Solved Mulitple BSOD while downloading on Steam and general internet

[Tusck]

I reset up the Driver Verifier, apparently I did not do it correctly the first time.

I ran the WGATool, but I really was not sure what you meant by using the

 tags, so if you need me to rerun it a different way I can.  Files attached.

 

[Tusck]

I keep getting this restart where my screen goes white with color bars. This has only been happening when I was patching through the SWTOR launcher. Still no BSOD so no dump files. I keep seeing the following errors in my event log:

Session "Microsoft Security Client OOBE" stopped due to the following error: 0xC000000D

Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected.

The maximum file size for session "Circular Kernel Context Logger" has been reached. As a result, events might be lost (not logged) to file "C:\Windows\system32\WDI\LogFiles\BootCKCL.etl". The maximum files size is currently set to 104857600 bytes.

Session "Circular Kernel Context Logger" stopped due to the following error: 0xC0000188

Per your last post about the kernel issue, I deleted that BootCKCL.etl file but it seems to be stilling filling up.

EDIT: So I removed this program called Sendori, not sure what it was but I saw that it was considered malware. Also I tried what this guys said here to eliminate the other error:

http://www.msfn.org/board/topic/114389-heres-how-to-fix-wmi-event-id-10-instancemodificationeven/

But I just had another freeze up, no BSOD just same white screen with color bars, while downloading and only got this one error below. I do not get this freeze up while doing anything else.

Session "Microsoft Security Client OOBE" stopped due to the following error: 0xC000000D

Is this a problem with MSE or something else?

EDIT #2: Even after uninstalling MSE, still getting errors. I've gotten errors basically three different times:

1. When trying to download SWTOR using the Bioware launcher (6 crashes, 5 in regular mode, 1 in safe mode)

2. Running the Gigabyte Windows Bios flasher, it thankfully crashed prior to really doing anything.

3. Once right out of sleep mode as I opened this website to post this.

There are still no BSOD, so no dump file. The event log is giving nothing new. After the last crashes, I reinstalled MSE and attempted to download using the SWTOR launcher again. Strangely enough, my computer would only freeze and no longer had the white screen with the color bars. I then attempted to induce a crash other ways, like downloading through Steam, downloading through uTorrent, and downloading through Chrome. I also played a bunch of YouTube videos. Nothing else would cause a crash. I'm am totally out of ideas and completely confused as to what would cause such specific crashes like this.

At this point I feel like my only course of action is to take it into the local computer repair shop to have them look at it.

Thoughts?

 

[Vir Gnarus]

I don't quite understand the output of your MGADiag. When you open it it will have a Continue button. After you click it and it runs its report, there is a button on the bottom-right called Copy. Press it, then go to this thread and press Ctrl+V or right click and click Paste to paste the results to display to us.

I'll be able to assist further once that output is provided, as it's needed to confirm if your copy of Windows is stable.

 

[Tusck]

Diagnostic Report (1.9.0027.0):
-----------------------------------------
Windows Validation Data-->
 
Validation Code: 0
Cached Online Validation Code: 0x0
Windows Product Key: *****-*****-*****-*****-36PQY
Windows Product Key Hash: MLYVUdoJ3br19cSGI3mtXHxzRQg=
Windows Product ID: 00359-OEM-8704045-26680
Windows Product ID Type: 3
Windows License Type: OEM System Builder
Windows OS version: 6.1.7601.2.00010300.1.0.003
ID: {2E5B2B4D-5ACE-436F-9A8C-013276B95B74}(3)
Is Admin: Yes
TestCab: 0x0
LegitcheckControl ActiveX: N/A, hr = 0x80070002
Signed By: N/A, hr = 0x80070002
Product Name: Windows 7 Home Premium
Architecture: 0x00000009
Build lab: 7601.win7sp1_gdr.130104-1431
TTS Error: 
Validation Diagnostic: 
Resolution Status: N/A
 
Vista WgaER Data-->
ThreatID(s): N/A, hr = 0x80070002
Version: N/A, hr = 0x80070002
 
Windows XP Notifications Data-->
Cached Result: N/A, hr = 0x80070002
File Exists: No
Version: N/A, hr = 0x80070002
WgaTray.exe Signed By: N/A, hr = 0x80070002
WgaLogon.dll Signed By: N/A, hr = 0x80070002
 
OGA Notifications Data-->
Cached Result: N/A, hr = 0x80070002
Version: N/A, hr = 0x80070002
OGAExec.exe Signed By: N/A, hr = 0x80070002
OGAAddin.dll Signed By: N/A, hr = 0x80070002
 
