Latest update causes BSOD whenever I try to go online.

Avast Free Antivirus / Premium Security
1

Hey everyone, I came home from work today and was prompted to update my Avast Free Antivirus to version 18.6.2349, which I did. I restarted my computer, logged in and went online (chrome). After less than 5 minutes on YouTube I got a BSOD, and this kept happening every time I tried to watch something or even open a new tab. I have tried to reinstall Avast but it didn’t help.

I currently have Avast set to deactivated, while Avast has been deactivated I have experienced zero BSOD.

The BSOD I’m constantly getting is Page Fault In Nonpaged Area.

2
  • OS…? (32/64 Bit…? - which SP/Build…?)
  • Other security related software installed…?
  • Which AV(s) did you use before Avast…?
3

Are you using Malwarebytes 3? If so, read this thread: https://forums.malwarebytes.com/topic/231366-netiosys-bsod/

4

Windows 10 Home
Version 1803
OS build 17134.228
64 Bit

I have no other security related software installed, I’ve never used any other AV on this computer. I bought my computer and installed Avast in november 2015.

5

Try the following:

Repair Avast:
Control Panel> Program and Features (Add/remove program)>Select Avast> Select Repair. Reboot when completed
https://www.avast.com/faq.php?article=AVKB204

If Repair doesn’t fix the problem, try the following:
Clean Install of Avast:
https://goo.gl/4Ptzkf
If you need additional help with the Clean Install, watch this:
https://youtu.be/p-h3myRD51A

6

Sadly, neither of these suggestions solved my problem.

7

Follow instructions: https://support.avast.com/article/33/ and post your File-ID here afterwards.

8

Hi luringh,
to resolve the issue we would need system dump file which is created after BSOD.

The default location of the dump file is %SystemRoot%memory.dmp or C:Windows\memory.dmp if C: is the system drive. Windows can also capture small memory dumps which occupy less space. These dumps are created at %SystemRoot%Minidump.dmp

Please locate the dump file, zip it as luringh_BSOD_8_2018.zip and upload it to avast ftp server ftp://ftp.avast.com/incoming

Thank you

9

File ID: GCEAT

I have uploaded the zip file.

10

Hi luringh,
your BSOD is caused by bcmwl63a.sys driver which is from 2015 ! Please try to update this driver !!

I found few urls with the same issue see :
https://www.sysnative.com/forums/bsod-crashes-kernel-debugging/20338-blue-screen-of-death-bsod-windows-10-a.html
https://answers.microsoft.com/en-us/windows/forum/windows_10-hardware/bsod-win-10/6f4f180c-ca07-4e3a-b0ce-8a8303c986df
https://www.tenforums.com/bsod-crashes-debugging/90640-bsod-page-fault-nonpaged-area-utorrent.html
https://answers.microsoft.com/en-us/windows/forum/windows_10-performance-winpc/bsod-shut-down-unexpectedly/ee3e2334-e3fc-450b-84a2-4020ca5b47b4

0: kd> lmvm bcmwl63a
Browse full module list
start end module name
fffff807836d0000 fffff8078418c000 bcmwl63a (no symbols)
Loaded symbol image file: bcmwl63a.sys
Image path: \SystemRoot\system32\DRIVERS\bcmwl63a.sys
Image name: bcmwl63a.sys
Browse all global symbols functions data
Timestamp: Mon Jul 6 18:14:09 2015 (559B27E1)
CheckSum: 00AB8FF3
ImageSize: 00ABC000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
Information from resource tables:
Company: Broadcom Corporation
Decription: Broadcom 802 11 Network Adapter wireless driver

PAGE_FAULT_IN_NONPAGED_AREA (50)
Invalid system memory was referenced. This cannot be protected by try-except.
Typically the address is just plain bad or it is pointing at freed memory.
Arguments:
Arg1: ffff8300006f56d8, memory referenced.
Arg2: 0000000000000000, value 0 = read operation, 1 = write operation.
Arg3: 0000000000000000, If non-zero, the instruction address which referenced the bad memory
address.
Arg4: 0000000000000006, (reserved)

Debugging Details:

KEY_VALUES_STRING: 1

TIMELINE_ANALYSIS: 1

DUMP_CLASS: 1

DUMP_QUALIFIER: 401

BUILD_VERSION_STRING: 17134.1.amd64fre.rs4_release.180410-1804

SYSTEM_MANUFACTURER: MSI

SYSTEM_PRODUCT_NAME: MS-7971

SYSTEM_SKU: Default string

SYSTEM_VERSION: 2.0

BIOS_VENDOR: American Megatrends Inc.

BIOS_VERSION: A.50

BIOS_DATE: 10/30/2015

BASEBOARD_MANUFACTURER: MSI

BASEBOARD_PRODUCT: Z170A PC MATE (MS-7971)

BASEBOARD_VERSION: 2.0

DUMP_TYPE: 1

BUGCHECK_P1: ffff8300006f56d8

BUGCHECK_P2: 0

BUGCHECK_P3: 0

BUGCHECK_P4: 6

READ_ADDRESS: ffff8300006f56d8

MM_INTERNAL_CODE: 6

CPU_COUNT: 4

CPU_MHZ: db0

CPU_VENDOR: GenuineIntel

CPU_FAMILY: 6

CPU_MODEL: 5e

CPU_STEPPING: 3

CPU_MICROCODE: 6,5e,3,0 (F,M,S,R) SIG: C2’00000000 (cache) C2’00000000 (init)

BLACKBOXBSD: 1 (!blackboxbsd)

BLACKBOXPNP: 1 (!blackboxpnp)

