Varying BSOD's

[drhardlove]

Hi Community.
This is my first post here, although I have been helped before, by browsing related topics.
My old workstation, is all I have for my music production. Thanks for being around.

So here we go. I have repeatedly experienced BSOD's for quite some time now. I have inconsistent reports on the blue screen. They vary quite a bit.

I have really no clue to what causes this, although there are a few common traits.
It often happens when I exit a browser t.x. Other times, when i exit another graphics heavy program.

I changed the Graphics card some time ago, but that was in response to some BSOD's already. And I think it has gotten worse after.

I had my machine not willing to start, some days back. It just lit up a few leads on the front panel, blinking, and never got started. I found a Dell supporter talking about the PSU being faulty with that blinking code. However, the support thread was for another DELL system, so there is no guarantee that goes for my system.

Then it started again a few days later. And has started ever since, but generally more active on the BSOD's.

I hope someone can help me identifying the culprit(s) in the collected info.

I did run the DM Log collector exe, but it finished without prompting for me to save the log zip file.
It crashed? Or is the log file somewhere default?

 

[axe0]

Please do the following

• Open an admin command prompt
• Copy & paste the code below in the command prompt
• Go to your desktop
• Right click CollectedFiles folder and choose sent to and select compressed (zipped) folder
• Upload the zip.

Code:

md "%USERPROFILE%\Desktop\CollectedFiles"&wmic /output:"%USERPROFILE%\Desktop\CollectedFiles\hotfix.txt" qfe list full /format:table&copy %SystemRoot%\minidump\*.dmp "%USERPROFILE%\Desktop\CollectedFiles"&dxdiag /t %temp%\dxdiag.txt&copy %temp%\dxdiag.txt "%USERPROFILE%\Desktop\CollectedFiles\dxdiag.txt"&type %SystemRoot%\System32\drivers\etc\hosts >> "%USERPROFILE%\Desktop\CollectedFiles\hosts.txt"&systeminfo > "%USERPROFILE%\Desktop\CollectedFiles\systeminfo.tmp"&findstr /v "Owner." "%USERPROFILE%\Desktop\CollectedFiles\systeminfo.tmp" > "%USERPROFILE%\Desktop\CollectedFiles\systeminfo.txt"&del "%USERPROFILE%\Desktop\CollectedFiles\systeminfo.tmp"&driverquery /v > "%USERPROFILE%\Desktop\CollectedFiles\drivers.txt"&msinfo32 /nfo "%USERPROFILE%\Desktop\CollectedFiles\msinfo32.nfo"&wevtutil qe System /f:text > "%USERPROFILE%\Desktop\CollectedFiles\eventlog.txt"&reg export HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall "%USERPROFILE%\Desktop\CollectedFiles\uninstall.txt"&reg export "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components" "%USERPROFILE%\Desktop\CollectedFiles\installed.txt"

 

[drhardlove]

Hi
Thanks for the help. Here is the ZIP attached.
K

 

[axe0]

Please post the report of Windows Genuine and Activation Issue Posting Instruction

 

[drhardlove]

Diagnostic Report (1.9.0027.0):
-----------------------------------------
Windows Validation Data-->

Validation Code: 0
Cached Online Validation Code: N/A, hr = 0xc004f012
Windows Product Key: *****-*****-X92GV-V7DCV-P4K27
Windows Product Key Hash: aU2z1/fnhnLHmhBm699qYZT2E6s=
Windows Product ID: 00426-OEM-8992662-00400
Windows Product ID Type: 2
Windows License Type: OEM SLP
Windows OS version: 6.1.7601.2.00010100.1.0.001
ID: {4ABA7F4A-7A38-400D-8163-4E3BBAD03975}(1)
Is Admin: Yes
TestCab: 0x0
LegitcheckControl ActiveX: N/A, hr = 0x80070002
Signed By: N/A, hr = 0x80070002
Product Name: Windows 7 Enterprise
Architecture: 0x00000009
Build lab: 7601.win7sp1_ldr_escrow.181110-1429
TTS Error: 
Validation Diagnostic: 
Resolution Status: N/A

Vista WgaER Data-->
ThreatID(s): N/A, hr = 0x80070002
Version: N/A, hr = 0x80070002

Windows XP Notifications Data-->
Cached Result: N/A, hr = 0x80070002
File Exists: No
Version: N/A, hr = 0x80070002
WgaTray.exe Signed By: N/A, hr = 0x80070002
WgaLogon.dll Signed By: N/A, hr = 0x80070002

