Solved BSOD error 0x00000050 PAGE_FAULT_IN_NONPAGED_AREA "vbabosec.sys"

[tareknaj]

BSOD error 0x00000050 PAGE_FAULT_IN_NONPAGED_AREA "vbabosec.sys"

In my blue screen there is "vbabosec.sys" plus PAGE_FAULT_IN_NONPAGED_AREA
Any help is very appreciated, thanks in advance.

System Health Report and Dump Files are attached with the thread

 

[richc46]

Welcome
Most of your files do indeed show Vbabosec.sys There is no mention of this in Google, except for your post. This is usually and indication that the BSOD was caused by a name changing Trojan. I will ask our security people to look into the possibility that you were indeed infected. In the mean time run a full updated anti virus scan. Download and run a full scan with Malwarebytes.

 

[karlsnooks]

I second the recommendation you have received.

You will find a link to malwarebytes in my signature.

I strongly recommend that you use this link since the malware writers try hard to counterfeit sites to look very genuine.

After running malware bytes, then please carry out these two procedures:

Update your SevenForums System Specs
User CP (located on the top menu bar) |
Your Profile | Edit System Spec (left-hand column)

To gather info, use Speccy (my favorite) or SIW or System Info

In the System Manufacturer Block, enter:
Manufacturer and Model and
ADD the word laptop, desktop, netbook or tablet.
For example:
Toshiba Satellite L305D notebook.

Provide full windows version info, for example:
MS Windows 7 Ultimate SP1 64-bit

Use the “Other Info” block for Optical Reader,
Mouse, touchpad, wifi adapter, speakers, monitor, etc

Scroll down and click on SAVE CHANGES.

You will find that in Speccy, you can select info from the display
using your mouse/touchpad and then paste that info into your specs.

SIW is a marvelous program, but the free version does not offer
this capability.

================================================
=================================================
Install CCleaner:
CCleaner - PC Optimization and Cleaning - Free Download

list of STARTUP PROGRAMS

CCleaner | Tools icon | Startup button | Windows tab |
click on Save to text file button (bottom right side) |
accept Startup.txt as file name | SAVE button

list of SCHEDULED TASKS

CCleaner | Tools icon | Startup button | Scheduled Tasks tab |
click on Save to text file button (bottom right side) |
enter Scheduled Tasks as File name | Save button

List of INSTALLED PROGRAMS

CCleaner | Tools icon | Uninstall button |
click on Save to text file button (bottom right side) |
accept install.txt as File name | Save button


UPLOAD, as an attachment, the startup.txt file
UPLOAD, as an attachment, the Scheduled Tasks.txt file
UPLOAD, as an attachment, the install.txt file.

HOW TO UPLOAD
Post a File or Screenshot in Seven Forums

 

[HoneycombAG]

   Warning

This file is not in the Driver Reference Table. This could indicate malware in some instance.
If you continue to experience problems while running Malwarebytes, run the Malwarebytes Chameleon from the start menu.

If you want, you can also get MSE and avast! installed and run them as well.
If you are doing an MBAM scan, be sure to save and attach a copy of the MBAM log file.

There were timestamp errors on Klif Mini-Filter fre_wnet_x86 (Kaspersky) while debugging, and it might indicate a problem with the current installation of Kaspersky Anti-Virus.

Now some standard issue stuff:

