BSOD when updating drivers like adobe air and java

roketrider · 08 Jul 2013

Hey, im getting BSOD's when updating certain drivers and when doing a full system scan on avast. Please help.
I'll include the dump files. thanks.

sf file. thanks.

Northernsoul55 · 08 Jul 2013

Hi,
From your logs:

Code:

 
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************
Use !analyze -v to get detailed debugging information.
BugCheck 1A, {41790, fffffa80035405a0, ffff, 0}
Probably caused by : ntkrnlmp.exe ( nt! ?? ::FNODOBFM::`string'+35084 )
Followup: MachineOwner
---------
3: kd> !analyze -v
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************
MEMORY_MANAGEMENT (1a)

STOP 0x0000001A: MEMORY_MANAGEMENT
Usual causes: Device driver, memory, kernel

Avast Firewall is causing issues with your computer.
Please remove all Avast from your system:

http://www.avast.com/uninstall-utility

As an alternative, please install:

Microsoft Security Essentials.

Recommended from a strict BSOD perspective, compatibility & stability
compared to other antiviruses/internet security software.

Note

Once downloaded, update and run a full system scan

Also take memtest. Run for 8 passes and test each stick in a know good slot for an additional 6 passes.

https://www.sevenforums.com/tutorials/105647-ram-test-memtest86.html

Tip

Run these tests overnight

Also run chkdsk in an elevated command prompt in order to check for file system errors and bad sectors on your HDD:

Click on Start>Type in search cmd
Right click cmd and Run as Administrator
At the command prompt please type: chkdsk /f/r
(There is a space between chkdsk and /f/r)

Chkdsk Tutorial

Post back any results

Cheers

Dave

roketrider · 08 Jul 2013

okay i'll try all of the above. Thanks man, you are a legend. ill see how it goes.

roketrider · 08 Jul 2013

ugh I cant install Microsoft Security Essentials because it says my windows version is not validated/authentic which is it.. I bought my laptop brand new with the windows version pre-installed. help please? thanks.

Northernsoul55 · 08 Jul 2013

Hi,

Ok, do you get any error codes? Also please follow these instructions:

1. Download and save this tool to your desktop:

http://go.microsoft.com/fwlink/?linkid=52012

2. Run the tool, and then click 'Copy' - ignore any errors if they appear

3. Use CTRL+V to paste the unedited results of the tool here in your next reply

I will ask another member NoelDP to look at your activation issues as this is not my field, please
be patient as he is not on-line at the moment, but is the best person to help you with this issue.

In the meantime, please run the tests I suggested.

cheers

Dave

roketrider · 08 Jul 2013

Diagnostic Report (1.9.0027.0):
-----------------------------------------
Windows Validation Data-->

Validation Code: 0
Cached Online Validation Code: 0x0
Windows Product Key: *****-*****-73CQT-WMF7J-3Q6C9
Windows Product Key Hash: KaFG+RmurcM3ZxzWyfEP9WtPUJw=
Windows Product ID: 00359-OEM-8992687-00010
Windows Product ID Type: 2
Windows License Type: OEM SLP
Windows OS version: 6.1.7601.2.00010300.1.0.003
ID: {19C66BD6-9DF2-4A81-B7D4-6441B60298A1}(1)
Is Admin: Yes
TestCab: 0x0
LegitcheckControl ActiveX: N/A, hr = 0x80070002
Signed By: N/A, hr = 0x80070002
Product Name: Windows 7 Home Premium
Architecture: 0x00000009
Build lab: 7601.win7sp1_gdr.130318-1533
TTS Error:
Validation Diagnostic:
Resolution Status: N/A

Vista WgaER Data-->
ThreatID(s): N/A, hr = 0x80070002
Version: N/A, hr = 0x80070002

Windows XP Notifications Data-->
Cached Result: N/A, hr = 0x80070002
File Exists: No
Version: N/A, hr = 0x80070002
WgaTray.exe Signed By: N/A, hr = 0x80070002
WgaLogon.dll Signed By: N/A, hr = 0x80070002

OGA Notifications Data-->
Cached Result: N/A, hr = 0x80070002
Version: N/A, hr = 0x80070002
OGAExec.exe Signed By: N/A, hr = 0x80070002
OGAAddin.dll Signed By: N/A, hr = 0x80070002

OGA Data-->
Office Status: 109 N/A
OGA Version: N/A, 0x80070002
Signed By: N/A, hr = 0x80070002
Office Diagnostics: 025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3

