Question

Page fault in non paged area obn48d7.sys

Asked by: reckon

A Dell Dimension 4700 running Windows XP started out booting to the choose-user screen, then when it tried to load a user profile, it blue-screened to STOP: 0x000000c5. Last Known didn't work. No luck getting into safe mode either.

Thinking it was a bad driver or update, I used an Ultimate Boot disk to force a system restore--there was only one point available, but that didn't do the trick (so I restored it to the original). I ran hardware diagnostics, and all passed. Since I also suspected viruses, I pulled the drive, slaved it to another machine and scanned for malware, which it found and removed. Also did chkdsk, fixmbr, and fixboot. Still the same BSOD.

I pulled the modem card, unplugged the CD/DVD drives, and swapped out one of the two memory modules, and when it booted up, it went directly from the XP splash screen to BSOD, this time:

PAGE_FAULT_IN_NONPAGED AREA  obn48d7.sys
STOP: 0x00000050

I replaced everything the way it was, and still the same message. Search engines turn up nothing on obn48d7.sys, so I'm left scratching my head.

I'm running memory tests now.

How can I get this machine up and running?

(I'll monitor this question closely and close it out promptly as soon as the problem is resolved.)

This Question has been solved and asker verified All Experts Exchange premium technology solutions are available to subscription members.

Subscribe now for full access to Experts Exchange and get

Instant Access to this Solution

  • Plus...
  • 30 Day FREE access, no risk, no obligation
  • Collaborate with the world's top tech experts
  • Unlimited access to our exclusive solution database
  • Never be left without tech help again

Subscribe Now

Asked On
2009-09-28 at 14:08:46ID24768369
Tags

page fault

,

stop 50

,

XP

,

BSOD

Topics

Windows XP Operating System

,

Computer Memory (RAM)

,

Drivers

Participating Experts
5
Points
500
Comments
32

Trusted by hundreds of thousands everyday for fast, accurate and reliable tech support.

  • "The time we save is the biggest benefit of Experts Exchange to Warner Bros. What could take multiple guys 2 hours or more each to find is accessed in around 15 minutes on Experts Exchange." Mike Kapnisakis, Warner Bros.
  • "Our team likes having a resource that is more secure than just using Google and most experts using this service really know their stuff. It's nice to look here first versus using Google." Dayna Sellner, Lockheed Martin
  • "Anytime that I've been stumped with a problem, 9 out of 10 times Experts Exchange has either the accepted solution or an open discussion of the potential solution to the problem." Kenny Red, eBay Inc.

See what Experts Exchange can do for you.

Got a question?

We've got the answer.

Experts Exchange has been collecting answers to technology questions since 1996…3 million and counting! If you have a question, chances are we already have your answer.

Screenshot of Experts Exchange Knowledgebase

Need individual assistance?

Our experts are ready to help.

If you can't find the exact answer you're looking for, ask our exclusive community of 50,000 experts. You’ll get a personalized answer from a trusted professional.

Screenshot of Experts Exchange Knowledgebase

Want to learn from the best?

Read articles from industry experts.

Thousands of free tech tips, tricks, how-to’s and tutorials are available in our peer reviewed articles section. See for yourself how smart our experts are, no login required.

Screenshot of an Article

Working on a long term project?

Store your work and research.

Save solutions to your questions, answers you’ve discovered through searching plus helpful articles in your personal knowledgebase for easy future access.

Screenshot of Experts Exchange Knowledgebase

Access the answers to your technology questions today.

Subscribe Now

30-day free trial. Register in 60 seconds.

What Makes Experts Exchange Unique?

Members of the expert community talk about why the experience at Experts Exchange is different than what you will find anywhere else.

Trusted by the world's most respected brands.

image of each brand's logo

Faithfully serving IT professionals since 1996.

Experts Exchange Logo

Try it out and discover for yourself.

Subscribe Now

30-day free trial. Register in 60 seconds.

Related Solutions

  1. VIRUS ????
    Hello everyone... I have a Windows XP system that I am working on that I am pretty sure has a virus... These are the symptoms Cannot access the control panel Clicking on internet explorer does nothing Cannot access My network Places In command prompt I am getting an ...
  2. Virus or Malware Issue on XP PRO
    I am running on XP Pro Service Pack 2. I have AVG, AdAware SE, and Spybot. I am having some issues with my pc. Periodically my monitor will flicker and I may be running a program and it will freeze. I have run all three virus, spyware, and malware programs on my pc in normal ...
  3. Virus
    I got a virus on my computer. No other virus program could help me as I had AVG installed. I then tried every other program out there and got bitdefender who had record of this new virus and tried to remove it. It is now containing the virusses but there is aboviously somethi...
  4. Flash runtime error with USB external disk: virus or malwa…
    WHen I connect up my USB external disk to my Thinkpad, the Thinkpad (with uptodate PCCilin) can't detect it from Explorer though a message pops up at the right bottom corner that says "Samsung HD300" detected WHen I connect it up to my Dell Inspiron 6400, takes a ...
  5. Have malware anti-virus 2009
    Hi, Have malware anti-virus 2009. Please advise on removal. Thanks, Joe