OGA Notifications Data-->
Cached Result: N/A, hr = 0x80070002
Version: N/A, hr = 0x80070002
OGAExec.exe Signed By: N/A, hr = 0x80070002
OGAAddin.dll Signed By: N/A, hr = 0x80070002

OGA Data-->
Office Status: 109 N/A
OGA Version: N/A, 0x80070002
Signed By: N/A, hr = 0x80070002
Office Diagnostics: 77F760FE-153-80070002_7E90FEE8-175-80070002_025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3

Browser Data-->
Proxy settings: N/A
User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)
Default Browser: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
Download signed ActiveX controls: Prompt
Download unsigned ActiveX controls: Disabled
Run ActiveX controls and plug-ins: Allowed
Initialize and script ActiveX controls not marked as safe: Disabled
Allow scripting of Internet Explorer Webbrowser control: Disabled
Active scripting: Allowed
Script ActiveX controls marked as safe for scripting: Allowed

File Scan Data-->

Other data-->
Office Details: <GenuineResults><MachineData><UGUID>{4ABA7F4A-7A38-400D-8163-4E3BBAD03975}</UGUID><Version>1.9.0027.0</Version><OS>6.1.7601.2.00010100.1.0.001</OS><Architecture>x64</Architecture><PKey>*****-*****-*****-*****-P4K27</PKey><PID>00426-OEM-8992662-00400</PID><PIDType>2</PIDType><SID>S-1-5-21-2723281416-2630615969-4031055917</SID><SYSTEM><Manufacturer>Dell Inc.</Manufacturer><Model>Precision WorkStation T7400  </Model></SYSTEM><BIOS><Manufacturer>Dell Inc.</Manufacturer><Version>A11</Version><SMBIOSVersion major="2" minor="5"/><Date>20120430000000.000000+000</Date></BIOS><HWID>33EA0200018400F8</HWID><UserLCID>0414</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>W. Europe Standard Time(GMT+01:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM><OEMID>DELL  </OEMID><OEMTableID>WN09   </OEMTableID></OEM><GANotification/></MachineData><Software><Office><Result>109</Result><Products/><Applications/></Office></Software></GenuineResults>  

Spsys.log Content: 0x80070002

Licensing Data-->
Software licensing service version: 6.1.7601.17514

Name: Windows(R) 7, Ultimate edition
Description: Windows Operating System - Windows(R) 7, OEM_SLP channel
Activation ID: 7cfd4696-69a9-4af7-af36-ff3d12b6b6c8
Application ID: 55c92734-d682-4d71-983e-d6ec3f16059f
Extended PID: 00426-00178-926-600400-02-1033-7601.0000-0142014
Installation ID: 021053868274160400535852331820004256023974816965615780
Processor Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88338
Machine Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88339
Use License URL: http://go.microsoft.com/fwlink/?LinkID=88341
Product Key Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88340
Partial Product Key: P4K27
License Status: Licensed
Remaining Windows rearm count: 2
Trusted time: 2018-12-12 12:57:20

Windows Activation Technologies-->
HrOffline: 0x00000000
HrOnline: N/A
HealthStatus: 0x0000000000000000
Event Time Stamp: N/A
ActiveX: Registered, Version: 7.1.7600.16395
Admin Service: Registered, Version: 7.1.7600.16395
HealthStatus Bitmask Output:


HWID Data-->
HWID Hash Current: LgAAAAAABAABAAEAAQAAAAAAAQABAAEAhFEeSnJDHJCKd6hpeEOQenZYhGdMWA==

OEM Activation 1.0 Data-->
N/A

OEM Activation 2.0 Data-->
BIOS valid for OA 2.0: yes
Windows marker version: 0x20001
OEMID and OEMTableID Consistent: yes
BIOS Information: 
  ACPI Table Name	OEMID Value	OEMTableID Value
  APIC			DELL  		B9K    
  FACP			DELL  		B9K    
  HPET			DELL  		B9K    
  BOOT			DELL  		B9K    
  MCFG			DELL  		B9K    
  SSDT			DELL		st_ex
  ASF!			DELL  		B9K    
  TCPA			DELL  		B9K    
  ____			DELL  		B9K    
  SLIC			DELL  		WN09

 

[drhardlove]

Please post the report of Windows Genuine and Activation Issue Posting Instruction

I did now. I guess it only needs approval before I can see it in the thread?

