Solved Various BSOD and file access problems

[doveman007]

Specs are:
Athlon II X4 630
HD4250 IGP (using part of the 4GB DDR3 RAM)
Asrock 880GMH/US3
Seasonic G360 PSU

I originally installed this Win7 x64 on another board which then died on me, so rather than start from scratch I used a workaround that has served me well before to reset the SATA drivers, etc and transfer it to the Asrock board before reinstalling the correct drivers, etc. I haven't had time to work on it since, so only fired it up the other day to carry on.

The first BSOD happened when I was launching some program or other and referred to NTFS.sys. The second happened when installing/updating ATI Catalyst from 11.11 to 13.4 (it actually was only installing the HDMI Audio driver and Vision Control as the machine is only using onboard HD4250 IGP so the display driver, etc could not be updated) and referred to ATIxxxx.sys).

I uninstalled Ultravnc's mirror driver, Daemon Tools and AMD Overdrive (and any associated drivers), uninstalled all ATI software, disabled DataRAM RAMDisk (which removes the driver from Device Manager). After that, I got a BSOD referring to iswkl.sys, which is the ZoneAlarm taskbar, every time I tried to launch IE, so I uninstalled ZoneAlarm and haven't had another BSOD since but I don't believe ZoneAlarm is incompatible with Win7 (although it appears it may have been at one time judging by this old thread) and I'd like to use it as the person who's system this will be is familiar with it (and I haven't found any particularly good free alternatives and I've tested pretty much everything). Daemon Tools and DataRAM RAMdisk are also needed (although I could use Softperfect RAMDisk instead perhaps).

I've also been getting a lot of refusals trying to delete/overwrite files/folders on both C: and D: with the errors telling me I don't have permission, despite using an Admin account with UAC disabled and Security showing that Administrators have full access rights to said folders. For example, I had a Found.000 folder (with a lock symbol) on C: which I couldn't delete, although I could delete a subfolder and files within it. I did find that the user was in both Administrators and Users group (as well as Remote Desktop Users) which seemed wrong, so I removed it from Users and after booting this morning I was able to deleted Found.000, so maybe that's fixed that problem.

Another weird thing happened when running the SF Diagnostic tool, in that it created the logs in D:\Users\Steve\Desktop, despite Windows using C:\Users\Steve\Desktop. I searched the registry for D:\users and it didn't find anything.

I'm still a bit wary because of all the BSOD that this install still might not be stable and I might just have to start from scratch again but I'd obviously rather avoid that if possible as it took me quite some time to get all the software installed and setup (and I've got more to do yet).

 

[koolkat77]

Security App

Crashes indicate zone alarm being a possible cause. Remove it and replace with Microsoft Security Essentials to see if it provides more stability. Uninstallers (removal tools) for common antivirus software

Microsoft Security Essentials and Malwarebytes, both recommended from a strict BSOD perspective.

Microsoft Security Essentials, Free antivirus for windows

Malwarebytes Anti-Malware Free

   Information

DO NOT start the free trial of MalwareBytes. Deselect the option when prompted.

mv2.sys Thu Feb 7 03:02:40 2008 (47AA2070)
UltraVnc miniport driver2
http://www.carrona.org/drivers/driver.php?id=mv2.sys

AMD OverDrive

AODDriver2.sys Wed Jun 15 14:38:35 2011 (4DF86F8B)
AMD Overdrive; also in EasyTune6 for Gigabyte motherboard [br] Known BSOD issues in Win7
http://www.carrona.org/drivers/driver.php?id=AODDriver2.sys

(AODDriver2.sys) is either a stand-alone application, or a component of the AMD VISION Engine Control Center. This driver is known to cause BSOD's on some Win7 systems.

Please uninstall all AMD/ATI video stuff from Control Panel...Programs...Uninstall a program
Then, download (but DO NOT install) a fresh copy of the ATI drivers from Global Provider of Innovative Graphics, Processors and Media Solutions | AMD (in the upper right corner of the page)
Use this procedure to install the DRIVER ONLY: ATI video cards - DRIVER ONLY installation procedure

If the device (AODDriver or AODDriver4.01) remains a problem, open Device Manager, select the "View" item.
Then select "Show hidden devices" and scroll down to the Non-Plug and Play Drivers section.
Locate the AODDriver entry, right click on it and select "Uninstall". Reboot for changes to take affect.

Sometimes the driver remains and continues to cause BSOD's.

Daemon Tools/Alcohol %

dtsoftbus01.sys Mon Oct 17 18:12:30 2011 (4E9C1BAE)
Daemon Tools driver [br] Possible BSOD issues in Win7
http://www.carrona.org/drivers/driver.php?id=dtsoftbus01.sys

Uninstall DAEMON Tools and/or Alcohol % software. It uses a driver called sptd.sys which is known to cause BSODs in Windows 7. Uninstall the software using Add/Remove Programs. Reboot the system. Once the program is uninstalled, run sptd.sys uninstaller to remove the driver from your system.

