Paged Fault in Nonpaged Area BSOD on Wake

rukiru · Dec 17, 2014

I tried uninstalling Norton earlier and that didn't fix it, so I went ahead and re-installed it.

I also had the BSOD before I installed the UXStyle software (which was about a week ago), so that shouldn't be the problem either.

Regarding Diskkeeper, I can't seem to find it in the Programs section of the control panel, and searching for "Diskkeeper" in Windows Explorer didn't return anything. Are you sure that it's installed?

usasma · Dec 18, 2014

These are 2 of the Diskkeeper drivers:

excsd.sys Fri Aug 17 20:07:27 2012 (502EDCBF)
excfs.sys Fri Aug 17 20:07:50 2012 (502EDCD6)

They may be a part of another program. In the System Drivers section of MSINFO32 they are labelled as ExpressCache drivers
Here's some links to start you off: https://www.google.com/search?q=expresscache&ie=utf-8&oe=utf-8

rukiru · Dec 18, 2014

ExpressCache is used to help boot up the system with the SSD, so it'd make sense that it could be contributing to this on-wake BSOD. However, I'm a bit hesitant to fully delete the drivers, since they seem pretty important if they're used to help boot up the system (though I could be wrong).

Is there any way I could try updating the drivers before deleting them/

rukiru · Dec 18, 2014

rukiru said:
ExpressCache is used to help boot up the system with the SSD, so it'd make sense that it could be contributing to this on-wake BSOD. However, I'm a bit hesitant to fully delete the drivers, since they seem pretty important if they're used to help boot up the system (though I could be wrong).

Is there any way I could try updating the drivers before deleting them/

I found ExpressCache in the Programs sections of the Control Panel. Should I try uninstalling it and then looking for a version compatible with Windows 8.1?

usasma · Dec 19, 2014

I got a bit of a chance to do a bit of research this morning.
First, I found this ExpressCache software for Win8.1 on Lenovos: ExpressCache Software for Windows 8.1 (64-bit), 8 (64-bit), 7 (64-bit) - ThinkCentre, Notebook - Lenovo Support (US)
Next, this article addresses a clean install of ExpressCache: GUIDE Install ExpressCache for SSD Caching - Acer Community

Updating these drivers may be a bit tricky.
I strongly suggest the following:

1) Create a Restore Point using System Restore
2) Create a Repair disc (Recovery Drive in Win8.1):
Win 7 - Go to Start...All Programs...Maintenance...Create a System Repair Disc
Win 8 - Press "WIN" and "R" to open the Run dialog...type "RECDISC" (without the quotes) and press ENTER
Win 8.1 - Go to the Start Screen and type in "recoverydrive" (one word, without the quotes). That will start the recovery drive process. You will need a USB drive of at least 512 mB - and all data will be erased off of it. If copying the recovery partition the drive size will be much, much larger (16 - 32 gB drive required).
3) Test the System Repair disc/Recovery Drive to make sure that you can get to the System Restore entry when you boot from the disk/drive (you may also want to try actually using System Restore to make sure that it works)

Once that's done, try installing the Lenovo stuff first and see if that updates those drivers.

rukiru · Dec 21, 2014

After uninstalling the old version of ExpressCache (which took out the drivers), I still got a BSOD.
I then went and installed the Windows 8.1 64-bit version from the Lenovo site, which gave me a few days without a BSOD, but then happened to get one today. It could be that the Lenovo version of ExpressCache isn't compatible with my Acer laptop.

View attachment 55495

usasma · Dec 21, 2014

You've changed the ExpressCache drivers and the problem still exists. As such, I don't think it's the ExpressCache at all, so let's leave it alone for now.

Let's get a bit more aggressive now. Please uninstall:
- Norton (use the Norton Removal Tool also). Make sure that Windows Defender and the Windows Firewall are enabled after uninstalling Norton.
- UXStyle
- Camera software

Then test to see if the BSOD's have stopped. If not, we'll move on to other software.

I can't recall if you've reinstalled Windows - but if you haven't, is that a possibility (it'll help confirm if this is a Windows problem or not).

Analysis:
The following is for informational purposes only.

Code:

[font=lucida console]**************************Sun Dec 21 01:09:44.124 2014 (UTC - 5:00)**************************
Loading Dump File [C:\Users\John\SysnativeBSODApps\122014-32531-01.dmp]
Windows 8 Kernel Version 9600 MP (4 procs) Free x64
Built by: [B]9600[/B].17476.amd64fre.winblue_r5.141029-1500
System Uptime:[B]2 days 4:36:14.029[/B]
*** ERROR: Module load completed but symbols could not be loaded for tcpip.sys
Probably caused by :[B]tcpip.sys ( tcpip+1f5982 )[/B]
BugCheck [B]50, {fffff6fb40000000, 0, 0, 6}[/B]
BugCheck Info: [url=http://www.carrona.org/bsodindx.html#0x00000050]PAGE_FAULT_IN_NONPAGED_AREA (50)[/url]
Arguments: 
Arg1: fffff6fb40000000, memory referenced.
Arg2: 0000000000000000, value 0 = read operation, 1 = write operation.
Arg3: 0000000000000000, If non-zero, the instruction address which referenced the bad memory
    address.
Arg4: 0000000000000006, (reserved)
BUGCHECK_STR:  AV
DEFAULT_BUCKET_ID:  WIN8_DRIVER_FAULT
PROCESS_NAME:  System
FAILURE_BUCKET_ID: [B]AV_tcpip+1f5982[/B]
CPUID:        "Intel(R) Core(TM) i5-3337U CPU @ 1.80GHz"
MaxSpeed:     1800
CurrentSpeed: [B]1796[/B]
  BIOS Version                  V2.11
  BIOS Release Date             02/25/2013
  Manufacturer                  Acer
  Product Name                  Aspire M5-581T
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
**************************Thu Dec 18 20:19:47.054 2014 (UTC - 5:00)**************************
Loading Dump File [C:\Users\John\SysnativeBSODApps\121814-36593-01.dmp]
Windows 8 Kernel Version 9600 MP (4 procs) Free x64
Built by: [B]9600[/B].17476.amd64fre.winblue_r5.141029-1500
System Uptime:[B]0 days 0:06:53.955[/B]
*** ERROR: Module load completed but symbols could not be loaded for tcpip.sys
Probably caused by :[B]tcpip.sys ( tcpip+1f5982 )[/B]
BugCheck [B]50, {fffff6fb40000000, 0, 0, 6}[/B]
BugCheck Info: [url=http://www.carrona.org/bsodindx.html#0x00000050]PAGE_FAULT_IN_NONPAGED_AREA (50)[/url]
Arguments: 
Arg1: fffff6fb40000000, memory referenced.
Arg2: 0000000000000000, value 0 = read operation, 1 = write operation.
Arg3: 0000000000000000, If non-zero, the instruction address which referenced the bad memory
    address.
Arg4: 0000000000000006, (reserved)
BUGCHECK_STR:  AV
DEFAULT_BUCKET_ID:  WIN8_DRIVER_FAULT
PROCESS_NAME:  System
FAILURE_BUCKET_ID: [B]AV_tcpip+1f5982[/B]
CPUID:        "Intel(R) Core(TM) i5-3337U CPU @ 1.80GHz"
MaxSpeed:     1800
CurrentSpeed: [B]1796[/B]
  BIOS Version                  V2.11
  BIOS Release Date             02/25/2013
  Manufacturer                  Acer
  Product Name                  Aspire M5-581T
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
**************************Thu Dec 18 19:51:13.091 2014 (UTC - 5:00)**************************
Loading Dump File [C:\Users\John\SysnativeBSODApps\121814-28421-01.dmp]
Windows 8 Kernel Version 9600 MP (4 procs) Free x64
Built by: [B]9600[/B].17476.amd64fre.winblue_r5.141029-1500
System Uptime:[B]0 days 0:29:48.999[/B]
*** ERROR: Module load completed but symbols could not be loaded for tcpip.sys
Probably caused by :[B]tcpip.sys ( tcpip+1f5982 )[/B]
BugCheck [B]50, {fffff6fb40000000, 0, 0, 6}[/B]
BugCheck Info: [url=http://www.carrona.org/bsodindx.html#0x00000050]PAGE_FAULT_IN_NONPAGED_AREA (50)[/url]
Arguments: 
Arg1: fffff6fb40000000, memory referenced.
Arg2: 0000000000000000, value 0 = read operation, 1 = write operation.
Arg3: 0000000000000000, If non-zero, the instruction address which referenced the bad memory
    address.
Arg4: 0000000000000006, (reserved)
BUGCHECK_STR:  AV
DEFAULT_BUCKET_ID:  WIN8_DRIVER_FAULT
PROCESS_NAME:  System
FAILURE_BUCKET_ID: [B]AV_tcpip+1f5982[/B]
CPUID:        "Intel(R) Core(TM) i5-3337U CPU @ 1.80GHz"
MaxSpeed:     1800
CurrentSpeed: [B]1796[/B]
  BIOS Version                  V2.11
  BIOS Release Date             02/25/2013
  Manufacturer                  Acer
  Product Name                  Aspire M5-581T
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
**************************Thu Dec 18 19:20:54.905 2014 (UTC - 5:00)**************************
Loading Dump File [C:\Users\John\SysnativeBSODApps\121814-36640-01.dmp]
Windows 8 Kernel Version 9600 MP (4 procs) Free x64
Built by: [B]9600[/B].17476.amd64fre.winblue_r5.141029-1500
System Uptime:[B]0 days 19:22:25.806[/B]
*** ERROR: Module load completed but symbols could not be loaded for tcpip.sys
Probably caused by :[B]tcpip.sys ( tcpip+1f5982 )[/B]
BugCheck [B]50, {fffff6fb40000000, 0, 0, 6}[/B]
BugCheck Info: [url=http://www.carrona.org/bsodindx.html#0x00000050]PAGE_FAULT_IN_NONPAGED_AREA (50)[/url]
Arguments: 
Arg1: fffff6fb40000000, memory referenced.
Arg2: 0000000000000000, value 0 = read operation, 1 = write operation.
Arg3: 0000000000000000, If non-zero, the instruction address which referenced the bad memory
    address.
Arg4: 0000000000000006, (reserved)
BUGCHECK_STR:  AV
DEFAULT_BUCKET_ID:  WIN8_DRIVER_FAULT
PROCESS_NAME:  System
FAILURE_BUCKET_ID: [B]AV_tcpip+1f5982[/B]
CPUID:        "Intel(R) Core(TM) i5-3337U CPU @ 1.80GHz"
MaxSpeed:     1800
CurrentSpeed: [B]1796[/B]
  BIOS Version                  V2.11
  BIOS Release Date             02/25/2013
  Manufacturer                  Acer
  Product Name                  Aspire M5-581T
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
**************************Wed Dec 17 23:57:46.569 2014 (UTC - 5:00)**************************
Loading Dump File [C:\Users\John\SysnativeBSODApps\121714-41812-01.dmp]
Windows 8 Kernel Version 9600 MP (4 procs) Free x64
Built by: [B]9600[/B].17476.amd64fre.winblue_r5.141029-1500
System Uptime:[B]0 days 8:16:10.471[/B]
*** ERROR: Module load completed but symbols could not be loaded for tcpip.sys
Probably caused by :[B]tcpip.sys ( tcpip+1f5982 )[/B]
BugCheck [B]50, {fffff6fb40000000, 0, 0, 6}[/B]
BugCheck Info: [url=http://www.carrona.org/bsodindx.html#0x00000050]PAGE_FAULT_IN_NONPAGED_AREA (50)[/url]
Arguments: 
Arg1: fffff6fb40000000, memory referenced.
Arg2: 0000000000000000, value 0 = read operation, 1 = write operation.
Arg3: 0000000000000000, If non-zero, the instruction address which referenced the bad memory
    address.
Arg4: 0000000000000006, (reserved)
BUGCHECK_STR:  AV
DEFAULT_BUCKET_ID:  WIN8_DRIVER_FAULT
PROCESS_NAME:  System
FAILURE_BUCKET_ID: [B]AV_tcpip+1f5982[/B]
CPUID:        "Intel(R) Core(TM) i5-3337U CPU @ 1.80GHz"
MaxSpeed:     1800
CurrentSpeed: [B]1796[/B]
  BIOS Version                  V2.11
  BIOS Release Date             02/25/2013
  Manufacturer                  Acer
  Product Name                  Aspire M5-581T
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
**************************Wed Dec 17 15:40:59.938 2014 (UTC - 5:00)**************************
Loading Dump File [C:\Users\John\SysnativeBSODApps\121714-32015-01.dmp]
Windows 8 Kernel Version 9600 MP (4 procs) Free x64
Built by: [B]9600[/B].17476.amd64fre.winblue_r5.141029-1500
System Uptime:[B]0 days 14:24:32.840[/B]
*** ERROR: Module load completed but symbols could not be loaded for tcpip.sys
Probably caused by :[B]tcpip.sys ( tcpip+1f5982 )[/B]
BugCheck [B]50, {fffff6fb40000000, 0, 0, 6}[/B]
BugCheck Info: [url=http://www.carrona.org/bsodindx.html#0x00000050]PAGE_FAULT_IN_NONPAGED_AREA (50)[/url]
Arguments: 
Arg1: fffff6fb40000000, memory referenced.
Arg2: 0000000000000000, value 0 = read operation, 1 = write operation.
Arg3: 0000000000000000, If non-zero, the instruction address which referenced the bad memory
    address.
Arg4: 0000000000000006, (reserved)
BUGCHECK_STR:  AV
DEFAULT_BUCKET_ID:  WIN8_DRIVER_FAULT
PROCESS_NAME:  System
FAILURE_BUCKET_ID: [B]AV_tcpip+1f5982[/B]
CPUID:        "Intel(R) Core(TM) i5-3337U CPU @ 1.80GHz"
MaxSpeed:     1800
CurrentSpeed: [B]1796[/B]
  BIOS Version                  V2.11
  BIOS Release Date             02/25/2013
  Manufacturer                  Acer
  Product Name                  Aspire M5-581T
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
**************************Wed Dec 17 01:15:50.908 2014 (UTC - 5:00)**************************
Loading Dump File [C:\Users\John\SysnativeBSODApps\121614-54937-01.dmp]
Windows 8 Kernel Version 9600 MP (4 procs) Free x64
Built by: [B]9600[/B].17476.amd64fre.winblue_r5.141029-1500
System Uptime:[B]1 days 2:13:51.813[/B]
*** ERROR: Module load completed but symbols could not be loaded for tcpip.sys
Probably caused by :[B]tcpip.sys ( tcpip+1f5982 )[/B]
BugCheck [B]50, {fffff6fb40000000, 0, 0, 6}[/B]
BugCheck Info: [url=http://www.carrona.org/bsodindx.html#0x00000050]PAGE_FAULT_IN_NONPAGED_AREA (50)[/url]
Arguments: 
Arg1: fffff6fb40000000, memory referenced.
Arg2: 0000000000000000, value 0 = read operation, 1 = write operation.
Arg3: 0000000000000000, If non-zero, the instruction address which referenced the bad memory
    address.
Arg4: 0000000000000006, (reserved)
BUGCHECK_STR:  AV
DEFAULT_BUCKET_ID:  WIN8_DRIVER_FAULT
PROCESS_NAME:  System
FAILURE_BUCKET_ID: [B]AV_tcpip+1f5982[/B]
CPUID:        "Intel(R) Core(TM) i5-3337U CPU @ 1.80GHz"
MaxSpeed:     1800
CurrentSpeed: [B]1796[/B]
  BIOS Version                  V2.11
  BIOS Release Date             02/25/2013
  Manufacturer                  Acer
  Product Name                  Aspire M5-581T
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
[/font]

3rd Party Drivers:
The following is for information purposes only.
Any drivers in red should be updated or removed from your system. And should have been discussed in the body of my post.

Code:

[font=lucida console]**************************Sun Dec 21 01:09:44.124 2014 (UTC - 5:00)**************************
irstrtdv.sys                Thu Jul 12 19:58:02 2012 (4FFF648A)
aPs2Kb2Hid.sys              Sat Aug  4 06:19:18 2012 (501CF726)
ETD.sys                     Tue Nov 20 02:25:48 2012 (50AB307C)
spuvcdriver1_x64.sys        Fri Jan 11 04:07:53 2013 (50EFD669)
RtsPStor.sys                Thu Mar 14 04:00:32 2013 (514183A0)
SYMEVENT64x86.SYS           Fri Jul 26 22:26:58 2013 (51F32FF2)
SYMDS64.SYS                 Tue Jul 30 19:29:08 2013 (51F84C44)
intelppm.sys                Thu Aug 22 04:46:35 2013 (5215CFEB)
dump_storahci.sys           Thu Aug 22 07:40:39 2013 (5215F8B7)
uxstyle.sys                 Mon Sep 23 07:19:02 2013 (524023A6)
k57nd60a.sys                Wed Oct 30 03:14:03 2013 (5270B1BB)
excfs.sys                   Mon Nov 18 17:00:10 2013 (528A8DEA)
excsd.sys                   Mon Nov 18 17:00:13 2013 (528A8DED)
SYMNETS.SYS                 Thu Feb 13 06:25:14 2014 (52FCAB9A)
SYMEFA64.SYS                Thu Feb 27 18:32:07 2014 (530FCAF7)
iwdbus.sys                  Thu Mar 13 17:59:14 2014 (53222A32)
RTKVHD64.sys                Tue May  6 09:14:37 2014 (5368E03D)
Ironx64.SYS                 Tue May 20 18:27:42 2014 (537BD6DE)
SRTSPX64.SYS                Fri Jun 13 13:27:22 2014 (539B347A)
NETwew00.sys                Wed Jul  2 10:57:07 2014 (53B41DC3)
IntcDAud.sys                Tue Jul  8 09:58:59 2014 (53BBF923)
EX64.SYS                    Mon Aug 11 06:19:41 2014 (53E898BD)
ENG64.SYS                   Mon Aug 11 06:25:04 2014 (53E89A00)
SRTSP64.SYS                 Wed Aug 20 16:56:53 2014 (53F50B95)
BHDrvx64.sys                Tue Sep 23 22:12:51 2014 (542228A3)
igdkmd64.sys                Thu Oct 23 07:01:59 2014 (5448E027)
IDSvia64.sys                Fri Oct 31 23:14:03 2014 (54544FFB)
Smb_driver_Intel.sys        Tue Nov 11 15:04:38 2014 (54626BD6)
EraserUtilRebootDrv.sys     Tue Nov 25 15:15:44 2014 (5474E370)
eeCtrl64.sys                Tue Nov 25 15:15:44 2014 (5474E370)
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
**************************Thu Dec 18 20:19:47.054 2014 (UTC - 5:00)**************************
ccSetx64.sys                Mon Sep 23 23:58:04 2013 (52410DCC)
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
**************************Thu Dec 18 19:51:13.091 2014 (UTC - 5:00)**************************
excsd.sys                   Fri Aug 17 20:07:27 2012 (502EDCBF)
excfs.sys                   Fri Aug 17 20:07:50 2012 (502EDCD6)
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
**************************Thu Dec 18 19:20:54.905 2014 (UTC - 5:00)**************************
Smb_driver_Intel.sys        Mon Aug 25 17:48:35 2014 (53FBAF33)
igdkmd64.sys                Fri Sep 26 09:42:04 2014 (54256D2C)
[/font]

rukiru · Dec 21, 2014

I'll give those a try. By camera software, do you mean the camera driver in Device Manager?

usasma · Dec 23, 2014

Looks like a webcam (it's this driver: spuvcdriver1_x64.sys )

rukiru · Jan 6, 2015

usasma said:
Looks like a webcam (it's this driver: spuvcdriver1_x64.sys )

When I click "driver details" in the Properties section of the HD Webcam in Device Manager, it lists 3 drivers: ksthunk.sys, spuvcdriver1_x64.sys, and usbvideo.sys. Can I just disable the drivers from Device Manager or should I manually delete them (or just rename so that I can restore them afterward)?

Also, regarding Norton and UXStyle, I tried uninstalling those and kept getting the BSOD.

blueelvis · Jan 6, 2015

Hey Rukiru ^_^,

Sorry for the chime-in.
Let's check your latest dump file of which the stack is given below -

Code:

0: kd> knL
 # Child-SP          RetAddr           Call Site
00 ffffd000`244b2aa8 [COLOR=#FF0000]fffff803`dbd890d4[/COLOR] nt!KeBugCheckEx
01 ffffd000`244b2ab0 fffff803`dbc6afc7 nt! ?? ::FNODOBFM::`string'+0x15124
02 ffffd000`244b2ba0 fffff803`dbd6dd2f nt!MmAccessFault+0x287
03 ffffd000`244b2d60 fffff803`dbcb5ed8 nt!KiPageFault+0x12f
04 ffffd000`244b2ef0 fffff803`dbeb672c nt!ExFreeLargePool+0x78
05 ffffd000`244b2f90 fffff800`4b86e982 nt!ExFreePoolWithTag+0x72c
06 ffffd000`244b3080 fffff800`4b8669f5 tcpip!RssDeleteBinding+0x8a
07 ffffd000`244b30c0 fffff800`4b7143f5 tcpip!RssControlDeleteInterface+0x2711
08 ffffd000`244b3130 fffff800`4b725c71 tcpip!OlmNotifyDeleteInterface+0x25
09 ffffd000`244b3160 fffff800`4b713bc0 tcpip!IppNotifyInterfaceChangeToNlClients+0x171
0a ffffd000`244b31f0 fffff800`4b713e5c tcpip!IpFlcDeleteInterface+0x1b0
0b ffffd000`244b3260 fffff800`4b714925 tcpip!FlpDeleteInterface+0xa0
0c ffffd000`244b32d0 fffff800`4b551b2b tcpip!FlUnbindAdapter+0xa5
0d ffffd000`244b3350 fffff800`4b58fed0 ndis!ndisInvokeUnbindAdapter+0x2f
0e ffffd000`244b3390 fffff800`4b551ac4 ndis!ndisUnbindProtocolOpen+0x168
0f ffffd000`244b34b0 fffff800`4b5578e5 ndis!ndisUnbindEachProtocolOpenOnMiniport+0x70
10 ffffd000`244b34f0 fffff800`4b55701c ndis!Ndis::BindEngine::Iterate+0x86d
11 ffffd000`244b3700 fffff800`4b558ba4 ndis!Ndis::BindEngine::UpdateBindings+0x64
12 ffffd000`244b3730 fffff800`4b556d44 ndis!Ndis::BindEngine::DispatchPendingWork+0x50
13 ffffd000`244b3760 fffff800`4b559248 ndis!Ndis::BindEngine::ApplyBindChanges+0x58
14 ffffd000`244b37b0 fffff800`4b593242 ndis!ndisMSetMiniportReadyForBinding+0x88
15 ffffd000`244b3890 fffff800`4b55e0f9 ndis!ndisPnPRemoveDevice+0x1ae
16 ffffd000`244b3ae0 fffff800`4b55e569 ndis!ndisPnPRemoveDeviceEx+0x59
17 ffffd000`244b3b10 fffff803`dbc90acc ndis!ndisPnPIrpSurpriseRemovalInner+0x79
18 ffffd000`244b3b50 fffff803`dbd14440 nt!ExpWorkerThread+0x28c
19 ffffd000`244b3c00 fffff803`dbd6a0c6 nt!PspSystemThreadStartup+0x58
1a ffffd000`244b3c60 00000000`00000000 nt!KiStartSystemThread+0x16

Code:

0: kd> .fnent [COLOR=#FF0000]fffff803`dbd890d4[/COLOR]
Debugger function entry 000000d6`e3a62a48 for:
(fffff803`dbd73fb0)   nt! ?? ::FNODOBFM::`string'+0x15124   |  (fffff803`dbdd8998)   nt!DisplayFilter
BeginAddress      = 00000000`001760b8
EndAddress        = 00000000`001760d5
UnwindInfoAddress = 00000000`00254dc8
Unwind info at fffff803`dbe67dc8, 10 bytes
  version 2, flags 4, prolog 0, codes 0
Chained info:
BeginAddress      = [COLOR=#0000FF]00000000`0005a360[/COLOR]
EndAddress        = 00000000`0005a3fc
UnwindInfoAddress = 00000000`00254ce0
Unwind info at fffff803`dbe67ce0, 10 bytes
  version 2, flags 0, prolog 18, codes 6
  00: offs 18, unwind op 1, op info 0 UWOP_ALLOC_LARGE FrameOffset: c8.
  02: offs 11, unwind op 0, op info f UWOP_PUSH_NONVOL reg: r15.
  03: offs f, unwind op 0, op info e UWOP_PUSH_NONVOL reg: r14.
  04: offs d, unwind op 0, op info d UWOP_PUSH_NONVOL reg: r13.
  05: offs b, unwind op 0, op info 5 UWOP_PUSH_NONVOL reg: rbp.