• If you are overclocking any hardware, please stop.
• Run Disk Check with both boxes checked for all HDDs and with Automatically fix file system errors checked for all SSDs. Post back your logs for the checks after finding them using http://www.sevenforums.com/tutorials/96938-check-disk-chkdsk-read-event-viewer-log.html (you may need to search for wininit instead of chkdsk).
  For any drives that do not give the message:
  Windows has checked the file system and found no problems
  run disk check again as above. In other words, if it says:
  Windows has made corrections to the file system
  after running the disk check, run the disk check again.
• If you have an SSD, make sure the following are up to date:
  • SSD firmware
  • BIOS Version
  • Chipset Drivers
  • Hard disk controller drivers/SATA drivers
  • If you have a Marvell IDE ATA/ATAPI device, make sure the drivers are up to date from the Intel site or Marvell site and not from your motherboard/vendor support site.
• Check Windows for corruption. Run http://www.sevenforums.com/tutorials/1538-sfc-scannow-command-system-file-checker.html up to three times to fix all errors with a restart in between each. Post back if it continues to show errors after a fourth run or if the first run comes back with no integrity violations. Use OPTION THREE of http://www.sevenforums.com/tutorials/1538-sfc-scannow-command-system-file-checker.html to provide us with the sfcdetails.txt file if errors occur.
• Run the boot version of Memtest86+ paying close attention to Parts 2 and 3 of the tutorial. Also, in case Memtest86+ misses anything and comes up with no errors, run the extended version of the Windows Memory Diagnostics Tool for at least five passes. These you may want to run overnight since they take a long time to complete (run them an hour before bed each of the next two nights and check before going to sleep that they are still running).
  
     Warning

  Before you proceed with the following, answer these two questions: Are you still under warranty? Does your warranty allow you to open up the machine to check hardware? If you are unsure of the answers to these questions, contact your system manufacturer. :warn:WARNING: The steps that follow can void your warranty!!!
  
  For Part 3: If You Have Errors: If you swap any memory components, follow these steps for ESD safety:
  1. Shut down and turn off your computer.
  2. Unplug all power supplies to the computer (AC Power then battery for laptops, AC power for desktops)
  3. Hold down the power button for 30 seconds to close the circuit and ensure all power drains from components.
  4. Make sure you are grounded by using proper grounding techniques, i.e. work on an anti-static workbench, anti-static desk, or an anti-static pad. Hold something metallic while touching it to the anti-static surface, or use an anti-static wristband to attach to the anti-static material while working. If you do not have an anti-static workbench, desk, or pad, you can use your computer tower/case by finding a metal hold in it, such as a drive bay.
  Once these steps have been followed, it is safe to remove and replace components within your computer.
• Download and install CPU-Z and Upload screenshots of the CPU, Mainboard, Memory, and SPD tabs. In the SPD tab, upload an image of each slot. Those steps will allow us to check the compatibility of your hardware.

 

[richc46]

Dont run two anti virus together at the same time.

 

[Jacee]

This article tells about the BSOD error Stop error message in Windows 7 or Windows Server 2008 R2: "Stop error code 0x0000007E (SYSTEM_THREAD_EXCEPTION_NOT_HANDLED)" or "Stop error code 0x00000050 (PAGE_FAULT_IN_NONPAGED_AREA)"

I have no idea what "vbabosec.sys" is

vba: Visual Basic for Applications - Wikipedia, the free encyclopedia

Possibly malware

 

[karlsnooks]

Dont run two anti virus together at the same time.

If you are in need of an AV then install the best, MSE, Microsoft Security Essentials. Link in my signature. MSE gives you total protection and is used and recommended by Paul Thurott and Fred Lange (if you are familar with those names) besides being used by the majority of the people answering question here.

 

[tareknaj]

There were timestamp errors on Klif Mini-Filter fre_wnet_x86 (Kaspersky) while debugging, and it might indicate a problem with the current installation of Kaspersky Anti-Virus.

You are right HoneycombAG because without running Kaspersky Anti-Virus my Windows don't show the Blue Screen anymore so I will reinstall a fresh copy .

Thanks a lot everyone for the help .
Tarek

 

[karlsnooks]

With Kaspersky, very important is to have the very latest version and first see if your system works correctly with all of their default settings BEFORE changing any of the defaults.

 

[tareknaj]

After re-installing Kaspersky I am still getting BSOD :[

 

[tareknaj]

An unknown driver causing BSOD

This driver with Kaspersky running is causing a BSOD, the strange thing is that it's a file system driver in the kernel and when I verify this unsigned driver with Driver Verifier my windows won't boot anymore.

 

[tareknaj]

Finally Solved after installing MSE (Microsoft Security Essentials) and that detects vbabosec.sys as a Malware ( which Kaspersky didn't :S ) so I am sticking to this free antivirus

 

[richc46]

Im sorry that you have malware, but glad that you solved the problem.
In addition download the free malwarebytes and scan with that once a week.