Windows 8 and 8.1 Forums


NOEXECUTE_MEMORY BSOD and strange behaviour on restart

  1. #1


    Posts : 2
    Windows 8.1 Pro x64

    NOEXECUTE_MEMORY BSOD and strange behaviour on restart


    My first post so I hope I've adhered to the correct posting protocol.

    In the space of a couple of hours I've had the same BSOD, ATTEMPTED_EXECUTE_OF_NOEXECUTE_MEMORY, twice now and upon restarting Windows behaves very oddly for a few minutes. Namely it boots into Windows within seconds but then everything slows to a crawl before springing back into life.

    I think I've attached the necessary information and all of my system specs have been added in the relevant place.

    Any assistance would be appreciated.

    Griff

      My System SpecsSystem Spec

  2. #2


    Posts : 5,139
    Win8.1Pro - Finally!!!


    Please do the following:
    - open Event Viewer (run eventvwr.msc from the "Run" dialog))
    - expand the Custom Views category (left click on the > next to the words "Custom Views")
    - right click on Administrative Events
    - select "Save all Events in Custom View as..."
    - save the file as Admin.evtx
    - zip up the file (right click on it, select "Send to", select "Compressed (zipped) folder")
    - upload it with your next post (if it's too big, then upload it to a free file-hosting service and post a link here).

    Only 7 Windows Updates installed. Most systems have 10 - 12. Please visit Windows Update and get ALL available updates (it may take several trips to get them all).

    I don't see trace of the Qualcomm Atheros Killer Service/KillerNetManager, but you have a Killer card and the services are known to cause BSOD's. Please follow the workaround instructions here (but don't worry if you don't find anything):
    First, open the Run dialog (Win + R keys) and type in "services.msc" (without the quotes) and press Enter
    Scroll down and locate the "Qualcomm Atheros Killer Service" and right click on it. Select "Stop"
    Right click on it again and this time select "Properties"
    In the dropdown box for "Startup type", select "Disabled", then click on the "OK" button at the bottom of the window

    Next, open Task Manager (right click on TaskBar and select "Task Manager")
    Click on the "More details" dropdown (if present)
    Click on the "Startup" tab
    Scroll down and locate the "KillerNetManager" entry, right click on it and select "Disable"
    There may also be an Install Shield (with the Killer gaming K next to it), if so Right click on it and select "Disable"
    Finally, restart the system in order for the changes to take affect.
    At times the Killer Network Manager will continue to load. If so, it's usually listed in the MSINFO32...Software Environment...Startup Programs section. If it is, please try this:
    It may be that the instructions aren't stopping everything.
    In some cases, there's a program running out of the Program Files/Program Files (x86) directory.
    "c:\program files\qualcomm atheros\killer network manager\killer~1.exe" (NOTE: killer~1.exe is most likely killernetmanager.exe)
    In other cases, there's a program running out of c:\windows\installer\{Long string of letters, numbers, and dashes}\networkmanager.exe_130c27d738f34c89bddf21bcfd74b56d.exe (the long string of letters and numbers may change)

    Here's some things to try
    1) Please see if there are any entries in the Startup tab of Task Manager that are related to Qualcomm/Atheros/Killer Network Manager (and NOT the card itself) and disable them (please let us know what you find) Be careful as the wrong selection can disable the network card.
    2) Check in "msconfig" for any entries that aren't in the Startup tab of Task Manager. Let us know if you find any Qualcomm/Atheros/Killer entries there (we'll disable them differently if they are there).
    3) Locate the "c:\program files\qualcomm atheros\killer network manager\killer~1.exe" and rename the .exe to .BAD (the killer~1 is actually a filename that starts with killer and ends with .exe) There will be an error in event viewer, but it'll stop the bugger from loading.
    4) Locate the "c:\windows\installer\{Long string of letters, numbers, and dashes}\networkmanager.exe_130c27d738f34c89bddf21bcfd74b56d.exe" entry and rename the .exe to .BAD (the long string of letters and numbers may change)

    Just FYI - here are the MSI workaround instructions: MSI USA
    Please update these older drivers. Links are included to assist in looking up the source of the drivers. If unable to find an update, please remove (un-install) the program responsible for that driver. DO NOT manually delete/rename the driver as it may make the system unbootable! :

    LGPBTDD.sys Wed Jul 1 14:47:52 2009 (4A4BAF58)
    Logitech GamePanel Software
    http://www.carrona.org/drivers/driver.php?id=LGPBTDD.sys

    LGVirHid.sys Mon Nov 23 20:36:48 2009 (4B0B38B0)
    Logitech Gamepanel Virtual HID Device Driver
    http://www.carrona.org/drivers/driver.php?id=LGVirHid.sys