As an alternative, many people recommend the use of Total Mounter or Magic ISO

Please run these tests and report back the results

1. SFC /scannow to check windows for corruption - SFC /SCANNOW Command - System File Checker
2. Disk check for errors on the hard drive - How to Run Disk Check in Windows 7
3. Troubleshoot applications by a clean boot - Troubleshoot Application Conflicts by Performing a Clean Startup
4. Memtest86+ paying close attention to part 3 - RAM - Test with Memtest86+
5. Hard drive test from HDD mfg website - Hard Drive Diagnostic Procedure

BSOD BUGCHECK SUMMARY

[FONT="Lucida Console"]Debug session time: Sat May 11 03:53:16.468 2013 (UTC + 6:00)
Loading Dump File [C:\Users\Koolkat77\SysnativeBSODApps\051013-40341-01.dmp]
Built by: 7601.18113.amd64fre.win7sp1_gdr.130318-1533
System Uptime: 0 days 0:05:02.091
*** WARNING: Unable to verify timestamp for ISWKL.sys
*** ERROR: Module load completed but symbols could not be loaded for ISWKL.sys
Probably caused by : ISWKL.sys ( ISWKL+1d78 )
BugCheck C4, {f6, 3cc, fffffa800787b060, fffff880085c3d78}
BugCheck Info: [url=http://www.carrona.org/bsodindx.html#0x000000C4]DRIVER_VERIFIER_DETECTED_VIOLATION (c4)[/url]
Bugcheck code 000000c4
DRIVER_VERIFIER_DETECTED_VIOLATION (c4)
Arguments: 
Arg1: 00000000000000f6, Referencing user handle as KernelMode.
Arg2: 00000000000003cc, Handle value being referenced.
Arg3: fffffa800787b060, Address of the current process.
Arg4: fffff880085c3d78, Address inside the driver that is performing the incorrect reference.
BUGCHECK_STR:  0xc4_f6
PROCESS_NAME:  ForceField.exe
FAILURE_BUCKET_ID:  X64_0xc4_f6_ISWKL+1d78
SystemManufacturer = To Be Filled By O.E.M.
SystemProductName = To Be Filled By O.E.M.
BiosVersion = P1.80
BiosReleaseDate = 12/27/2011
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
Debug session time: Sat May 11 03:44:57.245 2013 (UTC + 6:00)
Loading Dump File [C:\Users\Koolkat77\SysnativeBSODApps\051013-42042-01.dmp]
Built by: 7601.18113.amd64fre.win7sp1_gdr.130318-1533
System Uptime: 0 days 0:02:01.479
*** WARNING: Unable to verify timestamp for ISWKL.sys
*** ERROR: Module load completed but symbols could not be loaded for ISWKL.sys
Probably caused by : ISWKL.sys ( ISWKL+1d78 )
BugCheck C4, {f6, 538, fffffa80079b1b30, fffff88008571d78}
BugCheck Info: [url=http://www.carrona.org/bsodindx.html#0x000000C4]DRIVER_VERIFIER_DETECTED_VIOLATION (c4)[/url]
Bugcheck code 000000c4
DRIVER_VERIFIER_DETECTED_VIOLATION (c4)
Arguments: 
Arg1: 00000000000000f6, Referencing user handle as KernelMode.
Arg2: 0000000000000538, Handle value being referenced.
Arg3: fffffa80079b1b30, Address of the current process.
Arg4: fffff88008571d78, Address inside the driver that is performing the incorrect reference.
BUGCHECK_STR:  0xc4_f6
PROCESS_NAME:  ForceField.exe
FAILURE_BUCKET_ID:  X64_0xc4_f6_ISWKL+1d78
SystemManufacturer = To Be Filled By O.E.M.
SystemProductName = To Be Filled By O.E.M.
BiosVersion = P1.80
BiosReleaseDate = 12/27/2011
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
Debug session time: Fri May 10 05:16:12.973 2013 (UTC + 6:00)
Loading Dump File [C:\Users\Koolkat77\SysnativeBSODApps\051013-39437-01.dmp]
Built by: 7601.18044.amd64fre.win7sp1_gdr.130104-1431
System Uptime: 0 days 0:06:20.206
*** WARNING: Unable to verify timestamp for AtihdW76.sys
*** ERROR: Module load completed but symbols could not be loaded for AtihdW76.sys
Probably caused by : AtihdW76.sys ( AtihdW76+4446 )
BugCheck 1000007E, {ffffffffc0000005, fffff880071dd446, fffff880031c47e8, fffff880031c4040}
BugCheck Info: [url=http://www.carrona.org/bsodindx.html#0x1000007E]SYSTEM_THREAD_EXCEPTION_NOT_HANDLED_M (1000007e)[/url]
Bugcheck code 1000007E
Arguments: 
Arg1: ffffffffc0000005, The exception code that was not handled
Arg2: fffff880071dd446, The address that the exception occurred at
Arg3: fffff880031c47e8, Exception Record Address
Arg4: fffff880031c4040, Context Record Address
PROCESS_NAME:  System
BUGCHECK_STR:  0x7E
FAILURE_BUCKET_ID:  X64_0x7E_AtihdW76+4446
SystemManufacturer = To Be Filled By O.E.M.
SystemProductName = To Be Filled By O.E.M.
BiosVersion = P1.70
BiosReleaseDate = 10/19/2011
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
Debug session time: Fri Apr 12 05:31:15.857 2013 (UTC + 6:00)
Loading Dump File [C:\Users\Koolkat77\SysnativeBSODApps\041213-58640-01.dmp]
Built by: 7601.18044.amd64fre.win7sp1_gdr.130104-1431
System Uptime: 0 days 1:08:58.480
Probably caused by : Ntfs.sys ( Ntfs! ?? ::NNGAKEGL::`string'+609f )
BugCheck D1, {fffff88001315e84, 2, 8, fffff88001315e84}
BugCheck Info: [url=http://www.carrona.org/bsodindx.html#0x000000D1]DRIVER_IRQL_NOT_LESS_OR_EQUAL (d1)[/url]
Bugcheck code 000000d1
Arguments: 
Arg1: fffff88001315e84, memory referenced
Arg2: 0000000000000002, IRQL
Arg3: 0000000000000008, value 0 = read operation, 1 = write operation
Arg4: fffff88001315e84, address which referenced memory
BUGCHECK_STR:  0xD1
DEFAULT_BUCKET_ID:  WIN7_DRIVER_FAULT
PROCESS_NAME:  System
FAILURE_BUCKET_ID:  X64_0xD1_CODE_AV_BAD_IP_Ntfs!_??_::NNGAKEGL::_string_+609f
SystemManufacturer = To Be Filled By O.E.M.
SystemProductName = To Be Filled By O.E.M.
BiosVersion = P1.70
BiosReleaseDate = 10/19/2011
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``[/FONT]

