BSOD PAGE_FAULT_IN_NONPAGED_AREA After Resume From Sleep

Dulk · 06 Aug 2017

Latest driver was already installed so I reinstalled it right now.

Dulk · 16 Aug 2017

Alright, got laptop back from manufacturer warranty and the problem does not seem to be occurring within regular use but when I run driver verifier, the BSODs occur again.

They replaced the SSD and reinstalled the Acer OEM image of Windows 10.

LAPTOP-VN7CU42S-Wed_08_16_2017__95840_67.zip - Google Drive

Can you please check if its still pointing to Qcamain10x64.sys. Thanks.

Already called Acer Support so if it BSODs again within regular use I should be able to return it.

zbook · 16 Aug 2017

Qcamain10x64.sys was no longer found as a misbehaving driver.
Debugging the bsod mini dump files indicated that the Symantics software driver was misbehaving.

1) Uninstall all Symantic software using control panel.
2) Use the Symantic uninstall tool as needed to completely uninstall all residual software
3) Turn on windows defender.
4) Restart Windows driver verifier when the above steps are completed.
5) Post a new zip for any new bsod:
BSOD - Posting Instructions - Windows 10 Forums

SYMEFASI64.SYS

Symantec Extended File Attributes

http://www.symantec.com/support/index.jsp

Code:

SymEFASI     Symantec Extended File Symantec Extended File File System   Boot       Running    OK         TRUE        FALSE        286,720           1,003,520   0          8/2/2016 10:50:18 PM   C:\Windows\system32\drivers\NSx64\1608000.032\SY 20,480     SymELAM      Symantec ELAM Driver   Symantec ELAM Driver   Kernel        Disabled   Stopped    OK         FALSE       FALSE        0                 8,192       0          6/4/2012 6:04:12 PM    C:\Windows\system32\drivers\NSx64\1608000.032\Sy 4,096      SymIRON      Symantec Iron Driver   Symantec Iron Driver   Kernel        System     Running    OK         TRUE        FALSE        4,096             217,088     0          9/2/2016 2:44:25 PM    C:\Windows\system32\drivers\NSx64\1608000.032\Ir 4,096      SymNetS      Symantec Network Secur Symantec Network Secur Kernel        System     Running    OK         TRUE        FALSE        28,672            380,928     0          9/14/2016 7:43:10 PM   C:\Windows\system32\drivers\NSx64\1608000.032\SY 12,288

Dulk · 16 Aug 2017

Done, 2 more BSODs

LAPTOP-BJ743J5G-08_16_17_141109_54.zip - Google Drive

zbook · 16 Aug 2017

In the above link there were 2 bsod mini dump files.
Both had comments on memory corruption.
There was no definitive misbehaving driver identified.
In the other log files a faulting application and problem signature was identified:
Dashlaneinstaller.exe

Please uninstall and reinstall this software or if possible keep the software uninstalled during the troubleshooting.

Code:

+++ WER1 +++:Fault bucket , type 0Event Name: BEXResponse: Not availableCab Id: 0Problem signature:P1: DashlaneInstaller.exeP2: 4.8.4.35032P3: 58b56284P4: inetc_17-05-09_2.dll_unloadedP5: 1.0.5.2P6: 5911d015P7: 0000108cP8: c0000005P9: 00000008P10: +++ WER2 +++:Fault bucket 116428791898, type 5Event Name: BEXResponse: Not availableCab Id: 0Problem signature:P1: DashlaneInstaller.exeP2: 4.8.4.35032P3: 58b56284P4: inetc_17-05-09_2.dll_unloadedP5: 1.0.5.2P6: 5911d015P7: 0000108cP8: c0000005P9: 00000008P10:

Code:

8/16/17 8:53 PM    Application Error    Faulting application name: DashlaneInstaller.exe, version: 4.8.4.35032, time stamp: 0x58b56284
Faulting module name: inetc_17-05-09_2.dll_unloaded, version: 1.0.5.2, time stamp: 0x5911d015
Exception code: 0xc0000005
Fault offset: 0x0000108c
Faulting process id: 0x1f78
Faulting application start time: 0x01d316d1a55205c6
Faulting application path: C:\ProgramData\Dashlane\Upgrade\Installer\DashlaneInstaller.exe
Faulting module path: inetc_17-05-09_2.dll
Report Id: 6aeb598e-73b2-43ca-b380-4465e263ebe5
Faulting package full name: 
Faulting package-relative application ID:8/16/17 9:04 PM    Windows Error Reporting    Fault bucket , type 0
Event Name: BlueScreen
Response: Not available
Cab Id: 0

