carnage017

Years later, and I still cant believe the solution was that easy... I LOVE YOU!

i uninstalled my gpu drivers with Display Driver Uninstaller, and reinstalled new ones and I still get the bsod. Just out of curiosity, what are my options if one of my ram slots is defective?

It is totally random, I could be watching a youtube video, I could be typing something on word, I sometimes leave my computer overnight and when I wake up I see the windows welcome screen as if it crashed on idle overnight.

I've gotten many blue screens on windows 10, so I decided to analyze the memory dump file and hopefully one you geniuses can decipher the issue/bug. The errors I've gotten on the blue screens are various ones such as: : 0x00000001 (0x00007ffaf8eb43a4, 0x0000000000000000, 0x0000000000000001, 0xffffe78149bbbb80). 0x0000000a (0xffffc2aeb5f611d8, 0x0000000000000002, 0x0000000000000000, 0xfffff8039624c547). 0x000000d1 (0xfffff802c5fe53ef, 0x0000000000000002, 0x0000000000000001, 0xfffff80811fbb3e1). WINDbg Analysis BugCheck 1, {7ffaf8eb43a4, 0, 1, ffffe78149bbbb80} Page 111b not present in the dump file. Type ".hh dbgerr004" for details Page 111b not present in the dump file. Type ".hh dbgerr004" for details Page 3d55a not present in the dump file. Type ".hh dbgerr004" for details Page 3d55a not present in the dump file. Type ".hh dbgerr004" for details Page 2033 not present in the dump file. Type ".hh dbgerr004" for details Page 2033 not present in the dump file. Type ".hh dbgerr004" for details Page 3f3e1 not present in the dump file. Type ".hh dbgerr004" for details Page 3f3e1 not present in the dump file. Type ".hh dbgerr004" for details Page 1000 not present in the dump file. Type ".hh dbgerr004" for details Page 1000 not present in the dump file. Type ".hh dbgerr004" for details Page 1000 not present in the dump file. Type ".hh dbgerr004" for details Probably caused by : ntkrnlmp.exe ( nt!KiSystemServiceExitPico+194 ) Followup: MachineOwner --------- 0: kd> !analyze -v ******************************************************************************* * * * Bugcheck Analysis * * * ******************************************************************************* APC_INDEX_MISMATCH (1) This is a kernel internal error. The most common reason to see this bugcheck is when a filesystem or a driver has a mismatched number of calls to disable and re-enable APCs. The key data item is the Thread->CombinedApcDisable field. This consists of two separate 16-bit fields, the SpecialApcDisable and the KernelApcDisable. A negative value of either indicates that a driver has disabled special or normal APCs (respectively) without re-enabling them; a positive value indicates that a driver has enabled special or normal APCs (respectively) too many times. Arguments: Arg1: 00007ffaf8eb43a4, Address of system call function or worker routine Arg2: 0000000000000000, Thread->ApcStateIndex Arg3: 0000000000000001, (Thread->SpecialApcDisable << 16) | Thread->KernelApcDisable Arg4: ffffe78149bbbb80, Call type (0 - system call, 1 - worker routine) Debugging Details: ------------------ Page 1000 not present in the dump file. Type ".hh dbgerr004" for details Page 1000 not present in the dump file. Type ".hh dbgerr004" for details Page 1000 not present in the dump file. Type ".hh dbgerr004" for details DUMP_CLASS: 1 DUMP_QUALIFIER: 401 BUILD_VERSION_STRING: 14393.187.amd64fre.rs1_release_inmarket.160906-1818 SYSTEM_MANUFACTURER: MSI SYSTEM_PRODUCT_NAME: MS-7845 SYSTEM_SKU: To be filled by O.E.M. SYSTEM_VERSION: 1.0 BIOS_VENDOR: American Megatrends Inc. BIOS_VERSION: V1.12 BIOS_DATE: 05/19/2015 BASEBOARD_MANUFACTURER: MSI BASEBOARD_PRODUCT: Z87-GD65 GAMING (MS-7845) BASEBOARD_VERSION: 1.0 DUMP_TYPE: 1 BUGCHECK_P1: 7ffaf8eb43a4 BUGCHECK_P2: 0 BUGCHECK_P3: 1 BUGCHECK_P4: ffffe78149bbbb80 FAULTING_IP: +0 00007ffa`f8eb43a4 ?? ??? CPU_COUNT: 4 CPU_MHZ: d48 CPU_VENDOR: GenuineIntel CPU_FAMILY: 6 CPU_MODEL: 3c CPU_STEPPING: 3 CPU_MICROCODE: 6,3c,3,0 (F,M,S,R) SIG: 1E'00000000 (cache) 1E'00000000 (init) DEFAULT_BUCKET_ID: WIN8_DRIVER_FAULT BUGCHECK_STR: 0x1 PROCESS_NAME: dwm.exe CURRENT_IRQL: 0 ANALYSIS_SESSION_HOST: DESKTOP-FT1GGMA ANALYSIS_SESSION_TIME: 09-28-2016 23:15:56.0789 ANALYSIS_VERSION: 10.0.14321.1024 amd64fre LAST_CONTROL_TRANSFER: from fffff8026e367229 to fffff8026e35c0b0 STACK_TEXT: ffffe781`49bbb9b8 fffff802`6e367229 : 00000000`00000001 00007ffa`f8eb43a4 00000000`00000000 00000000`00000001 : nt!KeBugCheckEx ffffe781`49bbb9c0 fffff802`6e36712b : ffff8d0d`ee3ef080 ffff8d0d`edbc3010 00000000`40000080 ffff8d0d`ee436d80 : nt!KiBugCheckDispatch+0x69 ffffe781`49bbbb00 00007ffa`f8eb43a4 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSystemServiceExitPico+0x194 000000df`addfe5e8 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x00007ffa`f8eb43a4 STACK_COMMAND: kb THREAD_SHA1_HASH_MOD_FUNC: 1b1fd012b2a510c586295e696f84a9476c8f91e5 THREAD_SHA1_HASH_MOD_FUNC_OFFSET: 2f23c0fd5d286fdc1748b3b41b103ae80a3b4264 THREAD_SHA1_HASH_MOD: 2a7ca9d3ab5386d53fea7498e1d81b9c4a4c036b FOLLOWUP_IP: nt!KiSystemServiceExitPico+194 fffff802`6e36712b 4883ec50 sub rsp,50h FAULT_INSTR_CODE: 50ec8348 SYMBOL_STACK_INDEX: 2 SYMBOL_NAME: nt!KiSystemServiceExitPico+194 FOLLOWUP_NAME: MachineOwner MODULE_NAME: nt IMAGE_NAME: ntkrnlmp.exe DEBUG_FLR_IMAGE_TIMESTAMP: 57cf9a34 BUCKET_ID_FUNC_OFFSET: 194 FAILURE_BUCKET_ID: 0x1_SysCallNum_119b_nt!KiSystemServiceExitPico BUCKET_ID: 0x1_SysCallNum_119b_nt!KiSystemServiceExitPico PRIMARY_PROBLEM_CLASS: 0x1_SysCallNum_119b_nt!KiSystemServiceExitPico TARGET_TIME: 2016-09-29T02:33:51.000Z OSBUILD: 14393 OSSERVICEPACK: 0 SERVICEPACK_NUMBER: 0 OS_REVISION: 0 SUITE_MASK: 272 PRODUCT_TYPE: 1 OSPLATFORM_TYPE: x64 OSNAME: Windows 10 OSEDITION: Windows 10 WinNt TerminalServer SingleUserTS OS_LOCALE: USER_LCID: 0 OSBUILD_TIMESTAMP: 2016-09-07 00:40:20 BUILDDATESTAMP_STR: 160906-1818 BUILDLAB_STR: rs1_release_inmarket BUILDOSVER_STR: 10.0.14393.187.amd64fre.rs1_release_inmarket.160906-1818 ANALYSIS_SESSION_ELAPSED_TIME: 428 ANALYSIS_SOURCE: KM FAILURE_ID_HASH_STRING: km:0x1_syscallnum_119b_nt!kisystemserviceexitpico FAILURE_ID_HASH: {01b3d40c-ec38-31ca-50e6-c217c82988cc} Followup: MachineOwner ---------

