BSOD issue

ekijem · Jun 2, 2016

Hi guys, I'm just a new member to this forum and I'm really glad to be here. I bought an HP ENVY Laptop with Windows 10 about 6 months ago and everything was working fine until about a month ago. The PC started slowing down and then the BSOD episodes began. At first, the error was DRIVER_IRQL_NOT_LESS_OR_EQUAL NDIS.sys. I updated some outdated drivers on the PC but have been unable to update the sound and video drivers. I use the UNIBLUE POWERSUITE software managing the PC.

However, the error message has now changed to: PAGE_FAULT_IN_NON_PAGE_AREA (Hipshield.sys).

I've attached the diagnostic .zip file and the PERFMON report.

Please help me, I need assistance. Thanks in advance.

Kind regards,View attachment PERFMON Report.zip View attachment SysnativeFileCollectionApp.zip View attachment PERFMON Report.zip View attachment SysnativeFileCollectionApp.zip

Emmanuel

axe0 · Jun 2, 2016

Hi ekijem,

Welcome to the Sysnative forum :)

This driver you mention is McAfee Host Intrusion driver.

The 0x9F also reveals another McAfee Host Intrusion driver, though at first sight it may look like the Intel network driver is the cause.
I suggest that you remove McAfee and use Windows Defender as alternative at least on a test base.
https://service.mcafee.com/webcente...df.ctrl-state=mo06lavh2_4&articleId=TS101331#!

Code:

1: kd> !irp ffffe000682e7a30
Irp is active with 4 stacks 3 is current (= 0xffffe000682e7b90)
 No Mdl: No System Buffer: Thread ffffe0007041b800:  Irp stack trace.  
     cmd  flg cl Device   File     Completion-Context
 [N/A(0), N/A(0)]
            0  0 00000000 00000000 00000000-00000000    


            Args: 00000000 00000000 00000000 00000000
 [N/A(0), N/A(0)]
            0  0 00000000 00000000 00000000-00000000    


            Args: 00000000 00000000 00000000 00000000
>[IRP_MJ_PNP(1b), IRP_MN_REMOVE_DEVICE - (2)]
            0  0 ffffe0006bb2e050 00000000 00000000-00000000    
          Unable to load image \SystemRoot\System32\drivers\Netwbw02.sys, Win32 error 0n2
*** WARNING: Unable to verify timestamp for Netwbw02.sys
*** ERROR: Module load completed but symbols could not be loaded for Netwbw02.sys
 \Driver\NETwNb64
            Args: 00000000 00000000 00000000 00000000
 [IRP_MJ_PNP(1b), IRP_MN_REMOVE_DEVICE - (2)]
            0  0 ffffe0006c943230 00000000 00000000-00000000    
           \Driver\vwifibus
            Args: 00000000 00000000 00000000 00000000



ffffd000`27531e88  fffff801`b99692a1Unable to load image \SystemRoot\system32\drivers\mfehidk.sys, Win32 error 0n2
*** WARNING: Unable to verify timestamp for mfehidk.sys
*** ERROR: Module load completed but symbols could not be loaded for mfehidk.sys
 mfehidk+0x692a1

ekijem · Jun 3, 2016

axe0 said:

Hi ekijem,

Welcome to the Sysnative forum :)

This driver you mention is McAfee Host Intrusion driver.

The 0x9F also reveals another McAfee Host Intrusion driver, though at first sight it may look like the Intel network driver is the cause.
I suggest that you remove McAfee and use Windows Defender as alternative at least on a test base.
https://service.mcafee.com/webcente...df.ctrl-state=mo06lavh2_4&articleId=TS101331#!

Code:

1: kd> !irp ffffe000682e7a30
Irp is active with 4 stacks 3 is current (= 0xffffe000682e7b90)
 No Mdl: No System Buffer: Thread ffffe0007041b800:  Irp stack trace.  
     cmd  flg cl Device   File     Completion-Context
 [N/A(0), N/A(0)]
            0  0 00000000 00000000 00000000-00000000    


            Args: 00000000 00000000 00000000 00000000
 [N/A(0), N/A(0)]
            0  0 00000000 00000000 00000000-00000000    


