Tech Support Guy banner
Status
Not open for further replies.

Windows 10 PC Crashing. PAGE_FAULT_IN_NONPAGED_AREA

970 views 7 replies 2 participants last post by  blues_harp28 
#1 ·
Hello All,

Recently I've been having some issues with my computer. I'll try and describe in the best detail I can what has been happening. If you'd like a short summary, nearly each time I turn on my computer, whether it be by shutdown/turn on or a simple reboot, it has a high chance of BSOD during boot with the error: PAGE_FAULT_IN_NONPAGED_AREA.

A couple of weeks ago, the first time I booted my computer it crashed with that error. However, on the second boot it began working. Later, I updated my computer to Version 1903, which gave me the same crash error each time, and I had to System Restore to before the update.

Recently, I tried updating again, but the same issue came up, so I System Restored again. A couple of days ago I updated my graphics driver and came across the same issue. However, after a second time booting it worked. Today, I restarted again and got the same crash. It rebooted itself twice before working again.

This is the report I was able to find:

Code:
Log Name:      System
Source:        Microsoft-Windows-WER-SystemErrorReporting
Date:          3/29/2020 7:08:17 PM
Event ID:      1001
Task Category: None
Level:         Error
Keywords:      Classic
User:          N/A
Computer:      Nathan
Description:
The computer has rebooted from a bugcheck.  The bugcheck was: 0x00000050 (0xffffb6905ac00000, 0x0000000000000000, 0xfffff80436916d15, 0x0000000000000002). A dump was saved in: C:\WINDOWS\MEMORY.DMP. Report Id: 55f20abd-74ba-457e-bfef-6887948c8f80.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Microsoft-Windows-WER-SystemErrorReporting" Guid="{ABCE23E7-DE45-4366-8631-84FA6C525952}" EventSourceName="BugCheck" />
    <EventID Qualifiers="16384">1001</EventID>
    <Version>0</Version>
    <Level>2</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2020-03-30T00:08:17.451244400Z" />
    <EventRecordID>4995</EventRecordID>
    <Correlation />
    <Execution ProcessID="0" ThreadID="0" />
    <Channel>System</Channel>
    <Computer>Nathan</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1">0x00000050 (0xffffb6905ac00000, 0x0000000000000000, 0xfffff80436916d15, 0x0000000000000002)</Data>
    <Data Name="param2">C:\WINDOWS\MEMORY.DMP</Data>
    <Data Name="param3">55f20abd-74ba-457e-bfef-6887948c8f80</Data>
  </EventData>
</Event>
Apologies if this is not enough information. So far, I haven't been able to get any help with the issue and I don't want to be scared to turn of my computer.

Thanks.
 
See less See more
#2 ·
The computer has rebooted from a bugcheck. The bugcheck was: 0x00000050 ..A dump was saved in: C:\WINDOWS\MEMORY.DMP.
Hi, post the Minidump files
Create a new folder on the desktop and call it dumpfiles [or something similar]
Look in c:\windows\minidump
Copy the last 4 minidump files to that folder.
Close the folder and right click on it and select Send To Compressed [zipped] Folder.
Windows will compress the file and then save the new zipped file in the same location.
Attach the zip folder by using the 'Upload a File' button.
======
Let us have some Pc specifications.
Check and post
TSG System Information Utility - found here.
http://static.techguy.org/download/SysInfo.exe
 
#3 ·
Hi, post the Minidump files
Create a new folder on the desktop and call it dumpfiles [or something similar]
Look in c:\windows\minidump
Copy the last 4 minidump files to that folder.
Close the folder and right click on it and select Send To Compressed [zipped] Folder.
Windows will compress the file and then save the new zipped file in the same location.
Attach the zip folder by using the 'Upload a File' button.
======
Let us have some Pc specifications.
Check and post
TSG System Information Utility - found here.
http://static.techguy.org/download/SysInfo.exe
Thanks for your reply. I've done as you asked, but I could only find two minidumps in the folder.

