Multiple BSODs (IRQL and Page Fault codes)

[ucayman]

Hi,

Last night had a BSOD on shutdown (don't know the error code), then this morning two more BSODs (one IRQL_NOT_LESS_OR_EQUAL and the other PAGE_FAULT_IN_NONPAGED_AREA)

Chrome keeps giving me 'Aw Snap' errors this morning.

No new hardware recently. Nor driver changes. Was custom build before Christmas, no issues up til now.

Dump data attached.


Any help much appreciated!!

 

[Alkotashi]

IRQ and Pagefile errors to BSOD are in my experience RAM-related. You might have dodgy/overheated memorychips even if they return no errors in individual testing, alternatively you might have different types of ram. This usually requires bios to set different voltages that some (older) motherboards would seem to have issues with, MSI in particular.

Try booting with one memchip only and see if that helps, if not, replace it with the next one and so on... worked for me at least.

Cheers-

 

[Thedoctor44]

Normally with 0x50 bugchecks I'm inclined to believe it's hardware.
But looking at the address that was meant to be written I can't see whether it is valid or not given it's a minidump.

Anyway, I decided to look at the raw stack and found that Kan unknown driver created by trusteer is causing issues.

I recommend you uninstall all software related to this company.

Unable to load image \??\C:\ProgramData\Trusteer\Rapport\store\exts\RapportCerberus\baseline\RapportCerberus64_68261.sys, Win32 error 0n2
*** WARNING: Unable to verify timestamp for RapportCerberus64_68261.sys
*** ERROR: Module load completed but symbols could not be loaded for RapportCerberus64_68261.sys
 [COLOR="Red"]RapportCerberus64_68261+0x63f8[/COLOR]

In your second dump you have a 0xD1 bugcheck which means a driver tried to access pageable memory at an IRQL of Passive Level or above which is an illegal operation.

X64_0xD1_CODE_AV_[COLOR="red"]BAD_IP[/COLOR]_nt!KiPageFault+260

A bad instruction pointer.

Like I said, given it's a minidump there's not much to analyse.
So I'll take a look at the raw stack again and see if that finds anything.

Unable to load image \SystemRoot\system32\DRIVERS\klif.sys, Win32 error 0n2
*** WARNING: Unable to verify timestamp for klif.sys
*** ERROR: Module load completed but symbols could not be loaded for klif.sys
 [COLOR="red"]klif+0x56998[/COLOR]

Kaspersky appears to be causing issues, I would remove it and replace it with MSE and Malwarebytes.

Use the Kaspersky removal tool.

Replace it with MSE and Malwarebytes.

   Tip

Make sure you don't enable the free trial of malwarebytes pro, deselect the option when prompted.

Lastly I see you have Intel Rapid Storage Technology installed.
Remove it by following these instructions.

1. Right click on "my computer" icon and click "manage" on the context menu.
2. It will open the "computer management" window.
3. Select "Device Manager" in the left pane, It will list all the existing devices up.
4. Expand "Disc Drives" by clicking on the triangle in front of it.
5. Select one item under it, right click, uninstall.
6. Continue the process for all items under "Disc Drives"
7. Now restart the computer. At restart, windows will auto configure the appropriate system driver, msahci.sys.

Post back the results.