    LGBusEnum.sys Mon Nov 23 20:36:48 2009 (4B0B38B0)
    Logitech Keyboard
    http://www.carrona.org/drivers/driver.php?id=LGBusEnum.sys

    NTIOLib_X64.sys Wed Oct 20 02:45:49 2010 (4CBE901D)
    MSI Afterburner driver (known BSOD issues with Windows) Also found to be a part of MSI Live Update 5
    http://www.carrona.org/drivers/driver.php?id=NTIOLib_X64.sys

    WPRO_41_2001.sys Mon Nov 7 16:04:48 2011 (4EB847F0)
    CACE Technologies WinPcap Packet Driver
    http://www.carrona.org/drivers/driver.php?id=WPRO_41_2001.sys

    If all of this doesn't stop the BSOD's, please run Driver Verifier according to these instructions: Driver Verifier Settings




    Analysis:
    The following is for informational purposes only.
    Code:
    **************************Mon Oct 21 14:28:27.779 2013 (UTC - 4:00)**************************
    Loading Dump File [C:\Users\John\SysnativeBSODApps\102113-4437-01.dmp]
    Windows 8 Kernel Version 9600 MP (4 procs) Free x64
    Built by: 9600.16404.amd64fre.winblue_gdr.130913-2141
    System Uptime:0 days 2:15:09.390
    Probably caused by :ntkrnlmp.exe ( nt! ?? ::FNODOBFM::`string'+457f8 )
    BugCheck FC, {fffff803029cca60, 80000000043cc963, fffff803029cc810, 0}
    BugCheck Info: ATTEMPTED_EXECUTE_OF_NOEXECUTE_MEMORY (fc)
    Arguments: 
    Arg1: fffff803029cca60, Virtual address for the attempted execute.
    Arg2: 80000000043cc963, PTE contents.
    Arg3: fffff803029cc810, (reserved)
    Arg4: 0000000000000000, (reserved)
    BUGCHECK_STR:  0xFC
    DEFAULT_BUCKET_ID:  WIN8_DRIVER_FAULT
    PROCESS_NAME:  System
    FAILURE_BUCKET_ID: 0xFC_nt!_??_::FNODOBFM::_string_
    CPUID:        "Intel(R) Core(TM) i5-4670K CPU @ 3.40GHz"
    MaxSpeed:     3400
    CurrentSpeed: 3400
      BIOS Version                  V1.5
      BIOS Release Date             09/11/2013
      Manufacturer                  MSI
      Product Name                  MS-7845
    ииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииии``
    **************************Mon Oct 21 12:12:52.460 2013 (UTC - 4:00)**************************
    Loading Dump File [C:\Users\John\SysnativeBSODApps\102113-4687-01.dmp]
    Windows 8 Kernel Version 9600 MP (4 procs) Free x64
    Built by: 9600.16404.amd64fre.winblue_gdr.130913-2141
    System Uptime:3 days 11:45:03.070
    Probably caused by :ntkrnlmp.exe ( nt!KiSelectReadyThreadEx+c7 )
    BugCheck A, {10388, 2, 0, fffff802f1a5d6e7}
    BugCheck Info: IRQL_NOT_LESS_OR_EQUAL (a)
    Arguments: 
    Arg1: 0000000000010388, memory referenced
    Arg2: 0000000000000002, IRQL
    Arg3: 0000000000000000, bitfield :
        bit 0 : value 0 = read operation, 1 = write operation
        bit 3 : value 0 = not an execute operation, 1 = execute operation (only on chips which support this level of status)
    Arg4: fffff802f1a5d6e7, address which referenced memory
    BUGCHECK_STR:  AV
    DEFAULT_BUCKET_ID:  WIN8_DRIVER_FAULT
    PROCESS_NAME:  svchost.exe
    FAILURE_BUCKET_ID: AV_nt!KiSelectReadyThreadEx
    CPUID:        "Intel(R) Core(TM) i5-4670K CPU @ 3.40GHz"
    MaxSpeed:     3400
    CurrentSpeed: 3400
      BIOS Version                  V1.5
      BIOS Release Date             09/11/2013
      Manufacturer                  MSI
      Product Name                  MS-7845
    ииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииииии``
    
