Page Fault in Non Paged Area

Status
Not open for further replies.
Bugcheck code 0x00000050 PAGE_FAULT_IN_NONPAGED_AREA may be software or hardware error. One of XP always have bugcheck code x'50' and the culprit is the my stupid MPEG card driver. According to experience, 80% of the blue screen is caused by software and 20% is caused by hardware such as faulty ram, mother board, PSU or CPU. I've resolved 30 BSOD problem they are related to software and 8 cases that are confirned related to hardware.

Whenever XP or W2k crashes, it will write a system event 1001 and a minidump. Use windbg to process the the minidump and sometimes you may 50% chance to find out the culprit. The 50% is undermine because the failing module is ntoskrnl.exe and win32k.sys. They are windows core component which is unlikely to be the culprit.

If anyone post their system event 1001 and software list here, I may help them to analysis whether the problem is related to hardware or software.

software list
Run msinfo32 and navigate to Software > Program Group. Click anywhere in the right pane. Press CTRL-A and then CTRL-C. Copy that data to the clipboard and paste that data

System event 1001
Control Panel -> Adminstrative Tools -> Event Viewer -> System -> Event 1001. Copy the content and paste it back here
 
AI Game Development PYRA\Nancy James:AI Game Development PYRA\Nancy James
AVG Free Edition All Users:AVG Free Edition All Users
Accessories All Users:Accessories All Users
Accessories PYRA\Nancy James:Accessories PYRA\Nancy James
Accessories\Accessibility All Users:Accessories\Accessibility All Users
Accessories\Accessibility PYRA\Nancy James:Accessories\Accessibility PYRA\Nancy James
Accessories\Communications All Users:Accessories\Communications All Users
Accessories\Entertainment All Users:Accessories\Entertainment All Users
Accessories\Entertainment PYRA\Nancy James:Accessories\Entertainment PYRA\Nancy James
Accessories\System Tools All Users:Accessories\System Tools All Users
Administrative Tools All Users:Administrative Tools All Users
Administrative Tools PYRA\Nancy James:Administrative Tools PYRA\Nancy James
Aldo's Macro Recorder PYRA\Nancy James:Aldo's Macro Recorder PYRA\Nancy James
AliasWavefront PYRA\Nancy James:AliasWavefront PYRA\Nancy James
AliasWavefront\Maya Shockwave 3D Exporter 4.5 PYRA\Nancy James:AliasWavefront\Maya Shockwave 3D Exporter 4.5 PYRA\Nancy James
Aluria Software PYRA\Nancy James:Aluria Software PYRA\Nancy James
Aluria Software\ASE PYRA\Nancy James:Aluria Software\ASE PYRA\Nancy James
AnalogX PYRA\Nancy James:AnalogX PYRA\Nancy James
AnalogX\MaxMem PYRA\Nancy James:AnalogX\MaxMem PYRA\Nancy James
Anarchy PYRA\Nancy James:Anarchy PYRA\Nancy James
Anarchy\AgeOfCastles PYRA\Nancy James:Anarchy\AgeOfCastles PYRA\Nancy James
BK ReplaceEm PYRA\Nancy James:BK ReplaceEm PYRA\Nancy James
Brain Editor - Demo version PYRA\Nancy James:Brain Editor - Demo version PYRA\Nancy James
Bullfrog PYRA\Nancy James:Bullfrog PYRA\Nancy James
Business Plan PYRA\Nancy James:Business Plan PYRA\Nancy James
CDex PYRA\Nancy James:CDex PYRA\Nancy James
CharacterFX PYRA\Nancy James:CharacterFX PYRA\Nancy James
City of Heroes PYRA\Nancy James:City of Heroes PYRA\Nancy James
Classical Tetris PYRA\Nancy James:Classical Tetris PYRA\Nancy James
DDK demo 0.95 alpha release PYRA\Nancy James:DDK demo 0.95 alpha release PYRA\Nancy James
EA GAMES All Users:EA GAMES All Users
EA GAMES\The Sims 2 HomeCrafter Plus All Users:EA GAMES\The Sims 2 HomeCrafter Plus All Users
Firaxis Games All Users:Firaxis Games All Users
Firaxis Games PYRA\Nancy James:Firaxis Games PYRA\Nancy James
Firaxis Games\Sid Meier's Pirates! All Users:Firaxis Games\Sid Meier's Pirates! All Users
Firaxis Games\Sid Meier's Pirates! PYRA\Nancy James:Firaxis Games\Sid Meier's Pirates! PYRA\Nancy James
Firefly Studios PYRA\Nancy James:Firefly Studios PYRA\Nancy James
Firefly Studios\Alien Horde PYRA\Nancy James:Firefly Studios\Alien Horde PYRA\Nancy James
Games All Users:Games All Users
