BSOD playing DOTA2 pagefile in nonpaged area

pizzafreeza · May 18, 2013

Hi,

I have this BSOD problem, "pagefile in nonpaged area" almost once a day, mostly while running a full screen program.

I have windows 7 home premium x64
intel i5 processor
ati radeon vga
Alienware 15mx laptop

BSOD report can be found below,
Thanks.

Arc · May 18, 2013

Apparently it is caused by BitDefender AntiVirus FS filter drive.

Code:

fffff880`0bb23e58  fffff880`02d3e589Unable to load image \??\C:\Windows\system32\Drivers\[URL="http://www.carrona.org/drivers/driver.php?id=bdfsfltr.sys"]bdfsfltr.sys[/URL], Win32 error 0n2
*** WARNING: Unable to verify timestamp for [URL="http://www.carrona.org/drivers/driver.php?id=bdfsfltr.sys"]bdfsfltr.sys[/URL]
*** ERROR: Module load completed but symbols could not be loaded for [URL="http://www.carrona.org/drivers/driver.php?id=bdfsfltr.sys"]bdfsfltr.sys[/URL]
 bdfsfltr+0x3b589

I would suggest you to uninstall BitDefender. Follow it: Support

Use Microsoft Security Essentials as your antivirus with windows inbuilt firewall, and free MBAM as the on demand scanner.
Download, install and update those, and then run full system scans with both of them, one by one.

Also your display driver is very old.

Code:

fffff880`03177000 fffff880`031cc000   atikmpag   (deferred)             
    Image path: \SystemRoot\system32\DRIVERS\atikmpag.sys
[COLOR=Red]    Image name: atikmpag.sys
    Timestamp:        Tue Dec 06 07:42:14 2011[/COLOR] (4EDD79FE)
    CheckSum:         0005F792
    ImageSize:        00055000
    Translations:     0000.04b0 0000.04e4 0409.04b0 0409.04e4

Try to update it from Drivers & Downloads | Dell US

Let us know the results. If it continue BSOD, post it following the Blue Screen of Death (BSOD) Posting Instructions.
___________________________________________________________________________________
BSOD ANALYSIS:

Code:

BugCheck 50, {ffffcba010c2b6fc, 0, fffff800037a3f7e, 7}


Could not read faulting driver name
Probably caused by : ntkrnlmp.exe ( nt!CmpKcbCacheLookup+1de )

Followup: MachineOwner
---------------------------------------------------------------------------------------
BugCheck 50, {fffff8a004517000, 0, fffff8000347b71b, 0}


Could not read faulting driver name
Probably caused by : ntkrnlmp.exe ( nt! ?? ::FNODOBFM::`string'+4518f )

Followup: MachineOwner
----------------------------------------------------------------------------------------
BugCheck BE, {fffff8800c5e6010, 1fc0000167fc0121, fffff880033227d0, a}

*** WARNING: Unable to verify timestamp for atikmdag.sys
*** ERROR: Module load completed but symbols could not be loaded for atikmdag.sys
Probably caused by : dxgmms1.sys ( dxgmms1!VidSchiProcessDpcCompletedPacket+3a5 )

Followup: MachineOwner
---------

EDIT: fill up your system specs properly, otherwise it will be misleading.
See your system specs and fill it up here.

It is displayed as a desktop, whereas it came out as a Alienware M15x laptop.

pizzafreeza · May 18, 2013

I did uninstall Bitdefender a couple days ago and run full system scan with Advanced System Care and found nothing outstanding.
I didn't find anything that can be updated from dell.
Is there any possibility that this bsod is caused from ram problems? I have 6GB of ram, 4 gb on one slot and 2gb on the other.

Arc · May 18, 2013

pizzafreeza said:
I did uninstall Bitdefender a couple days ago and run full system scan with Advanced System Care and found nothing outstanding.

BitDefender is present in today's crash dump. 18/05/2013, AM 02:21.

Code:

fffff880`02d03000 fffff880`02d73000   bdfsfltr   (deferred)

So either it is not uninstalled, or not properly uninstalled.
Advanced System Care is a crap, it causes problems itself. Better you uninstall it.

pizzafreeza said:
I didn't find anything that can be updated from dell.