    3rd Party Drivers:
    The following is for information purposes only.
    Any drivers in red should be updated or removed from your system. And should have been discussed in the body of my post.
    Code:
    **************************Mon Oct 21 14:28:27.779 2013 (UTC - 4:00)**************************
    LGPBTDD.sys                 Wed Jul  1 14:47:52 2009 (4A4BAF58)
    LGVirHid.sys                Mon Nov 23 20:36:48 2009 (4B0B38B0)
    LGBusEnum.sys               Mon Nov 23 20:36:48 2009 (4B0B38B0)
    NTIOLib_X64.sys             Wed Oct 20 02:45:49 2010 (4CBE901D)
    WPRO_41_2001.sys            Mon Nov  7 16:04:48 2011 (4EB847F0)
    ISCTD64.sys                 Tue Nov 27 14:52:34 2012 (50B51A02)
    e22w8x64.sys                Mon Dec  3 10:42:37 2012 (50BCC86D)
    imsevent.sys                Tue Jan  8 14:33:33 2013 (50EC748D)
    ikbevent.sys                Tue Jan  8 14:34:06 2013 (50EC74AE)
    PSINKNC.sys                 Mon May 27 14:17:39 2013 (51A3A343)
    PSINAflt.sys                Mon May 27 14:18:09 2013 (51A3A361)
    PSINProc.sys                Mon May 27 14:19:34 2013 (51A3A3B6)
    NNSPRV.sys                  Tue May 28 05:34:37 2013 (51A47A2D)
    NNSALPC.sys                 Tue May 28 05:38:34 2013 (51A47B1A)
    NNSTLSC.sys                 Tue May 28 05:41:35 2013 (51A47BCF)
    NNSSTRM.sys                 Tue May 28 05:46:07 2013 (51A47CDF)
    NNSHTTP.sys                 Tue May 28 05:55:24 2013 (51A47F0C)
    NNSPICC.sys                 Tue May 28 05:58:11 2013 (51A47FB3)
    NNSPROT.sys                 Tue May 28 06:03:39 2013 (51A480FB)
    NNSIDS.sys                  Tue May 28 06:12:43 2013 (51A4831B)
    NNSPOP3.sys                 Tue May 28 06:20:23 2013 (51A484E7)
    NNSSMTP.sys                 Tue May 28 06:29:24 2013 (51A48704)
    NNSPIHSW.sys                Tue May 28 06:32:02 2013 (51A487A2)
    NNSHTTPS.sys                Tue May 28 06:36:17 2013 (51A488A1)
    PSINProt.sys                Tue May 28 16:31:35 2013 (51A51427)
    cthda.sys                   Wed Jul  3 03:45:44 2013 (51D3D6A8)
    cthdb.sys                   Wed Jul  3 03:45:50 2013 (51D3D6AE)
    kerneld.x64                 Sat Jul  6 07:27:18 2013 (51D7FF16)
    PSINFile.sys                Wed Jul 17 06:29:20 2013 (51E67200)
    iaStorA.sys                 Thu Aug  1 21:39:52 2013 (51FB0DE8)
    dump_iaStorA.sys            Thu Aug  1 21:39:52 2013 (51FB0DE8)
    TeeDriverx64.sys            Mon Aug 19 13:23:31 2013 (52125493)
    intelppm.sys                Thu Aug 22 04:46:35 2013 (5215CFEB)
    NdisVirtualBus.sys          Thu Aug 22 07:36:25 2013 (5215F7B9)
    xusb22.sys                  Thu Aug 22 07:38:23 2013 (5215F82F)
    ahcache.sys                 Thu Aug 22 07:39:54 2013 (5215F88A)
    werkernel.sys               Thu Aug 22 07:40:24 2013 (5215F8A8)
    atikmpag.sys                Fri Aug 30 18:32:32 2013 (52211D80)
    atikmdag.sys                Fri Aug 30 20:02:50 2013 (522132AA)
    intelpep.sys                Thu Sep 19 03:12:46 2013 (523AA3EE)
    
