EAMON.SYS BSOD after Vista SP2 (x64) installation

Discussion in 'ESET NOD32 Antivirus' started by Van_Houtte, May 26, 2009.

Thread Status:
Not open for further replies.
  1. Van_Houtte

    Van_Houtte Registered Member

    Joined:
    May 26, 2009
    Posts:
    4
    Code:
    1: kd> !analyze -v
    ERROR: FindPlugIns 8007007b
    *******************************************************************************
    *                                                                             *
    *                        Bugcheck Analysis                                    *
    *                                                                             *
    *******************************************************************************
    
    SYSTEM_SERVICE_EXCEPTION (3b)
    An exception happened while executing a system service routine.
    Arguments:
    Arg1: 00000000c0000005, Exception code that caused the bugcheck
    Arg2: fffffa6003cfca87, Address of the exception record for the exception that caused the bugcheck
    Arg3: fffffa6003f9ad20, Address of the context record for the exception that caused the bugcheck
    Arg4: 0000000000000000, zero.
    
    Debugging Details:
    ------------------
    
    Page 74faf not present in the dump file. Type ".hh dbgerr004" for details
    PEB is paged out (Peb.Ldr = 00000000`7efdf018).  Type ".hh dbgerr001" for details
    PEB is paged out (Peb.Ldr = 00000000`7efdf018).  Type ".hh dbgerr001" for details
    
    EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced memory at 0x%08lx. The memory could not be %s.
    
    FAULTING_IP: 
    eamon+5a87
    fffffa60`03cfca87 4c3923          cmp     qword ptr [rbx],r12
    
    CONTEXT:  fffffa6003f9ad20 -- (.cxr 0xfffffa6003f9ad20)
    rax=0000000000000000 rbx=9d15ff10c18348d9 rcx=fffffa6003db4088
    rdx=fffffa8007a21010 rsi=fffffa8007dbe190 rdi=0000000000000000
    rip=fffffa6003cfca87 rsp=fffffa6003f9b580 rbp=fffffa8007a21010
     r8=fffffa8007e01060  r9=0000000000000000 r10=fffffa60005ed2c0
    r11=fffffa6003f9b5e0 r12=000000000000070c r13=fffffa8007dbe040
    r14=0000000000000001 r15=fffffa8007dbe040
    iopl=0         nv up ei ng nz na pe nc
    cs=0010  ss=0018  ds=002b  es=002b  fs=0053  gs=002b             efl=00010282
    eamon+0x5a87:
    fffffa60`03cfca87 4c3923          cmp     qword ptr [rbx],r12 ds:002b:9d15ff10`c18348d9=????????????????
    Resetting default scope
    
    DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT
    
    BUGCHECK_STR:  0x3B
    
    PROCESS_NAME:  ekrn.exe
    
    CURRENT_IRQL:  2
    
    LAST_CONTROL_TRANSFER:  from fffff80001f295b9 to fffffa6003cfca87
    
    STACK_TEXT:  
    fffffa60`03f9b580 fffff800`01f295b9 : 00000000`00000045 00000000`00000045 00000000`00000040 fffffa80`07a21010 : eamon+0x5a87
    fffffa60`03f9b610 fffff800`01f21a92 : fffffa80`069146c0 00000000`00000000 fffffa80`07cca120 00000000`00000001 : nt!IopParseDevice+0x5f9
    fffffa60`03f9b7b0 fffff800`01f22622 : 00000000`00000000 fffffa80`07cca208 fffffa80`07a3ef00 00000000`00000000 : nt!ObpLookupObjectName+0x593
    fffffa60`03f9b8c0 fffff800`01ef9b05 : fffffa60`00000080 00000000`0007eba0 00000000`0007ea60 fffffa60`03f9bca0 : nt!ObOpenObjectByName+0x2f2
    fffffa60`03f9b990 fffff800`01cbbef3 : 00000000`00000008 fffffa60`03f9bca0 fffffa80`07a1d060 00000000`0007ef00 : nt!NtQueryAttributesFile+0x134
    fffffa60`03f9bc20 00000000`77c570ea : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSystemServiceCopyEnd+0x13
    00000000`0007e9c8 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x77c570ea
    
    
    FOLLOWUP_IP: 
    eamon+5a87
    fffffa60`03cfca87 4c3923          cmp     qword ptr [rbx],r12
    
    SYMBOL_STACK_INDEX:  0
    
    SYMBOL_NAME:  eamon+5a87
    
    FOLLOWUP_NAME:  MachineOwner
    
    MODULE_NAME: eamon
    
    IMAGE_NAME:  eamon.sys
    
    DEBUG_FLR_IMAGE_TIMESTAMP:  498c37b1
    
    STACK_COMMAND:  .cxr 0xfffffa6003f9ad20 ; kb
    
    FAILURE_BUCKET_ID:  X64_0x3B_eamon+5a87
    
    BUCKET_ID:  X64_0x3B_eamon+5a87
    
    Followup: MachineOwner
    ---------
    
    1: kd> .cxr 0xfffffa6003f9ad20
    rax=0000000000000000 rbx=9d15ff10c18348d9 rcx=fffffa6003db4088
    rdx=fffffa8007a21010 rsi=fffffa8007dbe190 rdi=0000000000000000
    rip=fffffa6003cfca87 rsp=fffffa6003f9b580 rbp=fffffa8007a21010
     r8=fffffa8007e01060  r9=0000000000000000 r10=fffffa60005ed2c0
    r11=fffffa6003f9b5e0 r12=000000000000070c r13=fffffa8007dbe040
    r14=0000000000000001 r15=fffffa8007dbe040
    iopl=0         nv up ei ng nz na pe nc
    cs=0010  ss=0018  ds=002b  es=002b  fs=0053  gs=002b             efl=00010282
    eamon+0x5a87:
    fffffa60`03cfca87 4c3923          cmp     qword ptr [rbx],r12 ds:002b:9d15ff10`c18348d9=????????????????
    
     
  2. psyko12

    psyko12 Registered Member

    Joined:
    Mar 21, 2009
    Posts:
    13
    Same problem here....
     
Thread Status:
Not open for further replies.