Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

BSOD


  • Please log in to reply
52 replies to this topic

#1 miztrniceguy

miztrniceguy

  • Members
  • 201 posts
  • OFFLINE
  •  
  • Local time:07:52 PM

Posted 08 August 2012 - 05:14 PM

I have been getting a BSOD every Sat for 3 weeks in a row. Computer not in use at the time, gone to work. Come home to find BSOD. I have attached a picture of it. Says caused by MBAMSWISSARMY.SYS but so far MBAM support has not determined the problem. MBAM scans fine both full and quick and no issue with real-time monitoring. They had me run an event viewer and didn't see anything. Then they had me do a complete uninstall and reinstall of MBAM which I did today, then left for 3 hours and came back to same BSOD, which is the first time it happened on a day other than Sat.

I have had no hardware changes, mobo, cpu and ram are about 3 yrs old.

Win XP Pro sp3 fully updated. Intel DG35EC Motherboard, Intel Core 2 Duo E8400 Processor,4gb Corsair dual channel pc6400 ddr2

Any suggestions?

Asus P8Z77-V motherboard, Intel i5-3570K unlocked Quad Core cpu, 16GB Corsair Vengeance 1866Mhz ram
CoolerMaster Hyper 212 EVO cpu cooler, Samsung 128GB SSD with Win7 Pro, WD 500GB drive for data
Asus DVD writer, Corsair 600W PSU

 


BC AdBot (Login to Remove)

 


#2 noknojon

noknojon

  • Banned
  • 10,871 posts
  • OFFLINE
  •  
  • Gender:Not Telling
  • Local time:11:52 AM

Posted 08 August 2012 - 11:22 PM

Follow these procedures in the order as outlined below.

First - Uninstall Malwarebytes Anti-Malware from Control Panel > Add / Remove

•Download and run this utility. mbam-clean.exe

•It will ask to restart your computer (please allow it to).

Do Not Reinstall MBAM at This Time - Save these following directions and wait for another BSOD, and report it here - Directions are below -

Only continue if told it is OK and not before -
•After the computer restarts, Temporarily disable your Anti-Virus and install the latest version of Malwarebytes' Anti-Malware from HERE
Note:If using the paid version you will need to reactivate the program using the license you were sent
Launch the program and set the Protection and activation. Then go to the UPDATE tab if not done during installation and check for updates.
Restart the computer again and verify that MBAM is in the task tray. Now setup any file exclusions as may be required in your Anti-Virus/Internet-Security/Firewall applications and restart your Anti-Virus/Internet-Security applications.

Once your computer is stable enough follow this >> Please download BlueScreenView (in zip file) to your Desktop
  • Extract (right-click > Extract all) the contents of bluescreenview.zip.
  • Double-click on the Extracted Folder
  • Double-click on the BlueScreenView.exe file, to run the program. (No installation is required.)
  • When scanning is done (usually complete by the time the interface appears), go ...
  • Edit > Select All
  • File > Save Selected Items, and save the report to your Desktop as BSOD.txt.
  • Close the BlueScreenView window... ... ...
  • Open BSOD.txt using Notepad and go ... .... ..
  • Edit > Select All
  • Edit > Copy, and then paste the entire contents of the text file into your next reply.

Thank You

Edited by noknojon, 08 August 2012 - 11:27 PM.


#3 miztrniceguy

miztrniceguy
  • Topic Starter

  • Members
  • 201 posts
  • OFFLINE
  •  
  • Local time:07:52 PM

Posted 09 August 2012 - 07:16 AM

I have uninstalled MBAM and will wait to see I get a BSOD

Asus P8Z77-V motherboard, Intel i5-3570K unlocked Quad Core cpu, 16GB Corsair Vengeance 1866Mhz ram
CoolerMaster Hyper 212 EVO cpu cooler, Samsung 128GB SSD with Win7 Pro, WD 500GB drive for data
Asus DVD writer, Corsair 600W PSU

 


#4 miztrniceguy

miztrniceguy
  • Topic Starter

  • Members
  • 201 posts
  • OFFLINE
  •  
  • Local time:07:52 PM

Posted 11 August 2012 - 11:32 PM

So, I did not come home to find a BSOD like I have the past 3 saturdays in a row. Which makes since, since I uninstalled MBAM and the BSOD is being caused by it. However, I want my MBAM and why am I suddenly getting this after so long with the program? I have not made any hardware changes. Any Ideas?

