Posts by Mark Sanchez9

fadedorca66 said:Did you even try?

I did, but these crashes happen every ten days or even more frequently, so it's hard to tell if this actually fixed anything yet...

William Palmer7 said:It's a bit tough to say for sure without seeing the symbols and the stack trace. If you're feeling up for a little technical deep dive, you could grab some Windows debugging tools and try running an analysis just like this was done here: https://www.instructables.com/How-to...OD-Crash-Dump/

I downloaded everything and followed the instructions exactly as they were laid out.

Here is one of the results I pulled. I have several more of these crash reports, but I’ll just share this one for now instead of copying everything over.

Windows Debugger version 10.0.19041.1 AMD64 copyright
Copyright (c) Microsoft Corporation. All rights reserved.

Loading Dump file [C:\Windows\Minidump\103020-15968-01.dmp]
Mini kernel Dump file: I only have access to the registers and the stack trace.

************* Path validation summary **************
Response Time (ms) | Location
Deferred. SRV*C:\Windows\symbol_cache*You can find the symbols at this link: http://msdl.microsoft.com/download/symbols
The symbol search path is set to: SRV*C:\Windows\symbol_cache*You can find the symbols here: http://msdl.microsoft.com/download/symbols
The executable search path is:
Windows 10 kernel version 18362 MP (8 procs) Free x64
WinNt, suite: TerminalServer SingleUserTS Personal
Build version: 18362.1.amd64fre.19h1_release.190318-1202
Machine Name:
Kernel base is 0xfffff800`30200000 and the PsLoadedModuleList is 0xfffff800`306461b0.
Debug session started: Fri Oct 30 11:52:59.104 2020 (UTC - 5:00)
The system has been running for 15 days, 18 hours, 11 minutes, and 55 seconds.
Loading user Symbols Loading
.................................................. .............
.................................................. ..............
.................................................. ..............
.............................................
Loading user Symbols Loading
Loading unloaded module list
..................................................
To perform a full analysis of this file, please run !analyze -v
6: kd> !analyze -v
************************************************** *****************************
* *
* Bugcheck Analysis *
* *
************************************************** *****************************

The system hit a PAGE_FAULT_IN_NONPAGED_AREA error, specifically code 50. This usually points to an issue with memory or a driver trying to access a memory address that doesn't exist.
An invalid system memory reference occurred. This type of error can't be handled by a try-except block.
Usually, the address is either completely invalid or it's just pointing to memory that’s already been freed.
Arguments:
Arg1: ffff9589a20fdff0, memory referenced.
Arg2: 0000000000000002, where a value of 0 indicates a read operation and 1 signifies a write operation.
Arg3: fffff80048ed1a95. This represents the specific instruction address that attempted to access the faulty memory location, provided it isn't zero.
address.
Arg4: 0000000000000000, (reserved)

Debugging Details:
------------------

*** WARNING: Unable to verify timestamp for aswArPot.sys

The system was unable to identify the specific driver causing the crash.

KEY_VALUES_STRING: 1

SEC Value : 4 Key : analysis
SEC Value : 4 Key : analysis

CPP Value : Create
Value: Create: 8007007e on Mark Key

DebugData Value : CreateObject Key : analysis
Value: CreateObject

Key : Analysis.DebugModel
Value: CreateObject

Key : Analysis.Elapsed.Sec
Value: 30

Key : Analysis.Memory.CommitPeak.Mb
Value: 97

Key : Analysis.System
Value: CreateObject

BUGCHECK_CODE: 50

BUGCHECK_P1: ffff9589a20fdff0

BUGCHECK_P2: 2

BUGCHECK_P3: fffff80048ed1a95

BUGCHECK_P4: 0

READ_ADDRESS: fffff800307713b8: Unable to get MiVisibleState
Unable to get NonPagedPoolStart
Unable to get NonPagedPoolEnd
Unable to get PagedPoolStart
Unable to get PagedPoolEnd
fffff800306283b8: Unable to get Flags value from nt!KdVersionBlock
fffff800306283b8: Unable to get Flags value from nt!KdVersionBlock
unable to get nt!MmSpecialPagesInUse
ffff9589a20fdff0