 

[doveman007]

Thanks, I've already uninstalled the mentioned apps. I have no problem with Daemon Tools on two other systems but I do uninstall the sptd driver.

I need ZoneAlarm for the Firewall (both incoming and outgoing) so I don't think MSE is a suitable replacement. I'll try installing it again once everything is stable and if it still causes problems, try Comodo which I use on my other systems. I use Avira Antivir for my antivirus on those without problems.

I've done an overnight memtest. I just did sfc /scannow and it reported

Verification 100% complete.
Windows Resource Protection found corrupt files but was unable to fix some of them.

I've attached the CBS.log which doesn't mean much to me but seems to show a lot of errors.

 

[koolkat77]

Those logs are not my area of expertise but I will call a friend to this thread.
I'd recommend Avast! av better than Zone alarm, Comodo or Avira.

You could still used MSE till the time your BSOD issues are solved then go back to ZA.

 

[tom982]

Hello doveman007 and welcome to the forums


koolkat77 has asked me to take a look at this thread for you. Your CBS log doesn't contain the SFC results so we'll have to look at the archived logs:


Export CBS folder

• Click the Start button
  
  then click Computer.
• Double-click on the C: drive, under the Hard Disk Drives category, and then scroll down to, and double click on the Windows folder.
• Find and double click on the Logs folder.
• Right-click on the CBS folder, and select Copy.
• Go back to your Desktop, right-click on it, and select Paste. You should now see a copy of the CBS folder appear on your Desktop called CBS.
• Right-click on this new folder, and navigate through Send to, and select Compressed (zipped) folder.
• A new file, also called CBS (CBS.zip), but this time with a different icon, will be created.

Post the CBS.zip folder please!


Tom

 

[doveman007]

Hi tom982

Thanks for offering to take a look. CBS folder is attached as requested

 

[tom982]

Hi doveman007,

Your CBS log is showing two corrupt files:

