ATTEMPTED_EXECUTE_OF_NOEXECUTE_MEMORY

Similar Questions

• Ntoskrnl.exe - ATTEMPTED_EXECUTE_OF_NOEXECUTE_MEMORY - BSOD - Win 8.1

  I have a laptop ASUS ROG very recent with Win 8.1

  Yesterday, for the first time I had a BSOD ATTEMPTED_EXECUTE_OF_NOEXECUTE_MEMORY.

  It's the first time on this laptop and also the first time that I ever had a BSOD since I moved all my PC to win 8 Win 8 launching.

  I ran the Windows Memory Diagnostic tool and all is well, there no problem with memory.

  I also ran BlueScreenView v1.55 Nirsoft and this is the result:

  Ntoskrnl.exe ntoskrnl.exe + 1ae5fa fffff802 '4be1e000 fffff802' 4c5b2000 0 00794000 0x54c832b2 28/01/2015 x 02:52:02 (winblue_r8.150127 - 1500) Microsoft® Windows® NT Kernel operating system & 6.3.9600.17668 Microsoft Corporation C:\Windows\system32\ntoskrnl.exe

  My PC seems to work very well. Should I worry? What could I do to fix the situation? I mean, since my PC seems to work fine, I'm not taking into consideration the drastic solutions of the time like reinstall Windows 8 or similar. I was wondering if there is a fast action, that I can do to solve this problem of ntoskrnl.exe.

  Thank you very much!

  FWIW...

  [Devices with questions]

  ID_periferica_PNP device Error_code

  Qualcomm-Atheros Bluetooth 4.0 + AR3012 HS-PID_3004\5 & 31B872B & USB\VID_0CF3 & 5 0 the device is disabled.

  PS/2 port ELAN Smart-Pad & 25EEF08 & ACPI\ETD010D\4 0, the device does not exist, is not working properly or the driver installation is not complete.

  You may want to investigate these extra features.

• Windows Server 2012R2 - Bluescreen ATTEMPTED_EXECUTE_OF_NOEXECUTE_MEMORY

  Hello guys,.

  We have a problem with a windows server system, the operating system is windows server R2 with all updates.

  1-2-3 daily, the server crashed with a bsod.

  Switch us drivers, BIOS, disable services, change the swap file, change the material- but the problem is still there.

  In addition, 2 times the server crashed after I opened services.msc, coincidence?

  Here is some information:

  

  Ntoskrnl.exe ntoskrnl.exe + 1647ac fffff802 'd0a09000 fffff802' d1197000 0x0078e000 0x56509ee1 21.11.2015 17:42:09 Microsoft® Windows® NT Kernel operating system & 6.3.9600.18146 (winblue_ltsb.151121 - 0600) Microsoft Corporation C:\Windows\system32\ntoskrnl.exe

  

  Minidump: http://we.tl/FXuvMx9Mrj

  DUMP memory: http://we.tl/7BgHfum5WU

  Any ideas what the problem is?

  Best regards

  Jonas

  Hello

  Post your question in the TechNet Server Forums, as your question kindly is beyond the scope of these Forums.

  http://social.technet.Microsoft.com/forums/WindowsServer/en-us/home?category=WindowsServer

  See you soon.

• WIndows 8 computer intermittently BSOD-ATTEMPTED_EXECUTE_OF_NOEXECUTE_MEMORY

  I ran check, restarted and was able to load in Windows 8 very well. Although the pilots, I thought that I deleted were still present. Is there a way to get rid of it for good?

  I ran about two days ago Windows memory diagnostic tool and no errors not found. I ran memtest86 for two passes ago about 4 hours after I got clean installed windows 8.

  Auditor to find a driver nvidia in violation, very old driver that I'm now updating.

• BSOD Windows Server 2012 starting MSMQ service

  Hello

  We have a problem with a server get BSOD when we start a service related to MSMQ. Whenever we start the service as a user on the field, we get the noexecute BSOD memory execute attempt. When we start the service as local system, it starts without a problem. I got the crash dump here:

  Symbol of validation of the path summary *.
  Location of response time (ms)
  Deferred SRV * c:\symbols* http://msdl.microsoft.com/download/symbols

  Microsoft (R) Windows debug 6.3.9600.17298 AMD64 Version
  Copyright (c) Microsoft Corporation. All rights reserved.

  Loading dump file [C:\170\120314-11828-01.dmp]
  The mini kernel dump file: only registers and the trace of the stack are available

  Symbol of validation of the path summary *.
  Location of response time (ms)
  Deferred SRV * c:\symbols* http://msdl.microsoft.com/download/symbols
  Symbol search path is: SRV * c:\symbols* http://msdl.microsoft.com/download/symbols
  Executable search path is:
  Windows 8 Kernel Version 9200 MP (4 procs) free x 64
  Product: Server, suite: TerminalServer SingleUserTS
  By: 9200.16912.amd64fre.win8_gdr.140502 - 1507
  Computer name:
  Kernel base = 0xfffff800 '48476000 PsLoadedModuleList = 0xfffff800' 48742aa0
  The debugging session: Wed Dec 3 14:41:01.892 2014 (UTC + 01:00)
  System Uptime: 0 days 0:04:09.904
  Loading the kernel symbols
  .

  Press (cdb, ntsd, kd) ctrl-c or ctrl-BREAK (windbg) to drop the charges of symbol that take too much time.
  Run! SYM noisy before .reload to track symbols loading issues.

  ..............................................................
  ................................................................

  Loading user symbols
  Loading unloaded module list
  ......
  *******************************************************************************
  *                                                                             *
  * Bugcheck analysis *.
  *                                                                             *
  *******************************************************************************

  Use! analyze - v to obtain detailed debugging information.

