BSOD at each launch (Error in non page area)

k4mik4z · Sep 10, 2014

Hi,
I update my PC on Windows 8.1 six month before, I works without any problems. And from two week ago I got a BSOD at each launch of my computer, I just need to shutdown him and it start normally but it took almost ten time longer.

Can someone help me ? It's really boring.

blueelvis · Sep 11, 2014

Hi K4mik4z & Welcome to the forums ^_^,

I have analyzed your dump files and below has been provided an analysis of the same for informative purposes :-

Code:

0: kd> kbRetAddr           : Args to Child                                                           : Call Site
fffff803`0a5903b8 : 00000000`00000050 fffff6fb`40000000 00000000`00000000 fffff6fb`7da00000 : nt!KeBugCheckEx
fffff803`0a47d523 : 00000000`00000000 00000000`00000000 00000000`00000000 ffffd000`3e6dcc82 : nt! ?? ::FNODOBFM::`string'+0x15f08
fffff803`0a57422f : 00000000`00000000 ffffe001`ade09780 ffffe001`a928d500 ffffd000`3e6dcd60 : nt!MmAccessFault+0x303
fffff803`0a4a90e8 : 00000000`00000001 00000000`00000001 00000000`00000000 00000000`00000000 : nt!KiPageFault+0x12f
fffff803`0a6ab9cd : 00000000`00000000 ffffd000`3e6dd078 00000000`00000000 ffffd000`00000000 : [COLOR=#ff0000]nt!ExFreeLargePool+0x78[/COLOR]
fffff800`3a2dc96a : fffff800`3a2b74a0 ffffe001`00000000 fffff800`3a2b7c00 00000000`00000000 : [COLOR=#ff0000]nt!ExFreePoolWithTag+0x6ed[/COLOR]
fffff800`3a2d4595 : fffff800`3a2b7400 ffffe001`ade09780 00000000`00000010 fffff800`3a2a9101 : [B][U]tcpip!RssDeleteBinding+0x8a[/U][/B]
fffff800`3a16c925 : 00000000`0000000d ffffd000`3e6dd1b0 fffff800`3a2a9100 ffffe001`aab858a0 : tcpip!RssControlDeleteInterface+0x1dcd
fffff800`3a180742 : ffffe001`aab673e0 fffff800`3a2a9100 ffffe001`aab6a5b0 ffffe001`aab64000 : tcpip!OlmNotifyDeleteInterface+0x25
fffff800`3a16a684 : ffffe001`aabb0010 ffffe001`00000002 ffffe001`ade925b0 fffff800`3a2a9180 : tcpip!IppNotifyInterfaceChangeToNlClients+0x1ae
fffff800`3a16a4b8 : ffffe001`add31ab0 ffffd000`3e6dd330 ffffe001`ade05ec0 ffffd000`3e6dd330 : tcpip!IpFlcDeleteInterface+0x1b0
fffff800`3a16a77d : ffffe001`add31ab0 fffff800`3a2b3870 00000000`00000000 fffff803`0a474186 : tcpip!FlpDeleteInterface+0xa0
fffff800`39f5d29f : ffffd000`3e6dd3f0 ffffe001`aabaa010 ffffe001`adec8c10 ffffe001`aabaa010 : tcpip!FlUnbindAdapter+0xa5
fffff800`39f90414 : ffffe001`adec8c10 ffffe001`add361a0 ffffe001`add36100 ffffe001`00000000 : ndis!ndisInvokeUnbindAdapter+0x2f
fffff800`39f5dad0 : ffffe001`00000000 ffffe001`add375e8 ffffe001`adec8c10 ffffc000`930f2cc0 : ndis!ndisUnbindProtocolOpen+0x168
fffff800`39f51252 : ffffc000`930f2cc8 ffffd000`3e6dd5f0 ffffe001`add375e8 fffff803`0a47e066 : ndis!ndisUnbindEachProtocolOpenOnMiniport+0x70
fffff800`39f5147c : ffffe001`add361a0 ffffe001`add361a0 ffffd000`3e6dd700 ffffe001`add375e8 : ndis!Ndis::BindEngine::Iterate+0x802
fffff800`39f4f708 : ffffe001`add375e8 ffffd000`3e6dd900 ffffd000`3e6dd780 ffffd000`3e6dd900 : ndis!Ndis::BindEngine::UpdateBindings+0x64
fffff800`39f515b7 : ffffe001`add375e8 ffffe001`add375e8 00000000`00001001 fffff800`39f51514 : ndis!Ndis::BindEngine::DispatchPendingWork+0x50
fffff800`39f4fbdc : ffffe001`add361a0 ffffe001`add375e8 ffffc000`98f75f30 ffffd000`3e6dd800 : ndis!Ndis::BindEngine::ApplyBindChanges+0x37
fffff800`39f907ae : ffffe001`add361a0 ffffd000`3e6dd990 ffffe001`add375e8 ffffe001`ac02bb90 : ndis!ndisMSetMiniportReadyForBinding+0x64
fffff800`39f5d6d9 : ffffe001`add361a0 ffffd000`3e6ddbd0 ffffe001`add361a0 ffffe001`add361a0 : ndis!ndisPnPRemoveDevice+0x1ae
fffff800`39f5d65d : ffffe001`add361a0 ffffe001`add361a0 fffff803`0a6b9300 ffffe001`00000000 : ndis!ndisPnPRemoveDeviceEx+0x59
fffff803`0a469adb : fffff803`0a8ac9bc 00000000`00000000 fffff803`0a6e97a0 ffffe001`ae902880 : ndis!ndisPnPIrpSurpriseRemovalInner+0x79
fffff803`0a4e5794 : ffffe001`a81eb040 ffffe001`ae902880 ffffe001`ae902880 ffffe001`a81ac440 : nt!ExpWorkerThread+0x293
fffff803`0a5705c6 : fffff803`0a6fc180 ffffe001`ae902880 ffffe001`a81eb040 00000000`00000200 : nt!PspSystemThreadStartup+0x58
00000000`00000000 : ffffd000`3e6de000 ffffd000`3e6d8000 00000000`00000000 00000000`00000000 : nt!KiStartSystemThread+0x16