ok thanks

the sound is disgusting so i should send it back right? oh well 2 weeks of no gaming again -_-

I should also mention i use thumb screws to secure the GPU, but there is no sign of the thumbscrews being loose.

well i just got this GPU about a month ago by RMA, so did those bastards of Sapphire give me a bad card? : c

Well this problem has not caused any blue screens, game crashes, or even increases in temperatures. Its just plain annoying, BUT im afraid that it could be a serious problem that will bite me in the ass later on. Now, i cant describe the noise im hearing but here is a file i uploaded so you can hear it. Ignore the fan noise and you will notice another annoying noise. This noise will only happen when fan speed hits 50% and above. Help greatly appreciated http://vocaroo.com/i/s1zPSVsTmj00 Record_0008.wav Record_0008.wav

I ve had so many BSODs and i just rather upload the memorydump, so you guys can take a look. I ve had to rma my gpu, my hardrive, loaded os to ssd, various reinstalls and i still have these problems. I ve also performed memtest and 20 passes no errors found. Please help this is so irritating. also if i try to verify all my current drivers. I get an bsod and i cant load into the os (driver verifier). https://mega.co.nz/#!HgllRISb!lLP4nUf73UKRw9Ie_NBMCOqNqE6id9AwOvQCMznS_y8

so what do u think?

Also would like to mention this log which is labeled as WARNING Log Name: System Source: Microsoft-Windows-Kernel-PnP Date: 8/20/2014 10:55:11 PM Event ID: 219 Task Category: (212) Level: Warning Keywords: User: SYSTEM Computer: iPhone Description: The driver \Driver\WUDFRd failed to load for the device WpdBusEnumRoot\UMB\2&37c186b&0&STORAGE#VOLUME#_??_USBSTOR#DISK&VEN_MONSTER&PROD_MONSTER_DIGITAL&REV_PMAP#0707336160914C08&0#. Event Xml: <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event"> <System> <Provider Name="Microsoft-Windows-Kernel-PnP" Guid="{9C205A39-1250-487D-ABD7-E831C6290539}" /> <EventID>219</EventID> <Version>0</Version> <Level>3</Level> <Task>212</Task> <Opcode>0</Opcode> <Keywords>0x8000000000000000</Keywords> <TimeCreated SystemTime="2014-08-21T02:55:11.997087400Z" /> <EventRecordID>32777</EventRecordID> <Correlation /> <Execution ProcessID="4" ThreadID="100" /> <Channel>System</Channel> <Computer>iPhone</Computer> <Security UserID="S-1-5-18" /> </System> <EventData> <Data Name="DriverNameLength">124</Data> <Data Name="DriverName">WpdBusEnumRoot\UMB\2&37c186b&0&STORAGE#VOLUME#_??_USBSTOR#DISK&VEN_MONSTER&PROD_MONSTER_DIGITAL&REV_PMAP#0707336160914C08&0#</Data> <Data Name="Status">3221226341</Data> <Data Name="FailureNameLength">14</Data> <Data Name="FailureName">\Driver\WUDFRd</Data> <Data Name="Version">0</Data> </EventData> </Event>