  Verification of error CF, {7f982e340e0, 791000010fdb1025, fffff8800485a5e0, 80000005}

  Probably caused by: mqac.sys (mqac! ACCreateQueue + a77)

  Follow-up: MachineOwner
  ---------

  1: kd >! analyze - v
  *******************************************************************************
  *                                                                             *
  * Bugcheck analysis *.
  *                                                                             *
  *******************************************************************************

  ATTEMPTED_EXECUTE_OF_NOEXECUTE_MEMORY (CF)
  An attempt was made to execute non-executable memory.  The guilty driver
  is on the stack trace (and usually the current instruction pointer).
  When possible, the name of the guilty driver (Unicode string) is printed on
  verification error screen and saved in KiBugCheckDriver.
  Arguments:
  Arg1: 000007f982e340e0, virtual address for the execute attempted.
  Arg2: 791000010fdb1025, content PTE.
  Arg3: fffff8800485a5e0, (reserved)
  Arg4: 0000000080000005, (reserved)

  Debugging information:
  ------------------

  CUSTOMER_CRASH_COUNT: 1

  DEFAULT_BUCKET_ID: WIN8_DRIVER_FAULT_SERVER

  BUGCHECK_STR: 0XFC

  Nom_processus: mqsvc.exe

  CURRENT_IRQL: 0

  ANALYSIS_VERSION: 6.3.9600.17298 (debuggers (dbg). 141024-1500) amd64fre

  TRAP_FRAME: fffff8800485a5e0-(.trap 0xfffff8800485a5e0)
  NOTE: The frame trap does contain not all registers.
  Some registry values can be set to zero or incorrect.
  Rax = 000007f982e0c950 rbx = 0000000000000000 rcx = 0000005dff1fecd0
  RDX = 0000005dff34e988 rsi = 0000000000000000 rdi = 0000000000000000
  RIP = 000007f982e340e0 rsp = fffff8800485a778 rbp = fffff8800485ab80
  R8 = fffffa800e623980 r9 = 0000000000000521 r10 = fffffa800ec547a0
  R11 = 0000000000000006 r12 = 0000000000000000 r13 = 0000000000000000
  R14 = 0000000000000000 r15 = 0000000000000000
  iopl = 0 nv in pe of na EI pl nz nc
  000007f9'82e340e0?              ???
  Reset the default scope

  LAST_CONTROL_TRANSFER: from fffff80048661ef1 to fffff800484d0540

  STACK_TEXT:
  fffff880 '0485-408 fffff800' 48661ef1: 00000000'000000 fc 000007f9 '82e340e0 79100001' 0fdb1025 fffff880' 0485a5e0: nt! KeBugCheckEx
  fffff880'0485 has 410 fffff800'48588980: fffff880'0485a5e0 ffffd8e9 '9e6056e2 fffffa80' 0ec547a0 00000000' 00000000: nt! : FNODOBFM: 'string' + 0x33f2d
  fffff880 '0485-450 fffff800' 4850aabd: fffff880 '0485 a 500 00000000' c0000016 fffffa80 '0e603b00 fffffa80' 0e623980: nt! : FNODOBFM: 'string' + 0x33e85
  fffff880 '0485a4a0 fffff800' 484cdfee: fffff880 00000000'00000008 00000000'00000000 00000000'00000000 ' 0485a5e0: nt! MmAccessFault + 0x3ed
  fffff880 '0485a5e0 000007f9' 82e340e0: fffff880'00dc5297 fffffa80 '0ec54770 00000000' fffff8a0 00000000' 011ce7c0: nt! KiPageFault + 0x16e
  fffff880 '0485-778 fffff880' 00dc5297: fffffa80 '0ec54770 00000000' fffff8a0 00000000' fffff980 00000000' 011ce7c0: 0x000007f9'82e340e0
  fffff880 '0485-780 fffff880' 00dc60d7: 00000000' 0000005d 00000000 ' ff34e988 00000000'00000000 00000000'00000000: mqac! ACCreateQueue + 0xa77
  fffff880 '0485a7f0 fffff800' 488ab127: fffffa80 '0e5ed520 fffffa80' 0d50ecf0 00000000'00000521 00000000'00000000: mqac! ACDeviceControl + 0x62b
  fffff880 '0485-890 fffff800' 488c02f6: 00000000 00000000' fffff8a0'00000080 00000000 '00000000 00000000' 00000000: nt! IopXxxControlFile + 0x7e5
  fffff880 '0485aa20 fffff800' 484cf553: 00000000'00000000 00000000'0000000 c fffff6fb '7dbed078 fffff6fb' 7da0ff30: nt! NtDeviceIoControlFile + 0 x 56
  fffff880 '0485aa90 000007f9' 8a702c1a: 00000000'00000000 00000000'00000000 00000000'00000000 00000000'00000000: nt! KiSystemServiceCopyEnd + 0x13
  0000005d 'ff34e928 00000000' 00000000: 00000000'00000000 00000000'00000000 00000000'00000000 00000000'00000000: 0x000007f9'8a702c1a

  STACK_COMMAND: kb

  FOLLOWUP_IP:
  Mqac! ACCreateQueue + a77
  fffff880'00dc5297 85 c 0 test eax, eax

  SYMBOL_STACK_INDEX: 6

  SYMBOL_NAME: mqac! ACCreateQueue + a77

  FOLLOWUP_NAME: MachineOwner

  MODULE_NAME: mqac

  Nom_image: mqac.sys

  DEBUG_FLR_IMAGE_TIMESTAMP: 5010abc2

  IMAGE_VERSION: 6.2.9200.16384

  BUCKET_ID_FUNC_OFFSET: a77

  FAILURE_BUCKET_ID: 0xFC_mqac! ACCreateQueue

  BUCKET_ID: 0xFC_mqac! ACCreateQueue

  ANALYSIS_SOURCE: KM

  FAILURE_ID_HASH_STRING: km:0xfc_mqac! accreatequeue

  FAILURE_ID_HASH: {d1daca31-6256-358c-65b5-69af54392880}

  Follow-up: MachineOwner
  ---------

  Try asking in the Windows Server forum:
  http://social.technet.Microsoft.com/forums/en-us/category/WindowsServer

• Displaying the right information to get a BSOD error help

  When your computer crashes and displays a blue screen there are often very valuable information about the photo that will allow users to help you solve your problem and to know what is causing this blue screen appears.

  Looking at the image at the end of the article you will see two sections highlighted, you will always want to post this information in your forum thread when looking for help she will be the most critical part of troubleshooting. The top tells us what's happening and said background where it goes to. We have just responded to two of the most important issues when you try to solve a problem.

  What's not?

  Where is the problem isolated to?

  Most of the text is quite annoying, but if that's important to you then it may be important for us. We have all seen what looks like a BSOD, but we do not know what your BSOD.

  There are more important questions that you can answer that will help your troubleshoot BSOD error message.

  1. What is your system brand and model? We know that you have an HP computer, but there are tons of computers. We need to know your specific model to ensure you use the appropriate drivers and we recommend the proper drivers.
  2. What is your version of Windows and the Service pack?
  3. Are you running a 64 bit or 32 bit OS?
  4. What is your Internet browser and version?
  5. Does your system use IDE or SATA disk drives?
  6. What virus protection software and current malicious software do you use? Is up to date?
  7. The issue occurred after an interruption of the power supply as an abnormal termination or power failure?
  8. What has changed recently?
  9. Does this happen often you can effectively reproduce the problem? If you can easily reproduce what steps can you take to reproduce the problem.