As we can see from the Callstack that there were numerous calls to "tcpip.sys" and "ndis.sys" both of which are Networking Related drivers from Windows and since they are part of Windows, chance of them being corrupt is extremely less. Which means that something else caused the problem.

According to WinDBG, Bug check 0x50 (Which you are experiencing) usually occurs after the installation of faulty hardware or in the event of failure of installed hardware (usually related to defective RAM, be it main memory, L2 RAM cache, or video RAM).Another common cause is the installation of a faulty system service.
Antivirus software can also trigger this error, as can a corrupted NTFS volume.

Below is a list of 3rd party drivers present on your system :-

Code:

**************************Tue Sep  9 21:50:30.869 2014 (UTC + 5:30)**************************
[COLOR=#ff0000][B][U]teamviewervpn.sys           Thu Dec 13 14:52:09 2007 (4760F9C1)[/U][/B][/COLOR]
HECIx64.sys                 Wed Oct 20 05:03:43 2010 (4CBE2AD7)
[B][U]wdfsd.sys                   Tue Jan 10 06:17:17 2012 (4F0B8A95)[/U][/B]
GEARAspiWDM.sys             Fri May  4 01:26:17 2012 (4FA2E2E1)
IntcDAud.sys                Tue Jun 19 20:10:51 2012 (4FE08F73)
vmci.sys                    Sat May 18 06:49:18 2013 (5196D716)
VMNET.SYS                   Fri Jul 19 01:12:50 2013 (51E8453A)
vmnetadapter.sys            Fri Jul 19 01:13:00 2013 (51E84544)
vmnetbridge.sys             Fri Jul 19 01:13:47 2013 (51E84573)
vsock.sys                   Thu Aug  1 08:16:10 2013 (51F9CBF2)
intelppm.sys                Thu Aug 22 14:16:35 2013 (5215CFEB)
dump_iaStorA.sys            Tue Oct 29 02:45:26 2013 (526ED3EE)
iaStorA.sys                 Tue Oct 29 02:45:26 2013 (526ED3EE)
Rt630x64.sys                Wed Dec 18 09:00:14 2013 (52B116C6)
nvvad64v.sys                Fri Dec 27 22:11:28 2013 (52BDADB8)
RtsUVStor.sys               Fri Jan  3 08:42:15 2014 (52C62A8F)
NETwsw00.sys                Sun Jan 26 20:22:40 2014 (52E52138)
hcmon.sys                   Fri Feb 28 08:10:28 2014 (530FF71C)
igdkmd64.sys                Thu Mar 20 21:10:31 2014 (532B0BEF)
vmnetuserif.sys             Fri Jun 13 05:15:38 2014 (539A3BA2)
VMkbd.sys                   Fri Jun 13 05:50:01 2014 (539A43B1)
vmx86.sys                   Fri Jun 13 06:39:56 2014 (539A4F64)
nvpciflt.sys                Wed Jul  2 23:04:06 2014 (53B4428E)
nvlddmkm.sys                Wed Jul  2 23:12:02 2014 (53B4446A)