Code:

0: kd> ln nt+[COLOR=#0000FF]00000000`0005a360
[/COLOR](fffff803`dbc6d360)   nt!MiZeroFault   |  (fffff803`dbc6e6e0)   nt!MiVadCompareVpn
Exact matches:
    [U][B]nt!MiZeroFault[/B][/U] (<no parameter info>)

So, the stack with the unknown function is -

Code:

0: kd> knL
 # Child-SP          RetAddr           Call Site
00 ffffd000`244b2aa8 fffff803`dbd890d4 nt!KeBugCheckEx
01 ffffd000`244b2ab0 fffff803`dbc6afc7 [U][B]nt!MiZeroFault[/B][/U]+0x15124
02 ffffd000`244b2ba0 fffff803`dbd6dd2f nt!MmAccessFault+0x287
03 ffffd000`244b2d60 fffff803`dbcb5ed8 nt!KiPageFault+0x12f
04 ffffd000`244b2ef0 fffff803`dbeb672c [B][COLOR=#FF8C00]nt!ExFreeLargePool[/COLOR][/B]+0x78
05 ffffd000`244b2f90 fffff800`4b86e982 nt!ExFreePoolWithTag+0x72c
06 ffffd000`244b3080 fffff800`4b8669f5 tcpip!RssDeleteBinding+0x8a
07 ffffd000`244b30c0 fffff800`4b7143f5 tcpip!RssControlDeleteInterface+0x2711
08 ffffd000`244b3130 fffff800`4b725c71 tcpip!OlmNotifyDeleteInterface+0x25
09 ffffd000`244b3160 fffff800`4b713bc0 tcpip!IppNotifyInterfaceChangeToNlClients+0x171
0a ffffd000`244b31f0 fffff800`4b713e5c tcpip!IpFlcDeleteInterface+0x1b0
0b ffffd000`244b3260 fffff800`4b714925 tcpip!FlpDeleteInterface+0xa0
0c ffffd000`244b32d0 fffff800`4b551b2b tcpip!FlUnbindAdapter+0xa5
0d ffffd000`244b3350 fffff800`4b58fed0 ndis!ndisInvokeUnbindAdapter+0x2f
0e ffffd000`244b3390 fffff800`4b551ac4 ndis!ndisUnbindProtocolOpen+0x168
0f ffffd000`244b34b0 fffff800`4b5578e5 ndis!ndisUnbindEachProtocolOpenOnMiniport+0x70
10 ffffd000`244b34f0 fffff800`4b55701c ndis!Ndis::BindEngine::Iterate+0x86d
11 ffffd000`244b3700 fffff800`4b558ba4 ndis!Ndis::BindEngine::UpdateBindings+0x64
12 ffffd000`244b3730 fffff800`4b556d44 ndis!Ndis::BindEngine::DispatchPendingWork+0x50
13 ffffd000`244b3760 fffff800`4b559248 ndis!Ndis::BindEngine::ApplyBindChanges+0x58
14 ffffd000`244b37b0 fffff800`4b593242 ndis!ndisMSetMiniportReadyForBinding+0x88
15 ffffd000`244b3890 fffff800`4b55e0f9 ndis!ndisPnPRemoveDevice+0x1ae
16 ffffd000`244b3ae0 fffff800`4b55e569 ndis!ndisPnPRemoveDeviceEx+0x59
17 ffffd000`244b3b10 fffff803`dbc90acc ndis!ndisPnPIrpSurpriseRemovalInner+0x79
18 ffffd000`244b3b50 fffff803`dbd14440 nt!ExpWorkerThread+0x28c
19 ffffd000`244b3c00 fffff803`dbd6a0c6 nt!PspSystemThreadStartup+0x58
1a ffffd000`244b3c60 00000000`00000000 nt!KiStartSystemThread+0x16

The nt!MiZeroFault is an undocumented function but by the look of it, it seems that something is being divided/tested by 0.
Since the Networking Drivers are on the STACK, the Debugger is blaming them. Furthermore, DV also flagged the Networking Drivers.
Also, the address which was referred is NOT VALID -

Code:

0: kd> .trap 0xffffd000244b2d60
NOTE: The trap frame does not contain all registers.
Some register values may be zeroed or incorrect.
rax=fffff6fb40000000 rbx=0000000000000000 rcx=00000904c0000000
rdx=fffff803dbc13000 rsi=0000000000000000 rdi=0000000000000000
rip=fffff803dbcb5ed8 rsp=ffffd000244b2ef0 rbp=0000000000000001
 r8=0000000000000000  r9=0000000000000000 r10=0000000000000004
r11=ffffd000244b2fc8 r12=0000000000000000 r13=0000000000000000
r14=0000000000000000 r15=0000000000000000
iopl=0         nv up ei ng nz na po cy
nt!ExFreeLargePool+0x78:
fffff803`dbcb5ed8 488b00          mov     rax,qword ptr [rax] ds:[COLOR=#008000]fffff6fb`40000000[/COLOR]=????????????????
0: kd> !pte[COLOR=#008000] fffff6fb`40000000[/COLOR]
                                           VA fffff68000000000
PXE at FFFFF6FB7DBEDF68    PPE at FFFFF6FB7DBED000    PDE at FFFFF6FB7DA00000    PTE at FFFFF6FB40000000
contains 80000000001AB063  contains 03000001C157F867  contains 0000000000000000
GetUlongFromAddress: unable to read from fffff803dbf76104
pfn 1ab       ---DA--KWEV  pfn 1c157f    ---DA--UWEV  [B][U]not valid[/U][/B]

It seems like the RAM is faulty at this stage. Kindly try the Memory Diagnostics over here (thanks usasma) -
Memory Diagnostics

Also, kindly scan your system using GMER and report back the results.
GMER - www.gmer.net/

Let us know how it goes ^_^

-Pranav

usasma · Jan 6, 2015

I discourage removing just the driver, as the driver is just usually a hint for me.
I prefer removing the software (if possible). If it isn't possible, then the next best thing is to remove the driver via Device Manager.

rukiru · Jan 8, 2015

blueelvis said:
Hey Rukiru ^_^,

It seems like the RAM is faulty at this stage. Kindly try the Memory Diagnostics over here (thanks usasma) -
Memory Diagnostics

Also, kindly scan your system using GMER and report back the results.
GMER - www.gmer.net/

Let us know how it goes ^_^

-Pranav

Thanks for the reply. I ran Memtest 7 times without any errors.

Here are the GMER results: View attachment 56330

rukiru · Jan 8, 2015

My computer just gave me another BSOD, but this time the error code was CRITICAL_STRUCTURE_CORRUPTION instead of PAGE_FAULT_IN_NONPAGED_AREA. Unlike the PAGE_FAULT ones, this BSOD occured while the computer was already awake. I'm not sure if they're related, but if the crash logs would help provide any extra info here they are:

View attachment 56346

That was the first time I've experienced a BSOD of that sort, so I think we should still focus on the PAGE_FAULT_IN_NONPAGED_AREA blue screens (unless I keep getting the new BSOD, in which case I'll notify you guys).

usasma · Jan 10, 2015

First, before doing anything else, please run Driver Verifier and capture at least 2 memory dumps when it's running.
BUT this time, use these directions:
- Go to Start and type in "verifier" (without the quotes) and press "Enter"
- Select "Create custom settings (for code developers)" and click "Next"
- Select "Select individual settings from a full list" and click "Next" (you may be taken directly to this page)
- Select "Special Pool" and "Pool Tracking" (do not select anything else)
- Select "Automatically select all drivers installed on this computer" and click "Next"
- Then reboot the system and wait fo the next 2 BSOD's

Once you've captured the 2 memory dumps, zip up the contents of the C:\Windows\Minidump directory and upload it with your next post (you may have to copy it to your Desktop in order to zip it up.

Please do not add/install anything else on the computer.
The next steps (if the verifier memory dumps don't show anything) will be to remove or replace the drivers that typically show up in the memory dumps. We'll work through them from oldest to youngest until we either fix the problem, or we've gone through all of the 3rd party drivers (and there's even more after this)

At one point you mentioned performing a clean install of Windows.
Have you done this? If not, are you prepared to do so?

Please note that the 2 NTI drivers that I asked you to remove in post #18 ( http://www.eightforums.com/bsod-cra...ult-nonpaged-area-bsod-wake-2.html#post456698 ) have returned. Do you have any idea of why? Don't do anything with them for now - we'll deal with them after the Driver Verifier crashes. If you will be reinstalling the Operating System, then there's no need to deal with them at this time either.

Analysis:
The following is for informational purposes only.

