BSOD caused by AMON.sys

I've just got a note from our developers:
He left his onaccess scan activated. The BSOD occured within amon.sys which is the file system filter driver of NOD32. He should either contact ESET or deactivate NOD32 completely before scanning. - A-Squared


this is email i received from A-Squared regarding BSOD i experience when i run A-Squared scan.

any information regarding this?

below my email to A-Squared re: my BSOD problem with A-Squared when running scan.

> Hi!
>
> I received PAGE_FAULT_IN_NONPAGED_AREA blue screen of death when I run
> a-squared free quick scan. Please help whats the cause of BSOD.
>
> I have vista business with NOD32 antivirus and comodo firewall, all is
> working fine except when I run a-squared scan.
>
>
>
> Below is event viewer log, for your reference. Attached dump files
> during BSOD.
>
>
>
> - <Event
> xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
>
> - <System>
>
> <Provider Name="EventLog" />
>
> <EventID Qualifiers="32768">6008</EventID>
>
> <Level>2</Level>
>
> <Task>0</Task>
>
> <Keywords>0x80000000000000</Keywords>
>
> <TimeCreated SystemTime="2007-06-10T23:41:28.000Z" />
>
> <EventRecordID>5369</EventRecordID>
>
> <Channel>System</Channel>
>
> <Computer>Federic-PC</Computer>
>
> <Security />
>
> </System>
>
> - <EventData>
>
> <Data>7:39:31 PM</Data>
>
> <Data>6/10/2007</Data>
>
> <Data />
>
> <Data />
>
> <Data>915</Data>
>
> <Data />
>
> <Data />
>
>
> <Binary>D707060000000A00130027001F007302D707060000000A00170027001F0073
> 0
> 2080700003C000000010000000807000000000000580200000100000000000000</Bin
> a
> ry>
>
> </EventData>
>
> </Event>
>
>

 

i run a-squared scan and it works fine when i turn-off nod32.

 

Well , ESET must inverstigate your computer with DMP file . However , no further developement is planned for NOD32 v. 2 . ESET Smart Security is available and coming more or less ~soon (soon does not mean tomorrow )

So , what I recommend is not to use A-Squared at all because it gives no additional protection . It is just wasting time . NOD32 is much better .

 

hehehe.

i have NOD32 and Comodo firewall. I don't know if i still need anti malware and anti spyware program with only two security program installed in my computer. thats why i add A-squared.

 

No , actually , you need only firewall (in your case Comodo) and anti-threat protection (NOD32) .

NOD32 successfully protect against all kind of :

• Viruses
• Worms
• Trojans
• Spyware
• Adware
• Dialers
• Hijackers
• Riskware
• Rootkits
• Other threats

You are very well with NOD32 only . If you want a second opinion , you can once a month run an online scanner (but not use another software) , such as Ewido or Panda online scanners , but again , it is not really necessary

 

hmmm...

thats why i used A-squared for second opinion for once a month scan....or incase NOD32 missed one malware or spyware

 

Well , removing A-Squared and using online scan is a good way to start .

Actually I do believe you need to put more trust for your primany security products => NOD32 . Years ago I used to doubt my AV and every time I doubt something was infected an online scan with other products confirmed NO infection . NOD32 is excellent and if you do some safe surfing , you will be fine . Remember also that Vista is much more secure than its older sister XP .It has two very useful feautures - Protected Mode in IE7 and User Account control (which I recommend both to be ON)

 

For a second opinion you can do a lot better than A2. And I see your duplicating your SAS posts here including the original post which you used to start the NOD thread. https://www.wilderssecurity.com/showthread.php?p=1023134#post1023134

 

This won't help. Cause obviously in his case the amon driver of nod32 has a serious problem when an application either opens a specific file or when an application opens a lot of files in a short period of time. Both will be the case for online scanner as well. So he can uninstall whatever applications he wants. This won't solve his problem. Next day amon bluescreens when using the windows file search. Will you advice him to remove his explorer in that case?

@fce
Did you noticed some kind of similarities between the crashes? Did it crash always in the same directory or when scanning the same file for example? Both could be caused by a hardware fault or a file system error.

 

i used a-squared and SAS pro to scan my computer, both of them give me the same BSOD error message....and they crashes almost 90% of scanning. i think when its on program file folder but dont no exactly what exact file they both crashed during scanning.

and only a-squared pinpointed what causing BSOD which is amon.sys