k4mik4z · Sep 14, 2014

Thank you, I uninstall WebDrive and rename Teamviewer VPN and I try a shutdown and boot him. But there isn't anything change.

blueelvis · Sep 16, 2014

k4mik4z said:
Thank you, I uninstall WebDrive and rename Teamviewer VPN and I try a shutdown and boot him. But there isn't anything change.

Do you mean that you are still getting the BSOD's? If yes, then please upload a freshly generated SF Diagnostic ZIP File.

k4mik4z · Sep 17, 2014

Sorry it was a bit confuse, I always got the BSOD.
I just got something from my antivirus "婖㑨潕㥡吶佴s砺ࠀ.exeﾸ￥ￛ瓮㛐瓮罈瓷縺ࠀ" but it just say that he need to send it for some test on it (something like that).

usasma · Sep 18, 2014

Your BIOS dates from 2011. Please check at the manufacturer's website to see if there are any BIOS updates available for your system. Also check the readme file to see if they apply to the problems that you are having. Please be advised that flashing the BIOS is a very unforgiving process - and one mistake can physically damage your motherboard. If possible, use the "inside Windows" flash mechanism (if your OEM provides one).

I cannot read your MSINFO32 file, please do this:

MSINFO32:
Please go to Start and type in "msinfo32.exe" (without the quotes) and press Enter
Save the report as an .nfo file, then zip up the .nfo file and upload/attach the .zip file with your next post.
Also, save a copy as a .txt file and include it also (it's much more difficult to read, but we have greater success in getting the info from it).

If you're having difficulties with the format, please open an elevated (Run as administrator) Command Prompt and type (or copy/paste) "msinfo32 /nfo %USERPROFILE%\Desktop\TEST.NFO" (without the quotes) and press Enter. Then navigate to Desktop to retrieve the TEST.NFO file. If you have difficulties with making this work, please post back. Then zip up the .nfo file and upload/attach the .zip file with your next post.

This memory dump still blames networking components. I also see TeamViewer components that are still installed.
Please uninstall TeamViewer. If it's uninstalled, please post back and I'll provide instructions on how to safely remove the remaining drivers.

Please update these older drivers. Links are included to assist in looking up the source of the drivers. If unable to find an update, please remove (un-install) the program responsible for that driver. DO NOT manually delete/rename the driver as it may make the system unbootable! :

teamviewervpn.sys Thu Dec 13 04:22:09 2007 (4760F9C1)
TeamViewerVPN Network Adapter
http://www.carrona.org/drivers/driver.php?id=teamviewervpn.sys

HECIx64.sys Tue Oct 19 19:33:43 2010 (4CBE2AD7)
Intel Management Engine Interface
http://www.carrona.org/drivers/driver.php?id=HECIx64.sys

If all of this doesn't stop the BSOD's, please run Driver Verifier according to these instructions: Driver Verifier Settings

Analysis:
The following is for informational purposes only.

