Solved ntoskrnl.exe irql not less or equal, PAGE_FAULT_IN_NONPAGED_AREA

FreddyKrueger · May 31, 2013

Good morning to all. I have problems with the PC.
Resets and get the blue screen.
I've checked the memory with memtest, checked hard disks without errors.
Use the driver easy to have all the updated drivers.
When I use this program holds few more days without restarting.

I pass all the information

today it has restarted. I noticed that after the laptop screen down and get into suspension, returning to lift the screen a few seconds restarts.

==================================================
Dump File: 053113-21652-01.dmp
Fault Time: 31/05/2013 8:50:15
Error checking String: PAGE_FAULT_IN_NONPAGED_AREA
Error check code: 0x00000050
Parameter 1: fffff8a0 `8023ecf0
Parameter 2: 00000000 `00000000
Parameter 3: fffff800 `033a5fcd
Parameter 4: 00000000 `00000005
Caused by driver: ntoskrnl.exe
Caused by address: ntoskrnl.exe +75 c00
Description: NT Kernel & System
Name: Microsoft ® Windows ® Operating System
Company: Microsoft Corporation
Version: 6.1.7601.18113 (win7sp1_gdr.130318-1533)
Process: x64
Crash Address: ntoskrnl.exe +75 c00
Stack Address 1:
Stack Address 2:
Stack Address 3:
Computer Name:
Full Path: C: \ Windows \ Minidump \ 053113-21652-01.dmp
Processors Count: 6
Major Version: 15
Minor Version: 7601
Dump File Size: 266,520
==================================================

FreddyKrueger · May 31, 2013

OThers dumps

Code:

==================================================
Archivo de volcado: 052613-28922-01.dmp
Hora del fallo : 26/05/2013 22:52:56
Cadena de comprobación de error: KMODE_EXCEPTION_NOT_HANDLED
Código de comprobación de error: 0x0000001e
Parámetro 1 : ffffffff`c0000005
Parámetro 2 : fffff800`03077b05
Parámetro 3 : 00000000`00000000
Parámetro 4 : ffffffff`ffffffff
Causado por controlador: ntoskrnl.exe
Causado por dirección: ntoskrnl.exe+75c00
Descripción : NT Kernel & System
Nombre : Microsoft® Windows® Operating System
Companía : Microsoft Corporation
Versión : 6.1.7601.18113 (win7sp1_gdr.130318-1533)
Proceso : x64
Crash Address : ntoskrnl.exe+75c00
Stack Address 1 : 
Stack Address 2 : 
Stack Address 3 : 
Computer Name : 
Full Path : C:\Windows\Minidump\052613-28922-01.dmp
Processors Count : 6
Major Version : 15
Minor Version : 7601
Dump File Size : 275.536
==================================================
 
==================================================
Archivo de volcado: 052613-32448-01.dmp
Hora del fallo : 26/05/2013 22:46:46
Cadena de comprobación de error: MEMORY_MANAGEMENT
Código de comprobación de error: 0x0000001a
Parámetro 1 : 00000000`00005003
Parámetro 2 : fffff700`01080000
Parámetro 3 : 00000000`0000d868
Parámetro 4 : 0000d866`8001b0d0
Causado por controlador: ntoskrnl.exe
Causado por dirección: ntoskrnl.exe+75c00
Descripción : NT Kernel & System
Nombre : Microsoft® Windows® Operating System
Companía : Microsoft Corporation
Versión : 6.1.7601.18113 (win7sp1_gdr.130318-1533)
Proceso : x64
Crash Address : ntoskrnl.exe+75c00
Stack Address 1 : 
Stack Address 2 : 
Stack Address 3 : 
Computer Name : 
Full Path : C:\Windows\Minidump\052613-32448-01.dmp
Processors Count : 6
Major Version : 15
Minor Version : 7601
Dump File Size : 275.536
==================================================
 
==================================================
Archivo de volcado: 052413-35927-01.dmp
Hora del fallo : 24/05/2013 12:59:01
Cadena de comprobación de error: IRQL_NOT_LESS_OR_EQUAL
Código de comprobación de error: 0x0000000a
Parámetro 1 : fffff880`838a7628
Parámetro 2 : 00000000`00000002
Parámetro 3 : 00000000`00000001
Parámetro 4 : fffff800`030834ff
Causado por controlador: ntoskrnl.exe
Causado por dirección: ntoskrnl.exe+75c00
Descripción : NT Kernel & System
Nombre : Microsoft® Windows® Operating System
Companía : Microsoft Corporation
Versión : 6.1.7601.18113 (win7sp1_gdr.130318-1533)
Proceso : x64
Crash Address : ntoskrnl.exe+75c00
Stack Address 1 : 
Stack Address 2 : 
Stack Address 3 : 
Computer Name : 
Full Path : C:\Windows\Minidump\052413-35927-01.dmp
Processors Count : 6
Major Version : 15
Minor Version : 7601
Dump File Size : 275.536
==================================================
 