Use your service tag. The display driver is too old to work properly. There should be updates.
If it is really not there, search in AMD's site. AMD Graphics Drivers & Software

pizzafreeza said:
Is there any possibility that this bsod is caused from ram problems? I have 6GB of ram, 4 gb on one slot and 2gb on the other.

A stop 0x50 and a stop 0xBE, both may be caused by failing RAM, but the prima facie appearance of the crash dumps are not indicating to the RAM directly. As the RAM varies in size, they might be of mismatch FSB or other specifications. Remove the later added RAM, use the computer with the original RAM and see if it is crashing or not. Also you may test your RAM modules for possible errors.
How to Test and Diagnose RAM Issues with Memtest86+
Run memtest for at least 8 passes, preferably overnight.

But pay attention to the other things I pointed out, too.

pizzafreeza · May 29, 2013

BSOD while playing DOTA 2, no error message

Hi,

I have this BSOD problem that keeps happening lately, usually when playing DOTA 2.

Here is my system spec:

CPU: Intel(R) Core(TM) i5 CPU M 540 @ 2.53GHz
Motherboard: Alienware
BIOS: Ver A08 1.00
HDD: WDC WD5000BEKT-75KA9T0
SOUND CARD: (1) AMD High Definition Audio Device (2) IDT High Definition Audio CODEC
RAM: 6GB
VGA: AMD Radeon HD 6570M/5700 Series
OS: Microsoft Windows 7 Home Premium 64-bit 7601 Multiprocessor Free Service Pack 1

Arc · May 30, 2013

Update the following drivers :

Intel(R) WiFi Link 5300 AGN: Either from Dell or from https://downloadcenter.intel.com/Default.aspx
Intel(R) 82577LC Gigabit Network Connection : Either from Dell or from https://downloadcenter.intel.com/Default.aspx
AMD Radeon HD 6570M/5700 Series : Either from Dell or from AMD Graphics Drivers & Software

All them are from 2011.

Is the computer hot? Report us the heat of the computer after a couple of hours of your normal usage. Upload a screenshot of the summery tab of Speccy.

Let us know the results when it is done.
_______________________________________________________________________________________
BSOD ANALYSIS:

Code:

BugCheck 1E, {ffffffffc0000005, fffff800034c3b05, 0, ffffffffffffffff}

Probably caused by : ntkrnlmp.exe ( nt!ExpInterlockedPopEntrySListFault16+0 )

Followup: MachineOwner
--------------------------------------------------------------------------------------------
BugCheck 3B, {c0000005, fffff800034f6ebc, fffff8800c8a8120, 0}

Probably caused by : memory_corruption ( nt!MiGetPreviousNode+3c )

Followup: MachineOwner
---------------------------------------------------------------------------------------------
BugCheck 50, {ffff88a011ba3900, 0, fffff8800b71996c, 7}


Could not read faulting driver name
Probably caused by : dxgmms1.sys ( dxgmms1!VidMmDestroyAllocation+2c )

Followup: MachineOwner
---------

pizzafreeza · Jun 15, 2013

BSOD System Service Exception

My Spec:

CPU: Intel(R) Core(TM) i5 CPU M 540 @ 2.53GHz
Motherboard: Alienware
BIOS: Ver A08 1.00
HDD: WDC WD5000BEKT-75KA9T0
SOUND CARD: (1) AMD High Definition Audio Device (2) IDT High Definition Audio CODEC
RAM: 6GB
VGA: AMD Radeon HD 6570M/5700 Series
OS: Microsoft Windows 7 Home Premium 64-bit 7601 Multiprocessor Free Service Pack 1

I'm frequently getting this error message since yesterday. It occurs pretty randomly.
After checking the error message using BlueScreenView.exe, a freeware, I was able to find out what caused the BSOD which is
Ntfs.sys and ntoskrnl.exe
I'm not really sure how to fix this problem.

Arc · Jun 15, 2013

Are your previous issues over? You never replied back in those.
http://www.sevenforums.com/bsod-help-support/290365-bsod-playing-dota2-pagefile-nonpaged-area.html
http://www.sevenforums.com/bsod-help-support/291698-bsod-while-playing-dota-2-no-error-message.html

And, as a starter of the third thread, you must know Blue Screen of Death (BSOD) Posting Instructions.

z3r010 · Jun 15, 2013

Threads merged.

pizzafreeza · Jun 15, 2013

ops sorry I forgot to upload the bsod report. As with the other issues, I think the only problem that was solved was with the graphic card.