This are 4 events before the critical error. They are labeled as information till the last one is the critical error INFORMATION: Log Name: System Source: EventLog Date: 8/20/2014 10:54:47 PM Event ID: 6009 Task Category: None Level: Information Keywords: Classic User: N/A Computer: iPhone Description: Microsoft ® Windows ® 6.01. 7601 Service Pack 1 Multiprocessor Free. Event Xml: <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event"> <System> <Provider Name="EventLog" /> <EventID Qualifiers="32768">6009</EventID> <Level>4</Level> <Task>0</Task> <Keywords>0x80000000000000</Keywords> <TimeCreated SystemTime="2014-08-21T02:54:47.000000000Z" /> <EventRecordID>32704</EventRecordID> <Channel>System</Channel> <Computer>iPhone</Computer> <Security /> </System> <EventData> <Data>6.01.</Data> <Data>7601</Data> <Data>Service Pack 1</Data> <Data>Multiprocessor Free</Data> <Data>17514</Data> </EventData> </Event> INFORMATION: Log Name: System Source: EventLog Date: 8/20/2014 10:54:47 PM Event ID: 6005 Task Category: None Level: Information Keywords: Classic User: N/A Computer: iPhone Description: The Event log service was started. Event Xml: <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event"> <System> <Provider Name="EventLog" /> <EventID Qualifiers="32768">6005</EventID> <Level>4</Level> <Task>0</Task> <Keywords>0x80000000000000</Keywords> <TimeCreated SystemTime="2014-08-21T02:54:47.000000000Z" /> <EventRecordID>32705</EventRecordID> <Channel>System</Channel> <Computer>iPhone</Computer> <Security /> </System> <EventData> <Binary>DE07080004001500020036002F00A4020000000000000000</Binary> </EventData> </Event> INFORMATION: Log Name: System Source: EventLog Date: 8/20/2014 10:54:47 PM Event ID: 6013 Task Category: None Level: Information Keywords: Classic User: N/A Computer: iPhone Description: The system uptime is 26 seconds. Event Xml: <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event"> <System> <Provider Name="EventLog" /> <EventID Qualifiers="32768">6013</EventID> <Level>4</Level> <Task>0</Task> <Keywords>0x80000000000000</Keywords> <TimeCreated SystemTime="2014-08-21T02:54:47.000000000Z" /> <EventRecordID>32706</EventRecordID> <Channel>System</Channel> <Computer>iPhone</Computer> <Security /> </System> <EventData> <Data> </Data> <Data> </Data> <Data> </Data> <Data> </Data> <Data>26</Data> <Data>60</Data> <Data>300 Eastern Standard Time</Data> <Binary>31002E003100000030000000570069006E0064006F007700730020003700200055006C00740069006D00610074006500000036002E0031002E00370036003000310020004200750069006C006400200037003600300031002000530065007200760069006300650020005000610063006B002000310000004D0075006C0074006900700072006F0063006500730073006F00720020004600720065006500000037003600300031002E00770069006E0037007300700031005F006700640072002E003100340030003300300033002D00320031003400340000003500330063003400390033006100340000004E006F007400200041007600610069006C00610062006C00650000004E006F007400200041007600610069006C00610062006C006500000039000000340000003800310033003600000034003000390000006900500068006F006E00650000000000</Binary> </EventData> </Event> INFORMATION: Log Name: System Source: Microsoft-Windows-FilterManager Date: 8/20/2014 10:54:30 PM Event ID: 6 Task Category: None Level: Information Keywords: User: SYSTEM Computer: iPhone Description: File System Filter 'KLIF' (6.0, ‎2014‎-‎06‎-‎23T07:44:14.000000000Z) has successfully loaded and registered with Filter Manager. Event Xml: <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event"> <System> <Provider Name="Microsoft-Windows-FilterManager" Guid="{F3C5E28E-63F6-49C7-A204-E48A1BC4B09D}" /> <EventID>6</EventID> <Version>0</Version> <Level>4</Level> <Task>0</Task> <Opcode>0</Opcode> <Keywords>0x8000000000000000</Keywords> <TimeCreated SystemTime="2014-08-21T02:54:30.922416600Z" /> <EventRecordID>32707</EventRecordID> <Correlation /> <Execution ProcessID="4" ThreadID="8" /> <Channel>System</Channel> <Computer>iPhone</Computer> <Security UserID="S-1-5-18" /> </System> <EventData> <Data Name="FinalStatus">0x0</Data> <Data Name="DeviceVersionMajor">6</Data> <Data Name="DeviceVersionMinor">0</Data> <Data Name="DeviceNameLength">4</Data> <Data Name="DeviceName">KLIF</Data> <Data Name="DeviceTime">2014-06-23T07:44:14.000000000Z</Data> </EventData> </Event> CRITICAL ERROR: Log Name: System Source: Microsoft-Windows-Kernel-Power Date: 8/20/2014 10:54:31 PM Event ID: 41 Task Category: (63) Level: Critical Keywords: (2) User: SYSTEM Computer: iPhone Description: The system has rebooted without cleanly shutting down first. This error could be caused if the system stopped responding, crashed, or lost power unexpectedly. Event Xml: <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event"> <System> <Provider Name="Microsoft-Windows-Kernel-Power" Guid="{331C3B3A-2005-44C2-AC5E-77220C37D6B4}" /> <EventID>41</EventID> <Version>2</Version> <Level>1</Level> <Task>63</Task> <Opcode>0</Opcode> <Keywords>0x8000000000000002</Keywords> <TimeCreated SystemTime="2014-08-21T02:54:31.827218200Z" /> <EventRecordID>32708</EventRecordID> <Correlation /> <Execution ProcessID="4" ThreadID="8" /> <Channel>System</Channel> <Computer>iPhone</Computer> <Security UserID="S-1-5-18" /> </System> <EventData> <Data Name="BugcheckCode">0</Data> <Data Name="BugcheckParameter1">0x0</Data> <Data Name="BugcheckParameter2">0x0</Data> <Data Name="BugcheckParameter3">0x0</Data> <Data Name="BugcheckParameter4">0x0</Data> <Data Name="SleepInProgress">false</Data> <Data Name="PowerButtonTimestamp">0</Data> </EventData> </Event>

