page_fault_in_nonpaged_area [bluescreen]

Hi guys,

I've been getting the blue screen saying:
"page_fault_in_non-paged_area"
so I followed the posting procedures..


my pc info:
- x86 (32-bit) or x64 ? 32
- the original installed OS on the system? vista (now win 7 ultimate)
- an OEM or full retail version? oem

- What is the age of system (hardware)? 5-6 yrs ago..
- What is the age of OS installation (have you re-installed the OS?) 1 yr ago i installed win 7


My BSOD Dump & System File Collection:
Attachment 160232


thanks

nitraxx said:

Hi guys,

I've been getting the blue screen saying:
"page_fault_in_non-paged_area"
so I followed the posting procedures..


my pc info:
- x86 (32-bit) or x64 ? 32
- the original installed OS on the system? vista (now win 7 ultimate)
- an OEM or full retail version? oem

- What is the age of system (hardware)? 5-6 yrs ago..
- What is the age of OS installation (have you re-installed the OS?) 1 yr ago i installed win 7


My BSOD Dump & System File Collection:
Attachment 160232


thanks

Simple and obvious these were Related to avast! Self Protection.

I would remove it and replace with Microsoft security essentials.

http://files.avast.com/files/eng/aswclear5.exe

Virus, Spyware & Malware Protection | Microsoft Security Essentials

Code:

Microsoft (R) Windows Debugger Version 6.11.0001.404 X86
Copyright (c) Microsoft Corporation. All rights reserved.


Loading Dump File [C:\Users\K\Desktop\Windows_NT6_BSOD_jcgriff2\061711-33852-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available

Symbol search path is: SRV*C:\Symbols*http://msdl.microsoft.com/download/symbols;srv*e:\symbols
*http://msdl.microsoft.com/download/symbols
Executable search path is: 
Windows 7 Kernel Version 7600 UP Free x86 compatible
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 7600.16792.x86fre.win7_gdr.110408-1633
Machine Name:
Kernel base = 0x82e1e000 PsLoadedModuleList = 0x82f66810
Debug session time: Fri Jun 17 15:43:30.998 2011 (GMT-4)
System Uptime: 0 days 0:00:38.229
Loading Kernel Symbols
...............................................................
................................................................
........................
Loading User Symbols
Loading unloaded module list
......
kd> !analyze -v
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

PAGE_FAULT_IN_NONPAGED_AREA (50)
Invalid system memory was referenced.  This cannot be protected by try-except,
it must be protected by a Probe.  Typically the address is just plain bad or it
is pointing at freed memory.
Arguments:
Arg1: c6025a1a, memory referenced.
Arg2: 00000000, value 0 = read operation, 1 = write operation.
Arg3: 8d798203, If non-zero, the instruction address which referenced the bad memory
    address.
Arg4: 00000002, (reserved)

Debugging Details:
------------------

Unable to load image \SystemRoot\System32\Drivers\aswSP.SYS, Win32 error 0n2
*** WARNING: Unable to verify timestamp for aswSP.SYS
*** ERROR: Module load completed but symbols could not be loaded for aswSP.SYS

Could not read faulting driver name

READ_ADDRESS: GetPointerFromAddress: unable to read from 82f86718
Unable to read MiSystemVaType memory at 82f66160
 c6025a1a 

FAULTING_IP: 
aswSP+2c203
8d798203 0fb74e18        movzx   ecx,word ptr [esi+18h]

MM_INTERNAL_CODE:  2

CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT

BUGCHECK_STR:  0x50

PROCESS_NAME:  AvastSvc.exe

CURRENT_IRQL:  0

TRAP_FRAME:  9889b614 -- (.trap 0xffffffff9889b614)
ErrCode = 00000000
eax=00000000 ebx=c6025a02 ecx=86e529e8 edx=00000000 esi=c6025a02 edi=00000040
eip=8d798203 esp=9889b688 ebp=9889b7f0 iopl=0         nv up ei pl nz na po nc
cs=0008  ss=0010  ds=0023  es=0023  fs=0030  gs=0000             efl=00010202
aswSP+0x2c203:
8d798203 0fb74e18        movzx   ecx,word ptr [esi+18h]   ds:0023:c6025a1a=????
Resetting default scope