Arc · Jun 15, 2013

Uninstall MagicISO/ Magic Disc.
Uninstall Advanced System Care.

Get rid of intel rapid storage. First uninstall it from Control Panel > Programs and Features. Then Uninstall the driver from device manager.

Right click on "my computer" icon and click "manage" on the context menu.
It will open the "computer management" window.
Select "Device Manager" in the left pane, It will list all the existing devices up.
Expand "IDE ATA/ATAPI controllers" by clicking on the triangle in front of it.
Select one Intel device item under it, right click, uninstall.
Continue the process for all Intel items under "IDE ATA/ATAPI controllers"
Now restart the computer. At restart, windows will auto configure the appropriate native system driver.

Free up the startup. Windows does not need any other program to auto start with it, but the auto start programs often conflicts and causes various problems including BSODs.

Click on the Start button
Type “msconfig (without quotes), click the resulting link. It will open the System Configuration window.
Select the “Startup” tab.
Deselect all items other than the antivirus and the touchpad driver, SynTPEnh.
Apply > OK
Accept then restart.

And which antivirus do you use?

Let us know the results.

_________________________________________________________________________________
BSOD ANALYSIS:

Code:

*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck 3B, {c0000005, fffff80003795b0c, fffff88002bcda70, 0}

Probably caused by : ntkrnlmp.exe ( nt!CmpDoCompareKeyName+2c )

Followup: MachineOwner
---------

2: kd> !analyze -v
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

SYSTEM_SERVICE_EXCEPTION (3b)
An exception happened while executing a system service routine.
Arguments:
Arg1: 00000000c0000005, Exception code that caused the bugcheck
Arg2: fffff80003795b0c, Address of the instruction which caused the bugcheck
Arg3: fffff88002bcda70, Address of the context record for the exception that caused the bugcheck
Arg4: 0000000000000000, zero.

Debugging Details:
------------------


EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced memory at 0x%08lx. The memory could not be %s.

FAULTING_IP: 
nt!CmpDoCompareKeyName+2c
fffff800`03795b0c f6400220        test    byte ptr [rax+2],20h

CONTEXT:  fffff88002bcda70 -- (.cxr 0xfffff88002bcda70)
rax=ffff76a008a186fc rbx=fffff8a0089d8024 rcx=0000000000000000
rdx=0000000000000000 rsi=fffff8a000bb0410 rdi=fffff88002bce6a0
rip=fffff80003795b0c rsp=fffff88002bce450 rbp=00000000013976f8
 r8=fffff8a000bf52e0  r9=fffff8a009493024 r10=0000000000000001
r11=0000000000000040 r12=fffff88002bce6a0 r13=000000000000023f
r14=fffff8a00c40e91c r15=fffff8a000bb0410
iopl=0         nv up ei ng nz na po nc
cs=0010  ss=0018  ds=002b  es=002b  fs=0053  gs=002b             efl=00010286
nt!CmpDoCompareKeyName+0x2c:
fffff800`03795b0c f6400220        test    byte ptr [rax+2],20h ds:002b:ffff76a0`08a186fe=??
Resetting default scope

CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  WIN7_DRIVER_FAULT

BUGCHECK_STR:  0x3B

PROCESS_NAME:  csrss.exe

CURRENT_IRQL:  0

LAST_CONTROL_TRANSFER:  from 0000000000000000 to fffff80003795b0c

STACK_TEXT:  
fffff880`02bce450 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!CmpDoCompareKeyName+0x2c


FOLLOWUP_IP: 
nt!CmpDoCompareKeyName+2c
fffff800`03795b0c f6400220        test    byte ptr [rax+2],20h

SYMBOL_STACK_INDEX:  0

SYMBOL_NAME:  nt!CmpDoCompareKeyName+2c

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: nt

IMAGE_NAME:  ntkrnlmp.exe

DEBUG_FLR_IMAGE_TIMESTAMP:  5147d9c6

STACK_COMMAND:  .cxr 0xfffff88002bcda70 ; kb

FAILURE_BUCKET_ID:  X64_0x3B_nt!CmpDoCompareKeyName+2c

BUCKET_ID:  X64_0x3B_nt!CmpDoCompareKeyName+2c

Followup: MachineOwner
---------

pizzafreeza · Jun 15, 2013

I did everything you said, but I can't install Microsoft security essentials for some unknown reason. It keeps failing to install and gives an error message. I've attached an image of the error message below.
I searched for other anti-virus software that might still be in the system, but there's nothing I can find. If there's an alternative anti-virus software please do let me know.