MM_INTERNAL_CODE: 0

BLACKBOXBSD: 1 (!blackboxbsd)

BLACKBOXNTFS: 1 (!blackboxntfs)

BLACKBOXPNP: 1 (!blackboxpnp)

BLACKBOXWINLOGON: 1

CUSTOMER_CRASH_COUNT: 1

PROCESS_NAME: EFRService.exe

TRAP_FRAME: ffffee837fb25160 -- (.trap 0xffffee837fb25160)
NOTE: The trap frame does not contain all registers.
Some register values may be zeroed or incorrect.
rax=ffff9589a20ff818 rbx=0000000000000000 rcx=ffff9589a20fdff0
rdx=00006a765fb5a700 rsi=0000000000000000 rdi=0000000000000000
rip=fffff80048ed1a95 rsp=ffffee837fb252f8 rbp=ffffee837fb25560
r8=0000000000000010 r9=00000000000004c5 r10=000007ffb8d7cf30
r11=ffff9589a20f4760 r12=0000000000000000 r13=0000000000000000
r14=0000000000000000 r15=0000000000000000
iopl=0 nv up ei ng nz na po nc
aswArPot+0x21a95:
fffff800`48ed1a95 660f7f09 movdqa xmmword ptr [rcx],xmm1 ds:ffff9589`a20fdff0=????????????????????????????? ???
Resetting default scope

STACK_TEXT:
ffffee83`7fb24eb8 fffff800`3040842b : 00000000`00000050 ffff9589`a20fdff0 00000000`00000002 ffffee83`7fb25160 : nt!KeBugCheckEx
ffffee83`7fb24ec0 fffff800`3029559f : 00000000`00000114 00000000`00000002 00000000`00000000 ffff9589`a20fdff0 : nt!MiSystemFault+0x19df7b
ffffee83`7fb24fc0 fffff800`303d0d5e : fffff800`30670300 fffff800`3022d628 ffffda8f`5e572000 ffffee83`7fb25270 : nt!MmAccessFault+0x34f
ffffee83`7fb25160 fffff800`48ed1a95 : fffff800`48eba283 00000000`0237b090 ffffee83`7fb25560 00000000`00000237 : nt!KiPageFault+0x35e
ffffee83`7fb252f8 fffff800`48eba283 : 00000000`0237b090 ffffee83`7fb25560 00000000`00000237 ffffee83`00000000 : aswArPot+0x21a95
ffffee83`7fb25300 00000000`0237b090 : ffffee83`7fb25560 00000000`00000237 ffffee83`00000000 00000000`00000003 : aswArPot+0xa283
ffffee83`7fb25308 ffffee83`7fb25560 : 00000000`00000237 ffffee83`00000000 00000000`00000003 00000000`00000000 : 0x237b090
ffffee83`7fb25310 00000000`00000237 : ffffee83`00000000 00000000`00000003 00000000`00000000 ffff9589`a20f4760 : 0xffffee83`7fb25560
ffffee83`7fb25318 ffffee83`00000000 : 00000000`00000003 00000000`00000000 ffff9589`a20f4760 ffffeb75`80000070 : 0x237
ffffee83`7fb25320 00000000`00000003 : 00000000`00000000 ffff9589`a20f4760 ffffeb75`80000070 ffffeb75`bac00000 : 0xffffee83`00000000
ffffee83`7fb25328 00000000`00000000 : ffff9589`a20f4760 ffffeb75`80000070 ffffeb75`bac00000 ffffeb75`badd6000 : 0x3

SYMBOL_NAME: aswArPot+21a95

MODULE_NAME: aswArPot

IMAGE_NAME: aswArPot.sys

STACK_COMMAND: .thread ; .cxr ; kb

BUCKET_ID_FUNC_OFFSET: 21a95

FAILURE_BUCKET_ID: AV_INVALID_aswArPot!unknown_function

OS_VERSION: 10.0.18362.1

BUILDLAB_STR: 19h1_release

OSPLATFORM_TYPE: x64

OSNAME: Windows 10

FAILURE_ID_HASH: {de4fbdf8-f109-a005-5489-cc580a726af4}

Followup: MachineOwner
---------

William Richardson12 said:Just grab WhoCrashed, run it, and then paste whatever it spits out here... ☕

Here it is:

Crash Dump analysis
--------------------------------------------------------------------------------

Your computer is set up to capture crash dumps.