HAM Development Kit PYRA\Nancy James:HAM Development Kit PYRA\Nancy James
HAM Development Kit\Tools PYRA\Nancy James:HAM Development Kit\Tools PYRA\Nancy James
Hero Planner All Users:Hero Planner All Users
Java Web Start All Users:Java Web Start All Users
Java Web Start PYRA\Nancy James:Java Web Start PYRA\Nancy James
JustZIPit PYRA\Nancy James:JustZIPit PYRA\Nancy James
Lavasoft Ad-aware 6 PYRA\Nancy James:Lavasoft Ad-aware 6 PYRA\Nancy James
Lilac Soul's Script Generator PYRA\Nancy James:Lilac Soul's Script Generator PYRA\Nancy James
LucasArts PYRA\Nancy James:LucasArts PYRA\Nancy James
LucasArts\Star Wars Knights of the Old Republic PYRA\Nancy James:LucasArts\Star Wars Knights of the Old Republic PYRA\Nancy James
MBM 5 PYRA\Nancy James:MBM 5 PYRA\Nancy James
MP3 WAV Converter PYRA\Nancy James:MP3 WAV Converter PYRA\Nancy James
MP3&wav converter PYRA\Nancy James:MP3&wav converter PYRA\Nancy James
Macromedia Shockwave Multiuser Server 3.0 PYRA\Nancy James:Macromedia Shockwave Multiuser Server 3.0 PYRA\Nancy James
Maplet PYRA\Nancy James:Maplet PYRA\Nancy James
MilkShape 3D 1.6.6 PYRA\Nancy James:MilkShape 3D 1.6.6 PYRA\Nancy James
Mozilla Firefox All Users:Mozilla Firefox All Users
MySQL All Users:MySQL All Users
MySQL\MySQL Server 4.1 All Users:MySQL\MySQL Server 4.1 All Users
NWN Utils PYRA\Nancy James:NWN Utils PYRA\Nancy James
Ninja ****** Version 1 PYRA\Nancy James:Ninja ****** Version 1 PYRA\Nancy James
NinjaPirate 2 PYRA\Nancy James:NinjaPirate 2 PYRA\Nancy James
NoAdware All Users:NoAdware All Users
OpenOffice.org 1.1.3 PYRA\Nancy James:OpenOffice.org 1.1.3 PYRA\Nancy James
Opera All Users:Opera All Users
PHPTriad PYRA\Nancy James:pHPTriad PYRA\Nancy James
PHPTriad\Apache Console PYRA\Nancy James:pHPTriad\Apache Console PYRA\Nancy James
PHPTriad\MySQL PYRA\Nancy James:pHPTriad\MySQL PYRA\Nancy James
ParallelGraphics PYRA\Nancy James:parallelGraphics PYRA\Nancy James
ParallelGraphics\VrmlPad PYRA\Nancy James:parallelGraphics\VrmlPad PYRA\Nancy James
Patrician III All Users:patrician III All Users
PrintMe Internet Printing All Users:printMe Internet Printing All Users
QuickTime All Users:QuickTime All Users
Right Hemisphere PYRA\Nancy James:Right Hemisphere PYRA\Nancy James
Right Hemisphere\Deep Exploration PYRA\Nancy James:Right Hemisphere\Deep Exploration PYRA\Nancy James
SimPE All Users:SimPE All Users
Snes9x PYRA\Nancy James:Snes9x PYRA\Nancy James
SonyOnline PYRA\Nancy James:SonyOnline PYRA\Nancy James
Spybot - Search & Destroy All Users:Spybot - Search & Destroy All Users
Stage Designer 1.1 PYRA\Nancy James:Stage Designer 1.1 PYRA\Nancy James
Startup All Users:Startup All Users
Startup PYRA\Nancy James:Startup PYRA\Nancy James
Tetris Arena PYRA\Nancy James:Tetris Arena PYRA\Nancy James
The Fellowship of the Ring PYRA\Nancy James:The Fellowship of the Ring PYRA\Nancy James
The Sims 2 All Users:The Sims 2 All Users
Trita PYRA\Nancy James:Trita PYRA\Nancy James
Turbo Squid PYRA\Nancy James:Turbo Squid PYRA\Nancy James
Valve PYRA\Nancy James:Valve PYRA\Nancy James
Valve\Half-Life 2 PYRA\Nancy James:Valve\Half-Life 2 PYRA\Nancy James
Valve\Hammer PYRA\Nancy James:Valve\Hammer PYRA\Nancy James
Valve\Steam PYRA\Nancy James:Valve\Steam PYRA\Nancy James
Vampire - The Masquerade Bloodlines All Users:Vampire - The Masquerade Bloodlines All Users
Ventrilo PYRA\Nancy James:Ventrilo PYRA\Nancy James
WinRAR All Users:WinRAR All Users
WinRAR PYRA\Nancy James:WinRAR PYRA\Nancy James
XDCC Catcher PYRA\Nancy James:XDCC Catcher PYRA\Nancy James
XDCC Catcher\Help PYRA\Nancy James:XDCC Catcher\Help PYRA\Nancy James
XDCC Catcher\Help\Dutch PYRA\Nancy James:XDCC Catcher\Help\Dutch PYRA\Nancy James
XDCC Catcher\Help\English PYRA\Nancy James:XDCC Catcher\Help\English PYRA\Nancy James
XDCC Catcher\Tools PYRA\Nancy James:XDCC Catcher\Tools PYRA\Nancy James
Y.A.M.C.! PYRA\Nancy James:Y.A.M.C.! PYRA\Nancy James
Zweebo Techware PYRA\Nancy James:Zweebo Techware PYRA\Nancy James
iTunes All Users:iTunes All Users