oh well : c thanks

Event[0]: Log Name: Application Source: Desktop Window Manager Date: 2014-08-20T06:20:13.000 Event ID: 9018 Task: N/A Level: Information Opcode: N/A Keyword: Classic User: N/A User Name: N/A Computer: iPhone Description: The user was prompted that the Desktop Window Manager was suffering a performance slowdown and chose to shutdown Event[1]: Log Name: Application Source: Windows Error Reporting Date: 2014-08-20T06:24:43.000 Event ID: 1001 Task: N/A Level: Information Opcode: Info Keyword: Classic User: N/A User Name: N/A Computer: iPhone Description: Fault bucket , type 0 Event Name: ScriptedDiagFailure Response: Not available Cab Id: 0 Problem signature: P1: Microsoft Corporation.AeroDiagnostic.1.0 P2: Default P3: 1.0.0.0 P4: Default P5: P6: P7: P8: P9: P10: Attached files: C:\Users\Localhost\AppData\Local\Temp\msdtadmin\_CE0E0602-F187-4BBF-84E2-0A541B015362_\Pkg8D37.cab These files may be available here: C:\ProgramData\Microsoft\Windows\WER\ReportQueue\NonCritical_Microsoft Corpor_deeb628a597b4f82e337fd6d7b1df1df1e03d61_cab_0a348f5a Analysis symbol: Rechecking for solution: 0 Report Id: 32abf221-2854-11e4-b1d1-d43d7eba977f Report Status: 4 Event[2]: Log Name: Application Source: System Restore Date: 2014-08-20T07:18:23.000 Event ID: 8194 Task: N/A Level: Information Opcode: Info Keyword: Classic User: N/A User Name: N/A Computer: iPhone Description: Successfully created restore point (Process = C:\PROGRA~2\ORIGIN~1\FIFAWO~1\__INST~1\directx\redist\dxsetup.exe /silent; Description = Installed DirectX). Event[3]: Log Name: Application Source: MsiInstaller Date: 2014-08-20T07:21:56.000 Event ID: 1040 Task: N/A Level: Information Opcode: Info Keyword: Classic User: S-1-5-21-446792193-3167092461-2683584829-1000 User Name: IPHONE\Localhost Computer: iPhone Description: Beginning a Windows Installer transaction: c:\Windows\Installer\3ac2670.msi. Client Process Id: 5892. Event[4]: Log Name: Application Source: Microsoft-Windows-RestartManager Date: 2014-08-20T07:21:57.355 Event ID: 10000 Task: N/A Level: Information Opcode: Info Keyword: N/A User: S-1-5-21-446792193-3167092461-2683584829-1000 User Name: IPHONE\Localhost Computer: iPhone Description: Starting session 0 - ?2014?-?08?-?20T11:21:57.355231900Z. Event[5]: Log Name: Application Source: Microsoft-Windows-RestartManager Date: 2014-08-20T07:21:58.603 Event ID: 10010 Task: N/A Level: Warning Opcode: Info Keyword: N/A User: S-1-5-21-446792193-3167092461-2683584829-1000 User Name: IPHONE\Localhost Computer: iPhone Description: Application 'C:\Program Files (x86)\Origin\Origin.exe' (pid 4964) cannot be restarted - Application SID does not match Conductor SID.. Event[6]: Log Name: Application Source: Microsoft-Windows-RestartManager Date: 2014-08-20T07:21:58.609 Event ID: 10010 Task: N/A Level: Warning Opcode: Info Keyword: N/A User: S-1-5-21-446792193-3167092461-2683584829-1000 User Name: IPHONE\Localhost Computer: iPhone Description: Application 'C:\Program Files (x86)\Origin\OriginClientService.exe' (pid 6104) cannot be restarted - Application SID does not match Conductor SID.. Event[7]: Log Name: Application Source: Microsoft-Windows-RestartManager Date: 2014-08-20T07:21:58.609 Event ID: 10005 Task: N/A Level: Information Opcode: Info Keyword: N/A User: S-1-5-21-446792193-3167092461-2683584829-1000 User Name: IPHONE\Localhost Computer: iPhone Description: Machine restart is required. Event[8]: Log Name: Application Source: Microsoft-Windows-RestartManager Date: 2014-08-20T07:21:58.655 Event ID: 10000 Task: N/A Level: Information Opcode: Info Keyword: N/A User: S-1-5-21-446792193-3167092461-2683584829-1000 User Name: IPHONE\Localhost Computer: iPhone Description: Starting session 1 - ?2014?-?08?-?20T11:21:58.655306300Z. Event[9]: Log Name: Application Source: MsiInstaller Date: 2014-08-20T07:22:06.000 Event ID: 1025 Task: N/A Level: Information Opcode: Info Keyword: Classic User: S-1-5-21-446792193-3167092461-2683584829-1000 User Name: IPHONE\Localhost Computer: iPhone Description: Product: Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219. The file c:\Windows\SysWOW64\msvcp100.dll is being used by the following process: Name: explorer , Id 5556. Event[10]: Log Name: Application Source: MsiInstaller Date: 2014-08-20T07:22:06.000 Event ID: 1025 Task: N/A Level: Information Opcode: Info Keyword: Classic User: S-1-5-21-446792193-3167092461-2683584829-1000 User Name: IPHONE\Localhost Computer: iPhone Description: Product: Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219. The file c:\Windows\SysWOW64\msvcr100.dll is being used by the following process: Name: explorer , Id 5556. Event[11]: Log Name: Application Source: MsiInstaller Date: 2014-08-20T07:22:08.000 Event ID: 1022 Task: N/A Level: Information Opcode: Info Keyword: Classic User: S-1-5-21-446792193-3167092461-2683584829-1000 User Name: IPHONE\Localhost Computer: iPhone Description: Product: Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 - Update 'KB2565063' installed successfully. Event[12]: Log Name: Application Source: MsiInstaller Date: 2014-08-20T07:22:08.000 Event ID: 1036 Task: N/A Level: Information Opcode: Info Keyword: Classic User: S-1-5-21-446792193-3167092461-2683584829-1000 User Name: IPHONE\Localhost Computer: iPhone Description: Windows Installer installed an update. Product Name: Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219. Product Version: 10.0.40219. Product Language: 0. Manufacturer: Microsoft Corporation. Update Name: KB2565063. Installation success or error status: 0. Event[13]: Log Name: Application Source: MsiInstaller Date: 2014-08-20T07:22:08.000 Event ID: 11728 Task: N/A Level: Information Opcode: Info Keyword: Classic User: S-1-5-21-446792193-3167092461-2683584829-1000 User Name: IPHONE\Localhost Computer: iPhone Description: Product: Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 -- Configuration completed successfully. Event[14]: Log Name: Application Source: MsiInstaller Date: 2014-08-20T07:22:08.000 Event ID: 1035 Task: N/A Level: Information Opcode: Info Keyword: Classic User: S-1-5-21-446792193-3167092461-2683584829-1000 User Name: IPHONE\Localhost Computer: iPhone Description: Windows Installer reconfigured the product. Product Name: Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219. Product Version: 10.0.40219. Product Language: 0. Manufacturer: Microsoft Corporation. Reconfiguration success or error status: 0. Event[15]: Log Name: Application Source: MsiInstaller Date: 2014-08-20T07:22:08.000 Event ID: 1038 Task: N/A Level: Information Opcode: Info Keyword: Classic User: S-1-5-21-446792193-3167092461-2683584829-1000 User Name: IPHONE\Localhost Computer: iPhone Description: Windows Installer requires a system restart. Product Name: Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219. Product Version: 10.0.40219. Product Language: 0. Manufacturer: Microsoft Corporation. Type of System Restart: 2. Reason for Restart: 1. Event[16]: Log Name: Application Source: MsiInstaller Date: 2014-08-20T07:22:08.000 Event ID: 1029 Task: N/A Level: Information Opcode: Info Keyword: Classic User: S-1-5-21-446792193-3167092461-2683584829-1000 User Name: IPHONE\Localhost Computer: iPhone Description: Product: Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219. Restart required. The installation or update for the product required a restart for all changes to take effect. The restart was deferred to a later time. Event[17]: Log Name: Application Source: MsiInstaller Date: 2014-08-20T07:22:08.000 Event ID: 1042 Task: N/A Level: Information Opcode: Info Keyword: Classic User: S-1-5-18 User Name: NT AUTHORITY\SYSTEM Computer: iPhone Description: Ending a Windows Installer transaction: c:\Windows\Installer\3ac2670.msi. Client Process Id: 5892. Event[18]: Log Name: Application Source: Microsoft-Windows-RestartManager Date: 2014-08-20T07:22:08.578 Event ID: 10001 Task: N/A Level: Information Opcode: Info Keyword: N/A User: S-1-5-21-446792193-3167092461-2683584829-1000 User Name: IPHONE\Localhost Computer: iPhone Description: Ending session 0 started ?2014?-?08?-?20T11:21:57.355231900Z. Event[19]: Log Name: Application Source: Microsoft-Windows-RestartManager Date: 2014-08-20T07:22:08.709 Event ID: 10001 Task: N/A Level: Information Opcode: Info Keyword: N/A User: S-1-5-21-446792193-3167092461-2683584829-1000 User Name: IPHONE\Localhost Computer: iPhone Description: Ending session 1 started ?2014?-?08?-?20T11:21:58.655306300Z. Event[20]: Log Name: Application Source: VSS Date: 2014-08-20T07:22:33.000 Event ID: 8224 Task: N/A Level: Information Opcode: Info Keyword: Classic User: N/A User Name: N/A Computer: iPhone Description: The VSS service is shutting down due to idle timeout. Event[21]: Log Name: Application Source: Microsoft-Windows-EventSystem Date: 2014-08-20T07:53:15.000 Event ID: 4625 Task: N/A Level: Information Opcode: N/A Keyword: Classic User: N/A User Name: N/A Computer: iPhone Description: The EventSystem sub system is suppressing duplicate event log entries for a duration of 86400 seconds. The suppression timeout can be controlled by a REG_DWORD value named SuppressDuplicateDuration under the following registry key: HKLM\Software\Microsoft\EventSystem\EventLog. Event[22]: Log Name: Application Source: Microsoft-Windows-User Profiles Service Date: 2014-08-20T07:53:15.374 Event ID: 1531 Task: N/A Level: Information Opcode: Info Keyword: N/A User: S-1-5-18 User Name: NT AUTHORITY\SYSTEM Computer: iPhone Description: The User Profile Service has started successfully. Event[23]: Log Name: Application Source: Microsoft-Windows-Winlogon Date: 2014-08-20T07:53:20.000 Event ID: 4101 Task: N/A Level: Information Opcode: N/A Keyword: Classic User: N/A User Name: N/A Computer: iPhone Description: Windows license validated. Event[24]: Log Name: Application Source: Microsoft-Windows-Winlogon Date: 2014-08-20T07:53:20.000 Event ID: 6000 Task: N/A Level: Information Opcode: N/A Keyword: Classic User: N/A User Name: N/A Computer: iPhone Description: The winlogon notification subscriber <SessionEnv> was unavailable to handle a notification event. Event[25]: Log Name: Application Source: Microsoft-Windows-WMI Date: 2014-08-20T07:53:24.000 Event ID: 5615 Task: N/A Level: Information Opcode: N/A Keyword: Classic User: N/A User Name: N/A Computer: iPhone Description: Windows Management Instrumentation Service started sucessfully Event[26]: Log Name: Application Source: Microsoft-Windows-WMI Date: 2014-08-20T07:53:33.000 Event ID: 5617 Task: N/A