BSOD occurs sometimes, PFN_list_corrupt 0x0000004e?

kaeru · Mar 6, 2014

Hello, Id like to report a BSoD and would like to solve it.

It is occuring on my Laptop a Lenovo Y510P.

Almost 3 months old. Got it this January.

The BSoD only occurs during shutdown and it "Does not" happen always.

I noticed a pattern though.

-It started occuring mid febuary
-I think it may something to do with my graphics tablet which I use for my work, In fact this only occured weeks after I started using the tablet. Not 100% sure though. Amazon.com : Huion H610 Pro Graphics Drawing Pen Tablet : Computer Digital Tablets : Computers & Accessories
-Had a Full Windows update before it started. Many days before it occurred though.

Either way I thought a more Professional help would pinpoint the problem easily.

I just hope its not a hardware problem as this is my "only" workstation atm which I need to do my work on. Im fairly time intensive so any time saving test would be appreciated.

Thank you.

usasma · Mar 6, 2014

The most likely problem here is mfeavfk.sys (your McAfee File System filter driver)
It's blamed in 2 of the 3 memory dumps.
Please:
- uninstall McAfee
- enable Windows Defender and the Windows Firewall
- see if that stops the BSOD's

One of the memory dumps also blames your video drivers - so please update them from the Lenovo website

Finally, these drivers are older and may not be Win8 compatible. Please note that some seem to relate to your tablet (so your hunch may be correct). Please update these older drivers. Links are included to assist in looking up the source of the drivers. If unable to find an update, please remove (un-install) the program responsible for that driver. DO NOT manually delete/rename the driver as it may make the system unbootable! :

UCTblHid.sys Wed Jun 10 04:02:35 2009 (4A2F689B)
Wacom PenTablet HID Tablet Port Driver
http://www.carrona.org/drivers/driver.php?id=UCTblHid.sys

PTSimHid.sys Wed Jun 10 04:03:18 2009 (4A2F68C6)
Wacom PenTablet Simulated HID Port Driver
http://www.carrona.org/drivers/driver.php?id=PTSimHid.sys

TClass2k.sys Wed Jun 10 04:03:44 2009 (4A2F68E0)
Wacom PenTablet Tablet Class Driver
http://www.carrona.org/drivers/driver.php?id=TClass2k.sys

PTSimBus.sys Wed Jun 17 22:20:48 2009 (4A39A480)
PenTablet Bus enumerator
http://www.carrona.org/drivers/driver.php?id=PTSimBus.sys

LhdX64.sys Mon Jan 11 10:06:58 2010 (4B4B3E92)
Lenovo HD Disk Driver
http://www.carrona.org/drivers/driver.php?id=LhdX64.sys

PxHlpa64.sys Mon Oct 17 10:29:34 2011 (4E9C3BCE)
Sonic CD/DVD driver (used by many different CD/DVD programs)
http://www.carrona.org/drivers/driver.php?id=PxHlpa64.sys

If this doesn't stop the BSOD's, please run these free hardware diagnostics (particularly the memory test): Initial Hardware Diagnostics

Analysis:
The following is for informational purposes only.

Code:

[font=lucida console]**************************Thu Mar  6 00:51:18.793 2014 (UTC - 5:00)**************************
Loading Dump File [C:\Users\John\SysnativeBSODApps\030514-16984-01.dmp]
Windows 8 Kernel Version 9200 MP (8 procs) Free x64
Built by: [B]9200[/B].16628.amd64fre.win8_gdr.130531-1504
System Uptime:[B]0 days 9:05:18.574[/B]
*** WARNING: Unable to verify timestamp for nvlddmkm.sys
*** ERROR: Module load completed but symbols could not be loaded for nvlddmkm.sys
Probably caused by :[B]nvlddmkm.sys ( nvlddmkm+1d1b65 )[/B]
BugCheck [B]4E, {9a, 261e6b, 6, 3}[/B]
BugCheck Info: [url=http://www.carrona.org/bsodindx.html#Example]PFN_LIST_CORRUPT (4e)[/url]
Arguments: 
Arg1: 000000000000009a, 
Arg2: 0000000000261e6b
Arg3: 0000000000000006
Arg4: 0000000000000003
BUGCHECK_STR:  0x4E_9a
PROCESS_NAME:  System
FAILURE_BUCKET_ID: [B]0x4E_9a_nvlddmkm+1d1b65[/B]
CPUID:        "Intel(R) Core(TM) i7-4700MQ CPU @ 2.40GHz"
MaxSpeed:     2400
CurrentSpeed: [B]2394[/B]
  BIOS Version                  74CN44WW(V3.05)
  BIOS Release Date             09/18/2013
  Manufacturer                  LENOVO
  Product Name                  20217
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
**************************Tue Mar  4 00:46:47.955 2014 (UTC - 5:00)**************************
Loading Dump File [C:\Users\John\SysnativeBSODApps\030314-20125-01.dmp]
Windows 8 Kernel Version 9200 MP (8 procs) Free x64
Built by: [B]9200[/B].16628.amd64fre.win8_gdr.130531-1504
System Uptime:[B]0 days 8:21:15.719[/B]
*** WARNING: Unable to verify timestamp for mfefirek.sys
*** ERROR: Module load completed but symbols could not be loaded for mfefirek.sys
Probably caused by :[B]mfefirek.sys ( mfefirek+439ee )[/B]
BugCheck [B]4E, {9a, 26206d, 6, 2}[/B]
BugCheck Info: [url=http://www.carrona.org/bsodindx.html#Example]PFN_LIST_CORRUPT (4e)[/url]
Arguments: 
Arg1: 000000000000009a, 
Arg2: 000000000026206d
Arg3: 0000000000000006
Arg4: 0000000000000002
BUGCHECK_STR:  0x4E_9a
PROCESS_NAME:  mfefire.exe
FAILURE_BUCKET_ID: [B]0x4E_9a_mfefirek+439ee[/B]
CPUID:        "Intel(R) Core(TM) i7-4700MQ CPU @ 2.40GHz"
MaxSpeed:     2400
CurrentSpeed: [B]2394[/B]
  BIOS Version                  74CN44WW(V3.05)
  BIOS Release Date             09/18/2013
  Manufacturer                  LENOVO
  Product Name                  20217
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
**************************Thu Feb 13 01:00:53.761 2014 (UTC - 5:00)**************************
Loading Dump File [C:\Users\John\SysnativeBSODApps\021214-35031-01.dmp]
Windows 8 Kernel Version 9200 MP (8 procs) Free x64
Built by: [B]9200[/B].16628.amd64fre.win8_gdr.130531-1504
System Uptime:[B]0 days 7:59:21.543[/B]
*** WARNING: Unable to verify timestamp for mfeavfk.sys
*** ERROR: Module load completed but symbols could not be loaded for mfeavfk.sys
Probably caused by :[B]mfeavfk.sys ( mfeavfk+318ee )[/B]
BugCheck [B]4E, {9a, 262ab7, 6, 2}[/B]
BugCheck Info: [url=http://www.carrona.org/bsodindx.html#Example]PFN_LIST_CORRUPT (4e)[/url]
Arguments: 
Arg1: 000000000000009a, 
Arg2: 0000000000262ab7
Arg3: 0000000000000006
Arg4: 0000000000000002
BUGCHECK_STR:  0x4E_9a
PROCESS_NAME:  mcshield.exe
FAILURE_BUCKET_ID: [B]0x4E_9a_mfeavfk+318ee[/B]
CPUID:        "Intel(R) Core(TM) i7-4700MQ CPU @ 2.40GHz"
MaxSpeed:     2400
CurrentSpeed: [B]2394[/B]
  BIOS Version                  74CN44WW(V3.05)
  BIOS Release Date             09/18/2013
  Manufacturer                  LENOVO
  Product Name                  20217
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
[/font]

3rd Party Drivers:
The following is for information purposes only.
Any drivers in red should be updated or removed from your system. And should have been discussed in the body of my post.

Code:

[font=lucida console]**************************Thu Mar  6 00:51:18.793 2014 (UTC - 5:00)**************************
[COLOR=RED][B]PTSimHid.sys                Wed Jun 10 04:03:18 2009 (4A2F68C6)[/B][/COLOR]
[COLOR=RED][B]PTSimBus.sys                Wed Jun 17 22:20:48 2009 (4A39A480)[/B][/COLOR]
[COLOR=RED][B]LhdX64.sys                  Mon Jan 11 10:06:58 2010 (4B4B3E92)[/B][/COLOR]
[COLOR=RED][B]PxHlpa64.sys                Mon Oct 17 10:29:34 2011 (4E9C3BCE)[/B][/COLOR]
AcpiVpc.sys                 Mon May 14 21:18:53 2012 (4FB1AEFD)
mfehidk.sys                 Wed May 30 11:35:13 2012 (4FC63E31)
mfewfpk.sys                 Wed May 30 11:35:28 2012 (4FC63E40)
mfeavfk.sys                 Wed May 30 11:36:18 2012 (4FC63E72)
mfefirek.sys                Wed May 30 11:38:10 2012 (4FC63EE2)
cfwids.sys                  Wed May 30 11:38:43 2012 (4FC63F03)
X5XSEx_Pr148.Sys            Thu Aug  2 08:51:27 2012 (501A77CF)
L1C63x64.sys                Fri Sep 21 02:34:46 2012 (505C0A86)
intelppm.sys                Mon Nov  5 22:55:02 2012 (50988A16)
HECIx64.sys                 Mon Dec 17 14:32:21 2012 (50CF7345)
iBtFltCoex.sys              Thu Apr 18 10:17:24 2013 (51700074)
dump_iaStorA.sys            Mon Apr 22 15:38:05 2013 (5175919D)
iaStorA.sys                 Mon Apr 22 15:38:05 2013 (5175919D)
btmaux.sys                  Tue Apr 23 07:28:02 2013 (51767042)
ETDSMBus.sys                Mon May 13 22:05:20 2013 (51919BE0)
ETD.sys                     Thu May 16 06:22:53 2013 (5194B37D)
RTKVHD64.sys                Tue May 28 10:03:46 2013 (51A4B942)
rtsuvc.sys                  Fri Jul 19 03:58:16 2013 (51E8F198)
NETwew00.sys                Thu Aug 22 17:20:34 2013 (521680A2)
btmhsf.sys                  Thu Sep  5 08:12:49 2013 (52287541)
nvhda64v.sys                Thu Nov 28 08:38:09 2013 (52974741)
nvlddmkm.sys                Thu Dec 19 12:02:52 2013 (52B326BC)
nvvad64v.sys                Fri Dec 27 11:41:28 2013 (52BDADB8)
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
**************************Tue Mar  4 00:46:47.955 2014 (UTC - 5:00)**************************
[COLOR=RED][B]UCTblHid.sys                Wed Jun 10 04:02:35 2009 (4A2F689B)[/B][/COLOR]
[COLOR=RED][B]TClass2k.sys                Wed Jun 10 04:03:44 2009 (4A2F68E0)[/B][/COLOR]
[/font]

kaeru · Mar 6, 2014

Thank you.

Will remove the Mcafee was gonna replace it anyways.

The video driver you meant the GPU? Its a little outdated but only by a month or so. I highly doubt its significance since Its in good shape though. Still its not impossible. I just keep forgetting to update it.

The tablet drivers you mentioned oddly isn't related to the one Im using but its the older ones. Oddly enough I thought I already remove those. But it still exists though? Any Idea How I can remove this. My tablet is not Wacom I used to have one. But mine is Huion which uses a completely different driver.

*I've check the manafacturer's (HUION) driver and it seems to be the UCTblHid.sys? Kinda weird though, they said they supported windows 8 otherwise I'll have to try the other one.

*Since the BSoD never existed or at least it didn't happen in the beginning I might not prioritize the other mentioned drivers. Unless it prevails again.

Odd though this laptop has no physical CD/DVD drive though but a driver exists?

Anyways thanks again! I'll report on the progress.

usasma · Mar 6, 2014

video driver and GPU are the same thing - your driver dates from Dec 2013. Update it, even if it's only a couple of months old. Driver could have a bug, it could be corrupted, there could be other problems with it.

The safest way to remove the old tablet drivers are to reinstall it's software, then uninstall it.
If they still remain we can try to remove them manually - but it's not fun :0)

Check for the latest Win8 version of the Driver Reference Table - UCTblHid.sys driver.
I've found that the hunches of the owners solve more BSOD's than I ever could.

The CD/DVD driver description was written when CD/DVD drives were common. This is most likely from a program that has that capability - even though your system doesn't have the drive (one example is PowerDVD which is installed on your system)

kaeru · Mar 7, 2014

Was able to update the tablet driver so far to its latest the manufacturer has nothing new beyond that point. Gonna see in a few weeks if the problem still persists (If I dont use theirs the tablet cannot work properly). Since the Bsod really only happens sparingly (during the shutdown process). Updating the other ones as well.

Thanks again

will report if something happens.

*update the lhdx64.sys has no supported update so far. Lenovo has nothing on their site so not gonna touch dont wanna risk screwing my hdd its fairly new so yeah

if it had problems I've would have experienced it earlier.

usasma · Mar 7, 2014

Don't remove the Lenovo driver (I've gotta make a change to my canned speeches to mention those that you don't want to uninstall)

We'll be here if it rears it's ugly head again!

BSOD occurs sometimes, PFN_list_corrupt 0x0000004e?

kaeru

New Member

My Computer

System One

usasma

Mr. Cranky Pants

My Computer

System One

kaeru

New Member

My Computer

System One

usasma

Mr. Cranky Pants

My Computer

System One

kaeru

New Member

My Computer

System One

usasma

Mr. Cranky Pants

My Computer

System One