DEFAULT_BUCKET_ID: WIN8_DRIVER_FAULT

BUGCHECK_STR: AV

PROCESS_NAME: System

CURRENT_IRQL: 2

ANALYSIS_SESSION_HOST: BRQA-003561

ANALYSIS_SESSION_TIME: 08-28-2018 09:35:06.0365

ANALYSIS_VERSION: 10.0.17134.12 amd64fre

TRAP_FRAME: ffff8688c32af490 – (.trap 0xffff8688c32af490)
NOTE: The trap frame does not contain all registers.
Some register values may be zeroed or incorrect.
rax=0000000000000000 rbx=0000000000000000 rcx=00000000deadb000
rdx=ffff9f8999cd3440 rsi=0000000000000000 rdi=0000000000000000
rip=fffff800fb98564c rsp=ffff8688c32af620 rbp=ffff8341800037a8
r8=ffff8341a0c00018 r9=0000000000000002 r10=0000000000000002
r11=ffff9f89a6a00000 r12=0000000000000000 r13=0000000000000000
r14=0000000000000000 r15=0000000000000000
iopl=0 nv up ei ng nz ac pe cy
nt!MmBuildMdlForNonPagedPool+0x10c:
fffff800fb98564c 488b17 mov rdx,qword ptr [rdi] ds:0000000000000000=???
Resetting default scope

LAST_CONTROL_TRANSFER: from fffff800fb922d66 to fffff800fba51ca0

STACK_TEXT:
ffff8688c32af0c8 fffff800fb922d66 : 0000000000000050 ffff8300006f56d8 0000000000000000 ffff8341a0c00018 : nt!KeBugCheckEx
ffff8688c32af0d0 fffff800fb9135fe : 0000000000000000 ffff8341a7e269c0 0000000000000604 00000000deadb000 : nt!MiInPagePageTable+0x576
ffff8688c32af1f0 fffff800fb912caf : ffff8688c32af350 0000000000000000 0000000000000000 0000000000000001 : nt!MiUserFault+0x51e
ffff8688c32af320 fffff800fba5f3da : 0000000000604000 ffff9f89a6a00030 ffff830000cf8a70 ffff8341a0d06000 : nt!MmAccessFault+0x11f
ffff8688c32af490 fffff800fb98564c : ffff9f899e4a0010 00000000c0671891 00000000deadbeef 00000000deadbeef : nt!KiPageFault+0x31a
ffff8688c32af620 fffff8077c88f921 : 0000000000000000 ffff9f899e45f970 ffff830000cf8a70 ffff9f89a6a00000 : nt!MmBuildMdlForNonPagedPool+0x10c
ffff8688c32af6c0 fffff8078375ea6f : ffff9f8900000000 ffff9f899e1651b0 ffff9f89a3126040 fffff800fba58ff4 : ndis!NdisAllocateMdl+0x31
ffff8688c32af700 fffff80783740e8c : ffff9f89a32fbb40 ffff9f899f14d780 00000000000000cb ffff9f89a32fbb40 : bcmwl63a+0x8ea6f
ffff8688c32af730 fffff8078373dcdd : 0000000000000000 0000000000000000 ffff9f89a32fbb40 0000000000000000 : bcmwl63a+0x70e8c
ffff8688c32af7f0 fffff807837ee599 : 0000000000000000 0000000000000000 ffff9f8999d41d40 0000000000000000 : bcmwl63a+0x6dcdd
ffff8688c32af8a0 fffff8078382dd41 : fffff80700000020 ffff9f89a3303000 ffff0d3200000000 ffff8688c32af9b0 : bcmwl63a+0x11e599
ffff8688c32af910 fffff807836e93ac : 0000000000000000 ffff9f89a3303000 ffff9f89a3303000 ffff9f899e166050 : bcmwl63a+0x15dd41
ffff8688c32af980 fffff807836fb180 : ffff9f8900000000 fffff8077c93ba20 ffff9f89a3303000 0000000000000000 : bcmwl63a+0x193ac
ffff8688c32af9b0 fffff8077c93ba32 : ffff9f899f6a31a0 ffff9f899a8d8040 fffff8077c93ba20 ffff9f8999cdb0a0 : bcmwl63a+0x2b180
ffff8688c32af9e0 fffff800fb9c5a9c : 0000000000000080 ffff9f899f6a31a0 ffff9f899e166050 000000000000000d : ndis!ndisDispatchIoWorkItem+0x12
ffff8688c32afa10 fffff800fb91f285 : 0000000000000200 ffff9f89a3126040 fffff800fb9c5970 000000000000000d : nt!IopProcessWorkItem+0x12c
ffff8688c32afa80 fffff800fb9a2e37 : ffff9f89a3126040 0000000000000080 ffff9f8999cd3440 ffff9f89a3126040 : nt!ExpWorkerThread+0xf5
ffff8688c32afb10 fffff800fba59116 : ffffd380ae820180 ffff9f89a3126040 fffff800fb9a2df0 0000000000000246 : nt!PspSystemThreadStartup+0x47
ffff8688c32afb60 0000000000000000 : ffff8688c32b0000 ffff8688c32a9000 0000000000000000 0000000000000000 : nt!KiStartSystemThread+0x16

11

Hey, I tried updating the driver automatically, but I just got the message “The best driver software for your device is already installed”. I also tried Windows update but got nothing.

I have searched on both MSI’s (my computer’s manufacturer) and Broadcom’s websites, but I couldn’t find any updates for that particular driver.

The current version I’m using is 7.35.290.0.

If anyone can point me to where I can download an updated driver version, it would be greatly appreciated. I’m a rookie at these things.

12

Good news, I managed to roll back the driver to version 6.34.223.5, and that has solved my problem.

13

Thanks for the feedback.

14

Sometimes roll back is better than update :).

15

If you could tell me how you did this that would be amazing! If you just rolled it back from device manager though then I’m screwed because mine is greyed out.