Level: Information Opcode: N/A Keyword: Classic User: N/A User Name: N/A Computer: iPhone Description: Windows Management Instrumentation Service subsystems initialized successfully Event[27]: Log Name: Application Source: ESENT Date: 2014-08-20T07:53:41.000 Event ID: 102 Task: General Level: Information Opcode: Info Keyword: Classic User: N/A User Name: N/A Computer: iPhone Description: Windows (1004) Windows: The database engine (6.01.7601.0000) started a new instance (0). Event[28]: Log Name: Application Source: ESENT Date: 2014-08-20T07:53:41.000 Event ID: 300 Task: Logging/Recovery Level: Information Opcode: Info Keyword: Classic User: N/A User Name: N/A Computer: iPhone Description: Windows (1004) Windows: The database engine is initiating recovery steps. Event[29]: Log Name: Application Source: ESENT Date: 2014-08-20T07:53:42.000 Event ID: 301 Task: Logging/Recovery Level: Information Opcode: Info Keyword: Classic User: N/A User Name: N/A Computer: iPhone Description: Windows (1004) Windows: The database engine has begun replaying logfile C:\ProgramData\Microsoft\Search\Data\Applications\Windows\MSS00F3E.log. Event[30]: Log Name: Application Source: ESENT Date: 2014-08-20T07:53:42.000 Event ID: 301 Task: Logging/Recovery Level: Information Opcode: Info Keyword: Classic User: N/A User Name: N/A Computer: iPhone Description: Windows (1004) Windows: The database engine has begun replaying logfile C:\ProgramData\Microsoft\Search\Data\Applications\Windows\MSS.log. Event[31]: Log Name: Application Source: ESENT Date: 2014-08-20T07:53:43.000 Event ID: 302 Task: Logging/Recovery Level: Information Opcode: Info Keyword: Classic User: N/A User Name: N/A Computer: iPhone Description: Windows (1004) Windows: The database engine has successfully completed recovery steps. Event[32]: Log Name: Application Source: Microsoft-Windows-Search Date: 2014-08-20T07:53:49.000 Event ID: 1003 Task: Search service Level: Information Opcode: N/A Keyword: Classic User: N/A User Name: N/A Computer: iPhone Description: The Windows Search Service started. Event[33]: Log Name: Application Source: Microsoft-Windows-Search Date: 2014-08-20T07:53:54.000 Event ID: 4121 Task: Search service Level: Information Opcode: N/A Keyword: Classic User: N/A User Name: N/A Computer: iPhone Description: A master merge has restarted for catalog SystemIndex. Event[34]: Log Name: Application Source: Microsoft-Windows-Security-SPP Date: 2014-08-20T07:55:32.000 Event ID: 900 Task: N/A Level: Information Opcode: N/A Keyword: Classic User: N/A User Name: N/A Computer: iPhone Description: The Software Protection service is starting. Event[35]: Log Name: Application Source: SecurityCenter Date: 2014-08-20T07:55:34.000 Event ID: 1 Task: N/A Level: Information Opcode: Info Keyword: Classic User: N/A User Name: N/A Computer: iPhone Description: The Windows Security Center Service has started. Event[36]: Log Name: Application Source: Microsoft-Windows-Security-SPP Date: 2014-08-20T07:55:37.000 Event ID: 1066 Task: N/A Level: Information Opcode: N/A Keyword: Classic User: N/A User Name: N/A Computer: iPhone Description: Initialization status for service objects. C:\Windows\system32\sppwinob.dll, msft:spp/windowsfunctionality/agent/7.0, 0x00000000, 0x00000000 C:\Windows\system32\sppobjs.dll, msft:rm/algorithm/phone/1.0, 0x00000000, 0x00000000 C:\Windows\system32\sppobjs.dll, msft:rm/algorithm/pkey/2005, 0x00000000, 0x00000000 C:\Windows\system32\sppobjs.dll, msft:spp/TaskScheduler/1.0, 0x00000000, 0x00000000 C:\Windows\system32\sppobjs.dll, msft:spp/volume/services/kms/1.0, 0x00000000, 0x00000000 C:\Windows\system32\sppobjs.dll, msft:spp/volume/services/kms/licenserenewal/1.0, 0x00000000, 0x00000000 Event[37]: Log Name: Application Source: Microsoft-Windows-Security-SPP Date: 2014-08-20T07:55:37.000 Event ID: 1003 Task: N/A Level: Information Opcode: N/A Keyword: Classic User: N/A User Name: N/A Computer: iPhone Description: The Software Protection service has completed licensing status check. Application Id=55c92734-d682-4d71-983e-d6ec3f16059f Licensing Status= 1: 022a1afb-b893-4190-92c3-8f69a49839fb, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)])(1 )(2 )] 2: 436cef53-8387-4692-bb4a-9492cd82260e, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)])(1 )(2 )] 3: 57a232fe-0931-48fe-9389-e4586967c661, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)])(1 )(2 )] 4: 7cfd4696-69a9-4af7-af36-ff3d12b6b6c8, 1, 1 [(0 [0x00000000, 1, 0], [( 1 0xC004F032 0 0 msft:rm/algorithm/bios/4.0 0x00000000 0)(?)( 1 0xC004F032 0 0 msft:rm/algorithm/bios/4.0 0x00000000 0)(?)(?)(?)])(1 )(2 )] 5: 8ec16e01-e86f-415f-b333-1819f4145294, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)])(1 )(2 )] 6: a0cde89c-3304-4157-b61c-c8ad785d1fad, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)])(1 )(2 )] 7: ac96e1a8-6cc4-4310-a4ff-332ce77fb5b8, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)])(1 )(2 )] 8: b2c4b9f6-3ee6-4a2a-a361-64ad3b61ded5, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)])(1 )(2 )] 9: bba42084-cacd-4ad4-b606-9f3d6c93b2c5, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)])(1 )(2 )] 10: c619d61c-c2f2-40c3-ab3f-c5924314b0f3, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)])(1 )(2 )] 11: cfb3e52c-d707-4861-af51-11b27ee6169c, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)])(1 )(2 )] 12: 4a8149bb-7d61-49f4-8822-82c7bf88d64b, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)])(1 )(2 )] 13: afd5f68f-b70f-4000-a21d-28dbc8be8b07, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)])(1 )(2 )] Event[38]: Log Name: Application Source: Microsoft-Windows-Security-SPP Date: 2014-08-20T07:55:37.000 Event ID: 902 Task: N/A Level: Information Opcode: N/A Keyword: Classic User: N/A User Name: N/A Computer: iPhone Description: The Software Protection service has started. 