2013-05-11 16:16:30, Info                  CSI    000004e1 [SR] Repairing 1 components
2013-05-11 16:16:30, Info                  CSI    000004e2 [SR] Beginning Verify and Repair transaction
2013-05-11 16:16:30, Info                  CSI    000004e3 Hashes for file member \SystemRoot\WinSxS\amd64_microsoft-windows-t..teconnectionmanager_31bf3856ad364e35_6.1.7601.17514_none_ecc547376ae3a1a3\termsrv.dll do not match actual file [l:22{11}]"termsrv.dll" :
  Found: {l:32 b:QYOQGQFNyArWS4rDiX4yE+DwPlLJ9doGTc1o3w47yls=} Expected: {l:32 b:b6DQfOGKOmnYLuSdh18UHjlAbpLDTqx2rE6wUubry80=}
2013-05-11 16:16:30, Info                  CSI    000004e4 [SR] Cannot repair member file [l:22{11}]"termsrv.dll" of Microsoft-Windows-TerminalServices-RemoteConnectionManager, Version = 6.1.7601.17514, pA = PROCESSOR_ARCHITECTURE_AMD64 (9), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, hash mismatch
2013-05-11 16:16:30, Info                  CSI    000004e5 Hashes for file member \SystemRoot\WinSxS\amd64_microsoft-windows-t..teconnectionmanager_31bf3856ad364e35_6.1.7601.17514_none_ecc547376ae3a1a3\termsrv.dll do not match actual file [l:22{11}]"termsrv.dll" :
  Found: {l:32 b:QYOQGQFNyArWS4rDiX4yE+DwPlLJ9doGTc1o3w47yls=} Expected: {l:32 b:b6DQfOGKOmnYLuSdh18UHjlAbpLDTqx2rE6wUubry80=}
2013-05-11 16:16:30, Info                  CSI    000004e6 [SR] Cannot repair member file [l:22{11}]"termsrv.dll" of Microsoft-Windows-TerminalServices-RemoteConnectionManager, Version = 6.1.7601.17514, pA = PROCESSOR_ARCHITECTURE_AMD64 (9), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, hash mismatch
2013-05-11 16:16:30, Info                  CSI    000004e7 [SR] This component was referenced by [l:202{101}]"Microsoft-Windows-Foundation-Package~31bf3856ad364e35~amd64~~6.1.7601.17514.WindowsFoundationDelivery"
2013-05-11 16:16:30, Info                  CSI    000004e8 Hashes for file member \??\C:\Windows\System32\termsrv.dll do not match actual file [l:22{11}]"termsrv.dll" :
  Found: {l:32 b:QYOQGQFNyArWS4rDiX4yE+DwPlLJ9doGTc1o3w47yls=} Expected: {l:32 b:b6DQfOGKOmnYLuSdh18UHjlAbpLDTqx2rE6wUubry80=}
2013-05-11 16:16:30, Info                  CSI    000004e9 Hashes for file member \SystemRoot\WinSxS\amd64_microsoft-windows-t..teconnectionmanager_31bf3856ad364e35_6.1.7601.17514_none_ecc547376ae3a1a3\termsrv.dll do not match actual file [l:22{11}]"termsrv.dll" :
  Found: {l:32 b:QYOQGQFNyArWS4rDiX4yE+DwPlLJ9doGTc1o3w47yls=} Expected: {l:32 b:b6DQfOGKOmnYLuSdh18UHjlAbpLDTqx2rE6wUubry80=}
2013-05-11 16:16:30, Info                  CSI    000004ea [SR] Could not reproject corrupted file [ml:520{260},l:46{23}]"\??\C:\Windows\System32"\[l:22{11}]"termsrv.dll"; source file in store is also corrupted
2013-05-11 16:16:30, Info                  CSI    000004eb Repair results created:
POQ 130 starts:
     0: Set Key Value: Key = [l:168{84}]"\Registry\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Setup\Sysprep\Specialize", Value = [l:76{38}]"{6ae3a1a3-4737-ecc5-0218-900956130400}", Type = REG_SZ (1), Data = {l:116 b:43003a005c00570069006e0064006f00770073005c00530079007300740065006d00330032005c00730065007400750070005c007400730073007900730070007200650070002e0064006c006c002c00520043004d00530079007300500072006500700052006500730074006f00720065000000}


POQ 130 ends.
2013-05-11 16:16:30, Info                  CSI    000004ec [SR] Repair complete
2013-05-11 16:16:30, Info                  CSI    000004ed [SR] Committing transaction

SFCFix Script


Warning: this fix is specific to the user in this thread. No one else should follow these instructions as it may cause more harm than good. If you are after assistance, please start a thread of your own.

1. Download SFCFix.exe (by niemiro) and save this to your Desktop.
2. Download the file below, SFCFix.zip, and save this to your Desktop. Ensure that this file is named SFCFix.zip - do not rename it.
3. Save any open documents and close all open windows.
4. On your Desktop, you should see two files: SFCFix.exe and SFCFix.zip.
5. Drag the file SFCFix.zip onto the file SFCFix.exe and release it.
6. SFCFix will now process the script.
7. Upon completion, a files should be created on your Desktop: SFCFix.txt.
8. Copy (Ctrl + C) and Paste (Ctrl + V) the contents of this file into your next post for me to analyse please - put [CODE][/CODE] tags around the log to break up the text.

https://dl.dropboxusercontent.com/u/16537616/SFCFix/Scripts/doveman007/SFCFix.zip


Tom

 

[doveman007]

Hi tom982

Thanks for that. There was so much in the CBS.log I thought there might be tons of problems, so glad it only appears to be two files.

Here's the SFCFIX report:

SFCFix version 1.5.1.0 by niemiro.
Start time: 2013-05-13 16:08:02.651
Using .zip script file at C:\Users\Steve\Desktop\SFCFix.zip
 
 
PowerCopy::
Failed to create new datablock for file or folder C:\Windows\Sysnative\termsrv.dll with error code 1.
Failed to create new datablock for file or folder C:\Windows\WinSxS\amd64_microsoft-windows-t..teconnectionmanager_31bf3856ad364e35_6.1.7601.17514_none_ecc547376ae3a1a3\termsrv.dll with error code 1.
The file [URL="file://\\?\C:\Windows\Sysnative\termsrv.dll"]\\?\C:\Windows\Sysnative\termsrv.dll[/URL] is in use and must be replaced over a reboot.
The file [URL="file://\\?\C:\Windows\WinSxS\amd64_microsoft-windows-t..teconnectionmanager_31bf3856ad364e35_6.1.7601.17514_none_ecc547376ae3a1a3\termsrv.dll"]\\?\C:\Windows\WinSxS\amd64_microsoft-windows-t..teconnectionmanager_31bf3856ad364e35_6.1.7601.17514_none_ecc547376ae3a1a3\termsrv.dll[/URL] is in use and must be replaced over a reboot.
Successfully pended file for replace over reboot: [URL="file://\\?\C:\Windows\Sysnative\termsrv.dll"]\\?\C:\Windows\Sysnative\termsrv.dll[/URL]
Successfully pended file for replace over reboot: [URL="file://\\?\C:\Windows\WinSxS\amd64_microsoft-windows-t..teconnectionmanager_31bf3856ad364e35_6.1.7601.17514_none_ecc547376ae3a1a3\termsrv.dll"]\\?\C:\Windows\WinSxS\amd64_microsoft-windows-t..teconnectionmanager_31bf3856ad364e35_6.1.7601.17514_none_ecc547376ae3a1a3\termsrv.dll[/URL]
PowerCopy:: directive failed to complete successfully.
 
