I don't have any restore points left. but I do have Daemon on my 'puter, I'll uninstal that and see what happens from there.
Thanks for the quick reply. I'll keep you posted on the outcome.
Main Topics
Browse All TopicsI was getting the BSOD caused by a driver for Alcohol 120 for a virtual CD drive, so I uninstalled that and everything seemed to work fine.
Now I'm getting the BSOD for something different.
Page_Fault_In_Nonpaged_Are
The BSOD only happens when I try to do a virus scan, or a registry scan or search the registry. I doesn't happen any other time, ie: playing a game, burning a DVD or watching a movie.
I've tried online virus scans and keep getting the same result, BSOD.
I have swapped out my mem sticks with 2 known good ones, but still keep getting the stop during virus scan caused by : ntoskrnl.exe
Found this from Google, ntoskrnl.exe is a critical process in the boot-up cycle of your computer
Is there a way to repair this file ?
This is the latest mini dump:
--------------------------
Microsoft (R) Windows Debugger Version 6.11.0001.404 X86
Copyright (c) Microsoft Corporation. All rights reserved.
Loading Dump File [C:\WINDOWS\Minidump\Mini0
Mini Kernel Dump File: Only registers and stack trace are available
Symbol search path is: SRV*c:\symbols*http://msdl
Executable search path is:
Windows XP Kernel Version 2600 (Service Pack 3) UP Free x86 compatible
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 2600.xpsp_sp3_gdr.090206-1
Machine Name:
Kernel base = 0x804d7000 PsLoadedModuleList = 0x8055b1c0
Debug session time: Thu Aug 13 17:06:32.265 2009 (GMT-6)
System Uptime: 0 days 4:24:02.890
Loading Kernel Symbols
..........................
..........................
.......
Loading User Symbols
Loading unloaded module list
..............
**************************
* *
* Bugcheck Analysis *
* *
**************************
Use !analyze -v to get detailed debugging information.
BugCheck 10000050, {fffefff8, 0, 8054b5b2, 0}
Could not read faulting driver name
Probably caused by : ntoskrnl.exe ( nt!ExFreePoolWithTag+237 )
Followup: MachineOwner
---------
kd> !analyze -v
**************************
* *
* Bugcheck Analysis *
* *
**************************
PAGE_FAULT_IN_NONPAGED_ARE
Invalid system memory was referenced. This cannot be protected by try-except,
it must be protected by a Probe. Typically the address is just plain bad or it
is pointing at freed memory.
Arguments:
Arg1: fffefff8, memory referenced.
Arg2: 00000000, value 0 = read operation, 1 = write operation.
Arg3: 8054b5b2, If non-zero, the instruction address which referenced the bad memory
address.
Arg4: 00000000, (reserved)
Debugging Details:
------------------
Could not read faulting driver name
READ_ADDRESS: fffefff8
FAULTING_IP:
nt!ExFreePoolWithTag+237
8054b5b2 668b4efa mov cx,word ptr [esi-6]
MM_INTERNAL_CODE: 0
CUSTOMER_CRASH_COUNT: 13
DEFAULT_BUCKET_ID: COMMON_SYSTEM_FAULT
BUGCHECK_STR: 0x50
PROCESS_NAME: Regcleaner.exe
LAST_CONTROL_TRANSFER: from 8058b724 to 8054b5b2
STACK_TEXT:
b7fffc24 8058b724 fffefffe 00000000 e10475f8 nt!ExFreePoolWithTag+0x237
b7fffc40 8058c5f6 e3f4e148 e10475f8 e1029614 nt!CmpCleanUpKcbValueCache
b7fffc54 805882a8 e3f4e148 e18306b8 80568ece nt!CmpCleanUpKcbCacheWithL
b7fffc60 80568ece b7fffc80 80568d18 e10475f8 nt!CmpGetDelayedCloseIndex
b7fffc68 80568d18 e10475f8 e10475f8 00000001 nt!CmpAddToDelayedClose+0x
b7fffc80 80568d34 e10475f8 b7fffca4 8056a929 nt!CmpDereferenceKeyContro
b7fffc8c 8056a929 e10475f8 00000000 e127a418 nt!CmpDereferenceKeyContro
b7fffca4 80564777 e127a430 e127a418 00000000 nt!CmpDeleteKeyObject+0x92
b7fffcc0 804e36d5 e127a430 00000000 000001a4 nt!ObpRemoveObjectRoutine+
b7fffce4 80567847 8600baf8 e1971ea8 861ed8b0 nt!ObfDereferenceObject+0x
b7fffcfc 805678b0 e1971ea8 e127a430 000001a4 nt!ObpCloseHandleTableEntr
b7fffd44 805678fa 000001a4 00000001 00000000 nt!ObpCloseHandle+0x87
b7fffd58 804de7ec 000001a4 018dfb6c 7c90e514 nt!NtClose+0x1d
b7fffd58 7c90e514 000001a4 018dfb6c 7c90e514 nt!KiFastCallEntry+0xf8
WARNING: Frame IP not in any known module. Following frames may be wrong.