 

[torchwood]

Hi DrHardlove,

Interesting results

Your machine seems to be in a confused state
1 part showing as Ultimate another as Enterprise
from what i can find that machine shipped with Vista

so a couple of questions
When purchased which was it running
Have you either reinstalled/run a repair install or Upgraded
(where did you get the Iso media)
What does it state on the COA sticker
(Do not post the product key)


What did you try to fix with the Tweaking tool



Roy

 

[drhardlove]

Hi DrHardlove,

Interesting results

Your machine seems to be in a confused state
1 part showing as Ultimate another as Enterprise
from what i can find that machine shipped with Vista

so a couple of questions
When purchased which was it running
Have you either reinstalled/run a repair install or Upgraded
(where did you get the Iso media)
What does it state on the COA sticker
(Do not post the product key)


What did you try to fix with the Tweaking tool



Roy

Yes. Right you are. It was shipped with Vista Business. Updated and activated with an OEM Enterprise license. Correct key found in system, with keyfinder exe.
I bought the maschine like this in 2014. System was stable until october 2018. I have only done important and adviced system updates on a regular basis.

The tweaking tool was used for a few automated processes, and I don't actually remember in detail. I will look for a log.

 

[torchwood]

Hi Kay,

have looked at that report in more detail, and based on that and what you've said
The install is non-genuine

Based on
Product key type 2 -- Only for Factory OS installed machines
product key -- its an Ultimate key not Enterprise
Registration -- its not registered
Slic table -- yours has 2 different Table ID's
Marker table -- W7 marker present
Enterprise keys -- These are only issued to Educational establisments and Business's
(2 types either VLK or MAK yours is neither)

I can also see its been rearmed which means at some stage it has gone non-genuine. (3x ?)
As W7 was only rolled out in 2009 its impossible for product type 2 keys to be on comps built before then.
If the motherboard has not been changed, dont believe it has based on your specs,
The product key would be MAK as the BIOS would be legacy, not EUFI.
The BIOS date is also incorrect, should be 2012 not 14 Jan 2014, suspect the date of the exploit which was when the Slic and Marker tables were inserted.
Finally Dell never officially offered any W7 drivers for this model

Its unfortunate that you were sold a machine in this state, your only alternative would to purchase a W7 Pro licence, if you can get one AND if you do only buy from a shop. This will require a clean install.

Axe0 may offer you some support, as youve been scammed, but forum rules dictate that we are not allowed too.
The other problem - once an exploit has been used we dont know what else has been modified


Roy

 

[drhardlove]

Hi Kay,

have looked at that report in more detail, and based on that and what you've said
The install is non-genuine

Based on
Product key type 2 -- Only for Factory OS installed machines
product key -- its an Ultimate key not Enterprise
Registration -- its not registered
Slic table -- yours has 2 different Table ID's
Marker table -- W7 marker present
Enterprise keys -- These are only issued to Educational establisments and Business's
(2 types either VLK or MAK yours is neither)

I can also see its been rearmed which means at some stage it has gone non-genuine. (3x ?)
As W7 was only rolled out in 2009 its impossible for product type 2 keys to be on comps built before then.
If the motherboard has not been changed, dont believe it has based on your specs,
The product key would be MAK as the BIOS would be legacy, not EUFI.
The BIOS date is also incorrect, should be 2012 not 14 Jan 2014, suspect the date of the exploit which was when the Slic and Marker tables were inserted.
Finally Dell never officially offered any W7 drivers for this model

Its unfortunate that you were sold a machine in this state, your only alternative would to purchase a W7 Pro licence, if you can get one AND if you do only buy from a shop. This will require a clean install.

Axe0 may offer you some support, as youve been scammed, but forum rules dictate that we are not allowed too.
The other problem - once an exploit has been used we dont know what else has been modified


Roy

Thanks Roy.

It took me quite some time to delve into this. As you obviously understood, I didn't know that the OS in my refurbished machine could be somewhat dubious.

I have now done several things.
First I obtained a valid Win 7 Enterprise license.

My main concern here, besides establishing a stable system, has been to minimize downtime. The hours I need to make a clean install, is one of my definitively last options, due to the amount of native, and dsp plugs, sound libraries, and other software. On top, I have quite some system setup to do, in order to make it all work again. My system is bridged in order to facilitate both 32 and 64 bit software.