Problem signature:
P1: 50
P2: ffffd9619995da3c
P3: 2
P4: fffff8017450431a
P5: 2
P6: 10_0_15063
P7: 0_0
P8: 768_1
P9: 
P10: 

Attached files:
\\?\C:\WINDOWS\Minidump\081617-4593-01.dmp
\\?\C:\Windows\Temp\WER-5968-0.sysdata.xml
\\?\C:\WINDOWS\MEMORY.DMP
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER21FF.tmp.WERInternalMetadata.xml
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER220E.tmp.csv
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER220F.tmp.txt

These files may be available here:
C:\ProgramData\Microsoft\Windows\WER\ReportQueue\Kernel_50_3e3a3ce7b43fb051f6d728edca543cba903a981f_00000000_cab_0344221e

Analysis symbol: 
Rechecking for solution: 0
Report Id: 5e8e03f5-96dc-4ed4-bbcf-883391a23677
Report Status: 4
Hashed bucket:
8/16/17 8:53 PM    Windows Error Reporting    Fault bucket , type 0
Event Name: BEX
Response: Not available
Cab Id: 0

Problem signature:
P1: DashlaneInstaller.exe
P2: 4.8.4.35032
P3: 58b56284
P4: inetc_17-05-09_2.dll_unloaded
P5: 1.0.5.2
P6: 5911d015
P7: 0000108c
P8: c0000005
P9: 00000008
P10: 

Attached files:
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER63DB.tmp.mdmp
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER6544.tmp.WERInternalMetadata.xml
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER6552.tmp.csv
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER6572.tmp.txt
\\?\C:\Users\Erik\AppData\Local\Temp\WER6DEF.tmp.appcompat.txt
\\?\C:\Users\Erik\AppData\Local\Temp\WER6E00.tmp.WERDataCollectionStatus.txt
C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_DashlaneInstalle_2024ca15a1f4ba3c3fe697db54270f2f3ff369a_30a3f065_cab_0efa6e0d\memory.hdmp
WERGenerationLog.txt

These files may be available here:
C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_DashlaneInstalle_2024ca15a1f4ba3c3fe697db54270f2f3ff369a_30a3f065_cab_0efa6e0d

Analysis symbol: 
Rechecking for solution: 0
Report Id: 6aeb598e-73b2-43ca-b380-4465e263ebe5
Report Status: 16396
Hashed bucket:
8/16/17 8:53 PM    Windows Error Reporting    Fault bucket 116428791898, type 5
Event Name: BEX
Response: Not available
Cab Id: 0

Problem signature:
P1: DashlaneInstaller.exe
P2: 4.8.4.35032
P3: 58b56284
P4: inetc_17-05-09_2.dll_unloaded
P5: 1.0.5.2
P6: 5911d015
P7: 0000108c
P8: c0000005
P9: 00000008
P10: 

Attached files:
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER63DB.tmp.mdmp
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER6544.tmp.WERInternalMetadata.xml
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER6552.tmp.csv
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER6572.tmp.txt
\\?\C:\Users\Erik\AppData\Local\Temp\WER6DEF.tmp.appcompat.txt
\\?\C:\Users\Erik\AppData\Local\Temp\WER6E00.tmp.WERDataCollectionStatus.txt
C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_DashlaneInstalle_2024ca15a1f4ba3c3fe697db54270f2f3ff369a_30a3f065_cab_0efa6e0d\memory.hdmp
WERGenerationLog.txt

These files may be available here:
C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_DashlaneInstalle_2024ca15a1f4ba3c3fe697db54270f2f3ff369a_30a3f065_cab_0efa6e0d

Analysis symbol: 
Rechecking for solution: 0
Report Id: 6aeb598e-73b2-43ca-b380-4465e263ebe5
Report Status: 16396
Hashed bucket: a20ff767ba1daf66a72312d4e5bf2ff7
8/16/17 7:26 PM    Windows Error Reporting    Fault bucket 127830908021, type 5
Event Name: WinSetupDiag02
Response: Not available
Cab Id: 0

Problem signature:
P1: 1
P2: 4
P3: 9
P4: 0
P5: 0x0
P6: 0x0
P7: 0
P8: rs1_release
P9: 15063
P10: rs2_release