 
Reboot:: directive completed successfully.
 
 
PostRebootCorruptionDetection::
Hash failure for file [URL="file://\\?\C:\Windows\Sysnative\termsrv.dll"]\\?\C:\Windows\Sysnative\termsrv.dll[/URL].
 Expected: b6DQfOGKOmnYLuSdh18UHjlAbpLDTqx2rE6wUubry80=
 Found: QYOQGQFNyArWS4rDiX4yE+DwPlLJ9doGTc1o3w47yls=
Hash failure for file [URL="file://\\?\C:\Windows\WinSxS\amd64_microsoft-windows-t..teconnectionmanager_31bf3856ad364e35_6.1.7601.17514_none_ecc547376ae3a1a3\termsrv.dll"]\\?\C:\Windows\WinSxS\amd64_microsoft-windows-t..teconnectionmanager_31bf3856ad364e35_6.1.7601.17514_none_ecc547376ae3a1a3\termsrv.dll[/URL].
 Expected: b6DQfOGKOmnYLuSdh18UHjlAbpLDTqx2rE6wUubry80=
 Found: QYOQGQFNyArWS4rDiX4yE+DwPlLJ9doGTc1o3w47yls=
PostRebootCorruptionDetection:: directive failed to complete successfully.
 
 
PostRebootRestorePermissions::
Successfully restored ownership for C:\Windows\Sysnative\termsrv.dll
Successfully restored permissions on C:\Windows\Sysnative\termsrv.dll
Successfully restored ownership for C:\Windows\WinSxS\amd64_microsoft-windows-t..teconnectionmanager_31bf3856ad364e35_6.1.7601.17514_none_ecc547376ae3a1a3\termsrv.dll
Successfully restored permissions on C:\Windows\WinSxS\amd64_microsoft-windows-t..teconnectionmanager_31bf3856ad364e35_6.1.7601.17514_none_ecc547376ae3a1a3\termsrv.dll
PostRebootRestorePermissions:: directive completed successfully.
 
 
Failed to process all directives successfully.
SFCFix version 1.5.1.0 by niemiro has completed.
Currently storing 2 datablocks.
Finish time: 2013-05-13 16:10:40.040
----------------------EOF-----------------------

EDIT: There do appear to still be some permission issues. I just tried to install Wordview and it almost completed but when it got to Writing System Registry Values it said:

"Product: Microsoft Office Word Viewer 2003 -- Error 1406. Setup cannot write the value ShowDates to the registry key \Software\Microsoft\Office\11.0\Common\LanguageResources. Verify that you have sufficient permissions to access the registry or contact Microsoft Product Support Services (PSS) for assistance. For information about how to contact PSS, see ."

I had a look and under Current User that path exists to Common\ but there's no LanguageResources (perhaps the installer was trying to create that). The user and Administrators both have Full Control in that path but there's a RESTRICTED user that's set to Read-only.

 

[tom982]

Hi Doveman,

I will get back to you as soon as possible with a new fix. In the mean time, can you post your MGADiag log please:


MGADiag

1. Download MGADiag (by Microsoft) from the link below:
   
   
   http://go.microsoft.com/fwlink/?linkid=52012
   
   
   
   
2. Run the tool by double clicking on the file. Press Continue when prompted
3. When it has finished, press Copy then Paste (Ctrl+V) this into your next post

Tom

 

[tom982]

In addition to the above, if you still have that counterfeit ASUS license installed on your computer I'm afraid we won't be helping you over here either. But I'm more than happy for you to show me otherwise

 

[doveman007]

OK, sorry about that. I've removed that now.

I'm still not sure that the board is OK as when I booted up the other day, the NIC wasn't working although the lights were flickering but Windows said the cable was disconnected, which it wasn't. After shutting down, disconnecting a device from the IDE port and rebooting it started working again but I don't see why they should be connected and I just hope that this board isn't dying on me. Anyway, hopefully we can sort out any software issues and see if it's OK after that.