  Here is a list of the most common mistakes of the BSOD you can see

  • Stop 0 x 00000003 UNSYNCHRONIZED_ACCESS
  • Stop 0x0000000A IRQL_NOT_LESS_OR_EQUAL
  • Stop 0x0000001E KMODE_EXCEPTION_NOT_HANDLED
  • Stop 0 x 00000023 FAT_FILE_SYSTEM
  • Stop 0 x 00000024 NTFS_FILE_SYSTEM
  • Stop 0x0000002E DATA_BUS_ERROR
  • Stop 0x0000003F NO_MORE_SYSTEM_PTES
  • Stop 0 x 00000044 MULTIPLE_IRP_COMPLETE_REQUESTS
  • Stop 0 x 00000050 PAGE_FAULT_IN_NONPAGED_AREA
  • Stop 0x0000006B PROCESS1_INITIALIZATION_FAILED
  • Stop 0 x 00000073 CONFIG_LIST_FAILED
  • Stop 0 x 00000074 BAD_SYSTEM_CONFIG_INFO
  • Stop 0 x 00000076 PROCESS_HAS_LOCKED_PAGES
  • Stop 0 x 00000077 KERNEL_STACK_INPAGE_ERROR
  • Stop 0 × 00000079 MISMATCHED_HAL
  • Stop 0x0000007A KERNEL_DATA_INPAGE_ERROR
  • STOP 0x0000007B INACCESSIBLE_BOOT_DEVICE
  • Stop 0x0000007E SYSTEM_THREAD_EXCEPTION_NOT_HANDLED
  • Stop 0x0000007F UNEXPECTED_KERNEL_MODE_TRAP
  • Stop 0x0000008E KERNEL_MODE_EXCEPTION_NOT_HANDLED
  • Stop 0x0000009C MACHINE_CHECK_EXCEPTION
  • STOP 0x0000009F DRIVER_POWER_STATE_FAILURE
  • Stop 0x000000BE ATTEMPTED_WRITE_TO_READONLY_MEMORY
  • Stop 0x000000C2 BAD_POOL_CALLER
  • Stop DRIVER_VERIFIER_DETECTED_VIOLATION 0x000000C4
  • Stop 0x000000CA PNP_DETECTED_FATAL_ERROR
  • Stop 0x000000CB DRIVER_LEFT_LOCKED_PAGES_IN_PROCESS
  • Stop 0x000000CE DRIVER_UNLOADED_WITHOUT_CANCELLING_PENDING_OPERATIONS
  • STOP 0x000000D1 DRIVER_IRQL_NOT_LESS_OR_EQUAL
  • Stop 0x000000D5 DRIVER_PAGE_FAULT_IN_FREED_SPECIAL_POOL
  • Stop 0x000000D8 DRIVER_USED_EXCESSIVE_PTES
  • Stop 0x000000DA SYSTEM_PTE_MISUSE
  • STOP 0x000000EA THREAD_STUCK_IN_DEVICE_DRIVER
  • Stop 0x000000ED UNMOUNTABLE_BOOT_VOLUME
  • Stop 0x000000F2 HARDWARE_INTERRUPT_STORM
  • Stop 0x000000F4 CRITICAL_OBJECT_TERMINATION
  • Stop 0x000000FC ATTEMPTED_EXECUTE_OF_NOEXECUTE_MEMORY
  • STOP 0x000000FE BUGCODE_USB_DRIVER
  • Stop 0xC0000218 UNKNOWN_HARD_ERROR
  • STOP 0xC000021A STATUS_SYSTEM_PROCESS_TERMINATED
  • Stop 0xC0000221 STATUS_IMAGE_CHECKSUM_MISMATCH
  • STOP 0xC0000244 STATUS_AUDIT_FAILED

  

  This thread is purely an informative thread. If you are experiencing a BSOD error please create a new thread ensure you provide information that questions on this thread.

  While many BSOD errors may be troubleshooting-made the same way, there is an amount of many of them and they should be troubleshoot-carried out on their own.

  If you have anything else you want to add or general BSOD issues then you can post them here, but if you ask about anything that requires real troubleshooting it should be in its own thread.

• Blue Pro place 8 screen of death at the launch of the camera

  Has anyone else encountered this problem?

  Whatever the launch via the camera app or via Skype, the tablet will crash always.

  ATTEMPTED_EXECUTE_OF_NOEXECUTE_MEMORY being the error message. every time.

  Not sure if it started after the last update of the BIOs or windows updates.

  This may describe your situation and provide a solution.

  http://Forum.TabletPCReview.com/Dell/63677-camera-fails-load-recent-driver-update-Pro-8-a.html

• Tablet crash when you open the camera app

  I recently received a Dell coming Pro 8 and I'm having some major issues with the camera application and any other application tries to access the camera on the tablet.  When I try to use the camera, I get a blue screen of death, I guess you could say. "Restart your PC on a problem and needs".  The error I'm getting attempted_execute_of_noexecute_memory.  This tablet is brand new and there is barely anything installed on it except photoshop.  I hope you guys can give me help!  Thank you.

  I had the same problem with the same device & resolved as follows;  uninstalled the imaging device driver & chose to delete at the same time the driver in Device Manager and then restarted. camera works now.

• Windows 8 BSOD when getting messages from a message queue that is located on a network computer

  Here's the info I get from WinDbg, I hope someone out there can interpret this for me and or point in the right direction

  Thank you
  Kent
  Microsoft (R) Windows debug 6.2.9200.20512 AMD64 Version

  Copyright (c) Microsoft Corporation. All rights reserved.

  Loading dump file [C:\Windows\MEMORY. DMP]

  The Bitmap core dump file: the single kernel address space is available

  Symbol search path is: srv * c:\cache* http://msdl.microsoft.com/download/symbols

  Executable search path is:

  Windows 8 Kernel Version 9200 MP (8 procs) free x 64

  Product: WinNt, suite: TerminalServer SingleUserTS

  By: 9200.16581.amd64fre.win8_gdr.130410 - 1505

  Computer name:

  Core = 0xfffff802 'e4872000 PsLoadedModuleList = 0xfffff802' e4b3ea20

  The debugging session: 15:52:59.484 Thu June 20, 2013 (UTC - 05:00)

  System Uptime: 0 days 0:01:57.136

  Loading the kernel symbols

  ...............................................................

  ................................................................

  .................................