Attached files:
\\?\C:\Windows\Panther\SetupAct.log
\\?\C:\Windows\Panther\diagerr.xml
\\?\C:\Windows\inf\setupapi.setup.log
\\?\C:\Windows\inf\setupapi.dev.log
\\?\C:\Windows\inf\setupapi.offline.log
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER6398.tmp.WERInternalMetadata.xml
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER63C7.tmp.csv
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER63D8.tmp.txt

These files may be available here:
C:\ProgramData\Microsoft\Windows\WER\ReportArchive\NonCritical_1_6bb159fa86ff51b6ed57ef1f5cdac4f0613b5964_00000000_2216f09f

Analysis symbol: 
Rechecking for solution: 0
Report Id: 32337dbc-c305-4d36-95bf-8141e96682c6
Report Status: 268435458
Hashed bucket: 2ec425bbf844138259d843d80cc456be
8/16/17 7:13 PM    Windows Error Reporting    Fault bucket 127824537390, type 5
Event Name: SkyDriveClientError
Response: Not available
Cab Id: 0

Problem signature:
P1: OneDriveSetup.exe
P2: 17.3.6816.0313
P3: OneDriveSetup.exe
P4: 17.3.6816.0313
P5: 0x80040692
P6: Installer
P7: application.cpp
P8: 166
P9: 
P10: 

Attached files:
\\?\C:\Users\Erik\AppData\Local\Microsoft\OneDrive\setup\logs\Update_2017-08-16_121310_294c-2950.log
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER9A10.tmp.WERInternalMetadata.xml
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER9A1F.tmp.csv
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER9A40.tmp.txt

These files may be available here:
C:\ProgramData\Microsoft\Windows\WER\ReportArchive\NonCritical_OneDriveSetup.ex_9aa75965975be34e3b51fa121877573010e7d2_00000000_2a36be9f

Analysis symbol: 
Rechecking for solution: 0
Report Id: 410032d5-dbe6-41c3-acb6-6db559e38edd
Report Status: 268435456
Hashed bucket: 17e951f43fac04b8119f690121b7c0d5
8/16/17 7:13 PM    Windows Error Reporting    Fault bucket 127824537390, type 5
Event Name: SkyDriveClientError
Response: Not available
Cab Id: 0

Problem signature:
P1: OneDriveSetup.exe
P2: 17.3.6816.0313
P3: OneDriveSetup.exe
P4: 17.3.6816.0313
P5: 0x80040692
P6: Installer
P7: application.cpp
P8: 166
P9: 
P10: 

Attached files:
\\?\C:\Users\Erik\AppData\Local\Microsoft\OneDrive\setup\logs\Update_2017-08-16_121310_294c-2950.log
\\?\C:\Users\Erik\AppData\Local\Microsoft\OneDrive\setup\logs\Update_2017-08-16_121231_1c68-1cf8.log
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER9A6E.tmp.WERInternalMetadata.xml
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER9A70.tmp.csv
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER9A90.tmp.txt

These files may be available here:
C:\ProgramData\Microsoft\Windows\WER\ReportArchive\NonCritical_OneDriveSetup.ex_9aa75965975be34e3b51fa121877573010e7d2_00000000_2a7ab0d4

Analysis symbol: 
Rechecking for solution: 0
Report Id: 120aa3ea-95dd-4b1a-bb55-7a095bf3f64a
Report Status: 268435456
Hashed bucket: 17e951f43fac04b8119f690121b7c0d5
8/16/17 7:13 PM    Windows Error Reporting    Fault bucket , type 0
Event Name: SkyDriveClientError
Response: Not available
Cab Id: 0

Problem signature:
P1: OneDriveSetup.exe
P2: 17.3.6816.0313
P3: OneDriveSetup.exe
P4: 17.3.6816.0313
P5: 0x80040692
P6: Installer
P7: application.cpp
P8: 166
P9: 
P10: 

Attached files:

These files may be available here:


Analysis symbol: 
Rechecking for solution: 0
Report Id: 120aa3ea-95dd-4b1a-bb55-7a095bf3f64a
Report Status: 1074003968
Hashed bucket:
8/16/17 7:13 PM    Windows Error Reporting    Fault bucket , type 0
Event Name: SkyDriveClientError
Response: Not available
Cab Id: 0

Problem signature:
P1: OneDriveSetup.exe
P2: 17.3.6816.0313
P3: OneDriveSetup.exe
P4: 17.3.6816.0313
P5: 0x80040692
P6: Installer
P7: application.cpp
P8: 166
P9: 
P10: 

