Jump to content

BSOD when installing


Recommended Posts

When instaling NOD32 v5 i recieve BSOD: PAGE_FAULT_IN_NONPAGED_AREA (50).

Problems only appear on 3 same model of laptops. 
Laptops are fully updated and I also tried with clean installation of OS.

Laptop info:

HP - ProBook 450 G8, i5-1135G7 2,4GHz, DDR4 8GB, Win 10 PRO

Install product: 
ESET Endpoint Antivirus v5


*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *

Invalid system memory was referenced.  This cannot be protected by try-except.
Typically the address is just plain bad or it is pointing at freed memory.
Arg1: ffff9081267a7730, memory referenced.
Arg2: 0000000000000011, value 0 = read operation, 1 = write operation.
Arg3: ffff9081267a7730, If non-zero, the instruction address which referenced the bad memory
Arg4: 0000000000000002, (reserved)

Debugging Details:


    Key  : AV.PTE
    Value: Valid

    Key  : AV.Type
    Value: Execute

    Key  : Analysis.CPU.mSec
    Value: 5812

    Key  : Analysis.DebugAnalysisManager
    Value: Create

    Key  : Analysis.Elapsed.mSec
    Value: 7883

    Key  : Analysis.Init.CPU.mSec
    Value: 1187

    Key  : Analysis.Init.Elapsed.mSec
    Value: 42149

    Key  : Analysis.Memory.CommitPeak.Mb
    Value: 84

    Key  : WER.OS.Branch
    Value: vb_release

    Key  : WER.OS.Timestamp
    Value: 2019-12-06T14:06:00Z

    Key  : WER.OS.Version
    Value: 10.0.19041.1

FILE_IN_CAB:  111921-13484-01.dmp

TAG_NOT_DEFINED_202b:  *** Unknown TAG in analysis list 202b


BUGCHECK_P1: ffff9081267a7730


BUGCHECK_P3: ffff9081267a7730


WRITE_ADDRESS: fffff8013aafb390: Unable to get MiVisibleState
Unable to get NonPagedPoolStart
Unable to get NonPagedPoolEnd
Unable to get PagedPoolStart
Unable to get PagedPoolEnd
unable to get nt!MmSpecialPagesInUse


BLACKBOXBSD: 1 (!blackboxbsd)

BLACKBOXNTFS: 1 (!blackboxntfs)

BLACKBOXPNP: 1 (!blackboxpnp)



TRAP_FRAME:  ffffef862cff6c80 -- (.trap 0xffffef862cff6c80)
NOTE: The trap frame does not contain all registers.
Some register values may be zeroed or incorrect.
rax=ffff9081267a7730 rbx=0000000000000000 rcx=0000000000000000
rdx=ffff90812d247e68 rsi=0000000000000000 rdi=0000000000000000
rip=ffff9081267a7730 rsp=ffffef862cff6e18 rbp=00000000000001d0
 r8=0000000000000000  r9=0000000000000000 r10=0000000000000000
r11=ffff9081221c2040 r12=0000000000000000 r13=0000000000000000
r14=0000000000000000 r15=0000000000000000
iopl=0         nv up ei pl zr na po nc
ffff9081`267a7730 48895c2408      mov     qword ptr [rsp+8],rbx ss:0018:ffffef86`2cff6e20=ffff90812d247de0
Resetting default scope

ffffef86`2cff69d8 fffff801`3a24a56f     : 00000000`00000050 ffff9081`267a7730 00000000`00000011 ffffef86`2cff6c80 : nt!KeBugCheckEx
ffffef86`2cff69e0 fffff801`3a09f390     : ffff9081`2e3a22c8 00000000`00000011 ffffef86`2cff6d00 00000000`00000000 : nt!MiSystemFault+0x18d1bf
ffffef86`2cff6ae0 fffff801`3a20545e     : 000060c7`07dc041e 00000001`00000006 00000000`00000000 00000000`4c4c554e : nt!MmAccessFault+0x400
ffffef86`2cff6c80 ffff9081`267a7730     : fffff801`568a741d ffff9081`2d247de0 ffff9081`2d0491bc ffff9081`2d247db0 : nt!KiPageFault+0x35e
ffffef86`2cff6e18 fffff801`568a741d     : ffff9081`2d247de0 ffff9081`2d0491bc ffff9081`2d247db0 00000000`00000023 : 0xffff9081`267a7730
ffffef86`2cff6e20 ffff9081`2d247de0     : ffff9081`2d0491bc ffff9081`2d247db0 00000000`00000023 fffff801`568a935c : ehdrv+0x1741d
ffffef86`2cff6e28 ffff9081`2d0491bc     : ffff9081`2d247db0 00000000`00000023 fffff801`568a935c 00000000`00000200 : 0xffff9081`2d247de0
ffffef86`2cff6e30 ffff9081`2d247db0     : 00000000`00000023 fffff801`568a935c 00000000`00000200 00000000`00000000 : 0xffff9081`2d0491bc
ffffef86`2cff6e38 00000000`00000023     : fffff801`568a935c 00000000`00000200 00000000`00000000 00000000`00000000 : 0xffff9081`2d247db0
ffffef86`2cff6e40 fffff801`568a935c     : 00000000`00000200 00000000`00000000 00000000`00000000 0050005c`003a0043 : 0x23
ffffef86`2cff6e48 00000000`00000200     : 00000000`00000000 00000000`00000000 0050005c`003a0043 00720067`006f0072 : ehdrv+0x1935c
ffffef86`2cff6e50 00000000`00000000     : 00000000`00000000 0050005c`003a0043 00720067`006f0072 00460020`006d0061 : 0x200

SYMBOL_NAME:  ehdrv+1741d


IMAGE_NAME:  ehdrv.sys

STACK_COMMAND:  .cxr; .ecxr ; kb


FAILURE_BUCKET_ID:  AV_X_(null)_ehdrv!unknown_function

OS_VERSION:  10.0.19041.1

BUILDLAB_STR:  vb_release


OSNAME:  Windows 10

FAILURE_ID_HASH:  {64f5410d-00d2-55ca-1d24-8cc3b24ab0e5}

Followup:     MachineOwner

Link to comment
Share on other sites

  • Administrators

ESET Endpoint Antivirus v5 is a legacy product which reached EOL and does not receive module updates either.

Please uninstall it, reboot the machine and install ESET Endpoint Antivirus v8.1 from scratch.

Link to comment
Share on other sites

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.
Note: Your post will require moderator approval before it will be visible.

Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.


  • Recently Browsing   0 members

    • No registered users viewing this page.
  • Create New...