Free Tech Articles

  1. WARNING: 5 Reasons why you should NEVER fix a computer for free.
    It is in our nature to love the puzzle. We are obsessed. The lot of us. We love puzzles. We love the challenge. We thrive on finding the answer. We hate disarray. It bothers us deep in our soul. W...
  2. SCCM OSD Basic troubleshooting
    SCCM 2007 OSD is a fantastic way to deploy operating systems, however, like most things SCCM issues can sometimes be difficult to resolve due to the sheer volume of logs to sift through and the dispe...
  3. Migrate Small Business Server 2003 to Exchange 2010 and Windows 2008 R2
    This guide is intended to provide step by step instructions on how to migrate from Small Business Server 2003 to Windows 2008 R2 with Exchange 2010. For this migration to work you will need the fo...
  4. Create a Win7 Gadget
    This article shows you how to create a simple "Gadget" -- a sort of mini-application supported by Windows 7 and Vista. Gadgets can be dropped anywhere on the desktop to provide instant information, ...
  5. Outlook continually prompting for username and password
    There have been a lot of questions recently regarding Outlook prompting for a username and password whilst using Exchange 2007. There are a few reasons why this would happen and I will try to cover t...
  6. Backup Exchange 2010 Information Store using Windows Backup
    There seems to be quite a lot of confusion around the ability to backup Exchange 2010 using the built in Windows Backup feature. This stems from the omission of this feature prior to Exchange 2007 s...

Cloud Class Webinars

  1. Avoiding Bugs in Microsoft Access
    Alison Balter takes and in-depth look at avoiding bugs in Access. In this webinar you will learn about using the immediate window to debug your applications, invoking the debugger, using breakpoints to troubleshoot, stepping through code, setting the next statement to execute, ...
  2. Top 10 Best New Features in Visio 2010
    Scott Helmers gives live demonstrations of the top 10 new features in Visio 2010. This webinar will teach you how to create compelling diagrams by adding shapes to the page with a single click, linking the shapes in a diagram to data in Excel (or SQL Server, or SharePoint), ...
  3. IT Consultant Business Secrets Revealed
    Michael Munger, Experts Exchange tech pro and IT consultant, pulls back the curtain on his very successful businesses and answers question on every IT consultant and business owner should know about. He shares secrets on what he did to solve the 5 most common problems in IT, ...
  4. Disaster Recovery and Business Continuity
    Quest CTO, Mike Billon, gives an overview of the steps involved in building a dunamic disaster recovery plan. Through case studies and an examination of software/hardware tooles for monitoring and testing, you'll gain a better understandin of where you are, where you want ...
  5. Organize Your Visio Diagrams with Containers and Lists
    Scott Helmers uses cross functional flowcharts, wireframe diagrams, data graphic legends and seating charts to teach you: how to ustilize all three new structured diagram components in Visio 2010, the best practices for organizeing shapes in previous version of Visio, how to organize ...
  6. How to Us Objects, Properties, Events and Methods in Microsoft Access
    Alison Dalter gives an in-depbth look at objects, properties, events and methods in Microsoft Access. In this webinar you will learn about using the object browser, referring to objects, working with properties and methods, working with object variables, understanding the ...

Join the Community

Give a Little. Get a Lot.

Join the community of experts here and help other tech pros by answering question in your area of expertise. You can earn FREE access to all Experts Exchange's premium features and resources.

Join the Community

Answers

 

by: houssam_balloutPosted on 2009-09-28 at 14:15:16ID: 25443455

well, it seems  that you do bunch of things

had you try login to safe mode?

 

by: reckonPosted on 2009-09-28 at 14:44:05ID: 25443669

Yes. (See my first paragraph.)

Plus, it passed an extended memory test.

 

by: dbruntonPosted on 2009-09-28 at 16:06:38ID: 25444399

I'd do a search for that file and remove it.  Back it up and put it somewhere and delete the original.  See what happens then.

 

by: reckonPosted on 2009-09-28 at 17:04:29ID: 25444711

dbrunton: That's just what I did while I was waiting for someone to respond. In C:\Windows\system32\drivers the obn48d7.sys file and a folder named DISDN were both dated 9/6/2009. I gave both of them the prefix "old."

Now when the computer boots, the BSOD is a STOP: 0x0000007b (etc.).

I'm going to restore the DISDN and retry. Same BSOD.

Should I actually move it?