Asus P8Z77-V motherboard, Intel i5-3570K unlocked Quad Core cpu, 16GB Corsair Vengeance 1866Mhz ram
CoolerMaster Hyper 212 EVO cpu cooler, Samsung 128GB SSD with Win7 Pro, WD 500GB drive for data
Asus DVD writer, Corsair 600W PSU

 


#5 noknojon

noknojon

  • Banned
  • 10,871 posts
  • OFFLINE
  •  
  • Gender:Not Telling
  • Local time:11:52 AM

Posted 12 August 2012 - 05:07 AM

Hi -
Ok, now try the reinstall instructions that I have left after the words >>> ""Only continue if told it is OK and not before"" -

Disable your Antivirus first, then start to do the reinstall of Malwarebytes -

You can use the "Random" install link I have left or use Malwarebytes from File Hippo
Make sure that you download the program to Desktop and install, then Update from there -

Please let me know what Antivirus program that you use, and I will check that there is no problem there also -

Thanks -

#6 miztrniceguy

miztrniceguy
  • Topic Starter

  • Members
  • 201 posts
  • OFFLINE
  •  
  • Local time:07:52 PM

Posted 12 August 2012 - 10:04 AM

I use Microsoft Security Essentials for antivirus. Proceeding with your directions.

Asus P8Z77-V motherboard, Intel i5-3570K unlocked Quad Core cpu, 16GB Corsair Vengeance 1866Mhz ram
CoolerMaster Hyper 212 EVO cpu cooler, Samsung 128GB SSD with Win7 Pro, WD 500GB drive for data
Asus DVD writer, Corsair 600W PSU

 


#7 miztrniceguy

miztrniceguy
  • Topic Starter

  • Members
  • 201 posts
  • OFFLINE
  •  
  • Local time:07:52 PM

Posted 12 August 2012 - 10:29 AM

here you go!

==================================================
Dump File : Mini080812-01.dmp
Crash Time : 8/8/2012 12:11:10 PM
Bug Check String : PAGE_FAULT_IN_NONPAGED_AREA
Bug Check Code : 0x10000050
Parameter 1 : 0xee9eb010
Parameter 2 : 0x00000000
Parameter 3 : 0xb121fe9a
Parameter 4 : 0x00000001
Caused By Driver : mbamswissarmy.sys
Caused By Address : mbamswissarmy.sys+1e9a
File Description : Malwarebytes' Anti-Malware
Product Name : Malwarebytes' Anti-Malware
Company : Malwarebytes Corporation
File Version : 1.60.0.0000 built by: WinDDK
Processor : 32-bit
Crash Address : mbamswissarmy.sys+1e9a
Stack Address 1 : mbamswissarmy.sys+1032
Stack Address 2 : mbamswissarmy.sys+13b0
Stack Address 3 : mbamswissarmy.sys+be4
Computer Name :
Full Path : C:\WINDOWS\Minidump\Mini080812-01.dmp
Processors Count : 2
Major Version : 15
Minor Version : 2600
Dump File Size : 106,496
==================================================

==================================================
Dump File : Mini080512-01.dmp
Crash Time : 8/5/2012 10:06:25 AM
Bug Check String : PAGE_FAULT_IN_NONPAGED_AREA
Bug Check Code : 0x10000050
Parameter 1 : 0xeee65010
Parameter 2 : 0x00000000
Parameter 3 : 0xb2b90e9a
Parameter 4 : 0x00000001
Caused By Driver : mbamswissarmy.sys
Caused By Address : mbamswissarmy.sys+1e9a
File Description : Malwarebytes' Anti-Malware
Product Name : Malwarebytes' Anti-Malware
Company : Malwarebytes Corporation
File Version : 1.60.0.0000 built by: WinDDK
Processor : 32-bit
Crash Address : mbamswissarmy.sys+1e9a
Stack Address 1 : mbamswissarmy.sys+1032
Stack Address 2 : mbamswissarmy.sys+13b0
Stack Address 3 : mbamswissarmy.sys+be4
Computer Name :
Full Path : C:\WINDOWS\Minidump\Mini080512-01.dmp
Processors Count : 2
Major Version : 15
Minor Version : 2600
Dump File Size : 106,496
==================================================