    http://www.carrona.org/drivers/driver.php?id=LGPBTDD.sys
    http://www.carrona.org/drivers/driver.php?id=LGVirHid.sys
    http://www.carrona.org/drivers/driver.php?id=LGBusEnum.sys
    http://www.carrona.org/drivers/driver.php?id=NTIOLib_X64.sys
    http://www.carrona.org/drivers/driver.php?id=WPRO_41_2001.sys
    http://www.carrona.org/drivers/driver.php?id=ISCTD64.sys
    http://www.carrona.org/drivers/driver.php?id=e22w8x64.sys
    http://www.carrona.org/drivers/driver.php?id=imsevent.sys
    http://www.carrona.org/drivers/driver.php?id=ikbevent.sys
    http://www.carrona.org/drivers/driver.php?id=PSINKNC.sys
    http://www.carrona.org/drivers/driver.php?id=PSINAflt.sys
    http://www.carrona.org/drivers/driver.php?id=PSINProc.sys
    http://www.carrona.org/drivers/driver.php?id=NNSPRV.sys
    http://www.carrona.org/drivers/driver.php?id=NNSALPC.sys
    http://www.carrona.org/drivers/driver.php?id=NNSTLSC.sys
    http://www.carrona.org/drivers/driver.php?id=NNSSTRM.sys
    http://www.carrona.org/drivers/driver.php?id=NNSHTTP.sys
    http://www.carrona.org/drivers/driver.php?id=NNSPICC.sys
    http://www.carrona.org/drivers/driver.php?id=NNSPROT.sys
    http://www.carrona.org/drivers/driver.php?id=NNSIDS.sys
    http://www.carrona.org/drivers/driver.php?id=NNSPOP3.sys
    http://www.carrona.org/drivers/driver.php?id=NNSSMTP.sys
    http://www.carrona.org/drivers/driver.php?id=NNSPIHSW.sys
    NNSHTTPS.sys - this driver hasn't been added to the DRT as of this run. Please search Google/Bing for the driver if additional information is needed.
    http://www.carrona.org/drivers/driver.php?id=PSINProt.sys
    cthda.sys - this driver hasn't been added to the DRT as of this run. Please search Google/Bing for the driver if additional information is needed.
    cthdb.sys - this driver hasn't been added to the DRT as of this run. Please search Google/Bing for the driver if additional information is needed.
    http://www.carrona.org/drivers/driver.php?id=kerneld.x64
    http://www.carrona.org/drivers/driver.php?id=PSINFile.sys
    http://www.carrona.org/drivers/driver.php?id=iaStorA.sys
    http://www.carrona.org/drivers/driver.php?id=dump_iaStorA.sys
    http://www.carrona.org/drivers/driver.php?id=TeeDriverx64.sys
    http://www.carrona.org/drivers/driver.php?id=intelppm.sys
    NdisVirtualBus.sys - this driver hasn't been added to the DRT as of this run. Please search Google/Bing for the driver if additional information is needed.
    http://www.carrona.org/drivers/driver.php?id=xusb22.sys
    ahcache.sys - this driver hasn't been added to the DRT as of this run. Please search Google/Bing for the driver if additional information is needed.
    werkernel.sys - this driver hasn't been added to the DRT as of this run. Please search Google/Bing for the driver if additional information is needed.
    http://www.carrona.org/drivers/driver.php?id=atikmpag.sys
    http://www.carrona.org/drivers/driver.php?id=atikmdag.sys
    intelpep.sys - this driver hasn't been added to the DRT as of this run. Please search Google/Bing for the driver if additional information is needed.
      My System SpecsSystem Spec

  3. #3


    Posts : 2
    Windows 8.1 Pro x64


    Wow! Thanks for the detailed reply. I'll take some time to digest it and go through everything you posted.
      My System SpecsSystem Spec

NOEXECUTE_MEMORY BSOD and strange behaviour on restart
Related Threads
BSOD error 0xc0000001 - strange behaviour in BSOD Crashes and Debugging
Hi there, I have an Asus K450 laptop with W8.1 installed (came with 8, but I've upgraded). Didn't bring a recovery cd, only a recovery partition in the original hdd. I had 3 or 4 crashes with the 0xc0000001 error, but solved every single one of them by using the recovery tools (usually with a...
Strange Behaviour in BSOD Crashes and Debugging
Every morning my PC boots normally then freezes after about five minutes. I power it down completely then re-start it and it usually then operates correctly for the rest of the day. Rarely there are BSODs with inconsistent messages - by which I mean that these are rarely the same,-...
Hi guys, I have windows 8 pro version 64 bit in my Dell, Inspiron N4050 model.. and I never needed any driver to install before... for some time, my laptop r windows is showng strange behaviour... it didnt pick wifi signals from the next room and it does some time pick weak signal from 2, 3 rooms...
Ever since I installed Windows 8.1 on my laptop I've been having random strange behaviour and occasional BSOD's. I think its a driver issue but I need help finding which one is causing problems. Latest BSOD I had stated as reason: MULTIPLE IRP_COMPLETE_REQUESTS I attached a hwinfo output and...
When I open certain system dialogue windows, the list of items jump. The worst one is Device Manager. It's so jumpy I can hardly use it. It also happens when I open Charms, Change PC Settings, PC and Devices, Devices. The list jumps up and down. I have updated drivers to just everything. ...
Strange behaviour with IE10 in General Support
I have bought three Windows 8 64 bit machines and upgraded them all to Windows Pro. The three machines are different makes. All three machines have been added to our domain, and I am a domain admin. I have been trying to navigate to a secure site on a https address, one machine goes there...
Strange Account behaviour on Log In in User Accounts and Family Safety
This morning I cold booted my laptop and strangely after signing in it declared that it was "Preparing Windows." I was then taken to a desktop with empty Documents etc. folders. Panicking I went to the User Accounts and found all my folders and data intact but not accessible through the "account"...
Eight Forums Android App Eight Forums IOS App Follow us on Facebook