Jump to content

Recommended Posts

Posted

When instaling NOD32 v5 i recieve BSOD: PAGE_FAULT_IN_NONPAGED_AREA (50).

Problems only appear on 3 same model of laptops. 
Laptops are fully updated and I also tried with clean installation of OS.

Laptop info:

HP - ProBook 450 G8, i5-1135G7 2,4GHz, DDR4 8GB, Win 10 PRO

Install product: 
ESET Endpoint Antivirus v5

Minidump:

*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

PAGE_FAULT_IN_NONPAGED_AREA (50)
Invalid system memory was referenced.  This cannot be protected by try-except.
Typically the address is just plain bad or it is pointing at freed memory.
Arguments:
Arg1: ffff9081267a7730, memory referenced.
Arg2: 0000000000000011, value 0 = read operation, 1 = write operation.
Arg3: ffff9081267a7730, If non-zero, the instruction address which referenced the bad memory
    address.
Arg4: 0000000000000002, (reserved)

Debugging Details:
------------------


KEY_VALUES_STRING: 1

    Key  : AV.PTE
    Value: Valid

    Key  : AV.Type
    Value: Execute

    Key  : Analysis.CPU.mSec
    Value: 5812

    Key  : Analysis.DebugAnalysisManager
    Value: Create

    Key  : Analysis.Elapsed.mSec
    Value: 7883

    Key  : Analysis.Init.CPU.mSec
    Value: 1187

    Key  : Analysis.Init.Elapsed.mSec
    Value: 42149

    Key  : Analysis.Memory.CommitPeak.Mb
    Value: 84

    Key  : WER.OS.Branch
    Value: vb_release

    Key  : WER.OS.Timestamp
    Value: 2019-12-06T14:06:00Z

    Key  : WER.OS.Version
    Value: 10.0.19041.1


FILE_IN_CAB:  111921-13484-01.dmp

TAG_NOT_DEFINED_202b:  *** Unknown TAG in analysis list 202b


BUGCHECK_CODE:  50

BUGCHECK_P1: ffff9081267a7730

BUGCHECK_P2: 11

BUGCHECK_P3: ffff9081267a7730

BUGCHECK_P4: 2

WRITE_ADDRESS: fffff8013aafb390: Unable to get MiVisibleState
Unable to get NonPagedPoolStart
Unable to get NonPagedPoolEnd
Unable to get PagedPoolStart
Unable to get PagedPoolEnd
unable to get nt!MmSpecialPagesInUse
 ffff9081267a7730 

MM_INTERNAL_CODE:  2

BLACKBOXBSD: 1 (!blackboxbsd)


BLACKBOXNTFS: 1 (!blackboxntfs)


BLACKBOXPNP: 1 (!blackboxpnp)


CUSTOMER_CRASH_COUNT:  1

PROCESS_NAME:  System

TRAP_FRAME:  ffffef862cff6c80 -- (.trap 0xffffef862cff6c80)
NOTE: The trap frame does not contain all registers.
Some register values may be zeroed or incorrect.
rax=ffff9081267a7730 rbx=0000000000000000 rcx=0000000000000000
rdx=ffff90812d247e68 rsi=0000000000000000 rdi=0000000000000000
rip=ffff9081267a7730 rsp=ffffef862cff6e18 rbp=00000000000001d0
 r8=0000000000000000  r9=0000000000000000 r10=0000000000000000
r11=ffff9081221c2040 r12=0000000000000000 r13=0000000000000000
r14=0000000000000000 r15=0000000000000000
iopl=0         nv up ei pl zr na po nc
ffff9081`267a7730 48895c2408      mov     qword ptr [rsp+8],rbx ss:0018:ffffef86`2cff6e20=ffff90812d247de0
Resetting default scope

STACK_TEXT:  
ffffef86`2cff69d8 fffff801`3a24a56f     : 00000000`00000050 ffff9081`267a7730 00000000`00000011 ffffef86`2cff6c80 : nt!KeBugCheckEx
ffffef86`2cff69e0 fffff801`3a09f390     : ffff9081`2e3a22c8 00000000`00000011 ffffef86`2cff6d00 00000000`00000000 : nt!MiSystemFault+0x18d1bf
ffffef86`2cff6ae0 fffff801`3a20545e     : 000060c7`07dc041e 00000001`00000006 00000000`00000000 00000000`4c4c554e : nt!MmAccessFault+0x400
ffffef86`2cff6c80 ffff9081`267a7730     : fffff801`568a741d ffff9081`2d247de0 ffff9081`2d0491bc ffff9081`2d247db0 : nt!KiPageFault+0x35e
ffffef86`2cff6e18 fffff801`568a741d     : ffff9081`2d247de0 ffff9081`2d0491bc ffff9081`2d247db0 00000000`00000023 : 0xffff9081`267a7730
ffffef86`2cff6e20 ffff9081`2d247de0     : ffff9081`2d0491bc ffff9081`2d247db0 00000000`00000023 fffff801`568a935c : ehdrv+0x1741d
ffffef86`2cff6e28 ffff9081`2d0491bc     : ffff9081`2d247db0 00000000`00000023 fffff801`568a935c 00000000`00000200 : 0xffff9081`2d247de0
ffffef86`2cff6e30 ffff9081`2d247db0     : 00000000`00000023 fffff801`568a935c 00000000`00000200 00000000`00000000 : 0xffff9081`2d0491bc
ffffef86`2cff6e38 00000000`00000023     : fffff801`568a935c 00000000`00000200 00000000`00000000 00000000`00000000 : 0xffff9081`2d247db0
ffffef86`2cff6e40 fffff801`568a935c     : 00000000`00000200 00000000`00000000 00000000`00000000 0050005c`003a0043 : 0x23
ffffef86`2cff6e48 00000000`00000200     : 00000000`00000000 00000000`00000000 0050005c`003a0043 00720067`006f0072 : ehdrv+0x1935c
ffffef86`2cff6e50 00000000`00000000     : 00000000`00000000 0050005c`003a0043 00720067`006f0072 00460020`006d0061 : 0x200


SYMBOL_NAME:  ehdrv+1741d

MODULE_NAME: ehdrv

IMAGE_NAME:  ehdrv.sys

STACK_COMMAND:  .cxr; .ecxr ; kb

BUCKET_ID_FUNC_OFFSET:  1741d

FAILURE_BUCKET_ID:  AV_X_(null)_ehdrv!unknown_function

OS_VERSION:  10.0.19041.1

BUILDLAB_STR:  vb_release

OSPLATFORM_TYPE:  x64

OSNAME:  Windows 10

FAILURE_ID_HASH:  {64f5410d-00d2-55ca-1d24-8cc3b24ab0e5}

Followup:     MachineOwner
---------

  • Administrators
Posted

ESET Endpoint Antivirus v5 is a legacy product which reached EOL and does not receive module updates either.

Please uninstall it, reboot the machine and install ESET Endpoint Antivirus v8.1 from scratch.

Guest
This topic is now closed to further replies.
  • Recently Browsing   0 members

    • No registered users viewing this page.
×
×
  • Create New...