Attached files:

These files may be available here:


Analysis symbol: 
Rechecking for solution: 0
Report Id: 410032d5-dbe6-41c3-acb6-6db559e38edd
Report Status: 1074003968
Hashed bucket:
8/16/17 7:10 PM    Windows Error Reporting    Fault bucket , type 0
Event Name: WinSetupDiag02
Response: Not available
Cab Id: 0

Problem signature:
P1: 1
P2: 4
P3: 9
P4: 0
P5: 0x0
P6: 0x0
P7: 0
P8: rs1_release
P9: 15063
P10: rs2_release

Attached files:
\\?\C:\Windows\Panther\SetupAct.log
\\?\C:\Windows\Panther\diagerr.xml
\\?\C:\Windows\inf\setupapi.setup.log
\\?\C:\Windows\inf\setupapi.dev.log
\\?\C:\Windows\inf\setupapi.offline.log
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER6398.tmp.WERInternalMetadata.xml
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER63C7.tmp.csv
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER63D8.tmp.txt

These files may be available here:
C:\ProgramData\Microsoft\Windows\WER\ReportQueue\NonCritical_1_6bb159fa86ff51b6ed57ef1f5cdac4f0613b5964_00000000_cab_085c63e6

Analysis symbol: 
Rechecking for solution: 0
Report Id: 32337dbc-c305-4d36-95bf-8141e96682c6
Report Status: 6
Hashed bucket:
8/16/17 7:10 PM    Windows Error Reporting    Fault bucket , type 0
Event Name: WinSetupDiag02
Response: Not available
Cab Id: 0

Problem signature:
P1: 1
P2: 4
P3: 9
P4: 0
P5: 0x0
P6: 0x0
P7: 0
P8: rs1_release
P9: 15063
P10: rs2_release

Attached files:
\\?\C:\Windows\Panther\SetupAct.log
\\?\C:\Windows\Panther\diagerr.xml
\\?\C:\Windows\inf\setupapi.setup.log
\\?\C:\Windows\inf\setupapi.dev.log
\\?\C:\Windows\inf\setupapi.offline.log

These files may be available here:


Analysis symbol: 
Rechecking for solution: 0
Report Id: 32337dbc-c305-4d36-95bf-8141e96682c6
Report Status: 1074003968
Hashed bucket:

Dulk · 16 Aug 2017

2 more

ERIK-WINDOWS-08_16_17_183620_12.zip - Google Drive

zbook · 16 Aug 2017

The debugging of the mini dump indicated a misbehaving audio driver: RTKVHD64.sys

Code:

IntcAzAudAdd Service for Realtek HD Service for Realtek HD Kernel        Manual     Running    OK         TRUE        FALSE        2,945,024         1,597,440   0          11/15/16 5:20:57 AM    C:\WINDOWS\system32\drivers\RTKVHD64.sys         8,192

Qcamain10x64.sys did not appear in the bsod mini dump debugging again.
However it did appear in the windows error reporting as a cause of bsod.
So it too will need to be uninstalled and reinstalled.

Please locate a ethernet or cat5e cable so that you can connect to the internet and turn off wireless.
If you have a button on the computer to mechanically turn off wireless this is preferred.

Turn off Windows updates of non-Microsoft drivers:
Enable or Disable Driver Updates in Windows Update in Windows 10 Windows 10 Windows Update Activation Tutorials

1) Open the Acer website > enter the computer's serial or product number and operating system > view drivers > identify all drivers for RTKVHD64.sys
2) If possible change the operating system to windows 7.0 or 8.1 to see if there are more Acer approved drivers.
3) Post an image of all of these drivers into the thread.
4) identify all Acer approved drivers for Qcamain10x64.sys
Qualcomm Atheros QCA61x4A Wireless Network Adapter
5) If possible change the operating system to windows 7.0 or 8.1 to see if there are more Acer approved drivers.
6) Post an image of all of these driver into the thread.
7) open the killer networks website and find all available drivers for the computer's configuration.
8) open the Realtek website and find all available drivers for the computer's configuration.

This will be trial and error for the wireless driver.
It will be important to keep track of each driver.
You will start with a different driver from what was replaced on 8/16/2017. At that time you installed the 3/2017 driver (4.0.2.262)
Each driver that is available from Acer and then the component companies will tested with Windows driver verifier to find a stable driver.

