"PAGE_FAULT_IN_NONPAGED_AREA" blue screen error

lijxok

Reputable
Dec 24, 2015
4
0
4,510
Hey everyone,

I am using a Lenovo G505s laptop, the specs are:

CPU: AMD A10-5750M 2.5GHz
Memory: 6 GB DDR3(4G+2G)
Storage: 1TB 5400rpm
Graphics Card: AMD Radeon HD 8650G
LAN: 10/100Mbps
WLAN: 802.11b/g/n Wireless LAN
Bluetooth: Bluetooth 4.0

The blue screen error occurs every time after a moment from I open a browser(any brower including firefox, chrome and IE) and open some webpages.

Initially I was using Windows 8, I was thinking that upgrading it to Windows 10 would fix the problem, but it failed to fix it. I also tried some other ways, like: use sfc and dism command; change settings about page size and automatic management of page; check disk; clean registry keys; uninstall recently updated Java; use anti-virus software. But none of these works. The only possible way I know but have not tried is to test the RAM, but I doubted whether it is caused by hardware problem.

One minidump file is: http://www.filedropper.com/122415-36343-01
And the most recent minidump file is: http://www.filedropper.com/122515-34171-01

According to blue screen view, for the first file the problem is caused by ntoskrnl.exe and tcpip.sys; and the the second file it is cause only by ntoskrnl.exe. Since I have no idea how to fix the problem based on the minidump files, can anyone have a look at the files and specify where the problem is?

Any help for solving the problem is greatly appreciated! Thanks in advance!
 
Solution
the bugcheck was in
sysmon.sys Timestamp: Sun Nov 15 22:51:21 2015

Beijing Rising Information Technology Corporation file ???

looks like you have 42 custom divers loaded on a very new build of windows 10
Built by: 10586.17.amd64fre.th2_release.151121-2308

looks like some program accessed sysmon.sys which did a string copy to a bad memory location and caused the bugcheck.



here are some of your suspect drivers:
QDAntiDrv64.sys
BDDefense.sys
RtsUVStor.sys
usbfilter.sys
AODDriver2.sys
vmnetuserif.sys
vmx86.sys
appexDrv.sys
QQProtectX64.sys
vstor2_mntapi20_shared.sys
GEARAspiWDM.sys
L1C63x64.sys
ElcMouUFlt.sys
ElcMouLFlt.sys
t_mouse.sys
CHDRT64.sys
AcpiVpc.sys
VMkbd.sys
athw8x.sys
rsktdi.sys...

lijxok

Reputable
Dec 24, 2015
4
0
4,510
Hi!
Thanks for your reply. Actually I have already this method, but it did not work for me. Could you please check the minidump file to determine where the problem it? Thanks.




 
since you are running Windows 10 Kernel Version 10586 MP (4 procs) Free x64
I would do a complete wipe of the system a clean install. (or you can attempt to fix various issues indicated below, a wipe and update drivers and bios from lenovo would just be faster I think)

machine:
SYSTEM_SKU: LENOVO_MT_20255
SYSTEM_VERSION: Lenovo G505s
BIOS_DATE: 09/18/2013
BASEBOARD_PRODUCT: Lenovo G505s


-----------------
bugcheck was in
Loaded symbol image file: sysmon.sys
Timestamp: Sun Nov 15 22:51:21 2015

but i think something corrupted its stack and you have a lot of suspect device drivers installed.

Looking at your system I would:
find out what this driver is:
_5eeb83d0_96ea_4249_942c_beead6847053_Gw64.sys
I would also remove the old overclocking driver:
AODDriver2.sys Thu Apr 05 02:23:37 2012
I would update this, I think the old version corrupts memory:
dtsoftbus01.sys Fri Jan 13 05:45:46 2012

there seems to be some serious problem with your antivirus also
I would uninstall and reinstall it. (BDArKit.SYS)

looks like you also have
npf.sys Tue Oct 20 11:00:19 2009
this is very old, and unless you know why you have it installed, it is most likly acting as a part of a network packet capture program. (malware to steal passwords)








 

lijxok

Reputable
Dec 24, 2015
4
0
4,510
Hi johnbl,

Thanks you so much for your reply. Now I already removed the first 2 and the last sys files you mentioned. Also, I uninstalled the 2 programs that are related to dtsoftbus01.sys and BDArKit.SYS. But I still have the same problem(it seems that it happens a little later after I opened a browser).

Here is the new minidump file: http://www.filedropper.com/122715-37125-01

Thanks.

JX


 
the bugcheck was in
sysmon.sys Timestamp: Sun Nov 15 22:51:21 2015

Beijing Rising Information Technology Corporation file ???

looks like you have 42 custom divers loaded on a very new build of windows 10
Built by: 10586.17.amd64fre.th2_release.151121-2308

looks like some program accessed sysmon.sys which did a string copy to a bad memory location and caused the bugcheck.



here are some of your suspect drivers:
QDAntiDrv64.sys
BDDefense.sys
RtsUVStor.sys
usbfilter.sys
AODDriver2.sys
vmnetuserif.sys
vmx86.sys
appexDrv.sys
QQProtectX64.sys
vstor2_mntapi20_shared.sys
GEARAspiWDM.sys
L1C63x64.sys
ElcMouUFlt.sys
ElcMouLFlt.sys
t_mouse.sys
CHDRT64.sys
AcpiVpc.sys
VMkbd.sys
athw8x.sys
rsktdi.sys
_5eeb83d0_96ea_4249_942c_beead6847053_Gw64.sys
hvm.sys
VBoxUSBMon.sys
bd0002.sys
LhdX64.sys
vsock.sys
vmci.sys
rsndisp.sys
sysmon.sys
bd0001.sys

you might try to look them up at http://www.carrona.org/drivers/driver.php?id=LhdX64.sys
to see what each one is and remove the ones you don't want. You might consider updating the BIOS, and do a clean install of windows 10 preview build, then updating the required drivers from the motherboard vendor website. It will be much safer than trying to migrate the old drivers and on your system.
for example LhdX64.sys Mon Jan 11 07:06:58 2010
is a Lenovo HD Disk Driver but it is just very old I don't know why it would be installed and what it is doing.
I would look for a update if you think you actually need it. if you do a clean install of windows 10 you may find it is not actually needed.



machine info:
Vendor LENOVO
BIOS Version 83CN16WW(V1.05)
BIOS Starting Address Segment e000
BIOS Release Date 09/18/2013
Version Lenovo G505s
SKUNumber LENOVO_MT_20255
Family IDEAPAD
Chassis Type Notebook
Processor Manufacturer AMD processor
Processor ID 310f6100fffb8b17
Processor Version AMD A10-5750M APU with Radeon(tm) HD Graphics
Processor Voltage 8ah - 1.0V
External Clock 100MHz
Max Speed 2500MHz
Current Speed 2500MHz












 
Solution

lijxok

Reputable
Dec 24, 2015
4
0
4,510
It seems that the problem is fixed after I updated my system, uninstalled the rising software and daemon tools, and remove the gw64 driver. Thanks for your help.