Code:

[FONT=lucida console]**************************Thu Jan  8 16:21:21.585 2015 (UTC - 5:00)**************************
Loading Dump File [C:\Users\John\SysnativeBSODApps\010815-34062-01.dmp]
Windows 8 Kernel Version 9600 MP (4 procs) Free x64
Built by: [B]9600[/B].17476.amd64fre.winblue_r5.141029-1500
System Uptime:[B]0 days 20:10:39.504[/B]
Probably caused by :[B]Unknown_Image ( ANALYSIS_INCONCLUSIVE )[/B]
BugCheck [B]109, {a3a01f5983d8dc0d, b3b72bdfd658dc18, fffff80010c3d080, 2}[/B]
BugCheck Info: [URL="http://www.carrona.org/bsodindx.html#Example"]CRITICAL_STRUCTURE_CORRUPTION (109)[/URL]
Arguments: 
Arg1: a3a01f5983d8dc0d, Reserved
Arg2: b3b72bdfd658dc18, Reserved
Arg3: fffff80010c3d080, Failure type dependent information
Arg4: 0000000000000002, Type of corrupted region, can be
    0 : A generic data region
    1 : Modification of a function or .pdata
    2 : A processor IDT
    3 : A processor GDT
    4 : Type 1 process list corruption
    5 : Type 2 process list corruption
    6 : Debug routine modification
    7 : Critical MSR modification
BUGCHECK_STR:  0x109
DEFAULT_BUCKET_ID:  WIN8_DRIVER_FAULT
PROCESS_NAME:  System
FAILURE_BUCKET_ID: [B]BAD_STACK[/B]
CPUID:        "Intel(R) Core(TM) i5-3337U CPU @ 1.80GHz"
MaxSpeed:     1800
CurrentSpeed: [B]1796[/B]
  BIOS Version                  V2.11
  BIOS Release Date             02/25/2013
  Manufacturer                  Acer
  Product Name                  Aspire M5-581T
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
**************************Wed Jan  7 20:10:22.592 2015 (UTC - 5:00)**************************
Loading Dump File [C:\Users\John\SysnativeBSODApps\010715-25265-01.dmp]
Windows 8 Kernel Version 9600 MP (4 procs) Free x64
Built by: [B]9600[/B].17476.amd64fre.winblue_r5.141029-1500
System Uptime:[B]0 days 10:00:56.500[/B]
*** ERROR: Module load completed but symbols could not be loaded for tcpip.sys
Probably caused by :[B]tcpip.sys ( tcpip+1f5982 )[/B]
BugCheck [B]50, {fffff6fb40000000, 0, 0, 6}[/B]
BugCheck Info: [URL="http://www.carrona.org/bsodindx.html#Example"]PAGE_FAULT_IN_NONPAGED_AREA (50)[/URL]
Arguments: 
Arg1: fffff6fb40000000, memory referenced.
Arg2: 0000000000000000, value 0 = read operation, 1 = write operation.
Arg3: 0000000000000000, If non-zero, the instruction address which referenced the bad memory
    address.
Arg4: 0000000000000006, (reserved)
BUGCHECK_STR:  AV
DEFAULT_BUCKET_ID:  WIN8_DRIVER_FAULT
PROCESS_NAME:  System
FAILURE_BUCKET_ID: [B]AV_tcpip+1f5982[/B]
CPUID:        "Intel(R) Core(TM) i5-3337U CPU @ 1.80GHz"
MaxSpeed:     1800
CurrentSpeed: [B]1796[/B]
  BIOS Version                  V2.11
  BIOS Release Date             02/25/2013
  Manufacturer                  Acer
  Product Name                  Aspire M5-581T
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
**************************Tue Jan  6 23:51:39.700 2015 (UTC - 5:00)**************************
Loading Dump File [C:\Users\John\SysnativeBSODApps\010615-29609-01.dmp]
Windows 8 Kernel Version 9600 MP (4 procs) Free x64
Built by: [B]9600[/B].17476.amd64fre.winblue_r5.141029-1500
System Uptime:[B]0 days 3:18:20.607[/B]
*** ERROR: Module load completed but symbols could not be loaded for tcpip.sys
Probably caused by :[B]tcpip.sys ( tcpip+1f5982 )[/B]
BugCheck [B]50, {fffff6fb40000000, 0, 0, 6}[/B]
BugCheck Info: [URL="http://www.carrona.org/bsodindx.html#Example"]PAGE_FAULT_IN_NONPAGED_AREA (50)[/URL]
Arguments: 
Arg1: fffff6fb40000000, memory referenced.
Arg2: 0000000000000000, value 0 = read operation, 1 = write operation.
Arg3: 0000000000000000, If non-zero, the instruction address which referenced the bad memory
    address.
Arg4: 0000000000000006, (reserved)
BUGCHECK_STR:  AV
DEFAULT_BUCKET_ID:  WIN8_DRIVER_FAULT
PROCESS_NAME:  System
FAILURE_BUCKET_ID: [B]AV_tcpip+1f5982[/B]
CPUID:        "Intel(R) Core(TM) i5-3337U CPU @ 1.80GHz"
MaxSpeed:     1800
CurrentSpeed: [B]1796[/B]
  BIOS Version                  V2.11
  BIOS Release Date             02/25/2013
  Manufacturer                  Acer
  Product Name                  Aspire M5-581T
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
**************************Tue Jan  6 20:32:39.793 2015 (UTC - 5:00)**************************
Loading Dump File [C:\Users\John\SysnativeBSODApps\010615-43000-01.dmp]
Windows 8 Kernel Version 9600 MP (4 procs) Free x64
Built by: [B]9600[/B].17476.amd64fre.winblue_r5.141029-1500
System Uptime:[B]0 days 0:32:27.700[/B]
*** ERROR: Module load completed but symbols could not be loaded for tcpip.sys
Probably caused by :[B]tcpip.sys ( tcpip+1f5982 )[/B]
BugCheck [B]50, {fffff6fb40000000, 0, 0, 6}[/B]
BugCheck Info: [URL="http://www.carrona.org/bsodindx.html#Example"]PAGE_FAULT_IN_NONPAGED_AREA (50)[/URL]
Arguments: 
Arg1: fffff6fb40000000, memory referenced.
Arg2: 0000000000000000, value 0 = read operation, 1 = write operation.
Arg3: 0000000000000000, If non-zero, the instruction address which referenced the bad memory
    address.
Arg4: 0000000000000006, (reserved)
BUGCHECK_STR:  AV
DEFAULT_BUCKET_ID:  WIN8_DRIVER_FAULT
PROCESS_NAME:  System
FAILURE_BUCKET_ID: [B]AV_tcpip+1f5982[/B]
CPUID:        "Intel(R) Core(TM) i5-3337U CPU @ 1.80GHz"
MaxSpeed:     1800
CurrentSpeed: [B]1796[/B]
  BIOS Version                  V2.11
  BIOS Release Date             02/25/2013
  Manufacturer                  Acer
  Product Name                  Aspire M5-581T
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
**************************Tue Jan  6 19:04:08.170 2015 (UTC - 5:00)**************************
Loading Dump File [C:\Users\John\SysnativeBSODApps\010615-25765-01.dmp]
Windows 8 Kernel Version 9600 MP (4 procs) Free x64
Built by: [B]9600[/B].17476.amd64fre.winblue_r5.141029-1500
System Uptime:[B]0 days 0:15:15.075[/B]
*** ERROR: Module load completed but symbols could not be loaded for tcpip.sys
Probably caused by :[B]tcpip.sys ( tcpip+1f5982 )[/B]
BugCheck [B]50, {fffff6fb40000000, 0, 0, 6}[/B]
BugCheck Info: [URL="http://www.carrona.org/bsodindx.html#Example"]PAGE_FAULT_IN_NONPAGED_AREA (50)[/URL]
Arguments: 
Arg1: fffff6fb40000000, memory referenced.
Arg2: 0000000000000000, value 0 = read operation, 1 = write operation.
Arg3: 0000000000000000, If non-zero, the instruction address which referenced the bad memory
    address.
Arg4: 0000000000000006, (reserved)
BUGCHECK_STR:  AV
DEFAULT_BUCKET_ID:  WIN8_DRIVER_FAULT
PROCESS_NAME:  System
FAILURE_BUCKET_ID: [B]AV_tcpip+1f5982[/B]
CPUID:        "Intel(R) Core(TM) i5-3337U CPU @ 1.80GHz"
MaxSpeed:     1800
CurrentSpeed: [B]1796[/B]
  BIOS Version                  V2.11
  BIOS Release Date             02/25/2013
  Manufacturer                  Acer
  Product Name                  Aspire M5-581T
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
**************************Tue Jan  6 18:22:41.362 2015 (UTC - 5:00)**************************
Loading Dump File [C:\Users\John\SysnativeBSODApps\010615-34859-01.dmp]
Windows 8 Kernel Version 9600 MP (4 procs) Free x64
Built by: [B]9600[/B].17476.amd64fre.winblue_r5.141029-1500
System Uptime:[B]0 days 18:37:15.185[/B]
*** ERROR: Module load completed but symbols could not be loaded for tcpip.sys
Probably caused by :[B]tcpip.sys ( tcpip+1f5982 )[/B]
BugCheck [B]50, {fffff6fb40000000, 0, 0, 6}[/B]
BugCheck Info: [URL="http://www.carrona.org/bsodindx.html#Example"]PAGE_FAULT_IN_NONPAGED_AREA (50)[/URL]
Arguments: 
Arg1: fffff6fb40000000, memory referenced.
Arg2: 0000000000000000, value 0 = read operation, 1 = write operation.
Arg3: 0000000000000000, If non-zero, the instruction address which referenced the bad memory
    address.
Arg4: 0000000000000006, (reserved)
BUGCHECK_STR:  AV
DEFAULT_BUCKET_ID:  WIN8_DRIVER_FAULT
PROCESS_NAME:  System
FAILURE_BUCKET_ID: [B]AV_tcpip+1f5982[/B]
CPUID:        "Intel(R) Core(TM) i5-3337U CPU @ 1.80GHz"
MaxSpeed:     1800
CurrentSpeed: [B]1796[/B]
  BIOS Version                  V2.11
  BIOS Release Date             02/25/2013
  Manufacturer                  Acer
