BSOD intermittent...PAGE_FAULT_IN_NONPAGED_AREA (ndis.sys)

rcwilkinson · Oct 3, 2014

Hello

I have recently 'refreshed' my laptop, and since then I have been getting intermittent BSOD. This seems to happen randomly, I havent been able to pin down a pattern of what I'm doing when it occurs.

Recently I have installed a new Antivirus and Firewall, (Avast, Online Armor). I read somewhere that this BSOD could be to do with your Antivirus.

I'm not too technical, but have followed your instructions to collect data, which I have upload. Any help would be greatly appreciated

Thanks

Ross

blueelvis · Oct 6, 2014

Hi Rcwilkinson & Welcome to the forums ^_^,

I am sorry for the delayed response but we have been very busy

I have analysed your dump files and below has been provided an analysis of the same for informative purposes :-

Code:

**************************Fri Oct  3 16:25:45.761 2014 (UTC + 5:30)**************************
Loading Dump File [C:\SysnativeBSODApps\100314-30171-01.dmp]
 
Windows 8 Kernel Version 9200 MP (4 procs) Free x64
 
Built by: 9200.16912.amd64fre.win8_gdr.140502-1507
 
System Uptime: 3 days 2:55:58.609
 
Probably caused by : pcw.sys ( pcw!PcwpCollectNotification+c7 )
 
BugCheck 50, {fffffa80159161d0, 0, fffff88001aeddf3, 0}
BugCheck Info: [url=http://www.carrona.org/bsodindx.html#0x00000050]PAGE_FAULT_IN_NONPAGED_AREA (50)[/url]
 
Arguments: 
Arg1: fffffa80159161d0, memory referenced.
Arg2: 0000000000000000, value 0 = read operation, 1 = write operation.
Arg3: fffff88001aeddf3, If non-zero, the instruction address which referenced the bad memory
 address.
Arg4: 0000000000000000, (reserved)
BUGCHECK_STR:  AV
 
DEFAULT_BUCKET_ID:  WIN8_DRIVER_FAULT
 
PROCESS_NAME:  pcdrcui.exe
 
FAILURE_BUCKET_ID:  AV_pcw!PcwpCollectNotification
 
CPUID:        "Intel(R) Core(TM) i5-3337U CPU @ 1.80GHz"
 
MaxSpeed:     1800
 
CurrentSpeed: 1796
 
  BIOS Version                  A13
 
  BIOS Release Date             05/18/2013
 
  Manufacturer                  Dell Inc.
 
  Product Name                  Inspiron 5423
 
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
**************************Tue Sep 30 11:59:46.054 2014 (UTC + 5:30)**************************
Loading Dump File [C:\SysnativeBSODApps\093014-18625-01.dmp]
 
Windows 8 Kernel Version 9200 MP (4 procs) Free x64
 
Built by: 9200.16912.amd64fre.win8_gdr.140502-1507
 
System Uptime: 2 days 12:28:46.939
 
Probably caused by : pcw.sys ( pcw!PcwpCollectNotification+c7 )
 
BugCheck 50, {fffffa8010e2b1d0, 0, fffff88001b89df3, 0}
BugCheck Info: [url=http://www.carrona.org/bsodindx.html#0x00000050]PAGE_FAULT_IN_NONPAGED_AREA (50)[/url]
 
Arguments: 
Arg1: fffffa8010e2b1d0, memory referenced.
Arg2: 0000000000000000, value 0 = read operation, 1 = write operation.
Arg3: fffff88001b89df3, If non-zero, the instruction address which referenced the bad memory
 address.
Arg4: 0000000000000000, (reserved)
BUGCHECK_STR:  AV
 
DEFAULT_BUCKET_ID:  WIN8_DRIVER_FAULT
 
PROCESS_NAME:  CPU_Meter_reYu
 
FAILURE_BUCKET_ID:  AV_pcw!PcwpCollectNotification
 
CPUID:        "Intel(R) Core(TM) i5-3337U CPU @ 1.80GHz"
 
MaxSpeed:     1800
 
CurrentSpeed: 1796
 
  BIOS Version                  A13
 
  BIOS Release Date             05/18/2013
 
  Manufacturer                  Dell Inc.
 