==================================================
Archivo de volcado: 052313-21262-01.dmp
Hora del fallo : 23/05/2013 8:09:52
Cadena de comprobación de error: IRQL_NOT_LESS_OR_EQUAL
Código de comprobación de error: 0x0000000a
Parámetro 1 : fffffa80`8ee15140
Parámetro 2 : 00000000`00000002
Parámetro 3 : 00000000`00000001
Parámetro 4 : fffff800`03068447
Causado por controlador: ntoskrnl.exe
Causado por dirección: ntoskrnl.exe+75c00
Descripción : NT Kernel & System
Nombre : Microsoft® Windows® Operating System
Companía : Microsoft Corporation
Versión : 6.1.7601.18113 (win7sp1_gdr.130318-1533)
Proceso : x64
Crash Address : ntoskrnl.exe+75c00
Stack Address 1 : 
Stack Address 2 : 
Stack Address 3 : 
Computer Name : 
Full Path : C:\Windows\Minidump\052313-21262-01.dmp
Processors Count : 6
Major Version : 15
Minor Version : 7601
Dump File Size : 275.536
==================================================
 
==================================================
Archivo de volcado: 051613-23259-01.dmp
Hora del fallo : 16/05/2013 17:09:13
Cadena de comprobación de error: PAGE_FAULT_IN_NONPAGED_AREA
Código de comprobación de error: 0x00000050
Parámetro 1 : fffffa80`8649f8c0
Parámetro 2 : 00000000`00000001
Parámetro 3 : fffff800`030e5d9c
Parámetro 4 : 00000000`00000005
Causado por controlador: ntoskrnl.exe
Causado por dirección: ntoskrnl.exe+75c00
Descripción : NT Kernel & System
Nombre : Microsoft® Windows® Operating System
Companía : Microsoft Corporation
Versión : 6.1.7601.18113 (win7sp1_gdr.130318-1533)
Proceso : x64
Crash Address : ntoskrnl.exe+75c00
Stack Address 1 : 
Stack Address 2 : 
Stack Address 3 : 
Computer Name : 
Full Path : C:\Windows\Minidump\051613-23259-01.dmp
Processors Count : 6
Major Version : 15
Minor Version : 7601
Dump File Size : 275.536
==================================================
 
==================================================
Archivo de volcado: 051413-22557-01.dmp
Hora del fallo : 14/05/2013 13:12:19
Cadena de comprobación de error: SYSTEM_SERVICE_EXCEPTION
Código de comprobación de error: 0x0000003b
Parámetro 1 : 00000000`c0000005
Parámetro 2 : fffff800`0339cf7e
Parámetro 3 : fffff880`048fa720
Parámetro 4 : 00000000`00000000
Causado por controlador: ntoskrnl.exe
Causado por dirección: ntoskrnl.exe+75c00
Descripción : NT Kernel & System
Nombre : Microsoft® Windows® Operating System
Companía : Microsoft Corporation
Versión : 6.1.7601.18113 (win7sp1_gdr.130318-1533)
Proceso : x64
Crash Address : ntoskrnl.exe+75c00
Stack Address 1 : 
Stack Address 2 : 
Stack Address 3 : 
Computer Name : 
Full Path : C:\Windows\Minidump\051413-22557-01.dmp
Processors Count : 6
Major Version : 15
Minor Version : 7601
Dump File Size : 262.144
==================================================
 
==================================================
Archivo de volcado: 050813-25053-01.dmp
Hora del fallo : 08/05/2013 10:56:44
Cadena de comprobación de error: DRIVER_CORRUPTED_EXPOOL
Código de comprobación de error: 0x000000c5
Parámetro 1 : fffff800`8320cc48
Parámetro 2 : 00000000`00000002
Parámetro 3 : 00000000`00000000
Parámetro 4 : fffff800`031b1127
Causado por controlador: ntoskrnl.exe
Causado por dirección: ntoskrnl.exe+75c00
Descripción : NT Kernel & System
Nombre : Microsoft® Windows® Operating System
Companía : Microsoft Corporation
Versión : 6.1.7601.18113 (win7sp1_gdr.130318-1533)
Proceso : x64
Crash Address : ntoskrnl.exe+75c00
Stack Address 1 : 
Stack Address 2 : 
Stack Address 3 : 
Computer Name : 
Full Path : C:\Windows\Minidump\050813-25053-01.dmp
Processors Count : 6
Major Version : 15
Minor Version : 7601
Dump File Size : 275.536
==================================================
 
==================================================
Archivo de volcado: 043013-25334-01.dmp
Hora del fallo : 30/04/2013 12:35:57
Cadena de comprobación de error: UNEXPECTED_KERNEL_MODE_TRAP
Código de comprobación de error: 0x0000007f
Parámetro 1 : 00000000`00000008
Parámetro 2 : 00000000`80050031
Parámetro 3 : 00000000`000006f8
Parámetro 4 : fffff800`030b1e1c
Causado por controlador: ntoskrnl.exe
Causado por dirección: ntoskrnl.exe+75c00
Descripción : NT Kernel & System
Nombre : Microsoft® Windows® Operating System
Companía : Microsoft Corporation
Versión : 6.1.7601.18113 (win7sp1_gdr.130318-1533)
Proceso : x64
Crash Address : ntoskrnl.exe+75c00
Stack Address 1 : 
Stack Address 2 : 
Stack Address 3 : 
Computer Name : 
Full Path : C:\Windows\Minidump\043013-25334-01.dmp
Processors Count : 6
Major Version : 15
Minor Version : 7601
Dump File Size : 275.536
==================================================
 