Here's the sysinfo as well:

Code:
Tech Support Guy System Info Utility version 1.0.0.9
OS Version: Microsoft Windows 10 Home, 64 bit, Build 18362, Installed 20200201214001.000000-300
Processor: AMD A8-5600K APU with Radeon(tm) HD Graphics, AMD64 Family 21 Model 16 Stepping 1, CPU Count: 4
Total Physical RAM: 8 GB
Graphics Card: AMD Radeon R7 200 Series
Hard Drives: C: 222 GB (12 GB Free);
Motherboard: MSI A78M-E35 (MS-7721), ver 6.0, s/n To be filled by O.E.M.
System: American Megatrends Inc., ver ALASKA - 1072009, s/n To be filled by O.E.M.
Antivirus: Windows Defender, Enabled and Updated
 

Attachments

#4 ·
Minidump check x 2 - both are saying the same error.
PHP:
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************
PAGE_FAULT_IN_NONPAGED_AREA (50)
Invalid system memory was referenced.  This cannot be protected by try-except.
Typically the address is just plain bad or it is pointing at freed memory.
Arguments:
Arg1: ffffb908f3200000, memory referenced.
Arg2: 0000000000000000, value 0 = read operation, 1 = write operation.
Arg3: fffff8021bb66d15, If non-zero, the instruction address which referenced the bad memory
    address.
Arg4: 0000000000000002, (reserved)
Debugging Details:
------------------
*** WARNING: Unable to verify timestamp for ArcSec.sys
Could not read faulting driver name
CUSTOMER_CRASH_COUNT:  1
DEFAULT_BUCKET_ID:  WIN8_DRIVER_FAULT
BUGCHECK_STR:  AV
PROCESS_NAME:  System
CURRENT_IRQL:  0
ANALYSIS_SESSION_HOST:  USER-PC
ANALYSIS_SESSION_TIME:  03-30-2020 22:09:13.0719
ANALYSIS_VERSION: 10.0.18362.1 amd64fre
LAST_CONTROL_TRANSFER:  from fffff80215de36d6 to fffff80215dc1510
THREAD_SHA1_HASH_MOD_FUNC:  7ef561e0da05d469fb9ecce44f15925a61ba8770
THREAD_SHA1_HASH_MOD_FUNC_OFFSET:  efa9f66381ebf05aed6bfef4a0a0fa5a69eb5bfe
THREAD_SHA1_HASH_MOD:  d2d330c7d341ec65c9225c08d4f0fd2bc2d1955a
FOLLOWUP_IP: 
ArcSec+6d15
fffff802`1bb66d15 488b0f          mov     rcx,qword ptr [rdi]
FAULT_INSTR_CODE:  480f8b48
SYMBOL_STACK_INDEX:  4
SYMBOL_NAME:  ArcSec+6d15
FOLLOWUP_NAME:  MachineOwner
MODULE_NAME: ArcSec
IMAGE_NAME:  ArcSec.sys
DEBUG_FLR_IMAGE_TIMESTAMP:  4c97fe88
STACK_COMMAND:  .thread ; .cxr ; kb
BUCKET_ID_FUNC_OFFSET:  6d15
FAILURE_BUCKET_ID:  AV_R_INVALID_ArcSec!unknown_function
BUCKET_ID:  AV_R_INVALID_ArcSec!unknown_function
PRIMARY_PROBLEM_CLASS:  AV_R_INVALID_ArcSec!unknown_function
TARGET_TIME:  2020-03-29T07:36:18.000Z
OSBUILD:  18362
OSSERVICEPACK:  657
Followup:     MachineOwner
---------
======
WARNING: Unable to verify timestamp for ArcSec.sys

ArcSec.sys - could relate to a driver for TuneUp utilities - or Total Media Theatre.
Do you have either of the above programs installed?

That said, where the blue screen error is reported is not necessarily where it first started and may not be the cause
https://www.systemlookup.com/Drivers/7487-ArcSec_sys.html
 