==================================================
Dump File : Mini080212-01.dmp
Crash Time : 8/2/2012 9:54:26 AM
Bug Check String : PAGE_FAULT_IN_NONPAGED_AREA
Bug Check Code : 0x10000050
Parameter 1 : 0xea161008
Parameter 2 : 0x00000000
Parameter 3 : 0xb00cae9a
Parameter 4 : 0x00000001
Caused By Driver : mbamswissarmy.sys
Caused By Address : mbamswissarmy.sys+1e9a
File Description : Malwarebytes' Anti-Malware
Product Name : Malwarebytes' Anti-Malware
Company : Malwarebytes Corporation
File Version : 1.60.0.0000 built by: WinDDK
Processor : 32-bit
Crash Address : mbamswissarmy.sys+1e9a
Stack Address 1 : mbamswissarmy.sys+1032
Stack Address 2 : mbamswissarmy.sys+1350
Stack Address 3 : mbamswissarmy.sys+a82
Computer Name :
Full Path : C:\WINDOWS\Minidump\Mini080212-01.dmp
Processors Count : 2
Major Version : 15
Minor Version : 2600
Dump File Size : 106,496
==================================================

==================================================
Dump File : Mini072712-01.dmp
Crash Time : 7/27/2012 10:33:55 PM
Bug Check String : PAGE_FAULT_IN_NONPAGED_AREA
Bug Check Code : 0x10000050
Parameter 1 : 0xeb867010
Parameter 2 : 0x00000000
Parameter 3 : 0xb83a9e9a
Parameter 4 : 0x00000001
Caused By Driver : mbamswissarmy.sys
Caused By Address : mbamswissarmy.sys+1e9a
File Description : Malwarebytes' Anti-Malware
Product Name : Malwarebytes' Anti-Malware
Company : Malwarebytes Corporation
File Version : 1.60.0.0000 built by: WinDDK
Processor : 32-bit
Crash Address : mbamswissarmy.sys+1e9a
Stack Address 1 : mbamswissarmy.sys+1032
Stack Address 2 : mbamswissarmy.sys+13b0
Stack Address 3 : mbamswissarmy.sys+be4
Computer Name :
Full Path : C:\WINDOWS\Minidump\Mini072712-01.dmp
Processors Count : 2
Major Version : 15
Minor Version : 2600
Dump File Size : 106,496
==================================================

==================================================
Dump File : Mini072112-02.dmp
Crash Time : 7/21/2012 10:36:47 PM
Bug Check String : PAGE_FAULT_IN_NONPAGED_AREA
Bug Check Code : 0x10000050
Parameter 1 : 0xe9278010
Parameter 2 : 0x00000000
Parameter 3 : 0xb83b9e9a
Parameter 4 : 0x00000001
Caused By Driver : mbamswissarmy.sys
Caused By Address : mbamswissarmy.sys+1e9a
File Description : Malwarebytes' Anti-Malware
Product Name : Malwarebytes' Anti-Malware
Company : Malwarebytes Corporation
File Version : 1.60.0.0000 built by: WinDDK
Processor : 32-bit
Crash Address : mbamswissarmy.sys+1e9a
Stack Address 1 : mbamswissarmy.sys+1032
Stack Address 2 : mbamswissarmy.sys+1350
Stack Address 3 : mbamswissarmy.sys+a82
Computer Name :
Full Path : C:\WINDOWS\Minidump\Mini072112-02.dmp
Processors Count : 2
Major Version : 15
Minor Version : 2600
Dump File Size : 106,496
==================================================

==================================================
Dump File : Mini072112-01.dmp
Crash Time : 7/21/2012 9:54:39 AM
Bug Check String : PAGE_FAULT_IN_NONPAGED_AREA
Bug Check Code : 0x10000050
Parameter 1 : 0xe5cb5010
Parameter 2 : 0x00000000
Parameter 3 : 0xaf2bae9a
Parameter 4 : 0x00000001
Caused By Driver : mbamswissarmy.sys
Caused By Address : mbamswissarmy.sys+1e9a
File Description : Malwarebytes' Anti-Malware
Product Name : Malwarebytes' Anti-Malware
Company : Malwarebytes Corporation
File Version : 1.60.0.0000 built by: WinDDK
Processor : 32-bit
Crash Address : mbamswissarmy.sys+1e9a
Stack Address 1 : mbamswissarmy.sys+1032
Stack Address 2 : mbamswissarmy.sys+1350
Stack Address 3 : mbamswissarmy.sys+a82
Computer Name :
Full Path : C:\WINDOWS\Minidump\Mini072112-01.dmp
Processors Count : 2
Major Version : 15
Minor Version : 2600
Dump File Size : 106,496
==================================================