Arc · Jun 16, 2013

You may give AVAST 2013 | Download Free Antivirus Software for Virus Protection (the free version only) a try.

pizzafreeza · Jun 19, 2013

BSOD again, caused by ntoskrnl.exe

I've also installed the avast antivirus and ran a full system scan, but found nothing.

Arc · Jun 20, 2013

This BSOD is caused by Ntfs.sys, which is related to storage,

It may be a failing storage device (500 GB WD), or the controllers, or some programs affecting storage performance, or a virus, or an ambitious antivirus.

I suggested you to use Avast free ... you installed Avast Pro? Avast pro can make such a problem for sure.

Seatool for dos: SeaTools | Seagate download. Burn it in a blank cd. boot from the CD, click on "Accept", wait for it to finish detecting the drives, then in the upper left corner select "Basic Tests", then select "Long Test" and let it run.

Let us know the results.

Code:

*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck 50, {fffffea0104ecb90, 0, fffff880016a5ccc, 7}


Could not read faulting driver name
Probably caused by : Ntfs.sys ( Ntfs!NtfsCopyReadA+9c )

Followup: MachineOwner
---------

1: kd> !analyze -v
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

PAGE_FAULT_IN_NONPAGED_AREA (50)
Invalid system memory was referenced.  This cannot be protected by try-except,
it must be protected by a Probe.  Typically the address is just plain bad or it
is pointing at freed memory.
Arguments:
Arg1: fffffea0104ecb90, memory referenced.
Arg2: 0000000000000000, value 0 = read operation, 1 = write operation.
Arg3: fffff880016a5ccc, If non-zero, the instruction address which referenced the bad memory
    address.
Arg4: 0000000000000007, (reserved)

Debugging Details:
------------------


Could not read faulting driver name

READ_ADDRESS: GetPointerFromAddress: unable to read from fffff800036b6100
GetUlongFromAddress: unable to read from fffff800036b61c0
 fffffea0104ecb90 Nonpaged pool

FAULTING_IP: 
Ntfs!NtfsCopyReadA+9c
fffff880`016a5ccc 498b4350        mov     rax,qword ptr [r11+50h]

MM_INTERNAL_CODE:  7

CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  WIN7_DRIVER_FAULT

BUGCHECK_STR:  0x50

PROCESS_NAME:  dota.exe

CURRENT_IRQL:  0

TRAP_FRAME:  fffff880096d8610 -- (.trap 0xfffff880096d8610)
NOTE: The trap frame does not contain all registers.
Some register values may be zeroed or incorrect.
rax=0000000000000000 rbx=0000000000000000 rcx=0000000000000158
rdx=0000000000000000 rsi=0000000000000000 rdi=0000000000000000
rip=fffff880016a5ccc rsp=fffff880096d87a0 rbp=fffff880096d8b00
 r8=0000000000000000  r9=0000000000000000 r10=fffffa8006abd030
r11=fffffea0104ecb40 r12=0000000000000000 r13=0000000000000000
r14=0000000000000000 r15=0000000000000000
iopl=0         nv up ei ng nz na pe nc
Ntfs!NtfsCopyReadA+0x9c:
fffff880`016a5ccc 498b4350        mov     rax,qword ptr [r11+50h] ds:fffffea0`104ecb90=????????????????
Resetting default scope

