PFN_LIST_CORRUPT (4e) BSOD

Question

Hello my windows 11 desktop has been crashing regularly with this crash message.  I have scanned my memory with Windows memory diagnostic but nothing was reported by it.  I updated my Graphics card drivers to the newest version as well.   I am hoping it is not power related as I am in a small apartment and my washer/drier and television are all within 5 feet of this computer

PFN_LIST_CORRUPT (4e)
Typically caused by drivers passing bad memory descriptor lists (ie: calling
MmUnlockPages twice with the same list, etc).  If a kernel debugger is
available get the stack trace.
Arguments:
Arg1: 0000000000000006, The hardware PTE and/or the prototype PTE PFN data structures have
	been corrupted.
Arg2: 000000000104f356, The page frame number
Arg3: ffffd485c7a44480, The prototype PTE
Arg4: 0000001017e16880, The prototype PTE contents

Debugging Details:
------------------


KEY_VALUES_STRING: 1

    Key  : Analysis.CPU.mSec
    Value: 1968

    Key  : Analysis.Elapsed.mSec
    Value: 84937

    Key  : Analysis.IO.Other.Mb
    Value: 0

    Key  : Analysis.IO.Read.Mb
    Value: 1

    Key  : Analysis.IO.Write.Mb
    Value: 1

    Key  : Analysis.Init.CPU.mSec
    Value: 1843

    Key  : Analysis.Init.Elapsed.mSec
    Value: 706459

    Key  : Analysis.Memory.CommitPeak.Mb
    Value: 112

    Key  : Analysis.Version.DbgEng
    Value: 10.0.27920.1001

    Key  : Analysis.Version.Description
    Value: 10.2506.23.01 amd64fre

    Key  : Analysis.Version.Ext
    Value: 1.2506.23.1

    Key  : Bugcheck.Code.LegacyAPI
    Value: 0x4e

    Key  : Bugcheck.Code.TargetModel
    Value: 0x4e

    Key  : Dump.Attributes.AsUlong
    Value: 0x31808

    Key  : Dump.Attributes.DiagDataWrittenToHeader
    Value: 1

    Key  : Dump.Attributes.ErrorCode
    Value: 0x0

    Key  : Dump.Attributes.KernelGeneratedTriageDump
    Value: 1

    Key  : Dump.Attributes.LastLine
    Value: Dump completed successfully.