 

by: reckonPosted on 2009-09-28 at 18:02:37ID: 25445162

Okay, I moved it, and now I can boot to a desktop with nothing on it but wallpaper. Can bring up Task Manager.

 

by: pankusareenPosted on 2009-09-28 at 19:20:14ID: 25445502

Press Ctrl+Alt+delete to bring task manager got to file->new task (run)->explorer (Press OK)

 

by: pankusareenPosted on 2009-09-28 at 19:55:29ID: 25445650

Also check that shell is set to explorer

Open task manager->new task->regedit
go to: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon

And check that it is set to explorer

 

by: pankusareenPosted on 2009-09-28 at 20:01:07ID: 25445677

when u navigate to on the right side u will see shell double click on it and set it to Explorer.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon

 

by: reckonPosted on 2009-09-28 at 20:45:49ID: 25445853

Pankusareen, I tried explorer.exe in task manager, but nothing happened. I tried regedit and it wouldn't load. I started a book disk and edited the registry, changing the key from

explorer.exe rundll32.exe tapi nfo beforeglav

to

explorer.exe

Still nothing on the desktop

 

by: houssam_balloutPosted on 2009-09-28 at 23:22:55ID: 25446444

can you try sfc /scannow

 

by: orangutangPosted on 2009-09-29 at 00:24:56ID: 25446648

Have you tried scanning with Malwarebytes' Anti-Malware (http://www.malwarebytes.org/mbam.php)? Maybe send us your AutoRuns (http://technet.microsoft.com/en-us/sysinternals/bb963902.aspx) log.

 

by: nobusPosted on 2009-09-29 at 00:25:40ID: 25446654

can you post the minidump ?   rename it to **.txt
find it in c:\windows\minidumps
you can access it with a live cd, like knoppix or bartPe:
ftp://ftp.kernel.org/pub/dist/knoppix/KNOPPIX_V6.0.1CD-2009-02-08-EN.iso      Knoppix      
www.nu2.nu/pebuilder/                                     BartPe

 

by: reckonPosted on 2009-09-29 at 06:45:40ID: 25448911

Thanks for all your suggestions. I haven't had a chance to try them yet, but I wanted to add that a McAfee splash screen comes up before Windows loads to a blank desktop, and I apologize for not mentioning this earlier.

Is there a way to disable McAfee services from a boot disk?

Also, it came to me overnight, that the computer is behaving the way one did when a guy ran Combofix with his antivirus on, and ended up not being able to load his user profile--I remember the fix had something to do with the userinit file.

How do I do sfc scannow from task manager?

Orangutang: I pulled the drive and scanned it with Symantec Endpoint Protection, but I'm trying to create a boot disk that will let me run MBAM from it.

Nobus: I'll post the minidump.

 

by: reckonPosted on 2009-09-29 at 07:19:47ID: 25449304

Clarification: Nothing seems to run from task manager, so I'm not sure how to get sfc /scannow to work.

Here's the minidump, dated 9/10/09

 

by: nobusPosted on 2009-09-29 at 08:13:34ID: 25449953

impossiblke to open the dump; have you got others?

 

by: reckonPosted on 2009-09-29 at 11:17:08ID: 25451733

Orangutang: Seems like the computer needs to be able to boot to see the autoruns.

Here's another dump file.

 

by: orangutangPosted on 2009-09-29 at 12:06:17ID: 25452209

Yeah, I'm almost sure you have a virus. Maybe try http://www.freedrweb.com/livecd/

 

by: reckonPosted on 2009-09-29 at 12:20:23ID: 25452366

I got autoruns working through the Boot CD (copied it to the C drive from a USB drive). What an great tool!

Here's the file--and thanks to everyone who has responded.

 

by: orangutangPosted on 2009-09-29 at 12:28:02ID: 25452456

That's not going to work from your CD because it'll just give you the AutoRuns log for your CD, not the harddrive. Try http://www.freedrweb.com/livecd/

 

by: reckonPosted on 2009-09-29 at 12:50:39ID: 25452711

Orangutang: Yep, you're right. (Just tried autoruns on my own computer, though, and really like the jump feature.)

Have been trying, but can't burn today's Dr. Web to CD--yesterday's.iso works, though, so I'm trying it now.

 

by: reckonPosted on 2009-09-29 at 19:51:17ID: 25455359

One run with Dr. Web and it still won't load the desktop, but it does load McAfee, which seems to be finding malware.

Will try another Dr. Web scan.