OGA Data-->
Office Status: 109 N/A
OGA Version: N/A, 0x80070002
Signed By: N/A, hr = 0x80070002
Office Diagnostics: 025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3
 
Browser Data-->
Proxy settings: N/A
User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)
Default Browser: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
Download signed ActiveX controls: Prompt
Download unsigned ActiveX controls: Disabled
Run ActiveX controls and plug-ins: Allowed
Initialize and script ActiveX controls not marked as safe: Disabled
Allow scripting of Internet Explorer Webbrowser control: Disabled
Active scripting: Allowed
Script ActiveX controls marked as safe for scripting: Allowed
 
File Scan Data-->
 
Other data-->
Office Details: <GenuineResults><MachineData><UGUID>{2E5B2B4D-5ACE-436F-9A8C-013276B95B74}</UGUID><Version>1.9.0027.0</Version><OS>6.1.7601.2.00010300.1.0.003</OS><Architecture>x64</Architecture><PKey>*****-*****-*****-*****-36PQY</PKey><PID>00359-OEM-8704045-26680</PID><PIDType>3</PIDType><SID>S-1-5-21-737054783-3476987263-3252893080</SID><SYSTEM><Manufacturer>Gigabyte Technology Co., Ltd.</Manufacturer><Model>GA-970A-D3</Model></SYSTEM><BIOS><Manufacturer>Award Software International, Inc.</Manufacturer><Version>F10</Version><SMBIOSVersion major="2" minor="4"/><Date>20120530000000.000000+000</Date></BIOS><HWID>2CF43407018400FA</HWID><UserLCID>0409</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>Eastern Standard Time(GMT-05:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM/><GANotification/></MachineData><Software><Office><Result>109</Result><Products/><Applications/></Office></Software></GenuineResults> 
 
Spsys.log Content: 0x80070002
 
Licensing Data-->
Software licensing service version: 6.1.7601.17514
 
Name: Windows(R) 7, HomePremium edition
Description: Windows Operating System - Windows(R) 7, OEM_COA_NSLP channel
Activation ID: 586bc076-c93d-429a-afe5-a69fbc644e88
Application ID: 55c92734-d682-4d71-983e-d6ec3f16059f
Extended PID: 00359-00174-040-426680-02-1033-7601.0000-0552013
Installation ID: 005432246702233303742736192861062744673735764254175951
Processor Certificate URL: [URL]http://go.microsoft.com/fwlink/?LinkID=88338[/URL]
Machine Certificate URL: [URL]http://go.microsoft.com/fwlink/?LinkID=88339[/URL]
Use License URL: [URL]http://go.microsoft.com/fwlink/?LinkID=88341[/URL]
Product Key Certificate URL: [URL]http://go.microsoft.com/fwlink/?LinkID=88340[/URL]
Partial Product Key: 36PQY
License Status: Licensed
Remaining Windows rearm count: 3
Trusted time: 3/4/2013 7:27:38 PM
 
Windows Activation Technologies-->
HrOffline: 0x00000000
HrOnline: 0x00000000
HealthStatus: 0x0000000000000000
Event Time Stamp: 2:25:2013 08:59
ActiveX: Registered, Version: 7.1.7600.16395
Admin Service: Registered, Version: 7.1.7600.16395
HealthStatus Bitmask Output:
 
 
HWID Data-->
HWID Hash Current: NAAAAAEABAABAAEAAAADAAAAAQABAAEAln0o4vo83N/cFRAzVPIY9ixSipt+t/VVsN2OLg==
 
OEM Activation 1.0 Data-->
N/A
 
OEM Activation 2.0 Data-->
BIOS valid for OA 2.0: yes, but no SLIC table
Windows marker version: N/A
OEMID and OEMTableID Consistent: N/A
BIOS Information: 
ACPI Table Name    OEMID Value    OEMTableID Value
APIC            GBT         GBTUACPI
FACP            GBT         GBTUACPI
HPET            GBT         GBTUACPI
MCFG            GBT         GBTUACPI
SSDT            PTLTD         POWERNOW
MSDM            GBT         GBTUACPI
MATS            GBT         
TAMG            GBT         GBT B0
MATS            GBT

 

[Vir Gnarus]

It looks like you have several issues here, varying from either minor problems to more serious.

For the "Event filter with query" error message in the event log, that's a common event error and you can disregard it. If you don't like it cluttering your syslog (I wouldn't want it!) you can use this fix.

The Microsoft Security Essentials error seems to be pretty common with people. Fortunately, it is not a critical service, and in fact isn't even a service at all but a trace logger. Scroll to the bottom of this thread where you see the guy posting screenshots and use that to discover the logger and disable it properly.