    Key  : Dump.Attributes.ProgressPercentage
    Value: 0

    Key  : Failure.Bucket
    Value: 0x4E_6_ANALYSIS_INCONCLUSIVE!unknown_function

    Key  : Failure.Hash
    Value: {432fba7d-0888-c958-e416-241c8778e350}

    Key  : Hypervisor.Enlightenments.ValueHex
    Value: 0x7497cf94

    Key  : Hypervisor.Flags.AnyHypervisorPresent
    Value: 1

    Key  : Hypervisor.Flags.ApicEnlightened
    Value: 1

    Key  : Hypervisor.Flags.ApicVirtualizationAvailable
    Value: 0

    Key  : Hypervisor.Flags.AsyncMemoryHint
    Value: 0

    Key  : Hypervisor.Flags.CoreSchedulerRequested
    Value: 0

    Key  : Hypervisor.Flags.CpuManager
    Value: 1

    Key  : Hypervisor.Flags.DeprecateAutoEoi
    Value: 0

    Key  : Hypervisor.Flags.DynamicCpuDisabled
    Value: 1

    Key  : Hypervisor.Flags.Epf
    Value: 0

    Key  : Hypervisor.Flags.ExtendedProcessorMasks
    Value: 1

    Key  : Hypervisor.Flags.HardwareMbecAvailable
    Value: 1

    Key  : Hypervisor.Flags.MaxBankNumber
    Value: 0

    Key  : Hypervisor.Flags.MemoryZeroingControl
    Value: 0

    Key  : Hypervisor.Flags.NoExtendedRangeFlush
    Value: 0

    Key  : Hypervisor.Flags.NoNonArchCoreSharing
    Value: 1

    Key  : Hypervisor.Flags.Phase0InitDone
    Value: 1

    Key  : Hypervisor.Flags.PowerSchedulerQos
    Value: 0

    Key  : Hypervisor.Flags.RootScheduler
    Value: 0

    Key  : Hypervisor.Flags.SynicAvailable
    Value: 1

    Key  : Hypervisor.Flags.UseQpcBias
    Value: 0

    Key  : Hypervisor.Flags.Value
    Value: 38408431

    Key  : Hypervisor.Flags.ValueHex
    Value: 0x24a10ef

    Key  : Hypervisor.Flags.VpAssistPage
    Value: 1

    Key  : Hypervisor.Flags.VsmAvailable
    Value: 1

    Key  : Hypervisor.RootFlags.AccessStats
    Value: 1

    Key  : Hypervisor.RootFlags.CrashdumpEnlightened
    Value: 1

    Key  : Hypervisor.RootFlags.CreateVirtualProcessor
    Value: 1

    Key  : Hypervisor.RootFlags.DisableHyperthreading
    Value: 0

    Key  : Hypervisor.RootFlags.HostTimelineSync
    Value: 1

    Key  : Hypervisor.RootFlags.HypervisorDebuggingEnabled
    Value: 0

    Key  : Hypervisor.RootFlags.IsHyperV
    Value: 1

    Key  : Hypervisor.RootFlags.LivedumpEnlightened
    Value: 1

    Key  : Hypervisor.RootFlags.MapDeviceInterrupt
    Value: 1

    Key  : Hypervisor.RootFlags.MceEnlightened
    Value: 1

    Key  : Hypervisor.RootFlags.Nested
    Value: 0

    Key  : Hypervisor.RootFlags.StartLogicalProcessor
    Value: 1

    Key  : Hypervisor.RootFlags.Value
    Value: 1015

    Key  : Hypervisor.RootFlags.ValueHex
    Value: 0x3f7


BUGCHECK_CODE:  4e

BUGCHECK_P1: 6

BUGCHECK_P2: 104f356

BUGCHECK_P3: ffffd485c7a44480

BUGCHECK_P4: 1017e16880

FILE_IN_CAB:  100125-19187-01.dmp

TAG_NOT_DEFINED_202b:  *** Unknown TAG in analysis list 202b


DUMP_FILE_ATTRIBUTES: 0x31808
  Kernel Generated Triage Dump

FAULTING_THREAD:  ffff938d796f4080

CUSTOMER_CRASH_COUNT:  1

PROCESS_NAME:  explorer.exe

STACK_TEXT:  
fffffb06`50a5a258 00000000`00000000     : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KeBugCheckEx


SYMBOL_NAME:  ANALYSIS_INCONCLUSIVE

MODULE_NAME: Unknown_Module

IMAGE_NAME:  Unknown_Image

STACK_COMMAND: .cxr; .ecxr ; kb

FAILURE_BUCKET_ID:  0x4E_6_ANALYSIS_INCONCLUSIVE!unknown_function

OSPLATFORM_TYPE:  x64

OSNAME:  Windows 10

FAILURE_ID_HASH:  {432fba7d-0888-c958-e416-241c8778e350}

Followup:     MachineOwner
---------

.

Answer 1

Hi, I'm Bernard, a fellow Windows user. I'm happy to help!

I understand the issue you have. There is nothing to worry about, I am here to assist. Upon checking and analyzing the DMP logs you have, it is only displaying a general error on the PC. In addition, can you share and upload all the Minidump files and System logs of the PC so I can further examine the root cause of the issue?

For Minidump files:

Press Windows key + E (To open File Explorer)

 

Click "This PC" > then follow the file path:

 

C:\Windows\Minidump

 

Copy the Minidump files and save them to another location, like the Desktop or Documents.

 

Then please upload it to Cloud storage like OneDrive or any cloud storage you are using, and please share the shareable link here.

To upload and share the link using OneDrive:

Go to this link: https://onedrive.live.com/, then upload the file

Then provide the shareable link by following the steps from this link: https://support.microsoft.com/en-us/office/share-onedrive-files-and-folders-9fcc2f7d-de0c-4cec-93b0-a82024800c07

 

For System logs:

To do this, kindly follow the steps from this link:

https://www.yourwindowsguide.com/2017/12/how-to-share-event-logs-in-case-of/#.ZFfoIRFByUk

Note: This is a non-Microsoft website. The page appears to be providing accurate, safe information. Watch out for ads on the site that may advertise products frequently classified as a PUP (Potentially Unwanted Products). Thoroughly research any product advertised on the site before you decide to download and install it.

Then please upload it by following the steps from the link.

Answer 2

Hi, thank you for patiently waiting. After checking and analyzing the event logs and DMP files you have, it is only displaying a general error on the PC. Moreover, there are multiple mbamchameleon errors on the PC. This is a system file associated with Malwarebytes Chameleon. In this case, I highly suggest completely uninstalling Malwarebytes, then checking the PC again, or you can try to reinstall Malwarebytes.

 

To uninstall:

 

Press the Windows key + R, then type in:

 

appwiz.cpl

 

Then hit OK

 

Look for Malwarebytes, then right-click> select Uninstall and follow the prompts.

If the issue persists, that might not be the cause of the main issue. In that case, kindly follow the steps below to eliminate software-related issues on the PC:

Method 1. Do a clean boot:

A “clean boot” starts Windows with a minimal set of drivers and startup programs, so that you can determine whether a background program is interfering with your game or program.

• In the search box on the taskbar, type msconfig and select System Configuration from the results.
• On the Services tab of System Configuration, select Hide all Microsoft services, and then select Disable all.
• On the Startup tab of System Configuration, select Open Task Manager.
• Under Startup in Task Manager, for each startup item, select the item and then select Disable.
• Close Task Manager.
• On the Startup tab of System Configuration, select OK. When you restart the computer, it's in a clean boot environment.

Troubleshooting reference: https://support.microsoft.com/en-us/help/929135/how-to-perform-a-clean-boot-in-windows

Method 2. Run memory diagnostic tool: The memory diagnostic tool is a RAM test to check if there are any RAM issues.

• Press Windows key + R, then type in mdsched.exe hit OK, then restart the device.

If none will work from the above solutions work, I suggest doing an in-place upgrade, wherein it will upgrade the device to the latest version and repair all issues without deleting any files.

 

Kindly follow the steps from this link:

https://learn.microsoft.com/en-us/answers/questions/4252110/how-to-run-in-place-upgrade-in-windows-11

Note: If the issue persists, I suggest contacting a local technician to physically check the device for any hardware-related issues.

Answer 3

Hi, thank you for that information. As per checking the new DMP files, there is an error nllArPot.sys, which is a file from Norton. Do you have Norton Anti-Virus installed on your PC? If yes, I recommend removing that as well as multiple anti-virus software will have a conflict on your device.

For Malwarebytes, the only step is to remove it from the control panel, since it is not present. Kindly try to remove the Norton anti-virus:

Kindly refer to the link below:

https://support.norton.com/sp/en/us/home/current/solutions/v20240301142500636

Note: This is a non-Microsoft website. The page appears to be providing accurate, safe information. Watch out for ads on the site that may advertise products frequently classified as a PUP (Potentially Unwanted Products). Thoroughly research any product advertised on the site before you decide to download and install it.

Additional note: If the issue persists, kindly follow method 2 and the last method I provided above.