  Loading user symbols

  PEB is paginated on (Peb.Ldr = 000007f7'62ddb018).  Type ".hh dbgerr001" for more details

  Loading unloaded module list

  ........

  *******************************************************************************

  *                                                                             *

  * Bugcheck analysis *.

  *                                                                             *

  *******************************************************************************

  Use! analyze - v to obtain detailed debugging information.

  Verification of error CF, {7fa328240e0, 7ae000011b0c9025, fffff880172d85e0, 80000005}

  Probably caused by: mqac.sys (mqac! ACCreateQueue + a77)

  Follow-up: MachineOwner

  ---------

  4: kd >
  ! analyze - v
  *******************************************************************************
  *                                                                             *
  * Bugcheck analysis *.
  *                                                                             *
  *******************************************************************************
  ATTEMPTED_EXECUTE_OF_NOEXECUTE_MEMORY (CF)
  An attempt was made to execute non-executable memory.  The guilty driver
  is on the stack trace (and usually the current instruction pointer).
  When possible, the name of the guilty driver (Unicode string) is printed on
  verification error screen and saved in KiBugCheckDriver.
  Arguments:
  Arg1: 000007fa328240e0, virtual address for the execute attempted.
  Arg2: 7ae000011b0c9025, content PTE.
  Arg3: fffff880172d85e0, (reserved)
  Arg4: 0000000080000005, (reserved)
  Debugging information:
  ------------------
  DEFAULT_BUCKET_ID: WIN8_DRIVER_FAULT
  BUGCHECK_STR: 0XFC
  Nom_processus: mqsvc.exe
  CURRENT_IRQL: 0
  TRAP_FRAME: fffff880172d85e0-(.trap 0xfffff880172d85e0)
  NOTE: The frame trap does contain not all registers.
  Some registry values can be set to zero or incorrect.
  Rax = 000007fa327fc950 rbx = 0000000000000000 rcx = 00000058b03dad90
  RDX = 00000058b17aeb68 rsi = 0000000000000000 rdi = 0000000000000000
  RIP = 000007fa328240e0 rsp = fffff880172d8778 rbp = fffff880172d8b80
  R8 = fffffa8011f63940 r9 = 0000000000000521 r10 = fffffa8013129dd0
  R11 = 0000000000000006 r12 = 0000000000000000 r13 = 0000000000000000
  R14 = 0000000000000000 r15 = 0000000000000000
  iopl = 0 nv up ei pl nz na po nc
  000007fa'328240e0?              ???
  Reset the default scope
  LAST_CONTROL_TRANSFER: from fffff802e4a5dfe9 to fffff802e48cc440
  STACK_TEXT:
  "" fffff880 ' 172 8408 fffff802 d ' e4a5dfe9: 00000000 ' 000000 fc 000007fa '328240e0 7ae00001' 1b0c9025 fffff880 ' 172d85e0: nt! KeBugCheckEx
  "fffff880 ' 172 d 8410 fffff802 ' e4984d9c: fffff880'172d85e0 ffffd6fb 'da821cdc fffffa80' 13129dd0 00000000' 00000000: nt! : FNODOBFM: 'string' + 0x344b5
  "fffff880 ' 172 8450 fffff802 d ' e490695d: fffff880 172 d 8500 00000000' c0000016 fffffa80 '1221d5c0 fffffa80' 11f63940: nt! : FNODOBFM: 'string' + 0x3440d
  fffff880 '172d84a0 fffff802' e48c9eee: fffff880 00000000'00000008 00000000'00000000 00000000'00000000 ' 172d85e0: nt! MmAccessFault + 0x3ed
  fffff880 '172d85e0 000007fa' 328240e0: fffff880 '04e21297 fffffa80' 13129da0 00000000 00000000' fffff8a0'03707800: nt! KiPageFault + 0x16e
  "fffff880 ' 172 d 8778 fffff880 ' 04e21297: fffffa80'13129da0 00000000 00000000' fffff8a0 ' 03707800 fffff980' 00000000: 0x000007fa'328240e0
  "fffff880 ' 172 d 8780 fffff880 ' 04e220d7: 00000000'00000000 00000058' 00000000'00000000 00000000'00000000 b17aeb68: mqac! ACCreateQueue + 0xa77
  fffff880 '172d87f0 fffff802' e4ca16c7: fffffa80 '120a3ad0 fffffa80' 12ab8560 00000000'00000521 00000000'00000000: mqac! ACDeviceControl + 0x62b
  "fffff880 ' 172 8890 fffff802 d ' e4cb68a6: 00000000'00000000 00000000'00000080 00000000'00000000 00000000'00000000: nt! IopXxxControlFile + 0x7e5
  fffff880 '172d8a20 fffff802' e48cb453: fffff880'172d8ad8 00000000'00000000 00000000'00000001 00000000'00000000: nt! NtDeviceIoControlFile + 0 x 56
  fffff880 '172d8a90 000007fa' 3ec52c5a: 00000000'00000000 00000000'00000000 00000000'00000000 00000000'00000000: nt
  ! KiSystemServiceCopyEnd + 0x13
  00000058' b17aeb08 00000000'00000000: 00000000'00000000 00000000'00000000 00000000'00000000 00000000'00000000: 0x000007fa'3ec52c5a
  STACK_COMMAND: kb
  FOLLOWUP_IP:
  Mqac! ACCreateQueue + a77
  fffff880'04e21297 85 c 0 test eax, eax
  SYMBOL_STACK_INDEX: 6
  SYMBOL_NAME: mqac
  ! ACCreateQueue + a77
  FOLLOWUP_NAME: MachineOwner
  MODULE_NAME: mqac
  Nom_image: mqac.sys
  DEBUG_FLR_IMAGE_TIMESTAMP: 5010abc2
  BUCKET_ID_FUNC_OFFSET: a77
  FAILURE_BUCKET_ID: 0xFC_mqac! ACCreateQueue
  BUCKET_ID: 0xFC_mqac! ACCreateQueue
  Follow-up: MachineOwner
  ---------

  I contacted Microsoft and this is a known bug in Windows 8, there is that a current fix should be available in August 2013

  Thank you zz and Linney

• My camera 5MP and the Webcam on my Dell stopped working.

  My camera 5MP camera and Webcam on my Dell coming Pro 8 tablet model 5830 has stopped working.  Help, please!

  Original title: Grannie B.

  In addition, it can help to look at the files minidump ATTEMPTED_EXECUTE_OF_NOEXECUTE_MEMORY errors with a debugger.