Event Type: Information
Event Source: Save Dump
Event Category: None
Event ID: 1001
Date: 15/01/2005
Time: 15:46:34
User: N/A
Computer: PYRA
Description:
The computer has rebooted from a bugcheck. The bugcheck was: 0x10000050 (0xb7013d25, 0x00000000, 0xf7b86f68, 0x00000000). A dump was saved in: C:\WINDOWS\Minidump\Mini011505-03.dmp.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
 
nVidia Display Card Drive 66.93 is unstable

nVidia Display Card Driver 66.93 is unstable. You encounter more BSOD when you install 66.93. Believe me Version 61.77 is more stable. I've resolved more than 10 cases relating to nVidia Display card driver problem. Maybe your problem is related to multiple culprit. Definitely 66.93 is one of them. For problem isolation, you must install Nvidia display card 61.77
 
This sounds pretty similar to the problems I am getting. My PC has been a nightmare sinse it was rebuilt. As I have an idea, I replace or upgrade a part - things have improved slightly. I am now at a point where it crashes once every 2 days or so. I have upgraded /replaced the ram chip, the PSU, the CPU fan and heatsink. All of this has lead to the computer at least crashing in a semi-consistant manor!

I get either BSOD saying irq less not equal, or page fault in non page area. I would be really greatful if someone could give me a bit of a pointer for where to look for a resolution.

I have uploaded my software list and the two most recent 1001's to save cluttering up NancyJ's thread:

thanks in advnace for any help or pointers you can give.

Regards

Andrew
 
Attach the minidump

If you want to find out the culprit, C:\WINDOWS\Minidump\Mini011705-01.dmp and repost.
 
minidump

Hi

Sorry, I have had to change the extension from dmp to txt to attatch it. I couldnt work out a way to export the dumpchk output from the command prompt window to a usable file.

Andrew
 
I use windbg to process your dump
Three suggestion
1) Install nVidia Display Card Driver 61.77 as you are using version 66.93 which is unstable. http://www.nvidia.com/object/winxp_2k_61.77.html
2) savrt.sys belongs to Symantec AntiVirus. Upgrade Symantec AntiVirus to latest patch or uninstall Norton AV
3) It may be ram problem as suggested by windbg. Run memtest. http://www.memtest86.org


BugCheck 10000050, {ffffff8b, 1, ef0c1f29, 0}
Probably caused by : hardware ( SAVRT+16f29 )
FOLLOWUP_NAME: MachineOwner
SYMBOL_NAME: SAVRT+16f29
IMAGE_NAME: hardware
DEBUG_FLR_IMAGE_TIMESTAMP: 0
STACK_COMMAND: kb
MODULE_NAME: hardware
FAILURE_BUCKET_ID: IP_MISALIGNED_SAVRT.SYS
BUCKET_ID: IP_MISALIGNED_SAVRT.SYS
kd> r
eax=00000000 ebx=00000000 ecx=0000006b edx=0000006b esi=e24903a0 edi=e1947428
eip=ef0c1f29 esp=f701681c ebp=00000000 iopl=0 nv up ei pl zr na po nc
cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00010246
SAVRT+0x16f29:
ef0c1f29 c0741d8b54 shl byte ptr [ebp+ebx-0x75],0x54 ss:0010:ffffff8b=??

nv4_disp nv4_disp.dll Tue Oct 07 08:03:41 2003 (3F8202DD) <---- 66.93
 
Thanks!