==================================================
Archivo de volcado: 043013-24741-01.dmp
Hora del fallo : 30/04/2013 10:22:45
Cadena de comprobación de error: IRQL_NOT_LESS_OR_EQUAL
Código de comprobación de error: 0x0000000a
Parámetro 1 : 00000000`80000000
Parámetro 2 : 00000000`00000002
Parámetro 3 : 00000000`00000001
Parámetro 4 : fffff800`030b6622
Causado por controlador: ntoskrnl.exe
Causado por dirección: ntoskrnl.exe+75c00
Descripción : NT Kernel & System
Nombre : Microsoft® Windows® Operating System
Companía : Microsoft Corporation
Versión : 6.1.7601.18113 (win7sp1_gdr.130318-1533)
Proceso : x64
Crash Address : ntoskrnl.exe+75c00
Stack Address 1 : 
Stack Address 2 : 
Stack Address 3 : 
Computer Name : 
Full Path : C:\Windows\Minidump\043013-24741-01.dmp
Processors Count : 6
Major Version : 15
Minor Version : 7601
Dump File Size : 275.536
==================================================

FreddyKrueger · May 31, 2013

Everest complete report plain text in english

FreddyKrueger · Jun 2, 2013

SF Diagnostic tool

Good morning, I apologize for the thread, as a result of the desperation of my problem, I had not read the thread
http://www.sevenforums.com/bsod-help-support/96879-blue-screen-death-bsod-posting-instructions.html

Yesterday format the computer, I have an image with everything installed at a point where the computer worked fine.
what was my surprise that after loading the image, everything seemed to go well and at night when you turn on the PC, again blue screen.
I pass the file generated by this marvel of utility that ye have at our disposal.

Thank you for your help.
Have a good Sunday morning.
attentively
Freddy

koolkat77 · Jun 2, 2013

Security App

Code:

fffff880`07d13a88  fffff880`04e50700Unable to load image \SystemRoot\system32\DRIVERS\EpfwLWF.sys, Win32 error 0n2
*** WARNING: Unable to verify timestamp for EpfwLWF.sys
*** ERROR: Module load completed but symbols could not be loaded for EpfwLWF.sys
 EpfwLWF+0x2700

Crashes indicate ESET Nod32 being a possible cause. Remove and replace with Microsoft Security Essentials to see if it provides more stability. Uninstallers (removal tools) for common antivirus software. Microsoft Security Essentials and Malwarebytes are recommended from a strict BSOD perspective. They do not cause blue screens on the system as other AV products do.

Microsoft Security Essentials, Free antivirus for windows and Malwarebytes Anti-Malware Free

Information

:warn: Do not start the free trial of MalwareBytes, unselect that option when prompted.
:tip: Update and make full scans with both separately.

Memtest86+

Run Memtest86+ for at least 8-10 passes. It may take up to 20 passes to find problems. Make sure to run it once after the system has been on for a few hours and is warm, and then also run it again when the system has been off for a few hours and is cold. How to Test and Diagnose RAM Issues with Memtest86+

Note

Pay close attention to part 3 of the tutorial in order to rule the faulty RAM stick out.

Tip

Do this test overnight.

System Optimisers

Please remove the following software:

Code:

Start Menu\Programs\TuneUp Utilities 2012	Public:Start Menu\Programs\TuneUp Utilities 2012	Public

This software is a known cause of BSOD's. The windows 7 operating system does not require these registry cleaning software. They often tune-down rather than tune-up and can wreck the OS beyond repair. Microsoft have improved Windows 7 significantly and it is much better at organising and optimising itself than its predecessors. Check this, this and this thread for evidence.

If you feel the need to use a registry cleaning or optimisation software, most of us recommend the use of CCleaner - PC Optimization and Cleaning - Free Download but make sure you back up the registry before making letting ccleaner delete anything.10 Tips on How to Properly Maintain Your Computer

Hard Drive/Storage

Post disk summary using CrystalDiskInfo software: CrystalDiskInfo Standard Edition

:info: For how to upload a screenshot or file, read here

Make a hard drive test from the hard drive manufacturers website: Hard Drive Diagnostic Procedure

For errors on your Hard drive(s): How to Run Disk Check in Windows 7

SFC /scannow to check windows for corruption:

How to Repair Windows 7 System Files with System File Checker
1. Click Start

2. In the search box, type Command Prompt
3. In the list that appears, right-click on cmd.exe and choose Run as administrator
4. In the command window that opens, type

sfc /scannow

and hit enter.

FreddyKrueger · Jun 2, 2013

Thanks so much, have no words to say thanks.
I do this step by step, and post here.
Thanks

thanks
thanks

ohhh my good thanksss

koolkat77 · Jun 2, 2013

You're welcome and do keep us posted!

FreddyKrueger · Jun 3, 2013

Good afternoon.
Let's go step by step, I have already done the home works

I uploaded a copy again with the configured system from an image that has no problems.
That image has windows, drivers, the CS6, and office.

I uninstalled eset smart security.
I installed microsoft security essencials.
I installed Malwarebytes (thanks for "untick this options")

I performed the memory test with memtest.
THE first pc last night with several hours of use.
Pass the test without any errors.