Crash dump locations:
C:\WINDOWS
C:\WINDOWS\Minidump

Your computer crashed or a problem was reported on Fri 6.11.2020 at 2:21:57 PM.
Crash Dump analysis: C:\WINDOWS\Minidump\110620-13812-01.dmp
It looks like ntoskrnl.exe (nt+0x1C2CE0) was likely the culprit here.
The error code is 0x3B (0xC0000005, 0xFFFFF8013CE5A1F2, 0xFFFF868940626BC0, 0x0).
I'm running into a SYSTEM_SERVICE_EXCEPTION error.
The file path is C:\WINDOWS\system32\ntoskrnl.exe.
Microsoft Windows NT kernel system bug.
Microsoft Corporation
The issue involves a Microsoft Windows NT kernel system bug.
The bug check description shows that an error occurred during a transition from non-privileged code to privileged code.
It looks like a standard software driver issue rather than a hardware failure.
The crash occurred within the Windows kernel. It is possible that an unidentified driver is responsible for this issue.

Your computer experienced a crash or an error was logged on Fri Oct 30, 2020, at 11:52:59.
Crash Dump analysis: C:\WINDOWS\Minidump\103020-15968-01.dmp
It looks like aswarpot.sys (0xFFFFF80048ED1A95) is likely the culprit behind this issue.
The bugcheck code is 0x50 (0xFFFF9589A20FDFF0, 0x00000002, 0xFFFFF80048ED1A95, 0x00000000).
The system hit a PAGE_FAULT_IN_NONPAGED_AREA error. This usually points to memory issues or driver conflicts.
The file path points to C:\WINDOWS\system32\drivers\aswarpot.sys.
Norton software description.
Antivirus company : Norton software description
Antivirus company : Norton software description
The system encountered an error because it tried to access invalid system memory.
This looks like a standard software driver bug. It’s unlikely that you're dealing with a hardware issue.
It looks like a third-party driver is likely the culprit behind this system error. I'd recommend checking for an update for the aswarpot.sys driver (Antivirus company : Norton software description).
Google query: aswarpot.sys Norton software description PAGE_FAULT_IN_NONPAGED_AREA

Your computer encountered a critical error or a problem was reported on Sat 10.10.2020 at 11:59:34.
Crash Dump analysis: C:\WINDOWS\Minidump\101020-15203-01.dmp
The issue likely stems from this specific module: ntoskrnl.exe (nt+0x1C2990).
The bugcheck code is 0x3B (0xC0000005, 0xFFFFF800180AC7B9, 0xFFFFFC0EEE942AE0, 0x0).
I ran into a SYSTEM_SERVICE_EXCEPTION error.
The file path points to C:\WINDOWS\system32\ntoskrnl.exe.
Microsoft Windows NT kernel system bug.
Microsoft Corporation
The error points to a Microsoft Windows NT kernel system bug.
The bug check indicates that an exception occurred during a transition from non-privileged code to privileged code.
This looks like a standard software driver issue rather than anything related to a hardware failure.
The crash occurred within the Windows kernel. It's possible an unidentified driver is triggering this issue.

Your computer crashed or an error was reported on Mon at 10:59 PM.
Crash Dump analysis: C:\WINDOWS\Minidump\081720-9937-01.dmp
It looks like ntoskrnl.exe (nt+0x1C23C0) might be the culprit here.
Bugcheck code: 0x3B (0xC0000005, 0xFFFFF8004BEABFB6, 0xFFFFFC0E326DA7D0, 0x0)
Error: SYSTEM_SERVICE_EXCEPTION
file path: C:\WINDOWS\system32\ntoskrnl.exe
product: Microsoft® Windows® Operating System
company: Microsoft Corporation
description: Microsoft Windows NT kernel system bug
Bug check description: This means an exception occurred during a routine that moves from non-privileged code to privileged code.
This seems like a standard software driver issue rather than a hardware failure.
The crash happened within the Windows kernel. It's possible another unidentified driver is triggering this.

