy

 

[jovanovic]

Hm i need a bit of explanation here, yes i used already prepared OS with SP1 and updates but i bought
licence key that passes MGA, so please explain what not valid so that i can complain about my purchase?

I used Bonanza.com to buy a key, its OEM licence and suppose to be legal, at least its what they say..

 

[torchwood]

Its a Volume MAK licence that CANNOT legally be sold, NOT an OEM.
Issued to companies or educational establishments ONLY

Go back to the seller demand your money back.

Its not TOTALLY passed activation/registration.
youve allready re-armed it once that should have been your first clue.
from the tool
Cached Online Validation Code: N/A, hr = 0xc004f012
Windows Activation Technologies-->
HrOffline: 0x00000000
HrOnline: N/A
HealthStatus: 0x0000000000000000
Event Time Stamp: N/A
http://www.microsoft.com/en-us/Licensing/existing-customer/FAQ-product-activation.aspx

And the sysprep was rubbish, totally corrupted.

Roy

 

[NoelDP]

I see no signs of any activation exploit? - and it's a standard Volume MAK Key/License, which requires no SLIC table or other special activation techniques.

However, yes, being a Volume Key it cannot be legally sold except through bulk purchase from an authorised reseller. It is NOT an OEM license.

 

[jovanovic]

Ok thank you all for the answers, i appreciate the help you provided.