==================================================
Dump File : Mini072012-01.dmp
Crash Time : 7/20/2012 10:44:32 PM
Bug Check String : PAGE_FAULT_IN_NONPAGED_AREA
Bug Check Code : 0x10000050
Parameter 1 : 0xecfd3010
Parameter 2 : 0x00000000
Parameter 3 : 0xb83a1e9a
Parameter 4 : 0x00000001
Caused By Driver : mbamswissarmy.sys
Caused By Address : mbamswissarmy.sys+1e9a
File Description : Malwarebytes' Anti-Malware
Product Name : Malwarebytes' Anti-Malware
Company : Malwarebytes Corporation
File Version : 1.60.0.0000 built by: WinDDK
Processor : 32-bit
Crash Address : mbamswissarmy.sys+1e9a
Stack Address 1 : mbamswissarmy.sys+1032
Stack Address 2 : mbamswissarmy.sys+1350
Stack Address 3 : mbamswissarmy.sys+a82
Computer Name :
Full Path : C:\WINDOWS\Minidump\Mini072012-01.dmp
Processors Count : 2
Major Version : 15
Minor Version : 2600
Dump File Size : 106,496
==================================================

==================================================
Dump File : Mini071912-01.dmp
Crash Time : 7/19/2012 1:18:07 PM
Bug Check String : PAGE_FAULT_IN_NONPAGED_AREA
Bug Check Code : 0x10000050
Parameter 1 : 0xe6348010
Parameter 2 : 0x00000000
Parameter 3 : 0xb30b1e9a
Parameter 4 : 0x00000001
Caused By Driver : mbamswissarmy.sys
Caused By Address : mbamswissarmy.sys+1e9a
File Description : Malwarebytes' Anti-Malware
Product Name : Malwarebytes' Anti-Malware
Company : Malwarebytes Corporation
File Version : 1.60.0.0000 built by: WinDDK
Processor : 32-bit
Crash Address : mbamswissarmy.sys+1e9a
Stack Address 1 : mbamswissarmy.sys+1032
Stack Address 2 : mbamswissarmy.sys+13b0
Stack Address 3 : mbamswissarmy.sys+be4
Computer Name :
Full Path : C:\WINDOWS\Minidump\Mini071912-01.dmp
Processors Count : 2
Major Version : 15
Minor Version : 2600
Dump File Size : 106,496
==================================================

==================================================
Dump File : Mini071812-01.dmp
Crash Time : 7/18/2012 8:23:05 AM
Bug Check String : PAGE_FAULT_IN_NONPAGED_AREA
Bug Check Code : 0x10000050
Parameter 1 : 0xe4958008
Parameter 2 : 0x00000000
Parameter 3 : 0xb1154e9a
Parameter 4 : 0x00000001
Caused By Driver : mbamswissarmy.sys
Caused By Address : mbamswissarmy.sys+1e9a
File Description : Malwarebytes' Anti-Malware
Product Name : Malwarebytes' Anti-Malware
Company : Malwarebytes Corporation
File Version : 1.60.0.0000 built by: WinDDK
Processor : 32-bit
Crash Address : mbamswissarmy.sys+1e9a
Stack Address 1 : mbamswissarmy.sys+1032
Stack Address 2 : mbamswissarmy.sys+1350
Stack Address 3 : mbamswissarmy.sys+a82
Computer Name :
Full Path : C:\WINDOWS\Minidump\Mini071812-01.dmp
Processors Count : 2
Major Version : 15
Minor Version : 2600
Dump File Size : 106,496
==================================================

Asus P8Z77-V motherboard, Intel i5-3570K unlocked Quad Core cpu, 16GB Corsair Vengeance 1866Mhz ram
CoolerMaster Hyper 212 EVO cpu cooler, Samsung 128GB SSD with Win7 Pro, WD 500GB drive for data
Asus DVD writer, Corsair 600W PSU

 


#8 miztrniceguy

miztrniceguy
  • Topic Starter

  • Members
  • 201 posts
  • OFFLINE
  •  
  • Local time:07:52 PM

Posted 16 August 2012 - 01:22 PM

Any ideas?

Asus P8Z77-V motherboard, Intel i5-3570K unlocked Quad Core cpu, 16GB Corsair Vengeance 1866Mhz ram
CoolerMaster Hyper 212 EVO cpu cooler, Samsung 128GB SSD with Win7 Pro, WD 500GB drive for data
Asus DVD writer, Corsair 600W PSU

 


#9 hamluis

hamluis

    Moderator


  • Moderator
  • 55,742 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Killeen, TX
  • Local time:08:52 PM

Posted 16 August 2012 - 02:08 PM

Uninstall Malwarebytes from your system...then run a complete scan of your system using your installed AV program.