Since you've discovered an infection you'll want to direct it to the attention of the security subforum here where you'll get the proper assistance in making sure it's fully clean. I can definitely see an infected system - be it the infection broken or running - causing stability issues for the system. In some cases the infection can get bad enough where a complete disk wipe of the system drive like with DBAN is necessary to remove it (DBAN wipes all drives on system, just so you know). Consider this, and approach the security forum for best plan of action.

However, you remember that Realtek driver issue you had in the past that went away? I'm thinking it's actually still surfacing, but now manifesting in a different manner (freezes and whatnot). The fact that when you do network activity like downloading the system will consistently freeze/crash, much like your previous Realtek-induced BSODs, seems to hint to the fact. Either way if dealing with the infection doesn't lift the symptoms than I'll have to recommend you turn it into the shop to get the hardware looked at. Most likely the motherboard or PSU is at fault here.
http://www.dban.org/

 

[Tusck]

Since you've discovered an infection you'll want to direct it to the attention of the security subforum here where you'll get the proper assistance in making sure it's fully clean. I can definitely see an infected system - be it the infection broken or running - causing stability issues for the system. In some cases the infection can get bad enough where a complete disk wipe of the system drive like with DBAN is necessary to remove it (DBAN wipes all drives on system, just so you know). Consider this, and approach the security forum for best plan of action.

What tells you I have an infection? I've run the malware and anti-virus and they don't find anything.

However, you remember that Realtek driver issue you had in the past that went away? I'm thinking it's actually still surfacing, but now manifesting in a different manner (freezes and whatnot). The fact that when you do network activity like downloading the system will consistently freeze/crash, much like your previous Realtek-induced BSODs, seems to hint to the fact. Either way if dealing with the infection doesn't lift the symptoms than I'll have to recommend you turn it into the shop to get the hardware looked at. Most likely the motherboard or PSU is at fault here.

I'm not so sure about this anymore. I can download with Steam, uTorrent or directly through Chrome without problem, I'm only getting the freeze when using the launcher for SWTOR. Also, I'm getting the freeze when installing and downloading. I'm not getting the freezes any other time at this point.

I also went out and get a cheap wifi USB adapter last night. I connected it and disabled the realtek driver and port. Using the wifi I got the same exact problems, so it may not be tied to this any longer, I don't know for sure.

 

[Vir Gnarus]

You mentioned in a previous post that you removed Sendori which you said was labeled as malware. If that exists, then there's a possibility there's more than just it lingering around on the system. Making sure that system is clean is imperative before proceeding on diagnosing other parts of it. What AV software did you run to scan? Recommended would be Kaspersky's TDSSKiller, Kaspersky's free AV scanner, and Malwarebytes. Again, consult the security thread on that.

As for Realtek and the wifi adapter, the thing is the Realtek network controller is a component of the entire motherboard. If there are problematic symptoms with the network controller than it means there's a problem with the mobo as a whole. That would explain why problems occur consistently showing up with the realtek network controller, but switching to the USB adapter would still generate similar issues. We've ran hardware tests and nothing came up for any of them, which leads me to believe still that the mobo (or power supply) is at fault, since that is usually the case when hardware tests show up nothing (or when multiple tests show up bad). There is no testing procedure for motherboards or power supplies other than with using proper testing equipment, which most likely the shop will have. If you'd like, ask them how they plan on testing the hardware and relay it to us so we can evaluate whether it's a good procedure or not.

 

[Tusck]

Got it, thanks for the clarification. I've posted in the Security forum for some additional help on that aspect.

The one thing that was out of the ordinary that you never commented on was the crash I got when trying to update my Bios. I used the Gigabyte windows installer and it basically crashed during the first "Reading" portion of the process. I have not attempted it a second time. The crash was exactly like all the others, except that I was not downloading anything, I was installing from a file on my system. So I was wondering your thoughts on this, and if an outdated Bios would be causing these issues.

 

[Vir Gnarus]

If attempting to update the BIOS is crashing just because it's outdated, I reckon there's more a problem with it than just being outdated.

Again, I would not doubt this is another attribute of a problematic mobo. If it is the BIOS that needs fixing, and no manner of attempting to reflash it with another BIOS (regardless of version) is working, then it's just as good as dead. While I'd like to see if it is recurring by attempting to flash again, I wouldn't risk it, since if the flash fails in the wrong place, then the mobo is bricked.

 

[Tusck]

Hello.

Just checking in to let you know that I received my new motherboard today and installed. So far I've been doing things I could not do before without crashing and no crashes yet. I'm confident that the problem has been resolved, but i'll check back if things go south.

Thank you for all the help narrowing down what the issue was, like I said, I'm confident that we figured it out and it's now resolved.