BSOD when Launching Autocad, error 0x00000050

[dly62]

Hello,

I am helping a client resolve a BSOD issue which occurs whenever Autocad is launched. Here is some general information regarding the BSOD:

Bug Check String: PAGE_FAULT_IN_NONPAGED_AREA
Bug Check Code: 0x00000050
Parameters: fffff880`f0bb6230
00000000`00000001
fffffa80`06f112e6
00000000`00000005
Caused by Driver: hal.dll
Caused by Address: hal.dll+471f
Processor: x64
Crash Address: ntoskrnl.exe+70040

The desktop is an Asus desktop PC CM5675 series, x64, running Windows 7 Home Premium with 6 GB of ram. Running memtest yielded no errors. Uninstalled and re-installed the latest video card drivers (Nvidia Quadro series FX 550).

Any help would be appreciated and if more information is needed, I will be happy to provide anything I am able to.

 

[mckillwashere]

Try to update your graphics(and any other drivers while your at it) drivers. I saw a few places where that was a cause.

 

[dly62]

Thanks for the suggestion mckill. I tried uninstalling and reinstalling the latest graphics driver. All drivers are up to date. Anyone else can make sense of the dump files?

-Daniel

 

[dly62]

Suggestions anyone? I'm stumped..

 

[FredeGail]

Hello dly62 and welcome to Sevenforums.

BSOD Analyse

PCTCore64.sys is being picked up and pointed towards. It's the PC Tools KDS Core Driver, if you're familiar with it, either uninstall it or contact their support or forum.

2: kd> lmvm PCTCore64
start             end                 module name
fffff880`0109b000 fffff880`01106000   PCTCore64 T (no symbols)           
    Loaded symbol image file: PCTCore64.sys
    Image path: \SystemRoot\system32\drivers\PCTCore64.sys
    Image name: PCTCore64.sys
    Timestamp:        Mon Apr 23 04:32:06 2012 (4F94BF26)
    CheckSum:         0007323D
    ImageSize:        0006B000
    Translations:     0000.04b0 0000.04e4 0409.04b0 0409.04e4

BugCheck 50, {fffff880e5620590, 1, fffffa8006f4c2e6, 5}

*** WARNING: Unable to verify timestamp for PCTCore64.sys
*** ERROR: Module load completed but symbols could not be loaded for PCTCore64.sys

Could not read faulting driver name
Probably caused by : [COLOR=Red]PCTCore64.sys[/COLOR] ( PCTCore64+1b726 )
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨
BugCheck 50, {fffff880e5620590, 1, fffffa8006f4c2e6, 5}

*** WARNING: Unable to verify timestamp for PCTCore64.sys
*** ERROR: Module load completed but symbols could not be loaded for PCTCore64.sys

Could not read faulting driver name
Probably caused by : [COLOR=Red]PCTCore64.sys[/COLOR] ( PCTCore64+1b726 )

PC Tools - (Support)

BCCode

PAGE_FAULT_IN_NONPAGED_AREA (50)
Invalid system memory was referenced.  This cannot be protected by try-except,
it must be protected by a Probe.  Typically the address is just plain bad or it
is pointing at freed memory.
Arguments:
Arg1: fffffa8c07385feb, memory referenced.
Arg2: 0000000000000000, value 0 = read operation, 1 = write operation.
Arg3: fffff800030b2e85, If non-zero, the instruction address which referenced the bad memory
    address.
Arg4: 0000000000000005, (reserved)

Usual causes: Defective hardware (particularly memory - but not just RAM), Faulty system service, Antivirus, Device driver, NTFS corruption, BIOS

Best Regards,
Frederik.

 

[dly62]

Thanks Frederik! I have tried uninstalling PC Tools but still BSOD. I guess that isn't enough to remove the PCTCore64.sys. I will figure out how to remove it and post back with results.

-Daniel

 

[FredeGail]

Hello Dly62!

If \SystemRoot\system32\drivers\PCTCore64.sys still exists, you can do the below methods to remove it safely.

Safely Remove Drivers:
To remove this safely, please do the following:
- ensure that you have a bootable DVD to use to get into Startup Repair (the Win8 installation DVD will do). If you don't have one, then use this procedure to create a System Repair disk: System Repair Disc - Create in Windows 8
- set a System Restore point (to use with the System Repair disk if you can't get back into Windows).

- download this free program: Autoruns for Windows Use it to disable any entries that name the PCTCore64.sys (by removing the checkmark in the far left column)
- check for any services related to this driver and/or program (use services.msc) and disable them
- check in Device Manager (use devmgmt.msc) for any devices related to this driver and/or program. Make sure to enable the viewing of hidden devices. Uninstall any that you find. DO NOT rescan or reboot yet!
- search your system for the PCTCore64.sys driver and rename it to PCTCore64.BAD

Then reboot and see if it's removed.

Best Regards,
Frederik.