TechSpot

Page_fault_in_nonpaged_area

By JeffFinnan
Jul 3, 2008
  1. WinXP Service Pack 3 (happened before this pack too)

    Sometimes I run into this problem with 0x00000050. I can reproduce it when I run a full scan with Spyware Doctor. I think AOLs spyware will also do it.

    I saw this ---.techspot.com/vb/topic38458.html (I could not link it because I need at least 5 posts.)

    From that I learned about how to find and read a dmp file. One thing I did not fully understand was System Event 1001. I found some in Event Viewer in Computer management if that is where I was supposed to go under Application. None correspond to the blue screens.

    I have attached two dmp files.

    Thanks,
    Jeff
     
  2. Route44

    Route44 TechSpot Ambassador Posts: 11,966   +70

    As per the AumHa definition: 0x50: PAGE_FAULT_IN_NONPAGED_AREA

    Requested data was not in memory. An invalid system memory address was referenced. Defective memory (including main memory, L2 RAM cache, video RAM) or incompatible software (including remote control and antivirus software) might cause this Stop message, as may other hardware problems (e.g., incorrect SCSI termination or a flawed PCI card)

    Both minidumps were 0x50. One was inconclusive and the other cited a core Windows driver which is too general.

    So... run MemTest on your RAM for a minimum of 7 passes and let us know the result.
     
  3. JeffFinnan

    JeffFinnan TS Rookie Topic Starter Posts: 24

    What particular MemTest?
     
  4. Route44

    Route44 TechSpot Ambassador Posts: 11,966   +70

    Just download the latest offering and burn to a CD. Put your DVD/CD drive as first bootable in your BIOS, reboot with CD in drive, and the test will take over.

    www.memtest.org
     
  5. JeffFinnan

    JeffFinnan TS Rookie Topic Starter Posts: 24

    I actually put on a floppy. I had to go away for a couple of hours. Does it log the other passes? It is in pass 5 now and right now it shows pass complete no errors and the single row shows 0 under the Errors column and nothing in ECC errors.

    Thanks,
    Jeff


     
  6. Route44

    Route44 TechSpot Ambassador Posts: 11,966   +70

    Floppy is fine. So far, so good. I know of people who have gone as long as 6 passes before errors showed up. Remember, 7 is the minimum and if you want to go longer then by all means do so.
     
  7. JeffFinnan

    JeffFinnan TS Rookie Topic Starter Posts: 24

    Okay, MemTest finished 5 passes with what I think are no errors for all five. It took three hours to complete.

    On little different note, just before I did MemTest I ran a full scan with Malwarebytes' Anti-Malware program. It got the same page fault. This time though on reboot, the pc would freeze up. Eventually, I had to go into Safe Mode and go to a restore point I made earlier to day.

    How do I proceed?

    Thanks again,
    Jeff

    PS. Route44: I lived in Maplewood for about six years.

    PSS. Just notice that we were posting at the same time. I guess I could let it run tonight.
     
  8. Route44

    Route44 TechSpot Ambassador Posts: 11,966   +70

    Try this after say 7 passes. Log into safe mode, go the internet and let NOD32 and Trendmicro do a system scan. I am just wondering if you might be infected.

    Also, when you get the chance run a full harddrive diagnostics.

    I know where maplewood is. I live near Ocean City.
     
  9. JeffFinnan

    JeffFinnan TS Rookie Topic Starter Posts: 24

    If I am to install NOD32 or Trendmicro, I have to uninstall Norton Internet Security. I kind of, sort of do not want to do that.