  Product Name                  Aspire M5-581T
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
**************************Mon Jan  5 23:45:00.149 2015 (UTC - 5:00)**************************
Loading Dump File [C:\Users\John\SysnativeBSODApps\010515-28078-01.dmp]
Windows 8 Kernel Version 9600 MP (4 procs) Free x64
Built by: [B]9600[/B].17476.amd64fre.winblue_r5.141029-1500
System Uptime:[B]0 days 4:40:57.050[/B]
*** ERROR: Module load completed but symbols could not be loaded for tcpip.sys
Probably caused by :[B]tcpip.sys ( tcpip+1f5982 )[/B]
BugCheck [B]50, {fffff6fb40000000, 0, 0, 6}[/B]
BugCheck Info: [URL="http://www.carrona.org/bsodindx.html#Example"]PAGE_FAULT_IN_NONPAGED_AREA (50)[/URL]
Arguments: 
Arg1: fffff6fb40000000, memory referenced.
Arg2: 0000000000000000, value 0 = read operation, 1 = write operation.
Arg3: 0000000000000000, If non-zero, the instruction address which referenced the bad memory
    address.
Arg4: 0000000000000006, (reserved)
BUGCHECK_STR:  AV
DEFAULT_BUCKET_ID:  WIN8_DRIVER_FAULT
PROCESS_NAME:  System
FAILURE_BUCKET_ID: [B]AV_tcpip+1f5982[/B]
CPUID:        "Intel(R) Core(TM) i5-3337U CPU @ 1.80GHz"
MaxSpeed:     1800
CurrentSpeed: [B]1796[/B]
  BIOS Version                  V2.11
  BIOS Release Date             02/25/2013
  Manufacturer                  Acer
  Product Name                  Aspire M5-581T
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
**************************Mon Jan  5 19:03:31.271 2015 (UTC - 5:00)**************************
Loading Dump File [C:\Users\John\SysnativeBSODApps\010515-26062-01.dmp]
Windows 8 Kernel Version 9600 MP (4 procs) Free x64
Built by: [B]9600[/B].17476.amd64fre.winblue_r5.141029-1500
System Uptime:[B]0 days 17:47:55.175[/B]
*** ERROR: Module load completed but symbols could not be loaded for tcpip.sys
Probably caused by :[B]tcpip.sys ( tcpip+1f5982 )[/B]
BugCheck [B]50, {fffff6fb40000000, 0, 0, 6}[/B]
BugCheck Info: [URL="http://www.carrona.org/bsodindx.html#Example"]PAGE_FAULT_IN_NONPAGED_AREA (50)[/URL]
Arguments: 
Arg1: fffff6fb40000000, memory referenced.
Arg2: 0000000000000000, value 0 = read operation, 1 = write operation.
Arg3: 0000000000000000, If non-zero, the instruction address which referenced the bad memory
    address.
Arg4: 0000000000000006, (reserved)
BUGCHECK_STR:  AV
DEFAULT_BUCKET_ID:  WIN8_DRIVER_FAULT
PROCESS_NAME:  System
FAILURE_BUCKET_ID: [B]AV_tcpip+1f5982[/B]
CPUID:        "Intel(R) Core(TM) i5-3337U CPU @ 1.80GHz"
MaxSpeed:     1800
CurrentSpeed: [B]1796[/B]
  BIOS Version                  V2.11
  BIOS Release Date             02/25/2013
  Manufacturer                  Acer
  Product Name                  Aspire M5-581T
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
**************************Mon Jan  5 01:15:03.913 2015 (UTC - 5:00)**************************
Loading Dump File [C:\Users\John\SysnativeBSODApps\010415-36500-01.dmp]
Windows 8 Kernel Version 9600 MP (4 procs) Free x64
Built by: [B]9600[/B].17476.amd64fre.winblue_r5.141029-1500
System Uptime:[B]3 days 4:18:32.815[/B]
*** ERROR: Module load completed but symbols could not be loaded for tcpip.sys
Probably caused by :[B]tcpip.sys ( tcpip+1f5982 )[/B]
BugCheck [B]50, {fffff6fb40000000, 0, 0, 6}[/B]
BugCheck Info: [URL="http://www.carrona.org/bsodindx.html#Example"]PAGE_FAULT_IN_NONPAGED_AREA (50)[/URL]
Arguments: 
Arg1: fffff6fb40000000, memory referenced.
Arg2: 0000000000000000, value 0 = read operation, 1 = write operation.
Arg3: 0000000000000000, If non-zero, the instruction address which referenced the bad memory
    address.
Arg4: 0000000000000006, (reserved)
BUGCHECK_STR:  AV
DEFAULT_BUCKET_ID:  WIN8_DRIVER_FAULT
PROCESS_NAME:  System
FAILURE_BUCKET_ID: [B]AV_tcpip+1f5982[/B]
CPUID:        "Intel(R) Core(TM) i5-3337U CPU @ 1.80GHz"
MaxSpeed:     1800
CurrentSpeed: [B]1796[/B]
  BIOS Version                  V2.11
  BIOS Release Date             02/25/2013
  Manufacturer                  Acer
  Product Name                  Aspire M5-581T
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
**************************Thu Jan  1 20:56:03.891 2015 (UTC - 5:00)**************************
Loading Dump File [C:\Users\John\SysnativeBSODApps\010115-29156-01.dmp]
Windows 8 Kernel Version 9600 MP (4 procs) Free x64
Built by: [B]9600[/B].17476.amd64fre.winblue_r5.141029-1500
System Uptime:[B]0 days 2:24:26.796[/B]
*** ERROR: Module load completed but symbols could not be loaded for tcpip.sys
Probably caused by :[B]tcpip.sys ( tcpip+1f5982 )[/B]
BugCheck [B]50, {fffff6fb40000000, 0, 0, 6}[/B]
BugCheck Info: [URL="http://www.carrona.org/bsodindx.html#Example"]PAGE_FAULT_IN_NONPAGED_AREA (50)[/URL]
Arguments: 
Arg1: fffff6fb40000000, memory referenced.
Arg2: 0000000000000000, value 0 = read operation, 1 = write operation.
Arg3: 0000000000000000, If non-zero, the instruction address which referenced the bad memory
    address.
Arg4: 0000000000000006, (reserved)
BUGCHECK_STR:  AV
DEFAULT_BUCKET_ID:  WIN8_DRIVER_FAULT
PROCESS_NAME:  System
FAILURE_BUCKET_ID: [B]AV_tcpip+1f5982[/B]
CPUID:        "Intel(R) Core(TM) i5-3337U CPU @ 1.80GHz"
MaxSpeed:     1800
CurrentSpeed: [B]1796[/B]
  BIOS Version                  V2.11
  BIOS Release Date             02/25/2013
  Manufacturer                  Acer
  Product Name                  Aspire M5-581T
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
**************************Thu Jan  1 18:31:05.555 2015 (UTC - 5:00)**************************
Loading Dump File [C:\Users\John\SysnativeBSODApps\010115-31437-01.dmp]
Windows 8 Kernel Version 9600 MP (4 procs) Free x64
Built by: [B]9600[/B].17476.amd64fre.winblue_r5.141029-1500
System Uptime:[B]0 days 1:24:10.457[/B]
*** ERROR: Module load completed but symbols could not be loaded for tcpip.sys
Probably caused by :[B]tcpip.sys ( tcpip+1f5982 )[/B]
BugCheck [B]50, {fffff6fb40000000, 0, 0, 6}[/B]
BugCheck Info: [URL="http://www.carrona.org/bsodindx.html#Example"]PAGE_FAULT_IN_NONPAGED_AREA (50)[/URL]
Arguments: 
Arg1: fffff6fb40000000, memory referenced.
Arg2: 0000000000000000, value 0 = read operation, 1 = write operation.
Arg3: 0000000000000000, If non-zero, the instruction address which referenced the bad memory
    address.
Arg4: 0000000000000006, (reserved)
BUGCHECK_STR:  AV
DEFAULT_BUCKET_ID:  WIN8_DRIVER_FAULT
PROCESS_NAME:  System
FAILURE_BUCKET_ID: [B]AV_tcpip+1f5982[/B]
CPUID:        "Intel(R) Core(TM) i5-3337U CPU @ 1.80GHz"
MaxSpeed:     1800
CurrentSpeed: [B]1796[/B]
  BIOS Version                  V2.11
  BIOS Release Date             02/25/2013
  Manufacturer                  Acer
  Product Name                  Aspire M5-581T
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
**************************Thu Jan  1 17:06:28.680 2015 (UTC - 5:00)**************************
Loading Dump File [C:\Users\John\SysnativeBSODApps\010115-38593-01.dmp]
Windows 8 Kernel Version 9600 MP (4 procs) Free x64
Built by: [B]9600[/B].17476.amd64fre.winblue_r5.141029-1500
System Uptime:[B]0 days 16:09:58.653[/B]
*** ERROR: Module load completed but symbols could not be loaded for tcpip.sys
Probably caused by :[B]tcpip.sys ( tcpip+1f5982 )[/B]
BugCheck [B]50, {fffff6fb40000000, 0, 0, 6}[/B]
BugCheck Info: [URL="http://www.carrona.org/bsodindx.html#Example"]PAGE_FAULT_IN_NONPAGED_AREA (50)[/URL]
Arguments: 
Arg1: fffff6fb40000000, memory referenced.
Arg2: 0000000000000000, value 0 = read operation, 1 = write operation.
Arg3: 0000000000000000, If non-zero, the instruction address which referenced the bad memory
    address.
Arg4: 0000000000000006, (reserved)
BUGCHECK_STR:  AV
DEFAULT_BUCKET_ID:  WIN8_DRIVER_FAULT
PROCESS_NAME:  System
FAILURE_BUCKET_ID: [B]AV_tcpip+1f5982[/B]
CPUID:        "Intel(R) Core(TM) i5-3337U CPU @ 1.80GHz"
MaxSpeed:     1800
CurrentSpeed: [B]1796[/B]
  BIOS Version                  V2.11
  BIOS Release Date             02/25/2013
  Manufacturer                  Acer
  Product Name                  Aspire M5-581T
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
[/FONT]