018dfb6c 00000000 00000000 00000000 00000000 0x7c90e514
STACK_COMMAND: kb
FOLLOWUP_IP:
nt!ExFreePoolWithTag+237
8054b5b2 668b4efa mov cx,word ptr [esi-6]
SYMBOL_STACK_INDEX: 0
SYMBOL_NAME: nt!ExFreePoolWithTag+237
FOLLOWUP_NAME: MachineOwner
MODULE_NAME: nt
IMAGE_NAME: ntoskrnl.exe
DEBUG_FLR_IMAGE_TIMESTAMP:
FAILURE_BUCKET_ID: 0x50_nt!ExFreePoolWithTag+
BUCKET_ID: 0x50_nt!ExFreePoolWithTag+
Followup: MachineOwner
---------
If I can't get this repaired, I'll just re-install the OS.
Thanks in advance.
This Question has been solved and asker verified All Experts Exchange premium technology solutions are available to subscription members.
Experts Exchange has been collecting answers to technology questions since 1996…3 million and counting! If you have a question, chances are we already have your answer.
If you can't find the exact answer you're looking for, ask our exclusive community of 50,000 experts. You’ll get a personalized answer from a trusted professional.
Thousands of free tech tips, tricks, how-to’s and tutorials are available in our peer reviewed articles section. See for yourself how smart our experts are, no login required.
Access the answers to your technology questions today.
30-day free trial. Register in 60 seconds.
Members of the expert community talk about why the experience at Experts Exchange is different than what you will find anywhere else.

Try it out and discover for yourself.
30-day free trial. Register in 60 seconds.
Join the community of experts here and help other tech pros by answering question in your area of expertise. You can earn FREE access to all Experts Exchange's premium features and resources.
>> 0x00000050: PAGE_FAULT_IN_NONPAGED_ARE
Could be for a number of reasons, as listed here>
Requested data was not in memory. An invalid system memory address was referenced. Defective memory (including main memory, L2 RAM cache, video RAM) or incompatible software (including remote control and antivirus software) might cause this Stop message, as may other hardware problems (e.g., incorrect SCSI termination or a flawed PCI card).
Details> http://aumha.org/a/stop.ht
Have you tried (temporarily) scanning with a different anti-virus scanner?
There is a way to repair the ntoskrnl.exe file as shown here>
"How to replace corrupted ntoskrnl.exe file":
http://www.experts-exchang
This may be the Haxdoor virus:
http://support.microsoft.c
You've tried online virus scans but have you checked for Malware?
If in any doubt, try downloading then updating Malwarebytes' Anti-Malware:
http://www.malwarebytes.or
When updated, reboot into Safe Mode by selecting F8 at bootup & run a scan.
Tutorial available, if you require >
http://www.bleepingcompute
If you cannot run MBAM, try downloading a new MBAM and rename it BEFORE saving it to your desktop, then try again.
If still unresolved after following all above comments, you could run ComboFix.
Details to follow, IF required ...
Business Accounts
Answer for Membership
by: asawatzkiPosted on 2009-08-14 at 06:11:26ID: 25097556
I would try doing a system restore to a date before Alcohol was installed. There are probably hidden non-plug and play system drivers (like sptd.sys) that are hanging around. I've had similar problems with Daemon tools, another virtual CD drive software. You could try to troubleshoot it, but system restore is usually the easiest way to go. Here's some instructions:
indowsxp/u sing/helpa ndsupport/ learnmore/ systemrest ore.mspx
http://www.microsoft.com/w