This morning with cold pc, I repeated the test and all ok.

This weekend while I play Skyrim :party:

on the x360 to do the tests over 20 passes. :sleepy:

I uninstalled TuneUp Utilities.

attached an image of the hard drive status.

also attached:
I opened the computer to remove a hard drive and return the dvd.
I found a cable if not loose.

I enclose a photo of one of the times it has been frozen.
But he left the blue screen, it was so, as a graphic failure.

I downloaded the utility of Segate to see the HDD status.
I said there were no errors.

But there is a fact not that means:

"Smart is supported and enabled"
"SMART has not been tripped"

The system seems to be stable.
We pass the Ccleaner.
And when I tried to boot this morning thinking stayed with the black screen.

Turn off the system and when I boot Fixer Upper indicated that I had to start, so I did.
Take advantage and made the windows memory test (disk recovery tools to win 7)
Pass the test, all ok

Right now the system is working properly.

This computer when booting always been very sensitive.
I mean, when you leave the DELL logo and a progress bar sometimes they do not load at all. If I have a DVD stuck, an external drive or usb esata connected usually stays thinking and does not end the progress bar.

have the last Bios version - A13

I've heard of an utility called Wondershare Livebox, not if it is good for something.

Infinitely appreciate the help and support.
Reporting instructions and I still hope.
Have a good afternoon.
Greetings from Spain.
attentively

Freddy

Britton30 · Jun 3, 2013

Hi Freddy. Yes it appears your graphics has failed in the laptop to you have a poor connection to it. The cable could also be defective as well. The white wire inside appears to be one wire and should be reconnected to itself.

essenbe · Jun 3, 2013

Hello, FreddyKrueger, we will try to help you, but I'm not sure I totally understand everything. I can see the picture of the screen problem, but am not quite sure about the wires you are showing. They appear to go to the wireless adaptor in the laptop. Or am I wrong?

How old is the image you 'uploaaded' and where did you upload it from?
Also, You didn't quite explain about memtest86+. here is the tutorial on how to run it. http://www.sevenforums.com/tutorials/105647-ram-test-memtest86.html
When you run it, it needs to be run for 8 passes. Each pass consists of 10 tests, and each pass tests something different. It should take between 6 -8 hours to run the test completely. If you have an error it will show up in red on the screen. If you get an error you can stop the test. It is usually best to run it overnight.
Have you gone to Dell's web site and uploaded the most recent graphics drivers for your computer model? You need to uninstall the old graphics drivers first. You don't list what graphics you have. Is it the on chip graphics or a discrete card? Did the screen operate well during the memory test you ran? What do you mean about pass the ccleaner? Please don't run the registry cleaner. I don't know what the 'fixer upper' is or the Wondershare Livebox. We do not reccomend using any of the speed up your computer utilities or the other utilities that are all over the internet. Also, is your computer still under warranty from dell?

I know these are a lot of questions, but we need the answers to try to help you. also, would you pleas fill out your complete system specs. this will help you. http://www.sevenforums.com/tutorials/180324-system-info-see-your-system-specs.html I don't know if you have had any BSODs, but please follow these instructions. It will provide us with information that may help. http://www.sevenforums.com/bsod-help-support/96879-blue-screen-death-bsod-posting-instructions.html

FreddyKrueger · Jun 4, 2013

Britton30 said:
Hi Freddy. Yes it appears your graphics has failed in the laptop to you have a poor connection to it. The cable could also be defective as well. The white wire inside appears to be one wire and should be reconnected to itself.

good afternoon, thank you very much for your answer.
I noticed and just before leaving the blue screen comes out like the picture for a few seconds. not if it is the graph (which would difficult solution is already integrated ATI Radeo Mobility Hd 4670) or that the computer is frozen.

The cable is loose it?
I do not know where to connect.
In the picture above the letters on the right looks like a screw if it is not there.

Thanks for your answer and your invaluable help.

I changed the hdmi cable it off, but the error occurs when I am alone with the laptop.

Funny, but it happens, when I go to a client and turn on my PC, when lit does not usually happen.

Yesterday happened when you try to open a pdf

essenbe said:
Hello, FreddyKrueger, we will try to help you, but I'm not sure I totally understand everything. I can see the picture of the screen problem, but am not quite sure about the wires you are showing. They appear to go to the wireless adaptor in the laptop. Or am I wrong?

How old is the image you 'uploaaded' and where did you upload it from?
Also, You didn't quite explain about memtest86+. here is the tutorial on how to run it. http://www.sevenforums.com/tutorials/105647-ram-test-memtest86.html
When you run it, it needs to be run for 8 passes. Each pass consists of 10 tests, and each pass tests something different. It should take between 6 -8 hours to run the test completely. If you have an error it will show up in red on the screen. If you get an error you can stop the test. It is usually best to run it overnight.
Have you gone to Dell's web site and uploaded the most recent graphics drivers for your computer model? You need to uninstall the old graphics drivers first. You don't list what graphics you have. Is it the on chip graphics or a discrete card? Did the screen operate well during the memory test you ran? What do you mean about pass the ccleaner? Please don't run the registry cleaner. I don't know what the 'fixer upper' is or the Wondershare Livebox. We do not reccomend using any of the speed up your computer utilities or the other utilities that are all over the internet. Also, is your computer still under warranty from dell?