    I ran Western Digital Data LifeGuard Diagnostics - DLGDIAG for Windows

    Test Option: EXTENDED TEST
    Model Number: WDC WD1500ADFD-00NLR1
    Unit Serial Number: WD-WMAP41182277
    Firmware Number: 20.07P20
    Capacity: 150.04 GB
    SMART Status: PASS
    Test Result: PASS
    Test Time: 16:25:03, July 03, 2008


    Test Option: EXTENDED TEST
    Model Number: WDC WD1500ADFD-00NLR1
    Unit Serial Number: WD-WMAP41182097
    Firmware Number: 20.07P20
    Capacity: 150.04 GB
    SMART Status: PASS
    Test Result: PASS
    Test Time: 19:12:42, July 03, 2008

    Did not have time to run the extended one on this larger drive

    Test Option: QUICK TEST
    Model Number: ST3750640AS
    Unit Serial Number: 3QD0T3YY
    Firmware Number: 3.AAE
    Capacity: 750.16 GB
    SMART Status: PASS
    Test Result: PASS
    Test Time: 20:29:24, July 03, 2008​


     
  10. Route44

    Route44 TechSpot Ambassador Posts: 11,966   +70

    No, you do not need to uninstall Norton in order to run the online scans of NOD32, trendmicro, BitDefender, etc.

    I am wondering if Norton is your issue because 0x50 errors can be caused by antivirus software. For what its worth, there are much better options than Norton that don't take up nearly the resources while at the same time offering much better protection.
     
  11. JeffFinnan

    JeffFinnan TS Rookie Topic Starter Posts: 24

    Ran MemTest nine hours overnight. Did 15 passes with no errors. Just started running Eset online.

    In Safe Mode:
    I have run ESET online. I found some in an restore and a few other places.
    I have run BitDefender online. It also found items if the restore file, some stored Thunderbird email files.
    I rebooted into normal XP. I made another restore point. Then ran diskcleanup and clicked on the tab so that I could get it to removed older restore points.

    In Safe Mode again:
    Then I went back and ran TrendMicro online. It found only a couple of adware and cookies that it wanted to remove.
    Now running Spyware Doctor.
    In a full system scan yesterday with Spadocter in normal mode, I would get the BSOD. ​
    This time I am even video recording to see if I can catch close to the spot where it goes BSOD. As of this writing, it as gone further than ever. I am not sure of the impact of running in Safe Mode.
     
  12. Route44

    Route44 TechSpot Ambassador Posts: 11,966   +70

    I would say that if this is indeed an infection issue then I would go to the Security and the Web forum and read the stickies. Some infections are so tenacious that it takes even beyond what you are attempting to fix.

    There are very knowledgeable people there that can help.
     
  13. JeffFinnan

    JeffFinnan TS Rookie Topic Starter Posts: 24

    When I ran Spyware Doctor in normal mode, I got the BSOD. This time I video taped the screen as it was running. I ran a second time and got the BSOD again while I video taped. In the first one the last file shown just before the crash was
    C:\Documents and Settings\All Users\Application Data\Adobe\Flash CS3\en\Configuration\HelpPanel\Help\ActionScriptLangRefV3\fl\transitions\easing\Elastic.html​
    . And the second one shown was:
    C:\Documents and Settings\All Users\Application Data\Adobe\Flash CS3\en\Configuration\HelpPanel\Help\ActionScriptLangRefV3\fl\transitions\easing\class-list.html​

    I checked the dmp files for the two crashes. They are:
    Loading dump file Mini070408-01.dmp
    ----- 32 bit Kernel Mini Dump Analysis

    DUMP_HEADER32:
    MajorVersion 0000000f
    MinorVersion 00000a28
    DirectoryTableBase 0b6c03c0
    PfnDataBase 805620c8
    PsLoadedModuleList 8055d720
    PsActiveProcessHead 805638b8
    MachineImageType 0000014c
    NumberProcessors 00000002
    BugCheckCode 00000050
    BugCheckParameter1 ea42d000
    BugCheckParameter2 00000000
    BugCheckParameter3 ba95d403
    BugCheckParameter4 00000001
    PaeEnabled 00000001
    KdDebuggerDataBlock 8054d2e0
    MiniDumpFields 000004ff

