BSOD Page fault in nonpaged area

retghy

New Member
Reaction score
0
Hello all.

After several days trying to figure out what is happening I come here to ask for advice.

I have this computer from a client that is getting a recurrent blue screen "Page fault in non paged area" with a stop 0x00000050.

The computer was heavily infected with several virus including some variants of Virut (attack .exe files), It affected almost every system related .exe file making windows very unstable, according to the well known anti-virus makers, KAV, Avira, Avast, there is no effective way to disinfect a .exe file corrupted by virut, so after using a rescue Anti-virus CD the best choice was to delete compromised files.

After 2 runs of the anti-virus CD's (kav,avira,bitdefender) everything came out clean, of course many vital system files were deleted and windows was unable to load, I made a windows repair using the WinXP CD, and the system was again operative and running but the BSOD was again there with the same error.

I used several softwares to double and triple check the absence of any virus, SuperAntispyware, Malwarebytes' Anti-Malware, Anti root kits programs, Un-hackme, prevx, etc... everything was clean.

After reading some about that error, all the comments were very generic, seems like this can be caused by many reasons (defective ram, corrupted third party driver, even a virus according to Microsoft support pages).

I also tested the RAM memory using memtest86 under DOS, no errors (it has a single 1GB card).

Made several tests to the hard drive, no surface errors, no bad sectors no file system errors.

The client had everything backed up so I opted to do a full system reinstall to be completely sure that no virus was still there (even after all the scans).

That didn't help either, the same error after windows boot completely.

The PC is an old AMD 3000 with a MSI Motherboard K8N, 1GB RAM single card, 80GB HDD.

Also tested with another PSU, same problem.

Do you have any other test/advice in this matter?

I tried to be the most specific as possible, but I might have some limitation because English is not my native language.

Thanks in advanced.
 
It's very rare, but maybe the CPU is damaged - since you reinstalled, it rules out any software culprits (unless the same drivers are installed)

I can try looking at the minidumps for you, if you'd like. I've created a program available here, that automatically sends me the minidumps.
 
The client had everything backed up so I opted to do a full system reinstall to be completely sure that no virus was still there (even after all the scans).

First off, your English is excellent! (I wish I was fluent in another language).

Since you have checked the drive and reinstalled the OS, I have to say that you have narrowed it down to the component level. I think that if you can reproduce the error while using a boot disk such as Hiren's, you can then be sure it is hardware related and eliminate the hard drive as a culprit. There are rare infections which will infect BIOS. I don't know what the behaviors are with that infection but since you are determined to fix this one, I would flash the bios as well as any of the MB chips that you can get flashes for.

I would also check the CPU.

(Yesterday there was a thread about which processors we keep handy for these types of situations. Note to Jim: collect processors.)

(making note of minidump reader as well)
 
Kaspersky tells me that your progs is infected with a Trojan even before download...

Its a false positive, its a packaged AutoIt script, completely harmless.
You could upload the minidumps to the forum or send them to support [at] itworksonline [dot] net [dot] au and i'll take a look at them.

(making note of minidump reader as well)
:) It's not a minidump reader, it's a small program that I made that takes the 5 most recent minidumps and sends them via email to me
 
Boy thats a tough one. To be honest I had a desktop with that issue and when I reinstalled windows it seemed to work, did you do a full format? Maybe try a different hard drive?

Try some different ram?


heres a website with some info
http://msdn.microsoft.com/en-us/library/ms793437.aspx

Hello and thanks all for the responses.

I tried another hard drive, different brand, same capacity, the old one was a 80GB Hitachi, it now has a 80GB Western Digital.

The Hitachi is working fine on a different computer no error so far...

I made the client aware of the problem but he is getting impatience and want his PC back, I don't want to leave it like this at least I want to be sure about the exact problem.

As I said, the ram is working fine, also a friend have a CD with PC-Check software that make several tests in DOS, also a Stress Test and everything seems to be working just fine.

About the minidumps, I hope the client doesn't come today to pick up the PC and I send you the files.

After the nuke and pave as you call it (first time I use the combination of those words :D), the error seemed to dissappear but I was wrong, it just happen some times now during boots, the computer can be all day turned on sitting there in windows desktop with no problem at all, even use Word, Internet explorer and everything fine, but after turning it off and on again eventually you get the error, that is why it is so hard to tell if it is fixed or not now, in fact, I used that pc the day before yesterday with no problem at all, but yesterday I turned it on and again I got the BSOD :-S

Also reinstalled all drivers but being the error not that frequent I'm getting a hard time to tell if it was finally fixed or not.


Thanks again you all for taking the time to reply.
 
Last edited:
i.t-works,

Kaspersky tells me that your progs is infected with a Trojan even before download...

http://www.virustotal.com/analisis/...47d1bfbb0f2aacc6dd9dc67cbaab8dfb53-1253287291

5/41 - Kasptersky doesn't report it as a virus on virus total.

I've noticed that Malwarebytes will flag AutoIt scripts also. I told them about it but the guy I talked to acted like a complete idiot. Said they can't make a definition for my specific AutoIt scripts, couldn't explain to him that more than just my scripts were affected by it.
 
Last edited:
It could also be the drive controller. Try an add on SATA card maybe.
Hmm..the drive is IDE. Although there is IDE add on cards too, here it's a little hard to find them... I live in Venezuela.


This is a long shot but try different cables for the hard drive...

I did that before posting :(

The only things I haven't tested because I don't have replacement are the Mother Board and processor. All test made to those were software based.

I have a feeling that it is related to network card integrated in the mainboard.

Anyway, thank you all for the valuable inputs.
 
Last edited:
Back
Top