I know these are a lot of questions, but we need the answers to try to help you. also, would you pleas fill out your complete system specs. this will help you. http://www.sevenforums.com/tutorials/180324-system-info-see-your-system-specs.html I don't know if you have had any BSODs, but please follow these instructions. It will provide us with information that may help. http://www.sevenforums.com/bsod-help-support/96879-blue-screen-death-bsod-posting-instructions.html

good afternoon, thank you very much for your answer.

My first thought is that the cables are wireless antennas.

This afternoon I pass by the shop of a friend and tell me if I have to connect the cable somewhere.

The images are from yesterday, the did at that very moment.

I passed the memory test one pass because I could not more, this weekend it whole step, now I need the laptop for work: (

I have since Dell drivers, the card is an ATI Mobility Radeon HD 4670.

Up in my first report.zip answers has an attachment which you have all the information of the system.

Now I update the thread with the last blue screen

infinite thanks for your help. Knowing that there are you, it gives me peace.

FreddyKrueger · Jun 4, 2013

Good afternoon update

The system showed almost normal, but occasionally black screen was left having to restart.

Last night while trying to read a pdf is reset.

at no time told me came out errors or blue screen.

This morning I installed the drivers for the graphics card ATI Mobility Radeon HD 4670 dell page, are quite old 2010.

I had enough trouble to install it.
Removed before giving to ERASE the drivers, and windows quickly found them and installed again.

Boot into Safe mode, and when trying to install told me that it would not recognize the graphic driver.
Has been installed, and when and gone to a client and I booted the computer is left with a black screen.
Restart and boot, then blue screen.
Perfeco so we thought the dump.

to start the system again has stayed where sometimes stays in system initialization, photo "one"
When I turn off and starting it has been in the photo 'two'

I started again I have given to f8, start windows normally and booted, as a result I can write now.

I spent the great utility of this forum for the blue screen and I pass the data.

I have another hard drive, and other memory modules.
We may change when you please both.
I think it best to first memory is easier

I remain at your disposal and infinite thanks, if you come around here I invite the good jamon iberico

Have a good day
attentively
Freddy

koolkat77 · Jun 4, 2013

Is the laptop under warranty? If yes, you should take it for servicing.

Code:

*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck 1A, {41284, b9eb001, 1bcc, fffff70001080000}

Probably caused by : ntkrnlmp.exe ( nt! ?? ::FNODOBFM::`string'+4ad3 )

Followup: MachineOwner
---------

2: kd> !analyze -v
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

MEMORY_MANAGEMENT (1a)
    # Any other values for parameter 1 must be individually examined.
Arguments:
Arg1: 0000000000041284, A PTE or the working set list is corrupt.
Arg2: 000000000b9eb001
Arg3: 0000000000001bcc
Arg4: fffff70001080000

Debugging Details:
------------------


BUGCHECK_STR:  0x1a_41284

CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  WIN7_DRIVER_FAULT

PROCESS_NAME:  MsMpEng.exe

CURRENT_IRQL:  0

LAST_CONTROL_TRANSFER:  from fffff80002cd4717 to fffff80002c7dc00

STACK_TEXT:  
fffff880`069a3918 fffff800`02cd4717 : 00000000`0000001a 00000000`00041284 00000000`0b9eb001 00000000`00001bcc : nt!KeBugCheckEx
fffff880`069a3920 fffff800`02caeef0 : fffff700`01080000 bcc00001`c0ef3867 00000000`00000000 dfe00001`24b0a025 : nt! ?? ::FNODOBFM::`string'+0x4ad3
fffff880`069a3960 fffff800`02c6a3ff : fffffa80`00000000 00000000`0bb9dfff 00000000`00000000 00000000`00000000 : nt!MiDeleteVirtualAddresses+0x4e8
fffff880`069a3b20 fffff800`02c7ce93 : ffffffff`ffffffff 00000000`0b28e7e0 00000000`0b28e7a8 00000000`00008000 : nt!NtFreeVirtualMemory+0x61f
fffff880`069a3c20 00000000`773014fa : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSystemServiceCopyEnd+0x13
00000000`0b28e718 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x773014fa


STACK_COMMAND:  kb

FOLLOWUP_IP: 
nt! ?? ::FNODOBFM::`string'+4ad3
fffff800`02cd4717 cc              int     3

SYMBOL_STACK_INDEX:  1

SYMBOL_NAME:  nt! ?? ::FNODOBFM::`string'+4ad3

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: nt

IMAGE_NAME:  ntkrnlmp.exe

DEBUG_FLR_IMAGE_TIMESTAMP:  5147d9c6

FAILURE_BUCKET_ID:  X64_0x1a_41284_nt!_??_::FNODOBFM::_string_+4ad3

BUCKET_ID:  X64_0x1a_41284_nt!_??_::FNODOBFM::_string_+4ad3

Followup: MachineOwner
---------

You should test your ram again and remove acronis software from your system.

