umi 0 Posted November 22, 2021 Posted November 22, 2021 When instaling NOD32 v5 i recieve BSOD: PAGE_FAULT_IN_NONPAGED_AREA (50). Problems only appear on 3 same model of laptops. Laptops are fully updated and I also tried with clean installation of OS. Laptop info: HP - ProBook 450 G8, i5-1135G7 2,4GHz, DDR4 8GB, Win 10 PRO Install product: ESET Endpoint Antivirus v5 Minidump: ******************************************************************************* * * * Bugcheck Analysis * * * ******************************************************************************* PAGE_FAULT_IN_NONPAGED_AREA (50) Invalid system memory was referenced. This cannot be protected by try-except. Typically the address is just plain bad or it is pointing at freed memory. Arguments: Arg1: ffff9081267a7730, memory referenced. Arg2: 0000000000000011, value 0 = read operation, 1 = write operation. Arg3: ffff9081267a7730, If non-zero, the instruction address which referenced the bad memory address. Arg4: 0000000000000002, (reserved) Debugging Details: ------------------ KEY_VALUES_STRING: 1 Key : AV.PTE Value: Valid Key : AV.Type Value: Execute Key : Analysis.CPU.mSec Value: 5812 Key : Analysis.DebugAnalysisManager Value: Create Key : Analysis.Elapsed.mSec Value: 7883 Key : Analysis.Init.CPU.mSec Value: 1187 Key : Analysis.Init.Elapsed.mSec Value: 42149 Key : Analysis.Memory.CommitPeak.Mb Value: 84 Key : WER.OS.Branch Value: vb_release Key : WER.OS.Timestamp Value: 2019-12-06T14:06:00Z Key : WER.OS.Version Value: 10.0.19041.1 FILE_IN_CAB: 111921-13484-01.dmp TAG_NOT_DEFINED_202b: *** Unknown TAG in analysis list 202b BUGCHECK_CODE: 50 BUGCHECK_P1: ffff9081267a7730 BUGCHECK_P2: 11 BUGCHECK_P3: ffff9081267a7730 BUGCHECK_P4: 2 WRITE_ADDRESS: fffff8013aafb390: Unable to get MiVisibleState Unable to get NonPagedPoolStart Unable to get NonPagedPoolEnd Unable to get PagedPoolStart Unable to get PagedPoolEnd unable to get nt!MmSpecialPagesInUse ffff9081267a7730 MM_INTERNAL_CODE: 2 BLACKBOXBSD: 1 (!blackboxbsd) BLACKBOXNTFS: 1 (!blackboxntfs) BLACKBOXPNP: 1 (!blackboxpnp) CUSTOMER_CRASH_COUNT: 1 PROCESS_NAME: System TRAP_FRAME: ffffef862cff6c80 -- (.trap 0xffffef862cff6c80) NOTE: The trap frame does not contain all registers. Some register values may be zeroed or incorrect. rax=ffff9081267a7730 rbx=0000000000000000 rcx=0000000000000000 rdx=ffff90812d247e68 rsi=0000000000000000 rdi=0000000000000000 rip=ffff9081267a7730 rsp=ffffef862cff6e18 rbp=00000000000001d0 r8=0000000000000000 r9=0000000000000000 r10=0000000000000000 r11=ffff9081221c2040 r12=0000000000000000 r13=0000000000000000 r14=0000000000000000 r15=0000000000000000 iopl=0 nv up ei pl zr na po nc ffff9081`267a7730 48895c2408 mov qword ptr [rsp+8],rbx ss:0018:ffffef86`2cff6e20=ffff90812d247de0 Resetting default scope STACK_TEXT: ffffef86`2cff69d8 fffff801`3a24a56f : 00000000`00000050 ffff9081`267a7730 00000000`00000011 ffffef86`2cff6c80 : nt!KeBugCheckEx ffffef86`2cff69e0 fffff801`3a09f390 : ffff9081`2e3a22c8 00000000`00000011 ffffef86`2cff6d00 00000000`00000000 : nt!MiSystemFault+0x18d1bf ffffef86`2cff6ae0 fffff801`3a20545e : 000060c7`07dc041e 00000001`00000006 00000000`00000000 00000000`4c4c554e : nt!MmAccessFault+0x400 ffffef86`2cff6c80 ffff9081`267a7730 : fffff801`568a741d ffff9081`2d247de0 ffff9081`2d0491bc ffff9081`2d247db0 : nt!KiPageFault+0x35e ffffef86`2cff6e18 fffff801`568a741d : ffff9081`2d247de0 ffff9081`2d0491bc ffff9081`2d247db0 00000000`00000023 : 0xffff9081`267a7730 ffffef86`2cff6e20 ffff9081`2d247de0 : ffff9081`2d0491bc ffff9081`2d247db0 00000000`00000023 fffff801`568a935c : ehdrv+0x1741d ffffef86`2cff6e28 ffff9081`2d0491bc : ffff9081`2d247db0 00000000`00000023 fffff801`568a935c 00000000`00000200 : 0xffff9081`2d247de0 ffffef86`2cff6e30 ffff9081`2d247db0 : 00000000`00000023 fffff801`568a935c 00000000`00000200 00000000`00000000 : 0xffff9081`2d0491bc ffffef86`2cff6e38 00000000`00000023 : fffff801`568a935c 00000000`00000200 00000000`00000000 00000000`00000000 : 0xffff9081`2d247db0 ffffef86`2cff6e40 fffff801`568a935c : 00000000`00000200 00000000`00000000 00000000`00000000 0050005c`003a0043 : 0x23 ffffef86`2cff6e48 00000000`00000200 : 00000000`00000000 00000000`00000000 0050005c`003a0043 00720067`006f0072 : ehdrv+0x1935c ffffef86`2cff6e50 00000000`00000000 : 00000000`00000000 0050005c`003a0043 00720067`006f0072 00460020`006d0061 : 0x200 SYMBOL_NAME: ehdrv+1741d MODULE_NAME: ehdrv IMAGE_NAME: ehdrv.sys STACK_COMMAND: .cxr; .ecxr ; kb BUCKET_ID_FUNC_OFFSET: 1741d FAILURE_BUCKET_ID: AV_X_(null)_ehdrv!unknown_function OS_VERSION: 10.0.19041.1 BUILDLAB_STR: vb_release OSPLATFORM_TYPE: x64 OSNAME: Windows 10 FAILURE_ID_HASH: {64f5410d-00d2-55ca-1d24-8cc3b24ab0e5} Followup: MachineOwner ---------
Administrators Marcos 5,462 Posted November 22, 2021 Administrators Posted November 22, 2021 ESET Endpoint Antivirus v5 is a legacy product which reached EOL and does not receive module updates either. Please uninstall it, reboot the machine and install ESET Endpoint Antivirus v8.1 from scratch.
Recommended Posts