6.1.7601.17514 Event[39]: Log Name: Application Source: Microsoft-Windows-LoadPerf Date: 2014-08-20T07:59:06.694 Event ID: 1001 Task: N/A Level: Information Opcode: Info Keyword: N/A User: S-1-5-18 User Name: NT AUTHORITY\SYSTEM Computer: iPhone Description: Performance counters for the WmiApRpl (WmiApRpl) service were removed successfully. The Record Data contains the new values of the system Last Counter and Last Help registry entries. Event[40]: Log Name: Application Source: Microsoft-Windows-LoadPerf Date: 2014-08-20T07:59:06.821 Event ID: 1000 Task: N/A Level: Information Opcode: Info Keyword: N/A User: S-1-5-18 User Name: NT AUTHORITY\SYSTEM Computer: iPhone Description: Performance counters for the WmiApRpl (WmiApRpl) service were loaded successfully. The Record Data in the data section contains the new index values assigned to this service. Event[41]: Log Name: Application Source: Microsoft-Windows-Security-SPP Date: 2014-08-20T08:00:37.000 Event ID: 903 Task: N/A Level: Information Opcode: N/A Keyword: Classic User: N/A User Name: N/A Computer: iPhone Description: The Software Protection service has stopped. Event[42]: Log Name: Application Source: Microsoft-Windows-EventSystem Date: 2014-08-20T08:25:01.000 Event ID: 4625 Task: N/A Level: Information Opcode: N/A Keyword: Classic User: N/A User Name: N/A Computer: iPhone Description: The EventSystem sub system is suppressing duplicate event log entries for a duration of 86400 seconds. The suppression timeout can be controlled by a REG_DWORD value named SuppressDuplicateDuration under the following registry key: HKLM\Software\Microsoft\EventSystem\EventLog. Event[43]: Log Name: Application Source: Microsoft-Windows-User Profiles Service Date: 2014-08-20T08:25:01.444 Event ID: 1531 Task: N/A Level: Information Opcode: Info Keyword: N/A User: S-1-5-18 User Name: NT AUTHORITY\SYSTEM Computer: iPhone Description: The User Profile Service has started successfully. Event[44]: Log Name: Application Source: Microsoft-Windows-WMI Date: 2014-08-20T08:25:09.000 Event ID: 5615 Task: N/A Level: Information Opcode: N/A Keyword: Classic User: N/A User Name: N/A Computer: iPhone Description: Windows Management Instrumentation Service started sucessfully Event[45]: Log Name: Application Source: Microsoft-Windows-WMI Date: 2014-08-20T08:25:10.000 Event ID: 5611 Task: N/A Level: Information Opcode: N/A Keyword: Classic User: N/A User Name: N/A Computer: iPhone Description: The Windows Management Instrumentation service has detected an inconsistent system shutdown. Event[46]: Log Name: Application Source: Microsoft-Windows-Winlogon Date: 2014-08-20T08:25:13.000 Event ID: 4101 Task: N/A Level: Information Opcode: N/A Keyword: Classic User: N/A User Name: N/A Computer: iPhone Description: Windows license validated. Event[47]: Log Name: Application Source: Microsoft-Windows-Winlogon Date: 2014-08-20T08:25:14.000 Event ID: 6000 Task: N/A Level: Information Opcode: N/A Keyword: Classic User: N/A User Name: N/A Computer: iPhone Description: The winlogon notification subscriber <SessionEnv> was unavailable to handle a notification event. Event[48]: Log Name: Application Source: Microsoft-Windows-WMI Date: 2014-08-20T08:25:31.000 Event ID: 5617 Task: N/A Level: Information Opcode: N/A Keyword: Classic User: N/A User Name: N/A Computer: iPhone Description: Windows Management Instrumentation Service subsystems initialized successfully Event[49]: Log Name: Application Source: ESENT Date: 2014-08-20T08:25:32.000 Event ID: 102 Task: General Level: Information Opcode: Info Keyword: Classic User: N/A User Name: N/A Computer: iPhone Description: Windows (1760) Windows: The database engine (6.01.7601.0000) started a new instance (0). Event[50]: Log Name: Application Source: ESENT Date: 2014-08-20T08:25:33.000 Event ID: 300 Task: Logging/Recovery Level: Information Opcode: Info Keyword: Classic User: N/A User Name: N/A Computer: iPhone Description: Windows (1760) Windows: The database engine is initiating recovery steps. Event[51]: Log Name: Application Source: ESENT Date: 2014-08-20T08:25:33.000 Event ID: 301 Task: Logging/Recovery Level: Information Opcode: Info Keyword: Classic User: N/A User Name: N/A Computer: iPhone Description: Windows (1760) Windows: The database engine has begun replaying logfile C:\ProgramData\Microsoft\Search\Data\Applications\Windows\MSS00FAD.log. Event[52]: Log Name: Application Source: ESENT Date: 2014-08-20T08:25:35.000 Event ID: 301 Task: Logging/Recovery Level: Information Opcode: Info Keyword: Classic User: N/A User Name: N/A Computer: iPhone Description: Windows (1760) Windows: The database engine has begun replaying logfile