Code:

*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck 50, {fffff8a0853f1f98, 1, fffff80002e01147, 5}

*** WARNING: Unable to verify timestamp for tdrpman.sys
*** ERROR: Module load completed but symbols could not be loaded for tdrpman.sys

Could not read faulting driver name
Probably caused by : tdrpman.sys ( tdrpman+b3a60 )

Followup: MachineOwner
---------

4: kd> !analyze -v
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

PAGE_FAULT_IN_NONPAGED_AREA (50)
Invalid system memory was referenced.  This cannot be protected by try-except,
it must be protected by a Probe.  Typically the address is just plain bad or it
is pointing at freed memory.
Arguments:
Arg1: fffff8a0853f1f98, memory referenced.
Arg2: 0000000000000001, value 0 = read operation, 1 = write operation.
Arg3: fffff80002e01147, If non-zero, the instruction address which referenced the bad memory
	address.
Arg4: 0000000000000005, (reserved)

Debugging Details:
------------------


Could not read faulting driver name

WRITE_ADDRESS: GetPointerFromAddress: unable to read from fffff80002f04100
GetUlongFromAddress: unable to read from fffff80002f041c0
 fffff8a0853f1f98 Paged pool

FAULTING_IP: 
nt!ExAllocatePoolWithTag+537
fffff800`02e01147 48895808        mov     qword ptr [rax+8],rbx

MM_INTERNAL_CODE:  5

CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  WIN7_DRIVER_FAULT

BUGCHECK_STR:  0x50

PROCESS_NAME:  mbamservice.ex

CURRENT_IRQL:  0

TRAP_FRAME:  fffff88007182fb0 -- (.trap 0xfffff88007182fb0)
NOTE: The trap frame does not contain all registers.
Some register values may be zeroed or incorrect.
rax=fffff8a0853f1f90 rbx=0000000000000000 rcx=fffff8a0053b4280
rdx=0000000000000070 rsi=0000000000000000 rdi=0000000000000000
rip=fffff80002e01147 rsp=fffff88007183140 rbp=0000000000001000
 r8=0000000000000001  r9=fffffa8006b172f0 r10=fffffa8006b17148
r11=0000000000000001 r12=0000000000000000 r13=0000000000000000
r14=0000000000000000 r15=0000000000000000
iopl=0         nv up ei pl zr na po nc
nt!ExAllocatePoolWithTag+0x537:
fffff800`02e01147 48895808        mov     qword ptr [rax+8],rbx ds:fffff8a0`853f1f98=????????????????
Resetting default scope

