Frequent BSOD after reinstall

[yoenit]

Hey, a couple days ago my computer froze on me while playing Farcry 3. After rebooting it Windows failed to start.Used recovery disk to do system recovery, only to have a BSOD after 5 minutes and windows failing to boot again. Unable to do recovery again, I decided to format my primary hard drive and reinstall a clean windows version. Since then I have however been experiencing frequent and seemingly random BSODs.

Some things I have already attempted:
- Opened up my desktop and checked connections
- run memtest86+ (overnight, 5 passes), no errors found
- run CHKDSK on my C: drive, no errors found
- Run SFC.EXE /SCANNOW, some errors fixed but problem not fixed
- run Full diagnostic scan of the Intel SSD toolbox, no issues

 

[Northernsoul55]

Unfortunately the installation appears non-genuine.
The Key is that of an Asus OEM computer - and the motherboard is a retail one by MSI
This implies that an Activation Exploit is in use to bypass activation and validation requirements.

You need to reformat and reinstall with genuine media and Key.

 

[yoenit]

Fair enough. I just used to first windows .iso I could get my hands on, which happened to be a modified version which never allowed me to enter a key. I have tracked down an original cd and reinstalled accordingly with a genuine key. For completeness sake I included a genuine advantage diagnostic report below.

Diagnostic Report (1.9.0027.0):
-----------------------------------------
Windows Validation Data-->

Validation Code: 0
Cached Online Validation Code: N/A, hr = 0xc004f012
Windows Product Key: *****-*****-*****-*****-8BPXH
Windows Product Key Hash: AvdbGRr0dBgw9fwqlPNM0KXrlDw=
Windows Product ID: 55041-091-8290196-86205
Windows Product ID Type: 6
Windows License Type: Volume MAK
Windows OS version: 6.1.7600.2.00010100.0.0.048
ID: {520CE39A-1FBE-4D72-B0E8-6DD9F9BE07FC}(1)
Is Admin: Yes
TestCab: 0x0
LegitcheckControl ActiveX: N/A, hr = 0x80070002
Signed By: N/A, hr = 0x80070002
Product Name: Windows 7 Professional
Architecture: 0x00000009
Build lab: 7600.win7_gdr.130318-1532
TTS Error: 
Validation Diagnostic: 
Resolution Status: N/A

Vista WgaER Data-->
ThreatID(s): N/A, hr = 0x80070002
Version: N/A, hr = 0x80070002

Windows XP Notifications Data-->
Cached Result: N/A, hr = 0x80070002
File Exists: No
Version: N/A, hr = 0x80070002
WgaTray.exe Signed By: N/A, hr = 0x80070002
WgaLogon.dll Signed By: N/A, hr = 0x80070002

OGA Notifications Data-->
Cached Result: N/A, hr = 0x80070002
Version: N/A, hr = 0x80070002
OGAExec.exe Signed By: N/A, hr = 0x80070002
OGAAddin.dll Signed By: N/A, hr = 0x80070002

OGA Data-->
Office Status: 109 N/A
OGA Version: N/A, 0x80070002
Signed By: N/A, hr = 0x80070002
Office Diagnostics: 025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3

Browser Data-->
Proxy settings: N/A
User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)
Default Browser: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
Download signed ActiveX controls: Prompt
Download unsigned ActiveX controls: Disabled
Run ActiveX controls and plug-ins: Allowed
Initialize and script ActiveX controls not marked as safe: Disabled
Allow scripting of Internet Explorer Webbrowser control: Disabled
Active scripting: Allowed
Script ActiveX controls marked as safe for scripting: Allowed

File Scan Data-->

Other data-->
Office Details: <GenuineResults><MachineData><UGUID>{520CE39A-1FBE-4D72-B0E8-6DD9F9BE07FC}</UGUID><Version>1.9.0027.0</Version><OS>6.1.7600.2.00010100.0.0.048</OS><Architecture>x64</Architecture><PKey>*****-*****-*****-*****-BBBBB</PKey><PID>55041-091-8290196-86205</PID><PIDType>6</PIDType><SID>S-1-5-21-2753374512-1687926292-3650380401</SID><SYSTEM><Manufacturer>MSI</Manufacturer><Model>MS-7640</Model></SYSTEM><BIOS><Manufacturer>American Megatrends Inc.</Manufacturer><Version>V18.0</Version><SMBIOSVersion major="2" minor="5"/><Date>20101231000000.000000+000</Date></BIOS><HWID>D2BA3607018400F6</HWID><UserLCID>0413</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>W. Europe Standard Time(GMT+01:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM><OEMID>MSI   </OEMID><OEMTableID>OEMSLIC </OEMTableID></OEM><GANotification/></MachineData><Software><Office><Result>109</Result><Products/><Applications/></Office></Software></GenuineResults>  