  Can you zip the minidump in the C:\Windows\Minidump folder files and make available (provide link) via a public folder on OneDrive or similar site?

  Here are a few links on the use of OneDrive (SkyDrive):

  http://Windows.Microsoft.com/en-CA/SkyDrive/add-photos-files-FAQ

  http://Windows.Microsoft.com/en-CA/onedrive/share-file-folder

  If you have problems to compress the minidump files copy the minidump files to another location such as a folder on the desktop

  In addition, you do not necessarily have compress the minidump files, you can download one at a time.

• WIN8 Blue Screen DRIVER_OVERRAN_STACK_BUFFER

  I have a pc of win8. The pc was generally fine until I started playing full-screen games. The blue scree occurs very frequently and some of them are other problems, something like "attempted_execute_of_no_execute_memory". I've updated my graphics card driver to the latest version and this blue screen problem seemed to occur less frequently. But still, I am unable to play games. And sometimes the problem occurs even if I'm just typing, surf the internet, listen to songs etc. Please help :/ Thank you very much.

  DMP files:
  https://onedrive.live.com/?CID=1701A519FBC804B3&ID=1701A519FBC804B3%21282

  Hello

  The attached file of the DMP is to bug checking DRIVER_IRQL_NOT_LESS_OR_EQUAL (d1) .

  This indicates that a kernel-mode driver attempted to access pageable memory with a high IRQL.

  A driver tried to access a pageable (or that is completely invalid) address while the IRQL was too high. This bug check is usually caused by drivers who used a wrong address.

  0: kd > k
  Call child-SP RetAddr site
  fffff803 '34b9b308 fffff803' 35c5d769 nt! KeBugCheckEx
  fffff803 '34b9b310 fffff803' 35c5bfe0 nt! KiBugCheckDispatch + 0 x 69
  fffff803 '34b9b450 fffff880' 024c719f nt! KiPageFault + 0 x 260
  fffff803 '34b9b5e0 fffff880' 0248253d tcpip! IppFragmentPackets + 0x55f
  fffff803 '34b9b740 fffff880' 0248395e tcpip! IppDispatchSendPacketHelper + 0x9d
  fffff803 '34b9b860 fffff880' 02490b4a tcpip! IppPacketizeDatagrams + 0x2ce
  fffff803 '34b9b980 fffff880' 024bbdca tcpip! IppSendDatagramsCommon + 0x6ca
  fffff803 '34b9bb40 fffff880' 0246db45 tcpip! TcpTcbHeaderSend + 0x7b2
  fffff803'34b9bdc0 fffff880'02498764 tcpip! TcpTcbCarefulDatagram + 0xe05
  fffff803'34b9bff0 fffff880'02497580 tcpip! TcpTcbReceive + 0 x 474
  fffff803'34b9c150 fffff880'02498 c 71 tcpip! TcpMatchReceive + 0x1f0
  '34b9c2c0 fffff880' fffff803 tcpip 02496b 57! TcpPreValidatedReceive + 0 x 381
  fffff803 '34b9c3a0 fffff880' 024b8dba tcpip! IpFlcReceivePreValidatedPackets + 0x5e7
  fffff803 '34b9c540 fffff803' 35cb3a06 tcpip! FlReceiveNetBufferListChainCalloutRoutine + 0xda
  fffff803 '34b9c640 fffff803' 35cb6465 nt! KeExpandKernelStackAndCalloutInternal + 0xe6
  fffff803 '34b9c740 fffff880' 024b8eee nt! KeExpandKernelStackAndCalloutEx + 0 x 25
  fffff803 '34b9c780 fffff880' 020bbb06 tcpip! FlReceiveNetBufferListChain + 0xae
  fffff803 '34b9c800 fffff880' 020bb560 ndis! ndisMIndicateNetBufferListsToOpen + 0 x 126
  fffff803 '34b9c8b0 fffff880' 020bb843 ndis! ndisInvokeNextReceiveHandler + 0 x 650
  fffff803'34b9c980 fffff880'056338 d 4 ndis! NdisMIndicateReceiveNetBufferLists + 0xd3
  '34b9ca30 fffffa80' fffff803 of 05c26b00 the e1c63x64 + 0x268d4
  fffff803 '34b9ca38 fffffa80' 08ddf000 0xfffffa80'05c26b00
  fffff803 '34b9ca40 fffffa80' 08d061a0 0xfffffa80'08ddf000
  fffff803 '34b9ca48 fffffa80' 05c26c20 0xfffffa80'08d061a0
  ' fffff803'34b9ca50 fffffa80 ' 00000801 0xfffffa80 ' 05c26c20
  fffff803' 00000000 00000000 34b9ca58 of ' 0xfffffa80'00000801

  DRIVER_OVERRAN_STACK_BUFFER (F7)

  This indicates that a driver has saturated a stack-based buffer.

  A driver invaded a buffer based on the stack (or a local variable) in a way that would have replaced the function's return address and jumped to an arbitrary address when the function returned.

  1: kd > k
  Call child-SP RetAddr site
  fffff880 '0ab8c328 fffff800' 5ee36d66 nt! KeBugCheckEx
  fffff880 '0ab8c330 fffff800' 5ee36deb hal! _report_gsfailure + 0 x 26
  fffff880 '0ab8c370 fffff800' 5ef3253d hal! _GSHandlerCheck + 0x13
  fffff880 '0ab8c3a0 fffff800' 5ef5a404 nt! RtlpExecuteHandlerForException + 0xd
  fffff880 '0ab8c3d0 fffff800' 5ef34296 nt! RtlDispatchException + 0 x 458
  fffff880 '0ab8cae0 fffff800' 5eec5842 nt! KiDispatchException + 0 x 455
  fffff880 '0ab8d1a0 fffff800' 5eec359f nt! KiExceptionDispatch + 0xc2
  fffff880 '0ab8d380 fffff880' 0259923f nt! KiInvalidOpcodeFault + 0x11f
  fffff880'0ab8d518 00000000'00000011 tcpip! IppFragmentPackets + 0x5ff
  fffff880 '0ab8d678 fffff800' 5ee262a1 0x11
  fffff880'0ab8d680 00000000 00000000' hal! HalpApicRequestInterrupt + 0x1e5

  Tcpip.sys is mentioned in the battery and put it back into KiInvalidOpcodeFault.

  ATTEMPTED_EXECUTE_OF_NOEXECUTE_MEMORY (CF)

  This indicates that an attempt was made to execute non-executable memory.