Diagnostic Report (1.9.0027.0):
-----------------------------------------
Windows Validation Data-->
Validation Code: 0
Cached Online Validation Code: N/A, hr = 0xc004f012
Windows Product Key: *****-*****-TMVMJ-BBMRX-3MBMV
Windows Product Key Hash: 55n8g6xdzhe4AOWhmTzdzQoLfa4=
Windows Product ID: 00426-292-0000007-85428
Windows Product ID Type: 5
Windows License Type: Retail
Windows OS version: 6.1.7601.2.00010100.1.0.001
ID: {65A63BCD-FE8D-4698-99BD-6AF774707FE4}(3)
Is Admin: Yes
TestCab: 0x0
LegitcheckControl ActiveX: N/A, hr = 0x80070002
Signed By: N/A, hr = 0x80070002
Product Name: Windows 7 Ultimate
Architecture: 0x00000009
Build lab: 7601.win7sp1_gdr.130318-1533
TTS Error: 
Validation Diagnostic: 
Resolution Status: N/A
Vista WgaER Data-->
ThreatID(s): N/A, hr = 0x80070002
Version: N/A, hr = 0x80070002
Windows XP Notifications Data-->
Cached Result: N/A, hr = 0x80070002
File Exists: No
Version: N/A, hr = 0x80070002
WgaTray.exe Signed By: N/A, hr = 0x80070002
WgaLogon.dll Signed By: N/A, hr = 0x80070002
OGA Notifications Data-->
Cached Result: N/A, hr = 0x80070002
Version: N/A, hr = 0x80070002
OGAExec.exe Signed By: N/A, hr = 0x80070002
OGAAddin.dll Signed By: N/A, hr = 0x80070002
OGA Data-->
Office Status: 109 N/A
OGA Version: N/A, 0x80070002
Signed By: N/A, hr = 0x80070002
Office Diagnostics: 025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3
Browser Data-->
Proxy settings: N/A
User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)
Default Browser: C:\Program Files\Internet Explorer\iexplore.exe
Download signed ActiveX controls: Prompt
Download unsigned ActiveX controls: Disabled
Run ActiveX controls and plug-ins: Allowed
Initialize and script ActiveX controls not marked as safe: Disabled
Allow scripting of Internet Explorer Webbrowser control: Disabled
Active scripting: Allowed
Script ActiveX controls marked as safe for scripting: Allowed
File Scan Data-->
File Mismatch: C:\Windows\system32\wat\watadminsvc.exe[Hr = 0x80070003]
File Mismatch: C:\Windows\system32\wat\npwatweb.dll[Hr = 0x80070003]
File Mismatch: C:\Windows\system32\wat\watux.exe[Hr = 0x80070003]
File Mismatch: C:\Windows\system32\wat\watweb.dll[Hr = 0x80070003]
Other data-->
Office Details: <GenuineResults><MachineData><UGUID>{65A63BCD-FE8D-4698-99BD-6AF774707FE4}</UGUID><Version>1.9.0027.0</Version><OS>6.1.7601.2.00010100.1.0.001</OS><Architecture>x64</Architecture><PKey>*****-*****-*****-*****-3MBMV</PKey><PID>00426-292-0000007-85428</PID><PIDType>5</PIDType><SID>S-1-5-21-1524521622-1837298333-669559819</SID><SYSTEM><Manufacturer>To Be Filled By O.E.M.</Manufacturer><Model>To Be Filled By O.E.M.</Model></SYSTEM><BIOS><Manufacturer>American Megatrends Inc.</Manufacturer><Version>P1.80</Version><SMBIOSVersion major="2" minor="6"/><Date>20111227000000.000000+000</Date></BIOS><HWID>1E6E0600018400F2</HWID><UserLCID>0809</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>GMT Standard Time(GMT+00:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM/><GANotification/></MachineData><Software><Office><Result>109</Result><Products/><Applications/></Office></Software></GenuineResults>  
Spsys.log Content: 0x80070002
Licensing Data-->
Software licensing service version: 6.1.7601.17514
Name: Windows(R) 7, Ultimate edition
Description: Windows Operating System - Windows(R) 7, RETAIL channel
Activation ID: ac96e1a8-6cc4-4310-a4ff-332ce77fb5b8
Application ID: 55c92734-d682-4d71-983e-d6ec3f16059f
Extended PID: 00426-00170-292-000000-00-2057-7601.0000-1422013
Installation ID: 022240734634636810859856443402317181606651187966371256
Processor Certificate URL: [URL]http://go.microsoft.com/fwlink/?LinkID=88338[/URL]
Machine Certificate URL: [URL]http://go.microsoft.com/fwlink/?LinkID=88339[/URL]
Use License URL: [URL]http://go.microsoft.com/fwlink/?LinkID=88341[/URL]
Product Key Certificate URL: [URL]http://go.microsoft.com/fwlink/?LinkID=88340[/URL]
Partial Product Key: 3MBMV
License Status: Initial grace period
Time remaining: 43200 minute(s) (30 day(s))
Remaining Windows rearm count: 3
Trusted time: 22/05/2013 21:06:15
Windows Activation Technologies-->
HrOffline: 0x00000000
HrOnline: N/A
HealthStatus: 0x0000000000000000
Event Time Stamp: N/A
ActiveX: Not Registered - 0x80040154
Admin Service: Not Registered - 0x80040154
HealthStatus Bitmask Output:
 
HWID Data-->
HWID Hash Current: MgAAAAAABgABAAEAAAABAAAAAQABAAEA6GEmUZSywr9U+XTEEDMkHPrAFM6qDqpRQho=
OEM Activation 1.0 Data-->
N/A
OEM Activation 2.0 Data-->
BIOS valid for OA 2.0: yes, but no SLIC table
Windows marker version: N/A
OEMID and OEMTableID Consistent: N/A
BIOS Information: 
  ACPI Table Name OEMID Value OEMTableID Value
  APIC   ALASKA  A M I
  FACP   ALASKA  A M I
  HPET   ALASKA  A M I
  MCFG   ALASKA  A M I
  AAFT   ALASKA  OEMAAFT 
  MCFG   ALASKA  A M I
  SSDT   AMD     POWERNOW

 

[tom982]

Nice try, but changing from the Daz loader to RemoveWAT doesn't alter the fact that your Windows installation is counterfeit

 

[doveman007]

I'm confused as I just uninstalled the dodgy licence and as far as I'm aware I'm now in the 30-day grace period. I certainly haven't installed RemoveWAT but if you're saying that's there I'll be happy to remove it.