  Product Name                  Inspiron 5423
 
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``

As we can see from the dump files, the PCW.sys has been blamed but since it is a Windows Component, the chance of it being at fault is extremely less. Furthermore, there is presence of NDIS.sys which is the networking driver of Windows.
Below is a list of 3rd party driver present on the system :-

Code:

**************************Fri Oct  3 16:25:45.761 2014 (UTC + 5:30)**************************
rtcrfilt64.sys              Thu Dec  1 15:13:09 2011 (4ED74C2D)
CLVirtualDrive.sys          Mon Dec 26 18:56:47 2011 (4EF87617)
L1C63x64.sys                Thu Jun 14 11:27:40 2012 (4FD97D54)
IntcDAud.sys                Tue Jun 19 20:10:51 2012 (4FE08F73)
HECIx64.sys                 Tue Jul  3 03:44:58 2012 (4FF21D62)
oahlp64.sys                 Thu Jul  5 23:00:59 2012 (4FF5CF53)
amdkmpfd.sys                Tue Jul 10 07:19:35 2012 (4FFB8A2F)
irstrtdv.sys                Fri Jul 13 05:28:02 2012 (4FFF648A)
iwdbus.sys                  Tue Jul 24 01:49:17 2012 (500DB1C5)
stwrt64.sys                 Tue Jul 24 13:35:57 2012 (500E5765)
iBtFltCoex.sys              Tue Jul 24 15:33:05 2012 (500E72D9)
atikmdag.sys                Thu Aug  2 09:04:54 2012 (5019F55E)
atikmpag.sys                Thu Aug  2 09:39:28 2012 (5019FD78)
igdpmd64.sys                Tue Aug 21 22:38:36 2012 (5033C094)
SynTP.sys                   Sat Sep  8 06:30:02 2012 (504A9892)
Smb_driver_Intel.sys        Sat Sep  8 06:31:40 2012 (504A98F4)
AMPPAL.sys                  Thu Sep 13 17:00:17 2012 (5051C3C9)
usb3Hub.sys                 Wed Sep 26 16:34:00 2012 (5062E120)
XHCIPort.sys                Wed Sep 26 16:34:01 2012 (5062E121)
btmaux.sys                  Sun Sep 30 13:15:43 2012 (5067F8A7)
btmhsf.sys                  Sun Sep 30 13:16:55 2012 (5067F8EF)
intelppm.sys                Tue Nov  6 09:25:02 2012 (50988A16)
dump_iaStorA.sys            Tue Mar  5 23:19:05 2013 (51363011)
iaStorA.sys                 Tue Mar  5 23:19:05 2013 (51363011)
NETwew00.sys                Fri Aug 23 02:50:34 2013 (521680A2)
[U][B]OADriver.sys                Fri Oct 11 07:10:06 2013 (525756F6)
OAmon.sys                   Fri Oct 11 07:10:09 2013 (525756F9)
oanet.sys                   Fri Oct 11 07:10:12 2013 (525756FC)
mbam.sys                    Wed Oct 30 21:41:45 2013 (52712FC1)
mwac.sys                    Wed Mar  5 03:17:40 2014 (531649FC)
MBAMSwissArmy.sys           Fri Mar 21 03:42:35 2014 (532B67D3)
aswHwid.sys                 Thu Jun 26 17:01:26 2014 (53AC048E)
aswMonFlt.sys               Thu Jun 26 17:02:51 2014 (53AC04E3)
aswRdr2.sys                 Thu Jun 26 17:03:28 2014 (53AC0508)
aswSnx.sys                  Thu Jun 26 17:04:44 2014 (53AC0554)
aswRvrt.sys                 Thu Jun 26 17:05:39 2014 (53AC058B)
aswVmm.sys                  Thu Jun 26 17:05:49 2014 (53AC0595)
aswStm.sys                  Thu Jun 26 17:17:09 2014 (53AC083D)
aswSP.sys                   Wed Jul  2 23:08:12 2014 (53B44384)
[/B][/U]

rcwilkinson · Oct 6, 2014

Thanks so much for all your hard work im analysis my bsod issue.

I was wondering....if i remove I security tools (as suggested) would this put my laptop at risk?

Also, because the issue is intermittent...doea that mean I ought to remove these tools and wait if tue bsod occurs again?

Thanks again very much for your help, I just wanted to clarify your action plan before going ahead with it.

Ross

blueelvis · Oct 9, 2014

rcwilkinson said:
Thanks so much for all your hard work im analysis my bsod issue.

I was wondering....if i remove I security tools (as suggested) would this put my laptop at risk?

Also, because the issue is intermittent...doea that mean I ought to remove these tools and wait if tue bsod occurs again?

Thanks again very much for your help, I just wanted to clarify your action plan before going ahead with it.

Ross

Hi Ross ^_^,

During troubleshooting BSOD's, we generally tend to remove the Security Suites as they cause problems most of the times. If you are using a corporate laptop, I would advise you to take permission from the IT Guys and ask them to help you out due to legal procedures

Once you are done with the removal of the Security Suites, I would suggest you to turn on the Windows Defender and check the system for stability.
Yes, you need to wait to make sure that the system is stable.

Let me know how it goes ^_^

BSOD intermittent...PAGE_FAULT_IN_NONPAGED_AREA (ndis.sys)

rcwilkinson

New Member

blueelvis

OMG Debugger!

rcwilkinson

New Member

blueelvis

OMG Debugger!

Similar threads