BSOD memory management issue that happens randomly

lox323 · 19 Sep 2012

Hi, I have a upgraded windows 7 version which is ultimate on a 32bit. I have been using it for 1 - 2 years. And just today i am starting to see the BSOD. It first gave me a bad header pool reason and then it change to executable file to non executable file, now it has changed to memory management. I have try to restore but that always fails and it can not repair it.

Can this novice have some help please?

I have uploaded the dump files.

koolkat77 · 19 Sep 2012

Welcome
Dumps are corrupted.
Please re-upload following instructions.

lox323 · 20 Sep 2012

Thanks for the instructions, i have uploaded new crash dumps. Does that help?

koolkat77 · 20 Sep 2012

Still the same..symbols ain't loading.
Try again please.

Also I need your msinfo.

Please upload your msinfo32.nfo file. To get this:

Click on the Start
Type msinfo32 into the Search programs and files box
When it opens, go to File, Save
Save as msinfo32.nfo and save in a place you will remember
Let it finish the process of gathering and saving the system info
Right click the .nfo file, click send to compressed (zipped) folder
Upload the .zip file here.

lox323 · 20 Sep 2012

I have added all the info plus did a win rar and win zip file because they both compressed ok. is that better? I am doing all this is safe mode because normal mode does not work.

koolkat77 · 20 Sep 2012

I'm checking them.

Can you tell me if the version of windows you are using now is legit or fake?.

lox323 · 20 Sep 2012

Bought it of ebay as vista and got it upgraded in my local computer repair shop, they say its genuine upgrade from vista. Its windows 7 ultimate 32 bit.

koolkat77 · 20 Sep 2012

Thanks. (PS. Your dumps are still not loading, I'm checking the other zip file)
In the meantime please post your report: Windows Genuine and Activation Issue Posting Instructions

lox323 · 20 Sep 2012

Diagnostic Report (1.9.0027.0):
-----------------------------------------
Windows Validation Data-->

Validation Code: 0
Cached Online Validation Code: N/A, hr = 0x8007043c
Windows Product Key: *****-*****-8T4YH-KM9TB-4PY2W
Windows Product Key Hash: WoIzABGnhIILQfDi6my3D0qPYn4=
Windows Product ID: 00426-OEM-8992662-00016
Windows Product ID Type: 2
Windows License Type: OEM SLP
Windows OS version: 6.1.7600.2.00010100.0.0.001
ID: {5B489875-F576-4B4F-98D7-7F3172E1D793}(1)
Is Admin: Yes
TestCab: 0x0
LegitcheckControl ActiveX: N/A, hr = 0x80070002
Signed By: N/A, hr = 0x80070002
Product Name: Windows 7 Ultimate
Architecture: 0x00000000
Build lab: 7600.win7_gdr.120401-1505
TTS Error:
Validation Diagnostic:
Resolution Status: N/A

Vista WgaER Data-->
ThreatID(s): N/A, hr = 0x80070002
Version: N/A, hr = 0x80070002

Windows XP Notifications Data-->
Cached Result: N/A, hr = 0x80070002
File Exists: No
Version: N/A, hr = 0x80070002
WgaTray.exe Signed By: N/A, hr = 0x80070002
WgaLogon.dll Signed By: N/A, hr = 0x80070002

OGA Notifications Data-->
Cached Result: N/A, hr = 0x80070002
Version: N/A, hr = 0x80070002
OGAExec.exe Signed By: N/A, hr = 0x80070002
OGAAddin.dll Signed By: N/A, hr = 0x80070002

OGA Data-->
Office Status: 109 N/A
OGA Version: N/A, 0x80070002
Signed By: N/A, hr = 0x80070002
Office Diagnostics: 025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3

Browser Data-->
Proxy settings: N/A
User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)
Default Browser: C:\Program Files\Mozilla Firefox 4.0 Beta 10\firefox.exe
Download signed ActiveX controls: Prompt
Download unsigned ActiveX controls: Disabled
Run ActiveX controls and plug-ins: Allowed
Initialize and script ActiveX controls not marked as safe: Disabled
Allow scripting of Internet Explorer Webbrowser control: Disabled
Active scripting: Allowed
Script ActiveX controls marked as safe for scripting: Allowed

File Scan Data-->

Other data-->
Office Details: <GenuineResults><MachineData><UGUID>{5B489875-F576-4B4F-98D7-7F3172E1D793}</UGUID><Version>1.9.0027.0</Version><OS>6.1.7600.2.00010100.0.0.001</OS><Architecture>x32</Architecture><PKey>*****-*****-*****-*****-4PY2W</PKey><PID>00426-OEM-8992662-00016</PID><PIDType>2</PIDType><SID>S-1-5-21-3121999899-2745147810-3327132118</SID><SYSTEM><Manufacturer>Sony Corporation</Manufacturer><Model>VGN-AR71E</Model></SYSTEM><BIOS><Manufacturer>Phoenix Technologies LTD</Manufacturer><Version>R2090J8</Version><SMBIOSVersion major="2" minor="4"/><Date>20080226000000.000000+000</Date></BIOS><HWID>FFBB3607018400FA</HWID><UserLCID>0809</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>GMT Standard Time(GMT+00:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM><OEMID>Sony</OEMID><OEMTableID>VAIO</OEMTableID></OEM><GANotification/></MachineData><Software><Office><Result>109</Result><Products/><Applications/></Office></Software></GenuineResults>

Spsys.log Content: 0x80070002

Licensing Data-->
On a computer running Microsoft Windows non-core edition, run 'slui.exe 0x2a 0x8007043C' to display the error text.
Error: 0x8007043C

Windows Activation Technologies-->
HrOffline: 0x00000000
HrOnline: 0x00000000
HealthStatus: 0x0000000000000000
Event Time Stamp: 7:14:2012 14:24
ActiveX: Registered, Version: 7.1.7600.16395
Admin Service: Not Registered - 0x8007043c
HealthStatus Bitmask Output:

HWID Data-->
HWID Hash Current: MAAAAAEABAABAAEAAAAAAAAAAgABAAEAeqiK0yzXRoMGDNbk2uumABwT8qDY8yqF

OEM Activation 1.0 Data-->
N/A

OEM Activation 2.0 Data-->
BIOS valid for OA 2.0: yes
Windows marker version: 0x20001
OEMID and OEMTableID Consistent: yes
BIOS Information:
ACPI Table Name OEMID Value OEMTableID Value
APIC Sony VAIO
FACP Sony VAIO
HPET Sony VAIO
BOOT Sony VAIO
MCFG Sony VAIO
SLIC Sony VAIO
TMOR Sony VAIO
APIC Sony VAIO
SSDT Sony VAIO
SSDT Sony VAIO
SSDT Sony VAIO
SSDT Sony VAIO

That is the report. i dont know what it means.

NoelDP · 20 Sep 2012

Not many do :)
One problem is that the report was run in Safe Mode, and the services that it depends on don't run there, so a lot of data is missing.

Having said that, this is a counterfeit installation.

The Key is an OEM_SLP one- which can ONLY be used on machines preinstalled with Win7 by the manufacturer.
Your machine was built well oer a year before Windows 7 was released

In order for the SLIC table to show as being v2.1, there MUST be an Activation Exploit present.

Such exploits can leave backdoors into the system wide open, and the system security cannot be guaranteed until you reformat and reinstall using the proper manufacturer's Redovery software for that machine.