BSOD issue

E

ekijem

Member
Joined
Jun 2, 2016
Posts
16
Location
Douala, Cameroon
Hi guys, I'm just a new member to this forum and I'm really glad to be here. I bought an HP ENVY Laptop with Windows 10 about 6 months ago and everything was working fine until about a month ago. The PC started slowing down and then the BSOD episodes began. At first, the error was DRIVER_IRQL_NOT_LESS_OR_EQUAL NDIS.sys. I updated some outdated drivers on the PC but have been unable to update the sound and video drivers. I use the UNIBLUE POWERSUITE software managing the PC.

However, the error message has now changed to: PAGE_FAULT_IN_NON_PAGE_AREA (Hipshield.sys).

I've attached the diagnostic .zip file and the PERFMON report.

Please help me, I need assistance. Thanks in advance.

Kind regards,View attachment PERFMON Report.zipView attachment SysnativeFileCollectionApp.zipView attachment PERFMON Report.zipView attachment SysnativeFileCollectionApp.zip

Emmanuel
 
Hi ekijem,

Welcome to the Sysnative forum :)

This driver you mention is McAfee Host Intrusion driver.

The 0x9F also reveals another McAfee Host Intrusion driver, though at first sight it may look like the Intel network driver is the cause.
I suggest that you remove McAfee and use Windows Defender as alternative at least on a test base.
https://service.mcafee.com/webcente...df.ctrl-state=mo06lavh2_4&articleId=TS101331#!
Code: 
1: kd> !irp ffffe000682e7a30
Irp is active with 4 stacks 3 is current (= 0xffffe000682e7b90)
 No Mdl: No System Buffer: Thread ffffe0007041b800:  Irp stack trace.  
     cmd  flg cl Device   File     Completion-Context
 [N/A(0), N/A(0)]
            0  0 00000000 00000000 00000000-00000000    


            Args: 00000000 00000000 00000000 00000000
 [N/A(0), N/A(0)]
            0  0 00000000 00000000 00000000-00000000    


            Args: 00000000 00000000 00000000 00000000
>[IRP_MJ_PNP(1b), IRP_MN_REMOVE_DEVICE - (2)]
            0  0 ffffe0006bb2e050 00000000 00000000-00000000    
          Unable to load image \SystemRoot\System32\drivers\Netwbw02.sys, Win32 error 0n2
*** WARNING: Unable to verify timestamp for Netwbw02.sys
*** ERROR: Module load completed but symbols could not be loaded for Netwbw02.sys
 \Driver\NETwNb64
            Args: 00000000 00000000 00000000 00000000
 [IRP_MJ_PNP(1b), IRP_MN_REMOVE_DEVICE - (2)]
            0  0 ffffe0006c943230 00000000 00000000-00000000    
           \Driver\vwifibus
            Args: 00000000 00000000 00000000 00000000



ffffd000`27531e88  fffff801`b99692a1Unable to load image \SystemRoot\system32\drivers\mfehidk.sys, Win32 error 0n2
*** WARNING: Unable to verify timestamp for mfehidk.sys
*** ERROR: Module load completed but symbols could not be loaded for mfehidk.sys
 mfehidk+0x692a1
 
axe0 said:
Hi ekijem,

Welcome to the Sysnative forum :)

This driver you mention is McAfee Host Intrusion driver.

The 0x9F also reveals another McAfee Host Intrusion driver, though at first sight it may look like the Intel network driver is the cause.
I suggest that you remove McAfee and use Windows Defender as alternative at least on a test base.
https://service.mcafee.com/webcente...df.ctrl-state=mo06lavh2_4&articleId=TS101331#!
Code: 
1: kd> !irp ffffe000682e7a30
Irp is active with 4 stacks 3 is current (= 0xffffe000682e7b90)
 No Mdl: No System Buffer: Thread ffffe0007041b800:  Irp stack trace.  
     cmd  flg cl Device   File     Completion-Context
 [N/A(0), N/A(0)]
            0  0 00000000 00000000 00000000-00000000    


            Args: 00000000 00000000 00000000 00000000
 [N/A(0), N/A(0)]
            0  0 00000000 00000000 00000000-00000000    


            Args: 00000000 00000000 00000000 00000000
>[IRP_MJ_PNP(1b), IRP_MN_REMOVE_DEVICE - (2)]
            0  0 ffffe0006bb2e050 00000000 00000000-00000000    
          Unable to load image \SystemRoot\System32\drivers\Netwbw02.sys, Win32 error 0n2
*** WARNING: Unable to verify timestamp for Netwbw02.sys
*** ERROR: Module load completed but symbols could not be loaded for Netwbw02.sys
 \Driver\NETwNb64
            Args: 00000000 00000000 00000000 00000000
 [IRP_MJ_PNP(1b), IRP_MN_REMOVE_DEVICE - (2)]
            0  0 ffffe0006c943230 00000000 00000000-00000000    
           \Driver\vwifibus
            Args: 00000000 00000000 00000000 00000000



ffffd000`27531e88  fffff801`b99692a1Unable to load image \SystemRoot\system32\drivers\mfehidk.sys, Win32 error 0n2
*** WARNING: Unable to verify timestamp for mfehidk.sys
*** ERROR: Module load completed but symbols could not be loaded for mfehidk.sys
 mfehidk+0x692a1
Click to expand...
 
In most cases a reinstallation or repair installation helps for AV's, but we need confirmation that it truly is the cause hence why you need to remove it temporary :smile9:
 
I agree with McAfee removal. You can always reinstall it if found not to contain the offending driver(s).
 
Ok guys. I removed McAfee and activated Windows Defender and every thing seems to work well so far. How long do you think I should keep the test going? Thanks for all your help so far. I truly appreciate it.
 
ekijem said:
Ok guys. I removed McAfee and activated Windows Defender and every thing seems to work well so far. How long do you think I should keep the test going? Thanks for all your help so far. I truly appreciate it.
Click to expand...

Your longest time between crashes appears to be 13 days. I'd recommend going at least that long to test because that is what I would personally do.

Your mean time between crashes was 4.6 days, so if you're impatient, you could wait five days and see how the system behaves.
 
2 weeks it is then. So I'll get back to you on Saturday 18th June 2016. Is there any thing you'll like me to do in the mean time to facilitate diagnostics? Thanks.
 
Just follow your usual routine. Hopefully you won't have any crashes, but if you do, report back with the files again.
 
Hi Guys, hope you're all well. Sorry for missing our appointment: I decided to extend the deadline because I'd updated some drivers and wanted to be sure the updates were working well before getting back to you. There's been no crash and the system has been very stable and back to its original speed performance. The slow reactions to commands are largely gone and system startup too has improved. I also notice that some of the drivers I was having difficulty updating, could now be updated.

So how do I proceed from here?
 
Good morning jcgriff2. Yes, the BSOD is gone. I would like to reinstall the McAfee LifeSafe security suite? Remember I'm currently using Windows Defender, as a temporary solution. Thanks.
 
You can re-install McAfee LifeSafe if you'd like. Often with AV software it's just a matter of it needing a repair or a clean re-installation. As you haven't had any crashes since uninstalling it, if they return after re-installation, you'll just need to remove the program again. At that point you would either just stick with Windows Defender, or try a different AV program/suite (a third, more extreme option, would be to re-install/factory default Windows 10).
 

Has Sysnative Forums helped you? Please consider donating to help us support the site!

Back
Top