One thing I have less of than time, would be money. So I am doing all I can to maintain, what will cost me tens of k's to achieve by replacing and updating my gear.

Anyways.

1. We tried to do an inplace install with the Win7 Enterprise.
The problem we encountered was that the sound drivers would not work, although in place.
And my main DAW would not even start.

2. Luckily we had created an image file from the somewhat doubtful, although working system for four years now. So we reinstalled that image, and now everything is working again.

We registered successfully with the new key, and hence, now it should be legal.
See the attachment. If you want I can send you a new report?

3. We have removed half the ram, because some of the failure reports, pointed in that direction. We also replaced the power supply, because there was some reports pointing in that direction as well.

It is early to say if my system now will be stable again. If so, I guess that must mainly be because there was hardware issues in the first place.

I will still be very grateful if you can have a look at the reports, and see if you agree that this could be the problem. At least now my system is registered and approved, as far as I can understand. We have a new system ID and it is running under another valid license.

I am sorry being reluctant to perform a clean install at this point. It is an absolute last choice. I hope you understand.

Thanks again for your great help.

 

[torchwood]

Hi Kay,

No worries hope you had a good Christmas.

Would like to see the new tool report.

Regarding your new key, genuine ones can only be found and issued in 1 of 2 places
Educational establishments or Businesses -(if you purchased it on-line i can 99% percent guarentee its NON-Genuine.)
As i said previously these are volume licences, if your Bios is running an EUFI set-up its VLK, the key will have to validate against the College/Business's server, as you'r a student or employee
AND you need thier Server details
Legacy Bios will be a MAK key, likely which youv'e purchased, MSDN subscription from MS ONLY

You should NOT have to perform a clean install, 1st report showed Enterprise OS you only need to input the new key, your last screenshot click on the Change product key line

A new set of BSOD details will be required if/when it occurs next.

Roy

 

[drhardlove]

Hi.
Thanks a lot. Yes, I had a good Christmas, and Happy New year to you guys as well.
I had support from a friend and coworker, who posses a great deal of computer knowledge.
He provided me with a legal corporate key, trough my association with his company.

He even found the fraud site who sells the key I had. I didn't know. But I suspect the guy who sold it to me did.
I looked for his info but I couldn't find him.

However. My new key is legal, and I rest assured, as I know my friends legal standards as well.

Find the report attached.

Thanks a lot for the help so far. As a low, and at times, no-income guy, I am desperately dependent on you guys being here. Luckily I also have a few hard core computer techs, who keep helping me ( I guess I must have done something right in my life)

With my friends, and forums like this, I manage to battle my way with intricate compatibility situations, old and new gear, and old and new software. Sometimes I wonder what life would be like, if I had chosen to be a corporate slut instead.
But I know, every road has its chores.

Bottom line being, A BIG THANK YOU.

Diagnostic Report (1.9.0027.0):
-----------------------------------------
Windows Validation Data-->

Validation Code: 0
Cached Online Validation Code: N/A, hr = 0xc004f012
Windows Product Key: *****-*****-*****-*****-KGW97
Windows Product Key Hash: u4kSOCn+gjwIvW+pJI8QHPc2peY=
Windows Product ID: 55041-011-2830431-86263
Windows Product ID Type: 6
Windows License Type: Volume MAK
Windows OS version: 6.1.7601.2.00010100.1.0.004
ID: {4ABA7F4A-7A38-400D-8163-4E3BBAD03975}(3)
Is Admin: Yes
TestCab: 0x0
LegitcheckControl ActiveX: N/A, hr = 0x80070002
Signed By: N/A, hr = 0x80070002
Product Name: Windows 7 Enterprise
Architecture: 0x00000009
Build lab: 7601.win7sp1_ldr.181111-0600
TTS Error: 
Validation Diagnostic: 
Resolution Status: N/A

Vista WgaER Data-->
ThreatID(s): N/A, hr = 0x80070002
Version: N/A, hr = 0x80070002

Windows XP Notifications Data-->
Cached Result: N/A, hr = 0x80070002
File Exists: No
Version: N/A, hr = 0x80070002
WgaTray.exe Signed By: N/A, hr = 0x80070002
WgaLogon.dll Signed By: N/A, hr = 0x80070002