Spsys.log Content: 0x80070002

Licensing Data-->
Software licensing service version: 6.1.7600.16385

Name: Windows(R) 7, Professional edition
Description: Windows Operating System - Windows(R) 7, VOLUME_MAK channel
Activation ID: 9abf5984-9c16-46f2-ad1e-7fe15931a8dd
Application ID: 55c92734-d682-4d71-983e-d6ec3f16059f
Extended PID: 55041-00172-091-829019-03-1043-7600.0000-0992013
Installation ID: 005330569636114022244124758901682463240784552795459910
Processor Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88338
Machine Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88339
Use License URL: http://go.microsoft.com/fwlink/?LinkID=88341
Product Key Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88340
Partial Product Key: 8BPXH
License Status: Licensed
Remaining Windows rearm count: 3
Trusted time: 9-4-2013 23:56:15

Windows Activation Technologies-->
HrOffline: 0x00000000
HrOnline: N/A
HealthStatus: 0x0000000000000000
Event Time Stamp: N/A
ActiveX: Registered, Version: 7.1.7600.16395
Admin Service: Registered, Version: 7.1.7600.16395
HealthStatus Bitmask Output:


HWID Data-->
HWID Hash Current: MgAAAAEABAABAAEAAAACAAAAAQABAAEAln2crRzFVPL8jTqHEDOOEqDKYj0KC+BdAtA=

OEM Activation 1.0 Data-->
N/A

OEM Activation 2.0 Data-->
BIOS valid for OA 2.0: no, invalid Windows marker
Windows marker version: N/A
OEMID and OEMTableID Consistent: N/A
BIOS Information: 
  ACPI Table Name	OEMID Value	OEMTableID Value
  APIC			7640MS		A7640300
  FACP			7640MS		A7640300
  SRAT			AMD   		FAM_F_10
  HPET			7640MS		OEMHPET 
  MCFG			7640MS		OEMMCFG 
  SLIC			MSI   		OEMSLIC 
  OEMB			7640MS		A7640300
  SSDT			A M I 		POWERNOW

.

With regards to the issue of BSODs the reinstall did not solve anything. I am still having frequent BSODs. They seem more frequent when I am trying watch netflix or youtube, but also occur when the machine is idling. They occur 15 to 60 minutes apart and I personally suspect it is an hardware issue. I have attached a new crash report below

 

[yoenit]

An update:

After looking at some other threads here I realised that I should update any old driver I had. So I looked the manufacturer of my motherboard and updated my usb 3.0, sound, ethernet and some USB 1.0 filter driver from AMD. I also tried to do some windows updates, but some of them keep failing and giving errors messages.

During this my system was essentially idling and I did not experience any crashes. Afterwards I decide to try netflix and within 5 minutes the silverlight plugin in chrome crashed twice. I reinstalled silverlight and tried again, only to get BSOD 2 minutes later. I attached a new report to this post

 

[NoelDP]

I can see no problems with the licensing. It's an MAK Volume license, rather than an OEM one - where did you acquire this from?

 

[yoenit]

The MSDNAA program of www.ma3d.com. This allows free downloading of a lot of software for employees and students of Belgian and Dutch universities.

However, Northernsoul55 was correct that the software was initially non-genuine. I no longer have the original downloaded .iso and the MSDNAA website alone supports windows 8 now, so I had to resort to "alternative measures" in order to reinstall windows. The version I used turned out to be modified and did not allow me to enter or change the license key at all, so I reinstalled later with a clean windows 7 .iso and my genuine key.

 

[NoelDP]

That explains a lot
There is still one anomaly, though - the system claims to have a Win7 SLIC table.

This would imply that it was from a major OEM with Windows pre-installed.
However, since this is a custom-build, there shouldn't be any SLIC table.
That being the case, we are left with two potential causes.

1) someone has at some stage attempted to mod the BIOS to include the table - and this has either broken down, or never worked properly.
2) there is still a Loader present, and this has broken down

If the former, then all bets are off as to what else may be affected - if the latter, then the reinstall wasn't as clean as you thought!