LAST_CONTROL_TRANSFER:  from 82e64608 to 82ea3a0b

STACK_TEXT:  
9889b5fc 82e64608 00000000 c6025a1a 00000000 nt!MmAccessFault+0x106
9889b5fc 8d798203 00000000 c6025a1a 00000000 nt!KiTrap0E+0xdc
WARNING: Stack unwind information not available. Following frames may be wrong.
9889b7f0 8d779db8 c6025a02 00000000 86e529e8 aswSP+0x2c203
9889b84c 8d77aad5 c6025a02 9889b880 9889ba70 aswSP+0xddb8
9889b89c 8d77e24a 9b8218c0 9889b908 15f30cd1 aswSP+0xead5
9889b8fc 830bc8e8 00000000 0000001d 9889b99c aswSP+0x1224a
9889b970 8305cf41 0000001d 9b81c828 8c76f100 nt!CmpCallCallBacks+0x336
9889b9b8 83055ede 0000001d 9b857448 9889ba70 nt!CmPostCallbackNotification+0x55
9889bb48 8303f57b 8880afd0 84939728 8606b008 nt!CmpParseKey+0x14b2
9889bbc4 83065729 00000000 9889bc18 00000040 nt!ObpLookupObjectName+0x4fa
9889bc20 8305ce74 015af9fc 84939728 86296d01 nt!ObOpenObjectByName+0x165
9889bd00 83057bc7 015afae0 00000002 015af9fc nt!CmOpenKey+0x1f4
9889bd1c 82e6141a 015afae0 00000002 015af9fc nt!NtOpenKeyEx+0x18
9889bd1c 772b6344 015afae0 00000002 015af9fc nt!KiFastCallEntry+0x12a
015afa3c 00000000 00000000 00000000 00000000 0x772b6344


STACK_COMMAND:  kb

FOLLOWUP_IP: 
aswSP+2c203
8d798203 0fb74e18        movzx   ecx,word ptr [esi+18h]

SYMBOL_STACK_INDEX:  2

SYMBOL_NAME:  aswSP+2c203

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: aswSP

IMAGE_NAME:  aswSP.SYS

DEBUG_FLR_IMAGE_TIMESTAMP:  4d65202b

FAILURE_BUCKET_ID:  0x50_aswSP+2c203

BUCKET_ID:  0x50_aswSP+2c203

Followup: MachineOwner
---------

kd> lmvm aswSP
start    end        module name
8d76c000 8d7b3880   aswSP    T (no symbols)           
    Loaded symbol image file: aswSP.SYS
    Image path: \SystemRoot\System32\Drivers\aswSP.SYS
    Image name: aswSP.SYS
    Timestamp:        Wed Feb 23 09:56:43 2011 (4D65202B)
    CheckSum:         00059699
    ImageSize:        00047880
    Translations:     0000.04b0 0000.04e4 0409.04b0 0409.04e4

so Avast pretty much screwed up my computer?

nitraxx said:

so Avast pretty much screwed up my computer?

No it didnt hose your machine, just made it unstable. Will return to normal when replaced I think

nitraxx said:

lol i can't download the essentials because my win7 version is not genuine? O_o

well then suggest you get a genuine copy as we cant help with your current one

i took avast out, the machine runs so different now. its weird but i guess it's going well. ran some scans with utilities and malware and removed some crap and changed a few settings. its running smoother
thanks for the help bruh

nitraxx said:

i took avast out, the machine runs so different now. its weird but i guess it's going well. ran some scans with utilities and malware and removed some crap and changed a few settings. its running smoother
thanks for the help bruh

My pleasure and let us know if you need help