Code:

[font=lucida console]**************************Fri Sep 12 12:36:07.817 2014 (UTC - 4:00)**************************
Loading Dump File [C:\Users\John\SysnativeBSODApps\091214-476531-01.dmp]
Windows 8 Kernel Version 9600 MP (4 procs) Free x64
Built by: [B]9600[/B].17085.amd64fre.winblue_gdr.140330-1035
System Uptime:[B]0 days 0:28:42.536[/B]
*** ERROR: Module load completed but symbols could not be loaded for tcpip.sys
Probably caused by :[B]tcpip.sys ( tcpip+1fc96a )[/B]
BugCheck [B]50, {fffff6fb40000000, 0, 0, 6}[/B]
BugCheck Info: [url=http://www.carrona.org/bsodindx.html#0x00000050]PAGE_FAULT_IN_NONPAGED_AREA (50)[/url]
Arguments: 
Arg1: fffff6fb40000000, memory referenced.
Arg2: 0000000000000000, value 0 = read operation, 1 = write operation.
Arg3: 0000000000000000, If non-zero, the instruction address which referenced the bad memory
    address.
Arg4: 0000000000000006, (reserved)
BUGCHECK_STR:  AV
DEFAULT_BUCKET_ID:  WIN8_DRIVER_FAULT
PROCESS_NAME:  System
FAILURE_BUCKET_ID: [B]AV_tcpip+1fc96a[/B]
CPUID:        "Intel(R) Core(TM) i5-2430M CPU @ 2.40GHz"
MaxSpeed:     2400
CurrentSpeed: [B]2395[/B]
  BIOS Version                  K53SC.208
  BIOS Release Date             07/17/2011
  Manufacturer                  ASUSTeK Computer Inc.
  Product Name                  K53SC
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
[/font]

3rd Party Drivers:
The following is for information purposes only.
Any drivers in red should be updated or removed from your system. And should have been discussed in the body of my post.

Code:

[font=lucida console]**************************Fri Sep 12 12:36:07.817 2014 (UTC - 4:00)**************************
teamviewervpn.sys           Thu Dec 13 04:22:09 2007 (4760F9C1)
[COLOR=RED][B]HECIx64.sys                 Tue Oct 19 19:33:43 2010 (4CBE2AD7)[/B][/COLOR]
GEARAspiWDM.sys             Thu May  3 15:56:17 2012 (4FA2E2E1)
IntcDAud.sys                Tue Jun 19 10:40:51 2012 (4FE08F73)
vmci.sys                    Fri May 17 21:19:18 2013 (5196D716)
VMNET.SYS                   Thu Jul 18 15:42:50 2013 (51E8453A)
vmnetadapter.sys            Thu Jul 18 15:43:00 2013 (51E84544)
vmnetbridge.sys             Thu Jul 18 15:43:47 2013 (51E84573)
vsock.sys                   Wed Jul 31 22:46:10 2013 (51F9CBF2)
intelppm.sys                Thu Aug 22 04:46:35 2013 (5215CFEB)
dump_iaStorA.sys            Mon Oct 28 17:15:26 2013 (526ED3EE)
iaStorA.sys                 Mon Oct 28 17:15:26 2013 (526ED3EE)
Rt630x64.sys                Tue Dec 17 22:30:14 2013 (52B116C6)
nvvad64v.sys                Fri Dec 27 11:41:28 2013 (52BDADB8)
NETwsw00.sys                Sun Jan 26 09:52:40 2014 (52E52138)
hcmon.sys                   Thu Feb 27 21:40:28 2014 (530FF71C)
igdkmd64.sys                Thu Mar 20 11:40:31 2014 (532B0BEF)
vmnetuserif.sys             Thu Jun 12 19:45:38 2014 (539A3BA2)
VMkbd.sys                   Thu Jun 12 20:20:01 2014 (539A43B1)
vmx86.sys                   Thu Jun 12 21:09:56 2014 (539A4F64)
nvpciflt.sys                Wed Jul  2 13:34:06 2014 (53B4428E)
nvlddmkm.sys                Wed Jul  2 13:42:02 2014 (53B4446A)
[/font]

BSOD at each launch (Error in non page area)

k4mik4z

New Member

My Computer

System One

blueelvis

OMG Debugger!

My Computer

System One

k4mik4z

New Member

My Computer

System One

blueelvis

OMG Debugger!

My Computer

System One

k4mik4z

New Member

My Computer

System One

usasma

Mr. Cranky Pants

My Computer

System One