  ----------------------

  Remove and replace integrated Kaspersky Windows Defender in Windows 8 for temporary troubleshooting purposes as it is originally NETBIOS conflicts:

  Kaspersky - remove http://support.Kaspersky.com/common/service.aspx?El=1464

  Windows Defender (how put on after the withdrawal)- http://www.eightforums.com/tutorials/21962-Windows-Defender-turn-off-Windows-8-a.html

  Kind regards

  Patrick

• need help:(windows 8 plusieurs bsod se bloque c'est à dire.) memory management, irql not..., kernel mode...

  https://drive.Google.com/file/d/0B0ATyEKasqZmbkpPNG1WSXd0STA/edit?USP=sharing

  theres a link to all my minidumps.

  I don't know what to do, I have many BSODs in a row and then many times where I can use the computer for hours. It seems completely random. That this has something to do with the closures of power?

  Thank you!

  BUGCODE_USB_DRIVER (FE)

  This indicates that an error occurred in a bus universal series (USB) driver.

  3: kd > k
  Call child-SP RetAddr site
  fffff880'014f81e8 fffff880'0464 484 nt c! KeBugCheckEx
  fffff880 '014f81f0 fffff880' 04615ce2 USBPORT! USBPORT_ProcessURB + 0 x 36644
  fffff880 '014f8310 fffff880' 04615afd USBPORT! USBPORT_PdoInternalDeviceControlIrp + 0 x 52
  fffff880 '014f8360 fffff880' 047536f1 USBPORT! USBPORT_Dispatch + 0x17d
  fffff880 '014f83c0 fffff880' 047533ca usbhub! 0x1f1 + UsbhPdoInternalDeviceControl
  fffff880 '014f8430 fffff880' 0104f0a7 usbhub! UsbhGenDispatch + 0x9a
  fffff880 '014f8460 fffff880' 058f63b6 Wdf01000! imp_WdfRequestSend + 0x4b3
  fffff880'014f84f0 fffffa80'05468700 netr28ux + 0x9a3b6
  fffff880 '014f84f8 fffffa80' 0559db30 0xfffffa80'05468700
  fffff880 '014f8500 fffffa80' 055a 1020 0xfffffa80'0559db30
  fffff880 ' 014f8508 00000000 00000000 of ' 0xfffffa80 ' 055a 1020

  netr28ux.sys is the series of Ralink RT2870 USB802.11n driver wireless card (you can have another manufacturer).

  PAGE_FAULT_IN_NONPAGED_AREA (50)

  This indicates that invalid system memory was referenced.

  Bug control 0 x 50 usually occurs after the installation of a faulty hardware or installation failure of material (usually associated with defective RAM, either main memory, L2 RAM or RAM video cache).

  Another common cause is a defective system service installation.

  Antivirus software can also trigger this error, as can a corrupted NTFS volume.

  Bugcheck 50, {fffff12014494a90, 1, fffff803968f06f5, 2}

  Address fffff12014494a90 wrote in the statement to the address fffff803968f06f5.

  3: kd > r cr2
  Last set context:
  CR2 = fffff12014494a90

  The address of 1 parameter was stored in cr2 before calling the page fault handler.

  3: kd >! fffff12014494a90 pte
  GO fffff12014494a90
  PXE to the EPP of FFFFF6FB7DBEDF10 at FFFFF6FB7DBE2400 at FFFFF6FB7C480510 at FFFFF6F8900A24A0 PTE POE
  contains 0000000000000000
  not valid

  3: kd > dd fffff12014494a90
  fffff120'14494 has 90? ???????? ???????? ????????
  fffff120'14494aa0? ???????? ???????? ????????
  fffff120'14494ab0? ???????? ???????? ????????
  fffff120'14494ac0? ???????? ???????? ????????
  fffff120'14494ad0? ???????? ???????? ????????
  fffff120'14494ae0? ???????? ???????? ????????
  fffff120'14494af0? ???????? ???????? ????????
  fffff120'14494 b 00? ???????? ???????? ????????

  Of the above, we can see that the address fffff12014494a90 is indeed invalid. That being said, why fffff12014494a90 try to write in fffff803968f06f5?

  3: kd > kv
  Child-SP RetAddr: Args to child: call Site
  fffff880 '09db76f8 fffff803' a 969385, 0: 00000000'00000050 fffff120 '14494a 90 00000000 00000001' fffff880' 09db78e0: nt! KeBugCheckEx
  "fffff880 '09db7700 fffff803' 968b1acb: 00000000 ' 00000001 fffff120" 14494a 90 fffffa80 '07a14b00 fffff803' 968c0db0: nt! : FNODOBFM: 'string' + 0x33e2a
  "" fffff880 '09db77a0 fffff803' 96874eee: 00000000 ' 00000001 fa80041a ' b89004c2 fffff680 ' 36587700 fffff880 ' 09db78e0: nt! MmAccessFault + 0x55b
  fffff880 '09db78e0 fffff803' 968f06f5: fffff803 ' 9684f363 fffffa80 '041ab868 06cafaf0' 06cafaf0 fffffa80 ' 07a 05010: nt! KiPageFault + 0x16e (TrapFrame @ fffff880'09db78e0)
  fffff880 '09db7a78 fffff803' 9684f363: fffffa80 ' 041ab868 06cafaf0 '06cafaf0 fffffa80' 07a 05010 fa80041a ' b89004c2: nt! MiResolveDemandZeroFault + 0x5
  "fffff880 '09db7a80 fffff803' 968b1e1c: 00000000 ' fffffa80 00000000 '07a14b00 fffff880' 09db7b80 fffffa80 ' 0615b 568: nt! MiProtoFault + 0x1a3
  fffff880 '09db7b00 fffff803' 96874eee: 00000000'00000000 00000000' 550280cb 0000006c 'af0ef501 fffff880' 09db7c40: nt! MmAccessFault + 0x8ac
  fffff880 '09db7c40 000007fd' c1ee0a00: 00000000'00000000 00000000'00000000 00000000'00000000 00000000'00000000: nt! KiPageFault + 0x16e (TrapFrame @ fffff880'09db7c40)
  0000006c 'af0ef530 00000000' 00000000: 00000000'00000000 00000000'00000000 00000000'00000000 00000000'00000000: 0x000007fd'c1ee0a00

  3: kd > .trap fffff880'09db78e0
  NOTE: The frame trap does contain not all registers.
  Some registry values can be set to zero or incorrect.
  Rax = 0000000000000002 rbx = 0000000000000000 rcx = 0000000000000000
  RDX = fffff8a00a6dd000 rsi = 0000000000000000 rdi = 0000000000000000
  RIP = fffff803968f06f5 rsp = fffff88009db7a78 rbp = fffffa8007a14b00
  R8 = 0000000000000000 r10 = fffff8a00a6dd000 fffff6fc500536e8 = r9
  R11 = 0000000006cafaf0 r12 = 0000000000000000 r13 = 0000000000000000
  R14 = 0000000000000000 r15 = 0000000000000000
  iopl = 0 nv up ei pl zr po nc
  nt! MiResolveDemandZeroFault + 0 x 5:
  fffff803'968f06f5 4 c 89442418 mov qword ptr [rsp + 18 h], r8 ss:fffff880'09db7a90= fffffa8007a05010

  Address to education, we failed on, fffff803'968f06f5 deferenced RER + 18 h where rsp + 18 h is fffff88009db7a78. This would result in a write from memory at the address fffff880'09db7a90.

