BSOD StopCode Page Fault in Nonpaged Areas

Jimmyb · 05 Dec 2017

OK Strange happenings - Not long after posting I crashed again, however I had some work to get on with so I decided to boot into my W7, separate hard drive, and selected via F8 in the BIOS.
When running up I receive the following message " One of your disks needs to be checked for consistency". If ran Disk check on all 6 drives and seemed to find fault on "F" which when running W7 is my Win 10 system disk, it carried out a lot of "repair" work and then opened W7.
Having considered if my W10 drive is still working I have I ran up W10, and have just completed a Full System AV Scan.
Next anomaly, after the first crash my Firefox seemed "different", amongst other things my "Bookmark Bar" would not populate, on opening the browser to put this response in it seems to be "back to normal".

If somebody can tell me where my W7 disk check file could be (I am sure there would be a log) I can post it and it may provide some enlightenment.

zbook · 05 Dec 2017

Open event viewer to find chkdsk reports:
Read Chkdsk Log in Event Viewer in Windows 10 Performance Maintenance Tutorials

The chkdsk /scan was fine so its a surprise that it found problems.
Running chkdsk /x /f /r will be a more in depth scan.
This may take several hours and can be run overnight.
Run it on all partitions using the syntax: chkdsk /x /f /r C: or chkdsk /x /f /r D: changing the letter to the applicable partition.

Jimmyb · 05 Dec 2017

I found the event log, though not on the W7 disk even though this initiated the event, here is a copy of it, though it looks a lot shorter as it check all my disks:

System

-	Provider

[ Name]

Microsoft-Windows-Wininit

[ Guid]

{206f6dea-d3c5-4d10-bc72-989f03c8b84b}

[ EventSourceName]

Wininit

-

EventID

1001

[ Qualifiers]

16384

Version

0

Level

4

Task

0

Opcode

0

Keywords

0x80000000000000

-	TimeCreated

[ SystemTime]

2017-12-05T09:39:51.080963100Z

EventRecordID

7695

Correlation

-	Execution

[ ProcessID]

0

[ ThreadID]

0

Channel

Application

Computer

JimmyB-Win10

Security

-	EventData

Checking file system on C: The type of the file system is NTFS. Volume label is Windows 7. One of your disks needs to be checked for consistency. You may cancel the disk check, but it is strongly recommended that you continue. Windows will now check the disk. CHKDSK is verifying files (stage 1 of 3)... 423424 file records processed. File verification completed. 557 large file records processed. 0 bad file records processed. 6 EA records processed. 45 reparse records processed. CHKDSK is verifying indexes (stage 2 of 3)... 484944 index entries processed. Index verification completed. 0 unindexed files scanned. 0 unindexed files recovered. CHKDSK is verifying security descriptors (stage 3 of 3)... 423424 file SDs/SIDs processed. Cleaning up 128 unused index entries from index $SII of file 0x9. Cleaning up 128 unused index entries from index $SDH of file 0x9. Cleaning up 128 unused security descriptors. Security descriptor verification completed. 30761 data files processed. CHKDSK is verifying Usn Journal... 37021808 USN bytes processed. Usn Journal verification completed. Windows has checked the file system and found no problems. 173976575 KB total disk space. 79446948 KB in 176622 files. 103528 KB in 30762 indexes. 0 KB in bad sectors. 532171 KB in use by the system. 65536 KB occupied by the log file. 93893928 KB available on disk. 4096 bytes in each allocation unit. 43494143 total allocation units on disk. 23473482 allocation units available on disk. Internal Info: 00 76 06 00 24 2a 03 00 37 e4 05 00 00 00 00 00 .v..$*..7....... 64 01 00 00 2d 00 00 00 00 00 00 00 00 00 00 00 d...-........... 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ Windows has finished checking your disk. Please wait while your computer restarts.

Jimmyb · 05 Dec 2017

@zbook I ran as suggested, however it is not in the event log!!!

zbook · 05 Dec 2017

The C: results were in the event viewer.
Which drive or partition did not appear in event viewer?
were both chkdsk and wininit checked?

Jimmyb · 06 Dec 2017

@zbook Had another look and found the results:

Log Name: Application
Source: Microsoft-Windows-Wininit
Date: 05/12/2017 19:15:23
Event ID: 1001
Task Category: None
Level: Information
Keywords: Classic
User: N/A
Computer: JimmyB-Win10
Description:

Checking file system on C:
The type of the file system is NTFS.
Volume label is Windows 10.

A disk check has been scheduled.
Windows will now check the disk.

Stage 1: Examining basic file system structure ...
404224 file records processed.

File verification completed.
5329 large file records processed.

0 bad file records processed.

Stage 2: Examining file name linkage ...
1673 reparse records processed.

484100 index entries processed.

Index verification completed.
0 unindexed files scanned.

0 unindexed files recovered to lost and found.

1673 reparse records processed.

Stage 3: Examining security descriptors ...
Cleaning up 92 unused index entries from index $SII of file 0x9.
Cleaning up 92 unused index entries from index $SDH of file 0x9.
Cleaning up 92 unused security descriptors.
Security descriptor verification completed.
39939 data files processed.

CHKDSK is verifying Usn Journal...
22181600 USN bytes processed.

Usn Journal verification completed.

Stage 4: Looking for bad clusters in user file data ...
404208 files processed.

File data verification completed.

Stage 5: Looking for bad, free clusters ...
21265563 free clusters processed.