LAST_CONTROL_TRANSFER:  from fffff80002d495a3 to fffff80002cccc00

STACK_TEXT:  
fffff880`07182e48 fffff800`02d495a3 : 00000000`00000050 fffff8a0`853f1f98 00000000`00000001 fffff880`07182fb0 : nt!KeBugCheckEx
fffff880`07182e50 fffff800`02ccad2e : 00000000`00000001 fffff8a0`853f1f98 fffff880`00000000 fffffa80`06b172f0 : nt! ?? ::FNODOBFM::`string'+0x43801
fffff880`07182fb0 fffff800`02e01147 : fffffa80`06c238a0 fffffa80`0fe44ad0 0061005c`000e000e fffff980`02180752 : nt!KiPageFault+0x16e
fffff880`07183140 fffff880`014ae1c1 : fffff8a0`00000001 fffff980`02180700 fffff8a0`049a5850 fffff8a0`00000000 : nt!ExAllocatePoolWithTag+0x537
fffff880`07183230 fffff880`014ac89e : fffffa80`0fc919d0 fffff8a0`052f9a40 fffff8a0`003b9bc0 fffffa80`0fc919d0 : Ntfs!NtfsRestartIndexEnumeration+0x271
fffff880`07183450 fffff880`014adec1 : fffff880`07183950 00000000`00000000 fffffa80`07c2d8f0 fffffa80`0f7c7b80 : Ntfs!NtfsQueryDirectory+0x94e
fffff880`071837f0 fffff880`014b07bf : fffffa80`0fc919d0 00000000`00000000 fffff880`071838e0 00000000`00000000 : Ntfs!NtfsCommonDirectoryControl+0xa1
fffff880`07183830 fffff880`012d1bcf : fffffa80`0f7c7fb0 fffffa80`0f7c7b80 fffffa80`0fc919d0 fffff880`07183858 : Ntfs!NtfsFsdDirectoryControl+0x10f
fffff880`071838a0 fffff880`012d06df : fffffa80`07c2d8f0 00000000`00000000 fffffa80`07c2d800 fffffa80`0f7c7b80 : fltmgr!FltpLegacyProcessingAfterPreCallbacksCompleted+0x24f
fffff880`07183930 fffff880`01d16a60 : 00000000`60000001 fffffa80`0f7c7b80 fffffa80`080d2960 fffffa80`07d19820 : fltmgr!FltpDispatch+0xcf
fffff880`07183990 00000000`60000001 : fffffa80`0f7c7b80 fffffa80`080d2960 fffffa80`07d19820 00000000`0491e701 : tdrpman+0xb3a60
fffff880`07183998 fffffa80`0f7c7b80 : fffffa80`080d2960 fffffa80`07d19820 00000000`0491e701 fffff880`01d15248 : 0x60000001
fffff880`071839a0 fffffa80`080d2960 : fffffa80`07d19820 00000000`0491e701 fffff880`01d15248 fffffa80`07d19820 : 0xfffffa80`0f7c7b80
fffff880`071839a8 fffffa80`07d19820 : 00000000`0491e701 fffff880`01d15248 fffffa80`07d19820 fffffa80`080d2960 : 0xfffffa80`080d2960
fffff880`071839b0 00000000`0491e701 : fffff880`01d15248 fffffa80`07d19820 fffffa80`080d2960 00000000`60000001 : 0xfffffa80`07d19820
fffff880`071839b8 fffff880`01d15248 : fffffa80`07d19820 fffffa80`080d2960 00000000`60000001 fffffa80`0f7c7b80 : 0x491e701
fffff880`071839c0 fffffa80`07d19820 : fffffa80`080d2960 00000000`60000001 fffffa80`0f7c7b80 00000000`0491e710 : tdrpman+0xb2248
fffff880`071839c8 fffffa80`080d2960 : 00000000`60000001 fffffa80`0f7c7b80 00000000`0491e710 fffff880`01d159f6 : 0xfffffa80`07d19820
fffff880`071839d0 00000000`60000001 : fffffa80`0f7c7b80 00000000`0491e710 fffff880`01d159f6 fffffa80`0f707de0 : 0xfffffa80`080d2960
fffff880`071839d8 fffffa80`0f7c7b80 : 00000000`0491e710 fffff880`01d159f6 fffffa80`0f707de0 fffffa80`0f7c7b80 : 0x60000001
fffff880`071839e0 00000000`0491e710 : fffff880`01d159f6 fffffa80`0f707de0 fffffa80`0f7c7b80 fffffa80`07d19820 : 0xfffffa80`0f7c7b80
fffff880`071839e8 fffff880`01d159f6 : fffffa80`0f707de0 fffffa80`0f7c7b80 fffffa80`07d19820 fffffa80`080d2960 : 0x491e710
fffff880`071839f0 fffffa80`0f707de0 : fffffa80`0f7c7b80 fffffa80`07d19820 fffffa80`080d2960 fffffa80`080b0c58 : tdrpman+0xb29f6
fffff880`071839f8 fffffa80`0f7c7b80 : fffffa80`07d19820 fffffa80`080d2960 fffffa80`080b0c58 00000000`00000000 : 0xfffffa80`0f707de0
fffff880`07183a00 fffffa80`07d19820 : fffffa80`080d2960 fffffa80`080b0c58 00000000`00000000 00000000`0491e710 : 0xfffffa80`0f7c7b80
fffff880`07183a08 fffffa80`080d2960 : fffffa80`080b0c58 00000000`00000000 00000000`0491e710 fffff880`01d0fad5 : 0xfffffa80`07d19820
fffff880`07183a10 fffffa80`080b0c58 : 00000000`00000000 00000000`0491e710 fffff880`01d0fad5 fffffa80`0f707de0 : 0xfffffa80`080d2960
fffff880`07183a18 00000000`00000000 : 00000000`0491e710 fffff880`01d0fad5 fffffa80`0f707de0 00000000`00000001 : 0xfffffa80`080b0c58


STACK_COMMAND:  kb

FOLLOWUP_IP: 
tdrpman+b3a60
fffff880`01d16a60 ??              ???

SYMBOL_STACK_INDEX:  a

SYMBOL_NAME:  tdrpman+b3a60

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: tdrpman

IMAGE_NAME:  tdrpman.sys

DEBUG_FLR_IMAGE_TIMESTAMP:  5033c542

FAILURE_BUCKET_ID:  X64_0x50_tdrpman+b3a60

BUCKET_ID:  X64_0x50_tdrpman+b3a60

Followup: MachineOwner
---------

4: kd> lmvm tdrpman
start             end                 module name
fffff880`01c63000 fffff880`01dad000   tdrpman  T (no symbols)           
    Loaded symbol image file: tdrpman.sys
    Image path: \SystemRoot\system32\DRIVERS\tdrpman.sys
    Image name: tdrpman.sys
    Timestamp:        Tue Aug 21 23:28:34 2012 (5033C542)
    CheckSum:         00154928
    ImageSize:        0014A000
    Translations:     0000.04b0 0000.04e4 0409.04b0 0409.04e4

essenbe · Jun 4, 2013

I'm not very good at all with laptops, Britton30 knows more than me about laptops. But, the message on the screen seems to be more bios related than hard drive related. Koolkat is correct, if under warranty, call Dell.

essenbe · Jun 4, 2013

FreddyKrueger, It is always a good idea to do regular backups of your personal data, especially important if you use your laptop for business. In your present circumstances, I would back up everything as soon as possible to an external hard drive. Here is an excellent tutorial on doing it with a free program called Synctoy. I use it daily. It works very well and is extremely good. The price is excellent too, FREE! http://www.sevenforums.com/tutorials/278866-synctoy-backup-user-data.html

Britton30 · Jun 4, 2013

The cable I refer to is how you connect the monitor to the laptop, check it for tightness or try a different one.

It is imperative to allow memtest to run eight passes, your issues seem to relate to RAM.
The white wires may be WiFi antenna, but it appears to be a connector had broken. Will the two ends fit together inside the clear plastic piece?

