umi 0 Posted November 22, 2021 Share Posted November 22, 2021 When instaling NOD32 v5 i recieve BSOD: PAGE_FAULT_IN_NONPAGED_AREA (50). Problems only appear on 3 same model of laptops. Laptops are fully updated and I also tried with clean installation of OS. Laptop info: HP - ProBook 450 G8, i5-1135G7 2,4GHz, DDR4 8GB, Win 10 PRO Install product: ESET Endpoint Antivirus v5 Minidump: ******************************************************************************* * * * Bugcheck Analysis * * * ******************************************************************************* PAGE_FAULT_IN_NONPAGED_AREA (50) Invalid system memory was referenced. This cannot be protected by try-except. Typically the address is just plain bad or it is pointing at freed memory. Arguments: Arg1: ffff9081267a7730, memory referenced. Arg2: 0000000000000011, value 0 = read operation, 1 = write operation. Arg3: ffff9081267a7730, If non-zero, the instruction address which referenced the bad memory address. Arg4: 0000000000000002, (reserved) Debugging Details: ------------------ KEY_VALUES_STRING: 1 Key : AV.PTE Value: Valid Key : AV.Type Value: Execute Key : Analysis.CPU.mSec Value: 5812 Key : Analysis.DebugAnalysisManager Value: Create Key : Analysis.Elapsed.mSec Value: 7883 Key : Analysis.Init.CPU.mSec Value: 1187 Key : Analysis.Init.Elapsed.mSec Value: 42149 Key : Analysis.Memory.CommitPeak.Mb Value: 84 Key : WER.OS.Branch Value: vb_release Key : WER.OS.Timestamp Value: 2019-12-06T14:06:00Z Key : WER.OS.Version Value: 10.0.19041.1 FILE_IN_CAB: 111921-13484-01.dmp TAG_NOT_DEFINED_202b: *** Unknown TAG in analysis list 202b BUGCHECK_CODE: 50 BUGCHECK_P1: ffff9081267a7730 BUGCHECK_P2: 11 BUGCHECK_P3: ffff9081267a7730 BUGCHECK_P4: 2 WRITE_ADDRESS: fffff8013aafb390: Unable to get MiVisibleState Unable to get NonPagedPoolStart Unable to get NonPagedPoolEnd Unable to get PagedPoolStart Unable to get PagedPoolEnd unable to get nt!MmSpecialPagesInUse ffff9081267a7730 MM_INTERNAL_CODE: 2 BLACKBOXBSD: 1 (!blackboxbsd) BLACKBOXNTFS: 1 (!blackboxntfs) BLACKBOXPNP: 1 (!blackboxpnp) CUSTOMER_CRASH_COUNT: 1 PROCESS_NAME: System TRAP_FRAME: ffffef862cff6c80 -- (.trap 0xffffef862cff6c80) NOTE: The trap frame does not contain all registers. Some register values may be zeroed or incorrect. rax=ffff9081267a7730 rbx=0000000000000000 rcx=0000000000000000 rdx=ffff90812d247e68 rsi=0000000000000000 rdi=0000000000000000 rip=ffff9081267a7730 rsp=ffffef862cff6e18 rbp=00000000000001d0 r8=0000000000000000 r9=0000000000000000 r10=0000000000000000 r11=ffff9081221c2040 r12=0000000000000000 r13=0000000000000000 r14=0000000000000000 r15=0000000000000000 iopl=0 nv up ei pl zr na po nc ffff9081`267a7730 48895c2408 mov qword ptr [rsp+8],rbx ss:0018:ffffef86`2cff6e20=ffff90812d247de0 Resetting default scope STACK_TEXT: ffffef86`2cff69d8 fffff801`3a24a56f : 00000000`00000050 ffff9081`267a7730 00000000`00000011 ffffef86`2cff6c80 : nt!KeBugCheckEx ffffef86`2cff69e0 fffff801`3a09f390 : ffff9081`2e3a22c8 00000000`00000011 ffffef86`2cff6d00 00000000`00000000 : nt!MiSystemFault+0x18d1bf ffffef86`2cff6ae0 fffff801`3a20545e : 000060c7`07dc041e 00000001`00000006 00000000`00000000 00000000`4c4c554e : nt!MmAccessFault+0x400 ffffef86`2cff6c80 ffff9081`267a7730 : fffff801`568a741d ffff9081`2d247de0 ffff9081`2d0491bc ffff9081`2d247db0 : nt!KiPageFault+0x35e ffffef86`2cff6e18 fffff801`568a741d : ffff9081`2d247de0 ffff9081`2d0491bc ffff9081`2d247db0 00000000`00000023 : 0xffff9081`267a7730 ffffef86`2cff6e20 ffff9081`2d247de0 : ffff9081`2d0491bc ffff9081`2d247db0 00000000`00000023 fffff801`568a935c : ehdrv+0x1741d ffffef86`2cff6e28 ffff9081`2d0491bc : ffff9081`2d247db0 00000000`00000023 fffff801`568a935c 00000000`00000200 : 0xffff9081`2d247de0 ffffef86`2cff6e30 ffff9081`2d247db0 : 00000000`00000023 fffff801`568a935c 00000000`00000200 00000000`00000000 : 0xffff9081`2d0491bc ffffef86`2cff6e38 00000000`00000023 : fffff801`568a935c 00000000`00000200 00000000`00000000 00000000`00000000 : 0xffff9081`2d247db0 ffffef86`2cff6e40 fffff801`568a935c : 00000000`00000200 00000000`00000000 00000000`00000000 0050005c`003a0043 : 0x23 ffffef86`2cff6e48 00000000`00000200 : 00000000`00000000 00000000`00000000 0050005c`003a0043 00720067`006f0072 : ehdrv+0x1935c ffffef86`2cff6e50 00000000`00000000 : 00000000`00000000 0050005c`003a0043 00720067`006f0072 00460020`006d0061 : 0x200 SYMBOL_NAME: ehdrv+1741d MODULE_NAME: ehdrv IMAGE_NAME: ehdrv.sys STACK_COMMAND: .cxr; .ecxr ; kb BUCKET_ID_FUNC_OFFSET: 1741d FAILURE_BUCKET_ID: AV_X_(null)_ehdrv!unknown_function OS_VERSION: 10.0.19041.1 BUILDLAB_STR: vb_release OSPLATFORM_TYPE: x64 OSNAME: Windows 10 FAILURE_ID_HASH: {64f5410d-00d2-55ca-1d24-8cc3b24ab0e5} Followup: MachineOwner --------- Link to comment Share on other sites More sharing options...
Administrators Marcos 4,694 Posted November 22, 2021 Administrators Share Posted November 22, 2021 ESET Endpoint Antivirus v5 is a legacy product which reached EOL and does not receive module updates either. Please uninstall it, reboot the machine and install ESET Endpoint Antivirus v8.1 from scratch. Link to comment Share on other sites More sharing options...
Recommended Posts