Bsod on shutdown win32k.sys and corrupt files in sfc/scanow

billspice · 10 Dec 2013

Hello, all

ive been running in to a few issues on this machine for a while occasional bsod's, and ive noticed sfc/scannow reports coruption of files in cbs.log

on reboot or shutdown i recently just had "page fault in non paged area" win32k.sys and for the last few weeks i noticed stange things like Chinese symbols in the task manager, on rebooting it was fine, i have ran several virus scan and no viruses are reported back

i am including the sf grab file but it doesnt seem to have saved the minidump file?

i can confirm under startup and recovery, i have system failure ticked, but i do not have automatci restart ticked, also infomation is kernal memorry dump

System specs

Self Build,

ASus p5441t-m board

q660 2.4

PowerColor HD 6850 1GB GDDR5

1tb hard drive, plus multiple others

4.0 gig ram

i have also included the cbs.log, i hope someone can help me with this issue

kind regards

NoelDP · 11 Dec 2013

The SFC scansh ows the following error...

Code:

 Line 17979: 2013-12-10 22:33:31, Info                  CSI    00000309 [SR] Repairing 1 components
 Line 17980: 2013-12-10 22:33:31, Info                  CSI    0000030a [SR] Beginning Verify and Repair transaction
 Line 17983: 2013-12-10 22:33:31, Info                  CSI    0000030c [SR] Cannot repair member file [l:32{16}]"wbengine.exe.mui" of Microsoft-Windows-BLB-Engine-Main.Resources, Version = 6.1.7600.16385, pA = PROCESSOR_ARCHITECTURE_AMD64 (9), Culture = [l:10{5}]"en-US", VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, hash mismatch
 Line 17986: 2013-12-10 22:33:31, Info                  CSI    0000030e [SR] Cannot repair member file [l:32{16}]"wbengine.exe.mui" of Microsoft-Windows-BLB-Engine-Main.Resources, Version = 6.1.7600.16385, pA = PROCESSOR_ARCHITECTURE_AMD64 (9), Culture = [l:10{5}]"en-US", VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, hash mismatch
 Line 17987: 2013-12-10 22:33:31, Info                  CSI    0000030f [SR] This component was referenced by [l:208{104}]"Microsoft-Windows-BLB-Client-Package~31bf3856ad364e35~amd64~en-US~6.1.7600.16385.WindowsBlockLevelBackup"
 Line 17992: 2013-12-10 22:33:31, Info                  CSI    00000312 [SR] Could not reproject corrupted file [ml:520{260},l:58{29}]"\??\C:\Windows\System32\en-US"\[l:32{16}]"wbengine.exe.mui"; source file in store is also corrupted
 Line 17997: 2013-12-10 22:33:31, Info                  CSI    00000314 [SR] Repair complete

However, there is no point in attempting to fix what is a counterfeit install, as it's impossible to tell what else the Activation Exploit used to activate it has done to the rest of the OS.

You need to reformat and reinstall using genuine media and Key - then we can help.

billspice · 12 Dec 2013

hello, i had the machine built with win 7 preinstalled, were does it say it's counterfeit in those lines youve highlighted?

regards

NoelDP · 12 Dec 2013

Your Systeminfo.txt file betrayed the problem....

Code:

Product ID:                00426-OEM-8992662-00400

This code is ONLY valid where the manufacturer is one of the big ones - in this case, your machine would need to be a Dell one, preinstalled with Windows 7 Ultimate before being shipped from the manufacturer.

If you want further detail, then...

Please follow this tutorial and post an MGADiag report - then we can see what the detailis.

https://www.sevenforums.com/windows-updates-activation/234159-windows-genuine-activation-issue-posting-instructions.html

Ignore errors produced when clicking on the Copy button - they simply mean that the tool could not create the backup files for some reason. The data is still copied to the clipboard for pasting to your response.

Please also state the Version and Edition of Windows quoted on your COA sticker (if you have one) on the case of your machine (or inside the battery compartment), but do NOT quote the Key on the sticker!
http://www.microsoft.com/en-us/howtotell/Hardware.aspx