 

[tom982]

Hi Doveman,

In that case it looks like I owe you an apology. You currently have the default key in your Windows installation which can never be activated, you're sitting in the 30 day grace period at the moment. The default key is used as part of the RemoveWAT exploit. There are also errors in your MGADiag log that I thought were the ones when the RemoveWAT exploit was present but having looked again, I can see this isn't the case.

I apologise for making this assumption but hope you can understand why I made it.

The errors in your MGADiag log indicate that you don't have KB971033 installed so you will need to install that:

http://support.microsoft.com/kb/971033

In addition to the above, whilst its great that you've removed the illegal license from your computer, you will need to get a genuine license before I can continue helping you as at the moment there's no stopping you from using the Daz loader again when I've finished helping you

Tom

 

[doveman007]

No problem, I can of course understand you making this assumption.

I appreciate your position but wish to try and satisfy myself that the board isn't faulty before activating my licence, so will report back when I've done that.

 

[doveman007]

Just to let you know I've pretty much given up on that installation and started from scratch. It was completely locking up my PC when opening IE and I had to hard reset, so that pushed me to start again.

There's also a fair bit of software (Virtualbox, XP Mode) installed that I've decided is unnecessary, so it's probably easier to start again rather than try and ensure these programs and their drivers, etc are completely removed.

I've still got the old install as I'm using a dual-boot but it's probably not worth wasting any more time on.

I have activated my licence with the fresh install. I've never understood the reason for the automated phone system, where I have to type in 10 blocks of numbers on my phonepad, then it gives me another 10 blocks which I have to enter in Windows. Other than verifying I'm human, I can't see why Windows can't do this exchange automatically over the Internet but I guess there must be a good reason.

Anyway, hopefully I won't run into any more problems with my fresh install but if I do I'll start a new thread (and post my MGADiag then) so please feel free to close this thread.

Thanks.

 

[tom982]

Hi doveman007,

Sorry to hear it's giving you so many problems but a clean install sounds like the best way forward, glad it's all running nicely now.

The phone activation exists for people who don't have internet connection, or for those who's online activation isn't working, it's just a fallback really. Didn't your computer activate over the internet?

Feel free to drop me a PM if you ever need anything

Tom

 

[doveman007]

Thanks Tom,

The fresh install does seem to be fine, albeit I haven't really installed any software yet. However, IE10 is working normally, so I'm fairly sure that the other install's problems were software (maybe driver) rather than hardware related. I'm going to use EaseUS ToDo Backup as I go along installing the software, so that I can easily revert if something goes wrong

I do have internet activation but it said it couldn't activate or something and told me to use the automated phone system. Anyway, all done now so no worries.

Thanks for your help, I'm sure I'll be back here sometime with some other problems

 

[doveman007]

Hi Tom

I said I'd probably be back and here I am

Even with my fresh install of Windows I'm getting the same errors as before when trying to install Word Viewer.

More worryingly, I've just started getting BSOD. The last thing I installed was Plex Media Server, so it might be related but I think that's fairly well supported so it shouldn't be a problem.

Problem signature:
Problem Event Name: BlueScreen
OS Version: 6.1.7601.2.1.0.256.1
Locale ID: 2057
Additional information about the problem:
BCCode: c5
BCP1: 0000000000000008
BCP2: 0000000000000002
BCP3: 0000000000000000
BCP4: FFFFF800033C2B05
OS Version: 6_1_7601
Service Pack: 1_0
Product: 256_1
Files that help describe the problem:
C:\Windows\Minidump\063013-36535-01.dmp
d:\temp\user\WER-58079-0.sysdata.xml

Please find my MGADIAG output below:

Diagnostic Report (1.9.0027.0):
-----------------------------------------
Windows Validation Data-->
Validation Code: 0
Cached Online Validation Code: 0x0
Windows Product Key: *****-*****-FX8WW-PGVVM-W69YC
Windows Product Key Hash: G0IoKNtQuZbGXRpYTtNcJHSLzAU=
Windows Product ID: 00426-OEM-9402076-14585
Windows Product ID Type: 8
Windows License Type: COA SLP
Windows OS version: 6.1.7601.2.00010100.1.0.001
ID: {81C96419-83A1-465B-990C-7E216FE37F5C}(1)
Is Admin: Yes
TestCab: 0x0
LegitcheckControl ActiveX: N/A, hr = 0x80070002
Signed By: N/A, hr = 0x80070002
Product Name: Windows 7 Ultimate
Architecture: 0x00000009
Build lab: 7601.win7sp1_gdr.130318-1533
TTS Error:
Validation Diagnostic:
Resolution Status: N/A
Vista WgaER Data-->
ThreatID(s): N/A, hr = 0x80070002
Version: N/A, hr = 0x80070002
Windows XP Notifications Data-->
Cached Result: N/A, hr = 0x80070002
File Exists: No
Version: N/A, hr = 0x80070002
WgaTray.exe Signed By: N/A, hr = 0x80070002
WgaLogon.dll Signed By: N/A, hr = 0x80070002
OGA Notifications Data-->
Cached Result: N/A, hr = 0x80070002
Version: N/A, hr = 0x80070002
OGAExec.exe Signed By: N/A, hr = 0x80070002
OGAAddin.dll Signed By: N/A, hr = 0x80070002
OGA Data-->
Office Status: 109 N/A
OGA Version: N/A, 0x80070002
Signed By: N/A, hr = 0x80070002
Office Diagnostics: B4D0AA8B-604-645_025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3
Browser Data-->
Proxy settings: N/A
User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)
Default Browser: C:\Program Files\Internet Explorer\iexplore.exe
Download signed ActiveX controls: Prompt
Download unsigned ActiveX controls: Disabled
Run ActiveX controls and plug-ins: Allowed
Initialize and script ActiveX controls not marked as safe: Disabled
Allow scripting of Internet Explorer Webbrowser control: Disabled
Active scripting: Allowed
Script ActiveX controls marked as safe for scripting: Allowed
File Scan Data-->
Other data-->
Office Details: <GenuineResults><MachineData><UGUID>{81C96419-83A1-465B-990C-7E216FE37F5C}</UGUID><Version>1.9.0027.0</Version><OS>6.1.7601.2.00010100.1.0.001</OS><Architecture>x64</Architecture><PKey>*****-*****-*****-*****-W69YC</PKey><PID>00426-OEM-9402076-14585</PID><PIDType>8</PIDType><SID>S-1-5-21-4142153632-2294863933-3660688552</SID><SYSTEM><Manufacturer>To Be Filled By O.E.M.</Manufacturer><Model>To Be Filled By O.E.M.</Model></SYSTEM><BIOS><Manufacturer>American Megatrends Inc.</Manufacturer><Version>P1.80</Version><SMBIOSVersion major="2" minor="6"/><Date>20111227000000.000000+000</Date></BIOS><HWID>C4C40D00018400F2</HWID><UserLCID>0809</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>GMT Standard Time(GMT+00:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM/><GANotification/></MachineData><Software><Office><Result>109</Result><Products/><Applications/></Office></Software></GenuineResults>
Spsys.log Content: 0x80070002
Licensing Data-->
Software licensing service version: 6.1.7601.17514
Name: Windows(R) 7, Ultimate edition
Description: Windows Operating System - Windows(R) 7, OEM_COA_SLP channel
Activation ID: 022a1afb-b893-4190-92c3-8f69a49839fb
Application ID: 55c92734-d682-4d71-983e-d6ec3f16059f
Extended PID: 00426-00188-020-714585-02-2057-7601.0000-1522013
Installation ID: 021421644982079965039632274962335092902774918673131413
Processor Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88338
Machine Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88339
Use License URL: http://go.microsoft.com/fwlink/?LinkID=88341
Product Key Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88340
Partial Product Key: W69YC
License Status: Licensed
Remaining Windows rearm count: 3
Trusted time: 30/06/2013 08:59:06
Windows Activation Technologies-->
HrOffline: 0x00000000
HrOnline: 0x00000000
HealthStatus: 0x0000000000000000
Event Time Stamp: 6:1:2013 13:48
ActiveX: Registered, Version: 7.1.7600.16395
Admin Service: Registered, Version: 7.1.7600.16395
HealthStatus Bitmask Output:

HWID Data-->
HWID Hash Current: OgAAAAEABgABAAEAAQABAAAAAwABAAEAln0mUdBaEDNU+SQclLJ0xMK/+sAUzo4Lqg6qUZpi5qVCGg==
OEM Activation 1.0 Data-->
N/A
OEM Activation 2.0 Data-->
BIOS valid for OA 2.0: yes, but no SLIC table
Windows marker version: N/A
OEMID and OEMTableID Consistent: N/A
BIOS Information:
ACPI Table Name OEMID Value OEMTableID Value
APIC ALASKA A M I
FACP ALASKA A M I
HPET ALASKA A M I
MCFG ALASKA A M I
AAFT ALASKA OEMAAFT
MCFG ALASKA A M I
SSDT AMD POWERNOW

 

[doveman007]

It does seem that Plex might be the problem, as without that running I was able to defrag my D: data partition and then my C: partition, each of which took several hours and encountered no problems, so it doesn't seem like there's any issues with reading/writing from the HDD.

I just launched Plex again and started it scanning my folders for media and the PC locked up within about 10 minutes whilst I was browsing with IE and I had to do a hard reset (no BSOD this time though).

Also, even without Plex running I'm having a weird issue with IE, in that I've opened several tabs but when I click on two of them it doesn't switch to them and stays on the current tab. I can't close those two tabs either.

EDIT: Regarding the Wordview install problem, I've tried adding Full Control permissions for Everyone to both CU\Software\Microsoft\Office and LM\Software\Microsoft\Office but I'm still getting the same errors when trying to install it.