Open file explorer > this PC > local C: driver > in the upper right corner search enter each driver
Use device manager to uninstall each driver.
Confirm the un-installation using file explorer.
Perform windows updates and confirm that a new driver has not been reinstalled.
Then install the new drivers.

Code:

8/16/17 9:12 PM    Windows Error Reporting    Fault bucket 0xc4_NdisTimedDataHang_XDV_VRF_IMAGE_Qcamain10x64.sys, type 0
Event Name: BlueScreen
Response: Not available
Cab Id: 1b72e291-6abb-4d69-9ea5-93ca643cc105

Problem signature:
P1: c4
P2: 9200f
P3: fffff80989128470
P4: ffff990fbf365c30
P5: ffff990fbf365d38
P6: 10_0_15063
P7: 0_0
P8: 768_1
P9: 
P10: 

Attached files:
\\?\C:\WINDOWS\Minidump\081617-14078-01.dmp
\\?\C:\Windows\Temp\WER-15937-0.sysdata.xml
\\?\C:\WINDOWS\MEMORY.DMP
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER54A7.tmp.WERInternalMetadata.xml
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER54E6.tmp.csv
\\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER5506.tmp.txt
\\?\C:\Windows\Temp\WER13C8.tmp.WERDataCollectionStatus.txt

These files may be available here:
C:\ProgramData\Microsoft\Windows\WER\ReportQueue\Kernel_c4_43db7119a28042bc7acac444cddf3ac6f6abb27a_00000000_cab_035c5505

Analysis symbol: 
Rechecking for solution: 0
Report Id: 424391b6-90f3-4698-90dc-981a371f110b
Report Status: 16388
Hashed bucket:

Code:

Qcamain10x64 Qualcomm Extensible Wi Qualcomm Extensible Wi Kernel        Manual     Running    OK         TRUE        FALSE        4,096             1,667,072   0          10/27/16 12:21:19 AM   C:\WINDOWS\system32\drivers\Qcamain10x64.sys     8,192

Qcamain10x64.sys

Qualcomm Atheros Extensible Wireless LAN device driver

Download - http://www.killernetworking.com/supp...iver-downloads
Support - http://www.killernetworking.com/about/contact

Code:

IntcAzAudAdd Service for Realtek HD Service for Realtek HD Kernel        Manual     Running    OK         TRUE        FALSE        2,945,024         1,597,440   0          11/15/16 5:20:57 AM    C:\WINDOWS\system32\drivers\RTKVHD64.sys         8,192

RTKVHD64.sys

Realtek High Definition Audio Function Driver

http://www.realtek.com.tw/downloads/...Level=3&Conn=2

Code:

Name    Realtek High Definition AudioManufacturer    RealtekStatus    OKPNP Device ID    HDAUDIO\FUNC_01&VEN_10EC&DEV_0255&SUBSYS_10251165&REV_1000\4&270566F&0&0001Driver    c:\windows\system32\drivers\rtkvhd64.sys (6.0.1.7989, 5.21 MB (5,463,552 bytes), 11/22/16 6:32 AM)

Code:

Name    [00000001] Qualcomm Atheros QCA61x4A Wireless Network AdapterAdapter Type    Ethernet 802.3Product Type    Qualcomm Atheros QCA61x4A Wireless Network AdapterInstalled    YesPNP Device ID    PCI\VEN_168C&DEV_003E&SUBSYS_080711AD&REV_32\4&35CF558A&0&00E3Last Reset    8/16/17 6:35 PMIndex    1Service Name    Qcamain10x64IP Address    192.168.1.74, fe80::6497:9fab:add8:7db7, 2001:569:7739:600:9475:4f81:a2b4:2c10, 2001:569:7739:600:6497:9fab:add8:7db7IP Subnet    255.255.255.0, 64, 128, 64Default IP Gateway    192.168.1.254, fe80::1278:5bff:fed2:e020DHCP Enabled    YesDHCP Server    192.168.1.254DHCP Lease Expires    8/17/17 6:35 PMDHCP Lease Obtained    8/16/17 6:35 PMMAC Address    ‪58:00:E3:78:17:27‬Memory Address    0xB1000000-0xB11FFFFFIRQ Channel    IRQ 4294967286Driver    c:\windows\system32\drivers\qcamain10x64.sys (4.0.2.262, 2.24 MB (2,344,448 bytes), 3/18/17 1:56 PM)