Thanks for your help cpc2004. I will do as you suggest tonight, and then see what happens over the next few days.

I run symantec auto update regularly, is this not sufficient to ensure I have all the most up to date patches?

Thanks again!
 
Your may have multiple problem at your PC. I have 3 suggestions.

1) The first suggestion is highly recommened to implement as nVidia Display Card Driver 66.93 is unstable and cause blue screen.
2) The second suggestion is related to Norton AV. If Norton AV has a lot of known bugs. If you search google using keyword savrt.sys, you will find a lot of hits. Actually I'm not confirm whether savrt.sys is the culprit.
3) Windbg processing resutl shows that it may be a hardware error as it is worth while to test your RAM. Actually I suspected it is a hardware problem at the mother board rather than ram because windbg report IP_MISALIGNED_SAVRT.SYS. However there has no good tools to test the hardware of the mother board.

If I were you, I would implement suggestion one and run memtest. If your ram passes the ramtest and it doesn't mean that the ram is okay. According to experience, some faulty RAM can pass the memtest. If ramtest reports hardware problem and the hardware must be faulty. If the you still have the blue screen, attach the minidump and repost. How many minidumps do you have daily?

BTW, you can attach C:\WINDOWS\Minidump\Mini011505-01.dmp for further investigation whether the root cause is related to faulty hardware or not.
 
Hi, seems I have (at least) 2 problems with my computer, 1 caused by my Nvidia drivers but the other caused by my avg antivirus, or so I have interpreted from the windbg logs, still working my way through the error logs to see if I can find any more but I dont seem to have had any NVidia cauesd crashes since I changed the drivers.

This is a selection of the errors I found for just 1 day (12 logs total) of crash logs :(

BugCheck 1000008E, {c0000005, ba0cef38, baf6c3d0, 0}

Unable to load image ctaud2k.sys, Win32 error 2
*** WARNING: Unable to verify timestamp for ctaud2k.sys
*** ERROR: Module load completed but symbols could not be loaded for ctaud2k.sys
Probably caused by : portcls.sys ( portcls!CPortPinWavePci::BuildTransportCircuit+3d )

-----------------------------------------------------------------------------------

BugCheck 10000050, {b5ec9d25, 0, f7b86f68, 0}


Could not read faulting driver name
*** WARNING: Unable to verify timestamp for avg7rsxp.sys
*** ERROR: Module load completed but symbols could not be loaded for avg7rsxp.sys
Probably caused by : memory_corruption

Followup: memory_corruption

-------------------------------------------------------------------------------------

BugCheck 1000007F, {d, 0, 0, 0}

Unable to load image ctaud2k.sys, Win32 error 2
*** WARNING: Unable to verify timestamp for ctaud2k.sys
*** ERROR: Module load completed but symbols could not be loaded for ctaud2k.sys
Probably caused by : portcls.sys ( portcls!CPortPinWavePci::BuildTransportCircuit+3d )

Followup: MachineOwner

-----------------------------------------------------------------------------------

BugCheck 10000050, {b5bc6d25, 0, f7b86f68, 0}


Could not read faulting driver name
*** WARNING: Unable to verify timestamp for avg7rsxp.sys
*** ERROR: Module load completed but symbols could not be loaded for avg7rsxp.sys
Probably caused by : avg7rsxp.sys ( avg7rsxp+1dc4 )

Followup: MachineOwner
---------
 
Load Module Map

Please provide the output of 'lm t n' (ie list loaded module with time stamp) and '!kb (ie the stack trace) within windbg. I think some of the device driver is compatible with SP2 and the loaded module map can help me identify which device driver is in incompatible with windows
 
You are not using nVidia DIsplay Card Driver version 61.77
http://www.nvidia.com/object/winxp_2k_61.77.html. Update the driver to 61.77. Repost if you still get bsod.

nv4_disp.dll Tue Jul 13 08:23:35 2004 (40F32B87) <-- 61.77
nv4_disp.dll Wed Mar 24 18:38:36 2004 (4061D5AC) <--- Your version

You take the full dump. Enter !process at windbg to display failing process name and post back the output here.