LAST_CONTROL_TRANSFER:  from fffff800034fb52b to fffff8000347ec00

STACK_TEXT:  
fffff880`096d84a8 fffff800`034fb52b : 00000000`00000050 fffffea0`104ecb90 00000000`00000000 fffff880`096d8610 : nt!KeBugCheckEx
fffff880`096d84b0 fffff800`0347cd2e : 00000000`00000000 fffffea0`104ecb90 fffff980`75ea8000 00000000`03cb9fdc : nt! ?? ::FNODOBFM::`string'+0x43781
fffff880`096d8610 fffff880`016a5ccc : fffffa80`00000000 00000000`03cb9fdc fffff880`096d8b00 fffffa80`05c0cd20 : nt!KiPageFault+0x16e
fffff880`096d87a0 fffff880`01417098 : fffffa80`05c0cd20 fffffa80`0d436a28 00000000`00120089 fffffa80`05c0cd01 : Ntfs!NtfsCopyReadA+0x9c
fffff880`096d8980 fffff880`0141a8ba : fffff880`096d8a50 00000000`57ea0003 00000000`57ea0000 fffffa80`05c0cd00 : fltmgr!FltpPerformFastIoCall+0x88
fffff880`096d89e0 fffff880`01438630 : fffffa80`05c0cd20 00000000`00000000 fffff880`096d8b40 00000000`00013a9a : fltmgr!FltpPassThroughFastIo+0xda
fffff880`096d8a20 fffff800`037697e9 : fffffa80`05c0cd20 fffff880`00000001 fffffa80`054ff8e0 fffffa80`05c0cd20 : fltmgr!FltpFastIoRead+0x1d0
fffff880`096d8ac0 fffff800`0347de93 : 00000000`00002e80 00000000`00000000 00000000`00000000 00000000`00000000 : nt!NtReadFile+0x417
fffff880`096d8bb0 00000000`75212e09 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSystemServiceCopyEnd+0x13
00000000`1640ebf8 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x75212e09


STACK_COMMAND:  kb

FOLLOWUP_IP: 
Ntfs!NtfsCopyReadA+9c
fffff880`016a5ccc 498b4350        mov     rax,qword ptr [r11+50h]

SYMBOL_STACK_INDEX:  3

SYMBOL_NAME:  Ntfs!NtfsCopyReadA+9c

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: Ntfs

IMAGE_NAME:  Ntfs.sys

DEBUG_FLR_IMAGE_TIMESTAMP:  5167f5fc

FAILURE_BUCKET_ID:  X64_0x50_Ntfs!NtfsCopyReadA+9c

BUCKET_ID:  X64_0x50_Ntfs!NtfsCopyReadA+9c

Followup: MachineOwner
---------

Northernsoul55 · Jun 20, 2013

Hi,

In addition to Arc's excellent suggestions I noticed a few driver issues:

This driver is known for BSOD issues:
Driver: xusb21.sys
Dated: 2009
Refers to: XBox USB wireless controller
(BSOD issues in Win7 with 2009 driver)

:ar: http://www.microsoft.com/hardware/en-us/downloads#gaming

This driver is also known for causing issues:
Driver: WinRing0x64.sys
Dated: Sat Jul 26 14:29:37 2008
Refers to: many different programs that center around the using of the WinRing libraries (RealTemp, Corsair Link2, Razer GameBooster, etc)

winring0_1_2_0 \??\c:\program files (x86)\osd\winringx64.sys

This is from Python 3.2 software, either update the program or uninstall:

:ar: http://www.python.org/

This driver is for overclocking software (ATI Tool) and pre-dates windows 7 and needs removed:
(Any overclocking will cause system instability)

Driver: ATITool64.sys
Dated: Wed Aug 08 17:42:26 2007
Refers to: Overclocking utility for ATI/nVidia cards - will only work on Windows 2000/XP/2003
Website: :ar: ATITool - Overclocking utility for ATI and NVIDIA cards

I notice that your C: drive only has 46GB left free, I would suggest uninstalling any unecessary programs and freeing up disk space::ar: http://www.sevenforums.com/tutorials/129976-hard-disk-space-free-up-recover.html

cheers
Dave

BSOD playing DOTA2 pagefile in nonpaged area

New member

My Computer My Computer

At a glance

New member

My Computer My Computer

At a glance

New member

My Computer My Computer

At a glance

New member

My Computer My Computer

At a glance

New member

My Computer My Computer

At a glance

New member

My Computer My Computer

At a glance

New member

My Computer My Computer

At a glance

New member

My Computer My Computer

At a glance

Administrator

My Computer My Computer

At a glance

New member

My Computer My Computer

At a glance

New member

My Computer My Computer

At a glance

New member

My Computer My Computer

At a glance

New member

My Computer My Computer

At a glance

New member

My Computer My Computer

At a glance

New member

My Computer My Computer

At a glance

New member

My Computer My Computer

At a glance

Similar threads

My Computer

My Computer

My Computer

My Computer

My Computer

My Computer

My Computer

My Computer

My Computer

My Computer

My Computer

My Computer

My Computer

My Computer

My Computer

My Computer