    TRIAGE_DUMP32:
    ServicePackBuild 00000300
    SizeOfDump 00010000
    ValidOffset 0000fffc
    ContextOffset 00000320
    ExceptionOffset 000007d0
    MmOffset 00001068
    UnloadedDriversOffset 000010a0
    PrcbOffset 00001878
    ProcessOffset 00002268
    ThreadOffset 000024c0
    CallStackOffset 00002720
    SizeOfCallStack 00000ba4
    DriverListOffset 00003558
    DriverCount 00000090
    StringPoolOffset 00006018
    StringPoolSize 00002ba0
    BrokenDriverOffset 00000000
    TriageOptions ffffffff
    TopOfStack b29d345c
    DebuggerDataOffset 000032c8
    DebuggerDataSize 00000290


    Windows XP Kernel Version 2600 (Service Pack 3) MP (2 procs) Free x86 compatible

    Built by: 2600.xpsp.080413-2111
    Kernel base = 0x804d7000 PsLoadedModuleList = 0x8055d720
    Debug session time: Fri Jul 04 12:32:11 2008
    System Uptime: 0 days 0:09:26
    start end module name
    804d7000 806e4000 nt Checksum: 001F442E Timestamp: Sun Apr 13 14:
    31:06 2008 (4802516A)

    Unloaded modules:
    b4ef2000 b4f07000 NAVENG.SYS Timestamp: unavailable (00000000)
    b4f07000 b4fd7000 NAVEX15.SYS Timestamp: unavailable (00000000)
    b4067000 b4071000 ATWPKT2.SYS Timestamp: unavailable (00000000)
    b3f5f000 b3f69000 ATWPKT2.SYS Timestamp: unavailable (00000000)
    ba9c8000 ba9d2000 ATWPKT2.SYS Timestamp: unavailable (00000000)
    b2be5000 b2bef000 ATWPKT2.SYS Timestamp: unavailable (00000000)
    b4047000 b4051000 ATWPKT2.SYS Timestamp: unavailable (00000000)
    b50d8000 b50e2000 ATWPKT2.SYS Timestamp: unavailable (00000000)
    b413f000 b416a000 kmixer.sys Timestamp: unavailable (00000000)
    b5ede000 b5eeb000 STREAM.SYS Timestamp: unavailable (00000000)
    b6022000 b6025000 SLIP.sys Timestamp: unavailable (00000000)
    b5e1b000 b5e46000 kmixer.sys Timestamp: unavailable (00000000)
    baf1e000 baf1f000 drmkaud.sys Timestamp: unavailable (00000000)
    baa58000 baa65000 DMusic.sys Timestamp: unavailable (00000000)
    baa38000 baa46000 swmidi.sys Timestamp: unavailable (00000000)
    b5e46000 b5e69000 aec.sys Timestamp: unavailable (00000000)
    bae6c000 bae6e000 splitter.sys Timestamp: unavailable (00000000)
    b5c06000 b5c1a000 parport.sys Timestamp: unavailable (00000000)
    b9f5b000 b9f5f000 kbdhid.sys Timestamp: unavailable (00000000)
    bac68000 bac6d000 Cdaudio.SYS Timestamp: unavailable (00000000)
    b9f5f000 b9f62000 Sfloppy.SYS Timestamp: unavailable (00000000)

    Finished dump check


    Loading dump file Mini070408-02.dmp
    ----- 32 bit Kernel Mini Dump Analysis

    DUMP_HEADER32:
    MajorVersion 0000000f
    MinorVersion 00000a28
    DirectoryTableBase 0b6c03e0
    PfnDataBase 805620c8
    PsLoadedModuleList 8055d720
    PsActiveProcessHead 805638b8
    MachineImageType 0000014c
    NumberProcessors 00000002
    BugCheckCode 00000050
    BugCheckParameter1 e9f2f000
    BugCheckParameter2 00000000
    BugCheckParameter3 ba95d403
    BugCheckParameter4 00000001
    PaeEnabled 00000001
    KdDebuggerDataBlock 8054d2e0
    MiniDumpFields 000004ff