From the stack trace the problem is related to AVG. Uninstall AVG and install NOD32 or Norton AV.
 
Yeah I'm using older drivers cos the 61.77 made KoTOR crash but these dont, the random crashes seem to be avg related so i've turned it off. I get random crashes with the drivers I'm using, 61.77 and the latest, I think those might all be avg related, though I think the KoTOR crashes were because of the nVidia drivers, its an oldish game, doesnt seem to like the last 2 drivers.

kd> !process
GetPointerFromAddress: unable to read from 8055f534
PROCESS 884904a0 SessionId: none Cid: 06ec Peb: 7ffdf000 ParentCid: 024c
DirBase: 1aaa4000 ObjectTable: e2c585a8 HandleCount: <Data Not Accessible>
Image: cisvc.exe
VadRoot 8850d760 Vads 120 Clone 0 Private 942. Modified 30491. Locked 0.
DeviceMap e10087c0
Token e2b655a8
ReadMemory error: Cannot get nt!KeMaximumIncrement value.
ffdf0000: Unable to get shared data
ElapsedTime 1181:16:30.0315
UserTime 0:00:00.0000
KernelTime 0:00:00.0000
QuotaPoolUsage[PagedPool] 36180
QuotaPoolUsage[NonPagedPool] 6592
Working Set Sizes (now,min,max) (369, 50, 345) (1476KB, 200KB, 1380KB)
PeakWorkingSetSize 1357
VirtualSize 42 Mb
PeakVirtualSize 43 Mb
PageFaultCount 182322
MemoryPriority BACKGROUND
BasePriority 8
CommitCharge 1718

*** Error in in reading nt!_ETHREAD @ 88501798
 
My mini dump from the 15th is attatched (again extension changed to .txt).

I have run memtest for 30 cycles, and got 6 errors. Is that a significant number? (I have all details of the errors written down if they are useful). I have also installed nVidia Driver v61.77.

As yet I have had no BSOD, but I havent been that long on the computer. Tomorrow I will have it on most of the day which usually ends up in one.
 
Faulty RAM

To Andy Cow,

If you can tolerate BSOD, you don't need to post any question here.

Your second minidump failed at module TDI.SYS which is a windows component. I search google and no known problem for this module. Hence your second crash is unlikely related software error at TDI.SYS.

BugCheck 100000D1, {16690440, 2, 1, e219652c}
Probably caused by : TDI.SYS ( TDI+5a8 )

As your PC cannot pass ramtest, your RAM is faulty. If you are using AMD CPU, you can try lower the speed of the DDR ram. If you are using Intel Processor, reseat the RAM to another memory slot. Maybe the contact of the RAM and memory slot had intermitent bad contact problem due to dust. If it does not work, buy new RAM.

If you have two RAM sticks, take one memory stick. Run the memtest to trouble shoot which RAM stick is bad.

To Nancy,

The failing process is cisvc.exe. Your windows may be infected by spyware. Refer the following Web Page
www.2-spyware.com/file-cisvc-exe.html
 
I've patched my sound card drivers, changed my nVidia drivers, uninstalled AVG and I'm still getting crashes - this time it was one I've not had before, I've attached all the details.
Run spyware scans and I'm clean too.

BTW thanks for helping with this. I would have never been able to do it on my own, I just couldnt figure out what the problem was, never occured that there could be so many simulatanous problems.
 
Hi Nancy

You got NT status code 0xc000001d at your last abend which is hardware problem unless it is an assemble error at nVidia Display Card.

Can you attach the output of !analyze -v and u nv4_mini+32ac8 l20? Base on the name of the Mini012105-06.dmp, your PC was crashed at least 6 times on 21st Jan. Can you attach the output of all the system event 1001 on 21st Jan. As you have fixed most known software known bug, the crash is still occurs. It may be related to hardware. If the failing instruction were random, probably the crash is related to hardware error.
I've resolved a case relating to bad memory and display card driver.
http://www.experts-exchange.com/Operating_Systems/WinXP/Q_21266788.html
 
/cry everytime I fix one thing something else goes wrong. I've attached crash dumps for the last 2 days (11 in total) :(
 
Status
Not open for further replies.
Back