3rd Party Drivers:
The following is for information purposes only.
Any drivers in red should be updated or removed from your system. And should have been discussed in the body of my post.

Code:

[FONT=lucida console]**************************Thu Jan  8 16:21:21.585 2015 (UTC - 5:00)**************************
[COLOR=RED][B]NTIDrvr.sys                 Mon Apr 19 21:37:59 2010 (4BCD0577)[/B][/COLOR]
[COLOR=RED][B]UBHelper.sys                Tue Jul  6 00:19:26 2010 (4C32AECE)[/B][/COLOR]
irstrtdv.sys                Thu Jul 12 19:58:02 2012 (4FFF648A)
aPs2Kb2Hid.sys              Sat Aug  4 06:19:18 2012 (501CF726)
ETD.sys                     Tue Nov 20 02:25:48 2012 (50AB307C)
spuvcdriver1_x64.sys        Fri Jan 11 04:07:53 2013 (50EFD669)
fwldapob.sys                Sun Apr  7 13:19:48 2013 (5161AAB4)
SYMEVENT64x86.SYS           Fri Jul 26 22:26:58 2013 (51F32FF2)
SYMDS64.SYS                 Tue Jul 30 19:29:08 2013 (51F84C44)
intelppm.sys                Thu Aug 22 04:46:35 2013 (5215CFEB)
dump_storahci.sys           Thu Aug 22 07:40:39 2013 (5215F8B7)
uxstyle.sys                 Mon Sep 23 07:19:02 2013 (524023A6)
ccSetx64.sys                Mon Sep 23 23:58:04 2013 (52410DCC)
k57nd60a.sys                Wed Oct 30 03:14:03 2013 (5270B1BB)
excfs.sys                   Mon Nov 18 17:00:10 2013 (528A8DEA)
excsd.sys                   Mon Nov 18 17:00:13 2013 (528A8DED)
SYMNETS.SYS                 Thu Feb 13 06:25:14 2014 (52FCAB9A)
SYMEFA64.SYS                Thu Feb 27 18:32:07 2014 (530FCAF7)
iwdbus.sys                  Thu Mar 13 17:59:14 2014 (53222A32)
RTKVHD64.sys                Tue May  6 09:14:37 2014 (5368E03D)
Ironx64.SYS                 Tue May 20 18:27:42 2014 (537BD6DE)
SRTSPX64.SYS                Fri Jun 13 13:27:22 2014 (539B347A)
NETwew00.sys                Wed Jul  2 10:57:07 2014 (53B41DC3)
IntcDAud.sys                Tue Jul  8 09:58:59 2014 (53BBF923)
EX64.SYS                    Mon Aug 11 06:19:41 2014 (53E898BD)
ENG64.SYS                   Mon Aug 11 06:25:04 2014 (53E89A00)
SRTSP64.SYS                 Wed Aug 20 16:56:53 2014 (53F50B95)
BHDrvx64.sys                Tue Sep 23 22:12:51 2014 (542228A3)
igdkmd64.sys                Thu Oct 23 07:01:59 2014 (5448E027)
IDSvia64.sys                Fri Oct 31 23:14:03 2014 (54544FFB)
Smb_driver_Intel.sys        Tue Nov 11 15:04:38 2014 (54626BD6)
eeCtrl64.sys                Tue Nov 25 15:15:44 2014 (5474E370)
EraserUtilRebootDrv.sys     Tue Nov 25 15:15:44 2014 (5474E370)
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
**************************Wed Jan  7 20:10:22.592 2015 (UTC - 5:00)**************************
RtsPStor.sys                Thu Mar 14 04:00:32 2013 (514183A0)
[/FONT]

rukiru · Jan 10, 2015

Thanks usasma,

I'll give Driver Verifier a shot again with those settings and get back to you with the crash dumps. Also, yes, I'm ready to try a fresh install of windows (via the Restore Factory Settings option in Acer Recovery Management).

Regarding the NTI drivers, I found out that the cd drive wasn't working without those drivers, so I had to rename them from .BAD to .sys in order to boot Memtest from the CD. I kept getting BSODs while those drivers were disabled/renamed though, so they shouldn't be the cause of the problem.

Mysers Briggs · Jan 10, 2015

Looks like a network driver bug to me, failing RAM is a possibility but I doubt it.
It appears an attempt to terminate a connection crashes the system, by accessing the wrong memory address; miscalculated instruction pointer.

Code:

0: kd> .bugcheck
Bugcheck code 00000050
Arguments fffff6fb`40000000 00000000`00000000 00000000`00000000 00000000`00000006

[COLOR=#800080]//Referenced address is consistent, most likely a bad IP[/COLOR]

0: kd> kn
 # Child-SP          RetAddr           Call Site
00 ffffd001`18cbbaa8 fffff801`c7f780d4 nt!KeBugCheckEx
01 ffffd001`18cbbab0 fffff801`c7e59fc7 nt!MiZeroFault+0x15124
02 ffffd001`18cbbba0 fffff801`c7f5cd2f nt!MmAccessFault+0x287
03 ffffd001`18cbbd60 fffff801`c7ea4ed8 nt!KiPageFault+0x12f
04 ffffd001`18cbbef0 fffff801`c80a572c nt!ExFreeLargePool+0x78
05 ffffd001`18cbbf90 fffff801`bb9f5982 nt!ExFreePoolWithTag+0x72c
06 ffffd001`18cbc080 fffff801`bb9ed9f5 tcpip!RssDeleteBinding+0x8a
07 ffffd001`18cbc0c0 fffff801`bb89b3f5 tcpip!RssControlDeleteInterface+0x2711
08 ffffd001`18cbc130 fffff801`bb8acc71 tcpip!OlmNotifyDeleteInterface+0x25
09 ffffd001`18cbc160 fffff801`bb89abc0 tcpip!IppNotifyInterfaceChangeToNlClients+0x171
0a ffffd001`18cbc1f0 fffff801`bb89ae5c tcpip!IpFlcDeleteInterface+0x1b0
0b ffffd001`18cbc260 fffff801`bb89b925 tcpip!FlpDeleteInterface+0xa0
0c ffffd001`18cbc2d0 fffff801`bb742b2b tcpip!FlUnbindAdapter+0xa5
0d ffffd001`18cbc350 fffff801`bb780ed0 ndis!ndisInvokeUnbindAdapter+0x2f
0e ffffd001`18cbc390 fffff801`bb742ac4 ndis!ndisUnbindProtocolOpen+0x168
0f ffffd001`18cbc4b0 fffff801`bb7488e5 ndis!ndisUnbindEachProtocolOpenOnMiniport+0x70
10 ffffd001`18cbc4f0 fffff801`bb74801c ndis!Ndis::BindEngine::Iterate+0x86d
11 ffffd001`18cbc700 fffff801`bb749ba4 ndis!Ndis::BindEngine::UpdateBindings+0x64
12 ffffd001`18cbc730 fffff801`bb747d44 ndis!Ndis::BindEngine::DispatchPendingWork+0x50
13 ffffd001`18cbc760 fffff801`bb74a248 ndis!Ndis::BindEngine::ApplyBindChanges+0x58
14 ffffd001`18cbc7b0 fffff801`bb784242 ndis!ndisMSetMiniportReadyForBinding+0x88
15 ffffd001`18cbc890 fffff801`bb74f0f9 ndis!ndisPnPRemoveDevice+0x1ae
16 ffffd001`18cbcae0 fffff801`bb74f569 ndis!ndisPnPRemoveDeviceEx+0x59
17 ffffd001`18cbcb10 fffff801`c7e7facc ndis!ndisPnPIrpSurpriseRemovalInner+0x79
18 ffffd001`18cbcb50 fffff801`c7f03440 nt!ExpWorkerThread+0x28c
19 ffffd001`18cbcc00 fffff801`c7f590c6 nt!PspSystemThreadStartup+0x58
1a ffffd001`18cbcc60 00000000`00000000 nt!KiStartSystemThread+0x16