C:\ProgramData\Microsoft\Search\Data\Applications\Windows\MSS.log. Event[53]: Log Name: Application Source: ESENT Date: 2014-08-20T08:25:35.000 Event ID: 302 Task: Logging/Recovery Level: Information Opcode: Info Keyword: Classic User: N/A User Name: N/A Computer: iPhone Description: Windows (1760) Windows: The database engine has successfully completed recovery steps. Event[54]: Log Name: Application Source: Microsoft-Windows-Search Date: 2014-08-20T08:26:13.000 Event ID: 1003 Task: Search service Level: Information Opcode: N/A Keyword: Classic User: N/A User Name: N/A Computer: iPhone Description: The Windows Search Service started. Event[55]: Log Name: Application Source: Microsoft-Windows-Search Date: 2014-08-20T08:26:17.000 Event ID: 4121 Task: Search service Level: Information Opcode: N/A Keyword: Classic User: N/A User Name: N/A Computer: iPhone Description: A master merge has restarted for catalog SystemIndex. Event[56]: Log Name: Application Source: Microsoft-Windows-Security-SPP Date: 2014-08-20T08:28:43.000 Event ID: 900 Task: N/A Level: Information Opcode: N/A Keyword: Classic User: N/A User Name: N/A Computer: iPhone Description: The Software Protection service is starting. Event[57]: Log Name: Application Source: SecurityCenter Date: 2014-08-20T08:28:46.000 Event ID: 1 Task: N/A Level: Information Opcode: Info Keyword: Classic User: N/A User Name: N/A Computer: iPhone Description: The Windows Security Center Service has started. Event[58]: Log Name: Application Source: Microsoft-Windows-Security-SPP Date: 2014-08-20T08:28:49.000 Event ID: 1066 Task: N/A Level: Information Opcode: N/A Keyword: Classic User: N/A User Name: N/A Computer: iPhone Description: Initialization status for service objects. C:\Windows\system32\sppwinob.dll, msft:spp/windowsfunctionality/agent/7.0, 0x00000000, 0x00000000 C:\Windows\system32\sppobjs.dll, msft:rm/algorithm/phone/1.0, 0x00000000, 0x00000000 C:\Windows\system32\sppobjs.dll, msft:rm/algorithm/pkey/2005, 0x00000000, 0x00000000 C:\Windows\system32\sppobjs.dll, msft:spp/TaskScheduler/1.0, 0x00000000, 0x00000000 C:\Windows\system32\sppobjs.dll, msft:spp/volume/services/kms/1.0, 0x00000000, 0x00000000 C:\Windows\system32\sppobjs.dll, msft:spp/volume/services/kms/licenserenewal/1.0, 0x00000000, 0x00000000 Event[59]: Log Name: Application Source: Microsoft-Windows-Security-SPP Date: 2014-08-20T08:28:49.000 Event ID: 1003 Task: N/A Level: Information Opcode: N/A Keyword: Classic User: N/A User Name: N/A Computer: iPhone Description: The Software Protection service has completed licensing status check. Application Id=55c92734-d682-4d71-983e-d6ec3f16059f Licensing Status= 1: 022a1afb-b893-4190-92c3-8f69a49839fb, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)])(1 )(2 )] 2: 436cef53-8387-4692-bb4a-9492cd82260e, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)])(1 )(2 )] 3: 57a232fe-0931-48fe-9389-e4586967c661, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)])(1 )(2 )] 4: 7cfd4696-69a9-4af7-af36-ff3d12b6b6c8, 1, 1 [(0 [0x00000000, 1, 0], [( 1 0xC004F032 0 0 msft:rm/algorithm/bios/4.0 0x00000000 0)(?)( 1 0xC004F032 0 0 msft:rm/algorithm/bios/4.0 0x00000000 0)(?)(?)(?)])(1 )(2 )] 5: 8ec16e01-e86f-415f-b333-1819f4145294, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)])(1 )(2 )] 6: a0cde89c-3304-4157-b61c-c8ad785d1fad, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)])(1 )(2 )] 7: ac96e1a8-6cc4-4310-a4ff-332ce77fb5b8, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)])(1 )(2 )] 8: b2c4b9f6-3ee6-4a2a-a361-64ad3b61ded5, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)])(1 )(2 )] 9: bba42084-cacd-4ad4-b606-9f3d6c93b2c5, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)])(1 )(2 )] 10: c619d61c-c2f2-40c3-ab3f-c5924314b0f3, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)])(1 )(2 )] 11: cfb3e52c-d707-4861-af51-11b27ee6169c, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)])(1 )(2 )] 12: 4a8149bb-7d61-49f4-8822-82c7bf88d64b, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)])(1 )(2 )] 13: afd5f68f-b70f-4000-a21d-28dbc8be8b07, 1, 0 [(0 [0xC004F014, 0, 0], [(?)(?)(?)(?)(?)(?)])(1 )(2 )] Event[60]: Log Name: Application Source: Microsoft-Windows-Security-SPP Date: 2014-08-20T08:28:49.000 Event ID: 902 Task: N/A Level: Information Opcode: N/A Keyword: Classic User: N/A User Name: N/A Computer: iPhone Description: The Software Protection service has started. 6.1.7601.17514 Event[61]: Log Name: Application Source: Microsoft-Windows-LoadPerf Date: 2014-08-20T08:30:59.267 Event ID: 1001 Task: N/A Level: Information Opcode: Info Keyword: N/A User: S-1-5-18 User Name: NT AUTHORITY\SYSTEM Computer: iPhone Description: Performance counters for the WmiApRpl (WmiApRpl) service were removed successfully. The Record Data contains the new values of the system Last Counter and Last Help registry entries. Event[62]: Log Name: Application Source: Microsoft-Windows-LoadPerf Date: 2014-08-20T08:30:59.396 Event ID: 1000 Task: N/A Level: Information Opcode: Info Keyword: N/A User: S-1-5-18 User Name: NT AUTHORITY\SYSTEM Computer: iPhone Description: Performance counters for the WmiApRpl (WmiApRpl) service were loaded successfully. The Record Data in the data section contains the new index values assigned to this service.