  3: kd >! PTE fffff880'09db7a90
  GO fffff88009db7a90
  PXE to the EPP of FFFFF6FB7DBEDF88 at FFFFF6FB7DBF1000 at FFFFF6FB7E200270 at FFFFF6FC4004EDB8 PTE POE
  contains 0000000000624863 contains 0000000000623863 contains 0000000038208863 contains 800000004123C 963
  GetUlongFromAddress: cannot read fffff80396b750e4
  NFP 624 - DA - KWEV NFP 623 - DA - KWEV NFP 38208 - DA - KWEV NPF 4123c - G-DA - KWEV

  3: kd > dd fffff880'09db7a90
  fffff880'09db7a90 fffffa80 b89004c2 fa80041a a 07, 05010
  fffff880' 96b6e700 00000000 00000011 fffff803 09db7aa0
  fffff880'09db7ab0 a927a274 ffff2ad2 c0000016 00000000
  fffff880'09db7ac0 fffff880 afaf0000 0000006c 09db7c40
  fffff880'09db7ad0 fffff880 afaf0000 0000006c 09db7c40
  fffff880'09db7ae0 00000000 00000000 fffff8a0 0a6dd000
  fffff880'09db7af0 00000000 968b1e1c fffff803 c0000016
  fffff880'09db7b00 00000000 00000000 fffffa80 07a14b00

  Right, so code wanted to write to fffff880'09db7a90 which, as we can see above is a valid address. The 1st parameter and cr2 however note that we have not written to the address fffff12014494a90.

  nt! MiResolveDemandZeroFault said the material to write in fffff880'09db7a90 (who once again of incidentally is a completely valid address), and the material came back and said 'I can't write fffff12014494a90.

  However, this seems very material right here - nom_processus: avgrsa.exe is an associated AVG process at the time of the accident.

  MEMORY_MANAGEMENT (1A)

  This indicates that an error occurred serious memory management.

  Error checking 1 a, {5003, fffff70001080000, 620, 62200000 c 50}

  -1 setting of the bug check is 5003 which lists free work is corrupt. It is usually a hardware error, however, a device driver causing corruption is possible as well at times.

  ATTEMPTED_EXECUTE_OF_NOEXECUTE_MEMORY (CF)

  This indicates that an attempt was made to execute non-executable memory.

  KMODE_EXCEPTION_NOT_HANDLED (1e)

  This indicates that a kernel-mode program generated an exception which did not catch the error handler.

  3: kd > k
  Call child-SP RetAddr site
  fffff880 '02af70b8 fffff801' da400c56 nt! KeBugCheckEx
  fffff880 '02af70c0 fffff801' da34c4bd nt! KiFatalExceptionHandler + 0 x 22
  fffff880 '02af7100 fffff801' da3743d4 nt! RtlpExecuteHandlerForException + 0xd
  fffff880 '02af7130 fffff801' da34e216 nt! RtlDispatchException + 0 x 458
  fffff880 '02af7840 fffff801' da2df842 nt! KiDispatchException + 0 x 455
  fffff880 '02af7f00 fffff801' da2dd59f nt! KiExceptionDispatch + 0xc2
  fffff880 '02af80e0 fffff801' da461287 nt! KiInvalidOpcodeFault + 0x11f
  fffff880 '02af8270 fffff801' da31cfe4 nt! : FNODOBFM: 'chain' + 0 x 16175
  fffff880 '02af8360 fffff880' 052d50f4 nt! KeSetEvent + 0x1c3
  fffff880 '02af83d0 00000000 fffffa80' netr7364 + 0x320f4
  fffff880'02af83d8 fffffa80 '0xfffffa80 00000000' 00000000
  fffff880 '02af83e0 fffffa80' 06de3152 0xfffffa80'00000000
  "fffff880'02af83e8 fffffa80 ' 07039808 0xfffffa80 ' 06de3152
  fffff880 '02af83f0 fffffa80' 06de3018 0xfffffa80'07039808
  fffff880 '02af83f8 ' 00000003 00000004 0xfffffa80' 06de3018
  "fffff880 '02af8400 00000000' 00000026 0 x 00000003 00000004"
  fffff880 '02af8408 fffffa80' 06e08580 0 x 26
  fffff880 '02af8410 fffffa80' 0688a 038 0xfffffa80'06e08580
  fffff880 '02af8418 fffffa80' 06dade40 0xfffffa80'0688 has 038
  fffff880 '02af8420 fffffa80' 06df6d10 0xfffffa80'06dade40
  fffff880 '02af8428 fffff880' 052aae7a 0xfffffa80'06df6d10
  fffff880 '02af8430 fffffa80' 06e00000 netr7364 + 0x7e7a
  fffff880 '02af8438 fffffa80' 0688 to 000 0xfffffa80'06e00000
  "fffff880'02af8440 fffffa80 ' 00000066 0xfffffa80 ' a 0688, 000
  fffff880 '02af8448 fffffa80' 0000013a 0xfffffa80'00000066
  fffff880 '02af8450 fffffa80' 06de3018 0xfffffa80'0000013 has
  fffff880 '02af8458 00000000' 0000000 0xfffffa80 a' 06de3018
  fffff880 '02af8460 fffffa80' 0688a 000 0xa
  fffff880 '02af8468 fffff880' 03ce647c 0xfffffa80'0688 has 000
  fffff880 '02af8470 00000002' 00000122 usbehci! EHCI_SubmitTransfer + 0 x 88
  fffff880 '02af84b0 0000057f' f8f2a800 0x00000002 "00000122
  fffff880 '02af84b8 fffff880' 010386be 0x0000057f'f8f2a800
  fffff880'02af84c0 fffff880'053088 Wdf01000 5 c! imp_WdfRequestReuse + 0x19a
  fffff880 '02af8530 fffffa80' 070d57f0 netr7364 + 0x658c5
  fffff880 '02af8538 ffff0000' 079b03f3 0xfffffa80'070d57f0
  fffff880 ' 02af8540 00000000 00000000 of ' 0xffff0000 ' 079b03f3

  netr7364.sys again.