    TRIAGE_DUMP32:
    ServicePackBuild 00000300
    SizeOfDump 00010000
    ValidOffset 0000fffc
    ContextOffset 00000320
    ExceptionOffset 000007d0
    MmOffset 00001068
    UnloadedDriversOffset 000010a0
    PrcbOffset 00001878
    ProcessOffset 00002268
    ThreadOffset 000024c0
    CallStackOffset 00002720
    SizeOfCallStack 00000670
    DriverListOffset 00003020
    DriverCount 00000090
    StringPoolOffset 00005ae0
    StringPoolSize 00002c00
    BrokenDriverOffset 00000000
    TriageOptions ffffffff
    TopOfStack b2b79990
    DebuggerDataOffset 00002d90
    DebuggerDataSize 00000290


    Windows XP Kernel Version 2600 (Service Pack 3) MP (2 procs) Free x86 compatible

    Built by: 2600.xpsp.080413-2111
    Kernel base = 0x804d7000 PsLoadedModuleList = 0x8055d720
    Debug session time: Fri Jul 04 12:49:00 2008
    System Uptime: 0 days 0:07:41
    start end module name
    804d7000 806e4000 nt Checksum: 001F442E Timestamp: Sun Apr 13 14:
    31:06 2008 (4802516A)

    Unloaded modules:
    b3fdd000 b3fe7000 ATWPKT2.SYS Timestamp: unavailable (00000000)
    b4b02000 b4b0c000 ATWPKT2.SYS Timestamp: unavailable (00000000)
    b4a26000 b4a51000 kmixer.sys Timestamp: unavailable (00000000)
    b402d000 b4037000 ATWPKT2.SYS Timestamp: unavailable (00000000)
    b401d000 b4027000 ATWPKT2.SYS Timestamp: unavailable (00000000)
    b4895000 b489f000 ATWPKT2.SYS Timestamp: unavailable (00000000)
    b2bba000 b2bc4000 ATWPKT2.SYS Timestamp: unavailable (00000000)
    b5c91000 b5c9e000 STREAM.SYS Timestamp: unavailable (00000000)
    b5bcc000 b5bcf000 SLIP.sys Timestamp: unavailable (00000000)
    b5e27000 b5e52000 kmixer.sys Timestamp: unavailable (00000000)
    baed2000 baed3000 drmkaud.sys Timestamp: unavailable (00000000)
    b7184000 b7191000 DMusic.sys Timestamp: unavailable (00000000)
    b71b4000 b71c2000 swmidi.sys Timestamp: unavailable (00000000)
    b5e52000 b5e75000 aec.sys Timestamp: unavailable (00000000)
    bae3c000 bae3e000 splitter.sys Timestamp: unavailable (00000000)
    b5bd0000 b5be4000 parport.sys Timestamp: unavailable (00000000)
    b9fe2000 b9fe6000 kbdhid.sys Timestamp: unavailable (00000000)
    bac70000 bac75000 Cdaudio.SYS Timestamp: unavailable (00000000)
    b9fe6000 b9fe9000 Sfloppy.SYS Timestamp: unavailable (00000000)

    Finished dump check

    I will have to take a look at Security.

    Thanks,
    Jeff
     
  14. Route44

    Route44 TechSpot Ambassador Posts: 11,966   +70

    If these crashes are due to Adobe Flash you wouldn't be the first in recent days. Go to Adobe and download their flash uninstaller.

    Uninstall, then reboot and and re-install Adobe Flash. For most people that is all it takes.
     
Topic Status:
Not open for further replies.

Similar Topics

Add New Comment

You need to be a member to leave a comment. Join thousands of tech enthusiasts and participate.
TechSpot Account You may also...