EAMON.SYS BSOD after Vista SP2 (x64) installation

Discussion in 'ESET NOD32 Antivirus' started by Van_Houtte, May 26, 2009.

Thread Status:
Not open for further replies.
  1. Van_Houtte

    Van_Houtte Registered Member

    Joined:
    May 26, 2009
    Posts:
    4
    Code:
    1: kd> !analyze -v
    ERROR: FindPlugIns 8007007b
    *******************************************************************************
    *                                                                             *
    *                        Bugcheck Analysis                                    *
    *                                                                             *
    *******************************************************************************
    
    SYSTEM_SERVICE_EXCEPTION (3b)
    An exception happened while executing a system service routine.
    Arguments:
    Arg1: 00000000c0000005, Exception code that caused the bugcheck
    Arg2: fffffa6003cfca87, Address of the exception record for the exception that caused the bugcheck
    Arg3: fffffa6003f9ad20, Address of the context record for the exception that caused the bugcheck
    Arg4: 0000000000000000, zero.
    
    Debugging Details:
    ------------------
    
    Page 74faf not present in the dump file. Type ".hh dbgerr004" for details
    PEB is paged out (Peb.Ldr = 00000000`7efdf018).  Type ".hh dbgerr001" for details
    PEB is paged out (Peb.Ldr = 00000000`7efdf018).  Type ".hh dbgerr001" for details
    
    EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced memory at 0x%08lx. The memory could not be %s.
    
    FAULTING_IP: 
    eamon+5a87
    fffffa60`03cfca87 4c3923          cmp     qword ptr [rbx],r12
    
    CONTEXT:  fffffa6003f9ad20 -- (.cxr 0xfffffa6003f9ad20)
    rax=0000000000000000 rbx=9d15ff10c18348d9 rcx=fffffa6003db4088
    rdx=fffffa8007a21010 rsi=fffffa8007dbe190 rdi=0000000000000000
    rip=fffffa6003cfca87 rsp=fffffa6003f9b580 rbp=fffffa8007a21010
     r8=fffffa8007e01060  r9=0000000000000000 r10=fffffa60005ed2c0
    r11=fffffa6003f9b5e0 r12=000000000000070c r13=fffffa8007dbe040
    r14=0000000000000001 r15=fffffa8007dbe040
    iopl=0         nv up ei ng nz na pe nc
    cs=0010  ss=0018  ds=002b  es=002b  fs=0053  gs=002b             efl=00010282
    eamon+0x5a87:
    fffffa60`03cfca87 4c3923          cmp     qword ptr [rbx],r12 ds:002b:9d15ff10`c18348d9=????????????????
    Resetting default scope
    
    DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT
    
    BUGCHECK_STR:  0x3B
    
    PROCESS_NAME:  ekrn.exe
    
    CURRENT_IRQL:  2
    
    LAST_CONTROL_TRANSFER:  from fffff80001f295b9 to fffffa6003cfca87
    
    STACK_TEXT:  
    fffffa60`03f9b580 fffff800`01f295b9 : 00000000`00000045 00000000`00000045 00000000`00000040 fffffa80`07a21010 : eamon+0x5a87
    fffffa60`03f9b610 fffff800`01f21a92 : fffffa80`069146c0 00000000`00000000 fffffa80`07cca120 00000000`00000001 : nt!IopParseDevice+0x5f9
    fffffa60`03f9b7b0 fffff800`01f22622 : 00000000`00000000 fffffa80`07cca208 fffffa80`07a3ef00 00000000`00000000 : nt!ObpLookupObjectName+0x593
    fffffa60`03f9b8c0 fffff800`01ef9b05 : fffffa60`00000080 00000000`0007eba0 00000000`0007ea60 fffffa60`03f9bca0 : nt!ObOpenObjectByName+0x2f2
    fffffa60`03f9b990 fffff800`01cbbef3 : 00000000`00000008 fffffa60`03f9bca0 fffffa80`07a1d060 00000000`0007ef00 : nt!NtQueryAttributesFile+0x134
    fffffa60`03f9bc20 00000000`77c570ea : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSystemServiceCopyEnd+0x13
    00000000`0007e9c8 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x77c570ea
    
    
    FOLLOWUP_IP: 
    eamon+5a87
    fffffa60`03cfca87 4c3923          cmp     qword ptr [rbx],r12
    
    SYMBOL_STACK_INDEX:  0
    
    SYMBOL_NAME:  eamon+5a87
    
    FOLLOWUP_NAME:  MachineOwner
    
    MODULE_NAME: eamon
    
    IMAGE_NAME:  eamon.sys
    
    DEBUG_FLR_IMAGE_TIMESTAMP:  498c37b1
    
    STACK_COMMAND:  .cxr 0xfffffa6003f9ad20 ; kb
    
    FAILURE_BUCKET_ID:  X64_0x3B_eamon+5a87
    
    BUCKET_ID:  X64_0x3B_eamon+5a87
    
    Followup: MachineOwner
    ---------
    
    1: kd> .cxr 0xfffffa6003f9ad20
    rax=0000000000000000 rbx=9d15ff10c18348d9 rcx=fffffa6003db4088
    rdx=fffffa8007a21010 rsi=fffffa8007dbe190 rdi=0000000000000000
    rip=fffffa6003cfca87 rsp=fffffa6003f9b580 rbp=fffffa8007a21010
     r8=fffffa8007e01060  r9=0000000000000000 r10=fffffa60005ed2c0
    r11=fffffa6003f9b5e0 r12=000000000000070c r13=fffffa8007dbe040
    r14=0000000000000001 r15=fffffa8007dbe040
    iopl=0         nv up ei ng nz na pe nc
    cs=0010  ss=0018  ds=002b  es=002b  fs=0053  gs=002b             efl=00010282
    eamon+0x5a87:
    fffffa60`03cfca87 4c3923          cmp     qword ptr [rbx],r12 ds:002b:9d15ff10`c18348d9=????????????????
    
     
  2. psyko12

    psyko12 Registered Member

    Joined:
    Mar 21, 2009
    Posts:
    13
    Same problem here....
     
Thread Status:
Not open for further replies.
  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.