 

by: nobusPosted on 2009-09-29 at 23:29:31ID: 25456051

PROCESS_NAME:  explorer.exe
ERROR_CODE: (NTSTATUS) 0xc0000005 - De instructie op 0x%08lx verwijst naar geheugen op 0x%08lx. Een lees- of schrijfbewerking op het geheugen is mislukt: %s.
READ_ADDRESS:  00000014
FAILED_INSTRUCTION_ADDRESS: +ffffffff82b336aa   82b336aa 8b4814          mov     ecx,dword ptr [eax+14h]
BUGCHECK_STR:  0x7E
DEFAULT_BUCKET_ID:  NULL_CLASS_PTR_DEREFERENCE
LAST_CONTROL_TRANSFER:  from 82b33cf9 to 82b336aa
STACK_TEXT:  WARNING: Frame IP not in any known module. Following frames may be wrong.
a9bcf95c 82b33cf9 82b391ec 00000000 000000b9 0x82b336aa
a9bcfdac 805cff70 ff6f0710 00000000 00000000 0x82b33cf9
a9bcfdac 805cff70 ff6f0710 00000000 00000000 nt!PspSystemThreadStartup+0x34
a9bcfddc 805460ee 82b33f20 ff6f0710 00000000 nt!PspSystemThreadStartup+0x34
00000000 00000000 00000000 00000000 00000000 nt!KiThreadStartup+0x16
STACK_COMMAND:  kb
SYMBOL_NAME:  ANALYSIS_INCONCLUSIVE
FOLLOWUP_NAME:  MachineOwner
MODULE_NAME: Unknown_Module
IMAGE_NAME:  Unknown_Image
DEBUG_FLR_IMAGE_TIMESTAMP:  0
BUCKET_ID:  BAD_STACK
Followup: MachineOwner

so it failed with explorer, but it is inconclusive for the cause
can you run a repair install ?   http://www.michaelstevenstech.com/XPrepairinstall.htm      

 

by: reckonPosted on 2009-09-30 at 10:03:07ID: 25460907

Nobus, I thought of that, but I don't have an XP media center disk, and the owner can find all of his Dell system disks EXCEPT the OS.

 

by: reckonPosted on 2009-09-30 at 11:29:23ID: 25461801

Scanned several times with Dr. Web, and no change--still can't get past wallpaper.

Okay, I'm really stuck. The restore partition (Control/F11) doesn't work either.

 

by: orangutangPosted on 2009-09-30 at 11:52:35ID: 25462050

I'm not sure what else to do. Maybe try:
http://devbuilds.kaspersky-labs.com/devbuilds/RescueDisk/

 

by: orangutangPosted on 2009-09-30 at 11:53:43ID: 25462067

 

by: reckonPosted on 2009-09-30 at 12:22:40ID: 25462344

Orangutang: Thanks, but I bugged the guy again, and he miraculously found his disk. I'm going to try a repair install.

 

by: nobusPosted on 2009-09-30 at 23:52:48ID: 25466438

let's see if that helps...

 

by: reckonPosted on 2009-10-01 at 05:49:07ID: 25468070

UPDATE: I did the repair install and can now boot to the desktop. A series of DOS windows opened up with desote, and a quick search says the computer is still infected. Since no programs would load, I used fixexe.exe, loaded MBAM, HJT, CCleaner, and used them.

Since I have no confidence that the drive is clean, should I run Combofix?

(Also, IE gives me an error, "rundll32.exe The parameter is incorrect," so I may need to reinstall IE7---IE8 would not install.)

Nobus, thanks again for looking at the dump files.

 

by: nobusPosted on 2009-10-01 at 07:57:46ID: 25469404

try spybot also :      http://www.download.com/3000-8022-10122137.html

and yes combofix is good too !

 

by: reckonPosted on 2009-10-02 at 05:59:23ID: 25477410

Combo fix seems to have worked. I'm going to let it run for a while and see if anything pops up.

Thanks for all your help.

 

by: reckonPosted on 2009-10-04 at 15:25:31ID: 31634606

The computer seems to be working fine now. Whew! Thanks again to everyone who helped.

20120131-EE-VQP-002

3 Ways to Join

30-Day Free Trial

The Experts

98% positive feedback on 31,087 answers since March 2000. angeliii is a Microsoft Most Valuable Professional for his work with MS SQL Server & Develoment.

He has also proven his knowledge of Visual Basic Programming, PHP Scripting and Oracle Databases.

The Experts

97% positive feedback on 10,752 answers since July 2000. lrmoore has more than 18 years experience in the networking industry.

The six-time Mircosoft MVPs specialties include firewalls, virtual private networking, and network management.

Testimonials

"...and excellent source for support... Kind of like having your very own IT dept." Electriciansnet

Testimonials

"I was apprehensive at signing up at first. However... it has already made my life as an IT administrator much easier." JaCrews

Testimonials

"WOW! You guys have great, active, and knowledgeable people on here." moore50

Business Clients

Business Clients

In the Press

"If you’ve got a question... Experts Exchange can supply an answer.”

In the Press

"...an invaluable aid for both IT professionals and those who require tech support."

In the Press

"where IT professionals provide quick answers on just about any topic"

Business Account Plans

Loading Advertisement...