#5 ·
Minidump check x 2 - both are saying the same error.
PHP:
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************
PAGE_FAULT_IN_NONPAGED_AREA (50)
Invalid system memory was referenced.  This cannot be protected by try-except.
Typically the address is just plain bad or it is pointing at freed memory.
Arguments:
Arg1: ffffb908f3200000, memory referenced.
Arg2: 0000000000000000, value 0 = read operation, 1 = write operation.
Arg3: fffff8021bb66d15, If non-zero, the instruction address which referenced the bad memory
    address.
Arg4: 0000000000000002, (reserved)
Debugging Details:
------------------
*** WARNING: Unable to verify timestamp for ArcSec.sys
Could not read faulting driver name
CUSTOMER_CRASH_COUNT:  1
DEFAULT_BUCKET_ID:  WIN8_DRIVER_FAULT
BUGCHECK_STR:  AV
PROCESS_NAME:  System
CURRENT_IRQL:  0
ANALYSIS_SESSION_HOST:  USER-PC
ANALYSIS_SESSION_TIME:  03-30-2020 22:09:13.0719
ANALYSIS_VERSION: 10.0.18362.1 amd64fre
LAST_CONTROL_TRANSFER:  from fffff80215de36d6 to fffff80215dc1510
THREAD_SHA1_HASH_MOD_FUNC:  7ef561e0da05d469fb9ecce44f15925a61ba8770
THREAD_SHA1_HASH_MOD_FUNC_OFFSET:  efa9f66381ebf05aed6bfef4a0a0fa5a69eb5bfe
THREAD_SHA1_HASH_MOD:  d2d330c7d341ec65c9225c08d4f0fd2bc2d1955a
FOLLOWUP_IP:
ArcSec+6d15
fffff802`1bb66d15 488b0f          mov     rcx,qword ptr [rdi]
FAULT_INSTR_CODE:  480f8b48
SYMBOL_STACK_INDEX:  4
SYMBOL_NAME:  ArcSec+6d15
FOLLOWUP_NAME:  MachineOwner
MODULE_NAME: ArcSec
IMAGE_NAME:  ArcSec.sys
DEBUG_FLR_IMAGE_TIMESTAMP:  4c97fe88
STACK_COMMAND:  .thread ; .cxr ; kb
BUCKET_ID_FUNC_OFFSET:  6d15
FAILURE_BUCKET_ID:  AV_R_INVALID_ArcSec!unknown_function
BUCKET_ID:  AV_R_INVALID_ArcSec!unknown_function
PRIMARY_PROBLEM_CLASS:  AV_R_INVALID_ArcSec!unknown_function
TARGET_TIME:  2020-03-29T07:36:18.000Z
OSBUILD:  18362
OSSERVICEPACK:  657
Followup:     MachineOwner
---------
======
WARNING: Unable to verify timestamp for ArcSec.sys

ArcSec.sys - could relate to a driver for TuneUp utilities - or Total Media Theatre.
Do you have either of the above programs installed?

That said, where the blue screen error is reported is not necessarily where it first started and may not be the cause
https://www.systemlookup.com/Drivers/7487-ArcSec_sys.html
Interesting. I had AVG beforehand and uninstalled it, but even it told me it didn't fully uninstall everything, so I'm not sure if that had any part of it. I never remember using Total Media Theatre. However, I found a file within my C Drive called ArcSec.sys. Should I just delete the file, or should I use a program or something to get rid of it?

EDIT: I realize I was a bit quick to assume that it needed to be deleted, what should I do about it?
 
#6 ·
Run AVG un-installer to find left over files.
https://www.avg.com/en-ww/avg-remover
======
Check your program files in control panel for Total Media Theatre and uninstall if present.
Even if Total Media Theatre is not installed, ArcSec.sys should not be causing the blue screen.
======
There are many reasons for Blue Screens
Including: New hardware - New software installed.
Faulty Device driver - Video driver - corrupted - faulty.
Faulty Ram - Overheating - Dying hard drive, etc
It's as if the blue screen finds the weakest spot on the system at any given time.
======
I would also run a memory [Ram] test.
Run memtest86
https://www.memtest86.com/download.htm
There is a free version.
Download the ISO file then burn to a DVD
Start the Pc using the DVD and run the memory test for at least 8 passes.
It is best to run a full scan on individual Ram sticks if you can.
Or run the test but if any errors are shown - then remove all sticks of Ram - test each Ram stick one at a time and test them in different slots.

Guide to using Memtest86+
http://www.wikihow.com/Test-PC-Ram-with-MemTest86
 
#7 ·
Run AVG un-installer to find left over files.
https://www.avg.com/en-ww/avg-remover
======
Check your program files in control panel for Total Media Theatre and uninstall if present.
Even if Total Media Theatre is not installed, ArcSec.sys should not be causing the blue screen.
======
There are many reasons for Blue Screens
Including: New hardware - New software installed.
Faulty Device driver - Video driver - corrupted - faulty.
Faulty Ram - Overheating - Dying hard drive, etc
It's as if the blue screen finds the weakest spot on the system at any given time.
======
I would also run a memory [Ram] test.
Run memtest86
https://www.memtest86.com/download.htm
There is a free version.
Download the ISO file then burn to a DVD
Start the Pc using the DVD and run the memory test for at least 8 passes.
It is best to run a full scan on individual Ram sticks if you can.
Or run the test but if any errors are shown - then remove all sticks of Ram - test each Ram stick one at a time and test them in different slots.

Guide to using Memtest86+
http://www.wikihow.com/Test-PC-Ram-with-MemTest86
I appreciate the support! It'll likely be a while before I can get some tests done, but as soon as I figure it out, I'll try and remember to put the fix in here just in case. Thanks again.
 
#8 ·
Status
Not open for further replies.
You have insufficient privileges to reply here.
Top