            Args: 00000000 00000000 00000000 00000000
>[IRP_MJ_PNP(1b), IRP_MN_REMOVE_DEVICE - (2)]
            0  0 ffffe0006bb2e050 00000000 00000000-00000000    
          Unable to load image \SystemRoot\System32\drivers\Netwbw02.sys, Win32 error 0n2
*** WARNING: Unable to verify timestamp for Netwbw02.sys
*** ERROR: Module load completed but symbols could not be loaded for Netwbw02.sys
 \Driver\NETwNb64
            Args: 00000000 00000000 00000000 00000000
 [IRP_MJ_PNP(1b), IRP_MN_REMOVE_DEVICE - (2)]
            0  0 ffffe0006c943230 00000000 00000000-00000000    
           \Driver\vwifibus
            Args: 00000000 00000000 00000000 00000000



ffffd000`27531e88  fffff801`b99692a1Unable to load image \SystemRoot\system32\drivers\mfehidk.sys, Win32 error 0n2
*** WARNING: Unable to verify timestamp for mfehidk.sys
*** ERROR: Module load completed but symbols could not be loaded for mfehidk.sys
 mfehidk+0x692a1

ekijem · Jun 3, 2016

Thanks Axe0 for your suggestions. I'll follow up on that. But I really wouldn't like to lose my McAfee security suite.

axe0 · Jun 3, 2016

In most cases a reinstallation or repair installation helps for AV's, but we need confirmation that it truly is the cause hence why you need to remove it temporary :smile9:

jcgriff2 · Jun 4, 2016

I agree with McAfee removal. You can always reinstall it if found not to contain the offending driver(s).

ekijem · Jun 4, 2016

Ok guys. I removed McAfee and activated Windows Defender and every thing seems to work well so far. How long do you think I should keep the test going? Thanks for all your help so far. I truly appreciate it.

writhziden · Jun 4, 2016

ekijem said:
Ok guys. I removed McAfee and activated Windows Defender and every thing seems to work well so far. How long do you think I should keep the test going? Thanks for all your help so far. I truly appreciate it.

Your longest time between crashes appears to be 13 days. I'd recommend going at least that long to test because that is what I would personally do.

Your mean time between crashes was 4.6 days, so if you're impatient, you could wait five days and see how the system behaves.

ekijem · Jun 4, 2016

2 weeks it is then. So I'll get back to you on Saturday 18th June 2016. Is there any thing you'll like me to do in the mean time to facilitate diagnostics? Thanks.

writhziden · Jun 4, 2016

Just follow your usual routine. Hopefully you won't have any crashes, but if you do, report back with the files again.

ekijem · Jul 4, 2016

Hi Guys, hope you're all well. Sorry for missing our appointment: I decided to extend the deadline because I'd updated some drivers and wanted to be sure the updates were working well before getting back to you. There's been no crash and the system has been very stable and back to its original speed performance. The slow reactions to commands are largely gone and system startup too has improved. I also notice that some of the drivers I was having difficulty updating, could now be updated.

So how do I proceed from here?

jcgriff2 · Jul 7, 2016

The BSODs are gone?

If so, what is it that you need help with?

ekijem · Jul 8, 2016

Good morning jcgriff2. Yes, the BSOD is gone. I would like to reinstall the McAfee LifeSafe security suite? Remember I'm currently using Windows Defender, as a temporary solution. Thanks.

Xer · Jul 8, 2016

You can re-install McAfee LifeSafe if you'd like. Often with AV software it's just a matter of it needing a repair or a clean re-installation. As you haven't had any crashes since uninstalling it, if they return after re-installation, you'll just need to remove the program again. At that point you would either just stick with Windows Defender, or try a different AV program/suite (a third, more extreme option, would be to re-install/factory default Windows 10).

Search

Search

BSOD issue

ekijem

Member

axe0

Administrator,
BSOD Academy Instructor,
Security Analyst

ekijem

Member

ekijem

Member

axe0

Administrator,
BSOD Academy Instructor,
Security Analyst

jcgriff2

Co-Founder / Admin
BSOD Instructor/Expert
Microsoft MVP (Ret.)

ekijem

Member

writhziden

Administrator, .NET/UWP Developer

ekijem

Member

writhziden

Administrator, .NET/UWP Developer

ekijem

Member

jcgriff2

Co-Founder / Admin
BSOD Instructor/Expert
Microsoft MVP (Ret.)

ekijem

Member

Xer

Sysnative Staff, BSOD Kernel Dump Senior Analyst

BSOD issue

Member

Administrator, BSOD Academy Instructor, Security Analyst

Member

Member

Administrator, BSOD Academy Instructor, Security Analyst

Co-Founder / AdminBSOD Instructor/ExpertMicrosoft MVP (Ret.)

Member

Administrator, .NET/UWP Developer

Member

Administrator, .NET/UWP Developer

Member

Co-Founder / AdminBSOD Instructor/ExpertMicrosoft MVP (Ret.)

Member

Sysnative Staff, BSOD Kernel Dump Senior Analyst

Administrator,
BSOD Academy Instructor,
Security Analyst

Administrator,
BSOD Academy Instructor,
Security Analyst

Co-Founder / Admin
BSOD Instructor/Expert
Microsoft MVP (Ret.)

Co-Founder / Admin
BSOD Instructor/Expert
Microsoft MVP (Ret.)