FreddyKrueger · Jun 5, 2013

Good morning to all.
I update the thread.
Personally thank the help.
I have no words. He bequeathed to be desperate, I need to work.
Thanks for being there, I feel more relaxed.

koolkat77

The laptop is no longer under warranty. No I have another computer you can move my daily work. It is almost a dead end, but I'll have to find a solution.

Following your magnificent considerations, I removed acronis system.

Yesterday afternoon was chaos. On and screenshot.
The good news is that if you get an error with clear references to devices and drivers.
Unfortunately I can not read the error.
Forgive my ignorance.

The file will now think highly enlightening.

essenbe

Good morning.
Indeed the message has all the earmarks of being something of BIOS.

I will watch the program I backup comets.
I have a drive only for work stuff and I back in real time on the my book live nas

The data is all safe

Thank you for your consideration. thanks

Britton30

Good morning.
Thanks, really thanks for the help.

Yesterday i was at a friend's shop.
's Address and a handyman.
I said that indeed is the antenna, it's all right, because they are two wires that are for a second card.
One is covered and one loose, never touch.

ME said that if that had been bad, the only problem would have been wiffi coverage.

I'll update the thread with all

FreddyKrueger · Jun 5, 2013

Good morning to all.
Yesterday afternoon the system went nuts.
THe good news is that now in the logs if it makes references to specific things.

OS today attached the file of your magnificent utility.

Tonight I hehco HDAT a test with the hard disk.

At first the program did not recognize the hard drive.
Enter the BIOS, and put the ATA mode, removing AHCI

The program recognized the disk.

Tests the step surface, slow all night.

But when I tell her to check the MBR, I found bugs.
I'll leave in the images.
These failures do not know if it's the disc or have changed ahci to ata.

I leave a log of AppCrashViewr

Have a good morning.
Really thank you very much everyone for being there.
attentively
Freddy

FreddyKrueger · Jun 5, 2013

good afternoon to all.
I think I've finally come up with the problem.

I saw a few days ago in the BIOS an option: enable self-diagnosis mode.
Enable the option but I saw nothing happened.

Today when you turn the laptop and give f12 to choose boot disk and further testing, I saw a new menu point that ponia:
self-diagnosis

I have given, and has only begun to test all.
He showed no errors, and when it ends tells me that if I want to do a deep scan of memory, which could reach long.

I say yes, I eat, and when I return the laptop completely frozen.
I leave the image.

I open the laptop I put the original memory of the laptop, do the self-diagnostic test, and passed with no problems

Took an hour using the PC normally and doing very well.

Let's see how they develop the following hours, but something inside of me is thoroughly convinced that all is well.

feel like work normally and without fear screenshot Blue.

Not wanting to jump the gun, and I want to thank from your adyuda, and consideration for me.

at the height where and doubted everything and did not know what to do or how to fix it I found this forum.
Here I have found help, interest, and humane treatment, professional and respectful.

Thanks for all the heart, and I hope in a few hours having to post about a problem.
I feel that it is turned.
Let's see ...
Having good evening
attentively
Freddy

FreddyKrueger · Jun 23, 2013

Good morning to all.
The error remains.
incredible.

The memories I got in touch with Kingston, and told me they were not those of this notebook. I have changed them, 10 for them. They did not have it.

With new memories, hard disk changed, a few days went well.

now again gives me a blue screen.

I have the impression that it is the graphics card.
Not if there is a program to test it thoroughly.
Msdos activate the verifier for programmers testing all dirvers.
And the screen loaded but that would conform to the entire screen.

We pass the intel driver check and update me several drivers.
So I managed to stop for a second disconnect occasionally external keyboard and mouse connected to a USB hub

The blue screen finally displays an error.
volmgr.sys

I upload the file generated by your wonderful utility.
Thanks to all and Have a nice day
attentively
Freddy

pdta. I am seriously evaluating change the motherboard, it is cheaper to make a rebaling to the GPU, if this the one that fails.

Solved ntoskrnl.exe irql not less or equal, PAGE_FAULT_IN_NONPAGED_AREA

New member

My Computer My Computer

At a glance

New member

My Computer My Computer

At a glance

New member

My Computer My Computer

At a glance

New member

My Computer My Computer

At a glance

New member

My Computer My Computer

At a glance

New member

My Computer My Computer

At a glance

New member

My Computer My Computer

At a glance

New member

My Computer My Computer

At a glance

R.I.P. 7/09/2014

My Computer My Computer

At a glance

Jedi Master (RET)

My Computers My Computers

At a glance

At a glance

New member

My Computer My Computer

At a glance

New member

My Computer My Computer

At a glance

New member

My Computer My Computer

At a glance

Jedi Master (RET)

My Computers My Computers

At a glance

At a glance

Jedi Master (RET)

My Computers My Computers

At a glance

At a glance

R.I.P. 7/09/2014

My Computer My Computer

At a glance

New member

My Computer My Computer

At a glance

New member

My Computer My Computer

At a glance

New member

My Computer My Computer

At a glance

New member

My Computer My Computer

At a glance

Similar threads

My Computer

My Computer

My Computer

My Computer

My Computer

My Computer

My Computer

My Computer

My Computer

My Computers

My Computer

My Computer

My Computer

My Computers

My Computers

My Computer

My Computer

My Computer

My Computer

My Computer