We help IT Professionals succeed at work.

Page fault in nonpaged area

Paulduberry
Paulduberry used Ask the Experts™
on
I have an Acer Veriton PC that has hardly been used at all during it's first year of life but already I have done a full system restore to factory settings because it was crashing. Now a few days later after initially working ok it's blue screening with this page fault error. I have ran memtest86 and ran the manufacturer's diagnostics (Seatools). It's a Seagate 320GB drive. No errors found during either of these tests. I'm not sure what to think at this point except to pull out some more hair. Any help would be appreciated thanks.
Comment
Watch Question

Do more with

Expert Office
EXPERT OFFICE® is a registered trademark of EXPERTS EXCHANGE®
Are you familiar with WinDbg?

Are you getting a memory dump (or mini dump)?  Depending on size, if you post it here, I'll take a look.

Could be anything but my money is on a dodgy driver.  The dump file in windbg would highlight which one.

Was there any indication of a .SYS file on the BSOD?

Author

Commented:
Runing chkdsk /r/f and it's reporting 837 unused index entries from $SII, 837 unused index entries from $SDH and 837 unused security descriptors and fixing mirror copy of the security descriptors data stream. Now I'm not sure what this means but having just done a complete restore to factory settings just a few days ago, deosn't this seem unusual?

Commented:
This would indicate error in memory. Remove, clean and return each memory stick and retest. If you can, run the pc with minimum memory and swap memory to try and isolate the bad memory. Ideally, you can try the memory in another PC. If all else fails, replace motherboard.

Author

Commented:
Does the fact that these ram modules pass memtest86 not count for anything? I don't mind removing the ram and cleaning. There is only one stick in there anyways. What about chkdsk?

Author

Commented:
Not familiar with WinDbg but happy to do whatever you suggest.

Author

Commented:
Will check for a .sys file!
Have a look in C:\Windows (or C:\WINNT) for a folder or file called minidump.

If there are any files in there and they are less than a few MB, post them here.

http://support.microsoft.com/kb/315263 

Author

Commented:
There are 113 files in this archive but only 9 from today. Good luck. I hope it's not the mobo.
Minidump.zip

Author

Commented:
I can reinstall Windows again but this doesn't really fix the problem long term as my fear is that the problem will recur soon enough. Alan, any luck with those dump files? Just need to know what to do next. Thanks.
Sorry, it will be tomorrow morning uk time before I can take a look.

I'll get back to you when I've looked at them.
Robert RComputer Service Technician

Commented:
This error occurs when the system cannot find data it is looking for either in the memory or the pagesys file (the place on your harddrive where working data is stored when you run out of ram space). If the system can not locate the data it is looking for either in ram or the page system file it gives you the error message PAGE_FAULT_IN_NONPAGED_AREA  To fix this problem run Run Chkdsk /f /r See the following article: http://technet.microsoft.com/en-us/library/cc957625.aspx

Author

Commented:
Web tracker, If you look at comment ID: 36329866 you will see that this has already been done. The problem is still there after running chkddsk /f/r.
Okay, thanks for your patience.

I've ran several of the minidumps though WinDbg and they are all pointing to eLock2FSCTLDriver.sys

A google of this file produces lot of interesting results, seems it's an Acer eLock program that has been causing problem for lots of users.  Here is a previous EE answer:  http://www.experts-exchange.com/OS/Microsoft_Operating_Systems/Q_24085176.html

It seems that you need to go into safe mode and uninstall this eLock software.

Author

Commented:
Alan, I can't thank you enough for your time and effort in helping me solve this nasty problem. You and your fellow experts on this site are a Godsend. All the best.
Just you wait until you get my invoice though! ;-)  

Author

Commented:
Would a Christmas Card do?