Free space verification is complete.

Windows has scanned the file system and found no problems.
No further action is required.

153599999 KB total disk space.
67891452 KB in 218056 files.
144088 KB in 39940 indexes.
0 KB in bad sectors.
502207 KB in use by the system.
65536 KB occupied by the log file.
85062252 KB available on disk.

4096 bytes in each allocation unit.
38399999 total allocation units on disk.
21265563 allocation units available on disk.

Internal Info:
00 2b 06 00 a6 ef 03 00 26 97 07 00 00 00 00 00 .+......&.......
41 01 00 00 48 05 00 00 00 00 00 00 00 00 00 00 A...H...........

Windows has finished checking your disk.
Please wait while your computer restarts.

Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-Wininit" Guid="{206f6dea-d3c5-4d10-bc72-989f03c8b84b}" EventSourceName="Wininit" />
<EventID Qualifiers="16384">1001</EventID>
<Version>0</Version>
<Level>4</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2017-12-05T19:15:23.551551600Z" />
<EventRecordID>7934</EventRecordID>
<Correlation />
<Execution ProcessID="0" ThreadID="0" />
<Channel>Application</Channel>
<Computer>JimmyB-Win10</Computer>
<Security />
</System>
<EventData>
<Data>

Checking file system on C:
The type of the file system is NTFS.
Volume label is Windows 10.

A disk check has been scheduled.
Windows will now check the disk.

Stage 1: Examining basic file system structure ...
404224 file records processed.

File verification completed.
5329 large file records processed.

0 bad file records processed.

Stage 2: Examining file name linkage ...
1673 reparse records processed.

484100 index entries processed.

Index verification completed.
0 unindexed files scanned.

0 unindexed files recovered to lost and found.

1673 reparse records processed.

Stage 3: Examining security descriptors ...
Cleaning up 92 unused index entries from index $SII of file 0x9.
Cleaning up 92 unused index entries from index $SDH of file 0x9.
Cleaning up 92 unused security descriptors.
Security descriptor verification completed.
39939 data files processed.

CHKDSK is verifying Usn Journal...
22181600 USN bytes processed.

Usn Journal verification completed.

Stage 4: Looking for bad clusters in user file data ...
404208 files processed.

File data verification completed.

Stage 5: Looking for bad, free clusters ...
21265563 free clusters processed.

Free space verification is complete.

Windows has scanned the file system and found no problems.
No further action is required.

153599999 KB total disk space.
67891452 KB in 218056 files.
144088 KB in 39940 indexes.
0 KB in bad sectors.
502207 KB in use by the system.
65536 KB occupied by the log file.
85062252 KB available on disk.

4096 bytes in each allocation unit.
38399999 total allocation units on disk.
21265563 allocation units available on disk.

Internal Info:
00 2b 06 00 a6 ef 03 00 26 97 07 00 00 00 00 00 .+......&.......
41 01 00 00 48 05 00 00 00 00 00 00 00 00 00 00 A...H...........

Windows has finished checking your disk.
Please wait while your computer restarts.
</Data>
</EventData>
</Event>

Jimmyb · 07 Dec 2017

So after 4 days without a BSOD, this evening it happened again:

I have attached the zip, if this will help

zbook · 07 Dec 2017

1) When possible please post an image of the Memtest86+ version 5.01 test result for 8 or more passes.

The Graphics driver had stopped responding and successfully recovered 3 times with the last event on 12/5/2017.

2) Uninstall the Nvidia graphics driver using DDU.

The best source to replace the Nvidia graphics driver is from the computer manufacturer's website.
If the driver is not available the next best source is the Nvidia website.
If you use the Nvidia web site be sure the "clean install" box is checked and only install the graphics driver and the physx driver.
Official Display Driver Uninstaller DDU Download
Display Driver Uninstaller Download version 17.0.7.2
Display Driver Uninstaller: How to use - Windows 7 Help Forums
NVIDIA

3) Uninstall Mcafee using the Mcafee uninstall tool:
Antivirus Software, Internet Security, Spyware and Malware Removal McAfee

4) Turn on Windows defender

5) If there are no recurrent BSOD for 1 -2 weeks you can reinstall Mcafee AV. If there are BSOD then uninstall it again and find another AV product. If there are no BSOD then you can continue using Mcafee AV.

Jimmyb · 08 Dec 2017

@zbook, content with the action you are requesting, however slightly unsure about the graphics driver, I have checked out the W7 instructions, I assume I download the drivers before uninstalling, and after the re-start run the Nvidia install file, however won't W10 install it's own drivers on re-start?

zbook · 08 Dec 2017

Drivers can be downloaded to the desktop and installed after uninstallation.
Like software drivers can become corrupted.
So it is okay to install the same driver to fix a potentially corrupted driver.
At times newer drivers may produce BSOD and are rolled back to older drivers.
Wireless or ethernet can be disconnected to prevent Windows from installing non-Microsoft drivers.
There used to be a menu setting to turn off Windows update of non-Microsoft drivers.
Enable or Disable Driver Updates in Windows Update in Windows 10 Windows Update Activation Tutorials
So you can download the driver to the desktop > run DDU to uninstall the graphic drivers > reinstall new driver > reconnect to the internet.
This way there won't be competition for the installation.

In the dumps there were 2 misbehaving drivers.
1 software driver: Mcafee
1 hardware driver: Nvidia