Your computer crashed or a problem was logged on Sat 18.7.2020. 13:02:12
crash dump file: C:\WINDOWS\Minidump\071820-14671-01.dmp
The following module likely caused this: aswarpot.sys (0xFFFFF8018DAC1995)
Bugcheck code: 0x50 (0xFFFFC788F2CCDFF0, 0x2, 0xFFFFF8018DAC1995, 0x0)
Error: PAGE_FAULT_IN_NONPAGED_AREA
file path: C:\WINDOWS\system32\drivers\aswarpot.sys
product: Norton software description
company: Norton software description
description: Norton Anti Rootkit
Bug check description: This suggests that the system tried to access invalid memory.
This looks like a typical software driver bug and isn't likely a hardware issue.
A third-party driver was flagged as the most probable cause. I recommend checking for an update for this specific driver: aswarpot.sys (Norton Anti Rootkit, Norton software description).
Google query: aswarpot.sys Norton software description PAGE_FAULT_IN_NONPAGED_AREA

--------------------------------------------------------------------------------
Summary
--------------------------------------------------------------------------------

I've analyzed 5 crash dumps. A third-party driver is clearly causing the crashes on your machine. You should definitely check the manufacturer's website for any available updates for these drivers. Use the links below to run a Google query for updates:

aswarpot.sys (Norton Anti Rootkit, Norton software description)

If you can't find an update, try using Google to search for the driver name along with the specific error codes. Adding your computer's brand and model to the search can also help. Often, you'll find forum discussions from other users dealing with the exact same thing.

Check out the general troubleshooting guide for system crashes for more details.

Keep in mind that we can't always be 100% sure if a specific driver is the true culprit or if it's just related to the actual cause. Regardless, it's smart to keep your drivers updated and ensure Windows Update is running automatically. If you suspect hardware is actually failing, a Google search combining the bug check error with your PC's model info might provide more clarity.

Thanks for the advice. I tried a Google query for the kernel dump log, but it just gave me a bunch of links related to Linux, so I'm not really sure what to make of that...

I'm not quite sure how to handle MEMORY.DMP or a Minidump, so if you could clarify that for me. I found the minidump folder in C/Windows/Minidump, but I can't actually open anything inside it.

Also, regarding those beeps—how can I tell if it's the motherboard or something else? To me, it sounded more like the noise was coming from the speakers, but I can't say for sure...

Hi everyone,

As the title suggests, I am dealing with a Blue Screen of death issue.
What happened? This isn't a one-time thing; it has occurred several times over the last few months. While working—mostly in Word or occasionally on Skype—the laptop simply restarts and displays a screen saying, "Your PC ran into some problems and we need to restart" (see the image in the link). Once or twice, there was also an unpleasant screeching sound that persisted until the reboot finished.

After a restart, the laptop functions perfectly normally until the next crash occurs.

Does anyone know what might be causing this? My laptop is just over a year old and is still under warranty, but since this is my only computer and I am currently working from home, I cannot afford to be without it for several days.
Any advice would be appreciated.

Specs: HP Pavilion x360 Convertible 14-dh 0 xxx, Intel (R) Core (TM) i5-8265U CPU @ 1.60 GHz. 8 GB RAM, 256 GB SSD, running original Windows 10 64-bit.

https://ibb.co/zQZxfxn

Yeah, I’m planning to split this into two parts just in case I run into issues with macOS and have to reinstall everything. That way, I won't lose any of my data.

Thanks for the link.

Hello,

I just picked up a new laptop that came with Windows 10 pre-installed. Right now, my drive only has one partition: the C: drive.

Does anyone know how I can create a new partition, and is it actually possible to do this without having to reinstall macOS from scratch?