Random BSOD on 6 PCs in the network

[aleksay]

random BSOD on 6 PCs in the network
Attachment: logs and minidmp from 4 PCs
Windows Update is off.

Help!

 

[axe0]

The first 2 pc's are a counterfeit install.
The 3rd needs another run, many dumps are missing.
The last one needs Windows to be updated, then post the report of Windows Genuine and Activation Issue Posting Instruction

 

[aleksay]

some new BSOD-PCs

Sorry for delay with answer. May be you might close your eyes on a counterfeit install Because it's interesting problem!
And check all of this PC's. I need help very mach.
1st PC did not BSOD during a last week. I had change some network settings on this PC. See attachment
I run again for the 3rd PC POPULOVA_MV (win upd is on now). See att.
But I can't start to work WinUpdate on this PC - SALOMATINA_M. Error - 8024402C
See att.
Lets see logs of some new BSOD-PCs:

 

[axe0]

A few things I want to clarify
- I will not provide help with the pc's that have a counterfeit installation, it is against the forum rules.
- I will help troubleshoot only 1 PC at a time to prevent confusion from my side, only apply any suggestions given to the specified pc and no other pc. Each pc is unique, even if it has the same hardware & software, and may respond different to a suggestion meant for another pc.

For Windows Update problems, post in Windows Updates Activation - Windows 7 Help Forums


For the pc's with the following names I will NOT provide any suggestions due to piracy

• novikov
• burzeva

Please do not upload files from these pc's, I will not check them. If it appears that other pc's, where the files are currently missing are counterfeit as well, or where I have doubt about the activation and the requested report hasn't been provided, I will refrain from (continued) support as well.


For the pc's with the following names, update Windows and/or go to the Windows Update forum to troubleshoot any problems. A not up to date Windows will be more difficult to troubleshoot as many updates are fixes for BSODs.

• salomatina
• grigoreva
• golovina

For the pc's with the following names, run the command in the quote in an admin command prompt. Again, I help with only 1 pc at a time.

• populova
• region

Run this command in an admin command prompt, it creates a new folder CollectedFiles on the desktop. Right click the folder, sent it to a zip and upload the zip.

md "%USERPROFILE%\Desktop\CollectedFiles"&wmic /output:"%USERPROFILE%\Desktop\CollectedFiles\hotfix.txt" qfe list full /format:table&copy %SystemRoot%\minidump\*.dmp "%USERPROFILE%\Desktop\CollectedFiles"&dxdiag /t %temp%\dxdiag.txt&copy %temp%\dxdiag.txt "%USERPROFILE%\Desktop\CollectedFiles\dxdiag.txt"&type %SystemRoot%\System32\drivers\etc\hosts >> "%USERPROFILE%\Desktop\CollectedFiles\hosts.txt"&systeminfo > "%USERPROFILE%\Desktop\CollectedFiles\systeminfo.tmp"&findstr /v "Owner." "%USERPROFILE%\Desktop\CollectedFiles\systeminfo.tmp" > "%USERPROFILE%\Desktop\CollectedFiles\systeminfo.txt"&del "%USERPROFILE%\Desktop\CollectedFiles\systeminfo.tmp"&driverquery /v > "%USERPROFILE%\Desktop\CollectedFiles\drivers.txt"&msinfo32 /nfo "%USERPROFILE%\Desktop\CollectedFiles\msinfo32.nfo"&wevtutil qe System /f:text > "%USERPROFILE%\Desktop\CollectedFiles\eventlog.txt"&reg export HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall "%USERPROFILE%\Desktop\CollectedFiles\uninstall.txt"&reg export "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components" "%USERPROFILE%\Desktop\CollectedFiles\installed.txt"

NOTE:
If you have pc's that crash while troubleshooting, but aren't mentioned in this post, the above is valid for them as well.

 

[aleksay]

With logs NOW

Sorry! I attached zip without logs!

with logs now!
POPULOVA_MV
REGION3

 

[axe0]

It looks to me like both of them are counterfeit as well, is there any pc not counterfeit?