Loui8

#10 miztrniceguy

miztrniceguy
  • Topic Starter

  • Members
  • 201 posts
  • OFFLINE
  •  
  • Local time:07:52 PM

Posted 16 August 2012 - 04:58 PM

uninstalled, scanning now with MSE

Asus P8Z77-V motherboard, Intel i5-3570K unlocked Quad Core cpu, 16GB Corsair Vengeance 1866Mhz ram
CoolerMaster Hyper 212 EVO cpu cooler, Samsung 128GB SSD with Win7 Pro, WD 500GB drive for data
Asus DVD writer, Corsair 600W PSU

 


#11 noknojon

noknojon

  • Banned
  • 10,871 posts
  • OFFLINE
  •  
  • Gender:Not Telling
  • Local time:11:52 AM

Posted 16 August 2012 - 05:25 PM

Hi -
Just asking the Malwarebytes developers for ideas at this time -
Make sure you also use the MBAMclean.exe tool I listed anove after you uninstall from Add / Remove -

Thanks -

#12 miztrniceguy

miztrniceguy
  • Topic Starter

  • Members
  • 201 posts
  • OFFLINE
  •  
  • Local time:07:52 PM

Posted 16 August 2012 - 05:40 PM

I did use the tool. Tom Mercado from MBAM has been looking at it also. So far nothing has worked. I don't get BSOD when it is uninstalled.

Asus P8Z77-V motherboard, Intel i5-3570K unlocked Quad Core cpu, 16GB Corsair Vengeance 1866Mhz ram
CoolerMaster Hyper 212 EVO cpu cooler, Samsung 128GB SSD with Win7 Pro, WD 500GB drive for data
Asus DVD writer, Corsair 600W PSU

 


#13 noknojon

noknojon

  • Banned
  • 10,871 posts
  • OFFLINE
  •  
  • Gender:Not Telling
  • Local time:11:52 AM

Posted 16 August 2012 - 05:45 PM

Waiting on an answer now -
In the mean while, please read Sectin I of the MBAM FAQ area that deals with MSE and MBAM together.
http://forums.malwarebytes.org/index.php?act=findpost&pid=181018
EDIT - In your case also add mbamswissarmy.sys to excluded services -
Tom should be of great help as he was an early developer of the progran -

It is an odd case, as these 2 usually work better than most combinations of Antivirus and Antimalware.
I have run this same set up on 2 computers without any problems for years -

Will post back when I can -
Thanks for staying with us -

Edited by noknojon, 16 August 2012 - 05:50 PM.


#14 noknojon

noknojon

  • Banned
  • 10,871 posts
  • OFFLINE
  •  
  • Gender:Not Telling
  • Local time:11:52 AM

Posted 16 August 2012 - 06:39 PM

Hi, just got back from talking to another support person at Malwarebytes who read your post here - :(
QUOTE -
There are no conflicts between MBAM and MSE. Even without any exclusions set. We've tested this thoroughly. The last time there was a conflict was back when MSE was version 1.x, it's been version 2.x (or later) for over a year now so I'm sure MSE isn't the problem.

Additionally, mbamswissarmy.sys should only exist during a scan, so if you leave then comes home to find such a BSOD, it's likely happening during a scheduled scan, otherwise the file would not exist.

Now, as for the actual BSOD error PAGE_FAULT_IN_NONPAGED_AREA. That usually means there's a hardware problem, either a failing HDD or bad RAM, but HDD is most likely. A corrupt sector on the hard drive, corrupt file on the hard drive, or just a failing hard drive could all cause this type of error, and our scanner (thanks to mbamswissarmy.sys) has a tendency of exposing such hardware problems because of its low level disk access (DDA, i.e. Direct Disk Access) which is used for checking for rootkits.

Ask how old the hard drive is and if it makes any noise at all.

I'd also recommend having them back up any important data to an alternate location as soon as possible, because if I'm right, their hard drive is on its way out.

Publish a Snapshot using Speccy =<<Follow These Directions



#15 miztrniceguy

miztrniceguy
  • Topic Starter

  • Members
  • 201 posts
  • OFFLINE
  •  
  • Local time:07:52 PM

Posted 16 August 2012 - 07:04 PM

here's speccy http://speccy.piriform.com/results/lq21rqzQmVSK4arYuQWq6cz

as far as the HD's there are 2 160 gb from 2008 and 2009 and a 500gb from 2011. I hav checked them using WD Data Lifeguard tool and also run CHKDSK on them with no errors.

Asus P8Z77-V motherboard, Intel i5-3570K unlocked Quad Core cpu, 16GB Corsair Vengeance 1866Mhz ram
CoolerMaster Hyper 212 EVO cpu cooler, Samsung 128GB SSD with Win7 Pro, WD 500GB drive for data
Asus DVD writer, Corsair 600W PSU

 





0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users