  FAILURE_BUCKET_ID: 0x1E_c000001d_BAD_IP_netr7364 + 320f4

  It looks like a bad instruction pointer.

  -------------------------

  1. remove and replace AVG with built-in Windows Defender from Windows 8 for temporary troubleshooting purposes because it can cause conflicts NETBIOS:

  -AVG removal http://www.Avg.com/us-en/utilities

  Windows Defender (how put on after the withdrawal)- http://www.eightforums.com/tutorials/21962-Windows-Defender-turn-off-Windows-8-a.html

  2 if the above fails, please run Memtest for no. LESS than ~ 8 going on (several hours):

  Memtest86 +:

  Download Memtest86 + here:

  http://www.memtest.org/

  Which should I download?

  You can either download the ISO pre-built you want to burn to a CD and then boot from the CD, or you can download the automatic installer of the USB. What this will do is format your USB drive, make a boot device and then install the necessary files. Both do the same job, it's just you that you choose, or you have available (be it CD or USB).

  Note that some older generation motherboards do not support USB boot, your only option is CD (or floppy if you really wanted to).

  How Memtest works:

  Memtest86 writes a series of test patterns for most of the addresses of memory, reads the written data and compares it to find errors.

  The default pass is 9 different tests, varying in the modes of access and test data. A tenth test, bland, is selectable in the menu. He wrote all the memory with zeros, then sleeps 90 minutes before checking to see if the bits have changed (perhaps because of refresh problems). This is repeated with all those for a total time of 3 hours by pass.

  Many chipsets can report RAM speed and timings by SPD (Serial Presence Detect) or EPP (Enhanced Performance Profiles), and some even support changing the expected memory speed. If the expected memory speed is overclockee, Memtest86 can test that memory is free of error with these faster settings.

  Some hardware is able to report the status of the "PAT" (PAT: active or PAT: disabled). This is a reference to the Intel performance acceleration technology; There may be the BIOS settings that affect this aspect of memory synchronization.

  This information, if it is available for the program, can be displayed via a menu option.

  Other questions, they can most likely be answered by reading this excellent guide here:

  http://Forum.canardpc.com/threads/28864-FAQ-please-read-before-posting

  Kind regards

  Patrick

• Acer computer brand new with problem BSOD in Windows 8

  Hello

  I bought this computer Acer Predator brand new and I'm getting BSOD related reboots.

  Could you please check my minidump file and give me advice?

  Or I'll take the computer as the hardware and the software is under warranty.

  Concerning

  https://onedrive.live.com/redir?RESID=734A709756E8E767%21140

  Yasin

  Hi John,

  We have several audits of bug:

  ATTEMPTED_EXECUTE_OF_NOEXECUTE_MEMORY (CF)

  This indicates that an attempt was made to execute non-executable memory.

  KMODE_EXCEPTION_NOT_HANDLED (1e)

  This indicates that a kernel-mode program generated an exception which did not catch the error handler.

  Verification of error 1E, {ffffffffc000001d, fffff801af0bb63e, fffff801af363800, 2}

  0: kd > fffff801af0bb63e ln
  (fffff801'af0bb600)   nt! KeReleaseInStackQueuedSpinLock + 0x3e |  (fffff801'af0bb670) nt! KeResetEvent

  ^^ The exception is produced in nt! KeReleaseInStackQueuedSpinLock. This routine restores the original IRQL that the operating system saved at the beginning of the call to KeAcquireInStackQueuedSpinLock .

  KeAcquireInStackQueuedSpinLock increases the level of IRQL at DISPATCH_LEVEL level during the acquisition of the spin lock.

  If we check the IRQL at time of accident:

  0: kd >! IRQL
  Debugger saved IRQL for processor 0 x 0-2 (DISPATCH_LEVEL)

  ^^ Very well, we're right on the money in the measure of the level IRQL go... but why an exception occurred here on this pretty normal routine? My guess is we had a DPC/lock and the system deadlocked. It could be both material.

  TIMER_OR_DPC_INVALID (c7)

  This is issued when a timer kernel or deferred procedure call (DPC) is located somewhere in memory where it is not allowed.

  This problem is usually caused by a driver, not to cancel a timer or a DPC before freeing the memory where he resides.

  ---------------------

  1. make sure you have the latest video card drivers. If you are already on the latest graphics card drivers, uninstall and install a version or a few versions behind the last to make sure this isn't a last number one driver. If you have already experienced with the driver of the card later and earlier versions, please try the driver beta for your card.

  2. remove and replace McAfee integrated Windows Defender in Windows 8 for temporary troubleshooting purposes as it is probably cause conflicts:

  Removal of McAfee- http://service.McAfee.com/FAQDocument.aspx?ID=TS101331

  Windows Defender (how put on after the withdrawal)- http://www.eightforums.com/tutorials/21962-Windows-Defender-turn-off-Windows-8-a.html

  3 if the two above fail, return the laptop ASAP for a new replacement brand as then it is a hardware problem. No brand new laptop should be planted in all circumstances.

  Kind regards

  Patrick

• BSOD after vMotion to replacement 5.1 ESXi hosts

  We replaced a set of HP DL380 G7 (Intel X 5660, 144 GB of ram) running ESXi 5.1 build 1312873 for a set of Cisco B200 M3 (Intel E5-2697v2, 256 GB ram) running ESXi 5.1 build 1900470.  They are into different groups for the virtual machine have been powered down, vMotioned (host and data store level) to the new cluster, under voltage and update the VMware Tools.  Since then, a number of the virtual machine have projected blue.  All cases throw the error code "ATTEMPTED_EXECUTE_OF_NOEXECUTE_MEMORY" 0x000000fc.  Two of the referenced blue screen ntoskrnl.exe and yesterday referenced win32k.sys.  There is no problem with these virtual machines before you move, and right now I'm trying to troubleshoot the cause.  I looked at the use of the resources of occurrence of yesterday as well to a host and VM level, and nothing stands out.  Syslog host looks ok too.  Someone at - it ideas?

  There is a known issue with the v2 CPUs. Please check with Cisco if they already provide a BIOS upgrade for this problem. For more details, please visit http://kb.vmware.com/kb/2073791

  André