BSOD caused by AMON.sys

Discussion in 'NOD32 version 2 Forum' started by fce, Jun 11, 2007.

Thread Status:
Not open for further replies.
  1. fce

    fce Registered Member

    Joined:
    May 20, 2007
    Posts:
    758
    I've just got a note from our developers:
    He left his onaccess scan activated. The BSOD occured within amon.sys which is the file system filter driver of NOD32. He should either contact ESET or deactivate NOD32 completely before scanning. - A-Squared


    this is email i received from A-Squared regarding BSOD i experience when i run A-Squared scan.

    any information regarding this?

    below my email to A-Squared re: my BSOD problem with A-Squared when running scan.

    > Hi!
    >
    > I received PAGE_FAULT_IN_NONPAGED_AREA blue screen of death when I run
    > a-squared free quick scan. Please help whats the cause of BSOD.
    >
    > I have vista business with NOD32 antivirus and comodo firewall, all is
    > working fine except when I run a-squared scan.
    >
    >
    >
    > Below is event viewer log, for your reference. Attached dump files
    > during BSOD.
    >
    >
    >
    > - <Event
    > xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
    >
    > - <System>
    >
    > <Provider Name="EventLog" />
    >
    > <EventID Qualifiers="32768">6008</EventID>
    >
    > <Level>2</Level>
    >
    > <Task>0</Task>
    >
    > <Keywords>0x80000000000000</Keywords>
    >
    > <TimeCreated SystemTime="2007-06-10T23:41:28.000Z" />
    >
    > <EventRecordID>5369</EventRecordID>
    >
    > <Channel>System</Channel>
    >
    > <Computer>Federic-PC</Computer>
    >
    > <Security />
    >
    > </System>
    >
    > - <EventData>
    >
    > <Data>7:39:31 PM</Data>
    >
    > <Data>6/10/2007</Data>
    >
    > <Data />
    >
    > <Data />
    >
    > <Data>915</Data>
    >
    > <Data />
    >
    > <Data />
    >
    >
    > <Binary>D707060000000A00130027001F007302D707060000000A00170027001F0073
    > 0
    > 2080700003C000000010000000807000000000000580200000100000000000000</Bin
    > a
    > ry>
    >
    > </EventData>
    >
    > </Event>
    >
    >
     
  2. fce

    fce Registered Member

    Joined:
    May 20, 2007
    Posts:
    758
    i run a-squared scan and it works fine when i turn-off nod32.
     
  3. ASpace

    ASpace Guest

    Well , ESET must inverstigate your computer with DMP file . However , no further developement is planned for NOD32 v. 2 . ESET Smart Security is available and coming more or less ~soon (soon does not mean tomorrow :D )

    So , what I recommend is not to use A-Squared at all because it gives no additional protection . It is just wasting time . NOD32 is much better . :thumb:
     
  4. fce

    fce Registered Member

    Joined:
    May 20, 2007
    Posts:
    758
    hehehe.

    i have NOD32 and Comodo firewall. I don't know if i still need anti malware and anti spyware program with only two security program installed in my computer. thats why i add A-squared.
     
  5. ASpace

    ASpace Guest

    :D :D :D

    No , actually , you need only firewall (in your case Comodo) and anti-threat protection (NOD32) .

    NOD32 successfully protect against all kind of :
    • Viruses
    • Worms
    • Trojans
    • Spyware
    • Adware
    • Dialers
    • Hijackers
    • Riskware
    • Rootkits
    • Other threats

    You are very well with NOD32 only . If you want a second opinion , you can once a month run an online scanner (but not use another software) , such as Ewido or Panda online scanners , but again , it is not really necessary
     
  6. fce

    fce Registered Member

    Joined:
    May 20, 2007
    Posts:
    758
    hmmm...

    thats why i used A-squared for second opinion for once a month scan....or incase NOD32 missed one malware or spyware ;)
     
  7. ASpace

    ASpace Guest

    Well , removing A-Squared and using online scan is a good way to start .

    Actually I do believe you need to put more trust for your primany security products => NOD32 . Years ago I used to doubt my AV and every time I doubt something was infected an online scan with other products confirmed NO infection . NOD32 is excellent and if you do some safe surfing , you will be fine . Remember also that Vista is much more secure than its older sister XP .It has two very useful feautures - Protected Mode in IE7 and User Account control (which I recommend both to be ON) ;)
     
  8. The Hammer

    The Hammer Registered Member

    Joined:
    May 12, 2005
    Posts:
    5,619
    Location:
    Toronto Canada
    For a second opinion you can do a lot better than A2. :rolleyes: And I see your duplicating your SAS posts here including the original post which you used to start the NOD thread. https://www.wilderssecurity.com/showthread.php?p=1023134#post1023134
     
  9. Andreas Haak

    Andreas Haak Software Specialist

    Joined:
    Feb 12, 2006
    Posts:
    86
    This won't help. Cause obviously in his case the amon driver of nod32 has a serious problem when an application either opens a specific file or when an application opens a lot of files in a short period of time. Both will be the case for online scanner as well. So he can uninstall whatever applications he wants. This won't solve his problem. Next day amon bluescreens when using the windows file search. Will you advice him to remove his explorer in that case?

    @fce
    Did you noticed some kind of similarities between the crashes? Did it crash always in the same directory or when scanning the same file for example? Both could be caused by a hardware fault or a file system error.
     
  10. fce

    fce Registered Member

    Joined:
    May 20, 2007
    Posts:
    758
    i used a-squared and SAS pro to scan my computer, both of them give me the same BSOD error message....and they crashes almost 90% of scanning. i think when its on program file folder but dont no exactly what exact file they both crashed during scanning.

    and only a-squared pinpointed what causing BSOD which is amon.sys
     
Thread Status:
Not open for further replies.