OGA Notifications Data-->
Cached Result: N/A, hr = 0x80070002
Version: N/A, hr = 0x80070002
OGAExec.exe Signed By: N/A, hr = 0x80070002
OGAAddin.dll Signed By: N/A, hr = 0x80070002

OGA Data-->
Office Status: 109 N/A
OGA Version: N/A, 0x80070002
Signed By: N/A, hr = 0x80070002
Office Diagnostics: 77F760FE-153-80070002_7E90FEE8-175-80070002_025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3

Browser Data-->
Proxy settings: N/A
User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)
Default Browser: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
Download signed ActiveX controls: Prompt
Download unsigned ActiveX controls: Disabled
Run ActiveX controls and plug-ins: Allowed
Initialize and script ActiveX controls not marked as safe: Disabled
Allow scripting of Internet Explorer Webbrowser control: Disabled
Active scripting: Allowed
Script ActiveX controls marked as safe for scripting: Allowed

File Scan Data-->

Other data-->
Office Details: <GenuineResults><MachineData><UGUID>{4ABA7F4A-7A38-400D-8163-4E3BBAD03975}</UGUID><Version>1.9.0027.0</Version><OS>6.1.7601.2.00010100.1.0.004</OS><Architecture>x64</Architecture><PKey>*****-*****-*****-*****-BBBBB</PKey><PID>55041-011-2830431-86263</PID><PIDType>6</PIDType><SID>S-1-5-21-2723281416-2630615969-4031055917</SID><SYSTEM><Manufacturer>Dell Inc.</Manufacturer><Model>Precision WorkStation T7400  </Model></SYSTEM><BIOS><Manufacturer>Dell Inc.</Manufacturer><Version>A11</Version><SMBIOSVersion major="2" minor="5"/><Date>20120430000000.000000+000</Date></BIOS><HWID>33EA0200018400F8</HWID><UserLCID>0414</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>W. Europe Standard Time(GMT+01:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM><OEMID>DELL  </OEMID><OEMTableID>WN09   </OEMTableID></OEM><GANotification/></MachineData><Software><Office><Result>109</Result><Products/><Applications/></Office></Software></GenuineResults>  

Spsys.log Content: 0x80070002

Licensing Data-->
Software licensing service version: 6.1.7601.17514

Name: Windows(R) 7, Enterprise edition
Description: Windows Operating System - Windows(R) 7, VOLUME_MAK channel
Activation ID: 9abf5984-9c16-46f2-ad1e-7fe15931a8dd
Application ID: 55c92734-d682-4d71-983e-d6ec3f16059f
Extended PID: 55041-00172-011-283043-03-1033-7601.0000-3642018
Installation ID: 021421476084757933712726454832677481139921303936219743
Processor Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88338
Machine Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88339
Use License URL: http://go.microsoft.com/fwlink/?LinkID=88341
Product Key Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88340
Partial Product Key: KGW97
License Status: Licensed
Remaining Windows rearm count: 2
Trusted time: 2019-01-01 21:43:50

Windows Activation Technologies-->
HrOffline: 0x00000000
HrOnline: N/A
HealthStatus: 0x0000000000000000
Event Time Stamp: N/A
ActiveX: Registered, Version: 7.1.7600.16395
Admin Service: Registered, Version: 7.1.7600.16395
HealthStatus Bitmask Output:


HWID Data-->
HWID Hash Current: NAAAAAAABAABAAEAAQADAAAAAQABAAEAHKIeSqhpckMckIp3eEP8I3ZYnNtGqxh2hGdMWA==

OEM Activation 1.0 Data-->
N/A

OEM Activation 2.0 Data-->
BIOS valid for OA 2.0: yes
Windows marker version: 0x20001
OEMID and OEMTableID Consistent: yes
BIOS Information: 
  ACPI Table Name	OEMID Value	OEMTableID Value
  APIC			DELL  		B9K    
  FACP			DELL  		B9K    
  HPET			DELL  		B9K    
  BOOT			DELL  		B9K    
  MCFG			DELL  		B9K    
  SSDT			DELL		st_ex
  ASF!			DELL  		B9K    
  TCPA			DELL  		B9K    
  ____			DELL  		B9K    
  SLIC			DELL  		WN09

 

[torchwood]

Hi drhardlove,

its still not valid!!!
As i suspected its a MAK key.

please install KB971033, and we'll know for sure
REBOOT
run the tool again

I can also see its ALLREADY been rearmed, not a good sign.

Roy

EDIT report that guy to MS