[COLOR=#800080]//Demand zero fault, page being accessed for the first time, yet it is invalid[/COLOR]

0: kd> !pte fffff6fb`40000000
                                           VA fffff68000000000
PXE at FFFFF6FB7DBEDF68    PPE at FFFFF6FB7DBED000    PDE at FFFFF6FB7DA00000    PTE at FFFFF6FB40000000
contains 80000000001AB063  contains 02500000005F7867  contains 0000000000000000
GetUlongFromAddress: unable to read from fffff801c8165104
pfn 1ab       ---DA--KWEV  pfn 5f7       ---DA--UWEV  not valid

If you haven't done already, update your network drivers for your wireless and ethernet connections.

usasma · Jan 11, 2015

Not a problem with the rename. We'll wait and see what happens.

rukiru · Jan 11, 2015

Got a couple BSODs with the new Driver Verifier settings and had to use system restore to get through the whole boot process. Anyways, here are the new crash dumps: View attachment 56453

Whatever different settings you used this time seemed to work because it's now specifically blaming UXStyle.sys (which I find a bit weird because I installed that AFTER I began getting the BSOD). I'll try uninstalling UX Style and seeing if that works.

usasma · Jan 12, 2015

BSOD's are complicated critters and one driver can affect another driver.
This doesn't mean that UXStyle is the only thing that's to blame.
And, because of the history that you've given, I wouldn't be surprised if the BSOD's remain after removing UXStyle.

Just leave it (UXStyle) uninstalled until you're satisfied that the BSOD's have stopped completely (a couple of weeks at a minimum).
Then try it again to see if it still causes BSOD's.

Don't forget to turn Driver Verifier off. To do this, open up verifier.exe and select "Delete existing settings", then click on "Finish" and reboot for the changes to take effect.

Analysis:
The following is for informational purposes only.

Code:

[font=lucida console]**************************Sun Jan 11 15:19:54.251 2015 (UTC - 5:00)**************************
Loading Dump File [C:\Users\John\SysnativeBSODApps\011115-51968-01.dmp]
Windows 8 Kernel Version 9600 MP (4 procs) Free x64
Built by: [B]9600[/B].17476.amd64fre.winblue_r5.141029-1500
System Uptime:[B]0 days 0:00:28.232[/B]
*** WARNING: Unable to verify timestamp for uxstyle.sys
*** ERROR: Module load completed but symbols could not be loaded for uxstyle.sys
Probably caused by :[B]uxstyle.sys ( uxstyle+1a0f )[/B]
BugCheck [B]D6, {ffffcf819048f000, 0, fffff800ca694a0f, 0}[/B]
BugCheck Info: [url=http://www.carrona.org/bsodindx.html#Example]DRIVER_PAGE_FAULT_BEYOND_END_OF_ALLOCATION (d6)[/url]
Arguments: 
Arg1: ffffcf819048f000, memory referenced
Arg2: 0000000000000000, value 0 = read operation, 1 = write operation
Arg3: fffff800ca694a0f, if non-zero, the address which referenced memory.
Arg4: 0000000000000000, (reserved)
BUGCHECK_STR:  0xD6
DEFAULT_BUCKET_ID: [B][COLOR=RED]VERIFIER_ENABLED_VISTA_MINIDUMP[/COLOR][/B]
PROCESS_NAME:  System
FAILURE_BUCKET_ID: [B]0xD6_VRF_uxstyle+1a0f[/B]
CPUID:        "Intel(R) Core(TM) i5-3337U CPU @ 1.80GHz"
MaxSpeed:     1800
CurrentSpeed: [B]1796[/B]
  BIOS Version                  V2.11
  BIOS Release Date             02/25/2013
  Manufacturer                  Acer
  Product Name                  Aspire M5-581T
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
[/font]

3rd Party Drivers:
The following is for information purposes only.
Any drivers in red should be updated or removed from your system. And should have been discussed in the body of my post.

Code:

[font=lucida console]**************************Sun Jan 11 15:19:54.251 2015 (UTC - 5:00)**************************
[COLOR=RED][B]NTIDrvr.sys                 Mon Apr 19 21:37:59 2010 (4BCD0577)[/B][/COLOR]
[COLOR=RED][B]UBHelper.sys                Tue Jul  6 00:19:26 2010 (4C32AECE)[/B][/COLOR]
irstrtdv.sys                Thu Jul 12 19:58:02 2012 (4FFF648A)
aPs2Kb2Hid.sys              Sat Aug  4 06:19:18 2012 (501CF726)
ETD.sys                     Tue Nov 20 02:25:48 2012 (50AB307C)
spuvcdriver1_x64.sys        Fri Jan 11 04:07:53 2013 (50EFD669)
SYMEVENT64x86.SYS           Fri Jul 26 22:26:58 2013 (51F32FF2)
SYMDS64.SYS                 Tue Jul 30 19:29:08 2013 (51F84C44)
intelppm.sys                Thu Aug 22 04:46:35 2013 (5215CFEB)
dump_storahci.sys           Thu Aug 22 07:40:39 2013 (5215F8B7)
uxstyle.sys                 Mon Sep 23 07:19:02 2013 (524023A6)
ccSetx64.sys                Mon Sep 23 23:58:04 2013 (52410DCC)
k57nd60a.sys                Wed Oct 30 03:14:03 2013 (5270B1BB)
excfs.sys                   Mon Nov 18 17:00:10 2013 (528A8DEA)
excsd.sys                   Mon Nov 18 17:00:13 2013 (528A8DED)
SYMNETS.SYS                 Thu Feb 13 06:25:14 2014 (52FCAB9A)
SYMEFA64.SYS                Thu Feb 27 18:32:07 2014 (530FCAF7)
iwdbus.sys                  Thu Mar 13 17:59:14 2014 (53222A32)
RTKVHD64.sys                Tue May  6 09:14:37 2014 (5368E03D)
Ironx64.SYS                 Tue May 20 18:27:42 2014 (537BD6DE)
SRTSPX64.SYS                Fri Jun 13 13:27:22 2014 (539B347A)
NETwew00.sys                Wed Jul  2 10:57:07 2014 (53B41DC3)
IntcDAud.sys                Tue Jul  8 09:58:59 2014 (53BBF923)
BHDrvx64.sys                Tue Sep 23 22:12:51 2014 (542228A3)
igdkmd64.sys                Thu Oct 23 07:01:59 2014 (5448E027)
Smb_driver_Intel.sys        Tue Nov 11 15:04:38 2014 (54626BD6)
eeCtrl64.sys                Tue Nov 25 15:15:44 2014 (5474E370)
EraserUtilRebootDrv.sys     Tue Nov 25 15:15:44 2014 (5474E370)
IDSvia64.sys                Thu Dec 18 17:58:53 2014 (54935C2D)
[/font]

Paged Fault in Nonpaged Area BSOD on Wake

New Member

My Computer

Mr. Cranky Pants

My Computer

New Member

My Computer

New Member

My Computer

Mr. Cranky Pants

My Computer

New Member

My Computer

Mr. Cranky Pants

My Computer

New Member

My Computer

Mr. Cranky Pants

My Computer

New Member

My Computer

OMG Debugger!

My Computer

Mr. Cranky Pants

My Computer

New Member

My Computer

New Member

My Computer

Mr. Cranky Pants

My Computer

New Member

My Computer

Member

My Computer

Mr. Cranky Pants

My Computer

New Member

My Computer

Mr. Cranky Pants

My Computer