Browser Data-->
Proxy settings: N/A
User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)
Default Browser: C:\Users\Beats\AppData\Local\Google\Chrome\Application\chrome.exe
Download signed ActiveX controls: Prompt
Download unsigned ActiveX controls: Disabled
Run ActiveX controls and plug-ins: Allowed
Initialize and script ActiveX controls not marked as safe: Disabled
Allow scripting of Internet Explorer Webbrowser control: Disabled
Active scripting: Allowed
Script ActiveX controls marked as safe for scripting: Allowed

File Scan Data-->
File Mismatch: C:\Windows\system32\systemcpl.dll[6.1.7600.16385], Hr = 0x800b0100
File Mismatch: C:\Windows\system32\user32.dll[6.1.7600.16385], Hr = 0x800b0100

Other data-->
Office Details: <GenuineResults><MachineData><UGUID>{19C66BD6-9DF2-4A81-B7D4-6441B60298A1}</UGUID><Version>1.9.0027.0</Version><OS>6.1.7601.2.00010300.1.0.003</OS><Architecture>x64</Architecture><PKey>*****-*****-*****-*****-3Q6C9</PKey><PID>00359-OEM-8992687-00010</PID><PIDType>2</PIDType><SID>S-1-5-21-3558211898-960348580-441932698</SID><SYSTEM><Manufacturer>Hewlett-Packard</Manufacturer><Model>HP Pavilion dm4 Notebook PC</Model></SYSTEM><BIOS><Manufacturer>Hewlett-Packard</Manufacturer><Version>F.0C</Version><SMBIOSVersion major="2" minor="7"/><Date>20130121000000.000000+000</Date></BIOS><HWID>64333607018400FE</HWID><UserLCID>0C09</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>W. Australia Standard Time(GMT+08:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM><OEMID>HPQOEM</OEMID><OEMTableID>SLIC-MPC</OEMTableID></OEM><GANotification/></MachineData><Software><Office><Result>109</Result><Products/><Applications/></Office></Software></GenuineResults>

Spsys.log Content: 0x80070002

Licensing Data-->
Input Error: Can not find script file "C:\Windows\system32\slmgr.vbs".

Windows Activation Technologies-->
HrOffline: 0x00000000
HrOnline: 0x00000000
HealthStatus: 0x0000000000000000
Event Time Stamp: 7:8:2013 16:24
ActiveX: Registered, Version: 7.1.7600.16395
Admin Service: Not Registered - 0x80070005
HealthStatus Bitmask Output:

HWID Data-->
HWID Hash Current: MgAAAAEAAAABAAIAAQABAAAABAABAAEAln2ksiLwTtTEfyLk8F3krZ6l9I1aHKp7LnM=

OEM Activation 1.0 Data-->
N/A

OEM Activation 2.0 Data-->
BIOS valid for OA 2.0: yes
Windows marker version: 0x20001
OEMID and OEMTableID Consistent: yes
BIOS Information:
ACPI Table Name OEMID Value OEMTableID Value
APIC HP INSYDE
FACP HPQOEM SLIC-MPC
HPET HP INSYDE
BOOT HP INSYDE
MCFG HP INSYDE
WDAT HP INSYDE
ASF! HP INSYDE
SLIC HPQOEM SLIC-MPC
SSDT HP INSYDE
ASPT HP INSYDE
SSDT HP INSYDE
SSDT HP INSYDE
SSDT HP INSYDE

roketrider · 08 Jul 2013

really do appreciate your help.

roketrider · 08 Jul 2013

im getting more bsods

ill attach the files SF files.

i recently installed AVG antivirus and a program called Advanced system care 7 (both from top 5 downloaded apps on download.com.
thanks again.

NoelDP · 08 Jul 2013

The system is defined as being counterfeit - because it has RemoveWAT installed to circumvent Activation and Validation requirements.
From what I can see, this machine probably shipped with Windows 8 installed? - was it Win8, or Win8 Pro??
If Pro, then the install should validate properly simply by removing the RemoveWAT hack.

Best way to fix it now (since we don't know which version of RemoveWAT was used) is to run WATFix....

Download WATFix - make sure that you UNTICK the box for the 'download manager, and click on the link on the left of the page, not the big shiny button on the right (which is an ad for the download manager!!) - and use that - extraxt the .exe file, and run it, then reboot.

Post back with another MGADiag report, and we'll then see what we can do.

roketrider · 08 Jul 2013

i installed removeWAT today because thats the only way i knew of fixing the problem in the short term, and laptop came with win7 home edition. and i have have the product key/number. just not sure on where to input it.
thanks.