Windows 7: BSOD ntoskrnl.exe+f11e4 PAGE_FAULT_IN_NONPAGED_AREA 0x00000050

TrouNoir · 24 Mar 2013

Hi, this is my first post on this forum, I actually come to you from another forum that was unable to help me resolve my problem.

For the last month or so I've been getting intermittent BSODs, all of which reference 'ntoskrnl.exe' as the culprit in BlueScreenView, however despite copious research I am unable to resolve the issue.
So far I have tried:

-Run Memtest for 7 passes, clean
-Run chkdsk /f multiple times, all clean
-Run Seatools for DOS long test, clean
-Updated video card drivers to 13.1 (latest)
-Verified that no system components are overheating or undervolted
-I run virus scans, registry defrags/cleaning regularly, all clean
-sfc /scannow, all clean
-I have no active anti-virus that could cause the problem
-Stress tested both the GPU and CPU, all stable
-removed Acronis Trueimage drivers I thought may have been causing the issue, no effect
-replaced my 60Gb C: drive with a new 300Gb, as I was running low on space and thought maybe that might have contributed, no effect

Things I have not yet tried:
-Scan entire system for outdated drivers (I can't find a reputable program that will do this, all of the ones I've tried just want me to pay)
-I ran sfc/verifyonly which reported integrity violations, however I don't know how to read the dump file and identify the issue.
-Full format and reinstall Windows, obviously this is a last resort

As per the instructions here: Blue Screen of Death (BSOD) Posting Instructions

I have run the tool and attached the required files.

Thanks in advance!

koolkat77 · 25 Mar 2013

Please post the following report before we proceed:

Windows Genuine and Activation Issue Posting Instructions

TrouNoir · 25 Mar 2013

As instructed:

Code:

Diagnostic Report (1.9.0027.0):
-----------------------------------------
Windows Validation Data-->

Validation Code: 0
Cached Online Validation Code: N/A, hr = 0xc004f012
Windows Product Key: *****-*****-X92GV-V7DCV-P4K27
Windows Product Key Hash: aU2z1/fnhnLHmhBm699qYZT2E6s=
Windows Product ID: 00426-OEM-8992662-00400
Windows Product ID Type: 2
Windows License Type: OEM SLP
Windows OS version: 6.1.7600.2.00010100.0.0.001
ID: {9013B488-0C71-4DF8-AD8D-601325E99A6E}(1)
Is Admin: Yes
TestCab: 0x0
LegitcheckControl ActiveX: N/A, hr = 0x80070002
Signed By: N/A, hr = 0x80070002
Product Name: Windows 7 Ultimate
Architecture: 0x00000009
Build lab: 7600.win7_rtm.090713-1255
TTS Error: 
Validation Diagnostic: 
Resolution Status: N/A

Vista WgaER Data-->
ThreatID(s): N/A, hr = 0x80070002
Version: N/A, hr = 0x80070002

Windows XP Notifications Data-->
Cached Result: N/A, hr = 0x80070002
File Exists: No
Version: N/A, hr = 0x80070002
WgaTray.exe Signed By: N/A, hr = 0x80070002
WgaLogon.dll Signed By: N/A, hr = 0x80070002

OGA Notifications Data-->
Cached Result: N/A, hr = 0x80070002
Version: N/A, hr = 0x80070002
OGAExec.exe Signed By: N/A, hr = 0x80070002
OGAAddin.dll Signed By: N/A, hr = 0x80070002

OGA Data-->
Office Status: 109 N/A
OGA Version: N/A, 0x80070002
Signed By: N/A, hr = 0x80070002
Office Diagnostics: 025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3

Browser Data-->
Proxy settings: N/A
User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)
Default Browser: C:\Users\Dan\AppData\Local\Google\Chrome\Application\chrome.exe
Download signed ActiveX controls: Prompt
Download unsigned ActiveX controls: Disabled
Run ActiveX controls and plug-ins: Allowed
Initialize and script ActiveX controls not marked as safe: Disabled
Allow scripting of Internet Explorer Webbrowser control: Disabled
Active scripting: Allowed
Script ActiveX controls marked as safe for scripting: Allowed

File Scan Data-->
File Mismatch: C:\windows\system32\wat\watadminsvc.exe[Hr = 0x80070003]
File Mismatch: C:\windows\system32\wat\npwatweb.dll[Hr = 0x80070003]
File Mismatch: C:\windows\system32\wat\watux.exe[Hr = 0x80070003]
File Mismatch: C:\windows\system32\wat\watweb.dll[Hr = 0x80070003]