 

[aleksay]

COA

I'm the new system administrator at this firm. But I don't believe that PCs are counterfeit?. I see COA on these pc.

 

[torchwood]

Hi Aleksay,

Axe0 is correct from what i can see only 2 of them are genuine.

Run this tool, on them, the last 3 blocks of the key will show, compare them to the COA code
http://go.microsoft.com/fwlink/?LinkID=52012

notes
Versions should be the same as well.
The comps with
To be filled by OEM
have Retail motherboards and CANNOT have a Factory product key.
(see systeminfo - Gigabyte motherboards)

Roy

 

[aleksay]

Populova_mv:

It's diff.
Windows Product Key: *****-*****-GJY49-VJBQ7-HYRR2
COA: *****-*****-T2DX8-C2338-R8XPR

Anyway we bought lic! Anybody help!

 

[torchwood]

that report tells me its non-genuine.
No such manufacturer as OEM

On that COA sticker it should state who the OEM is acer/asus/dell etc.

If you purchased new licences then they should be Retail or System Builder.

Once they are input we can proceed, and they should allow MS to update your machines.
(and hopefully stop the BSOD's)
run
http://go.microsoft.com/fwlink/?LinkID=52012
for ALL the computers



Roy

 

[aleksay]

that report tells me its non-genuine.
No such manufacturer as OEM

On that COA sticker it should state who the OEM is acer/asus/dell etc.
Roy

You are wrong. See attachment.

 

[aleksay]

it's an epidemic

I can post COA from GOLOVINA (for example). is it necessary?

 

[torchwood]

Hi aleksay,
RE Populovia

The Mgadiag for that machine

1) the product key in use is for an Acer Factory installed machine running Ultimate.
2) The actual OS in use is Professional
3) there is a Bios Mod, (activation exploit), identified by the placement of the SLIC table
4) Its licenced activated YES - Registered NO
(the usuall fix for this is to install KB971033 - in your i believe it will not work)




Use the product code on the sticker, it will change the licencing criteria and turn the system genuine
(and it will start updating)
Then rerun the tool, post the results THEY WILL BE DIFFERENT.
As you can see from the COA there is NO OEM manufacturer, believe this to be a specialist Server key


Roy

 

[torchwood]

RE GOLOVINIA

Licence looks fine System Builder, Activated YES - Registered NO
You need to install KB971033 on this machine

Office install is NON genuine, going to a blocked Volume licence service
please remove it

Once KB971033 is installed and Office is removed rerun the tool
(it will also start updating - suggest you perform these outside of Office Hours, could take a while


Roy

 

[torchwood]

RE SALMOVINA

Please install KB971033,
Activated YES - Registered NO

same as before do it outside of Office hours

note this machine is running Home Basic, not sure if thats good enough for your needs


Roy

 

[torchwood]

please run the tool on the others as well

• novikov
• burzeva
• region3

Roy

 

[Bat 1]

WOW.

I don't have any idea what type of "Firm" is using the PCs but I can only hope and pray that there isn't any Sensitive information like Banking Records on any of them. I'm not a BSOD expert or even a novice, and even if I was, the BSODs would be the last thing I'd be worried about. Not knowing the Sources of the OS ISO, "Loaders", KMS Emulators and prolly even the Kaspersky Security, I'd be more concerned with Malware especially considering how far out of date the Windows upgrades are.

Personally I recommend a low-level format with something like http://hddguru.com/software/HDD-LLF-Low-Level-Format-Tool/ and a fresh install of the Correct OS version. Bringing the OSs up-to-date is simple with a one time download of the Simplix Pack but Please only download it directly from the developer Patreon or at MDL.

 

[aleksay]

Windows Update fixed the problem.

Windows Update fixed the problem.
BSOD does not appear any more on all computers.

Bringing the OSs up-to-date is simple with a one time download of the Simplix Pack but Please only download it directly from the developer Patreon or at MDL.

Bat1, thank you very much for idea with Simplix Pack!