 

[yoenit]

Hmm, that doesn't sound good. As far as I know the bios has not been modified or updated at all. I will check if the hash code of the disk I am using now matches the one from this link Hash codes for x64? - Microsoft Community.

Assuming the hash code matches, would a bios update fix the issue?

 

[NoelDP]

No - BIOS updates are designed (supposedly) not to touch the SLIC table if present.

Depending on the source of your motherboard, it could simply be that the distributor applied a SLIC table, and then (inefficiently) removed it when they discovered overstocking - in which case there isn't a problem. It's also possible that the table was intact, but something as small as cosmic radiation flipped a bit in that area and the certificate got broken that way (it happens).

So long as the rest of the BIOS is unaffected, then it shouldn't affect Windows at all.

 

[Northernsoul55]

Hi,
Firstly please install Windows Service Pack 1 as it will increase system stability.
Then once installed please run Windows Updates and install all the latest updates.
(With the exception of any Graphics drivers)
:ar: http://windows.microsoft.com/is-IS/windows7/install-windows-7-service-pack-1
:ar: http://windows.microsoft.com/is-IS/windows/service-packs-download#sptabs=win7

From your latest dump files:

*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************
SYSTEM_SERVICE_EXCEPTION (3b)
STOP 0x0000003B: SYSTEM_SERVICE_EXCEPTION
Probably caused by : win32k.sys    
Usual causes:  [COLOR=red]System service, Device driver, graphics driver, ?memory[/COLOR]
MEMORY_MANAGEMENT (1a)
STOP 0x0000001A: MEMORY_MANAGEMENT 
Probably caused by : ntkrnlmp.exe  
Usual causes:  [COLOR=red]Device driver, memory, kernel[/COLOR]
KMODE_EXCEPTION_NOT_HANDLED (1e) 
Stop message 0x0000001E Descriptive text: KMODE_EXCEPTION_NOT_HANDLED
Probably caused by : hardware 
Usual cause: This message has several possible causes.

Have you updated the firmware for your Intel SSD 510?
:ar: https://downloadcenter.intel.com/Detail_Desc.aspx?agr=Y&DwnldID=18363

These drivers are causing issues:

ERROR: Module load completed but symbols could not be loaded for [COLOR=red]atikmdag.sys[/COLOR]
Dated: Thu Mar 21 02:39:42 2013
Relates to: ATI Video driver

This driver appears to be the latest, if you have just updated it are you
able to rollback the driver to a previous one?
If that is not possible uninstall and try this one:
(Only install the driver)
:ar: http://support.amd.com/us/gpudownload/windows/Pages/radeonaiw_vista64.aspx

ERROR: Module load completed but symbols could not be loaded for [COLOR=red]MpFilter.sys[/COLOR]
Dated: Wed Oct 31 22:43:06 2012 
Relates to: Microsoft Windows AntiMalware protection system
(Windows update should update this driver)

Run SFC again, what was the outcome?:
Click on the Start > Type in search cmd
Right click cmd at top and Run as Administrator
Type SFC /scannow at the prompt
(Note: there is a space between SFC and /scannow)

:ar: http://www.sevenforums.com/tutorials/1538-sfc-scannow-command-system-file-checker.html

Please update your BIOS now we know its ok to do so, there is a newer version available dated 2012:

[BIOS Information (Type 0) - Length 24 - Handle 0000h]
  Vendor                        American Megatrends Inc.
  BIOS Version                  V18.0
  BIOS Starting Address Segment f000
  BIOS Release Date             [COLOR=red]12/31/2010[/COLOR]
  BIOS ROM Size                 200000

:ar: http://uk.msi.com/product/mb/890FXA-GD65.html#/?div=BIOS

   Warning

Please follow the manufacturer's instructions carefully when updating the BIOS, as incorrectly updated, may render your computer unusable!!

Run memtest again. This time Run for 8 passes and test each stick in a know good slot for an additional 6 passes. (Follow the tutorial closley)
:ar: http://www.sevenforums.com/tutorials/105647-ram-test-memtest86.html

   Tip

Run these tests overnight

Post back any result/observations or a new Crash dump if you BSOD after you
have completed the above.
Cheers
Dave

 

[yoenit]

I got stuck at the first step, as the SP1 pack gives an error when I try to install it. Neither the SUR, nor the troubleshooter was able to fix it. I will make a new tread to the update forum about this issue.