Other data-->
Office Details: <GenuineResults><MachineData><UGUID>{9013B488-0C71-4DF8-AD8D-601325E99A6E}</UGUID><Version>1.9.0027.0</Version><OS>6.1.7600.2.00010100.0.0.001</OS><Architecture>x64</Architecture><PKey>*****-*****-*****-*****-P4K27</PKey><PID>00426-OEM-8992662-00400</PID><PIDType>2</PIDType><SID>S-1-5-21-1292611385-2853479902-2964421468</SID><SYSTEM><Manufacturer>Gigabyte Technology Co., Ltd.</Manufacturer><Model>GA-880GM-D2H</Model></SYSTEM><BIOS><Manufacturer>Award Software International, Inc.</Manufacturer><Version>F6</Version><SMBIOSVersion major="2" minor="4"/><Date>20100831000000.000000+000</Date></BIOS><HWID>65B93607018400FA</HWID><UserLCID>0409</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>Romance Standard Time(GMT+01:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM><OEMID>LENOVO</OEMID><OEMTableID>TP-7X   </OEMTableID></OEM><GANotification/></MachineData><Software><Office><Result>109</Result><Products/><Applications/></Office></Software></GenuineResults>  

Spsys.log Content: 0x80070002

Licensing Data-->
Software licensing service version: 6.1.7600.16385

Name: Windows(R) 7, Ultimate edition
Description: Windows Operating System - Windows(R) 7, OEM_SLP channel
Activation ID: 7cfd4696-69a9-4af7-af36-ff3d12b6b6c8
Application ID: 55c92734-d682-4d71-983e-d6ec3f16059f
Extended PID: 00426-00178-926-600400-02-1033-7600.0000-2232011
Installation ID: 003693554731062642161883405013671044140644272223879292
Processor Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88338
Machine Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88339
Use License URL: http://go.microsoft.com/fwlink/?LinkID=88341
Product Key Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88340
Partial Product Key: P4K27
License Status: Licensed
Remaining Windows rearm count: 3
Trusted time: 3/25/2013 8:05:48 PM

Windows Activation Technologies-->
HrOffline: 0x00000000
HrOnline: N/A
HealthStatus: 0x0000000000000000
Event Time Stamp: N/A
ActiveX: Not Registered - 0x80040154
Admin Service: Not Registered - 0x80040154
HealthStatus Bitmask Output:


HWID Data-->
HWID Hash Current: QgAAAAQABgABAAEAAQAEAAAAAQABAAEAln1sKy4/YZZeKXcW4KgYiFTyEDOUyYhHhHnGBftTYj30AZhULwO46o4u

OEM Activation 1.0 Data-->
N/A

OEM Activation 2.0 Data-->
BIOS valid for OA 2.0: yes
Windows marker version: 0x20001
OEMID and OEMTableID Consistent: yes
BIOS Information: 
  ACPI Table Name	OEMID Value	OEMTableID Value
  APIC			GBT   		GBTUACPI
  FACP			GBT   		GBTUACPI
  HPET			GBT   		GBTUACPI
  MCFG			GBT   		GBTUACPI
  SSDT			PTLTD 		POWERNOW
  SLIC			LENOVO		TP-7X

NoelDP · 25 Mar 2013

A Lenovo SLIC table with a Dell Key on a Gigabyte retail motherboard.

The installation is counterfeit, enabled by a hacker's Activation Exploit.

You need to reformat and reinstall using genuine media and Key.

TrouNoir · 25 Mar 2013

Quote: Originally Posted by NoelDP

A Lenovo SLIC table with a Dell Key on a Gigabyte retail motherboard.

The installation is counterfeit, enabled by a hacker's Activation Exploit.

You need to reformat and reinstall using genuine media and Key.

Oh I'm fully aware the install is cracked, however I've never seen any information relating that to my BSOD issue.
Do you think it's what is causing the BSOD? If I were to buy Windows 7, install it, then discover it had nothing to do with the BSOD, that would be a substantial waste of money.
I'd rather reinstall Windows as a last resort if possible.

If you guys only work with legitimate installs, that's understandable.

NoelDP · 25 Mar 2013

Installing SP1 will probably help - beyond that we can't advise due to forum policy.

TrouNoir · 25 Mar 2013

Quote: Originally Posted by NoelDP

Installing SP1 will probably help - beyond that we can't advise due to forum policy.

Ok, I understand, thanks anyway for the help!