I ran SFC /scannow and got a message that there were some errors it was unable to fix and that the details where in cbs.log, which I have attached.

There is some good news as well. When I booted my desktop earlier I noticed one of my screens was not working and after messing around with the cable I got an error message telling me that the cable itself was damaged. I then switched the cable to another DisplayPort and my screen starting working again without any problems. In addition, I have not experienced a single BSOD since, despite getting at least one every hour the days before that.

I am about to try updating the SSD now, but am a bit hesitant about updating the BIOS, so I would like to wait with that until I am sure the problem still persists.

 

[Northernsoul55]

Good, we will wait to see the outcome in your other thread.

 

[yoenit]

Updates issues resolved, so back to the underlying BSOD problem

Following your instructions:

install SP1 and all updates
Required couple of windoes reinstalls, but done.

Update firmware for SSD
Firmware was already up to date

Roll back videocard driver
Using 13.1 now instead of 13.3 beta

Run SFC /scannow
Ran it a couple of times. Sometimes it stops at a random % and tells me it can't continue, other times it reports no issues. Last run reports no issues.

Update BIOS
I am kinda scared of breaking stuff when I do that, so I haven't done it yet. Prefer to avoid doing this for now, but let me know if it is really necessary.

Run Memtest again
10 passes of memtest 86+, no errors.

Other observations
- Was getting weird errors with my screen connected through a displaycable, so I disconnected it completely.
- I disabled crossfire for my videocards
- Ran a CHKDSK on both harddrives and the "Full Diagnostic" thing from the Intel SSD toolbox. No issues found
- Got one BSOD since the last reinstall. It happened after playing Company of Heroes for an hour orso. Report attached

 

[Northernsoul55]

Hi,
Your latest crash is caused again by the rolled back ATI Drivers:

*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************
Use !analyze -v to get detailed debugging information.
BugCheck [COLOR=red]1000007E[/COLOR], {ffffffffc0000005, fffff88004587a53, fffff88003e5c6d8, fffff88003e5bf30}
Probably caused by : [COLOR=red]dxgmms1.sys[/COLOR] ( dxgmms1!VIDMM_GLOBAL::PrepareDmaBuffer+fbf )
Followup: MachineOwner

While the logs are pointing to dxgmms1.sys, this is not the actual cause of the crash, but check
that you dont have any issues with your DirectX installation:

:ar: Diagnose DirectX Issues

Are you overclocking your Graphics Card?
If so reset to default as any over clocking will cause system stability issues

Faulting Drivers:

atikmpag.sys   Wed Dec 19 19:32:55 2012
atikmdag.sys   Wed Dec 19 20:38:55 2012

Best if we now test your video card, please run Furmark:

:ar: Furmark - Video Stress Test

Post back any results,

Cheers

Dave

 

[yoenit]

No issues found with directx in either normal or x64 mode.

Normally I overclock my videocards, but that was one of the first things I checked when the BSODs started. Right now I am running with only one videocard on stock speed. The other is physically connected but does nothing as crossfire is disabled.

Running Furmark the temperature maxes at out 90 degrees, with the fan not even at 50%. Did not notice any glitches. I should also mention I got my pc to reset by accidentally hitting it so hard it almost fell over (yep, that is pretty clumsy).

Company of Heroes is now giving me constant crashes to desktop, but no more BSODs. Reinstalling the software does not seem to help. I tried some other videogames (Trine, World of Tanks, Unity of Command), which don't give any crashes. Silverlight also crashes every 10 minutes orso when watching Netflix. An hour ago I got another BSOD, this time while watching netflix.

 

[Arc]

fffff880`03176c10  fffff880`03d8ad00 tunnel!TunnelGlobal+0x320
fffff880`03176c18  fffff880`03d73701 tunnel!TunnelTimeoutTunnelSet+0xc5

It is Microsoft Teredo Tunneling Adapter driver, related with networking.

fffff880`03176c90  fffff880`0125d050 Ntfs!NtfsData+0xd0
fffff880`03176ca0  fffff880`0128c268 Ntfs!NtfsFspClose

It is NT File System Driver, related to storage.

When both of them fail simultaneously in a single dump, I think it is better to scan the system for possible virus infection with the following programs.

• Anti-rootkit utility TDSSKiller
• Windows Defender Offline

Let us know the results. Depending on it, we will decide our next steps.